last executing test programs:

14m58.051073483s ago: executing program 32 (id=270):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000019080)=ANY=[@ANYBLOB], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0x940c, 0x3002, 0x210, 0x2c0, 0x320, 0x3d8, 0x3d8, 0x320, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x210, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}, @common=@inet=@ecn={{0x28}, {0x10, 0x2, 0x7, 0x3}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000700)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB="0000000000000000b708000005000000f8ff00000000bfa200000000000007020000f8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000003c0)='fsi_master_acf_send_request\x00'}, 0x18)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x7, 0x3a}, 0x1c)
r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r5, 0x40186f40, &(0x7f0000000440)=0x1f)
r6 = semget$private(0x0, 0x4000000009, 0x0)
semtimedop(r6, &(0x7f0000000000)=[{0x4, 0xffff}], 0x1, &(0x7f0000000040))
clock_gettime(0x0, &(0x7f00000002c0))
semtimedop(r6, 0x0, 0x0, 0x0)

11m31.534415658s ago: executing program 33 (id=743):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000005000000020000000700000002"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
unshare(0x2c020400)
syz_open_dev$tty20(0xc, 0x4, 0x0)
unshare(0x40020000)
mlockall(0x2)
r2 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil)
r3 = shmat(r2, &(0x7f0000ffd000/0x1000)=nil, 0x7000)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace(0x8, r4)
shmdt(r3)

10m57.090052539s ago: executing program 34 (id=819):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo\x00')
openat(r2, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = io_uring_setup(0x36a3, &(0x7f0000000540)={0x0, 0x3})
close(r5)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x3, 0x8, 0x2, 0x10, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48)

10m32.280784584s ago: executing program 4 (id=890):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)

10m31.638884349s ago: executing program 4 (id=892):
socket$nl_rdma(0x10, 0x3, 0x14)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[], 0x33fe0}}, 0x0)
mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x1010040, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})
connect$bt_sco(r1, &(0x7f0000000380)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000850000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00'}, 0x10)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="38000000031401002dbd7000ffdbdf2509000200737d7a310000000008004100736977001400330076657468305f746f5f627269646765"], 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0x20000010)
socket$inet6(0xa, 0x2, 0x3a)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
mount(&(0x7f0000000180)=@nullb, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='btrfs\x00', 0x800000, &(0x7f0000000300)='syz1\x00')
sendmsg$NL80211_CMD_GET_WOWLAN(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010300000000000000000500000008000100000000000c009900080000004e000000"], 0x28}}, 0x0)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
r9 = socket$inet6(0xa, 0x3, 0xe)
sendto$inet6(r9, &(0x7f0000000080), 0x0, 0x2004a0c0, 0x0, 0x0)
sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback, @in6=@rand_addr=' \x01\x00', 0x0, 0x8, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@loopback, 0x4d2, 0x32}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0x2, 0x0, 0x0, 0x2, 0x0, 0x1c00000000000}, {0x11df}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x0)

10m19.414360178s ago: executing program 35 (id=915):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6fc40b5d175e86ac0b7a9", 0x9a}, {&(0x7f0000000400)="029993440c7a0c95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e434ccb0330483c0604aaf296d8218e240055cb92f17b1b47fd7b1b178ca0d1c470154ed985a179f87c9bc40206c86df9abc5be93ce0d", 0x70}, {&(0x7f0000000f00)="397d5f2edc82d0337ae5ab9ee47dc3e798cf69cfebf169e77257f308227094d569a4326954e50ea185bc6fff0507c5dfd26676de9ddac4fe6db927cd4d03965f42d9c7513eff1631baa83e3daf514c600450374f6d76b8fcf2bc3eca29ce7538f85aa34b2bdcc17ecd080f0850377f771a4e8693703da4e347e0165f00872a21845e17030de0ff47bc869de32ee24ca05e6f805ec0a1d0257e0e6f900e6cfb68e827b515d05bf2cc14e53e04b713a851bd656f209da5", 0xb6}, {&(0x7f0000000480)="4068745fc217775e9fca3477d3c929c1231d710ed7bb68bf2f127cb83703392703f53051ec7ebd4d519a9d", 0x2b}], 0x4}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)}, {&(0x7f0000000740)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc487553859348d48e6fc49d81c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b95e269169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bde5fbc390c7ccb9d3c1020e80bd0659e82d861dc6fe4c62639134c54e708601eae992000000", 0xd2}, {&(0x7f0000000940)="5be3b011e12323e4ab88c0472f0700000000000000e71ba62334303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e36e737691a1c6bd2a64b2a85cbaaf648c9100000000000000", 0x7a}], 0x3}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)="b5d383823677f025217943343e36323daecfa0fdc5beb5a7ac332a11533627b41dbe33a6be0055bf716aa2b23b97d43cc40c632f6b9850f364ba0831ed0d6f7157f204275aa850d992d81b", 0x4b}], 0x1}}], 0x3, 0xc0)
sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27)

10m8.747894951s ago: executing program 36 (id=933):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00'}, 0x10)
fchmodat(0xffffffffffffff9c, 0x0, 0xfffffe99)

9m34.451942407s ago: executing program 4 (id=892):
socket$nl_rdma(0x10, 0x3, 0x14)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[], 0x33fe0}}, 0x0)
mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x1010040, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})
connect$bt_sco(r1, &(0x7f0000000380)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000850000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00'}, 0x10)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="38000000031401002dbd7000ffdbdf2509000200737d7a310000000008004100736977001400330076657468305f746f5f627269646765"], 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0x20000010)
socket$inet6(0xa, 0x2, 0x3a)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
mount(&(0x7f0000000180)=@nullb, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='btrfs\x00', 0x800000, &(0x7f0000000300)='syz1\x00')
sendmsg$NL80211_CMD_GET_WOWLAN(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010300000000000000000500000008000100000000000c009900080000004e000000"], 0x28}}, 0x0)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
r9 = socket$inet6(0xa, 0x3, 0xe)
sendto$inet6(r9, &(0x7f0000000080), 0x0, 0x2004a0c0, 0x0, 0x0)
sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback, @in6=@rand_addr=' \x01\x00', 0x0, 0x8, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@loopback, 0x4d2, 0x32}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0x2, 0x0, 0x0, 0x2, 0x0, 0x1c00000000000}, {0x11df}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x0)

9m20.647439466s ago: executing program 8 (id=1001):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@multicast1, @in6=@dev}}, {{@in6=@mcast2}, 0x0, @in6=@private1}}, &(0x7f0000000180)=0xe8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file3\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xe, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xffffff81, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6)
bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)

9m18.339337781s ago: executing program 8 (id=1002):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_buf(r0, 0x0, 0x6, &(0x7f0000000480)=""/205, &(0x7f0000000580)=0xcd)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000240), 0x3af4701e)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
accept4$inet(r0, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f0000000040)=0x10, 0x1000)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x9000, &(0x7f0000000200)={0x0, 0x1, 0x100000}, 0x20)

9m15.83011242s ago: executing program 8 (id=1005):
syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000c80)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[], 0x1, 0xc4d, &(0x7f0000001b40)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
timer_create(0x56dd5de9d42ef26, 0x0, &(0x7f0000000d00))
r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, 0x0)
pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0x1, 0x8000c61)
write$FUSE_WRITE(0xffffffffffffffff, &(0x7f00000000c0)={0x18}, 0xfffffdef)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0)
truncate(&(0x7f0000000000)='./file2\x00', 0x9)
truncate(&(0x7f00000003c0)='./file2\x00', 0x1bfc)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0x40305829, &(0x7f00000003c0)={0x17c04, 0xffffffffffffffff, 0x4ea, 0x10001, 0x0, 0x8})

9m13.963217267s ago: executing program 8 (id=1009):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r1 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)="67d8902400aa303e", 0x8}], 0x1}, 0x0)

9m12.791623438s ago: executing program 8 (id=1012):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0)
mkdir(0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x800, 0x70bd2c, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
r4 = syz_io_uring_setup(0x117, &(0x7f0000000100), &(0x7f0000000280)=<r5=>0x0, &(0x7f0000000200)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4)
syz_io_uring_submit(r5, r6, 0x0)
io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000080)='./bus\x00', 0x0)
mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x4000000, 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x29)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, 0x0, 0x0)
umount2(&(0x7f0000000100)='./bus\x00', 0x8)

9m11.139949544s ago: executing program 8 (id=1014):
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0)
syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
r0 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0x40044103, &(0x7f0000000080))
syz_usb_connect(0x3, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, 0x0, 0x890)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
unshare(0x44040000)

9m8.779846491s ago: executing program 37 (id=1017):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_buf(r0, 0x0, 0x6, &(0x7f0000000480)=""/205, &(0x7f0000000580)=0xcd)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000240), 0x3af4701e)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
accept4$inet(r0, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f0000000040)=0x10, 0x1000)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x9000, &(0x7f0000000200)={0x0, 0x1, 0x100000}, 0x20)

8m53.902615373s ago: executing program 38 (id=1014):
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0)
syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
r0 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0x40044103, &(0x7f0000000080))
syz_usb_connect(0x3, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, 0x0, 0x890)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
unshare(0x44040000)

7m50.241324314s ago: executing program 9 (id=1131):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = fsopen(&(0x7f0000000400)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.controllers\x00', 0x300, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00'}, 0x10)
bpf$PROG_BIND_MAP(0x23, &(0x7f00000001c0)={0xffffffffffffffff, r0}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0x10}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

7m48.476551998s ago: executing program 9 (id=1135):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = fsopen(&(0x7f0000000400)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.controllers\x00', 0x300, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00'}, 0x10)
bpf$PROG_BIND_MAP(0x23, &(0x7f00000001c0), 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0x10}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

7m47.120340834s ago: executing program 9 (id=1139):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x40, 0x5d, 0x2, 0x190b87f9}, {0x6, 0x0, 0x6, 0x1}]}, 0x10)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000140)="24000000010006", 0x7)

7m46.569419046s ago: executing program 9 (id=1141):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x800002, &(0x7f0000000300)={[{@quota}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@noinit_itable}, {@dioread_lock}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@oldalloc}, {@grpquota}, {@inlinecrypt}, {@user_xattr}, {@bh}, {@dioread_nolock}, {@discard}, {@acl}]}, 0x1, 0x577, &(0x7f0000000d00)="$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")
r0 = open(&(0x7f0000000080)='./file1\x00', 0x14927e, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x9)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, &(0x7f0000000000)={0x18, 0x7, 0x6, 0x0, 0x7, 0x400000}, 0x0, 0x0, 0x0)
ptrace$pokeuser(0x6, r3, 0x358, 0x800000000000)
fallocate(r0, 0x0, 0xb7d4, 0x1001f0)

7m44.460841632s ago: executing program 9 (id=1144):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, 0x0, 0x20040000)
prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0)
r4 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r4, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000003800)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, 0x5381, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x90000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0xfffffffffffffff5, 0x0, 0x0, 0x0, {0x7, 0x1, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x2}}}}]}]}, 0x88c}}, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="d2", 0x1}], 0x1)
gettid()
r6 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x2000)
read(r6, &(0x7f0000000200)=""/209, 0x128)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000080)={0x337, @time={0x80, 0xff}})

7m43.595487048s ago: executing program 9 (id=1149):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x800002, &(0x7f0000000300)={[{@quota}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@noinit_itable}, {@dioread_lock}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@oldalloc}, {@grpquota}, {@inlinecrypt}, {@user_xattr}, {@bh}, {@dioread_nolock}, {@discard}, {@acl}]}, 0x1, 0x577, &(0x7f0000000d00)="$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")
r0 = open(&(0x7f0000000080)='./file1\x00', 0x14927e, 0x0)
write$cgroup_subtree(r0, 0x0, 0x9)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, &(0x7f0000000000)={0x18, 0x7, 0x6, 0x0, 0x7, 0x400000}, 0x0, 0x0, 0x0)
ptrace$pokeuser(0x6, r3, 0x358, 0x800000000000)
fallocate(r0, 0x0, 0xb7d4, 0x1001f0)

7m42.731321461s ago: executing program 39 (id=1149):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x800002, &(0x7f0000000300)={[{@quota}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@noinit_itable}, {@dioread_lock}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@oldalloc}, {@grpquota}, {@inlinecrypt}, {@user_xattr}, {@bh}, {@dioread_nolock}, {@discard}, {@acl}]}, 0x1, 0x577, &(0x7f0000000d00)="$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")
r0 = open(&(0x7f0000000080)='./file1\x00', 0x14927e, 0x0)
write$cgroup_subtree(r0, 0x0, 0x9)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, &(0x7f0000000000)={0x18, 0x7, 0x6, 0x0, 0x7, 0x400000}, 0x0, 0x0, 0x0)
ptrace$pokeuser(0x6, r3, 0x358, 0x800000000000)
fallocate(r0, 0x0, 0xb7d4, 0x1001f0)

7m15.847402019s ago: executing program 2 (id=1210):
syz_mount_image$btrfs(&(0x7f0000000240), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000003ec0), 0x0, 0x559e, &(0x7f0000005680)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x3e)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000008c0)={0xc0, 0x0, 0x0, 0x9})

7m14.659013273s ago: executing program 2 (id=1213):
syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x28000, 0x0, 0x0, 0x0, &(0x7f0000000000))
r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, 0x0, 0x0)
r4 = fsmount(r0, 0x0, 0x0)
fchdir(r4)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x0)
getdents64(r5, 0x0, 0x0)
r6 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, &(0x7f0000000080)=0x1, 0x4)

7m9.997302583s ago: executing program 2 (id=1220):
socket$kcm(0x2, 0x2, 0x73)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400"], 0x3c}}, 0x0)

7m9.894952236s ago: executing program 2 (id=1222):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x800002, &(0x7f0000000300)={[{@quota}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@noinit_itable}, {@dioread_lock}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@oldalloc}, {@grpquota}, {@inlinecrypt}, {@user_xattr}, {@bh}, {@dioread_nolock}, {@discard}, {@acl}]}, 0x1, 0x577, &(0x7f0000000d00)="$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")
r0 = open(&(0x7f0000000080)='./file1\x00', 0x14927e, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x9)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, &(0x7f0000000000)={0x18, 0x7, 0x6, 0x0, 0x7, 0x400000}, 0x0, 0x0, 0x0)
ptrace$pokeuser(0x6, r3, 0x358, 0x800000000000)
fallocate(r0, 0x0, 0xb7d4, 0x1001f0)

7m9.590974981s ago: executing program 5 (id=1224):
epoll_create(0x10000e9)
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2)
ftruncate(0xffffffffffffffff, 0xffff)
fcntl$addseals(0xffffffffffffffff, 0x409, 0x7)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
accept4$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev}, 0x0, 0x800)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
userfaultfd(0x801)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xd19000, 0x35)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000380)=0x24000000, r3, 0x0, 0x2, 0x2)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x1)
r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r5 = dup2(r4, r4)
ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x40, 0xa, 0x401, 0x40000004, 0x10})
ioctl$BLKTRACESETUP(r4, 0x1276, 0x0)
pipe2(&(0x7f0000000000)={<r6=>0x0, 0x0}, 0x0)
r7 = socket$tipc(0x1e, 0x2, 0x0)
tee(r6, r7, 0x10000ff, 0x0)
ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0, 0x1000})

7m8.574513687s ago: executing program 2 (id=1225):
syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x28000, 0x0, 0x0, 0x0, &(0x7f0000000000))
r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, 0x0, 0x0)
r5 = fsmount(r0, 0x0, 0x0)
fchdir(r5)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x0)
getdents64(r6, 0x0, 0x0)
r7 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r7, 0x0, 0xd4, &(0x7f0000000080)=0x1, 0x4)

7m8.411656684s ago: executing program 5 (id=1226):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0)
ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000200)={r1, 0x0, 0x0, 0x5, 0x7fffffff, 0x4, 0x0, 0x0, 0x3, 0x1000, 0x200400})

7m7.955356673s ago: executing program 2 (id=1227):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x60}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socket$igmp(0x2, 0x3, 0x2)
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x400, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000004)
ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000000)='bridge0\x00')
syz_emit_ethernet(0x2a, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @address_reply}}}}, 0x0)

7m7.331612648s ago: executing program 40 (id=1227):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x60}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socket$igmp(0x2, 0x3, 0x2)
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x400, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000004)
ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000000)='bridge0\x00')
syz_emit_ethernet(0x2a, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @address_reply}}}}, 0x0)

7m7.130764839s ago: executing program 5 (id=1229):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000004000000"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = fsopen(&(0x7f0000000400)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.controllers\x00', 0x300, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00'}, 0x10)
bpf$PROG_BIND_MAP(0x23, &(0x7f00000001c0)={0xffffffffffffffff, r0}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0x10}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

7m5.938984253s ago: executing program 5 (id=1230):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x800002, &(0x7f0000000300)={[{@quota}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@noinit_itable}, {@dioread_lock}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@oldalloc}, {@grpquota}, {@inlinecrypt}, {@user_xattr}, {@bh}, {@dioread_nolock}, {@discard}, {@acl}]}, 0x1, 0x577, &(0x7f0000000d00)="$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")
r0 = open(&(0x7f0000000080)='./file1\x00', 0x14927e, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x9)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, &(0x7f0000000000)={0x18, 0x7, 0x6, 0x0, 0x7, 0x400000}, 0x0, 0x0, 0x0)
ptrace$pokeuser(0x6, r3, 0x358, 0x800000000000)
fallocate(r0, 0x0, 0xb7d4, 0x1001f0)

7m4.774426212s ago: executing program 5 (id=1233):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00)

7m3.828280143s ago: executing program 5 (id=1235):
socket$inet6(0xa, 0x80002, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @void}, 0x10)
syz_emit_ethernet(0x11, &(0x7f0000000080)={@random="6ea88d319b8c", @multicast, @void, {@x25={0x805, {0x0, 0x1}}}}, 0x0)

7m3.496846536s ago: executing program 41 (id=1235):
socket$inet6(0xa, 0x80002, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @void}, 0x10)
syz_emit_ethernet(0x11, &(0x7f0000000080)={@random="6ea88d319b8c", @multicast, @void, {@x25={0x805, {0x0, 0x1}}}}, 0x0)

6m38.142166734s ago: executing program 4 (id=892):
socket$nl_rdma(0x10, 0x3, 0x14)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[], 0x33fe0}}, 0x0)
mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x1010040, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})
connect$bt_sco(r1, &(0x7f0000000380)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000850000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00'}, 0x10)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="38000000031401002dbd7000ffdbdf2509000200737d7a310000000008004100736977001400330076657468305f746f5f627269646765"], 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0x20000010)
socket$inet6(0xa, 0x2, 0x3a)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
mount(&(0x7f0000000180)=@nullb, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='btrfs\x00', 0x800000, &(0x7f0000000300)='syz1\x00')
sendmsg$NL80211_CMD_GET_WOWLAN(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010300000000000000000500000008000100000000000c009900080000004e000000"], 0x28}}, 0x0)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
r9 = socket$inet6(0xa, 0x3, 0xe)
sendto$inet6(r9, &(0x7f0000000080), 0x0, 0x2004a0c0, 0x0, 0x0)
sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback, @in6=@rand_addr=' \x01\x00', 0x0, 0x8, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@loopback, 0x4d2, 0x32}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0x2, 0x0, 0x0, 0x2, 0x0, 0x1c00000000000}, {0x11df}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x0)

