last executing test programs:

2m51.057523236s ago: executing program 2 (id=23):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000080)=0x8, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x1b32, 0x4)
sendto$inet(r0, &(0x7f0000000540)='v', 0x1, 0x4040, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/177, 0xb1}, 0x8000}], 0x1, 0x2100, 0x0)

2m50.861685697s ago: executing program 2 (id=25):
openat$nvram(0xffffffffffffff9c, 0x0, 0x40040, 0x0)
r0 = socket(0x28, 0x5, 0x0)
r1 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r1, 0x4)
connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
sendmmsg(r0, &(0x7f0000007ac0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="423a077722f18c05549404a17e", 0xd}, {&(0x7f00000020c0)="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", 0x107}], 0x2}}], 0x1, 0x348640ea77fab084)
r2 = accept4$unix(r1, 0x0, 0x0, 0x800)
recvfrom$unix(r2, &(0x7f0000000200)=""/273, 0x111, 0x20, 0x0, 0x0)

2m50.702553657s ago: executing program 2 (id=28):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, 0xa7}}}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c040}, 0x0)

2m50.482021789s ago: executing program 2 (id=30):
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]})
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000b00)={[{@fat=@uid={'uid', 0x3d, 0xee00}}, {@shortname_winnt}, {@numtail}, {@fat=@nfs_nostale_ro}, {@uni_xlate}, {@uni_xlateno}, {@fat=@sys_immutable}, {@fat=@nfs_stale_rw}, {@fat=@debug}, {@shortname_mixed}, {@fat=@quiet}, {@utf8no}]}, 0x0, 0x29f, &(0x7f0000000840)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020)

2m50.179443967s ago: executing program 2 (id=34):
keyctl$set_reqkey_keyring(0xe, 0x1)
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000080)={0x2c}, 0x8)
setsockopt$inet6_buf(r0, 0x29, 0x39, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x8020000c, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffffff}, 0x1c)
r1 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc3}, &(0x7f0000000280)={0x0, "c683faa6825f1a25af3b6191facc8751ba3d8a447a0f359cf181bb0d58924dd9d9b34837a9ef3a3f72c925bbd42a07f3b2f9b25d4e7c08909985c4a4734ae2bd"}, 0x48, 0xfffffffffffffffe)
request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)=')\x00', r1)
request_key(&(0x7f0000000200)='asymmetric\x00', &(0x7f0000000780)={'syz', 0x1}, &(0x7f00000000c0)='\xd0P\xd0\r0\x1f\xdaP\x9f\xc5\xb0\xd3\bf6\xb81\x1fk\x9ehl&\x94\xcf\x93\x15\xed\x10M\xc9\x0en\xfa3\xd5-\x1d\x82Fq\xaa\xcf\xe9\xaf\xe9J\x99\'\b\xd2\xbd\x06\x85izb \xb1\xd9\xf9:m\x85\xcf\r`\x11Q\xfb=\x98\xa1&\xfe\xdb\xe0\x96PZ\xa8\xf5\xecu\x8eXw\xf1\xec4\xba\xce\xb0\xf5\xad7\x9b\xcbS\xe7\xae\xfb\xbbE\xe4\'m\xa94\x8d\xfd\xd4\x17O\"j\x9dt\x87n\xd1\x02>\x86k\x80\x00A.S\xe3o\xf5\xcf\xde\xf5Bd,\x01\xa3\x90)c', r1)

2m49.620876189s ago: executing program 2 (id=38):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000800)={0x0, {0x48000003, 0x0, 0x8000005, 0x6, 0x5, 0x7ffffffe}})
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x0, 0x1, 0x8001}, 'syz1\x00', 0x5})
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="c400000019000100fcffffff00000000ac14142c000000000000000000000000fe8000000000000000000000000000aa4e2200004e240000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000021000104000000000010feffffffffffffff000000400000000000000000000000001a000000ff0000000100000000000000feffffffffffffff7a0000001a00000005000000000000000000000000000000ff6e0000000000000800000000000000010003000a0010001a00000000000000"], 0xc4}}, 0x8044)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000900)={'syz1\x00', {0x0, 0x0, 0x6}, 0x37b4, [0xfeff, 0x4, 0x0, 0x0, 0x0, 0x20000, 0x0, 0xfffffffe, 0x0, 0x3, 0x0, 0xfffffffd, 0x3, 0x100, 0x0, 0x0, 0x0, 0xfffa, 0xfffffff7, 0x0, 0x1, 0x10000400, 0x0, 0x1, 0x0, 0x0, 0x402, 0x0, 0x0, 0x4e0, 0x0, 0x0, 0x1, 0x0, 0xfffffffc, 0x3, 0xffffffff, 0x0, 0xffff, 0x0, 0x20, 0x2, 0x5, 0x70000000, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x6, 0x0, 0x7, 0x0, 0x6, 0x0, 0x0, 0x20004, 0x0, 0xfffffffe, 0x105], [0x10, 0xffffffff, 0x7, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40, 0xffffffff, 0x0, 0x2, 0x0, 0x1, 0x200, 0x0, 0x5, 0x1, 0xfffffffc, 0x9, 0x801, 0xffffffd6, 0xfffffffc, 0xfffffffd, 0x1, 0x0, 0x1, 0x2ec6a, 0x5, 0x7, 0xffffffff, 0x8, 0x7fffffff, 0x8001, 0x5, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x8c, 0x0, 0x0, 0x4, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, 0x4000000, 0x80, 0x0, 0x3, 0x0, 0x9, 0x800000, 0x7], [0x0, 0x3, 0x0, 0x1000000, 0xffffffff, 0x1, 0xa000000, 0x0, 0x0, 0xb78, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x4e, 0x0, 0x0, 0x10000, 0x0, 0x80, 0x520, 0xd, 0x0, 0xfffffffd, 0x800000, 0x1ff, 0x0, 0x0, 0x2, 0xfffffffc, 0x2af, 0x0, 0x9, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x6, 0x8010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x100, 0xff, 0x80000005, 0x0, 0x4, 0x2, 0x400000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x6, 0xf, 0x401, 0x0, 0x211, 0x4, 0x0, 0x100, 0x23, 0x5, 0x0, 0x80, 0x0, 0x3, 0x0, 0xfffffffe, 0x1, 0x7fff, 0x0, 0xd, 0x800000, 0x3, 0x0, 0x0, 0x0, 0x4, 0x6, 0x0, 0xffffeffd, 0x3, 0x0, 0x0, 0x3, 0x4, 0xfffffffe, 0x1004, 0x3, 0x0, 0xfffffffd, 0x9e5, 0x80000001, 0x100, 0x0, 0x3, 0x7, 0xfffffffd, 0x53591b24, 0x7fffffd, 0x2, 0x5, 0x5, 0x400, 0x7, 0x7fffffff, 0x511, 0x100, 0x80000004, 0x8, 0x0, 0x3, 0x3]}, 0x45c)

2m49.430654201s ago: executing program 32 (id=38):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000800)={0x0, {0x48000003, 0x0, 0x8000005, 0x6, 0x5, 0x7ffffffe}})
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x0, 0x1, 0x8001}, 'syz1\x00', 0x5})
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="c400000019000100fcffffff00000000ac14142c000000000000000000000000fe8000000000000000000000000000aa4e2200004e240000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000021000104000000000010feffffffffffffff000000400000000000000000000000001a000000ff0000000100000000000000feffffffffffffff7a0000001a00000005000000000000000000000000000000ff6e0000000000000800000000000000010003000a0010001a00000000000000"], 0xc4}}, 0x8044)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000900)={'syz1\x00', {0x0, 0x0, 0x6}, 0x37b4, [0xfeff, 0x4, 0x0, 0x0, 0x0, 0x20000, 0x0, 0xfffffffe, 0x0, 0x3, 0x0, 0xfffffffd, 0x3, 0x100, 0x0, 0x0, 0x0, 0xfffa, 0xfffffff7, 0x0, 0x1, 0x10000400, 0x0, 0x1, 0x0, 0x0, 0x402, 0x0, 0x0, 0x4e0, 0x0, 0x0, 0x1, 0x0, 0xfffffffc, 0x3, 0xffffffff, 0x0, 0xffff, 0x0, 0x20, 0x2, 0x5, 0x70000000, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x6, 0x0, 0x7, 0x0, 0x6, 0x0, 0x0, 0x20004, 0x0, 0xfffffffe, 0x105], [0x10, 0xffffffff, 0x7, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40, 0xffffffff, 0x0, 0x2, 0x0, 0x1, 0x200, 0x0, 0x5, 0x1, 0xfffffffc, 0x9, 0x801, 0xffffffd6, 0xfffffffc, 0xfffffffd, 0x1, 0x0, 0x1, 0x2ec6a, 0x5, 0x7, 0xffffffff, 0x8, 0x7fffffff, 0x8001, 0x5, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x8c, 0x0, 0x0, 0x4, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, 0x4000000, 0x80, 0x0, 0x3, 0x0, 0x9, 0x800000, 0x7], [0x0, 0x3, 0x0, 0x1000000, 0xffffffff, 0x1, 0xa000000, 0x0, 0x0, 0xb78, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x4e, 0x0, 0x0, 0x10000, 0x0, 0x80, 0x520, 0xd, 0x0, 0xfffffffd, 0x800000, 0x1ff, 0x0, 0x0, 0x2, 0xfffffffc, 0x2af, 0x0, 0x9, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x6, 0x8010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x100, 0xff, 0x80000005, 0x0, 0x4, 0x2, 0x400000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x6, 0xf, 0x401, 0x0, 0x211, 0x4, 0x0, 0x100, 0x23, 0x5, 0x0, 0x80, 0x0, 0x3, 0x0, 0xfffffffe, 0x1, 0x7fff, 0x0, 0xd, 0x800000, 0x3, 0x0, 0x0, 0x0, 0x4, 0x6, 0x0, 0xffffeffd, 0x3, 0x0, 0x0, 0x3, 0x4, 0xfffffffe, 0x1004, 0x3, 0x0, 0xfffffffd, 0x9e5, 0x80000001, 0x100, 0x0, 0x3, 0x7, 0xfffffffd, 0x53591b24, 0x7fffffd, 0x2, 0x5, 0x5, 0x400, 0x7, 0x7fffffff, 0x511, 0x100, 0x80000004, 0x8, 0x0, 0x3, 0x3]}, 0x45c)

2m37.22185548s ago: executing program 5 (id=93):
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000080)={[0xeeee0000, 0xeeef0000, 0xdddd0000, 0xb000], 0x2000000db, 0xc})
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0xf88e44fe, 0xed, 0xfdc}]})
openat$kvm(0xffffff9c, 0x0, 0x20000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2m35.732098907s ago: executing program 5 (id=103):
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\f\x00\b\x00\x00', @ANYRES64], 0x0, 0x0, 0x0, 0x0})

2m33.181755005s ago: executing program 5 (id=115):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c)
listen(r1, 0x100003)
syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x28, 0x28, 0x4000, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80}}}}}}, 0x0)

2m33.10031512s ago: executing program 5 (id=116):
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x20)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
r3 = open_tree(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x8801)
openat$cgroup_pressure(r3, &(0x7f00000000c0)='cpu.pressure\x00', 0x2, 0x0)

2m32.861078124s ago: executing program 5 (id=121):
set_mempolicy(0x2, &(0x7f0000000000)=0x1, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xc}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x5)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, 0x0, 0x4000814)
syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x8010, &(0x7f0000001880)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRES8, @ANYBLOB="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", @ANYRESDEC=r0, @ANYRESDEC=0x0, @ANYRES8, @ANYRES32=r2], 0xfd, 0x200, &(0x7f00000002c0)="$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")
open(&(0x7f0000000140)='./file2\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'})

2m31.649744634s ago: executing program 5 (id=124):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
listen(r1, 0x90004)
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16)
sync()
close_range(r0, 0xffffffffffffffff, 0x0)

2m21.670403604s ago: executing program 0 (id=193):
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)

2m21.462393597s ago: executing program 0 (id=185):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket(0x2b, 0x1, 0x1)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x5)
accept4$rose(r1, 0x0, 0x0, 0x80800)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)

2m20.479539843s ago: executing program 0 (id=195):
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000580)=0x1)

2m20.305754104s ago: executing program 0 (id=197):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r0, r0)
setpgid(0x0, r0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, <r2=>0x0}, &(0x7f0000000280)=0x5)
setreuid(0x0, r2)
r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x800000000000001)

2m20.140076333s ago: executing program 0 (id=199):
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x800)
write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000"], 0xb0)
write$FUSE_NOTIFY_POLL(r2, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x8}}, 0x18)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
statfs(&(0x7f0000000340)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40)
lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0)

2m18.793544142s ago: executing program 0 (id=206):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xfffffffd)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x9c28, 0x7fff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x24, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20040054)

2m18.607104003s ago: executing program 33 (id=206):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xfffffffd)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x9c28, 0x7fff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x24, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20040054)

2m15.971451705s ago: executing program 34 (id=124):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
listen(r1, 0x90004)
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16)
sync()
close_range(r0, 0xffffffffffffffff, 0x0)

2m5.097889428s ago: executing program 3 (id=267):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x2, &(0x7f0000000400)=ANY=[@ANYBLOB="73686f72746e616d653d6d697865642c666d61736b3d30303030303030303030303030303030303030303036362c696f636861727365743d69736f383835392d312c6572726f72733d636f6e74696e75652c756e695f786c6174653d302c696f636861727365743d61736369692c726f6469722c73686f72746e616d653d6d697865642c756e695f786c6174653d302c757466383d302c757466383d302c756e695f786c6174653d312c64656275672c756e695f786c6174653d312c666d61736b3d30303030303030303030303030303030303030303030332c6e6f63617365aec489af6ba9723d4b17106f6d47b9ade1c253d4e3b08066427cae9f41fd1e1dd25a22ec22ad6e8bf6f67e052de91b544f2f4541f87a0c0b36e8d444150b35c110bda57fe7a9c06ba087cc975447082aaf95213301f3e04b70ea67a8aa0d582ca1a9525dba7116d80f126f782a78428b878fc79c0be9ad98cb6950995e6edba78e5301e8c8e69cc85beceb8b54f84a84787815ef9a18f1fe1c81b4c1830102f7e3236e2533e486ecb46ee53991c5bfe6289a474582b2e57741fd8de78f42097851bee74d4201c7767e0e0f4b34523150639b1291441ad01f2f72ed3679d7bca0e8b4e0689f883196af0d0dfe7344f276c1b4bd333882cf7879248ad423e3f21cd0cae2309519f9d40df23cf05d9c8d8f9d07da771ea1e3bcd8478fb989f770da00f700000000000000"], 0x6, 0x2e3, &(0x7f0000020c40)="$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")
r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
fallocate(r0, 0x1, 0x8e13, 0x8ffff)
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0)
r2 = syz_open_dev$sndpcmc(&(0x7f0000000d00), 0x0, 0x2)
mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1002, 0x2, 0x11, r2, 0x82000000)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

2m4.850859452s ago: executing program 3 (id=271):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000))
ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xfffd, 'syz0\x00', @default, 0xfffffdb8, 0x2, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]})
ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f00000001c0)={0x0, @null, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})

2m4.597081137s ago: executing program 3 (id=272):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x2302020, &(0x7f0000000200)=ANY=[], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/netfilter\x00')
r1 = fanotify_init(0x40, 0x40000)
readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97)
fanotify_mark(r1, 0x1, 0x40001019, r2, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
getdents64(r0, &(0x7f00000005c0)=""/186, 0xba)

2m4.409952818s ago: executing program 3 (id=275):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x1, 0x4b4, &(0x7f0000000c80)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3004009, 0x0, 0x2, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000740)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
openat(0xffffffffffffff9c, 0x0, 0x8042, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x103040, 0x16)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x100002, 0x0)
syz_usb_connect$hid(0x5, 0x3f, 0x0, 0x0)

2m2.095590272s ago: executing program 3 (id=282):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x8, 0x1, 0x1d, 0x3, 0x9, 0x800, 0x4, 0x854}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4000)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xfff3, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044060}, 0x4890)
r4 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14)

2m1.537559215s ago: executing program 3 (id=285):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000b40)={{0x0, 0xeeef0000, 0xe, 0x0, 0x81, 0x4, 0xa, 0x4e, 0x0, 0x7, 0x6, 0x1}, {0x80a0000, 0xffff1000, 0x3, 0x5, 0x2, 0xb, 0xd, 0x3, 0x0, 0x3e, 0x8, 0x1}, {0xe000, 0x58000, 0x0, 0x2, 0x3, 0x7, 0x7, 0xc9, 0x8, 0x6, 0x2}, {0x4000, 0x100000, 0xe, 0x2, 0x6e, 0x3, 0xc, 0x0, 0x1, 0x6, 0x4, 0x9}, {0x100002, 0xeeee8000, 0xb, 0x0, 0x80, 0xee, 0x0, 0x7, 0x1, 0x0, 0xe, 0x9}, {0x80a0000, 0x4, 0x0, 0xfa, 0x5, 0x6, 0x1, 0x1, 0x6, 0x86, 0xb, 0xff}, {0xdddd0000, 0xa000, 0xc, 0x7, 0x7, 0x13, 0x1c, 0x47, 0x30, 0x2, 0x8, 0xe5}, {0xd000, 0x2, 0xc, 0xf8, 0xfd, 0xa, 0xa, 0x4, 0x3, 0x7f, 0x2, 0xce}, {0x4, 0x7}, {0x6000, 0x5}, 0x80000035, 0x0, 0x0, 0x40, 0x7, 0x0, 0xeeef0000, [0x5, 0x8001, 0x8, 0x1]})
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)={0x3, 0x0, [{0x2, 0x3, 0x1, 0x5, 0x1df, 0x1000, 0x6}, {0x80000008, 0x6, 0x1, 0x100, 0x71b2, 0x5, 0x6}, {0x80000019, 0x1, 0x2, 0x98ae, 0x3e, 0x3, 0x4}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2m0.526237253s ago: executing program 35 (id=285):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000b40)={{0x0, 0xeeef0000, 0xe, 0x0, 0x81, 0x4, 0xa, 0x4e, 0x0, 0x7, 0x6, 0x1}, {0x80a0000, 0xffff1000, 0x3, 0x5, 0x2, 0xb, 0xd, 0x3, 0x0, 0x3e, 0x8, 0x1}, {0xe000, 0x58000, 0x0, 0x2, 0x3, 0x7, 0x7, 0xc9, 0x8, 0x6, 0x2}, {0x4000, 0x100000, 0xe, 0x2, 0x6e, 0x3, 0xc, 0x0, 0x1, 0x6, 0x4, 0x9}, {0x100002, 0xeeee8000, 0xb, 0x0, 0x80, 0xee, 0x0, 0x7, 0x1, 0x0, 0xe, 0x9}, {0x80a0000, 0x4, 0x0, 0xfa, 0x5, 0x6, 0x1, 0x1, 0x6, 0x86, 0xb, 0xff}, {0xdddd0000, 0xa000, 0xc, 0x7, 0x7, 0x13, 0x1c, 0x47, 0x30, 0x2, 0x8, 0xe5}, {0xd000, 0x2, 0xc, 0xf8, 0xfd, 0xa, 0xa, 0x4, 0x3, 0x7f, 0x2, 0xce}, {0x4, 0x7}, {0x6000, 0x5}, 0x80000035, 0x0, 0x0, 0x40, 0x7, 0x0, 0xeeef0000, [0x5, 0x8001, 0x8, 0x1]})
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)={0x3, 0x0, [{0x2, 0x3, 0x1, 0x5, 0x1df, 0x1000, 0x6}, {0x80000008, 0x6, 0x1, 0x100, 0x71b2, 0x5, 0x6}, {0x80000019, 0x1, 0x2, 0x98ae, 0x3e, 0x3, 0x4}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1m3.679176757s ago: executing program 6 (id=458):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', 0x0, 0x0)
mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./bus\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdir(&(0x7f0000000240)='./bus\x00', 0x0)
chdir(&(0x7f0000000300)='./bus\x00')
renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='./bus/file0\x00', 0x0)
r2 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8)

