last executing test programs:

40m34.395850043s ago: executing program 2 (id=595):
r0 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8844)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0)
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
sched_setaffinity(r1, 0x8, &(0x7f0000000340)=0x2)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
getgroups(0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00'}, 0x24)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x0, 0x18c, 0x203, 0x8000000, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', <r8=>r6, 0x0, 0x0, 0xfe, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x0, 0x0, 0x2}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r8, 0x0, 0xff, 0x64, 0x7, 0x0, @dev, @empty, 0x8, 0x8000, 0xfffffffe}})

40m33.21493424s ago: executing program 2 (id=596):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r0, &(0x7f0000001240)={0x24, @short={0x2, 0x2}}, 0x14)

40m33.043859417s ago: executing program 2 (id=597):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
capset(0x0, &(0x7f0000000000)={0x9, 0x0, 0x1, 0x4, 0x1, 0x2})
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x80a0000, 0xdddd1000, 0xa, 0x0, 0x8, 0x8, 0x1, 0x2, 0x0, 0x4, 0x9, 0x10}, {0x8080000, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0xe, 0x7, 0x0, 0xfb}, {0x3000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0xd, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xa, 0x6, 0x5, 0x0, 0x3}, {0x80a0000, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26}, {0x80a0000}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0xf801, 0x0, [0x0, 0x0, 0x1]})

40m32.633806748s ago: executing program 2 (id=600):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000200850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000180)={[{@grpid}, {@mblk_io_submit}, {@nodioread_nolock}, {@test_dummy_encryption}, {@inode_readahead_blks}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$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")
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20)

40m28.280176947s ago: executing program 2 (id=602):
socket$nl_audit(0x10, 0x3, 0x9)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10)
socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet(0x2, 0x2, 0x1)
setsockopt$sock_int(r4, 0x1, 0x5, 0x0, 0x0)
sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000200)}], 0x1, 0x0, 0x0, 0x60000000}, 0x4008040)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x4090)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000d40)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0x0, 0xf0, 0xffffffff, 0x0, 0x310, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510)

40m27.093630574s ago: executing program 2 (id=605):
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
setuid(0xee01)
r0 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00')
fchdir(r1)
mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0)
r2 = syz_open_procfs(r0, &(0x7f0000000340)='map_files\x00')
fchdir(r2)
openat$zero(0xffffffffffffff9c, 0x0, 0x480, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588)
r4 = socket$inet6(0xa, 0x3, 0x3c)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r5}, 0x10)
capget(&(0x7f0000000440)={0x19980330}, 0x0)
syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000040)='./file4\x00', 0xa18c14, &(0x7f00000000c0)=ANY=[@ANYBLOB="64656275672c696f6368617266383d302c636f6465706167653d313235352c757466383d302c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e39352c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c756e695f786c6174533d302c726f6469722c74696d6f66667365743d3078303030300100000000000080303065342c73686f72746e616d653d77696e399fa53100"/178], 0x89, 0x29b, &(0x7f0000000180)="$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")
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback, 0x7}, 0x1c)
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="88744eb77c1b15108431e0a03a1ccd8c26dc6df88e815a74290cae54ed16d25fdd4f6de8848296702d7f2c7fa3e9b946b892c38c40d3784b191c55a62beed7fa8a807c977e2e826c58fb19a76ccb7b3eb948cb5faf5cb8823fa84ddaee6f3c770495508494414d80c08d05a33fc59bbd55a1e3cd39be86b2138c3dde323884658c3aaacf7b6a3e227a06366cb905d6ec668f1d6f64e578b6526be4880bac285b560144065cb0d8dd", 0xa8}], 0x1)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)

40m11.712656191s ago: executing program 32 (id=605):
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
setuid(0xee01)
r0 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00')
fchdir(r1)
mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0)
r2 = syz_open_procfs(r0, &(0x7f0000000340)='map_files\x00')
fchdir(r2)
openat$zero(0xffffffffffffff9c, 0x0, 0x480, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588)
r4 = socket$inet6(0xa, 0x3, 0x3c)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r5}, 0x10)
capget(&(0x7f0000000440)={0x19980330}, 0x0)
syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000040)='./file4\x00', 0xa18c14, &(0x7f00000000c0)=ANY=[@ANYBLOB="64656275672c696f6368617266383d302c636f6465706167653d313235352c757466383d302c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e39352c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c756e695f786c6174533d302c726f6469722c74696d6f66667365743d3078303030300100000000000080303065342c73686f72746e616d653d77696e399fa53100"/178], 0x89, 0x29b, &(0x7f0000000180)="$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")
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback, 0x7}, 0x1c)
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="88744eb77c1b15108431e0a03a1ccd8c26dc6df88e815a74290cae54ed16d25fdd4f6de8848296702d7f2c7fa3e9b946b892c38c40d3784b191c55a62beed7fa8a807c977e2e826c58fb19a76ccb7b3eb948cb5faf5cb8823fa84ddaee6f3c770495508494414d80c08d05a33fc59bbd55a1e3cd39be86b2138c3dde323884658c3aaacf7b6a3e227a06366cb905d6ec668f1d6f64e578b6526be4880bac285b560144065cb0d8dd", 0xa8}], 0x1)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)

39m8.868750602s ago: executing program 1 (id=724):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r2}, 0x18)
syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00'})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x540, 0x3b0, 0x0, 0x3b0, 0x3b0, 0x2c0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x6, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffffff], [0x0, 0xff000000, 0xff000000, 0xff], 'vlan1\x00', 'team_slave_1\x00', {0xff}, {0xff}, 0x67, 0x7, 0x2, 0x24}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x6, 0x5}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@loopback, @ipv6=@private0, 0x36, 0x3d, 0x7ff}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv6=@remote, 0xe, 0x25, 0x400}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0xa010102, @ipv4=@rand_addr=0x64010100, 0x29, 0x11, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
write$cgroup_devices(r5, &(0x7f0000000100)=ANY=[], 0xffdd)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

39m7.115839656s ago: executing program 1 (id=728):
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000))
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
r4 = dup(r1)
write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="9802"], 0x298)
write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4])
r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x13c)
fspick(r5, &(0x7f0000000180)='./file0\x00', 0x0)
getdents64(r5, 0x0, 0x0)

39m6.558991771s ago: executing program 1 (id=729):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x22, &(0x7f00000018c0), 0x4)
recvmsg(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$SO_TIMESTAMP(r3, 0x1, 0x0, 0x0, 0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d)
r7 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r7, &(0x7f0000000140), 0x10)
sendmsg$can_bcm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x48}}, 0x0)
sendmsg$can_bcm(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$can_bcm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='\a\x00'/12, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB, @ANYRES64=0x0, @ANYBLOB="00000000010000000000080001000000a464357177330772f823705dd9eb24e7188e5ec76306bf94d3d9184ed17a7c98e0b8333307b8862067bdf554552416cbb9062d5d6551111fc6ff57f36e52eec7dae015db7b311e3cd651407884e1f4a04152680175d56d17f5e852e6"], 0x48}}, 0x1)
r8 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'wg0\x00', <r9=>0x0})
sendto$packet(r8, &(0x7f0000000180)="0b03feff4f00020002004788aa", 0xd, 0x0, &(0x7f0000000140)={0x11, 0x0, r9}, 0x14)
write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0)

39m5.325965182s ago: executing program 1 (id=732):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341)
ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200))
ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x0)
uname(0x0)

39m2.646315516s ago: executing program 1 (id=733):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000740)={[{@test_dummy_encryption}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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")
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, 0x0, 0x8000002)
socket$packet(0x11, 0x2, 0x300)
connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e22}, 0x6e)
sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newsa={0x13c, 0x10, 0x413, 0x70bd29, 0x0, {{@in=@empty, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x21}, {@in=@multicast2, 0x0, 0x32}, @in=@multicast1, {0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x8, 0x80000, 0x81}, {0x3, 0x5, 0x4, 0x4000006}, {0x0, 0xfffffff9, 0x80020}, 0x0, 0x0, 0x2, 0x4, 0x81, 0x68}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x40}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x0)

38m58.615848754s ago: executing program 1 (id=740):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3f)
ioctl$KVM_IRQ_LINE(r0, 0x4008ae61, &(0x7f0000000000)={0x100, 0xb})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x7, 0x4, 0x208, 0x1}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000380)='sched_switch\x00', r4}, 0x18)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0})
socket$inet_udp(0x2, 0x2, 0x0)
r5 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501)
ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x1, &(0x7f00000004c0)={0x60, 0x3, 0xe2, 0x2}, 0x8, 0x0, 0x0, 0x0, 0xfffffffd, 0x6, 0x0})

38m41.354827637s ago: executing program 33 (id=740):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3f)
ioctl$KVM_IRQ_LINE(r0, 0x4008ae61, &(0x7f0000000000)={0x100, 0xb})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x7, 0x4, 0x208, 0x1}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000380)='sched_switch\x00', r4}, 0x18)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0})
socket$inet_udp(0x2, 0x2, 0x0)
r5 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501)
ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x1, &(0x7f00000004c0)={0x60, 0x3, 0xe2, 0x2}, 0x8, 0x0, 0x0, 0x0, 0xfffffffd, 0x6, 0x0})

37m45.267837361s ago: executing program 4 (id=846):
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000000}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x4}, {0xac}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x4e0, 0x378, 0x180, 0x0, 0x2e0, 0x180, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@uncond, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@remote, [], @ipv6=@local, [], @ipv4=@private, [], @ipv6=@private1}}}, @common=@ttl={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x218}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}}]}, @ECN={0x28}}, {{@ip={@rand_addr, @dev, 0x0, 0x0, 'syzkaller0\x00', 'macvlan1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x540)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000003f64ecb21ed7d74b542e43ae9f57f61af1c5b6016901992307df92d7c26b05a7da0582d208fd1f57c41cee38c7023e71dc864ab49f7894dd5ee29721d0625ee50c8aeca9b5090d85ff1c5df40229f0981507171aec7dc97abd981893d51a27e8a1033fa344fa3c6c27705648a66a47e0a1bc8fcede095704453c77f6c5370191ab55c423aae05729e69c987cf5f9aa2fd88c9e2114f53b9f82157c197397e43647b083db79f1f2"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x20c9}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r5}, 0x10)
setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x38dc68d3d6e0aeb0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$bt_BT_POWER(r6, 0x112, 0x9, 0x0, &(0x7f0000003780))
timer_create(0x3, &(0x7f0000000140)={0x0, 0x2e, 0x2, @thr={&(0x7f0000000080)="86d6a9f135832f72517903001729aa125aa5cee17480a102b9426b30f58c659b9a5103", 0x0}}, 0x0)
syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0)

37m41.204638052s ago: executing program 4 (id=853):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x22, &(0x7f00000018c0), 0x4)
recvmsg(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$SO_TIMESTAMP(r3, 0x1, 0x0, 0x0, 0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d)
r7 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r7, &(0x7f0000000140), 0x10)
sendmsg$can_bcm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0)
sendmsg$can_bcm(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$can_bcm(r7, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x1)
r8 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'wg0\x00', <r9=>0x0})
sendto$packet(r8, &(0x7f0000000180)="0b03feff4f00020002004788aa", 0xd, 0x0, &(0x7f0000000140)={0x11, 0x0, r9}, 0x14)
write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0)

37m39.232461477s ago: executing program 4 (id=856):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0b00000007000000d7c90000090000"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r3, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r4}, 0x10)
socket$inet_udplite(0x2, 0x2, 0x88)
faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095", @ANYRES8=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18)
unshare(0x62040200)

37m34.94590652s ago: executing program 4 (id=862):
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x7, 0x8000, 0x1}, 0x50)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket(0x2, 0x1, 0x0)
capget(0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x36}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00'}, 0x10)

37m34.107195113s ago: executing program 4 (id=865):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='sched_switch\x00', r4}, 0x18)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, 0x0, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x557bb1b7872ca161, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe90}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r7, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x0, 0x2, 0x0, {0xa, 0x0, 0xf9d, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x32)
writev(r7, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1)

37m31.589494871s ago: executing program 4 (id=868):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000200850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000180)={[{@grpid}, {@mblk_io_submit}, {@nodioread_nolock}, {@test_dummy_encryption}, {@inode_readahead_blks}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$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")
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r4, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20)

37m16.131157197s ago: executing program 34 (id=868):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000200850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000180)={[{@grpid}, {@mblk_io_submit}, {@nodioread_nolock}, {@test_dummy_encryption}, {@inode_readahead_blks}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$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")
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r4, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20)