5m46.947566117s ago: executing program 4 (id=892):
socket$nl_rdma(0x10, 0x3, 0x14)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[], 0x33fe0}}, 0x0)
mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x1010040, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})
connect$bt_sco(r1, &(0x7f0000000380)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000850000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00'}, 0x10)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="38000000031401002dbd7000ffdbdf2509000200737d7a310000000008004100736977001400330076657468305f746f5f627269646765"], 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0x20000010)
socket$inet6(0xa, 0x2, 0x3a)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
mount(&(0x7f0000000180)=@nullb, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='btrfs\x00', 0x800000, &(0x7f0000000300)='syz1\x00')
sendmsg$NL80211_CMD_GET_WOWLAN(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010300000000000000000500000008000100000000000c009900080000004e000000"], 0x28}}, 0x0)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
r9 = socket$inet6(0xa, 0x3, 0xe)
sendto$inet6(r9, &(0x7f0000000080), 0x0, 0x2004a0c0, 0x0, 0x0)
sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback, @in6=@rand_addr=' \x01\x00', 0x0, 0x8, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@loopback, 0x4d2, 0x32}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0x2, 0x0, 0x0, 0x2, 0x0, 0x1c00000000000}, {0x11df}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x0)

5m42.951388488s ago: executing program 0 (id=1363):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'team_slave_0\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x5c, r3, 0x1, 0x70bd25, 0x0, {0x1, 0x6c00000000000000}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}]}}]}, 0x5c}, 0x1, 0xf000, 0x0, 0x3000000}, 0x10)

5m39.577334659s ago: executing program 0 (id=1370):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000880)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10}}, {@grpquota}, {@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0xdcc}}]}, 0x3, 0x44a, &(0x7f0000000400)="$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")
chdir(&(0x7f0000000400)='./file0\x00')
fchmodat(0xffffffffffffff9c, 0x0, 0x11)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c4159b364a4fd7013f34db173a4fdacf15229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be867a28f09c5877fc2355ecdc9c30dcb2d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff3a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb357b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50265a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, r1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
r5 = creat(&(0x7f0000000300)='./bus\x00', 0x0)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3df1, 0x0)
write$FUSE_WRITE(r5, &(0x7f0000000000)={0x18, 0x0, 0x0, {0xb4}}, 0xfffffe53)

5m35.867695057s ago: executing program 0 (id=1379):
gettid()
prlimit64(0x0, 0xe, &(0x7f0000000580)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, 0x0)
syz_open_pts(0xffffffffffffffff, 0x40)
r2 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r2, 0xc1205531, &(0x7f0000000540)={0x1, 0x6, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "b6855a32474ffa64f778ddcf29c94337"})
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000c4d}, 0x4000001)
vmsplice(0xffffffffffffffff, &(0x7f00000017c0), 0x0, 0x4)
vmsplice(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000013580)='\r', 0x1}], 0x1, 0x0)
kexec_load(0xf5, 0x1, &(0x7f0000000b80)=[{&(0x7f00000004c0)=')', 0x1, 0x0, 0x1000}], 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000a40)=@newtaction={0x100, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0xec, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x54, 0x3, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x3, 0xea3, 0x20000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x100}}, 0x0)

5m24.400338242s ago: executing program 0 (id=1399):
io_pgetevents(0x0, 0x3, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x3938700}, 0x0)
syz_usb_connect(0x5, 0xfffffdd9, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f00000014c0), 0x40280, 0x0)
fanotify_init(0x0, 0x80000)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
setrlimit(0x6, &(0x7f0000000080)={0x2, 0x1})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x7}, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
epoll_create1(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

5m21.771603027s ago: executing program 0 (id=1408):
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4)
r0 = syz_open_procfs(0x0, &(0x7f0000000440)='loginuid\x00')
pwritev(r0, &(0x7f0000000500)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0xfffffffd, 0x80000)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x50)
syz_open_procfs(0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0x13, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r6 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f00000001c0)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0xfffffbff, 0x20, 0x0, 0x0, 0x8, 0x1, 0x0, 0x5, 0x3, 0x0})
lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYRES16=r0, @ANYRES32=0xee00, @ANYBLOB="020000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES8=r1, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)

5m18.758517557s ago: executing program 0 (id=1409):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8)
socket$nl_crypto(0x10, 0x3, 0x15)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x200000000000008d, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000003c0)='sys_enter\x00', r1}, 0x18)
socket$nl_route(0x10, 0x3, 0x0)
fchdir(0xffffffffffffffff)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000)
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$alg(0x26, 0x5, 0x0)
clock_settime(0x0, &(0x7f00000001c0))
ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0x7)
write$uinput_user_dev(r3, &(0x7f0000000080)={'syz0\x00', {0x0, 0x2}, 0x35, [0x4346, 0x0, 0x0, 0x1, 0x0, 0x4, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffff8, 0x0, 0x0, 0x3, 0x7ff, 0x3, 0x0, 0x0, 0x1, 0x0, 0x922c, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0xfff, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x1cc, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0xe, 0x0, 0xa0000000, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x8, 0x5, 0x0, 0x2], [0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xffff0001, 0x0, 0x1, 0x0, 0x80000020, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5], [0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0x4000000, 0x0, 0xfffff000, 0x0, 0x0, 0x3, 0x0, 0x0, 0xa9c4, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4]}, 0x45c)
ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x11)
ioctl$UI_DEV_CREATE(r3, 0x5501)
write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x58)
close(0xffffffffffffffff)
socket$inet6(0xa, 0x80001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)

5m2.449901386s ago: executing program 42 (id=1409):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8)
socket$nl_crypto(0x10, 0x3, 0x15)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x200000000000008d, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000003c0)='sys_enter\x00', r1}, 0x18)
socket$nl_route(0x10, 0x3, 0x0)
fchdir(0xffffffffffffffff)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000)
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$alg(0x26, 0x5, 0x0)
clock_settime(0x0, &(0x7f00000001c0))
ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0x7)
write$uinput_user_dev(r3, &(0x7f0000000080)={'syz0\x00', {0x0, 0x2}, 0x35, [0x4346, 0x0, 0x0, 0x1, 0x0, 0x4, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffff8, 0x0, 0x0, 0x3, 0x7ff, 0x3, 0x0, 0x0, 0x1, 0x0, 0x922c, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0xfff, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x1cc, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0xe, 0x0, 0xa0000000, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x8, 0x5, 0x0, 0x2], [0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xffff0001, 0x0, 0x1, 0x0, 0x80000020, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5], [0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0x4000000, 0x0, 0xfffff000, 0x0, 0x0, 0x3, 0x0, 0x0, 0xa9c4, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4]}, 0x45c)
ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x11)
ioctl$UI_DEV_CREATE(r3, 0x5501)
write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x58)
close(0xffffffffffffffff)
socket$inet6(0xa, 0x80001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)

1m43.571464811s ago: executing program 4 (id=892):
socket$nl_rdma(0x10, 0x3, 0x14)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[], 0x33fe0}}, 0x0)
mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x1010040, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})
connect$bt_sco(r1, &(0x7f0000000380)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000850000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00'}, 0x10)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="38000000031401002dbd7000ffdbdf2509000200737d7a310000000008004100736977001400330076657468305f746f5f627269646765"], 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0x20000010)
socket$inet6(0xa, 0x2, 0x3a)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
mount(&(0x7f0000000180)=@nullb, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='btrfs\x00', 0x800000, &(0x7f0000000300)='syz1\x00')
sendmsg$NL80211_CMD_GET_WOWLAN(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010300000000000000000500000008000100000000000c009900080000004e000000"], 0x28}}, 0x0)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
r9 = socket$inet6(0xa, 0x3, 0xe)
sendto$inet6(r9, &(0x7f0000000080), 0x0, 0x2004a0c0, 0x0, 0x0)
sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback, @in6=@rand_addr=' \x01\x00', 0x0, 0x8, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@loopback, 0x4d2, 0x32}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0x2, 0x0, 0x0, 0x2, 0x0, 0x1c00000000000}, {0x11df}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x0)

16.327141989s ago: executing program 3 (id=1900):
openat$sndseq(0xffffffffffffff9c, 0x0, 0x22803)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r3 = fsopen(&(0x7f00000001c0)='ocfs2_dlmfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
ioctl$IOCTL_STOP_ACCEL_DEV(0xffffffffffffffff, 0x40096101, 0x0)
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18)
r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmmsg$inet(r4, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0)

15.183523794s ago: executing program 3 (id=1901):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
io_setup(0x2, &(0x7f0000002400)=<r0=>0x0)
io_submit(r0, 0x0, 0x0)

13.769947063s ago: executing program 3 (id=1903):
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x2, 0x0)
openat$pfkey(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@grpjquota}, {@auto_da_alloc_val}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x9}}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@oldalloc}, {@nodelalloc}, {@usrquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x53}}]}, 0xfa, 0x55d, &(0x7f0000000980)="$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")
socket$nl_route(0x10, 0x3, 0x0)
open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0)
pipe2(&(0x7f0000000200), 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f0000002080)='oom_score_adj\x00')
openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c", @ANYRES8=r1, @ANYRES16=r0, @ANYBLOB="597798f1b2"], 0x0)

13.113767533s ago: executing program 7 (id=1905):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeaa, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0}}, 0x10)
r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x108, 0x0, 0x0, 0x0, 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
pipe2$9p(&(0x7f0000000240), 0x0)
syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./bus\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=")
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)

11.097245675s ago: executing program 1 (id=1907):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), r0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2ddc4000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f00000002c0)={0x14, r1, 0xf01, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x20000004)

10.843065852s ago: executing program 6 (id=1908):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
fcntl$setlease(r0, 0x403, 0x0)
sendmsg$kcm(r0, 0x0, 0x1)
syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20c006, &(0x7f0000000040), 0x41, 0x43d, &(0x7f0000000900)="$eJzs289rHFUcAPDv7Cap/aFdS/3RWDVaxeCPpElr7cGLouBBQdBDPcYkLbHbRpoItgSNIvUoBe/iUfAv8KQXUU+CV71LoUgurXpZmcxMsrvZTbtxk63u5wOTvDfzNu99d+btvnkvE0DfGkl/JBH7IuLXiNifZRsLjGS/bqwsTf+5sjSdRK32xh/JarnrK0vTRdHidXuLzEBE6ZMkHmhR78LFS2enqtXZC3l+fPHcu+MLFy89M3du6szsmdnzkydPHj828dyJyWe7Emca1/XhD+YPH3rlrSuvTZ+68vaPXydF/E1xdMnIZgcfr9W6XF1v3VmXTgZ62BA6Us66aQyu9v/9UY71k7c/Xv64p40DtlWtVqvd2/7wcg34H0ui1y0AeqP4ok/vf4tth4Yet4VrL2Q3QGncN/ItOzIQpbzMYNP9bTeNRMSp5b++SLfYnnkIAIAG36bjn6fz8V/Dwk8p6ueF7srXUCoRcXdEHIiIExFxMCLuiVgte19E3N9h/c2LJBvHP6WrHf7JjqTjv+fzta3G8V8x+otKOeLvYrhcicHk9Fx19mj+nozG4K40P7FJHd+99Mtn7Y7Vj//SLa2/GAvm7bg6sKvxNTNTi1P/JuZ61z6KGB5oFX+ythKQXhaHImJ4i3XMPfnV4XbHbh5/o6H6TBfWmWpfRjyRnf/laIq/kKbGl9uuT47fEdXZo+PFVbHRTz9ffr1d/Z3G323p+d/T8vpfi7+S1K/XLnRex+XfPm17T7PV638oebNh3/tTi4sXJiKGklezRtfvn2wqN7lePo1/9Ejr/n8gincia0B6ET8YEQ9FxMN52x+JiEcj4sgm8f/w4mPvNO5JOoh/e6Xxz3R0/tcTQ9G8p3WifPb7bxoqrUQH8afn//hqajTfcyuff7fSrq1dzQAAAPDfU4qIfZGUxtbSpdLYWPY//AdjT6k6v7D41On5987PZM8IVGKwVMx0ZfPB2XzoRH5bX+Qnm/LH8nnjz8u7V/Nj0/PVmV4HD31ub5v+n/q93OvWAdvO81rQv/R/6F/6P/Qv/R/6V4v+v7sX7QB2Xqvv/w970A5g5zX1f8t+0Efc/0P/0v+hf+n/0JcWdsfNH5KXkNiQiNJt0QyJbUr0+pMJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgO/4JAAD//yzB6iM=")
r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x1b5)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x7a000}], 0x1, 0x33000, 0x0, 0x3)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x24)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000001c0)={0x4000}, 0x10)
syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000003d0007010000000000000000047c0000040008800c00018006000600800a0000100002800c000b0005"], 0x34}}, 0xc000)
r6 = socket(0x10, 0x80000, 0x0)
write(r6, &(0x7f0000000240)="aefc00001a0025f00385bc04fef7681d0a0b49ff708800008002280008020200ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae)

9.977329041s ago: executing program 7 (id=1909):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000880)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10}}, {@grpquota}, {@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0xdcc}}]}, 0x3, 0x44a, &(0x7f0000000400)="$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")
chdir(&(0x7f0000000400)='./file0\x00')
fchmodat(0xffffffffffffff9c, 0x0, 0x11)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, r0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0)
copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3df1, 0x0)
write$FUSE_WRITE(r4, &(0x7f0000000000)={0x18, 0x0, 0x0, {0xb4}}, 0xfffffe53)

9.810646448s ago: executing program 1 (id=1910):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeaa, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
pipe2$9p(&(0x7f0000000240), 0x0)
syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./bus\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=")
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)

9.667663101s ago: executing program 3 (id=1911):
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x15, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r4=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000002c0)={r4, <r5=>0x0, <r6=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[<r7=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000600)=[r7], 0x1, r5, r6, 0x3, 0x0, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x69, 0xf4b, 0x1, 0x2, 0x5, 0x412f, 0xe154, 0x1000, 0x5, 0x6, 0x3, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}})
mount_setattr(r0, &(0x7f0000000100)='./file0\x00', 0x800, &(0x7f0000000180)={0x7d, 0x3}, 0x20)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[], 0x98}}, 0x4048010)

8.168066196s ago: executing program 6 (id=1912):
openat$sndseq(0xffffffffffffff9c, 0x0, 0x22803)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r3 = fsopen(&(0x7f00000001c0)='ocfs2_dlmfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
ioctl$IOCTL_STOP_ACCEL_DEV(0xffffffffffffffff, 0x40096101, 0x0)
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0)

7.748677846s ago: executing program 1 (id=1913):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82)
r1 = fanotify_init(0x81, 0x0)
fanotify_mark(r1, 0x105, 0x40001032, r0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_all\x00', 0x275a, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0)
socket$inet(0x2, 0x2, 0x0)

6.483942591s ago: executing program 6 (id=1914):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
io_setup(0x2, &(0x7f0000002400)=<r0=>0x0)
io_submit(r0, 0x0, 0x0)

5.703738667s ago: executing program 7 (id=1915):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = landlock_create_ruleset(&(0x7f0000000180)={0x3012, 0x1, 0x2}, 0x3d, 0x0)
landlock_restrict_self(r4, 0x0)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc020aa08, &(0x7f0000000100)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)

5.674538782s ago: executing program 1 (id=1916):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0x1010000}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x0, 0xf00}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="0131218010ff"})

5.051324342s ago: executing program 6 (id=1917):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0)
r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd)
keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55)
r4 = socket(0x2b, 0x1, 0x1)
r5 = fanotify_init(0x200, 0x0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x8, @none, 0x0, 0x1}, 0xe)
shutdown(r6, 0x0)
recvmmsg(r6, &(0x7f0000000080), 0x72a, 0x0, 0x0)
r7 = dup(r4)
fanotify_mark(r5, 0x1, 0x8000078, r7, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
splice(0xffffffffffffffff, 0x0, r8, 0x0, 0x39000, 0x0)
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="00751a68ee798fcae0891520cb472639228250fe3c6cb8704d6119173e0f4ddf2e2ea356ff686011a21f9d3cedf56b6faf93aff907d0f0bc044946049bade3ea056c5736d3305252917094420fa4f03f2a1921c6748f0fbe3e606d166900000000000000000000000a5d824968a3ffc7e1d64fc469ce0003a0994e706ff79839db237e55b3a489f85cfa81bb3940f9dd3cef6c7ac881a58a1dab8519b5aedf24c34b2ae69c6624d7314f395c48a4b4cac7b5836900"/190], 0x1, 0x173, &(0x7f0000000240)="$eJzs281KMlEcx/Hf+Po8Pi+9b1oFLWqTUyqUSy+gG2gnOok0VmQbJYgupTvpTroBhbqBJhyHSmkxzSFP6PcD6h/hN+cc8K9/FyMAC2s5fM7IUTasgiC43ZJ0chy+DWCOBXoJACyq9JPtHQCwY1hLh3PAgyM9Pt80BtEjG3N+GNZS48KRBh/yubj5Oyd83cxM5vOSfsWZX+7H+R1N5n9/cf3CVL4QOz8+/+72ZP6PpL+S/kn6L2kp+q+1Imn1k/WbU+tvxFwfMDH69BVN8wYXGHXPadv39hPms1H+IGE+F+VLhvlywnw+yhcbF34z4TWApFKW+z9t2P8Zw/4HFlm31z+r+753RUFBQfFW2P5mAvDd3OvOpdvt9ffanXrLa3nnpUr1qFIuVQ6rbjiXuybTOYCf7P1H3/ZOAAAAAAAAAAAAAABAUmuS1m1vAgAAAMBMzOJ2IttnBAAAAAAAAAAAAAAAAAAAAObFawAAAP//w0hQzg==")

3.931596124s ago: executing program 7 (id=1918):
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@ipv4={""/10, ""/2, @local}, @in=@local}}, {{@in6=@private2}, 0x0, @in6=@local}}, &(0x7f0000000200)=0xe8)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000800)={{{@in6=@empty, @in6=@mcast1}}, {{@in6=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000000300)=0xe8)
mount$9p_fd(0x0, 0x0, 0x0, 0x2000492, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000000c0)=0x3, 0x4)
openat$dsp(0xffffffffffffff9c, 0x0, 0x8042, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffd000/0x3000)=nil)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0), 0x0, 0x4001c00)
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r2, 0x0, 0x2e, 0x0, 0x0)
setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000480)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @multicast2}}}, 0x108)
getsockopt$inet_buf(r2, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1)
ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x5})
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x24)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_type(r3, &(0x7f0000000080), 0x2, 0x0)
openat$cgroup_type(r3, &(0x7f0000000040), 0x2, 0x0)