1m3.480854838s ago: executing program 6 (id=462):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56561, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0x7}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x7, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x4020080)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newtfilter={0x8c, 0x2c, 0xd2b, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x7}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x60, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x9}}, @TCA_U32_SEL={0x54, 0x5, {0x4, 0xa, 0x4, 0x7, 0x8, 0x2, 0x7fff, 0x8000, [{0x2, 0x0, 0xb, 0xfffffffd}, {0xb3, 0x5, 0x0, 0xfffffffc}, {0x5bbc913, 0x2, 0x9, 0x6}, {0x9, 0x37d, 0x1, 0x5}]}}]}}]}, 0x8c}}, 0x20000000)

1m3.195519475s ago: executing program 6 (id=466):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f00000000c0)={[{@errors_remount}, {@noinit_itable}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2a}}, {@errors_remount}, {@nodelalloc}, {@grpjquota}, {@grpquota}]}, 0x3, 0x462, &(0x7f0000000b40)="$eJzs28tvG8UfAPDvbpK++0t+pTz6AAIFEfFImrRAD1xAIHEACYlLOYYkrULdBjVBolUFBaFyRJWQOCKOSPwFnOCCgBMSV7ijShXqhcLJaO3dxDa2k7ROto0/H2njmX145ruzY8/uxAH0rdHsTxKxJyJ+i4jherZ5h9H6y80bl2b+vnFpJolq9c0/k9p+f924NFPsWhy3O8+MpRHpJ0kcalPu4oWLZ6YrlbnzeX5i6ey7E4sXLj4zf3b69NzpuXNTJ04cPzb5/HNTz/Ykzv9ndT34wcLhA6++dfX1mZNX3/7pm6SIvyWOHhnttvHxarXHxZVrb0M6GVzDAQMbWBnWLGuGrLmGav1/OAZipfGG45WPS60csKGquQ6bL1eBLSyJsmsAlKP4os/uf4tl80Yf5bv+Yv0GKIv7Zr7UtwxGuqOeGmq5v+2l0Yg4efmfL7MlNuY5BABAk++y8c/T7cZ/adzXsN//Ynttbmgkn0vZFxH3RMT+iLg3orbv/RHxQLtCukwItE6S/Hf8k1679ehWl43/XsjntprHf2mxy8hAnttbi38oOTVfmTtaOycRYzG0PctPdinj+5d//azTtsbxX7Zk5Rdjwbwe1wa3Nx8zO700fTsxN7r+UcTBwXbxJ8szAUlEHIiIg7dYxvyTXx/utG31+LtYyzzTKqpfRTxRb//L0RJ/Iek+PzmxIypzRydOzVc6zGn9/MuVNzqVf1vx90DW/rvaXv/L8Y8kjfO1i+t593rvvvL7px3vacZv6fpfWbEtf31/emnp/GTEtuS1eqUb10+tHFvki/2z+MeOtO//+2LlTByKiOwifjAiHoqIh/PoHomIRyPiSJez8ONLj73T7QyV3f6zTe2fLJ+7XEv7ryS2Reua9omBMz982/yOK8m1ff4dr6XG8jW1z78vuse1lnqt92oGAACAu1UaEXsiSceX02k6Pl7/H/79sSutLCwuPXVq4b1zs/XfCIzEUFo8/xxueB46md/WF/mplvyx/Lnx5wM7a/nxmYXKbNnBQ5/b3aH/Z/7wGw3Y+nowjwbcpfR/6F/6P/Qv/R/6V5v+v7OMegCbr933/4cl1APYfC3937Qf9BH3/9C/9H/oX439PymxHsCmWtwZq/9IfiskqtVq9Q6oxtZJRLr+o7Ivmjui8q2JZIN7wZ6yA1x/ouxPJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgN74NwAA//8Te+g3")
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PTP_ENABLE_PPS(r0, 0x40043d04, 0x0)

1m0.152032903s ago: executing program 6 (id=474):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=")
r0 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x10000, &(0x7f00000001c0)={[{@redirect_dir_off, 0x3a}], [], 0x2f})
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file2\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC=r0, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x1, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0)
pwritev2(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)="046ecf", 0x3}], 0x1, 0x5412, 0x4, 0x2)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000040)=[{0x7a, 0x0, 0x9}]}, 0x10)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)

56.913245672s ago: executing program 6 (id=484):
ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x100, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0x10, 0x40, 0xcd6, 0x80000000, 0x6, 0x0, 0x3, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x350bae1a, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xd4f, 0x7, 0xf2, 0x10, 0x5, 0x8, 0x10001, 0x401, 0x80000000, 0x2401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x4, 0x3, 0x0, 0x0, 0x54, 0x80000000, 0x7fff, 0x5, 0x3, 0xa, 0x0, 0x10000, 0x401, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x1, 0xb6, 0x20, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0x80000000, 0xc74, 0x7, 0x1, 0xff, 0x5cb5, 0xfffffffe, 0x3fd, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x2, 0x1, 0x32, 0x98, 0x7f, 0x0, 0x401, 0x2, 0x2, 0x4680, 0x7, 0xe665, 0x3c6e, 0x3, 0x40, 0x80, 0x4b, 0x8000, 0x2, 0xb, 0x6, 0x4fa4, 0x80000002, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0xfd, 0xfe, 0x4, 0x40, 0x9, 0x1f, 0x1ff, 0x7ff, 0x2, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0x9, 0x3, 0xa0, 0xf, 0x1ff, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x9, 0x1, 0xf1a, 0x664, 0x4, 0x9, 0x9, 0x2, 0x4, 0xfffffffd, 0x13, 0x0, 0x9, 0x10000, 0x1, 0x9, 0xf7a, 0xc6, 0x1, 0x4, 0x6, 0xffffffff, 0x6, 0x10001, 0x3042c26b, 0x68, 0x7, 0x1, 0x5, 0x2, 0x9a1f, 0x400000, 0x0, 0x80000067, 0xffff0000, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x12, 0x10a, 0x2, 0x40, 0x1c, 0x80, 0xb5f8, 0x8bc, 0x3, 0x101, 0x5, 0x63, 0x4, 0x4, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x7, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x8, 0x6688, 0x45e3, 0x5, 0x7, 0x1, 0x5, 0x3, 0x0, 0x1, 0x2, 0x2, 0x4, 0xce, 0xf, 0x3, 0x1, 0x667, 0x3, 0x0, 0x9, 0x9, 0x37d, 0x10001, 0x8, 0x1, 0x1, 0x2, 0x6, 0x4, 0x6, 0x1, 0x9, 0x6, 0x1, 0x2, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80000001, 0x8, 0x8000, 0x3a, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xffff, 0xe, 0x89, 0x2, 0x7, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x5, 0x8, 0x0, 0x2, 0x80000004, 0x29, 0x9, 0x0, 0x80000004, 0x4, 0x0, 0x1, 0x4, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x4, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0xbf, 0x0, 0x8, 0x20000040, 0xd3, 0x7, 0x1, 0x89aa, 0x8, 0x7, 0xf0ce, 0x8000004, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x5, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x8, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xc, 0x8, 0x7, 0x80, 0x100, 0x2, 0x7fff, 0x101, 0x7, 0x6, 0x2, 0x2, 0x49, 0xe, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x6, 0x1, 0xa9c, 0x9, 0x9, 0x1, 0x2, 0x5, 0x1000, 0x5, 0x1ff, 0x8000, 0x3, 0x3, 0x10001, 0xffff0000, 0xf, 0x1, 0xffffa5ba, 0xffffa994, 0xb, 0x4, 0x8000005, 0x3, 0x10004b5f, 0x6, 0xa, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0xc8f, 0x1, 0x7, 0x8, 0x0, 0x10000, 0x57dc, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0x5, 0x5, 0x4000004, 0xfff, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x7f, 0x5, 0x2, 0x80000000, 0xd, 0x3, 0x1, 0x0, 0x5, 0xb8, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xae6, 0x9, 0xffffa0ae, 0xfffff6a6, 0x6, 0x2, 0x8, 0x9, 0x1, 0x81, 0x9a, 0x9, 0xb, 0x800, 0x4, 0x3ff, 0x5, 0x7, 0x9, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x2, 0x20000000, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0x8000001, 0x0, 0xfff, 0x101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xfff, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x6, 0x4b15, 0x10000, 0x1, 0x9, 0x1, 0xd, 0x80009, 0x4, 0x9, 0x1, 0x6, 0x0, 0x3, 0x10001, 0x1, 0x7, 0x1, 0x5, 0x8, 0xffffc487, 0x200, 0x10001, 0x37c, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x7fd3, 0x1, 0x0, 0x10, 0x0, 0x3, 0x7, 0xc0000000, 0xb46d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x1b57, 0x3, 0xffffffff, 0x0, 0x7f, 0x6, 0x8, 0x40, 0x2, 0x2, 0xa, 0x5, 0x200007, 0x80000000, 0x2, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x80000001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa958, 0xff, 0x5, 0x2, 0x2, 0x4, 0x10000, 0x80000001, 0x5, 0x1c00, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0xffff, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x9, 0x8, 0x0, 0x5, 0xf, 0x5, 0x3, 0x6, 0x1000, 0x3, 0x4000027, 0x382d, 0x459, 0xcad, 0x7, 0x0, 0x2, 0x9, 0x5, 0xffff8000, 0xe0, 0xfffffff7, 0x85, 0xffffffff, 0x2, 0x7, 0xa05a, 0x0, 0x0, 0x100, 0x35, 0x8, 0x1, 0x1, 0x30, 0xffffff7e, 0x1, 0x2, 0x9, 0x3, 0x7, 0x8, 0x6, 0x4000, 0x1, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x43, 0x6, 0x9, 0x5, 0x80000002, 0x9, 0x0, 0x5, 0x81, 0x1, 0x2, 0x3fd, 0x1, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x9, 0xffffffff, 0x9, 0x8, 0x2c1, 0x9e95, 0x2, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x9, 0x6, 0x19, 0x9, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x8000002, 0x8, 0x2b, 0x200006, 0x4, 0x1, 0x2, 0xfb4, 0xbf9, 0x7, 0x405, 0x7, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0x5, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x5, 0x3, 0x6, 0x80000000, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0x200000, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x5, 0x6, 0x1, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xd, 0x3, 0x4, 0x3, 0x81, 0x8, 0x14, 0x8, 0x9, 0x6, 0xffff, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0x0, 0x924, 0x6, 0x100, 0x1, 0x5, 0xf, 0x0, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x4, 0x1, 0x20004, 0xff, 0x5cad, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x10001, 0x1, 0x1, 0xfffffff7, 0x0, 0x5, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0xb8, 0x8, 0x5, 0xfffffff7, 0x7, 0x7, 0x5, 0x2, 0x0, 0x6, 0xea, 0x0, 0xfff, 0x809, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0x7, 0x5, 0x7, 0x2ec, 0x9, 0x6, 0x3ff, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xba, 0x8, 0x3, 0xe, 0x1, 0x1, 0xc, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x1000, 0x8, 0x5, 0x3, 0x9, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0xb, 0xc0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x1000003, 0x93c, 0x6, 0x0, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0x65, 0x8, 0xe, 0x3, 0x4, 0x5, 0x2, 0x6, 0xfffffff8, 0x5, 0xfffffff9, 0x9, 0x5, 0x62, 0x8, 0x1, 0xfffffffb, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0x7, 0x5, 0x10000, 0x40, 0x8, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x203, 0x7fff, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x7, 0x7ff, 0x0, 0x10001, 0x2, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x7, 0x4, 0xf, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x8, 0x89, 0x0, 0x100, 0x1, 0x9, 0xe75, 0x400, 0x1, 0x8, 0x200, 0xe9ab, 0xfffffff8, 0x8000, 0x7, 0x2, 0x2, 0x43, 0x3ff, 0x8, 0x3cfd8645, 0x9, 0x1, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]})
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0)
mknodat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x300d2140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x40042, 0x0)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000440)='./file0\x00', 0x1208a08, &(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0xf5, 0x316, &(0x7f0000000ac0)="$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")
write$binfmt_script(r0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000580)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

42.031997102s ago: executing program 6 (id=525):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad000000", 0x4)
sendmmsg$unix(r4, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0}, 0xfffffdef}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0xeffd)

41.73022161s ago: executing program 36 (id=525):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad000000", 0x4)
sendmmsg$unix(r4, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0}, 0xfffffdef}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0xeffd)

18.697569657s ago: executing program 1 (id=583):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4044060}, 0x4890)
r7 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r7, &(0x7f00000005c0)="bad3", 0x2, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r6, 0x1, 0xd8, 0x6, @multicast}, 0x14)

15.139879135s ago: executing program 1 (id=589):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0)

14.443125975s ago: executing program 7 (id=591):
r0 = socket$inet(0x2, 0x3, 0x4)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[], 0x2c}], 0x1}, 0x0)
sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0)

13.178565909s ago: executing program 1 (id=593):
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb2993000)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace$poke(0x4, r3, &(0x7f00000011c0), 0xfffffffffffffffe)
kexec_load(0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x1000000, 0x10000}], 0x0)

11.649216089s ago: executing program 7 (id=594):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040098}, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r5, 0x0, 0x0, 0x40, &(0x7f0000000000)={0x11, 0x1a, r4, 0x1, 0xd8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)

11.569848224s ago: executing program 1 (id=596):
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0x1a, {"a2e3ad21ed6b52f99cfbf4c087f71e9b230963ff7fc6e5539b9b3b09719b711b5d52101b080d29428f0e1ac6e7049b3468959b189a242a9b45f3988f7ef319520100ffe8d178708c523c921b1b23380a169b63d336cd3b78130daa61d8e81aea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae11a973735b36d5b1b63e91c00305d9be7bd1d020000000000000075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801000000005b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c580263093ca9a34af674f3f39fe23491e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6fa94fc488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b412435111c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269caf12c31357c8219793e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a687974e7b4ab01b7f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da3710ac000000001a527777a5371f87d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ef06e288e810bac9c766000a5e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1386abdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f103000000416d59fdee5325928974d12dad99dac44c3f0008047096a44060fb30e900caab415db6578b4779415d97b9a6d601005c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3c901cd34e5c92f76cc4c24eeb8bc4e9ac292d9e53803ed000000009737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ffffff7f000000007f889b09114edb8e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca405d8c5f64fdb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb67ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe529003d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb40800000077d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e5e2c664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85e654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b405177548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd84e935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba30b4279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53dc10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227edff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fa6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b30f0b932a4d02da711b757fe43c06d21e759595e4e98b27faea8aa12bc8040000000000000033eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d0000010000000000fcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d080e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed704887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6ff7ffb1d62458d0741a12830052fcc460db043afe525629b40d7cee65802cb5e930ed624806c43a006dc9336d07c2b8081c188d26558f48261f7897084c2a1a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c0ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf475bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264c7b34252600c9654e502dcea39cb0800eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc640df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c02b5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadbb25c72e9758f03a755d0be53f8d2a1dfb1c6000064b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa7082ead01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058093fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d060000008926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000340)={0x0, &(0x7f0000000380)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x2, 0x6})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

10.644866268s ago: executing program 8 (id=607):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket(0x10, 0x3, 0x0)
r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x0}, &(0x7f00000001c0)="03", 0x1, r3)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000300))
keyctl$search(0xa, r3, &(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x0}, r3)

9.129105336s ago: executing program 8 (id=600):
sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[], 0x14}}, 0x4040040)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='c'], 0xa)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x850}, 0x48850)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x4000081, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

8.72317717s ago: executing program 1 (id=601):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
connect$can_bcm(r0, &(0x7f0000000140), 0x10)
r5 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=<r6=>0x0, 0x0)
syz_io_uring_submit(r6, 0x0, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40480d7, 0x1})
io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0)

8.668345633s ago: executing program 7 (id=602):
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xf8, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0\x00', <r4=>0x0})
setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
sendto$packet(r3, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14)

8.589622888s ago: executing program 8 (id=603):
syz_mount_image$udf(&(0x7f0000000a40), &(0x7f0000000040)='./file1\x00', 0x4400, &(0x7f0000000480)=ANY=[@ANYBLOB='shortad,rootdir=00000000000000000002,noadinicb\x00\x00\x00\x00=', @ANYRES64, @ANYRES16], 0x1, 0xa23, &(0x7f0000001b00)="$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")
ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609)
getpid()
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x8040}, 0x400c5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0)
rmdir(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

7.237656197s ago: executing program 1 (id=604):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, 0x0, 0x0)
rseq(0x0, 0x0, 0x0, 0x0)
quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
close(r1)
r3 = open(&(0x7f0000000000)='./file0\x00', 0x400, 0x1a1)
fcntl$setlease(r3, 0x400, 0x1)
r4 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0)
write$binfmt_script(r4, &(0x7f0000000340)={'#! ', './file0'}, 0xb)
execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

5.908968534s ago: executing program 7 (id=606):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
pipe(&(0x7f0000000300)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write$binfmt_misc(r4, &(0x7f0000000080)="b3", 0x1)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-256\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x80800)
splice(r3, 0x0, r6, 0x0, 0x8001, 0x2)

4.798706179s ago: executing program 7 (id=609):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300)
setsockopt$inet_int(r1, 0x0, 0x17, &(0x7f0000000000)=0x40, 0x4)
recvmmsg(r1, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x0, 0x2}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xee776000)

4.798300569s ago: executing program 4 (id=610):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket(0x10, 0x3, 0x0)
r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x0}, &(0x7f00000001c0)="03", 0x1, r3)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000300))
keyctl$search(0xa, r3, &(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x0}, r3)

4.738606663s ago: executing program 8 (id=611):
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x4}, 0x50)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x18, 0x0, 0x0, &(0x7f00000003c0)='GPL\x00', 0x2, 0x30, &(0x7f0000000400)=""/48, 0x0, 0x29, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0), 0x10, 0xa29b}, 0x94)
mprotect(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYRESDEC, @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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")
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x40, &(0x7f0000000280)={0xa, 0x4e21, 0x3c, @empty, 0x3}, 0x1c)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='io.stat\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b)
fadvise64(r4, 0x2, 0x0, 0x4)