37m0.39210878s ago: executing program 0 (id=915):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x22, &(0x7f00000018c0), 0x4)
recvmsg(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$SO_TIMESTAMP(r3, 0x1, 0x0, 0x0, 0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d)
r7 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r7, &(0x7f0000000140), 0x10)
sendmsg$can_bcm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0)
sendmsg$can_bcm(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$can_bcm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[], 0x48}}, 0x1)
r8 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'wg0\x00', <r9=>0x0})
sendto$packet(r8, &(0x7f0000000180)="0b03feff4f00020002004788aa", 0xd, 0x0, &(0x7f0000000140)={0x11, 0x0, r9}, 0x14)
write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0)

36m59.251785922s ago: executing program 0 (id=918):
r0 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8844)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0)
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
getgroups(0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00'}, 0x24)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x0, 0x18c, 0x203, 0x8000000, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', <r7=>r5, 0x0, 0x0, 0xfe, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x0, 0x0, 0x2}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r7, 0x0, 0xff, 0x64, 0x7, 0x0, @dev, @empty, 0x8, 0x8000, 0xfffffffe}})

36m53.875746793s ago: executing program 0 (id=925):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x22, &(0x7f00000018c0), 0x4)
recvmsg(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$SO_TIMESTAMP(r3, 0x1, 0x0, 0x0, 0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d)
r7 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r7, &(0x7f0000000140), 0x10)
sendmsg$can_bcm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0)
sendmsg$can_bcm(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$can_bcm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[], 0x48}}, 0x1)
r8 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'wg0\x00', <r9=>0x0})
sendto$packet(r8, &(0x7f0000000180)="0b03feff4f00020002004788aa", 0xd, 0x0, &(0x7f0000000140)={0x11, 0x0, r9}, 0x14)
write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0)

36m52.750962903s ago: executing program 0 (id=927):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4, <r5=>0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xe, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xeb}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xfdfe, 0x7, @remote, 0x4}, 0x1c)
io_setup(0x7, &(0x7f0000000280))
r7 = socket$inet_udp(0x2, 0x2, 0x0)
close(r7)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r9=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x64, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x11, 0x13}}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}]}, 0x64}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002)

36m44.937532725s ago: executing program 0 (id=936):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\a\x00\x00\x00'], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7)
r4 = fsopen(&(0x7f0000000000)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x0)
fchdir(r5)
r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100)
getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8)

36m39.974930744s ago: executing program 0 (id=943):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_usb_connect$cdc_ncm(0x4, 0x83, &(0x7f0000000280)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x71, 0x2, 0x1, 0x81, 0xa0, 0x91, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, '%'}, {0x5, 0x24, 0x0, 0xd3e2}, {0xd, 0x24, 0xf, 0x1, 0xfffffff8, 0x0, 0x4, 0x2}, {0x6, 0x24, 0x1a, 0x9, 0x4}, [@mbim={0xc, 0x24, 0x1b, 0x3, 0x3, 0x3, 0x0, 0x7, 0x7f}, @mbim_extended={0x8, 0x24, 0x1c, 0x2, 0xff, 0x345}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x7, 0x89, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x7, 0xf2, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x9, 0x1}}}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x1a, 0x4, 0xa, 0x10, 0xe}, 0xbe, &(0x7f0000000440)={0x5, 0xf, 0xbe, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x4d, 0x5, 0x6}, @generic={0xaf, 0x10, 0x4, "8752a7c467cceab7d892221bbf103ef88090a63e3be5188c25a72998b3e334d0fc805d96e7caf93f39bf962c45b6573420963c8584d4c088406417e3c9979962923e6a4003fceda0b1597c3107d2ca52f814db12289d081a98b1cb71ca426fe3b2a8c2d29f9c109f65731a6497fbd347c39020d5e69a85e367245add5cd233539970bfa8b2cff40519994d0eb620cee3e4257df69252a17e51d3d26aa3a10e77530b1cd68596c7eaef5ef598"}]}})
eventfd(0x3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
r4 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0x3, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd5cd7000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
tgkill(0x0, 0x0, 0x21)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x1, 0x4cb, &(0x7f0000000580)="$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")
r7 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0xf000, 0xeeee8000, 0x0, r7})

36m24.873026395s ago: executing program 35 (id=943):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_usb_connect$cdc_ncm(0x4, 0x83, &(0x7f0000000280)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x71, 0x2, 0x1, 0x81, 0xa0, 0x91, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, '%'}, {0x5, 0x24, 0x0, 0xd3e2}, {0xd, 0x24, 0xf, 0x1, 0xfffffff8, 0x0, 0x4, 0x2}, {0x6, 0x24, 0x1a, 0x9, 0x4}, [@mbim={0xc, 0x24, 0x1b, 0x3, 0x3, 0x3, 0x0, 0x7, 0x7f}, @mbim_extended={0x8, 0x24, 0x1c, 0x2, 0xff, 0x345}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x7, 0x89, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x7, 0xf2, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x9, 0x1}}}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x1a, 0x4, 0xa, 0x10, 0xe}, 0xbe, &(0x7f0000000440)={0x5, 0xf, 0xbe, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x4d, 0x5, 0x6}, @generic={0xaf, 0x10, 0x4, "8752a7c467cceab7d892221bbf103ef88090a63e3be5188c25a72998b3e334d0fc805d96e7caf93f39bf962c45b6573420963c8584d4c088406417e3c9979962923e6a4003fceda0b1597c3107d2ca52f814db12289d081a98b1cb71ca426fe3b2a8c2d29f9c109f65731a6497fbd347c39020d5e69a85e367245add5cd233539970bfa8b2cff40519994d0eb620cee3e4257df69252a17e51d3d26aa3a10e77530b1cd68596c7eaef5ef598"}]}})
eventfd(0x3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
r4 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0x3, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd5cd7000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
tgkill(0x0, 0x0, 0x21)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x1, 0x4cb, &(0x7f0000000580)="$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")
r7 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0xf000, 0xeeee8000, 0x0, r7})

34m41.099715406s ago: executing program 6 (id=1155):
syz_open_dev$tty1(0xc, 0x4, 0x1)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x0, 0x0, 0x1, 0x1, 0x4}, 0x20)
socket$inet_tcp(0x2, 0x1, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x40100, 0x0)

34m38.764410627s ago: executing program 6 (id=1163):
syz_emit_ethernet(0x2a, &(0x7f0000000300)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0xfffc, 0x0, 0xb, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0)

34m37.839951268s ago: executing program 6 (id=1165):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0xb8)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB], 0x310)
r1 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00')
preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000000)=""/55, 0x37}], 0x1, 0xde, 0x20004)

34m37.063309725s ago: executing program 6 (id=1169):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x22, &(0x7f00000018c0), 0x4)
recvmsg(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$SO_TIMESTAMP(r3, 0x1, 0x0, 0x0, 0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d)
r7 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r7, &(0x7f0000000140), 0x10)
sendmsg$can_bcm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0)
sendmsg$can_bcm(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$can_bcm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='\a\x00\x00\x00\x00\x00', @ANYRES64=0x77359400, @ANYBLOB, @ANYRES64=0x0, @ANYBLOB], 0x48}}, 0x1)
r8 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'wg0\x00', <r9=>0x0})
sendto$packet(r8, &(0x7f0000000180)="0b03feff4f00020002004788aa", 0xd, 0x0, &(0x7f0000000140)={0x11, 0x0, r9}, 0x14)
write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0)

34m35.063996892s ago: executing program 6 (id=1172):
syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x224008e, &(0x7f0000000080)={[], [{@obj_type={'obj_type', 0x3d, '//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'}}]}, 0x0, 0x449, &(0x7f0000000280)="$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")
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x118d046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0)

34m32.272122038s ago: executing program 6 (id=1175):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
close(r3)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f0000000400000004000000a2"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r6 = socket$unix(0x1, 0x5, 0x0)
r7 = dup2(r6, r5)
close_range(r7, 0xffffffffffffffff, 0x0)
mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='incremental-fs\x00', 0x150040, 0x0)

34m16.779358047s ago: executing program 36 (id=1175):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
close(r3)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f0000000400000004000000a2"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r6 = socket$unix(0x1, 0x5, 0x0)
r7 = dup2(r6, r5)
close_range(r7, 0xffffffffffffffff, 0x0)
mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='incremental-fs\x00', 0x150040, 0x0)