2.776189134s ago: executing program 1 (id=1919):
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, <r1=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x46, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10)
pipe(&(0x7f0000000d00)={<r3=>0xffffffffffffffff})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r5, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='p\x00\x00\x00\x00\x00\x00\x00v'], 0x70}}], 0x1, 0x2000c044)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r8=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r8], 0x20}}, 0x0)
splice(r3, 0x0, r4, 0x0, 0x7151, 0x0)

2.772773851s ago: executing program 3 (id=1920):
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0xfffff, r0)

2.537537644s ago: executing program 6 (id=1921):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r2 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0)
write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0)
sendfile(r2, r2, &(0x7f0000000080), 0x7f03)

1.825183253s ago: executing program 3 (id=1922):
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x2, 0x0)
openat$pfkey(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@grpjquota}, {@auto_da_alloc_val}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x9}}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@oldalloc}, {@nodelalloc}, {@usrquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x53}}]}, 0xfa, 0x55d, &(0x7f0000000980)="$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")
socket$nl_route(0x10, 0x3, 0x0)
open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0)
pipe2(&(0x7f0000000200), 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f0000002080)='oom_score_adj\x00')
openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c", @ANYRES8=r1, @ANYRES16=r0, @ANYBLOB="597798f1b2"], 0x0)

1.551575519s ago: executing program 1 (id=1923):
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@ipv4={""/10, ""/2, @local}, @in=@local}}, {{@in6=@private2}, 0x0, @in6=@local}}, &(0x7f0000000200)=0xe8)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000800)={{{@in6=@empty, @in6=@mcast1}}, {{@in6=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000000300)=0xe8)
mount$9p_fd(0x0, 0x0, 0x0, 0x2000492, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000000c0)=0x3, 0x4)
openat$dsp(0xffffffffffffff9c, 0x0, 0x8042, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0), 0x0, 0x4001c00)
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000480)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @multicast2}}}, 0x108)
getsockopt$inet_buf(r2, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1)
ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x5})
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x24)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_type(r3, &(0x7f0000000040), 0x2, 0x0)

1.550744433s ago: executing program 7 (id=1924):
select(0x40, &(0x7f0000001d00)={0x100000001, 0x2bb, 0x1, 0x80000001, 0x5, 0x3, 0x80, 0x80000001}, 0xfffffffffffffffc, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg$sock(r0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x18)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000300)={'#! ', './file0', [], 0xa, "c8e3799f77e99798ac77881261f9313c65547ccb1ccd26f8ab35cba96e2b6d1e83c990563f3f18076ecfdced219593cbde0adcd9bacfde789d4e139ea5d0d921"}, 0x4b)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000980), r4)
sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x34, r5, 0x101, 0x70bd29, 0x25dfdbfd, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x88800}, 0x0)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0)

156.793409ms ago: executing program 6 (id=1925):
openat$sndseq(0xffffffffffffff9c, 0x0, 0x22803)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r3 = fsopen(&(0x7f00000001c0)='ocfs2_dlmfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
ioctl$IOCTL_STOP_ACCEL_DEV(0xffffffffffffffff, 0x40096101, 0x0)
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0)

0s ago: executing program 7 (id=1926):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x0, 0x0)
connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
write(r0, &(0x7f0000000240)="14000000140005b7ffccca38b9000000060860eb", 0x14)

kernel console output (not intermixed with test programs):

