last executing test programs:

8m39.350070159s ago: executing program 2 (id=84):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000640)={0x84, &(0x7f0000000700)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, &(0x7f0000000740)=ANY=[])
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

8m35.230648715s ago: executing program 2 (id=96):
r0 = socket(0xa, 0x3, 0x3a)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
sendmsg$nl_route(r0, 0x0, 0x4020)
msgsnd(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000fe95a9b943b4f06cf017b824573d000000000000006c6d1d020b4d1f5a3196a6911f4d00"/50], 0x32, 0x800)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x28, 0x1, 0x4, 0x401, 0x0, 0x0, {0x2}, [@NFULA_CFG_MODE={0xa, 0x2, {0x0, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x28}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc)
statx(0xffffffffffffffff, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0)
recvmsg$unix(r1, &(0x7f0000000d40)={&(0x7f0000000100), 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000440)=""/30, 0x1e}, {&(0x7f0000000980)=""/223, 0xdf}, {&(0x7f0000000a80)=""/104, 0x68}, {0x0}, {&(0x7f0000000bc0)=""/63, 0x3f}, {&(0x7f0000000c00)=""/200, 0xc8}], 0x6}, 0x12003)
recvfrom(r0, &(0x7f0000000580)=""/211, 0xd3, 0x10000, &(0x7f0000000680)=@sco, 0x80)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4)
mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x81)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', <r6=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@gettclass={0x24, 0x2a, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xffff}, {0x7}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x300, 0x0)
ioctl$DRM_IOCTL_PANTHOR_GROUP_DESTROY(r1, 0xc0086448, &(0x7f0000000e00))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x2, 0x0, &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x5c, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000200)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x4, 0x1, 0x2}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000003c0)=[r1, r1, r1], &(0x7f0000000400)=[{0x4, 0x2, 0xd}, {0x1, 0x2, 0xe, 0x1}], 0x10, 0x7848}, 0x94)
r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r5, r6, 0x25, 0x4, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0}}, 0x30)
sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x74, r6, {0xffff, 0x7}, {0xb, 0xfff2}, {0x0, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x4048888)
close(r7)

8m33.824712981s ago: executing program 1 (id=98):
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c00000002060104000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c00078008000640"], 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x40c0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)

8m33.207256175s ago: executing program 2 (id=100):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000f00), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl(r2, 0x4048aecb, &(0x7f0000000f80)="01")
ioctl$KVM_RUN(r2, 0xae80, 0x0)

8m32.932580814s ago: executing program 2 (id=102):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYBLOB="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"/344], 0x6, 0x550f, &(0x7f00000089c0)="$eJzs3EtvG9UXAPA7SdP3v/8IsWDXkSqkBNVWnEcFuwCteIhUUYEFK3DsieXW9kSx44SsWLBELPgmCCRWLPkMLFizQyxA7JBAnjuGhocEihOT5veTxmfu9fWZc62q0pmJHIBzaz796Yck3AhXQgizIYTrIRTnSXkU1mN4pjxmHjuScu63iYshhKshhBuj5DFnUr71ye3hrbXvX//xy68vXbj26RffTG/XwLQ9G0Lo7sTz/W6MeSvGh+V8fdguYnd1WMb4RvdROc5j3M+2igz79fG6ehFXWnF9vrPXH8XtTr0xiq32djG/04sX7A9b4zzFBx7Wd4txM9sqYrufF7F1GOs6OIz/tx32BzFPs8z3fpE+DAbjGOezgyzuZ+dRERu9QTkf8+bN7GAUh2UsLxcaeadZ1LF1nG/6v+2Ndm/vIB1mu/123kvXqrXnq7U7ldpu3swG2Wql3m3eWU0XWp3Rssogq3fXW3ne6mTVRt5dTBdajUalVksX7mZb7XovrdWqK9WlytpieXY7feX+22mnmS6M4kvt3t6g3emn2/luGj+xmC5XV15YTG/V0jc3NtPNB/fubWy+9e7dd+6/uPHay+WiP5X1XFheWl6u1JYqy7XFc7T/D8ui04WJ7R+OJZl2AQBnz7/t/2/q/4EJOLn+f/dBCCff/wf9/0Scqf53XNYE+9/zvn84Fv0/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMC59e3cZ68WJ/NxfK2c/1859VQ5TkIIMyGEX/7CbLh4JOdsmWfub9bP/aGGr5JQZBhd41J5XA0hrJfHz/8/6W8BAAAAnlyff3Dz49itx5f5aRfEaYo3bWauvzehfEkIYW7+uwllmxm9PD2hZMW/7wvhYELZihtYlyeULN5yuzCpbP/I7JFw+bGQxDBzquUAAACn4mgncLpdCAAAAKfpo2kXwHQkYfwoc/wsuPjL+98fCF45MgIAAADOoGTaBQAAAAAnruj//f4fAAAAPNni7/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAv7JzP7eJA1EcgJ8NXth/WrTa+7ayNyhjS9jjHiMKSBMUkANpIQ1QA7mlhAgiPA6BiEMkj20l+j7JmYxlfrxBcJgZaQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoEv31Xpxe/X7um3Obt9OntEAAAAAl2yr9aL+Z5b6X5v735tbP5t+ERFlRFyau4/i01nmqMmpXp6/OX2+elXDXUSdcHiPSXN9iYg/zfX4o+tPAQAAAD6uzXI1T7P19Gc2dEH0KS3alN/+ZsorIqKaPWRKKw95vzKF1d/vcfzPlFYvYE0zhaUlt3GutDepf+7HVbvpSVOkprz4smOR2cYOAAD0aHTW9DsLAQAAoE//hi6AYRTxvJV53AqcpKbZ3vt81gMAAADeoWLoAgAAAIDO1fP/ns7/2zv/DwAAAIaRzv8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgS9tqvdgsV/O2Obt9O3lGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyxP+8oEAJhEAZ713cmc//DSoOmpiZVIHz8jcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDmd3/5PzE1ziRzr42l55Fk7dTYOjX2zo2jP4yvXwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMX+vKRACARBFMwZ/zvp+x9WEvQMIkRAw6OKWjQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfNHvfvk/MTXOJHOnjaXjkWTtqrF11dh70Dh6MN7+DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMXO/bzGUcUBAH+zs7OxVXGNsoeIKHjQi91ua2tv4kEJHvwThJBua+zWH20OthQxF2+Scy+iRxFBibf+Dz0nkEu85bCHCJ4jMzuzO/kBrj86s0k+H3jzvjsM875vFkK+814CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQGL47ieP00B7Fjfzc5t6D5bTfOtSnHq1vL6QtjaMqkz4ZXi5/iDrjcK+OZAAAADgb4qK+DyHsJBuLad9oZ/V/UlyT1vzfPzuKi3r+cN1f9EXtn7bfft19cTxQezROetMbK4P+xaOpNJ/cLGfbc397RTN78tm7lzj7QhofrL0wTLLnGX37+PF7rSycqyJbAODfuFD0eVD8PpT2vToTA+DMaJYK76L+j9v15gQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQheFaeLqIoxDCQnMSp7b2Hiwf1z9a314o2tWHD9fD15N7prdIQgg3Vgb9i5XOZrbdvXf/1tJg0L9TffBKCKGu0d/Jp3/roykuDqGW5yP4f4L9ufzLnpF8TkhQ4w8lAABOpSRvaV2/k2wspuei+RD2fzhY/79eisOU9f/ux1c3y2OV6/9eZTOcfd3V25937967/+bK7aWb/Zv9T9+61Hu7d/nalSvXutm7kq43JgAAAPw3rbyV6//G/NH1//OlOExZ/3/xXe+r8lix+v9Yk0W/ujMBAAA4255/9c8/omPOR61W+HJpdfVOb3Qcf740OtaQ6j82l7dy/R/P150VAAAAUIXhWnRg/f96KQ5Trv8/8+NLP5fvGYcQzuXr/xeWPxtcr246M62KPyeue44AAADU61zeyuv/Sbb/vzHe8tAIIbzx2ijO/w3gVPV//P43P5XHKu//v1zdFGdSozN6HlnfCaHZqTsjAAAATrOn8pYW+78nG4uf/HL+w5b9/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABV+ysAAP//+Cw/6Q==")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x201861, 0x0, 0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

8m31.643417937s ago: executing program 2 (id=106):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
setuid(0xee01)
r0 = syz_clone(0x2080, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/156, 0x9c}], 0x1, &(0x7f0000000100)=[{&(0x7f0000000140)=""/116, 0x20001c34}], 0x1, 0x0)

8m31.33109803s ago: executing program 1 (id=109):
r0 = socket(0xa, 0x3, 0x3a)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
sendmsg$nl_route(r0, 0x0, 0x4020)
msgsnd(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000fe95a9b943b4f06cf017b824573d000000000000006c6d1d020b4d1f5a3196a6911f4d00"/50], 0x32, 0x800)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x28, 0x1, 0x4, 0x401, 0x0, 0x0, {0x2}, [@NFULA_CFG_MODE={0xa, 0x2, {0x0, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x28}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc)
statx(0xffffffffffffffff, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0)
recvmsg$unix(r1, &(0x7f0000000d40)={&(0x7f0000000100), 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000440)=""/30, 0x1e}, {&(0x7f0000000980)=""/223, 0xdf}, {&(0x7f0000000a80)=""/104, 0x68}, {0x0}, {&(0x7f0000000bc0)=""/63, 0x3f}, {&(0x7f0000000c00)=""/200, 0xc8}], 0x6}, 0x12003)
recvfrom(r0, &(0x7f0000000580)=""/211, 0xd3, 0x10000, &(0x7f0000000680)=@sco, 0x80)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4)
mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x81)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', <r6=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@gettclass={0x24, 0x2a, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xffff}, {0x7}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x300, 0x0)
ioctl$DRM_IOCTL_PANTHOR_GROUP_DESTROY(r1, 0xc0086448, &(0x7f0000000e00))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x2, 0x0, &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x5c, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000200)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x4, 0x1, 0x2}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000003c0)=[r1, r1, r1], &(0x7f0000000400)=[{0x4, 0x2, 0xd}, {0x1, 0x2, 0xe, 0x1}], 0x10, 0x7848}, 0x94)
r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r5, r6, 0x25, 0x4, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0}}, 0x30)
sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x74, r6, {0xffff, 0x7}, {0xb, 0xfff2}, {0x0, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x4048888)
close(r7)

8m29.116001439s ago: executing program 2 (id=113):
syz_mount_image$hfsplus(&(0x7f0000002140), &(0x7f0000002180)='./file0\x00', 0x1008000, &(0x7f00000021c0)=ANY=[], 0x4, 0x5f2, &(0x7f0000002200)="$eJzs3c9rHOcZB/DvrCV55YIjO3bilkBNCqFU1F5JUDu9tE3TIkoogR56FrVsC6+dIG2KkkOrlh5CT/kTUor+gdJLIQUfmhx6aE85C3Is9K7bhpmdXa3tjWz9iHaVfD4w+z4z78y7zzwzO57RYjbA19byfKYepsjy/Bub5fzO9lJ7Z3vpfj9OcjZJI2kmKcrFf0/yWbKV3pRv9juG2id8+lHzzicffPx+b64cq1lM9dYv9tvu2QxymevlWrXHNd7i0ccb3sOpIw8Fx6Xb1xjZfcTPJQAwyYrkzKjlc8m5+oa9fA7o3RX37rFPta1xJwAAAAAn4Lnd7GYz58edBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJwm9e//F/XU6MdXU/R//3+mXpY6PtUejjsBAAAAAAAAADgG397NbjZzvj/fLarv/F+uZi5Vr9/IO9nIatZzLZtZSSedrGchydzQQDObK53O+sIzbLk42HJraMvFk9tnAAAAAAAAAPgK+mOW977/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACASVAkZ3pNNV3qx3NpTCVpJpkp19tK/tuPT7OH404AAAAATsBzu9nNZs7357tF9cz/QvXc38w7eZBO1tJJO6u5leIfM/VTf2Nne6m9s710v5yeHPcn/z9QGtWI6f3tYfQ7X6nWmM3trFVLruU3eSvt3Eqj2rJ0pZ/P6Lz+UOZU/Kj2jJndqtsiyS/qdjLMVRWZHlSkVedWVuPC/pU44NF5/J0W0hj85efSl1Dzc3Vb7s/rE13zxaGz74X9K5Fc/PWfb9xtP7h39/bG/OTs0iE9XomloUq8+LWqRKuqxOXB/HJ+nl9lPlfzZtazlt9mJZ2s5mper6KV+nwuX+f2r9SPH5l782mZzNTHpXcVPVhOL1fbns9afpm3cqs6oq3cyI0s5gd5Na1HjvDlkXn/vlt373a73TQO9qn/znfrYDrJz+p2MpR1vTBU1+Fr7lzVN7xkr0oXn3JtPFsHB6jS1LfqoDx7Xpu4a+OFx/6V6Ffi+f0r8ZfqxNloP7i3fnfl7Wd8v1fqtqzATweVmKqXds8cy04dSnm+XBzk8ujZUfY9P7Jvoeq7NOhrPNF3edD3tE/qTH0P9+RIi1XfiyP7ettdGeobdb8FwMQ7971zM7P/m/3P7Iezf5q9O/tG87WzN8++NJPpf03/cKp15pXGS8Xf8mF+t/f8DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHN7Gu+/dW2m3V9cPHfR/ieio4wgEgpMJpvP0dcZ9ZQK+bNc799++vvHue99fu79yZ/XO6oNXWzdvLiws3Ghdv73WXq1fx50lAHCc9m76x50JAAAAAAAAAAAAAADwRU7ivxyPex8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICvtuX5TD1MkYXWtVY5v7O91C6nfry3ZjNJUQb/TPJZspXelLmh4Yovep9PP2re+eSDj9/fG6tZrf/vxePYi0dyaTyW01HHWxwa76+HGq4YVOZqkot1C2P3eQAAAP//qSkEgg==")
fchmod(0xffffffffffffffff, 0x6)
lsetxattr$trusted_overlay_opaque(&(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x0, 0x0, 0x0)
lsetxattr$trusted_overlay_opaque(&(0x7f00000028c0)='./file0\x00', &(0x7f0000002900), 0x0, 0x0, 0x0)

8m29.114960689s ago: executing program 1 (id=121):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x1c, 0xf5}, @val, @mpls={[{0x300}], @ipv6=@icmpv6={0x0, 0x6, '\x00', 0x39, 0x3a, 0x0, @mcast2, @private1, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, [{0x0, 0x2, "b0dcc4a3616748a199e53d96e28516"}]}}}}}, 0x73)

8m28.553638187s ago: executing program 32 (id=113):
syz_mount_image$hfsplus(&(0x7f0000002140), &(0x7f0000002180)='./file0\x00', 0x1008000, &(0x7f00000021c0)=ANY=[], 0x4, 0x5f2, &(0x7f0000002200)="$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")
fchmod(0xffffffffffffffff, 0x6)
lsetxattr$trusted_overlay_opaque(&(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x0, 0x0, 0x0)
lsetxattr$trusted_overlay_opaque(&(0x7f00000028c0)='./file0\x00', &(0x7f0000002900), 0x0, 0x0, 0x0)

8m28.540945398s ago: executing program 1 (id=115):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYBLOB="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"/344], 0x6, 0x550f, &(0x7f00000089c0)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x201861, 0x0, 0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

8m26.482649621s ago: executing program 1 (id=126):
r0 = openat$kvm(0x0, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000004c0)={0x0, &(0x7f0000000000)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6818, 0x2000000001, 0x997}}], 0x68})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

8m24.804238386s ago: executing program 1 (id=132):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f00000011c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x3}}, @NFT_MSG_DELSETELEM={0x22c, 0xe, 0xa, 0xc03, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x218, 0x3, 0x0, 0x1, [{0x210, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x200, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x89, 0x1, "1344af799483df4a3447f1db8f7eef7c461deba3c531b0eabc794e6a874b4b6328f56c7081b90f385a897fb9bccb20004467abd17704c7fa48b4d60b47f688f1968a05e48a9e8cd26098eef08a0bb73f40b235b3317bebf5bd707773157c35a249191e0924f4654761a8e34b4f5c054602cf6afc8c87d95f8b44cc63f1e79eb51663ada050"}, @NFTA_DATA_VALUE={0x91, 0x1, "fcffafda9b8ecdcfb273f0ff9d9ecc66937fb2d64747fedda0cc592b5d18954412328c127c5003a524bce6c8213001241294275410b925997ec331c360b91fcd3ec4b212c6e880b4a3740c84d2e6caf282b07bdae0d3ff4ad97d3f9f853e924c3c4c7724084960337267d4263ba2639e96da1a1eed4964f60db07e0d7b8123b886308714812e379d7c76bc164d"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x7d, 0x1, "3467a4842fe983413c4c09b2164686db3f0971db28c791fc61b107742be723a45765cf5aac6e197623b3702da12f042d1c4dabc4c1155f41441eec2e151bc79a0a35eec4017a8a1b30933b05a5c2e79416d6e8ca607612c4a1dc5edd6d8d3835b014f40f68181f298e692981d974ecf275803a9acd6dd1b9bb"}, @NFTA_DATA_VALUE={0x55, 0x1, "df39a6416f5a1f3cd6bb1363f845930b8ea45306ea40971277c9c9026006dff024ac88d64c0143f217e5e8b5a4aeb4d629b9608c8f6f5454bdbd06aaa8824c4b947e252410667a8dec09d86e8544cf5c93"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_USERDATA={0x4}]}, {0x4}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}}, 0x268}, 0x1, 0x0, 0x0, 0x44001}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001080), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000010c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001100)={0x0, 0x3c, &(0x7f0000001140)={&(0x7f0000001180)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4000054}, 0x0)

8m24.47204368s ago: executing program 33 (id=132):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f00000011c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x3}}, @NFT_MSG_DELSETELEM={0x22c, 0xe, 0xa, 0xc03, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x218, 0x3, 0x0, 0x1, [{0x210, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x200, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x89, 0x1, "1344af799483df4a3447f1db8f7eef7c461deba3c531b0eabc794e6a874b4b6328f56c7081b90f385a897fb9bccb20004467abd17704c7fa48b4d60b47f688f1968a05e48a9e8cd26098eef08a0bb73f40b235b3317bebf5bd707773157c35a249191e0924f4654761a8e34b4f5c054602cf6afc8c87d95f8b44cc63f1e79eb51663ada050"}, @NFTA_DATA_VALUE={0x91, 0x1, "fcffafda9b8ecdcfb273f0ff9d9ecc66937fb2d64747fedda0cc592b5d18954412328c127c5003a524bce6c8213001241294275410b925997ec331c360b91fcd3ec4b212c6e880b4a3740c84d2e6caf282b07bdae0d3ff4ad97d3f9f853e924c3c4c7724084960337267d4263ba2639e96da1a1eed4964f60db07e0d7b8123b886308714812e379d7c76bc164d"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x7d, 0x1, "3467a4842fe983413c4c09b2164686db3f0971db28c791fc61b107742be723a45765cf5aac6e197623b3702da12f042d1c4dabc4c1155f41441eec2e151bc79a0a35eec4017a8a1b30933b05a5c2e79416d6e8ca607612c4a1dc5edd6d8d3835b014f40f68181f298e692981d974ecf275803a9acd6dd1b9bb"}, @NFTA_DATA_VALUE={0x55, 0x1, "df39a6416f5a1f3cd6bb1363f845930b8ea45306ea40971277c9c9026006dff024ac88d64c0143f217e5e8b5a4aeb4d629b9608c8f6f5454bdbd06aaa8824c4b947e252410667a8dec09d86e8544cf5c93"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_USERDATA={0x4}]}, {0x4}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}}, 0x268}, 0x1, 0x0, 0x0, 0x44001}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001080), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000010c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001100)={0x0, 0x3c, &(0x7f0000001140)={&(0x7f0000001180)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4000054}, 0x0)

5m10.604137069s ago: executing program 3 (id=781):
r0 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0)
wait4(r0, 0x0, 0x80000000, 0x0)
ptrace(0x10, r0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, 0x0, 0x408d0)
r2 = syz_pidfd_open(r0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r3=>0x0)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r3, 0x1, &(0x7f0000000040), 0x0)
waitid$P_PIDFD(0x3, r2, 0x0, 0x8, 0x0)

5m9.329146569s ago: executing program 3 (id=785):
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000044c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
write$usbip_server(0xffffffffffffffff, &(0x7f0000000140)=@ret_submit={{0x3, 0x2c3, 0x0, 0x0, 0x7a6}, 0x0, 0x0, 0xfffffffa, 0x0, 0x2}, 0x30)
getrandom(&(0x7f00000060c0)=""/286, 0xffffff9a, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x16)

5m8.006233395s ago: executing program 3 (id=791):
r0 = socket(0xa, 0x3, 0x3a)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
sendmsg$nl_route(r0, 0x0, 0x4020)
msgsnd(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000fe95a9b943b4f06cf017b824573d000000000000006c6d1d020b4d1f5a3196a6911f4d00"/50], 0x32, 0x800)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc)
statx(0xffffffffffffffff, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0)
recvmsg$unix(r1, &(0x7f0000000d40)={&(0x7f0000000100), 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000440)=""/30, 0x1e}, {&(0x7f0000000980)=""/223, 0xdf}, {&(0x7f0000000a80)=""/104, 0x68}, {0x0}, {&(0x7f0000000bc0)=""/63, 0x3f}, {&(0x7f0000000c00)=""/200, 0xc8}], 0x6}, 0x12003)
recvfrom(r0, &(0x7f0000000580)=""/211, 0xd3, 0x10000, &(0x7f0000000680)=@sco, 0x80)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4)
mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x81)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', <r5=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@gettclass={0x24, 0x2a, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xffff}, {0x7}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x300, 0x0)
ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(r1, 0xc0386447, &(0x7f0000000dc0)={{0x8, 0x2, &(0x7f0000000d80)=[{0x1, 0x0, 0xc0000}, {0x74, 0x0, 0x6e35}]}, 0x1, 0x81, 0x2, 0x2, 0x0, 0x1, 0x2, 0x232c, 0x0, <r6=>0x0})
ioctl$DRM_IOCTL_PANTHOR_GROUP_DESTROY(r1, 0xc0086448, &(0x7f0000000e00)={r6})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x2, 0x0, &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x5c, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000200)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x4, 0x1, 0x2}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000003c0)=[r1, r1, r1], &(0x7f0000000400)=[{0x4, 0x2, 0xd}, {0x1, 0x2, 0xe, 0x1}], 0x10, 0x7848}, 0x94)
r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r4, r5, 0x25, 0x4, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0}}, 0x30)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x74, r5, {0xffff, 0x7}, {0xb, 0xfff2}, {0x0, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x4048888)
close(r7)