32m50.080026794s ago: executing program 7 (id=1325):
syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000000500)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000000000000003b814e50a959736d65720f73ecea54b5e5be45ace9a88f723cb005aeff24212c651baef614d442ae89412ad3dcd0b7586d02002a6d6d65cacd4fc5002207ce994dda65c4b1d23a9bd5ba0f4ce5c2b5a5718c6aa918080002223d2753a5cac974110144cd0a1e368652324a41b31e1eb3b32dccbdf8f68bd96a45a75427a5f789d267fd92f6a5540200b81d5b9fa9b40fe4d7fbd50a6afc3a989c6d60045663c59cbdc4c700000000bc7f6b22df0191acf5912afdcc1c061835177068c40f757dd123d2600b1c544f1525aa8d00000000000000000000002e8b5c733d362417c17f527c0bfebec112d57fc69fabb9b31ef97b2147931ff60cdf666c25244218b1f1a6010000000100000020563b835d0e8e9a09070ef1691fcb2f37bda5d4e3d9d7a2d0ac82b45a53001057f321acc45d5e065a461de90100000077d200000000000040b78f0dd3836f5ab2f6a1a5b798bb7752f192c6b48e568973a59cd9c74bd9a14721856c5499cd8f93f8beaa9cf76718ce7244c8426803000000005c000208886b313bd01a22d576e414011a4f0a897515329f86d4585fa0ea17068f8af349696da4a2b3e24310ca52ec51bc23b57897cb55a2d513e6a00765ee3f58b471c54dd57f0af584afe4a21f92b515d7f2fa6fbb273ca0f751e684584320534667aea39ad7222c8ef531f514939177a47395e94c1723abb3fd44fd64fde4b45cc2f55f4ae05ff48648a4c998257856bcdcf2fa02010000001f54fb936570450e91c8d55abad76a7b7a000016f81ec9da9ccc1191c211632266d907e4d9b23496ae19bac24dc23c43f514f1b4af19988bbe61ee29a368a999435d6872d01b79c7821e875859dfbf3c57e4f1fb0be46cb5f7a0fa13516c0926d19dd2d5862085e1e4cb8279be17cba17ee4d06ad97b4ca282e73ea142b01b4a742fa11c0927ba811dd60903d575db449d775021b542db617086b3ed42e6e60fe043cff79b0c067c584bbf82657974c3736912b4b522052b9467d0da116ccc1652d861a420f09aaf67d3e9f6160100000001000000ae6335ad9896abd3cc00413638cb9bc62ab8054325d72e9144cf4f88702f586507e3147198e0bc4060a7c8f4dce73b653177ecf8228e6e6fae02510000000000000000000000000000f43739fdd2d24e50e0233acfe1c8639070fe00f40b0d01f8a0a35fcfe3ea10faf9c24b8488ed4ed83fb06a9a7c57442ede9e1fc2853b8f4d2241cff61d0125b7750e3fdae6a4ab9c776a191ed8098a780ea2bbaa64978cd3a6458fcc6b949bcbca0dceb7361f66e46731eba4f3aed335e7c8c541e82453218a19d39489e1525466ac93759787e767f601931d94c9c426489b741a6bc8abf475e4bf859e1ce7f7227069e9f51e25fa3d1b18dc565180a1af464a1dd697db85e2b27b90f6bd7cf1b6bc0bcd8ba552ced3d3cfbf9c9bc04f65b6f83cb40173b4bdc393d47e5da95b63a40ac18daf11e8d0706b47795fbe2b56d0ea7ffc5a59ede88621a08b25ca6ebe041317b62373a60951af33eb7954a9731aaa125add0913ed2435a207439e9122512d77096747a4b404459cebc8faff8f7a31758e630c75a1ff90402754d339dc21cf6b8e04e1aedf14df0b4aaf0e03194df3eb41ba066bc343b323a3162d7e7ba687633c2faa8f28b42364b72e3a457476fd6b2a54e670ba798172c44c4390f73fdab743a4cac88b2bd0545b8483f2e2f9846b138a4d8a7332978da70e9050417087c5ae034a735e8b448dd9701404", @ANYRES16], 0x1, 0x553b, &(0x7f000000ac00)="$eJzs3EtvG1UUAOA7TtPSJxFiwa4jVUiJVFt12lSwC9CKh0gV8ViwAsd2LLe2J4odJ2SFBEvEgn+CQGLFkt/AgjU7xALEDgnkuWNKKI9WduKk/T5pfGbujM+cO7ISnRnLAXhiLaS//pyES+FsCGEuhHAhCfl6Uiy51RieCyFcDiGU/rIkxfifA6dDCOdCCJdGyWPOpNj1+dXhlZWf3vjlm+/OnDr/xdffz27WwKw9H0LobsX13W6MWSvGu8V4bdjOY/fGsIhxR/desZ3FuNvcyDPs1sbH1fJ4vRWPz7Z2+qO42anVR7HV3szHt3rxhP1ha5wnf8Pd2na+3Whu5LHdz/LY2o917e3Hv237/UHM0yjyfZinD4PBOMbx5l4zzmfrXh7rvUExHvNmjebeKA6LWJwu1LNOI69jY5Irfby92e7t7KXD5na/nfXSlUr1hUr1Zrm6nTWag+aNcq3buHkjXWx1RoeVB81ad7WVZa1Os1LPukvpYqteL1er6eKt5ka71kur1cr1yrXyylKxdjV99c67aaeRLo7iy+3ezul2p59uZttpfMdSuly5/uJSeqWavr22nq6/dfv22vo77996785La6+/Uhz0QFnp4vK15eVy9Vp5ubp0DOY/+r/7kPMfTDL/T4qiH2H+yWSXB/6bDxjAI3ug/w/6f+DwnfT+P0yz/x+1VPr//+9/S5P3/xP1v8e1/z/B84eJ6P8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ5YP8x/+Vq+shC3zxfjF4uhZ4rtJIRQCiH8/g/mwukDOeeKPPP/cvz832r4Ngl5htE5zhTLuRDCarH89vRhXwUAAAB4fH310eXPYrceXxZmXRBHKd60KV34YEr5khDC/MKPU8pWGr08O6Vk+ef7VNibUrb8BtZTU0oWb7mdmla2hzI3Dh9fvD+YTyiJoXSk5QAAAEdi7kA42i4EAACAo/TprAtgNpIwfpQ5fhacf/P+/qPNswf2AQAAACdQMusCAAAAgEOX9/9+/w8AAAAeb/H3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4g537uU0ciOIA/GwwsP+0aLX3bWVvUEZKyDHHQAFpghJIC2mAGsgtJUQQYY+QHIEUiXGsoO+TPM7Y0W9mgMsbSwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NJztZ4/3v97uDRnt79MntUAAAAAp2yr9bz+Y9r0f6Trv9KlP6lfREQZEadq90GMWpmDlFOd+f/q3RyeIuqEwxjjdHyPiP/peP3d9acAAAAA12uzXM2aar1ppn1PiM/UbNqUP28y5RURUU1fMqWVh+ZvprD69z2Mu0xp9QbWJFNYs+U2PH1vlGuQtkHrlFYyWdRfYt0ruxkXAADoU7sSOFOFAAAAcAVu+54A/SiOzfE547g5pQeC31o9AAAA4Asq+p4AAAAA0Lm6/vf+PwAAALhuzfv/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NK2Ws83y9Xs3P3FB3N2+8vkWxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBv7844CIRAGYbB3fWcy9z+sNGhobFIFwsffGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzPSwqEQBBEwZzxv5O+/2ElQc8gQgQ0PKqoRQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzcP28cRRQA8Hd7t5c/gDAGuTCgIFFAQ+xLSEgJBcii4CMgWc45GC4EEhckskBuoEKu0yAoEUICmS7fIXUspQldChdGogbt3u5lkxhyiszuEv9+0uy8Pa9m3uydLD/P2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAafedeCkp4m52mBnH5Wu39jZWsn7ngT5zY+v2fNayuPOoib55++CTb7eXqycn5ionX9WfDAAAAIdDt6zvI+JOur2U9clMXv+n5TVZzf/9M+O4rOcfrPt39jaOFl+aL+v/3369+8JkopnxPNmgq2uj4eLDqfT+oyW23rOPvKKX3/n8dy/d/A1J3t98fjfN72fn25s33+3n4ZE6sgUAHsfJsi+C8uehrB80mRgAh0avUniX9X93ptmcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOqwuxlPlXEnIuZ79+LMzt7Gyn79ja3b82U7e/36VnXMbIg0IlbXRsO0xrW03ZWr1z5ZHo2Gl+sPTkREc7MXwYdTXBPx79cUH89obhX/HHTakUajQVK8P23J5yCD8rN38CM39A0JAIAnVlq0rK6/k24vZa91ZiP++uH++v+1ShxT1v93Pzp7qzpXtf4f1LbC9ltYv/jZwpWr195Yu7h8YXhh+OmbpwZvDU6fO3Pm3EJ2rxYXViMZLjadJgAAAP9j/aJV6/9k9uH9/+OVOKas/z//bvBlda6u+n9f9zb9ms4EAADgMOpPoude+fOPzj5XdPr9+GJ5ff3yYHycnJ8aH2tN9zEdKVq1/u/ONp0VAAAAUIfdzc59+//nK3FMuf//9I8v/lwdsxsRxyIuRcTw5Mql0fn6ltNqdfyhcj5Rv+mVAgAA0JRjRavu/6f58//J5JGHJCJef3Ucl//rapr6v/ve1z9V56o+/3+6viW2UjI3vh95PxfRm2s6IwAAAJ5kR4uWFfu/p9tLH/9y/IO+5/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6vZ3AAAA//+pzDYD")
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000b40)={[{@user_xattr}, {@resgid}, {@barrier_val={'barrier', 0x3d, 0xb}}]}, 0x1, 0x4a3, &(0x7f0000000580)="$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")
chdir(&(0x7f00000003c0)='./bus\x00')
mkdir(&(0x7f0000000000)='./file0\x00', 0x40)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
link(&(0x7f0000001240)='./file0\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
creat(&(0x7f00000008c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)

32m44.906175975s ago: executing program 7 (id=1332):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4, <r5=>0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xe, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xeb}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xfdfe, 0x7, @remote, 0x4}, 0x1c)
io_setup(0x7, &(0x7f0000000280))
r7 = socket$inet_udp(0x2, 0x2, 0x0)
close(r7)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r9=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x64, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x11, 0x13}}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}]}, 0x64}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002)

32m43.153106097s ago: executing program 7 (id=1336):
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000008c0)=ANY=[@ANYRES64=0x0, @ANYRES64, @ANYRES8=0x0, @ANYBLOB="5ef8d1e7b2d4b5e6abd9eae5912ca8100c8fd189972abd0c2dba6330ba9e7e957869d03217c8eacaa11d65e105b47336babc99e31600cfc04897c803a626fb987fe0e27f6e885396473b04a5d44aebc93db8163bd701cf4c60588319fbbd404dbdcad7aa2a39203b9b53af3cfd9a8f2a3d03bd5ec01822d83114235d206f113ccec0d9edd2a7d133f1209e07df41c296b7df91ae7e37f0fbf6430b15befacfeda8c7e600f9ecfe0939bbe97c637d7c7d0b2f92d10d88f70f0484f9013fb487eb9980f478daa69d24946a71cd2000a07e8cd0689f2355754ebf6eb7e5122408c4a8929254c62fa1cedf44338d9e90ee8c22", @ANYRES64=r3, @ANYRESOCT, @ANYRES16=0x0], 0x23, 0x203, &(0x7f0000000ec0)="$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")
llistxattr(0x0, &(0x7f0000000c00)=""/4096, 0x1000)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

32m40.914242579s ago: executing program 7 (id=1338):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000300)={0x11, 0x63dcbf62d8600606, r2, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x14)
bind$packet(r1, &(0x7f0000000040)={0x11, 0x4, r2}, 0x14)
syz_emit_ethernet(0x12, &(0x7f0000000080)=ANY=[], 0x0)

32m39.664088612s ago: executing program 7 (id=1341):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prlimit64(r1, 0x5, 0x0, &(0x7f0000000280))
socket(0x1d, 0x2, 0x6)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8848}, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r6, 0x0, 0x20041080)

32m37.790465087s ago: executing program 7 (id=1343):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file1\x00', 0x2008000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bc, &(0x7f0000000440)="$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")
r2 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0)
sendfile(r2, r2, &(0x7f0000000080)=0x2, 0x7f03)

32m21.557128349s ago: executing program 37 (id=1343):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file1\x00', 0x2008000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bc, &(0x7f0000000440)="$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")
r2 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0)
sendfile(r2, r2, &(0x7f0000000080)=0x2, 0x7f03)

17.335423969s ago: executing program 3 (id=4753):
syz_open_dev$vim2m(0x0, 0x0, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = getpid()
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$sock(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0)
r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", <r6=>0xffffffffffffffff})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", <r7=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r7, <r8=>0xffffffffffffffff})
ioctl$SYNC_IOC_FILE_INFO(r8, 0xc0383e04, &(0x7f00000004c0)={""/32, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000300)=[{}, {}]})
sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
fcntl$F_GET_RW_HINT(r2, 0x40b, 0x0)
sched_setscheduler(r1, 0x5, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000200)={{{@in=@dev, @in6=@initdev}}, {{@in6=@initdev}, 0x0, @in=@broadcast}}, &(0x7f0000000080)=0xe8)

15.544486756s ago: executing program 3 (id=4756):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = creat(&(0x7f0000000580)='./bus\x00', 0x0)
r5 = fanotify_init(0xf00, 0x2)
fanotify_mark(r5, 0x105, 0x8971, r4, 0x0)
rename(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file1\x00')

14.686687381s ago: executing program 9 (id=4757):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
mount$tmpfs(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0)
close(0xffffffffffffffff)
close(0xffffffffffffffff)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ftruncate(0xffffffffffffffff, 0x51a9497)
openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x3ec5c3, 0x0)
r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0)
r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x800442d2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, @remote}]})
io_setup(0x7, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r5=>0x0, <r6=>0x0})
ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000001040)={0x0, 0xbaac, @status={[0x5, 0xfffffffffffffff8, 0x80, 0x0, 0xfffffffffffffff7, 0x9]}, [0xe, 0xffffffffffffffff, 0x6, 0xfffffffffffffffd, 0x0, 0x1, 0x10000, 0x3, 0x0, 0x33, 0xb3, 0x8a, 0x5, 0x6bad8612, 0x4, 0x1, 0xf, 0x333d, 0x1, 0x7, 0x4c505495, 0xffff, 0x8000000000000001, 0x9, 0x2, 0x1, 0x3, 0x40, 0xaa, 0x4, 0x4, 0x5, 0x5bb, 0x4, 0xd00, 0xd539, 0x2, 0x9, 0x22ff, 0xfffffffeffffffff, 0xe, 0x2, 0x2d, 0x8000, 0xffff, 0x0, 0x4, 0x5, 0x61f3d85d, 0x3, 0x1, 0x9, 0x0, 0x10000, 0x401, 0x81ca, 0xf6be4f6, 0x5, 0x5, 0x34f, 0x4, 0x6, 0x8, 0x4]})
io_pgetevents(0x0, 0x94ed, 0x1, &(0x7f0000000040)=[{}], &(0x7f00000000c0)={r5, r6+60000000}, 0x0)
syz_io_uring_setup(0x3, &(0x7f0000000580)={0x0, 0x226f, 0x13500, 0x0, 0x22c}, &(0x7f0000000240), &(0x7f0000000300))

13.840953354s ago: executing program 3 (id=4758):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x12, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, <r1=>0x0}, 0x2020)
r2 = fspick(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file1\x00', 0x1)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
socket$inet6(0xa, 0x802, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000012000000240000000800000085000000050000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r3}, 0x18)
prlimit64(0x0, 0xe, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r5 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, 0x0, 0x0)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(r7, 0x0, 0x63, &(0x7f0000000040)={'ipvs\x00'}, &(0x7f0000000000)=0x1e)
quotactl_fd$Q_QUOTAOFF(r2, 0xffffffff80000301, 0x0, 0x0)
acct(&(0x7f0000000240)='./file0/file1\x00')
write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x80000, 0x104032, 0x2, 0x2, 0xfffffffd, 0xffffdffc, 0x0, 0x0, 0x0, 0x7ffbffff}}, 0x50)

13.513948696s ago: executing program 5 (id=4759):
r0 = socket$kcm(0xa, 0x1, 0x106)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
init_module(&(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c4602090704090000000000000001003e000900000083000000000000004000000000000000ba0300000000189be6550000030038000100010403000700000000600300000041f8000000000000fbffffffffffffff7f0000000000000008000000000000000300000000000000c5"], 0x78, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
syz_open_dev$video(0x0, 0x3ff, 0x2000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
kexec_load(0x1000d0ffc2, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x3e0000}], 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, 0x0, 0x0)
ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f00000000c0)={{}, 0xea, 0x0, 0x7})
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0)
fsopen(&(0x7f00000029c0)='cifs\x00', 0x0)
sendmsg$kcm(r0, 0x0, 0x20000011)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, 0x0, 0xe07e872420dfefca)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24004000)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sm3)\x00'}, 0x58)

