last executing test programs:

11m8.116394265s ago: executing program 32 (id=2557):
r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000001400), 0x101)
r1 = epoll_create(0xff9)
open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r2, &(0x7f0000000200)={0x2020, 0x0, <r3=>0x0}, 0x2020)
open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x50)
write$FUSE_INIT(r2, &(0x7f0000002300)={0x50, 0x0, r3, {0x7, 0x9, 0x0, 0x1030002}}, 0x50)
read$FUSE(r2, &(0x7f00000065c0)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r2, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r4}, 0x10)
r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0)
dup3(r5, r2, 0x0)
close(0x3)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x2})

8m47.375604081s ago: executing program 33 (id=2965):
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x8, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0)
r0 = socket(0x840000000002, 0x3, 0xff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6)
connect$inet(r0, &(0x7f0000000540)={0x2, 0x4e60, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10)
sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94)

7m8.627752448s ago: executing program 34 (id=3178):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
openat$urandom(0xffffffffffffff9c, 0x0, 0x103902, 0x0)
r2 = dup(r0)
setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000100)='wg2\x00', 0x4)
write$cgroup_subtree(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\a\x00'], 0xfe33)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc25c4110, 0x0)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
syz_open_procfs(0xffffffffffffffff, 0x0)
r3 = syz_open_procfs(0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0)
timer_create(0x3, 0x0, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000f80)={0x18, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x2, @in={0x2, 0x0, @broadcast}}}, 0x90)
mq_notify(r3, &(0x7f0000000180)={0x0, 0x1e, 0x1})
ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r5, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect)
r6 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@gettaction={0x24, 0x5a, 0x1, 0x70bd2c, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}]}, 0x24}}, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa2f428100350008050107053d61229978f3cd01ff85c85fe7cc863128f08385b01c63a659d8e4244cdcb049523d5238c8a479738d89fb4674b4ee091a2fd0020495932a157cf4f692ac44e73b6b10fb3207d1485814d0f3305cade72d9137c2eb8ed17a194976a25fdb8e41b663f66491b94adb6af399eb680f29189d08aff2af668c4bf323e7ea1ec9ac2955f10faa07c5b7569b6e29965cbdd89fc294bd75c7e0fec46bfef04cbede96ea2f025a78570124ce481d72d258b7c8d4936e9a85bb6cb1aa8fbf98bc965e8a5b0f7504332ef83a6a967167a4efdff964aa41664d200131131d"], 0x0)
syz_usb_connect(0x2, 0x52, &(0x7f0000000140)=ANY=[@ANYBLOB="120100036ffa680863070120ff2c0102030109024000021109400c0904080601ff8bbd020a240107000d020102052405039909"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0})

4m46.379891493s ago: executing program 7 (id=3479):
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x841, 0x1)
r0 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108)
socket(0x2, 0x2, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00')
preadv(r5, &(0x7f0000000e80)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0x5f, 0x0)

4m42.782493228s ago: executing program 7 (id=3485):
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000080)=0x7)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = timerfd_create(0x7, 0x0)
timerfd_gettime(r3, &(0x7f0000000000))

4m41.630440803s ago: executing program 7 (id=3488):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/85})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)

4m40.606402361s ago: executing program 7 (id=3491):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000080)=0x7)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
syz_pidfd_open(0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x24040010)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e8, 0x0, 0xc8, 0x8, 0x128, 0x5803, 0x218, 0x2e8, 0x2e8, 0x218, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'batadv0\x00', 'wlan0\x00'}, 0x0, 0x108, 0x128, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@socket1={{0x28}, 0x4c}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348)

4m38.961207615s ago: executing program 7 (id=3498):
r0 = getpgrp(0x0)
openat$rtc(0xffffffffffffff9c, 0x0, 0x182800, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00')
read$FUSE(r4, &(0x7f0000004dc0)={0x2020}, 0x2020)

4m37.30013258s ago: executing program 7 (id=3500):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0x55ce29afe10411a5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x4}}}]}, 0x38}}, 0x0)
r4 = socket$kcm(0x11, 0x3, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003f00)=@newtfilter={0x88, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0xac8, 0x20000000, 0x3, 0x3}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x0)
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000000c0)="f058fe7dad777f8f", 0x8}], 0x2}, 0x5)

4m21.782685804s ago: executing program 35 (id=3500):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0x55ce29afe10411a5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x4}}}]}, 0x38}}, 0x0)
r4 = socket$kcm(0x11, 0x3, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003f00)=@newtfilter={0x88, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0xac8, 0x20000000, 0x3, 0x3}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x0)
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000000c0)="f058fe7dad777f8f", 0x8}], 0x2}, 0x5)

2m15.827228851s ago: executing program 8 (id=3735):
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0)
rmdir(&(0x7f0000000040)='./cgroup/../file0\x00')
r1 = socket$inet6(0xa, 0x3, 0xff)
dup2(r1, r1)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x0, 0x7fff0000}]})
close_range(r2, 0xffffffffffffffff, 0x0)

2m14.374389154s ago: executing program 8 (id=3737):
r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/85})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000ac0)={0x2, 0x0, [{0x1, 0xffb, &(0x7f0000001d80)=""/4091}, {0x0, 0x83, &(0x7f0000000a00)=""/131}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)

2m13.886278801s ago: executing program 8 (id=3739):
socket$nl_generic(0x10, 0x3, 0x10)
pipe2$9p(&(0x7f0000000180), 0x800)
r0 = socket(0x11, 0x3, 0x3)
bind$packet(r0, 0x0, 0x0)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000))
syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x3010050, &(0x7f0000000600)=ANY=[], 0x41, 0x14fe, &(0x7f0000000700)="$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")
socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f0000000000))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940))
socket$inet(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='children\x00')
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r2, &(0x7f0000000000), 0xd)

2m13.068942828s ago: executing program 8 (id=3740):
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00')
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2040c7, &(0x7f0000000400)={[{@uni_xlate}, {@utf8}, {@rodir}, {@fat=@nfs_nostale_ro}, {@shortname_mixed}, {@shortname_mixed}, {@fat=@time_offset={'time_offset', 0x3d, 0x588}}, {@fat=@dmask={'dmask', 0x3d, 0xe4}}, {@fat=@nfs_nostale_ro}, {@fat=@umask={'umask', 0x3d, 0xebeb}}, {@utf8}, {@numtail}]}, 0x0, 0x2b6, &(0x7f0000001640)="$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")
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
pread64(r0, &(0x7f0000000600)=""/4099, 0x1003, 0x110)

2m12.467218672s ago: executing program 8 (id=3743):
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x1)
pwrite64(r0, &(0x7f00000008c0)='/', 0x1, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0)
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00')
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
umount2(&(0x7f0000000400)='./file0\x00', 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$exfat(&(0x7f0000000700), &(0x7f0000000140)='./file0\x00', 0x810000, &(0x7f0000000280)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c696f636861727365743d69736f383835392d312c646d61736b3d30303030303030303030303033373737373737373737372c696f636861727365743d6b6f69382d72752c696f636861727365743d63703433372c6e616d65636173653d312c6e616d65636173653d312c009a8d4d9016e3d8128333e260a1b926dd0c5f7619710e03ea1ae6521494f87e5737dc0c5bec3f76668140a15258818b6fbc51f9a13940e63c378688559c351287f0e09ef0b7330db20eef797e5004484649e7f5fb64b746683a75b9ed822f5ae34fac"], 0x1, 0x150d, &(0x7f0000000780)="$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")
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001cc0)='memory.stat\x00', 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000001e00)={'pim6reg\x00', &(0x7f0000001d00)=@ethtool_dump={0x40, 0xe000, 0x531f, 0xc3, "769ab46867128e44d664d333580d74d3df8ea0dc4a0d5001a0bd1e6cca7b8ef315b518f7e7d64ea1785e4ef87e3e6ddcbc16ccf6b14667d0d694063b5970ff4e71b5b5c2907fe37041297f652762f41a7eb88946c6391366f7ee0ef6d28e50dd7f585a121c0359211c6387aff484ed0e041a3769e407c6fe5afb258f40036e695cf4f6d0a7756dd7b823c537bde2acec01d421334329b273cbd9cb228e0ef4cb599d7a22af760e3596ae53b62883735c96c03979a5b35432b3abcc7c83ca2f04f45fec"}})
chdir(&(0x7f0000000240)='./file0\x00')
fchmodat(0xffffffffffffff9c, 0x0, 0x164)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_pidfd_open(0x0, 0x0)
r4 = openat$sysfs(0xffffff9c, &(0x7f00000003c0)='/sys/power/pm_trace_dev_match', 0x20800, 0x2)
read$msr(r4, &(0x7f00000002c0)=""/4096, 0x1000)
syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000003200)='./file1\x00', 0x4604, &(0x7f0000003240)=ANY=[], 0x3, 0x33d, &(0x7f0000000140)="$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")

2m11.903488174s ago: executing program 3 (id=3746):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$inet_tcp(0x2, 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x80000, 0x10)
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x20000000)
bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
openat$tun(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, 0x0, 0x2c000010)
sendmsg$nl_xfrm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0xf1f, 0x1, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@remote, 0x4e20, 0x0, 0x4e23, 0xfffc, 0xa, 0x10, 0x0, 0x2}, {0x8, 0x1, 0x0, 0x0, 0x100, 0x0, 0xffffffff, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffa, 0x4, 0x8}, 0x4, 0x6e6bb5, 0x0, 0x1, 0x3, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x2000c810}, 0x24000094)

2m11.852919017s ago: executing program 8 (id=3747):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000140), 0x8)
connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)

2m11.349333706s ago: executing program 36 (id=3747):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000140), 0x8)
connect$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)

2m9.759405177s ago: executing program 3 (id=3756):
ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15)

2m8.129642029s ago: executing program 3 (id=3757):
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
personality(0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
listen(0xffffffffffffffff, 0x0)
creat(0x0, 0x122)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x7)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x5, 0x6, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r8], 0x5c}}, 0x40)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x884)

2m2.784288494s ago: executing program 3 (id=3772):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x18d883, 0x0)
mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x10a78c0, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0x9)

2m2.610626324s ago: executing program 3 (id=3773):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
mremap(&(0x7f0000b06000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0)

2m2.113625882s ago: executing program 3 (id=3777):
syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0x800000, &(0x7f00000000c0)=ANY=[@ANYBLOB='lastblock=00000000000000000226,adinicb,gid=forget,nostrict,unhide,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c73686f727461642c7569643d69676e6f72652c73686f727461642c766f6c756d653d30303030303030303030303030303030303030362c001829935912ddb19b617db523a6bb7c0d782285ef952b9282ba93ba5ef9353deee866199e1a1a16f9b8980aa11304cc9667f126de9a575a9cb3c29169cb6e8bd4820f0d3882914f9f4dd2ac97c7c5181676dc89c5fd4f9c455fcdbd2eef48adb33cdc1f9e9a7f3a2bcb07fb13cffd272aa79076e8039f7ab310e76e7400"/192, @ANYRES64], 0x4, 0xc24, &(0x7f0000000d00)="$eJzs3V9oXOl5B+D3myOtJW/TzG42zh/nYmAD2Xqzi2R51yregBwrIgvGa1ZWLhYKGluyO6w0kiW5eEMJLiSUkLa45CKXNWwCvauvWggNuFfbEgKiV6UXxW03Zns3CaQtvViVM/ONNNLalrK2JXn9PMb+nTnznpnvzOrVnDN7zpwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACK+/o2TQ8Npr0cBAOymM5NvDo14/weAJ8o5+/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGwvRRHfjRTv/qCVptu3OwZON5pXrk6NT9x9scEUKSpRtOvLvwPDR0eOvfLq8dFu3n/5h+0L8cbkuZO1Uwvzi0uzy8uzM7WpZuPCwszsjh/hQZff6kj7BajNv31l5uLF5drRl0c23X21eufA04eqJ0YPj7zVrZ0an5iY7Knp6//Yz/4R6eE9FJ8gT0UR34wU7730QapHRCUevBe2+d3xqA1GX9l/7ZWYGp9or8hco95cKe9MlVzVF1HtWWis2yO70IsPZCziWvnfqRzwkXL1JhfrS/Xzc7O1s/WllcZKY6GZKp3RlutTjUqMpojFiGgVez149pv+KOJYpLjz61Y6HxFFtw9ePDP55tDI9g/QtwuDvMfTVouI1XgMehb2qQNRxF9Gih9OD8WF3Ffttnk/4itlvhZxucxbKa7n26n8BTEa8SvvJ/BY64sifhEpFlIrzXR7v71defpbtdebFxd6arvblY/9/sFusm3CPjYQRZxvb/G30sf/sAsAAAAAAAAAAAAA2B1F/DRS3Jx/IS1G7zmljeal2rn6+bnOUcHdY/9ream1tbW1aupkLedQzrGcZ3NO51zMeS3n9Zw3ct7MeSvnas7bOVs5o5KfP2ct51DOsZxnc07nXMx5Lef1nDdy3sx5K+dqzts5WznDeU8AAAAAAAAAAAAAAAAAAAA8ZINRxESkuPHuH7WvKx3t69J/+sTomfHneq8Z/7ltHqesfTkifho7uyZvf77WeKqUfx7+egHbG4givpOv//cnez0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgX6hEEd+NFD/6TStFioixiOno5O1ir0cHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJQGUhGnIsV/fWOgfXs1Ir4YER+ulX8i/ndtq70eMQAAAAAAAAAAAAAAAAAAAHwCpSIuR4ofv9dK1Yi4Wr1z4OlD1ROjh0feKqKIVJb01r8xee5k7dTC/OLS7PLy7Extqtm4sDAzu9OnGzjdaF65OjU+8UhWZluDj3j8gwOnFhbfWWpc+sOVu95/cODk+eWVpfqFu98dg9EXMdQ750h7wFPjE+1BzzXqzfaiqXKPAfZF1Ha6MgAAAAAAAAAAAAAAAAAAAOwbB1MR45Hi+Z8dS93zxvs65/x/qnOrWK/9yR9vfBfA3Jbs6v3+gJ1Mp50O9Ej7xPva1PjExGTP7L7+j5aWY0qpiM9GisN///n2+fApDt713Piy7s8ixej/Hct11cNl3dimqoEjU+MTtTMLzZdOzs0tXKiv1M/PzdYmF+sXdvzFAQAAAAAAAAAAAAAAAAAAAHAfB1MRfx4pjr2+mrrXnc/n//d1bvWc//9aRPey8wNpc65rn9v/u+1z+zvTnz4x+vrR5+81/1Gc/1+OKaUiPowUz/zV59vX0++e/z+0pbas+3Gk+MX3vpTrKk+VdcPd1ek84sXG3OxQWftipPj+2W5ttGtfzbWf2agdLmv/IVI8+weba4/n2uc2ao+WtXcixcSZu9d+dqN2pKwdjBRf/dNat/ZgWfv1XHtoo/blCwtzMzt9eXkylf3/b5Hiy8PfTN2f+Xv2f8/3f1zbkus+0vP3n35Y/V/tmXct9/Va7v/hbfr/cqT4i+tfynWd3jua73+m/e9G/38/UvzepzbXvpJrn92oHd7pasFeKvv/nyLF6u1/Wf+Zz/2fO2ujQ3v7/4t9m7O7XbBX/f9Mz7xqHtfIb/lawJNm+Z1vv12fm5tdMmHChIn1ib3+zQQ8auX2/39Hiq9dLlJ3PzZv//9O59bG/v//fGdj+//Elly3R9v/z/bMO5H3Wvr7IgZW5hf7PxcxsPzOt19qzNcvzV6abY6MjB7//WPDR48P9z/V3bnfmNrxawePu7L/344UP/mbf17/HHvz/v/dP/87uCXX7VH/f6Z3nTbt1+z4pYAnTtn/fx0p/vXGB+v/v+l+n/91P+d74fnNOdgt2qP+f65nXi3/M9oz74Ui4uROnwsAAAAAAAAAAB4TB1MRP4sUf9v6x/Vr3m8+/ie+3K3tPf7vXvbD9f8BgPsr3/8nI8XPD341db9DZifH/89syXV7dPzvoZ55M7t0XvOOX2QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiYUhRxIFK8+4NWul2UtzsGTjeaV65OjU/cfbHBFCkqUbTry78Dw0dHjr3y6vHRbt5/+YftC/HG5LmTtVML84tLs8vLszO1qWbjwsLM7I4f4UGX3+pI+wWozb99ZebixeXa0ZdHNt19tXrnwNOHqidGD4+81a2dGp+YmOyp6ev/2M/+EenhPRSfIE9FET+PFO+99EH69yKiEg/eC9v87njUBqOv7L/2SkyNT7RXZK5Rb66Ud6ZKruqLqPYsNNbtkV3oxQcyFnEtIirlgI+Uqze5WF+qn5+brZ2tL600VhoLzVTpjLZcn2pUYjRFLEZEq9jrwbPf9EcRfxcp7vy6lf6jiCi6ffDimck3h0a2f4C+XRjkPZ62WkSsxmPQs7BPHYginosUP5weiv8sOn3Vbpv3I75S5msRl8u8leJ6vp3KXxCjEb/yfgKPtb4o4mykWEit9H6Re7+9XXn6W7XXmxcXemq725WP/f7BbrJtwj42EEX8sr3F30q/9H4OAAAAAAAAAAAAAPtcEV+LFDfnX0jt80PXzyltNC/VztXPz3UO6+8e+1/LS62tra1VUydrOYdyjuU8m3M652LOazmv57yR82bOWzlXc97O2coZlfz8OWs5h3KO5TybczrnYs5rOa/nvJHzZs5bOVdz3s7ZyhmOkwYAAAAAAAAAAAAAAAAA4BGpRBHfixQ/+k0rrRWd68tORydvO88VPtH+PwAA//9mFkcG")
link(&(0x7f0000000d80)='./file1\x00', &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
creat(0x0, 0x200)

