last executing test programs:

19m23.963250034s ago: executing program 32 (id=259):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000400)={[{@grpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x10}}, {@nodioread_nolock}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4f2040d1}}, {@noacl}, {@user_xattr}, {@minixdf}, {@orlov}]}, 0x4, 0xbaf, &(0x7f0000000540)="$eJzs3M1rXFUbAPDn3ny2zftO+vIi1k0jIi2o07SSYotgKxU3LgTdCg3ppIRMP0giNWkWE/0HRF0LbgS1KF3YdTcKbt1o3VpcCEVioyCikTsfSWxmkrSd5Ibk94Mz95w5d+Z5nrlM7j0wNwHsWgPZQxpxICLOJhGF+vNpRHRXe70Rldp+C/OzI7/Pz44ksbj42i9JJBFxd352pPFeSX27rz7ojYhvX0zif++sjjs5PTM+XC6XJurjI1MXLh+ZnJ55ZuzC8PnS+dLFo8efGzo2dHzwxFDbav3jx1M3fnv85Z8qf37617Vf3/84iVPRV59bWUe7DMTA0meyUmdEDLc7WE466vWsrDPpXOdF6SYnBQBAS+mKa7hHohAdsXzxVoivvss1OQAAAKAtFjsiFgEAAIAdLrH+BwAAgB2u8TuAu/OzI42W7y8Sttad0xHRX6t/od5qM51RqW57oysi9t5NYuVtrUntZQ9tICJu/3Dii6zFJt2HvJbKXEQ82uz4J9X6+6t3ca+uP42IwTbEH7hnvN3qf7q7df2n2hA/7/oB2J1unq6dyFaf/9Kl659ocv7rbHLuehB5n/8a138Lq67/luvvaHH99+oGY1z95MMrreay+p+/8dLnjZbFz7YPVdR9uDMX8Vhns/qTpfqTFvWf3WCMwt9XSq3m8q5/8aOIQ9G8/oZk7f9PdGR0rFwarD02jTH3zdBnreLnXX92/Pe2qH+94395gzHeOHPmequ59etPf+5OXq/2uuvPvDU8NTVxNKI7eWX188fqN7S30Nin8R5Z/YefWPv736z+LESl/jlka4G5+jYbv31PzBeuXf1yrfqztV+ex//cAx7/dzcY48mv3zvcam7l+jdrWfzbSW0tDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANaUT0RZIWl/ppWixG7IuI/8fetHxpcuqp0UtvXjyXzUX0R1c6OlYuDUZEoTZOsvHRan95fOye8bMRsT8iPijsqY6LI5fK5/IuHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCX7IqIvkrQYEWlELBTStFjMOysAAACg7frzTgAAAADYdNb/AAAAsPNZ/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDJ9h+8eSuJiMrJPdWW6a7PdeWaGbDZ0rwTAHLTkXcCQG46804AyM19rvFdLsAOlKwz39typqftuQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwfR06cPNWEhGVk3uqLdNdn+tq+oqDW5gdsJnSvBMActOx1mTn1uUBbD1fcdi9mq/xgd0kWWe+d3mfyr9nejYtJwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2n75qS9JiRKTVfpoWixH/iYj+6EpGx8qlwYj4b0R8X+jqycY9eScNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA201Oz4wPl8ulCR0dnXw7yfZIo9bJ+y8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5mJyeGR8ul0sTk3lnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAORtcnpmfLhcLk1soHP9fnZe0cm7RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8vNPAAAA///5ZQ4Q")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f00000000c0)='\f', 0x1, 0x8000c61)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40)
fallocate(r1, 0x0, 0xd5a0, 0x8ffff)

13m52.985553595s ago: executing program 33 (id=975):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@bridge_dellink={0x2c, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0xa006}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x5, 0x0, 0x1, {0x4}}]}]}, 0x2c}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00'})
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@cgroup, 0xffffffffffffffff, 0xe, 0x28}, 0x20)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = add_key(0x0, &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)='\x00', 0x1, 0xfffffffffffffffe)
keyctl$revoke(0x3, r3)
setsockopt$inet_buf(r2, 0x0, 0x10, &(0x7f00000000c0)="170000000200020000ffbe8c5ee17688a2006c00030100000077fc5ad90200fb6a880000d6c9db0000db15d088bd8b7000000000d9ce9bc7e28db3000200ff01800a0000ebfc0607bdff59100ac45761547a681f009ceeff5acba400001fb700674f00c8e365d00b5033bf79ac2dfc061f15003901dee2000000000062068f5ee50c08af9b1c568302ffff02ff03310800ab0840024f02d8e9e90539062a80e605007f71174ab498ff0b3e5a1b47b6df7b23de8caa000000", 0x10c)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000500)={'veth1\x00', <r7=>0x0})
r8 = socket$packet(0x11, 0x3, 0x300)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmmsg$inet(r9, 0x0, 0x0, 0x4044885)
sendto$packet(r8, &(0x7f0000000640)="ffffffffffff0011223344554305000f3200000000010011221f445500112233445500ff0000", 0x26, 0x4c004, &(0x7f0000000800)={0x11, 0x1a, r7, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14)
sendmsg$nl_route(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@dellink={0x34, 0x11, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}]}, 0x34}}, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x0)

13m11.733986924s ago: executing program 34 (id=1042):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x80)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @void}, 0x10)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x88, 0x40, &(0x7f00000010c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4e8, 0x0, 0x1c8, 0xf8, 0x290, 0x498, 0x538, 0x538, 0x538, 0x538, 0x538, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x21, 0x2}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x1ff, 0x1, [0x37, 0x33, 0x40, 0x24, 0x23, 0x13, 0x1d, 0x7, 0x32, 0x1, 0x3c, 0x3f, 0x16, 0xd, 0x15, 0x1a], 0x0, 0xc7, 0x9}}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x4, 0x1, @ipv6=@remote, 0xfff9}}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0xcb, 0x2}}}, {{@uncond, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x3, 'system_u:object_r:hwdata_t:s0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x0, @rand_addr=0x64010101, 0x4e21}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x548)

13m7.191946547s ago: executing program 0 (id=1048):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000180)={[{@init_itable_val={'init_itable', 0x3d, 0x6}}, {}, {@nojournal_checksum}, {@norecovery}, {@dioread_nolock}, {@grpjquota}, {@noauto_da_alloc}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}]}, 0xfd, 0x585, &(0x7f0000000580)="$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")
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$ITER_CREATE(0xb, &(0x7f0000000100)={0x0}, 0x8)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_buf(r1, 0x0, 0x18, 0x0, &(0x7f0000000080))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, r1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x40000000000035d, 0x20000084)
recvmmsg(r2, &(0x7f00000000c0), 0x191d1f8, 0x10042, 0x0)
syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x3008003, &(0x7f0000002ac0)=ANY=[], 0x2, 0x211, &(0x7f00000004c0)="$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")
fadvise64(0xffffffffffffffff, 0x54056, 0x55156, 0x3)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x4}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x22)
quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000340)='name', &(0x7f00000000c0)='\xf6gr\xe7lo_', 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000100)='name', &(0x7f0000000140)='ccnA\xf6gr\xe7lo_', 0x0)

13m4.304710673s ago: executing program 0 (id=1050):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setparam(r0, &(0x7f00000006c0)=0x4)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, 0x0, 0x0)
socket(0x1e, 0x4, 0x0)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0)
sendmmsg(r3, &(0x7f0000003240), 0x4000000000000e4, 0x0)
bind$802154_raw(0xffffffffffffffff, 0x0, 0x0)
r5 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x5, 0xd, 0x0, &(0x7f0000000000)="259a53f271a76d2673004c6588", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11)

13m3.156080219s ago: executing program 0 (id=1051):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000"], 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
setitimer(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
alarm(0x38)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x8000)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x17, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffff7f850000006a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f00000003c0)={0x1, 0x3, 0x2, 0x1, 0xf9})
setns(0xc9, 0x0)
prlimit64(r0, 0x6, 0x0, &(0x7f0000000300))
userfaultfd(0x0)

13m0.880127721s ago: executing program 0 (id=1053):
bind$unix(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x4b4, 0x7b1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0xb, "", [{{0x9, 0x4, 0x0, 0xd, 0x82, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x1001, 0xff, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x7b, 0x9}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000001040)={0x24, 0x0, 0x0, &(0x7f00000010c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "04e6c17b"}]}}, 0x0}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)

12m58.195508622s ago: executing program 0 (id=1057):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000180)={[{@init_itable_val={'init_itable', 0x3d, 0x6}}, {}, {@nojournal_checksum}, {@norecovery}, {@dioread_nolock}, {@grpjquota}, {@noauto_da_alloc}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}]}, 0xfd, 0x585, &(0x7f0000000580)="$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")
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$ITER_CREATE(0xb, &(0x7f0000000100)={0x0}, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x50)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_buf(r1, 0x0, 0x18, 0x0, &(0x7f0000000080))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, r1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x40000000000035d, 0x20000084)
recvmmsg(r2, &(0x7f00000000c0), 0x191d1f8, 0x10042, 0x0)
syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x3008003, &(0x7f0000002ac0)=ANY=[], 0x2, 0x211, &(0x7f00000004c0)="$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")
fadvise64(0xffffffffffffffff, 0x54056, 0x55156, 0x3)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x4}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x22)
quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000340)='name', &(0x7f00000000c0)='\xf6gr\xe7lo_', 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000100)='name', &(0x7f0000000140)='ccnA\xf6gr\xe7lo_', 0x0)

12m54.848641108s ago: executing program 0 (id=1059):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
llistxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f0000000440)=ANY=[@ANYBLOB='nodots,showexec\x00dots,uid=', @ANYRESHEX=0x0, @ANYBLOB=',check=normal,fmask=00000000000000000000002,sys_immutable,nodots,dots,nodots,nodots,nodots,fmask=00000000000000000177777,dots,quiet,nodots,nodots,check=relaxed,nodots,umask=00000000000000000076645,nodots,nodots,nfs=stale_rw,nodots,smackfsfloor=fmask,defcontext=unconfined_u,permit_directio,permit_directio,fscontext=staff_u,seclabel,euid>', @ANYRESOCT, @ANYRES64], 0x1, 0x1f5, &(0x7f0000000600)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0)
ftruncate(r3, 0x8800000)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1})
socket$inet6(0xa, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)

12m39.398907309s ago: executing program 35 (id=1059):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
llistxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f0000000440)=ANY=[@ANYBLOB='nodots,showexec\x00dots,uid=', @ANYRESHEX=0x0, @ANYBLOB=',check=normal,fmask=00000000000000000000002,sys_immutable,nodots,dots,nodots,nodots,nodots,fmask=00000000000000000177777,dots,quiet,nodots,nodots,check=relaxed,nodots,umask=00000000000000000076645,nodots,nodots,nfs=stale_rw,nodots,smackfsfloor=fmask,defcontext=unconfined_u,permit_directio,permit_directio,fscontext=staff_u,seclabel,euid>', @ANYRESOCT, @ANYRES64], 0x1, 0x1f5, &(0x7f0000000600)="$eJzs3cFqE1EUANCbmCYTcdGdIAgjLnRV1C+oSAUxIFSy0J2gK7NqN6mb9jP8Bf/LD5CuCiJP4kw6MU1jCGRG4zmb3pn7Xt+7M2SSTW5SFL7e/hxZ1or2fuzH91bsRjumzgIA2CYXKcW3VGh6LwBAPVZ4//9R85YAgA17/ebty6eDwcFhnmcR52fj4XhY/C3yz18MDh7lv+xWs87H4+GNy/zjfP6zwyS/EzfL/JNifn6Z7kbEsBsP7xf5Se7Zq0H++/xevN9w7QAAAAAAAAAAAAAAAAAAAAAA0JS7kU8t7O+ztzef75f54mimP9Bc/55O3OmUh1V7oHRaR1EAAAAAAAAAAAAAAAAAAADwjzk++fTx3Wj04agKehExe6azYMz1Qav8xysNbj5ox3rT+2WZayzaKi/RZgvsL765qwTR+VvuzrpBXsNa/aWXN6VJsPhVMG2Lce30bkQsX/3B4bqbv0gpjb7cOzo+ibR0cPWM6NX6RAIAAAAAAAAAAAAAAAAAgP/XzLe+r8ia2BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANKD6/f9JcPXM0uA0Im7FHwdP19qJrNFaAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2F4/AwAA//856SI7")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0)
ftruncate(r3, 0x8800000)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1})
socket$inet6(0xa, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)

11m40.360020984s ago: executing program 7 (id=1171):
setreuid(0xee01, 0x0)
mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r4, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x73)
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
futex(0x0, 0x2, 0x0, 0x0, 0x0, 0xb0090198)
r5 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
sendmmsg$inet6(r5, &(0x7f0000002940), 0x40000000000017d, 0x888)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}})
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
openat(0xffffffffffffff9c, 0x0, 0x105042, 0xd)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r6=>0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r6, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0)
futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0)

11m38.257016712s ago: executing program 7 (id=1173):
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3)
syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000245000/0x400000)=nil)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r1, &(0x7f0000000000)='3', 0x4e)
sendmsg$AUDIT_SET_FEATURE(r1, 0x0, 0x4000)
unshare(0x60040000)

11m37.583704108s ago: executing program 7 (id=1175):
getegid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x0)
fchdir(r4)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
ftruncate(r5, 0x2007ffb)
sendfile(r5, r5, 0x0, 0x1000000201005)

11m35.77590081s ago: executing program 7 (id=1179):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setparam(r0, &(0x7f00000006c0)=0x4)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10)
socket(0x1e, 0x4, 0x0)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0)
sendmmsg(r3, 0x0, 0x0, 0x0)
bind$802154_raw(0xffffffffffffffff, 0x0, 0x0)
r5 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x5, 0xd, 0x0, &(0x7f0000000000)="259a53f271a76d2673004c6588", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11)

11m34.370078643s ago: executing program 7 (id=1181):
setreuid(0xee01, 0x0)
mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r4, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x73)
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
futex(0x0, 0x2, 0x0, 0x0, 0x0, 0xb0090198)
r5 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
sendmmsg$inet6(r5, &(0x7f0000002940), 0x40000000000017d, 0x888)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}})
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
openat(0xffffffffffffff9c, 0x0, 0x105042, 0xd)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r6=>0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r6, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0)
futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0)

11m32.353445249s ago: executing program 7 (id=1184):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000180)={[{@init_itable_val={'init_itable', 0x3d, 0x6}}, {}, {@nojournal_checksum}, {@norecovery}, {@dioread_nolock}, {@grpjquota}, {@noauto_da_alloc}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}]}, 0xfd, 0x585, &(0x7f0000000580)="$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")
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$ITER_CREATE(0xb, &(0x7f0000000100)={0x0}, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x50)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_buf(r1, 0x0, 0x18, 0x0, &(0x7f0000000080))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, r1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x40000000000035d, 0x20000084)
recvmmsg(r2, &(0x7f00000000c0), 0x191d1f8, 0x10042, 0x0)
syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x3008003, &(0x7f0000002ac0)=ANY=[], 0x2, 0x211, &(0x7f00000004c0)="$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")
fadvise64(0xffffffffffffffff, 0x54056, 0x55156, 0x3)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x4}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x22)
quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000340)='name', &(0x7f00000000c0)='\xf6gr\xe7lo_', 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000100)='name', &(0x7f0000000140)='ccnA\xf6gr\xe7lo_', 0x0)

11m16.756051561s ago: executing program 36 (id=1184):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000180)={[{@init_itable_val={'init_itable', 0x3d, 0x6}}, {}, {@nojournal_checksum}, {@norecovery}, {@dioread_nolock}, {@grpjquota}, {@noauto_da_alloc}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}]}, 0xfd, 0x585, &(0x7f0000000580)="$eJzs3V9rU+cfAPDvSRur1t+vFUS2XQzBiznE1Lb742CguxybTNjuXWhjkaZGmlRsJ0wv5s1uhgzGmDD2Ana/S9kb2KsQNkGGlO1iDDpOelJjmzRpTW1sPx847fPknOQ53zznec7znJOQAPatE+mfXMSrEfFNEjHStG4wspUnVrdbfnJrKl2SWFn59M8kzq97rST7P5xlXomIX7+KOJ3bWG51cWm2WC6X5rP8WG3u+lh1cenM1bniTGmmdG1icvLc25MT7737Ts9iffPS399/8uDDc1+fXP7u50dH7yVxIY5k69K4elDE7ebMieK/WSofF9ZtON6DwvpJsts7wLYMZO08H2kfMBIDWasH9r4vI2IF2KeSje1/qN22OX0F7CGNcUBjbt+jefBL4/EHqxOgjfEPrl4biYP1udHh5eSZmVE63x3tQflpGb/8cf9eusTm1yEOdcgDbMntOxFxdnBwY/+XZP3f9p2tXzze3Poy9tv5B3bTg3T8k9yOWGv/A9ma3Nr4J1qMf4ZbtN3t6Nz+c496UExb6fjv/Zbj37Wua3Qgy/2vPubLJ1eulktnI+L/EXEq8kNpfrP7OeeWH660W9c8/kuXtPzGWDDbj0eDQ88+Z7pYKz5PzM0e34l4reX4N1mr/6RF/afvx6Uuyzheuv96u3Wd499ZKz9FvNGy/p/e0Uo2vz85Vj8exhpHxUZ/3T3+W7vydzv+tP4Pbx7/aNJ8v7a69TJ+PPhPqd267R7/B5LP6ukD2WM3i7Xa/HjEgeTjweH1j088fW4j39g+jf/Uydbtf7PjP518fd5l/HeP3W27aT/U//SW6n/riYcfffFDu/K7q/+36qlT2SPd9H/d7uDzvHcAAAAAAADQb3IRcSSSXGEtncsVCquf7zgWh3PlSrV2+kpl4dp01L8rOxr5XONO90jT5yHGs8/DNvIT6/KTEXE0Ir4dOFTPF6Yq5endDh4AAAAAAAAAAAAAAAAAAAD6xHCb7/+nfh/Y7b0Ddlz9hw2GOm+nP4C9p+NP/vfil56AvtSx/QN71tbbv5kA7BXO/7B/dd3+u7hGCLxcnP9h/+q2/edHdnhHgBfO+R/2L+0fAAAAAAAAAAAAAAAAAAAAAAAAAAAAeurSxYvpsrL85NZUmp++sbgwW7lxZrpUnS3MLUwVpirz1wszlcpMuVSYqsx1er1ypXJ9fCIWbo7VStXaWHVx6fJcZeFa7fLVueJM6XIp/0KiAgAAAAAAAAAAAAAAAAAAgJdLdXFptlgul+Yl2ibOR1/sxk4GuGpbTx/slygkeprY5Y4JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJr8FwAA//8U8S+G")
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$ITER_CREATE(0xb, &(0x7f0000000100)={0x0}, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x50)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_buf(r1, 0x0, 0x18, 0x0, &(0x7f0000000080))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, r1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x40000000000035d, 0x20000084)
recvmmsg(r2, &(0x7f00000000c0), 0x191d1f8, 0x10042, 0x0)
syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x3008003, &(0x7f0000002ac0)=ANY=[], 0x2, 0x211, &(0x7f00000004c0)="$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")
fadvise64(0xffffffffffffffff, 0x54056, 0x55156, 0x3)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x4}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x22)
quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000340)='name', &(0x7f00000000c0)='\xf6gr\xe7lo_', 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000100)='name', &(0x7f0000000140)='ccnA\xf6gr\xe7lo_', 0x0)

9m31.63189159s ago: executing program 8 (id=1407):
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f0000005700)={[{@io_bits={'io_bits', 0x3d, 0x2}}, {@jqfmt_vfsv0, 0x0}, {@nolazytime}, {@grpjquota={'grpjquota', 0x3d, 'rootcontext'}}, {@extent_cache}, {@heap}, {@lazytime}, {@noinline_dentry}, {@quota}, {@four_active_logs}, {@adaptive_mode}, {@user_xattr}, {@memory_low}, {@discard}], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/fuse\x00'}}, {@audit}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@euid_gt}]}, 0xf7, 0x5548, &(0x7f0000000180)="$eJzs3EtvG2UXAODj3Hr9+kWIBbuOVCElUh3V6UWwK9CKi2hVFViwAsd2LLe2J4pdN3TFgiViwT9BILFiyW9gwRpWiAWIHRLI805QExogihsT8jzS+Mwcz5w5Y0WRzvgSwLG1mP3yUyXOxamImI2IsxHFeqVcCtdTeC4isoiYeWyplPk/EgsRcToizo2Lp5qV8qlPL44uXP3xjZ+/+ubE3JnPvvx2elcNTNvzEdHbSOsPeynm7RTvlfn6qFPE3pVRGdMTvfvF9kIvT/mHrbWiwsP69n71mIuIy+20f77xYDCO6916YxzbnfUiv9FPJxyM2tt1igPu1TeL7WZrrYidQV7E9qPU19aj9L/t0WCY6jTXi/NtGw4bZUznaW210vVs3C9ioz8s86lu3mxtjeOojOXpopF3m0Ufawd4of/l3uz0H2xlo9bmoJP3s6srtRdWateqtc282Rq2rlTrvea1K9lSuzverTps1XvX23ne7rZWGnlvOVtqNxrVWi1butFa69T7Wa22cnnlUvXqcrl2MXv19jtZt5ktjePLnf6DYac7yNbzzSwdsZytrlx+cTm7UMveunUnu3P35s1bd95+78a7t1+69for5U5/aitbWr20ulqtXaqu1paP0fV/VDY9weuHA6lMuwGAo2e/8/958z8wAROY/+PJ8//m3Yh6kX+a83/smv+L+MH23L9j/p+LMP/v5UjNv8d9/v/r658/+F8D7JP5HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg2Ppu/vPXipXFtH2mzP+vTD1TblciYiYifnuC2VjYUXO2rDO/x/7zu3r4uhJFhfE5TpTL6Yi4Xi6//n/P9iuTeyUAAADgv+mLD89/kqb19LA47YY4TOmmzczZ9ydUrxIR84s/7POok3vkZ8YPzx68q6T5fcRcbE2oWnEDa6/G96245TY3qWr/yOyOcPKxUElhZvcRC4fYHQAA8HTsnAQOdwoBAADgMH087QaYjuKz8+Vn8cu3906kUL4heGrHFgAAAHDUnPLdeQAAADgOivn/iP/+HwAAAPA30u//AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDv7NzbrdowHAfgfwIp9Kaiqu9dpW8wRkfoCJQBugQj0BW6ADPQt45QkYrYqqCiRxzFhMPR90nBcUh+2Fwe7CADAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANf0s9ksvi8/fuubs2/7KdMbAAAA4Jxds1l0O7NUf52Pv82H3ud6FRF1RJwbu4/ixUnmKOc0/zm/+acNPyK6hMNrTPL2KiI+5e33u2u/CwAAAPB8bVfreRqtp4fZrRvEkNKkTf3mc4+Mr0f7VUQ0s1+925XUh7wPhcK67/c4poXSugmsUmFpym1cKu0i3c/976zd9KioUlE/fH2xvgMAAAManRTDjkIAAAAY0pfjSnW7dlBEe/FH2J2Y/4ufbwVOUpFv7708qQEAAAB3yFwPAAAA3Jl28uhLuvH/U13/r1qm56z/BwAAAP2k9f8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4pl2zWWxX63nfnH3bT5neAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8If9eUeBEAiDMNi7vjOZ+x9WGjQ1NakC4eNvDAYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHjzu7/8n5gaZ5K518bS80iydmpsnRp758bRH8bXrwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALvbnJQVCIAiiYM7430nf/7CSoGcQIQIaHlXUogEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvuh3v/yfmBpnkrnTxtLxSLJ21di6auw9aBw9GG//BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALnbu30WOKg4A+JuZnY2JiuspV5yIgoU25rKJienEQjks/BOE49zEMxt/JFeYEMRr7OTqNKKliKCcXf6H1AmkiV2KKyJYK/Pr9mVz4PojM5vbzwfevO8Ow3vfNwtLvvMmBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI29tydxVhwGVZzW527dv7ZR9Len+sKNnTsrRSvipM2kHw8vxh+S5e4SAQAAYHFkTX0fQrib764VfToo6/+8uaao+b97uoqben667m/6pvYv2q+/3Ht+f6JBNU8x6LnN8ejEw6n0Ht0q59szf3tFr7zz5bOXrPxC0ve2n9vLy/uZfHPz5jv9MjzSRrYAwL9xvOnroPn3UNEPu0wMgIXRiwrvpv7PBt3mBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANCGve3wZBMnIYSV3iQu3L5/beOg/sbOnZWmnbl+fScesxgiDyGc2xyPTrS4lnl3+crVC+vj8ehS+8FLIYSuZn+rXv6FD2a4OIRO7o/gfwrS+suel3zioP5pC/OSzyTo6AcJAIBDK69bUdffzXfXinPJUgh/fv9g/f9qFIeD6v+vqvNx/X/vozO34rni+n/Y0voeB6tbFz9bvXzl6uubF9fPj86PPnnj5PDN4amzp0+fXS2flax6YgIAAMB/069bXP+nSw/v/x+L4jDj/v/n3w6/jOfKpur/QWurnG+TTb+uMwEAAFhsz778x+/JAeeTfj98sb61dWlYHfc/n6yOHaT6jx2pW1z/Z0tdZwUAAAC0YW87eWD//8MoDjPu/z/1wws/xWNmIYSj9f7/8Y1Px9NjLqo2/jtx12sEAACgW0frFu//5+X7/+l+WZ6GEF57pYqbv5U1S/2fvfv1j/Fc8fv/p9pb4lxKl6v7UfbLIfSWu84IAACAw+yJuhXF/m/57trHPx97v+/9fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC2/RUAAP//tss7QA==")