5m4.275334088s ago: executing program 3 (id=795):
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_kvm_add_vcpu$x86(0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x40080, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141102)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0)
writev(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_mount_image$erofs(&(0x7f0000000640), &(0x7f0000000680)='./file0\x00', 0x200800c, &(0x7f00000006c0)=ANY=[], 0x0, 0x24d, &(0x7f0000000700)="$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")
mount$overlay(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0), 0x0, &(0x7f0000000a00)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mount$overlay(0x0, &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80), 0x0, &(0x7f0000000ac0)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x4, 0x80)
getdents64(r1, &(0x7f0000000b40)=""/4096, 0xc00)

5m3.07214528s ago: executing program 3 (id=797):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0)
read$msr(r4, &(0x7f0000000580)=""/102392, 0x18ff8)
ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000200))

5m0.232595642s ago: executing program 3 (id=800):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000940)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000009c0))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000a00)={'syzkaller0\x00', @multicast})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000a80)={'syzkaller0\x00', 0x7101})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x1, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000005000000850000002e00000095"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000c00)=r3)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000c40), 0x1c1c41, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000c80)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(r4, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd)

4m44.590962675s ago: executing program 34 (id=800):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000940)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000009c0))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000a00)={'syzkaller0\x00', @multicast})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000a80)={'syzkaller0\x00', 0x7101})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x1, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000005000000850000002e00000095"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000c00)=r3)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000c40), 0x1c1c41, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000c80)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(r4, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd)

21.550121571s ago: executing program 6 (id=1165):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/partitions\x00', 0x0, 0x0)
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0)
sendfile(r1, r0, &(0x7f00000001c0)=0x264, 0x23b)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$IOMMU_IOAS_COPY(0xffffffffffffffff, 0x3b83, 0x0)
bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'lo\x00'})
setsockopt$inet_buf(r2, 0x0, 0x23, &(0x7f00000007c0)="2df8423cdd4e85a8c9f6657764d9278a483125136df213f8d4eb2bf09b83b7f74b424251ac3c7f57c6e0fee87bd34672578064cd4c845b4f026874d67d053d9b2ad78bc2928afd1aaee655470e3f9e341d9f57e942fea4b30911e0b63eaee5950e3e16cc5e090a088740845e1ec3e12ad404fb4e0c3b5b793102d221fe45b73fc189f91a315cb7e48e41002d2e667e23a43136e255d67bcf3cb80f4d8a30dcffaf0b308fdb27ad1f887c1c38904d351f7fb1b1be9c899ab39e4a004371ec03a18f83c0266daa29befb9c8a8eac5943e14e048f4a7c8054a0a4112372bb38e1d4ef5c210f2766c40958a6287b7065735270c5d2cb08f0e5c57bddac40b50c7efceaec7763c4958e76e5fcb15a9fa054320cc8a8d6521a02fe5b13b14759142cbd8dbd56cf6d783b8df8d95e123a76701bee604fec1a198e083245a27e23e1828dbf55d86f8aa8233475be0010380f89648e7b89444a4097379cd2b69619f0edc83a58f6dfaaf9fa84ed6a46bd87e381fba77d42d9e681b37ef49725b0c4b3651a3961ab323bf696b9d8514b76c27e715d735aa355ec598f84400d96ad315568f726bdc8b7ca33f84dfbe761b7e79279e961a4edad2d4efce43b654e1c46f7c8c10c596d28a383a7a82b071ecb8640fe823d0f2770a5d645d74a35ae23729a56c73f413157608cc9da2f130b3de05f549165d814ca4683756db954ec340dee486ae37424575e9df99772d715b18448ccdf835544309c6eedd36e7ce4953af11543a53f309b4564a84f1f6286dc6af3e1df31815b388c9fbbddc003bd4c42d50f9c0c5f616649043ab842703303f9fdc2b6ea9a86221f927308bd377710aa4df3b75dd1b76793cfe9602d014a1b6f407b35f95f6c64d1bef1cf6f195be1413fdacd3deaceef1566d8795ff280a0830a26bc9a9d2ef8b7964698214d28c87c00199b35fe1d35dfea733d6b9654a5edcf8a86967ea70bb56ee6015fdb9d9f66cd27872878704bb738568425c0c46cdf28219cc508a77964fffcd8aafd281d113e7fc00b372a59cd5cbbd4184b62dd89f1befaf97624872edc5c06923f61956dbc5e039d9568f0f2f4a3feead68c7d82430dc71c9432c0e0f95197e2721b869e87ea5b62437cb1dbc62ce96ff90a91ee7ed26447358aac1c99044c6043d542154cc8d13c5290829e51a91483e97f2eb1b5287f62de2b69572ecab596efb1e90f78faaca361fe4bb7ae0858056e9217b1fe7f007f05a70a8296cd4573df49a32f9cfe08f24f2fdadc0c4ceaa8ce2c9558b25ac82d8dd7e808a46f0bbf0171a3820698e511730db9a0dacabb57225d60d80664a817bf43677677221010212d6e95da98c4de8d5d5104b0f2d46ca5992582e8c8cf056b5257cd6ab74b1c4b71882044425bfe713be370fbb8d42af574eb9b839cf21aaf8c16b25ce0fbe1aef99333f1e8e5b8c22deeba262957edf3f74927e7a6c0a78a43963eefd8de6339f2d3754a041a2089bcd64488a17d9e003ea2c69c0a286b8ab42187209d771e1e1c7d2b444612a5798deb39e67334606b80b5a169de2daa501dd70514bf6268701e8c1cf9200bf48736890750c53c8daba03532db577d02e7929bb9a48277d5e904cd08c6422440b0a1ed6f2ae5eda8fabcb497117c2f8a4d88bc7a97ea0cee651a6f6b684f66288ef320ed435db17cf3046aa144bd828098952d4b13e388f3ce3308adcbbdc279cf27d73760d750115a3d9daf110f91244bf12f10f67f62eec787db645db506bad35b67bea5e4163d9cecf4934601ddf92d69f279b693d92152bef1ebb51fd1f137e46c01269a4b923653e663bd777e6360cde25ca12789338b925d164f6ecf3818d6facf9573fe9f27a5d1fc97e7ca22c80321d540604b7ac61d4fe0465d156095e3827e42f5b5c281fba56eea3f3f88c900bbc795ec0673c201ee72006d7bc2134110cba812a938f5eea1cf2ac13da02747178259e7a8afa8323ebd1d37b9c17f986d61e58ef271df7af34bdb2b8a59ca5dbe87747746307d3cd2015fe3b8821bd0260d23ac6ef66d94cc2494e8b14553f84a4eb7f8f4a02ddc14e29bf160e47ee44ddb546ce8f785e6e4072ccb3dc721d9a96e04a54b2f5bfd6c39ad1a02e15425ce3c5ce027311b5de08dbe26e29391bc630c2db1a317af406efb2b2c135006e609cd4471ebfc7fb397f7505d3691349f5be42336aa6dbfa5e9c0fc82560bc1b1d2934f76942eccb01545df1f743a8a6fa36486e0904910b0c5163ff3e53b5eab741c8e158b41efb2b8d37c3877c4edac95df5f3ed763bb142e9757cff802b5b7bbe1f1eddaf96b0b29d519c1140505a97fffa48776e22bc864ebd445e2c65dfd8c9f23d685a8ee4af9dbc745a34476a1208efe5cac108d5da63791edd004e6b697a4fba8d8b2b133de3bdf8d8d08a0f3d53acc8614de14f9b1c645a0dc387bddff9a14f4869f41630fef3a18f347761a9df15dcc41d2fb53efab49510bee690e49d454f24d46ec10947eb5dda45069109f662769ce8d4c8ac948dc254e7186b1aaa669de2d961c19e1b2b9aeacace533321db0cc65ba2f876062b512d606b80cd6bbbc744804aa5c54fbcf8da6a1fdf1c2c812b2655cb5a71472fbe5d94795f22d49499d1e2c3505440c181cec12a450252ab06837dd00e09e6df24e29afa959aebc79abd10eb7a178ec0ed63258cf98145d097a20658bc8227944e8f92ddb00791573a2279e88fdc4fbd39e68abca7ed3cd006f504cc63e2a3f38dda63828f81f6383b31f2d0b33cc9077d1759a05a17e2d91011c9ab49fa6dfa95a50a04ab0be7e4d75be09cdb5c9dc8782400480925f5881bca42ed27f212c27f4da73e0e37b83804f3d214def9ecad6d4aad64b2796bd4b9a23ca83be11f4616e60c020901dc312955f3b2218af5e308e6ba269d100619f5d7f5b7330fc7ca319922b90320f878999c4eaa0138f8d2ef2daf8e0617adb6007a4a30217960215d26ffac7cc2e1ea93ae380ba9535d398de786a04f9fe5bfaedb4cd6ca3016f392b6cf3f9ad1d699c9b64b79198d7eecb29df5e4f053dd2f2241890b3a062746e65e1f409a22b63d39da9ec15a00e0198b823849c7f64fff604ec374e4e1303efb8d9c6563e9a61e28bb140fe7f11a777b0a293e5bed77ea25a17da423aca23606fd32a52c083701a6bfa87a5dd75c0a0bd60564ac9af6305c358ead231a19d216a499d010d31832e07659279cb5be972ca38501401727ae02d60cb7ff32630b7a7d8918de2cc9165234dd4fe62faf181ee7700b3f6cbe94926737335d3def4fe0dc7e67f696c155626fdc0bf821f3794976109452e246d54cb6bc03d8fbfd9df3ae044072935cecdae4e90b397954ce0ba22d90b6733558778c82f0b83de11f9e74fff1caea068392883d0e74d56ba1ee5d852272ccace360155933ff2fa8d01a22f986b25c0f9463a29c3ed089c32021407dfe5cc6b3e1638f95f942a1309e67200b977cac8ae9c1430213d925a2c20dbcb7d167c694ac91a69b2209ced03f6a1604cec937a512a7368ce7cbb26d9f993c7a3c3661d8ceb3ad0864fc756b9a89aea3c56c3df23062c61e0e7972d743c8915141bd5da32f37f532cd1a40a94c6180260483464f52dff5b6cfe4b849e012d41dd320b0f5d9281be0174a441a34cd28fc1b07174185f08304128ffb066773e114779dfc2edd1fb54cf40e0af472b6f0b41edc0b1a5bd92edb8afdc5995ad89112c6b9de68169f078d24fc58bf7ba407a426a282a45eae6b3ea48bae20fa0658ab8d11d1040c5b984f700e4cafad3b110698536b45467fbecf6a6ce7f297fdc9a0ffae5002101eade2bdb840ab104720fceac13ea1478fab9b4f5cafeace75fdc04b27625c29b51e29dc53e0293588ccfc52b34e606e62dd1fa4af88bb82dd600af512a656c7542041c6fde2f953edb87d145eecaf12a9427e6275ec9ef71cc1f87bbbbc3d527f264b02efa9b1c2d15506b52b636bdbda4bf52abe24b824469abe81e20b3075045da9da7c96ee40dd558939d", 0xb22)
sendmsg$nl_route_sched(r3, 0x0, 0x800)
sendto$inet(r2, &(0x7f00000017c0)="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", 0xffffff5d, 0x12, 0x0, 0x0)
recvfrom$inet(r2, &(0x7f0000001980), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x14, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xfffc}}, 0x14}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)

21.277505589s ago: executing program 6 (id=1168):
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, 0x0)
timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
sendmmsg$unix(r3, &(0x7f0000000240), 0x318, 0x0)
socket(0x2, 0xa, 0x300)
syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040400000000000400ffffffffff"], 0xf)
recvmmsg(r2, &(0x7f00000002c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0}, 0x94)
connect$inet6(r4, &(0x7f0000000400)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c)
fsmount(0xffffffffffffffff, 0x0, 0x0)
munmap(&(0x7f0000003000/0x4000)=nil, 0x4000)
sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000540)={0x2, 0x3, 0x0, 0x9, 0xb, 0x0, 0x0, 0x25dfdbfd, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x6c, 0x0, 0x0, @in={0x2, 0x0, @loopback}}, @sadb_x_sec_ctx={0x1, 0x18, 0x7, 0x8}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x100, @dev={0xac, 0x14, 0x14, 0x41}}}]}, 0x58}}, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

16.427407736s ago: executing program 5 (id=1172):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94)
syz_mount_image$udf(&(0x7f0000000140), &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xa00004, &(0x7f0000000340)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@anchor={'anchor', 0x3d, 0x7}}, {@noadinicb}, {@noadinicb}, {@iocharset={'iocharset', 0x3d, 'cp855'}}, {@uid_ignore}, {@mode={'mode', 0x3d, 0x8009}}, {@longad}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@undelete}, {@uid_forget}, {@umask={'umask', 0x3d, 0x7fffffff}}]}, 0x1, 0xc6d, &(0x7f0000002200)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000002e80)='./ffs\x00', 0x1ff)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r3, 0xc0, &(0x7f0000000640)={0x0, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe3b, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300)={r4}, 0x4)

15.080230044s ago: executing program 5 (id=1173):
r0 = socket(0xa, 0x3, 0x3a)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
sendmsg$nl_route(r0, 0x0, 0x4020)
msgsnd(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x32, 0x800)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x28, 0x1, 0x4, 0x401, 0x0, 0x0, {0x2}, [@NFULA_CFG_MODE={0xa, 0x2, {0x0, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x28}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc)
statx(0xffffffffffffffff, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0)
recvmsg$unix(r1, &(0x7f0000000d40)={&(0x7f0000000100), 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000440)=""/30, 0x1e}, {&(0x7f0000000980)=""/223, 0xdf}, {&(0x7f0000000a80)=""/104, 0x68}, {0x0}, {&(0x7f0000000bc0)=""/63, 0x3f}, {&(0x7f0000000c00)=""/200, 0xc8}], 0x6}, 0x12003)
recvfrom(r0, &(0x7f0000000580)=""/211, 0xd3, 0x10000, &(0x7f0000000680)=@sco, 0x80)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4)
mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x81)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', <r6=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@gettclass={0x24, 0x2a, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xffff}, {0x7}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x300, 0x0)
ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(r1, 0xc0386447, &(0x7f0000000dc0)={{0x8, 0x2, &(0x7f0000000d80)=[{0x1, 0x0, 0xc0000}, {0x74, 0x0, 0x6e35}]}, 0x1, 0x81, 0x2, 0x2, 0x0, 0x1, 0x2, 0x232c, 0x0, <r7=>0x0})
ioctl$DRM_IOCTL_PANTHOR_GROUP_DESTROY(r1, 0xc0086448, &(0x7f0000000e00)={r7})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x2, 0x0, &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x5c, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000200)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x4, 0x1, 0x2}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000003c0)=[r1, r1, r1], &(0x7f0000000400)=[{0x4, 0x2, 0xd}, {0x1, 0x2, 0xe, 0x1}], 0x10, 0x7848}, 0x94)
r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r5, r6, 0x25, 0x4, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0}}, 0x30)
sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x74, r6, {0xffff, 0x7}, {0xb, 0xfff2}, {0x0, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x4048888)
close(r8)

12.539586394s ago: executing program 5 (id=1176):
prlimit64(0x0, 0xe, &(0x7f0000000940)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000980)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000009c0)=0x400000000005)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000a00)=0x6)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000a40), 0x0, 0x0)
read$msr(r3, &(0x7f0000000a80)=""/102400, 0x19000)
sched_setaffinity(r2, 0x47, &(0x7f0000019a80)=0x7)
socket$key(0xf, 0x3, 0x2)
r4 = syz_open_dev$sg(&(0x7f0000019ac0), 0x0, 0x8002)
ioctl$SG_GET_COMMAND_Q(r4, 0x2270, &(0x7f0000000240))
r5 = fcntl$dupfd(r4, 0x0, r4)
write$cgroup_subtree(r5, &(0x7f0000019b00)=ANY=[], 0xfe33)

12.537927795s ago: executing program 6 (id=1177):
socket$nl_route(0x10, 0x3, 0x0)
keyctl$set_timeout(0xf, 0x0, 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000a80)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000ac0)=0x8)
r0 = getpid()
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x800700, &(0x7f0000000140)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@minixdf}, {@dax}, {@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@errors_continue}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f00000003c0)="$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")
lsetxattr(0x0, 0x0, 0x0, 0x0, 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000b00)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000b40)=0x7)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000))
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b80)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000bc0)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000c40), 0x651, 0x0)
inotify_init1(0x0)
getitimer(0x0, 0x0)

9.944301951s ago: executing program 5 (id=1178):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x5001})
r0 = socket$inet6(0xa, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8)
r2 = socket(0xa, 0x3, 0x87)
sendto(r2, 0x0, 0x0, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80)
listen(r1, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
r5 = socket(0xa, 0x5, 0x0)
sendmsg$inet_sctp(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, &(0x7f0000000600)=ANY=[], 0x50, 0x4855}, 0x24000052)
sendto(r4, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY(r2, 0x5000940f, &(0x7f0000000680)={{r4}, "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"})
recvfrom(r3, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0)

9.626588593s ago: executing program 4 (id=1179):
openat$nullb(0xffffffffffffff9c, 0x0, 0x373982, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x2})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56d43, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x4000000, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0)
ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
close(r4)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', @multicast})
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xfff1, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0xc0)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000500)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', <r7=>0x0})
sendto$packet(r0, &(0x7f0000000580)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f00000005c0)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14)

9.444333822s ago: executing program 6 (id=1182):
socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000780)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x1c, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}, @ib={0x1b, 0x1, 0x0, {"15a87f1900"}, 0x8005, 0x7, 0x7}}}, 0x118)
get_robust_list(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080003006400000008000200c8"], 0x2c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="200000001100010003000000000064000000000064"], 0x20}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)=[{0x0}], 0x1}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000740), 0x40000000000009f, 0x0)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x60}}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000200000040b72040150000000000010902120001010080320904000000ff"], 0x0)
sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000000406030000000000000000000100000305000100070000000500010007"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x800)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'})

8.937530304s ago: executing program 4 (id=1183):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
socket$l2tp(0x2, 0x2, 0x73)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10)
socket(0x1e, 0x4, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="64796e2c00c4bc028f592e8a95ba6d714e5521b2ebaa7d62e247bf1747f678a5e047976018da7aef126ec8cafd7aa358004bf31c125ed3f7d8aa9d5667ece18c5ff94e4565d911659ac5e6077427f7c6e452b290130ca55a7b6ec2e71430c3b0aa902a6c882ec84d36f0825a85a8a6049d76c42c79f3f8152bdad122f460179d5316c420ec48fa349de9070c"])

7.925504407s ago: executing program 0 (id=1184):
r0 = socket$pppoe(0x18, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x4000, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x11129, 0x1020}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}, @IFLA_LINKMODE={0x5, 0x11, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8014}, 0x40040)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000440)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10)
connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x1, @empty, 'veth0_virt_wifi\x00'}}, 0x1e)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000640)=0x3)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x80002, 0x0)
ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000200))
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000b40), 0x2, 0x0)
ioctl(r5, 0x40047438, &(0x7f0000000280))
ioctl$PPPIOCCONNECT(r5, 0x4004743a, &(0x7f00000002c0))
r6 = socket(0x1e, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, 0x0, 0x0)
pwritev(r4, &(0x7f0000000a00)=[{&(0x7f0000000900)="4a665dea325bfb9e494e888873c27f0115f6b974ff148c8b58c95151fc0c2e4c928f60f9eda972d1291e5dd8b0a394bf39b131756a9b2db07cb723d45307f61f230ca5c97c04c5fc40da9dcac44db1b5fa088ed41490483d8eb82517c6b1d97b4d8383", 0x63}, {&(0x7f00000009c0)="8060a2", 0x3}], 0x2, 0x1, 0xad)

7.854412275s ago: executing program 4 (id=1185):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, 0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x1, &(0x7f0000000440)=[{0x6, 0x5, 0x7, 0x7ffc0002}]})
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000680)='fdinfo\x00')
socket$inet_udp(0x2, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x106, 0x3}}, 0x20)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0x10000}}, 0xa)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

7.534568887s ago: executing program 4 (id=1186):
r0 = socket(0xa, 0x3, 0x3a)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
sendmsg$nl_route(r0, 0x0, 0x4020)
msgsnd(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x32, 0x800)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x28, 0x1, 0x4, 0x401, 0x0, 0x0, {0x2}, [@NFULA_CFG_MODE={0xa, 0x2, {0x0, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x28}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc)
statx(0xffffffffffffffff, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0)
recvmsg$unix(r1, &(0x7f0000000d40)={&(0x7f0000000100), 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000440)=""/30, 0x1e}, {&(0x7f0000000980)=""/223, 0xdf}, {&(0x7f0000000a80)=""/104, 0x68}, {0x0}, {&(0x7f0000000bc0)=""/63, 0x3f}, {&(0x7f0000000c00)=""/200, 0xc8}], 0x6}, 0x12003)
recvfrom(r0, &(0x7f0000000580)=""/211, 0xd3, 0x10000, &(0x7f0000000680)=@sco, 0x80)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4)
mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x81)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', <r6=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@gettclass={0x24, 0x2a, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xffff}, {0x7}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x300, 0x0)
ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(r1, 0xc0386447, &(0x7f0000000dc0)={{0x8, 0x2, &(0x7f0000000d80)=[{0x1, 0x0, 0xc0000}, {0x74, 0x0, 0x6e35}]}, 0x1, 0x81, 0x2, 0x2, 0x0, 0x1, 0x2, 0x232c, 0x0, <r7=>0x0})
ioctl$DRM_IOCTL_PANTHOR_GROUP_DESTROY(r1, 0xc0086448, &(0x7f0000000e00)={r7})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x2, 0x0, &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x5c, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000200)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x4, 0x1, 0x2}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000003c0)=[r1, r1, r1], &(0x7f0000000400)=[{0x4, 0x2, 0xd}, {0x1, 0x2, 0xe, 0x1}], 0x10, 0x7848}, 0x94)
r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r5, r6, 0x25, 0x4, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0}}, 0x30)
sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x74, r6, {0xffff, 0x7}, {0xb, 0xfff2}, {0x0, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x4048888)
close(r8)

7.175695464s ago: executing program 0 (id=1187):
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000540)={0xa, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000580)=0x8)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000006c0), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000700), 0x2, 0x141102)
writev(r1, &(0x7f0000000740)=[{&(0x7f0000000780)="94", 0xf000}, {0x0}], 0x2)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0)
close(0x3)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000008c0)='source\x00', 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
openat$adsp1(0xffffffffffffff9c, &(0x7f00000002c0), 0x82002, 0x0)

6.968299035s ago: executing program 5 (id=1188):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80020100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5)
quotactl$Q_QUOTAOFF(0x0, &(0x7f00000000c0)=@rnullb, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6)
ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0xc4c03d12, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0)
read$msr(r3, &(0x7f0000001440)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc08c5332, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x8}}, 0x20)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)