3.444211588s ago: executing program 4 (id=612):
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB], 0x48)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20)
sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20)

2.182149472s ago: executing program 4 (id=613):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, 0x0, 0x0)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0)
openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)
pipe2$watch_queue(&(0x7f0000001100), 0x80)
pselect6(0x40, &(0x7f00000001c0)={0x5, 0x800, 0x100000000, 0xfffffffffffffffd, 0x0, 0x5, 0x1000001004, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x1, 0xa, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x800)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)

2.124799565s ago: executing program 8 (id=614):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'bond0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}})
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000340), 0x8101, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x942e, 0x0)
syz_open_dev$sndctrl(0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r3 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'lo\x00'}}, 0x1e)
r4 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r4, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
ioctl$PPPIOCGCHAN(r4, 0x80047437, &(0x7f0000000080))
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$PPPIOCATTCHAN(r5, 0x40047438, 0x0)
ioctl$PPPIOCBRIDGECHAN(r5, 0x40047435, 0x0)
sendmmsg(r4, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0)

2.077452158s ago: executing program 4 (id=615):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341)
ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200))
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x8)
unshare(0x2040400)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0)
sendto$packet(r5, &(0x7f00000002c0)="05031600d3fc140000004788031c09103328", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, 0x0)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, 0x0, 0x0)
process_vm_readv(r0, 0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {0x0}, {0x0}, {&(0x7f00000003c0)=""/13, 0xd}], 0x4, 0x0)
setsockopt$MRT6_DEL_MFC(r6, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e24, 0x81, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, {0xa, 0x4e21, 0x7fffffff, @ipv4={'\x00', '\xff\xff', @loopback}, 0x6}, 0x1, {[0xfffffffd, 0x82, 0x8, 0x400, 0x8, 0x8, 0x4, 0xff7]}}, 0x5c)

1.643877903s ago: executing program 7 (id=616):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000100), 0x1, 0x50f9, &(0x7f0000005140)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTtRq2fvz3mQI6xdW8rsJfhMPtyspzI8VCh2tpMe22CMvzI8XCh1zSY/NkyE8uLCyPyn8PxbaSeHK2rxwJCmcjoX8fOgWjiWFE/FM+3xtPt208H0s5BdYzMcrKNZ0L4lIelzt12OhcMMeZ7sHBwAAuKfE8Jxn2bHeZkij7Hxt0A6rB+0wMmiH+qAdRpMd0h37bQ+zvYW4vX1m49Ke/39kuPwf34pV2aLf9f8hXv+fP9ewe/3/bCw0ksJ8LLTSOwa04jGysPtxPEajlfe4sr5bAAAAgLta/F6gvsLzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5h715j5KruA4CffY734d2FpAqhUbJJahw38Xptk4daqqwpVSPSNOuGBlURxcZek8ULdmxTYhQiYxPRCEFpg5R8KMIoimo+QK1ARFJAuEhxhMojoioKIFBoDVEQKSWJSBOkUM3ee2bvnLvz8GONl/5+knfOzP887zw859475wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP8Ph75y1d82iz/82/Oefu7Cicv2rrvw5WvOO/3xECZnH+/Iwh3919868fM7z71r731rbrvnyPkf7M3L5fEwUP3Tmd+5LtZ6ZGkI93aE0J0GVg5mgZ78/mCs712DIZwW5gK1ElP9WYm04fD9vhD2h7lArarv9YUwWAhc8MRDD95YTdzSF8KyEEIlbePZStZGXxo4qzcL9KeBbd1Z4FdvZGqB73ZmAThu8c1Qe9EfnKzPMDJ/uQavv54T1rE3Vzq8rpgYaZzvZ+sWuFMFvekDk8f1tJWqY0GU3h6HvNsWwbuttJ1v9rQVv0jl31DemAtVQufmqS0br5zZFR/pDGNjXY1qWqDn+alXv7TpaNKL5nUYOzByQl6HNz227M6uFZ969J6Vy1488KF9Lx1vN39U2KTF9EKrhPw1t2iex2jC58kiePuVviWN+tIVQtjy+d/7dLN4af4/0nz+H1/O8bazLnes9fWhbG4eHxmMiVeGsrk5AAAALBqLYa/ptrEHPlYoPlxJ6ivN/0fbO/4fD/nnk/lstIdCmJhN7BsO4YzZx7PAHbG5S4ZDeO9sarI+sC4JHArhnbOJFbWqkhJLYonRJPCToTwwkQQOx8BkEvhWDNycBK6LgYNJYFMMHEoC58ZAmK4fx+8P5eNoO9AXAxuyjXgwnoXwi6HYWrKtnqlVBQAAcILks8Oe+ruFcx2ON0OcXh7sa5UhnoHdMEMlqSGdwdamVQ1r6G5VQ2erGmrj3tN8+KWaO1rVXDoNo6M+w62//JvPhCZK8//x5vP/yjwd6Sgd/w9h/ezfmLszj8zU4hsm6zIAAAAAx2Hgf5//ZrN4af4/0d75/3GfSFchc3gk7obYOhzCeH0gq/YPy4HsqPdAHgAAAIDFoHY8vnYsfDq/zU7RTufT5fyTR5k/HvifmDd/76H7NzTrb2n+P9ne+f/99bdZJw7HXnxtOIQlhcAPYi+rgVmjMfDjj9cH8vEfjhvghlhVfmJCraobYokNMTCeBPY3KvHDWokz6gP5k1VrfF9tHNN5iUIAAAAATrq4OyAel4/n/7/vN2uualauNP/fcHTn/8/Og0un988MhLCqO4Su9IcBj/RnCwPGwGBHnnigP6urK63q2v4QzqkOLK3q+Xz9/+50jcEn+rKqYuCM9x149axq4pt9IawqBp783O0friZ2JYFa43/ZF8J7qqNNG//OkqzxnrTxry8J4d2FQK2qS5aEUG2sN63qoUp+HYO0qn+uhPC2QqBW1UcqIewOACxS8b/SzcUHd+6+euvGmZmpHQuYiPvw+8KW6ZmpsU3bZjZXGvRpc9LnumWMri2Pqd0r3zyTL1H02bvXD7aTrv1OcLzYVr4fv3TiYH4/fhfqmR3nmp66u2vTIX/g/eUmQuGbVKMhdy7wkPuLlcw9iaX6Y/7eMBCWXLlzasfYFzfu2rVjdfa33exrsr/xMFO2rVan26p/vr618fJouFpW4li31fJiJat2Xb591c7dV6+cvnzjpVOXTl2x+iNrxs8eXzv+0bNXVUc1nv1tMdTl81WdDPWN29sc1wkc6pndhUpOxqeGhITEYktsG1je9P/k0vx/e/P5f/zUiZ/8+foMjY7/j8TD/Nnjc4f5N8TA/naP/480OppfOzFgNAnsiYE9DvMDAADw1hAn+XFvZtwr/dMV33mxWbnS/H9Pe7//P0Hr/9eWrj+/0TL/K2KJ8Ubr/6fL/NfW/9/TaP3/dJn/2vr/+9+E9f+vrAWSTfIL6/8DAABvBSdv/f+Wy/unFwgoZWi5vH96gYBShpbL+Ld7gYCjXv//2f/8q/8OTZTm/ze3N/+3cD8AAACcOr78Z1f9TrN4af6/v735/8lf/y80Ov9/tFFgstHCgNb/AwAAYJFqtP7fyPX9FzcrV5r/H2xv/h9Pu+isyx1rfX0oW9MupGvavTJU+8kAAAAALA6dYWysp828dSujrjv2Np/KlwJtli56/k+OHN35/4fam//X/S7jpseW3dm14lOPvn7PymUvHvjQvpfmjv8DAAAAC6fd/RIAAAAAAAAAAAAAAMCb7/n/2Lu2Wbz0+/+wfvbxRr//j9f9i78veHtd7lhr6/X/8vsXfPKu3bNLFj4yFML7i4Gte7eeFvJr8y8vBh68aMU7qom9aYn7nzv3hWri4jTwiZWnv1ZNnJMENsRFEt+ZBuJVFV9bmgTi8or/ngbi9jiYBnrzwFeXZuPoSLfVTwezbdWRbqunB0MYLgRq2+rewayNjnSAtySB2gC/kAbiAP88D3SmvbprIOtVDAzGorcNZL0CAOCUFb8F9oQt0zNT4/ErfLw9s7v+NqpbsuzacrUdbTb/TL402WfvXj/YTror/S46d63xnlCpDmF16etqMUvH7ChPTC0tNt3bGwy51WpvnQ3KpY520/U2HlFfNqKxTdtmNve0HPja1lnWdLfMsro02Slm6ZzdpG3U0kZf2hhRm9umjS7H+51hbKwryfUHMTgS6rR6RbT7e/3iOn+NXgXFPFcc2ferZvWV5v8j7c3/K8VxvZZfDGBPvLLe3w1b5h8AAAAW1lfX/fob8d9nrn/4yWZ5S/P/0fbm/3EPVn4oONvbcShe/3/fcAizl9YfyQJ3xOYuGQ7hvbOpyVgiu6D++bHEeBa4I+4wWRFLbJisr2pJDBxMAj8ZygOHksDhGMj3UhwI+a6cvx8K4cOzqfX1JbbHEiNJ4NMxMJoExmJgPAksjYGJJPDy0jwwmQT+LQbCdP22untpvq0AAACORj7P6qm/G9J53sHuVhk6WmXob5Whs1WGSqsMjUYR7387ZuhJTl7pKGTqSWvtS2opZYgXwz/qfpUyhB/W50wLlpqO5x/UzjfoqM9w38e6K6GJ0vx/vL35f3/9bdb64Tj/n7v+Xxb4Qeze1+Kp46Mx8OOP1wfyHQOH42T3hlpVk3mJfNJ+QywxEQOjSWB7DEwkgQ3r88D+d9QH8pl2rfF9tcan8xKFAAAAAJx0cQdB3E0T5/+37fzKQLNypfn/RHvz/9jeQLGx62KtR5aGcG/HXG9qgZWDWSDuxxiMP49/12AIpxV2cNRKTPVnJXqThsP3+7JfqPemVX2vL/vxQbx/wRMPPXhjNXFLXwjLCntfam08W8na6EsDZ/Vmgf40sK07C8Q9P7XAdzuzABy32l7B+ILKT3WpGZm/XIPX31vlmqDp8Er7QOfJN99vrhZKaYdrvk+15uietqb7bzlhSm+PQ95ti/HdNuLdVvwilX9DeWMuVAmdm6e2bLxyZld8pPhL1pIFep6Lv1JtJ30CXod7jr23rVXSDownHx/j85eb/3XYEau76bFld3at+NSj96xc9uKBD+17qe1uNBB/KPzQNf86+KPC5l1olZC/5hbd58mkz5NF8d9A8u4e9bSFENa//PUbmsVL8//J9ub/3cntrF/HjblzOIQPFDbuI3Hz//Fw9jlYCGSfkm8rB7JD7v811PCTEwAAAE602u6O2v6C6fw2OyE8nSeX808eZf64v2Ji3vzt9rv/ry9a1ixemv9vaD7/X5J00/F/x/9ZII7/z+tU3xW9JH1gz3Htii5Vx4Jw/H9ep/q7zfH/eTn+7/j/fBz/b8Hx/3md6k9b6VvSdl+6Qggv/tEDTzeLl+b/29ub/1v/b/5F+2rr/21otP7f9kbr/+2x/h8AALCgGiw0l87zSqv3lTKkq/eVMrRcILDlEoPW/zvq9f9eOPPZ34QmSvP/Pe3N/+PLYaDY+mJZ/290fYOqbo6B7RYGBAAA4FTUaAcBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb677/uF/NjeLP/zb855+7sKJy/auu/Dla847/fEQpmcf78jCHf3X3zrx8zvPvWvvfWtuu+fI+R+s5OV68tvfrcsda319KIT9hUcGY+KVoeqducAFn7xrd3c18chQCO8vBrbu3XpaNfGtoRCWFwMPXrTiHdXE3rTE/c+d+0I1cXEa+MTK01+rJs7JAx1pd/9xadbdjrS7Ny4NYbgQqHX3sqX1VdXa+NM80Jm28U+DWRsxMBiLfmMwayMGZmKJ6SUhrOoOoSut6uFKVlVXWtW/VLKqutKqvlwJ4ZwQQnda1XO9WVXd6cgf782qioEz3nfg1bOqif29IawqBp783O0fria+kARqjf9Fbwjvqb5k0sa/3ZM13pM2fktPCO8OIfSmJX7ZnZXoTUs83x3C2wqBWuOf7w5hd+AtIX741H2i7dx99daNMzNTOxYw0Zu31Re2TM9MjW3aNrO5kvSpkY5C+o1rj33sz7z6pU3V28/evX6wnXR3Xq5ntstreururj3Vex/71V+sZO75KNUf8/eGgbDkyp1TO8a+uHHXrh2rs7/tZl+T/e3Ko9m2Wr1YttXyYiWrdl2+fdXO3VevnL5846VTl05dsfoja8bPHl87/tGzV1VHNZ79PRFDvf3kD/XM7kIlJ+MDQEJCYrElOus+3cZP9Q/y0hf9uY72hMrsB3RpWlHM0jE7yhMx6HXHOOJj+Z7SckSrSxOHUpY182S5tj7L2tJkYq6WvizL7Pe60uSw2Fjn7CaN9zvD2FhXo+0wUn+3uHl/dhyb96l807WbBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4P/YgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24FgAAAAAQJi/dRg9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHApAAD//7IeJCA=")
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0)
getpid()
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
ioctl$FITRIM(r0, 0xc4009420, &(0x7f0000000200)={0x2, 0x6, 0x4000000000000000})

1.19174298s ago: executing program 4 (id=617):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1400000002010500000000000000029ceb5a"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040)

105.710244ms ago: executing program 4 (id=618):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffe0, 0xc}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x810}, 0x0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r9)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4)

0s ago: executing program 8 (id=619):
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604110, 0x0)
socket$netlink(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwIF6kCCIWxD/Au8fiH6B/RUELRUrQg5fIbGbbbZLNJunWbJ3PB6Z9b2ayb96++b79zs4uG0BhjWT/lCJejoivk4iDbdsGI984srLf0sNrk9mSxPLyJ38mkeTrWvsn+f/788pLEfHLFxHHS2vbrS8szlSq1XQur482Zi+P1hcWT1ycrUyn0+ml8YmJU29NjL/7zts96+vr5/7+7uO7H5z66ujStz/dP3Q7iTNxIN/W3o+ncKO9MhIj+XMyFGdW7TjWg8b6SbLTB8C2DORxPhTZHHAwBvKoB/7/rkfEMlBQifiHgmrlAa1r+x5dBz83Hry/cgG0tv+DK++NxJ7mtdG+peSJK6Psene4B+1nbfz8x53b2RJd3oe43oP2AFpu3IyIk4ODa+e/JJ//tu9k883jja1uo2ivP7CT7mb5zxvr5T+lR/lPrJP/7F8ndreje/yX7vegmY6y/O+9dfPfR1PX8EBee6GZ8w0lFy5W05MR8WJEHIuh3Vl9o/s5p5buLXfa1p7/ZUvWfisXzI/j/uDuJ/9mqtKoPE2f2z24GfHK4/w3iTXz/55mrrt6/LPn41xW+PXLrm0cSe+82mlb9/63630GvPxjxGvrjv/jO1rJxvcnR5vnw2jrrFjrr1tHfuvU/tb633vZ+O/buP/DSfv92vrW2/hhzz9pp23bPf93JZ82y7vydVcrjcbcWMSu5KO168cf/22r3to/6/+xoxvPf+ud/3sj4rNN9v/W4Vsdd+2H8Z/a0vhvvXDvw8+/79T+5sb/zWbpWL5mM/PfZg/waZ47AAAAAAAA6DeliDgQSan8qFwqlcsrn+84HPtK1Vq9cfxCbf7SVDS/KzscQ6XWne6DbZ+HGMs/D9uqj6+qT0TEoYj4ZmBvs16erFWndrrzAAAAAAAAAAAAAAAAAAAA0Cf2d/j+f+b3gZ0+OuCZ85PfUFxd478Xv/QE9CWv/1Bc4h+KS/xDcYl/KC7xD8Ul/qG4xD8Ul/gHAAAAAAAAAAAAAAAAAAAAAAAAAACAnjp39my2LC89vDaZ1aeuLMzP1K6cmErrM+XZ+cnyZG3ucnm6VpuupuXJ2my3x6vWapfHxmP+6mgjrTdG6wuL52dr85ca5y/OVqbT8+nQf9IrAAAAAAAAAAAAAAAAAAAAeL7UFxZnKtVqOqfQsXA6+uIwtl1Iuo3y6fxk2NIjR14Y3PkOKjyDwg5PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ5t8AAAD//8nLNLM=")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_open_dev$video4linux(&(0x7f0000000040), 0x100000000009, 0x80000)
ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, &(0x7f0000000140)={0x1, 0x0, {0xfffffffd, 0xb76, 0x1014, 0x0, 0x3, 0x4, 0x3, 0xa4de36948e08189d}})
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48)

kernel console output (not intermixed with test programs):