13.513256576s ago: executing program 9 (id=4760):
pipe2$9p(0x0, 0x80000)
dup(0xffffffffffffffff)
socket(0x9, 0x4, 0x2)
sched_setaffinity(0x0, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'pim6reg1\x00', @link_local})
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10)
ioctl$sock_netdev_private(r0, 0x8914, 0x0)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x6, @bcast, @bpq0, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
connect$rose(r2, &(0x7f0000000200)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c)
connect$rose(r2, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000440)={0x50, 0x0, 0x0, {0x7, 0x29, 0x4, 0x10c024c, 0x7, 0x1, 0x1c5d9605, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50)

12.097244457s ago: executing program 5 (id=4761):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r0, &(0x7f0000000c00)="f4"}, 0x20)
pivot_root(&(0x7f0000000540)='./file1\x00', &(0x7f00000017c0)='./file1\x00')
keyctl$dh_compute(0x17, &(0x7f0000001200), 0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001340)={'hmac(streebog512)\x00'}})
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
syz_usb_connect$cdc_ncm(0x7, 0xd2, &(0x7f0000001680)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc0, 0x2, 0x1, 0x7f, 0x10, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "e82e68"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0xf474, 0xe, 0x3ff, 0x5}, {0x6, 0x24, 0x1a, 0x0, 0x20}, [@mbim_extended={0x8, 0x24, 0x1c, 0x59b0, 0xe, 0x8}, @network_terminal={0x7, 0x24, 0xa, 0xff, 0x9, 0x8, 0x5}, @mdlm_detail={0x1c, 0x24, 0x13, 0x6, "4a501bbf529c35344fa1b5321a7f2e773973be0f9fb2596e"}, @mdlm={0x15, 0x24, 0x12, 0x6}, @mbim={0xc, 0x24, 0x1b, 0x0, 0x7, 0x6, 0x3, 0x100, 0x8}, @mdlm={0x15, 0x24, 0x12, 0x200}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x19, 0x7, 0x81}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x65, 0x5, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x7, 0x8, 0x8}}}}}}}]}}, &(0x7f0000001780)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x0, 0x49, 0x9, 0xe7, 0x10}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0x3, [{0x30, &(0x7f0000000280)=@string={0x30, 0x3, "459e98bed5789ac37d252cc67edbbc23c749297a5e0df5ce4f39fda26762d06879ae2019216c6a052a370685f140"}}, {0x0, 0x0}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x43e}}]})
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r2 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x2, 0x5, 0x7, 0x3, 0x1, {0x400000080001, 0xff, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x6}}, {0x0, 0x13}}}, 0xa0)
sendfile(r2, r2, &(0x7f0000000080), 0x7f03)

12.067176209s ago: executing program 8 (id=4762):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
syslog(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r3, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e21, 0x3, @private0, 0x20}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1400000000000000290000000b0000000000"], 0x18}, 0x0)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x5, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x1}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18)
sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x58, 0x0, 0x1, 0x70bd27, 0x25dfd3fb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x400c084}, 0x0)

12.003315895s ago: executing program 9 (id=4763):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
mount$tmpfs(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0)
close(0xffffffffffffffff)
close(0xffffffffffffffff)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ftruncate(0xffffffffffffffff, 0x51a9497)
openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x3ec5c3, 0x0)
r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0)
r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x800442d2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, @remote}]})
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000bc0)={0x3e})
io_setup(0x7, &(0x7f0000000000))
clock_gettime(0x0, &(0x7f0000000080))
ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000001040)={0x0, 0xbaac, @status={[0x5, 0xfffffffffffffff8, 0x80, 0x0, 0xfffffffffffffff7, 0x9]}, [0xe, 0xffffffffffffffff, 0x6, 0xfffffffffffffffd, 0x0, 0x1, 0x10000, 0x3, 0x0, 0x33, 0xb3, 0x8a, 0x5, 0x6bad8612, 0x4, 0x1, 0xf, 0x333d, 0x1, 0x7, 0x4c505495, 0xffff, 0x8000000000000001, 0x9, 0x2, 0x1, 0x3, 0x40, 0xaa, 0x4, 0x4, 0x5, 0x5bb, 0x4, 0xd00, 0xd539, 0x2, 0x9, 0x22ff, 0xfffffffeffffffff, 0xe, 0x2, 0x2d, 0x8000, 0xffff, 0x0, 0x4, 0x5, 0x61f3d85d, 0x3, 0x1, 0x9, 0x0, 0x10000, 0x401, 0x81ca, 0xf6be4f6, 0x5, 0x5, 0x34f, 0x4, 0x6, 0x8, 0x4]})
r5 = syz_io_uring_setup(0x3, &(0x7f0000000580)={0x0, 0x226f, 0x13500, 0x0, 0x22c}, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_FILES(r5, 0x3, 0x700, 0x0)

12.001220886s ago: executing program 3 (id=4764):
socket$inet6(0xa, 0x80002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4000, 0x0, @mcast2, 0x5}, {0xa, 0x3, 0x20000207, @private2={0xfc, 0x2, '\x00', 0x1}, 0x800086}}}, 0x48)
ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, 0x0)
mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
r2 = syz_clone(0x28080200, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000380)="db011a0932")
prctl$PR_SCHED_CORE(0x3e, 0x4, r2, 0x2, &(0x7f0000000280))

10.889798556s ago: executing program 8 (id=4765):
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet_udp(0x2, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1)
removexattr(0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = openat(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xa8902, 0x96)
ioctl$USBDEVFS_DROP_PRIVILEGES(r1, 0x4004551e, 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0x1e9982, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
close(0xffffffffffffffff)
socket(0x400000000010, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$kcm(0x29, 0x2, 0x0)
sendmmsg$inet(r3, &(0x7f0000006240)=[{{0x0, 0x0, &(0x7f00000038c0)=[{&(0x7f00000016c0)='L_', 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000003b40)}}], 0x2, 0x4)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup(r4, &(0x7f0000000100)='syz0\x00', 0x1ff)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9)
close(r3)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000480)=ANY=[@ANYRESHEX, @ANYRES8=r2, @ANYRES8=r3], 0x30}, 0x1, 0x0, 0x0, 0x54e979305c31cc96}, 0x40000)
socket(0x3, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r3, @ANYRESOCT, @ANYBLOB="712fac7fa09751a043bcc8162ef83db49504dd0914556d6fc537ec548a5ba50651096f71333ee1ca784546e27376104bb694d1174b6ea80964235850c01639f5da1517b252d0b8a6e299e29198dd38843699092f91ea7f43f96b5b0a156ed1a232b396f6fda007f3afaea8408ab949509f87980b37d46d59b8c7b7dc95e2f787370976312e7c35ccff2dff7d204397950ac8cbcb2552356c21d9722bdb2bdb37968be2e46eed56d7ee3ea7dfdecada189803b7b5331c7e8e83744ecde920475c9ff47a9c494347537af2aadc995f6d826f50b3dcd899e3b75364", @ANYRESDEC=r1], 0xd8}, 0x1, 0x0, 0x0, 0xc040}, 0x60058c0)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

9.766470546s ago: executing program 9 (id=4766):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x12, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id='])
fspick(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file1\x00', 0x1)
getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f00000002c0))
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
socket$inet6(0xa, 0x802, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000012000000240000000800000085000000050000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r1}, 0x18)
prlimit64(0x0, 0xe, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, 0x0, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x63, &(0x7f0000000040)={'ipvs\x00'}, &(0x7f0000000000)=0x1e)
acct(&(0x7f0000000240)='./file0/file1\x00')
write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, 0x0, {0x7, 0x29, 0x80000, 0x104032, 0x2, 0x2, 0xfffffffd, 0xffffdffc, 0x0, 0x0, 0x0, 0x7ffbffff}}, 0x50)

9.554163347s ago: executing program 3 (id=4767):
syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad10102"], 0x0)
io_uring_setup(0x5be0, &(0x7f0000000000)={0x0, 0x400067c1, 0x2, 0x4000000, 0x20c})
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @void}, 0x10)
syz_emit_ethernet(0x15, &(0x7f00000001c0)=ANY=[], 0x0)

9.448193788s ago: executing program 5 (id=4768):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x10000000)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7f, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = epoll_create1(0x0)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
sendmsg$can_raw(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@can={{0x3, 0x1}, 0x6, 0x0, 0x0, 0x0, "41523f8f79f1c2a0"}, 0x10}, 0x1, 0x0, 0x0, 0x20004080}, 0x4044081)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000200)={0xa0000019})
process_mrelease(0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x400000000, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000000100)='blkio.reset_stats\x00', 0x2, 0x0)
write$cgroup_int(r6, &(0x7f0000000040)=0x2, 0x12)
ioctl$KVM_GET_STATS_FD_cpu(r1, 0xaece)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
brk(0x200000ffc000)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x8002}}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x0)

8.781483863s ago: executing program 8 (id=4769):
r0 = socket$kcm(0xa, 0x1, 0x106)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
init_module(&(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c4602090704090000000000000001003e000900000083000000000000004000000000000000ba0300000000189be6550000030038000100010403000700000000600300000041f8000000000000fbffffffffffffff7f0000000000000008000000000000000300000000000000c5"], 0x78, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
syz_open_dev$video(0x0, 0x3ff, 0x2000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
kexec_load(0x1000d0ffc2, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x3e0000}], 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, 0x0, 0x0)
ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f00000000c0)={{}, 0xea, 0x0, 0x7})
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f00000000c0)=ANY=[])
fsopen(&(0x7f00000029c0)='cifs\x00', 0x0)
sendmsg$kcm(r0, 0x0, 0x20000011)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r0, 0x0, 0xe07e872420dfefca)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24004000)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sm3)\x00'}, 0x58)

7.956772625s ago: executing program 9 (id=4770):
syz_open_dev$vbi(0x0, 0x2, 0x2)
openat$audio(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
io_setup(0x6, &(0x7f0000001380)=<r0=>0x0)
syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000230eb6e08ac0537021d5f0102030109021200010880c01009a7efb3231c75b789523aa1e7b7049b050003b30208"], 0x0)
connect$llc(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
io_submit(r0, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000b80)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}], 0x1, 0x4000051)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0)
sendfile(r3, r4, 0x0, 0x200002)

7.324622997s ago: executing program 5 (id=4771):
socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f00000003c0)={0x1, &(0x7f0000000000)=[{0x50, 0x1, 0x2, 0x6}]})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0)
r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f0000000a40)={{0x1, 0x0, 0x4, 0x5, 'syz0\x00'}, 0x0, [0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100007, 0xfffffffffffffffc, 0x401, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x9, 0x0, 0x4000000000000, 0x0, 0xfffffffffffffff5, 0x0, 0x200000000000000, 0x1, 0xfffffffffffffffc, 0x1, 0x0, 0x2, 0x40000000c5a, 0x2, 0x1, 0x0, 0x85, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffff0, 0x1, 0x6, 0x0, 0x4000000000000000, 0x20000000000, 0x5e, 0x1, 0xfffffffffffffe, 0x0, 0x4, 0x1000000000, 0x3, 0x200000000000, 0x3, 0x200, 0xfffffffffffffffe, 0x0, 0x4000000000100001, 0x3, 0xfffffffffffffffc, 0x4, 0x800, 0x6, 0x0, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0, 0x10001, 0xebf, 0x6, 0x0, 0x751, 0x3, 0x0, 0x6b, 0x7, 0xfffffffffffffffd, 0x101, 0xb, 0x0, 0x2, 0x800, 0x9, 0x10008001, 0x3, 0x8, 0x80000000000000, 0x0, 0x0, 0xf31, 0x11, 0x2, 0x0, 0x0, 0x1ea, 0x3, 0x0, 0x4, 0x0, 0x0, 0x3, 0x4000b, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x1, 0x0, 0x2c80000000000000, 0x0, 0x20000000, 0x1, 0x1553, 0x6, 0x0, 0x3]})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

7.234430086s ago: executing program 8 (id=4772):
pipe2$9p(0x0, 0x80000)
dup(0xffffffffffffffff)
socket(0x9, 0x4, 0x2)
sched_setaffinity(0x0, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'pim6reg1\x00', @link_local})
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10)
ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000))
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r1, 0x890b, 0x0)
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
connect$rose(r2, &(0x7f0000000200)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c)
connect$rose(r2, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000440)={0x50, 0x0, 0x0, {0x7, 0x29, 0x4, 0x10c024c, 0x7, 0x1, 0x1c5d9605, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50)