3.714367329s ago: executing program 5 (id=1189):
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, 0x0)
timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x80000028b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
sendmmsg$unix(r2, &(0x7f0000000240), 0x318, 0x0)
syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040400000000000400ffffffffff"], 0xf)
recvmmsg(r1, &(0x7f00000002c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$packet(0x11, 0x3, 0x300)
fsmount(0xffffffffffffffff, 0x0, 0x0)
munmap(&(0x7f0000003000/0x4000)=nil, 0x4000)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000540)={0x2, 0x3, 0x0, 0x9, 0xb, 0x0, 0x0, 0x25dfdbfd, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x6c, 0x0, 0x0, @in={0x2, 0x0, @loopback}}, @sadb_x_sec_ctx={0x1, 0x18, 0x7, 0x8}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x100, @dev={0xac, 0x14, 0x14, 0x41}}}]}, 0x58}}, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

3.599672271s ago: executing program 4 (id=1190):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/partitions\x00', 0x0, 0x0)
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0)
sendfile(r1, r0, &(0x7f00000001c0)=0x264, 0x23b)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$IOMMU_IOAS_COPY(0xffffffffffffffff, 0x3b83, 0x0)
bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'lo\x00'})
setsockopt$inet_buf(r2, 0x0, 0x23, &(0x7f00000007c0)="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", 0xb22)
sendmsg$nl_route_sched(r3, 0x0, 0x800)
sendto$inet(r2, &(0x7f00000017c0)="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", 0xffffff5d, 0x12, 0x0, 0x0)
recvfrom$inet(r2, &(0x7f0000001980), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x14, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xfffc}}, 0x14}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)

3.599308531s ago: executing program 6 (id=1191):
r0 = socket(0xa, 0x3, 0x3a)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
sendmsg$nl_route(r0, 0x0, 0x4020)
msgsnd(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000fe95a9b943b4f06cf017b824573d000000000000006c6d1d020b4d1f5a3196a6911f4d"], 0x32, 0x800)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x28, 0x1, 0x4, 0x401, 0x0, 0x0, {0x2}, [@NFULA_CFG_MODE={0xa, 0x2, {0x0, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x28}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc)
statx(0xffffffffffffffff, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0)
recvmsg$unix(r1, &(0x7f0000000d40)={&(0x7f0000000100), 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000440)=""/30, 0x1e}, {&(0x7f0000000980)=""/223, 0xdf}, {&(0x7f0000000a80)=""/104, 0x68}, {0x0}, {&(0x7f0000000bc0)=""/63, 0x3f}, {&(0x7f0000000c00)=""/200, 0xc8}], 0x6}, 0x12003)
recvfrom(r0, &(0x7f0000000580)=""/211, 0xd3, 0x10000, &(0x7f0000000680)=@sco, 0x80)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4)
mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x81)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', <r6=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@gettclass={0x24, 0x2a, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xffff}, {0x7}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x300, 0x0)
ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(r1, 0xc0386447, &(0x7f0000000dc0)={{0x8, 0x2, &(0x7f0000000d80)=[{0x1, 0x0, 0xc0000}, {0x74, 0x0, 0x6e35}]}, 0x1, 0x81, 0x2, 0x2, 0x0, 0x1, 0x2, 0x232c, 0x0, <r7=>0x0})
ioctl$DRM_IOCTL_PANTHOR_GROUP_DESTROY(r1, 0xc0086448, &(0x7f0000000e00)={r7})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x2, 0x0, &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x5c, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000200)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x4, 0x1, 0x2}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000003c0)=[r1, r1, r1], &(0x7f0000000400)=[{0x4, 0x2, 0xd}, {0x1, 0x2, 0xe, 0x1}], 0x10, 0x7848}, 0x94)
r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r5, r6, 0x25, 0x4, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0}}, 0x30)
sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x74, r6, {0xffff, 0x7}, {0xb, 0xfff2}, {0x0, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x4048888)
close(r8)

3.598900471s ago: executing program 0 (id=1198):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x16, &(0x7f00000006c0)=0x10001, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r2 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x4, 0x3}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8)
sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="020602000200000002"], 0x10}}, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000540)={'ip6tnl0\x00', 0x0})
sendmsg$ETHTOOL_MSG_DEBUG_GET(r4, 0x0, 0x40000)

3.11650813s ago: executing program 0 (id=1192):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
dup(0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, 0x0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, 0x0, &(0x7f0000002100))
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r4, 0xc0, &(0x7f0000000640)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe3b, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300)={r5}, 0x4)

2.291183315s ago: executing program 4 (id=1193):
syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x2002)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001c00)={<r0=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000, 0xfff5}}], 0xf00, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20048a, &(0x7f00000000c0), 0x2, 0x51a, &(0x7f0000000680)="$eJzs3U9sI1cZAPBvJsnam6ZNCj0AKnQphQWt1k68bVT1QjlVCFVC9MhhGxInimLHUeyUJuwhe+SORCVOcOLMAYkDUk/ckTjAjUs5IBVYgRokJFx5bGedP06sbGJv499PGvnNvLG/93Y071mfN/MCGFu3ImI/Im5ExLsRMds5nnS2eLO9tc775NGD5YNHD5aTaDbf+WeS1beORc97Wp7pfGY+In7wVsSPkmNB/xRR393bWKpUytudQ8VGdatY3927u15dWiuvlTdLpcWFxfnX771WurS+vlT9zcc3I+L3v/vyR3/c/9ZPWs2a6dT19uMytbs+dRinZTIivncVwUZgotOfGxd584XexGVKI+JzEfFydv/PxkR2NY86epm+PcTWAQBXodmcjeZs7z4AcN2lWQ4sSQudXMBMpGmh0M7hvRDTaaVWb9xZre1srrRzZXMxla6uV8rznVzhXEwlq+uT5YWs3N2vlEvH9u9FxPMR8bPczWy/sFyrrIzyiw8AjLFnjs3//8m1538A4JrLPy7mRtkOAGB48qNuAAAwdOZ/ABg/5n8AGD/mfwAYP+Z/ABg/5n8AGCvff/vt1tY86Dz/euW93Z2N2nt3V8r1jUJ1Z7mwXNveKqzVamvZM3uq531epVbbWng1dt4vNsr1RrG+u3e/WtvZbNzPnut9vzw1lF4BAGd5/qUP/5JExP4bN7Mtep73f+5c/eJVtw64SumoGwCMzMSoGwCMzMnVvoBxIR8P4+v/zWYzetbujYiHh6Weh4H2/S9CHwwUJrVuKDx9bn/xCfL/wGea/D+Mr4vl/32Xh+tA/h/GV7OZWPMfAMaMHD+QnFPf+/v/fLNnZ7Df/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBamsm2JC101gKfiTQtFCKejYi5mEpW1yvl+Yh4LiL+nJvKtfYXIsK6QQDwWZb+Pems/3V79pWZ47U3cv/NZa8R8eNfvPPz95caje2FiBvJvw6PNz7oHC+Nov0AwHm683R3Hu/65NGD5e42zPZ8/J324qKtuAedrV0zGZPZaz7LNUz/O+nst7W+r0xcQvz9hxHxhdP6n2S5kbnOyqfH47diPzvU+OmR+GlW135t/Vt8/hLaAuPmw9b48+Zp918at7LX0+//fDZCPbnu+HdwYvxLD8e/iT7j361BY7z6h++eONicbdc9jPjSZMRB98N7xp9u/KRP/FcGjP/XF7/ycr+65i8jbsdp/U+OxCo2qlvF+u7e3fXq0lp5rbxZKi0uLM6/fu+1UjHLURe7meqT/vHGnef6xW/1f7pP/Pw5/f/6gP3/1f/e/eFXz4j/za+dfv1fOCN+a078xoDxl6Z/m+9X14q/0qf/513/OwPG/+hveysDngoADEF9d29jqVIpbz95IX/mOellhBigkETsX3GIx4Xcr3/61vkn54bWngsWol/VxNPSwmtTyD0dzRigMOqRCbhqj2/6UbcEAAAAAAAAAAAAAADoZxh/TjTqPgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB9fRoAAP//j4/W2A==")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./file1\x00', 0x42, 0x0)
r2 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
fchdir(r3)
r4 = creat(&(0x7f0000000540)='./file0\x00', 0xdafbe5d6891b6e4)
close(r4)
execve(&(0x7f00000005c0)='./file0\x00', 0x0, 0x0)
syz_emit_vhci(&(0x7f0000002100)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0x9)
syz_mount_image$iso9660(&(0x7f0000002140), &(0x7f0000002180)='.\x00', 0x0, &(0x7f00000021c0)={[{@unhide}, {@session={'session', 0x3d, 0xe}}, {@nojoliet}, {@mode={'mode', 0x3d, 0x1}}, {@cruft}, {@overriderock}, {@map_acorn}]}, 0x1, 0xa12, &(0x7f0000002240)="$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")
bpf$MAP_CREATE(0x0, &(0x7f0000002c80)=@base={0x5, 0x1, 0x4, 0x8}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000002d80)={0x1, 0xd, &(0x7f0000002e40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
fanotify_mark(0xffffffffffffffff, 0x105, 0x40009965, r1, 0x0)
socket(0x200000000000011, 0x2, 0xd)

1.228681054s ago: executing program 0 (id=1194):
syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000100), &(0x7f0000000080), &(0x7f0000000000))
pipe(0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r0)
sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nullb/nullb1\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0)
write(r2, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nullb/nullb1/power\x00', 0x1, 0x0)
write(r3, &(0x7f00000002c0)='1\n', 0x2)

212.077698ms ago: executing program 0 (id=1195):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socket(0x10, 0x3, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='maps\x00')
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$alg(0x26, 0x5, 0x0)
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$kcm(0x1e, 0x4, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[<r2=>0x0], 0x1})
r3 = socket$phonet_pipe(0x23, 0x5, 0x2)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r3}, 0x1e)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0xffffffffffffffff})

0s ago: executing program 6 (id=1196):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000300), 0x2, 0x141102)
writev(r0, &(0x7f0000000340)=[{&(0x7f0000000380)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
sendmsg(r1, 0x0, 0x0)
bind(r1, &(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, {0xa, 0x4e22, 0x10000000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xd}}}, 0x80)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r2, &(0x7f00000007c0), 0x0)
openat(0xffffffffffffff9c, 0x0, 0x3b9b4aedd61a3686, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config\x00', 0x1ed)
mount(0x0, &(0x7f0000001f80)='./config\x00', &(0x7f0000001fc0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./config/usb_gadget/g1\x00', 0x1ed)
mkdirat(0xffffffffffffff9c, &(0x7f0000002400)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ed)
rmdir(&(0x7f00000024c0)='./config/usb_gadget/g1/functions/uac1.usb0\x00')

kernel console output (not intermixed with test programs):