[   65.956774][ T4253] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[   65.966197][   T21] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[   65.975643][   T21] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[   65.984060][ T4253] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   65.992488][   T21] usb 4-1: Product: syz
[   65.996130][ T4453] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.996839][   T21] usb 4-1: Manufacturer: syz
[   66.010633][   T21] usb 4-1: SerialNumber: syz
[   66.028462][ T4253] usb 2-1: config 0 descriptor??
[   66.035565][ T4453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.053257][   T21] usb 4-1: config 0 descriptor??
[   66.068939][ T4453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.088458][ T4442] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   66.096620][ T4453] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.104200][ T4453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.171186][ T4453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.297668][ T4453] device hsr_slave_0 entered promiscuous mode
[   66.308983][ T4453] device hsr_slave_1 entered promiscuous mode
[   66.319505][ T4453] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   66.343134][ T4466] kvm: pic: single mode not supported
[   66.343242][ T4466] kvm: pic: level sensitive irq not supported
[   66.349097][ T4466] kvm: pic: single mode not supported
[   66.355953][ T4466] kvm: pic: level sensitive irq not supported
[   66.357046][ T4453] Cannot create hsr debugfs directory
[   66.373047][ T4466] kvm: pic: single mode not supported
[   66.373080][ T4466] kvm: pic: level sensitive irq not supported
[   66.373318][ T4466] kvm: pic: single mode not supported
[   66.384684][ T4466] kvm: pic: level sensitive irq not supported
[   66.399175][ T4466] kvm: pic: single mode not supported
[   66.405490][ T4466] kvm: pic: level sensitive irq not supported
[   66.419531][ T4466] kvm: pic: single mode not supported
[   66.425726][ T4466] kvm: pic: level sensitive irq not supported
[   66.445827][ T1264] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.462869][ T4466] kvm: pic: single mode not supported
[   66.462924][ T4466] kvm: pic: single mode not supported
[   66.468862][ T4466] kvm: pic: single mode not supported
[   66.487149][ T4466] kvm: pic: single mode not supported
[   66.504111][ T4466] kvm: pic: level sensitive irq not supported
[   66.509794][ T4466] kvm: pic: level sensitive irq not supported
[   66.521910][ T4466] kvm: pic: level sensitive irq not supported
[   66.528356][ T4466] kvm: pic: level sensitive irq not supported
[   66.606516][ T1264] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.693691][ T4471] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   66.790337][ T1264] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.877492][ T1264] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.385173][ T4453] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   67.440916][ T4253] Bluetooth: hci4: command 0x0409 tx timeout
[   67.503341][ T4453] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   67.540430][ T4453] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   67.591322][ T4453] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   67.902603][ T4453] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.986301][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   68.016283][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   68.042219][ T4453] 8021q: adding VLAN 0 to HW filter on device team0
[   68.087203][   T21] usb 2-1: USB disconnect, device number 2
[   68.117706][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   68.126876][ T4375] usb 4-1: USB disconnect, device number 2
[   68.161964][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   68.227616][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.234824][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.317262][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   68.324813][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   68.328456][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   68.328891][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.328952][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.403117][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   68.404014][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   68.404799][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   68.405941][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   68.407312][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   68.425111][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   68.425968][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   68.451766][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   68.452429][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   68.464106][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   68.464685][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   68.545007][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   68.725607][ T4508] set_capacity_and_notify: 1 callbacks suppressed
[   68.725623][ T4508] loop1: detected capacity change from 0 to 2048
[   68.817879][ T1264] device hsr_slave_0 left promiscuous mode
[   68.818606][ T1264] device hsr_slave_1 left promiscuous mode
[   68.819510][ T1264] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   68.819573][ T1264] batman_adv: batadv0: Removing interface: batadv_slave_0
[   68.823214][ T1264] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   68.823242][ T1264] batman_adv: batadv0: Removing interface: batadv_slave_1
[   68.823819][ T1264] device bridge_slave_1 left promiscuous mode
[   68.825117][ T1264] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.850575][ T1264] device bridge_slave_0 left promiscuous mode
[   68.852604][ T1264] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.865774][ T4508] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,noinit_itable,i_version,init_itable,,errors=continue. Quota mode: none.
[   68.865940][ T4508] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   69.065650][ T1264] device veth1_macvtap left promiscuous mode
[   69.065857][ T1264] device veth0_macvtap left promiscuous mode
[   69.065957][ T1264] device veth1_vlan left promiscuous mode
[   69.066732][ T1264] device veth0_vlan left promiscuous mode
[   69.528690][ T4236] Bluetooth: hci4: command 0x041b tx timeout
[   69.674771][ T4530] loop3: detected capacity change from 0 to 512
[   69.743749][ T4530] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   69.778003][ T4535] loop1: detected capacity change from 0 to 512
[   69.919601][ T4535] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback.
[   70.016113][ T4535] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   70.125052][ T1264] team0 (unregistering): Port device team_slave_1 removed
[   70.187812][ T1264] team0 (unregistering): Port device team_slave_0 removed
[   70.217607][ T1264] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   70.251421][ T1264] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   70.520139][ T1264] bond0 (unregistering): Released all slaves
[   70.918580][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   70.971006][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   71.005157][ T4453] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.357984][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[   71.366346][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[   71.420208][ T4560] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[   71.476823][ T4560] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[   71.546944][ T4575] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[   71.547140][ T4591] overlayfs: failed to resolve './bus': -2
[   71.591416][ T4582] Bluetooth: hci4: command 0x040f tx timeout
[   71.617350][ T4575] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[   71.638502][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   71.663983][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   71.727265][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   71.748743][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   71.781880][ T4453] device veth0_vlan entered promiscuous mode
[   71.792266][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   71.823516][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   71.855703][ T4453] device veth1_vlan entered promiscuous mode
[   71.993028][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   72.026145][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   72.064599][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   72.112372][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   72.152045][ T4453] device veth0_macvtap entered promiscuous mode
[   72.181848][ T4453] device veth1_macvtap entered promiscuous mode
[   72.332810][ T4453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.352317][ T4607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.72'.
[   72.385760][ T4610] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   72.395852][ T4453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.422095][ T4453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.468484][ T4453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.499900][ T4453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.542822][ T4453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.575766][ T4453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.614903][ T4453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.626531][ T4623] block device autoloading is deprecated and will be removed.
[   72.670453][ T4453] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.710447][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   72.734081][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   72.768779][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   72.806006][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   72.837777][ T4453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.863738][ T4453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.896287][ T4453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.910821][ T4622] md: could not open device unknown-block(0,0).
[   72.920238][ T4622] md: md_import_device returned -6
[   72.958284][ T4453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.973150][ T4453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.015407][ T4453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.028640][ T4453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.047774][ T4453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.071678][ T4453] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.104036][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   73.131878][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   73.183075][ T4453] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.204342][ T4453] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.245951][ T4636] loop3: detected capacity change from 0 to 2048
[   73.257509][ T4453] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.279318][ T4453] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.682680][   T23] Bluetooth: hci4: command 0x0419 tx timeout
[   73.711829][ T4636] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,jqfmt=vfsv1,,errors=continue. Quota mode: none.
[   73.839335][ T1172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.885795][ T4636] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   73.925882][ T1172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.954824][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   73.998995][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.011030][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.042368][ T4636] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 22 with error 28
[   74.062515][  T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   74.135166][ T4636] EXT4-fs (loop3): This should not happen!! Data will be lost
[   74.135166][ T4636] 
[   74.167546][ T4662] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[   74.191342][ T4636] EXT4-fs (loop3): Total free blocks count 0
[   74.205035][ T4662] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[   74.216638][ T4636] EXT4-fs (loop3): Free/Dirty block details
[   74.249814][ T4659] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[   74.267298][ T4636] EXT4-fs (loop3): free_blocks=2415919104
[   74.274618][ T4659] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[   74.300925][ T4636] EXT4-fs (loop3): dirty_blocks=32
[   74.306140][ T4636] EXT4-fs (loop3): Block reservation details
[   74.331734][ T4636] EXT4-fs (loop3): i_reserved_data_blocks=2
[   74.414869][    T9] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[   74.463615][    T9] EXT4-fs (loop3): This should not happen!! Data will be lost
[   74.463615][    T9] 
[   75.106662][   T23] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   75.237835][ T4666] loop0: detected capacity change from 0 to 32768
[   75.279109][ T4666] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.82 (4666)
[   75.357937][ T4666] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[   75.371031][   T23] usb 5-1: Using ep0 maxpacket: 16
[   75.389850][ T4666] BTRFS info (device loop0): setting nodatacow, compression disabled
[   75.428063][ T4666] BTRFS info (device loop0): force clearing of disk cache
[   75.476763][ T4666] BTRFS info (device loop0): enabling ssd optimizations
[   75.492691][ T4669] loop5: detected capacity change from 0 to 40427
[   75.500812][ T4666] BTRFS info (device loop0): using spread ssd allocation scheme
[   75.508498][ T4666] BTRFS info (device loop0): turning off barriers
[   75.516452][   T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 140, changing to 11
[   75.548595][   T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 33434, setting to 1024
[   75.580563][   T23] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   75.600847][ T4666] BTRFS info (device loop0): disabling free space tree
[   75.631199][ T4669] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[   75.639220][ T4669] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[   75.649227][   T23] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   75.671257][ T4666] BTRFS info (device loop0): not using ssd optimizations
[   75.690264][   T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   75.698783][ T4666] BTRFS info (device loop0): not using spread ssd allocation scheme
[   75.721863][ T4669] F2FS-fs (loop5): invalid crc_offset: 33558524
[   75.744329][ T4666] BTRFS info (device loop0): has skinny extents
[   75.752222][   T23] usb 5-1: config 0 descriptor??
[   75.819470][ T4669] F2FS-fs (loop5): Found nat_bits in checkpoint
[   76.035159][ T4666] BTRFS info (device loop0): clearing free space tree
[   76.044253][ T4666] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   76.059652][ T4666] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   76.237060][ T4669] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[   76.256460][   T23] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[   76.265661][ T4669] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[   76.285640][   T23] microsoft 0003:045E:07DA.0001: ignoring exceeding usage max
[   76.344547][   T23] microsoft 0003:045E:07DA.0001: unknown main item tag 0x7
[   76.471911][   T23] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0001/input/input5
[   76.473683][ T1326] cfg80211: failed to load regulatory.db
[   76.785340][   T23] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[   76.843967][   T23] usb 5-1: USB disconnect, device number 2
[   76.955392][ T4695] attempt to access beyond end of device
[   76.955392][ T4695] loop5: rw=2049, want=45104, limit=40427
[   77.217724][ T4745] fido_id[4745]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[   77.827298][ T4767] loop1: detected capacity change from 0 to 256
[   77.981276][ T4767] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[   78.980843][   T23] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   79.141183][ T4782] loop1: detected capacity change from 0 to 32768
[   79.391158][   T23] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   79.410538][   T23] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[   79.426051][   T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   79.452191][ T4808] overlayfs: filesystem on './file0' not supported
[   79.472757][   T23] usb 6-1: config 0 descriptor??
[   79.512987][   T23] pwc: Askey VC010 type 2 USB webcam detected.
[   79.536577][ T4813] loop4: detected capacity change from 0 to 8
[   79.961027][   T23] pwc: recv_control_msg error -32 req 02 val 2b00
[   80.010948][   T23] pwc: recv_control_msg error -32 req 02 val 2700
[   80.061505][   T23] pwc: recv_control_msg error -32 req 02 val 2c00
[   80.101077][   T23] pwc: recv_control_msg error -32 req 04 val 1000
[   80.161153][   T23] pwc: recv_control_msg error -32 req 04 val 1300
[   80.220977][   T23] pwc: recv_control_msg error -32 req 04 val 1400
[   80.272322][   T23] pwc: recv_control_msg error -32 req 02 val 2000
[   80.311333][   T23] pwc: recv_control_msg error -32 req 02 val 2100
[   80.580924][   T23] pwc: recv_control_msg error -71 req 02 val 2500
[   80.601406][   T23] pwc: recv_control_msg error -71 req 02 val 2400
[   80.620864][   T23] pwc: recv_control_msg error -71 req 02 val 2600
[   80.640822][   T23] pwc: recv_control_msg error -71 req 02 val 2900
[   80.660875][   T23] pwc: recv_control_msg error -71 req 02 val 2800
[   80.690864][   T23] pwc: recv_control_msg error -71 req 04 val 1100
[   80.720855][ T4370] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   80.720894][   T23] pwc: recv_control_msg error -71 req 04 val 1200
[   80.745922][   T23] pwc: Registered as video103.
[   80.759881][   T23] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input6
[   80.778520][   T23] usb 6-1: USB disconnect, device number 2
[   81.080929][ T4370] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   81.101905][ T4370] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   81.200967][ T4370] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   81.219650][ T4370] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   81.247584][ T4370] usb 1-1: SerialNumber: syz
[   81.596532][ T4868] loop1: detected capacity change from 0 to 736
[   81.659919][ T4863] loop3: detected capacity change from 0 to 40427
[   81.686096][ T4370] usb 1-1: 0:2 : does not exist
[   81.752708][ T4872] loop5: detected capacity change from 0 to 8
[   81.754471][ T4370] usb 1-1: USB disconnect, device number 2
[   81.789661][ T4863] F2FS-fs (loop3): invalid crc value
[   81.844506][ T4863] F2FS-fs (loop3): Found nat_bits in checkpoint
[   81.926276][ T4863] F2FS-fs (loop3): Start checkpoint disabled!
[   81.957506][ T4863] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[   82.033471][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   82.151126][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!!
[   82.248092][ T4881] device syzkaller0 entered promiscuous mode
[   82.302553][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!!
[   82.556100][   T26] audit: type=1800 audit(1769922723.470:2): pid=4872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.121" name="file2" dev="loop5" ino=6 res=0 errno=0
[   82.779771][ T4884] attempt to access beyond end of device
[   82.779771][ T4884] loop3: rw=2049, want=40984, limit=40427
[   82.877487][ T4888] netlink: 'syz.4.125': attribute type 4 has an invalid length.
[   82.891889][ T4887] loop0: detected capacity change from 0 to 8
[   83.017543][ T4891] netlink: 'syz.4.125': attribute type 4 has an invalid length.
[   83.267192][ T4897] binder: 4896:4897 unknown command 0
[   83.284829][ T4897] binder: 4896:4897 ioctl c0306201 200000000080 returned -22
[   83.468468][ T4907] tmpfs: Bad value for 'mpol'
[   83.704548][ T4918] process 'syz.1.134' launched './file0' with NULL argv: empty string added
[   83.722938][ T4916] kvm: pic: non byte write
[   83.727839][ T4917] loop3: detected capacity change from 0 to 1024
[   83.848081][ T4917] hfsplus: catalog name length corrupted
[   83.933598][ T4920] netlink: 'syz.4.136': attribute type 1 has an invalid length.
[   84.489374][ T4943] xt_bpf: check failed: parse error
[   84.495864][   T23] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[   84.621535][   T26] audit: type=1800 audit(1769922725.440:3): pid=4918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.134" name="/" dev="fuse" ino=4 res=0 errno=0
[   84.811048][ T4582] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   85.022663][   T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[   85.130147][   T23] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[   85.297947][   T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   85.358689][   T23] usb 1-1: config 0 descriptor??
[   85.391094][ T4932] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   85.489637][ T4947] pit: kvm: requested 136609 ns i8254 timer period limited to 200000 ns
[   85.501967][ T4947] pit: kvm: requested 68723 ns i8254 timer period limited to 200000 ns
[   85.511210][ T4947] pit: kvm: requested 70400 ns i8254 timer period limited to 200000 ns
[   85.522937][ T4947] pit: kvm: requested 134933 ns i8254 timer period limited to 200000 ns
[   85.532005][ T4947] pit: kvm: requested 13409 ns i8254 timer period limited to 200000 ns
[   85.542352][ T4947] pit: kvm: requested 120685 ns i8254 timer period limited to 200000 ns
[   85.551199][ T4947] pit: kvm: requested 22628 ns i8254 timer period limited to 200000 ns
[   85.560052][ T4947] pit: kvm: requested 105600 ns i8254 timer period limited to 200000 ns
[   85.577757][ T4947] pit: kvm: requested 197790 ns i8254 timer period limited to 200000 ns
[   85.595075][ T4582] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[   85.595253][ T4947] pit: kvm: requested 71238 ns i8254 timer period limited to 200000 ns
[   85.614171][ T4582] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.643080][ T4582] usb 5-1: Product: syz
[   85.658073][ T4582] usb 5-1: Manufacturer: syz
[   85.669355][ T4582] usb 5-1: SerialNumber: syz
[   85.852015][ T4964] block device autoloading is deprecated and will be removed.
[   85.894676][   T23] elan 0003:04F3:0755.0002: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0
[   86.089348][ T4961] md: could not open device unknown-block(0,0).
[   86.102442][ T4961] md: md_import_device returned -6
[   86.141375][ T4267] usb 1-1: USB disconnect, device number 3
[   86.181287][ T4582] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32
[   86.364791][ T4984] loop1: detected capacity change from 0 to 128
[   86.389469][ T4984] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   86.439883][ T4984] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   86.559433][ T4313] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   86.590975][ T4267] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   86.656356][ T4990] tipc: Started in network mode
[   86.670386][ T4990] tipc: Node identity 4e3dcef45a24, cluster identity 4711
[   86.699587][ T4990] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   86.745694][ T4990] device syzkaller0 entered promiscuous mode
[   86.760152][ T4989] tipc: Resetting bearer <eth:syzkaller0>
[   86.775484][ T4992] kvm: pic: non byte write
[   86.784160][ T4267] usb 1-1: device descriptor read/64, error -71
[   86.821122][ T4989] tipc: Disabling bearer <eth:syzkaller0>
[   86.927983][ T4999] input: syz1 as /devices/virtual/input/input7
[   87.070855][ T4267] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   87.200818][ T4370] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[   87.248305][ T5003] netlink: 'syz.0.156': attribute type 1 has an invalid length.
[   87.279081][ T4267] usb 1-1: device descriptor read/64, error -71
[   87.281614][ T5003] bond1: (slave gretap1): making interface the new active one
[   87.294091][ T5003] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   87.411056][ T4267] usb usb1-port1: attempt power cycle
[   87.580927][ T4370] usb 4-1: config 0 has an invalid interface number: 41 but max is 0