9m26.768049623s ago: executing program 8 (id=1417):
setreuid(0xee01, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socket$unix(0x1, 0x2, 0x0)
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)

9m24.767731369s ago: executing program 8 (id=1420):
socket$inet6(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6(0xa, 0x2, 0x0)
mkdir(&(0x7f0000000000)='./mytrace\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./mytrace\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mytrace/events/xhci-hcd/xhci_address_ctrl_ctx/inject\x00', 0x2, 0x0)
write(r3, &(0x7f0000000680)='drop=1T', 0x7)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'veth0_vlan\x00', {0x4}, 0x26})

9m23.515158508s ago: executing program 8 (id=1422):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x4c040)
ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000300)={{0x2, 0x2000, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x31857717b80f31eb}}, 0x16, {0x2, 0x4e22, @private}, 'syz_tun\x00'})

9m22.459905063s ago: executing program 8 (id=1424):
mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x290, 0x300, 0x18c, 0x203, 0x0, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
mount(0x0, 0x0, &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0)
write(r4, &(0x7f0000000500)='0123:abcd:k,', 0xc)

9m18.855902026s ago: executing program 8 (id=1429):
syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0xa00008, &(0x7f0000000140)={[], [{@dont_hash}, {@subj_role={'subj_role', 0x3d, '+{$,/--'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@subj_type={'subj_type', 0x3d, '*$'}}, {@pcr={'pcr', 0x3d, 0x3f}}, {@subj_type={'subj_type', 0x3d, '\xd3\'--\'[.,@:{$!*+{\xdd,!'}}, {@pcr={'pcr', 0x3d, 0x36}}, {@smackfsfloor={'smackfsfloor', 0x3d, '.'}}, {@measure}, {@subj_type={'subj_type', 0x3d, '^q'}}]}, 0x1, 0x7ba, &(0x7f0000001740)="$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")
copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0xae8, 0x863, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
llistxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
r3 = userfaultfd(0x80801)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22843, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @remote}, {0x0, @multicast}, 0x4, {0x2, 0x4e23, @loopback}, 'wg1\x00'})
ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, 0x0)
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1})
ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1})
socket$inet6(0xa, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/synthetic_events\x00', 0x2, 0x0)
write(r7, &(0x7f0000000300)='foo int x; bar int', 0x12)
clock_adjtime(0x0, &(0x7f00000004c0)={0x930b, 0x0, 0x4, 0x6, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0xffffffffffffffff, 0x1ff, 0x0, 0x400})
syz_open_dev$tty20(0xc, 0x4, 0x0)

9m3.136150061s ago: executing program 37 (id=1429):
syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0xa00008, &(0x7f0000000140)={[], [{@dont_hash}, {@subj_role={'subj_role', 0x3d, '+{$,/--'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@subj_type={'subj_type', 0x3d, '*$'}}, {@pcr={'pcr', 0x3d, 0x3f}}, {@subj_type={'subj_type', 0x3d, '\xd3\'--\'[.,@:{$!*+{\xdd,!'}}, {@pcr={'pcr', 0x3d, 0x36}}, {@smackfsfloor={'smackfsfloor', 0x3d, '.'}}, {@measure}, {@subj_type={'subj_type', 0x3d, '^q'}}]}, 0x1, 0x7ba, &(0x7f0000001740)="$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")
copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0xae8, 0x863, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
llistxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
r3 = userfaultfd(0x80801)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22843, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @remote}, {0x0, @multicast}, 0x4, {0x2, 0x4e23, @loopback}, 'wg1\x00'})
ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, 0x0)
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1})
ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1})
socket$inet6(0xa, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/synthetic_events\x00', 0x2, 0x0)
write(r7, &(0x7f0000000300)='foo int x; bar int', 0x12)
clock_adjtime(0x0, &(0x7f00000004c0)={0x930b, 0x0, 0x4, 0x6, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0xffffffffffffffff, 0x1ff, 0x0, 0x400})
syz_open_dev$tty20(0xc, 0x4, 0x0)

7m58.186058607s ago: executing program 4 (id=1663):
r0 = socket$inet6(0xa, 0x80001, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$inet6(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000022c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private1, 0x4e23, 0x0, 0xffff, 0x8000, 0x2}, {0x0, 0x1, 0x0, 0xfffffffffffe, 0x5, 0x9}, {0x0, 0x0, 0x0, 0x2}, 0x80006c, 0x0, 0x1, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00', 0xffffffff, 0x33}, 0xa, @in=@empty, 0x3507, 0x1, 0x1, 0x0, 0x40000, 0x8007c, 0xfffffffe}}, 0xe8)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0xaf, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0xfffffffd}, 0x1c)
openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x242000, 0x110, 0x32}, 0x18)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r6 = dup(r5)
sendmsg$inet(r6, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{0x0}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x38}, 0x0)
read$FUSE(r6, &(0x7f0000001b80)={0x2020}, 0x2020)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000340)={0x0, <r8=>0x0}, &(0x7f0000000080)=0xc)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000840)={[{@fat=@nfs}, {@fat=@dos1xfloppy}, {@fat=@sys_immutable}, {@numtail}, {@utf8}, {@numtail}, {@uni_xlate}, {@uni_xlate}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@rodir}, {@fat=@uid={'uid', 0x3d, r8}}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@shortname_lower}, {@shortname_lower}, {@fat=@check_strict}]}, 0x1, 0x38c, &(0x7f0000000380)="$eJzs3U+IW8UfAPBv+pLdTeHX3cMPioISvQm69A8eFA9byhaKuaiEVg9isFuUzVrYYHB7aLpexKPgUUHwIh704KFnERTx5sGrVbQqHrS3gsWRJC/Ja5PdrtRtXfx8DuWb78y8mXmdTd6+R2ZfuJ5Wz1Ti7NWrV2JurhTlpeNLca0UC5HF0MWYNDMlBwDsDddSit/TwCiZTYnGSndoaADALul9/qduMfP659vVTz79AWDPy3//r25XZ24y9eMTvX/P7d64AIDdM3H//8Fx2f2Dx/yFR/3lqQ8EAIC95Zlnn3vyWD3i6WptLmLtjU6j04jHx+XHzsbL0YqVOBTzcT1icKGQUjr9ff/FiZP15UO1Wq0bPy1EIyLe6zQi1rqdxuBK4VjWbz8bh2M+FvL2+dVGSik78Ul9+XCtLyIudvv9x1qp06jE/rz/b/fHShyJWvx/on3EyfrykVp+gMbasH03YnN836I3/sWYj69fjHPRijPVU5HS8LKmvnzhcK12PNVvaN9pzMaZ0VmYcgcEAAAAAAAAAAAAAAAAAAAAAABuw2JtZGG0/00a79+zuDilvL8/zqB9vj/Q5mB/oDSbIqXfXnuk8WY22KtnuD/QzfvzdBrl2Hd3pw4AAAAAAAAAAAAAAAAAAAD/Gu2NmWi2Wivr7Y3zq8Wgu97e2BcRvcwrX370WTUm69wiKOd9FIpqeer8ajNlw8opu6FOHmS9zoeZDy+NRlysMzuaxdRh9IrbM1vU+d8DP7wzztyXDY/857hOFtMnmN00jGFQiYi1AxFRjRgVVcZT3vKMHc2DI7c4q5dTSlsd58Lzk62iFFH++/9x2wepF3xx5aV7jrYPPtrPfJoGHnp4/tTlt9//ZbXZ6vXc0/pgZr19Pa0289fTF9tKqbxFp1lh/ZTyc1gqroTydkPdvDHTzL759fS9b321s5mmYubVKXWywXQ+Xm9vlPKflH7RzCDo5W5qVW2dzCLOL0XxOJUpi//2gqmL7eC7S81LF777eafHKbxJjDfqqP7T7z8AAAAAAAAAAAAAAAAAAMBY4bviufzLvpXtWj32VB7M7e7oAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODOGP/9/0KwOZHZSfBHNyaLZlfW2xEH7vY0AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4j/srAAD//x9pY8c=")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x2000012, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x4e22, 0x0, @empty}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000001300e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff00000000"], 0x310)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x321}}}, 0x108)
r9 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00')
preadv(r9, &(0x7f0000000000)=[{&(0x7f0000001bc0)=""/126, 0x7e}], 0x1, 0x111, 0x0)

7m45.710915517s ago: executing program 4 (id=1699):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "dce02de9d7bd466b", "72e64b3892cb7025848c9f40363cf916", "cfff3c66", "e2b768b4bb9e0d9b"}, 0x28)
sendto$inet6(r0, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0)
close(r0)

7m44.332192999s ago: executing program 4 (id=1703):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "dce02de9d7bd466b", "72e64b3892cb7025848c9f40363cf916", "cfff3c66", "e2b768b4bb9e0d9b"}, 0x28)
sendto$inet6(r0, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0)

7m44.048065735s ago: executing program 4 (id=1704):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000140)='securityfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)=""/218, 0xda}], 0x2, 0x8000, 0x3)

7m43.672209224s ago: executing program 4 (id=1706):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x3, @loopback}, 0x10)
sendmmsg$inet(r0, &(0x7f0000006a80)=[{{0x0, 0x0, &(0x7f0000006980)=[{&(0x7f0000003880)='<', 0x1}], 0x1}}], 0x1, 0x404c8d0)

7m43.583170496s ago: executing program 4 (id=1708):
r0 = socket$inet6(0xa, 0x80001, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$inet6(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000022c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private1, 0x4e23, 0x0, 0xffff, 0x8000, 0x2}, {0x0, 0x1, 0x0, 0xfffffffffffe, 0x5, 0x9}, {0x0, 0x0, 0x0, 0x2}, 0x80006c, 0x0, 0x1, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00', 0xffffffff, 0x33}, 0xa, @in=@empty, 0x3507, 0x1, 0x1, 0x0, 0x40000, 0x8007c, 0xfffffffe}}, 0xe8)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0xaf, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0xfffffffd}, 0x1c)
openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x242000, 0x110, 0x32}, 0x18)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r6 = dup(r5)
sendmsg$inet(r6, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{0x0}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x38}, 0x0)
read$FUSE(r6, &(0x7f0000001b80)={0x2020}, 0x2020)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000340)={0x0, <r8=>0x0}, &(0x7f0000000080)=0xc)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000840)={[{@fat=@nfs}, {@fat=@dos1xfloppy}, {@fat=@sys_immutable}, {@numtail}, {@utf8}, {@numtail}, {@uni_xlate}, {@uni_xlate}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@rodir}, {@fat=@uid={'uid', 0x3d, r8}}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@shortname_lower}, {@shortname_lower}, {@fat=@check_strict}]}, 0x1, 0x38c, &(0x7f0000000380)="$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")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x2000012, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x4e22, 0x0, @empty}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000001300e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff00000000"], 0x310)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x321}}}, 0x108)
r9 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00')
preadv(r9, &(0x7f0000000000)=[{&(0x7f0000001bc0)=""/126, 0x7e}], 0x1, 0x111, 0x0)

7m28.368166789s ago: executing program 38 (id=1708):
r0 = socket$inet6(0xa, 0x80001, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$inet6(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000022c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private1, 0x4e23, 0x0, 0xffff, 0x8000, 0x2}, {0x0, 0x1, 0x0, 0xfffffffffffe, 0x5, 0x9}, {0x0, 0x0, 0x0, 0x2}, 0x80006c, 0x0, 0x1, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00', 0xffffffff, 0x33}, 0xa, @in=@empty, 0x3507, 0x1, 0x1, 0x0, 0x40000, 0x8007c, 0xfffffffe}}, 0xe8)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0xaf, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0xfffffffd}, 0x1c)
openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x242000, 0x110, 0x32}, 0x18)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r6 = dup(r5)
sendmsg$inet(r6, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{0x0}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x38}, 0x0)
read$FUSE(r6, &(0x7f0000001b80)={0x2020}, 0x2020)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000340)={0x0, <r8=>0x0}, &(0x7f0000000080)=0xc)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000840)={[{@fat=@nfs}, {@fat=@dos1xfloppy}, {@fat=@sys_immutable}, {@numtail}, {@utf8}, {@numtail}, {@uni_xlate}, {@uni_xlate}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@rodir}, {@fat=@uid={'uid', 0x3d, r8}}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@shortname_lower}, {@shortname_lower}, {@fat=@check_strict}]}, 0x1, 0x38c, &(0x7f0000000380)="$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")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x2000012, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x4e22, 0x0, @empty}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000001300e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff00000000"], 0x310)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x321}}}, 0x108)
r9 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00')
preadv(r9, &(0x7f0000000000)=[{&(0x7f0000001bc0)=""/126, 0x7e}], 0x1, 0x111, 0x0)

2m11.49610354s ago: executing program 5 (id=2593):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)
write(r0, &(0x7f0000000000)='3', 0x4e)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8)
sendto$inet6(r1, &(0x7f00000005c0)="f5", 0x1, 0x4804, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x79}, 0x1c)

2m11.037186271s ago: executing program 5 (id=2594):
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x90, 0x0, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x34, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x4}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x46}]}]}, @CTA_EXPECT_NAT={0x48, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2a}}}}]}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x40810}, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000004, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x5, 0x5, 0xd500, 0x8, 0x79, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, &(0x7f00000001c0)=0x8, 0x4)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

2m10.792506917s ago: executing program 5 (id=2596):
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000400)=0x14e1, 0x4)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x1, 0x1, 0x5, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x20044040}, 0x40)
fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x40000)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x20040041)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
write$tcp_mem(0xffffffffffffffff, &(0x7f0000000140)={0x5, 0x2d, 0x2, 0x3a, 0x0, 0x2c}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94)

2m5.815834632s ago: executing program 5 (id=2599):
openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/bus/input/handlers\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
tkill(0x0, 0x13)
tkill(0x0, 0x12)
waitid(0x1, 0x0, 0x0, 0x8, &(0x7f00000003c0))
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000006c0)=ANY=[@ANYRES64=r2], &(0x7f0000000000)='GPL\x00', 0x10000000, 0x0, 0x0, 0x0, 0x11}, 0x94)
syz_emit_vhci(&(0x7f0000005f00)=ANY=[@ANYBLOB="04040aaaaaaaaa11939000c883"], 0xd)
mount(0x0, &(0x7f0000000040)='./sys\x00', 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, 0x0, 0x1a880, 0x0)
write$eventfd(0xffffffffffffffff, &(0x7f0000000940)=0xffffffffffffffff, 0x8)
write(r4, &(0x7f0000000400)='0x', 0x2)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

2m3.73789159s ago: executing program 5 (id=2603):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
clock_adjtime(0x0, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x70)
syz_emit_ethernet(0x0, 0x0, 0x0)
mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x0, 0x0)

2m3.387842118s ago: executing program 5 (id=2605):
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0xe3, @mcast2, 0x3}, 0x1c)
r1 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000005c0)={'syztnl0\x00', &(0x7f0000000540)={'ip6gre0\x00', 0x0, 0x2f, 0x1, 0x5, 0x6, 0x10, @loopback, @local, 0x7800, 0x7800, 0x0, 0x1}})
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9588, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

1m47.875737918s ago: executing program 39 (id=2605):
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0xe3, @mcast2, 0x3}, 0x1c)
r1 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000005c0)={'syztnl0\x00', &(0x7f0000000540)={'ip6gre0\x00', 0x0, 0x2f, 0x1, 0x5, 0x6, 0x10, @loopback, @local, 0x7800, 0x7800, 0x0, 0x1}})
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9588, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

1m14.764239166s ago: executing program 3 (id=2667):
eventfd2(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f00000053c0)={0x0, 0x0, &(0x7f0000005380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4000000001020102000825bb0d00"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000fee000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})

1m14.604281149s ago: executing program 3 (id=2668):
r0 = syz_usb_connect$hid(0x0, 0x34, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005200973a10185010a19031500250575089501b1020a16031500250575089501b10285020a5304150025057508950181020a5404150025057508950181020a550415002505750895018102c0"], 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)

1m13.800100339s ago: executing program 3 (id=2671):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ipvlan0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xfffe, 0xffffffffffffffff, 0x0, 0x0, 0x8}])
r3 = getpid()
syz_pidfd_open(r3, 0x0)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x9100, &(0x7f0000000140)={0x6, 0x8a, 0x40000}, 0x37)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota')
r4 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188)
quotactl_fd$Q_SETINFO(r4, 0x0, 0x0, 0x0)

1m12.033100329s ago: executing program 3 (id=2673):
socket$inet6(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
mkdir(&(0x7f0000000000)='./mytrace\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./mytrace\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mytrace/events/xhci-hcd/xhci_address_ctrl_ctx/inject\x00', 0x2, 0x0)
write(r4, &(0x7f0000000680)='drop', 0x4)
sendmsg$inet6(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0xa, 0x4e1e, 0x80000, @rand_addr=' \x01\x00', 0x5}, 0x1c, 0x0}, 0x8000)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'veth0_vlan\x00', {0x4}, 0x26})

1m10.038208146s ago: executing program 3 (id=2676):
eventfd2(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f00000053c0)={0x0, 0x0, &(0x7f0000005380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4000000001020102000825bb0d00"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000fee000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})

1m9.776804132s ago: executing program 3 (id=2678):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00'})
sendmsg$nl_route_sched(r0, 0x0, 0x0)
personality(0x8)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
dup(r1)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
io_submit(0x0, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}])
lseek(r4, 0x281e0cb5, 0x0)

54.72993081s ago: executing program 40 (id=2678):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_hsr\x00'})
sendmsg$nl_route_sched(r0, 0x0, 0x0)
personality(0x8)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
dup(r1)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
io_submit(0x0, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}])
lseek(r4, 0x281e0cb5, 0x0)

35.201665724s ago: executing program 2 (id=2727):
eventfd2(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f00000053c0)={0x0, 0x0, &(0x7f0000005380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4000000001020102000825bb0d00"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000fee000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})

34.248863686s ago: executing program 2 (id=2731):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0)
write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f)
read(r0, &(0x7f0000000900), 0x100)

34.027739731s ago: executing program 2 (id=2733):
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_tcp(0x2, 0x1, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
tkill(0x0, 0x13)
tkill(0x0, 0x12)
waitid(0x1, 0x0, 0x0, 0x8, &(0x7f00000003c0))
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000006c0)=ANY=[@ANYRES64=r2], &(0x7f0000000000)='GPL\x00', 0x10000000, 0x0, 0x0, 0x0, 0x11}, 0x94)
syz_emit_vhci(&(0x7f0000005f00)=ANY=[@ANYBLOB="04040aaaaaaaaa11939000c883"], 0xd)
mount(0x0, &(0x7f0000000040)='./sys\x00', 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, 0x0, 0x1a880, 0x0)
write$eventfd(0xffffffffffffffff, &(0x7f0000000940)=0xffffffffffffffff, 0x8)
write(r4, &(0x7f0000000400)='0x', 0x2)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

31.341070013s ago: executing program 2 (id=2735):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000540)='highspeed', 0x9)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r0, 0x0, 0x0, 0xc9100120, 0x0, 0x0)

28.922367099s ago: executing program 2 (id=2741):
eventfd2(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f00000053c0)={0x0, 0x0, &(0x7f0000005380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4000000001020102000825bb0d00"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000fee000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})

24.507798952s ago: executing program 2 (id=2745):
setns(0xc9, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map, 0xffffffffffffffff, 0x26}, 0x10)
socket$packet(0x11, 0x2, 0x300)
r3 = inotify_init1(0x0)
inotify_add_watch(r3, &(0x7f00000006c0)='.\x00', 0x40001a2)
r4 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
sendfile(r4, r4, &(0x7f00000000c0)=0x10000000004, 0x8112)
pwritev2(0xffffffffffffffff, &(0x7f00000020c0)=[{&(0x7f0000000180)="c1781283a3b0774fa68bb716beca1c5781d63a9ed0438129d734048a0563eeb966301f195d6039952c3c4d31f5a93c", 0x2f}, {&(0x7f0000000240)="bdfd39f1cf6d76a3d3327e", 0xb}, {&(0x7f0000001f00), 0xfffffffffffffff6}, {&(0x7f0000002000)}], 0x4, 0xf, 0x4, 0x2)
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000040))
readv(r5, &(0x7f0000000100)=[{&(0x7f0000000000)=""/31, 0x1f}], 0x1)
syz_emit_vhci(&(0x7f0000000680)=ANY=[@ANYBLOB="043e0c020105cb"], 0xf)
io_submit(0x0, 0x1, &(0x7f0000000440)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x1, 0xffffffffffffffff, &(0x7f0000000100)="653de841f0", 0x5, 0x8000}])
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000003f000500010000000000000001010000000000000f0001006f76732d73797374656d00000800020000000000080009002a"], 0x38}}, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000410005000200000000000000010100002a00000014000180100004000000000000000000000000000c00028008000100"], 0x38}}, 0x0)

16.480087198s ago: executing program 9 (id=2751):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x24008810}, 0x8010)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x4)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="5000000010001fff040000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00030000057e010008000a00", @ANYRES32=r6, @ANYBLOB="28001280090001007665746800"], 0x50}, 0x1, 0x0, 0x0, 0x488c5}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000)
sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000130005002cbd70000000010000000000", @ANYRES32=r2, @ANYBLOB="12030000000000000a000100aa"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9], 0x4c}}, 0x884)

14.555003702s ago: executing program 1 (id=2754):
r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x72f, 0x100, 0x8, 0x3b5}, 0x0, &(0x7f0000000280)=<r1=>0x0, &(0x7f00000004c0)=<r2=>0x0)
syz_ublk_add_dev(r0, 0x0, r1, r2, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r3=>0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0})
r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63)
syz_ublk_setup_queues(r4, r3, &(0x7f0000000340)={0x0, 0x0, 0x40, 0x1, 0x257}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x2000, 0x1000000, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8000, 0x800, 0x800, 0x22a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f6d, 0x8c, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb4ac, 0x20, 0x8, 0x9d7c}}], 0x1, &(0x7f00000014c0)={0x2e, 0x42, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0)
r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r6=>0x0)
syz_ublk_setup_queues(r5, r6, &(0x7f0000000180)={0x0, 0x2, 0x13, 0xfffffffe, 0x257}, 0x0, 0x1, 0x0, 0x0)

14.193274301s ago: executing program 6 (id=2755):
openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/bus/input/handlers\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_tcp(0x2, 0x1, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
tkill(0x0, 0x13)
tkill(0x0, 0x12)
waitid(0x1, 0x0, 0x0, 0x8, &(0x7f00000003c0))
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000006c0)=ANY=[@ANYRES64=r2], &(0x7f0000000000)='GPL\x00', 0x10000000, 0x0, 0x0, 0x0, 0x11}, 0x94)
syz_emit_vhci(&(0x7f0000005f00)=ANY=[@ANYBLOB="04040aaaaaaaaa11939000c883"], 0xd)
mount(0x0, &(0x7f0000000040)='./sys\x00', 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, 0x0, 0x1a880, 0x0)
write$eventfd(0xffffffffffffffff, &(0x7f0000000940)=0xffffffffffffffff, 0x8)
write(r4, &(0x7f0000000400)='0x', 0x2)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