1.693264][    T8] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00
[  191.718442][    T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.748840][ T7737] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w with ordered data mode. Quota mode: none.
[  191.777829][    T8] usb 1-1: Product: syz
[  191.782189][    T8] usb 1-1: Manufacturer: syz
[  191.800546][   T23] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  191.812351][   T23] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  191.821121][    T8] usb 1-1: SerialNumber: syz
[  191.847694][ T7737] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  191.897631][   T28] audit: type=1800 audit(1794590206.164:282): pid=7737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.366" name="file1" dev="loop5" ino=17 res=0 errno=0
[  192.066328][ T6413] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  192.394425][    T8] usb 1-1: Cannot retrieve CPort count: -110
[  192.412766][    T8] usb 1-1: Cannot retrieve CPort count: -110
[  192.428602][    T8] es2_ap_driver: probe of 1-1:1.0 failed with error -110
[  192.495431][ T7748] loop4: detected capacity change from 0 to 32768
[  192.506564][ T7748] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.368 (7748)
[  192.552498][ T7748] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  192.582882][ T7748] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  192.611440][ T7748] BTRFS info (device loop4): setting nodatasum
[  192.634156][ T7748] BTRFS info (device loop4): force zlib compression, level 3
[  192.662626][ T7748] BTRFS info (device loop4): turning on flush-on-commit
[  192.683749][ T7748] BTRFS info (device loop4): max_inline at 4096
[  192.708998][ T7748] BTRFS info (device loop4): using free space tree
[  192.827043][ T7748] BTRFS info (device loop4): enabling ssd optimizations
[  193.425825][ T6350] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  193.438642][ T7759] ftdi_sio ttyUSB0: ftdi_set_termios FAILED to set databits/stopbits/parity
[  193.456146][ T7759] ftdi_sio ttyUSB0: ftdi_set_termios urb failed to set baudrate
[  193.476470][ T7759] ftdi_sio ttyUSB0: failed to set flow control: -32
[  193.556714][ T7729] ftdi_sio ttyUSB0: failed to get modem status: -32
[  193.586188][ T7729] ftdi_sio ttyUSB0: error from flowcontrol urb
[  193.603705][ T5797] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 11 /dev/loop4 scanned by udevd (5797)
[  193.620662][   T23] usb 4-1: USB disconnect, device number 6
[  193.639574][   T23] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  193.675140][   T23] ftdi_sio 4-1:0.0: device disconnected
[  193.858817][ T5867] usb 1-1: USB disconnect, device number 8
[  194.579049][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  194.585432][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  195.028193][ T7834] netlink: 4 bytes leftover after parsing attributes in process `syz.3.378'.
[  195.840453][ T7847] pim6reg: left allmulticast mode
[  196.532872][ T7856] netlink: 4 bytes leftover after parsing attributes in process `syz.4.380'.
[  196.857887][  T788] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  196.937840][ T7873] rxe_eth0 speed is unknown, defaulting to 1000
[  197.020078][   T52] Bluetooth: hci2: unexpected event 0x04 length: 12 > 10
[  197.020114][   T52] Bluetooth: unknown link type 255
[  197.033752][   T52] Bluetooth: hci2: connection err: -111
[  197.066121][  T788] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  197.086642][  T788] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  197.140205][  T788] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  197.191879][  T788] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00
[  197.217202][  T788] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  197.232951][  T788] usb 6-1: Product: syz
[  197.237355][  T788] usb 6-1: Manufacturer: syz
[  197.252119][  T788] usb 6-1: SerialNumber: syz
[  197.783341][  T788] usb 6-1: Cannot retrieve CPort count: -110
[  197.799976][  T788] usb 6-1: Cannot retrieve CPort count: -110
[  197.806196][  T788] es2_ap_driver: probe of 6-1:1.0 failed with error -110
[  197.950114][   T52] Bluetooth: hci1: unexpected event 0x04 length: 12 > 10
[  197.950285][   T52] Bluetooth: unknown link type 255
[  197.963259][   T52] Bluetooth: hci1: connection err: -111
[  198.825910][ T7903] FAULT_INJECTION: forcing a failure.
[  198.825910][ T7903] name fail_futex, interval 1, probability 0, space 0, times 1
[  198.840609][ T7903] CPU: 0 PID: 7903 Comm: syz.3.390 Not tainted syzkaller #0
[  198.847973][ T7903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  198.858075][ T7903] Call Trace:
[  198.861403][ T7903]  <TASK>
[  198.864389][ T7903]  dump_stack_lvl+0x18c/0x250
[  198.869134][ T7903]  ? show_regs_print_info+0x20/0x20
[  198.874394][ T7903]  ? load_image+0x420/0x420
[  198.878956][ T7903]  ? __might_fault+0xaa/0x120
[  198.883720][ T7903]  ? __might_fault+0xc6/0x120
[  198.888482][ T7903]  should_fail_ex+0x394/0x4c0
[  198.893230][ T7903]  get_futex_key+0x134/0xf40
[  198.897879][ T7903]  ? futex_setup_timer+0xc0/0xc0
[  198.902878][ T7903]  ? bpf_obj_get_info_by_fd+0x127/0x3170
[  198.908603][ T7903]  futex_wait_setup+0xbc/0x270
[  198.913425][ T7903]  ? futex_wait_multiple+0x970/0x970
[  198.918862][ T7903]  futex_wait+0x1cf/0x640
[  198.923260][ T7903]  ? futex_wait_setup+0x270/0x270
[  198.928376][ T7903]  ? btf_get_fd_by_id+0x7b/0x3f0
[  198.933389][ T7903]  ? __might_fault+0xaa/0x120
[  198.938128][ T7903]  do_futex+0x2ff/0x3e0
[  198.942516][ T7903]  ? security_bpf+0x7e/0xa0
[  198.947086][ T7903]  ? __ia32_sys_get_robust_list+0x110/0x110
[  198.953038][ T7903]  ? bpf_link_show_fdinfo+0x560/0x560
[  198.958479][ T7903]  __se_sys_futex+0x3a9/0x440
[  198.963215][ T7903]  ? __x64_sys_futex+0xf0/0xf0
[  198.968048][ T7903]  ? __x64_sys_futex+0x21/0xf0
[  198.972877][ T7903]  do_syscall_64+0x55/0xb0
[  198.977349][ T7903]  ? clear_bhb_loop+0x40/0x90
[  198.982087][ T7903]  ? clear_bhb_loop+0x40/0x90
[  198.986876][ T7903]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  198.992835][ T7903] RIP: 0033:0x7f86c97a94d9
[  198.997300][ T7903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  199.017054][ T7903] RSP: 002b:00007f86ca63e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  199.025557][ T7903] RAX: ffffffffffffffda RBX: 00007f86c9a25fa8 RCX: 00007f86c97a94d9
[  199.033580][ T7903] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f86c9a25fa8
[  199.041605][ T7903] RBP: 00007f86c9a25fa0 R08: 0000000000000000 R09: 0000000000000000
[  199.049630][ T7903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  199.057647][ T7903] R13: 00007f86c9a26038 R14: 00007ffdf119ada0 R15: 00007ffdf119ae88
[  199.065681][ T7903]  </TASK>
[  199.876797][  T788] usb 6-1: USB disconnect, device number 6
[  200.924515][    T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  201.107226][ T7951] pim6reg: entered allmulticast mode
[  201.206141][ T7951] pim6reg: left allmulticast mode
[  201.832567][    T9] usb 5-1: Using ep0 maxpacket: 16
[  201.845927][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  201.862508][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  201.888300][ T7955] netlink: 4 bytes leftover after parsing attributes in process `syz.5.399'.
[  201.906845][    T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  201.977581][    T9] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  201.986719][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  202.022966][    T9] usb 5-1: config 0 descriptor??
[  202.579088][ T7971] pim6reg: entered allmulticast mode
[  202.751793][ T7972] netlink: 4 bytes leftover after parsing attributes in process `syz.3.402'.
[  203.004005][    T9] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0005/input/input7
[  203.090518][    T9] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  203.337567][ T5885] usb 5-1: USB disconnect, device number 3
[  203.522039][ T7982] fido_id[7982]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  203.691286][ T7993] loop5: detected capacity change from 0 to 164
[  204.233766][ T8005] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  205.710422][ T8052] pim6reg: left allmulticast mode
[  206.257331][   T52] block nbd5: Receive control failed (result -32)
[  206.275405][ T8044] block nbd5: shutting down sockets
[  206.537727][ T8057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.420'.
[  207.415938][ T8086] bond0: left promiscuous mode
[  207.444716][ T8086] bond_slave_0: left promiscuous mode
[  207.472514][ T8086] bond_slave_1: left promiscuous mode
[  207.505945][ T8086] bond0: left allmulticast mode
[  207.533279][ T8086] bond_slave_0: left allmulticast mode
[  207.604115][ T8086] bond_slave_1: left allmulticast mode
[  207.724269][ T8089] bond0: (slave bond_slave_1): Releasing backup interface
[  207.958452][ T8092] bond0: option mode: unable to set because the bond device has slaves
[  208.041375][ T8094] netlink: 'syz.5.424': attribute type 10 has an invalid length.
[  208.077066][ T8094] syz_tun: left allmulticast mode
[  208.139016][ T8094] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  209.217633][    T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  209.407656][    T9] usb 5-1: Using ep0 maxpacket: 32
[  209.432470][    T9] usb 5-1: config 0 has an invalid interface number: 12 but max is 0
[  209.457584][    T9] usb 5-1: config 0 has no interface number 0
[  209.487784][    T9] usb 5-1: config 0 interface 12 has no altsetting 0
[  209.568130][    T9] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  209.600586][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  209.629642][    T9] usb 5-1: Product: syz
[  209.635292][    T9] usb 5-1: Manufacturer: syz
[  209.652994][    T9] usb 5-1: SerialNumber: syz
[  209.697842][    T9] usb 5-1: config 0 descriptor??
[  210.043266][ T8082] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  210.086020][ T8075] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  210.417539][   T23] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  210.637658][   T23] usb 4-1: Using ep0 maxpacket: 8
[  211.101459][ T8138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.432'.
[  211.301709][   T23] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  211.339855][   T23] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  211.367598][   T23] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  211.392657][   T23] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  211.402769][   T23] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  211.476780][   T23] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  211.539309][   T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  211.853439][   T23] usb 4-1: GET_CAPABILITIES returned 0
[  211.886464][   T23] usbtmc 4-1:16.0: can't read capabilities
[  211.917547][   T52] Bluetooth: hci2: command 0x0406 tx timeout
[  212.127262][   T23] usb 4-1: USB disconnect, device number 7
[  212.308720][    T9] f81534 5-1:0.12: f81534_set_register: reg: 1003 data: 78 failed: -71
[  212.317340][    T9] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71
[  212.325203][    T9] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  212.497577][    T9] f81534: probe of 5-1:0.12 failed with error -71
[  213.027891][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  213.203534][    T9] usb 5-1: USB disconnect, device number 4
[  213.528003][ T8155] ALSA: seq fatal error: cannot create timer (-22)
[  213.638315][ T8157] bridge_slave_1: left allmulticast mode
[  213.644085][ T8157] bridge_slave_1: left promiscuous mode
[  213.686803][ T8157] bridge0: port 2(bridge_slave_1) entered disabled state
[  213.724316][ T8157] bridge_slave_0: left allmulticast mode
[  213.731896][ T8157] bridge_slave_0: left promiscuous mode
[  213.763751][ T8157] bridge0: port 1(bridge_slave_0) entered disabled state
[  214.975131][ T8186] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  218.229242][    T8] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  218.429640][    T8] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 18
[  218.447615][    T8] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00
[  218.456736][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  218.648142][ T8246] netlink: 8 bytes leftover after parsing attributes in process `syz.5.466'.
[  218.726610][    T8] cdc_acm 4-1:1.0: ttyACM0: USB ACM device
[  218.870749][ T8255] FAULT_INJECTION: forcing a failure.
[  218.870749][ T8255] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  218.885362][ T8255] CPU: 1 PID: 8255 Comm: syz.0.469 Not tainted syzkaller #0
[  218.892709][ T8255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  218.902809][ T8255] Call Trace:
[  218.906198][ T8255]  <TASK>
[  218.909269][ T8255]  dump_stack_lvl+0x18c/0x250
[  218.914109][ T8255]  ? show_regs_print_info+0x20/0x20
[  218.919374][ T8255]  ? load_image+0x420/0x420
[  218.923942][ T8255]  ? __might_fault+0xaa/0x120
[  218.928680][ T8255]  ? __lock_acquire+0x7eb0/0x7eb0
[  218.933763][ T8255]  ? udp_sendmsg+0x1ae1/0x23d0
[  218.938567][ T8255]  ? __virt_addr_valid+0x10c/0x380
[  218.943717][ T8255]  should_fail_ex+0x394/0x4c0
[  218.948448][ T8255]  _copy_from_user+0x2f/0xe0
[  218.953073][ T8255]  csum_and_copy_from_iter+0x1f3/0x1480
[  218.958665][ T8255]  ? iov_iter_get_pages_alloc2+0xc0/0xc0
[  218.964371][ T8255]  ? __kmem_cache_alloc_node+0x197/0x260
[  218.970069][ T8255]  ? __alloc_skb+0x138/0x2c0
[  218.974722][ T8255]  ? rcu_is_watching+0x15/0xb0
[  218.979533][ T8255]  ip_generic_getfrag+0x163/0x2f0
[  218.984595][ T8255]  ? ip_skb_dst_mtu+0xb70/0xb70
[  218.989481][ T8255]  ? __build_skb_around+0x245/0x3c0
[  218.994719][ T8255]  ? __alloc_skb+0x1b2/0x2c0
[  218.999373][ T8255]  ? skb_put+0x112/0x210
[  219.003649][ T8255]  __ip_append_data+0x2f3b/0x3bf0
[  219.008731][ T8255]  ? ip_skb_dst_mtu+0xb70/0xb70
[  219.013640][ T8255]  ? ip_setup_cork+0x840/0x840
[  219.018441][ T8255]  ? ipv4_mtu+0x564/0x670
[  219.022816][ T8255]  ? ip_setup_cork+0x527/0x840
[  219.027618][ T8255]  ip_make_skb+0x22b/0x440
[  219.032076][ T8255]  ? ip_skb_dst_mtu+0xb70/0xb70
[  219.036980][ T8255]  ? ip_flush_pending_frames+0x250/0x250
[  219.042683][ T8255]  ? verify_lock_unused+0x140/0x140
[  219.047937][ T8255]  udp_sendmsg+0x1ae1/0x23d0
[  219.052590][ T8255]  ? ip_skb_dst_mtu+0xb70/0xb70
[  219.057488][ T8255]  ? udp_cmsg_send+0x350/0x350
[  219.062319][ T8255]  ? mark_lock+0x94/0x320
[  219.066744][ T8255]  ? __lock_acquire+0x135d/0x7eb0
[  219.071823][ T8255]  ? aa_label_sk_perm+0x500/0x6a0
[  219.076892][ T8255]  udpv6_sendmsg+0x7a4/0x2390
[  219.081622][ T8255]  ? asan.module_dtor+0x20/0x20
[  219.086515][ T8255]  ? udp_v6_early_demux+0xf90/0xf90
[  219.091767][ T8255]  ? aa_af_perm+0x330/0x330
[  219.096436][ T8255]  ? sock_rps_record_flow+0x19/0x3f0
[  219.101765][ T8255]  ? inet_send_prepare+0x5b/0x250
[  219.106865][ T8255]  ? inet6_sendmsg+0x5f/0xd0
[  219.111589][ T8255]  sock_write_iter+0x2dc/0x420
[  219.116479][ T8255]  ? sock_read_iter+0x3f0/0x3f0
[  219.121377][ T8255]  ? common_file_perm+0x198/0x1f0
[  219.126443][ T8255]  vfs_write+0x474/0x9a0
[  219.130734][ T8255]  ? file_end_write+0x250/0x250
[  219.135637][ T8255]  ? __fget_files+0x3fc/0x460
[  219.140366][ T8255]  ? __fdget_pos+0x1d8/0x330
[  219.144994][ T8255]  ? ksys_write+0x74/0x260
[  219.149463][ T8255]  ksys_write+0x151/0x260
[  219.153847][ T8255]  ? __ia32_sys_read+0x90/0x90
[  219.158704][ T8255]  ? lockdep_hardirqs_on+0x98/0x150
[  219.163936][ T8255]  do_syscall_64+0x55/0xb0
[  219.168391][ T8255]  ? clear_bhb_loop+0x40/0x90
[  219.173118][ T8255]  ? clear_bhb_loop+0x40/0x90
[  219.177850][ T8255]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  219.183787][ T8255] RIP: 0033:0x7f6fd9ba94d9
[  219.188236][ T8255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  219.207879][ T8255] RSP: 002b:00007f6fdaa9b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  219.216334][ T8255] RAX: ffffffffffffffda RBX: 00007f6fd9e25fa0 RCX: 00007f6fd9ba94d9
[  219.224344][ T8255] RDX: 0000000000003f80 RSI: 0000200000000300 RDI: 0000000000000003
[  219.232397][ T8255] RBP: 00007f6fd9c3804e R08: 0000000000000000 R09: 0000000000000000
[  219.240400][ T8255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  219.248409][ T8255] R13: 00007f6fd9e26038 R14: 00007f6fd9e25fa0 R15: 00007ffd39c920a8
[  219.256510][ T8255]  </TASK>
[  219.345485][    T8] usb 4-1: USB disconnect, device number 8
[  219.414397][ T8260] event trace: Could not enable event p
[  219.617329][ T8267] bond1: entered allmulticast mode
[  219.636345][ T8267] macvlan2: entered promiscuous mode
[  219.641867][ T8267] macvlan2: entered allmulticast mode
[  219.648883][ T8267] bond1: (slave macvlan2): Opening slave failed
[  220.328022][ T8274] pim6reg: entered allmulticast mode
[  220.401024][ T8276] pim6reg: left allmulticast mode
[  221.009444][ T8281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.475'.
[  221.518462][ T8246] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  221.556523][ T8241] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  223.404119][ T8316] bridge0: port 2(bridge_slave_1) entered disabled state
[  223.412010][ T8316] bridge0: port 1(bridge_slave_0) entered disabled state
[  224.046417][ T8316] infiniband syz0: set down
[  224.079835][ T5787] Bluetooth: hci2: unexpected event 0x04 length: 12 > 10
[  224.079873][ T5787] Bluetooth: unknown link type 255
[  224.092660][ T5787] Bluetooth: hci2: connection err: -111
[  224.259727][ T8316] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  224.294277][ T8316] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  226.023261][ T8316] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  226.032516][ T8316] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  226.041520][ T8316] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  226.051816][ T8316] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  226.249232][ T8316] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  226.258625][ T8316] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  226.267698][ T8316] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  226.276614][ T8316] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  226.622762][ T8322] pim6reg: entered allmulticast mode
[  226.773801][ T8320] pim6reg: left allmulticast mode
[  227.240607][ T8326] netlink: 4 bytes leftover after parsing attributes in process `syz.4.486'.
[  227.274283][ T8351] pim6reg: entered allmulticast mode
[  227.298315][ T8352] pim6reg: left allmulticast mode
[  227.400334][ T8356] netlink: 4 bytes leftover after parsing attributes in process `syz.5.491'.
[  227.428881][ T8361] pim6reg: left allmulticast mode
[  227.588132][ T8366] netlink: 4 bytes leftover after parsing attributes in process `syz.3.492'.
[  227.937970][ T8380] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  228.176910][ T8388] pim6reg: entered allmulticast mode
[  228.253367][ T8391] pim6reg: left allmulticast mode
[  228.522169][ T8397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.496'.
[  229.875054][ T8417] pim6reg: entered allmulticast mode
[  229.946865][ T8418] pim6reg: left allmulticast mode
[  231.348287][ T8426] netlink: 4 bytes leftover after parsing attributes in process `syz.3.504'.
[  231.648334][   T28] audit: type=1326 audit(1794590245.924:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8439 comm="syz.4.509" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0c35a94d9 code=0x7ffc0000
[  231.677633][   T28] audit: type=1326 audit(1794590245.924:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8439 comm="syz.4.509" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0c35a94d9 code=0x7ffc0000
[  231.702121][   T28] audit: type=1326 audit(1794590245.944:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8439 comm="syz.4.509" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7fb0c35a94d9 code=0x7ffc0000
[  232.373584][ T8452] TC_ACT_REPEAT abuse ?
[  232.387568][   T52] Bluetooth: hci3: command 0x0406 tx timeout
[  232.896690][ T8463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  233.950371][ T8485] netlink: 'syz.0.519': attribute type 12 has an invalid length.
[  233.961520][ T8485] dlm: no local IP address has been set
[  233.969053][ T8485] dlm: cannot start dlm midcomms -107
[  234.078174][ T8480] kvm: apic: phys broadcast and lowest prio
[  234.407628][ T5785] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  234.619914][ T5785] usb 1-1: Using ep0 maxpacket: 16
[  234.633678][ T5785] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=28.00
[  234.645945][ T5785] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  234.679778][ T5785] usb 1-1: config 0 descriptor??
[  234.699220][ T5785] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[  234.727530][    T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  234.738632][ T5785] usb 1-1: Detected FT2233HP
[  234.906107][ T5785] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  234.938392][ T5785] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  234.962435][    T9] usb 6-1: config index 0 descriptor too short (expected 1572, got 36)
[  234.982327][    T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  235.012764][    T9] usb 6-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40
[  235.026133][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  235.055881][    T9] usb 6-1: Product: syz
[  235.065094][    T9] usb 6-1: Manufacturer: syz
[  235.070457][    T9] usb 6-1: SerialNumber: syz
[  235.094465][    T9] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input8
[  235.454495][ T5134] bcm5974 6-1:1.0: could not read from device
[  235.491627][    T9] bcm5974 6-1:1.0: could not read from device
[  235.513495][ T5134] bcm5974 6-1:1.0: could not read from device
[  235.522076][    T9] input: failed to attach handler mousedev to device input8, error: -5
[  236.301005][ T5134] bcm5974 6-1:1.0: could not read from device
[  236.302260][    T9] usb 6-1: USB disconnect, device number 7
[  236.358665][ T5134] bcm5974 6-1:1.0: could not read from device
[  236.447091][ T8493] udevd[8493]: Error opening device "/dev/input/event4": No such file or directory
[  236.511514][ T8493] udevd[8493]: Unable to EVIOCGABS device "/dev/input/event4"
[  236.540978][ T8493] udevd[8493]: Unable to EVIOCGABS device "/dev/input/event4"
[  236.560284][ T8493] udevd[8493]: Unable to EVIOCGABS device "/dev/input/event4"
[  236.571257][ T8493] udevd[8493]: Unable to EVIOCGABS device "/dev/input/event4"
[  236.634881][ T5787] Bluetooth: hci2: unexpected event 0x04 length: 12 > 10
[  236.634921][ T5787] Bluetooth: unknown link type 255
[  236.638642][ T8530] ftdi_sio ttyUSB0: ftdi_set_termios FAILED to set databits/stopbits/parity
[  236.646685][ T5787] Bluetooth: hci2: connection err: -111
[  236.671395][ T8530] ftdi_sio ttyUSB0: ftdi_set_termios urb failed to set baudrate
[  236.697744][ T8530] ftdi_sio ttyUSB0: failed to set flow control: -32
[  236.746168][ T8489] ftdi_sio ttyUSB0: failed to get modem status: -32
[  236.754680][ T8489] ftdi_sio ttyUSB0: error from flowcontrol urb
[  236.763157][  T788] usb 1-1: USB disconnect, device number 9
[  236.774315][  T788] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  236.784903][  T788] ftdi_sio 1-1:0.0: device disconnected
[  238.123441][ T8562] lo: entered promiscuous mode
[  238.363326][ T8562] tunl0: entered promiscuous mode
[  238.395977][ T8562] gre0: entered promiscuous mode
[  238.518911][ T8562] gretap0: entered promiscuous mode
[  238.574801][ T8562] erspan0: entered promiscuous mode
[  238.652174][ T8562] ip_vti0: entered promiscuous mode
[  238.683268][ T8562] ip6_vti0: entered promiscuous mode
[  238.740157][ T8562] sit0: entered promiscuous mode
[  238.811393][ T8562] ip6tnl0: entered promiscuous mode
[  238.853016][ T8562] ip6gre0: entered promiscuous mode
[  238.894368][ T8562] syz_tun: entered promiscuous mode
[  238.954146][ T8562] ip6gretap0: entered promiscuous mode
[  239.026027][ T8562] bridge0: port 2(bridge_slave_1) entered disabled state
[  239.033897][ T8562] bridge0: port 1(bridge_slave_0) entered disabled state
[  239.069055][ T8562] bridge0: entered promiscuous mode
[  239.143346][ T8562] vcan0: entered promiscuous mode
[  239.178473][ T8562] bond0: entered promiscuous mode
[  239.194897][ T8562] bond_slave_0: entered promiscuous mode
[  239.204734][ T8562] bond_slave_1: entered promiscuous mode
[  239.244419][ T8562] team0: entered promiscuous mode
[  239.251488][ T8562] team_slave_0: entered promiscuous mode
[  239.265716][ T8562] team_slave_1: entered promiscuous mode
[  239.306425][ T8562] dummy0: entered promiscuous mode
[  239.348556][ T8562] nlmon0: entered promiscuous mode
[  239.364276][ T8562] caif0: entered promiscuous mode
[  239.389155][ T8562] batadv0: entered promiscuous mode
[  239.428177][ T8562] veth0: entered promiscuous mode
[  239.461544][ T8562] veth1: entered promiscuous mode
[  239.498825][ T8562] wg0: entered promiscuous mode
[  239.526020][ T8562] wg1: entered promiscuous mode
[  239.551701][ T8562] wg2: entered promiscuous mode
[  239.577175][ T8562] veth0_to_bridge: entered promiscuous mode