[   87.589159][ T4370] usb 4-1: config 0 has no interface number 0
[   87.595400][ T4370] usb 4-1: config 0 interface 41 has no altsetting 0
[   87.811130][ T4370] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[   87.820713][ T4370] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   87.828854][ T4370] usb 4-1: Product: syz
[   87.835753][ T4370] usb 4-1: Manufacturer: syz
[   87.840467][ T4370] usb 4-1: SerialNumber: syz
[   87.857131][ T4370] usb 4-1: config 0 descriptor??
[   87.992356][ T4582] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -71
[   88.007371][ T4582] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[   88.029564][ T4582] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[   88.039739][ T4582] lan78xx: probe of 5-1:1.0 failed with error -71
[   88.069115][ T4582] usb 5-1: USB disconnect, device number 3
[   88.316206][ T5015] loop0: detected capacity change from 0 to 512
[   88.478454][ T5015] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8
[   88.612679][ T5020] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[   88.624451][ T5020] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[   88.688553][ T5020] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[   88.738053][ T5020] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[   88.768472][ T5022] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[   88.780900][ T4370] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[   88.818740][ T5020] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[   88.876191][ T5020] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[   89.008709][ T5020] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[   89.117864][ T5019] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[   89.178924][ T5020] syz.4.161 (5020) used greatest stack depth: 19984 bytes left
[   89.364161][   T26] audit: type=1804 audit(1769922730.280:4): pid=5041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.163" name="/newroot/33/file1" dev="fuse" ino=1 res=1 errno=0
[   89.383104][ T5043] binder_alloc: 5042: pid 5042 spamming oneway? 1 buffers allocated for a total size of 4096
[   89.711942][ T5054] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   90.140943][ T4371] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   90.411198][ T4370] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9
[   90.439085][ T4370] CoreChips: probe of 4-1:0.41 failed with error -71
[   90.469474][ T4370] usb 4-1: USB disconnect, device number 3
[   90.501078][ T4371] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   90.530797][ T4371] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[   90.550291][ T4371] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.575784][ T4371] usb 5-1: config 0 descriptor??
[   90.628943][ T4371] pwc: Askey VC010 type 2 USB webcam detected.
[   90.745715][ T5085] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.754570][ T5085] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.070914][ T4371] pwc: recv_control_msg error -32 req 02 val 2b00
[   91.110842][ T4371] pwc: recv_control_msg error -32 req 02 val 2700
[   91.150876][ T4371] pwc: recv_control_msg error -32 req 02 val 2c00
[   91.191319][ T4371] pwc: recv_control_msg error -32 req 04 val 1000
[   91.258647][ T5085] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   91.295275][ T5085] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   91.450958][ T4371] pwc: recv_control_msg error -32 req 04 val 1400
[   91.490865][ T4371] pwc: recv_control_msg error -32 req 02 val 2000
[   91.531413][ T4371] pwc: recv_control_msg error -32 req 02 val 2100
[   91.570873][ T4371] pwc: recv_control_msg error -71 req 04 val 1500
[   91.590919][ T4371] pwc: recv_control_msg error -71 req 02 val 2500
[   91.610817][ T4371] pwc: recv_control_msg error -71 req 02 val 2400
[   91.630848][ T4371] pwc: recv_control_msg error -71 req 02 val 2600
[   91.650815][ T4371] pwc: recv_control_msg error -71 req 02 val 2900
[   91.657513][ T5085] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   91.666895][ T5085] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   91.672107][ T4371] pwc: recv_control_msg error -71 req 02 val 2800
[   91.677612][ T5085] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   91.691331][ T5085] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   91.705906][ T4371] pwc: recv_control_msg error -71 req 04 val 1100
[   91.732228][ T4371] pwc: recv_control_msg error -71 req 04 val 1200
[   91.768542][ T4371] pwc: Registered as video103.
[   91.780280][ T4371] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input9
[   91.854149][ T4371] usb 5-1: USB disconnect, device number 4
[   91.946050][ T5107] device syzkaller0 entered promiscuous mode
[   92.231469][ T5117] create_pit_timer: 10 callbacks suppressed
[   92.231487][ T5117] pit: kvm: requested 137447 ns i8254 timer period limited to 200000 ns
[   92.273099][ T5125] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   92.281992][ T5117] pit: kvm: requested 120685 ns i8254 timer period limited to 200000 ns
[   92.311395][ T5117] pit: kvm: requested 173485 ns i8254 timer period limited to 200000 ns
[   92.333866][ T5117] pit: kvm: requested 78781 ns i8254 timer period limited to 200000 ns
[   92.361975][ T5117] pit: kvm: requested 24304 ns i8254 timer period limited to 200000 ns
[   92.381153][ T5117] pit: kvm: requested 174323 ns i8254 timer period limited to 200000 ns
[   92.421605][ T5117] pit: kvm: requested 25142 ns i8254 timer period limited to 200000 ns
[   92.465497][ T5117] pit: kvm: requested 101409 ns i8254 timer period limited to 200000 ns
[   92.513633][ T5117] pit: kvm: requested 134933 ns i8254 timer period limited to 200000 ns
[   92.546301][ T5117] pit: kvm: requested 29333 ns i8254 timer period limited to 200000 ns
[   92.714604][   T26] audit: type=1326 audit(1769922733.630:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5144 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c68bb8eb9 code=0x7ffc0000
[   92.760204][ T5149] loop4: detected capacity change from 0 to 512
[   92.806123][   T26] audit: type=1326 audit(1769922733.660:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5144 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9c68bb8b4b code=0x7ffc0000
[   92.828097][    C0] vkms_vblank_simulate: vblank timer overrun
[   92.928763][ T5149] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10
[   92.949518][   T26] audit: type=1326 audit(1769922733.660:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5144 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9c68bb8b4b code=0x7ffc0000
[   92.972404][ T5155] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   93.091634][   T26] audit: type=1326 audit(1769922733.660:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5144 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9c68bb8b4b code=0x7ffc0000
[   93.194083][   T26] audit: type=1326 audit(1769922733.660:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5144 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9c68bb8b4b code=0x7ffc0000
[   93.254997][   T26] audit: type=1326 audit(1769922733.660:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5144 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9c68bb8b4b code=0x7ffc0000
[   93.277225][    C0] vkms_vblank_simulate: vblank timer overrun
[   93.284842][   T26] audit: type=1326 audit(1769922733.660:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5144 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9c68bb8b4b code=0x7ffc0000
[   93.318977][ T5173] kvm: emulating exchange as write
[   93.335337][ T5175] device syzkaller0 entered promiscuous mode
[   93.347242][   T26] audit: type=1326 audit(1769922733.660:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5144 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9c68bb8b4b code=0x7ffc0000
[   93.409329][   T26] audit: type=1326 audit(1769922733.660:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5144 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9c68bb8b4b code=0x7ffc0000
[   93.778647][ T5192] mmap: syz.1.192 (5192) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[   95.406520][ T4370] usb 2-1: new low-speed USB device number 3 using dummy_hcd
[   95.436580][ T5233] device syzkaller0 entered promiscuous mode
[   95.448525][ T5230] loop4: detected capacity change from 0 to 256
[   95.537728][ T5230] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[   96.023736][ T5247] loop4: detected capacity change from 0 to 32768
[   96.051188][ T4267] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   96.073160][ T4370] usb 2-1: config 2 has an invalid interface number: 23 but max is 0
[   96.086154][ T4370] usb 2-1: config 2 has no interface number 0
[   96.100746][ T4370] usb 2-1: config 2 interface 23 has no altsetting 0
[   96.121311][ T5247] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.209 (5247)
[   96.173021][ T5247] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[   96.182006][ T5247] BTRFS info (device loop4): force clearing of disk cache
[   96.189176][ T5247] BTRFS info (device loop4): enabling auto defrag
[   96.195967][ T5247] BTRFS info (device loop4): enabling ssd optimizations
[   96.202999][ T5247] BTRFS info (device loop4): setting nodatacow, compression disabled
[   96.211212][ T5247] BTRFS info (device loop4): enabling disk space caching
[   96.218286][ T5247] BTRFS info (device loop4): disk space caching is enabled
[   96.225587][ T5247] BTRFS info (device loop4): has skinny extents
[   96.368385][ T5249] chnl_net:caif_netlink_parms(): no params data found
[   96.401708][ T5247] BTRFS info (device loop4): clearing free space tree
[   96.408640][ T5247] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   96.418366][ T5247] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   96.431039][ T4267] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   96.433943][ T4370] usb 2-1: string descriptor 0 read error: -22
[   96.464667][ T4370] usb 2-1: New USB device found, idVendor=1b3d, idProduct=011c, bcdDevice= 2.35
[   96.467440][ T4267] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[   96.474288][ T5247] BTRFS info (device loop4): checking UUID tree
[   96.490083][ T4370] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.552408][ T4370] ftdi_sio 2-1:2.23: FTDI USB Serial Device converter detected
[   96.570128][ T4370] usb 2-1: Detected FT8U232AM
[   96.591551][ T4370] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[   96.620972][ T4267] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   96.639084][ T4267] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   96.653442][ T5249] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.707665][ T5249] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.715548][ T4267] usb 4-1: SerialNumber: syz
[   96.765669][ T5249] device bridge_slave_0 entered promiscuous mode
[   96.809728][ T5249] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.816973][ T5249] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.833673][ T4313] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared)
[   96.926761][ T5249] device bridge_slave_1 entered promiscuous mode
[   97.044071][ T4267] usb 4-1: 0:2 : does not exist
[   97.049109][ T4267] usb 4-1: unit 5: unexpected type 0x0a
[   97.084549][ T5249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   97.132195][ T4267] usb 4-1: USB disconnect, device number 4
[   97.154984][ T5249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   97.249214][ T5249] team0: Port device team_slave_0 added
[   97.278936][ T5249] team0: Port device team_slave_1 added
[   97.317991][ T5249] batman_adv: batadv0: Adding interface: batadv_slave_0
[   97.325154][ T5249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   97.389808][ T5249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   97.417569][ T5249] batman_adv: batadv0: Adding interface: batadv_slave_1
[   97.426391][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   97.460992][ T5249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   97.538870][ T5249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   98.569055][ T4236] usb 2-1: USB disconnect, device number 3
[   98.579723][ T4236] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[   98.589871][ T4236] ftdi_sio 2-1:2.23: device disconnected
[   98.600299][ T4250] Bluetooth: hci0: command 0x0409 tx timeout
[   98.804830][ T5249] device hsr_slave_0 entered promiscuous mode
[   98.861165][ T5249] device hsr_slave_1 entered promiscuous mode
[   98.877790][ T5249] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   98.901766][ T5249] Cannot create hsr debugfs directory
[   98.909192][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[   98.956130][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[   99.035842][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[   99.063324][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[   99.074229][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[   99.093246][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[   99.134832][ T5323] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[   99.484026][ T5344] tipc: Started in network mode
[   99.489094][ T5344] tipc: Node identity dee8bb803a81, cluster identity 4711
[   99.531539][ T5344] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   99.538410][ T5349] netlink: 24 bytes leftover after parsing attributes in process `syz.1.218'.
[   99.622927][ T5348] device syzkaller0 entered promiscuous mode
[   99.650883][ T5351] netlink: 24 bytes leftover after parsing attributes in process `syz.1.218'.
[   99.795940][ T5332] chnl_net:caif_netlink_parms(): no params data found
[   99.880090][ T5343] tipc: Resetting bearer <eth:syzkaller0>
[   99.972473][ T5343] tipc: Disabling bearer <eth:syzkaller0>
[  100.030844][ T5249] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  100.059357][ T5249] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  100.132345][ T5249] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  100.188135][ T5249] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  100.386895][ T5332] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.409045][ T5332] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.457261][ T5332] device bridge_slave_0 entered promiscuous mode
[  100.480530][ T5332] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.531714][ T5332] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.558505][ T5332] device bridge_slave_1 entered promiscuous mode
[  100.631379][ T5314] Bluetooth: hci0: command 0x041b tx timeout
[  100.758923][ T5332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  100.827197][ T5332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  100.934347][ T5332] team0: Port device team_slave_0 added
[  100.996874][ T5249] 8021q: adding VLAN 0 to HW filter on device bond0
[  101.045046][ T5332] team0: Port device team_slave_1 added
[  101.118725][ T5332] batman_adv: batadv0: Adding interface: batadv_slave_0
[  101.126110][ T4368] Bluetooth: hci5: command 0x0409 tx timeout
[  101.147973][ T5332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  101.226930][ T5332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  101.256031][ T5332] batman_adv: batadv0: Adding interface: batadv_slave_1
[  101.286971][ T5332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  101.312923][    C0] vkms_vblank_simulate: vblank timer overrun
[  101.372981][ T5332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  101.580687][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!!
[  101.656631][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  101.691165][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  101.756537][ T5249] 8021q: adding VLAN 0 to HW filter on device team0
[  101.778196][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  101.789526][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  101.808679][ T4313] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.815865][ T4313] bridge0: port 1(bridge_slave_0) entered forwarding state
[  101.842551][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  101.868518][ T5332] device hsr_slave_0 entered promiscuous mode
[  101.888746][ T5332] device hsr_slave_1 entered promiscuous mode
[  101.904155][ T5332] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  101.923799][ T5332] Cannot create hsr debugfs directory
[  101.941025][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  101.963512][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  101.985475][ T1264] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.992651][ T1264] bridge0: port 2(bridge_slave_1) entered forwarding state
[  102.079427][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  102.099439][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  102.160963][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  102.178658][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  102.259291][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  102.271726][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  102.292079][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  102.301512][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  102.310425][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  102.319808][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  102.333469][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  102.353097][ T5249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  102.361514][ T5426] Zero length message leads to an empty skb
[  102.587636][ T5441] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  102.689534][ T5332] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  102.721371][ T4373] Bluetooth: hci0: command 0x040f tx timeout
[  102.735105][ T5332] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  102.780972][ T5332] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  102.802819][ T5332] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  102.861610][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  102.871711][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  102.910525][ T5249] 8021q: adding VLAN 0 to HW filter on device batadv0
[  102.962814][ T5332] 8021q: adding VLAN 0 to HW filter on device bond0
[  102.978390][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  102.995107][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  103.013148][ T5332] 8021q: adding VLAN 0 to HW filter on device team0
[  103.026300][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  103.039927][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  103.064997][ T4945] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.072281][ T4945] bridge0: port 1(bridge_slave_0) entered forwarding state
[  103.093330][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  103.131481][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  103.141613][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  103.150168][ T4945] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.157307][ T4945] bridge0: port 2(bridge_slave_1) entered forwarding state
[  103.169100][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  103.191276][ T4373] Bluetooth: hci5: command 0x041b tx timeout
[  103.198407][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  103.209120][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  103.222048][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  103.239357][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  103.253771][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  103.279521][ T5332] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  103.295666][ T5332] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  103.309590][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  103.319261][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  103.328081][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  103.338241][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  103.349177][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  103.359026][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  103.422426][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  103.441870][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  103.496903][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  103.514245][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  103.540248][ T5249] device veth0_vlan entered promiscuous mode
[  103.552647][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  103.573587][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  103.607085][ T5249] device veth1_vlan entered promiscuous mode
[  103.675206][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  103.685951][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  103.696477][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  103.708454][ T5332] 8021q: adding VLAN 0 to HW filter on device batadv0
[  103.888992][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  104.208288][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  104.218314][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  104.229373][ T5249] device veth0_macvtap entered promiscuous mode
[  104.248800][ T5249] device veth1_macvtap entered promiscuous mode
[  104.290416][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  104.301829][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  104.312469][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  104.328966][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  104.340934][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  104.358217][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  104.404400][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  104.415156][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  104.427368][ T5249] batman_adv: batadv0: Interface activated: batadv_slave_0
[  104.448230][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  104.460597][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  104.473107][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  104.493286][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  104.513215][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  104.542844][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  104.556136][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  104.577139][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  104.587842][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  104.603016][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  104.615533][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  104.628015][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  104.646031][ T5249] batman_adv: batadv0: Interface activated: batadv_slave_1
[  104.661027][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  104.673852][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  104.693342][ T5249] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  104.702898][ T5249] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  104.712598][ T5249] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  104.721459][ T5249] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  104.733646][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  104.743330][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  104.776562][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  104.787098][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  104.801658][ T4370] Bluetooth: hci0: command 0x0419 tx timeout
[  104.820861][ T5332] device veth0_vlan entered promiscuous mode
[  104.844896][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  104.867145][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  104.908745][ T5332] device veth1_vlan entered promiscuous mode
[  104.972686][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  104.989225][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  105.001254][ T5332] device veth0_macvtap entered promiscuous mode
[  105.019422][ T5332] device veth1_macvtap entered promiscuous mode