999482][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  768.032675][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  768.297347][   T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  768.309635][   T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  768.414918][T11496] trusted_key: encrypted_key: insufficient parameters specified
[  768.450445][T11496] loop3: detected capacity change from 0 to 64
[  769.644224][T11500] loop0: detected capacity change from 0 to 512
[  770.240168][T11500] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.1347: corrupted in-inode xattr: invalid ea_ino
[  770.255657][T11500] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.1347: couldn't read orphan inode 15 (err -117)
[  770.269348][T11500] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  771.743751][T10660] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  772.537439][T11526] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1351'.
[  772.546716][T11526] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1351'.
[  772.556743][T11526] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1351'.
[  773.178665][T11523] loop7: detected capacity change from 0 to 2048
[  773.212889][T11533] loop1: detected capacity change from 0 to 64
[  773.230396][T11523] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  774.858300][   T52] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  775.135010][   T52] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  775.334029][T11000] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  775.429339][   T52] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  775.531849][   T52] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  775.678951][   T52] bridge_slave_1: left allmulticast mode
[  775.684784][   T52] bridge_slave_1: left promiscuous mode
[  775.691124][   T52] bridge0: port 2(bridge_slave_1) entered disabled state
[  775.701762][   T52] bridge_slave_0: left allmulticast mode
[  775.708844][   T52] bridge_slave_0: left promiscuous mode
[  775.716146][   T52] bridge0: port 1(bridge_slave_0) entered disabled state
[  776.461456][T11557] loop1: detected capacity change from 0 to 128
[  778.451623][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  778.461608][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  778.678788][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  778.710030][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  778.795783][T11570] hub 9-0:1.0: USB hub found
[  778.801612][T11570] hub 9-0:1.0: 1 port detected
[  778.851291][T11569] loop3: detected capacity change from 0 to 128
[  779.560492][T10437] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  779.649713][T10437] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  780.196161][   T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  780.422742][   T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  780.459638][   T52] bond0 (unregistering): Released all slaves
[  780.741228][T11576] loop1: detected capacity change from 0 to 512
[  780.770931][T11576] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  780.804214][T11576] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  780.850684][T11576] EXT4-fs (loop1): 1 truncate cleaned up
[  780.857328][T11576] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  780.861856][T11582] loop0: detected capacity change from 0 to 512
[  780.876392][T11579] loop6: detected capacity change from 0 to 512
[  780.907986][T11579] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  780.966871][   T29] kauditd_printk_skb: 11 callbacks suppressed
[  780.966890][   T29] audit: type=1800 audit(1741382257.056:61): pid=11576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1368" name="bus" dev="loop1" ino=18 res=0 errno=0
[  781.232884][T11592] trusted_key: encrypted_key: insufficient parameters specified
[  781.980668][ T9506] Bluetooth: hci2: command tx timeout
[  781.992445][T11582] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.1370: corrupted in-inode xattr: invalid ea_ino
[  782.011940][T11579] EXT4-fs (loop6): 1 truncate cleaned up
[  782.074990][T11594] loop7: detected capacity change from 0 to 64
[  782.211139][T11579] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  782.301191][T11582] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.1370: couldn't read orphan inode 15 (err -117)
[  782.602144][T10967] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  782.694218][T11582] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  782.726190][   T29] audit: type=1800 audit(1741382258.826:62): pid=11579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1369" name="bus" dev="loop6" ino=18 res=0 errno=0
[  783.029729][T11564] chnl_net:caif_netlink_parms(): no params data found
[  783.229498][T11609] openvswitch: netlink: Actions may not be safe on all matching packets
[  783.932576][T10437] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  784.030138][T10437] Bluetooth: hci2: command tx timeout
[  784.219797][T10969] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  784.346927][T10660] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  784.363591][   T52] hsr_slave_0: left promiscuous mode
[  784.382545][   T52] hsr_slave_1: left promiscuous mode
[  784.388390][   T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  784.664149][   T52] batman_adv: batadv0: Removing interface: batadv_slave_0
[  784.681810][T10437] Bluetooth: hci0: command 0x0406 tx timeout
[  785.273502][T11627] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  786.241247][T11629] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1377'.
[  786.440403][T10437] Bluetooth: hci2: command tx timeout
[  786.512202][   T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  786.532664][   T52] batman_adv: batadv0: Removing interface: batadv_slave_1
[  788.313534][   T52] veth1_macvtap: left promiscuous mode
[  788.370512][   T52] veth0_macvtap: left promiscuous mode
[  788.376338][   T52] veth1_vlan: left promiscuous mode
[  788.381999][   T52] veth0_vlan: left promiscuous mode
[  788.510316][ T9506] Bluetooth: hci2: command tx timeout
[  791.147089][T11663] usb usb1: usbfs: process 11663 (syz.1.1389) did not claim interface 0 before use
[  791.568867][T11666] QAT: failed to copy from user cfg_data.
[  791.684697][T11665] trusted_key: encrypted_key: insufficient parameters specified
[  792.060143][T11667] loop7: detected capacity change from 0 to 64
[  792.327268][T11669] loop6: detected capacity change from 0 to 512
[  792.374034][T11669] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #15: comm syz.6.1391: corrupted in-inode xattr: invalid ea_ino
[  792.447480][T11669] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.1391: couldn't read orphan inode 15 (err -117)
[  792.461431][   T52] team0 (unregistering): Port device team_slave_1 removed
[  792.498894][T11669] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  792.863943][   T52] team0 (unregistering): Port device team_slave_0 removed
[  793.257609][T10969] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  793.400123][T11674] loop6: detected capacity change from 0 to 512
[  793.409743][T11674] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  793.436106][T11674] EXT4-fs (loop6): 1 truncate cleaned up
[  793.447557][T11674] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  793.479782][   T29] audit: type=1800 audit(1741382269.586:63): pid=11674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1392" name="bus" dev="loop6" ino=18 res=0 errno=0
[  793.975682][T11678] openvswitch: netlink: Actions may not be safe on all matching packets
[  794.032866][ T9506] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  794.719573][T10969] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  795.492374][T11629] IPv6: NLM_F_CREATE should be specified when creating new route
[  795.500443][T11629] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1377'.
[  796.068261][T11699] openvswitch: netlink: Multiple metadata blocks provided
[  797.026197][T11564] bridge0: port 1(bridge_slave_0) entered blocking state
[  797.136216][T11564] bridge0: port 1(bridge_slave_0) entered disabled state
[  797.146673][T11564] bridge_slave_0: entered allmulticast mode
[  797.158174][T11564] bridge_slave_0: entered promiscuous mode
[  797.166571][T11564] bridge0: port 2(bridge_slave_1) entered blocking state
[  797.174718][T11564] bridge0: port 2(bridge_slave_1) entered disabled state
[  797.182279][T11564] bridge_slave_1: entered allmulticast mode
[  797.191106][T11564] bridge_slave_1: entered promiscuous mode
[  797.219871][T11705] loop6: detected capacity change from 0 to 512
[  797.315859][T11705] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #15: comm syz.6.1400: corrupted in-inode xattr: invalid ea_ino
[  797.367232][T11705] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.1400: couldn't read orphan inode 15 (err -117)
[  797.416301][T11564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  797.421501][T11705] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  797.432763][T11564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  797.983901][   T29] audit: type=1804 audit(1741382274.056:64): pid=11721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1400" name="/newroot/20/file0/file0/bus" dev="loop6" ino=18 res=1 errno=0
[  798.070452][T11564] team0: Port device team_slave_0 added
[  798.178712][T11564] team0: Port device team_slave_1 added
[  798.188147][T10969] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  798.783705][T11729] trusted_key: encrypted_key: insufficient parameters specified
[  799.137827][T11730] loop7: detected capacity change from 0 to 64
[  800.432649][T11564] batman_adv: batadv0: Adding interface: batadv_slave_0
[  800.450672][T11564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  800.538427][T11736] usb usb1: usbfs: process 11736 (syz.0.1408) did not claim interface 0 before use
[  801.418895][T11564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  801.438679][T11564] batman_adv: batadv0: Adding interface: batadv_slave_1
[  801.445699][T11564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  801.473685][T11735] loop3: detected capacity change from 0 to 2048
[  801.517286][T11735] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  801.594432][T11564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  802.321747][T11749] loop6: detected capacity change from 0 to 512
[  802.331577][T11749] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  802.628025][T11749] EXT4-fs (loop6): 1 truncate cleaned up
[  802.671118][T11749] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  803.143799][ T9610] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  803.319796][   T29] audit: type=1800 audit(1741382279.336:65): pid=11749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1411" name="bus" dev="loop6" ino=18 res=0 errno=0
[  803.583630][ T9506] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  803.583642][T11749] openvswitch: netlink: Actions may not be safe on all matching packets
[  803.810709][T11564] hsr_slave_0: entered promiscuous mode
[  803.819369][T10969] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  803.847079][T11564] hsr_slave_1: entered promiscuous mode
[  804.016748][   T65] bridge_slave_1: left allmulticast mode
[  804.035384][   T65] bridge_slave_1: left promiscuous mode
[  804.057588][   T65] bridge0: port 2(bridge_slave_1) entered disabled state
[  804.277314][   T65] bridge_slave_0: left allmulticast mode
[  804.285787][T11774] loop6: detected capacity change from 0 to 512
[  804.292271][   T65] bridge_slave_0: left promiscuous mode
[  804.299225][   T65] bridge0: port 1(bridge_slave_0) entered disabled state
[  804.306597][T11774] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  805.213150][T11774] EXT4-fs (loop6): 1 truncate cleaned up
[  805.224470][T11774] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  805.515011][   T29] audit: type=1800 audit(1741382281.426:66): pid=11774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1414" name="bus" dev="loop6" ino=18 res=0 errno=0
[  805.752371][ T9506] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  807.295276][T10969] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  808.374853][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  808.381311][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  810.759844][T11811] loop7: detected capacity change from 0 to 1764
[  810.776027][T11811] iso9660: Bad value for 'gid'
[  810.781357][T11811] iso9660: Bad value for 'gid'
[  810.893991][T11813] loop3: detected capacity change from 0 to 1764
[  810.909840][T11813] iso9660: Bad value for 'gid'
[  810.914963][T11813] iso9660: Bad value for 'gid'
[  812.298726][   T65] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  812.310573][   T65] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  812.321777][   T65] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  813.040977][   T65] bond0 (unregistering): Released all slaves
[  814.224085][T11832] loop3: detected capacity change from 0 to 1024
[  814.258416][T11832] EXT4-fs: Ignoring removed oldalloc option
[  814.419405][T11832] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  815.527293][   T25] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  815.760259][   T25] usb 4-1: Using ep0 maxpacket: 16
[  815.802260][   T25] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  815.907154][   T25] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  817.753455][   T25] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  817.859161][   T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  817.883235][ T9610] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  817.918327][   T25] usb 4-1: can't set config #1, error -71
[  817.966791][   T25] usb 4-1: USB disconnect, device number 6
[  820.339294][   T65] hsr_slave_0: left promiscuous mode
[  820.370369][T10971] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  820.385659][T10971] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  820.402696][T10971] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  820.415868][T10971] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  820.425807][T10971] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  820.433289][T10971] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  820.480166][   T65] hsr_slave_1: left promiscuous mode
[  820.500618][   T65] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  820.508106][   T65] batman_adv: batadv0: Removing interface: batadv_slave_0
[  820.548280][T11877] loop6: detected capacity change from 0 to 2048
[  820.600411][T11868] Bluetooth: hci6: command 0x0406 tx timeout
[  820.606508][T11868] Bluetooth: hci1: command 0x0406 tx timeout
[  820.614165][T10971] Bluetooth: hci5: command 0x0406 tx timeout
[  820.718541][T11877] udf: Unknown parameter 'shU'
[  821.672715][   T65] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  821.746634][T11888] loop7: detected capacity change from 0 to 512
[  821.840118][   T65] batman_adv: batadv0: Removing interface: batadv_slave_1
[  821.864918][T11888] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  821.960168][   T65] veth1_macvtap: left promiscuous mode
[  821.966190][   T65] veth0_macvtap: left promiscuous mode
[  821.971883][   T65] veth1_vlan: left promiscuous mode
[  821.977404][   T65] veth0_vlan: left promiscuous mode
[  822.026765][T11895] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1439'.
[  822.205676][T11888] EXT4-fs (loop7): 1 truncate cleaned up
[  822.235150][T11888] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  822.503256][   T29] audit: type=1800 audit(1741382298.606:67): pid=11888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1437" name="bus" dev="loop7" ino=18 res=0 errno=0
[  822.526280][ T5840] Bluetooth: hci4: command tx timeout
[  823.222135][T11903] openvswitch: netlink: Actions may not be safe on all matching packets
[  823.231943][ T5840] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  824.611653][ T5840] Bluetooth: hci4: command tx timeout
[  825.494842][T11926] loop1: detected capacity change from 0 to 512
[  825.525126][T11926] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  825.563074][T11926] EXT4-fs (loop1): 1 truncate cleaned up
[  825.569684][T11926] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  825.644275][   T29] audit: type=1800 audit(1741382301.756:68): pid=11926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1441" name="bus" dev="loop1" ino=18 res=0 errno=0
[  825.880664][T11000] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  825.957044][   T65] team0 (unregistering): Port device team_slave_1 removed
[  826.063805][   T65] team0 (unregistering): Port device team_slave_0 removed
[  826.130161][ T5840] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  826.671914][ T5840] Bluetooth: hci4: command tx timeout
[  826.819850][T10967] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  827.151566][T11743] syz_tun (unregistering): left allmulticast mode
[  828.208019][T11940] loop6: detected capacity change from 0 to 1024
[  828.232677][T11940] EXT4-fs: Ignoring removed oldalloc option
[  828.529463][T11940] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  829.317583][ T5840] Bluetooth: hci4: command tx timeout
[  830.081636][ T5943] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  831.992381][ T5943] usb 7-1: Using ep0 maxpacket: 16
[  832.212393][ T5943] usb 7-1: device descriptor read/all, error -71
[  832.413323][T10969] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  832.629832][T11981] QAT: failed to copy from user cfg_data.
[  833.455942][   T65] IPVS: stop unused estimator thread 0...
[  833.667327][T11873] chnl_net:caif_netlink_parms(): no params data found
[  834.837603][T11986] loop3: detected capacity change from 0 to 1764
[  834.900902][T11986] iso9660: Bad value for 'gid'
[  835.663707][T11986] iso9660: Bad value for 'gid'
[  837.338098][   T65] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  837.525463][T11873] bridge0: port 1(bridge_slave_0) entered blocking state
[  837.532737][T11873] bridge0: port 1(bridge_slave_0) entered disabled state
[  837.545511][T11873] bridge_slave_0: entered allmulticast mode
[  837.561203][T11873] bridge_slave_0: entered promiscuous mode
[  837.626069][   T65] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  837.658618][T11873] bridge0: port 2(bridge_slave_1) entered blocking state
[  837.681473][T11873] bridge0: port 2(bridge_slave_1) entered disabled state
[  837.688672][T11873] bridge_slave_1: entered allmulticast mode
[  837.735710][T11873] bridge_slave_1: entered promiscuous mode
[  838.073570][   T65] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  838.571717][T11873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  839.300129][ T5943] usb 4-1: new full-speed USB device number 7 using dummy_hcd
[  839.493284][T12021] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1455'.
[  839.502567][T12021] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1455'.
[  839.511647][T12021] netlink: 'syz.3.1455': attribute type 6 has an invalid length.
[  840.062385][ T5943] usb 4-1: config 7 has an invalid interface number: 34 but max is 0
[  840.156777][   T65] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  840.167262][ T5943] usb 4-1: config 7 has no interface number 0
[  840.179979][ T5943] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db51, bcdDevice=5e.35
[  840.189030][ T5943] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  840.222478][T11873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  840.234603][ T5943] usb 4-1: Product: syz
[  840.238910][ T5943] usb 4-1: Manufacturer: syz
[  840.261321][ T5943] usb 4-1: SerialNumber: syz
[  840.449119][T12027] loop7: detected capacity change from 0 to 1764
[  840.484760][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  840.494271][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  840.509513][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  840.520395][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  840.528150][ T5840] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  840.535670][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  840.713184][T12027] iso9660: Bad value for 'gid'
[  840.718108][T12027] iso9660: Bad value for 'gid'
[  840.770954][T11873] team0: Port device team_slave_0 added
[  840.854501][T12033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1458'.
[  840.863556][T12033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1458'.
[  840.872540][T12033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1458'.
[  840.904792][T11873] team0: Port device team_slave_1 added
[  841.123513][T11873] batman_adv: batadv0: Adding interface: batadv_slave_0
[  841.138075][T11873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  842.055976][T11873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  842.111857][ T5943] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual USB' in warm state.
[  842.119892][ T5943] dvb-usb: bulk message failed: -22 (2/0)
[  842.165132][ T5943] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  842.177654][T11873] batman_adv: batadv0: Adding interface: batadv_slave_1
[  842.208225][T11873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  842.286736][T11873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  842.298323][T12047] netlink: 'syz.7.1461': attribute type 4 has an invalid length.
[  842.413458][ T5943] dvb-usb: DViCO FusionHDTV DVB-T Dual USB error while loading driver (-19)
[  842.422605][ T5943] dvb_usb_cxusb 4-1:7.34: probe with driver dvb_usb_cxusb failed with error -22
[  842.433457][ T5943] usb 4-1: USB disconnect, device number 7
[  842.458892][T12053] netlink: 'syz.7.1461': attribute type 4 has an invalid length.
[  842.590086][T10437] Bluetooth: hci0: command tx timeout
[  842.737692][T12056] loop3: detected capacity change from 0 to 1024
[  842.746280][T12056] EXT4-fs: Ignoring removed oldalloc option
[  842.802551][T12056] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  842.852565][T11873] hsr_slave_0: entered promiscuous mode
[  842.897058][T11873] hsr_slave_1: entered promiscuous mode
[  842.906758][T11873] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  842.920036][T11873] Cannot create hsr debugfs directory
[  842.940216][   T65] bridge_slave_1: left allmulticast mode
[  842.969678][   T65] bridge_slave_1: left promiscuous mode
[  842.990400][   T65] bridge0: port 2(bridge_slave_1) entered disabled state
[  843.087882][   T65] bridge_slave_0: left allmulticast mode
[  843.102291][   T65] bridge_slave_0: left promiscuous mode
[  843.133782][   T65] bridge0: port 1(bridge_slave_0) entered disabled state
[  843.300034][ T5999] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  843.480118][ T5999] usb 4-1: Using ep0 maxpacket: 16
[  843.548449][ T5999] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  843.703496][ T5999] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  844.177105][ T5999] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  845.136566][T10437] Bluetooth: hci0: command tx timeout
[  845.152831][ T5999] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  845.160973][ T5999] usb 4-1: Product: syz
[  845.165156][ T5999] usb 4-1: Manufacturer: syz
[  845.169794][ T5999] usb 4-1: SerialNumber: syz
[  845.441186][ T5999] usb 4-1: 0:2 : does not exist
[  845.470301][ T5999] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  845.516184][ T5999] usb 4-1: USB disconnect, device number 8
[  846.079301][ T9610] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  847.150048][T10437] Bluetooth: hci0: command tx timeout
[  847.233862][   T65] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  847.267486][   T65] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  847.287724][   T65] bond0 (unregistering): Released all slaves
[  847.588128][T12092] loop1: detected capacity change from 0 to 2048
[  847.942479][T12093] loop7: detected capacity change from 0 to 40427
[  847.950987][T12093] F2FS-fs (loop7): build fault injection attr: rate: 771, type: 0x1fffff
[  847.967500][T12092] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  847.980929][T12093] F2FS-fs (loop7): invalid crc value
[  847.994099][T12093] F2FS-fs (loop7): Found nat_bits in checkpoint
[  848.048865][T12093] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  848.558804][T12105] F2FS-fs (loop7): inject checkpoint error in f2fs_balance_fs of f2fs_write_single_data_page+0x12ed/0x1bd0
[  848.570427][T12105] syz.7.1470: attempt to access beyond end of device
[  848.570427][T12105] loop7: rw=2049, sector=53248, nr_sectors = 88 limit=40427