[  239.635106][ T8562] veth1_to_bridge: entered promiscuous mode
[  239.690299][ T8562] veth0_to_bond: entered promiscuous mode
[  239.735786][ T8562] veth1_to_bond: entered promiscuous mode
[  239.804294][ T8562] veth0_to_team: entered promiscuous mode
[  239.859743][ T8562] veth1_to_team: entered promiscuous mode
[  239.914040][ T8562] veth0_to_batadv: entered promiscuous mode
[  239.930918][ T8562] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  239.958088][ T8562] batadv_slave_0: entered promiscuous mode
[  239.996546][ T8562] veth1_to_batadv: entered promiscuous mode
[  240.015436][ T8562] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  240.039405][ T8562] batadv_slave_1: entered promiscuous mode
[  240.069574][ T8562] xfrm0: entered promiscuous mode
[  240.097353][ T8562] veth0_to_hsr: entered promiscuous mode
[  240.163619][ T8562] hsr0: entered promiscuous mode
[  240.213235][ T8562] veth1_virt_wifi: entered promiscuous mode
[  240.275263][ T8562] veth0_virt_wifi: entered promiscuous mode
[  240.292303][ T8562] virt_wifi0: entered promiscuous mode
[  240.367228][ T8562] vlan0: entered promiscuous mode
[  240.378648][ T8562] vlan1: entered promiscuous mode
[  240.392990][ T8562] macvlan0: entered promiscuous mode
[  240.427240][ T8562] macvlan1: entered promiscuous mode
[  240.456161][ T8562] ipvtap0: entered promiscuous mode
[  240.484652][ T8562] ipvlan0: entered promiscuous mode
[  240.520759][ T8562] ipvlan1: entered promiscuous mode
[  240.602881][ T8562] macvtap0: entered promiscuous mode
[  240.662081][ T8562] geneve0: entered promiscuous mode
[  240.692259][ T8562] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  240.701494][ T8562] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  240.710768][ T8562] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  240.721166][ T8562] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  240.730385][ T8562] geneve1: entered promiscuous mode
[  240.759456][ T8562] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  240.783482][ T8562] netdevsim netdevsim3 netdevsim1: entered promiscuous mode
[  240.806445][ T8562] netdevsim netdevsim3 netdevsim2: entered promiscuous mode
[  240.830247][ T8562] netdevsim netdevsim3 netdevsim3: entered promiscuous mode
[  240.864225][ T8562] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  240.891526][ T8562] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  240.914417][ T8562] macsec1: entered promiscuous mode
[  240.936165][ T8562] gtp0: entered promiscuous mode
[  241.216186][ T5787] Bluetooth: hci3: unexpected event 0x04 length: 12 > 10
[  241.216212][ T5787] Bluetooth: unknown link type 255
[  241.229218][ T5787] Bluetooth: hci3: connection err: -111
[  241.357544][  T788] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  241.537685][  T788] usb 5-1: Using ep0 maxpacket: 16
[  241.565434][  T788] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=28.00
[  241.622161][  T788] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  241.804313][  T788] usb 5-1: config 0 descriptor??
[  241.960486][  T788] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected
[  242.165370][ T8618] pim6reg: entered allmulticast mode
[  242.223919][  T788] usb 5-1: Detected FT2233HP
[  242.257252][ T8619] pim6reg: left allmulticast mode
[  242.349629][  T788] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  242.646529][  T788] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  242.781768][ T8622] netlink: 4 bytes leftover after parsing attributes in process `syz.3.550'.
[  243.421835][ T8636] pim6reg: entered allmulticast mode
[  243.496713][ T8637] pim6reg: left allmulticast mode
[  243.747691][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  244.098605][ T8596] ftdi_sio ttyUSB0: ftdi_set_termios FAILED to set databits/stopbits/parity
[  244.108661][ T8642] netlink: 4 bytes leftover after parsing attributes in process `syz.0.553'.
[  244.208370][ T8596] ftdi_sio ttyUSB0: ftdi_set_termios urb failed to set baudrate
[  244.256206][ T8596] ftdi_sio ttyUSB0: failed to set flow control: -32
[  244.382936][ T8624] ftdi_sio ttyUSB0: failed to get modem status: -32
[  244.403004][ T8624] ftdi_sio ttyUSB0: error from flowcontrol urb
[  244.420082][ T5785] usb 5-1: USB disconnect, device number 5
[  244.436483][ T5785] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  244.494556][ T5785] ftdi_sio 5-1:0.0: device disconnected
[  245.094672][ T5787] Bluetooth: hci3: unexpected event 0x04 length: 12 > 10
[  245.094711][ T5787] Bluetooth: unknown link type 255
[  245.107095][ T5787] Bluetooth: hci3: connection err: -111
[  245.376547][ T8675] pim6reg: entered allmulticast mode
[  245.455203][ T8675] pim6reg: left allmulticast mode
[  245.575949][ T8675] netlink: 4 bytes leftover after parsing attributes in process `syz.3.563'.
[  245.727534][  T788] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  245.827835][    C0] vcan0: j1939_tp_rxtimer: 0xffff88802d463800: rx timeout, send abort
[  245.839198][    C1] vcan0: j1939_tp_rxtimer: 0xffff88802f547800: rx timeout, send abort
[  245.847809][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802d463800: 0x10000: (3) A timeout occurred and this is the connection abort to close the session.
[  245.848061][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802f547800: 0x10000: (3) A timeout occurred and this is the connection abort to close the session.
[  245.907637][  T788] usb 6-1: Using ep0 maxpacket: 16
[  245.915626][  T788] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=28.00
[  245.926027][  T788] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  245.947001][  T788] usb 6-1: config 0 descriptor??
[  245.962254][  T788] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected
[  245.983360][  T788] usb 6-1: Detected FT2233HP
[  246.169984][  T788] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  246.199782][  T788] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  247.908125][ T8705] ftdi_sio ttyUSB0: ftdi_set_termios FAILED to set databits/stopbits/parity
[  247.917339][ T8705] ftdi_sio ttyUSB0: ftdi_set_termios urb failed to set baudrate
[  247.926933][ T8705] ftdi_sio ttyUSB0: failed to set flow control: -32
[  247.939492][ T8676] ftdi_sio ttyUSB0: failed to get modem status: -32
[  247.946489][ T8676] ftdi_sio ttyUSB0: error from flowcontrol urb
[  247.954505][   T23] usb 6-1: USB disconnect, device number 8
[  247.971436][   T23] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  247.984266][   T23] ftdi_sio 6-1:0.0: device disconnected
[  248.144785][ T8726] pim6reg: entered allmulticast mode
[  248.210898][ T8726] pim6reg: left allmulticast mode
[  248.333293][ T8726] netlink: 4 bytes leftover after parsing attributes in process `syz.4.578'.
[  249.973265][ T8748] netlink: 32 bytes leftover after parsing attributes in process `syz.5.585'.
[  250.804203][ T8756] pim6reg: entered allmulticast mode
[  250.873640][ T8757] pim6reg: left allmulticast mode
[  251.353768][ T8750] loop5: detected capacity change from 0 to 49152
[  251.363117][ T8709] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  251.486166][ T8750] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w with ordered data mode. Quota mode: none.
[  251.625149][ T6413] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  251.685987][ T8760] netlink: 4 bytes leftover after parsing attributes in process `syz.4.588'.
[  252.615039][ T8774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.589'.
[  252.840158][ T8783] pim6reg: entered allmulticast mode
[  252.873245][ T8784] pim6reg: left allmulticast mode
[  253.081230][ T8789] netlink: 4 bytes leftover after parsing attributes in process `syz.5.591'.
[  253.106687][ T8786] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[  253.113948][ T8786] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  253.166811][ T8786] vhci_hcd vhci_hcd.0: Device attached
[  253.307622][ T8797] pim6reg: entered allmulticast mode
[  253.381007][ T8798] pim6reg: left allmulticast mode
[  253.447612][ T5785] usb 41-1: new high-speed USB device number 2 using vhci_hcd
[  254.157584][ T8790] vhci_hcd: connection reset by peer
[  254.200719][ T3436] vhci_hcd: stop threads
[  254.206457][ T3436] vhci_hcd: release socket
[  254.217661][ T3436] vhci_hcd: disconnect device
[  254.278959][ T8801] netlink: 4 bytes leftover after parsing attributes in process `syz.0.593'.
[  254.288237][ T8804] netlink: 8 bytes leftover after parsing attributes in process `syz.3.594'.
[  254.310585][ T8804] vlan2: entered allmulticast mode
[  254.315779][ T8804] bond0: entered allmulticast mode
[  254.352923][ T8804] bond_slave_0: entered allmulticast mode
[  254.393348][ T8804] bond_slave_1: entered allmulticast mode
[  254.407939][ T8806] netlink: 14 bytes leftover after parsing attributes in process `syz.3.594'.
[  254.484163][ T8806] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  254.495921][ T8806] bond_slave_0: left allmulticast mode
[  254.509309][ T8806] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  254.532108][ T8806] bond_slave_1: left allmulticast mode
[  254.541457][ T8806] bond0 (unregistering): Released all slaves
[  254.886874][ T4473] Bluetooth: hci4: Frame reassembly failed (-84)
[  254.913950][   T52] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  254.933759][   T52] Bluetooth: hci1: unexpected event 0x04 length: 12 > 10
[  254.933796][   T52] Bluetooth: unknown link type 255
[  254.948476][   T52] Bluetooth: hci1: connection err: -111
[  255.375064][ T8827] IPVS: length: 10 != 8
[  255.917983][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  255.924620][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  256.950728][   T52] Bluetooth: hci4: command 0x1003 tx timeout
[  256.958940][ T5787] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  258.646716][ T8858] pim6reg: entered allmulticast mode
[  258.718516][ T8858] pim6reg: left allmulticast mode
[  258.817925][ T8868] netlink: 668 bytes leftover after parsing attributes in process `syz.5.608'.
[  258.847707][ T8868] openvswitch: netlink: Key type 15645 is out of range max 32
[  258.885113][ T8858] netlink: 4 bytes leftover after parsing attributes in process `syz.3.607'.
[  259.207886][ T5785] vhci_hcd: vhci_device speed not set
[  262.113894][ T8921] netlink: 52 bytes leftover after parsing attributes in process `syz.3.622'.
[  263.121561][   T28] audit: type=1326 audit(1794590277.364:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8941 comm="syz.4.628" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb0c35a94d9 code=0x0
[  264.020050][ T8948] loop4: detected capacity change from 0 to 33280
[  264.069621][ T8948] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -13
[  264.089444][ T8948] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.630: inode #15: comm syz.4.630: iget: illegal inode #
[  264.115282][ T8948] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.630: couldn't read orphan inode 15 (err -117)
[  264.196722][ T8948] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  264.329457][ T6350] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  264.516054][ T8955] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  264.674313][ T8946] loop0: detected capacity change from 0 to 32768
[  264.756794][ T8946] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  264.767529][ T8946] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  264.900657][ T8946] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms
[  264.941228][  T788] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  264.969877][  T788] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  264.972339][ T8961] kvm: pic: single mode not supported
[  265.494568][  T788] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 524ms
[  265.595910][  T788] gfs2: fsid=syz:syz.0: jid=0: Done
[  265.641198][ T8968] netlink: 4 bytes leftover after parsing attributes in process `syz.5.635'.
[  265.670613][ T8946] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  266.139499][ T8972] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  266.299028][ T8946] gfs2: fsid=syz:syz.0: found 1 quota changes
[  266.348808][ T8946] loop0: detected capacity change from 32768 to 32704
[  266.382811][ T8946] gfs2: fsid=syz:syz.0: fatal: invalid metadata block
[  266.382811][ T8946]   bh = 2339 (magic number)
[  266.382811][ T8946]   function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 503
[  266.437507][ T8946] gfs2: fsid=syz:syz.0: about to withdraw this file system
[  266.497727][ T8946] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
[  266.514949][ T8982] FAULT_INJECTION: forcing a failure.
[  266.514949][ T8982] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  266.517041][ T8946] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0
[  266.530138][ T8982] CPU: 1 PID: 8982 Comm: syz.4.639 Not tainted syzkaller #0
[  266.543632][ T8982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  266.553712][ T8982] Call Trace:
[  266.557024][ T8982]  <TASK>
[  266.560013][ T8982]  dump_stack_lvl+0x18c/0x250
[  266.564715][ T8982]  ? show_regs_print_info+0x20/0x20
[  266.570020][ T8982]  ? load_image+0x420/0x420
[  266.574543][ T8982]  ? __lock_acquire+0x7eb0/0x7eb0
[  266.579582][ T8982]  ? mark_lock+0x94/0x320
[  266.583929][ T8982]  should_fail_ex+0x394/0x4c0
[  266.588630][ T8982]  prepare_alloc_pages+0x1e1/0x5b0
[  266.593762][ T8982]  __alloc_pages+0x134/0x460
[  266.598389][ T8982]  ? zone_statistics+0x170/0x170
[  266.603381][ T8982]  __folio_alloc+0x10/0x20
[  266.607816][ T8982]  vma_alloc_folio+0x474/0x8f0
[  266.612686][ T8982]  ? mpol_shared_policy_lookup+0x14b/0x1e0
[  266.618508][ T8982]  shmem_alloc_folio+0x1a9/0x2a0
[  266.623477][ T8982]  ? folio_put+0xd0/0xd0
[  266.627801][ T8982]  ? shmem_inode_acct_block+0x324/0x460
[  266.633402][ T8982]  shmem_alloc_and_acct_folio+0x1cb/0x6c0
[  266.639162][ T8982]  ? put_swap_device+0x230/0x230
[  266.644118][ T8982]  ? xas_load+0x12b/0x140
[  266.648464][ T8982]  ? filemap_get_entry+0xce/0x3f0
[  266.653587][ T8982]  ? filemap_get_entry+0xce/0x3f0
[  266.658648][ T8982]  ? filemap_get_entry+0x375/0x3f0
[  266.663774][ T8982]  ? page_cache_prev_miss+0x390/0x390
[  266.669188][ T8982]  shmem_get_folio_gfp+0xe1d/0x2b40
[  266.674443][ T8982]  shmem_fault+0x1b8/0x820
[  266.678885][ T8982]  ? zero_pipe_buf_get+0x10/0x10
[  266.683843][ T8982]  ? handle_mm_fault+0xe6/0x4a40
[  266.688796][ T8982]  ? __lock_acquire+0x7eb0/0x7eb0
[  266.693851][ T8982]  __do_fault+0x13b/0x4d0
[  266.698207][ T8982]  ? handle_mm_fault+0x3923/0x4a40
[  266.703330][ T8982]  ? handle_mm_fault+0xe6/0x4a40
[  266.708282][ T8982]  handle_mm_fault+0x393f/0x4a40
[  266.713252][ T8982]  ? handle_mm_fault+0xe6/0x4a40
[  266.718217][ T8982]  ? numa_migrate_prep+0x350/0x350
[  266.723352][ T8982]  ? follow_page_pte+0x6dd/0x1ae0
[  266.728424][ T8982]  ? pmd_lock+0x60/0x60
[  266.732629][ T8982]  __get_user_pages+0x604/0x1580
[  266.737616][ T8982]  ? populate_vma_page_range+0x380/0x380
[  266.743298][ T8982]  populate_vma_page_range+0x2c1/0x380
[  266.748781][ T8982]  ? fixup_user_fault+0x750/0x750
[  266.753836][ T8982]  ? down_read+0x1ac/0x2e0
[  266.758287][ T8982]  __mm_populate+0x260/0x390
[  266.762918][ T8982]  ? faultin_page_range+0x8a0/0x8a0
[  266.768139][ T8982]  ? up_write+0x1be/0x410
[  266.772501][ T8982]  vm_mmap_pgoff+0x2da/0x3f0
[  266.777150][ T8982]  ? account_locked_vm+0x200/0x200
[  266.782284][ T8982]  ? ksys_mmap_pgoff+0xf3/0x720
[  266.787164][ T8982]  ? syscall_user_dispatch+0x49/0x90
[  266.792467][ T8982]  ? __x64_sys_mmap+0x7a/0x130
[  266.797244][ T8982]  do_syscall_64+0x55/0xb0
[  266.801769][ T8982]  ? clear_bhb_loop+0x40/0x90
[  266.806509][ T8982]  ? clear_bhb_loop+0x40/0x90
[  266.811205][ T8982]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  266.817118][ T8982] RIP: 0033:0x7fb0c35a94d9
[  266.821546][ T8982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  266.841179][ T8982] RSP: 002b:00007fb0c4428028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  266.849608][ T8982] RAX: ffffffffffffffda RBX: 00007fb0c3825fa0 RCX: 00007fb0c35a94d9
[  266.857606][ T8982] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000
[  266.865610][ T8982] RBP: 00007fb0c363804e R08: ffffffffffffffff R09: 0000000000000000
[  266.873595][ T8982] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000
[  266.881675][ T8982] R13: 00007fb0c3826038 R14: 00007fb0c3825fa0 R15: 00007fffe2fe57c8
[  266.889690][ T8982]  </TASK>
[  267.067676][ T8946] gfs2: fsid=syz:syz.0: File system withdrawn
[  267.079309][ T8946] CPU: 1 PID: 8946 Comm: syz.0.629 Not tainted syzkaller #0
[  267.086681][ T8946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  267.096798][ T8946] Call Trace:
[  267.100127][ T8946]  <TASK>
[  267.103105][ T8946]  dump_stack_lvl+0x18c/0x250
[  267.107855][ T8946]  ? show_regs_print_info+0x20/0x20
[  267.113365][ T8946]  ? load_image+0x420/0x420
[  267.117930][ T8946]  ? kobject_uevent_env+0x368/0x890
[  267.123195][ T8946]  gfs2_withdraw+0xe16/0x1400
[  267.127978][ T8946]  ? gfs2_lm+0x240/0x240
[  267.132277][ T8946]  ? gfs2_freeze_unlock+0x60/0x60
[  267.137353][ T8946]  ? gfs2_meta_read+0x84c/0x990
[  267.142271][ T8946]  ? gfs2_meta_new+0x160/0x160
[  267.147098][ T8946]  gfs2_meta_check_ii+0x72/0x90
[  267.152017][ T8946]  gfs2_meta_buffer+0x236/0x310
[  267.156928][ T8946]  gfs2_inode_refresh+0xbf/0x11a0
[  267.162018][ T8946]  ? gfs2_inode_metasync+0xf0/0xf0
[  267.167163][ T8946]  ? gfs2_glock_nq+0xe2e/0x1440
[  267.172050][ T8946]  gfs2_instantiate+0x162/0x220
[  267.176987][ T8946]  gfs2_glock_wait+0x1d4/0x2a0
[  267.181807][ T8946]  do_sync+0x4b8/0xd90
[  267.185937][ T8946]  ? gfs2_quota_sync+0x411/0x5a0
[  267.190947][ T8946]  ? bh_get+0x760/0x760
[  267.195162][ T8946]  ? gfs2_quota_sync+0x318/0x5a0
[  267.200155][ T8946]  ? gfs2_quota_sync+0x411/0x5a0
[  267.205144][ T8946]  ? do_raw_spin_unlock+0x121/0x230
[  267.210401][ T8946]  gfs2_quota_sync+0x411/0x5a0
[  267.215231][ T8946]  gfs2_sync_fs+0x4c/0xb0
[  267.219607][ T8946]  sync_filesystem+0xea/0x220
[  267.224344][ T8946]  gfs2_reconfigure+0xb7/0xb20
[  267.229188][ T8946]  reconfigure_super+0x229/0x8e0
[  267.234183][ T8946]  path_mount+0xcfe/0xfa0
[  267.238571][ T8946]  __se_sys_mount+0x2e7/0x3d0
[  267.243305][ T8946]  ? __x64_sys_mount+0xc0/0xc0
[  267.248127][ T8946]  ? lockdep_hardirqs_on+0x98/0x150
[  267.253372][ T8946]  ? __x64_sys_mount+0x20/0xc0
[  267.258186][ T8946]  do_syscall_64+0x55/0xb0
[  267.262649][ T8946]  ? clear_bhb_loop+0x40/0x90
[  267.267388][ T8946]  ? clear_bhb_loop+0x40/0x90
[  267.272120][ T8946]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  267.278068][ T8946] RIP: 0033:0x7f6fd9ba94d9
[  267.282527][ T8946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  267.302193][ T8946] RSP: 002b:00007f6fdaa9b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  267.310705][ T8946] RAX: ffffffffffffffda RBX: 00007f6fd9e25fa0 RCX: 00007f6fd9ba94d9
[  267.318743][ T8946] RDX: 0000000000000000 RSI: 0000200000001240 RDI: 0000000000000000
[  267.326775][ T8946] RBP: 00007f6fd9c3804e R08: 0000000000000000 R09: 0000000000000000
[  267.334822][ T8946] R10: 0000000002390024 R11: 0000000000000246 R12: 0000000000000000
[  267.342849][ T8946] R13: 00007f6fd9e26038 R14: 00007f6fd9e25fa0 R15: 00007ffd39c920a8
[  267.350902][ T8946]  </TASK>
[  267.395762][ T8985] pim6reg: entered allmulticast mode
[  267.439414][ T8946] gfs2: unable to remount read-write
[  267.838690][ T8984] pim6reg: left allmulticast mode
[  267.963465][ T8984] netlink: 4 bytes leftover after parsing attributes in process `syz.5.640'.
[  269.509310][ T9008] pim6reg: entered allmulticast mode
[  269.585444][ T9009] pim6reg: left allmulticast mode
[  270.055463][ T9016] netlink: 4 bytes leftover after parsing attributes in process `syz.4.646'.
[  270.525673][ T9021] 
€Â: renamed from syzkaller0
[  270.551473][ T9021] 
€Â0: renamed from pim6reg1
[  270.579013][ T5787] Bluetooth: hci1: unexpected event 0x04 length: 12 > 10
[  270.579052][ T5787] Bluetooth: unknown link type 255
[  270.591500][ T5787] Bluetooth: hci1: connection err: -111
[  270.712770][ T9003] mmap: syz.0.642 (9003) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  270.731182][ T9028] netlink: 24 bytes leftover after parsing attributes in process `syz.5.651'.
[  270.754480][ T9028] ip_tables: iptables: counters copy to user failed while replacing table
[  271.252323][ T9034] loop5: detected capacity change from 0 to 1024
[  271.501845][ T4473] hfsplus: b-tree write err: -5, ino 25
[  271.515226][ T4473] hfsplus: b-tree write err: -5, ino 4
[  271.528604][ T4473] hfsplus: b-tree write err: -5, ino 2
[  272.345101][ T9054] pim6reg: entered allmulticast mode
[  272.421395][ T9057] pim6reg: left allmulticast mode
[  272.841607][ T9062] netlink: 4 bytes leftover after parsing attributes in process `syz.5.659'.
[  274.361686][ T9075] pim6reg: entered allmulticast mode
[  274.464501][ T9075] pim6reg: left allmulticast mode
[  274.627738][ T9082] netlink: 4 bytes leftover after parsing attributes in process `syz.0.663'.
[  275.095029][ T5787] Bluetooth: hci1: unexpected event 0x04 length: 12 > 10
[  275.095073][ T5787] Bluetooth: unknown link type 255
[  275.107952][ T5787] Bluetooth: hci1: connection err: -111
[  275.409109][ T9098] pim6reg: entered allmulticast mode
[  275.475359][ T9098] pim6reg: left allmulticast mode
[  275.694389][ T9096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.669'.
[  276.178029][ T9116] tipc: Started in network mode
[  276.183432][ T9116] tipc: Node identity 4, cluster identity 4711
[  276.190424][ T9116] tipc: Node number set to 4
[  277.525049][ T9137] pim6reg: entered allmulticast mode
[  277.609558][ T9137] pim6reg: left allmulticast mode
[  277.817149][ T9137] netlink: 4 bytes leftover after parsing attributes in process `syz.3.677'.
[  277.867686][ T9147] FAULT_INJECTION: forcing a failure.
[  277.867686][ T9147] name fail_futex, interval 1, probability 0, space 0, times 0
[  277.880649][ T9147] CPU: 1 PID: 9147 Comm: syz.5.679 Not tainted syzkaller #0
[  277.888041][ T9147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  277.898241][ T9147] Call Trace:
[  277.901597][ T9147]  <TASK>
[  277.904569][ T9147]  dump_stack_lvl+0x18c/0x250
[  277.909306][ T9147]  ? __se_sys_futex+0x3a9/0x440
[  277.914174][ T9147]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  277.920271][ T9147]  ? show_regs_print_info+0x20/0x20
[  277.925493][ T9147]  ? load_image+0x420/0x420
[  277.930029][ T9147]  should_fail_ex+0x394/0x4c0
[  277.934727][ T9147]  get_futex_key+0x16a/0xf40
[  277.939335][ T9147]  ? futex_setup_timer+0xc0/0xc0
[  277.944295][ T9147]  futex_lock_pi+0x1e3/0xa00
[  277.948909][ T9147]  ? futex_wait_queue+0x138/0x1b0
[  277.953948][ T9147]  ? fixup_pi_state_owner+0x5f0/0x5f0
[  277.959363][ T9147]  ? file_end_write+0x159/0x250
[  277.964237][ T9147]  ? vfs_write+0x5de/0x9a0
[  277.968676][ T9147]  do_futex+0x23d/0x3e0
[  277.972937][ T9147]  ? __ia32_sys_get_robust_list+0x110/0x110
[  277.978873][ T9147]  __se_sys_futex+0x3a9/0x440
[  277.983588][ T9147]  ? __x64_sys_futex+0xf0/0xf0
[  277.988371][ T9147]  ? __x64_sys_futex+0x21/0xf0
[  277.993155][ T9147]  do_syscall_64+0x55/0xb0
[  277.997691][ T9147]  ? clear_bhb_loop+0x40/0x90
[  278.002401][ T9147]  ? clear_bhb_loop+0x40/0x90
[  278.007097][ T9147]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  278.013036][ T9147] RIP: 0033:0x7f83c77a94d9
[  278.017477][ T9147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  278.037129][ T9147] RSP: 002b:00007f83c8590028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  278.045557][ T9147] RAX: ffffffffffffffda RBX: 00007f83c7a25fa0 RCX: 00007f83c77a94d9
[  278.053561][ T9147] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000000
[  278.061633][ T9147] RBP: 00007f83c783804e R08: 0000000000000000 R09: 0000000000000001
[  278.069616][ T9147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  278.077604][ T9147] R13: 00007f83c7a26038 R14: 00007f83c7a25fa0 R15: 00007ffc188d09c8
[  278.085639][ T9147]  </TASK>
[  278.378669][ T9150] pim6reg: entered allmulticast mode
[  278.644091][ T9158] pim6reg: left allmulticast mode
[  278.852422][ T9163] pim6reg: entered allmulticast mode
[  278.884021][ T9166] loop4: detected capacity change from 0 to 33792
[  278.893599][ T9166] EXT4-fs: Ignoring removed mblk_io_submit option
[  278.932023][ T9158] netlink: 4 bytes leftover after parsing attributes in process `syz.5.680'.
[  278.943049][ T9166] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  278.967948][ T9166] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  278.994464][ T9163] pim6reg: left allmulticast mode
[  278.996001][ T9166] EXT4-fs error (device loop4): ext4_ext_check_inode:532: inode #11: comm syz.4.684: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  279.027942][ T9166] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.684: couldn't read orphan inode 11 (err -117)
[  279.104924][ T9166] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  279.214100][ T9166] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:478: comm syz.4.684: Invalid block bitmap block 0 in block_group 0