6.940073635s ago: executing program 5 (id=4773):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
pipe2$9p(0x0, 0x80000)
r0 = dup(0xffffffffffffffff)
write$FUSE_BMAP(r0, 0x0, 0x0)
socket(0x9, 0x4, 0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10)
ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000))
r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x6, @bcast, @bpq0, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
connect$rose(r5, &(0x7f0000000200)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c)
connect$rose(r5, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1)
fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000440)={0x50, 0x0, 0x0, {0x7, 0x29, 0x4, 0x10c024c, 0x7, 0x1, 0x1c5d9605, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50)

6.131775035s ago: executing program 3 (id=4774):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
mount$tmpfs(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0)
close(0xffffffffffffffff)
close(0xffffffffffffffff)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ftruncate(0xffffffffffffffff, 0x51a9497)
openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x3ec5c3, 0x0)
r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0)
r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x800442d2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, @remote}]})
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000bc0)={0x3e})
io_setup(0x7, &(0x7f0000000000))
clock_gettime(0x0, &(0x7f0000000080))
ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000001040)={0x0, 0xbaac, @status={[0x5, 0xfffffffffffffff8, 0x80, 0x0, 0xfffffffffffffff7, 0x9]}, [0xe, 0xffffffffffffffff, 0x6, 0xfffffffffffffffd, 0x0, 0x1, 0x10000, 0x3, 0x0, 0x33, 0xb3, 0x8a, 0x5, 0x6bad8612, 0x4, 0x1, 0xf, 0x333d, 0x1, 0x7, 0x4c505495, 0xffff, 0x8000000000000001, 0x9, 0x2, 0x1, 0x3, 0x40, 0xaa, 0x4, 0x4, 0x5, 0x5bb, 0x4, 0xd00, 0xd539, 0x2, 0x9, 0x22ff, 0xfffffffeffffffff, 0xe, 0x2, 0x2d, 0x8000, 0xffff, 0x0, 0x4, 0x5, 0x61f3d85d, 0x3, 0x1, 0x9, 0x0, 0x10000, 0x401, 0x81ca, 0xf6be4f6, 0x5, 0x5, 0x34f, 0x4, 0x6, 0x8, 0x4]})
r5 = syz_io_uring_setup(0x3, &(0x7f0000000580)={0x0, 0x226f, 0x13500, 0x0, 0x22c}, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_FILES(r5, 0x3, 0x700, 0x0)

2.269275926s ago: executing program 8 (id=4775):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x12, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, <r1=>0x0}, 0x2020)
r2 = fspick(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file1\x00', 0x1)
getresuid(&(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140), &(0x7f00000002c0))
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000012000000240000000800000085000000050000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r4}, 0x18)
prlimit64(0x0, 0xe, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r6 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, 0x0, 0x0)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c)
r8 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(r8, 0x0, 0x63, &(0x7f0000000040)={'ipvs\x00'}, &(0x7f0000000000)=0x1e)
quotactl_fd$Q_QUOTAOFF(r2, 0xffffffff80000301, r3, 0x0)
acct(&(0x7f0000000240)='./file0/file1\x00')
write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x80000, 0x104032, 0x2, 0x2, 0xfffffffd, 0xffffdffc, 0x0, 0x0, 0x0, 0x7ffbffff}}, 0x50)

2.214966151s ago: executing program 5 (id=4776):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r0, &(0x7f0000000c00)="f4"}, 0x20)
pivot_root(&(0x7f0000000540)='./file1\x00', &(0x7f00000017c0)='./file1\x00')
keyctl$dh_compute(0x17, &(0x7f0000001200), 0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001340)={'hmac(streebog512)\x00'}})
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
syz_usb_connect$cdc_ncm(0x7, 0xd2, &(0x7f0000001680)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc0, 0x2, 0x1, 0x7f, 0x10, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "e82e68"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0xf474, 0xe, 0x3ff, 0x5}, {0x6, 0x24, 0x1a, 0x0, 0x20}, [@mbim_extended={0x8, 0x24, 0x1c, 0x59b0, 0xe, 0x8}, @network_terminal={0x7, 0x24, 0xa, 0xff, 0x9, 0x8, 0x5}, @mdlm_detail={0x1c, 0x24, 0x13, 0x6, "4a501bbf529c35344fa1b5321a7f2e773973be0f9fb2596e"}, @mdlm={0x15, 0x24, 0x12, 0x6}, @mbim={0xc, 0x24, 0x1b, 0x0, 0x7, 0x6, 0x3, 0x100, 0x8}, @mdlm={0x15, 0x24, 0x12, 0x200}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x19, 0x7, 0x81}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x65, 0x5, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x7, 0x8, 0x8}}}}}}}]}}, &(0x7f0000001780)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x0, 0x49, 0x9, 0xe7, 0x10}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0x3, [{0x30, &(0x7f0000000280)=@string={0x30, 0x3, "459e98bed5789ac37d252cc67edbbc23c749297a5e0df5ce4f39fda26762d06879ae2019216c6a052a370685f140"}}, {0x0, 0x0}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x43e}}]})
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r2 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x2, 0x5, 0x7, 0x3, 0x1, {0x400000080001, 0xff, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x6}}, {0x0, 0x13}}}, 0xa0)
sendfile(r2, r2, &(0x7f0000000080), 0x7f03)

177.960052ms ago: executing program 9 (id=4778):
r0 = socket$kcm(0xa, 0x1, 0x106)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
init_module(&(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c4602090704090000000000000001003e000900000083000000000000004000000000000000ba0300000000189be6550000030038000100010403000700000000600300000041f8000000000000fbffffffffffffff7f0000000000000008000000000000000300000000000000c504000000"], 0x78, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
syz_open_dev$video(0x0, 0x3ff, 0x2000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
kexec_load(0x1000d0ffc2, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, 0x0, 0x0)
r3 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01)
ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f00000000c0)={{}, 0xea, 0x0, 0x7})
ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r3])
fsopen(&(0x7f00000029c0)='cifs\x00', 0x0)
sendmsg$kcm(r0, 0x0, 0x20000011)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$kcm(r0, 0x0, 0xe07e872420dfefca)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24004000)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sm3)\x00'}, 0x58)

0s ago: executing program 8 (id=4779):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x12, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id='])
fspick(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file1\x00', 0x1)
getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f00000002c0))
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
socket$inet6(0xa, 0x802, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000012000000240000000800000085000000050000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r1}, 0x18)
prlimit64(0x0, 0xe, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, 0x0, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x63, &(0x7f0000000040)={'ipvs\x00'}, &(0x7f0000000000)=0x1e)
acct(&(0x7f0000000240)='./file0/file1\x00')
write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, 0x0, {0x7, 0x29, 0x80000, 0x104032, 0x2, 0x2, 0xfffffffd, 0xffffdffc, 0x0, 0x0, 0x0, 0x7ffbffff}}, 0x50)

kernel console output (not intermixed with test programs):