11.700455679s ago: executing program 6 (id=2756):
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2})
clock_settime(0x0, &(0x7f0000000240)={0x77359400})

11.561259242s ago: executing program 1 (id=2757):
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000400)=0x14e1, 0x4)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x1, 0x1, 0x5, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x20044040}, 0x40)
fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f8000000160085"], 0xf8}}, 0x40000)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x20040041)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x134}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
write$tcp_mem(0xffffffffffffffff, &(0x7f0000000140)={0x5, 0x2d, 0x2, 0x3a, 0x0, 0x2c}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94)

11.416099415s ago: executing program 6 (id=2758):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=<r0=>0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
eventfd2(0x0, 0x0)
r2 = dup(r1)
syz_ublk_setup_queues(r2, r0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r3=>0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup(r4)
syz_ublk_setup_queues(r5, r3, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0)

9.214761846s ago: executing program 41 (id=2745):
setns(0xc9, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map, 0xffffffffffffffff, 0x26}, 0x10)
socket$packet(0x11, 0x2, 0x300)
r3 = inotify_init1(0x0)
inotify_add_watch(r3, &(0x7f00000006c0)='.\x00', 0x40001a2)
r4 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
sendfile(r4, r4, &(0x7f00000000c0)=0x10000000004, 0x8112)
pwritev2(0xffffffffffffffff, &(0x7f00000020c0)=[{&(0x7f0000000180)="c1781283a3b0774fa68bb716beca1c5781d63a9ed0438129d734048a0563eeb966301f195d6039952c3c4d31f5a93c", 0x2f}, {&(0x7f0000000240)="bdfd39f1cf6d76a3d3327e", 0xb}, {&(0x7f0000001f00), 0xfffffffffffffff6}, {&(0x7f0000002000)}], 0x4, 0xf, 0x4, 0x2)
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000040))
readv(r5, &(0x7f0000000100)=[{&(0x7f0000000000)=""/31, 0x1f}], 0x1)
syz_emit_vhci(&(0x7f0000000680)=ANY=[@ANYBLOB="043e0c020105cb"], 0xf)
io_submit(0x0, 0x1, &(0x7f0000000440)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x1, 0xffffffffffffffff, &(0x7f0000000100)="653de841f0", 0x5, 0x8000}])
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000003f000500010000000000000001010000000000000f0001006f76732d73797374656d00000800020000000000080009002a"], 0x38}}, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000410005000200000000000000010100002a00000014000180100004000000000000000000000000000c00028008000100"], 0x38}}, 0x0)

9.192204407s ago: executing program 1 (id=2760):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
getpid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280))
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
io_setup(0x3, 0x0)
keyctl$KEYCTL_PKEY_ENCRYPT(0x11, 0x0, 0x0, 0x0, 0x0)
syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0xa, 0x31, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xa, 0x31, 0xffffffffffffffff, 0x0)
futex(0x0, 0xb, 0x4, 0x0, &(0x7f0000048000), 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0)
ioctl$TIOCSSOFTCAR(r3, 0x5453, 0x0)
socket$unix(0x1, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000880)={[], [{@fowner_eq}, {@smackfsroot={'smackfsroot', 0x3d, '\'-'}}, {@uid_gt}, {@dont_hash}, {@fsuuid={'fsuuid', 0x3d, {[0x36, 0x33, 0x30, 0x30, 0x36, 0x69, 0x36, 0x30], 0x2d, [0x65, 0x56, 0x38, 0x32], 0x2d, [0x37, 0x39, 0x66, 0x31], 0x2d, [0x30, 0x39, 0x31, 0x62], 0x2d, [0x62, 0x35, 0x63, 0x62, 0x31, 0x62, 0x36, 0x38]}}}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x81)
truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r5, 0x40305829, &(0x7f0000000200)={0x17c04, 0xffffffffffffffff, 0x0, 0x973f, 0x83, 0x3})
sendfile(r4, r4, 0x0, 0xe3aa6ea)

9.083277739s ago: executing program 9 (id=2761):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000000000106d040cc500000000000109022400010000200209040005020300860009210000400122180009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1"], 0x0}, 0x0)

4.520090075s ago: executing program 1 (id=2762):
eventfd2(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f00000053c0)={0x0, 0x0, &(0x7f0000005380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4000000001020102000825bb0d00"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000fee000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})

4.464070327s ago: executing program 9 (id=2763):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettclass={0xffb4, 0x2a, 0x401, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x6, 0x4}, {0x8, 0x6}, {0xffe0, 0xf}}}, 0x24}}, 0x0)
io_setup(0x6, &(0x7f00000000c0)=<r0=>0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_async', 0x1a1081, 0x0)
io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000100)='9', 0x20000108}])

4.452194047s ago: executing program 6 (id=2764):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_BEARER_SET(r4, 0x0, 0x4040140)
write(r3, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff02000000000000", 0x1e5)
recvmmsg$unix(r3, &(0x7f0000006440)=[{{0x0, 0x0, 0x0}}], 0x11, 0x10002, 0x0)

2.727093757s ago: executing program 1 (id=2765):
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x88c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x9, 0x260, &(0x7f0000000a80)="$eJzs3b9uUmEYB+DXQgvpYmfjcBIXJ6JOrsTUxEhigmHQSZLq0hqT0wWduAyvwUvyBty72Mlj7Ielf7AOBb4DPE9Czpv8Djnvx8CB5P3g3f2Phwefjj9U379Gu11EM2JcVRF7sRWNSO5Mjltn9U5cNA4AYNX0+8Nu7h5YrLLsDrcjonUtGXzL0hAAAAAAAAAAAAC3Nmv+P07N/wPAOjP/v/7KsjvcnXx+u8z8PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJDPaVXdrW545O4PAJi/G+7/P6vk76nTCgBYab7/A8Dmcf8HgM3z+s3bl91eb79fFO2Ik/FoMBqkY8qfv+jtPyrO7E2fdTIaDRrn+eOUF5fz7did5E9m5jvx8EHK/2TPXvWu5K04WPzyAQAAAAAAAAAAAAAAAAAAoBY6xbmZ+/s7nX/lqbrw+wBX9u83415zacsAAAAAAAAAAAAAAAAAAACAlXb8+cvh8OjofVnf4ke2q7ci4j/n1PE1jKe1aGPZRcRSL/qrBkueW9G4HuV+ZwIAAAAAAAAAAAAAAAAAgM0z3fSbuxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyGf6//+LKyJiXCW5lwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACssd8BAAD//xg9nuE=")
mount$bpf(0x20000000f0ff, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0xfe, 0x0)

2.567717791s ago: executing program 6 (id=2766):
r0 = socket$packet(0x11, 0x2, 0x300)
mount(0x0, 0x0, &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
setsockopt$packet_int(r0, 0x107, 0x12, &(0x7f00000000c0)=0x9, 0x4)

2.384127575s ago: executing program 9 (id=2767):
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000400)=0x14e1, 0x4)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x1, 0x1, 0x5, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x20044040}, 0x40)
fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f8000000160085"], 0xf8}}, 0x40000)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x20040041)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x134}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
write$tcp_mem(0xffffffffffffffff, &(0x7f0000000140)={0x5, 0x2d, 0x2, 0x3a, 0x0, 0x2c}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94)

2.282317347s ago: executing program 6 (id=2768):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x24008810}, 0x8010)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x4)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="5000000010001fff040000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00030000057e010008000a00", @ANYRES32=r6, @ANYBLOB="28001280090001007665746800"], 0x50}, 0x1, 0x0, 0x0, 0x488c5}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000)
sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000130005002cbd70000000010000000000", @ANYRES32=r2, @ANYBLOB="12030000000000000a000100aa"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9], 0x4c}}, 0x884)

2.003254484s ago: executing program 1 (id=2769):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mkdir(&(0x7f0000000000)='./config\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, &(0x7f0000000400)='\x00')
mkdir(&(0x7f0000000500)='./config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000600)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdir(&(0x7f0000000700)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff)
symlink(&(0x7f0000000900)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', &(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h/file0\x00')
symlink(&(0x7f0000000b00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00')
mkdir(&(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ff)
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@jqfmt_vfsv1}, {@errors_remount}]}, 0x1, 0x52f, &(0x7f00000005c0)="$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")
mkdir(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ff)
mkdir(&(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r0, &(0x7f0000000200), 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f0, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2000, 0x200da5d85240a79d, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x4, 0x14, 0x68, 0x0, 0x80, 0x2b, 0x0, @empty, @empty}}}})
write$binfmt_script(r0, 0x0, 0x0)
symlink(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00')
symlink(&(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00')
symlink(&(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0\x00', &(0x7f0000001900)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00')
write(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x100012, 0xffffffffffffffff, 0x0)

182.753236ms ago: executing program 9 (id=2770):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0)
write(r0, &(0x7f0000000400), 0x0)
read(r0, &(0x7f0000000900), 0x100)

0s ago: executing program 9 (id=2771):
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2400, 0x0)
socket$inet6(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000840)={0x3f47, <r1=>0x0}, 0x8)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0x25, 0x6, @val=@target_btf_id=r1}, 0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, 0x0, 0x0, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9, 0x1}, 0x20)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x1080000, @mcast1, 0x40080}, 0x1c)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x3, 0x7fffffff}]})
close_range(r5, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