2m1.700341705s ago: executing program 37 (id=3777):
syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0x800000, &(0x7f00000000c0)=ANY=[@ANYBLOB='lastblock=00000000000000000226,adinicb,gid=forget,nostrict,unhide,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c73686f727461642c7569643d69676e6f72652c73686f727461642c766f6c756d653d30303030303030303030303030303030303030362c001829935912ddb19b617db523a6bb7c0d782285ef952b9282ba93ba5ef9353deee866199e1a1a16f9b8980aa11304cc9667f126de9a575a9cb3c29169cb6e8bd4820f0d3882914f9f4dd2ac97c7c5181676dc89c5fd4f9c455fcdbd2eef48adb33cdc1f9e9a7f3a2bcb07fb13cffd272aa79076e8039f7ab310e76e7400"/192, @ANYRES64], 0x4, 0xc24, &(0x7f0000000d00)="$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")
link(&(0x7f0000000d80)='./file1\x00', &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
creat(0x0, 0x200)

1m36.549913569s ago: executing program 9 (id=3750):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0)
mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x10a78c0, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0x9)

1m36.278129764s ago: executing program 9 (id=3833):
getpgrp(0x0)
openat$rtc(0xffffffffffffff9c, 0x0, 0x182800, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00')
read$FUSE(r3, &(0x7f0000004dc0)={0x2020}, 0x2020)

1m35.700649077s ago: executing program 9 (id=3837):
r0 = socket$packet(0x11, 0x3, 0x300)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
listen(0xffffffffffffffff, 0x7c2)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x3}]}, 0x10)
syz_emit_ethernet(0x15e, &(0x7f00000003c0)=ANY=[@ANYBLOB="e33110495bfdaaaaaaaaaa0086dd60cb653e01283afffe800000000000000000000000000000fe8000000000000000000000000000aa890090780000000020010000000000000000000000000000fc01000000000000000000000000000004209595f429ae08a565c9a41d413a70a44d2e6f790a3872d50bb14d25344dc5b3a281f175f5ee04aab21301b94d966c72c15a143c69205625466855101cf44d89d9f6ee47d77c0d4e53e34b67c542fc6f6f6c60139c43b78286f5bb8f4f11d164af24e2633a45bf4ed944b0ef6a7b7167f73cf54e78686ac09402659c29eb0ce380"], 0x0)

1m35.238918354s ago: executing program 38 (id=3837):
r0 = socket$packet(0x11, 0x3, 0x300)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
listen(0xffffffffffffffff, 0x7c2)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x3}]}, 0x10)
syz_emit_ethernet(0x15e, &(0x7f00000003c0)=ANY=[@ANYBLOB="e33110495bfdaaaaaaaaaa0086dd60cb653e01283afffe800000000000000000000000000000fe8000000000000000000000000000aa890090780000000020010000000000000000000000000000fc01000000000000000000000000000004209595f429ae08a565c9a41d413a70a44d2e6f790a3872d50bb14d25344dc5b3a281f175f5ee04aab21301b94d966c72c15a143c69205625466855101cf44d89d9f6ee47d77c0d4e53e34b67c542fc6f6f6c60139c43b78286f5bb8f4f11d164af24e2633a45bf4ed944b0ef6a7b7167f73cf54e78686ac09402659c29eb0ce380"], 0x0)

1m25.362421257s ago: executing program 5 (id=3862):
r0 = syz_clone(0x88206100, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00')
syz_read_part_table(0x4074, &(0x7f0000000400)="$eJzszzFKK1EUBuB/kjcvowwEQStBDBZ2MnZWs4v0kjVYWag4O7EUF+A+3IOlLiESZKIxtoEg31cczpmfM/fesN3e+6ZafiqSPM+e9pIcT9I1zWf4r893vrab85S71SB1kqv1n08fN3p3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg24y+9YOV5DZJ93J92s/VovxflNlhups2F3VSHYyT+2HK9qjIfjI5++WMYfKapEjylmQ63txzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/5HJlGv2M6765W199OEnXlst0Pv9gd44JAABhGAhmxCAmMRkstPudgf92nD3JfdtXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04kAEAAAAQ5m+dR/sBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4KQAA//9ggxZC")
fchdir(r1)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
syz_open_procfs$namespace(r0, &(0x7f0000004480)='ns/ipc\x00')

1m23.465163194s ago: executing program 5 (id=3869):
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$sndmidi(0x0, 0x2, 0x141101)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
lseek(r2, 0x6, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x2, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x20000000, 0xfffffffc, 0x7ff}}]}, {0x4}, {0x2, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000)
r8 = getpid()
prctl$PR_SCHED_CORE(0x3e, 0x0, r8, 0x1, &(0x7f0000000140))
sendmsg$nl_route_sched(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x14, 0x32, 0x101}, 0x14}}, 0x0)
unshare(0x2040400)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
unshare(0x2000400)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r9 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r9, 0x84, 0x70, 0x0, &(0x7f0000000000)=0x17)

1m20.239472088s ago: executing program 5 (id=3873):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_deladdrlabel={0x38, 0x49, 0x1, 0x70bd29, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0x0, 0x70000}, [@IFAL_LABEL={0x8, 0x2, 0x3}, @IFAL_ADDRESS={0x14, 0x1, @remote}]}, 0x38}}, 0x4004050)

1m19.934210846s ago: executing program 5 (id=3876):
syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4040, &(0x7f00000015c0)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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")
creat(&(0x7f0000000100)='./bus\x00', 0x44)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x301400, 0x0)
r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x49)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3)
chdir(&(0x7f0000000040)='./file0\x00')
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)

1m18.760806562s ago: executing program 5 (id=3880):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x8020000)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='io\x00')
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x9100)
readv(r3, &(0x7f0000000240)=[{&(0x7f0000000040)=""/105, 0x69}, {&(0x7f0000000100)=""/110, 0x6e}, {&(0x7f0000000180)=""/12, 0xc}, {&(0x7f00000001c0)=""/67, 0x43}], 0x4)
r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00')
lseek(r4, 0x96, 0x1)
r5 = inotify_init1(0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
inotify_add_watch(r5, &(0x7f0000000400)='.\x00', 0xa4000021)
read(r5, 0x0, 0x0)
close(r5)
open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
readv(r2, &(0x7f00000004c0)=[{&(0x7f0000000600)=""/4096, 0x1000}], 0x1)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04)

1m17.804741977s ago: executing program 5 (id=3881):
syz_usb_connect(0x0, 0x3e, &(0x7f0000001100)=ANY=[@ANYBLOB="1201000020dafb2099041010f50a0102030109022c00010000000009040000016f2bae000824020100000000092402020000000000090585da20"], 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x2, 0xc8080)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0xffffffff)

1m17.327284924s ago: executing program 39 (id=3881):
syz_usb_connect(0x0, 0x3e, &(0x7f0000001100)=ANY=[@ANYBLOB="1201000020dafb2099041010f50a0102030109022c00010000000009040000016f2bae000824020100000000092402020000000000090585da20"], 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x2, 0xc8080)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0xffffffff)

12.11372045s ago: executing program 4 (id=4027):
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="6d6f64653d3078303030303030303030303030303030392c6e6f636f6d7072657373006e6f726f636b2c636865636b3d73747269637441696f636861720665743d63703737352c6d61703d6e6f726d616c2c6e6f636f6d70726573732c73657373696f6e3d3078303030303030303030303030303034312c00eda98394b123ecbce2d1b01500b3884d244495219a"], 0x1, 0x649, &(0x7f0000000e80)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0)

11.309839735s ago: executing program 4 (id=4032):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x24)

10.88917404s ago: executing program 4 (id=4035):
getpgrp(0xffffffffffffffff)
syz_emit_ethernet(0xa6, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x98, 0x4, 0x0, 0x0, 0x73, 0x0, @private, @rand_addr=0x64010101}, {0x4e20, 0xffff, 0x84, 0x0, @opaque="b4e1fa95765798262e83e352be7290daa680842f452c30d6843ee7dcce1682a338848cde35b72a6259f080b611ec951e601467dd381201b1a8402587b51fe0ecbb44d049159db7957b28fbe8c64d72d611c9fd925a63a17d293d4874869f579b49a172a01db8e3c1ca14d62f67b63c9d73042381663f9da046b3dfb5"}}}}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050840)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'lo\x00'})
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[], 0x18)

10.513993021s ago: executing program 4 (id=4038):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x1008400, &(0x7f0000000400)=ANY=[@ANYRESHEX], 0x85, 0x697, &(0x7f0000001240)="$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")
ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)={0x7, 0x4, 0x1, 0x6, 0x7, "00120dd608f500001e20000080c90a008000"})
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001500))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1})
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092})
r2 = eventfd2(0x1, 0x80001)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000240)={0x0, r2})

9.958262283s ago: executing program 1 (id=4040):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x7}, 0x1c)
listen(r0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010006081000418e00000004fcff", 0x58}], 0x1)

9.722339806s ago: executing program 2 (id=4042):
munmap(&(0x7f0000001000/0x4000)=nil, 0x4000)
syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000f00)='./file0\x00', 0x800, &(0x7f0000000180), 0x1, 0x281, &(0x7f0000000780)="$eJzs3T1oA2UYB/DnLkk/g1YFEcUPEBEtlLoJIuiiUBApIoIKFREnaYVqcWucXBx0VunkUsTN6iguxUXoWrVDRRCxOFgcdIhcLpGYD1uT5lKT3w/Su/fu3jyXkv97L6XJBTC1liLisYgoRcRyRFQiImk/4J78sdRs7s0fbkTU68/8mjSOy9u5Vr/FiKhFxMMR5da+nYMXTn8/fvL+d9+s3PfxwfPzBby0UueGs9OTp84/evqdz9Ye2kmb26rNZfvruEK339hjYzmJuHkExa6LpDzuM+Ay1t/69NssJLdExL2N/FcibUb2ve2Zryrx4If9+r7/y9EdRZ4rcPXq9Up2DazVgamTNubASboSEfl6mq6s5HP470oL6Wtb228sv7pV2nylfdQoYvoOjEo14uSJL2Y/X+zI/0+lPP/A5Mry/+z6/vfZ+nnXX8qAiXRnvsjyv/zS7gMh/zB15B8mw8IAfeQfJkJ1wE7yD/93A2a3K/8zF3a59cejRwcrBlwrl7z+/1zkOQHFMP+HCVZprdR67pZ/mF6Xzr9/9YWJ08q/Sz9Mn/brPwAwXeqz4/4EMjAu4x5/AAAAAAAAAAAAAAAAAACAbnvzhxutR0RSSM2vP4g4ezwiyp31o3Fjg7SxnGv8XPgtyQ77W5J3a7r45gW9vHj3MGc/vE9G/+nrckd7rr1xww8jr/+vvrlrNM/79j+bfb/BcnczopYdvFoud7//kub7b3A3XbC/8vKQBf6jzlQ/8lwRVfv/Fv/cL6J+f2vHEV9m489qr/Enjdsay97jT7X9K5YH9PofQz4BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhfkrAAD//+hrbAg=")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r2 = fanotify_init(0xf00, 0x0)
fanotify_mark(r2, 0x1, 0x5000003a, r1, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2c, 0x0, 0x0)
open(0x0, 0x0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4)
renameat2(r0, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2)
read$FUSE(r2, &(0x7f0000000f40)={0x2020}, 0x2020)

8.858091435s ago: executing program 4 (id=4044):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
timerfd_create(0x8, 0x0)
syz_emit_ethernet(0x53, &(0x7f0000000200)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb8100000086dd6000000000193afffe8000000000000000000000000000bbff0200000000006287b55ee25c4100000000000000000187009078fe"], 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40})
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r5, 0xfff}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

8.738416382s ago: executing program 1 (id=4046):
syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x2, 0x1509, &(0x7f0000001c40)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x101042, 0x1)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e)
truncate(&(0x7f0000000080)='./file1\x00', 0x0)
rename(&(0x7f0000000240)='./file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

8.583682291s ago: executing program 2 (id=4047):
r0 = syz_open_dev$loop(&(0x7f0000000040), 0x8, 0x0)
ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x0)

8.318249016s ago: executing program 6 (id=4049):
syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file0\x00', 0x208008de, &(0x7f0000001b80)=ANY=[@ANYBLOB='utf8,errors=continue,namecase=1,utf8,gid=', @ANYRESHEX=0x0, @ANYBLOB=',umask=00000000000000000000077,umask=00000000000000000005676,uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB="2c000ca8768ddddc191573cbd33da79641936c9de64e264f331d1b50f4c4f54702f51dcbddb39c14c19175f07a639bb65ea608fbf6fadf5d8da30ace1281bed3e61b084526e10dbe921dad84fbcabc5791f52445cb76b789ed377aa0cd17309c4df04d525e8af05fb246b33836d90656cd2daa991b916be40df3bd607ae5672e1bb90730d0ff03000000000000c5f0cf287ea707c1fc66165f74e7d8a78c37a4b86907cec1df06da3611f616718d88770a2520ceb039bc06ef4d1183"], 0x1, 0x1503, &(0x7f0000000580)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000140)={0x200002, 0x200003, 0x9, 0x4, 0x7})
r1 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$sock(r1, 0x0, 0x0, 0x4008880)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000001c0)={[{@jqfmt_vfsv1}, {@quota}]}, 0x1, 0x793, &(0x7f0000001ec0)="$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")
rename(0x0, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0)
creat(&(0x7f00000000c0)='./file1\x00', 0x1)
pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5412, 0x0, 0x0)

8.188008814s ago: executing program 2 (id=4050):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
dup(r0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
sendmmsg$inet(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r5 = socket$packet(0x11, 0x2, 0x300)
mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r5, 0x0)
mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r6 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0)
preadv(r6, &(0x7f0000000540)=[{&(0x7f0000000100)=""/210, 0xd2}], 0x1, 0x0, 0xa0d9cb8)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, 0x0)

7.794427406s ago: executing program 1 (id=4052):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7ac, 0x0)
connect$unix(r0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xfffffffe)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x2a, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0x240fb11, 0xffdfffff}, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000019100)='net/udp6\x00')
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xe032, 0xffffffffffffffff, 0x80000000)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000600)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000f41000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68)
ptrace(0x10, 0x1)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0)
syz_usb_connect(0x7, 0x9dd, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
read$FUSE(r3, &(0x7f0000001240)={0x2020}, 0x2020)
prlimit64(0x0, 0xe, 0x0, 0x0)
move_mount(0xffffffffffffffff, &(0x7f0000000880)='./mnt\x00', 0xffffffffffffffff, 0x0, 0x177)

4.91437771s ago: executing program 6 (id=4055):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
close(0x3)
close(0x4)
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
close(0x4)

4.846214374s ago: executing program 4 (id=4056):
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$sndmidi(0x0, 0x2, 0x141101)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
lseek(r2, 0x6, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x2, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x20000000, 0xfffffffc, 0x7ff}}]}, {0x4}, {0x2, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000)
r8 = getpid()
prctl$PR_SCHED_CORE(0x3e, 0x0, r8, 0x1, &(0x7f0000000140))
sendmsg$nl_route_sched(r3, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x32, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0)
unshare(0x2040400)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
unshare(0x2000400)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r9 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r9, 0x84, 0x70, 0x0, 0x0)

4.753201879s ago: executing program 2 (id=4057):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6}, 0x10)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000240)={r1, 0x1, 0x6}, 0x10)

4.442728167s ago: executing program 6 (id=4058):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="9001000002020101000000000000000003000002800002"], 0x190}, 0x1, 0x0, 0x0, 0x40088c1}, 0x80)

4.226428559s ago: executing program 2 (id=4059):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100007856bb40da0b53813de20102030109021200010000000009040000000206"], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000100)=ANY=[@ANYBLOB="000004"], 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = getpid()
timer_create(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
getpgid(r1)

3.987331053s ago: executing program 6 (id=4060):
prlimit64(0x0, 0x8, &(0x7f0000000000)={0x1, 0x5}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3.796695254s ago: executing program 6 (id=4061):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000180)={0x1, 0x0, [{0x80000000, 0xdf9, 0x1, 0x8c, 0x882}]})

3.178423689s ago: executing program 0 (id=4062):
getpgrp(0xffffffffffffffff)
syz_emit_ethernet(0xa6, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x98, 0x4, 0x0, 0x0, 0x73, 0x0, @private, @rand_addr=0x64010101}, {0x4e20, 0xffff, 0x84, 0x0, @opaque="b4e1fa95765798262e83e352be7290daa680842f452c30d6843ee7dcce1682a338848cde35b72a6259f080b611ec951e601467dd381201b1a8402587b51fe0ecbb44d049159db7957b28fbe8c64d72d611c9fd925a63a17d293d4874869f579b49a172a01db8e3c1ca14d62f67b63c9d73042381663f9da046b3dfb5"}}}}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050840)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'lo\x00'})
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x18)

3.131628592s ago: executing program 6 (id=4063):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
openat$urandom(0xffffffffffffff9c, 0x0, 0x103902, 0x0)
r2 = dup(r0)
setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000100)='wg2\x00', 0x4)
write$cgroup_subtree(r2, 0x0, 0xfe33)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc25c4110, 0x0)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
syz_open_procfs(0xffffffffffffffff, 0x0)
r3 = syz_open_procfs(0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0)
timer_create(0x3, 0x0, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000f80)={0x18, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x2, @in={0x2, 0x0, @broadcast}}}, 0x90)
mq_notify(r3, &(0x7f0000000180)={0x0, 0x1e, 0x1})
ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r5, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect)
r6 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@gettaction={0x24, 0x5a, 0x1, 0x70bd2c, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}]}, 0x24}}, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa2f428100350008050107053d61229978f3cd01ff85c85fe7cc863128f08385b01c63a659d8e4244cdcb049523d5238c8a479738d89fb4674b4ee091a2fd0020495932a157cf4f692ac44e73b6b10fb3207d1485814d0f3305cade72d9137c2eb8ed17a194976a25fdb8e41b663f66491b94adb6af399eb680f29189d08aff2af668c4bf323e7ea1ec9ac2955f10faa07c5b7569b6e29965cbdd89fc294bd75c7e0fec46bfef04cbede96ea2f025a78570124ce481d72d258b7c8d4936e9a85bb6cb1aa8fbf98bc"], 0x0)
syz_usb_connect(0x2, 0x52, &(0x7f0000000140)=ANY=[@ANYBLOB="120100036ffa680863070120ff2c0102030109024000021109400c0904080601ff8bbd020a240107000d020102052405039909"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0})