 ipg=32, mo=a842c018, mo2=0003]
[ 2046.750030][T21778] System zones: 0-5
[ 2046.885362][T21778] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2046.953140][T21766] loop9: detected capacity change from 0 to 40427
[ 2046.988139][T21766] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12
[ 2047.182645][T21787] syz.5.3448: attempt to access beyond end of device
[ 2047.182645][T21787] nbd5: rw=4096, sector=128, nr_sectors = 8 limit=0
[ 2047.196702][T21787] gfs2: error 10 reading superblock
[ 2047.406552][T21766] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[ 2047.457154][T21766] F2FS-fs (loop9): Failed to start F2FS issue_checkpoint_thread (-4)
[ 2047.667493][T21036] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2047.883498][T20570] Bluetooth: hci2: unexpected event for opcode 0x202d
[ 2057.706469][T20570] Bluetooth: hci3: unexpected event for opcode 0x202d
[ 2058.159940][T21862] program syz.5.3465 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2064.320302][T20570] Bluetooth: hci0: unexpected event for opcode 0x202d
[ 2065.157253][T21908] tmpfs: Bad value for 'nr_blocks'
[ 2065.297018][T21910] Invalid ELF section header size
[ 2068.062935][  T786] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[ 2068.252624][  T786] usb 4-1: Using ep0 maxpacket: 32
[ 2068.773586][  T786] usb 4-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[ 2068.811099][  T786] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2068.928858][T21932] loop5: detected capacity change from 0 to 512
[ 2069.030115][  T786] usb 4-1: Product: syz
[ 2069.063716][  T786] usb 4-1: config 0 descriptor??
[ 2069.070035][  T786] usb 4-1: can't set config #0, error -71
[ 2069.903277][  T786] usb 4-1: USB disconnect, device number 33
[ 2069.941727][T18836] udevd[18836]: setting mode of /dev/bus/usb/004/033 to 020664 failed: No such file or directory
[ 2069.998529][T21932] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 2070.052265][T18836] udevd[18836]: setting owner of /dev/bus/usb/004/033 to uid=0, gid=0 failed: No such file or directory
[ 2071.037186][T20676] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2072.355579][T21939] loop3: detected capacity change from 0 to 40427
[ 2072.439665][T21939] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[ 2072.662454][T21939] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[ 2072.748444][T21939] F2FS-fs (loop3): Found nat_bits in checkpoint
[ 2072.869784][T21939] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[ 2072.902660][T21939] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[ 2073.380930][T21964] kvm: pic: non byte write
[ 2074.500713][T21977] Invalid ELF section header size
[ 2076.036632][T21984] loop5: detected capacity change from 0 to 512
[ 2076.144066][T21984] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 2077.433634][T20676] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2081.132601][T20570] Bluetooth: hci0: command 0x0401 tx timeout
[ 2084.715793][T22047] fuse: Bad value for 'fd'
[ 2085.249809][T22052] tmpfs: Bad value for 'nr_blocks'
[ 2087.763580][T22074] tmpfs: Bad value for 'nr_blocks'
[ 2090.176366][T22070] loop5: detected capacity change from 0 to 40427
[ 2090.207425][T22070] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[ 2090.234107][T22070] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2090.294271][T22070] F2FS-fs (loop5): Found nat_bits in checkpoint
[ 2093.382634][T22124] tmpfs: Bad value for 'nr_blocks'
[ 2094.505445][T22121] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 2094.555471][T22121] tipc: Resetting bearer <eth:syzkaller0>
[ 2094.612953][T22119] tipc: Disabling bearer <eth:syzkaller0>
[ 2094.660921][T22132] tmpfs: Bad value for 'nr_blocks'
[ 2099.568575][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[ 2099.575018][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[ 2102.088040][T22187] loop9: detected capacity change from 0 to 4096
[ 2102.106160][T22187] EXT4-fs (loop9): Test dummy encryption mode enabled
[ 2102.132501][T22187] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[ 2102.156766][T22187] System zones: 0-5
[ 2102.173507][T22187] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2103.908734][T12902] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2105.993219][ T9492] Bluetooth: hci3: unexpected event for opcode 0x202d
[ 2110.819539][T20790] hid-generic 0101:0002:0002.0017: item fetching failed at offset 3/10
[ 2111.061543][T20790] hid-generic: probe of 0101:0002:0002.0017 failed with error -22
[ 2113.037894][   T28] audit: type=1800 audit(2000001770.510:730): pid=22274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3561" name="bus" dev="overlay" ino=2823 res=0 errno=0
[ 2115.724654][T22270] could not allocate digest TFM handle hmac(streebog512)
[ 2118.222660][  T786] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[ 2118.422658][  T786] usb 6-1: Using ep0 maxpacket: 16
[ 2118.439857][  T786] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2118.451088][  T786] usb 6-1: config 0 has no interfaces?
[ 2118.471968][  T786] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[ 2118.481255][  T786] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2118.537827][  T786] usb 6-1: Product: syz
[ 2118.542182][  T786] usb 6-1: Manufacturer: syz
[ 2118.557037][  T786] usb 6-1: SerialNumber: syz
[ 2118.610598][  T786] usb 6-1: config 0 descriptor??
[ 2119.966476][T22316] tmpfs: Bad value for 'nr_blocks'
[ 2120.241529][T22318] binder: 22312:22318 ioctl 40189206 200000000340 returned -22
[ 2120.325037][T20790] usb 6-1: USB disconnect, device number 21
[ 2120.926393][T22324] tmpfs: Bad value for 'nr_blocks'
[ 2121.088011][T22326] binder: 22323:22326 ioctl 40189206 200000000340 returned -22
[ 2122.219648][T20790] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[ 2122.508141][T17240] hid-generic 0101:0002:0002.0018: item fetching failed at offset 3/10
[ 2122.518513][T17240] hid-generic: probe of 0101:0002:0002.0018 failed with error -22
[ 2122.576895][T20790] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2122.639048][T20790] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2122.680534][T20790] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[ 2122.716745][T20790] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2122.764970][T20790] usb 6-1: config 0 descriptor??
[ 2123.633269][T22344] tmpfs: Bad value for 'nr_blocks'
[ 2123.973417][T20790] usbhid 6-1:0.0: can't add hid device: -32
[ 2124.222713][T20790] usbhid: probe of 6-1:0.0 failed with error -32
[ 2124.250574][T20790] usb 6-1: USB disconnect, device number 22
[ 2125.282153][T22338] loop8: detected capacity change from 0 to 40427
[ 2125.339993][T22338] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12
[ 2125.352963][T22338] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[ 2125.440659][T22338] F2FS-fs (loop8): Found nat_bits in checkpoint
[ 2125.711019][T22338] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0
[ 2125.718397][T22338] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[ 2126.821076][T22378] Invalid ELF section header size
[ 2127.497368][T22375] program syz.3.3589 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2128.377592][T22391] tmpfs: Bad value for 'nr_blocks'
[ 2129.874232][T22399] binder: 22397:22399 ioctl c0306201 0 returned -14
[ 2130.215428][T22385] loop9: detected capacity change from 0 to 40427
[ 2130.240171][T22385] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12
[ 2130.292734][T22385] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[ 2130.342311][T22385] F2FS-fs (loop9): Found nat_bits in checkpoint
[ 2130.514173][T22385] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[ 2130.546806][T22385] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[ 2130.620130][T22406] loop5: detected capacity change from 0 to 4096
[ 2130.677946][T22406] EXT4-fs (loop5): Test dummy encryption mode enabled
[ 2130.876547][T22406] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[ 2130.938696][T22406] System zones: 0-5
[ 2132.862771][ T9492] Bluetooth: hci0: command 0x0401 tx timeout
[ 2132.934249][T22406] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2135.005390][T20676] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2136.453100][T22448] tmpfs: Bad value for 'nr_blocks'
[ 2136.502310][T22449] Invalid ELF section header size
[ 2137.645127][T22449] program syz.5.3603 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2139.735984][T22472] loop3: detected capacity change from 0 to 512
[ 2139.933935][T22472] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 2140.006349][T22469] loop8: detected capacity change from 0 to 4096
[ 2140.218051][T22469] EXT4-fs (loop8): Test dummy encryption mode enabled
[ 2141.186420][T22469] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[ 2141.204752][T17097] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2141.299777][T22469] System zones: 0-5
[ 2141.309094][T22469] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2143.679396][T21036] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2148.931328][T22541] tmpfs: Bad value for 'nr_blocks'
[ 2151.599152][T22561] tmpfs: Bad value for 'nr_blocks'
[ 2154.297681][T20790] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[ 2154.502489][T20790] usb 4-1: Using ep0 maxpacket: 16
[ 2155.048140][T20790] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2155.087968][T20790] usb 4-1: config 0 has no interfaces?
[ 2155.135650][T20790] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[ 2155.247039][T20790] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2155.364177][T20790] usb 4-1: Product: syz
[ 2155.368424][T20790] usb 4-1: Manufacturer: syz
[ 2155.373614][T20790] usb 4-1: SerialNumber: syz
[ 2155.383543][T20790] usb 4-1: config 0 descriptor??
[ 2155.685550][T20790] usb 4-1: USB disconnect, device number 34
[ 2158.732741][T22622] tmpfs: Bad value for 'nr_blocks'
[ 2160.015803][T22625] binder: 22620:22625 ioctl 40189206 200000000340 returned -22
[ 2160.948205][T20526] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[ 2160.978195][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[ 2160.984884][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[ 2161.175817][T20526] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2161.198824][T20526] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2161.210448][T20526] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[ 2161.257766][T20526] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2161.418978][T20526] usb 6-1: config 0 descriptor??
[ 2162.436410][T20526] usbhid 6-1:0.0: can't add hid device: -32
[ 2162.443592][T20526] usbhid: probe of 6-1:0.0 failed with error -32
[ 2162.654868][T20790] usb 6-1: USB disconnect, device number 23
[ 2163.683049][T20526] usb 10-1: new high-speed USB device number 20 using dummy_hcd
[ 2163.992780][T20526] usb 10-1: Using ep0 maxpacket: 16
[ 2164.102491][T20526] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2164.113936][T20526] usb 10-1: config 0 has no interfaces?
[ 2164.158424][T20526] usb 10-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[ 2164.168883][T20526] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2164.177661][T20526] usb 10-1: Product: syz
[ 2164.187457][T20526] usb 10-1: Manufacturer: syz
[ 2164.194748][T20526] usb 10-1: SerialNumber: syz
[ 2164.226208][T20526] usb 10-1: config 0 descriptor??
[ 2165.046179][T20526] usb 10-1: USB disconnect, device number 20
[ 2165.501757][T22661] syz.5.3655: attempt to access beyond end of device
[ 2165.501757][T22661] nbd5: rw=4096, sector=128, nr_sectors = 8 limit=0
[ 2165.663309][T22661] gfs2: error 10 reading superblock
[ 2166.482980][T22671] tmpfs: Bad value for 'nr_blocks'
[ 2168.715345][T22698] tmpfs: Bad value for 'nr_blocks'
[ 2169.093578][T22700] binder: 22692:22700 ioctl 40189206 200000000340 returned -22
[ 2171.528394][T22731] loop8: detected capacity change from 0 to 512
[ 2171.563682][T22731] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 2172.666122][T22715] loop3: detected capacity change from 0 to 40427
[ 2172.712714][T22715] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[ 2172.728708][T21036] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2172.747061][T22715] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[ 2172.818503][T22715] F2FS-fs (loop3): Failed to start F2FS issue_checkpoint_thread (-4)
[ 2173.001708][T22739] Invalid ELF section header size
[ 2174.463651][T20570] Bluetooth: hci2: unexpected event for opcode 0x202d
[ 2176.689255][T22768] loop8: detected capacity change from 0 to 512
[ 2177.154035][T22768] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 2178.815153][T21036] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2179.398205][T22784] Invalid ELF section header size
[ 2180.976183][T22791] Can't find ip_set type hash:net,
[ 2188.705835][T22853] loop3: detected capacity change from 0 to 4096
[ 2188.772696][T22853] EXT4-fs (loop3): Test dummy encryption mode enabled
[ 2188.814197][T20570] Bluetooth: hci4: unexpected event for opcode 0x202d
[ 2188.884464][T22853] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[ 2189.236901][T22853] System zones: 0-5
[ 2189.404910][T22853] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2190.227843][T17097] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2190.961222][T22875] loop3: detected capacity change from 0 to 512
[ 2191.033024][T22875] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 2191.152431][T21644] usb 10-1: new full-speed USB device number 21 using dummy_hcd
[ 2192.163698][T21644] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 2192.173346][T21644] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2192.186066][T21644] usb 10-1: Product: syz
[ 2192.191541][T21644] usb 10-1: Manufacturer: syz
[ 2192.197180][T21644] usb 10-1: SerialNumber: syz
[ 2192.217964][T21644] usb 10-1: config 0 descriptor??
[ 2192.470354][T21644] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 2193.017221][T17097] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2194.824709][T21644] dvb_usb_rtl28xxu: probe of 10-1:0.0 failed with error -110
[ 2195.231227][T22889] loop5: detected capacity change from 0 to 40427
[ 2195.262459][T22889] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[ 2195.270955][T22889] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2195.289500][T20790] usb 10-1: USB disconnect, device number 21
[ 2195.360237][T22889] F2FS-fs (loop5): Found nat_bits in checkpoint
[ 2195.432924][T20570] Bluetooth: hci3: unexpected event for opcode 0x202d
[ 2196.069499][T22889] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[ 2196.080473][T22889] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[ 2196.659581][ T2178] usb 10-1: new full-speed USB device number 22 using dummy_hcd
[ 2196.958432][ T2178] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 2197.050040][ T2178] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2197.081587][ T2178] usb 10-1: Product: syz
[ 2197.092500][ T2178] usb 10-1: Manufacturer: syz
[ 2197.097269][ T2178] usb 10-1: SerialNumber: syz
[ 2197.133689][ T2178] usb 10-1: config 0 descriptor??
[ 2197.359248][ T2178] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 2199.082446][ T2178] dvb_usb_rtl28xxu: probe of 10-1:0.0 failed with error -71
[ 2199.105660][ T2178] usb 10-1: USB disconnect, device number 22
[ 2199.202436][T20526] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[ 2199.403886][T20526] usb 6-1: Using ep0 maxpacket: 16
[ 2199.416376][T22936] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3713'.
[ 2199.428190][T20526] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2199.454847][T20526] usb 6-1: config 0 has no interfaces?
[ 2199.478660][T20526] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[ 2199.493432][T20526] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2199.501685][T20526] usb 6-1: Product: syz
[ 2199.512653][T20526] usb 6-1: Manufacturer: syz
[ 2199.587369][T20526] usb 6-1: SerialNumber: syz
[ 2199.804694][T20526] usb 6-1: config 0 descriptor??
[ 2200.185564][T11470] usb 6-1: USB disconnect, device number 24
[ 2204.892477][T22957] loop8: detected capacity change from 0 to 40427
[ 2204.902628][T22974] tmpfs: Bad value for 'nr_blocks'
[ 2204.909136][T22957] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12
[ 2204.920542][T22957] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[ 2205.533260][T22957] F2FS-fs (loop8): Failed to start F2FS issue_checkpoint_thread (-4)