directio) comm="syz.3.2255" name="file1" dev="loop3" ino=15 res=0 errno=0
[ 1099.214402][T15804] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[ 1099.300266][T15815] loop6: detected capacity change from 0 to 64
[ 1099.385057][T15802] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 104 with error 28
[ 1099.425167][T15802] EXT4-fs (loop3): This should not happen!! Data will be lost
[ 1099.425167][T15802] 
[ 1099.456132][T15802] EXT4-fs (loop3): Total free blocks count 0
[ 1099.462181][T15802] EXT4-fs (loop3): Free/Dirty block details
[ 1099.494551][T15802] EXT4-fs (loop3): free_blocks=2415919504
[ 1099.510550][T15802] EXT4-fs (loop3): dirty_blocks=112
[ 1099.525107][T15802] EXT4-fs (loop3): Block reservation details
[ 1099.537100][T15802] EXT4-fs (loop3): i_reserved_data_blocks=7
[ 1099.815189][   T11] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 28
[ 1100.226813][T15828] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2260'.
[ 1100.240488][T10567] Bluetooth: hci1: unknown advertising packet type: 0x05
[ 1101.019352][T15833] loop3: detected capacity change from 0 to 512
[ 1101.089561][T15833] EXT4-fs: Ignoring removed oldalloc option
[ 1101.280466][T15833] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.2261: Parent and EA inode have the same ino 15
[ 1101.360273][T15833] EXT4-fs (loop3): Remounting filesystem read-only
[ 1101.398613][T15833] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -5)
[ 1101.421094][T15833] EXT4-fs (loop3): 1 orphan inode deleted
[ 1101.429775][T15833] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1101.674233][T13450] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1101.976923][T15850] syz_tun: entered allmulticast mode
[ 1103.266481][T15879] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2272'.
[ 1103.714032][T10567] Bluetooth: hci2: unknown advertising packet type: 0x05
[ 1104.191336][T15883] loop6: detected capacity change from 0 to 512
[ 1104.244517][T15883] EXT4-fs: Ignoring removed i_version option
[ 1104.250634][T15883] EXT4-fs: Ignoring removed bh option
[ 1104.317511][T15883] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.2273: inode #13: comm syz.6.2273: iget: illegal inode #
[ 1104.339320][T15861] loop3: detected capacity change from 0 to 32768
[ 1104.397982][T15883] EXT4-fs (loop6): Remounting filesystem read-only
[ 1104.447030][T15883] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1104.521241][T15861] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1104.860448][T15861] XFS (loop3): Ending clean mount
[ 1105.147196][ T9910] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1105.345364][T13450] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1105.868433][T15917] loop6: detected capacity change from 0 to 128
[ 1106.727473][T15923] loop3: detected capacity change from 0 to 4096
[ 1106.906568][T15937] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2282'.
[ 1106.918794][T10567] Bluetooth: hci2: unknown advertising packet type: 0x05
[ 1107.949243][T15944] loop3: detected capacity change from 0 to 512
[ 1108.020108][T15944] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[ 1108.066704][T15944] System zones: 1-12
[ 1108.071269][T15944] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.2287: missing EA_INODE flag
[ 1108.182774][T15944] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.2287: error while reading EA inode 12 err=-117
[ 1108.248990][T15944] EXT4-fs (loop3): 1 orphan inode deleted
[ 1108.261929][T15944] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1108.827359][T15935] loop6: detected capacity change from 0 to 32768
[ 1108.979277][T15935] ocfs2: Slot 0 on device (7,6) was already allocated to this node!
[ 1109.069342][T15935] JBD2: Ignoring recovery information on journal
[ 1109.318407][T15935] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[ 1110.314157][ T9910] ocfs2: Unmounting device (7,6) on (node local)
[ 1110.389146][T13450] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1111.019946][T15974] loop6: detected capacity change from 0 to 4096
[ 1111.115513][   T28] audit: type=1800 audit(1788912635.882:237): pid=15974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2289" name="file1" dev="loop6" ino=30 res=0 errno=0
[ 1111.379759][T15981] loop6: detected capacity change from 0 to 1024
[ 1111.391403][T15981] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1111.420339][T15981] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1112.048019][T15995] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2294'.
[ 1112.060756][T10567] Bluetooth: hci4: unknown advertising packet type: 0x05
[ 1112.929246][ T9910] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1113.452623][ T5822] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[ 1113.824569][ T5822] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 32
[ 1114.663144][ T5822] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[ 1114.672256][ T5822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1114.701548][ T5822] usb 4-1: Product: syz
[ 1114.708197][ T5822] usb 4-1: Manufacturer: syz
[ 1114.722581][ T5822] usb 4-1: SerialNumber: syz
[ 1114.744423][T15997] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1114.897698][T16006] loop6: detected capacity change from 0 to 32768
[ 1114.912994][T16006] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.2301 (16006)
[ 1114.955402][T16006] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1114.969206][T16006] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm
[ 1114.981812][T16006] BTRFS info (device loop6): setting nodatasum
[ 1114.989323][T16006] BTRFS info (device loop6): force zlib compression, level 3
[ 1115.001667][T16006] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_LZO (0x8)
[ 1115.011819][T16006] BTRFS info (device loop6): use lzo compression, level 0
[ 1115.020874][T16006] BTRFS info (device loop6): turning on flush-on-commit
[ 1115.030043][T16006] BTRFS info (device loop6): enabling auto defrag
[ 1115.037864][T16006] BTRFS info (device loop6): max_inline at 0
[ 1115.044497][T16006] BTRFS info (device loop6): using free space tree
[ 1115.104794][T16006] BTRFS info (device loop6): enabling ssd optimizations
[ 1115.190267][   T28] audit: type=1800 audit(1788912639.952:238): pid=16006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2301" name="file2" dev="loop6" ino=261 res=0 errno=0
[ 1115.236139][ T9910] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1115.294882][ T5822] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202
[ 1115.615556][    C0] usblp0: nonzero write bulk status received: -71
[ 1115.702628][ T5822] usb 7-1: new full-speed USB device number 15 using dummy_hcd
[ 1115.861953][T16041] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2307'.
[ 1115.871955][T10567] Bluetooth: hci2: unknown advertising packet type: 0x05
[ 1115.904774][ T5822] usb 7-1: config 0 has no interfaces?
[ 1115.927393][ T5822] usb 7-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8
[ 1115.953843][ T5822] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1115.964659][ T5822] usb 7-1: Product: syz
[ 1115.968950][ T5822] usb 7-1: Manufacturer: syz
[ 1115.974150][ T5822] usb 7-1: SerialNumber: syz
[ 1116.085064][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[ 1116.092829][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[ 1116.104383][ T5822] usb 7-1: config 0 descriptor??
[ 1116.323280][T16035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1116.338192][T16035] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1116.348317][T13567] usb 7-1: USB disconnect, device number 15
[ 1116.702094][ T5822] usb 4-1: USB disconnect, device number 10
[ 1116.750180][ T5822] usblp0: removed
[ 1116.982665][T13567] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[ 1117.164923][ T5822] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[ 1117.351769][T13567] usb 7-1: Using ep0 maxpacket: 32
[ 1117.446410][T13567] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1117.574016][T13567] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[ 1117.812174][T13567] usb 7-1: New USB device found, idVendor=1618, idProduct=9113, bcdDevice= 0.00
[ 1118.029192][T13567] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1118.072170][T13567] usb 7-1: Product: syz
[ 1118.087369][T13567] usb 7-1: Manufacturer: syz
[ 1118.099500][T13567] usb 7-1: SerialNumber: syz
[ 1118.143454][ T5822] usb 4-1: Using ep0 maxpacket: 32
[ 1118.154890][ T5822] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7
[ 1118.179969][ T5822] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1118.196796][ T5822] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1118.203646][ T5822] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[ 1118.213169][ T5822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1118.233040][ T5822] usb 4-1: config 0 descriptor??
[ 1118.657239][ T5822] corsair-cpro 0003:1B1C:0C10.0008: unknown main item tag 0x0
[ 1118.677028][ T5822] corsair-cpro 0003:1B1C:0C10.0008: unknown main item tag 0x0
[ 1118.698499][ T5822] corsair-cpro 0003:1B1C:0C10.0008: unknown main item tag 0x0
[ 1118.707145][ T5822] corsair-cpro 0003:1B1C:0C10.0008: unknown main item tag 0x0
[ 1118.715122][ T5822] corsair-cpro 0003:1B1C:0C10.0008: unknown main item tag 0x0
[ 1118.733333][ T5822] corsair-cpro 0003:1B1C:0C10.0008: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.3-1/input0
[ 1118.820191][ T5822] corsair-cpro: probe of 0003:1B1C:0C10.0008 failed with error -90
[ 1118.858345][T13567] usb 4-1: USB disconnect, device number 11
[ 1119.493215][ T5852] usb 7-1: USB disconnect, device number 16
[ 1119.841180][T16074] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2318'.
[ 1119.854058][T10567] Bluetooth: hci4: unknown advertising packet type: 0x05
[ 1120.852573][T13567] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[ 1120.875614][ T5852] usb 7-1: new full-speed USB device number 17 using dummy_hcd
[ 1121.044729][T13567] usb 4-1: Using ep0 maxpacket: 32
[ 1121.052719][T13567] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1121.064277][T13567] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1121.074127][T13567] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1121.083308][T13567] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1121.094251][ T5852] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1121.095103][T13567] usb 4-1: config 0 descriptor??
[ 1121.113523][ T5852] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1121.126384][T13567] hub 4-1:0.0: USB hub found
[ 1121.136162][ T5852] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1121.180553][ T5852] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1121.188740][ T5852] usb 7-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00
[ 1121.203023][ T5852] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1121.219958][ T5852] usb 7-1: config 0 descriptor??
[ 1121.491308][T13567] hub 4-1:0.0: 1 port detected
[ 1121.540241][T16087] syz_tun: entered allmulticast mode
[ 1122.051539][T11166] hub 4-1:0.0: activate --> -90
[ 1122.358951][ T5852] input: HID 046d:c50c as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:046D:C50C.0009/input/input13
[ 1122.455003][ T5852] logitech 0003:046D:C50C.0009: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 046d:c50c] on usb-dummy_hcd.6-1/input0
[ 1122.490111][ T5852] usb 7-1: USB disconnect, device number 17
[ 1122.527392][T14533] udevd[14533]: Error opening device "/dev/input/event4": No such file or directory
[ 1122.540335][T14533] udevd[14533]: Error calling EVIOCSKEYCODE on device node '/dev/input/event4' (scan code 0xcc, key code 108): Inappropriate ioctl for device
[ 1122.555488][T14533] udevd[14533]: Error calling EVIOCSKEYCODE on device node '/dev/input/event4' (scan code 0xd4, key code 103): Inappropriate ioctl for device
[ 1122.617820][T16093] fido_id[16093]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[ 1122.701170][T11166] hub 4-1:0.0: hub_ext_port_status failed (err = -71)
[ 1122.701408][T12263] usb 4-1: USB disconnect, device number 12
[ 1122.708899][T11166] usb 4-1-port1: connect-debounce failed
[ 1123.085062][T16095] loop6: detected capacity change from 0 to 32768
[ 1123.106459][T16095] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.2327 (16095)
[ 1123.142701][T16095] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1123.162812][T16095] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm
[ 1123.171660][T16095] BTRFS info (device loop6): setting nodatasum
[ 1123.194626][T16095] BTRFS info (device loop6): force zlib compression, level 3
[ 1123.202090][T16095] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_LZO (0x8)
[ 1123.212764][T16095] BTRFS info (device loop6): use lzo compression, level 0
[ 1123.220023][T16095] BTRFS info (device loop6): turning on flush-on-commit
[ 1123.234425][T16095] BTRFS info (device loop6): enabling auto defrag
[ 1123.252834][T16095] BTRFS info (device loop6): max_inline at 0
[ 1123.258887][T16095] BTRFS info (device loop6): using free space tree
[ 1123.727212][T16109] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2330'.
[ 1123.741326][T10567] Bluetooth: hci4: unknown advertising packet type: 0x05
[ 1124.239489][T16095] BTRFS info (device loop6): enabling ssd optimizations
[ 1124.812769][ T9910] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1125.058036][T16134] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2335'.
[ 1125.403655][T12263] usb 4-1: new full-speed USB device number 13 using dummy_hcd
[ 1126.325734][T12263] usb 4-1: config 0 has no interfaces?
[ 1126.331303][T12263] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00
[ 1126.354690][T12263] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1126.379462][T12263] usb 4-1: config 0 descriptor??
[ 1126.592589][T11166] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[ 1126.631739][T16135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1126.662944][T16135] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1126.687081][ T9639] usb 4-1: USB disconnect, device number 13
[ 1126.947905][T11166] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1126.959022][T11166] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[ 1126.970529][T11166] usb 7-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.00
[ 1126.980808][T11166] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1127.053830][T11166] usb 7-1: config 0 descriptor??
[ 1127.196433][T16143] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[ 1127.303113][ T9639] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[ 1127.976723][T11166] sigmamicro 0003:1C4F:0059.000A: unknown main item tag 0x0
[ 1127.984173][T11166] sigmamicro 0003:1C4F:0059.000A: unknown main item tag 0x0
[ 1127.991536][T11166] sigmamicro 0003:1C4F:0059.000A: unknown main item tag 0x0
[ 1127.999346][T11166] sigmamicro 0003:1C4F:0059.000A: unknown main item tag 0x0
[ 1128.007184][ T9639] usb 4-1: Using ep0 maxpacket: 32
[ 1128.013048][T11166] sigmamicro 0003:1C4F:0059.000A: unknown main item tag 0x0
[ 1128.020509][T11166] sigmamicro 0003:1C4F:0059.000A: unknown main item tag 0x0
[ 1128.031825][T14640] Bluetooth: hci3: unknown advertising packet type: 0x05
[ 1128.033457][T16158] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2341'.
[ 1128.050822][T11166] sigmamicro 0003:1C4F:0059.000A: unknown main item tag 0x0
[ 1128.059410][ T9639] usb 4-1: config 0 has an invalid interface number: 61 but max is 1
[ 1128.075620][ T9639] usb 4-1: config 0 has an invalid interface number: 98 but max is 1
[ 1128.092638][T11166] sigmamicro 0003:1C4F:0059.000A: unknown main item tag 0x0
[ 1128.100079][ T9639] usb 4-1: config 0 has no interface number 0
[ 1128.110237][T11166] sigmamicro 0003:1C4F:0059.000A: unknown main item tag 0x0
[ 1128.122575][ T9639] usb 4-1: config 0 has no interface number 1
[ 1128.135452][T11166] sigmamicro 0003:1C4F:0059.000A: unknown main item tag 0x0
[ 1128.148155][T11166] sigmamicro 0003:1C4F:0059.000A: unknown main item tag 0x0
[ 1128.160595][ T9639] usb 4-1: string descriptor 0 read error: -71
[ 1128.187524][ T9639] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6
[ 1128.202856][T11166] sigmamicro 0003:1C4F:0059.000A: unknown main item tag 0x0
[ 1128.211404][ T9639] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1128.220491][T11166] sigmamicro 0003:1C4F:0059.000A: unknown main item tag 0x0
[ 1128.240748][T11166] sigmamicro 0003:1C4F:0059.000A: unknown main item tag 0x0
[ 1128.252752][ T9639] usb 4-1: config 0 descriptor??
[ 1128.265121][T11166] sigmamicro 0003:1C4F:0059.000A: unknown main item tag 0x0
[ 1128.272893][ T9639] usb 4-1: can't set config #0, error -71
[ 1128.280924][T11166] sigmamicro 0003:1C4F:0059.000A: unknown main item tag 0x0
[ 1128.291082][ T9639] usb 4-1: USB disconnect, device number 14
[ 1128.319752][T11166] sigmamicro 0003:1C4F:0059.000A: unknown main item tag 0x0
[ 1128.342377][T11166] sigmamicro 0003:1C4F:0059.000A: unknown main item tag 0x0
[ 1128.354223][T11166] sigmamicro 0003:1C4F:0059.000A: unknown main item tag 0x0
[ 1128.364740][T11166] sigmamicro 0003:1C4F:0059.000A: unknown main item tag 0x0
[ 1128.372244][T11166] sigmamicro 0003:1C4F:0059.000A: unknown main item tag 0x0
[ 1128.381226][T11166] sigmamicro 0003:1C4F:0059.000A: unknown main item tag 0x0
[ 1128.421281][T11166] sigmamicro 0003:1C4F:0059.000A: unknown main item tag 0x0
[ 1128.429654][T11166] sigmamicro 0003:1C4F:0059.000A: unknown main item tag 0x0
[ 1128.438376][T11166] sigmamicro 0003:1C4F:0059.000A: unknown main item tag 0x0
[ 1128.447187][T11166] sigmamicro 0003:1C4F:0059.000A: unknown main item tag 0x0
[ 1128.454631][T11166] sigmamicro 0003:1C4F:0059.000A: unknown main item tag 0x0
[ 1128.461979][T11166] sigmamicro 0003:1C4F:0059.000A: unknown main item tag 0x0
[ 1128.470346][T11166] sigmamicro 0003:1C4F:0059.000A: unknown main item tag 0x0
[ 1128.478091][T11166] sigmamicro 0003:1C4F:0059.000A: unknown main item tag 0x0
[ 1128.485529][T11166] sigmamicro 0003:1C4F:0059.000A: unknown main item tag 0x0
[ 1128.494150][T11166] sigmamicro 0003:1C4F:0059.000A: unknown main item tag 0x0
[ 1128.501511][T11166] sigmamicro 0003:1C4F:0059.000A: unknown main item tag 0x0
[ 1128.510675][T11166] sigmamicro 0003:1C4F:0059.000A: unknown main item tag 0x0
[ 1128.531822][T11166] sigmamicro 0003:1C4F:0059.000A: unknown main item tag 0x0
[ 1128.550530][T11166] sigmamicro 0003:1C4F:0059.000A: unknown main item tag 0x0
[ 1128.563682][T11166] sigmamicro 0003:1C4F:0059.000A: unknown main item tag 0x0
[ 1128.571049][T11166] sigmamicro 0003:1C4F:0059.000A: unknown main item tag 0x0
[ 1128.579361][T11166] sigmamicro 0003:1C4F:0059.000A: unknown main item tag 0x0
[ 1128.587020][T11166] sigmamicro 0003:1C4F:0059.000A: unknown main item tag 0x0
[ 1128.594707][T11166] sigmamicro 0003:1C4F:0059.000A: unknown main item tag 0x0
[ 1128.602057][T11166] sigmamicro 0003:1C4F:0059.000A: unknown main item tag 0x0
[ 1128.611068][T11166] sigmamicro 0003:1C4F:0059.000A: unknown main item tag 0x0
[ 1128.620070][T11166] sigmamicro 0003:1C4F:0059.000A: unknown main item tag 0x0
[ 1128.650727][T11166] sigmamicro 0003:1C4F:0059.000A: unknown main item tag 0x0
[ 1128.702676][T11166] sigmamicro 0003:1C4F:0059.000A: unknown main item tag 0x0
[ 1128.774947][T11166] sigmamicro 0003:1C4F:0059.000A: unknown main item tag 0x0
[ 1128.838936][T11166] sigmamicro 0003:1C4F:0059.000A: unknown main item tag 0x0
[ 1128.865974][T11166] sigmamicro 0003:1C4F:0059.000A: unknown main item tag 0x0
[ 1128.877105][T11166] sigmamicro 0003:1C4F:0059.000A: unknown main item tag 0x0
[ 1128.885255][T11166] sigmamicro 0003:1C4F:0059.000A: unknown main item tag 0x0
[ 1128.893078][T11166] sigmamicro 0003:1C4F:0059.000A: unknown main item tag 0x0
[ 1128.900532][T11166] sigmamicro 0003:1C4F:0059.000A: unknown main item tag 0x0
[ 1129.009859][T16179] zram0: detected capacity change from 0 to 8
[ 1129.159337][T11166] sigmamicro 0003:1C4F:0059.000A: unknown main item tag 0x0
[ 1129.166926][T11166] sigmamicro 0003:1C4F:0059.000A: unknown main item tag 0x0
[ 1129.174939][T11166] sigmamicro 0003:1C4F:0059.000A: unknown main item tag 0x1
[ 1129.182325][T11166] sigmamicro 0003:1C4F:0059.000A: unknown main item tag 0x0
[ 1129.189789][T11166] sigmamicro 0003:1C4F:0059.000A: unknown main item tag 0x0
[ 1129.202588][T11166] sigmamicro 0003:1C4F:0059.000A: unknown main item tag 0x4
[ 1129.209953][T11166] sigmamicro 0003:1C4F:0059.000A: unknown main item tag 0x0
[ 1129.255129][T11166] sigmamicro 0003:1C4F:0059.000A: unknown main item tag 0x0
[ 1129.339665][T11166] sigmamicro 0003:1C4F:0059.000A: unknown main item tag 0x0
[ 1129.530004][T11166] sigmamicro 0003:1C4F:0059.000A: unknown main item tag 0x0
[ 1129.874547][T11166] sigmamicro 0003:1C4F:0059.000A: unknown main item tag 0x0
[ 1129.922943][T11166] sigmamicro 0003:1C4F:0059.000A: unknown main item tag 0x0
[ 1129.930326][T11166] sigmamicro 0003:1C4F:0059.000A: unknown main item tag 0x0
[ 1130.029614][T11166] sigmamicro 0003:1C4F:0059.000A: unknown main item tag 0x0
[ 1130.043133][T16190] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2348'.
[ 1130.301427][T11166] sigmamicro 0003:1C4F:0059.000A: unknown main item tag 0x0
[ 1130.309934][T11166] sigmamicro 0003:1C4F:0059.000A: unknown main item tag 0x0
[ 1130.317363][T11166] sigmamicro 0003:1C4F:0059.000A: unknown main item tag 0x2
[ 1130.324748][T11166] sigmamicro 0003:1C4F:0059.000A: unknown main item tag 0x0
[ 1130.333980][T11166] sigmamicro 0003:1C4F:0059.000A: unknown main item tag 0x0
[ 1130.342053][T11166] sigmamicro 0003:1C4F:0059.000A: unknown main item tag 0x0
[ 1130.349465][T11166] sigmamicro 0003:1C4F:0059.000A: unknown main item tag 0x0
[ 1130.357152][T11166] sigmamicro 0003:1C4F:0059.000A: unexpected long global item
[ 1130.365691][T11166] sigmamicro: probe of 0003:1C4F:0059.000A failed with error -22
[ 1130.382763][T11166] usb 7-1: USB disconnect, device number 18
[ 1130.455377][ T9639] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[ 1130.655258][ T9639] usb 4-1: Using ep0 maxpacket: 32
[ 1130.844414][ T9639] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[ 1131.076508][ T9639] usb 4-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping
[ 1131.128471][ T9639] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[ 1131.188720][ T9639] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[ 1131.218613][ T9639] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1131.248858][ T9639] usb 4-1: Product: syz
[ 1131.259478][ T9639] usb 4-1: Manufacturer: syz
[ 1131.269311][ T9639] usb 4-1: SerialNumber: syz
[ 1131.308140][ T9639] imon:imon_find_endpoints: no valid input (IR) endpoint found
[ 1131.333123][ T9639] imon 4-1:155.0: unable to initialize intf0, err -19
[ 1131.356594][ T9639] imon:imon_probe: failed to initialize context!
[ 1131.367357][ T9639] imon 4-1:155.0: unable to register, err -19
[ 1131.574959][T16188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1131.621554][T16188] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1131.669268][T14640] Bluetooth: hci3: unknown advertising packet type: 0x05
[ 1131.670098][T16206] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2353'.
[ 1132.072651][T11166] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[ 1132.345554][T11166] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1132.358870][T11166] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1132.368805][T11166] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1132.379989][T11166] usb 7-1: config 0 descriptor??
[ 1132.617602][T11166] usbhid 7-1:0.0: can't add hid device: -71
[ 1132.623743][T11166] usbhid: probe of 7-1:0.0 failed with error -71
[ 1132.634523][T11166] usb 7-1: USB disconnect, device number 19
[ 1133.523536][T16223] fuse: Bad value for 'fd'
[ 1133.595759][ T9639] usb 4-1: USB disconnect, device number 15
[ 1133.684829][T11166] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[ 1133.874208][T11166] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1133.885475][T11166] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1133.892151][T11166] usb 7-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00
[ 1133.909273][T11166] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1133.930149][T11166] usb 7-1: config 0 descriptor??
[ 1133.959973][T16236] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2364'.
[ 1134.257997][T16239] ceph: No source
[ 1134.773625][T11166] hid-alps 0003:044E:120B.000B: failed to read command (-71)
[ 1134.791333][T11166] hid-alps 0003:044E:120B.000B: failed U1_DEV_CTRL_1 (-71)
[ 1134.819620][T11166] hid-alps 0003:044E:120B.000B: hidraw0: USB HID v0.00 Keyboard [HID 044e:120b] on usb-dummy_hcd.6-1/input0
[ 1134.862033][T11166] usb 7-1: USB disconnect, device number 20
[ 1134.996847][T16243] fido_id[16243]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[ 1136.757321][T16280] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2379'.
[ 1137.091685][T16283] FAULT_INJECTION: forcing a failure.
[ 1137.091685][T16283] name failslab, interval 1, probability 0, space 0, times 0
[ 1137.125953][T16283] CPU: 0 PID: 16283 Comm: syz.9.2382 Not tainted syzkaller #0
[ 1137.133510][T16283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1137.143613][T16283] Call Trace:
[ 1137.146934][T16283]  <TASK>
[ 1137.149909][T16283]  dump_stack_lvl+0x18c/0x250
[ 1137.154671][T16283]  ? show_regs_print_info+0x20/0x20
[ 1137.159904][T16283]  ? load_image+0x420/0x420
[ 1137.164428][T16283]  ? __might_sleep+0xe0/0xe0
[ 1137.169056][T16283]  ? __lock_acquire+0x7d80/0x7d80
[ 1137.174121][T16283]  should_fail_ex+0x394/0x4c0
[ 1137.178839][T16283]  should_failslab+0x9/0x20
[ 1137.183373][T16283]  slab_pre_alloc_hook+0x59/0x300
[ 1137.188436][T16283]  ? memcg_list_lru_alloc+0x231/0xb00
[ 1137.193843][T16283]  ? memcg_list_lru_alloc+0x231/0xb00
[ 1137.199238][T16283]  __kmem_cache_alloc_node+0x53/0x250
[ 1137.204666][T16283]  ? memcg_list_lru_alloc+0x231/0xb00
[ 1137.210064][T16283]  __kmalloc+0xa7/0x240
[ 1137.214241][T16283]  memcg_list_lru_alloc+0x231/0xb00
[ 1137.219467][T16283]  ? get_obj_cgroup_from_current+0xd4/0x280
[ 1137.225386][T16283]  ? memcg_reparent_list_lrus+0x860/0x860
[ 1137.231138][T16283]  ? get_obj_cgroup_from_current+0xd4/0x280
[ 1137.237050][T16283]  slab_pre_alloc_hook+0x2ad/0x300
[ 1137.242196][T16283]  ? slab_pre_alloc_hook+0xb1/0x300
[ 1137.247445][T16283]  kmem_cache_alloc_lru+0x4d/0x2b0
[ 1137.252610][T16283]  ? shmem_alloc_inode+0x28/0x40
[ 1137.257616][T16283]  shmem_alloc_inode+0x28/0x40
[ 1137.262413][T16283]  ? shmem_match+0x160/0x160
[ 1137.267037][T16283]  new_inode_pseudo+0x63/0x1d0
[ 1137.271858][T16283]  new_inode+0x22/0x1d0
[ 1137.276096][T16283]  shmem_get_inode+0x34d/0xcd0