2.930805813s ago: executing program 0 (id=4064):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/85})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000ac0)={0x1, 0x0, [{0x1, 0x0, 0x0}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)

2.437866591s ago: executing program 0 (id=4065):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r0, &(0x7f0000000240)}, 0x20)

2.09840601s ago: executing program 0 (id=4066):
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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")
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, 0x0, 0x275a, 0x0)
write$cgroup_int(r1, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r3 = openat$cgroup_procs(r2, 0x0, 0x2, 0x0)
write$cgroup_pid(r3, 0x0, 0x0)
unshare(0x6a000200)
r4 = socket(0x10, 0x3, 0x0)
write(r4, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x2, 0x1, 0x1000000000000c8, 0x0, 0x100002, 0x8, 0x3, 0xfffffffffffffffa, 0x5166})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f00000002c0)={0xfffffffffffffffd, 0x2, 0xffffffff, 0x0, 0x1, 0x8, 0x0, 0x3, 0x4040c408})

1.636515827s ago: executing program 2 (id=4067):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
dup(r0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
sendmmsg$inet(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4)
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r5 = socket$packet(0x11, 0x2, 0x300)
mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r5, 0x0)
mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r6 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0)
preadv(r6, &(0x7f0000000540)=[{&(0x7f0000000100)=""/210, 0xd2}], 0x1, 0x0, 0xa0d9cb8)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0x3)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0)
ioctl$EVIOCGPROP(r8, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$PPPIOCSMRU1(r8, 0x40047452, 0x0)

1.347458353s ago: executing program 1 (id=4068):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
close(0x3)
close(0x4)
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
close(0x4)

871.78295ms ago: executing program 0 (id=4069):
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5)
r0 = syz_open_dev$evdev(&(0x7f0000000d80), 0xc000000000, 0x101140)
ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000dc0)={0xff, 0xf, 0x1000, 0x2, "0c2aba7522e469c0a28ef8bfc25b070c47b4081062a9bb24e445739396bc80fd"})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
unshare(0x20000400)
bind$bt_l2cap(r1, &(0x7f0000002080)={0x1f, 0x0, @any, 0x4, 0x2}, 0xe)
setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000180)=0xa7fa, 0x2)

811.649944ms ago: executing program 1 (id=4070):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010b2dbd0500ffdbdf250100000004000180100002800c0001a808"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

178.37799ms ago: executing program 1 (id=4071):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000))
readv(r1, &(0x7f0000000480)=[{&(0x7f0000000180)=""/39, 0x27}], 0x1)
unshare(0x20060400)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syz_tun\x00'})
sendmsg$nl_route_sched(r2, 0x0, 0x2400c800)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000380), 0xff, 0x49b, &(0x7f0000001040)="$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")
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x20004810)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000001180)="5500000018007f5f00fe01b2a4a2809302060000ff00f005020500120a0007003500281014000000190005407f0a4c6d0022de1338d54404009b84136ef75afb83de4411001600c43ab8", 0x4a}], 0x1}, 0x20000004)
socket$packet(0x11, 0x3, 0x300)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x2e, &(0x7f0000002000)=ANY=[], 0x0)
clock_nanosleep(0x8, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0)

0s ago: executing program 0 (id=4072):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x1008400, &(0x7f0000000400)=ANY=[@ANYRESHEX], 0x85, 0x697, &(0x7f0000001240)="$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")
ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)={0x7, 0x4, 0x1, 0x6, 0x7, "00120dd608f500001e20000080c90a008000"})
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001500))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1})
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092})
eventfd2(0x1, 0x80001)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)

kernel console output (not intermixed with test programs):