[ 2205.989770][T22984] program syz.8.3726 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2206.409295][   T28] audit: type=1800 audit(2000001864.260:731): pid=22987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3725" name="bus" dev="overlay" ino=3038 res=0 errno=0
[ 2209.242448][T20570] Bluetooth: hci0: command 0x0401 tx timeout
[ 2209.330876][T22985] could not allocate digest TFM handle hmac(streebog512)
[ 2209.772948][T23000] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3727'.
[ 2209.782371][T23000] netlink: set zone limit has 8 unknown bytes
[ 2209.880442][T23000] syz.5.3727 (23000): drop_caches: 2
[ 2212.876492][T23030] tmpfs: Bad value for 'nr_blocks'
[ 2213.479321][T23032] binder: 23029:23032 ioctl 40189206 200000000340 returned -22
[ 2213.672205][T23023] loop9: detected capacity change from 0 to 40427
[ 2213.684616][T23023] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12
[ 2213.694983][T23023] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[ 2213.711587][T23023] F2FS-fs (loop9): Found nat_bits in checkpoint
[ 2213.945920][T23023] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[ 2213.971353][T23023] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[ 2216.385240][T23059] Invalid ELF header magic: != ELF
[ 2216.558395][T23060] program syz.5.3743 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2217.003728][T23055] program syz.3.3742 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2217.134670][T20570] Bluetooth: hci0: command 0x0401 tx timeout
[ 2217.636418][T20570] Bluetooth: hci2: unexpected event for opcode 0x202d
[ 2222.432810][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[ 2222.439146][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[ 2225.278221][T23126] Invalid ELF header magic: != ELF
[ 2225.983379][T23126] program syz.3.3759 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2226.065662][T23114] loop5: detected capacity change from 0 to 40427
[ 2226.078681][T23114] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[ 2226.105699][T23114] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2226.179043][T23114] F2FS-fs (loop5): Found nat_bits in checkpoint
[ 2229.613147][T20570] Bluetooth: hci0: command 0x0401 tx timeout
[ 2230.818877][T20570] Bluetooth: hci3: unexpected event for opcode 0x202d
[ 2235.127400][T23217] Invalid ELF header magic: != ELF
[ 2235.528449][T23220] program syz.5.3777 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2235.810196][T23222] tmpfs: Bad value for 'nr_blocks'
[ 2236.926905][T23227] binder: 23221:23227 ioctl 40189206 200000000340 returned -22
[ 2237.141025][T20570] Bluetooth: hci3: unexpected event for opcode 0x202d
[ 2238.441748][   T28] audit: type=1800 audit(2000001896.270:732): pid=23245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3783" name="bus" dev="overlay" ino=741 res=0 errno=0
[ 2241.563344][T23250] Invalid ELF section header size
[ 2241.776537][T23252] program syz.9.3785 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2242.604225][T20790] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[ 2243.903368][T20790] usb 6-1: Using ep0 maxpacket: 32
[ 2244.126771][T20790] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2244.140015][T20790] usb 6-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[ 2244.149456][T20790] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2244.164936][T20790] usb 6-1: Product: syz
[ 2244.233998][T23277] Invalid ELF section header size
[ 2244.242603][T20790] usb 6-1: Manufacturer: syz
[ 2244.259019][T20790] usb 6-1: SerialNumber: syz
[ 2244.271168][T20790] usb 6-1: config 0 descriptor??
[ 2245.782940][   T23] usb 6-1: USB disconnect, device number 25
[ 2247.079268][   T28] audit: type=1800 audit(2000001904.930:733): pid=23302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3798" name="bus" dev="overlay" ino=692 res=0 errno=0
[ 2249.882037][T23321] Invalid ELF section header size
[ 2250.251687][T23323] program syz.8.3803 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2251.305481][T20570] Bluetooth: hci0: unexpected event for opcode 0x202d
[ 2254.752138][T23343] kvm: pic: non byte write
[ 2255.127849][   T28] audit: type=1800 audit(2000001912.980:734): pid=23356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3810" name="bus" dev="overlay" ino=785 res=0 errno=0
[ 2259.203313][   T28] audit: type=1800 audit(2000001917.010:735): pid=23370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3812" name="bus" dev="overlay" ino=1856 res=0 errno=0
[ 2265.651260][   T28] audit: type=1800 audit(2000001920.970:736): pid=23377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3815" name="bus" dev="overlay" ino=718 res=0 errno=0
[ 2266.732109][T23395] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3818'.
[ 2266.785421][T23395] netlink: set zone limit has 8 unknown bytes
[ 2267.142638][T20790] usb 10-1: new full-speed USB device number 23 using dummy_hcd
[ 2267.163958][T23395] syz.3.3818 (23395): drop_caches: 2
[ 2267.443671][T20790] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 2267.499643][T20790] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2267.556394][T20790] usb 10-1: Product: syz
[ 2267.716752][T20790] usb 10-1: Manufacturer: syz
[ 2267.736625][T20790] usb 10-1: SerialNumber: syz
[ 2267.782586][T20790] usb 10-1: config 0 descriptor??
[ 2268.034362][T20790] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 2269.212604][T11470] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[ 2269.402571][T11470] usb 4-1: Using ep0 maxpacket: 16
[ 2269.412170][T11470] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2269.425178][T11470] usb 4-1: config 0 has no interfaces?
[ 2269.434375][T11470] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[ 2269.443606][T11470] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2269.451738][T11470] usb 4-1: Product: syz
[ 2269.456507][T11470] usb 4-1: Manufacturer: syz
[ 2269.461187][T11470] usb 4-1: SerialNumber: syz
[ 2269.468956][T11470] usb 4-1: config 0 descriptor??
[ 2269.719952][T20790] dvb_usb_rtl28xxu: probe of 10-1:0.0 failed with error -71
[ 2269.754301][T20790] usb 10-1: USB disconnect, device number 23
[ 2269.768914][   T23] usb 4-1: USB disconnect, device number 35
[ 2271.594070][   T28] audit: type=1800 audit(2000001929.430:737): pid=23432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3827" name="bus" dev="overlay" ino=3159 res=0 errno=0
[ 2275.281639][T23448] tmpfs: Bad value for 'nr_blocks'
[ 2275.729059][T23449] binder: 23443:23449 ioctl 40189206 200000000340 returned -22
[ 2277.552364][  T786] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[ 2277.777376][T23469] Invalid ELF section header size
[ 2277.782730][  T786] usb 4-1: Using ep0 maxpacket: 16
[ 2277.828643][  T786] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2277.885676][  T786] usb 4-1: config 0 has no interfaces?
[ 2277.937050][  T786] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[ 2277.956278][  T786] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2277.968381][  T786] usb 4-1: Product: syz
[ 2277.975290][  T786] usb 4-1: Manufacturer: syz
[ 2277.980051][  T786] usb 4-1: SerialNumber: syz
[ 2278.018121][  T786] usb 4-1: config 0 descriptor??
[ 2278.109688][T23470] program syz.9.3837 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2278.257219][T20570] Bluetooth: hci0: command 0x0401 tx timeout
[ 2278.536714][  T786] usb 4-1: USB disconnect, device number 36
[ 2278.791519][T20570] Bluetooth: hci2: unexpected event for opcode 0x202d
[ 2279.090217][T23477] Invalid ELF section header size
[ 2279.337465][T23478] program syz.8.3839 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2280.811914][T20526] usb 10-1: new high-speed USB device number 24 using dummy_hcd
[ 2281.022529][T20526] usb 10-1: Using ep0 maxpacket: 32
[ 2281.161302][T20526] usb 10-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[ 2281.179105][T20526] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2281.217865][T20526] usb 10-1: Product: syz
[ 2281.235559][T20526] usb 10-1: Manufacturer: syz
[ 2281.242761][T20526] usb 10-1: SerialNumber: syz
[ 2281.373618][T20526] usb 10-1: config 0 descriptor??
[ 2281.439591][T20526] gspca_main: gspca_topro-2.14.0 probing 06a2:0003
[ 2281.964361][T20526] gspca_topro: reg_w err -110
[ 2282.002450][T20526] gspca_topro: Sensor soi763a
[ 2282.312639][T20570] Bluetooth: hci3: unexpected event for opcode 0x202d
[ 2283.078471][  T786] usb 10-1: USB disconnect, device number 24
[ 2283.612716][T20570] Bluetooth: hci0: command 0x0401 tx timeout
[ 2283.885834][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[ 2283.892529][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[ 2286.072407][T11471] usb 9-1: new full-speed USB device number 4 using dummy_hcd
[ 2286.279166][T11471] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 2286.301474][T11471] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2286.331584][T11471] usb 9-1: Product: syz
[ 2286.354370][T11471] usb 9-1: Manufacturer: syz
[ 2286.359430][T11471] usb 9-1: SerialNumber: syz
[ 2286.377674][T11471] usb 9-1: config 0 descriptor??
[ 2286.537669][T23536] tmpfs: Bad value for 'nr_blocks'
[ 2286.804812][T11471] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 2288.214673][T23536] binder: 23535:23536 ioctl 40189206 200000000340 returned -22
[ 2289.418663][T11471] dvb_usb_rtl28xxu: probe of 9-1:0.0 failed with error -71
[ 2289.453911][T11471] usb 9-1: USB disconnect, device number 4
[ 2291.542874][T20570] Bluetooth: hci0: command 0x0401 tx timeout
[ 2297.193386][   T28] audit: type=1800 audit(2000001955.050:738): pid=23614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3869" name="bus" dev="overlay" ino=3228 res=0 errno=0
[ 2300.129034][T20570] Bluetooth: hci2: unexpected event for opcode 0x202d
[ 2303.650200][T20570] Bluetooth: hci3: unexpected event for opcode 0x202d
[ 2303.862036][T23645] Invalid ELF section header size
[ 2306.147572][T20570] Bluetooth: hci3: unexpected event for opcode 0x202d
[ 2307.163528][T23669] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3881'.
[ 2308.763496][T23672] Invalid ELF section header size
[ 2309.214372][T23673] program syz.5.3883 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2310.455524][T23682] Invalid ELF section header size
[ 2311.130406][T23686] loop3: detected capacity change from 0 to 4096
[ 2311.194950][T20570] Bluetooth: hci4: unexpected event for opcode 0x202d
[ 2311.845051][T23686] EXT4-fs (loop3): Test dummy encryption mode enabled
[ 2311.886431][T23686] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[ 2311.967084][T23686] System zones: 0-5
[ 2312.234371][T23686] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2313.349283][T17097] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2316.146426][T23735] Invalid ELF section header size
[ 2317.426991][T20570] Bluetooth: hci4: unexpected event for opcode 0x202d
[ 2318.661869][T23748] loop8: detected capacity change from 0 to 4096
[ 2318.700197][T23748] EXT4-fs (loop8): Test dummy encryption mode enabled
[ 2318.836486][   T28] audit: type=1800 audit(2000001976.650:739): pid=23756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3903" name="bus" dev="overlay" ino=3271 res=0 errno=0
[ 2318.948027][T23748] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[ 2318.981537][T23748] System zones: 0-5
[ 2319.177880][T23748] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2322.622025][T21036] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2322.768609][T23768] Invalid ELF section header size
[ 2323.504462][   T28] audit: type=1800 audit(2000001981.360:740): pid=23775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3906" name="bus" dev="overlay" ino=1999 res=0 errno=0
[ 2329.427300][T23803] loop5: detected capacity change from 0 to 4096
[ 2329.472862][T23803] EXT4-fs (loop5): Test dummy encryption mode enabled
[ 2329.565118][T23803] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[ 2329.582534][T23803] System zones: 0-5
[ 2329.608297][T23803] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2332.864958][T20676] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2333.129141][T23828] Invalid ELF section header size
[ 2334.292953][T20570] Bluetooth: hci3: unexpected event for opcode 0x202d
[ 2336.052414][T20526] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[ 2336.252404][T20526] usb 6-1: Using ep0 maxpacket: 16
[ 2336.319420][T20526] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2336.402381][T20526] usb 6-1: config 0 has no interfaces?
[ 2336.425644][T20526] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[ 2336.491817][T20526] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2336.563390][T20526] usb 6-1: Product: syz
[ 2336.568210][T20526] usb 6-1: Manufacturer: syz
[ 2336.592362][T20526] usb 6-1: SerialNumber: syz
[ 2336.802441][T20526] usb 6-1: config 0 descriptor??
[ 2338.139966][T20526] usb 6-1: USB disconnect, device number 26
[ 2338.203442][T20570] Bluetooth: hci0: unexpected event for opcode 0x202d
[ 2338.860432][T23868] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3928'.
[ 2340.052375][T20790] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[ 2340.372616][T20790] usb 4-1: Using ep0 maxpacket: 16
[ 2340.383164][T20790] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2340.399790][T20790] usb 4-1: config 0 has no interfaces?
[ 2340.474664][T20790] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[ 2340.490069][T20790] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2340.498574][T20790] usb 4-1: Product: syz
[ 2340.522443][T20790] usb 4-1: Manufacturer: syz
[ 2340.527152][T20790] usb 4-1: SerialNumber: syz
[ 2340.535265][T20790] usb 4-1: config 0 descriptor??
[ 2341.490466][T20790] usb 4-1: USB disconnect, device number 37
[ 2341.599035][T23891] Invalid ELF section header size
[ 2342.228213][T23900] Invalid ELF section header size
[ 2342.343321][T23901] program syz.3.3935 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2344.665074][T20570] Bluetooth: hci4: unexpected event for opcode 0x202d
[ 2345.299974][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[ 2345.312626][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[ 2345.422423][T11471] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[ 2345.622446][T11471] usb 4-1: Using ep0 maxpacket: 8
[ 2345.629849][T11471] usb 4-1: config 8 has 0 interfaces, different from the descriptor's value: 1
[ 2345.674443][T11471] usb 4-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice=5f.1d
[ 2345.726058][T11471] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2345.766753][T11471] usb 4-1: Product: syz
[ 2345.785287][T11471] usb 4-1: Manufacturer: syz
[ 2345.803966][T11471] usb 4-1: SerialNumber: syz
[ 2345.920289][T23921] loop8: detected capacity change from 0 to 4096
[ 2345.970613][T23921] EXT4-fs (loop8): Test dummy encryption mode enabled
[ 2346.035819][T23921] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[ 2346.063153][T23921] System zones: 0-5
[ 2346.084562][T23921] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2350.143115][T11471] usb 4-1: USB disconnect, device number 38
[ 2350.271111][T21036] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2350.369009][ T9492] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 2350.387633][ T9492] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 2350.398168][ T9492] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 2350.409890][ T9492] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 2350.420059][ T9492] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 2350.428039][ T9492] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 2350.452418][   T23] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[ 2350.606033][T12259] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2350.745312][   T23] usb 6-1: Using ep0 maxpacket: 16
[ 2350.754446][   T23] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2350.771097][T12259] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2350.781679][   T23] usb 6-1: config 0 has no interfaces?
[ 2350.792545][T11471] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[ 2350.793647][   T23] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[ 2350.835161][   T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2350.843615][   T23] usb 6-1: Product: syz