[ 1137.280992][T16283]  shmem_fill_super+0xa09/0xf10
[ 1137.285884][T16283]  ? shmem_reconfigure+0xc10/0xc10
[ 1137.291128][T16283]  get_tree_nodev+0xb5/0x140
[ 1137.295786][T16283]  vfs_get_tree+0x8c/0x280
[ 1137.300238][T16283]  do_new_mount+0x24a/0xa40
[ 1137.304770][T16283]  __se_sys_mount+0x2e7/0x3d0
[ 1137.309474][T16283]  ? __x64_sys_mount+0xc0/0xc0
[ 1137.314371][T16283]  ? lockdep_hardirqs_on+0x98/0x150
[ 1137.319599][T16283]  ? __x64_sys_mount+0x20/0xc0
[ 1137.324405][T16283]  do_syscall_64+0x55/0xb0
[ 1137.328848][T16283]  ? clear_bhb_loop+0x40/0x90
[ 1137.333609][T16283]  ? clear_bhb_loop+0x40/0x90
[ 1137.338319][T16283]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1137.344331][T16283] RIP: 0033:0x7fa9caf9e159
[ 1137.348813][T16283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1137.368453][T16283] RSP: 002b:00007fa9cbe8d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1137.376901][T16283] RAX: ffffffffffffffda RBX: 00007fa9cb225fa0 RCX: 00007fa9caf9e159
[ 1137.384889][T16283] RDX: 0000200000000100 RSI: 0000200000000040 RDI: 0000000000000000
[ 1137.392881][T16283] RBP: 00007fa9cb03503b R08: 0000000000000000 R09: 0000000000000000
[ 1137.400872][T16283] R10: 0000000000800080 R11: 0000000000000246 R12: 0000000000000000
[ 1137.408864][T16283] R13: 00007fa9cb226038 R14: 00007fa9cb225fa0 R15: 00007ffd38b5fe28
[ 1137.416865][T16283]  </TASK>
[ 1137.848035][T16289] FAULT_INJECTION: forcing a failure.
[ 1137.848035][T16289] name failslab, interval 1, probability 0, space 0, times 0
[ 1137.866745][T16289] CPU: 0 PID: 16289 Comm: syz.3.2385 Not tainted syzkaller #0
[ 1137.874281][T16289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1137.884385][T16289] Call Trace:
[ 1137.887714][T16289]  <TASK>
[ 1137.890727][T16289]  dump_stack_lvl+0x18c/0x250
[ 1137.895466][T16289]  ? show_regs_print_info+0x20/0x20
[ 1137.900723][T16289]  ? load_image+0x420/0x420
[ 1137.905270][T16289]  ? __might_sleep+0xe0/0xe0
[ 1137.909933][T16289]  ? __lock_acquire+0x7d80/0x7d80
[ 1137.915038][T16289]  should_fail_ex+0x394/0x4c0
[ 1137.919774][T16289]  should_failslab+0x9/0x20
[ 1137.924333][T16289]  slab_pre_alloc_hook+0x59/0x300
[ 1137.929423][T16289]  kmem_cache_alloc+0x5a/0x2c0
[ 1137.934285][T16289]  ? getname_kernel+0x5a/0x2f0
[ 1137.939110][T16289]  getname_kernel+0x5a/0x2f0
[ 1137.943762][T16289]  kern_path+0x1d/0x50
[ 1137.947879][T16289]  ovl_parse_layer+0x27d/0xdc0
[ 1137.952742][T16289]  ? fs_param_is_string+0xa5/0x1b0
[ 1137.957906][T16289]  ? ovl_reconfigure+0x290/0x290
[ 1137.962891][T16289]  ovl_parse_param+0x4d0/0xf80
[ 1137.967700][T16289]  ? ovl_free+0x270/0x270
[ 1137.972171][T16289]  ? vfs_parse_monolithic_sep+0x229/0x330
[ 1137.977939][T16289]  ? security_fs_context_parse_param+0xb5/0xe0
[ 1137.984156][T16289]  vfs_parse_fs_param+0x1a0/0x420
[ 1137.989227][T16289]  vfs_parse_monolithic_sep+0x25f/0x330
[ 1137.994829][T16289]  ? ovl_parse_layer+0xdc0/0xdc0
[ 1137.999848][T16289]  ? vfs_parse_fs_string+0x170/0x170
[ 1138.005180][T16289]  ? ovl_init_fs_context+0x159/0x510
[ 1138.010517][T16289]  ? alloc_fs_context+0x62c/0x7a0
[ 1138.015706][T16289]  do_new_mount+0x21a/0xa40
[ 1138.020287][T16289]  __se_sys_mount+0x2e7/0x3d0
[ 1138.025026][T16289]  ? __x64_sys_mount+0xc0/0xc0
[ 1138.029847][T16289]  ? lockdep_hardirqs_on+0x98/0x150
[ 1138.035141][T16289]  ? __x64_sys_mount+0x20/0xc0
[ 1138.039979][T16289]  do_syscall_64+0x55/0xb0
[ 1138.044447][T16289]  ? clear_bhb_loop+0x40/0x90
[ 1138.049185][T16289]  ? clear_bhb_loop+0x40/0x90
[ 1138.053947][T16289]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1138.060061][T16289] RIP: 0033:0x7f7d9c79e159
[ 1138.064513][T16289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1138.084165][T16289] RSP: 002b:00007f7d9a9f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1138.092649][T16289] RAX: ffffffffffffffda RBX: 00007f7d9ca25fa0 RCX: 00007f7d9c79e159
[ 1138.100664][T16289] RDX: 0000200000000b80 RSI: 0000200000000000 RDI: 0000000000000000
[ 1138.108664][T16289] RBP: 00007f7d9c83503b R08: 0000200000000a80 R09: 0000000000000000
[ 1138.116687][T16289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1138.124721][T16289] R13: 00007f7d9ca26038 R14: 00007f7d9ca25fa0 R15: 00007fff4393b588
[ 1138.132754][T16289]  </TASK>
[ 1138.142957][T16289] overlayfs: failed to resolve './bus': -12
[ 1138.977189][T16310] syz_tun: entered allmulticast mode
[ 1139.002698][T13567] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[ 1139.143720][T16314] netlink: 'syz.9.2390': attribute type 1 has an invalid length.
[ 1139.201008][T16314] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1139.203101][T13567] usb 4-1: Using ep0 maxpacket: 32
[ 1139.224883][T13567] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1139.235187][T16317] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2390'.
[ 1139.266303][T13567] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1139.302548][T13567] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1139.310783][T13567] usb 4-1: Product: syz
[ 1139.328637][T16317] veth9: entered allmulticast mode
[ 1139.342356][T16317] bond4: (slave veth9): Enslaving as an active interface with a down link
[ 1139.351437][T13567] usb 4-1: Manufacturer: syz
[ 1139.362909][T13567] usb 4-1: SerialNumber: syz
[ 1139.381358][T13567] usb 4-1: config 0 descriptor??
[ 1139.417476][T16293] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1139.430132][T13567] hub 4-1:0.0: bad descriptor, ignoring hub
[ 1139.436495][T13567] hub: probe of 4-1:0.0 failed with error -5
[ 1139.451115][T16314] bond3: (slave veth0_to_bond): Releasing active interface
[ 1139.477833][T16314] bond4: (slave veth0_to_bond): making interface the new active one
[ 1139.494279][T16314] veth0_to_bond: entered promiscuous mode
[ 1139.511192][T16314] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link
[ 1139.541422][T16319] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2390'.
[ 1139.632656][T16317] macvlan2: entered promiscuous mode
[ 1139.648382][T16317] macvlan2: entered allmulticast mode
[ 1139.669120][T16317] bond4: entered promiscuous mode
[ 1139.701411][T16317] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 1139.709176][T16317] bond4: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[ 1139.728633][T16317] bond4: left promiscuous mode
[ 1140.402932][T11166] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[ 1140.602555][T11166] usb 7-1: Using ep0 maxpacket: 16
[ 1140.625118][T11166] usb 7-1: too many endpoints for config 0 interface 0 altsetting 8: 254, using maximum allowed: 30
[ 1140.647120][T11166] usb 7-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[ 1140.696974][T11166] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1140.719161][T11166] usb 7-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00
[ 1140.939300][T11166] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1140.957048][T11166] usb 7-1: config 0 descriptor??
[ 1141.214294][T13567] usb 4-1: USB disconnect, device number 16
[ 1141.744532][T11166] usbhid 7-1:0.0: can't add hid device: -71
[ 1141.782628][T11166] usbhid: probe of 7-1:0.0 failed with error -71
[ 1141.817343][T11166] usb 7-1: USB disconnect, device number 21
[ 1142.319497][T16345] FAULT_INJECTION: forcing a failure.
[ 1142.319497][T16345] name failslab, interval 1, probability 0, space 0, times 0
[ 1142.373562][T16345] CPU: 0 PID: 16345 Comm: syz.9.2400 Not tainted syzkaller #0
[ 1142.381107][T16345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1142.391201][T16345] Call Trace:
[ 1142.394516][T16345]  <TASK>
[ 1142.397506][T16345]  dump_stack_lvl+0x18c/0x250
[ 1142.402408][T16345]  ? show_regs_print_info+0x20/0x20
[ 1142.407637][T16345]  ? load_image+0x420/0x420
[ 1142.412171][T16345]  ? __might_sleep+0xe0/0xe0
[ 1142.416796][T16345]  ? __lock_acquire+0x7d80/0x7d80
[ 1142.421873][T16345]  should_fail_ex+0x394/0x4c0
[ 1142.426587][T16345]  should_failslab+0x9/0x20
[ 1142.431174][T16345]  slab_pre_alloc_hook+0x59/0x300
[ 1142.436242][T16345]  ? genl_family_rcv_msg_doit+0x268/0x310
[ 1142.442035][T16345]  kmem_cache_alloc_node+0x5e/0x310
[ 1142.447284][T16345]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[ 1142.452973][T16345]  ? __alloc_skb+0x103/0x2c0
[ 1142.457625][T16345]  __alloc_skb+0x103/0x2c0
[ 1142.462191][T16345]  netlink_ack+0x377/0x1160
[ 1142.466738][T16345]  ? genl_rcv_msg+0x27a/0x7a0
[ 1142.471449][T16345]  ? genl_bind+0x360/0x360
[ 1142.475897][T16345]  ? netlink_dump+0xec0/0xec0
[ 1142.480603][T16345]  ? ref_tracker_free+0x686/0x830
[ 1142.485662][T16345]  netlink_rcv_skb+0x2b3/0x4c0
[ 1142.490447][T16345]  ? genl_bind+0x360/0x360
[ 1142.494890][T16345]  ? netlink_ack+0x1160/0x1160
[ 1142.499687][T16345]  ? __lock_acquire+0x7d80/0x7d80
[ 1142.504751][T16345]  ? down_read+0x1ac/0x2e0
[ 1142.509210][T16345]  genl_rcv+0x28/0x40
[ 1142.513219][T16345]  netlink_unicast+0x7b1/0x930
[ 1142.518013][T16345]  netlink_sendmsg+0x8d0/0xbf0
[ 1142.522822][T16345]  ? netlink_getsockopt+0x590/0x590
[ 1142.528067][T16345]  ? apparmor_socket_sendmsg+0x8e/0x330
[ 1142.533653][T16345]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1142.538976][T16345]  ? security_socket_sendmsg+0x80/0xa0
[ 1142.544495][T16345]  __sys_sendto+0x4a9/0x6b0
[ 1142.549061][T16345]  ? __ia32_sys_getpeername+0x90/0x90
[ 1142.554465][T16345]  ? __lock_acquire+0x7d80/0x7d80
[ 1142.559537][T16345]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 1142.565539][T16345]  ? fd_install+0x60/0x4e0
[ 1142.569992][T16345]  ? lock_chain_count+0x20/0x20
[ 1142.574867][T16345]  __x64_sys_sendto+0xde/0xf0
[ 1142.579591][T16345]  do_syscall_64+0x55/0xb0
[ 1142.584038][T16345]  ? clear_bhb_loop+0x40/0x90
[ 1142.588749][T16345]  ? clear_bhb_loop+0x40/0x90
[ 1142.593452][T16345]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1142.599371][T16345] RIP: 0033:0x7fa9caf5e98e
[ 1142.603809][T16345] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1142.623444][T16345] RSP: 002b:00007fa9cbe8be88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 1142.631887][T16345] RAX: ffffffffffffffda RBX: 00007fa9cbe8d6c0 RCX: 00007fa9caf5e98e
[ 1142.639924][T16345] RDX: 000000000000001c RSI: 00007fa9cbe8c000 RDI: 0000000000000004
[ 1142.647924][T16345] RBP: 0000000000000000 R08: 00007fa9cbe8bf04 R09: 000000000000000c
[ 1142.655921][T16345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 1142.663919][T16345] R13: 00007fa9cbe8bf58 R14: 00007fa9cbe8c000 R15: 0000000000000000
[ 1142.671929][T16345]  </TASK>
[ 1142.844917][T16351] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2401'.
[ 1143.354709][T16355] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1143.363071][T16355] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1143.380596][T16355] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1143.388772][T16355] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1143.593327][T16358] netlink: 'syz.3.2404': attribute type 1 has an invalid length.
[ 1143.715323][T16358] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1144.092159][T16363] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2404'.
[ 1144.463507][T16363] veth3: entered allmulticast mode
[ 1144.491014][T16363] bond1: (slave veth3): Enslaving as an active interface with a down link
[ 1144.582951][T16365] bond1: (slave veth0_to_bond): making interface the new active one
[ 1144.593434][T16365] veth0_to_bond: entered promiscuous mode
[ 1144.599678][T16365] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link
[ 1144.664403][T16358] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2404'.
[ 1144.687333][T16371] macvlan2: entered promiscuous mode
[ 1144.696257][T16371] macvlan2: entered allmulticast mode
[ 1144.706850][T16371] bond1: entered promiscuous mode
[ 1144.718581][T16371] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 1144.741105][T16371] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[ 1144.749801][T16378] gadgetfs: bound to dummy_udc driver
[ 1144.803828][T16371] bond1: left promiscuous mode
[ 1145.052591][ T5852] usb 1-1: new full-speed USB device number 20 using dummy_hcd
[ 1145.061330][    C0] gadgetfs: connected
[ 1145.067804][ T5852] gadgetfs: disconnected
[ 1145.275893][T16390] FAULT_INJECTION: forcing a failure.
[ 1145.275893][T16390] name failslab, interval 1, probability 0, space 0, times 0
[ 1145.289258][T16390] CPU: 0 PID: 16390 Comm: syz.9.2414 Not tainted syzkaller #0
[ 1145.296807][T16390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1145.306911][T16390] Call Trace:
[ 1145.310230][T16390]  <TASK>
[ 1145.313207][T16390]  dump_stack_lvl+0x18c/0x250
[ 1145.317942][T16390]  ? show_regs_print_info+0x20/0x20
[ 1145.323190][T16390]  ? load_image+0x420/0x420
[ 1145.327740][T16390]  ? __might_sleep+0xe0/0xe0
[ 1145.332382][T16390]  ? __lock_acquire+0x7d80/0x7d80
[ 1145.337462][T16390]  should_fail_ex+0x394/0x4c0
[ 1145.342207][T16390]  should_failslab+0x9/0x20
[ 1145.346784][T16390]  slab_pre_alloc_hook+0x59/0x300
[ 1145.351890][T16390]  ? garp_init_applicant+0x191/0x450
[ 1145.357345][T16390]  __kmem_cache_alloc_node+0x53/0x250
[ 1145.362761][T16390]  ? garp_init_applicant+0x191/0x450
[ 1145.368132][T16390]  kmalloc_trace+0x2a/0xe0
[ 1145.372605][T16390]  garp_init_applicant+0x191/0x450
[ 1145.377786][T16390]  register_vlan_dev+0x1c2/0x820
[ 1145.382898][T16390]  register_vlan_device+0x387/0x4a0
[ 1145.388149][T16390]  ? vlan_ioctl_handler+0x630/0x630
[ 1145.393418][T16390]  vlan_ioctl_handler+0x24d/0x630
[ 1145.398488][T16390]  ? sock_ioctl+0x632/0x7e0
[ 1145.403050][T16390]  ? net_generic+0x240/0x240
[ 1145.407715][T16390]  ? net_generic+0x240/0x240
[ 1145.412369][T16390]  sock_ioctl+0x652/0x7e0
[ 1145.416757][T16390]  ? sock_poll+0x3e0/0x3e0
[ 1145.421251][T16390]  ? bpf_lsm_file_ioctl+0x9/0x10
[ 1145.426233][T16390]  ? security_file_ioctl+0x80/0xa0
[ 1145.431396][T16390]  ? sock_poll+0x3e0/0x3e0
[ 1145.435869][T16390]  __se_sys_ioctl+0xfd/0x170
[ 1145.440516][T16390]  do_syscall_64+0x55/0xb0
[ 1145.444982][T16390]  ? clear_bhb_loop+0x40/0x90
[ 1145.449716][T16390]  ? clear_bhb_loop+0x40/0x90
[ 1145.454452][T16390]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1145.460393][T16390] RIP: 0033:0x7fa9caf9e159
[ 1145.464847][T16390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1145.484630][T16390] RSP: 002b:00007fa9cbe8d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1145.493119][T16390] RAX: ffffffffffffffda RBX: 00007fa9cb225fa0 RCX: 00007fa9caf9e159
[ 1145.501134][T16390] RDX: 0000200000000040 RSI: 0000000000008983 RDI: 0000000000000005
[ 1145.509153][T16390] RBP: 00007fa9cb03503b R08: 0000000000000000 R09: 0000000000000000
[ 1145.517161][T16390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1145.525176][T16390] R13: 00007fa9cb226038 R14: 00007fa9cb225fa0 R15: 00007ffd38b5fe28
[ 1145.533217][T16390]  </TASK>
[ 1145.724410][T16399] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2415'.
[ 1146.193741][T16403] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2418'.
[ 1146.271366][T16405] netlink: 'syz.6.2419': attribute type 1 has an invalid length.
[ 1146.364682][T16405] 8021q: adding VLAN 0 to HW filter on device bond8
[ 1146.374707][T16407] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2419'.
[ 1146.441903][T16407] veth13: entered allmulticast mode
[ 1146.470233][T16407] bond8: (slave veth13): Enslaving as an active interface with a down link
[ 1146.554194][T16405] bond7: (slave veth0_to_bond): Releasing active interface
[ 1146.590595][T16405] bond8: (slave veth0_to_bond): making interface the new active one
[ 1146.601478][T16405] veth0_to_bond: entered promiscuous mode
[ 1146.617466][T16405] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link
[ 1146.664332][T16410] bond8: entered promiscuous mode
[ 1146.669948][T16410] bond8: entered allmulticast mode
[ 1146.678026][T16410] veth0_to_bond: entered allmulticast mode
[ 1147.171882][T11166] IPVS: starting estimator thread 0...
[ 1147.181918][T16426] IPVS: wlc: FWM 3 0x00000003 - no destination available
[ 1147.196087][    C1] IPVS: wlc: FWM 3 0x00000003 - no destination available
[ 1147.282622][T16428] IPVS: using max 19 ests per chain, 45600 per kthread
[ 1147.421567][T16435] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2430'.
[ 1147.615560][T16437] jffs2: notice: (16437) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 1148.008879][T16444] netlink: 'syz.9.2433': attribute type 1 has an invalid length.
[ 1148.125978][T16444] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1148.163569][T16446] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2433'.
[ 1148.261544][T16446] veth11: entered allmulticast mode
[ 1148.297103][T16446] bond5: (slave veth11): Enslaving as an active interface with a down link
[ 1148.362418][T16447] bond4: (slave veth0_to_bond): Releasing active interface
[ 1148.370011][T16447] veth0_to_bond: left promiscuous mode
[ 1148.397373][T16447] bond5: (slave veth0_to_bond): making interface the new active one
[ 1148.418231][T16447] veth0_to_bond: entered promiscuous mode
[ 1148.433047][T16447] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link
[ 1148.442594][T11166] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[ 1148.530329][T16444] bond5: entered promiscuous mode
[ 1148.544527][T16444] bond5: entered allmulticast mode
[ 1148.562121][T16444] veth0_to_bond: entered allmulticast mode
[ 1148.642759][T11166] usb 4-1: Using ep0 maxpacket: 32
[ 1148.679546][T11166] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[ 1148.844304][T11166] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1149.030534][T11166] usb 4-1: Product: syz
[ 1149.133384][T11166] usb 4-1: Manufacturer: syz
[ 1149.200623][T11166] usb 4-1: SerialNumber: syz
[ 1149.253778][T11166] usb 4-1: config 0 descriptor??
[ 1149.306622][T11166] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[ 1149.359805][T11166] dvb-usb: bulk message failed: -22 (4/0)
[ 1149.393535][T11166] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[ 1149.413182][T11166] dvb-usb: bulk message failed: -22 (5/0)
[ 1149.443860][T11166] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[ 1149.515721][T16464] FAULT_INJECTION: forcing a failure.
[ 1149.515721][T16464] name failslab, interval 1, probability 0, space 0, times 0
[ 1149.522078][T11166] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1149.552726][T16464] CPU: 0 PID: 16464 Comm: syz.9.2439 Not tainted syzkaller #0
[ 1149.560275][T16464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1149.570380][T16464] Call Trace:
[ 1149.573727][T16464]  <TASK>
[ 1149.576698][T16464]  dump_stack_lvl+0x18c/0x250
[ 1149.581465][T16464]  ? show_regs_print_info+0x20/0x20
[ 1149.586718][T16464]  ? load_image+0x420/0x420
[ 1149.591269][T16464]  ? __might_sleep+0xe0/0xe0
[ 1149.595912][T16464]  ? __lock_acquire+0x7d80/0x7d80
[ 1149.600994][T16464]  should_fail_ex+0x394/0x4c0
[ 1149.604949][T16449] dvb-usb: bulk message failed: -22 (7/0)
[ 1149.605717][T16464]  should_failslab+0x9/0x20
[ 1149.615999][T16464]  slab_pre_alloc_hook+0x59/0x300
[ 1149.621112][T16464]  ? __list_lru_init+0xb4/0x600
[ 1149.626008][T16464]  ? __list_lru_init+0xb4/0x600
[ 1149.630922][T16464]  __kmem_cache_alloc_node+0x53/0x250
[ 1149.634210][T16449] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0)
[ 1149.636332][T16464]  ? up_write+0x1be/0x410
[ 1149.636364][T16464]  ? __list_lru_init+0xb4/0x600
[ 1149.636404][T16464]  __kmalloc+0xa7/0x240
[ 1149.652837][T11166] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[ 1149.656183][T16464]  __list_lru_init+0xb4/0x600
[ 1149.656234][T16464]  alloc_super+0x74c/0x910
[ 1149.661437][T11166] usb 4-1: media controller created
[ 1149.668358][T16464]  ? kill_litter_super+0xb0/0xb0
[ 1149.668387][T16464]  sget_fc+0x325/0x8d0
[ 1149.668408][T16464]  ? kill_litter_super+0xb0/0xb0
[ 1149.668431][T16464]  ? virtio_fs_zero_page_range+0x140/0x140
[ 1149.668460][T16464]  get_tree_nodev+0x2a/0x140
[ 1149.668486][T16464]  vfs_get_tree+0x8c/0x280
[ 1149.668514][T16464]  do_new_mount+0x24a/0xa40
[ 1149.668544][T16464]  __se_sys_mount+0x2e7/0x3d0
[ 1149.693541][T16449] ttusb2: i2c transfer failed.
[ 1149.696884][T16464]  ? __x64_sys_mount+0xc0/0xc0
[ 1149.730650][T16464]  ? lockdep_hardirqs_on+0x98/0x150
[ 1149.735922][T16464]  ? __x64_sys_mount+0x20/0xc0
[ 1149.740767][T16464]  do_syscall_64+0x55/0xb0
[ 1149.745235][T16464]  ? clear_bhb_loop+0x40/0x90
[ 1149.749958][T16464]  ? clear_bhb_loop+0x40/0x90
[ 1149.754683][T16464]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1149.760637][T16464] RIP: 0033:0x7fa9caf9e159
[ 1149.765097][T16464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1149.784746][T16464] RSP: 002b:00007fa9cbe8d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1149.793200][T16464] RAX: ffffffffffffffda RBX: 00007fa9cb225fa0 RCX: 00007fa9caf9e159
[ 1149.801209][T16464] RDX: 0000200000000b80 RSI: 0000200000000000 RDI: 0000000000000000
[ 1149.809231][T16464] RBP: 00007fa9cb03503b R08: 0000000000000000 R09: 0000000000000000
[ 1149.817247][T16464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1149.825266][T16464] R13: 00007fa9cb226038 R14: 00007fa9cb225fa0 R15: 00007ffd38b5fe28
[ 1149.833293][T16464]  </TASK>
[ 1149.877634][T11166] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1149.943405][T11166] usb 4-1: selecting invalid altsetting 3
[ 1149.949251][T16467] block device autoloading is deprecated and will be removed.
[ 1149.969392][T11166] ttusb2: set interface to alts=3 failed
[ 1150.046805][T11166] DVB: Unable to find symbol tda10086_attach()
[ 1150.066904][T11166] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[ 1150.108280][T11166] dvb-usb: bulk message failed: -22 (4/0)
[ 1150.137944][T11166] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[ 1150.156769][T16466] md/raid10:md0: not clean -- starting background reconstruction
[ 1150.165979][T16466] md/raid10:md0: active with 1 out of 2 devices
[ 1150.166450][T11166] dvb-usb: bulk message failed: -22 (5/0)
[ 1150.181449][T16466] md0: detected capacity change from 0 to 2048
[ 1150.212666][T11166] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[ 1150.236424][T11166] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[ 1150.299367][T11166] usb 4-1: USB disconnect, device number 17
[ 1150.454524][T11166] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[ 1150.609089][T16488] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2443'.
[ 1150.672441][T16489] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2445'.
[ 1150.764357][T16489] veth15: entered allmulticast mode
[ 1150.872859][T16485] netlink: 'syz.6.2445': attribute type 1 has an invalid length.
[ 1151.547346][T16485] 8021q: adding VLAN 0 to HW filter on device bond9
[ 1151.620166][T16490] bond8: (slave veth0_to_bond): Releasing active interface
[ 1151.679614][T16490] veth0_to_bond: left allmulticast mode
[ 1151.697110][T16490] veth0_to_bond: left promiscuous mode
[ 1151.724508][T16490] bond9: (slave veth0_to_bond): making interface the new active one
[ 1151.744943][T16490] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link
[ 1151.783784][T16491] bond9: entered promiscuous mode
[ 1151.788878][T16491] veth0_to_bond: entered promiscuous mode
[ 1151.815024][T16491] bond9: entered allmulticast mode
[ 1151.824473][T16491] veth0_to_bond: entered allmulticast mode
[ 1151.853355][T16499] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1152.133524][T16508] overlayfs: failed to clone upperpath
[ 1152.912353][T16528] netlink: 'syz.3.2459': attribute type 1 has an invalid length.
[ 1153.000323][T16531] jffs2: notice: (16531) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 1153.681698][T16528] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1153.724237][T16529] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2459'.
[ 1153.866777][T16529] veth5: entered allmulticast mode
[ 1153.898249][T16529] bond2: (slave veth5): Enslaving as an active interface with a down link
[ 1153.986955][T16534] bond1: (slave veth0_to_bond): Releasing active interface
[ 1154.017883][T16534] veth0_to_bond: left promiscuous mode
[ 1154.061838][T16534] bond2: (slave veth0_to_bond): making interface the new active one
[ 1154.079658][T16534] veth0_to_bond: entered promiscuous mode
[ 1154.086695][T16534] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link
[ 1154.113057][T16535] bond2: entered promiscuous mode
[ 1154.130710][T16535] bond2: entered allmulticast mode
[ 1154.142251][T16535] veth0_to_bond: entered allmulticast mode
[ 1154.195689][T16550] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2464'.
[ 1154.288292][T16551] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1155.257282][T16572] jffs2: notice: (16572) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 1155.879915][T16575] netlink: 'syz.9.2474': attribute type 1 has an invalid length.
[ 1156.015799][T16575] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1156.058154][T16578] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2474'.
[ 1156.116060][T16578] veth13: entered allmulticast mode
[ 1156.141243][T16578] bond6: (slave veth13): Enslaving as an active interface with a down link
[ 1156.184489][T16580] bond5: (slave veth0_to_bond): Releasing active interface
[ 1156.200995][T16580] veth0_to_bond: left allmulticast mode
[ 1156.208680][T16580] veth0_to_bond: left promiscuous mode
[ 1156.285568][T16580] bond6: (slave veth0_to_bond): making interface the new active one
[ 1156.309011][T16580] veth0_to_bond: entered promiscuous mode
[ 1156.320925][T16580] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link
[ 1156.383081][T16584] bond6: entered promiscuous mode
[ 1156.405622][T16584] bond6: entered allmulticast mode
[ 1156.431192][T16584] veth0_to_bond: entered allmulticast mode
[ 1156.646456][T16596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1156.713357][T16599] .: renamed from bond0 (while UP)
[ 1156.719836][T16599] FAULT_INJECTION: forcing a failure.
[ 1156.719836][T16599] name failslab, interval 1, probability 0, space 0, times 0
[ 1156.732667][T16599] CPU: 1 PID: 16599 Comm: syz.3.2481 Not tainted syzkaller #0
[ 1156.740268][T16599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1156.750385][T16599] Call Trace:
[ 1156.753705][T16599]  <TASK>
[ 1156.756698][T16599]  dump_stack_lvl+0x18c/0x250
[ 1156.761451][T16599]  ? show_regs_print_info+0x20/0x20
[ 1156.766739][T16599]  ? load_image+0x420/0x420
[ 1156.771311][T16599]  ? __lock_acquire+0x7d80/0x7d80
[ 1156.776392][T16599]  should_fail_ex+0x394/0x4c0
[ 1156.781132][T16599]  should_failslab+0x9/0x20
[ 1156.785678][T16599]  slab_pre_alloc_hook+0x59/0x300
[ 1156.790774][T16599]  ? br_netlink_fini+0x30/0x30
[ 1156.795667][T16599]  kmem_cache_alloc_node+0x5e/0x310