wn flags 0x4c
[ 1355.882322][T18870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1355.941491][T18235] udevd[18235]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.8/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1355.996212][T18870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1356.066261][T18870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1356.150191][T18870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1356.164074][T18870] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1356.175334][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1356.189780][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1356.205649][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1356.218113][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1356.235151][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1356.253198][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1356.274057][T18870] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1356.287178][T18870] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1356.306217][T18870] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1356.322822][T18870] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1356.594424][T19188] input: syz0 as /devices/virtual/input/input70
[ 1356.817414][T16561] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1356.862597][T16561] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1356.931299][T19196] loop5: detected capacity change from 0 to 16
[ 1356.969458][T19066] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1356.989565][T19066] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1357.016150][T19196] erofs: (device loop5): mounted with root inode @ nid 36.
[ 1357.053176][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1357.066910][T19198] loop1: detected capacity change from 0 to 1024
[ 1357.098999][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1357.379596][T19203] loop2: detected capacity change from 0 to 256
[ 1357.447161][T19203] exfat: Bad value for 'uid'
[ 1357.493916][T19208] ptrace attach of "./syz-executor exec"[15740] was attempted by "./syz-executor exec"[19208]
[ 1357.700665][T19210] random: crng reseeded on system resumption
[ 1360.645148][T19236] xt_policy: output policy not valid in PREROUTING and INPUT
[ 1361.636996][ T1267] ieee802154 phy0 wpan0: encryption failed: -22
[ 1361.644324][ T1267] ieee802154 phy1 wpan1: encryption failed: -22
[ 1362.430964][T16116] usb 9-1: new full-speed USB device number 2 using dummy_hcd
[ 1362.753585][T19270] xt_socket: unknown flags 0x4c
[ 1362.762919][T16116] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1362.778564][T16116] usb 9-1: not running at top speed; connect to a high speed hub
[ 1362.813264][T16116] usb 9-1: config 17 has an invalid interface number: 8 but max is 1
[ 1362.833806][T16116] usb 9-1: config 17 has 1 interface, different from the descriptor's value: 2
[ 1362.846890][T16116] usb 9-1: config 17 has no interface number 0
[ 1362.859781][T16116] usb 9-1: config 17 interface 8 altsetting 6 endpoint 0x3 has an invalid bInterval 0, changing to 4
[ 1362.874580][T16116] usb 9-1: config 17 interface 8 has no altsetting 0
[ 1362.896605][T16116] usb 9-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff
[ 1362.940917][T16116] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1362.978881][T16116] usb 9-1: Product: syz
[ 1362.988678][T16116] usb 9-1: Manufacturer: syz
[ 1363.000917][T16116] usb 9-1: SerialNumber: syz
[ 1363.812185][T19283] netlink: 'syz.5.3576': attribute type 1 has an invalid length.
[ 1364.432565][T19281] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address
[ 1364.983690][T19281] bond6: (slave vxcan3): Error -95 calling set_mac_address
[ 1365.748098][T16116] usb 9-1: selecting invalid altsetting 0
[ 1365.773577][T16116] usb 9-1: 8:6 : no UAC_FORMAT_TYPE desc
[ 1365.812142][T16116] usb 9-1: selecting invalid altsetting 0
[ 1365.890376][T16116] usb 9-1: USB disconnect, device number 2
[ 1366.097018][T18235] udevd[18235]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:17.8/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1366.377870][T19311] loop2: detected capacity change from 0 to 256
[ 1366.396899][T19311] exfat: Bad value for 'uid'
[ 1367.263676][T19317] loop1: detected capacity change from 0 to 1024
[ 1368.694924][T19299] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1368.876523][T19299] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1370.153632][T19299] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1370.163288][T19299] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1370.172392][T19299] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1370.181321][T19299] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1370.464911][T19296] device macvlan3 entered promiscuous mode
[ 1370.531851][T19296] device bond6 entered promiscuous mode
[ 1370.540154][T19296] 8021q: adding VLAN 0 to HW filter on device macvlan3
[ 1370.592767][T19296] device bond6 left promiscuous mode
[ 1370.695978][T19344] xt_TCPMSS: Only works on TCP SYN packets
[ 1370.717071][T19325] device syzkaller0 entered promiscuous mode
[ 1371.464336][T19357] xt_socket: unknown flags 0x4c
[ 1372.284187][T19364] ptrace attach of "./syz-executor exec"[15740] was attempted by "./syz-executor exec"[19364]
[ 1372.384061][T19370] random: crng reseeded on system resumption
[ 1373.803369][T19391] loop5: detected capacity change from 0 to 1024
[ 1374.467718][T19400] netlink: 'syz.1.3597': attribute type 1 has an invalid length.
[ 1374.723436][T19402] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[ 1374.736023][T19402] bond2: (slave vxcan3): Error -95 calling set_mac_address
[ 1374.928506][T19400] device macvlan2 entered promiscuous mode
[ 1375.072768][T19400] device bond2 entered promiscuous mode
[ 1375.135095][T19400] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 1375.188179][T19400] device bond2 left promiscuous mode
[ 1375.696299][T19415] device syzkaller0 entered promiscuous mode
[ 1377.832229][T19442] loop5: detected capacity change from 0 to 1024
[ 1377.847391][T19442] EXT4-fs: Ignoring removed oldalloc option
[ 1377.899832][T19442] EXT4-fs: Ignoring removed bh option
[ 1377.928192][T19440] loop8: detected capacity change from 0 to 256
[ 1377.942275][T19442] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1378.146043][T19442] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[ 1378.201532][T19440] exfat: Bad value for 'uid'
[ 1378.639969][T14077] EXT4-fs (loop5): unmounting filesystem.
[ 1378.934380][T19461] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[ 1380.716038][T19472] xt_policy: output policy not valid in PREROUTING and INPUT
[ 1381.985406][T19483] loop8: detected capacity change from 0 to 1024
[ 1382.150865][T16116] usb 6-1: new full-speed USB device number 15 using dummy_hcd
[ 1382.396008][T16116] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1382.433493][T16116] usb 6-1: not running at top speed; connect to a high speed hub
[ 1382.548889][T16116] usb 6-1: config 17 has an invalid interface number: 8 but max is 1
[ 1382.616272][T16116] usb 6-1: config 17 has 1 interface, different from the descriptor's value: 2
[ 1382.673104][T16116] usb 6-1: config 17 has no interface number 0
[ 1382.718325][T16116] usb 6-1: config 17 interface 8 altsetting 6 endpoint 0x3 has an invalid bInterval 0, changing to 4
[ 1382.835613][T16116] usb 6-1: config 17 interface 8 has no altsetting 0
[ 1382.861114][T16116] usb 6-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff
[ 1382.896828][T16116] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1382.950135][T16116] usb 6-1: Product: syz
[ 1382.970459][T16116] usb 6-1: Manufacturer: syz
[ 1382.988200][T16116] usb 6-1: SerialNumber: syz
[ 1383.135316][T19499] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3615'.
[ 1384.323207][T19508] device syzkaller0 entered promiscuous mode
[ 1386.410972][T19521] loop3: detected capacity change from 0 to 1024
[ 1386.463088][T19521] EXT4-fs: Ignoring removed oldalloc option
[ 1386.469144][T19521] EXT4-fs: Ignoring removed bh option
[ 1386.488194][T16116] usb 6-1: can't set config #17, error -71
[ 1386.523735][T16116] usb 6-1: USB disconnect, device number 15
[ 1386.603613][T19521] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1386.818887][T19521] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[ 1386.837991][T19531] netlink: 'syz.5.3619': attribute type 1 has an invalid length.
[ 1387.099302][T19536] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address
[ 1387.125631][T19536] bond7: (slave vxcan3): Error -95 calling set_mac_address
[ 1387.142000][T15740] EXT4-fs (loop3): unmounting filesystem.
[ 1387.444000][T19543] loop8: detected capacity change from 0 to 4096
[ 1388.341213][T19543] EXT4-fs (loop8): Test dummy encryption mode enabled
[ 1388.408166][T19543] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[ 1389.937099][T18870] EXT4-fs (loop8): unmounting filesystem.
[ 1390.101545][T19544] device macvlan3 entered promiscuous mode
[ 1390.202419][T19544] device bond7 entered promiscuous mode
[ 1390.256027][T19544] 8021q: adding VLAN 0 to HW filter on device macvlan3
[ 1391.413340][T19544] device bond7 left promiscuous mode
[ 1393.161474][T19580] loop1: detected capacity change from 0 to 1024
[ 1393.169912][T19580] EXT4-fs: Ignoring removed oldalloc option
[ 1393.298827][T19580] EXT4-fs: Ignoring removed bh option
[ 1393.310914][T19580] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1393.338915][T19580] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[ 1393.963181][T19577] loop8: detected capacity change from 0 to 256
[ 1394.190600][T19577] exfat: Bad value for 'uid'
[ 1394.244451][T16306] EXT4-fs (loop1): unmounting filesystem.
[ 1394.351844][T19596] device syzkaller0 entered promiscuous mode
[ 1397.808214][T19625] xt_TCPMSS: Only works on TCP SYN packets
[ 1398.454771][T19630] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3637'.
[ 1398.919740][T19641] netlink: 'syz.8.3641': attribute type 1 has an invalid length.
[ 1399.127479][T19642] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[ 1399.154836][T19642] bond1: (slave vxcan3): Error -95 calling set_mac_address
[ 1399.507700][T19642] bond1: (slave gretap1): making interface the new active one
[ 1399.546538][T19642] bond1: (slave gretap1): Enslaving as an active interface with an up link
[ 1399.806614][T19641] device macvlan2 entered promiscuous mode
[ 1399.884086][T19641] device bond1 entered promiscuous mode
[ 1399.889911][T19641] device gretap1 entered promiscuous mode
[ 1399.928918][T19641] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 1400.029122][T19641] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1
[ 1400.190233][T19641] device bond1 left promiscuous mode
[ 1400.197482][T19641] device gretap1 left promiscuous mode
[ 1401.565345][T19666] loop3: detected capacity change from 0 to 256
[ 1401.839464][T19666] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[ 1402.741147][T19641] syz.8.3641 (19641) used greatest stack depth: 19320 bytes left
[ 1402.756000][T19674] loop2: detected capacity change from 0 to 1024
[ 1402.929712][T19674] EXT4-fs: Ignoring removed oldalloc option
[ 1402.986681][T19674] EXT4-fs: Ignoring removed bh option
[ 1403.005841][T19676] xt_socket: unknown flags 0x4c
[ 1403.028942][T19674] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1403.174286][T19674] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[ 1403.308534][T16852] EXT4-fs (loop2): unmounting filesystem.
[ 1403.448009][T19682] device syzkaller0 entered promiscuous mode
[ 1405.297155][T19695] xt_policy: output policy not valid in PREROUTING and INPUT
[ 1406.419866][T17074] usb 3-1: new full-speed USB device number 123 using dummy_hcd
[ 1407.439544][T19726] loop3: detected capacity change from 0 to 256
[ 1408.684022][T19726] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[ 1411.326976][T17074] usb 3-1: device descriptor read/all, error -71
[ 1411.550113][T19753] device syzkaller0 entered promiscuous mode
[ 1412.080514][T19766] ptrace attach of "./syz-executor exec"[14077] was attempted by "./syz-executor exec"[19766]
[ 1412.440986][T19766] random: crng reseeded on system resumption
[ 1415.083005][T19804] loop2: detected capacity change from 0 to 256
[ 1415.365671][T19804] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[ 1417.099342][T19833] device syzkaller0 entered promiscuous mode
[ 1417.907478][T19846] xt_TCPMSS: Only works on TCP SYN packets
[ 1418.100531][T19851] netlink: 'syz.2.3684': attribute type 1 has an invalid length.
[ 1418.279594][T19855] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[ 1418.292180][T19855] bond2: (slave vxcan3): Error -95 calling set_mac_address
[ 1419.569809][T19869] loop1: detected capacity change from 0 to 128
[ 1420.521548][T19869] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[ 1420.541265][T19869] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1420.666844][T19855] device macvlan2 entered promiscuous mode
[ 1420.686925][T19855] device bond2 entered promiscuous mode
[ 1420.810191][T19855] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 1420.964740][T19869] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #2: block 4: comm syz.1.3688: lblock 0 mapped to illegal pblock 4 (length 1)
[ 1421.088965][T19855] device bond2 left promiscuous mode
[ 1421.281707][T16306] EXT4-fs (loop1): unmounting filesystem.
[ 1423.076969][ T1267] ieee802154 phy0 wpan0: encryption failed: -22
[ 1423.083411][ T1267] ieee802154 phy1 wpan1: encryption failed: -22
[ 1423.686446][T19894] device syzkaller0 entered promiscuous mode
[ 1424.103342][T19906] ptrace attach of "./syz-executor exec"[18870] was attempted by "./syz-executor exec"[19906]
[ 1424.295368][T19907] random: crng reseeded on system resumption
[ 1424.390561][T19910] loop1: detected capacity change from 0 to 512
[ 1424.489501][T19910] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1424.602367][T19910] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.3700: iget: bad i_size value: 38620345925642
[ 1424.621489][T19910] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.3700: couldn't read orphan inode 15 (err -117)
[ 1424.751411][T19910] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[ 1424.790458][T19916] loop5: detected capacity change from 0 to 128
[ 1424.831221][T19910] EXT4-fs error (device loop1): ext4_lookup:1858: inode #15: comm syz.1.3700: iget: bad i_size value: 38620345925642
[ 1424.999918][T19916] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[ 1425.553154][T19922] EXT4-fs error (device loop1): ext4_lookup:1858: inode #15: comm syz.1.3700: iget: bad i_size value: 38620345925642
[ 1425.645745][T19916] ext4 filesystem being mounted at /237/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1426.446457][T19914] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[ 1426.656618][T16306] EXT4-fs (loop1): unmounting filesystem.
[ 1426.985670][T19916] fscrypt: loop5: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12
[ 1427.008176][T19935] loop1: detected capacity change from 0 to 512
[ 1427.177340][T19935] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[ 1427.291108][T19935] ext4 filesystem being mounted at /128/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1427.337883][T14077] EXT4-fs (loop5): unmounting filesystem.
[ 1427.864088][T16306] EXT4-fs (loop1): unmounting filesystem.
[ 1429.498151][T19959] loop1: detected capacity change from 0 to 2048
[ 1429.570035][T19959] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1429.612351][T19962] device syzkaller0 entered promiscuous mode
[ 1429.822692][T19960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1432.967104][T19984] loop1: detected capacity change from 0 to 256
[ 1433.087143][T19984] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[ 1435.021938][T20029] ptrace attach of "./syz-executor exec"[14077] was attempted by "./syz-executor exec"[20029]
[ 1435.239235][T20032] random: crng reseeded on system resumption
[ 1436.656601][T20044] loop2: detected capacity change from 0 to 1024
[ 1436.774951][T20044] hfsplus: keylen 65060 too large
[ 1436.788478][T20044] hfsplus: xattr searching failed
[ 1438.644594][T20054] loop2: detected capacity change from 0 to 2048
[ 1439.795460][T20054] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 1439.922111][T20054] EXT4-fs (loop2): re-mounted. Quota mode: none.
[ 1440.265541][T16852] EXT4-fs (loop2): unmounting filesystem.
[ 1440.510801][T14079] Bluetooth: hci4: command 0x0406 tx timeout
[ 1441.591448][T20086] netlink: 'syz.3.3736': attribute type 1 has an invalid length.
[ 1441.858140][T20087] loop2: detected capacity change from 0 to 256
[ 1442.107263][T20087] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[ 1442.121289][T20091] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[ 1442.219986][T20091] bond2: (slave vxcan3): Error -95 calling set_mac_address
[ 1442.869161][T20104] loop8: detected capacity change from 0 to 256
[ 1442.903498][T20104] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1442.921046][T20104] exFAT-fs (loop8): Medium has reported failures. Some data may be lost.
[ 1442.981337][T20104] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[ 1443.321636][T20093] device macvlan2 entered promiscuous mode
[ 1443.363747][T20093] device bond2 entered promiscuous mode
[ 1443.380135][T20108] loop1: detected capacity change from 0 to 1024
[ 1443.398329][T20093] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 1443.416047][T20109] loop8: detected capacity change from 0 to 128
[ 1443.428586][T20108] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[ 1443.455426][T20113] loop5: detected capacity change from 0 to 128
[ 1443.490501][T20093] device bond2 left promiscuous mode
[ 1443.534109][T20113] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[ 1443.800978][T20108] EXT4-fs error (device loop1): mb_free_blocks:1826: group 0, inode 15: block 273:freeing already freed block (bit 17); block bitmap corrupt.
[ 1443.972587][T20114] UDF-fs: error (device loop5): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[ 1444.115110][T16306] EXT4-fs (loop1): unmounting filesystem.
[ 1445.193400][T20143] loop5: detected capacity change from 0 to 512
[ 1445.320055][T20143] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[ 1445.430644][T20143] ext4 filesystem being mounted at /248/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1445.941700][T20143] EXT4-fs (loop5): re-mounted. Quota mode: writeback.
[ 1445.959200][T20145] ptrace attach of "./syz-executor exec"[16852] was attempted by "./syz-executor exec"[20145]
[ 1446.035723][T20145] random: crng reseeded on system resumption
[ 1446.129677][T20154] EXT4-fs (loop5): re-mounted. Quota mode: writeback.
[ 1446.153374][   T46] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1446.189193][T20157] loop1: detected capacity change from 0 to 256
[ 1446.395402][T20157] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[ 1446.432521][   T46] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1446.442987][T14077] EXT4-fs (loop5): unmounting filesystem.
[ 1448.049496][T20167] loop5: detected capacity change from 0 to 1024
[ 1448.091867][T20167] EXT4-fs: Ignoring removed oldalloc option
[ 1448.098400][T20167] EXT4-fs: Ignoring removed bh option
[ 1448.144613][   T46] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1448.213725][T20167] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1448.402627][   T46] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1448.434117][T20167] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[ 1448.556338][T14077] EXT4-fs (loop5): unmounting filesystem.
[ 1448.799710][T20177] loop5: detected capacity change from 0 to 512
[ 1448.983285][T20177] EXT4-fs error (device loop5): __ext4_fill_super:5423: inode #2: comm syz.5.3758: inode has both inline data and extents flags
[ 1449.041603][T20177] EXT4-fs (loop5): get root inode failed
[ 1449.048729][T20177] EXT4-fs (loop5): mount failed
[ 1449.380057][ T4272] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1449.398979][ T4272] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1449.415786][ T4272] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1449.423924][ T4272] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1449.433795][ T4272] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1449.441500][ T4272] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1450.314724][T20194] netlink: 'syz.3.3757': attribute type 1 has an invalid length.
[ 1451.834125][T14079] Bluetooth: hci0: command 0x0409 tx timeout
[ 1451.915330][T20225] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3767'.
[ 1451.923045][T20196] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[ 1451.961787][T20225] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3767'.
[ 1451.989455][T20225] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3767'.
[ 1452.015517][T20225] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3767'.
[ 1452.080790][T14163] usb 3-1: new high-speed USB device number 125 using dummy_hcd
[ 1452.262990][T20196] bond3: (slave vxcan3): Error -95 calling set_mac_address
[ 1452.272821][T14163] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[ 1452.287782][T14163] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 1452.329501][T20230] loop5: detected capacity change from 0 to 4096
[ 1452.337552][T14163] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1452.368033][T14163] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1452.402506][T14163] usb 3-1: SerialNumber: syz
[ 1452.413548][T20230] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[ 1452.469337][T20223] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1452.530455][T20230] EXT4-fs (loop5): shut down requested (2)
[ 1452.575796][T20220] device macvlan2 entered promiscuous mode
[ 1452.614282][T20220] device bond3 entered promiscuous mode
[ 1452.645252][T20220] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 1452.681171][T20220] device bond3 left promiscuous mode
[ 1452.687967][T14077] EXT4-fs (loop5): unmounting filesystem.
[ 1452.728880][T20223] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1453.139470][T14167] usb 6-1: new low-speed USB device number 16 using dummy_hcd
[ 1453.153036][T14163] cdc_ether: probe of 3-1:1.0 failed with error -71
[ 1453.176781][T20245] loop1: detected capacity change from 0 to 256
[ 1453.194753][T14163] usb 3-1: USB disconnect, device number 125
[ 1453.252749][T20170] chnl_net:caif_netlink_parms(): no params data found
[ 1453.269813][T20245] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[ 1453.369495][T14167] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[ 1453.388003][T14167] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1453.396376][   T46] bond1: (slave gretap1): Releasing active interface
[ 1453.437544][T14167] usb 6-1: config 0 descriptor??
[ 1453.461374][T14167] asix: probe of 6-1:0.0 failed with error -22
[ 1453.871030][T14079] Bluetooth: hci0: command 0x041b tx timeout
[ 1454.002304][T20170] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1454.022006][T20170] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1454.041194][T20170] device bridge_slave_0 entered promiscuous mode
[ 1454.103209][T20170] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1454.110488][T20170] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1454.135935][T20170] device bridge_slave_1 entered promiscuous mode
[ 1454.478405][T20170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1454.506864][   T46] device hsr_slave_0 left promiscuous mode
[ 1454.531149][   T46] device hsr_slave_1 left promiscuous mode
[ 1454.567820][   T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1454.580888][   T46] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1454.599162][   T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1454.617472][   T46] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1454.687641][   T46] device bridge_slave_1 left promiscuous mode
[ 1454.708249][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1454.782850][   T46] device bridge_slave_0 left promiscuous mode
[ 1454.809596][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1454.943987][   T46] device veth1_macvtap left promiscuous mode