[  105.064594][ T5332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  105.075811][ T5332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.085774][ T5332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  105.096353][ T5332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.106328][ T5332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  105.117629][ T5332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.129616][ T5332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  105.140160][ T5332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.150466][ T5332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  105.161432][ T5332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.172963][ T5332] batman_adv: batadv0: Interface activated: batadv_slave_0
[  105.182659][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  105.191469][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  105.199438][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  105.208983][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  105.219561][ T5332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  105.230467][ T5332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.258027][ T5332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  105.269665][ T5332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.280373][ T5332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  105.291012][ T5332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.291369][ T4371] Bluetooth: hci5: command 0x040f tx timeout
[  105.301201][ T5332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  105.317719][ T5332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.328085][ T5332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  105.338599][ T5332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.351648][ T5332] batman_adv: batadv0: Interface activated: batadv_slave_1
[  105.378503][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  105.390150][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  105.402437][ T5332] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  105.421672][ T5332] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  105.463689][ T5332] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  105.486537][ T5332] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  105.579076][ T1264] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  105.615425][ T1264] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  105.652050][ T4945] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  105.664085][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  105.673518][ T4945] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  105.707960][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  105.734662][ T4313] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  105.766551][ T4313] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  105.799377][ T5533] loop3: detected capacity change from 0 to 512
[  105.816031][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  105.847508][ T4313] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  105.871815][ T4313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  105.898911][ T5533] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.253: bg 0: block 5: invalid block bitmap
[  105.930452][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  106.160628][ T5533] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6194: Corrupt filesystem
[  106.175786][ T5537] loop6: detected capacity change from 0 to 40427
[  106.283316][ T5537] F2FS-fs (loop6): invalid crc value
[  106.294478][ T5533] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.253: invalid indirect mapped block 3 (level 2)
[  106.316799][ T5533] EXT4-fs (loop3): 1 orphan inode deleted
[  106.326304][ T5533] EXT4-fs (loop3): 1 truncate cleaned up
[  106.344309][ T5533] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  106.369631][ T5537] F2FS-fs (loop6): Found nat_bits in checkpoint
[  106.423993][ T5537] F2FS-fs (loop6): Start checkpoint disabled!
[  106.635582][ T5537] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[  107.493623][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!!
[  107.632755][ T4368] Bluetooth: hci5: command 0x0419 tx timeout
[  107.670920][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!!
[  107.864278][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!!
[  107.873256][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!!
[  107.882240][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!!
[  107.891121][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!!
[  107.900068][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!!
[  108.596655][ T5566] loop3: detected capacity change from 0 to 128
[  108.649441][ T1172] attempt to access beyond end of device
[  108.649441][ T1172] loop6: rw=2049, want=40984, limit=40427
[  108.735238][ T5566] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000006f)
[  108.784575][ T5566] FAT-fs (loop3): Filesystem has been set read-only
[  108.824413][ T5573] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 323)
[  108.839945][ T5573] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 323)
[  108.898671][ T5573] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 323)
[  108.977987][ T5573] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 323)
[  108.986885][ T5573] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 323)
[  109.018058][ T5573] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 323)
[  109.120861][ T5573] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 323)
[  109.159702][ T5573] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 323)
[  109.191871][ T5581] netlink: 'syz.4.266': attribute type 3 has an invalid length.
[  109.364203][ T5587] loop3: detected capacity change from 0 to 256
[  109.695979][ T5590] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  109.723578][ T5590] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  109.768466][ T5604] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  110.027955][ T5616] loop3: detected capacity change from 0 to 512
[  110.383423][ T5616] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.275: bg 0: block 393: padding at end of block bitmap is not set
[  110.755541][ T5616] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6194: Corrupt filesystem
[  110.859555][ T5616] EXT4-fs (loop3): 2 truncates cleaned up
[  110.866876][ T5616] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  110.921864][ T5624] loop1: detected capacity change from 0 to 2048
[  110.995083][ T5616] EXT4-fs error (device loop3): ext4_find_dest_de:2115: inode #12: block 7: comm syz.3.275: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4278190093, rec_len=255, size=56 fake=0
[  111.112560][ T5624] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  111.859000][   T26] kauditd_printk_skb: 54 callbacks suppressed
[  111.859016][   T26] audit: type=1800 audit(1769922752.770:68): pid=5624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.279" name="file1" dev="loop1" ino=15 res=0 errno=0
[  111.885787][ T5635] loop6: detected capacity change from 0 to 256
[  112.008493][ T5640] loop7: detected capacity change from 0 to 512
[  112.045611][ T5635] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  112.058517][ T5638] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  112.126370][ T5635] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010364, chksum : 0x43f9f21b, utbl_chksum : 0xe619d30d)
[  112.226138][ T5638] EXT4-fs (loop1): Online defrag not supported with bigalloc
[  112.244936][ T5640] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback.
[  112.269079][ T5638] EXT4-fs (loop1): shut down requested (2)
[  112.291501][ T5640] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  113.931941][ T5663] device syzkaller0 entered promiscuous mode
[  114.530375][ T5671] loop7: detected capacity change from 0 to 16
[  115.112095][ T5671] erofs: Unknown parameter 'erofs'
[  115.206640][ T5673] device syzkaller0 entered promiscuous mode
[  115.825556][ T5689] loop1: detected capacity change from 0 to 256
[  115.857142][ T5689] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  115.875320][ T5678] chnl_net:caif_netlink_parms(): no params data found
[  115.895508][ T5689] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010364, chksum : 0x43f9f21b, utbl_chksum : 0xe619d30d)
[  116.049492][ T5678] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.056977][ T5678] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.066135][ T5678] device bridge_slave_0 entered promiscuous mode
[  116.075447][ T5678] bridge0: port 2(bridge_slave_1) entered blocking state
[  116.083082][ T5678] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.120787][ T5678] device bridge_slave_1 entered promiscuous mode
[  116.301569][ T5678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  116.345672][ T5678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  116.902436][ T5678] team0: Port device team_slave_0 added
[  117.028688][ T5678] team0: Port device team_slave_1 added
[  117.363944][ T5678] batman_adv: batadv0: Adding interface: batadv_slave_0
[  117.371037][ T5678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  117.480804][ T5678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  117.493778][ T5678] batman_adv: batadv0: Adding interface: batadv_slave_1
[  117.516733][ T4368] Bluetooth: hci1: command 0x0409 tx timeout
[  117.540151][ T5678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  117.647615][ T5678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  117.748421][ T5678] device hsr_slave_0 entered promiscuous mode
[  117.775246][ T5678] device hsr_slave_1 entered promiscuous mode
[  117.803087][ T5678] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  117.821155][ T5678] Cannot create hsr debugfs directory
[  118.972968][ T5714] loop1: detected capacity change from 0 to 32768
[  119.072023][ T5678] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  119.111838][ T5678] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  119.151463][ T5678] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  119.178467][ T5678] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  119.414449][ T5678] 8021q: adding VLAN 0 to HW filter on device bond0
[  119.449846][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  119.462259][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  119.487147][ T5678] 8021q: adding VLAN 0 to HW filter on device team0
[  119.540405][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  119.575903][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  119.592076][ T4373] Bluetooth: hci1: command 0x041b tx timeout
[  119.656844][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[  119.664057][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[  119.709081][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  120.059786][ T5678] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  120.087250][ T5678] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  120.226212][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  120.247023][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  120.701664][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.708918][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[  121.158504][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  121.167679][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  121.185535][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  121.201435][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  121.210441][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  121.243156][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  121.300046][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  121.315764][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  121.345490][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  121.390502][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  121.447753][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  121.476777][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  121.653394][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  121.669070][ T5766] loop7: detected capacity change from 0 to 512
[  121.681253][ T4267] Bluetooth: hci1: command 0x040f tx timeout
[  121.695542][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  121.701832][ T5767] 9pnet: p9_client_clunk (5767): Trying to clunk with invalid fid
[  121.716297][ T5678] 8021q: adding VLAN 0 to HW filter on device batadv0
[  121.750207][ T5767] CPU: 1 PID: 5767 Comm: syz.1.316 Not tainted syzkaller #0
[  121.757552][ T5767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  121.767751][ T5767] Call Trace:
[  121.771069][ T5767]  <TASK>
[  121.774021][ T5767]  dump_stack_lvl+0x188/0x250
[  121.778756][ T5767]  ? __rwlock_init+0x140/0x140
[  121.783553][ T5767]  ? show_regs_print_info+0x20/0x20
[  121.789217][ T5767]  ? load_image+0x400/0x400
[  121.793753][ T5767]  ? v9fs_fid_find+0x2d1/0x320
[  121.798555][ T5767]  p9_client_clunk+0x2b3/0x380
[  121.803343][ T5767]  v9fs_statfs+0x1b7/0x380
[  121.807790][ T5767]  ? v9fs_drop_inode+0x130/0x130
[  121.812767][ T5767]  ? ovl_mount_dir+0x1f6/0x2b0
[  121.817560][ T5767]  ? kfree+0xef/0x2a0
[  121.821572][ T5767]  vfs_statfs+0x13d/0x2c0
[  121.825936][ T5767]  ovl_get_upper+0x1c0/0x600
[  121.830606][ T5767]  ? ovl_fill_super+0x2a30/0x2a30
[  121.835700][ T5767]  ovl_fill_super+0x160c/0x2a30
[  121.840610][ T5767]  ? ovl_mount+0x30/0x30
[  121.844882][ T5767]  ? sget+0x427/0x440
[  121.848884][ T5767]  ? free_anon_bdev+0x20/0x20
[  121.853586][ T5767]  ? ovl_mount+0x30/0x30
[  121.857840][ T5767]  mount_nodev+0x52/0xe0
[  121.862091][ T5767]  legacy_get_tree+0xe6/0x180
[  121.866772][ T5767]  ? virtio_fs_zero_page_range+0x120/0x120
[  121.872592][ T5767]  vfs_get_tree+0x88/0x270
[  121.877027][ T5767]  do_new_mount+0x24a/0xa40
[  121.881545][ T5767]  __se_sys_mount+0x2e3/0x3d0
[  121.886234][ T5767]  ? __x64_sys_mount+0xc0/0xc0
[  121.891013][ T5767]  ? lockdep_hardirqs_on+0x94/0x140
[  121.896222][ T5767]  ? __x64_sys_mount+0x1c/0xc0
[  121.900993][ T5767]  do_syscall_64+0x4c/0xa0
[  121.905410][ T5767]  ? clear_bhb_loop+0x30/0x80
[  121.910090][ T5767]  ? clear_bhb_loop+0x30/0x80
[  121.914783][ T5767]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  121.920700][ T5767] RIP: 0033:0x7f9c68bb8eb9
[  121.925207][ T5767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  121.944901][ T5767] RSP: 002b:00007f9c66e14028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  121.953323][ T5767] RAX: ffffffffffffffda RBX: 00007f9c68e33fa0 RCX: 00007f9c68bb8eb9
[  121.961299][ T5767] RDX: 0000200000000b80 RSI: 0000200000000000 RDI: 0000000000000000
[  121.969270][ T5767] RBP: 00007f9c68c26c1f R08: 0000200000000180 R09: 0000000000000000
[  121.977325][ T5767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  121.985294][ T5767] R13: 00007f9c68e34038 R14: 00007f9c68e33fa0 R15: 00007ffd8d720768
[  121.993282][ T5767]  </TASK>
[  122.094004][ T5767] overlayfs: statfs failed on './file0'
[  122.105789][ T5766] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback.
[  122.123730][ T5766] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  122.287657][ T5766] syz.7.317 (5766) used greatest stack depth: 17232 bytes left
[  122.328984][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  122.338457][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  122.370752][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  122.379021][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  122.388343][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  122.397540][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  122.407845][ T5678] device veth0_vlan entered promiscuous mode
[  122.470521][ T5678] device veth1_vlan entered promiscuous mode
[  122.495782][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  122.524740][ T5791] capability: warning: `syz.7.322' uses deprecated v2 capabilities in a way that may be insecure
[  122.565777][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  122.586001][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  122.746900][ T5792] netlink: 'syz.7.322': attribute type 3 has an invalid length.
[  122.932950][ T5678] device veth0_macvtap entered promiscuous mode
[  123.339628][ T5678] device veth1_macvtap entered promiscuous mode
[  123.531207][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  123.539736][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  123.587667][ T5678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  123.614231][ T5678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  123.630924][ T5678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  123.641575][ T5678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  123.656123][ T5678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  123.677395][ T5678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  123.694031][ T5678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  123.710791][ T5678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  123.727846][ T5678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  123.745073][ T5678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  123.750794][ T4267] Bluetooth: hci1: command 0x0419 tx timeout
[  123.761788][ T5678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  123.781995][ T5678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  123.802868][ T5678] batman_adv: batadv0: Interface activated: batadv_slave_0
[  123.823205][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  123.844354][ T5803] overlayfs: statfs failed on './file0'
[  123.852138][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  123.897410][ T5678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  123.922697][ T5808] overlayfs: failed to clone upperpath
[  123.928306][ T5678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  123.948458][ T5678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  123.970785][ T5678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  123.998321][ T5678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  124.032193][ T5678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.052299][ T5678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  124.074114][ T5678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.095345][ T5678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  124.117102][ T5678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.173274][ T5678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  124.206001][ T5678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.270961][ T5678] batman_adv: batadv0: Interface activated: batadv_slave_1
[  124.288841][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  124.362331][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  124.397869][ T5678] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  124.438087][ T5678] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  124.474757][ T5678] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  124.510770][ T5678] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  125.761144][ T4884] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  125.769335][ T4884] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  125.780007][ T1264] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  125.825175][ T1264] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  125.869449][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  125.939586][ T3063] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  126.891424][ T5841] netlink: 16 bytes leftover after parsing attributes in process `syz.4.335'.
[  127.029755][ T5843] loop1: detected capacity change from 0 to 8
[  127.119864][ T5849] loop7: detected capacity change from 0 to 1024
[  127.178638][ T5848] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  127.204601][ T5849] EXT4-fs (loop7): Ignoring removed orlov option
[  127.214499][ T5843] SQUASHFS error: xz decompression failed, data probably corrupt
[  127.222875][ T5848] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  127.238489][ T5849] EXT4-fs (loop7): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback.
[  127.240775][ T5843] SQUASHFS error: Failed to read block 0x108: -5
[  127.267412][ T5843] SQUASHFS error: Unable to read metadata cache entry [106]
[  127.281349][ T5843] SQUASHFS error: Unable to read inode 0x11f
[  127.364910][   T26] audit: type=1804 audit(1769922768.280:69): pid=5849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.337" name="/newroot/19/bus/bus" dev="loop7" ino=18 res=1 errno=0
[  132.712501][ T5898] netlink: 'syz.4.352': attribute type 1 has an invalid length.
[  132.795482][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[  132.801846][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[  132.935904][ T5898] 8021q: adding VLAN 0 to HW filter on device bond1
[  133.196567][ T5906] bond1: (slave gretap1): making interface the new active one
[  133.935804][ T5906] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  134.015934][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  137.626209][ T5960] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  144.469057][ T5992] loop8: detected capacity change from 0 to 1024
[  144.503394][ T5991] netlink: 4 bytes leftover after parsing attributes in process `syz.1.384'.
[  144.689163][ T5992] EXT4-fs (loop8): mounted filesystem without journal. Opts: i_version,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,usrquota,,errors=continue. Quota mode: writeback.
[  148.225527][ T6047] binder: BINDER_SET_CONTEXT_MGR already set
[  148.245453][ T6047] binder: 6045:6047 ioctl 4018620d 200000000040 returned -16
[  148.344890][ T6049] binder: 6045:6049 ioctl c0306201 2000000016c0 returned -14
[  150.530607][ T6071] loop8: detected capacity change from 0 to 1024
[  151.450363][ T6071] EXT4-fs (loop8): Ignoring removed orlov option
[  151.545411][ T6071] EXT4-fs (loop8): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback.
[  151.689331][   T26] audit: type=1804 audit(1769922792.600:70): pid=6071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.396" name="/newroot/11/bus/bus" dev="loop8" ino=18 res=1 errno=0
[  153.114677][ T6101] overlayfs: failed to clone upperpath
[  153.690643][    C0] sched: RT throttling activated
[  154.205525][ T6125] netlink: 8 bytes leftover after parsing attributes in process `syz.6.412'.
[  154.333954][ T6125] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready
[  154.352634][ T6125] netlink: 1032 bytes leftover after parsing attributes in process `syz.6.412'.
[  154.487753][ T6130] loop6: detected capacity change from 0 to 128
[  154.627424][   T26] audit: type=1800 audit(1769922795.540:71): pid=6130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.414" name="bus" dev="loop6" ino=1048605 res=0 errno=0
[  155.228689][ T6138] loop6: detected capacity change from 0 to 128
[  156.221640][ T6138] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  156.510907][ T6138] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found!
[  156.611533][ T6148] xt_connbytes: Forcing CT accounting to be enabled
[  156.619211][ T6148] set match dimension is over the limit!
[  157.374240][ T6138] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found!
[  157.432866][ T6138] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  157.496836][ T6138] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512
[  157.557637][ T6138] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  157.621647][ T6138] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512
[  157.673085][ T6138] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  157.802681][ T6138] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512
[  157.854493][ T6138] UDF-fs: warning (device loop6): udf_fill_super: No partition found (1)
[  158.137204][ T6156] loop7: detected capacity change from 0 to 128
[  159.705278][ T6173] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  161.469150][ T6170] ODEBUG: Out of memory. ODEBUG disabled
[  161.555582][ T6191] tipc: Started in network mode
[  161.588919][ T6191] tipc: Node identity eac6ad805b05, cluster identity 4711
[  161.602951][ T6191] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  161.637549][ T6194] device syzkaller0 entered promiscuous mode
[  161.821519][ T6194] tipc: Resetting bearer <eth:syzkaller0>
[  161.859695][ T6190] tipc: Resetting bearer <eth:syzkaller0>