[  848.584364][T12105] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  848.591363][T12105] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  848.598247][T12105] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  848.605275][T12105] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  848.612344][T12105] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  848.619238][T12105] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  848.626169][T12105] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  848.633167][T12105] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  848.640091][T12105] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  848.646966][T12105] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  848.653916][T12105] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  848.660918][T12105] F2FS-fs (loop7): Stopped filesystem due to reason: 1
[  849.231171][T10437] Bluetooth: hci0: command tx timeout
[  849.272711][   T65] hsr_slave_0: left promiscuous mode
[  849.284168][   T65] hsr_slave_1: left promiscuous mode
[  849.291158][   T65] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  849.299127][   T65] batman_adv: batadv0: Removing interface: batadv_slave_0
[  849.400205][   T65] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  849.407655][   T65] batman_adv: batadv0: Removing interface: batadv_slave_1
[  849.505332][   T65] veth1_macvtap: left promiscuous mode
[  849.550068][   T65] veth0_macvtap: left promiscuous mode
[  849.565934][   T65] veth1_vlan: left promiscuous mode
[  849.590228][   T65] veth0_vlan: left promiscuous mode
[  850.051998][T12117] loop3: detected capacity change from 0 to 128
[  852.740547][T12096] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set
[  853.366555][T10967] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  854.363521][   T65] team0 (unregistering): Port device team_slave_1 removed
[  854.395791][T12131] loop1: detected capacity change from 0 to 1024
[  854.405933][T12131] EXT4-fs: Ignoring removed oldalloc option
[  854.431889][   T65] team0 (unregistering): Port device team_slave_0 removed
[  854.441037][T12131] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  854.730179][ T5999] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  854.923307][ T5999] usb 2-1: Using ep0 maxpacket: 16
[  855.194180][ T5999] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  856.211159][ T5999] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  856.238518][ T5999] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  856.257313][ T5999] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  856.451263][ T5999] usb 2-1: Product: syz
[  856.455481][ T5999] usb 2-1: Manufacturer: syz
[  856.500122][ T5999] usb 2-1: SerialNumber: syz
[  856.564643][T12145] loop7: detected capacity change from 0 to 512
[  856.595563][T12030] chnl_net:caif_netlink_parms(): no params data found
[  856.666027][T12146] loop6: detected capacity change from 0 to 2048
[  856.672982][T12145] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  856.699903][T10967] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  856.726059][T12146] udf: Unknown parameter 'shU'
[  856.778204][T12145] EXT4-fs (loop7): 1 truncate cleaned up
[  856.804287][T12145] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  856.827543][ T5999] usb 2-1: 0:2 : does not exist
[  856.836540][ T5999] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  856.854280][ T5999] usb 2-1: USB disconnect, device number 17
[  856.904798][T12152] fuse: Bad value for 'fd'
[  857.140411][   T29] audit: type=1800 audit(1741382332.996:69): pid=12145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1482" name="bus" dev="loop7" ino=18 res=0 errno=0
[  857.403301][T12160] openvswitch: netlink: Actions may not be safe on all matching packets
[  857.961859][T10437] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  858.142008][T11000] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  858.161368][T12030] bridge0: port 1(bridge_slave_0) entered blocking state
[  858.411315][T12030] bridge0: port 1(bridge_slave_0) entered disabled state
[  858.419444][T12030] bridge_slave_0: entered allmulticast mode
[  858.426790][T12030] bridge_slave_0: entered promiscuous mode
[  859.270543][T12030] bridge0: port 2(bridge_slave_1) entered blocking state
[  859.305411][T12171] loop7: detected capacity change from 0 to 1764
[  859.320214][T12030] bridge0: port 2(bridge_slave_1) entered disabled state
[  859.343847][T12171] iso9660: Bad value for 'gid'
[  859.348676][T12171] iso9660: Bad value for 'gid'
[  859.360538][T12030] bridge_slave_1: entered allmulticast mode
[  859.367760][T12030] bridge_slave_1: entered promiscuous mode
[  861.984577][T12030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  862.143479][T12030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  862.359017][T12030] team0: Port device team_slave_0 added
[  862.416455][T12030] team0: Port device team_slave_1 added
[  865.541263][T12030] batman_adv: batadv0: Adding interface: batadv_slave_0
[  865.584034][T12030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  865.699001][T12030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  865.717281][T11873] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  865.748917][T11873] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  866.055233][T12030] batman_adv: batadv0: Adding interface: batadv_slave_1
[  866.070199][T12030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  867.023535][T12206] loop7: detected capacity change from 0 to 1024
[  867.033915][T12030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  867.047171][T12206] EXT4-fs: Ignoring removed oldalloc option
[  867.050259][T11873] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  867.285375][T11873] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  867.313566][T12206] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  867.656945][T12030] hsr_slave_0: entered promiscuous mode
[  867.706643][T12030] hsr_slave_1: entered promiscuous mode
[  867.730290][ T5895] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  867.750776][T12030] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  867.778640][T12030] Cannot create hsr debugfs directory
[  867.911813][ T5895] usb 8-1: Using ep0 maxpacket: 16
[  868.263934][T12223] loop1: detected capacity change from 0 to 64
[  868.655148][ T5895] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  868.965280][ T5895] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[  869.041672][ T5895] usb 8-1: string descriptor 0 read error: -71
[  869.052374][ T5895] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  869.069484][T11000] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  869.079011][ T8710] bridge_slave_1: left allmulticast mode
[  869.088342][ T8710] bridge_slave_1: left promiscuous mode
[  869.089041][ T5895] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  869.098610][ T8710] bridge0: port 2(bridge_slave_1) entered disabled state
[  869.129229][ T8710] bridge_slave_0: left allmulticast mode
[  869.161580][ T8710] bridge_slave_0: left promiscuous mode
[  869.181117][ T8710] bridge0: port 1(bridge_slave_0) entered disabled state
[  869.384553][ T5895] usb 8-1: can't set config #1, error -71
[  869.401192][ T5895] usb 8-1: USB disconnect, device number 2
[  869.507048][ T8710] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  869.533376][ T8710] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  869.542255][T12230] loop7: detected capacity change from 0 to 512
[  869.552693][ T8710] bond0 (unregistering): Released all slaves
[  869.572633][T12230] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2240: inode #15: comm syz.7.1502: corrupted in-inode xattr: invalid ea_ino
[  869.602704][T12230] EXT4-fs error (device loop7): ext4_orphan_get:1394: comm syz.7.1502: couldn't read orphan inode 15 (err -117)
[  869.633634][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  869.640569][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  869.665189][T12230] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  869.699544][T11873] 8021q: adding VLAN 0 to HW filter on device bond0
[  869.752429][ T8710] hsr_slave_0: left promiscuous mode
[  869.758634][ T8710] hsr_slave_1: left promiscuous mode
[  869.768069][ T8710] batman_adv: batadv0: Removing interface: batadv_slave_0
[  870.059243][ T8710] batman_adv: batadv0: Removing interface: batadv_slave_1
[  870.215600][T11000] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  870.367592][ T8710] team0 (unregistering): Port device team_slave_1 removed
[  870.410308][ T8710] team0 (unregistering): Port device team_slave_0 removed
[  873.475281][T12257] openvswitch: netlink: Multiple metadata blocks provided
[  875.124180][T11873] 8021q: adding VLAN 0 to HW filter on device team0
[  875.532626][ T8723] bridge0: port 1(bridge_slave_0) entered blocking state
[  875.539754][ T8723] bridge0: port 1(bridge_slave_0) entered forwarding state
[  875.629873][ T8723] bridge0: port 2(bridge_slave_1) entered blocking state
[  875.637041][ T8723] bridge0: port 2(bridge_slave_1) entered forwarding state
[  875.675356][T12270] loop6: detected capacity change from 0 to 1764
[  875.722624][T12270] iso9660: Bad value for 'gid'
[  875.727415][T12270] iso9660: Bad value for 'gid'
[  876.047270][T12277] trusted_key: encrypted_key: key user:syz not found
[  877.627077][T11873] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  879.387737][T12296] syz_tun: entered allmulticast mode
[  879.397751][T12296] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1517'.
[  879.408399][T12296] IPv6: NLM_F_CREATE should be specified when creating new route
[  879.416246][T12296] netlink: 1 bytes leftover after parsing attributes in process `syz.6.1517'.
[  880.581686][T12297] loop7: detected capacity change from 0 to 64
[  880.784435][T12030] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  880.875902][T12030] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  880.886082][T12305] loop1: detected capacity change from 0 to 512
[  880.912015][T10437] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  880.923018][T10437] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  880.935144][T12030] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  880.947246][T10437] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  880.957904][T10437] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  880.966621][T10437] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  880.974504][T10437] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  880.999120][T12305] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.1521: corrupted in-inode xattr: invalid ea_ino
[  881.073563][T12030] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  881.102526][T12305] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.1521: couldn't read orphan inode 15 (err -117)
[  881.123487][T12305] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  882.296638][T10967] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  882.462078][T12315] loop7: detected capacity change from 0 to 1764
[  882.470810][T12315] iso9660: Bad value for 'gid'
[  882.475974][T12315] iso9660: Bad value for 'gid'
[  883.580705][ T5840] Bluetooth: hci2: command tx timeout
[  883.594247][T12321] loop1: detected capacity change from 0 to 1024
[  883.619372][T12321] EXT4-fs: Ignoring removed orlov option
[  883.840784][T12321] EXT4-fs: inline encryption not supported
[  883.961254][T12321] EXT4-fs (loop1): stripe (7) is not aligned with cluster size (16), stripe is disabled
[  884.056463][T12321] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c01c, mo2=0002]
[  884.083295][T12321] System zones: 0-1, 3-36
[  884.123504][T12321] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  885.351324][T10967] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  885.405250][T12334] loop6: detected capacity change from 0 to 1024
[  885.445117][T12334] EXT4-fs: Ignoring removed oldalloc option
[  885.525111][T12334] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  885.635712][T10437] Bluetooth: hci2: command tx timeout
[  886.237036][T12030] 8021q: adding VLAN 0 to HW filter on device bond0
[  886.670427][T12306] chnl_net:caif_netlink_parms(): no params data found
[  886.742579][T12030] 8021q: adding VLAN 0 to HW filter on device team0
[  886.776917][ T5891] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  886.960071][ T5891] usb 7-1: Using ep0 maxpacket: 16
[  886.967240][ T5891] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  887.013108][T12351] loop3: detected capacity change from 0 to 2048
[  887.020147][ T5891] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  887.029786][T12351] udf: Unknown parameter 'shU'
[  887.315445][   T65] bridge0: port 1(bridge_slave_0) entered blocking state
[  887.322597][   T65] bridge0: port 1(bridge_slave_0) entered forwarding state
[  887.339769][T12355] trusted_key: encrypted_key: key user:syz not found
[  887.341675][ T5891] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  887.361628][   T65] bridge0: port 2(bridge_slave_1) entered blocking state
[  887.368893][   T65] bridge0: port 2(bridge_slave_1) entered forwarding state
[  887.390155][ T5891] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  887.398220][ T5891] usb 7-1: Product: syz
[  887.407387][ T5891] usb 7-1: Manufacturer: syz
[  887.448632][ T5891] usb 7-1: SerialNumber: syz
[  887.745151][T12361] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1532'.
[  887.763517][T10437] Bluetooth: hci2: command tx timeout
[  887.853568][T12357] syz_tun: entered allmulticast mode
[  887.863053][T12361] IPv6: NLM_F_CREATE should be specified when creating new route
[  887.871217][T12361] netlink: 1 bytes leftover after parsing attributes in process `syz.7.1532'.
[  888.195209][T12030] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  888.209575][T12030] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  888.515954][ T5891] usb 7-1: 0:2 : does not exist
[  888.529621][ T5891] usb 7-1: 5:0: failed to get current value for ch 0 (-22)
[  889.133782][T12306] bridge0: port 1(bridge_slave_0) entered blocking state
[  889.154938][T12306] bridge0: port 1(bridge_slave_0) entered disabled state
[  889.178514][T12306] bridge_slave_0: entered allmulticast mode
[  889.259193][T10969] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  889.288344][T12306] bridge_slave_0: entered promiscuous mode
[  889.353215][T12379] loop7: detected capacity change from 0 to 64
[  889.790018][T10437] Bluetooth: hci2: command tx timeout
[  889.870301][T12306] bridge0: port 2(bridge_slave_1) entered blocking state
[  889.877987][T12306] bridge0: port 2(bridge_slave_1) entered disabled state
[  889.930189][T12306] bridge_slave_1: entered allmulticast mode
[  889.950558][ T5891] usb 7-1: USB disconnect, device number 9
[  890.166589][T12306] bridge_slave_1: entered promiscuous mode
[  890.457033][T12306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  890.485163][   T52] bridge_slave_1: left allmulticast mode
[  890.499849][   T52] bridge_slave_1: left promiscuous mode
[  890.521439][   T52] bridge0: port 2(bridge_slave_1) entered disabled state
[  892.040623][   T52] bridge_slave_0: left allmulticast mode
[  892.072258][   T52] bridge_slave_0: left promiscuous mode
[  892.094164][   T52] bridge0: port 1(bridge_slave_0) entered disabled state
[  896.504382][   T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  896.520638][T12415] loop6: detected capacity change from 0 to 1024
[  896.527875][T12415] EXT4-fs: Ignoring removed oldalloc option
[  896.552892][   T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  896.572465][   T52] bond0 (unregistering): Released all slaves
[  896.745150][T12306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  896.762566][T12415] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  896.839503][T12395] netlink: 'syz.7.1540': attribute type 29 has an invalid length.
[  897.132814][ T5841] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  897.143737][   T52] hsr_slave_0: left promiscuous mode
[  897.223434][   T52] hsr_slave_1: left promiscuous mode
[  897.248596][   T52] batman_adv: batadv0: Removing interface: batadv_slave_0
[  897.307741][   T52] batman_adv: batadv0: Removing interface: batadv_slave_1
[  897.380503][ T5841] usb 7-1: Using ep0 maxpacket: 16
[  897.398788][ T5841] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  897.418971][ T5841] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  897.437925][ T5841] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  897.450441][ T5841] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  897.459243][ T5841] usb 7-1: Product: syz
[  897.472813][ T5841] usb 7-1: Manufacturer: syz
[  897.488693][ T5841] usb 7-1: SerialNumber: syz
[  897.977042][ T5841] usb 7-1: 0:2 : does not exist
[  897.989003][ T5841] usb 7-1: 5:0: failed to get current value for ch 0 (-22)
[  898.964717][T10969] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  898.979902][ T5841] usb 7-1: USB disconnect, device number 10
[  899.075787][   T52] team0 (unregistering): Port device team_slave_1 removed
[  899.137014][   T52] team0 (unregistering): Port device team_slave_0 removed
[  899.526645][T12436] loop1: detected capacity change from 0 to 64
[  901.234464][T12306] team0: Port device team_slave_0 added
[  901.797414][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  901.812128][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  901.824536][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  901.832452][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  901.841106][ T5840] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  901.848357][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  902.355816][T12453] trusted_key: encrypted_key: key user:syz not found
[  902.655664][T12306] team0: Port device team_slave_1 added
[  903.990027][ T5840] Bluetooth: hci4: command tx timeout
[  905.630088][T12306] batman_adv: batadv0: Adding interface: batadv_slave_0
[  905.749146][T12306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  905.875020][T12306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  906.034255][ T5840] Bluetooth: hci4: command tx timeout
[  906.270746][T12306] batman_adv: batadv0: Adding interface: batadv_slave_1
[  906.302596][T12306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  906.350655][T12481] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1563'.
[  907.150092][T12306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  908.888279][ T5840] Bluetooth: hci4: command tx timeout
[  909.000696][T12492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1564'.
[  909.977331][T12306] hsr_slave_0: entered promiscuous mode
[  910.004228][T12306] hsr_slave_1: entered promiscuous mode
[  910.036807][T12489] syz_tun: entered allmulticast mode
[  910.042726][T12486] IPv6: NLM_F_CREATE should be specified when creating new route
[  910.050591][T12486] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1564'.
[  911.290142][ T5840] Bluetooth: hci4: command tx timeout
[  912.517026][T12505] hub 9-0:1.0: USB hub found
[  912.523418][T12505] hub 9-0:1.0: 1 port detected
[  913.056139][T12513] trusted_key: encrypted_key: key user:syz not found
[  913.065739][ T5999] usb 7-1: new full-speed USB device number 11 using dummy_hcd
[  913.654414][ T5999] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  913.876797][ T5999] usb 7-1: config 0 has no interfaces?
[  913.929334][ T5999] usb 7-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[  913.940457][T12518] loop1: detected capacity change from 0 to 16
[  913.949411][ T5999] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  913.957766][ T5999] usb 7-1: Product: syz
[  913.965224][ T5999] usb 7-1: Manufacturer: syz
[  913.976621][ T5999] usb 7-1: SerialNumber: syz
[  913.999574][T12518] erofs (device loop1): mounted with root inode @ nid 36.
[  914.009056][ T5999] usb 7-1: config 0 descriptor??
[  914.322336][T12520] erofs (device loop1): readahead error at folio 12 @ nid 36
[  914.330042][T12520] erofs (device loop1): readahead error at folio 10 @ nid 36
[  914.338183][T12520] erofs (device loop1): readahead error at folio 6 @ nid 36
[  914.345726][T12520] erofs (device loop1): readahead error at folio 4 @ nid 36
[  914.353882][T12520] erofs (device loop1): invalid logical cluster 0 at nid 36
[  914.361264][T12520] erofs (device loop1): readahead error at folio 0 @ nid 36
[  914.368964][T12520] syz.1.1572: attempt to access beyond end of device
[  914.368964][T12520] loop1: rw=524288, sector=296, nr_sectors = 16 limit=16
[  914.383148][T12520] syz.1.1572: attempt to access beyond end of device
[  914.383148][T12520] loop1: rw=524288, sector=1049264, nr_sectors = 16 limit=16
[  914.397609][T12520] syz.1.1572: attempt to access beyond end of device
[  914.397609][T12520] loop1: rw=524288, sector=6520, nr_sectors = 16 limit=16
[  914.411998][T12520] syz.1.1572: attempt to access beyond end of device
[  914.411998][T12520] loop1: rw=524288, sector=34359736328, nr_sectors = 16 limit=16
[  914.426925][T12520] syz.1.1572: attempt to access beyond end of device
[  914.426925][T12520] loop1: rw=524288, sector=8, nr_sectors = 16 limit=16
[  914.483932][T12520] syz.1.1572: attempt to access beyond end of device
[  914.483932][T12520] loop1: rw=524288, sector=720, nr_sectors = 16 limit=16
[  914.498216][T12520] syz.1.1572: attempt to access beyond end of device
[  914.498216][T12520] loop1: rw=524288, sector=536576856, nr_sectors = 16 limit=16
[  914.580552][T12520] syz.1.1572: attempt to access beyond end of device
[  914.580552][T12520] loop1: rw=0, sector=14546590680, nr_sectors = 16 limit=16
[  914.594793][T12520] erofs (device loop1): read error -5 @ 43 of nid 36
[  915.041369][T12520] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address
[  915.052281][T12520] bond0: (slave ip6tnl0): Error -95 calling set_mac_address
[  915.217656][T12448] chnl_net:caif_netlink_parms(): no params data found
[  915.774613][T12535] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1566'.
[  915.928791][T12448] bridge0: port 1(bridge_slave_0) entered blocking state
[  916.620471][T12448] bridge0: port 1(bridge_slave_0) entered disabled state
[  916.627740][T12448] bridge_slave_0: entered allmulticast mode
[  916.635875][T12448] bridge_slave_0: entered promiscuous mode
[  916.650767][T12448] bridge0: port 2(bridge_slave_1) entered blocking state
[  916.657854][T12448] bridge0: port 2(bridge_slave_1) entered disabled state
[  916.666258][T12448] bridge_slave_1: entered allmulticast mode
[  916.752217][T12448] bridge_slave_1: entered promiscuous mode
[  916.862451][ T5896] usb 7-1: USB disconnect, device number 11
[  916.900335][T12540] loop1: detected capacity change from 0 to 1024
[  916.977329][T12540] EXT4-fs (loop1): first meta block group too large: 50331648 (group descriptor block count 1)
[  917.097173][   T52] bridge_slave_1: left allmulticast mode
[  917.147694][   T52] bridge_slave_1: left promiscuous mode
[  917.189436][   T52] bridge0: port 2(bridge_slave_1) entered disabled state
[  917.291673][   T52] bridge_slave_0: left allmulticast mode
[  917.292258][T12543] loop7: detected capacity change from 0 to 512
[  917.303724][   T52] bridge_slave_0: left promiscuous mode
[  917.304047][   T52] bridge0: port 1(bridge_slave_0) entered disabled state
[  918.293011][T12543] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2240: inode #15: comm syz.7.1578: corrupted in-inode xattr: invalid ea_ino
[  918.381767][T12543] EXT4-fs error (device loop7): ext4_orphan_get:1394: comm syz.7.1578: couldn't read orphan inode 15 (err -117)
[  918.609655][T12543] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  919.621771][   T29] audit: type=1804 audit(1741382395.706:70): pid=12558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.1578" name="/newroot/64/file0/file0/bus" dev="loop7" ino=18 res=1 errno=0
[  920.351468][   T29] audit: type=1804 audit(1741382396.466:71): pid=12565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.1578" name="/newroot/64/file0/file0/bus" dev="loop7" ino=18 res=1 errno=0
[  921.776014][T12572] trusted_key: encrypted_key: key user:syz not found
[  922.759196][T12576] loop1: detected capacity change from 0 to 256
[  922.875649][T12576] FAT-fs (loop1): Directory bread(block 64) failed
[  922.888782][T12576] FAT-fs (loop1): Directory bread(block 65) failed
[  922.889129][   T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  922.902023][T12576] FAT-fs (loop1): Directory bread(block 66) failed
[  922.918822][T12576] FAT-fs (loop1): Directory bread(block 67) failed
[  922.927250][T12576] FAT-fs (loop1): Directory bread(block 68) failed
[  922.937271][   T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  922.948108][T12576] FAT-fs (loop1): Directory bread(block 69) failed
[  922.955295][T12576] FAT-fs (loop1): Directory bread(block 70) failed
[  922.955644][T11000] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  922.962056][T12576] FAT-fs (loop1): Directory bread(block 71) failed
[  922.962161][T12576] FAT-fs (loop1): Directory bread(block 72) failed
[  922.962200][T12576] FAT-fs (loop1): Directory bread(block 73) failed