[ 1454.950183][   T46] device veth0_macvtap left promiscuous mode
[ 1454.963050][   T46] device veth1_vlan left promiscuous mode
[ 1454.969014][   T46] device veth0_vlan left promiscuous mode
[ 1455.146965][ T4272] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1455.160300][ T4272] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1455.172711][ T4272] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1455.182327][ T4272] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1455.190415][ T4272] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1455.198963][ T4272] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1455.302463][   T46] bond1 (unregistering): Released all slaves
[ 1455.905063][T14163] usb 6-1: USB disconnect, device number 16
[ 1455.950932][T14079] Bluetooth: hci0: command 0x040f tx timeout
[ 1456.197149][T20287] loop5: detected capacity change from 0 to 512
[ 1456.272832][T20287] EXT4-fs (loop5): 1 truncate cleaned up
[ 1456.301158][T20287] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[ 1456.383033][T20287] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.3781: bg 0: block 465: padding at end of block bitmap is not set
[ 1456.598249][T14077] EXT4-fs (loop5): unmounting filesystem.
[ 1456.697583][   T46] team0 (unregistering): Port device team_slave_1 removed
[ 1456.800208][   T46] team0 (unregistering): Port device team_slave_0 removed
[ 1456.873115][   T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1456.944131][   T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1457.332199][T14079] Bluetooth: hci4: command 0x0409 tx timeout
[ 1457.494786][   T46] bond0 (unregistering): Released all slaves
[ 1457.644308][T20170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1457.687803][T20289] netlink: 'syz.2.3782': attribute type 1 has an invalid length.
[ 1457.750170][T20291] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[ 1457.767277][T20291] bond3: (slave vxcan3): Error -95 calling set_mac_address
[ 1457.789801][T20293] device macvlan2 entered promiscuous mode
[ 1457.796751][T20293] device bond3 entered promiscuous mode
[ 1457.804701][T20293] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 1457.819551][T20293] device bond3 left promiscuous mode
[ 1457.989405][T20170] team0: Port device team_slave_0 added
[ 1458.030803][T14079] Bluetooth: hci0: command 0x0419 tx timeout
[ 1458.048375][T20170] team0: Port device team_slave_1 added
[ 1458.208932][T20170] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1458.216209][T20170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1458.252859][T20170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1458.283178][T20170] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1458.297104][T20170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1458.324070][T20170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1458.482613][T20170] device hsr_slave_0 entered promiscuous mode
[ 1458.586430][T20170] device hsr_slave_1 entered promiscuous mode
[ 1458.634203][T20170] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1458.661490][T20170] Cannot create hsr debugfs directory
[ 1458.672803][T20279] chnl_net:caif_netlink_parms(): no params data found
[ 1458.845681][T20310] loop2: detected capacity change from 0 to 4096
[ 1458.937934][T20310] EXT4-fs (loop2): Test dummy encryption mode enabled
[ 1458.987066][T20310] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0103]
[ 1459.010885][T20310] System zones: 0-5
[ 1459.045645][T20310] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[ 1459.246427][T20279] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1459.266322][T20279] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1459.300890][T20279] device bridge_slave_0 entered promiscuous mode
[ 1459.390045][T20330] loop1: detected capacity change from 0 to 128
[ 1459.396626][ T4272] Bluetooth: hci4: command 0x041b tx timeout
[ 1459.423466][T20330] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1459.440909][T20330] EXT4-fs: Ignoring removed nobh option
[ 1459.486792][T20279] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1459.500185][T20279] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1459.509776][T20330] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[ 1459.546537][T20279] device bridge_slave_1 entered promiscuous mode
[ 1459.562258][T20310] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[ 1459.621096][T20330] ext4 filesystem being mounted at /145/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1459.661673][T20323] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[ 1459.834883][T20279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1459.977202][T16852] EXT4-fs (loop2): unmounting filesystem.
[ 1460.019964][T16306] EXT4-fs (loop1): unmounting filesystem.
[ 1460.177515][T20279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1460.397245][T20279] team0: Port device team_slave_0 added
[ 1460.580153][T20279] team0: Port device team_slave_1 added
[ 1460.702874][T20170] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1460.731784][T20366] loop2: detected capacity change from 0 to 128
[ 1460.783138][T20279] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1460.790193][T20279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1460.847368][T20366] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535)
[ 1460.890050][T20366] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 1460.980459][T20279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1461.030873][T20366] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #11: comm syz.2.3794: No space for directory leaf checksum. Please run e2fsck -D.
[ 1461.070776][T20366] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #11: comm syz.2.3794: checksumming directory block 0
[ 1461.126661][T20363] netlink: 'syz.1.3793': attribute type 1 has an invalid length.
[ 1461.154076][T16852] EXT4-fs (loop2): unmounting filesystem.
[ 1461.275105][T20365] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[ 1461.329278][T20365] bond3: (slave vxcan3): Error -95 calling set_mac_address
[ 1461.344161][T20376] loop2: detected capacity change from 0 to 512
[ 1461.425974][T20170] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1461.471073][ T4272] Bluetooth: hci4: command 0x040f tx timeout
[ 1461.501551][T20376] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.3795: bad orphan inode 15
[ 1461.521700][T20279] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1461.559304][T20279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1461.559335][T20376] ext4_test_bit(bit=14, block=18) = 1
[ 1461.559355][T20376] is_bad_inode(inode)=0
[ 1461.605992][T20376] NEXT_ORPHAN(inode)=1023
[ 1461.610584][T20376] max_ino=32
[ 1461.614613][T20376] i_nlink=0
[ 1461.624533][T20376] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2915: inode #15: comm syz.2.3795: corrupted xattr block 19
[ 1461.639976][T20376] EXT4-fs warning (device loop2): ext4_evict_inode:299: xattr delete (err -117)
[ 1461.653684][T20279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1461.665248][T20376] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 1461.680776][T20170] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1461.693991][T20376] ext4 filesystem being mounted at /130/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff)
[ 1461.759234][T20170] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1461.886368][T16852] EXT4-fs (loop2): unmounting filesystem.
[ 1461.918293][T20279] device hsr_slave_0 entered promiscuous mode
[ 1461.943169][T20279] device hsr_slave_1 entered promiscuous mode
[ 1461.962568][T20279] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1461.978299][T20279] Cannot create hsr debugfs directory
[ 1462.392529][T20170] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1462.547245][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1462.604917][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1462.644578][T20398] xt_policy: output policy not valid in PREROUTING and INPUT
[ 1462.660611][T20170] 8021q: adding VLAN 0 to HW filter on device team0
[ 1462.688738][T20402] loop5: detected capacity change from 0 to 512
[ 1462.729746][T20402] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[ 1462.798212][T20402] EXT4-fs (loop5): 1 truncate cleaned up
[ 1462.809902][T20402] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[ 1462.951152][T20398] netlink: 'syz.1.3797': attribute type 1 has an invalid length.
[ 1463.351058][T20393] usb 2-1: new full-speed USB device number 111 using dummy_hcd
[ 1463.397566][T14077] EXT4-fs (loop5): unmounting filesystem.
[ 1463.550809][ T4272] Bluetooth: hci4: command 0x0419 tx timeout
[ 1463.571258][T20393] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1463.589440][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1463.599900][T20393] usb 2-1: not running at top speed; connect to a high speed hub
[ 1463.622745][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1463.648939][ T4376] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1463.656625][ T4376] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1463.670427][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1463.686139][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1463.696563][ T4376] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1463.704144][ T4376] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1463.725697][T20393] usb 2-1: config 17 has an invalid interface number: 8 but max is 1
[ 1463.735544][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1463.745223][T20393] usb 2-1: config 17 has 1 interface, different from the descriptor's value: 2
[ 1463.765692][T20393] usb 2-1: config 17 has no interface number 0
[ 1463.777230][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1463.791029][T20393] usb 2-1: config 17 interface 8 altsetting 6 endpoint 0x3 has an invalid bInterval 0, changing to 4
[ 1463.829187][T20393] usb 2-1: config 17 interface 8 has no altsetting 0
[ 1463.912901][T20393] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff
[ 1464.050399][T20393] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1464.157011][T20393] usb 2-1: Product: syz
[ 1464.185521][T20393] usb 2-1: Manufacturer: syz
[ 1464.190223][T20393] usb 2-1: SerialNumber: syz
[ 1464.317458][   T26] audit: type=1326 audit(1769723554.792:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20430 comm="syz.2.3805" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa08cb9aeb9 code=0x0
[ 1464.584460][T16631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1464.605430][T16631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1464.653849][T16631] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1464.676809][T16631] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1465.025163][T16631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1465.038978][T16631] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1465.568894][T20170] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1466.363734][T20170] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1466.528498][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1466.578720][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1466.641622][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1466.684619][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1466.762020][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1467.225981][   T46] bond1: (slave gretap1): Releasing active interface
[ 1467.311996][T14162] usb 3-1: new high-speed USB device number 126 using dummy_hcd
[ 1467.500927][T14162] usb 3-1: Using ep0 maxpacket: 32
[ 1467.508905][T14162] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32
[ 1467.537976][T20279] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1467.568239][T14162] usb 3-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5
[ 1467.608496][T14162] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1467.637673][T14162] usb 3-1: Product: syz
[ 1467.670828][T14162] usb 3-1: Manufacturer: syz
[ 1467.695884][T14162] usb 3-1: SerialNumber: syz
[ 1467.741797][T14162] usb 3-1: config 0 descriptor??
[ 1467.761516][T20461] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 1467.916912][T20279] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1467.992752][T14166] usb 3-1: USB disconnect, device number 126
[ 1468.022107][T20279] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1468.143940][T20393] usb 2-1: selecting invalid altsetting 0
[ 1468.166041][T20393] usb 2-1: 8:6 : no UAC_FORMAT_TYPE desc
[ 1468.180635][T20393] usb 2-1: selecting invalid altsetting 0
[ 1468.246991][T20468] loop1: detected capacity change from 0 to 512
[ 1468.255790][T20393] usb 2-1: USB disconnect, device number 111
[ 1468.305169][T20279] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1468.321137][T20468] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[ 1468.344227][T20465] udevd[20465]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1468.450491][T20468] EXT4-fs error (device loop1): __ext4_iget:5095: inode #11: block 524312: comm syz.1.3811: invalid block
[ 1468.491804][T18258] udevd[18258]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.8/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1468.506180][T20468] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.3811: couldn't read orphan inode 11 (err -117)
[ 1468.595679][T20468] EXT4-fs (loop1): 1 truncate cleaned up
[ 1468.637004][T20468] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[ 1468.674753][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1468.723058][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1468.776561][T20170] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1468.828578][T20478] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #2: block 13: comm syz.1.3811: lblock 0 mapped to illegal pblock 13 (length 1)
[ 1468.902646][T20468] EXT4-fs error (device loop1): __ext4_get_inode_loc:4513: comm syz.1.3811: Invalid inode table block 5 in block_group 0
[ 1468.938320][   T46] device hsr_slave_0 left promiscuous mode
[ 1468.962149][   T46] device hsr_slave_1 left promiscuous mode
[ 1469.031483][   T46] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1469.054661][   T46] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1469.082280][T16306] EXT4-fs (loop1): unmounting filesystem.
[ 1469.120471][   T46] bond3 (unregistering): Released all slaves
[ 1469.179301][   T46] bond2 (unregistering): Released all slaves
[ 1469.190547][T20483] loop5: detected capacity change from 0 to 256
[ 1469.241430][   T46] bond1 (unregistering): Released all slaves
[ 1469.256884][T20483] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d)
[ 1472.232678][T20520] xt_TCPMSS: Only works on TCP SYN packets
[ 1472.481401][   T46] team0 (unregistering): Port device team_slave_1 removed
[ 1472.599015][   T46] team0 (unregistering): Port device team_slave_0 removed
[ 1472.699531][   T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1472.862007][   T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1473.990210][   T46] bond0 (unregistering): Released all slaves
[ 1474.107896][T20487] device syzkaller0 entered promiscuous mode
[ 1474.619769][T20279] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1474.750383][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1474.781829][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1474.842445][T20279] 8021q: adding VLAN 0 to HW filter on device team0
[ 1474.930209][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1475.021378][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1475.081959][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1475.089237][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1475.154928][T20541] loop1: detected capacity change from 0 to 2048
[ 1475.204236][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1475.290508][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1475.316085][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1475.341095][T20541] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1475.361627][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1475.368935][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1475.413247][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1475.439526][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1476.150572][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1476.403064][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1476.443192][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1476.466091][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1476.499354][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1476.539665][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1476.562240][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1476.608092][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1476.648122][T20279] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1476.693147][T20279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1476.732157][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1476.761848][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1476.802120][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1476.826561][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1476.881866][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1476.982009][T20170] device veth0_vlan entered promiscuous mode
[ 1477.011723][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1477.070202][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1477.100910][T20523] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[ 1477.116334][T20170] device veth1_vlan entered promiscuous mode
[ 1477.281078][T20523] usb 6-1: Using ep0 maxpacket: 8
[ 1477.288264][T20523] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1477.355375][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1477.363703][T20523] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1477.389077][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1477.404862][T20523] usb 6-1: New USB device found, idVendor=056a, idProduct=0003, bcdDevice= 0.00
[ 1477.429957][T20170] device veth0_macvtap entered promiscuous mode
[ 1477.443396][T20523] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1477.544948][T20170] device veth1_macvtap entered promiscuous mode
[ 1477.591931][T20523] usb 6-1: config 0 descriptor??
[ 1477.752510][T20170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1477.854689][T20170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1477.941580][T20170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1478.042877][T20170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1478.170758][T20170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1478.240999][T20170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1478.273320][T20170] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1478.325319][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1478.362655][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1478.391913][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1478.411410][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1478.487780][T20170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1478.514033][T20170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1478.549590][T20170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1478.610897][T20170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1478.646291][T20170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1478.696783][T20170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1478.737721][T20170] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1478.761355][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1478.799371][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1478.824942][T20170] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1478.863479][T20170] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1478.913365][T20170] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1478.947944][T20170] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1479.175274][T16631] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1479.194599][T20523] usbhid 6-1:0.0: can't add hid device: -71
[ 1479.200001][T16631] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1479.208115][T20523] usbhid: probe of 6-1:0.0 failed with error -71
[ 1479.224702][T20523] usb 6-1: USB disconnect, device number 17
[ 1479.291203][T20279] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1479.332454][T16631] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1479.387189][T16631] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1479.430987][T16441] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1479.447236][T16631] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1479.498390][T16631] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1479.534337][T20570] device syzkaller0 entered promiscuous mode
[ 1479.560028][T16631] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1480.147018][T20579] loop2: detected capacity change from 0 to 512
[ 1480.263062][T20579] EXT4-fs (loop2): 1 truncate cleaned up
[ 1480.329942][T20579] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 1480.429271][   T26] audit: type=1800 audit(1769723570.902:1227): pid=20579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3834" name="file0" dev="loop2" ino=13 res=0 errno=0
[ 1480.467683][T20585] loop1: detected capacity change from 0 to 1024
[ 1480.554039][T20585] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[ 1480.571554][T20585] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1480.649479][T16852] EXT4-fs (loop2): unmounting filesystem.
[ 1480.681515][T20585] EXT4-fs error (device loop1): ext4_lookup:1858: inode #15: comm syz.1.3836: inode has both inline data and extents flags
[ 1480.734442][T20587] EXT4-fs error (device loop1): ext4_lookup:1858: inode #15: comm syz.1.3836: inode has both inline data and extents flags
[ 1480.903571][T16306] EXT4-fs (loop1): unmounting filesystem.
[ 1480.925157][T16561] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1481.053464][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1481.079326][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1481.188294][T16561] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1481.214086][T20600] loop2: detected capacity change from 0 to 1024
[ 1481.363946][T20600] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 1481.401477][T20600] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1481.514504][T20600] EXT4-fs error (device loop2): ext4_lookup:1858: inode #15: comm syz.2.3841: inode has both inline data and extents flags
[ 1481.528581][T16561] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1481.700748][T20600] EXT4-fs (loop2): Remounting filesystem read-only
[ 1482.536030][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1482.552589][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1482.564472][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1482.572922][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1482.678814][T16561] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1482.717592][T20279] device veth0_vlan entered promiscuous mode
[ 1482.779030][T16852] EXT4-fs (loop2): unmounting filesystem.
[ 1482.797711][T20279] device veth1_vlan entered promiscuous mode
[ 1483.011210][T14079] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1483.026998][T14079] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1483.037813][T14079] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1483.052308][T14079] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1483.062834][T14079] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1483.073301][T14079] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1483.224182][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1483.258831][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1483.364775][T20279] device veth0_macvtap entered promiscuous mode
[ 1483.390249][T20618] device syzkaller0 entered promiscuous mode
[ 1483.397443][T20393] usb 3-1: new high-speed USB device number 127 using dummy_hcd
[ 1483.505904][T20279] device veth1_macvtap entered promiscuous mode
[ 1483.580899][T20393] usb 3-1: Using ep0 maxpacket: 32