[  161.875792][ T6190] tipc: Disabling bearer <eth:syzkaller0>
[  162.950434][ T6212] loop8: detected capacity change from 0 to 1024
[  163.136643][ T6212] EXT4-fs (loop8): Mount option "noacl" will be removed by 3.5
[  163.136643][ T6212] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  163.136643][ T6212] 
[  163.440728][ T6212] EXT4-fs (loop8): Ignoring removed mblk_io_submit option
[  163.447961][ T6212] EXT4-fs (loop8): Unrecognized mount option "dont_hash" or missing value
[  164.095592][ T4370] libceph: connect (1)[c::]:6789 error -101
[  164.103799][ T4370] libceph: mon0 (1)[c::]:6789 connect error
[  164.368219][ T4368] libceph: connect (1)[c::]:6789 error -101
[  164.972075][ T4368] libceph: mon0 (1)[c::]:6789 connect error
[  165.010811][ T6223] ceph: No mds server is up or the cluster is laggy
[  165.184284][ T6235] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  165.194052][ T6235] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  165.202877][ T6235] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  165.211669][ T6235] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  165.252748][ T6235] bond0: (slave vxlan0): Enslaving as an active interface with an up link
[  165.354255][ T6241] device syzkaller0 entered promiscuous mode
[  165.467476][ T6245] loop7: detected capacity change from 0 to 8
[  167.922486][ T6257] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  167.952178][ T6257] device syzkaller0 entered promiscuous mode
[  168.038566][ T6257] tipc: Resetting bearer <eth:syzkaller0>
[  168.071648][ T6253] tipc: Resetting bearer <eth:syzkaller0>
[  168.124689][ T6253] tipc: Disabling bearer <eth:syzkaller0>
[  168.284642][ T6268] loop7: detected capacity change from 0 to 128
[  168.465384][ T6268] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  170.849296][ T6291] loop2: detected capacity change from 0 to 7
[  170.896782][ T6291]  loop2:
[  170.921671][ T6291] loop2: partition table partially beyond EOD, truncated
[  171.236623][ T6303] loop6: detected capacity change from 0 to 512
[  172.273952][ T6303] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  172.330961][ T6303] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  172.438999][ T6303] EXT4-fs (loop6): 1 orphan inode deleted
[  172.457406][ T6303] EXT4-fs (loop6): 1 truncate cleaned up
[  172.465976][ T6303] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,noinit_itable,debug_want_extra_isize=0x000000000000002a,errors=remount-ro,nodelalloc,grpjquota=,grpquota,. Quota mode: writeback.
[  174.250734][ T6332] loop7: detected capacity change from 0 to 2048
[  174.274523][ T6332] UDF-fs: bad mount option "nmæ¨äõÄÆÙ" or missing value
[  174.438637][ T6336] loop6: detected capacity change from 0 to 1024
[  174.521450][ T6336] EXT4-fs (loop6): Ignoring removed bh option
[  174.641475][ T6336] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none.
[  176.784450][ T4238] Bluetooth: hci3: command 0x0406 tx timeout
[  176.841835][ T4238] Bluetooth: hci2: command 0x0406 tx timeout
[  177.054305][ T6364] loop1: detected capacity change from 0 to 1024
[  177.207065][ T6358] EXT4-fs error (device loop6): ext4_find_dest_de:2115: inode #12: block 7: comm syz.6.474: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0
[  177.244075][ T6364] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5
[  177.244075][ T6364] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  177.244075][ T6364] 
[  177.338972][ T6364] EXT4-fs (loop1): Ignoring removed mblk_io_submit option
[  177.361277][ T6358] EXT4-fs (loop6): Remounting filesystem read-only
[  177.367957][ T6364] EXT4-fs (loop1): Unrecognized mount option "dont_hash" or missing value
[  177.542794][ T5249] EXT4-fs error (device loop6): ext4_read_inline_dir:1618: inode #12: block 7: comm syz-executor: path /50/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  177.603332][ T5249] EXT4-fs (loop6): Remounting filesystem read-only
[  177.622317][ T5249] EXT4-fs error (device loop6): ext4_read_inline_dir:1618: inode #12: block 7: comm syz-executor: path /50/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  177.814238][ T5249] EXT4-fs (loop6): Remounting filesystem read-only
[  177.904781][ T5249] EXT4-fs error (device loop6): empty_inline_dir:1873: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[  178.454570][ T5249] EXT4-fs (loop6): Remounting filesystem read-only
[  178.573054][ T6388] bridge0: port 3(netdevsim0) entered blocking state
[  178.630856][ T5249] EXT4-fs warning (device loop6): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  178.671438][ T6388] bridge0: port 3(netdevsim0) entered disabled state
[  178.705923][ T5249] EXT4-fs error (device loop6): ext4_read_inline_dir:1618: inode #12: block 7: comm syz-executor: path /50/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  178.722150][ T6388] device netdevsim0 entered promiscuous mode
[  178.728797][ T5249] EXT4-fs (loop6): Remounting filesystem read-only
[  178.744307][ T5249] EXT4-fs error (device loop6): ext4_read_inline_dir:1618: inode #12: block 7: comm syz-executor: path /50/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  178.818139][ T5249] EXT4-fs (loop6): Remounting filesystem read-only
[  178.862189][ T5249] EXT4-fs error (device loop6): empty_inline_dir:1873: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[  179.116603][ T4737] libceph: connect (1)[c::]:6789 error -101
[  179.148029][ T4737] libceph: mon0 (1)[c::]:6789 connect error
[  179.330674][ T5249] EXT4-fs (loop6): Remounting filesystem read-only
[  179.339387][ T4737] libceph: connect (1)[c::]:6789 error -101
[  179.367737][ T5249] EXT4-fs warning (device loop6): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  179.388122][ T4737] libceph: mon0 (1)[c::]:6789 connect error
[  179.452959][ T6384] ceph: No mds server is up or the cluster is laggy
[  179.514248][ T5249] EXT4-fs error (device loop6): ext4_read_inline_dir:1618: inode #12: block 7: comm syz-executor: path /50/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  179.692967][ T4238] libceph: connect (1)[c::]:6789 error -101
[  179.709223][ T5249] EXT4-fs (loop6): Remounting filesystem read-only
[  179.721980][ T4238] libceph: mon0 (1)[c::]:6789 connect error
[  179.774607][ T6399] loop7: detected capacity change from 0 to 1024
[  179.794513][ T5249] EXT4-fs error (device loop6): ext4_read_inline_dir:1618: inode #12: block 7: comm syz-executor: path /50/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  180.734410][ T5249] EXT4-fs (loop6): Remounting filesystem read-only
[  180.742929][ T5249] EXT4-fs error (device loop6): empty_inline_dir:1873: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[  180.816796][ T5249] EXT4-fs (loop6): Remounting filesystem read-only
[  180.856116][ T5249] EXT4-fs warning (device loop6): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  180.921892][ T6399] EXT4-fs (loop7): mounted filesystem without journal. Opts: i_version,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,usrquota,,errors=continue. Quota mode: writeback.
[  180.958289][ T6403] loop8: detected capacity change from 0 to 2048
[  181.002268][ T5249] EXT4-fs warning (device loop6): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  181.068464][ T6403] EXT4-fs (loop8): Ignoring removed bh option
[  181.094154][ T5249] EXT4-fs warning (device loop6): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  181.121937][ T5249] EXT4-fs warning (device loop6): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  181.143475][ T6403] EXT4-fs (loop8): mounted filesystem without journal. Opts: discard,bh,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none.
[  181.267863][ T5249] EXT4-fs warning (device loop6): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  181.798279][ T6422] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  181.815238][ T6422] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 17 with error 28
[  181.827895][ T6422] EXT4-fs (loop8): This should not happen!! Data will be lost
[  181.827895][ T6422] 
[  181.838790][ T6422] EXT4-fs (loop8): Total free blocks count 0
[  181.845038][ T6422] EXT4-fs (loop8): Free/Dirty block details
[  181.851091][ T6422] EXT4-fs (loop8): free_blocks=2415919104
[  181.856898][ T6422] EXT4-fs (loop8): dirty_blocks=32
[  181.862103][ T6422] EXT4-fs (loop8): Block reservation details
[  181.868150][ T6422] EXT4-fs (loop8): i_reserved_data_blocks=2
[  182.229062][ T5249] EXT4-fs error: 12 callbacks suppressed
[  182.229087][ T5249] EXT4-fs error (device loop6): ext4_read_inline_dir:1618: inode #12: block 7: comm syz-executor: path /50/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  182.442656][ T5249] EXT4-fs: 12 callbacks suppressed
[  182.442677][ T5249] EXT4-fs (loop6): Remounting filesystem read-only
[  182.490896][ T5249] EXT4-fs error (device loop6): ext4_read_inline_dir:1618: inode #12: block 7: comm syz-executor: path /50/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  182.539143][ T5249] EXT4-fs (loop6): Remounting filesystem read-only
[  182.546347][ T5249] EXT4-fs error (device loop6): empty_inline_dir:1873: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[  182.810919][ T5249] EXT4-fs (loop6): Remounting filesystem read-only
[  182.878674][ T5249] EXT4-fs warning (device loop6): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  183.172135][ T5249] EXT4-fs error (device loop6): ext4_read_inline_dir:1618: inode #12: block 7: comm syz-executor: path /50/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  183.272732][ T5249] EXT4-fs (loop6): Remounting filesystem read-only
[  183.279384][ T5249] EXT4-fs error (device loop6): ext4_read_inline_dir:1618: inode #12: block 7: comm syz-executor: path /50/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  183.329047][ T5249] EXT4-fs (loop6): Remounting filesystem read-only
[  183.390442][ T5249] EXT4-fs error (device loop6): empty_inline_dir:1873: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[  183.446040][ T6439] x_tables: ip_tables: osf match: only valid for protocol 6
[  183.596001][ T5249] EXT4-fs (loop6): Remounting filesystem read-only
[  183.870874][ T5249] EXT4-fs warning (device loop6): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  183.894936][ T5249] EXT4-fs error (device loop6): ext4_read_inline_dir:1618: inode #12: block 7: comm syz-executor: path /50/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  185.238742][ T5249] EXT4-fs (loop6): Remounting filesystem read-only
[  185.294195][ T5249] EXT4-fs error (device loop6): ext4_read_inline_dir:1618: inode #12: block 7: comm syz-executor: path /50/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  185.368238][ T5249] EXT4-fs (loop6): Remounting filesystem read-only
[  185.392967][ T5249] EXT4-fs error (device loop6): empty_inline_dir:1873: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[  185.418762][ T6445] loop8: detected capacity change from 0 to 512
[  185.426996][ T5249] EXT4-fs (loop6): Remounting filesystem read-only
[  185.444891][ T5249] EXT4-fs warning (device loop6): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  185.531018][ T5249] EXT4-fs error (device loop6): ext4_read_inline_dir:1618: inode #12: block 7: comm syz-executor: path /50/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  185.573279][ T6445] EXT4-fs error (device loop8): ext4_orphan_get:1400: inode #15: comm syz.8.499: inode has both inline data and extents flags
[  185.615591][ T5249] EXT4-fs (loop6): Remounting filesystem read-only
[  185.649396][ T6445] EXT4-fs error (device loop8): ext4_orphan_get:1405: comm syz.8.499: couldn't read orphan inode 15 (err -117)
[  185.666104][ T5249] EXT4-fs warning (device loop6): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  185.691586][ T6445] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  185.725548][ T5249] EXT4-fs warning (device loop6): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  185.821165][ T6458] bridge0: port 3(netdevsim0) entered blocking state
[  185.840920][ T6458] bridge0: port 3(netdevsim0) entered disabled state
[  185.842100][ T5249] EXT4-fs warning (device loop6): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  185.848994][ T6458] device netdevsim0 entered promiscuous mode
[  185.905829][ T6458] bridge0: port 3(netdevsim0) entered blocking state
[  185.913121][ T6458] bridge0: port 3(netdevsim0) entered forwarding state
[  186.708666][ T5249] EXT4-fs warning (device loop6): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  186.736394][    T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.765077][ T5249] EXT4-fs warning (device loop6): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  186.864847][    T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.920482][ T5249] EXT4-fs warning (device loop6): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  186.949127][ T5249] EXT4-fs warning (device loop6): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  186.989645][ T5249] EXT4-fs warning (device loop6): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  187.368655][ T5249] EXT4-fs error: 98 callbacks suppressed
[  187.369567][ T5249] EXT4-fs error (device loop6): ext4_read_inline_dir:1618: inode #12: block 7: comm syz-executor: path /50/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  187.935765][ T5249] EXT4-fs: 98 callbacks suppressed
[  187.935782][ T5249] EXT4-fs (loop6): Remounting filesystem read-only
[  187.947647][ T5249] EXT4-fs error (device loop6): ext4_read_inline_dir:1618: inode #12: block 7: comm syz-executor: path /50/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  188.062449][    T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.081501][ T5249] EXT4-fs (loop6): Remounting filesystem read-only
[  188.101007][ T5249] EXT4-fs error (device loop6): empty_inline_dir:1873: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[  188.133261][ T5249] EXT4-fs (loop6): Remounting filesystem read-only
[  188.140194][ T5249] EXT4-fs error (device loop6): ext4_read_inline_dir:1618: inode #12: block 7: comm syz-executor: path /50/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  188.192747][ T5249] EXT4-fs (loop6): Remounting filesystem read-only
[  188.202077][ T5249] EXT4-fs error (device loop6): ext4_read_inline_dir:1618: inode #12: block 7: comm syz-executor: path /50/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  188.238216][ T5249] EXT4-fs (loop6): Remounting filesystem read-only
[  188.249106][    T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.261728][ T5249] EXT4-fs error (device loop6): empty_inline_dir:1873: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[  188.578432][ T5249] EXT4-fs (loop6): Remounting filesystem read-only
[  188.983869][ T6491] overlayfs: failed to clone lowerpath
[  188.992661][ T5249] EXT4-fs warning: 26 callbacks suppressed
[  188.992677][ T5249] EXT4-fs warning (device loop6): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  189.014263][ T6491] overlayfs: failed to clone lowerpath
[  189.031052][ T5249] EXT4-fs error (device loop6): ext4_read_inline_dir:1618: inode #12: block 7: comm syz-executor: path /50/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  189.072243][ T5249] EXT4-fs (loop6): Remounting filesystem read-only
[  189.081178][ T5249] EXT4-fs error (device loop6): ext4_read_inline_dir:1618: inode #12: block 7: comm syz-executor: path /50/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  189.124047][ T5249] EXT4-fs (loop6): Remounting filesystem read-only
[  189.130944][ T5249] EXT4-fs error (device loop6): empty_inline_dir:1873: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[  189.198079][ T5249] EXT4-fs (loop6): Remounting filesystem read-only
[  189.217347][ T5249] EXT4-fs warning (device loop6): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  189.281544][ T5249] EXT4-fs error (device loop6): ext4_read_inline_dir:1618: inode #12: block 7: comm syz-executor: path /50/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  189.362918][    T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.377847][ T5249] EXT4-fs (loop6): Remounting filesystem read-only
[  189.391011][ T4370] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  189.455843][ T5249] EXT4-fs warning (device loop6): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  189.556354][    T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.579188][ T5249] EXT4-fs warning (device loop6): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  189.602679][ T5249] EXT4-fs warning (device loop6): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  189.623022][ T6513] bridge0: port 3(netdevsim0) entered blocking state
[  189.652619][ T5249] EXT4-fs warning (device loop6): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  189.661126][ T6513] bridge0: port 3(netdevsim0) entered disabled state
[  189.708765][ T5249] EXT4-fs warning (device loop6): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  189.733850][ T6513] device netdevsim0 entered promiscuous mode
[  189.740280][ T6513] bridge0: port 3(netdevsim0) entered blocking state
[  189.747059][ T6513] bridge0: port 3(netdevsim0) entered forwarding state
[  189.769209][ T5249] EXT4-fs warning (device loop6): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  189.793462][ T4370] usb 9-1: Using ep0 maxpacket: 16
[  189.796349][ T5249] EXT4-fs warning (device loop6): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  189.832468][    T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.847531][ T5249] EXT4-fs warning (device loop6): empty_inline_dir:1880: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  189.862483][ T6507] device syzkaller0 entered promiscuous mode
[  189.941191][ T4370] usb 9-1: config 0 has an invalid interface number: 180 but max is 0
[  189.949514][ T4370] usb 9-1: config 0 has no interface number 0
[  189.976210][ T4370] usb 9-1: config 0 interface 180 has no altsetting 0
[  190.004319][    T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.181189][ T4370] usb 9-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=e8.1f
[  190.204829][ T4370] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  190.250890][ T4370] usb 9-1: Product: syz
[  190.261020][ T4370] usb 9-1: Manufacturer: syz
[  190.340754][ T4370] usb 9-1: SerialNumber: syz
[  190.371723][ T4370] usb 9-1: config 0 descriptor??
[  192.226611][ T6560] udc-core: couldn't find an available UDC or it's busy
[  192.261194][    T9] tipc: Left network mode
[  192.264163][ T6560] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  192.732959][ T4370] viperboard 9-1:0.180: version 0.00 found at bus 009 address 002
[  193.269188][ T6568] loop1: detected capacity change from 0 to 1024
[  193.470803][ T4368] usb 9-1: USB disconnect, device number 2
[  193.503284][ T6568] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,usrquota,,errors=continue. Quota mode: writeback.
[  194.261708][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[  194.268191][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[  195.697891][ T5314] Bluetooth: hci0: command 0x0409 tx timeout
[  196.569228][ T6606] device syzkaller0 entered promiscuous mode
[  196.792075][ T6582] chnl_net:caif_netlink_parms(): no params data found
[  197.120422][    T9] bond1: (slave gretap1): Releasing active interface
[  198.103798][ T5312] Bluetooth: hci0: command 0x041b tx timeout
[  198.146309][ T6638] loop8: detected capacity change from 0 to 256
[  198.154625][ T6639] loop1: detected capacity change from 0 to 512
[  198.213787][ T6639] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  198.226479][ T6638] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  198.318310][ T6582] bridge0: port 1(bridge_slave_0) entered blocking state
[  199.376358][ T6639] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002]
[  199.400836][ T6639] System zones: 1-12
[  199.431187][ T6639] EXT4-fs (loop1): 1 truncate cleaned up
[  199.440715][ T6582] bridge0: port 1(bridge_slave_0) entered disabled state
[  199.521386][ T6639] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,debug,data=journal,,errors=continue. Quota mode: none.
[  199.592256][ T6582] device bridge_slave_0 entered promiscuous mode
[  199.727661][ T6582] bridge0: port 2(bridge_slave_1) entered blocking state
[  199.750047][ T6582] bridge0: port 2(bridge_slave_1) entered disabled state
[  200.620923][ T5308] Bluetooth: hci0: command 0x040f tx timeout
[  201.082920][ T6582] device bridge_slave_1 entered promiscuous mode
[  201.609867][ T6681] loop1: detected capacity change from 0 to 512
[  202.601377][ T6582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  202.639069][ T6691] device syzkaller0 entered promiscuous mode
[  202.711163][ T4253] Bluetooth: hci0: command 0x0419 tx timeout
[  202.733698][ T6582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  202.829390][ T6681] EXT4-fs (loop1): Ignoring removed mblk_io_submit option
[  202.850862][ T6681] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13
[  202.863539][ T6681] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.548: attempt to clear invalid blocks 2 len 1
[  202.934115][ T6681] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  203.040086][ T6681] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.548: invalid indirect mapped block 1819239214 (level 0)
[  203.178582][ T6681] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.548: invalid indirect mapped block 1819239214 (level 1)
[  203.252362][ T6582] team0: Port device team_slave_0 added
[  203.349542][ T6582] team0: Port device team_slave_1 added
[  203.381953][ T6681] EXT4-fs (loop1): 1 truncate cleaned up
[  203.398285][ T6681] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,init_itable=0x0000000000000004,mblk_io_submit,minixdf,jqfmt=vfsv0,usrjquota=..,errors=continue. Quota mode: writeback.
[  204.670054][ T6582] batman_adv: batadv0: Adding interface: batadv_slave_0
[  204.705204][ T6582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  204.741757][ T6714] loop7: detected capacity change from 0 to 40427
[  204.751695][ T6582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  204.771341][ T6716] netlink: 1004 bytes leftover after parsing attributes in process `syz.8.556'.
[  204.827990][ T6714] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[  204.835881][ T6714] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  204.844778][ T6582] batman_adv: batadv0: Adding interface: batadv_slave_1
[  204.860568][ T6714] F2FS-fs (loop7): invalid crc value
[  204.879062][ T6582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  204.920377][ T6714] F2FS-fs (loop7): Found nat_bits in checkpoint
[  204.940710][ T6582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  205.031676][ T6714] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  205.038798][ T6714] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  206.383043][ T6726] block device autoloading is deprecated and will be removed.
[  206.461227][ T6582] device hsr_slave_0 entered promiscuous mode
[  206.492363][ T6582] device hsr_slave_1 entered promiscuous mode
[  206.570777][ T6582] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  206.578427][ T6582] Cannot create hsr debugfs directory
[  206.898349][    T9] device hsr_slave_0 left promiscuous mode
[  206.934450][    T9] device hsr_slave_1 left promiscuous mode
[  206.978239][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  207.046976][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[  207.054896][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  207.062475][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[  207.074713][    T9] device bridge_slave_1 left promiscuous mode
[  207.090886][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  207.106520][    T9] device bridge_slave_0 left promiscuous mode
[  207.112844][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  207.129434][    T9] device hsr_slave_0 left promiscuous mode
[  207.136648][    T9] device hsr_slave_1 left promiscuous mode
[  207.148697][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  207.180770][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[  207.191879][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  207.199349][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[  207.244058][    T9] device bridge_slave_1 left promiscuous mode