[  922.986994][   T52] bond0 (unregistering): Released all slaves
[  923.046176][T12448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  923.080635][T12448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  923.311534][   T52] hsr_slave_0: left promiscuous mode
[  923.324889][   T52] hsr_slave_1: left promiscuous mode
[  923.332105][   T52] batman_adv: batadv0: Removing interface: batadv_slave_0
[  923.340232][   T52] batman_adv: batadv0: Removing interface: batadv_slave_1
[  925.058987][T12586] loop7: detected capacity change from 0 to 1764
[  925.066391][T12586] iso9660: Bad value for 'gid'
[  925.071404][T12586] iso9660: Bad value for 'gid'
[  925.421209][T12591] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1588'.
[  925.445780][ T5840] Bluetooth: hci1: link tx timeout
[  925.451310][ T5840] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  926.317201][   T52] team0 (unregistering): Port device team_slave_1 removed
[  926.356925][T12594] loop1: detected capacity change from 0 to 256
[  926.389918][   T52] team0 (unregistering): Port device team_slave_0 removed
[  926.521744][T12594] FAT-fs (loop1): Directory bread(block 64) failed
[  926.528312][T12594] FAT-fs (loop1): Directory bread(block 65) failed
[  926.541304][T12594] FAT-fs (loop1): Directory bread(block 66) failed
[  926.556393][T12594] FAT-fs (loop1): Directory bread(block 67) failed
[  926.565061][T12594] FAT-fs (loop1): Directory bread(block 68) failed
[  926.581088][T12594] FAT-fs (loop1): Directory bread(block 69) failed
[  926.596322][T12594] FAT-fs (loop1): Directory bread(block 70) failed
[  926.615738][T12594] FAT-fs (loop1): Directory bread(block 71) failed
[  926.624183][T12594] FAT-fs (loop1): Directory bread(block 72) failed
[  926.662499][T12594] FAT-fs (loop1): Directory bread(block 73) failed
[  927.541729][T12448] team0: Port device team_slave_0 added
[  927.593854][T12448] team0: Port device team_slave_1 added
[  927.631618][ T5840] Bluetooth: hci1: command 0x0406 tx timeout
[  928.291728][T12448] batman_adv: batadv0: Adding interface: batadv_slave_0
[  928.299057][T12448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  928.396976][T12448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  928.439223][T12448] batman_adv: batadv0: Adding interface: batadv_slave_1
[  928.483776][T12448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  928.516935][T12448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  928.832344][T12614] loop6: detected capacity change from 0 to 128
[  931.559601][T12306] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  931.600866][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  931.607460][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  932.572830][T12448] hsr_slave_0: entered promiscuous mode
[  932.579263][T12448] hsr_slave_1: entered promiscuous mode
[  932.591242][T12448] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  932.598817][T12448] Cannot create hsr debugfs directory
[  932.604533][T12306] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  932.909857][T12629] openvswitch: netlink: Multiple metadata blocks provided
[  932.974381][T12306] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  933.146981][T12306] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  933.935612][T12639] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1603'.
[  937.146638][T12656] loop7: detected capacity change from 0 to 128
[  941.741954][T12448] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  943.966493][T12448] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  945.256281][T12448] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  945.364748][T12448] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  945.409089][T12701] loop7: detected capacity change from 0 to 1764
[  945.692240][T10437] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  945.705050][T10437] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  946.516221][T10437] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  946.778268][T10437] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  946.803466][T10437] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  946.813166][T10437] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  948.029585][T12717] loop1: detected capacity change from 0 to 128
[  949.202379][T10437] Bluetooth: hci0: command tx timeout
[  950.214459][ T5891] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[  950.365844][T12733] hub 9-0:1.0: USB hub found
[  950.371548][T12733] hub 9-0:1.0: 1 port detected
[  950.418070][ T5891] usb 4-1: config 0 has an invalid interface number: 133 but max is 0
[  950.557222][ T5891] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  950.778724][ T5891] usb 4-1: config 0 has no interface number 0
[  951.240940][T10437] Bluetooth: hci0: command tx timeout
[  951.300014][ T5891] usb 4-1: config 0 interface 133 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  951.331864][ T5891] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[  951.349973][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  951.358100][ T5891] usb 4-1: Product: syz
[  951.367737][ T5891] usb 4-1: Manufacturer: syz
[  951.389218][ T5891] usb 4-1: SerialNumber: syz
[  951.452563][ T5891] usb 4-1: config 0 descriptor??
[  951.971677][ T5891] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected
[  952.000880][ T5891] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 82
[  952.030896][ T5891] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81
[  952.039004][ T5891] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1
[  952.077399][ T5891] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2
[  952.117138][ T5891] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  952.228703][   T46] usb 4-1: USB disconnect, device number 9
[  952.241973][   T46] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  952.251886][   T46] keyspan 4-1:0.133: device disconnected
[  952.555396][T12448] 8021q: adding VLAN 0 to HW filter on device bond0
[  952.650308][T12750] loop7: detected capacity change from 0 to 128
[  953.328853][T10437] Bluetooth: hci0: command tx timeout
[  953.603019][T12448] 8021q: adding VLAN 0 to HW filter on device team0
[  953.644339][   T65] bridge0: port 1(bridge_slave_0) entered blocking state
[  953.651498][   T65] bridge0: port 1(bridge_slave_0) entered forwarding state
[  953.932015][  T794] bridge0: port 2(bridge_slave_1) entered blocking state
[  953.939149][  T794] bridge0: port 2(bridge_slave_1) entered forwarding state
[  955.916290][T10437] Bluetooth: hci0: command tx timeout
[  956.744738][ T8723] bridge_slave_1: left allmulticast mode
[  956.760376][ T8723] bridge_slave_1: left promiscuous mode
[  956.766094][ T8723] bridge0: port 2(bridge_slave_1) entered disabled state
[  956.802974][ T8723] bridge_slave_0: left allmulticast mode
[  956.808648][ T8723] bridge_slave_0: left promiscuous mode
[  956.822104][ T8723] bridge0: port 1(bridge_slave_0) entered disabled state
[  957.216376][T12782] loop3: detected capacity change from 0 to 128
[  959.374530][ T8723] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  959.390375][T12789] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1643'.
[  959.403045][ T8723] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  959.431607][ T8723] bond0 (unregistering): Released all slaves
[  959.491296][T12448] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  959.725796][T12448] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  960.639219][T12705] chnl_net:caif_netlink_parms(): no params data found
[  961.360682][ T8723] hsr_slave_0: left promiscuous mode
[  961.610528][ T8723] hsr_slave_1: left promiscuous mode
[  962.206950][ T8723] batman_adv: batadv0: Removing interface: batadv_slave_0
[  962.268373][ T8723] batman_adv: batadv0: Removing interface: batadv_slave_1
[  962.555600][T12809] evm: overlay not supported
[  964.644444][ T8723] team0 (unregistering): Port device team_slave_1 removed
[  964.763366][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  964.786542][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  964.809607][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  965.035313][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  965.046346][ T5840] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  965.055336][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  965.658678][ T8723] team0 (unregistering): Port device team_slave_0 removed
[  967.151584][ T5840] Bluetooth: hci2: command tx timeout
[  968.512084][T12705] bridge0: port 1(bridge_slave_0) entered blocking state
[  968.519328][T12705] bridge0: port 1(bridge_slave_0) entered disabled state
[  968.542049][T12705] bridge_slave_0: entered allmulticast mode
[  968.549400][T12705] bridge_slave_0: entered promiscuous mode
[  968.576182][T12705] bridge0: port 2(bridge_slave_1) entered blocking state
[  968.592165][T12705] bridge0: port 2(bridge_slave_1) entered disabled state
[  968.609599][T12705] bridge_slave_1: entered allmulticast mode
[  968.679004][T12705] bridge_slave_1: entered promiscuous mode
[  969.230030][ T5840] Bluetooth: hci2: command tx timeout
[  969.302795][T12705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  969.342604][T12705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  969.780372][T12874] loop3: detected capacity change from 0 to 128
[  969.917515][T12705] team0: Port device team_slave_0 added
[  970.179588][T12705] team0: Port device team_slave_1 added
[  970.885056][T12705] batman_adv: batadv0: Adding interface: batadv_slave_0
[  970.940337][T12705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  970.940382][T12705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  970.943902][T12705] batman_adv: batadv0: Adding interface: batadv_slave_1
[  970.943917][T12705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  970.943942][T12705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  971.016443][    C0] vkms_vblank_simulate: vblank timer overrun
[  971.620059][ T5840] Bluetooth: hci2: command tx timeout
[  972.935640][T12705] hsr_slave_0: entered promiscuous mode
[  972.991894][T12705] hsr_slave_1: entered promiscuous mode
[  974.030158][T10437] Bluetooth: hci2: command tx timeout
[  974.038210][T12902] hub 9-0:1.0: USB hub found
[  974.043100][T12902] hub 9-0:1.0: 1 port detected
[  974.207109][T12822] chnl_net:caif_netlink_parms(): no params data found
[  974.468837][ T6563] Bluetooth: (null): Too short H5 packet
[  975.339321][ T6563] Bluetooth: (null): Invalid header checksum
[  975.364241][ T6563] Bluetooth: (null): Invalid header checksum
[  975.749060][T12822] bridge0: port 1(bridge_slave_0) entered blocking state
[  976.584820][T12822] bridge0: port 1(bridge_slave_0) entered disabled state
[  976.595839][T12822] bridge_slave_0: entered allmulticast mode
[  976.608579][T12822] bridge_slave_0: entered promiscuous mode
[  976.641311][T12822] bridge0: port 2(bridge_slave_1) entered blocking state
[  976.740135][T12822] bridge0: port 2(bridge_slave_1) entered disabled state
[  976.747357][T12822] bridge_slave_1: entered allmulticast mode
[  976.761041][T12822] bridge_slave_1: entered promiscuous mode
[  976.807019][T12822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  977.291922][T12822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  977.385876][T12822] team0: Port device team_slave_0 added
[  977.406664][ T8723] bridge_slave_1: left allmulticast mode
[  977.428901][ T8723] bridge_slave_1: left promiscuous mode
[  977.446963][ T8723] bridge0: port 2(bridge_slave_1) entered disabled state
[  977.521496][ T8723] bridge_slave_0: left allmulticast mode
[  977.527456][ T8723] bridge_slave_0: left promiscuous mode
[  977.552769][ T8723] bridge0: port 1(bridge_slave_0) entered disabled state
[  977.599356][T12922] loop3: detected capacity change from 0 to 1764
[  977.618901][T12922] iso9660: Bad value for 'gid'
[  977.650352][T12922] iso9660: Bad value for 'gid'
[  980.760802][ T8723] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  980.779703][ T8723] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  980.799645][ T8723] bond0 (unregistering): Released all slaves
[  980.881918][T12822] team0: Port device team_slave_1 added
[  981.577349][ T8723] hsr_slave_0: left promiscuous mode
[  981.601410][ T8723] hsr_slave_1: left promiscuous mode
[  981.607252][ T8723] batman_adv: batadv0: Removing interface: batadv_slave_0
[  981.669453][ T8723] batman_adv: batadv0: Removing interface: batadv_slave_1
[  983.607056][ T8723] team0 (unregistering): Port device team_slave_1 removed
[  983.649861][ T8723] team0 (unregistering): Port device team_slave_0 removed
[  984.477324][T12822] batman_adv: batadv0: Adding interface: batadv_slave_0
[  984.532624][T12822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  984.569150][T12822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  984.593719][T12822] batman_adv: batadv0: Adding interface: batadv_slave_1
[  984.620054][T12822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  984.720661][T12822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  985.151982][T12822] hsr_slave_0: entered promiscuous mode
[  985.172905][T12822] hsr_slave_1: entered promiscuous mode
[  985.183714][T12822] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  985.344670][T12822] Cannot create hsr debugfs directory
[  986.195736][T12705] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  986.701887][T12705] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  987.767390][T12705] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  987.837102][T12705] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  989.028634][T12705] 8021q: adding VLAN 0 to HW filter on device bond0
[  989.041261][T12990] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1696'.
[  989.089418][T12705] 8021q: adding VLAN 0 to HW filter on device team0
[  989.163186][ T3006] bridge0: port 1(bridge_slave_0) entered blocking state
[  989.170340][ T3006] bridge0: port 1(bridge_slave_0) entered forwarding state
[  989.189421][ T3006] bridge0: port 2(bridge_slave_1) entered blocking state
[  989.196551][ T3006] bridge0: port 2(bridge_slave_1) entered forwarding state
[  991.199192][T12822] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  991.734550][T12822] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  992.006375][T13013] loop7: detected capacity change from 0 to 40427
[  992.023239][T13013] F2FS-fs (loop7): build fault injection attr: rate: 771, type: 0x1fffff
[  992.033001][T13013] F2FS-fs (loop7): invalid crc value
[  992.060836][T12822] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  992.076415][T13013] F2FS-fs (loop7): Found nat_bits in checkpoint
[  992.122417][T13013] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  992.316021][T12822] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  992.424379][T12705] 8021q: adding VLAN 0 to HW filter on device batadv0
[  992.488446][T13025] F2FS-fs (loop7): inject checkpoint error in f2fs_balance_fs of f2fs_write_single_data_page+0x12ed/0x1bd0
[  992.514236][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  992.540087][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  992.657533][T13025] syz.7.1702: attempt to access beyond end of device
[  992.657533][T13025] loop7: rw=2049, sector=53248, nr_sectors = 88 limit=40427
[  992.717972][T12822] 8021q: adding VLAN 0 to HW filter on device bond0
[  992.756161][T13025] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  992.782201][T12822] 8021q: adding VLAN 0 to HW filter on device team0
[  992.811120][T13025] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  992.841846][   T65] bridge0: port 1(bridge_slave_0) entered blocking state
[  992.848995][   T65] bridge0: port 1(bridge_slave_0) entered forwarding state
[  992.934876][T13025] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  992.957867][ T3006] bridge0: port 2(bridge_slave_1) entered blocking state
[  992.965040][ T3006] bridge0: port 2(bridge_slave_1) entered forwarding state
[  992.995844][T13025] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  993.003628][T13025] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  993.010775][T13025] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  993.018964][T13025] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  993.025953][T13025] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  993.033313][T13025] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  993.040486][T13025] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  993.047609][T13025] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  993.056864][T13025] F2FS-fs (loop7): Stopped filesystem due to reason: 1
[  993.067188][T13029] loop6: detected capacity change from 0 to 4096
[  994.067464][T12822] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  994.089197][T12822] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  994.471884][T12705] veth0_vlan: entered promiscuous mode
[  994.577844][T12705] veth1_vlan: entered promiscuous mode
[  995.104062][T12705] veth0_macvtap: entered promiscuous mode
[  995.173511][T12705] veth1_macvtap: entered promiscuous mode
[  995.237762][T12705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  995.310330][T12705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  995.323142][T12705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  995.339627][T13057] loop1: detected capacity change from 0 to 512
[  995.346324][T12705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  995.536706][ T2978] Bluetooth: (null): Invalid header checksum
[  995.613564][T13057] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.1710: corrupted in-inode xattr: invalid ea_ino
[  995.632524][ T2978] Bluetooth: (null): Invalid header checksum
[  995.704159][ T2978] Bluetooth: (null): Invalid header checksum
[  995.774827][ T2978] Bluetooth: (null): Invalid header checksum
[  995.792625][T13057] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.1710: couldn't read orphan inode 15 (err -117)
[  995.873700][ T2978] Bluetooth: (null): Invalid header checksum
[  995.973554][ T3006] Bluetooth: (null): Invalid header checksum
[  996.027298][T13057] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  996.145383][T12705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  996.155919][T12705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  996.166871][T12705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  996.177367][T12705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  996.450375][T12705] batman_adv: batadv0: Interface activated: batadv_slave_0
[  996.473273][T12705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  996.484317][T12705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  996.495767][T12705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  996.506633][T12705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  996.517062][T12705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  996.530119][T12705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  997.015891][T12705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  997.027419][   T29] audit: type=1804 audit(1741382473.146:72): pid=13062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1710" name="/newroot/115/file0/file0/bus" dev="loop1" ino=18 res=1 errno=0
[  997.030420][T12705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  997.086869][T12705] batman_adv: batadv0: Interface activated: batadv_slave_1
[  997.096965][   T29] audit: type=1804 audit(1741382473.166:73): pid=13062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1710" name="/newroot/115/file0/file0/bus" dev="loop1" ino=18 res=1 errno=0
[  997.167352][T12705] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  997.214619][T12705] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  997.264929][T12705] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  997.300748][T12705] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  997.356098][T10967] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  997.394983][T12822] 8021q: adding VLAN 0 to HW filter on device batadv0
[  997.980764][ T3006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  998.808700][ T3006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  999.626525][ T5993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  999.655217][ T5993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  999.725586][T13081] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1715'.
[ 1001.066854][T12822] veth0_vlan: entered promiscuous mode
[ 1001.363229][T12822] veth1_vlan: entered promiscuous mode
[ 1001.912806][T12822] veth0_macvtap: entered promiscuous mode
[ 1001.938158][T12822] veth1_macvtap: entered promiscuous mode
[ 1001.977034][T12822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1002.090850][T12822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1002.126656][T12822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1002.186541][T12822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1002.248328][T12822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1002.459365][T12822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1002.469483][T12822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1002.488315][T12822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1002.498592][T12822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1002.574908][T13110] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1722'.
[ 1003.804927][T12822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1004.031262][T12822] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1004.287111][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1004.297679][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1004.350298][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1004.515499][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1004.687198][ T5840] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1004.699236][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1004.761175][T12822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1004.813546][T12822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1004.823822][T12822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1004.840079][T12822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1004.880147][T12822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1004.922104][T12822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1004.971583][T12822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1005.012399][T12822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1005.047998][T12822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1005.100042][T12822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1005.127850][T12822] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1005.261544][  T794] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1005.323025][T12822] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1005.362635][T12822] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1005.390554][T12822] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1005.399480][T12822] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1005.494408][  T794] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1006.786184][  T794] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1007.084535][ T5840] Bluetooth: hci0: command tx timeout
[ 1007.456564][  T794] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1007.611467][ T6563] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1007.619332][ T6563] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1007.698526][T13133] loop3: detected capacity change from 0 to 4096
[ 1007.760594][ T6563] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1007.768471][ T6563] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1007.837392][T13116] chnl_net:caif_netlink_parms(): no params data found
[ 1009.094881][  T794] bridge_slave_1: left allmulticast mode
[ 1009.150765][ T5840] Bluetooth: hci0: command tx timeout
[ 1009.301857][  T794] bridge_slave_1: left promiscuous mode
[ 1009.310409][  T794] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1009.536198][T13153] loop1: detected capacity change from 0 to 64
[ 1010.226948][  T794] bridge_slave_0: left allmulticast mode
[ 1010.277247][  T794] bridge_slave_0: left promiscuous mode
[ 1010.310247][  T794] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1011.313661][T10437] Bluetooth: hci0: command tx timeout
[ 1012.213832][T13165] loop6: detected capacity change from 0 to 64
[ 1012.300047][ T5999] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[ 1012.357362][T13167] loop1: detected capacity change from 0 to 4096
[ 1012.470261][ T5999] usb 4-1: Using ep0 maxpacket: 8
[ 1012.504476][ T5999] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 56832, setting to 1024
[ 1012.529036][ T5999] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024