[ 1483.588406][T20393] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1483.602597][T16631] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1483.626971][T16631] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1483.633305][T20393] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1483.653507][T20393] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 1483.728420][T20393] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[ 1483.746345][T20393] usb 3-1: Product: syz
[ 1483.769887][T20393] usb 3-1: Manufacturer: syz
[ 1483.776222][T20279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1483.828179][T20279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1483.849740][T20279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1483.855944][T20393] hub 3-1:4.0: USB hub found
[ 1483.893583][T20279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1483.910883][T20279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1483.921843][T20279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1483.953916][T20279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1483.979257][T20279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1484.016041][T20279] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1484.058831][T20393] hub 3-1:4.0: config failed, hub has too many ports! (err -19)
[ 1484.152683][T17526] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1484.181413][T17526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1484.345956][T20279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1484.360063][T20279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1484.370874][T20279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1484.382228][T20279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1484.392830][T20279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1484.404348][T20279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1484.420946][T20279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1484.446113][T20279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1484.503224][T20279] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1484.515721][ T1267] ieee802154 phy0 wpan0: encryption failed: -22
[ 1484.522501][ T1267] ieee802154 phy1 wpan1: encryption failed: -22
[ 1484.575686][T14162] usb 3-1: USB disconnect, device number 127
[ 1484.627179][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1484.681168][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1484.802662][T20279] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1484.819717][T20631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3846'.
[ 1484.829669][T20279] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1484.846542][T20279] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1484.855744][T20279] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1486.146164][   T48] Bluetooth: hci0: command 0x0409 tx timeout
[ 1486.310931][T20620] chnl_net:caif_netlink_parms(): no params data found
[ 1486.548130][   T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1486.585036][   T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1486.626802][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1486.955711][   T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1486.987064][T20658] loop2: detected capacity change from 0 to 256
[ 1487.008163][   T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1487.042845][T20658] FAT-fs (loop2): Unrecognized mount option "01777777777777777777777" or missing value
[ 1487.396832][T20620] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1487.404540][T20620] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1487.418830][T20620] device bridge_slave_0 entered promiscuous mode
[ 1487.470851][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1487.538392][T20620] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1487.552251][T20620] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1487.591067][T20620] device bridge_slave_1 entered promiscuous mode
[ 1487.891476][T20675] loop4: detected capacity change from 0 to 512
[ 1487.900158][T20620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1487.928434][T20667] device syzkaller0 entered promiscuous mode
[ 1487.964524][T20675] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[ 1487.995430][T20675] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e12c, mo2=0002]
[ 1488.076847][T20620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1488.086886][T20675] System zones: 1-12
[ 1488.112144][T20675] EXT4-fs (loop4): orphan cleanup on readonly fs
[ 1488.130164][T20682] loop1: detected capacity change from 0 to 1024
[ 1488.146205][T20682] EXT4-fs: Ignoring removed oldalloc option
[ 1488.191026][   T48] Bluetooth: hci0: command 0x041b tx timeout
[ 1488.205041][T20675] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.3778: bg 0: block 361: padding at end of block bitmap is not set
[ 1488.241747][T20682] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[ 1488.250417][T20682] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1488.336960][T20675] EXT4-fs (loop4): Remounting filesystem read-only
[ 1488.381052][T20675] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6181: Corrupt filesystem
[ 1488.411015][T20675] EXT4-fs (loop4): Remounting filesystem read-only
[ 1488.425378][T20675] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.3778: invalid indirect mapped block 12 (level 1)
[ 1489.528504][T20675] EXT4-fs (loop4): Remounting filesystem read-only
[ 1489.541379][T20675] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.3778: invalid indirect mapped block 2 (level 2)
[ 1489.564017][T16561] device hsr_slave_0 left promiscuous mode
[ 1489.581378][T20682] EXT4-fs error (device loop1): ext4_lookup:1858: inode #15: comm syz.1.3856: inode has both inline data and extents flags
[ 1489.596981][T16561] device hsr_slave_1 left promiscuous mode
[ 1489.622510][T20675] EXT4-fs (loop4): Remounting filesystem read-only
[ 1489.671287][T20675] EXT4-fs (loop4): 1 truncate cleaned up
[ 1489.677036][T20675] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[ 1489.704668][T16561] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1489.722970][T16561] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1489.751621][T16561] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1489.824044][T20675] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #2: block 5: comm syz.4.3778: lblock 0 mapped to illegal pblock 5 (length 1)
[ 1489.866472][T16561] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1489.908283][T16561] device bridge_slave_1 left promiscuous mode
[ 1489.928022][T20675] EXT4-fs warning (device loop4): dx_probe:823: inode #2: lblock 0: comm syz.4.3778: error -117 reading directory block
[ 1489.973906][T16561] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1489.989557][T20699] loop5: detected capacity change from 0 to 512
[ 1490.076297][T16561] device bridge_slave_0 left promiscuous mode
[ 1490.092416][T20279] EXT4-fs (loop4): unmounting filesystem.
[ 1490.103421][T20699] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: comm syz.5.3859: inode #1: comm syz.5.3859: iget: illegal inode #
[ 1490.129632][T16561] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1490.301065][T20699] EXT4-fs (loop5): Remounting filesystem read-only
[ 1490.320875][   T48] Bluetooth: hci0: command 0x040f tx timeout
[ 1490.352914][T20699] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.3859: error while reading EA inode 1 err=-117
[ 1490.457347][T20699] EXT4-fs (loop5): Remounting filesystem read-only
[ 1490.502444][T16306] EXT4-fs (loop1): unmounting filesystem.
[ 1490.534243][T20705] loop4: detected capacity change from 0 to 256
[ 1490.553146][T20699] EXT4-fs (loop5): 1 orphan inode deleted
[ 1490.558981][T20699] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[ 1490.579785][T16561] device veth1_macvtap left promiscuous mode
[ 1490.630621][T16561] device veth0_macvtap left promiscuous mode
[ 1490.654224][T16561] device veth1_vlan left promiscuous mode
[ 1490.660420][T16561] device veth0_vlan left promiscuous mode
[ 1490.668113][T20699] EXT4-fs error (device loop5): __ext4_expand_extra_isize:5953: inode #15: comm syz.5.3859: bad extra_isize 6 (inode size 256)
[ 1490.696511][T20699] EXT4-fs (loop5): Remounting filesystem read-only
[ 1490.880162][T14077] EXT4-fs (loop5): unmounting filesystem.
[ 1492.156350][T20730] usb usb9: usbfs: process 20730 (syz.2.3858) did not claim interface 0 before use
[ 1492.350910][ T4272] Bluetooth: hci0: command 0x0419 tx timeout
[ 1492.406317][T20736] loop2: detected capacity change from 0 to 8
[ 1492.450254][T20736] SQUASHFS error: Unable to read inode 0x11f
[ 1493.458421][T20771] loop1: detected capacity change from 0 to 1024
[ 1493.678972][T20771] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[ 1493.958156][T16306] EXT4-fs (loop1): unmounting filesystem.
[ 1494.328140][T16561] team0 (unregistering): Port device team_slave_1 removed
[ 1494.438944][T16561] team0 (unregistering): Port device team_slave_0 removed
[ 1494.468161][T20523] usb 2-1: new high-speed USB device number 112 using dummy_hcd
[ 1494.551857][T16561] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1494.680609][T20523] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1494.698933][T20523] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1494.712523][T16561] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1494.732233][T20523] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1494.756853][T20523] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1494.766304][T20523] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1494.777110][T20523] usb 2-1: config 0 descriptor??
[ 1495.219569][T20523] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x2
[ 1495.232720][T20523] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0
[ 1495.245187][T20523] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0
[ 1495.256543][T20523] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0
[ 1495.268853][T20523] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0
[ 1495.278898][T20523] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0
[ 1495.294931][T20523] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0
[ 1495.305152][T20523] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0
[ 1495.319715][T20523] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0
[ 1495.339645][T20523] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0
[ 1495.350031][T20523] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0
[ 1495.358989][T20523] plantronics 0003:047F:FFFF.0018: No inputs registered, leaving
[ 1495.407833][T20523] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[ 1495.444961][T20393] usb 2-1: USB disconnect, device number 112
[ 1495.484539][T16561] bond0 (unregistering): Released all slaves
[ 1495.597037][T20780] fido_id[20780]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[ 1495.666168][T20620] team0: Port device team_slave_0 added
[ 1495.683302][T20746] device syzkaller0 entered promiscuous mode
[ 1495.691249][T20770] tc_dump_action: action bad kind
[ 1495.719276][T20620] team0: Port device team_slave_1 added
[ 1495.808122][T20620] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1495.842146][T20620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1495.965673][T20620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1496.116108][T20620] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1496.140748][T20620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1496.360936][T20620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1496.388267][T20796] loop5: detected capacity change from 0 to 2048
[ 1496.422535][T20789] netlink: 'syz.4.3872': attribute type 1 has an invalid length.
[ 1496.460811][T20796] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1496.629634][T20800] loop1: detected capacity change from 0 to 4096
[ 1496.688145][T20800] EXT4-fs error (device loop1): ext4_quota_enable:7043: comm syz.1.3877: inode #234881024: comm syz.1.3877: iget: illegal inode #
[ 1496.806271][T20804] batman_adv: batadv0: Adding interface: gretap1
[ 1496.817339][T20800] EXT4-fs (loop1): Remounting filesystem read-only
[ 1496.831064][T20800] EXT4-fs error (device loop1): ext4_quota_enable:7046: comm syz.1.3877: Bad quota inode: 234881024, type: 2
[ 1496.872455][T20800] EXT4-fs (loop1): Remounting filesystem read-only
[ 1496.879177][T20800] EXT4-fs warning (device loop1): ext4_enable_quotas:7087: Failed to enable quota tracking (type=2, err=-117, ino=234881024). Please run e2fsck to fix.
[ 1496.931965][T20804] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active
[ 1496.974223][T20800] EXT4-fs (loop1): mount failed
[ 1497.120467][T20810] device macvlan2 entered promiscuous mode
[ 1497.387768][T20620] device hsr_slave_0 entered promiscuous mode
[ 1497.451369][T20620] device hsr_slave_1 entered promiscuous mode
[ 1497.465661][T20620] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1497.504374][T20620] Cannot create hsr debugfs directory
[ 1497.509988][T14077] UDF-fs: error (device loop5): udf_read_inode: (ino 1317) failed !bh
[ 1497.572335][T14077] UDF-fs: error (device loop5): udf_read_inode: (ino 1317) failed !bh
[ 1497.786618][T20818] netlink: 'syz.1.3879': attribute type 1 has an invalid length.
[ 1498.265123][T20823] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address
[ 1498.338878][T20823] bond4: (slave vxcan3): Error -95 calling set_mac_address
[ 1499.197775][T20818] device macvlan2 entered promiscuous mode
[ 1499.492527][T20818] device bond4 entered promiscuous mode
[ 1499.674122][T20818] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 1499.945152][T20844] loop4: detected capacity change from 0 to 128
[ 1500.010227][T20818] device bond4 left promiscuous mode
[ 1500.028293][T20844] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[ 1500.043867][T20844] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1500.259897][   T48] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1500.271948][   T48] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1500.281149][   T48] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1500.289217][   T48] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1500.298267][   T48] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1500.305546][   T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1500.494776][T20279] EXT4-fs (loop4): unmounting filesystem.
[ 1500.882738][T20861] loop2: detected capacity change from 0 to 128
[ 1500.943347][T20861] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 1500.956382][T20861] ext4 filesystem being mounted at /162/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1501.241993][T16852] EXT4-fs (loop2): unmounting filesystem.
[ 1501.406012][T20858] device syzkaller0 entered promiscuous mode
[ 1501.909819][T20882] loop2: detected capacity change from 0 to 512
[ 1502.353148][ T4272] Bluetooth: hci1: command 0x0409 tx timeout
[ 1502.510416][T20882] EXT4-fs (loop2): orphan cleanup on readonly fs
[ 1502.529121][T20882] EXT4-fs error (device loop2): ext4_do_update_inode:5272: inode #15: comm syz.2.3888: corrupted inode contents
[ 1502.547799][T20882] EXT4-fs (loop2): Remounting filesystem read-only
[ 1502.554632][T20882] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem
[ 1502.568834][T20882] EXT4-fs (loop2): Remounting filesystem read-only
[ 1502.576072][T20882] EXT4-fs error (device loop2): ext4_do_update_inode:5272: inode #15: comm syz.2.3888: corrupted inode contents
[ 1502.610922][T20882] EXT4-fs (loop2): Remounting filesystem read-only
[ 1502.617860][T20882] EXT4-fs error (device loop2): ext4_evict_inode:327: inode #15: comm syz.2.3888: mark_inode_dirty error
[ 1502.633601][T20882] EXT4-fs (loop2): Remounting filesystem read-only
[ 1502.641185][T20882] EXT4-fs (loop2): 1 orphan inode deleted
[ 1502.647353][T20882] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 1503.283275][T16561] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1503.476239][T20882] Bluetooth: MGMT ver 1.22
[ 1504.431289][ T4272] Bluetooth: hci1: command 0x041b tx timeout
[ 1510.829840][   T48] Bluetooth: hci1: command 0x040f tx timeout
[ 1510.954898][T16852] EXT4-fs (loop2): unmounting filesystem.
[ 1510.984489][T16561] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1511.291110][T20892] mmap: syz.2.3890 (20892): VmData 175874048 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data.
[ 1511.616447][T16561] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1511.800146][T20900] loop2: detected capacity change from 0 to 256
[ 1511.847364][T20900] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[ 1512.120566][T16561] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1512.803723][T20922] loop1: detected capacity change from 0 to 128
[ 1512.867661][T20922] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[ 1512.893872][T20922] ext4 filesystem being mounted at /170/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[ 1512.920011][   T48] Bluetooth: hci1: command 0x0419 tx timeout
[ 1513.015904][T20847] chnl_net:caif_netlink_parms(): no params data found
[ 1513.205252][T16306] EXT4-fs (loop1): unmounting filesystem.
[ 1513.546425][T20932] loop1: detected capacity change from 0 to 1024
[ 1513.578951][T20847] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1513.586395][T20847] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1513.597245][T20847] device bridge_slave_0 entered promiscuous mode
[ 1513.648538][T20932] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[ 1513.660891][T20932] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1513.843443][T20847] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1513.863247][T20847] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1513.884693][T20847] device bridge_slave_1 entered promiscuous mode
[ 1514.313892][T20847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1514.363125][T20940] loop4: detected capacity change from 0 to 16
[ 1514.427414][T20940] erofs: (device loop4): mounted with root inode @ nid 36.
[ 1514.463242][T15277] EXT4-fs error (device loop1): ext4_map_blocks:745: inode #15: comm kworker/u4:11: lblock 0 mapped to illegal pblock 0 (length 6)
[ 1514.482236][T20847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1514.528645][T15277] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117
[ 1514.564004][T15277] EXT4-fs (loop1): This should not happen!! Data will be lost
[ 1514.564004][T15277] 
[ 1514.616415][T15277] EXT4-fs error (device loop1): ext4_map_blocks:745: inode #15: block 8: comm kworker/u4:11: lblock 8 mapped to illegal pblock 8 (length 8)
[ 1514.694509][T15277] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[ 1514.738758][T15277] EXT4-fs (loop1): This should not happen!! Data will be lost
[ 1514.738758][T15277] 
[ 1514.763822][T20847] team0: Port device team_slave_0 added
[ 1514.771792][T20620] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1514.836872][T20620] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1514.903412][T20620] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1515.048642][T16306] EXT4-fs (loop1): unmounting filesystem.
[ 1515.156262][T20847] team0: Port device team_slave_1 added
[ 1515.207284][T20620] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1515.410368][T20953] loop4: detected capacity change from 0 to 512
[ 1515.441530][T20847] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1515.453020][T20847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1515.495310][T20953] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.3899: bg 0: block 393: padding at end of block bitmap is not set
[ 1515.566244][T20956] Invalid option length (1047662) for dns_resolver key
[ 1515.604007][T20956] loop1: detected capacity change from 0 to 128
[ 1515.812168][T20956] FAT-fs (loop1): bogus sectors per cluster 0
[ 1515.818409][T20956] FAT-fs (loop1): Can't find a valid FAT filesystem
[ 1516.255582][T20953] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6181: Corrupt filesystem
[ 1516.268421][T20953] EXT4-fs (loop4): 2 truncates cleaned up
[ 1516.274873][T20953] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[ 1516.311658][T20953] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1450: inode #12: block 7: comm syz.4.3899: path /14/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0
[ 1516.340741][T20847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1516.468756][T20953] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1450: inode #12: block 7: comm syz.4.3899: path /14/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0
[ 1516.510381][T20847] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1516.528581][T20847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1516.588271][T20847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1516.799081][T16561] bond1: (slave gretap1): Releasing active interface
[ 1516.873710][T20279] EXT4-fs (loop4): unmounting filesystem.
[ 1517.239889][T20847] device hsr_slave_0 entered promiscuous mode
[ 1517.281524][T20847] device hsr_slave_1 entered promiscuous mode
[ 1517.311134][T20847] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1517.331421][T20847] Cannot create hsr debugfs directory
[ 1517.482256][T14162] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[ 1517.681047][T14162] usb 3-1: Using ep0 maxpacket: 16
[ 1517.689091][T14162] usb 3-1: config 4 has an invalid interface number: 106 but max is 0
[ 1517.718291][T14162] usb 3-1: config 4 has no interface number 0
[ 1517.773219][T14162] usb 3-1: New USB device found, idVendor=05d1, idProduct=8003, bcdDevice=a2.4b
[ 1517.801945][T14162] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1517.832771][T14162] usb 3-1: Product: syz
[ 1517.837025][T14162] usb 3-1: Manufacturer: syz
[ 1517.859799][T14162] usb 3-1: SerialNumber: syz
[ 1517.886038][T14162] ftdi_sio 3-1:4.106: FTDI USB Serial Device converter detected
[ 1517.922637][T14162] ftdi_sio ttyUSB0: unknown device type: 0xa24b
[ 1518.030084][T20620] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1518.078329][T16561] device hsr_slave_0 left promiscuous mode
[ 1518.112379][T16561] device hsr_slave_1 left promiscuous mode
[ 1518.121134][T16561] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1518.134290][T16561] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1518.151672][T16561] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1518.179689][T16561] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1518.246132][T16561] device team_slave_0 left promiscuous mode
[ 1518.252813][T16561] device team_slave_1 left promiscuous mode
[ 1518.300242][T16561] device veth1_macvtap left promiscuous mode
[ 1518.309887][T16561] device veth0_macvtap left promiscuous mode
[ 1518.326868][T16561] device veth1_vlan left promiscuous mode
[ 1518.341087][T16561] device veth0_vlan left promiscuous mode
[ 1518.669697][T16561] bond7 (unregistering): Released all slaves
[ 1518.697810][T16561] bond6 (unregistering): Released all slaves
[ 1518.727080][T16561] bond5 (unregistering): Released all slaves
[ 1518.755561][T16561] bond4 (unregistering): Released all slaves
[ 1518.780307][T16561] bond3 (unregistering): Released all slaves
[ 1518.806469][T16561] bond2 (unregistering): Released all slaves
[ 1518.836903][T16561] bond1 (unregistering): Released all slaves
[ 1520.049454][T16561] team0 (unregistering): Port device team_slave_1 removed
[ 1520.118449][T16561] team0 (unregistering): Port device team_slave_0 removed
[ 1520.185686][T16561] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1520.255696][T16561] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1520.788466][T16561] bond0 (unregistering): Released all slaves
[ 1520.859290][T20620] 8021q: adding VLAN 0 to HW filter on device team0
[ 1520.958573][T20997] loop4: detected capacity change from 0 to 128
[ 1520.971581][T20997] EXT4-fs: Ignoring removed nobh option
[ 1521.046033][ T6475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1521.056083][ T6475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1521.087210][T20997] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[ 1521.096852][T20997] ext4 filesystem being mounted at /17/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1521.116873][ T6475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1521.157319][ T6475] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1521.167483][ T6475] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1521.174732][ T6475] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1521.216005][ T6475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1521.225074][T20997] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm syz.4.3904: Invalid block bitmap block 0 in block_group 0