[  207.250461][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  207.294781][    T9] device bridge_slave_0 left promiscuous mode
[  207.321008][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  207.433264][    T9] device veth1_macvtap left promiscuous mode
[  207.452189][    T9] device veth0_macvtap left promiscuous mode
[  207.458308][    T9] device veth1_vlan left promiscuous mode
[  207.490757][    T9] device veth0_vlan left promiscuous mode
[  207.520493][    T9] device veth1_macvtap left promiscuous mode
[  207.549090][    T9] device veth0_macvtap left promiscuous mode
[  207.569900][    T9] device veth1_vlan left promiscuous mode
[  207.579508][    T9] device veth0_vlan left promiscuous mode
[  208.414472][ T6732] loop8: detected capacity change from 0 to 32768
[  210.929957][    T9] team0 (unregistering): Port device team_slave_1 removed
[  211.261603][    T9] team0 (unregistering): Port device team_slave_0 removed
[  211.344222][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  211.397009][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  211.630103][    T9] bond0 (unregistering): Released all slaves
[  211.669175][    T9] bond1 (unregistering): Released all slaves
[  212.118934][    T9] team0 (unregistering): Port device team_slave_1 removed
[  212.211310][    T9] team0 (unregistering): Port device team_slave_0 removed
[  212.267150][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  212.301760][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  212.451614][    T9] bond0 (unregistering): Released all slaves
[  212.546734][ T6761] netlink: 'syz.7.564': attribute type 12 has an invalid length.
[  212.584435][ T6763] netlink: 'syz.7.564': attribute type 12 has an invalid length.
[  212.906516][ T6809] 0x7fffffffffffffff-0x8000000000000006 : ""
[  212.913002][ T6809] mtd: partition "" is out of reach -- disabled
[  212.946043][ T6809] ftl_cs: FTL header not found.
[  213.924338][ T6582] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  213.979613][ T6582] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  214.011826][ T6582] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  214.057879][ T6582] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  215.080177][ T6838] loop7: detected capacity change from 0 to 128
[  215.109477][ T6582] 8021q: adding VLAN 0 to HW filter on device bond0
[  215.135597][ T6582] 8021q: adding VLAN 0 to HW filter on device team0
[  215.151229][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  215.229048][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  215.238044][ T6838] FAT-fs (loop7): Unrecognized mount option "defcontext=system_u" or missing value
[  215.241380][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  215.311514][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  215.336735][ T4537] bridge0: port 1(bridge_slave_0) entered blocking state
[  215.343908][ T4537] bridge0: port 1(bridge_slave_0) entered forwarding state
[  215.371067][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  215.392506][ T6841] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  215.491470][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  215.521690][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  215.550273][ T1172] bridge0: port 2(bridge_slave_1) entered blocking state
[  215.557421][ T1172] bridge0: port 2(bridge_slave_1) entered forwarding state
[  215.705995][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  215.725496][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  217.222748][ T5311] Bluetooth: hci4: command 0x0406 tx timeout
[  217.229645][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  217.242555][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  217.290182][ T6582] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  217.369299][ T6582] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  217.403764][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  217.423772][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  217.455612][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  218.809050][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  218.895089][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  218.921836][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  218.941026][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  218.976846][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  220.042128][ T6904] device syzkaller0 entered promiscuous mode
[  221.361654][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  222.149107][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  222.663010][ T4368] Bluetooth: hci5: command 0x0406 tx timeout
[  222.744556][ T6582] 8021q: adding VLAN 0 to HW filter on device batadv0
[  222.922096][ T6930] device syzkaller0 entered promiscuous mode
[  223.702701][ T6945] tipc: Started in network mode
[  223.707676][ T6945] tipc: Node identity 8ef58d99cc42, cluster identity 4711
[  223.729048][ T6945] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  225.293029][ T6929] tipc: Resetting bearer <eth:syzkaller0>
[  225.547282][ T6929] tipc: Disabling bearer <eth:syzkaller0>
[  225.602281][ T4368] tipc: Node number set to 1119325593
[  227.216706][ T6985] loop8: detected capacity change from 0 to 1024
[  227.255126][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  227.283971][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  227.776041][ T6985] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  227.864554][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  228.340062][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  228.708882][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  229.591941][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  229.603797][ T6582] device veth0_vlan entered promiscuous mode
[  229.642352][ T6582] device veth1_vlan entered promiscuous mode
[  229.885825][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  230.091183][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  230.803158][ T6582] device veth0_macvtap entered promiscuous mode
[  230.883974][ T6582] device veth1_macvtap entered promiscuous mode
[  230.906027][ T7022] loop8: detected capacity change from 0 to 128
[  230.989585][ T7022] attempt to access beyond end of device
[  230.989585][ T7022] loop8: rw=1, want=1041, limit=128
[  231.012667][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  231.058750][ T6582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  231.087055][ T6582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  231.098866][ T6582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  231.125652][ T6582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  231.766627][ T6582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  232.114598][ T6582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.130665][ T6582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  232.213793][ T6582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.270681][ T6582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  232.300990][ T6582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.322405][ T6582] batman_adv: batadv0: Interface activated: batadv_slave_0
[  232.329823][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  232.369988][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  232.687658][ T6582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  232.753398][ T6582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.825181][ T6582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  232.837807][ T6582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.849230][ T6582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  232.863203][ T6582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.875170][ T6582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  232.887226][ T6582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.898503][ T6582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  232.910383][ T6582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.924722][ T6582] batman_adv: batadv0: Interface activated: batadv_slave_1
[  233.070830][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  233.139537][ T7042] loop7: detected capacity change from 0 to 32768
[  233.147435][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  233.215449][ T7042] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by syz.7.616 (7042)
[  233.393661][ T6582] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  233.402610][ T7042] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm
[  233.411389][ T7042] BTRFS info (device loop7): using free space tree
[  233.418108][ T7042] BTRFS info (device loop7): has skinny extents
[  233.440667][ T6582] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  233.581296][ T6582] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  234.069074][ T6582] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  234.325086][ T4884] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  234.340874][ T4884] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  234.351046][ T7042] BTRFS info (device loop7): enabling ssd optimizations
[  234.439618][ T6769] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  234.448924][ T7079] loop8: detected capacity change from 0 to 1024
[  234.551153][   T27] INFO: task syz-executor:4453 blocked for more than 143 seconds.
[  234.559015][   T27]       Not tainted syzkaller #0
[  234.568954][ T7079] EXT4-fs (loop8): Ignoring removed orlov option
[  234.653525][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  234.724706][ T7079] EXT4-fs (loop8): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback.
[  234.752490][ T1264] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  234.771062][   T27] task:syz-executor    state:D stack:19920 pid: 4453 ppid:     1 flags:0x00004004
[  234.780538][   T27] Call Trace:
[  234.784777][   T27]  <TASK>
[  234.787752][   T27]  __schedule+0x11ef/0x43c0
[  234.794235][ T1264] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  234.865579][   T27]  ? verify_lock_unused+0x140/0x140
[  234.874246][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  235.550560][   T27]  ? mark_lock+0x94/0x320
[  235.571614][   T27]  ? release_firmware_map_entry+0x190/0x190
[  235.577620][   T27]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  235.688710][   T27]  ? lock_chain_count+0x20/0x20
[  235.701154][   T27]  ? _raw_spin_lock_irq+0xb7/0xf0
[  235.706247][   T27]  schedule+0x11b/0x1e0
[  235.710425][   T27]  io_schedule+0x7c/0xd0
[  235.777837][   T27]  wait_on_page_bit_common+0x83b/0xe50
[  235.783500][   T27]  ? wait_on_page_bit+0x50/0x50
[  235.788391][   T27]  ? rcu_lock_release+0x20/0x20
[  235.793356][   T27]  truncate_inode_pages_range+0xa24/0xfe0
[  235.799114][   T27]  ? invalidate_inode_page+0x360/0x360
[  235.805176][   T27]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  235.811271][   T27]  ? _raw_spin_unlock_irq+0x1f/0x40
[  235.816508][   T27]  ? lockdep_hardirqs_on+0x94/0x140
[  235.837876][   T27]  evict+0x4dc/0x8d0
[  235.847887][   T27]  ? proc_nr_inodes+0x320/0x320
[  235.862382][   T27]  ? do_raw_spin_unlock+0x11d/0x230
[  235.877919][   T27]  evict_inodes+0x60c/0x6a0
[  235.888030][   T27]  ? __dentry_kill+0x530/0x650
[  235.898152][   T27]  ? clear_inode+0x150/0x150
[  235.909692][   T27]  generic_shutdown_super+0x93/0x300
[  235.925211][   T27]  kill_block_super+0x7c/0xe0
[  235.938752][   T27]  deactivate_locked_super+0x93/0xf0
[  235.949849][   T27]  cleanup_mnt+0x42d/0x4e0
[  235.960248][   T27]  ? lockdep_hardirqs_on+0x94/0x140
[  235.971400][   T27]  task_work_run+0x125/0x1a0
[  235.984287][   T27]  exit_to_user_mode_loop+0x10f/0x130
[  235.999987][   T27]  exit_to_user_mode_prepare+0xee/0x180
[  236.020220][   T27]  syscall_exit_to_user_mode+0x16/0x40
[  236.032831][   T27]  do_syscall_64+0x58/0xa0
[  236.042079][   T27]  ? clear_bhb_loop+0x30/0x80
[  236.052468][   T27]  ? clear_bhb_loop+0x30/0x80
[  236.062983][   T27]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  236.075765][   T27] RIP: 0033:0x7f9d56540117
[  236.084788][   T27] RSP: 002b:00007ffeeb582b68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  236.110027][   T27] RAX: 0000000000000000 RBX: 00007f9d565a871f RCX: 00007f9d56540117
[  236.127421][   T27] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeeb582c20
[  236.145991][   T27] RBP: 00007ffeeb582c20 R08: 00007ffeeb583c20 R09: 00000000ffffffff
[  236.186888][   T27] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffeeb583cb0
[  236.207046][   T27] R13: 00007f9d565a871f R14: 0000000000014247 R15: 00007ffeeb583cf0
[  236.219146][   T27]  </TASK>
[  236.232254][   T27] 
[  236.232254][   T27] Showing all locks held in the system:
[  236.309130][   T27] 4 locks held by kworker/u4:0/9:
[  236.341112][   T27] 1 lock held by khungtaskd/27:
[  236.349957][   T27]  #0: ffffffff8c31eaa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30
[  236.366297][   T27] 2 locks held by kworker/u4:3/1172:
[  236.372421][   T27] 2 locks held by getty/3950:
[  236.377455][   T27]  #0: ffff88802cdc3098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70
[  236.388006][   T27]  #1: ffffc900026562e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x5df/0x1a70
[  236.460741][   T27] 2 locks held by kworker/1:3/4236:
[  236.466009][   T27]  #0: ffff888016c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x761/0x1010
[  236.520702][   T27]  #1: ffffc9000323fd00 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010
[  236.574494][   T27] 3 locks held by kworker/0:5/4238:
[  236.579765][   T27]  #0: ffff888016c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x761/0x1010
[  236.632270][   T27]  #1: ffffc9000325fd00 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010
[  236.675383][   T27]  #2: ffffffff8c323528 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3a5/0x750
[  236.720231][   T27] 2 locks held by kworker/1:4/4250:
[  236.750737][   T27]  #0: ffff888016c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x761/0x1010
[  236.769402][   T27]  #1: ffffc9000332fd00 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010
[  236.799089][   T27] 2 locks held by kworker/1:5/4253:
[  236.816022][   T27]  #0: ffff888016c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x761/0x1010
[  236.834913][   T27]  #1: ffffc9000335fd00 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010
[  236.862181][   T27] 2 locks held by kworker/1:6/4267:
[  236.874943][   T27]  #0: ffff888016c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x761/0x1010
[  236.893363][   T27]  #1: ffffc9000343fd00 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010
[  236.907239][   T27] 2 locks held by kworker/1:7/4294:
[  236.920654][   T27]  #0: ffff888016c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x761/0x1010
[  236.939056][   T27]  #1: ffffc9000349fd00 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010
[  236.960694][   T27] 3 locks held by kworker/u4:6/4313:
[  236.966025][   T27] 3 locks held by kworker/0:12/4372:
[  236.979145][   T27]  #0: ffff888016c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x761/0x1010
[  236.989655][   T27]  #1: ffffc9000368fd00 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010
[  237.011797][   T27]  #2: ffffffff8c323528 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2d1/0x750
[  237.031310][   T27] 1 lock held by syz-executor/4453:
[  237.036557][   T27]  #0: ffff888077b900e0 (&type->s_umount_key#74){++++}-{3:3}, at: deactivate_super+0xa0/0xd0
[  237.056278][   T27] 2 locks held by kworker/1:8/4582:
[  237.063988][   T27]  #0: ffff888016c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x761/0x1010
[  237.080452][   T27]  #1: ffffc9000352fd00 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010
[  237.100693][   T27] 2 locks held by kworker/0:19/4737:
[  237.106024][   T27]  #0: ffff888016c72138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x761/0x1010
[  237.125992][   T27]  #1: ffffc900036cfd00 ((work_completion)(&rew.rew_work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010
[  237.146832][   T27] 2 locks held by kworker/1:9/5308:
[  237.155164][   T27]  #0: ffff888016c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x761/0x1010
[  237.168356][   T27]  #1: ffffc900035bfd00 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010
[  237.181235][   T27] 2 locks held by kworker/1:10/5311:
[  237.186551][   T27]  #0: ffff888016c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x761/0x1010
[  237.197066][   T27]  #1: ffffc900033efd00 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010
[  237.209604][   T27] 2 locks held by kworker/1:11/5312:
[  237.215051][   T27]  #0: ffff888016c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x761/0x1010
[  237.225619][   T27]  #1: ffffc9000361fd00 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010
[  237.240140][   T27] 2 locks held by kworker/1:12/5314:
[  237.249380][   T27]  #0: ffff888016c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x761/0x1010
[  237.269853][   T27]  #1: ffffc900041ffd00 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010
[  237.293132][   T27] 4 locks held by syz-executor/5332:
[  237.298556][   T27]  #0: ffff88806067e0e0 (&type->s_umount_key#59){+.+.}-{3:3}, at: deactivate_super+0xa0/0xd0
[  237.315322][   T27]  #1: ffffffff8c808928 (uuid_mutex){+.+.}-{3:3}, at: btrfs_close_devices+0xc2/0x510
[  237.328912][   T27]  #2: ffff888020956118 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xf9/0x7d0
[  237.339902][   T27]  #3: ffff8881475be468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xaa/0xb90
[  237.349669][   T27] 1 lock held by syz.1.604/7032:
[  237.355056][   T27]  #0: ffff888077b900e0 (&type->s_umount_key#74){++++}-{3:3}, at: iterate_supers+0xa4/0x1d0
[  237.370343][   T27] 2 locks held by kworker/1:13/7113:
[  237.389291][   T27]  #0: ffff888016c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x761/0x1010
[  237.403845][   T27]  #1: ffffc9000307fd00 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010
[  237.421638][   T27] 2 locks held by kworker/1:14/7115:
[  237.427065][   T27]  #0: ffff888016c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x761/0x1010
[  237.445715][   T27]  #1: ffffc900035dfd00 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010
[  237.461313][   T27] 2 locks held by kworker/1:15/7116:
[  237.466747][   T27]  #0: ffff888016c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x761/0x1010
[  237.485356][   T27]  #1: ffffc90003c5fd00 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010
[  237.506806][   T27] 2 locks held by kworker/1:16/7118:
[  237.516252][   T27]  #0: ffff888016c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x761/0x1010
[  237.531768][   T27]  #1: ffffc90003c6fd00 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010
[  237.553091][   T27] 2 locks held by dhcpcd-run-hook/7146:
[  237.559124][   T27] 
[  237.568796][   T27] =============================================
[  237.568796][   T27] 
[  237.580457][   T27] NMI backtrace for cpu 0
[  237.584813][   T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0
[  237.592036][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  237.602109][   T27] Call Trace:
[  237.605431][   T27]  <TASK>
[  237.608376][   T27]  dump_stack_lvl+0x188/0x250
[  237.613083][   T27]  ? show_regs_print_info+0x20/0x20
[  237.618388][   T27]  ? load_image+0x400/0x400
[  237.622905][   T27]  ? tick_nohz_tick_stopped+0x7b/0xb0
[  237.628306][   T27]  ? nmi_cpu_backtrace+0x1b2/0x3d0
[  237.633446][   T27]  nmi_cpu_backtrace+0x3a2/0x3d0
[  237.638406][   T27]  ? nmi_trigger_cpumask_backtrace+0x280/0x280
[  237.644585][   T27]  ? _printk+0xda/0x130
[  237.648777][   T27]  ? load_image+0x400/0x400
[  237.653309][   T27]  ? load_image+0x400/0x400
[  237.657836][   T27]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  237.663928][   T27]  nmi_trigger_cpumask_backtrace+0x163/0x280
[  237.669928][   T27]  watchdog+0xe0f/0xe50
[  237.674108][   T27]  kthread+0x436/0x520
[  237.678188][   T27]  ? hungtask_pm_notify+0x40/0x40
[  237.683222][   T27]  ? kthread_blkcg+0xd0/0xd0
[  237.687833][   T27]  ret_from_fork+0x1f/0x30
[  237.692288][   T27]  </TASK>
[  237.695962][   T27] Sending NMI from CPU 0 to CPUs 1:
[  237.701299][    C1] NMI backtrace for cpu 1
[  237.701309][    C1] CPU: 1 PID: 9 Comm: kworker/u4:0 Not tainted syzkaller #0
[  237.701323][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  237.701332][    C1] Workqueue: netns cleanup_net
[  237.701351][    C1] RIP: 0010:check_preemption_disabled+0x56/0x110
[  237.701384][    C1] Code: 74 1f 65 48 8b 0c 25 28 00 00 00 48 3b 4c 24 08 0f 85 c4 00 00 00 48 83 c4 10 5b 41 5e 41 5f 5d c3 48 c7 04 24 00 00 00 00 9c <8f> 04 24 f7 04 24 00 02 00 00 74 cc 65 4c 8b 3d 76 76 46 76 41 f6
[  237.701397][    C1] RSP: 0018:ffffc90000ce78c0 EFLAGS: 00000046
[  237.701409][    C1] RAX: 0000000000000001 RBX: e9d3329515e0ddc7 RCX: 0000000080000000
[  237.701419][    C1] RDX: 0000000000000003 RSI: ffffffff8a2b3a20 RDI: ffffffff8a79f780
[  237.701429][    C1] RBP: ffffc90000ce7a10 R08: ffffffff8d89d8af R09: 1ffffffff1b13b15
[  237.701439][    C1] R10: dffffc0000000000 R11: fffffbfff1b13b16 R12: ffff88813fe90b68
[  237.701449][    C1] R13: dffffc0000000000 R14: ffff88813fe90ae0 R15: 0000000000000246
[  237.701459][    C1] FS:  0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000
[  237.701471][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  237.701480][    C1] CR2: 000055cec63a0950 CR3: 0000000075b28000 CR4: 00000000003506e0
[  237.701495][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  237.701503][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  237.701511][    C1] Call Trace:
[  237.701517][    C1]  <TASK>
[  237.701523][    C1]  lock_release+0x549/0x8a0
[  237.701541][    C1]  ? rcu_lock_release+0x5/0x20
[  237.701558][    C1]  ? __lock_acquire+0x7d10/0x7d10
[  237.701573][    C1]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  237.701591][    C1]  inet_twsk_purge+0x7a7/0x840
[  237.701608][    C1]  ? __might_sleep+0xf0/0xf0
[  237.701621][    C1]  ? __inet_twsk_schedule+0x130/0x130
[  237.701636][    C1]  ? do_raw_spin_unlock+0x11d/0x230
[  237.701651][    C1]  tcp_sk_exit_batch+0x28/0x90
[  237.701664][    C1]  ? tcp_sk_exit+0xa0/0xa0
[  237.701676][    C1]  cleanup_net+0x791/0xba0
[  237.701690][    C1]  ? ops_free_list+0x330/0x330
[  237.701705][    C1]  ? _raw_spin_unlock_irq+0x1f/0x40
[  237.701722][    C1]  process_one_work+0x85f/0x1010
[  237.701742][    C1]  ? worker_detach_from_pool+0x240/0x240
[  237.701756][    C1]  ? lockdep_hardirqs_off+0x70/0x100
[  237.701770][    C1]  ? _raw_spin_lock_irq+0xb7/0xf0
[  237.701785][    C1]  ? _raw_spin_lock_irqsave+0x100/0x100
[  237.701801][    C1]  ? wq_worker_running+0x97/0x170
[  237.701814][    C1]  worker_thread+0xaa6/0x1290
[  237.701836][    C1]  kthread+0x436/0x520
[  237.701848][    C1]  ? rcu_lock_release+0x20/0x20
[  237.701861][    C1]  ? kthread_blkcg+0xd0/0xd0
[  237.701873][    C1]  ret_from_fork+0x1f/0x30
[  237.701891][    C1]  </TASK>
[  237.710205][   T27] Kernel panic - not syncing: hung_task: blocked tasks
[  237.981770][   T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0
[  237.988970][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  237.999021][   T27] Call Trace:
[  238.002306][   T27]  <TASK>
[  238.005240][   T27]  dump_stack_lvl+0x188/0x250
[  238.009924][   T27]  ? show_regs_print_info+0x20/0x20
[  238.015123][   T27]  ? load_image+0x400/0x400
[  238.019652][   T27]  panic+0x2e5/0x810
[  238.023547][   T27]  ? schedule_preempt_disabled+0x20/0x20
[  238.029196][   T27]  ? bpf_jit_dump+0xd0/0xd0
[  238.033699][   T27]  ? __irq_work_queue_local+0x12c/0x190
[  238.039249][   T27]  ? nmi_trigger_cpumask_backtrace+0x260/0x280
[  238.045411][   T27]  watchdog+0xe4e/0xe50
[  238.049579][   T27]  kthread+0x436/0x520
[  238.053643][   T27]  ? hungtask_pm_notify+0x40/0x40
[  238.058663][   T27]  ? kthread_blkcg+0xd0/0xd0
[  238.063254][   T27]  ret_from_fork+0x1f/0x30
[  238.067680][   T27]  </TASK>
[  238.071002][   T27] Kernel Offset: disabled
[  238.075326][   T27] Rebooting in 86400 seconds..