[ 1012.550256][ T5999] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1012.560682][ T5999] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1012.582456][ T5999] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1012.630701][ T5999] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1012.824933][T13170] loop6: detected capacity change from 0 to 4096
[ 1012.862982][ T5999] usb 4-1: GET_CAPABILITIES returned 0
[ 1012.868509][ T5999] usbtmc 4-1:16.0: can't read capabilities
[ 1012.967516][  T794] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1012.979460][  T794] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1013.004658][  T794] bond0 (unregistering): Released all slaves
[ 1013.552470][T10437] Bluetooth: hci0: command tx timeout
[ 1015.513854][T13116] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1015.541230][T13116] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1015.544529][ T5894] usb 4-1: USB disconnect, device number 10
[ 1015.583746][T13116] bridge_slave_0: entered allmulticast mode
[ 1015.604971][T13116] bridge_slave_0: entered promiscuous mode
[ 1016.904766][T13116] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1016.930170][T13116] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1017.737315][T13116] bridge_slave_1: entered allmulticast mode
[ 1017.761818][T13116] bridge_slave_1: entered promiscuous mode
[ 1017.982860][  T794] hsr_slave_0: left promiscuous mode
[ 1017.995237][  T794] hsr_slave_1: left promiscuous mode
[ 1018.024095][  T794] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1018.032177][  T794] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1018.056150][  T794] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1018.070152][  T794] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1018.139677][  T794] veth1_macvtap: left promiscuous mode
[ 1018.149123][  T794] veth0_macvtap: left promiscuous mode
[ 1018.159898][T13219] loop1: detected capacity change from 0 to 64
[ 1018.164912][  T794] veth1_vlan: left promiscuous mode
[ 1018.173882][  T794] veth0_vlan: left promiscuous mode
[ 1018.838294][  T794] team0 (unregistering): Port device team_slave_1 removed
[ 1018.999014][  T794] team0 (unregistering): Port device team_slave_0 removed
[ 1019.230084][ T5894] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[ 1019.426112][T13229] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1750'.
[ 1020.250087][ T5894] usb 4-1: Using ep0 maxpacket: 8
[ 1020.270920][ T5894] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 56832, setting to 1024
[ 1020.282274][ T5894] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024
[ 1020.292414][ T5894] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1020.413949][ T5894] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1020.427836][ T5894] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1020.441791][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1020.754600][ T5894] usb 4-1: GET_CAPABILITIES returned 0
[ 1020.865177][T13236] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1751'.
[ 1021.653820][ T5894] usbtmc 4-1:16.0: can't read capabilities
[ 1023.526155][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1023.549578][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1023.558905][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1023.579018][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1023.593362][ T5840] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1023.600754][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1024.067370][ T5891] usb 4-1: USB disconnect, device number 11
[ 1025.630141][T10437] Bluetooth: hci2: command tx timeout
[ 1026.903956][T13116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1026.915216][T13116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1027.770456][T10437] Bluetooth: hci2: command tx timeout
[ 1028.377800][T13116] team0: Port device team_slave_0 added
[ 1028.753913][T13273] usb usb1: usbfs: process 13273 (syz.7.1757) did not claim interface 0 before use
[ 1029.412365][T13116] team0: Port device team_slave_1 added
[ 1029.860117][T10437] Bluetooth: hci2: command tx timeout
[ 1030.198881][T13267] loop1: detected capacity change from 0 to 4096
[ 1030.280484][T13116] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1030.300017][T13116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1030.325910][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1030.509263][T13116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1030.642347][T13116] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1030.653232][T13116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1030.679128][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1031.184642][T13116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1032.123185][T10437] Bluetooth: hci2: command tx timeout
[ 1032.123892][T13293] loop7: detected capacity change from 0 to 1764
[ 1032.159876][T13293] iso9660: Bad value for 'gid'
[ 1032.185630][T13293] iso9660: Bad value for 'gid'
[ 1032.922903][T13116] hsr_slave_0: entered promiscuous mode
[ 1033.101083][T13116] hsr_slave_1: entered promiscuous mode
[ 1033.290282][T10437] Bluetooth: hci1: ACL packet for unknown connection handle 201
[ 1034.689832][T13240] chnl_net:caif_netlink_parms(): no params data found
[ 1036.213198][  T794] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1037.476836][  T794] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1037.684076][T13339] loop3: detected capacity change from 0 to 256
[ 1037.907229][T13339] FAT-fs (loop3): Directory bread(block 64) failed
[ 1037.930927][T13339] FAT-fs (loop3): Directory bread(block 65) failed
[ 1038.300778][T13339] FAT-fs (loop3): Directory bread(block 66) failed
[ 1038.334003][T13339] FAT-fs (loop3): Directory bread(block 67) failed
[ 1038.352764][T13339] FAT-fs (loop3): Directory bread(block 68) failed
[ 1038.370351][T13339] FAT-fs (loop3): Directory bread(block 69) failed
[ 1038.377069][T13339] FAT-fs (loop3): Directory bread(block 70) failed
[ 1038.391112][T13339] FAT-fs (loop3): Directory bread(block 71) failed
[ 1038.406728][T13339] FAT-fs (loop3): Directory bread(block 72) failed
[ 1038.414744][T13339] FAT-fs (loop3): Directory bread(block 73) failed
[ 1038.419284][  T794] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1038.450441][T13240] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1038.457683][T13240] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1038.465058][T13240] bridge_slave_0: entered allmulticast mode
[ 1038.472352][T13240] bridge_slave_0: entered promiscuous mode
[ 1039.134782][T13240] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1039.156995][T13240] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1039.175974][T13240] bridge_slave_1: entered allmulticast mode
[ 1039.188574][T13240] bridge_slave_1: entered promiscuous mode
[ 1039.361112][  T794] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1039.908274][T13361] hub 9-0:1.0: USB hub found
[ 1039.920201][T13361] hub 9-0:1.0: 1 port detected
[ 1040.802477][T13240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1040.835068][T13240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1042.622666][T13240] team0: Port device team_slave_0 added
[ 1042.716058][T13240] team0: Port device team_slave_1 added
[ 1042.943129][T13376] loop7: detected capacity change from 0 to 1024
[ 1042.989015][T13376] EXT4-fs: Ignoring removed orlov option
[ 1043.015635][T13376] EXT4-fs: inline encryption not supported
[ 1043.023600][T13376] EXT4-fs (loop7): stripe (7) is not aligned with cluster size (16), stripe is disabled
[ 1043.033335][T13240] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1043.033355][T13240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1043.033392][T13240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1043.035225][T13240] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1043.208670][T13376] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c01c, mo2=0002]
[ 1043.312711][T13376] System zones: 0-1, 3-36
[ 1043.565622][T13376] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1043.863236][T13240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1043.889173][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1043.897539][T13240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1043.948402][T11000] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1043.999249][  T794] bridge_slave_1: left allmulticast mode
[ 1044.010008][  T794] bridge_slave_1: left promiscuous mode
[ 1044.015791][  T794] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1044.029062][T13386] netlink: 'syz.6.1788': attribute type 4 has an invalid length.
[ 1044.063175][  T794] bridge_slave_0: left allmulticast mode
[ 1044.068840][  T794] bridge_slave_0: left promiscuous mode
[ 1044.079105][  T794] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1046.224892][  T794] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1046.251906][  T794] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1046.268326][  T794] bond0 (unregistering): Released all slaves
[ 1046.322407][T13240] hsr_slave_0: entered promiscuous mode
[ 1046.351142][T13240] hsr_slave_1: entered promiscuous mode
[ 1046.358871][T13240] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1046.385980][T13240] Cannot create hsr debugfs directory
[ 1046.432162][ T5841] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[ 1046.500445][ T5841] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1047.235586][T13116] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1047.769493][T13116] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1047.830617][T13116] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1047.866431][T13116] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1047.961965][  T794] hsr_slave_0: left promiscuous mode
[ 1047.984504][  T794] hsr_slave_1: left promiscuous mode
[ 1048.000884][  T794] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1048.010010][  T794] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1048.085882][  T794] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1048.141892][  T794] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1048.261172][  T794] veth1_macvtap: left promiscuous mode
[ 1048.269664][  T794] veth0_macvtap: left promiscuous mode
[ 1048.275540][  T794] veth1_vlan: left promiscuous mode
[ 1048.284901][  T794] veth0_vlan: left promiscuous mode
[ 1048.368036][T13422] loop1: detected capacity change from 0 to 128
[ 1051.027394][T13435] loop3: detected capacity change from 0 to 128
[ 1052.459035][T13446] loop3: detected capacity change from 0 to 64
[ 1052.488875][T13446] capability: warning: `syz.3.1807' uses 32-bit capabilities (legacy support in use)
[ 1053.294623][  T794] team0 (unregistering): Port device team_slave_1 removed
[ 1053.335705][  T794] team0 (unregistering): Port device team_slave_0 removed
[ 1053.520051][ T5841] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[ 1053.690128][ T5841] usb 8-1: Using ep0 maxpacket: 8
[ 1053.702902][ T5841] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 56832, setting to 1024
[ 1053.726167][ T5841] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024
[ 1053.737554][ T5841] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1053.758152][ T5841] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1053.800440][ T5841] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1053.858545][ T5841] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1053.952849][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[ 1053.959228][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[ 1054.306318][T13116] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1054.335015][ T5841] usb 8-1: GET_CAPABILITIES returned 0
[ 1054.373470][ T5841] usbtmc 8-1:16.0: can't read capabilities
[ 1054.880796][T13468] loop6: detected capacity change from 0 to 128
[ 1055.817266][T13116] 8021q: adding VLAN 0 to HW filter on device team0
[ 1056.154343][ T6554] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1056.161505][ T6554] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1056.737340][ T6554] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1056.744505][ T6554] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1057.220876][ T5895] usb 8-1: USB disconnect, device number 3
[ 1058.893446][T13494] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1820'.
[ 1059.017263][T13496] loop3: detected capacity change from 0 to 256
[ 1059.381857][T13240] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1059.981691][T13240] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1060.089607][T13502] loop6: detected capacity change from 0 to 64
[ 1060.225198][T13240] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1060.612897][T13240] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1060.858699][ T5895] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[ 1061.115581][T13240] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1061.142244][T13240] 8021q: adding VLAN 0 to HW filter on device team0
[ 1062.111592][ T6563] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1062.118717][ T6563] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1062.173671][ T5895] usb 8-1: Using ep0 maxpacket: 8
[ 1063.836424][ T6563] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1063.843590][ T6563] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1064.186582][T13240] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1064.360213][T13240] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1064.370255][ T5895] usb 8-1: device descriptor read/all, error -71
[ 1064.659603][T13522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1827'.
[ 1064.777264][T13523] loop1: detected capacity change from 0 to 256
[ 1066.930494][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1066.939806][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1066.949382][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1066.971550][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1066.979089][ T5840] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1066.986787][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1067.122447][ T5895] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[ 1067.228725][T13545] loop3: detected capacity change from 0 to 47
[ 1067.343191][ T5895] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1067.390131][ T5895] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1067.399803][ T5895] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1067.976629][ T5895] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 1067.986132][ T5895] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1067.996095][ T5895] usb 8-1: Product: syz
[ 1068.000411][ T5895] usb 8-1: Manufacturer: syz
[ 1068.010064][ T5895] usb 8-1: SerialNumber: syz
[ 1068.063477][T13240] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1068.228141][ T5895] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[ 1068.436540][T13528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1068.451966][T13528] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1068.574867][ T6563] bridge_slave_1: left allmulticast mode
[ 1068.581848][T13528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1068.596929][ T6563] bridge_slave_1: left promiscuous mode
[ 1068.600264][T13528] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1068.607194][ T6563] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1068.691437][ T6563] bridge_slave_0: left allmulticast mode
[ 1068.704802][ T6563] bridge_slave_0: left promiscuous mode
[ 1068.705095][ T5943] usb 8-1: USB disconnect, device number 5
[ 1068.742795][ T5943] usblp0: removed
[ 1068.752478][ T6563] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1069.029632][T13570] loop1: detected capacity change from 0 to 47
[ 1069.260219][ T5840] Bluetooth: hci0: command tx timeout
[ 1069.580113][T13573] loop6: detected capacity change from 0 to 64
[ 1071.290634][T13585] usb usb1: usbfs: process 13585 (syz.7.1840) did not claim interface 0 before use
[ 1071.319609][ T5840] Bluetooth: hci0: command tx timeout
[ 1073.195098][T13593] loop7: detected capacity change from 0 to 512
[ 1073.380333][T13593] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2240: inode #15: comm syz.7.1844: corrupted in-inode xattr: invalid ea_ino
[ 1073.393941][ T5840] Bluetooth: hci0: command tx timeout
[ 1073.440172][T13593] EXT4-fs error (device loop7): ext4_orphan_get:1394: comm syz.7.1844: couldn't read orphan inode 15 (err -117)
[ 1073.491254][T13593] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1075.480132][ T5840] Bluetooth: hci0: command tx timeout
[ 1075.482735][T11000] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1075.949401][T13611] ubi: mtd0 is already attached to ubi31
[ 1076.050837][ T6563] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1076.129186][T13617] hub 9-0:1.0: USB hub found
[ 1076.134751][T13617] hub 9-0:1.0: 1 port detected
[ 1076.177340][ T6563] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1076.289435][ T6563] bond0 (unregistering): Released all slaves
[ 1076.938452][T13539] chnl_net:caif_netlink_parms(): no params data found
[ 1077.561701][ T9849] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[ 1077.720105][ T9849] usb 8-1: Using ep0 maxpacket: 8
[ 1077.747119][ T9849] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 56832, setting to 1024
[ 1077.773526][ T6563] hsr_slave_0: left promiscuous mode
[ 1077.789007][ T6563] hsr_slave_1: left promiscuous mode
[ 1077.806030][ T9849] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024
[ 1077.827023][ T6563] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1079.027541][ T9849] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1079.370561][ T6563] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1079.402990][ T9849] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1079.452499][ T9849] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1079.475891][ T9849] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1079.492995][ T9849] usb 8-1: can't set config #16, error -71
[ 1079.505941][ T9849] usb 8-1: USB disconnect, device number 6
[ 1079.666760][ T6563] team0 (unregistering): Port device team_slave_1 removed
[ 1079.716036][ T6563] team0 (unregistering): Port device team_slave_0 removed
[ 1080.093043][T13539] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1080.100383][T13539] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1080.107607][T13539] bridge_slave_0: entered allmulticast mode
[ 1080.116791][T13539] bridge_slave_0: entered promiscuous mode
[ 1080.126858][T13539] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1080.141024][T13539] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1080.149418][T13539] bridge_slave_1: entered allmulticast mode
[ 1080.165005][T13539] bridge_slave_1: entered promiscuous mode
[ 1080.238716][T13539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1080.281205][T13539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1080.371527][T13539] team0: Port device team_slave_0 added
[ 1080.383206][T13539] team0: Port device team_slave_1 added
[ 1080.411392][T13539] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1080.418361][T13539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1080.445525][T13539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1080.473492][T13539] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1080.480764][T13539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1080.507639][T13539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1080.547510][T13539] hsr_slave_0: entered promiscuous mode
[ 1080.554130][T13539] hsr_slave_1: entered promiscuous mode
[ 1082.120236][ T5999] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[ 1082.302343][ T5896] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[ 1082.306716][ T5999] usb 2-1: Using ep0 maxpacket: 8
[ 1082.430398][ T5999] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 56832, setting to 1024
[ 1082.450354][ T5999] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024
[ 1082.491239][ T5999] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1082.518941][ T5999] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1082.537467][ T5999] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1082.540038][ T5896] usb 4-1: Using ep0 maxpacket: 8
[ 1082.558169][ T5999] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1082.584816][ T5896] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 56832, setting to 1024
[ 1082.607545][ T5896] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024
[ 1082.636942][ T5896] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1082.658052][ T5896] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1082.658203][T10437] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1082.682877][T10437] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1082.690877][ T5896] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1082.701157][T10437] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1082.715694][T10437] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1082.730021][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1082.738279][T10437] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1082.749036][T10437] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1082.795403][T13665] loop7: detected capacity change from 0 to 4096
[ 1082.810757][ T5999] usb 2-1: GET_CAPABILITIES returned 0
[ 1082.816334][ T5999] usbtmc 2-1:16.0: can't read capabilities
[ 1084.841783][ T5896] usb 4-1: usb_control_msg returned -71
[ 1084.843480][ T5840] Bluetooth: hci2: command tx timeout
[ 1084.984032][ T5896] usbtmc 4-1:16.0: can't read capabilities
[ 1085.022714][ T5896] usb 4-1: USB disconnect, device number 12
[ 1085.246132][ T5895] usb 2-1: USB disconnect, device number 18
[ 1086.344892][T13686] loop1: detected capacity change from 0 to 128
[ 1086.910116][ T5840] Bluetooth: hci2: command tx timeout
[ 1088.583267][ T5993] bridge_slave_1: left allmulticast mode
[ 1088.588933][ T5993] bridge_slave_1: left promiscuous mode
[ 1089.051228][ T5840] Bluetooth: hci2: command tx timeout
[ 1089.067322][T13696] loop3: detected capacity change from 0 to 1024
[ 1089.081994][ T5993] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1089.082683][T13696] EXT4-fs: Ignoring removed oldalloc option
[ 1089.116812][ T5993] bridge_slave_0: left allmulticast mode
[ 1089.123984][ T5993] bridge_slave_0: left promiscuous mode
[ 1089.356577][T13696] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1089.380572][ T5993] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1090.480055][ T9849] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[ 1090.658446][T13708] loop6: detected capacity change from 0 to 1024
[ 1090.681730][ T9849] usb 4-1: Using ep0 maxpacket: 16
[ 1090.699368][ T9849] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1090.727040][T13708] EXT4-fs: Ignoring removed orlov option
[ 1090.736487][ T9849] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1090.748490][T13708] EXT4-fs: inline encryption not supported
[ 1090.762450][ T9849] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1090.787982][ T9849] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1090.817757][T13708] EXT4-fs (loop6): stripe (7) is not aligned with cluster size (16), stripe is disabled
[ 1090.861239][ T9849] usb 4-1: Product: syz
[ 1090.992543][T13708] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c01c, mo2=0002]
[ 1091.080073][ T5840] Bluetooth: hci2: command tx timeout
[ 1091.814330][ T9849] usb 4-1: Manufacturer: syz
[ 1091.818975][ T9849] usb 4-1: SerialNumber: syz
[ 1091.841578][T13708] System zones: 0-1, 3-36
[ 1091.849018][T13708] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1091.909395][ T9849] usb 4-1: can't set config #1, error -71
[ 1091.916169][ T9849] usb 4-1: USB disconnect, device number 13
[ 1091.927270][ T9610] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1092.041829][T10969] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1093.342153][ T5993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1093.386978][ T5993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1093.419639][ T5993] bond0 (unregistering): Released all slaves
[ 1093.691024][T13721] loop6: detected capacity change from 0 to 1024
[ 1093.697953][T13721] EXT4-fs: Ignoring removed bh option
[ 1093.920343][T13721] EXT4-fs: inline encryption not supported
[ 1093.957900][T13721] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[ 1094.034220][ T5993] hsr_slave_0: left promiscuous mode
[ 1094.055544][ T5993] hsr_slave_1: left promiscuous mode
[ 1094.066132][ T5993] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1094.106400][T13721] EXT4-fs error (device loop6): ext4_map_blocks:671: inode #3: block 2: comm syz.6.1878: lblock 2 mapped to illegal pblock 2 (length 1)
[ 1094.180463][ T5993] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1094.228589][T13721] Quota error (device loop6): qtree_write_dquot: dquota write failed
[ 1094.542571][T13738] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1879'.
[ 1095.149260][T13721] EXT4-fs error (device loop6): ext4_map_blocks:671: inode #3: block 48: comm syz.6.1878: lblock 0 mapped to illegal pblock 48 (length 1)