[ 1156.800929][T16599]  ? __alloc_skb+0x103/0x2c0
[ 1156.805582][T16599]  __alloc_skb+0x103/0x2c0
[ 1156.810150][T16599]  rtmsg_ifinfo_build_skb+0x83/0x260
[ 1156.815557][T16599]  rtnetlink_event+0x1b7/0x260
[ 1156.820367][T16599]  notifier_call_chain+0x18f/0x380
[ 1156.825521][T16599]  dev_change_name+0x608/0x8e0
[ 1156.830333][T16599]  ? end_current_label_crit_section+0x170/0x170
[ 1156.836640][T16599]  ? dev_alloc_name+0x1d0/0x1d0
[ 1156.841621][T16599]  ? dev_ifsioc+0x316/0xc40
[ 1156.846214][T16599]  dev_ioctl+0x5ec/0x1140
[ 1156.850591][T16599]  sock_do_ioctl+0x239/0x310
[ 1156.855217][T16599]  ? sock_show_fdinfo+0xb0/0xb0
[ 1156.860109][T16599]  sock_ioctl+0x5be/0x7e0
[ 1156.864459][T16599]  ? sock_poll+0x3e0/0x3e0
[ 1156.868914][T16599]  ? bpf_lsm_file_ioctl+0x9/0x10
[ 1156.873895][T16599]  ? security_file_ioctl+0x80/0xa0
[ 1156.879064][T16599]  ? sock_poll+0x3e0/0x3e0
[ 1156.883523][T16599]  __se_sys_ioctl+0xfd/0x170
[ 1156.888157][T16599]  do_syscall_64+0x55/0xb0
[ 1156.892617][T16599]  ? clear_bhb_loop+0x40/0x90
[ 1156.897336][T16599]  ? clear_bhb_loop+0x40/0x90
[ 1156.902049][T16599]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1156.907972][T16599] RIP: 0033:0x7f7d9c79e159
[ 1156.912412][T16599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1156.932056][T16599] RSP: 002b:00007f7d9a9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1156.940499][T16599] RAX: ffffffffffffffda RBX: 00007f7d9ca25fa0 RCX: 00007f7d9c79e159
[ 1156.948492][T16599] RDX: 0000200000000040 RSI: 0000000000008923 RDI: 0000000000000004
[ 1156.956476][T16599] RBP: 00007f7d9c83503b R08: 0000000000000000 R09: 0000000000000000
[ 1156.964458][T16599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1156.972464][T16599] R13: 00007f7d9ca26038 R14: 00007f7d9ca25fa0 R15: 00007fff4393b588
[ 1156.980565][T16599]  </TASK>
[ 1156.991648][ T5852] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[ 1157.223738][ T5852] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1157.256182][ T5852] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1157.266353][ T5852] usb 7-1: New USB device found, idVendor=8086, idProduct=0000, bcdDevice= 0.00
[ 1157.279265][ T5852] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1157.445178][T16611] FAULT_INJECTION: forcing a failure.
[ 1157.445178][T16611] name failslab, interval 1, probability 0, space 0, times 0
[ 1157.478155][T16611] CPU: 0 PID: 16611 Comm: syz.3.2485 Not tainted syzkaller #0
[ 1157.485708][T16611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1157.495811][T16611] Call Trace:
[ 1157.499134][T16611]  <TASK>
[ 1157.502102][T16611]  dump_stack_lvl+0x18c/0x250
[ 1157.506842][T16611]  ? show_regs_print_info+0x20/0x20
[ 1157.512084][T16611]  ? load_image+0x420/0x420
[ 1157.516670][T16611]  ? __might_sleep+0xe0/0xe0
[ 1157.521312][T16611]  ? __lock_acquire+0x7d80/0x7d80
[ 1157.526426][T16611]  should_fail_ex+0x394/0x4c0
[ 1157.531178][T16611]  should_failslab+0x9/0x20
[ 1157.535745][T16611]  slab_pre_alloc_hook+0x59/0x300
[ 1157.540842][T16611]  ? io_uring_alloc_task_context+0xaf/0x5c0
[ 1157.546813][T16611]  __kmem_cache_alloc_node+0x53/0x250
[ 1157.552245][T16611]  ? io_uring_alloc_task_context+0xaf/0x5c0
[ 1157.558181][T16611]  kmalloc_trace+0x2a/0xe0
[ 1157.562670][T16611]  io_uring_alloc_task_context+0xaf/0x5c0
[ 1157.568427][T16611]  ? __asan_memcpy+0x40/0x70
[ 1157.573077][T16611]  ? errseq_sample+0x40/0x60
[ 1157.577816][T16611]  ? io_uring_show_cred+0x4d0/0x4d0
[ 1157.583060][T16611]  ? alloc_file_pseudo+0x1ae/0x210
[ 1157.588229][T16611]  __io_uring_add_tctx_node+0x34f/0x500
[ 1157.593849][T16611]  ? __io_uring_free+0x200/0x200
[ 1157.598849][T16611]  ? __might_fault+0xaa/0x120
[ 1157.603636][T16611]  ? __anon_inode_getfile+0x16c/0x200
[ 1157.609071][T16611]  io_uring_create+0xc03/0x1330
[ 1157.613978][T16611]  __se_sys_io_uring_setup+0x29f/0x2b0
[ 1157.619501][T16611]  ? __x64_sys_io_uring_setup+0x60/0x60
[ 1157.625135][T16611]  ? lockdep_hardirqs_on+0x98/0x150
[ 1157.630399][T16611]  do_syscall_64+0x55/0xb0
[ 1157.634863][T16611]  ? clear_bhb_loop+0x40/0x90
[ 1157.639624][T16611]  ? clear_bhb_loop+0x40/0x90
[ 1157.644378][T16611]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1157.650326][T16611] RIP: 0033:0x7f7d9c79e159
[ 1157.654786][T16611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1157.674438][T16611] RSP: 002b:00007f7d9a9f5fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
[ 1157.682895][T16611] RAX: ffffffffffffffda RBX: 0000200000000380 RCX: 00007f7d9c79e159
[ 1157.691002][T16611] RDX: 0000200000000000 RSI: 0000200000000380 RDI: 00000000000023c7
[ 1157.699020][T16611] RBP: 00007f7d9c83503b R08: 0000000000000000 R09: 0000000000000000
[ 1157.707031][T16611] R10: 0000200000000580 R11: 0000000000000206 R12: 0000200000000000
[ 1157.715051][T16611] R13: 0000200000000580 R14: 0000200000000140 R15: 00007fff4393b588
[ 1157.723088][T16611]  </TASK>
[ 1157.998980][T16618] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2487'.
[ 1158.325398][T16620] netlink: 'syz.3.2488': attribute type 1 has an invalid length.
[ 1158.468482][T16620] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1158.491820][T16623] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2488'.
[ 1158.594013][ T5852] hid-sensor-hub 0003:8086:0000.000C: unknown main item tag 0x0
[ 1158.601766][ T5852] hid-sensor-hub 0003:8086:0000.000C: unknown main item tag 0x0
[ 1158.614925][ T5852] hid-sensor-hub 0003:8086:0000.000C: hiddev0,hidraw0: USB HID v1.11 Device [HID 8086:0000] on usb-dummy_hcd.6-1/input0
[ 1158.651286][T16623] veth7: entered allmulticast mode
[ 1158.686115][T16623] bond0: (slave veth7): Enslaving as an active interface with a down link
[ 1158.755456][T16624] bond2: (slave veth0_to_bond): Releasing active interface
[ 1158.793408][T16624] veth0_to_bond: left allmulticast mode
[ 1158.824019][T16624] veth0_to_bond: left promiscuous mode
[ 1158.864611][T16624] bond0: (slave veth0_to_bond): making interface the new active one
[ 1158.884359][T16624] veth0_to_bond: entered promiscuous mode
[ 1158.898986][T16624] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link
[ 1159.172729][T16625] bond0: entered promiscuous mode
[ 1159.188654][T16625] bond0: entered allmulticast mode
[ 1159.206477][T16625] veth0_to_bond: entered allmulticast mode
[ 1159.617132][T16643] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1160.005443][T16647] jffs2: notice: (16647) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 1160.339392][T12154] usb 7-1: USB disconnect, device number 22
[ 1161.310656][T16658] netlink: 'syz.6.2499': attribute type 1 has an invalid length.
[ 1161.581303][T16658] 8021q: adding VLAN 0 to HW filter on device bond10
[ 1161.632422][T16666] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2499'.
[ 1161.722846][T14640] Bluetooth: hci2: command 0x0406 tx timeout
[ 1161.744861][T16666] veth15: entered allmulticast mode
[ 1161.783729][T16666] bond10: (slave veth15): Enslaving as an active interface with a down link
[ 1161.834730][T16669] bond9: (slave veth0_to_bond): Releasing active interface
[ 1161.853923][T16669] veth0_to_bond: left promiscuous mode
[ 1161.860534][T16669] veth0_to_bond: left allmulticast mode
[ 1161.913435][T16669] bond10: (slave veth0_to_bond): making interface the new active one
[ 1161.950777][T12263] smpboot: CPU 1 is now offline
[ 1161.959043][T16669] veth0_to_bond: entered promiscuous mode
[ 1161.990943][T16669] bond10: (slave veth0_to_bond): Enslaving as an active interface with an up link
[ 1162.041626][T16672] bond10: entered promiscuous mode
[ 1162.056903][T16672] bond10: entered allmulticast mode
[ 1162.071944][T16672] veth0_to_bond: entered allmulticast mode
[ 1162.078764][T16675] smpboot: Booting Node 0 Processor 1 APIC 0x1
[ 1162.402101][T16677] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1165.697248][T16712] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[ 1165.773182][T16712] infiniband s`z1: RDMA CMA: cma_listen_on_dev, error -98
[ 1166.844581][T14640] Bluetooth: hci3: command 0x0406 tx timeout
[ 1171.805143][T14640] Bluetooth: hci2: command 0x0406 tx timeout
[ 1171.991315][ T3487] tipc: Subscription rejected, illegal request
[ 1176.216267][T16786] FAULT_INJECTION: forcing a failure.
[ 1176.216267][T16786] name failslab, interval 1, probability 0, space 0, times 0
[ 1176.230616][T16786] CPU: 0 PID: 16786 Comm: syz.6.2538 Not tainted syzkaller #0
[ 1176.238108][T16786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1176.248182][T16786] Call Trace:
[ 1176.251478][T16786]  <TASK>
[ 1176.254419][T16786]  dump_stack_lvl+0x18c/0x250
[ 1176.259126][T16786]  ? show_regs_print_info+0x20/0x20
[ 1176.264342][T16786]  ? load_image+0x420/0x420
[ 1176.268866][T16786]  should_fail_ex+0x394/0x4c0
[ 1176.273570][T16786]  should_failslab+0x9/0x20
[ 1176.278099][T16786]  slab_pre_alloc_hook+0x59/0x300
[ 1176.283161][T16786]  ? rfcomm_dlc_alloc+0x75/0x400
[ 1176.288271][T16786]  __kmem_cache_alloc_node+0x53/0x250
[ 1176.293705][T16786]  ? rfcomm_dlc_alloc+0x75/0x400
[ 1176.298679][T16786]  kmalloc_trace+0x2a/0xe0
[ 1176.303154][T16786]  rfcomm_dlc_alloc+0x75/0x400
[ 1176.307958][T16786]  rfcomm_sock_alloc+0x23/0x200
[ 1176.312875][T16786]  rfcomm_sock_create+0xc2/0x2c0
[ 1176.317846][T16786]  bt_sock_create+0x159/0x230
[ 1176.322686][T16786]  __sock_create+0x49e/0x940
[ 1176.327316][T16786]  __sys_socket+0xd7/0x1b0
[ 1176.331771][T16786]  __x64_sys_socket+0x7a/0x90
[ 1176.336488][T16786]  do_syscall_64+0x55/0xb0
[ 1176.340948][T16786]  ? clear_bhb_loop+0x40/0x90
[ 1176.345655][T16786]  ? clear_bhb_loop+0x40/0x90
[ 1176.350362][T16786]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1176.356309][T16786] RIP: 0033:0x7f97aeb9e159
[ 1176.360753][T16786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1176.380389][T16786] RSP: 002b:00007f97afb23fc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[ 1176.388837][T16786] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f97aeb9e159
[ 1176.396838][T16786] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 000000000000001f
[ 1176.404836][T16786] RBP: 00007f97aec3503b R08: 0000000000000000 R09: 0000000000000000
[ 1176.412841][T16786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1176.420833][T16786] R13: 00007f97aee26038 R14: 00007f97aee25fa0 R15: 00007ffdc268d568
[ 1176.428844][T16786]  </TASK>
[ 1177.490343][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.496905][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[ 1181.242607][T14640] Bluetooth: hci3: command 0x0406 tx timeout
[ 1184.227409][T16840] FAULT_INJECTION: forcing a failure.
[ 1184.227409][T16840] name failslab, interval 1, probability 0, space 0, times 0
[ 1184.252537][ T5852] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[ 1184.289519][T16840] CPU: 0 PID: 16840 Comm: syz.3.2555 Not tainted syzkaller #0
[ 1184.297054][T16840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1184.307143][T16840] Call Trace:
[ 1184.310450][T16840]  <TASK>
[ 1184.313509][T16840]  dump_stack_lvl+0x18c/0x250
[ 1184.318258][T16840]  ? show_regs_print_info+0x20/0x20
[ 1184.323484][T16840]  ? load_image+0x420/0x420
[ 1184.327997][T16840]  ? __might_sleep+0xe0/0xe0
[ 1184.332623][T16840]  ? __lock_acquire+0x7d80/0x7d80
[ 1184.337733][T16840]  should_fail_ex+0x394/0x4c0
[ 1184.342476][T16840]  should_failslab+0x9/0x20
[ 1184.347028][T16840]  slab_pre_alloc_hook+0x59/0x300
[ 1184.352069][T16840]  ? __kernfs_new_node+0xaa/0x7f0
[ 1184.357156][T16840]  ? __kernfs_new_node+0xaa/0x7f0
[ 1184.362238][T16840]  __kmem_cache_alloc_node+0x53/0x250
[ 1184.367670][T16840]  ? __kernfs_new_node+0xaa/0x7f0
[ 1184.372750][T16840]  __kmalloc_node_track_caller+0xa4/0x230
[ 1184.378540][T16840]  kstrdup+0x3b/0x80
[ 1184.382516][T16840]  __kernfs_new_node+0xaa/0x7f0
[ 1184.387407][T16840]  ? kernfs_new_node+0x260/0x260
[ 1184.392370][T16840]  ? sysfs_do_create_link_sd+0x75/0x110
[ 1184.397927][T16840]  kernfs_new_node+0x14c/0x260
[ 1184.402721][T16840]  kernfs_create_link+0xa7/0x200
[ 1184.407711][T16840]  sysfs_do_create_link_sd+0x83/0x110
[ 1184.413137][T16840]  device_add_class_symlinks+0x1cf/0x240
[ 1184.418869][T16840]  device_add+0x4f9/0xc40
[ 1184.423244][T16840]  netdev_register_kobject+0x188/0x320
[ 1184.428799][T16840]  register_netdevice+0x12aa/0x1ba0
[ 1184.434073][T16840]  ? netif_stacked_transfer_operstate+0x210/0x210
[ 1184.440520][T16840]  ? mutex_lock_nested+0x20/0x20
[ 1184.445499][T16840]  ? __asan_memset+0x22/0x40
[ 1184.450135][T16840]  ? __asan_memcpy+0x40/0x70
[ 1184.454785][T16840]  ? alloc_netdev_mqs+0xc23/0x1040
[ 1184.459924][T16840]  register_netdev+0x3b/0x50
[ 1184.464621][T16840]  loopback_net_init+0x75/0x150
[ 1184.469538][T16840]  ops_init+0x391/0x640
[ 1184.473759][T16840]  setup_net+0x3b6/0xa20
[ 1184.478039][T16840]  ? copy_net_ns+0x5d0/0x5d0
[ 1184.482691][T16840]  ? copy_net_ns+0x342/0x5d0
[ 1184.487317][T16840]  ? down_read_killable+0x1d0/0x340
[ 1184.492562][T16840]  copy_net_ns+0x35e/0x5d0
[ 1184.497021][T16840]  create_new_namespaces+0x3ce/0x700
[ 1184.502355][T16840]  unshare_nsproxy_namespaces+0x11a/0x160
[ 1184.508104][T16840]  ksys_unshare+0x4fa/0x8f0
[ 1184.512658][T16840]  ? sighand_ctor+0x50/0x50
[ 1184.517187][T16840]  ? lock_chain_count+0x20/0x20
[ 1184.522064][T16840]  ? syscall_enter_from_user_mode+0x25/0x80
[ 1184.528004][T16840]  __x64_sys_unshare+0x38/0x40
[ 1184.532815][T16840]  do_syscall_64+0x55/0xb0
[ 1184.537277][T16840]  ? clear_bhb_loop+0x40/0x90
[ 1184.541993][T16840]  ? clear_bhb_loop+0x40/0x90
[ 1184.546750][T16840]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1184.552697][T16840] RIP: 0033:0x7f7d9c79e159
[ 1184.557157][T16840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1184.576816][T16840] RSP: 002b:00007f7d9a9d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[ 1184.585284][T16840] RAX: ffffffffffffffda RBX: 00007f7d9ca26090 RCX: 00007f7d9c79e159
[ 1184.593304][T16840] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000
[ 1184.601328][T16840] RBP: 00007f7d9c83503b R08: 0000000000000000 R09: 0000000000000000
[ 1184.609334][T16840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1184.617335][T16840] R13: 00007f7d9ca26128 R14: 00007f7d9ca26090 R15: 00007fff4393b588
[ 1184.625348][T16840]  </TASK>
[ 1184.930267][ T5852] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1184.947023][ T5852] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[ 1185.011463][ T5852] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1185.040998][ T5852] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1185.061309][ T5852] usb 7-1: Product: syz
[ 1185.066700][ T5852] usb 7-1: Manufacturer: syz
[ 1185.071461][ T5852] usb 7-1: SerialNumber: syz
[ 1185.081247][ T5852] cdc_mbim 7-1:1.0: skipping garbage
[ 1185.300244][T16834] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1185.633529][T12154] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[ 1185.738400][T16834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1185.771730][T16834] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1185.832852][T12154] usb 4-1: Using ep0 maxpacket: 8
[ 1185.847592][T12154] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[ 1185.876719][T12154] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1185.921220][T12154] pvrusb2: Hardware description: Terratec Grabster AV400
[ 1185.945371][T12154] pvrusb2: **********
[ 1185.963450][T12154] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[ 1185.999088][T12154] pvrusb2: Important functionality might not be entirely working.
[ 1186.027521][T12154] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[ 1186.053725][T16834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1186.082596][T12154] pvrusb2: **********
[ 1186.088540][T16834] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1186.119761][T16834] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1186.145884][ T2322] pvrusb2: Invalid write control endpoint
[ 1186.157008][ T5852] cdc_mbim 7-1:1.0: setting rx_max = 16384
[ 1186.296983][ T2322] pvrusb2: Invalid write control endpoint
[ 1186.307666][ T2322] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[ 1186.321975][ T2322] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[ 1186.330267][ T2322] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[ 1186.355600][ T2322] pvrusb2: Device being rendered inoperable
[ 1186.370138][T16834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1186.382772][ T2322] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[ 1186.390350][T12154] usb 4-1: USB disconnect, device number 18
[ 1186.398094][ T2322] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[ 1186.416955][ T2322] pvrusb2: Attached sub-driver cx25840
[ 1186.426370][T16834] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1186.438060][ T2322] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[ 1186.473644][ T5852] cdc_mbim 7-1:1.0: setting tx_max = 184
[ 1186.489159][ T2322] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[ 1186.541194][ T5852] cdc_mbim 7-1:1.0: cdc-wdm0: USB WDM device
[ 1186.600617][ T5852] wwan wwan0: port wwan0mbim0 attached
[ 1186.657122][ T5852] cdc_mbim 7-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.6-1, CDC MBIM, 52:33:d7:7a:8f:b8
[ 1186.936861][ T5852] usb 7-1: USB disconnect, device number 23
[ 1186.953516][ T5852] cdc_mbim 7-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.6-1, CDC MBIM
[ 1187.882631][T14640] Bluetooth: hci3: command 0x0406 tx timeout
[ 1188.972187][ T5852] wwan wwan0: port wwan0mbim0 disconnected
[ 1189.956570][T16909] jffs2: notice: (16909) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 1189.975873][T12154] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[ 1190.192547][T12154] usb 4-1: Using ep0 maxpacket: 8
[ 1190.227190][T12154] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[ 1190.276581][T12154] usb 4-1: config 179 has no interface number 0
[ 1190.323520][T12154] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[ 1190.401037][T12154] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[ 1190.471203][T12154] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1190.520439][T12154] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[ 1190.567755][T12154] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 1190.624258][T12154] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[ 1190.667818][T12154] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1190.720099][T16902] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1191.056780][T12154] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input15
[ 1191.255446][T12154] usb 4-1: USB disconnect, device number 19
[ 1191.261420][    C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[ 1191.261460][    C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[ 1191.364789][T12154] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[ 1194.287547][T16942] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2576'.
[ 1194.723051][T12154] usb 4-1: new full-speed USB device number 20 using dummy_hcd
[ 1194.963786][T12154] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1194.982565][T12154] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1195.016837][T12154] usb 4-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00
[ 1195.052541][T12154] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1195.102364][T12154] usb 4-1: config 0 descriptor??
[ 1195.215808][T16938] loop6: detected capacity change from 0 to 32768
[ 1195.260677][T16938] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.2577 (16938)
[ 1195.580804][T16938] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1196.998519][T16938] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm
[ 1197.162520][T14640] Bluetooth: hci3: command 0x0406 tx timeout
[ 1198.993934][T16938] BTRFS info (device loop6): setting nodatasum
[ 1199.688971][T12154] usb 4-1: USB disconnect, device number 20
[ 1199.707732][T16938] BTRFS info (device loop6): force zlib compression, level 3
[ 1199.740897][T16938] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_LZO (0x8)
[ 1199.779333][T16938] BTRFS info (device loop6): use lzo compression, level 0
[ 1199.972717][T16938] BTRFS info (device loop6): turning on flush-on-commit
[ 1199.997687][T16938] BTRFS info (device loop6): enabling auto defrag
[ 1200.999028][T16938] BTRFS info (device loop6): max_inline at 0
[ 1201.557130][T16938] BTRFS info (device loop6): using free space tree
[ 1201.577613][T16938] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR
[ 1201.626316][T16938] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR
[ 1201.812673][T16938] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR
[ 1201.835104][T16938] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR
[ 1202.096347][T16938] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR
[ 1202.156448][T16938] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR
[ 1202.204388][T16989] jffs2: notice: (16989) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 1202.233360][T16938] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR
[ 1202.233974][T16938] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[ 1202.302448][T16938] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[ 1202.348970][T16938] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR
[ 1202.405670][T16938] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[ 1202.467821][T16938] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[ 1202.596416][T16938] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[ 1202.686552][T16938] BTRFS error (device loop6): open_ctree failed: -12
[ 1202.893775][T16999] md: couldn't update array info. -22
[ 1202.933526][T16999] md: could not open device unknown-block(1,1).
[ 1202.950149][T16999] md: md_import_device returned -16
[ 1203.224433][T17003] FAULT_INJECTION: forcing a failure.
[ 1203.224433][T17003] name failslab, interval 1, probability 0, space 0, times 0
[ 1203.283670][T17003] CPU: 0 PID: 17003 Comm: syz.3.2592 Not tainted syzkaller #0
[ 1203.291202][T17003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1203.301280][T17003] Call Trace:
[ 1203.304562][T17003]  <TASK>
[ 1203.307498][T17003]  dump_stack_lvl+0x18c/0x250
[ 1203.312210][T17003]  ? show_regs_print_info+0x20/0x20
[ 1203.317417][T17003]  ? load_image+0x420/0x420
[ 1203.321943][T17003]  ? __might_sleep+0xe0/0xe0
[ 1203.326574][T17003]  ? __lock_acquire+0x7d80/0x7d80
[ 1203.331621][T17003]  should_fail_ex+0x394/0x4c0
[ 1203.336341][T17003]  should_failslab+0x9/0x20
[ 1203.340889][T17003]  slab_pre_alloc_hook+0x59/0x300
[ 1203.345977][T17003]  kmem_cache_alloc_lru+0x4d/0x2b0
[ 1203.351140][T17003]  ? __d_alloc+0x31/0x710
[ 1203.355598][T17003]  __d_alloc+0x31/0x710
[ 1203.359786][T17003]  d_alloc_pseudo+0x1d/0x70
[ 1203.364304][T17003]  alloc_file_pseudo+0xe4/0x210
[ 1203.369516][T17003]  ? fput+0x1a0/0x1a0
[ 1203.373539][T17003]  ? _raw_spin_unlock+0x28/0x40
[ 1203.378430][T17003]  ? alloc_fd+0x590/0x640
[ 1203.382796][T17003]  anon_inode_getfd+0xca/0x1c0
[ 1203.387594][T17003]  __se_sys_landlock_create_ruleset+0x2be/0x380
[ 1203.393877][T17003]  ? __x64_sys_landlock_create_ruleset+0x80/0x80
[ 1203.400250][T17003]  ? lockdep_hardirqs_on+0x98/0x150
[ 1203.405515][T17003]  do_syscall_64+0x55/0xb0
[ 1203.409960][T17003]  ? clear_bhb_loop+0x40/0x90
[ 1203.414664][T17003]  ? clear_bhb_loop+0x40/0x90
[ 1203.419401][T17003]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1203.425325][T17003] RIP: 0033:0x7f7d9c79e159
[ 1203.429773][T17003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1203.449506][T17003] RSP: 002b:00007f7d9a9f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bc
[ 1203.457957][T17003] RAX: ffffffffffffffda RBX: 00007f7d9ca25fa0 RCX: 00007f7d9c79e159
[ 1203.466064][T17003] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000200000000140
[ 1203.474076][T17003] RBP: 00007f7d9c83503b R08: 0000000000000000 R09: 0000000000000000
[ 1203.482075][T17003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1203.490081][T17003] R13: 00007f7d9ca26038 R14: 00007f7d9ca25fa0 R15: 00007fff4393b588
[ 1203.498098][T17003]  </TASK>
[ 1203.812017][T17009] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2590'.
[ 1209.342708][T17030] md: couldn't update array info. -22
[ 1209.358900][T17030] md: could not open device unknown-block(1,1).
[ 1209.372548][T17030] md: md_import_device returned -16
[ 1211.288850][T17035] jffs2: notice: (17035) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 1211.482713][T17040] xt_hashlimit: size too large, truncated to 1048576
[ 1212.922659][T14640] Bluetooth: hci3: command 0x0406 tx timeout
[ 1217.393126][T17064] md: couldn't update array info. -22
[ 1217.436326][T17064] md: could not open device unknown-block(1,1).
[ 1217.458854][T17064] md: md_import_device returned -16
[ 1219.664974][T17080] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2613'.
[ 1219.666929][T14640] Bluetooth: hci4: unknown advertising packet type: 0x05
[ 1219.842710][ T5852] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[ 1220.095930][ T5852] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1220.155348][ T5852] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1220.206763][ T5852] usb 7-1: New USB device found, idVendor=8086, idProduct=0000, bcdDevice= 0.00
[ 1220.250491][ T5852] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1220.772941][ T5852] hid-sensor-hub 0003:8086:0000.000D: unknown main item tag 0x0
[ 1220.812049][ T5852] hid-sensor-hub 0003:8086:0000.000D: unknown main item tag 0x0
[ 1220.859903][ T5852] hid-sensor-hub 0003:8086:0000.000D: hiddev0,hidraw0: USB HID v1.11 Device [HID 8086:0000] on usb-dummy_hcd.6-1/input0
[ 1221.062940][ T5852] usb 7-1: USB disconnect, device number 24
[ 1221.252697][T14640] Bluetooth: hci1: command 0x0406 tx timeout
[ 1223.858912][T17095] jffs2: notice: (17095) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 1223.935659][T17099] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2619'.
[ 1224.662321][T17106] md: couldn't update array info. -22
[ 1224.684316][T17106] md: could not open device unknown-block(1,1).
[ 1224.706941][T17106] md: md_import_device returned -16
[ 1227.365255][T10567] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1227.384074][T10567] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1227.392403][T10567] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1227.407134][T10567] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1227.417356][T10567] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1227.426314][T10567] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1227.758674][T17115] chnl_net:caif_netlink_parms(): no params data found