[ 1521.227412][ T6475] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1521.257453][ T6475] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1521.264691][ T6475] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1521.321020][T20279] EXT4-fs (loop4): unmounting filesystem.
[ 1521.424484][ T6475] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1521.434497][T21001] loop4: detected capacity change from 0 to 8
[ 1521.442849][ T6475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1521.455535][T21001] SQUASHFS error: lzo decompression failed, data probably corrupt
[ 1521.463845][T21001] SQUASHFS error: Failed to read block 0x144: -5
[ 1521.470242][T21001] SQUASHFS error: Unable to read metadata cache entry [142]
[ 1521.477970][T21001] SQUASHFS error: Unable to read inode 0x11f
[ 1521.520224][ T6475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1521.633790][T16631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1521.660828][T16631] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1521.669999][T16631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1521.679337][T16631] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1521.688502][T16631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1521.697679][T16631] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1521.706390][T16631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1521.716443][T16631] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1521.727304][T16631] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1521.788596][T20620] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1521.971877][T14168] usb 3-1: USB disconnect, device number 2
[ 1522.004790][T14168] ftdi_sio 3-1:4.106: device disconnected
[ 1522.468435][T21022] loop2: detected capacity change from 0 to 128
[ 1522.508214][T21022] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[ 1522.573886][T21022] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 1522.614726][T21022] ext2 filesystem being mounted at /168/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1522.946805][   T26] audit: type=1800 audit(1769723613.422:1228): pid=21022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3909" name="file1" dev="loop2" ino=12 res=0 errno=0
[ 1523.083822][T16852] EXT4-fs (loop2): unmounting filesystem.
[ 1524.312114][T21037] ptrace attach of ""[21038] was attempted by "./syz-executor exec"[21037]
[ 1524.939239][T21042] loop4: detected capacity change from 0 to 512
[ 1525.004561][T16631] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1525.020493][T21042] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[ 1525.031503][T16631] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1525.047074][T20620] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1525.119564][T21042] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002]
[ 1525.133430][T21042] System zones: 1-12
[ 1525.206021][T21042] EXT4-fs error (device loop4): ext4_iget_extra_inode:4756: inode #15: comm syz.4.3912: corrupted in-inode xattr
[ 1525.227900][T16631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1525.241961][T21042] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.3912: couldn't read orphan inode 15 (err -117)
[ 1525.256634][T21042] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[ 1525.266559][T16631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1525.334325][T20620] device veth0_vlan entered promiscuous mode
[ 1525.367321][T15277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1525.382712][T15277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1525.412202][T15277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1525.434739][T20279] EXT4-fs (loop4): unmounting filesystem.
[ 1525.444633][T15277] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1525.499057][T20620] device veth1_vlan entered promiscuous mode
[ 1525.627043][T20847] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1525.671147][T20847] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1525.713023][T20620] device veth0_macvtap entered promiscuous mode
[ 1525.721197][ T6475] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1525.729584][ T6475] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1525.813041][ T6475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1525.831886][ T6475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1525.854936][ T6475] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1525.872445][T20847] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1525.886443][T20847] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1525.921079][T20620] device veth1_macvtap entered promiscuous mode
[ 1526.026750][T16441] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1526.061181][T20620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1526.080872][T20620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1526.100322][T20620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1526.118256][T20620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1526.128461][T20620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1526.140050][T20620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1526.170525][T20620] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1526.182726][T21066] loop1: detected capacity change from 0 to 8
[ 1526.205159][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1526.219557][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1526.253846][T21066] SQUASHFS error: lzo decompression failed, data probably corrupt
[ 1526.268315][T21066] SQUASHFS error: Failed to read block 0x144: -5
[ 1526.288702][T20620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1526.301316][T20620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1526.319213][T21066] SQUASHFS error: Unable to read metadata cache entry [142]
[ 1526.326903][T20620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1526.342927][T21066] SQUASHFS error: Unable to read inode 0x11f
[ 1526.350108][T20620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1526.380952][T20620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1526.411903][T20620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1526.440303][T20620] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1526.480900][T16631] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1526.489814][T16631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1526.519493][T20620] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1526.554637][T20620] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1526.606217][T20620] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1526.625268][T20620] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1526.796490][T20847] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1526.851073][T16441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1526.862049][T16441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1526.880500][T20847] 8021q: adding VLAN 0 to HW filter on device team0
[ 1526.909377][T16441] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1526.933711][T16631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1526.942155][T16441] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1526.981593][T16631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1527.019672][T16631] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1527.026919][T16631] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1527.064791][T21079] loop4: detected capacity change from 0 to 512
[ 1527.080791][T16631] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1527.108160][T16631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1527.134207][T16631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1527.145265][T21079] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1527.177125][T16631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1527.212634][T21079] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.3917: iget: bad i_size value: 38620345925642
[ 1527.226593][T21079] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.3917: couldn't read orphan inode 15 (err -117)
[ 1527.239661][T16631] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1527.246872][T16631] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1527.260713][T21079] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[ 1527.274249][T16631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1527.284857][T16561] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1527.309786][T16631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1527.351991][T16631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1527.370877][T16561] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1527.398546][T16631] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1527.426827][T21079] EXT4-fs error (device loop4): ext4_lookup:1858: inode #15: comm syz.4.3917: iget: bad i_size value: 38620345925642
[ 1527.476930][T16631] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1527.507078][T16631] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1527.558594][T16631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1527.590952][T16631] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1527.631848][T16631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1527.682028][T16631] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1527.756323][T16631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1527.775549][T16631] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1527.829312][T20847] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1527.862336][T21089] EXT4-fs error (device loop4): ext4_lookup:1858: inode #15: comm syz.4.3917: iget: bad i_size value: 38620345925642
[ 1528.307998][T20279] EXT4-fs (loop4): unmounting filesystem.
[ 1528.555592][T21104] device syzkaller0 entered promiscuous mode
[ 1528.859226][T21107] xt_policy: output policy not valid in PREROUTING and INPUT
[ 1529.086734][T21107] netlink: 'syz.1.3918': attribute type 1 has an invalid length.
[ 1529.109679][T21119] loop4: detected capacity change from 0 to 16
[ 1529.144957][T21119] erofs: (device loop4): mounted with root inode @ nid 36.
[ 1529.248448][   T48] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -41 in[4096, 0] out[9000]
[ 1529.288063][T21119] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -41 in[4096, 0] out[8192]
[ 1529.304121][   T26] audit: type=1800 audit(1769723619.782:1229): pid=21119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3920" name="file2" dev="loop4" ino=89 res=0 errno=0
[ 1529.429692][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1529.458560][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1529.504163][T20847] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1529.620748][T20523] usb 2-1: new full-speed USB device number 113 using dummy_hcd
[ 1529.903829][T20523] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1529.925912][T20523] usb 2-1: not running at top speed; connect to a high speed hub
[ 1529.994015][T20523] usb 2-1: config 17 has an invalid interface number: 8 but max is 1
[ 1530.023084][T20523] usb 2-1: config 17 has 1 interface, different from the descriptor's value: 2
[ 1530.066161][T20523] usb 2-1: config 17 has no interface number 0
[ 1530.096723][T20523] usb 2-1: config 17 interface 8 altsetting 6 endpoint 0x3 has an invalid bInterval 0, changing to 4
[ 1530.111043][ T5337] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[ 1530.152823][T20523] usb 2-1: config 17 interface 8 has no altsetting 0
[ 1530.218630][T20523] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff
[ 1530.240791][T20523] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1530.279265][T20523] usb 2-1: Product: syz
[ 1530.290232][T20523] usb 2-1: Manufacturer: syz
[ 1530.300834][ T5337] usb 5-1: Using ep0 maxpacket: 16
[ 1530.305633][T20523] usb 2-1: SerialNumber: syz
[ 1530.311083][ T5337] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1530.375945][ T5337] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e
[ 1530.447720][ T5337] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1530.490793][ T5337] usb 5-1: Product: syz
[ 1530.495074][ T5337] usb 5-1: Manufacturer: syz
[ 1530.559638][ T5337] usb 5-1: SerialNumber: syz
[ 1530.614878][ T5337] usb 5-1: config 0 descriptor??
[ 1530.663370][ T5337] hub 5-1:0.0: bad descriptor, ignoring hub
[ 1530.729598][ T5337] hub: probe of 5-1:0.0 failed with error -5
[ 1530.798798][ T5337] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input71
[ 1530.932345][ T5337] usb 5-1: USB disconnect, device number 23
[ 1532.200251][T21140] loop2: detected capacity change from 0 to 128
[ 1532.359706][T21140] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 1532.386793][T21140] ext4 filesystem being mounted at /172/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[ 1532.625036][T21149] xt_TCPMSS: Only works on TCP SYN packets
[ 1532.736220][T16631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1532.746039][T21153] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz.2.3924: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1
[ 1532.796699][T16631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1532.875470][T16631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1532.904122][T16631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1532.984159][T21153] EXT4-fs (loop2): Remounting filesystem read-only
[ 1532.996906][T20847] device veth0_vlan entered promiscuous mode
[ 1533.051707][T16631] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1533.090067][T16631] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1533.156704][T20847] device veth1_vlan entered promiscuous mode
[ 1533.193552][T16852] EXT4-fs (loop2): unmounting filesystem.
[ 1533.341128][T16441] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1533.366060][T16441] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1533.421699][T16441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1533.466027][T21164] loop4: detected capacity change from 0 to 256
[ 1533.476245][T16441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1533.571330][T21164] exfat: Deprecated parameter 'utf8'
[ 1533.575097][T20847] device veth0_macvtap entered promiscuous mode
[ 1533.576764][T21164] exfat: Deprecated parameter 'namecase'
[ 1533.656768][T20847] device veth1_macvtap entered promiscuous mode
[ 1533.740783][T21164] exfat: Deprecated parameter 'utf8'
[ 1533.758083][T16631] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1533.788913][T16631] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1533.846809][T21164] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[ 1533.888115][T20847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1533.924987][T21164] syz.4.3929: attempt to access beyond end of device
[ 1533.924987][T21164] loop4: rw=0, sector=34359738495, nr_sectors = 1 limit=256
[ 1533.962294][T20847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1534.013027][T20847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1534.054107][T20847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1534.094770][T20847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1534.151098][T20847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1534.183875][T20847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1534.216661][T20847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1534.277690][T20847] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1534.331189][ T6475] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1534.358659][ T6475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1534.389694][T20847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1534.421641][T20847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1534.438608][T20847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1534.458589][T20847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1534.468940][T20847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1534.500954][T20847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1534.550814][T20847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1534.585492][T20847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1534.652541][T20847] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1534.735905][T16631] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1534.785343][T16631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1534.858882][T20847] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1534.888619][T20847] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1534.925630][T20847] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1534.974809][T20847] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1535.413672][T16631] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1535.458757][T16631] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1535.493356][T20523] usb 2-1: selecting invalid altsetting 0
[ 1535.511773][T20523] usb 2-1: 8:6 : no UAC_FORMAT_TYPE desc
[ 1535.662147][T20523] usb 2-1: selecting invalid altsetting 0
[ 1535.673142][T16441] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1535.731003][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1535.753899][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1535.820972][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1536.187273][T21076] usb 2-1: USB disconnect, device number 113
[ 1536.332571][T21199] tc_dump_action: action bad kind
[ 1536.585740][T21204] loop1: detected capacity change from 0 to 512
[ 1536.824344][T21204] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[ 1536.838509][T21204] ext4 filesystem being mounted at /178/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1537.484637][T21218] loop4: detected capacity change from 0 to 256
[ 1537.554974][T21218] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1537.566394][T16306] EXT4-fs (loop1): unmounting filesystem.
[ 1537.616184][T21218] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[ 1537.767690][T21218] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[ 1537.854209][T21218] Bluetooth: hci0: invalid length 0, exp 2 for type 25
[ 1539.495272][T21230] ptrace attach of "./syz-executor exec"[20279] was attempted by "./syz-executor exec"[21230]
[ 1539.589615][T21233] random: crng reseeded on system resumption
[ 1541.778841][T21264] xt_TCPMSS: Only works on TCP SYN packets
[ 1541.895719][T21271] loop1: detected capacity change from 0 to 1024
[ 1541.927974][T21271] ext4: Unknown parameter 'measure'
[ 1542.471551][T21280] loop6: detected capacity change from 0 to 16
[ 1542.485267][T21279] loop0: detected capacity change from 0 to 128
[ 1542.661128][T21276] xt_policy: output policy not valid in PREROUTING and INPUT
[ 1542.742405][T21279] EXT4-fs (loop0): Test dummy encryption mode enabled
[ 1542.914221][T21280] erofs: (device loop6): mounted with root inode @ nid 36.
[ 1542.961564][T21279] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[ 1542.970561][T21279] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1543.113758][T21276] netlink: 'syz.1.3943': attribute type 1 has an invalid length.
[ 1543.191417][T21280] kvm: pic: non byte read
[ 1543.251504][T21280] kvm: pic: level sensitive irq not supported
[ 1543.253669][T21280] kvm: pic: non byte read
[ 1543.353685][T21280] kvm: pic: level sensitive irq not supported
[ 1543.353764][T21280] kvm: pic: non byte read
[ 1543.390365][T21279] fscrypt (loop0): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[ 1543.464224][T21291] fscrypt (loop0): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[ 1543.490846][T20391] usb 2-1: new full-speed USB device number 114 using dummy_hcd
[ 1543.601400][T21293] fscrypt (loop0): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[ 1543.732239][T20391] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1543.780865][T20391] usb 2-1: not running at top speed; connect to a high speed hub
[ 1543.826495][T20391] usb 2-1: config 17 has an invalid interface number: 8 but max is 1
[ 1543.901515][T20391] usb 2-1: config 17 has 1 interface, different from the descriptor's value: 2
[ 1543.983929][T20391] usb 2-1: config 17 has no interface number 0
[ 1544.050850][T20391] usb 2-1: config 17 interface 8 altsetting 6 endpoint 0x3 has an invalid bInterval 0, changing to 4
[ 1544.100109][T20391] usb 2-1: config 17 interface 8 has no altsetting 0
[ 1545.177174][T20620] EXT4-fs (loop0): unmounting filesystem.
[ 1545.446104][T21329] loop4: detected capacity change from 0 to 256
[ 1545.479519][T21329] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1545.561724][T21330] loop0: detected capacity change from 0 to 16
[ 1545.641221][T21330] erofs: (device loop0): mounted with root inode @ nid 36.
[ 1545.661387][T21329] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1545.956431][ T1267] ieee802154 phy0 wpan0: encryption failed: -22
[ 1545.963162][ T1267] ieee802154 phy1 wpan1: encryption failed: -22
[ 1546.112875][T21337] loop6: detected capacity change from 0 to 512
[ 1546.242923][T21337] EXT4-fs (loop6): 1 truncate cleaned up
[ 1546.248760][T21337] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[ 1546.395584][T21344] device syzkaller0 entered promiscuous mode
[ 1546.437215][T21337] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.3953: bg 0: block 465: padding at end of block bitmap is not set
[ 1546.732598][T20847] EXT4-fs (loop6): unmounting filesystem.
[ 1546.797030][T21350] ptrace attach of "./syz-executor exec"[16852] was attempted by "./syz-executor exec"[21350]
[ 1546.868293][T21352] random: crng reseeded on system resumption
[ 1548.750829][T21376] netlink: 'syz.0.3963': attribute type 1 has an invalid length.
[ 1548.867360][T20391] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff
[ 1548.912275][T20391] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1548.944238][T21379] loop4: detected capacity change from 0 to 1024
[ 1548.991533][T21379] EXT4-fs: inline encryption not supported
[ 1549.059492][T20391] usb 2-1: can't set config #17, error -71
[ 1549.083491][T21376] device macvlan2 entered promiscuous mode
[ 1549.168949][T21379] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1549.212395][T20391] usb 2-1: USB disconnect, device number 114
[ 1549.308136][T21379] EXT4-fs: test_dummy_encryption requires encrypt feature
[ 1549.592377][T21392] loop1: detected capacity change from 0 to 128
[ 1549.663705][T21392] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[ 1549.710053][T21392] ext4 filesystem being mounted at /184/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1549.795680][T21396] loop4: detected capacity change from 0 to 2048
[ 1549.848831][T21396] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[ 1549.891648][T21396] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #12: block 2: comm syz.4.3968: lblock 0 mapped to illegal pblock 2 (length 1)
[ 1549.950180][T16306] EXT4-fs (loop1): unmounting filesystem.
[ 1549.957253][T21396] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #12: block 2: comm syz.4.3968: lblock 0 mapped to illegal pblock 2 (length 1)
[ 1549.976935][T21396] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #12: block 2: comm syz.4.3968: lblock 0 mapped to illegal pblock 2 (length 1)
[ 1550.012382][T21396] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #12: block 2: comm syz.4.3968: lblock 0 mapped to illegal pblock 2 (length 1)
[ 1550.039904][T21396] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #12: block 2: comm syz.4.3968: lblock 0 mapped to illegal pblock 2 (length 1)
[ 1550.122483][T21401] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #12: block 2: comm syz.4.3968: lblock 0 mapped to illegal pblock 2 (length 1)
[ 1550.291052][T21403] device syzkaller0 entered promiscuous mode
[ 1550.343347][T20279] EXT4-fs (loop4): unmounting filesystem.
[ 1550.822401][T20391] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[ 1551.033405][T20391] usb 5-1: Using ep0 maxpacket: 32
[ 1551.041919][T20391] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[ 1551.080982][T20391] usb 5-1: config 0 has no interface number 0