[  279.259809][ T9174] netlink: 4 bytes leftover after parsing attributes in process `syz.0.683'.
[  279.277095][ T9166] Quota error (device loop4): write_blk: dquota write failed
[  279.295434][ T9166] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  279.371233][ T9166] EXT4-fs error (device loop4): ext4_acquire_dquot:6958: comm syz.4.684: Failed to acquire dquot type 0
[  279.420827][ T9175] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.684: Invalid inode bitmap blk 137438953472 in block_group 0
[  279.600417][ T3436] EXT4-fs error (device loop4): __ext4_get_inode_loc:4509: comm kworker/u4:8: Invalid inode table block 8589934593 in block_group 0
[  279.646565][ T6350] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  279.656761][ T9181] syzkaller0: entered promiscuous mode
[  279.707491][ T9181] syzkaller0: entered allmulticast mode
[  279.838252][ T9184] loop4: detected capacity change from 0 to 33280
[  279.913558][ T8939] I/O error, dev loop4, sector 33152 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  280.043908][ T9186] syzkaller0: entered promiscuous mode
[  280.074042][ T9186] syzkaller0: entered allmulticast mode
[  280.667155][ T9196] syzkaller0: entered promiscuous mode
[  280.681473][ T9196] syzkaller0: entered allmulticast mode
[  280.711257][ T9196] tipc: Started in network mode
[  280.735953][ T9196] tipc: Node identity fe27d27029f, cluster identity 4711
[  280.748502][ T9196] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  280.775806][ T9197] pim6reg: entered allmulticast mode
[  280.784935][ T9195] tipc: Resetting bearer <eth:syzkaller0>
[  280.831246][ T9195] tipc: Disabling bearer <eth:syzkaller0>
[  280.890585][ T9194] pim6reg: left allmulticast mode
[  281.065778][ T9194] netlink: 4 bytes leftover after parsing attributes in process `syz.4.691'.
[  282.540759][ T9207] sched: RT throttling activated
[  283.349992][   T28] audit: type=1800 audit(1794590297.624:287): pid=9217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.697" name="file2" dev="sda1" ino=2048 res=0 errno=0
[  283.462619][ T9223] pim6reg: entered allmulticast mode
[  283.644419][ T9224] pim6reg: entered allmulticast mode
[  283.716793][ T9214] pim6reg: left allmulticast mode
[  283.843024][ T9224] pim6reg: left allmulticast mode
[  283.868416][ T9229] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  283.957661][ T9214] netlink: 4 bytes leftover after parsing attributes in process `syz.5.695'.
[  283.995321][ T9234] netlink: 4 bytes leftover after parsing attributes in process `syz.4.698'.
[  285.110638][ T9245] loop4: detected capacity change from 0 to 32768
[  285.935020][ T9245] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  286.007599][ T9245] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  286.016504][ T9245] BTRFS info (device loop4): setting nodatasum
[  286.028363][ T9245] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  286.059089][ T9245] BTRFS info (device loop4): use zstd compression, level 3
[  286.066400][ T9245] BTRFS info (device loop4): use zlib compression, level 3
[  286.107540][ T9245] BTRFS info (device loop4): turning on flush-on-commit
[  286.128177][ T9245] BTRFS info (device loop4): max_inline at 4096
[  286.134531][ T9245] BTRFS info (device loop4): using free space tree
[  286.196717][ T9262] netlink: 8 bytes leftover after parsing attributes in process `syz.3.708'.
[  286.392561][ T9245] BTRFS info (device loop4): enabling ssd optimizations
[  286.629174][ T9286] syzkaller0: entered promiscuous mode
[  286.634748][ T9286] syzkaller0: entered allmulticast mode
[  288.516351][ T6350] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  288.611454][ T9306] pim6reg: entered allmulticast mode
[  288.623799][ T9310] pim6reg: left allmulticast mode
[  291.708731][ T9315] netlink: 4 bytes leftover after parsing attributes in process `syz.0.712'.
[  293.756687][ T9371] loop4: detected capacity change from 0 to 128
[  294.071446][ T9371] syz.4.721: attempt to access beyond end of device
[  294.071446][ T9371] loop4: rw=2049, sector=193, nr_sectors = 1 limit=128
[  294.261911][ T4473] kworker/u4:9: attempt to access beyond end of device
[  294.261911][ T4473] loop4: rw=1, sector=145, nr_sectors = 40 limit=128
[  294.530903][ T9380] loop4: detected capacity change from 0 to 256
[  294.631359][ T9380] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  295.594168][ T9386] FAULT_INJECTION: forcing a failure.
[  295.594168][ T9386] name failslab, interval 1, probability 0, space 0, times 0
[  295.648022][ T9386] CPU: 1 PID: 9386 Comm: syz.3.724 Not tainted syzkaller #0
[  295.655405][ T9386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  295.665539][ T9386] Call Trace:
[  295.668869][ T9386]  <TASK>
[  295.671844][ T9386]  dump_stack_lvl+0x18c/0x250
[  295.676591][ T9386]  ? show_regs_print_info+0x20/0x20
[  295.681856][ T9386]  ? load_image+0x420/0x420
[  295.686421][ T9386]  ? __might_sleep+0xe0/0xe0
[  295.691075][ T9386]  ? __lock_acquire+0x7eb0/0x7eb0
[  295.696190][ T9386]  should_fail_ex+0x394/0x4c0
[  295.700939][ T9386]  should_failslab+0x9/0x20
[  295.705502][ T9386]  slab_pre_alloc_hook+0x59/0x300
[  295.710604][ T9386]  kmem_cache_alloc+0x5a/0x2d0
[  295.715423][ T9386]  ? security_inode_alloc+0x34/0x110
[  295.720783][ T9386]  security_inode_alloc+0x34/0x110
[  295.725952][ T9386]  inode_init_always+0x914/0xc90
[  295.730950][ T9386]  new_inode_pseudo+0x95/0x1d0
[  295.735780][ T9386]  new_inode+0x22/0x1d0
[  295.740001][ T9386]  ovl_new_inode+0x1c/0x50
[  295.744491][ T9386]  ovl_create_object+0xfd/0x2a0
[  295.749414][ T9386]  ? apparmor_path_mkdir+0x1b0/0x230
[  295.754763][ T9386]  ? ovl_get_acl+0x50/0x50
[  295.759240][ T9386]  ? HAS_UNMAPPED_ID+0x101/0x170
[  295.764231][ T9386]  ? ovl_getattr+0x1060/0x1060
[  295.769070][ T9386]  ? inode_permission+0xf3/0x480
[  295.774057][ T9386]  ? bpf_lsm_inode_mkdir+0x9/0x10
[  295.779128][ T9386]  ? security_inode_mkdir+0xb7/0x100
[  295.784497][ T9386]  vfs_mkdir+0x2a5/0x470
[  295.788825][ T9386]  do_mkdirat+0x1dc/0x450
[  295.793239][ T9386]  ? vfs_mkdir+0x470/0x470
[  295.797718][ T9386]  __x64_sys_mkdirat+0x89/0xa0
[  295.802539][ T9386]  do_syscall_64+0x55/0xb0
[  295.807055][ T9386]  ? clear_bhb_loop+0x40/0x90
[  295.811795][ T9386]  ? clear_bhb_loop+0x40/0x90
[  295.816536][ T9386]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  295.822490][ T9386] RIP: 0033:0x7f86c97a94d9
[  295.826965][ T9386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  295.846630][ T9386] RSP: 002b:00007f86ca63e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  295.855127][ T9386] RAX: ffffffffffffffda RBX: 00007f86c9a25fa0 RCX: 00007f86c97a94d9
[  295.863135][ T9386] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c
[  295.871173][ T9386] RBP: 00007f86c983804e R08: 0000000000000000 R09: 0000000000000000
[  295.879196][ T9386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  295.887220][ T9386] R13: 00007f86c9a26038 R14: 00007f86c9a25fa0 R15: 00007ffdf119ae88
[  295.895283][ T9386]  </TASK>
[  296.046485][ T9393] loop4: detected capacity change from 0 to 8
[  296.209857][ T9393] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  296.312307][ T9400] kvm: Disabled LAPIC found during irq injection
[  297.827125][ T9424] pim6reg: entered allmulticast mode
[  298.161066][ T9423] syzkaller0: entered promiscuous mode
[  298.870729][ T9423] syzkaller0: entered allmulticast mode
[  298.902958][ T9424] pim6reg: left allmulticast mode
[  299.031499][ T9427] pim6reg: entered allmulticast mode
[  299.037011][ T9430] pim6reg: left allmulticast mode
[  299.110839][ T9433] netlink: 4 bytes leftover after parsing attributes in process `syz.5.736'.
[  299.157503][ T8346] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  299.191751][ T9440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.734'.
[  299.350827][ T8346] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  299.366962][ T8346] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  299.393055][ T8346] usb 5-1: config 1 has no interface number 0
[  299.411515][ T8346] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  299.599034][ T8346] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  299.608509][ T8346] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  299.624485][ T8346] usb 5-1: Product: syz
[  299.628902][ T8346] usb 5-1: Manufacturer: syz
[  299.633513][ T8346] usb 5-1: SerialNumber: syz
[  300.492788][ T9457] syzkaller0: entered promiscuous mode
[  300.502302][ T9457] syzkaller0: entered allmulticast mode
[  300.844992][ T9468] netlink: 4 bytes leftover after parsing attributes in process `syz.5.745'.
[  300.868967][ T9467] syzkaller0: entered promiscuous mode
[  300.882586][ T9467] syzkaller0: entered allmulticast mode
[  302.856600][ T8346] usb 5-1: USB disconnect, device number 6
[  303.313903][ T9480] pim6reg: entered allmulticast mode
[  303.406228][ T9479] pim6reg: left allmulticast mode
[  305.163584][ T9483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.748'.
[  305.202151][ T9485] pim6reg: entered allmulticast mode
[  305.224494][ T9491] pim6reg: left allmulticast mode
[  305.388329][ T9501] netlink: 4 bytes leftover after parsing attributes in process `syz.3.749'.
[  305.492542][ T5864] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  305.717642][ T5864] usb 5-1: Using ep0 maxpacket: 8
[  305.747781][ T5864] usb 5-1: unable to get BOS descriptor or descriptor too short
[  305.765124][ T5864] usb 5-1: config 1 has an invalid interface descriptor of length 5, skipping
[  305.837627][ T5864] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  305.881147][ T5864] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  305.928597][ T5864] usb 5-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping
[  306.030398][ T5864] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[  306.113619][ T5864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  306.257467][ T5864] usb 5-1: Product: syz
[  306.293991][ T5864] usb 5-1: Manufacturer: syz
[  306.311030][ T5864] usb 5-1: SerialNumber: syz
[  307.117636][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  308.442039][ T8346] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  308.475415][ T9526] pim6reg: entered allmulticast mode
[  308.498554][ T5864] usb 5-1: unit 0 not found!
[  308.619016][ T9513] pim6reg: left allmulticast mode
[  308.672908][ T5864] usb 5-1: USB disconnect, device number 7
[  308.682521][ T8346] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  308.718301][ T8346] usb 6-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 1.00
[  308.737760][ T8346] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  308.893070][ T9366] udevd[9366]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  308.964489][ T9532] netlink: 4 bytes leftover after parsing attributes in process `syz.0.752'.
[  309.313415][ T9540] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3343437945 (53495007120 ns) > initial count (52285443328 ns). Using initial count to start timer.
[  310.094545][ T8346] usb 6-1: USB disconnect, device number 9
[  311.804173][ T9556] pim6reg: entered allmulticast mode
[  311.897556][ T9555] pim6reg: left allmulticast mode
[  314.425660][ T9559] netlink: 4 bytes leftover after parsing attributes in process `syz.4.760'.
[  314.708934][ T9576] syzkaller0: entered promiscuous mode
[  314.761712][ T9576] syzkaller0: entered allmulticast mode
[  315.023674][ T9586] syz_tun: entered allmulticast mode
[  315.054239][ T9586] bond0: (slave syz_tun): Releasing backup interface
[  315.086950][ T9586] syz_tun (unregistering): left allmulticast mode
[  315.137543][ T5773] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  315.387558][ T5773] usb 5-1: Using ep0 maxpacket: 16
[  315.394858][ T5773] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  315.408846][ T5773] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  315.430898][ T5773] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  315.441048][ T5773] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  315.450391][ T5773] usb 5-1: Product: syz
[  315.457670][ T5773] usb 5-1: Manufacturer: syz
[  315.462380][ T5773] usb 5-1: SerialNumber: syz
[  315.690038][ T5773] usb 5-1: 0:2 : does not exist
[  315.820211][ T5773] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  316.804875][ T5773] usb 5-1: USB disconnect, device number 8
[  317.175275][ T9593] udevd[9593]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  317.363429][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  317.370015][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  317.392157][ T9598] pim6reg: entered allmulticast mode
[  317.567887][ T9587] pim6reg: left allmulticast mode
[  317.704203][ T9587] netlink: 4 bytes leftover after parsing attributes in process `syz.0.767'.
[  318.632286][ T9612] pim6reg: entered allmulticast mode
[  318.705697][ T9613] pim6reg: left allmulticast mode
[  320.792784][ T9617] netlink: 4 bytes leftover after parsing attributes in process `syz.4.775'.
[  320.951235][ T9637] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  320.960235][ T9637] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  322.252720][ T9633] loop0: detected capacity change from 0 to 32768
[  322.325800][ T9633] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.778 (9633)
[  322.386253][ T9633] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  322.458371][ T9633] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  322.511190][ T9633] BTRFS info (device loop0): setting nodatacow, compression disabled
[  322.537561][ T9633] BTRFS info (device loop0): disabling tree log
[  322.544875][ T9633] BTRFS info (device loop0): turning on async discard
[  322.552797][ T9633] BTRFS info (device loop0): max_inline at 0
[  322.559068][ T9633] BTRFS info (device loop0): using free space tree
[  322.952407][ T9673] pim6reg: entered allmulticast mode
[  322.998386][   T28] audit: type=1800 audit(1794590337.264:288): pid=9633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.778" name="file1" dev="loop0" ino=260 res=0 errno=0
[  323.120127][ T9673] pim6reg: left allmulticast mode
[  323.512411][ T9684] netlink: 4 bytes leftover after parsing attributes in process `syz.5.783'.
[  324.159556][ T5793] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  324.170550][ T9693] syzkaller0: entered promiscuous mode
[  324.176574][ T9693] syzkaller0: entered allmulticast mode
[  324.492107][ T9702] netlink: 120 bytes leftover after parsing attributes in process `syz.5.789'.
[  324.711995][ T9705] loop4: detected capacity change from 0 to 2048
[  324.768590][ T9705]  loop4: p1 < > p4
[  324.768590][ T9705]  p4: <netbsd: >
[  324.808066][ T9705] loop4: p4 size 722688 extends beyond EOD, truncated
[  325.315740][ T9713] pim6reg: entered allmulticast mode
[  325.417201][ T9712] pim6reg: left allmulticast mode
[  328.097506][ T9719] netlink: 4 bytes leftover after parsing attributes in process `syz.3.791'.
[  328.563698][ T9730] loop3: detected capacity change from 0 to 16
[  328.604501][ T9730] erofs: (device loop3): mounted with root inode @ nid 36.
[  328.645755][ T9730] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  329.703686][ T9733] loop4: detected capacity change from 0 to 2048
[  329.731537][ T9733] UDF-fs: bad mount option "ÿÿÿÿÿÿ" or missing value
[  329.807248][ T9734] pim6reg: entered allmulticast mode
[  330.028948][ T9729] pim6reg: left allmulticast mode
[  332.494438][ T9742] netlink: 4 bytes leftover after parsing attributes in process `syz.0.796'.
[  334.557588][   T28] audit: type=1800 audit(1794590348.824:289): pid=9749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.799" name="nexus" dev="configfs" ino=24168 res=0 errno=0
[  334.717816][ T9754] syzkaller0: entered promiscuous mode
[  334.727693][ T9754] syzkaller0: entered allmulticast mode
[  335.003808][ T9758] loop4: detected capacity change from 0 to 33792
[  335.058751][ T9758] EXT4-fs: Invalid uid value -1
[  335.166710][ T9650] I/O error, dev loop4, sector 33664 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  335.586746][ T9762] pim6reg: entered allmulticast mode
[  335.685438][ T9761] pim6reg: left allmulticast mode
[  336.525211][ T9766] netlink: 4 bytes leftover after parsing attributes in process `syz.0.804'.
[  336.610304][ T9770] loop4: detected capacity change from 0 to 33280
[  336.721709][ T9770] EXT4-fs (loop4): filesystem is read-only
[  336.730195][ T9770] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  336.771195][ T9773] syzkaller0: entered promiscuous mode
[  336.776758][ T9773] syzkaller0: entered allmulticast mode
[  336.782597][ T9770] EXT4-fs (loop4): can't mount with data_err=abort, fs mounted w/o journal
[  337.281803][ T9778] cramfs: checking physical address 0x0000000140faa000 for linear cramfs image
[  337.291702][ T9778] mtd0: Can't lookup blockdev
[  341.441710][ T9793] netlink: 16 bytes leftover after parsing attributes in process `syz.5.807'.
[  348.567192][   T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  348.598080][   T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  348.625056][   T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  348.653823][   T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  348.662282][   T52] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  348.681375][   T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  351.564175][ T5787] Bluetooth: hci4: command tx timeout
[  351.895853][ T9795] pim6reg: entered allmulticast mode
[  351.922866][ T9790] pim6reg: left allmulticast mode
[  352.073338][ T9798] netlink: 4 bytes leftover after parsing attributes in process `syz.4.810'.
[  352.233858][ T9831] rxe_eth0 speed is unknown, defaulting to 1000
[  353.842038][ T5787] Bluetooth: hci4: command tx timeout
[  356.660508][ T5787] Bluetooth: hci4: command tx timeout
[  356.662108][ T5796] Bluetooth: hci1: command 0x0406 tx timeout
[  357.666924][ T9831] chnl_net:caif_netlink_parms(): no params data found
[  358.712504][   T52] Bluetooth: hci4: command tx timeout
[  358.817548][ T9831] bridge0: port 1(bridge_slave_0) entered blocking state
[  358.843105][ T9831] bridge0: port 1(bridge_slave_0) entered disabled state
[  358.933336][ T9831] bridge_slave_0: entered allmulticast mode
[  358.941532][ T9831] bridge_slave_0: entered promiscuous mode
[  358.960445][ T9831] bridge0: port 2(bridge_slave_1) entered blocking state
[  358.972142][ T9831] bridge0: port 2(bridge_slave_1) entered disabled state
[  358.986252][ T9831] bridge_slave_1: entered allmulticast mode
[  359.001267][ T9831] bridge_slave_1: entered promiscuous mode
[  359.030563][ T9881] pim6reg: entered allmulticast mode
[  359.064943][ T9831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  359.083932][ T9883] pim6reg: left allmulticast mode
[  359.299971][ T9831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  359.464217][ T9883] netlink: 4 bytes leftover after parsing attributes in process `syz.4.827'.
[  359.594733][ T9831] team0: Port device team_slave_0 added
[  359.752727][ T9831] team0: Port device team_slave_1 added
[  359.842696][ T9890] pim6reg: entered allmulticast mode
[  359.857217][ T9885] pim6reg: left allmulticast mode
[  360.035381][ T9897] device-mapper: table: 248:4: linear: Device lookup failed (-ENOENT)
[  360.056245][ T9897] device-mapper: ioctl: error adding target to table
[  360.126950][ T9831] batman_adv: batadv0: Adding interface: batadv_slave_0
[  360.160821][ T9831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  360.195360][ T9831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  360.213986][ T9898] netlink: 4 bytes leftover after parsing attributes in process `syz.0.828'.
[  360.233644][   T12] tipc: Left network mode
[  360.235331][ T9831] batman_adv: batadv0: Adding interface: batadv_slave_1
[  360.252775][ T9831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  360.320934][ T9831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  361.957477][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  362.391421][ T9831] hsr_slave_0: entered promiscuous mode
[  362.418078][ T9831] hsr_slave_1: entered promiscuous mode
[  362.493421][ T9831] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  362.521519][ T9831] Cannot create hsr debugfs directory
[  364.010120][ T9939] pim6reg: entered allmulticast mode
[  364.169913][ T9939] pim6reg: left allmulticast mode
[  364.384169][ T9939] netlink: 4 bytes leftover after parsing attributes in process `syz.5.836'.
[  364.434925][ T9950] syzkaller0: entered promiscuous mode
[  364.443410][ T9950] syzkaller0: entered allmulticast mode
[  364.628646][ T9955] loop0: detected capacity change from 0 to 256
[  367.077565][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  367.915034][ T9973] netlink: 4 bytes leftover after parsing attributes in process `syz.0.838'.
[  368.219480][ T9969] pim6reg: entered allmulticast mode
[  368.246554][ T9970] pim6reg: left allmulticast mode
[  368.420131][ T9831] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  368.443029][ T9831] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  368.480354][ T9831] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  368.566884][ T9831] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  371.651860][ T9831] 8021q: adding VLAN 0 to HW filter on device bond0
[  371.714906][ T9831] 8021q: adding VLAN 0 to HW filter on device team0
[  371.833416][   T34] bridge0: port 1(bridge_slave_0) entered blocking state
[  371.840685][   T34] bridge0: port 1(bridge_slave_0) entered forwarding state
[  371.909574][ T1018] bridge0: port 2(bridge_slave_1) entered blocking state
[  371.916788][ T1018] bridge0: port 2(bridge_slave_1) entered forwarding state
[  372.131050][T10009] ip_tables: iptables: counters copy to user failed while replacing table
[  372.169588][ T9831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  373.428883][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  373.465602][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  373.497950][   T12] bridge_slave_1: left allmulticast mode
[  373.560006][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  373.611309][   T12] bridge_slave_0: left allmulticast mode
[  373.617267][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  374.234515][   T52] block nbd4: Receive control failed (result -32)
[  374.235315][T10025] block nbd4: shutting down sockets
[  376.617094][   T12] team0 (unregistering): Port device team_slave_1 removed
[  376.691260][   T12] team0 (unregistering): Port device team_slave_0 removed
[  377.992003][T10016] pim6reg: entered allmulticast mode
[  377.998093][T10018] pim6reg: left allmulticast mode
[  378.044715][T10022] netlink: 4 bytes leftover after parsing attributes in process `syz.5.847'.
[  378.139296][T10058] pim6reg: entered allmulticast mode
[  378.200678][T10059] pim6reg: left allmulticast mode
[  378.439249][T10063] netlink: 4 bytes leftover after parsing attributes in process `syz.4.850'.
[  378.543923][ T9831] 8021q: adding VLAN 0 to HW filter on device batadv0
[  378.809192][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  378.817497][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  380.960635][T10083] device-mapper: table: 248:4: linear: Device lookup failed (-ENOENT)
[  380.970265][T10083] device-mapper: ioctl: error adding target to table
[  381.112147][T10096] netlink: 'syz.4.854': attribute type 1 has an invalid length.
[  381.282004][T10096] bond1: (slave bridge1): Enslaving as a backup interface with an up link
[  381.425398][T10096] macvlan2: entered promiscuous mode
[  381.430934][T10096] macvlan2: entered allmulticast mode
[  381.438137][T10096] bond1: entered promiscuous mode
[  381.446699][T10096] bridge1: entered promiscuous mode
[  381.458220][T10096] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  381.475695][T10096] bond1: left promiscuous mode
[  381.484105][T10096] bridge1: left promiscuous mode
[  381.614105][ T9831] veth0_vlan: entered promiscuous mode
[  381.669649][ T9831] veth1_vlan: entered promiscuous mode
[  382.315703][ T9831] veth0_macvtap: entered promiscuous mode
[  382.355480][ T9831] veth1_macvtap: entered promiscuous mode
[  382.696048][ T9831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  382.774424][ T9831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  382.800751][ T9831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  382.811939][ T9831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  382.824066][ T9831] batman_adv: batadv0: Interface activated: batadv_slave_0
[  382.838978][ T9831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  382.849955][ T9831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  382.859972][ T9831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  382.870500][ T9831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  382.881973][ T9831] batman_adv: batadv0: Interface activated: batadv_slave_1
[  383.541035][ T9831] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  383.607491][ T9831] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  383.647454][ T9831] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  383.694668][ T9831] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  383.748077][T10125] loop0: detected capacity change from 0 to 16