[ 1227.910493][T17115] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1227.924437][T17115] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1227.931976][T17115] bridge_slave_0: entered allmulticast mode
[ 1227.949482][T17115] bridge_slave_0: entered promiscuous mode
[ 1227.968231][T17115] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1227.976124][T17115] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1227.987636][T17115] bridge_slave_1: entered allmulticast mode
[ 1227.997033][T17115] bridge_slave_1: entered promiscuous mode
[ 1228.061483][T17115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1228.081179][T17115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1228.150873][T17115] team0: Port device team_slave_0 added
[ 1228.169376][T17115] team0: Port device team_slave_1 added
[ 1228.213039][T17115] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1228.220063][T17115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1228.257612][T17115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1228.275007][T17115] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1228.282006][T17115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1228.316384][T17115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1228.762741][T10567] Bluetooth: hci1: command 0x0406 tx timeout
[ 1228.832353][T17115] hsr_slave_0: entered promiscuous mode
[ 1228.863275][T17115] hsr_slave_1: entered promiscuous mode
[ 1228.876216][T17115] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1228.888960][T17115] Cannot create hsr debugfs directory
[ 1229.482757][T10567] Bluetooth: hci0: command tx timeout
[ 1231.563573][T10567] Bluetooth: hci0: command tx timeout
[ 1231.947179][T17158] md: couldn't update array info. -22
[ 1232.005953][T17158] md: could not open device unknown-block(1,1).
[ 1232.012370][T17158] md: md_import_device returned -16
[ 1233.643570][T10567] Bluetooth: hci0: command tx timeout
[ 1235.201837][T17040] syz_tun (unregistering): left allmulticast mode
[ 1235.722690][T10567] Bluetooth: hci0: command tx timeout
[ 1236.956806][T17115] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1236.983150][T17115] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1237.166617][ T1330] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1237.183304][T10567] Bluetooth: hci1: command 0x0406 tx timeout
[ 1237.296466][T17115] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1237.317288][T17115] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1237.598773][ T1330] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1237.768982][ T1330] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1237.879297][T17115] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1237.974719][ T1330] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1238.069781][T17115] 8021q: adding VLAN 0 to HW filter on device team0
[ 1238.134874][T16306] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1238.142101][T16306] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1238.244849][T16296] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1238.252089][T16296] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1238.560530][T17115] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1238.936024][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[ 1238.942503][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[ 1239.898375][T17248] md: couldn't update array info. -22
[ 1239.932284][T17248] md: could not open device unknown-block(1,1).
[ 1239.949714][T17251] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2639'.
[ 1239.984645][T17248] md: md_import_device returned -16
[ 1240.370610][T17115] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1240.851854][T17115] veth0_vlan: entered promiscuous mode
[ 1240.968679][T17115] veth1_vlan: entered promiscuous mode
[ 1241.219147][T17115] veth0_macvtap: entered promiscuous mode
[ 1241.258120][T17115] veth1_macvtap: entered promiscuous mode
[ 1241.411231][T17115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1241.467689][T17115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1241.500258][T17115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1241.532483][T17115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1241.542382][T17115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1241.591909][T17115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1241.618600][T17115] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1241.737995][T17115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1241.782465][T17115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1241.817355][T17115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1241.832698][T17115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1241.857385][T17115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1241.895393][T17115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1241.929620][T17115] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1241.961655][T17115] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1242.005191][T17115] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1242.031431][T17115] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1242.056986][T17115] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1242.169022][ T1330] hsr_slave_0: left promiscuous mode
[ 1242.181997][ T1330] hsr_slave_1: left promiscuous mode
[ 1242.201138][ T1330] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1242.220789][ T1330] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1242.261661][ T1330] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1242.278182][ T1330] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1242.308351][ T1330] vlan2: left allmulticast mode
[ 1242.322471][ T1330] dummy0: left allmulticast mode
[ 1242.327463][ T1330] vlan2: left promiscuous mode
[ 1242.343404][ T1330] bridge0: port 3(vlan2) entered disabled state
[ 1242.352087][ T1330] bridge_slave_1: left allmulticast mode
[ 1242.380946][ T1330] bridge_slave_1: left promiscuous mode
[ 1242.406814][ T1330] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1242.423825][ T1330] bridge_slave_0: left allmulticast mode
[ 1242.429538][ T1330] bridge_slave_0: left promiscuous mode
[ 1242.449772][ T1330] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1242.598021][ T1330] veth1_macvtap: left promiscuous mode
[ 1242.614005][ T1330] veth0_macvtap: left promiscuous mode
[ 1242.619732][ T1330] veth1_vlan: left promiscuous mode
[ 1242.642816][ T1330] veth0_vlan: left promiscuous mode
[ 1243.331549][ T1330] bond0 (unregistering): (slave veth9): Releasing active interface
[ 1243.343641][ T1330] bond0 (unregistering): (slave veth9): the permanent HWaddr of slave - 36:cf:a2:fe:79:bc - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[ 1245.059781][ T1330] bond0 (unregistering): (slave veth0_to_bond): Releasing active interface
[ 1245.069876][ T1330] veth0_to_bond (unregistering): left allmulticast mode
[ 1245.081268][ T1330] veth0_to_bond (unregistering): left promiscuous mode
[ 1245.093132][ T1330] bond0 (unregistering): Released all slaves
[ 1245.150867][ T1330] bond6 (unregistering): (slave geneve2): Releasing active interface
[ 1245.326111][T10567] Bluetooth: hci4: command 0x0406 tx timeout
[ 1245.427704][ T1330] bond6 (unregistering): Released all slaves
[ 1245.716247][ T1330] bond5 (unregistering): Released all slaves
[ 1246.004844][ T1330] bond4 (unregistering): Released all slaves
[ 1246.061210][ T1330] bond3 (unregistering): (slave veth7): Releasing active interface
[ 1246.386011][ T1330] bond3 (unregistering): Released all slaves
[ 1246.461934][ T1330] bond2 (unregistering): (slave veth5): Releasing active interface
[ 1246.833794][ T1330] bond2 (unregistering): Released all slaves
[ 1246.898329][ T1330] bond1 (unregistering): (slave veth3): Releasing active interface
[ 1247.199795][ T1330] bond1 (unregistering): Released all slaves
[ 1247.881588][T17302] md: couldn't update array info. -22
[ 1247.897298][T17302] md: could not open device unknown-block(1,1).
[ 1247.909725][T17302] md: md_import_device returned -16
[ 1248.467811][ T1330] team0 (unregistering): Port device team_slave_1 removed
[ 1248.580667][ T1330] team0 (unregistering): Port device team_slave_0 removed
[ 1248.670537][ T1330] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1248.769455][ T1330] .` (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1251.142131][ T1330] .` (unregistering): Released all slaves
[ 1251.653204][T16296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1251.661096][T16296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1251.830929][T16295] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1251.861997][T16295] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1252.762669][T10567] Bluetooth: hci2: command 0x0406 tx timeout
[ 1254.143409][T17354] loop3: detected capacity change from 0 to 256
[ 1254.256733][T17358] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2626'.
[ 1254.269368][T10567] Bluetooth: hci0: unknown advertising packet type: 0x05
[ 1254.277926][T17356] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2657'.
[ 1254.361702][ T1330] IPVS: stop unused estimator thread 0...
[ 1254.784412][T17368] jffs2: notice: (17368) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 1254.925527][T17373] netlink: 'syz.3.2660': attribute type 1 has an invalid length.
[ 1255.128501][T17373] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1255.173388][T17379] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2660'.
[ 1255.514435][T17379] veth9: entered allmulticast mode
[ 1255.553256][T17379] bond3: (slave veth9): Enslaving as an active interface with a down link
[ 1256.980727][T17382] bond0: (slave veth0_to_bond): Releasing active interface
[ 1257.008257][T17382] veth0_to_bond: left allmulticast mode
[ 1257.268551][T17382] veth0_to_bond: left promiscuous mode
[ 1257.312910][T17400] loop6: detected capacity change from 0 to 512
[ 1257.324179][T17382] bond3: (slave veth0_to_bond): making interface the new active one
[ 1257.360607][T17382] veth0_to_bond: entered promiscuous mode
[ 1257.371415][T17400] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1257.403213][T17382] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link
[ 1258.979700][T17386] bond3: entered promiscuous mode
[ 1258.991429][T17386] bond3: entered allmulticast mode
[ 1259.303906][T17386] veth0_to_bond: entered allmulticast mode
[ 1259.451727][T17373] macvlan2: entered promiscuous mode
[ 1259.478624][T17373] macvlan2: entered allmulticast mode
[ 1259.952495][ T5852] usb 7-1: new high-speed USB device number 25 using dummy_hcd
[ 1260.127639][T17422] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2667'.
[ 1260.202631][ T5852] usb 7-1: Using ep0 maxpacket: 32
[ 1260.215090][ T5852] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1260.251000][ T5852] usb 7-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00
[ 1260.283297][ T5852] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1260.323360][ T5852] usb 7-1: config 0 descriptor??
[ 1260.797522][ T5852] cypress 0003:04B4:BCA1.000E: unknown main item tag 0x0
[ 1260.822871][ T5852] cypress 0003:04B4:BCA1.000E: unknown main item tag 0x0
[ 1260.858952][ T5852] cypress 0003:04B4:BCA1.000E: unknown main item tag 0x0
[ 1260.903578][ T5852] cypress 0003:04B4:BCA1.000E: unknown main item tag 0x0
[ 1260.944883][ T5852] cypress 0003:04B4:BCA1.000E: unknown main item tag 0x0
[ 1260.985419][ T5852] cypress 0003:04B4:BCA1.000E: unknown main item tag 0x0
[ 1261.033529][ T5852] cypress 0003:04B4:BCA1.000E: hidraw0: USB HID v0.01 Device [HID 04b4:bca1] on usb-dummy_hcd.6-1/input0
[ 1262.651949][ T5852] usb 7-1: USB disconnect, device number 25
[ 1264.740966][T17493] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2674'.
[ 1264.859304][T17493] veth3: entered allmulticast mode
[ 1264.937868][T17534] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2676'.
[ 1265.868727][T10567] Bluetooth: hci1: unknown advertising packet type: 0x05
[ 1265.869986][T17559] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2677'.
[ 1268.312527][T12263] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[ 1270.802953][T17629] Mass Storage Function, version: 2009/09/11
[ 1270.809623][T17629] LUN: removable file: (no medium)
[ 1270.958986][T17626] LUN: removable file: (no medium)
[ 1270.975607][T12263] usb 3-1: not running at top speed; connect to a high speed hub
[ 1271.292558][T12263] usb 3-1: unable to read config index 0 descriptor/start: -71
[ 1271.300239][T12263] usb 3-1: can't read configurations, error -71
[ 1271.882891][T17693] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2686'.
[ 1272.116516][T17699] netlink: 'syz.9.2687': attribute type 1 has an invalid length.
[ 1272.231774][T17699] 8021q: adding VLAN 0 to HW filter on device bond7
[ 1272.353927][T17704] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2687'.
[ 1272.462676][T17704] veth15: entered allmulticast mode
[ 1272.499071][T17704] bond7: (slave veth15): Enslaving as an active interface with a down link
[ 1272.509084][T17712] loop2: detected capacity change from 0 to 512
[ 1272.552608][T17712] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[ 1272.619963][T17709] bond6: (slave veth0_to_bond): Releasing active interface
[ 1272.647371][T17712] EXT4-fs error (device loop2): ext4_orphan_get:1434: comm syz.2.2688: bad orphan inode 131083
[ 1272.683024][T17709] veth0_to_bond: left allmulticast mode
[ 1272.721124][T17712] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1272.737703][T17709] veth0_to_bond: left promiscuous mode
[ 1272.780758][T17709] bond7: (slave veth0_to_bond): making interface the new active one
[ 1272.824787][T17709] veth0_to_bond: entered promiscuous mode
[ 1272.855307][T17709] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link
[ 1274.989261][T17699] bond7: entered promiscuous mode
[ 1275.004889][T17699] bond7: entered allmulticast mode
[ 1275.983696][T17699] veth0_to_bond: entered allmulticast mode
[ 1276.695898][T17715] macvlan2: entered promiscuous mode
[ 1276.708058][T17715] macvlan2: entered allmulticast mode
[ 1278.612581][T17115] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1280.974664][T14640] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1280.987308][T14640] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1280.995636][T14640] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1281.004758][T14640] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1281.012938][T14640] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1281.020363][T14640] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1281.535611][T17805] chnl_net:caif_netlink_parms(): no params data found
[ 1281.795584][T17805] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1281.822780][T17805] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1281.852660][T17805] bridge_slave_0: entered allmulticast mode
[ 1281.877644][T17805] bridge_slave_0: entered promiscuous mode
[ 1281.896071][T17805] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1281.922561][T17805] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1281.930339][T17805] bridge_slave_1: entered allmulticast mode
[ 1281.969871][T17805] bridge_slave_1: entered promiscuous mode
[ 1282.090265][T17805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1282.133304][T17805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1282.269241][T17805] team0: Port device team_slave_0 added
[ 1282.285836][T17805] team0: Port device team_slave_1 added
[ 1282.378953][T17805] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1282.389754][T17805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1282.431746][T17805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1283.083085][T14640] Bluetooth: hci3: command tx timeout
[ 1283.140179][T17805] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1283.148137][T17805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1283.182307][T17805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1283.358176][T17805] hsr_slave_0: entered promiscuous mode
[ 1283.389325][T17805] hsr_slave_1: entered promiscuous mode
[ 1283.405164][T17805] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1283.443021][T17805] Cannot create hsr debugfs directory
[ 1283.582723][T17830] loop2: detected capacity change from 0 to 1024
[ 1283.615177][T17830] EXT4-fs: Ignoring removed bh option
[ 1283.757984][T17830] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1284.041856][T17115] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1284.074401][T13450] syz_tun (unregistering): left allmulticast mode
[ 1284.759405][T17852] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2696'.
[ 1284.881823][ T1330] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1285.004429][ T1330] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1285.220675][T14640] Bluetooth: hci3: command tx timeout
[ 1285.359437][T17865] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2697'.
[ 1285.369574][T14640] Bluetooth: hci1: unknown advertising packet type: 0x05
[ 1285.419691][ T1330] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1285.462912][T17866] netlink: 'syz.9.2699': attribute type 1 has an invalid length.
[ 1285.575260][T17866] 8021q: adding VLAN 0 to HW filter on device bond8
[ 1285.632732][T17871] bond8: entered promiscuous mode
[ 1285.648156][T17871] bond8: entered allmulticast mode
[ 1285.682525][T17868] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2699'.
[ 1285.743979][T17868] veth17: entered allmulticast mode
[ 1285.759073][T17868] bond8: (slave veth17): Enslaving as an active interface with a down link
[ 1285.980675][T17861] bond7: (slave veth0_to_bond): Releasing active interface
[ 1286.013178][T17861] veth0_to_bond: left allmulticast mode
[ 1286.031731][T17861] veth0_to_bond: left promiscuous mode
[ 1286.073057][T17861] bond8: (slave veth0_to_bond): making interface the new active one
[ 1286.096223][T17861] veth0_to_bond: entered promiscuous mode
[ 1286.121719][T17861] veth0_to_bond: entered allmulticast mode
[ 1286.141841][T17861] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link
[ 1286.189018][ T1330] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1286.669081][T17866] macvlan3: entered promiscuous mode
[ 1286.677646][T17866] macvlan3: entered allmulticast mode
[ 1287.242610][T14640] Bluetooth: hci3: command tx timeout
[ 1289.046698][T17879] netlink: 5 bytes leftover after parsing attributes in process `syz.9.2702'.
[ 1289.060959][T17879] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1289.113892][T17883] bond1: left promiscuous mode
[ 1289.118787][T17883] bond2: left promiscuous mode
[ 1289.124187][T17883] bond3: left promiscuous mode
[ 1289.129363][T17883] bond4: left promiscuous mode
[ 1289.135527][T17883] bond5: left promiscuous mode
[ 1289.141136][T17883] bond6: left promiscuous mode
[ 1289.147440][T17883] bond8: left promiscuous mode
[ 1289.152696][T17883] bond9: left promiscuous mode
[ 1289.157593][T17883] bond10: left promiscuous mode
[ 1289.322876][T14640] Bluetooth: hci3: command tx timeout
[ 1289.392083][T17887] loop6: detected capacity change from 0 to 256
[ 1289.502711][T17887] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x1f3a413c, utbl_chksum : 0xe619d30d)
[ 1290.182670][T17902] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2707'.
[ 1290.449823][T17909] netlink: 'syz.6.2709': attribute type 1 has an invalid length.
[ 1290.497663][T17909] 8021q: adding VLAN 0 to HW filter on device bond11
[ 1290.603244][T17913] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2709'.
[ 1290.671068][T17913] veth17: entered allmulticast mode
[ 1290.686240][T17913] bond11: (slave veth17): Enslaving as an active interface with a down link
[ 1290.752559][T17805] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1290.793078][T17909] bond10: (slave veth0_to_bond): Releasing active interface
[ 1290.810880][T17909] veth0_to_bond: left allmulticast mode
[ 1290.822014][T17909] veth0_to_bond: left promiscuous mode
[ 1290.849993][T17909] bond11: (slave veth0_to_bond): making interface the new active one
[ 1290.869797][T17909] veth0_to_bond: entered promiscuous mode
[ 1290.883544][T17909] bond11: (slave veth0_to_bond): Enslaving as an active interface with an up link
[ 1290.969004][T17917] bond11: entered promiscuous mode
[ 1290.982697][T17917] bond11: entered allmulticast mode
[ 1290.991368][T17917] veth0_to_bond: entered allmulticast mode
[ 1291.022547][T17913] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2709'.
[ 1291.071629][T17805] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1291.122613][T17805] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1291.256220][T17928] loop6: detected capacity change from 0 to 512
[ 1291.270676][T17805] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1291.288866][T17928] EXT4-fs: Ignoring removed bh option
[ 1291.298531][T14640] Bluetooth: hci0: unknown advertising packet type: 0x05
[ 1291.300198][T17930] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2710'.
[ 1291.406858][T17928] EXT4-fs (loop6): can't mount with data=, fs mounted w/o journal
[ 1291.450946][ T1330] hsr_slave_0: left promiscuous mode
[ 1291.494012][ T1330] hsr_slave_1: left promiscuous mode
[ 1291.548038][ T1330] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1291.578452][ T1330] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1291.593266][ T1330] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1291.600714][ T1330] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1291.633214][ T1330] bridge_slave_1: left allmulticast mode
[ 1291.652903][ T1330] bridge_slave_1: left promiscuous mode
[ 1291.659180][ T1330] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1291.691121][ T1330] bridge_slave_0: left allmulticast mode
[ 1291.706533][ T1330] bridge_slave_0: left promiscuous mode
[ 1291.712467][ T1330] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1291.795892][ T1330] veth1_macvtap: left promiscuous mode
[ 1291.801520][ T1330] veth0_macvtap: left promiscuous mode
[ 1291.822685][ T1330] veth1_vlan: left promiscuous mode
[ 1291.828118][ T1330] veth0_vlan: left promiscuous mode
[ 1292.393828][ T1330] bond3 (unregistering): (slave veth9): Releasing active interface
[ 1293.012889][ T1330] bond3 (unregistering): (slave veth0_to_bond): Releasing active interface
[ 1293.021568][ T1330] veth0_to_bond (unregistering): left allmulticast mode
[ 1293.060554][ T1330] veth0_to_bond (unregistering): left promiscuous mode
[ 1293.083688][ T1330] bond3 (unregistering): Released all slaves
[ 1293.234457][ T1330] bond0 (unregistering): (slave veth7): Releasing active interface
[ 1293.715341][ T1330] bond0 (unregistering): Released all slaves
[ 1293.777181][ T1330] bond2 (unregistering): (slave veth5): Releasing active interface
[ 1294.054338][ T1330] bond2 (unregistering): Released all slaves
[ 1294.108145][ T1330] bond1 (unregistering): (slave veth3): Releasing active interface
[ 1294.408220][ T1330] bond1 (unregistering): Released all slaves
[ 1295.399609][ T1330] team0 (unregistering): Port device team_slave_1 removed
[ 1295.461533][ T1330] team0 (unregistering): Port device team_slave_0 removed
[ 1295.514114][ T5852] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[ 1295.535696][ T1330] . (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1295.593096][ T1330] . (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1295.682741][ T5852] usb 3-1: device descriptor read/64, error -71
[ 1295.972628][ T5852] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[ 1296.095330][ T1330] . (unregistering): Released all slaves
[ 1296.145457][ T5852] usb 3-1: device descriptor read/64, error -71
[ 1296.270184][T17936] bond11: left promiscuous mode
[ 1296.433762][ T5852] usb usb3-port1: attempt power cycle
[ 1296.560407][T17805] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1296.597397][T17805] 8021q: adding VLAN 0 to HW filter on device team0
[ 1296.628547][T16294] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1296.635804][T16294] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1296.715973][T16294] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1296.723234][T16294] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1296.872666][ T5852] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[ 1296.934980][ T5852] usb 3-1: device descriptor read/8, error -71
[ 1297.222783][ T5852] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[ 1297.304776][ T5852] usb 3-1: device descriptor read/8, error -71
[ 1297.317647][ T1330] IPVS: stop unused estimator thread 0...
[ 1297.432776][ T5852] usb usb3-port1: unable to enumerate USB device
[ 1297.540269][T17985] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2717'.
[ 1297.577881][T17986] netlink: 'syz.6.2718': attribute type 1 has an invalid length.
[ 1297.619328][T17986] 8021q: adding VLAN 0 to HW filter on device bond12
[ 1297.638818][T17986] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2718'.
[ 1297.665311][T17986] veth19: entered allmulticast mode
[ 1297.675255][T17986] bond12: (slave veth19): Enslaving as an active interface with a down link
[ 1297.703616][T17986] bond11: (slave veth0_to_bond): Releasing active interface
[ 1297.711169][T17986] veth0_to_bond: left allmulticast mode
[ 1297.716937][T17986] veth0_to_bond: left promiscuous mode
[ 1297.731145][T17986] bond12: (slave veth0_to_bond): making interface the new active one
[ 1297.743165][T17986] veth0_to_bond: entered promiscuous mode
[ 1297.749826][T17986] bond12: (slave veth0_to_bond): Enslaving as an active interface with an up link
[ 1297.785416][T17990] bond12: entered promiscuous mode
[ 1297.790987][T17990] bond12: entered allmulticast mode
[ 1297.796431][T17990] veth0_to_bond: entered allmulticast mode
[ 1297.828674][T17986] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2718'.
[ 1297.879018][T17805] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1298.022333][T17805] veth0_vlan: entered promiscuous mode
[ 1298.061199][T17805] veth1_vlan: entered promiscuous mode
[ 1298.150074][T17805] veth0_macvtap: entered promiscuous mode
[ 1298.187297][T17805] veth1_macvtap: entered promiscuous mode