[ 1551.102426][T20391] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1551.128992][T20391] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1551.151473][T20391] usb 5-1: Product: syz
[ 1551.167979][T20391] usb 5-1: Manufacturer: syz
[ 1551.182348][T20391] usb 5-1: SerialNumber: syz
[ 1551.211829][T20391] usb 5-1: config 0 descriptor??
[ 1551.247419][T20391] smsc95xx v2.0.0
[ 1551.600932][T16114] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[ 1552.560776][T16114] usb 7-1: Using ep0 maxpacket: 32
[ 1552.568275][T16114] usb 7-1: config 0 has an invalid interface number: 184 but max is 0
[ 1552.627867][T16114] usb 7-1: config 0 has no interface number 0
[ 1552.641834][T16114] usb 7-1: config 0 interface 184 has no altsetting 0
[ 1552.692415][T16114] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 1552.710945][T16114] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1552.728896][T20391] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout
[ 1552.749253][T16114] usb 7-1: Product: syz
[ 1552.767196][T16114] usb 7-1: Manufacturer: syz
[ 1552.780919][T16114] usb 7-1: SerialNumber: syz
[ 1552.797123][T16114] usb 7-1: config 0 descriptor??
[ 1552.803329][T21076] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[ 1552.819085][T16114] smsc75xx v1.0.0
[ 1552.823601][T16114] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[ 1552.850966][T16114] smsc75xx: probe of 7-1:0.184 failed with error -22
[ 1552.924702][T21436] loop0: detected capacity change from 0 to 1024
[ 1552.941137][T20391] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[ 1552.964785][T20391] smsc95xx: probe of 5-1:0.67 failed with error -71
[ 1552.999058][T21076] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[ 1553.017193][T20391] usb 5-1: USB disconnect, device number 24
[ 1553.035526][T21076] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1553.081231][T16441] hfsplus: b-tree write err: -5, ino 4
[ 1553.105825][T21076] usb 3-1: config 0 descriptor??
[ 1553.309688][T16114] usb 7-1: USB disconnect, device number 4
[ 1553.409946][T21444] loop0: detected capacity change from 0 to 1024
[ 1553.448376][T21444] hfsplus: unable to parse mount options
[ 1554.399778][T21076] pegasus 3-1:0.0: can't reset MAC
[ 1554.507683][T21076] pegasus: probe of 3-1:0.0 failed with error -5
[ 1554.567021][T21076] usb 3-1: USB disconnect, device number 3
[ 1555.835698][T21474] loop4: detected capacity change from 0 to 8
[ 1555.856009][T21473] device syzkaller0 entered promiscuous mode
[ 1556.229787][T21485] loop4: detected capacity change from 0 to 1024
[ 1556.255807][T21479] xt_TCPMSS: Only works on TCP SYN packets
[ 1556.268755][T21485] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945)
[ 1556.417496][T21485] EXT4-fs (loop4): revision level too high, forcing read-only mode
[ 1556.436294][T21489] loop2: detected capacity change from 0 to 512
[ 1556.463847][T21485] EXT4-fs (loop4): orphan cleanup on readonly fs
[ 1556.495328][T21485] EXT4-fs error (device loop4): ext4_read_inode_bitmap:168: comm syz.4.3988: Inode bitmap for bg 0 marked uninitialized
[ 1556.525049][T21489] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1556.552717][T21485] EXT4-fs (loop4): Remounting filesystem read-only
[ 1556.567087][T21489] EXT4-fs: inline encryption not supported
[ 1556.584958][T21485] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[ 1556.599155][T21489] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1556.638167][T21489] EXT4-fs (loop2): Test dummy encryption mode enabled
[ 1556.670984][T21489] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[ 1556.778915][T21489] EXT4-fs (loop2): 1 truncate cleaned up
[ 1556.818043][T21489] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 1556.847680][T21500] loop1: detected capacity change from 0 to 8
[ 1558.588644][T20523] usb 5-1: new full-speed USB device number 25 using dummy_hcd
[ 1558.691103][   T26] audit: type=1800 audit(1769723649.162:1230): pid=21500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3992" name="file1" dev="loop1" ino=5 res=0 errno=0
[ 1558.720568][T16852] EXT4-fs (loop2): unmounting filesystem.
[ 1558.862808][T20523] usb 5-1: config 0 has an invalid interface number: 52 but max is 0
[ 1558.880845][T20523] usb 5-1: config 0 has an invalid descriptor of length 115, skipping remainder of the config
[ 1558.944223][T20523] usb 5-1: config 0 has no interface number 0
[ 1558.986036][T20523] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 29285, setting to 64
[ 1559.006440][T21515] loop1: detected capacity change from 0 to 1024
[ 1559.030994][T20523] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1559.075577][T20523] usb 5-1: config 0 interface 52 has no altsetting 0
[ 1559.098515][T20523] usb 5-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00
[ 1559.121853][T20523] usb 5-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35
[ 1559.187554][T20523] usb 5-1: Product: syz
[ 1559.208672][T20523] usb 5-1: Manufacturer: syz
[ 1559.238052][T20523] usb 5-1: SerialNumber: syz
[ 1559.279626][   T26] audit: type=1800 audit(1769723649.752:1231): pid=21515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3995" name=6673B45D236B2391CE322E30FB9C69FE0D514DC1F8B6E3979C1205FD5224B07D18A44FEC4F6F1A6F65158BB6ADCC295BF2DD7DEA107F59D7E03C61FE5822292E45968956B931BDC4D6445FF1631E0B98E4B4448774DD4B9CD53A45896FDB3F03702778741AE2B45A25BF9A23FC02FB97A630F132BF9DEF6C6D4A7BAEB62972F1A814F6F2377BCFC78E2E86368C138510A04CEDF7175AF8C2034FAE7413E3ACE8C71AB9A0AF1CA7042011A6ED028E205648535DABF3B2F85196AE18D36B839E3CD54AE4933AD529888FDAC7BB8A70C72BC0FC81BA06506F2D5BC7686E219BBE5283959CBEF9950E071CB6D9F341FC624A5110341F26CEBD71 dev="loop1" ino=26 res=0 errno=0
[ 1559.346432][T20523] usb 5-1: config 0 descriptor??
[ 1559.415638][T20523] usb 5-1: can't set config #0, error -71
[ 1559.429167][T20279] EXT4-fs (loop4): unmounting filesystem.
[ 1559.467190][T20523] usb 5-1: USB disconnect, device number 25
[ 1559.924646][T21525] device syzkaller0 entered promiscuous mode
[ 1560.539206][T21549] loop2: detected capacity change from 0 to 128
[ 1560.596475][T21549] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[ 1560.647714][T21549] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1560.663927][T21551] loop0: detected capacity change from 0 to 2048
[ 1560.716038][T21551] EXT4-fs: Ignoring removed nobh option
[ 1560.833409][T21551] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[ 1560.886077][T21551] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1560.960233][   T26] audit: type=1800 audit(1769723651.432:1232): pid=21551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4007" name="file0" dev="loop0" ino=13 res=0 errno=0
[ 1561.067910][T21563] loop2: detected capacity change from 0 to 2048
[ 1561.130783][T21563] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1561.169548][T20620] EXT4-fs (loop0): unmounting filesystem.
[ 1561.194825][   T26] audit: type=1800 audit(1769723651.672:1233): pid=21563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4010" name="file0" dev="loop2" ino=1368 res=0 errno=0
[ 1561.534592][T21571] netlink: 'syz.1.4011': attribute type 1 has an invalid length.
[ 1562.093617][T21574] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address
[ 1562.242488][T21574] bond5: (slave vxcan3): Error -95 calling set_mac_address
[ 1562.279349][T21601] loop0: detected capacity change from 0 to 1024
[ 1562.364443][T21601] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[ 1562.444935][T21601] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3852: comm syz.0.4018: Allocating blocks 449-513 which overlap fs metadata
[ 1562.644817][T21585] device macvlan2 entered promiscuous mode
[ 1562.910308][T20620] EXT4-fs (loop0): unmounting filesystem.
[ 1562.927283][T21585] device bond5 entered promiscuous mode
[ 1563.001376][T21585] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 1563.133859][T21585] device bond5 left promiscuous mode
[ 1563.274407][T21625] loop2: detected capacity change from 0 to 1024
[ 1563.290008][T21625] hfsplus: unable to parse mount options
[ 1563.368233][T18235] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1563.475247][T21591] device syzkaller0 entered promiscuous mode
[ 1564.387931][T21648] loop2: detected capacity change from 0 to 1024
[ 1564.434825][T21648] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 1564.446595][T21652] loop4: detected capacity change from 0 to 164
[ 1564.479634][T21652] rock: corrupted directory entry. extent=41, offset=65536, size=8
[ 1564.564142][T21652] rock: corrupted directory entry. extent=41, offset=65536, size=8
[ 1564.573120][T20392] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[ 1564.631028][T21652] iso9660: Corrupted directory entry in block 4 of inode 1792
[ 1564.644048][T16852] EXT4-fs (loop2): unmounting filesystem.
[ 1564.793346][T20392] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1564.811050][T20392] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1564.880967][T20392] usb 7-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00
[ 1564.929556][T20392] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1565.002520][T20392] usb 7-1: config 0 descriptor??
[ 1565.429027][T20392] logitech 0003:046D:CA04.0019: collection stack underflow
[ 1565.448121][T20392] logitech 0003:046D:CA04.0019: item 0 1 0 12 parsing failed
[ 1565.501377][T20392] logitech 0003:046D:CA04.0019: parse failed
[ 1565.528532][T20392] logitech: probe of 0003:046D:CA04.0019 failed with error -22
[ 1565.535483][T21669] loop2: detected capacity change from 0 to 256
[ 1565.735333][T21669] FAT-fs (loop2): Directory bread(block 64) failed
[ 1565.761058][ T5337] usb 7-1: USB disconnect, device number 5
[ 1565.770897][T21669] FAT-fs (loop2): Directory bread(block 65) failed
[ 1565.777620][T21669] FAT-fs (loop2): Directory bread(block 66) failed
[ 1565.860872][T21669] FAT-fs (loop2): Directory bread(block 67) failed
[ 1565.867692][T21669] FAT-fs (loop2): Directory bread(block 68) failed
[ 1565.909772][T21669] FAT-fs (loop2): Directory bread(block 69) failed
[ 1565.948761][T21669] FAT-fs (loop2): Directory bread(block 70) failed
[ 1565.989416][T21669] FAT-fs (loop2): Directory bread(block 71) failed
[ 1565.996219][T21669] FAT-fs (loop2): Directory bread(block 72) failed
[ 1566.033863][T21677] loop4: detected capacity change from 0 to 1024
[ 1566.075166][T21669] FAT-fs (loop2): Directory bread(block 73) failed
[ 1566.098511][T21677] hfsplus: unable to parse mount options
[ 1567.285255][T21691] loop2: detected capacity change from 0 to 128
[ 1567.296868][T21691] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[ 1567.310893][T21691] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 1567.321406][T21691] ext2 filesystem being mounted at /195/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1567.646399][T21704] loop1: detected capacity change from 0 to 256
[ 1567.650260][T16852] EXT4-fs (loop2): unmounting filesystem.
[ 1567.691132][T21704] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1567.775130][T21704] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[ 1567.827264][T21704] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d)
[ 1568.019356][T21713] loop6: detected capacity change from 0 to 256
[ 1568.090414][T21713] exfat: Deprecated parameter 'utf8'
[ 1568.150046][T21713] exfat: Deprecated parameter 'namecase'
[ 1568.185485][T21713] exfat: Deprecated parameter 'utf8'
[ 1568.277391][T21713] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[ 1568.383993][T21713] syz.6.4049: attempt to access beyond end of device
[ 1568.383993][T21713] loop6: rw=524288, sector=34359738488, nr_sectors = 8 limit=256
[ 1569.331890][T21713] syz.6.4049: attempt to access beyond end of device
[ 1569.331890][T21713] loop6: rw=0, sector=34359738488, nr_sectors = 8 limit=256
[ 1569.991057][   T26] audit: type=1800 audit(1769723660.472:1234): pid=21713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4049" name="file1" dev="loop6" ino=1048686 res=0 errno=0
[ 1570.201923][T21713] exFAT-fs (loop6): error, tried to truncate zeroed cluster.
[ 1570.233949][T21713] exFAT-fs (loop6): hint_cluster is invalid (1)
[ 1570.409415][T21713] exFAT-fs (loop6): error, invalid access to exfat cache (entry 0x00000000)
[ 1570.735768][T21713] exFAT-fs (loop6): error, failed to bmap (inode : ffff8880599c7660 iblock : 9, err : -5)
[ 1571.178892][T21713] exFAT-fs (loop6): error, tried to truncate zeroed cluster.
[ 1571.186615][T21713] exFAT-fs (loop6): error, tried to truncate zeroed cluster.
[ 1571.309726][   T75] kworker/u4:4: attempt to access beyond end of device
[ 1571.309726][   T75] loop6: rw=1, sector=34359738488, nr_sectors = 8 limit=256
[ 1571.349431][T21733] ptrace attach of "./syz-executor exec"[16306] was attempted by "./syz-executor exec"[21733]
[ 1571.397660][T21733] random: crng reseeded on system resumption
[ 1571.475519][T21739] loop0: detected capacity change from 0 to 1024
[ 1571.572064][T21739] hfsplus: unable to parse mount options
[ 1571.644413][T18235] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1571.697156][T21743] device batadv_slave_0 entered promiscuous mode
[ 1571.736879][T21742] device batadv_slave_0 left promiscuous mode
[ 1572.016443][T21753] netlink: 252 bytes leftover after parsing attributes in process `syz.6.4058'.
[ 1572.069796][T21753] netlink: 124 bytes leftover after parsing attributes in process `syz.6.4058'.
[ 1573.210799][T14162] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[ 1573.369487][T21779] xt_policy: output policy not valid in PREROUTING and INPUT
[ 1573.444934][T14162] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[ 1573.461300][T14162] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1573.488921][T14162] usb 3-1: Product: syz
[ 1573.504526][T14162] usb 3-1: Manufacturer: syz
[ 1573.519945][T14162] usb 3-1: SerialNumber: syz
[ 1573.544729][T14162] r8152-cfgselector 3-1: config 0 descriptor??
[ 1573.717336][T21779] netlink: 'syz.6.4063': attribute type 1 has an invalid length.
[ 1573.807645][T14162] r8152-cfgselector 3-1: Unknown version 0x0000
[ 1574.019387][T14162] r8152-cfgselector 3-1: Unknown version 0x0000
[ 1574.042726][T14162] r8152-cfgselector 3-1: bad CDC descriptors
[ 1574.121172][ T5337] usb 7-1: new full-speed USB device number 6 using dummy_hcd
[ 1574.143583][T14162] r8152-cfgselector 3-1: Unknown version 0x0000
[ 1574.206721][T14162] r8152-cfgselector 3-1: USB disconnect, device number 4
[ 1574.340283][T21792] loop0: detected capacity change from 0 to 1024
[ 1574.358701][T21792] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1574.377611][ T5337] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1574.403253][ T5337] usb 7-1: not running at top speed; connect to a high speed hub
[ 1574.432310][T21792] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1574.447848][ T5337] usb 7-1: config 17 has an invalid interface number: 8 but max is 1
[ 1574.477499][ T5337] usb 7-1: config 17 has 1 interface, different from the descriptor's value: 2
[ 1574.487880][T21792] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003]
[ 1574.549632][T21792] System zones: 0-1, 3-36
[ 1574.664212][ T5337] usb 7-1: config 17 has no interface number 0
[ 1574.673087][ T5337] usb 7-1: config 17 interface 8 altsetting 6 endpoint 0x3 has an invalid bInterval 0, changing to 4
[ 1574.695001][T21792] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[ 1574.769950][ T5337] usb 7-1: config 17 interface 8 has no altsetting 0
[ 1574.799421][ T5337] usb 7-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff
[ 1574.841784][ T5337] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1574.941646][ T5337] usb 7-1: Product: syz
[ 1574.946158][ T5337] usb 7-1: Manufacturer: syz
[ 1574.984734][ T5337] usb 7-1: SerialNumber: syz
[ 1575.386682][T20620] EXT4-fs (loop0): unmounting filesystem.
[ 1576.363497][T21811] loop1: detected capacity change from 0 to 512
[ 1578.750797][   T48] Bluetooth: hci4: command 0x0406 tx timeout
[ 1609.470743][   T48] Bluetooth: hci0: command 0x0406 tx timeout
[ 1681.360649][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[ 1681.367946][    C1] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P21800/1:b..l
[ 1681.376999][    C1] 	(detected by 1, t=10502 jiffies, g=222605, q=288 ncpus=2)
[ 1681.384442][    C1] task:syz.2.4067      state:R  running task     stack:25232 pid:21800 ppid:16852  flags:0x00004000
[ 1681.397647][    C1] Call Trace:
[ 1681.401003][    C1]  <TASK>
[ 1681.403995][    C1]  __schedule+0x11d1/0x40e0
[ 1681.408699][    C1]  ? mark_lock+0x94/0x320
[ 1681.413165][    C1]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 1681.419222][    C1]  ? __sched_text_start+0x8/0x8
[ 1681.424419][    C1]  ? lock_chain_count+0x20/0x20
[ 1681.429340][    C1]  ? preempt_schedule_irq+0xb0/0x160
[ 1681.434720][    C1]  preempt_schedule_irq+0xbb/0x160
[ 1681.439925][    C1]  ? preempt_schedule_notrace+0x120/0x120
[ 1681.445721][    C1]  ? rcu_is_watching+0x11/0xa0
[ 1681.450852][    C1]  ? rcu_irq_exit_check_preempt+0xdb/0x210
[ 1681.456731][    C1]  irqentry_exit+0x63/0x70
[ 1681.461237][    C1]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1681.467695][    C1] RIP: 0010:lock_acquire+0x225/0x4a0
[ 1681.473060][    C1] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3d 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 43 c7 44 3d 08 00 00 00 00 65 48 8b 04
[ 1681.493866][    C1] RSP: 0018:ffffc900066bf420 EFLAGS: 00000206
[ 1681.500184][    C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 30441bb2843f1a00
[ 1681.509106][    C1] RDX: 0000000000000000 RSI: ffffffff8a8c23a0 RDI: ffffffff8adf0c20
[ 1681.517313][    C1] RBP: ffffc900066bf530 R08: dffffc0000000000 R09: 1ffffffff215e648
[ 1681.525421][    C1] R10: dffffc0000000000 R11: fffffbfff215e649 R12: 0000000000000001
[ 1681.533729][    C1] R13: 1ffff92000cd7e90 R14: 0000000000000246 R15: dffffc0000000000
[ 1681.541771][    C1]  ? mpol_shared_policy_lookup+0x147/0x1e0
[ 1681.547915][    C1]  ? shmem_alloc_and_acct_folio+0x8af/0xbc0
[ 1681.554019][    C1]  ? read_lock_is_recursive+0x10/0x10
[ 1681.559515][    C1]  ? shmem_replace_folio+0xee0/0xee0
[ 1681.565492][    C1]  ? get_mem_cgroup_from_mm+0x34/0x290
[ 1681.571150][    C1]  get_mem_cgroup_from_mm+0x50/0x290
[ 1681.576862][    C1]  ? get_mem_cgroup_from_mm+0x34/0x290
[ 1681.582395][    C1]  __mem_cgroup_charge+0x11/0x80
[ 1681.587398][    C1]  shmem_add_to_page_cache+0x90d/0x1c50
[ 1681.593090][    C1]  ? xas_load+0x127/0x140
[ 1681.597518][    C1]  ? put_page+0x270/0x270
[ 1681.601921][    C1]  shmem_get_folio_gfp+0x158e/0x3400
[ 1681.607331][    C1]  shmem_fault+0x1b6/0x780
[ 1681.611811][    C1]  ? shmem_fallocate+0xfa0/0xfa0
[ 1681.616803][    C1]  ? filemap_map_pages+0x1af/0x11c0
[ 1681.622151][    C1]  ? filemap_read_folio+0x770/0x770
[ 1681.627517][    C1]  ? count_memcg_event_mm+0x8a/0x3c0
[ 1681.633032][    C1]  __do_fault+0x13b/0x4e0
[ 1681.637531][    C1]  ? handle_mm_fault+0x29b1/0x3ee0
[ 1681.642784][    C1]  handle_mm_fault+0x2407/0x3ee0
[ 1681.647960][    C1]  ? numa_migrate_prep+0x250/0x250
[ 1681.653398][    C1]  __get_user_pages+0x40d/0xec0
[ 1681.658473][    C1]  ? populate_vma_page_range+0x2b0/0x2b0
[ 1681.664394][    C1]  populate_vma_page_range+0x214/0x2b0
[ 1681.670181][    C1]  __mm_populate+0x25c/0x380
[ 1681.674838][    C1]  ? check_vma_flags+0x4d0/0x4d0
[ 1681.679838][    C1]  ? up_write+0x1bb/0x420
[ 1681.684224][    C1]  vm_mmap_pgoff+0x212/0x2d0
[ 1681.688882][    C1]  ? account_locked_vm+0xe0/0xe0
[ 1681.693970][    C1]  ? ksys_mmap_pgoff+0xe6/0x6f0
[ 1681.698951][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[ 1681.704249][    C1]  do_syscall_64+0x4c/0xa0
[ 1681.709610][    C1]  ? clear_bhb_loop+0x60/0xb0
[ 1681.714445][    C1]  ? clear_bhb_loop+0x60/0xb0
[ 1681.719268][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1681.725421][    C1] RIP: 0033:0x7fa08cb9aeb9
[ 1681.729910][    C1] RSP: 002b:00007fa08db16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 1681.738839][    C1] RAX: ffffffffffffffda RBX: 00007fa08ce16090 RCX: 00007fa08cb9aeb9
[ 1681.747231][    C1] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000200000000000
[ 1681.755700][    C1] RBP: 00007fa08cc08c1f R08: ffffffffffffffff R09: 0000000000000000
[ 1681.763719][    C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000
[ 1681.771743][    C1] R13: 00007fa08ce16128 R14: 00007fa08ce16090 R15: 00007ffdb991ddc8
[ 1681.779988][    C1]  </TASK>
[ 1681.783058][    C1] rcu: rcu_preempt kthread starved for 9754 jiffies! g222605 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
[ 1681.794308][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[ 1681.804321][    C1] rcu: RCU grace-period kthread stack dump:
[ 1681.810780][    C1] task:rcu_preempt     state:R  running task     stack:27608 pid:16    ppid:2      flags:0x00004000
[ 1681.823654][    C1] Call Trace:
[ 1681.827253][    C1]  <TASK>
[ 1681.830262][    C1]  __schedule+0x11d1/0x40e0
[ 1681.834983][    C1]  ? __sched_text_start+0x8/0x8
[ 1681.839904][    C1]  ? __mod_timer+0x91e/0xd00
[ 1681.844677][    C1]  schedule+0xb9/0x180
[ 1681.848889][    C1]  schedule_timeout+0x184/0x2d0
[ 1681.853797][    C1]  ? console_conditional_schedule+0x40/0x40
[ 1681.859759][    C1]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[ 1681.865736][    C1]  ? update_process_times+0x1b0/0x1b0
[ 1681.871185][    C1]  ? prepare_to_swait_event+0x335/0x350
[ 1681.876798][    C1]  rcu_gp_fqs_loop+0x303/0x1340
[ 1681.882073][    C1]  ? rcu_gp_kthread+0x3b0/0x3b0
[ 1681.888364][    C1]  ? dyntick_save_progress_counter+0x2b0/0x2b0
[ 1681.894743][    C1]  ? rcu_gp_init+0x14e0/0x14e0
[ 1681.899566][    C1]  ? rcu_gp_cleanup+0xb41/0xc90
[ 1681.904473][    C1]  ? _raw_spin_unlock_irq+0x1f/0x40
[ 1681.910145][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[ 1681.915497][    C1]  rcu_gp_kthread+0x99/0x3b0
[ 1681.920140][    C1]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[ 1681.925394][    C1]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1681.931534][    C1]  ? __kthread_parkme+0x162/0x1c0
[ 1681.936932][    C1]  kthread+0x29d/0x330
[ 1681.941173][    C1]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[ 1681.946457][    C1]  ? kthread_blkcg+0xd0/0xd0
[ 1681.951378][    C1]  ret_from_fork+0x1f/0x30
[ 1681.955905][    C1]  </TASK>
[ 1681.958965][    C1] rcu: Stack dump where RCU GP kthread last ran:
[ 1681.965350][    C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0
[ 1681.972427][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1681.982903][    C1] RIP: 0010:default_idle+0xb/0x10
[ 1681.987996][    C1] Code: 48 89 df e8 a7 10 9d f7 e9 44 ff ff ff e8 7d 07 f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 66 90 0f 00 2d 87 5d 50 00 fb f4 <c3> 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48
[ 1682.007941][    C1] RSP: 0018:ffffc90000177de8 EFLAGS: 000002c6
[ 1682.014160][    C1] RAX: 59eddb7a74c52c00 RBX: ffffffff8a3651a7 RCX: 59eddb7a74c52c00
[ 1682.022202][    C1] RDX: 0000000000000001 RSI: ffffffff8a8c1220 RDI: ffffffff8adf0c20
[ 1682.030690][    C1] RBP: ffffc90000177f20 R08: ffff8880b8f3580b R09: 1ffff110171e6b01
[ 1682.038783][    C1] R10: dffffc0000000000 R11: ffffed10171e6b02 R12: 1ffff9200002efc8
[ 1682.047619][    C1] R13: dffffc0000000000 R14: ffff88813fed9dc0 R15: 0000000000000001
[ 1682.055753][    C1] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[ 1682.065181][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1682.072168][    C1] CR2: 00007ff1bfed82c9 CR3: 000000002e2be000 CR4: 00000000003506e0
[ 1682.080384][    C1] DR0: 0000000000000000 DR1: 000000000000c280 DR2: 0000000000000000
[ 1682.088397][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 1682.096416][    C1] Call Trace:
[ 1682.099743][    C1]  <TASK>
[ 1682.102715][    C1]  default_idle_call+0x84/0xc0
[ 1682.107545][    C1]  do_idle+0x20d/0x5a0
[ 1682.111760][    C1]  ? idle_inject_timer_fn+0x60/0x60
[ 1682.117010][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[ 1682.122278][    C1]  ? asm_common_interrupt+0x22/0x40
[ 1682.127538][    C1]  ? schedule_idle+0x57/0x90
[ 1682.132182][    C1]  cpu_startup_entry+0x3f/0x60
[ 1682.137010][    C1]  start_secondary+0xe4/0xf0
[ 1682.141736][    C1]  secondary_startup_64_no_verify+0xcf/0xdb
[ 1682.147694][    C1]  </TASK>