[ 1095.238662][T13721] Quota error (device loop6): v2_write_file_info: Can't write info structure
[ 1095.281519][T13721] EXT4-fs error (device loop6): ext4_acquire_dquot:6927: comm syz.6.1878: Failed to acquire dquot type 0
[ 1095.322173][T13721] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5838: Corrupt filesystem
[ 1095.351678][T13721] EXT4-fs error (device loop6): ext4_evict_inode:256: inode #11: comm syz.6.1878: mark_inode_dirty error
[ 1095.376608][T13721] EXT4-fs warning (device loop6): ext4_evict_inode:259: couldn't mark inode dirty (err -117)
[ 1095.398071][T13721] EXT4-fs (loop6): 1 orphan inode deleted
[ 1095.409552][T13721] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1095.430378][ T8723] EXT4-fs error (device loop6): ext4_map_blocks:671: inode #3: block 1: comm kworker/u8:27: lblock 1 mapped to illegal pblock 1 (length 1)
[ 1095.458729][ T8723] Quota error (device loop6): remove_tree: Can't read quota data block 1
[ 1095.470570][ T8723] EXT4-fs error (device loop6): ext4_release_dquot:6950: comm kworker/u8:27: Failed to release dquot type 0
[ 1095.599165][T10969] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1095.634549][T10969] EXT4-fs error (device loop6): __ext4_get_inode_loc:4435: comm syz-executor: Invalid inode table block 1 in block_group 0
[ 1095.666627][T10969] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5838: Corrupt filesystem
[ 1095.686564][T10969] EXT4-fs error (device loop6): ext4_quota_off:7194: inode #3: comm syz-executor: mark_inode_dirty error
[ 1096.023716][T13746] loop3: detected capacity change from 0 to 1024
[ 1096.447175][T13746] EXT4-fs (loop3): first meta block group too large: 50331648 (group descriptor block count 1)
[ 1096.619336][T13752] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1883'.
[ 1096.664062][ T5993] team0 (unregistering): Port device team_slave_1 removed
[ 1097.624902][ T5993] team0 (unregistering): Port device team_slave_0 removed
[ 1098.031540][T13759] loop3: detected capacity change from 0 to 1024
[ 1098.043161][T13759] EXT4-fs: Ignoring removed oldalloc option
[ 1098.161745][T13759] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1099.250109][ T5896] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[ 1099.411346][ T5896] usb 4-1: Using ep0 maxpacket: 16
[ 1099.418553][ T5896] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1099.452339][ T5896] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1099.592789][T13661] chnl_net:caif_netlink_parms(): no params data found
[ 1099.730860][ T5896] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1099.751196][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1099.759236][ T5896] usb 4-1: Product: syz
[ 1099.763612][ T5896] usb 4-1: Manufacturer: syz
[ 1099.768286][ T5896] usb 4-1: SerialNumber: syz
[ 1099.825780][T13749] vlan2: entered promiscuous mode
[ 1099.851243][T13749] bridge0: entered promiscuous mode
[ 1099.859862][T13749] vlan2: entered allmulticast mode
[ 1099.865322][T13749] bridge0: entered allmulticast mode
[ 1099.950360][T13752] bridge_slave_1: left allmulticast mode
[ 1099.966292][T13752] bridge_slave_1: left promiscuous mode
[ 1099.972455][T13752] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1099.983941][T13752] bridge_slave_0: left allmulticast mode
[ 1099.989618][T13752] bridge_slave_0: left promiscuous mode
[ 1100.105690][T13752] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1100.321529][T13752] bridge0: left allmulticast mode
[ 1100.367340][T13752] bridge0: left promiscuous mode
[ 1101.051006][ T5896] usb 4-1: 0:2 : does not exist
[ 1101.053621][ T9610] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1101.055921][ T5896] usb 4-1: unit 18 not found!
[ 1102.038936][ T5896] usb 4-1: USB disconnect, device number 14
[ 1102.658386][T13785] syzkaller0: entered allmulticast mode
[ 1102.842717][T13661] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1102.849897][T13661] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1102.861333][T13661] bridge_slave_0: entered allmulticast mode
[ 1102.868756][T13661] bridge_slave_0: entered promiscuous mode
[ 1102.877865][T13661] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1102.885476][T13661] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1102.902865][T13661] bridge_slave_1: entered allmulticast mode
[ 1102.915299][T13661] bridge_slave_1: entered promiscuous mode
[ 1103.102218][T13539] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1103.127791][T13661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1103.141400][T13539] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1103.155759][T13539] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1103.186706][T13661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1103.222649][T13539] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1103.984072][T13661] team0: Port device team_slave_0 added
[ 1104.219577][T13816] loop7: detected capacity change from 0 to 512
[ 1104.223131][T13661] team0: Port device team_slave_1 added
[ 1104.232127][T13816] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[ 1104.310446][T13820] ieee802154 phy0 wpan0: encryption failed: -22
[ 1104.444164][T13815] loop6: detected capacity change from 0 to 1024
[ 1104.479069][T13816] EXT4-fs (loop7): 1 truncate cleaned up
[ 1105.071483][T13815] EXT4-fs (loop6): first meta block group too large: 50331648 (group descriptor block count 1)
[ 1105.083063][T13816] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1105.122455][   T29] audit: type=1800 audit(1741382581.236:74): pid=13816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1899" name="bus" dev="loop7" ino=18 res=0 errno=0
[ 1105.900936][T13831] openvswitch: netlink: Actions may not be safe on all matching packets
[ 1106.400837][ T5840] Bluetooth: hci1: Received unexpected HCI Event 0x00
[ 1107.085622][T13833] loop1: detected capacity change from 0 to 64
[ 1107.393698][T11000] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1107.728122][T13661] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1107.772595][T13661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1107.806371][T13835] loop3: detected capacity change from 0 to 1024
[ 1107.872013][T13661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1107.910097][T13835] EXT4-fs: Ignoring removed oldalloc option
[ 1107.916623][T13661] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1107.930153][T13661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1107.964962][T13661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1108.011932][T13835] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1108.083096][T13539] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1109.125674][T13847] loop7: detected capacity change from 0 to 128
[ 1109.190155][ T5999] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[ 1109.218390][T13661] hsr_slave_0: entered promiscuous mode
[ 1109.690193][ T5999] usb 4-1: Using ep0 maxpacket: 16
[ 1109.701899][ T5999] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1110.178783][T13661] hsr_slave_1: entered promiscuous mode
[ 1110.185028][T13661] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1110.193031][T13661] Cannot create hsr debugfs directory
[ 1110.205598][T13539] 8021q: adding VLAN 0 to HW filter on device team0
[ 1110.269419][T13853] loop6: detected capacity change from 0 to 512
[ 1110.298016][ T5993] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1110.305156][ T5993] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1110.313820][T13853] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[ 1110.326636][ T5993] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1110.333761][ T5993] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1110.385215][T13853] EXT4-fs (loop6): 1 truncate cleaned up
[ 1110.392354][T13853] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1110.431344][ T5999] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1110.449755][ T5999] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1110.466804][ T5999] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1110.477662][ T5999] usb 4-1: Product: syz
[ 1110.489410][ T5999] usb 4-1: Manufacturer: syz
[ 1110.494150][ T5999] usb 4-1: SerialNumber: syz
[ 1110.513309][ T5999] usb 4-1: can't set config #1, error -71
[ 1110.534716][ T9610] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1110.586666][   T29] audit: type=1800 audit(1741382586.676:75): pid=13853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1908" name="bus" dev="loop6" ino=18 res=0 errno=0
[ 1110.770338][ T5999] usb 4-1: USB disconnect, device number 15
[ 1110.789751][T13857] loop7: detected capacity change from 0 to 512
[ 1110.902895][T13863] loop1: detected capacity change from 0 to 128
[ 1111.586013][T10437] Bluetooth: hci6: Received unexpected HCI Event 0x00
[ 1111.593455][T13857] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2240: inode #15: comm syz.7.1909: corrupted in-inode xattr: invalid ea_ino
[ 1111.853485][T13857] EXT4-fs error (device loop7): ext4_orphan_get:1394: comm syz.7.1909: couldn't read orphan inode 15 (err -117)
[ 1112.074746][T10969] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1112.113045][T13857] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1114.462243][T11000] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1115.206646][T13884] !€ÿ: renamed from bond_slave_0 (while UP)
[ 1115.394566][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[ 1115.400961][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[ 1116.537326][T13539] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1116.642703][T13894] loop6: detected capacity change from 0 to 64
[ 1118.398472][T13902] syz_tun (unregistering): left allmulticast mode
[ 1118.589067][T13661] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1118.634151][T13661] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1118.706281][T13661] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1118.725134][T13910] loop3: detected capacity change from 0 to 1024
[ 1118.737070][T13661] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1118.747610][T13910] EXT4-fs: Ignoring removed oldalloc option
[ 1118.859528][T13910] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1119.984013][ T5891] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[ 1120.124484][T13661] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1120.140185][ T5891] usb 4-1: Using ep0 maxpacket: 16
[ 1120.141829][ T5891] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1120.141858][ T5891] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1120.143696][ T5891] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1120.143729][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1120.143755][ T5891] usb 4-1: Product: syz
[ 1120.143776][ T5891] usb 4-1: Manufacturer: syz
[ 1120.143796][ T5891] usb 4-1: SerialNumber: syz
[ 1120.519250][T13661] 8021q: adding VLAN 0 to HW filter on device team0
[ 1121.341184][T13923] ------------[ cut here ]------------
[ 1121.341369][T13923] WARNING: CPU: 0 PID: 13923 at drivers/gpu/drm/vkms/vkms_crtc.c:98 vkms_get_vblank_timestamp+0x183/0x1b0
[ 1121.341486][T13923] Modules linked in:
[ 1121.341561][T13923] CPU: 0 UID: 0 PID: 13923 Comm: syz.1.1923 Not tainted 6.14.0-rc5-syzkaller-00137-g00a7d39898c8 #0
[ 1121.341660][T13923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1121.341699][T13923] RIP: 0010:vkms_get_vblank_timestamp+0x183/0x1b0
[ 1121.341750][T13923] Code: 42 80 3c 30 00 74 08 48 89 ef e8 98 84 f7 fb 48 89 5d 00 b0 01 5b 41 5c 41 5d 41 5e 41 5f 5d e9 9e ba de fa e8 3e 48 90 fb 90 <0f> 0b 90 eb e4 89 d9 80 e1 07 38 c1 0f 8c cd fe ff ff 48 89 df e8
[ 1121.341840][T13923] RSP: 0018:ffffc90003cfef08 EFLAGS: 00010283
[ 1121.341891][T13923] RAX: ffffffff86318672 RBX: 0000010513250ad8 RCX: 0000000000080000
[ 1121.341930][T13923] RDX: ffffc9000ca39000 RSI: 0000000000002e4e RDI: 0000000000002e4f
[ 1121.342019][T13923] RBP: ffffc90003cff0a0 R08: ffffffff863185df R09: 1ffff1100f5269a2
[ 1121.342062][T13923] R10: dffffc0000000000 R11: ffffffff863184f0 R12: 0000010513250ad8
[ 1121.342103][T13923] R13: ffff888141f2b950 R14: 1ffff9200079fe14 R15: ffff888024ba0000
[ 1121.342195][T13923] FS:  00007f5619fed6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
[ 1121.342241][T13923] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1121.342331][T13923] CR2: 00007ffd9c333e00 CR3: 000000007e602000 CR4: 0000000000350ef0
[ 1121.342375][T13923] Call Trace:
[ 1121.342409][T13923]  <TASK>
[ 1121.342495][T13923]  ? __warn+0x165/0x4d0
[ 1121.342558][T13923]  ? vkms_get_vblank_timestamp+0x183/0x1b0
[ 1121.342679][T13923]  ? report_bug+0x2b3/0x500
[ 1121.342737][T13923]  ? vkms_get_vblank_timestamp+0x183/0x1b0
[ 1121.342864][T13923]  ? handle_bug+0x60/0x90
[ 1121.342975][T13923]  ? exc_invalid_op+0x1a/0x50
[ 1121.343038][T13923]  ? asm_exc_invalid_op+0x1a/0x20
[ 1121.343170][T13923]  ? __pfx_vkms_get_vblank_timestamp+0x10/0x10
[ 1121.343222][T13923]  ? vkms_get_vblank_timestamp+0xef/0x1b0
[ 1121.343323][T13923]  ? vkms_get_vblank_timestamp+0x182/0x1b0
[ 1121.343378][T13923]  ? vkms_get_vblank_timestamp+0x183/0x1b0
[ 1121.343504][T13923]  ? vkms_get_vblank_timestamp+0x182/0x1b0
[ 1121.343555][T13923]  ? __pfx_vkms_get_vblank_timestamp+0x10/0x10
[ 1121.343656][T13923]  drm_crtc_next_vblank_start+0x22b/0x490
[ 1121.343725][T13923]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1121.343840][T13923]  ? mark_lock+0x9a/0x360
[ 1121.343894][T13923]  ? __pfx_drm_crtc_next_vblank_start+0x10/0x10
[ 1121.344007][T13923]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 1121.344076][T13923]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 1121.344195][T13923]  drm_atomic_helper_wait_for_fences+0x277/0x8e0
[ 1121.344336][T13923]  ? __pfx_drm_atomic_helper_wait_for_fences+0x10/0x10
[ 1121.344396][T13923]  ? __pfx_vkms_prepare_fb+0x10/0x10
[ 1121.344497][T13923]  drm_atomic_helper_commit+0x53a/0x9f0
[ 1121.344533][T13923]  ? __pfx_drm_atomic_helper_commit+0x10/0x10
[ 1121.344569][T13923]  drm_atomic_commit+0x296/0x2f0
[ 1121.344623][T13923]  ? irqentry_exit+0x63/0x90
[ 1121.344687][T13923]  ? __pfx_drm_atomic_commit+0x10/0x10
[ 1121.344716][T13923]  ? __pfx___drm_printfn_info+0x10/0x10
[ 1121.344795][T13923]  ? drm_client_modeset_commit_atomic+0x46d/0x7d0
[ 1121.344859][T13923]  ? drm_client_modeset_commit_atomic+0x63f/0x7d0
[ 1121.344938][T13923]  drm_client_modeset_commit_atomic+0x670/0x7d0
[ 1121.344992][T13923]  ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10
[ 1121.345079][T13923]  ? trace_contention_end+0x3c/0x120
[ 1121.345155][T13923]  drm_client_modeset_commit_locked+0xe0/0x520
[ 1121.345282][T13923]  drm_fb_helper_pan_display+0x3e8/0xc20
[ 1121.345451][T13923]  fb_pan_display+0x3a5/0x680
[ 1121.345501][T13923]  ? __pfx_drm_fb_helper_pan_display+0x10/0x10
[ 1121.345633][T13923]  fb_set_var+0x872/0xf50
[ 1121.345764][T13923]  ? __pfx_fb_set_var+0x10/0x10
[ 1121.345924][T13923]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1121.345988][T13923]  ? validate_chain+0x11e/0x5920
[ 1121.346084][T13923]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1121.346223][T13923]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1121.346292][T13923]  ? arch_stack_walk+0xfd/0x150
[ 1121.346418][T13923]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1121.346532][T13923]  ? validate_chain+0x11e/0x5920
[ 1121.346589][T13923]  ? __pfx_validate_chain+0x10/0x10
[ 1121.346638][T13923]  ? stack_trace_save+0x118/0x1d0
[ 1121.346766][T13923]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1121.346830][T13923]  ? fb_find_best_mode+0x2b8/0x300
[ 1121.346929][T13923]  ? fbcon_resize+0x915/0x1940
[ 1121.346986][T13923]  fbcon_resize+0xc96/0x1940
[ 1121.347264][T13923]  ? __pfx_fbcon_resize+0x10/0x10
[ 1121.347423][T13923]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1121.347536][T13923]  ? __lock_acquire+0x1397/0x2100
[ 1121.347611][T13923]  ? __pfx_fbcon_resize+0x10/0x10
[ 1121.347736][T13923]  vc_do_resize+0x2ba/0x1850
[ 1121.347806][T13923]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1121.347952][T13923]  ? __pfx_lock_acquire+0x10/0x10
[ 1121.348091][T13923]  ? lockdep_hardirqs_on+0x99/0x150
[ 1121.348151][T13923]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1121.348269][T13923]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 1121.348328][T13923]  ? __pfx_vc_do_resize+0x10/0x10
[ 1121.348473][T13923]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1121.348613][T13923]  vt_resize+0x82/0xc0
[ 1121.348662][T13923]  ? __pfx_vt_resize+0x10/0x10
[ 1121.348765][T13923]  tiocswinsz+0x121/0x170
[ 1121.348821][T13923]  ? __pfx_tiocswinsz+0x10/0x10
[ 1121.348918][T13923]  ? __rcu_read_unlock+0xa1/0x110
[ 1121.348979][T13923]  ? __fget_files+0x2a/0x410
[ 1121.349113][T13923]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1121.349250][T13923]  ? __fget_files+0x2a/0x410
[ 1121.349322][T13923]  tty_ioctl+0x21d/0xdc0
[ 1121.349419][T13923]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1121.349483][T13923]  ? __pfx_tty_ioctl+0x10/0x10
[ 1121.349605][T13923]  __se_sys_ioctl+0xf7/0x170
[ 1121.349661][T13923]  do_syscall_64+0xf3/0x230
[ 1121.349772][T13923]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1121.349840][T13923]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1121.349993][T13923] RIP: 0033:0x7f561918d169
[ 1121.350037][T13923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1121.350129][T13923] RSP: 002b:00007f5619fed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1121.350205][T13923] RAX: ffffffffffffffda RBX: 00007f56193a6080 RCX: 00007f561918d169
[ 1121.350327][T13923] RDX: 0000400000000040 RSI: 0000000000005414 RDI: 0000000000000004
[ 1121.350370][T13923] RBP: 00007f561920e2a0 R08: 0000000000000000 R09: 0000000000000000
[ 1121.350410][T13923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1121.350497][T13923] R13: 0000000000000000 R14: 00007f56193a6080 R15: 00007ffc5c4fb328
[ 1121.350581][T13923]  </TASK>
[ 1121.350666][T13923] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1121.350683][T13923] CPU: 0 UID: 0 PID: 13923 Comm: syz.1.1923 Not tainted 6.14.0-rc5-syzkaller-00137-g00a7d39898c8 #0
[ 1121.350713][T13923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1121.350730][T13923] Call Trace:
[ 1121.350741][T13923]  <TASK>
[ 1121.350753][T13923]  dump_stack_lvl+0x241/0x360
[ 1121.350791][T13923]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1121.350821][T13923]  ? __pfx__printk+0x10/0x10
[ 1121.350845][T13923]  ? _printk+0xd5/0x120
[ 1121.350873][T13923]  ? __init_begin+0x41000/0x41000
[ 1121.350905][T13923]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1121.350946][T13923]  ? vscnprintf+0x5d/0x90
[ 1121.350981][T13923]  panic+0x349/0x880
[ 1121.351009][T13923]  ? __warn+0x174/0x4d0
[ 1121.351051][T13923]  ? __pfx_panic+0x10/0x10
[ 1121.351103][T13923]  __warn+0x344/0x4d0
[ 1121.351143][T13923]  ? vkms_get_vblank_timestamp+0x183/0x1b0
[ 1121.351176][T13923]  report_bug+0x2b3/0x500
[ 1121.351209][T13923]  ? vkms_get_vblank_timestamp+0x183/0x1b0
[ 1121.351245][T13923]  handle_bug+0x60/0x90
[ 1121.351290][T13923]  exc_invalid_op+0x1a/0x50
[ 1121.351332][T13923]  asm_exc_invalid_op+0x1a/0x20
[ 1121.351368][T13923] RIP: 0010:vkms_get_vblank_timestamp+0x183/0x1b0
[ 1121.351398][T13923] Code: 42 80 3c 30 00 74 08 48 89 ef e8 98 84 f7 fb 48 89 5d 00 b0 01 5b 41 5c 41 5d 41 5e 41 5f 5d e9 9e ba de fa e8 3e 48 90 fb 90 <0f> 0b 90 eb e4 89 d9 80 e1 07 38 c1 0f 8c cd fe ff ff 48 89 df e8
[ 1121.351421][T13923] RSP: 0018:ffffc90003cfef08 EFLAGS: 00010283
[ 1121.351446][T13923] RAX: ffffffff86318672 RBX: 0000010513250ad8 RCX: 0000000000080000
[ 1121.351467][T13923] RDX: ffffc9000ca39000 RSI: 0000000000002e4e RDI: 0000000000002e4f
[ 1121.351486][T13923] RBP: ffffc90003cff0a0 R08: ffffffff863185df R09: 1ffff1100f5269a2
[ 1121.351507][T13923] R10: dffffc0000000000 R11: ffffffff863184f0 R12: 0000010513250ad8
[ 1121.351529][T13923] R13: ffff888141f2b950 R14: 1ffff9200079fe14 R15: ffff888024ba0000
[ 1121.351557][T13923]  ? __pfx_vkms_get_vblank_timestamp+0x10/0x10
[ 1121.351587][T13923]  ? vkms_get_vblank_timestamp+0xef/0x1b0
[ 1121.351614][T13923]  ? vkms_get_vblank_timestamp+0x182/0x1b0
[ 1121.351650][T13923]  ? vkms_get_vblank_timestamp+0x182/0x1b0
[ 1121.351679][T13923]  ? __pfx_vkms_get_vblank_timestamp+0x10/0x10
[ 1121.351710][T13923]  drm_crtc_next_vblank_start+0x22b/0x490
[ 1121.351754][T13923]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1121.351796][T13923]  ? mark_lock+0x9a/0x360
[ 1121.351827][T13923]  ? __pfx_drm_crtc_next_vblank_start+0x10/0x10
[ 1121.351870][T13923]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 1121.351916][T13923]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 1121.351964][T13923]  drm_atomic_helper_wait_for_fences+0x277/0x8e0
[ 1121.352006][T13923]  ? __pfx_drm_atomic_helper_wait_for_fences+0x10/0x10
[ 1121.352037][T13923]  ? __pfx_vkms_prepare_fb+0x10/0x10
[ 1121.352090][T13923]  drm_atomic_helper_commit+0x53a/0x9f0
[ 1121.352123][T13923]  ? __pfx_drm_atomic_helper_commit+0x10/0x10
[ 1121.352157][T13923]  drm_atomic_commit+0x296/0x2f0
[ 1121.352182][T13923]  ? irqentry_exit+0x63/0x90
[ 1121.352222][T13923]  ? __pfx_drm_atomic_commit+0x10/0x10
[ 1121.352249][T13923]  ? __pfx___drm_printfn_info+0x10/0x10
[ 1121.352302][T13923]  ? drm_client_modeset_commit_atomic+0x46d/0x7d0
[ 1121.352340][T13923]  ? drm_client_modeset_commit_atomic+0x63f/0x7d0
[ 1121.352388][T13923]  drm_client_modeset_commit_atomic+0x670/0x7d0
[ 1121.352438][T13923]  ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10
[ 1121.352475][T13923]  ? trace_contention_end+0x3c/0x120
[ 1121.352547][T13923]  drm_client_modeset_commit_locked+0xe0/0x520
[ 1121.352592][T13923]  drm_fb_helper_pan_display+0x3e8/0xc20
[ 1121.352640][T13923]  fb_pan_display+0x3a5/0x680
[ 1121.352666][T13923]  ? __pfx_drm_fb_helper_pan_display+0x10/0x10
[ 1121.352704][T13923]  fb_set_var+0x872/0xf50
[ 1121.352746][T13923]  ? __pfx_fb_set_var+0x10/0x10
[ 1121.352793][T13923]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1121.352834][T13923]  ? validate_chain+0x11e/0x5920
[ 1121.352863][T13923]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1121.352909][T13923]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1121.352950][T13923]  ? arch_stack_walk+0xfd/0x150
[ 1121.352984][T13923]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1121.353025][T13923]  ? validate_chain+0x11e/0x5920
[ 1121.353058][T13923]  ? __pfx_validate_chain+0x10/0x10
[ 1121.353087][T13923]  ? stack_trace_save+0x118/0x1d0
[ 1121.353124][T13923]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1121.353165][T13923]  ? fb_find_best_mode+0x2b8/0x300
[ 1121.353214][T13923]  ? fbcon_resize+0x915/0x1940
[ 1121.353247][T13923]  fbcon_resize+0xc96/0x1940
[ 1121.353322][T13923]  ? __pfx_fbcon_resize+0x10/0x10
[ 1121.353367][T13923]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1121.353409][T13923]  ? __lock_acquire+0x1397/0x2100
[ 1121.353464][T13923]  ? __pfx_fbcon_resize+0x10/0x10
[ 1121.353494][T13923]  vc_do_resize+0x2ba/0x1850
[ 1121.353541][T13923]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1121.353593][T13923]  ? __pfx_lock_acquire+0x10/0x10
[ 1121.353638][T13923]  ? lockdep_hardirqs_on+0x99/0x150
[ 1121.353676][T13923]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1121.353717][T13923]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 1121.353751][T13923]  ? __pfx_vc_do_resize+0x10/0x10
[ 1121.353803][T13923]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1121.353850][T13923]  vt_resize+0x82/0xc0
[ 1121.353877][T13923]  ? __pfx_vt_resize+0x10/0x10
[ 1121.353908][T13923]  tiocswinsz+0x121/0x170
[ 1121.353940][T13923]  ? __pfx_tiocswinsz+0x10/0x10
[ 1121.353968][T13923]  ? __rcu_read_unlock+0xa1/0x110
[ 1121.354005][T13923]  ? __fget_files+0x2a/0x410
[ 1121.354045][T13923]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1121.354089][T13923]  ? __fget_files+0x2a/0x410
[ 1121.354131][T13923]  tty_ioctl+0x21d/0xdc0
[ 1121.354157][T13923]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1121.354198][T13923]  ? __pfx_tty_ioctl+0x10/0x10
[ 1121.354228][T13923]  __se_sys_ioctl+0xf7/0x170
[ 1121.354265][T13923]  do_syscall_64+0xf3/0x230
[ 1121.354304][T13923]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1121.354350][T13923]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1121.354387][T13923] RIP: 0033:0x7f561918d169
[ 1121.354408][T13923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1121.354432][T13923] RSP: 002b:00007f5619fed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1121.354460][T13923] RAX: ffffffffffffffda RBX: 00007f56193a6080 RCX: 00007f561918d169
[ 1121.354481][T13923] RDX: 0000400000000040 RSI: 0000000000005414 RDI: 0000000000000004
[ 1121.354500][T13923] RBP: 00007f561920e2a0 R08: 0000000000000000 R09: 0000000000000000
[ 1121.354518][T13923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1121.354536][T13923] R13: 0000000000000000 R14: 00007f56193a6080 R15: 00007ffc5c4fb328
[ 1121.354576][T13923]  </TASK>
[ 1121.354848][T13923] Kernel Offset: disabled