[ 1298.256812][T17805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1298.322594][T17805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1298.360334][T17805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1298.395198][T17805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1298.446166][T17805] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1298.491229][T17805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1298.592296][T17805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1298.613123][T17805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1298.642747][T17805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1298.695895][T17805] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1298.729388][T17805] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1298.784785][T17805] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1298.797545][T17805] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1298.821883][T17805] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1299.017212][T14640] Bluetooth: hci1: unknown advertising packet type: 0x05
[ 1299.110390][T18023] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2719'.
[ 1299.155321][T16306] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1299.191372][T16306] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1299.396853][ T3487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1299.442927][ T3487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1299.606177][T18030] netlink: 'syz.9.2726': attribute type 1 has an invalid length.
[ 1299.751641][T18030] 8021q: adding VLAN 0 to HW filter on device bond9
[ 1299.773368][T18040] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2727'.
[ 1299.828227][T18033] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2726'.
[ 1299.967659][T18033] veth19: entered allmulticast mode
[ 1300.010011][T18033] bond9: (slave veth19): Enslaving as an active interface with a down link
[ 1300.080257][T18037] bond8: (slave veth0_to_bond): Releasing active interface
[ 1300.100047][T18037] veth0_to_bond: left promiscuous mode
[ 1300.113257][T18037] veth0_to_bond: left allmulticast mode
[ 1300.138019][T18037] bond9: (slave veth0_to_bond): making interface the new active one
[ 1300.164071][T18037] veth0_to_bond: entered promiscuous mode
[ 1300.176874][T18037] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link
[ 1300.226688][T18043] bond9: entered promiscuous mode
[ 1300.238419][T18043] bond9: entered allmulticast mode
[ 1300.251135][T18043] veth0_to_bond: entered allmulticast mode
[ 1300.276627][T18030] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2726'.
[ 1300.367309][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[ 1300.374377][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[ 1303.558939][T18126] loop6: detected capacity change from 0 to 512
[ 1303.620853][T18126] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[ 1303.673284][T18126] System zones: 1-12
[ 1303.691671][T18126] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #12: comm syz.6.2734: missing EA_INODE flag
[ 1303.770969][T18126] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.2734: error while reading EA inode 12 err=-117
[ 1303.809167][T18126] EXT4-fs (loop6): 1 orphan inode deleted
[ 1304.045584][T18141] netlink: 'syz.1.2738': attribute type 1 has an invalid length.
[ 1304.055618][T18126] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1304.070378][T18141] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2738'.
[ 1305.332792][T14640] Bluetooth: hci0: command tx timeout
[ 1307.230984][T18141] veth3: entered allmulticast mode
[ 1308.236638][T18141] team0: Port device veth3 added
[ 1308.271948][ T9910] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1308.335568][T18147] team0: Port device veth0_to_bond added
[ 1308.364587][T18170] team0: entered promiscuous mode
[ 1308.376492][T18170] team_slave_0: entered promiscuous mode
[ 1308.386064][T18177] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2741'.
[ 1308.411234][T18170] team_slave_1: entered promiscuous mode
[ 1308.423678][T18170] veth3: entered promiscuous mode
[ 1308.436928][T18170] veth0_to_bond: entered promiscuous mode
[ 1308.447248][T18170] team0: entered allmulticast mode
[ 1308.457605][T18170] team_slave_0: entered allmulticast mode
[ 1308.467506][T18179] loop6: detected capacity change from 0 to 512
[ 1308.473970][T18170] team_slave_1: entered allmulticast mode
[ 1308.482132][T18170] veth0_to_bond: entered allmulticast mode
[ 1308.495937][T18179] EXT4-fs (loop6): Test dummy encryption mode enabled
[ 1308.513158][T18179] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[ 1308.534129][T18171] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2738'.
[ 1308.551566][T18179] EXT4-fs error (device loop6): ext4_orphan_get:1434: comm syz.6.2742: bad orphan inode 131083
[ 1308.602906][T18179] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1308.667614][T18185] loop1: detected capacity change from 0 to 512
[ 1308.750268][T18185] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1308.784995][T18185] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1308.828231][   T28] audit: type=1800 audit(1788912833.582:239): pid=18185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2743" name="file1" dev="loop1" ino=15 res=0 errno=0
[ 1308.923184][   T28] audit: type=1804 audit(1788912833.672:240): pid=18192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2743" name="/newroot/6/file1/file1" dev="loop1" ino=15 res=1 errno=0
[ 1312.649187][ T9910] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1312.861743][T17805] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1313.442934][    T9] usb 2-1: new full-speed USB device number 24 using dummy_hcd
[ 1313.601274][T18296] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2745'.
[ 1313.602655][T14640] Bluetooth: hci0: unknown advertising packet type: 0x05
[ 1313.897240][    T9] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1317.208602][    T9] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1318.428097][    T9] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1318.542773][    T9] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1318.565384][    T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00
[ 1318.623846][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1318.669923][T18389] netlink: 'syz.9.2751': attribute type 1 has an invalid length.
[ 1318.885717][T18401] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2753'.
[ 1318.921412][    T9] usb 2-1: config 0 descriptor??
[ 1318.945119][    T9] usb 2-1: can't set config #0, error -71
[ 1320.584478][    T9] usb 2-1: USB disconnect, device number 24
[ 1320.620075][T18389] 8021q: adding VLAN 0 to HW filter on device bond10
[ 1320.662507][T18402] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2751'.
[ 1320.845044][T18402] veth21: entered allmulticast mode
[ 1320.905460][T18402] bond10: (slave veth21): Enslaving as an active interface with a down link
[ 1322.221857][T18428] bond9: (slave veth0_to_bond): Releasing active interface
[ 1322.931257][T18428] veth0_to_bond: left allmulticast mode
[ 1322.949477][T18428] veth0_to_bond: left promiscuous mode
[ 1323.010683][T18428] bond10: (slave veth0_to_bond): making interface the new active one
[ 1323.088918][T18428] veth0_to_bond: entered promiscuous mode
[ 1323.134707][T18428] bond10: (slave veth0_to_bond): Enslaving as an active interface with an up link
[ 1323.242828][T18429] bond10: entered promiscuous mode
[ 1323.248315][T18429] bond10: entered allmulticast mode
[ 1323.318821][T18429] veth0_to_bond: entered allmulticast mode
[ 1323.549111][T18389] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2751'.
[ 1325.003053][T14640] Bluetooth: hci1: command 0x0406 tx timeout
[ 1326.603909][T18509] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1326.632763][T18509] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1326.643494][T18509] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1326.652258][T18509] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1326.660840][T18509] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1326.668237][T18509] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1327.169144][T18507] chnl_net:caif_netlink_parms(): no params data found
[ 1327.425950][T18507] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1327.454664][T18507] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1327.461941][T18507] bridge_slave_0: entered allmulticast mode
[ 1327.499681][T18507] bridge_slave_0: entered promiscuous mode
[ 1327.520382][T18507] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1327.540196][T18507] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1327.572661][T18507] bridge_slave_1: entered allmulticast mode
[ 1327.586440][T18507] bridge_slave_1: entered promiscuous mode
[ 1327.689616][T18507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1327.730081][T18507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1327.850380][T18507] team0: Port device team_slave_0 added
[ 1327.877335][T18507] team0: Port device team_slave_1 added
[ 1327.982843][T18507] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1327.989865][T18507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1328.066150][T18507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1328.763883][T14640] Bluetooth: hci4: command tx timeout
[ 1330.397848][T18507] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1330.416841][T18507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1330.460055][T18507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1330.711451][T18568] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2762'.
[ 1330.758230][T18507] hsr_slave_0: entered promiscuous mode
[ 1330.842513][T14640] Bluetooth: hci4: command tx timeout
[ 1332.053542][T18507] hsr_slave_1: entered promiscuous mode
[ 1332.321517][T18574] loop1: detected capacity change from 0 to 512
[ 1332.922809][T14640] Bluetooth: hci4: command tx timeout
[ 1334.773838][T18600] loop1: detected capacity change from 0 to 512
[ 1334.817328][T18600] EXT4-fs (loop1): bad s_min_extra_isize: 544
[ 1334.824206][T18601] netlink: 'syz.6.2768': attribute type 1 has an invalid length.
[ 1334.942024][T18601] 8021q: adding VLAN 0 to HW filter on device bond13
[ 1334.965297][T18608] 
[ 1334.967653][T18608] ======================================================
[ 1334.974678][T18608] WARNING: possible circular locking dependency detected
[ 1334.981725][T18608] syzkaller #0 Not tainted
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1334.986136][T18608] ------------------------------------------------------
[ 1334.993155][T18608] syz.1.2769/18608 is trying to acquire lock:
[ 1334.999242][T18608] ffffffff8ddf70b0 (gadget_subsys.su_mutex){+.+.}-{3:3}, at: uvcg_streaming_header_allow_link+0x71/0x4a0
[ 1335.010628][T18608] 
[ 1335.010628][T18608] but task is already holding lock:
[ 1335.013647][T14640] Bluetooth: hci4: command tx timeout
[ 1335.018005][T18608] ffff88805d0295a0 (&sb->s_type->i_mutex_key#28){+.+.}-{3:3}, at: configfs_symlink+0x47a/0xfe0
[ 1335.033815][T18608] 
[ 1335.033815][T18608] which lock already depends on the new lock.
[ 1335.033815][T18608] 
[ 1335.044259][T18608] 
[ 1335.044259][T18608] the existing dependency chain (in reverse order) is:
[ 1335.053328][T18608] 
[ 1335.053328][T18608] -> #2 (&sb->s_type->i_mutex_key#28){+.+.}-{3:3}:
[ 1335.062076][T18608]        down_write+0x97/0x200
[ 1335.066899][T18608]        configfs_depend_item_unlocked+0x157/0x430
[ 1335.073439][T18608]        usbg_make_tpg+0x1f7/0x580
[ 1335.078679][T18608]        target_fabric_make_tpg+0xa4/0x6d0
[ 1335.084540][T18608]        configfs_mkdir+0x515/0x9e0
[ 1335.089786][T18608]        vfs_mkdir+0x2a5/0x470
[ 1335.094589][T18608]        do_mkdirat+0x1dc/0x450
[ 1335.099469][T18608]        __x64_sys_mkdir+0x6e/0x80
[ 1335.104624][T18608]        do_syscall_64+0x55/0xb0
[ 1335.109682][T18608]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1335.116138][T18608] 
[ 1335.116138][T18608] -> #1 (&opts->dep_lock){+.+.}-{3:3}:
[ 1335.123822][T18608]        __mutex_lock+0x135/0xc80
[ 1335.128873][T18608]        tcm_set_name+0x2a/0x90
[ 1335.133755][T18608]        function_make+0x199/0x350
[ 1335.138916][T18608]        configfs_mkdir+0x515/0x9e0
[ 1335.144156][T18608]        vfs_mkdir+0x2a5/0x470
[ 1335.148942][T18608]        do_mkdirat+0x1dc/0x450
[ 1335.153824][T18608]        __x64_sys_mkdir+0x6e/0x80
[ 1335.158956][T18608]        do_syscall_64+0x55/0xb0
[ 1335.163931][T18608]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1335.170377][T18608] 
[ 1335.170377][T18608] -> #0 (gadget_subsys.su_mutex){+.+.}-{3:3}:
[ 1335.178754][T18608]        __lock_acquire+0x37ef/0x7d80
[ 1335.184189][T18608]        lock_acquire+0x19e/0x420
[ 1335.189252][T18608]        __mutex_lock+0x135/0xc80
[ 1335.194325][T18608]        uvcg_streaming_header_allow_link+0x71/0x4a0
[ 1335.201046][T18608]        configfs_symlink+0x5a5/0xfe0
[ 1335.206473][T18608]        vfs_symlink+0x138/0x2b0
[ 1335.211449][T18608]        do_symlinkat+0x1ba/0x400
[ 1335.216518][T18608]        __x64_sys_symlink+0x7e/0x90
[ 1335.221884][T18608]        do_syscall_64+0x55/0xb0
[ 1335.226871][T18608]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1335.233315][T18608] 
[ 1335.233315][T18608] other info that might help us debug this:
[ 1335.233315][T18608] 
[ 1335.243573][T18608] Chain exists of:
[ 1335.243573][T18608]   gadget_subsys.su_mutex --> &opts->dep_lock --> &sb->s_type->i_mutex_key#28
[ 1335.243573][T18608] 
[ 1335.258320][T18608]  Possible unsafe locking scenario:
[ 1335.258320][T18608] 
[ 1335.266327][T18608]        CPU0                    CPU1
[ 1335.271747][T18608]        ----                    ----
[ 1335.277160][T18608]   lock(&sb->s_type->i_mutex_key#28);
[ 1335.282683][T18608]                                lock(&opts->dep_lock);
[ 1335.289671][T18608]                                lock(&sb->s_type->i_mutex_key#28);
[ 1335.297713][T18608]   lock(gadget_subsys.su_mutex);
[ 1335.302875][T18608] 
[ 1335.302875][T18608]  *** DEADLOCK ***
[ 1335.302875][T18608] 
[ 1335.311037][T18608] 2 locks held by syz.1.2769/18608:
[ 1335.316254][T18608]  #0: ffff88801871a418 (sb_writers#24){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[ 1335.325567][T18608]  #1: ffff88805d0295a0 (&sb->s_type->i_mutex_key#28){+.+.}-{3:3}, at: configfs_symlink+0x47a/0xfe0
[ 1335.336569][T18608] 
[ 1335.336569][T18608] stack backtrace:
[ 1335.342476][T18608] CPU: 0 PID: 18608 Comm: syz.1.2769 Not tainted syzkaller #0
[ 1335.349949][T18608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1335.360018][T18608] Call Trace:
[ 1335.363331][T18608]  <TASK>
[ 1335.366390][T18608]  dump_stack_lvl+0x18c/0x250
[ 1335.371159][T18608]  ? load_image+0x420/0x420
[ 1335.375697][T18608]  ? show_regs_print_info+0x20/0x20
[ 1335.380932][T18608]  ? print_circular_bug+0x12b/0x1a0
[ 1335.386175][T18608]  check_noncircular+0x2fc/0x400
[ 1335.391173][T18608]  ? kernel_text_address+0xa0/0xd0
[ 1335.396305][T18608]  ? print_deadlock_bug+0x5d0/0x5d0
[ 1335.401516][T18608]  ? lockdep_lock+0xf5/0x230
[ 1335.406120][T18608]  ? _find_first_zero_bit+0xd6/0x100
[ 1335.411447][T18608]  __lock_acquire+0x37ef/0x7d80
[ 1335.416340][T18608]  ? __lock_acquire+0x357f/0x7d80
[ 1335.421454][T18608]  ? verify_lock_unused+0x140/0x140
[ 1335.426671][T18608]  lock_acquire+0x19e/0x420
[ 1335.431180][T18608]  ? uvcg_streaming_header_allow_link+0x71/0x4a0
[ 1335.437517][T18608]  ? __might_sleep+0xe0/0xe0
[ 1335.442112][T18608]  ? read_lock_is_recursive+0x20/0x20
[ 1335.447507][T18608]  __mutex_lock+0x135/0xc80
[ 1335.452031][T18608]  ? uvcg_streaming_header_allow_link+0x71/0x4a0
[ 1335.458457][T18608]  ? __might_sleep+0xe0/0xe0
[ 1335.463071][T18608]  ? uvcg_streaming_header_allow_link+0x71/0x4a0
[ 1335.469443][T18608]  ? read_lock_is_recursive+0x20/0x20
[ 1335.475098][T18608]  ? mutex_lock_nested+0x20/0x20
[ 1335.481379][T18608]  ? configfs_symlink+0x469/0xfe0
[ 1335.486641][T18608]  ? make_vfsuid+0x67/0xb0
[ 1335.492318][T18608]  ? generic_permission+0x1ed/0x590
[ 1335.498473][T18608]  uvcg_streaming_header_allow_link+0x71/0x4a0
[ 1335.504655][T18608]  ? inode_permission+0xf3/0x480
[ 1335.509627][T18608]  ? bpf_lsm_inode_permission+0x9/0x10
[ 1335.515110][T18608]  ? security_inode_permission+0xb0/0xf0
[ 1335.520806][T18608]  configfs_symlink+0x5a5/0xfe0
[ 1335.525702][T18608]  ? from_kgid+0x153/0x6a0
[ 1335.530250][T18608]  ? generic_permission+0x1ed/0x590
[ 1335.535494][T18608]  ? detach_groups+0x370/0x370
[ 1335.540278][T18608]  ? inode_permission+0xf3/0x480
[ 1335.545224][T18608]  ? bpf_lsm_inode_symlink+0x9/0x10
[ 1335.550437][T18608]  ? security_inode_symlink+0xb6/0x100
[ 1335.555910][T18608]  vfs_symlink+0x138/0x2b0
[ 1335.560358][T18608]  do_symlinkat+0x1ba/0x400
[ 1335.564976][T18608]  ? vfs_symlink+0x2b0/0x2b0
[ 1335.569604][T18608]  ? getname_flags+0x20a/0x500
[ 1335.574386][T18608]  __x64_sys_symlink+0x7e/0x90
[ 1335.579157][T18608]  do_syscall_64+0x55/0xb0
[ 1335.583658][T18608]  ? clear_bhb_loop+0x40/0x90
[ 1335.588361][T18608]  ? clear_bhb_loop+0x40/0x90
[ 1335.593067][T18608]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1335.599021][T18608] RIP: 0033:0x7f78ed19e159
[ 1335.603521][T18608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1335.623136][T18608] RSP: 002b:00007f78ee09f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058
[ 1335.631565][T18608] RAX: ffffffffffffffda RBX: 00007f78ed426090 RCX: 00007f78ed19e159
[ 1335.639547][T18608] RDX: 0000000000000000 RSI: 0000200000001100 RDI: 0000200000001000
[ 1335.647514][T18608] RBP: 00007f78ed23503b R08: 0000000000000000 R09: 0000000000000000
[ 1335.655492][T18608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1335.663482][T18608] R13: 00007f78ed426128 R14: 00007f78ed426090 R15: 00007ffe1c3752e8
[ 1335.671508][T18608]  </TASK>
[ 1335.816629][T18602] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2768'.
[ 1335.860208][T18602] veth21: entered allmulticast mode
[ 1335.868510][T18602] bond13: (slave veth21): Enslaving as an active interface with a down link
[ 1335.992872][T18604] bond12: (slave veth0_to_bond): Releasing active interface
[ 1336.000882][T18604] veth0_to_bond: left allmulticast mode
[ 1336.023919][T18604] veth0_to_bond: left promiscuous mode
[ 1336.035233][T18604] bond13: (slave veth0_to_bond): making interface the new active one
[ 1336.053718][T18604] veth0_to_bond: entered promiscuous mode
[ 1336.059741][T18604] bond13: (slave veth0_to_bond): Enslaving as an active interface with an up link
[ 1336.084565][T18596] bond13: entered promiscuous mode
[ 1336.089816][T18596] bond13: entered allmulticast mode
[ 1336.102449][T18596] veth0_to_bond: entered allmulticast mode
[ 1336.376163][T18605] syz_tun (unregistering): left allmulticast mode
[ 1336.486192][ T8517] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1336.816125][ T8517] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1337.088922][ T8517] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1337.285066][ T8517] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1337.687737][T18596] syz_tun (unregistering): left allmulticast mode
[ 1338.427734][ T8517] hsr_slave_0: left promiscuous mode
[ 1338.435696][ T8517] hsr_slave_1: left promiscuous mode
[ 1338.442295][ T8517] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1338.450163][ T8517] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1338.465055][ T8517] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1338.473853][ T8517] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1338.481621][ T8517] bridge_slave_1: left allmulticast mode
[ 1338.489173][ T8517] bridge_slave_1: left promiscuous mode
[ 1338.498358][ T8517] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1338.510806][ T8517] bridge_slave_0: left allmulticast mode
[ 1338.517711][ T8517] bridge_slave_0: left promiscuous mode
[ 1338.526797][ T8517] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1338.539491][ T8517] veth1_macvtap: left promiscuous mode
[ 1338.547229][ T8517] veth0_macvtap: left promiscuous mode
[ 1338.553297][ T8517] veth1_vlan: left promiscuous mode
[ 1338.559496][ T8517] veth0_vlan: left promiscuous mode
[ 1338.869699][ T8517] team0 (unregistering): Port device team_slave_1 removed
[ 1338.906823][ T8517] team0 (unregistering): Port device team_slave_0 removed
[ 1338.943970][ T8517] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1338.985705][ T8517] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1339.193595][ T8517] bond0 (unregistering): Released all slaves
[ 1339.684100][ T8517] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1339.732215][ T8517] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1339.802931][ T8517] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1339.859313][ T8517] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1339.980154][ T8517] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1340.040062][ T8517] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1340.099304][ T8517] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1340.150576][ T8517] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1340.306659][ T8517] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1340.369657][ T8517] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1340.428767][ T8517] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1340.480351][ T8517] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1341.975615][ T8517] hsr_slave_0: left promiscuous mode
[ 1341.981548][ T8517] hsr_slave_1: left promiscuous mode
[ 1341.987730][ T8517] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1341.995469][ T8517] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1342.007676][ T8517] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1342.015603][ T8517] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1342.024648][ T8517] vlan2: left allmulticast mode
[ 1342.029545][ T8517] dummy0: left allmulticast mode
[ 1342.038339][ T8517] vlan2: left promiscuous mode
[ 1342.045807][ T8517] dummy0: left promiscuous mode
[ 1342.051033][ T8517] bridge0: port 3(vlan2) entered disabled state
[ 1342.059211][ T8517] bridge_slave_1: left allmulticast mode
[ 1342.066112][ T8517] bridge_slave_1: left promiscuous mode
[ 1342.071844][ T8517] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1342.081530][ T8517] bridge_slave_0: left allmulticast mode
[ 1342.088453][ T8517] bridge_slave_0: left promiscuous mode
[ 1342.095103][ T8517] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1342.115453][ T8517] hsr_slave_0: left promiscuous mode
[ 1342.121387][ T8517] hsr_slave_1: left promiscuous mode
[ 1342.127815][ T8517] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1342.138111][ T8517] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1342.146768][ T8517] bridge_slave_1: left allmulticast mode
[ 1342.157433][ T8517] bridge_slave_1: left promiscuous mode
[ 1342.163357][ T8517] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1342.171836][ T8517] bridge_slave_0: left allmulticast mode
[ 1342.178953][ T8517] bridge_slave_0: left promiscuous mode
[ 1342.184936][ T8517] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1342.199795][ T8517] hsr_slave_0: left promiscuous mode
[ 1342.205909][ T8517] hsr_slave_1: left promiscuous mode
[ 1342.211980][ T8517] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1342.220924][ T8517] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1342.229260][ T8517] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1342.239836][ T8517] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1342.247777][ T8517] bridge_slave_1: left allmulticast mode
[ 1342.255635][ T8517] bridge_slave_1: left promiscuous mode
[ 1342.261386][ T8517] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1342.275155][ T8517] bridge_slave_0: left allmulticast mode
[ 1342.280890][ T8517] bridge_slave_0: left promiscuous mode
[ 1342.286854][ T8517] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1342.300556][ T8517] hsr_slave_0: left promiscuous mode
[ 1342.307683][ T8517] hsr_slave_1: left promiscuous mode
[ 1342.313733][ T8517] bridge_slave_1: left allmulticast mode
[ 1342.319448][ T8517] bridge_slave_1: left promiscuous mode
[ 1342.328078][ T8517] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1342.336982][ T8517] bridge_slave_0: left allmulticast mode
[ 1342.342819][ T8517] bridge_slave_0: left promiscuous mode
[ 1342.348545][ T8517] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1342.367891][ T8517] veth0_macvtap: left promiscuous mode
[ 1342.374316][ T8517] veth1_vlan: left promiscuous mode
[ 1342.379747][ T8517] veth0_vlan: left promiscuous mode
[ 1342.387353][ T8517] veth1_macvtap: left promiscuous mode
[ 1342.394138][ T8517] veth0_macvtap: left promiscuous mode
[ 1342.399755][ T8517] veth1_vlan: left promiscuous mode
[ 1342.405551][ T8517] veth0_vlan: left promiscuous mode
[ 1342.413560][ T8517] veth1_macvtap: left promiscuous mode
[ 1342.419104][ T8517] veth0_macvtap: left promiscuous mode
[ 1342.425408][ T8517] veth1_vlan: left promiscuous mode
[ 1342.430752][ T8517] veth0_vlan: left promiscuous mode
[ 1342.769444][ T8517] bond13 (unregistering): (slave veth21): Releasing active interface
[ 1342.800994][ T8517] bond13 (unregistering): (slave veth0_to_bond): Releasing active interface
[ 1342.810244][ T8517] veth0_to_bond (unregistering): left allmulticast mode
[ 1342.822424][ T8517] veth0_to_bond (unregistering): left promiscuous mode
[ 1342.835041][ T8517] bond13 (unregistering): Released all slaves
[ 1342.876280][ T8517] bond12 (unregistering): (slave veth19): Releasing active interface
[ 1343.054985][ T8517] bond12 (unregistering): Released all slaves
[ 1343.082138][ T8517] bond11 (unregistering): (slave veth17): Releasing active interface
[ 1343.234554][ T8517] bond11 (unregistering): Released all slaves
[ 1343.264088][ T8517] bond10 (unregistering): (slave veth15): Releasing active interface
[ 1343.411622][ T8517] bond10 (unregistering): Released all slaves
[ 1343.549765][ T8517] bond9 (unregistering): Released all slaves
[ 1343.577350][ T8517] bond8 (unregistering): (slave veth13): Releasing active interface
[ 1343.729759][ T8517] bond8 (unregistering): Released all slaves
[ 1343.758642][ T8517] bond7 (unregistering): (slave veth11): Releasing active interface
[ 1343.905609][ T8517] bond7 (unregistering): Released all slaves
[ 1343.933150][ T8517] bond6 (unregistering): (slave veth9): Releasing active interface
[ 1344.087574][ T8517] bond6 (unregistering): Released all slaves
[ 1344.121762][ T8517] bond5 (unregistering): (slave veth7): Releasing active interface
[ 1344.275752][ T8517] bond5 (unregistering): Released all slaves
[ 1344.302845][ T8517] bond4 (unregistering): (slave veth5): Releasing active interface
[ 1344.455888][ T8517] bond4 (unregistering): Released all slaves
[ 1344.486621][ T8517] bond3 (unregistering): (slave veth3): Releasing active interface
[ 1344.635311][ T8517] bond3 (unregistering): Released all slaves
[ 1344.783520][ T8517] bond2 (unregistering): Released all slaves
[ 1344.926097][ T8517] bond1 (unregistering): Released all slaves