[  383.781155][T10125] erofs: (device loop0): mounted with root inode @ nid 36.
[  384.080895][ T1125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  384.116774][ T1125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  384.242548][ T4473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  384.261600][ T4473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  384.334866][T10137] loop0: detected capacity change from 0 to 33792
[  384.458029][T10137] Quota error (device loop0): do_check_range: Getting block 64 out of range 1-5
[  384.467247][T10137] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0
[  384.476837][T10137] EXT4-fs error (device loop0): ext4_acquire_dquot:6958: comm syz.0.861: Failed to acquire dquot type 0
[  384.502384][T10137] EXT4-fs error (device loop0): mb_free_blocks:1970: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt.
[  384.523782][T10137] EXT4-fs (loop0): 1 truncate cleaned up
[  384.530888][T10137] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  385.134848][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  385.219030][T10145] pim6reg: entered allmulticast mode
[  385.387508][T10145] pim6reg: left allmulticast mode
[  385.535601][T10148] loop0: detected capacity change from 0 to 16
[  385.545881][T10148] erofs: (device loop0): mounted with root inode @ nid 36.
[  385.677769][T10151] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535
[  385.688411][T10151] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535
[  385.698542][T10151] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 67108936 of nid 36
[  385.719160][T10151] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535
[  385.729983][T10151] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535
[  385.740067][T10151] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 67108936 of nid 36
[  392.255492][T10158] pim6reg: entered allmulticast mode
[  392.277900][T10159] pim6reg: left allmulticast mode
[  392.527428][T10161] netlink: 4 bytes leftover after parsing attributes in process `syz.5.856'.
[  397.797816][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  398.207445][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  398.424562][T10212] loop4: detected capacity change from 0 to 128
[  398.462667][T10212] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  398.575342][T10212] FAT-fs (loop4): error, corrupted file size (i_pos 548, 512)
[  398.628891][T10212] FAT-fs (loop4): Filesystem has been set read-only
[  398.818545][ T6350] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  399.109799][T10226] netlink: 16 bytes leftover after parsing attributes in process `syz.4.871'.
[  401.241135][T10234] device-mapper: table: 248:5: cache: Device size larger than cached device (-EINVAL)
[  401.259387][T10234] device-mapper: ioctl: error adding target to table
[  402.917755][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  406.345710][T10280] syz_tun: entered allmulticast mode
[  406.382382][T10281] pim6reg: entered allmulticast mode
[  407.426118][T10280] syz_tun (unregistering): left allmulticast mode
[  407.462990][T10281] pim6reg: left allmulticast mode
[  407.637907][T10287] syzkaller0: entered promiscuous mode
[  407.643478][T10287] syzkaller0: entered allmulticast mode
[  408.129529][T10306] netlink: 4 bytes leftover after parsing attributes in process `syz.5.881'.
[  408.740529][T10316] loop0: detected capacity change from 0 to 1024
[  408.758647][T10314] loop4: detected capacity change from 0 to 36864
[  408.868229][T10314] EXT4-fs (loop4): Test dummy encryption mode enabled
[  408.876491][T10323] pim6reg: entered allmulticast mode
[  408.959596][T10323] pim6reg: left allmulticast mode
[  408.966502][T10314] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  409.244622][T10333] netlink: 4 bytes leftover after parsing attributes in process `syz.5.895'.
[  409.263910][T10314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  410.945744][T10374] loop5: detected capacity change from 0 to 33792
[  410.948060][ T5796] Bluetooth: hci3: command 0x0406 tx timeout
[  410.974368][T10374] Quota error (device loop5): do_check_range: Getting block 64 out of range 1-5
[  410.983786][T10374] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0
[  410.993560][T10374] EXT4-fs error (device loop5): ext4_acquire_dquot:6958: comm syz.5.896: Failed to acquire dquot type 0
[  411.016448][T10374] EXT4-fs error (device loop5): mb_free_blocks:1970: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt.
[  411.041163][T10374] EXT4-fs (loop5): 1 truncate cleaned up
[  411.048412][T10374] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  411.419467][T10386] kvm: apic: phys broadcast and lowest prio
[  411.729599][ T6413] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  411.982133][T10394] pim6reg: entered allmulticast mode
[  412.071435][T10394] pim6reg: left allmulticast mode
[  412.246053][T10403] fuse: Bad value for 'fd'
[  412.299906][T10394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.901'.
[  412.659607][T10411] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  413.029172][   T52] Bluetooth: hci3: command 0x0406 tx timeout
[  413.314545][   T52] Bluetooth: hci4: unexpected event 0x04 length: 12 > 10
[  413.461476][T10434] pim6reg: entered allmulticast mode
[  413.550114][T10434] pim6reg: left allmulticast mode
[  413.673573][T10434] netlink: 4 bytes leftover after parsing attributes in process `syz.4.908'.
[  415.536099][   T52] Bluetooth: hci4: command tx timeout
[  415.825548][T10439] kvm: apic: phys broadcast and lowest prio
[  416.772359][T10467] loop0: detected capacity change from 0 to 256
[  418.415735][T10470] pim6reg: entered allmulticast mode
[  418.540295][T10469] pim6reg: entered allmulticast mode
[  418.584825][T10467] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  418.687731][T10460] pim6reg: left allmulticast mode
[  419.075276][T10469] pim6reg: left allmulticast mode
[  419.211289][T10481] netlink: 4 bytes leftover after parsing attributes in process `syz.4.914'.
[  419.243449][T10485] netlink: 4 bytes leftover after parsing attributes in process `syz.5.920'.
[  419.943552][T10504] lo: entered promiscuous mode
[  420.085043][   T52] Bluetooth: hci3: unexpected event 0x04 length: 12 > 10
[  420.190437][T10504] tunl0: entered promiscuous mode
[  420.236310][T10504] gre0: entered promiscuous mode
[  420.395771][T10504] gretap0: entered promiscuous mode
[  420.438294][T10504] erspan0: entered promiscuous mode
[  420.677891][T10504] ip_vti0: entered promiscuous mode
[  421.030698][T10504] ip6_vti0: entered promiscuous mode
[  421.483993][T10504] sit0: entered promiscuous mode
[  421.534479][T10504] ip6tnl0: entered promiscuous mode
[  421.570835][T10504] ip6gre0: entered promiscuous mode
[  421.602976][T10504] syz_tun: entered promiscuous mode
[  421.622151][T10504] ip6gretap0: entered promiscuous mode
[  421.660064][T10504] bridge0: port 2(bridge_slave_1) entered disabled state
[  421.668107][T10504] bridge0: port 1(bridge_slave_0) entered disabled state
[  421.676471][T10504] bridge0: entered promiscuous mode
[  421.705099][T10504] vcan0: entered promiscuous mode
[  421.719852][T10504] bond0: entered promiscuous mode
[  421.725004][T10504] bond_slave_0: entered promiscuous mode
[  421.731088][T10504] bond_slave_1: entered promiscuous mode
[  421.760723][T10504] team0: entered promiscuous mode
[  421.765848][T10504] team_slave_0: entered promiscuous mode
[  421.772068][T10504] team_slave_1: entered promiscuous mode
[  421.801652][T10504] dummy0: entered promiscuous mode
[  421.828374][T10504] nlmon0: entered promiscuous mode
[  421.836347][T10504] caif0: entered promiscuous mode
[  421.845841][T10504] batadv0: entered promiscuous mode
[  421.863186][T10504] vxcan0: entered promiscuous mode
[  421.883455][T10504] vxcan1: entered promiscuous mode
[  421.892803][T10504] veth0: entered promiscuous mode
[  421.933363][T10504] veth1: entered promiscuous mode
[  421.960466][T10504] wg0: entered promiscuous mode
[  421.982083][T10504] wg1: entered promiscuous mode
[  422.002887][T10504] wg2: entered promiscuous mode
[  422.017203][T10504] veth0_to_bridge: entered promiscuous mode
[  422.047173][T10504] veth1_to_bridge: entered promiscuous mode
[  422.076840][T10504] veth0_to_bond: entered promiscuous mode
[  422.141142][T10504] veth1_to_bond: entered promiscuous mode
[  422.147728][   T52] Bluetooth: hci3: command 0x0406 tx timeout
[  422.182970][T10504] veth0_to_team: entered promiscuous mode
[  422.225681][T10504] veth1_to_team: entered promiscuous mode
[  422.266776][T10504] veth0_to_batadv: entered promiscuous mode
[  422.280649][T10504] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  422.303556][T10504] batadv_slave_0: entered promiscuous mode
[  422.318593][T10504] veth1_to_batadv: entered promiscuous mode
[  422.337178][T10504] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  422.350077][T10504] batadv_slave_1: entered promiscuous mode
[  422.386975][T10504] xfrm0: entered promiscuous mode
[  422.417746][T10504] veth0_to_hsr: entered promiscuous mode
[  422.460542][T10504] hsr0: entered promiscuous mode
[  422.486441][T10504] veth1_virt_wifi: entered promiscuous mode
[  422.515737][T10504] veth0_virt_wifi: entered promiscuous mode
[  422.532814][T10504] virt_wifi0: entered promiscuous mode
[  422.613411][T10504] vlan0: entered promiscuous mode
[  422.619686][T10504] vlan1: entered promiscuous mode
[  422.626287][T10504] macvlan0: entered promiscuous mode
[  422.654813][T10504] macvlan1: entered promiscuous mode
[  422.671404][T10504] ipvtap0: entered promiscuous mode
[  422.694170][T10504] ipvlan0: entered promiscuous mode
[  422.718989][T10504] ipvlan1: entered promiscuous mode
[  422.833028][T10504] macvtap0: entered promiscuous mode
[  422.863303][T10504] macsec0: entered promiscuous mode
[  422.902843][T10504] geneve0: entered promiscuous mode
[  422.945760][T10504] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  422.954924][T10504] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  422.964528][T10504] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  422.973591][T10504] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  422.982821][T10504] geneve1: entered promiscuous mode
[  423.011024][T10504] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  423.034708][T10504] netdevsim netdevsim4 netdevsim1: entered promiscuous mode
[  423.057867][T10504] netdevsim netdevsim4 netdevsim2: entered promiscuous mode
[  423.069230][T10504] netdevsim netdevsim4 netdevsim3: entered promiscuous mode
[  423.102137][T10504] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode
[  423.119214][T10504] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode
[  423.130967][T10504] bond1: entered promiscuous mode
[  423.136198][T10504] bridge1: entered promiscuous mode
[  423.184505][T10518] pim6reg: entered allmulticast mode
[  423.190303][T10519] pim6reg: left allmulticast mode
[  423.246857][T10521] netlink: 4 bytes leftover after parsing attributes in process `syz.6.922'.
[  423.411995][T10521] hsr_slave_1 (unregistering): left promiscuous mode
[  423.426212][T10529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.931'.
[  423.446661][T10529] vlan2: entered allmulticast mode
[  423.453468][T10529] bond0: entered allmulticast mode
[  423.462889][T10529] bond_slave_0: entered allmulticast mode
[  423.482703][T10529] bond_slave_1: entered allmulticast mode
[  423.492632][T10531] netlink: 52 bytes leftover after parsing attributes in process `syz.4.932'.
[  423.513138][T10534] netlink: 14 bytes leftover after parsing attributes in process `syz.0.931'.
[  423.659911][T10534] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  423.669862][T10534] bond_slave_0: left allmulticast mode
[  423.681490][T10534] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  423.693478][T10534] bond_slave_1: left allmulticast mode
[  423.699979][T10534] bond0 (unregistering): Released all slaves
[  424.004683][T10540] loop0: detected capacity change from 0 to 33792
[  424.030091][T10540] EXT4-fs: Ignoring removed mblk_io_submit option
[  424.052430][T10540] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  424.075825][T10540] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  424.136719][T10540] EXT4-fs error (device loop0): ext4_ext_check_inode:532: inode #11: comm syz.0.924: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  424.208763][T10540] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.924: couldn't read orphan inode 11 (err -117)
[  424.258384][T10540] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  424.330190][T10540] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:478: comm syz.0.924: Invalid block bitmap block 0 in block_group 0
[  424.344975][T10540] Quota error (device loop0): write_blk: dquota write failed
[  424.352824][T10540] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  424.382574][T10540] EXT4-fs error (device loop0): ext4_acquire_dquot:6958: comm syz.0.924: Failed to acquire dquot type 0
[  424.438033][T10547] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.924: Invalid inode bitmap blk 137438953472 in block_group 0
[  424.579040][ T7701] EXT4-fs error (device loop0): __ext4_get_inode_loc:4509: comm kworker/u4:14: Invalid inode table block 8589934593 in block_group 0
[  424.609925][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  425.135224][T10536] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  425.182573][T10536] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  427.043005][T10549] loop0: detected capacity change from 0 to 32768
[  427.054163][T10549] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.937 (10549)
[  427.114753][T10549] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  427.143238][T10549] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  427.172142][T10549] BTRFS info (device loop0): setting nodatasum
[  427.195481][T10549] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  427.225191][T10549] BTRFS info (device loop0): use zstd compression, level 3
[  427.247542][T10549] BTRFS info (device loop0): use zlib compression, level 3
[  427.254836][T10549] BTRFS info (device loop0): turning on flush-on-commit
[  427.287943][T10549] BTRFS info (device loop0): max_inline at 4096
[  427.307430][T10549] BTRFS info (device loop0): using free space tree
[  427.447882][T10549] BTRFS info (device loop0): enabling ssd optimizations
[  427.561557][T10536] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  427.596940][T10536] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  427.608245][T10536] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  427.617210][T10536] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  429.451688][ T5793] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  429.656330][T10584] netlink: 52 bytes leftover after parsing attributes in process `syz.6.934'.
[  429.693134][T10584] bridge0: port 2(bridge_slave_1) entered disabled state
[  429.700685][T10584] bridge0: port 1(bridge_slave_0) entered disabled state
[  430.719373][T10604] fuse: Bad value for 'fd'
[  432.697979][T10592] loop6: detected capacity change from 0 to 32768
[  432.730278][T10616] device-mapper: table: 248:6: cache: Error opening origin device (-ENOENT)
[  432.743746][T10592] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  432.765252][T10592] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  432.794507][T10616] device-mapper: ioctl: error adding target to table
[  432.828590][T10592] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms
[  432.838608][ T8344] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  432.845446][ T8344] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  432.932251][ T8344] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 86ms
[  432.958313][ T8344] gfs2: fsid=syz:syz.0: jid=0: Done
[  432.967801][T10592] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  433.022283][T10592] gfs2: fsid=syz:syz.0: can't create logd thread: -4
[  433.285281][T10630] pim6reg: entered allmulticast mode
[  433.438517][T10630] pim6reg: left allmulticast mode
[  435.313976][T10640] netlink: 4 bytes leftover after parsing attributes in process `syz.4.944'.
[  436.993025][T10627] loop5: detected capacity change from 0 to 32768
[  437.218789][T10653] netlink: 16 bytes leftover after parsing attributes in process `syz.0.940'.
[  438.089334][T10554] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by udevd (10554)
[  438.387899][   T28] audit: type=1326 audit(1794590452.504:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10655 comm="syz.5.949" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f83c77a94d9 code=0x0
[  441.317995][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  441.324378][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  442.516015][T10709] pim6reg: entered allmulticast mode
[  442.591948][T10704] rxe_eth0 speed is unknown, defaulting to 1000
[  442.659021][T10709] pim6reg: left allmulticast mode
[  442.898210][T10709] netlink: 4 bytes leftover after parsing attributes in process `syz.4.957'.
[  443.877466][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  444.622369][T10717] loop0: detected capacity change from 0 to 36864
[  444.682871][T10717] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  444.712143][T10717] EXT4-fs (loop0): can't mount with commit=4, fs mounted w/o journal
[  449.211109][   T52] Bluetooth: hci3: unexpected event 0x04 length: 12 > 10
[  449.211149][   T52] Bluetooth: unknown link type 255
[  449.224529][   T52] Bluetooth: hci3: connection err: -111
[  452.339817][T10779] overlayfs: failed to resolve './file2': -2
[  454.501779][T10802] pim6reg: entered allmulticast mode
[  454.604650][T10802] pim6reg: left allmulticast mode
[  455.371364][T10806] netlink: 4 bytes leftover after parsing attributes in process `syz.5.971'.
[  455.812553][T10822] loop5: detected capacity change from 0 to 256
[  461.497831][T10855] netlink: 20 bytes leftover after parsing attributes in process `syz.4.982'.
[  462.852456][T10864] netlink: 4 bytes leftover after parsing attributes in process `syz.6.985'.
[  463.753739][   T52] Bluetooth: hci3: unexpected event 0x04 length: 12 > 10
[  463.753784][   T52] Bluetooth: unknown link type 255
[  463.771257][   T52] Bluetooth: hci3: connection err: -111
[  465.620178][T10885] pim6reg: entered allmulticast mode
[  465.718928][T10884] pim6reg: left allmulticast mode
[  466.308558][T10889] netlink: 4 bytes leftover after parsing attributes in process `syz.5.981'.
[  466.531759][   T52] Bluetooth: hci3: unexpected event 0x04 length: 12 > 10
[  466.531802][   T52] Bluetooth: unknown link type 255
[  466.547702][   T52] Bluetooth: hci3: connection err: -111
[  466.563449][T10872] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  466.586159][T10866] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  472.315928][T10920] pim6reg: entered allmulticast mode
[  472.416669][T10919] pim6reg: left allmulticast mode
[  473.154319][T10924] netlink: 4 bytes leftover after parsing attributes in process `syz.0.997'.
[  474.032122][ T5796] Bluetooth: hci4: command 0x0406 tx timeout
[  474.528735][T10933] process 'syz.4.998' launched '/dev/fd/-1' with NULL argv: empty string added
[  474.855493][T10939] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  476.568556][T10939] syzkaller0: entered promiscuous mode
[  476.575488][T10938] digital: digital_start_poll: Unknown protocol
[  476.585892][T10939] syzkaller0: entered allmulticast mode
[  476.617967][   T23] tipc: Node number set to 3621245552
[  476.684782][T10939] tipc: Resetting bearer <eth:syzkaller0>
[  476.767199][T10937] tipc: Resetting bearer <eth:syzkaller0>
[  476.825649][T10937] tipc: Disabling bearer <eth:syzkaller0>
[  478.875225][T10969] pim6reg: entered allmulticast mode
[  478.944372][T10970] pim6reg: left allmulticast mode
[  479.873915][T10973] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1006'.
[  480.087461][T10981] FAULT_INJECTION: forcing a failure.
[  480.087461][T10981] name failslab, interval 1, probability 0, space 0, times 0
[  480.567437][T10981] CPU: 0 PID: 10981 Comm: syz.0.1010 Not tainted syzkaller #0
[  480.574998][T10981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  480.585100][T10981] Call Trace:
[  480.588444][T10981]  <TASK>
[  480.591419][T10981]  dump_stack_lvl+0x18c/0x250
[  480.596164][T10981]  ? show_regs_print_info+0x20/0x20
[  480.601417][T10981]  ? load_image+0x420/0x420
[  480.605978][T10981]  ? __might_sleep+0xe0/0xe0
[  480.610617][T10981]  ? __lock_acquire+0x7eb0/0x7eb0
[  480.615715][T10981]  should_fail_ex+0x394/0x4c0
[  480.620468][T10981]  should_failslab+0x9/0x20
[  480.625015][T10981]  slab_pre_alloc_hook+0x59/0x300
[  480.630089][T10981]  ? apply_wqattrs_prepare+0xf0/0xd00
[  480.635510][T10981]  ? apply_wqattrs_prepare+0xf0/0xd00
[  480.640935][T10981]  __kmem_cache_alloc_node+0x53/0x260
[  480.646368][T10981]  ? apply_wqattrs_prepare+0xf0/0xd00
[  480.651797][T10981]  __kmalloc+0xa7/0x240
[  480.656039][T10981]  apply_wqattrs_prepare+0xf0/0xd00
[  480.661298][T10981]  ? apply_workqueue_attrs+0x36/0x180
[  480.667095][T10981]  apply_workqueue_attrs+0xdb/0x180
[  480.672346][T10981]  alloc_workqueue+0xc9a/0x1380
[  480.677282][T10981]  ? apply_workqueue_attrs+0x180/0x180
[  480.682800][T10981]  ? mempool_alloc_pages+0x20/0x20
[  480.687963][T10981]  ? mempool_kfree+0x20/0x20
[  480.692602][T10981]  ? mempool_init+0x3a/0x50
[  480.697156][T10981]  dm_integrity_ctr+0x1db8/0x4bb0
[  480.702272][T10981]  ? sb_check+0x310/0x310
[  480.706664][T10981]  ? dm_split_args+0x92/0x5b0
[  480.711392][T10981]  ? rcu_is_watching+0x15/0xb0
[  480.716208][T10981]  ? dm_split_args+0x505/0x5b0
[  480.721027][T10981]  dm_table_add_target+0x575/0xbc0
[  480.726211][T10981]  table_load+0x2eb/0x7e0
[  480.730777][T10981]  ? dev_wait+0x2f0/0x2f0
[  480.735165][T10981]  ? __might_fault+0xaa/0x120
[  480.739997][T10981]  ? __might_fault+0xc6/0x120
[  480.744718][T10981]  ? __might_fault+0xaa/0x120
[  480.749460][T10981]  ? dev_wait+0x2f0/0x2f0
[  480.753862][T10981]  dm_ctl_ioctl+0x975/0xd00
[  480.758434][T10981]  ? dev_wait+0x2f0/0x2f0
[  480.762812][T10981]  ? dm_poll+0x120/0x120
[  480.767157][T10981]  ? bpf_lsm_file_ioctl+0x9/0x10
[  480.772141][T10981]  ? security_file_ioctl+0x80/0xa0
[  480.777315][T10981]  ? dm_poll+0x120/0x120
[  480.781650][T10981]  __se_sys_ioctl+0xfd/0x170
[  480.786322][T10981]  do_syscall_64+0x55/0xb0
[  480.791146][T10981]  ? clear_bhb_loop+0x40/0x90
[  480.796220][T10981]  ? clear_bhb_loop+0x40/0x90
[  480.800946][T10981]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  480.806891][T10981] RIP: 0033:0x7f6fd9ba94d9
[  480.811363][T10981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  480.831043][T10981] RSP: 002b:00007f6fdaa9b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  480.839532][T10981] RAX: ffffffffffffffda RBX: 00007f6fd9e25fa0 RCX: 00007f6fd9ba94d9
[  480.847575][T10981] RDX: 00002000000007c0 RSI: 00000000c138fd09 RDI: 0000000000000005
[  480.855587][T10981] RBP: 00007f6fd9c3804e R08: 0000000000000000 R09: 0000000000000000
[  480.863598][T10981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  480.871613][T10981] R13: 00007f6fd9e26038 R14: 00007f6fd9e25fa0 R15: 00007ffd39c920a8
[  480.879654][T10981]  </TASK>
[  481.250577][T10987] jffs2: notice: (10987) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  481.443799][T10981] device-mapper: table: 248:1: integrity: Cannot allocate workqueue (-ENOMEM)
[  482.171985][T10981] device-mapper: ioctl: error adding target to table
[  484.388514][T11003] digital: digital_start_poll: Unknown protocol
[  486.911557][T11015] pim6reg: entered allmulticast mode
[  486.980546][T11016] pim6reg: left allmulticast mode
[  487.707089][   T52] Bluetooth: hci1: unexpected event 0x04 length: 12 > 10
[  487.707130][   T52] Bluetooth: unknown link type 255
[  487.731972][   T52] Bluetooth: hci1: connection err: -111
[  487.992247][T11019] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1018'.
[  489.957612][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  492.149150][T11038] pim6reg: entered allmulticast mode
[  492.218326][T11039] pim6reg: left allmulticast mode
[  493.010284][T11049] loop6: detected capacity change from 0 to 36864
[  493.101315][T11042] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1022'.
[  493.132711][T11049] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  493.191224][T11049] EXT4-fs (loop6): can't mount with commit=4, fs mounted w/o journal
[  497.766416][T11060] syz.6.1023: attempt to access beyond end of device
[  497.766416][T11060] loop6: rw=4096, sector=2, nr_sectors = 2 limit=0
[  497.779937][T11060] EXT4-fs (loop6): unable to read superblock
[  502.757460][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  502.825687][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  502.837729][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  503.107604][   T52] Bluetooth: hci1: unexpected event 0x04 length: 12 > 10
[  503.107646][   T52] Bluetooth: unknown link type 255
[  503.120005][   T52] Bluetooth: hci1: connection err: -111
[  505.708758][T11088] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1039'.
[  505.728334][T11089] loop6: detected capacity change from 0 to 36864
[  505.758941][T11089] EXT4-fs: Ignoring removed orlov option
[  505.839217][T11089] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  506.130454][T11102] Bluetooth: MGMT ver 1.22
[  506.142737][T11102] Bluetooth: hci0: invalid length 0, exp 2 for type 12
[  506.887811][T11114] pim6reg: entered allmulticast mode
[  506.979156][T11110] pim6reg: left allmulticast mode
[  509.307971][T11117] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1035'.
[  509.644646][T11131] loop5: detected capacity change from 0 to 64
[  512.051223][T11141] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1043'.
[  512.437654][ T9831] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  512.990732][T11159] loop0: detected capacity change from 0 to 4096
[  513.066092][T11165] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  515.922320][T11164] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  516.865004][T11177] pim6reg: entered allmulticast mode
[  517.033414][T11177] pim6reg: left allmulticast mode
[  517.163473][T11191] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1050'.
[  519.633955][T11203] loop0: detected capacity change from 0 to 36864
[  519.664926][T11203] EXT4-fs: Ignoring removed orlov option
[  519.742277][T11205] loop6: detected capacity change from 0 to 33280
[  519.756986][T11203] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  519.800933][T11133] I/O error, dev loop6, sector 33152 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  520.526436][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  521.647771][T10524] IPVS: starting estimator thread 0...
[  521.771380][T11225] IPVS: using max 19 ests per chain, 45600 per kthread
[  523.237452][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  523.941903][T11240] pim6reg: entered allmulticast mode
[  524.033753][T11238] pim6reg: left allmulticast mode
[  524.823262][T11243] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1061'.
[  524.848789][T11250] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1056'.
[  525.722535][T11256] pim6reg: entered allmulticast mode
[  525.796684][T11260] pim6reg: left allmulticast mode
[  526.936439][T11266] syz.0.1064: attempt to access beyond end of device
[  526.936439][T11266] loop0: rw=4096, sector=2, nr_sectors = 2 limit=0
[  526.950073][T11266] EXT4-fs (loop0): unable to read superblock
[  529.176675][T11264] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1065'.
[  533.477435][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  535.286907][T11296] pim6reg: entered allmulticast mode
[  535.388567][T11296] pim6reg: left allmulticast mode
[  536.064784][T11300] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1073'.
[  536.482700][T11309] syzkaller0: entered promiscuous mode
[  536.502590][T11309] syzkaller0: entered allmulticast mode
[  537.446601][T11319] syz.5.1076: attempt to access beyond end of device
[  537.446601][T11319] loop5: rw=4096, sector=2, nr_sectors = 2 limit=0
[  537.460147][T11319] EXT4-fs (loop5): unable to read superblock
[  542.433004][T11331] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  542.804913][T11334] pim6reg: entered allmulticast mode
[  542.917616][T11334] pim6reg: left allmulticast mode
[  543.104122][T11334] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1083'.
[  543.522508][T11342] pim6reg: entered allmulticast mode
[  543.616080][T11341] pim6reg: left allmulticast mode
[  544.284726][T11350] loop6: detected capacity change from 0 to 32896
[  544.320504][T11345] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1077'.
[  544.359104][T11350] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  545.627645][T11350] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  546.506510][   T28] audit: type=1800 audit(1794590560.774:291): pid=11365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1087" name="protocol" dev="configfs" ino=29184 res=0 errno=0
[  546.521617][ T9831] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  546.558363][   T28] audit: type=1800 audit(1794590560.834:292): pid=11365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1087" name="report_desc" dev="configfs" ino=29842 res=0 errno=0
[  547.403945][T11371] No source specified
[  551.014933][T11398] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1092'.
[  551.886829][T11404] pim6reg: entered allmulticast mode
[  551.956360][T11405] pim6reg: left allmulticast mode
[  552.632464][T11408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1094'.
[  552.643932][T11414] loop5: detected capacity change from 0 to 4096
[  552.656061][T11411] pim6reg: entered allmulticast mode
[  552.747912][T11414] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes.
[  552.780092][T11414] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes.
[  552.817478][T11414] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[  552.856073][T11414] ldm_validate_privheads(): Cannot find PRIVHEAD 3.
[  552.876406][T11414] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt.
[  552.909591][T11411] pim6reg: left allmulticast mode
[  552.923234][T11414] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt.
[  552.940029][T11414] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt.
[  552.977538][T11414] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt.
[  553.007452][T11414] ldm_validate_tocblocks(): Failed to find a valid TOCBLOCK.
[  553.028948][T11414]  loop5:
[  553.030103][T11418] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1095'.
[  553.621913][T11426] pim6reg: entered allmulticast mode
[  553.714561][T11425] pim6reg: left allmulticast mode
[  554.197765][   T52] Bluetooth: hci3: unexpected event 0x04 length: 12 > 10
[  554.197801][   T52] Bluetooth: unknown link type 255
[  554.210334][   T52] Bluetooth: hci3: connection err: -111
[  556.178211][T11429] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1097'.
[  557.739562][T11443] tc action pedit offset 4 out of bounds
[  557.746154][T11443] tc action pedit offset 4 out of bounds
[  557.751944][T11443] tc action pedit offset 4 out of bounds
[  557.757656][T11443] tc action pedit offset 4 out of bounds
[  557.763356][T11443] tc action pedit offset 4 out of bounds
[  557.769080][T11443] tc action pedit offset 4 out of bounds
[  557.774754][T11443] tc action pedit offset 4 out of bounds
[  557.780577][T11443] tc action pedit offset 4 out of bounds
[  557.786322][T11443] tc action pedit offset 4 out of bounds
[  557.792057][T11443] tc action pedit offset 4 out of bounds
[  557.797845][T11443] 0: reclassify loop, rule prio 0, protocol 800
[  558.780996][T11446] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1101'.
[  559.787788][T10524] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  559.847869][T10526] IPVS: starting estimator thread 0...
[  559.957748][T11461] IPVS: using max 15 ests per chain, 36000 per kthread
[  560.374922][T10524] usb 6-1: too many configurations: 9, using maximum allowed: 8
[  560.928021][T11469] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1103'.
[  561.129200][T10524] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  561.140066][T10524] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 9
[  561.230619][T11467] pim6reg: entered allmulticast mode
[  561.253740][T10524] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  561.303766][T10524] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 9
[  561.344922][T11470] pim6reg: left allmulticast mode
[  561.371812][T10524] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  561.397356][T10524] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 9
[  561.431506][T10524] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  561.457783][T10524] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 9
[  561.491573][T10524] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  561.506100][T10524] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 9
[  561.530497][T11477] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1104'.
[  561.550016][T10524] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  561.561419][T10524] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 9
[  561.588076][T10524] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  561.607511][T10524] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 9
[  561.630865][T10524] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  561.647436][T10524] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 9
[  562.781561][T10524] usb 6-1: string descriptor 0 read error: -71
[  562.788137][T10524] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  562.797220][T10524] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  563.158393][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  563.171890][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  563.506728][T10524] usb 6-1: config 0 descriptor??
[  563.526076][T10524] usb 6-1: can't set config #0, error -71
[  563.636207][T10524] usb 6-1: USB disconnect, device number 10
[  563.791482][T11490] pim6reg: entered allmulticast mode
[  565.559996][T11490] pim6reg: left allmulticast mode
[  566.506202][T11503] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1109'.
[  569.255610][T11517] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1114'.
[  571.992571][T11528] syzkaller0: entered promiscuous mode
[  571.998565][T11528] syzkaller0: entered allmulticast mode
[  574.243511][T11541] loop0: detected capacity change from 0 to 2048
[  575.993242][T11541] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  576.357047][T11545] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1115'.
[  577.310005][T11550] syz.0.1123: attempt to access beyond end of device
[  577.310005][T11550] loop0: rw=4096, sector=2, nr_sectors = 2 limit=0
[  577.323497][T11550] EXT4-fs (loop0): unable to read superblock
[  579.451231][T11564] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1125'.
[  582.619950][T11584] loop5: detected capacity change from 0 to 2048
[  582.702704][   T52] Bluetooth: hci4: unexpected event 0x04 length: 12 > 10
[  582.702749][   T52] Bluetooth: unknown link type 255
[  582.717176][   T52] Bluetooth: hci4: connection err: -111
[  582.763620][T11584] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  587.018577][T11607] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1135'.
[  589.580833][T11622] pim6reg: entered allmulticast mode
[  589.692614][T11619] pim6reg: left allmulticast mode
[  589.911288][T11621] loop0: detected capacity change from 0 to 33280
[  590.882166][T11626] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1137'.
[  592.774560][T11637] pim6reg: entered allmulticast mode
[  592.868372][T11638] pim6reg: left allmulticast mode
[  593.079090][T11638] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1133'.
[  593.865684][T11647] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1136'.
[  595.774145][T11657] pim6reg: entered allmulticast mode
[  595.845123][T11658] pim6reg: left allmulticast mode
[  598.389987][T11662] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1148'.
[  598.616530][T11672] IPVS: Error connecting to the multicast addr
[  598.707868][ T5796] Bluetooth: hci4: command 0x0406 tx timeout
[  599.392857][T11675] No source specified
[  600.735888][T11678] loop0: detected capacity change from 0 to 36864
[  600.758776][T11678] EXT4-fs: Ignoring removed orlov option
[  600.866815][T11678] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  602.225756][ T5796] Bluetooth: hci4: unexpected event 0x04 length: 12 > 10
[  602.225799][ T5796] Bluetooth: unknown link type 255
[  602.238647][ T5796] Bluetooth: hci4: connection err: -111
[  602.556808][T11694] pim6reg: entered allmulticast mode
[  602.566021][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  602.631759][T11695] pim6reg: left allmulticast mode
[  602.759163][T11699] loop0: detected capacity change from 0 to 512
[  602.822928][T11695] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1151'.
[  603.103970][T11704] loop0: detected capacity change from 0 to 2048
[  604.033522][T11709] loop5: detected capacity change from 0 to 33280
[  604.160742][T11709] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  604.186814][T11709] ext4 filesystem being mounted at /249/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  604.217059][T11717] pim6reg: entered allmulticast mode
[  604.275692][T11717] pim6reg: left allmulticast mode
[  605.347586][ T5796] Bluetooth: hci1: unexpected event 0x04 length: 12 > 10
[  605.347714][ T5796] Bluetooth: unknown link type 255
[  605.360600][ T5796] Bluetooth: hci1: connection err: -111
[  605.986303][T11723] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1153'.
[  606.831660][T11738] No source specified
[  608.376916][ T6413] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  609.862570][T11756] pim6reg: entered allmulticast mode
[  609.954778][T11757] pim6reg: left allmulticast mode
[  610.332470][T11758] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1163'.
[  612.048246][T11776] No source specified
[  614.438302][ T5796] Bluetooth: hci4: unexpected event 0x04 length: 12 > 10
[  614.438343][ T5796] Bluetooth: unknown link type 255
[  614.452279][ T5796] Bluetooth: hci4: connection err: -111
[  616.603763][T11797] loop5: detected capacity change from 0 to 2048
[  616.620920][T11797] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  618.108720][T11802] pim6reg: entered allmulticast mode
[  618.210855][T11801] pim6reg: left allmulticast mode
[  618.898990][T11806] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1173'.
[  620.123178][ T5796] Bluetooth: hci1: unexpected event 0x04 length: 12 > 10
[  620.123218][ T5796] Bluetooth: unknown link type 255
[  620.197624][ T5796] Bluetooth: hci1: connection err: -111
[  620.318456][T11825] loop6: detected capacity change from 0 to 33280
[  620.334400][T11825] EXT4-fs (loop6): Cannot use DAX on a filesystem that may contain inline data
[  623.175047][T11837] loop0: detected capacity change from 0 to 33280
[  623.266811][T11837] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  623.297567][T11837] ext4 filesystem being mounted at /295/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  623.967392][ T8344] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  624.375912][ T8344] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00
[  624.458816][ T8344] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  624.558490][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  624.570391][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  624.712885][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  624.838623][   T28] audit: type=1326 audit(1794590639.114:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11865 comm="syz.4.1185" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0c35a94d9 code=0x7ffc0000
[  624.894813][   T28] audit: type=1326 audit(1794590639.114:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11865 comm="syz.4.1185" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0c35a94d9 code=0x7ffc0000
[  624.925143][   T28] audit: type=1326 audit(1794590639.114:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11865 comm="syz.4.1185" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb0c35a94d9 code=0x7ffc0000
[  624.958126][   T28] audit: type=1326 audit(1794590639.114:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11865 comm="syz.4.1185" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0c35a94d9 code=0x7ffc0000
[  624.995988][   T28] audit: type=1326 audit(1794590639.124:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11865 comm="syz.4.1185" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0c35a94d9 code=0x7ffc0000
[  625.024945][   T28] audit: type=1326 audit(1794590639.124:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11865 comm="syz.4.1185" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb0c35a94d9 code=0x7ffc0000
[  625.053557][   T28] audit: type=1326 audit(1794590639.124:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11865 comm="syz.4.1185" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0c35a94d9 code=0x7ffc0000
[  625.081810][   T28] audit: type=1326 audit(1794590639.124:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11865 comm="syz.4.1185" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0c35a94d9 code=0x7ffc0000
[  625.146868][   T28] audit: type=1326 audit(1794590639.124:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11865 comm="syz.4.1185" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb0c3569d0e code=0x7ffc0000
[  625.184338][   T28] audit: type=1326 audit(1794590639.124:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11865 comm="syz.4.1185" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb0c3569d0e code=0x7ffc0000
[  625.322682][T11873] pim6reg: entered allmulticast mode
[  625.375924][T11844] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1182'.
[  625.390103][ T8344] usb 7-1: Firmware version (0.0) predates our first public release.
[  625.402684][ T8344] usb 7-1: Please update to version 0.2 or newer
[  625.462868][T11873] pim6reg: left allmulticast mode
[  625.480748][ T8344] usb 7-1: USB disconnect, device number 2
[  625.626476][T11879] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1186'.
[  629.606011][T11896] pim6reg: entered allmulticast mode
[  629.749940][T11894] pim6reg: left allmulticast mode
[  631.443073][T11902] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1191'.
[  631.797652][T11916] null_blk: disk nullb1 created
[  632.803315][T11923] 
[  632.805722][T11923] ======================================================
[  632.812826][T11923] WARNING: possible circular locking dependency detected
[  632.819894][T11923] syzkaller #0 Not tainted
[  632.824345][T11923] ------------------------------------------------------
[  632.831424][T11923] syz.6.1196/11923 is trying to acquire lock:
[  632.837555][T11923] ffffffff8ede9df0 (gadget_subsys.su_mutex){+.+.}-{3:3}, at: configfs_rmdir+0x63c/0x980
[  632.847898][T11923] 
[  632.847898][T11923] but task is already holding lock:
[  632.855312][T11923] ffff8880515bb910 (&sb->s_type->i_mutex_key#34){++++}-{3:3}, at: vfs_rmdir+0xee/0x4b0
[  632.865045][T11923] 
[  632.865045][T11923] which lock already depends on the new lock.
[  632.865045][T11923] 
[  632.875488][T11923] 
[  632.875488][T11923] the existing dependency chain (in reverse order) is:
[  632.884550][T11923] 
[  632.884550][T11923] -> #3 (&sb->s_type->i_mutex_key#34){++++}-{3:3}:
[  632.893313][T11923]        down_write+0x97/0x200
[  632.898145][T11923]        configfs_depend_item_unlocked+0x157/0x460
[  632.904699][T11923]        usbg_make_tpg+0x1e1/0x550
[  632.909874][T11923]        target_fabric_make_tpg+0xa4/0x6d0
[  632.915741][T11923]        configfs_mkdir+0x515/0x9e0
[  632.920997][T11923]        vfs_mkdir+0x2a5/0x470
[  632.925807][T11923]        do_mkdirat+0x1dc/0x450
[  632.930699][T11923]        __x64_sys_mkdirat+0x89/0xa0
[  632.936025][T11923]        do_syscall_64+0x55/0xb0
[  632.941027][T11923]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  632.947497][T11923] 
[  632.947497][T11923] -> #2 (tpg_instances_lock){+.+.}-{3:3}:
[  632.955460][T11923]        __mutex_lock+0x135/0xce0
[  632.960538][T11923]        tcm_alloc_inst+0x65/0x190
[  632.965709][T11923]        usb_get_function_instance+0xdd/0x2e0
[  632.971824][T11923]        function_make+0x11c/0x350
[  632.976978][T11923]        configfs_mkdir+0x515/0x9e0
[  632.982222][T11923]        vfs_mkdir+0x2a5/0x470
[  632.987035][T11923]        do_mkdirat+0x1dc/0x450
[  632.991923][T11923]        __x64_sys_mkdirat+0x89/0xa0
[  632.997252][T11923]        do_syscall_64+0x55/0xb0
[  633.002246][T11923]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  633.008821][T11923] 
[  633.008821][T11923] -> #1 (func_lock){+.+.}-{3:3}:
[  633.015998][T11923]        __mutex_lock+0x135/0xce0
[  633.021078][T11923]        usb_get_function_instance+0x2e/0x2e0
[  633.027198][T11923]        function_make+0x11c/0x350
[  633.032363][T11923]        configfs_mkdir+0x515/0x9e0
[  633.037609][T11923]        vfs_mkdir+0x2a5/0x470
[  633.042422][T11923]        do_mkdirat+0x1dc/0x450
[  633.047319][T11923]        __x64_sys_mkdirat+0x89/0xa0
[  633.052665][T11923]        do_syscall_64+0x55/0xb0
[  633.057649][T11923]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  633.064118][T11923] 
[  633.064118][T11923] -> #0 (gadget_subsys.su_mutex){+.+.}-{3:3}:
[  633.072424][T11923]        __lock_acquire+0x3a07/0x7eb0
[  633.077875][T11923]        lock_acquire+0x19e/0x420
[  633.082942][T11923]        __mutex_lock+0x135/0xce0
[  633.088006][T11923]        configfs_rmdir+0x63c/0x980
[  633.093249][T11923]        vfs_rmdir+0x352/0x4b0
[  633.098088][T11923]        do_rmdir+0x29f/0x590
[  633.102806][T11923]        __x64_sys_rmdir+0x49/0x50
[  633.107960][T11923]        do_syscall_64+0x55/0xb0
[  633.112947][T11923]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  633.119416][T11923] 
[  633.119416][T11923] other info that might help us debug this:
[  633.119416][T11923] 
[  633.129688][T11923] Chain exists of:
[  633.129688][T11923]   gadget_subsys.su_mutex --> tpg_instances_lock --> &sb->s_type->i_mutex_key#34
[  633.129688][T11923] 
[  633.144700][T11923]  Possible unsafe locking scenario:
[  633.144700][T11923] 
[  633.152187][T11923]        CPU0                    CPU1
[  633.157597][T11923]        ----                    ----
[  633.163011][T11923]   lock(&sb->s_type->i_mutex_key#34);
[  633.168519][T11923]                                lock(tpg_instances_lock);
[  633.175754][T11923]                                lock(&sb->s_type->i_mutex_key#34);
[  633.183790][T11923]   lock(gadget_subsys.su_mutex);
[  633.188854][T11923] 
[  633.188854][T11923]  *** DEADLOCK ***
[  633.188854][T11923] 
[  633.197031][T11923] 3 locks held by syz.6.1196/11923:
[  633.202260][T11923]  #0: ffff8881432a4418 (sb_writers#29){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  633.211578][T11923]  #1: ffff88805cbd24d0 (&default_group_class[depth - 1]#2/1){+.+.}-{3:3}, at: do_rmdir+0x1c6/0x590
[  633.222452][T11923]  #2: ffff8880515bb910 (&sb->s_type->i_mutex_key#34){++++}-{3:3}, at: vfs_rmdir+0xee/0x4b0
[  633.232623][T11923] 
[  633.232623][T11923] stack backtrace:
[  633.238543][T11923] CPU: 1 PID: 11923 Comm: syz.6.1196 Not tainted syzkaller #0
[  633.246047][T11923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  633.256159][T11923] Call Trace:
[  633.259482][T11923]  <TASK>
[  633.262445][T11923]  dump_stack_lvl+0x18c/0x250
[  633.267204][T11923]  ? load_image+0x420/0x420
[  633.271751][T11923]  ? show_regs_print_info+0x20/0x20
[  633.277035][T11923]  ? print_circular_bug+0x12b/0x1a0
[  633.282285][T11923]  check_noncircular+0x2fc/0x400
[  633.287294][T11923]  ? print_deadlock_bug+0x5d0/0x5d0
[  633.292547][T11923]  ? lockdep_lock+0xf5/0x230
[  633.297193][T11923]  ? _find_first_zero_bit+0xd6/0x100
[  633.302644][T11923]  __lock_acquire+0x3a07/0x7eb0
[  633.307562][T11923]  ? verify_lock_unused+0x140/0x140
[  633.312822][T11923]  ? verify_lock_unused+0x140/0x140
[  633.318068][T11923]  lock_acquire+0x19e/0x420
[  633.322612][T11923]  ? configfs_rmdir+0x63c/0x980
[  633.327519][T11923]  ? __might_sleep+0xe0/0xe0
[  633.332156][T11923]  ? read_lock_is_recursive+0x20/0x20
[  633.337601][T11923]  __mutex_lock+0x135/0xce0
[  633.342153][T11923]  ? configfs_rmdir+0x63c/0x980
[  633.347144][T11923]  ? configfs_rmdir+0x63c/0x980
[  633.352040][T11923]  ? mutex_lock_nested+0x20/0x20
[  633.357110][T11923]  ? __lock_acquire+0x7eb0/0x7eb0
[  633.362179][T11923]  ? lockref_put_or_lock+0x72/0xb0
[  633.367353][T11923]  ? dput+0x3b/0x1e0
[  633.371285][T11923]  ? dput+0x3b/0x1e0
[  633.375225][T11923]  configfs_rmdir+0x63c/0x980
[  633.379957][T11923]  vfs_rmdir+0x352/0x4b0
[  633.384247][T11923]  do_rmdir+0x29f/0x590
[  633.388505][T11923]  ? __check_object_size+0x4fc/0xa40
[  633.393923][T11923]  ? d_delete_notify+0x150/0x150
[  633.398910][T11923]  ? getname_flags+0x20a/0x500
[  633.403719][T11923]  __x64_sys_rmdir+0x49/0x50
[  633.408360][T11923]  do_syscall_64+0x55/0xb0
[  633.412824][T11923]  ? clear_bhb_loop+0x40/0x90
[  633.417553][T11923]  ? clear_bhb_loop+0x40/0x90
[  633.422278][T11923]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  633.428255][T11923] RIP: 0033:0x7f96d99a94d9
[  633.432717][T11923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  633.452381][T11923] RSP: 002b:00007f96da88b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054
[  633.460862][T11923] RAX: ffffffffffffffda RBX: 00007f96d9c26090 RCX: 00007f96d99a94d9
[  633.468971][T11923] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000024c0
[  633.476988][T11923] RBP: 00007f96d9a3804e R08: 0000000000000000 R09: 0000000000000000
[  633.484999][T11923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  633.493042][T11923] R13: 00007f96d9c26128 R14: 00007f96d9c26090 R15: 00007ffcbc099c18
[  633.501098][T11923]  </TASK>
[  633.504260][    C1] vkms_vblank_simulate: vblank timer overrun