[ 2350.847972][   T23] usb 6-1: Manufacturer: syz
[ 2350.853853][   T23] usb 6-1: SerialNumber: syz
[ 2350.861129][   T23] usb 6-1: config 0 descriptor??
[ 2350.912203][T12259] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2351.004604][T11471] usb 4-1: Using ep0 maxpacket: 8
[ 2351.011665][T11471] usb 4-1: config 8 has 0 interfaces, different from the descriptor's value: 1
[ 2351.021307][T12259] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2351.043761][T11471] usb 4-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice=5f.1d
[ 2351.053749][T11471] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2351.062739][T11471] usb 4-1: Product: syz
[ 2351.069021][T11471] usb 4-1: Manufacturer: syz
[ 2351.075429][T11471] usb 4-1: SerialNumber: syz
[ 2351.143742][T20790] usb 6-1: USB disconnect, device number 27
[ 2351.209629][T23929] chnl_net:caif_netlink_parms(): no params data found
[ 2352.492549][ T9492] Bluetooth: hci1: command tx timeout
[ 2354.572446][ T9492] Bluetooth: hci1: command tx timeout
[ 2354.714339][T23947] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3947'.
[ 2355.587267][T11471] usb 4-1: USB disconnect, device number 39
[ 2355.824638][   T28] audit: type=1800 audit(2000002013.680:741): pid=23955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3949" name="bus" dev="overlay" ino=989 res=0 errno=0
[ 2356.510392][T12259] tipc: Left network mode
[ 2356.711467][ T9492] Bluetooth: hci1: command tx timeout
[ 2357.012591][T23929] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2357.056020][T23929] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2357.254226][T23929] bridge_slave_0: entered allmulticast mode
[ 2357.477745][T23929] bridge_slave_0: entered promiscuous mode
[ 2357.492805][T23929] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2357.500450][T23929] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2357.517664][T23929] bridge_slave_1: entered allmulticast mode
[ 2357.540213][T23929] bridge_slave_1: entered promiscuous mode
[ 2357.924445][T23965] Cannot find add_set index 0 as target
[ 2358.940055][ T9492] Bluetooth: hci1: command tx timeout
[ 2359.628029][T23929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2359.657326][T23929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2360.927560][T23929] team0: Port device team_slave_0 added
[ 2361.073093][   T28] audit: type=1800 audit(2000002018.930:742): pid=23979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3955" name="bus" dev="overlay" ino=920 res=0 errno=0
[ 2363.665960][T23929] team0: Port device team_slave_1 added
[ 2364.005116][   T28] audit: type=1800 audit(2000002021.860:743): pid=23986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3956" name="bus" dev="overlay" ino=1008 res=0 errno=0
[ 2366.641199][T23929] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2366.657189][T23929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2366.782360][T23929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2366.858586][T23929] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2366.880763][T23929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2366.914869][T23929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2368.262732][T23929] hsr_slave_0: entered promiscuous mode
[ 2368.276122][T24012] Cannot find add_set index 0 as target
[ 2369.018657][T23929] hsr_slave_1: entered promiscuous mode
[ 2369.452439][T23929] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2369.463269][T23929] Cannot create hsr debugfs directory
[ 2370.632313][T11471] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[ 2370.852460][T11471] usb 4-1: Using ep0 maxpacket: 8
[ 2370.866388][T11471] usb 4-1: config 8 has 0 interfaces, different from the descriptor's value: 1
[ 2370.893611][T11471] usb 4-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice=5f.1d
[ 2370.907994][T11471] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2370.918530][T11471] usb 4-1: Product: syz
[ 2370.931158][T11471] usb 4-1: Manufacturer: syz
[ 2370.936261][T11471] usb 4-1: SerialNumber: syz
[ 2371.292413][ T1184] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[ 2371.863677][T12259] hsr_slave_0: left promiscuous mode
[ 2371.981648][T12259] hsr_slave_1: left promiscuous mode
[ 2372.100290][T12259] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2372.181568][T12259] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2372.262083][T12259] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2372.366342][T12259] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2372.492590][T12259] bridge_slave_1: left allmulticast mode
[ 2372.569818][T12259] bridge_slave_1: left promiscuous mode
[ 2372.630671][T12259] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2372.723669][T12259] bridge_slave_0: left allmulticast mode
[ 2372.788395][T12259] bridge_slave_0: left promiscuous mode
[ 2372.835605][T12259] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2373.173644][ T1184] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2373.188363][ T1184] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2373.188424][ T9492] Bluetooth: hci0: unexpected event for opcode 0x202d
[ 2373.198383][ T1184] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[ 2373.215555][ T1184] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2373.230985][ T1184] usb 6-1: config 0 descriptor??
[ 2373.248447][T12259] veth1_macvtap: left promiscuous mode
[ 2373.402457][T12259] veth0_macvtap: left promiscuous mode
[ 2373.408393][T12259] veth1_vlan: left promiscuous mode
[ 2373.414238][T12259] veth0_vlan: left promiscuous mode
[ 2373.869082][ T1184] cp2112 0003:10C4:EA90.0019: unknown main item tag 0x0
[ 2373.881075][T11471] usb 4-1: USB disconnect, device number 40
[ 2373.912971][ T1184] cp2112 0003:10C4:EA90.0019: unknown main item tag 0x0
[ 2373.947053][ T1184] cp2112 0003:10C4:EA90.0019: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0
[ 2374.872976][ T1184] cp2112 0003:10C4:EA90.0019: Part Number: 0x82 Device Version: 0xFE
[ 2374.995137][ T1184] cp2112 0003:10C4:EA90.0019: error requesting SMBus config
[ 2375.034743][ T1184] cp2112: probe of 0003:10C4:EA90.0019 failed with error -32
[ 2376.136321][ T5855] usb 6-1: USB disconnect, device number 28
[ 2378.187761][T24078] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3973'.
[ 2380.713293][T24081] loop8: detected capacity change from 0 to 40427
[ 2380.736067][T24081] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12
[ 2380.846031][T24081] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[ 2380.958794][T24081] F2FS-fs (loop8): Found nat_bits in checkpoint
[ 2381.204784][T24081] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0
[ 2381.212087][T24081] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[ 2382.158379][T12259] team0 (unregistering): Port device team_slave_1 removed
[ 2382.366445][T12259] team0 (unregistering): Port device team_slave_0 removed
[ 2382.489342][T12259] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2382.628939][T12259] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2384.309816][T12259] bond0 (unregistering): Released all slaves
[ 2386.946184][T24136] Cannot find add_set index 0 as target
[ 2388.339878][T24146] kvm: pic: non byte write
[ 2388.553466][T11471] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[ 2388.596413][T23929] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 2388.632901][T23929] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 2388.655072][T23929] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 2388.677265][T23929] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 2389.532479][T11471] usb 6-1: Using ep0 maxpacket: 16
[ 2389.541931][T11471] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2389.584467][T23929] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2389.629646][T23929] 8021q: adding VLAN 0 to HW filter on device team0
[ 2389.648852][T12255] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2389.656129][T12255] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2389.678409][T11471] usb 6-1: config 0 has no interfaces?
[ 2389.703147][T11471] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[ 2389.714722][T11471] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2389.729006][T11471] usb 6-1: Product: syz
[ 2389.739810][T11471] usb 6-1: Manufacturer: syz
[ 2389.744740][T11471] usb 6-1: SerialNumber: syz
[ 2389.751931][T11471] usb 6-1: config 0 descriptor??
[ 2389.755003][ T5997] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2389.764153][ T5997] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2391.502982][T11471] usb 6-1: USB disconnect, device number 29
[ 2393.213526][   T28] audit: type=1800 audit(2000002051.070:744): pid=24204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3993" name="bus" dev="overlay" ino=1092 res=0 errno=0
[ 2396.303275][T23929] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2396.445273][T24219] Invalid ELF section header size
[ 2400.546802][T23929] veth0_vlan: entered promiscuous mode
[ 2400.639873][T23929] veth1_vlan: entered promiscuous mode
[ 2401.500590][T23929] veth0_macvtap: entered promiscuous mode
[ 2401.618581][T23929] veth1_macvtap: entered promiscuous mode
[ 2401.875120][T11471] hid-generic 0101:0002:0002.001A: item fetching failed at offset 3/8
[ 2402.121455][T11471] hid-generic: probe of 0101:0002:0002.001A failed with error -22
[ 2402.210618][T23929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2402.473077][T24260] Cannot find add_set index 0 as target
[ 2403.238490][T23929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2403.274760][T23929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2403.300223][T23929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2403.311665][T23929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2403.322592][T23929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2403.334910][T23929] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2403.466074][T23929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2403.491473][T23929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2403.552316][T23929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2403.613552][T23929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2403.642675][T23929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2403.674208][T23929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2403.698416][T24268] Invalid ELF section header size
[ 2403.702175][T23929] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2404.957646][T23929] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2405.146010][T23929] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2405.225482][T23929] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2405.281872][T23929] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2406.769482][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[ 2406.779507][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[ 2406.992332][ T2178] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[ 2407.353064][ T2178] usb 6-1: Using ep0 maxpacket: 32
[ 2407.365128][ T2178] usb 6-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[ 2407.384520][ T2178] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2407.457067][ T2178] usb 6-1: Product: syz
[ 2407.461446][ T2178] usb 6-1: Manufacturer: syz
[ 2407.470225][ T2178] usb 6-1: SerialNumber: syz
[ 2407.494815][ T2178] usb 6-1: config 0 descriptor??
[ 2407.578673][ T2178] gspca_main: gspca_topro-2.14.0 probing 06a2:0003
[ 2408.267615][T20570] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 2408.311520][T20570] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 2408.327952][T20570] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 2408.336032][T12252] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2408.366153][T20570] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 2408.398395][T20570] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 2408.410799][T20570] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 2408.539897][T12252] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2408.602394][ T5855] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[ 2408.671549][T12252] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2408.802530][ T5855] usb 4-1: Using ep0 maxpacket: 8
[ 2408.813209][ T5855] usb 4-1: config 8 has 0 interfaces, different from the descriptor's value: 1
[ 2408.825595][T12252] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2408.836356][ T5855] usb 4-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice=5f.1d
[ 2408.856093][ T5855] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2408.876319][ T5855] usb 4-1: Product: syz
[ 2408.888058][ T5855] usb 4-1: Manufacturer: syz
[ 2408.906165][ T5855] usb 4-1: SerialNumber: syz
[ 2409.106472][ T2178] gspca_topro: Sensor soi763a
[ 2410.044012][T21644] usb 6-1: USB disconnect, device number 30
[ 2410.492524][ T9492] Bluetooth: hci1: command tx timeout
[ 2411.578512][ T5855] usb 4-1: USB disconnect, device number 41
[ 2412.479166][T24346] Cannot find add_set index 0 as target
[ 2412.595224][ T9492] Bluetooth: hci1: command tx timeout
[ 2412.715981][T24307] chnl_net:caif_netlink_parms(): no params data found
[ 2414.043117][T24334] loop5: detected capacity change from 0 to 40427
[ 2414.066779][T24334] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[ 2414.087473][T24334] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2414.119226][T24334] F2FS-fs (loop5): Found nat_bits in checkpoint
[ 2414.300213][T24307] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2414.337674][T24307] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2414.349175][T24307] bridge_slave_0: entered allmulticast mode
[ 2414.360047][T24307] bridge_slave_0: entered promiscuous mode
[ 2414.457889][T24334] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[ 2414.465950][T24307] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2414.487104][T24307] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2414.490057][T24334] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[ 2414.501628][T24307] bridge_slave_1: entered allmulticast mode
[ 2414.510421][T24307] bridge_slave_1: entered promiscuous mode
[ 2414.641478][T24307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2414.654653][T20570] Bluetooth: hci1: command tx timeout
[ 2414.739569][T24307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2414.796102][ T5855] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[ 2414.978247][ T5855] usb 9-1: Using ep0 maxpacket: 16
[ 2415.002896][ T5855] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2415.036781][ T5855] usb 9-1: config 0 has no interfaces?
[ 2415.051021][T24307] team0: Port device team_slave_0 added
[ 2415.078632][ T5855] usb 9-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[ 2415.094787][ T5855] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2415.112367][ T5855] usb 9-1: Product: syz
[ 2415.122831][ T5855] usb 9-1: Manufacturer: syz
[ 2415.135934][ T5855] usb 9-1: SerialNumber: syz
[ 2415.152439][T12252] hsr_slave_0: left promiscuous mode
[ 2415.166453][ T5855] usb 9-1: config 0 descriptor??
[ 2415.200334][T12252] hsr_slave_1: left promiscuous mode
[ 2415.315005][T12252] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2415.468730][T12252] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2416.732406][T20570] Bluetooth: hci1: command tx timeout
[ 2417.914204][T12252] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2417.926048][T12252] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2417.960175][T12252] bridge_slave_1: left allmulticast mode
[ 2417.968450][   T28] audit: type=1800 audit(2000002073.390:745): pid=24381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4021" name="bus" dev="overlay" ino=1158 res=0 errno=0
[ 2417.992462][T12252] bridge_slave_1: left promiscuous mode
[ 2418.011394][T12252] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2418.283273][T12252] bridge_slave_0: left allmulticast mode
[ 2418.317565][T20790] usb 9-1: USB disconnect, device number 5
[ 2418.320163][T12252] bridge_slave_0: left promiscuous mode
[ 2418.329609][T12252] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2418.486054][T24390] Invalid ELF section header size
[ 2418.578755][T12252] veth1_macvtap: left promiscuous mode
[ 2418.594043][T12252] veth0_macvtap: left promiscuous mode
[ 2418.621749][T12252] veth1_vlan: left promiscuous mode
[ 2418.628299][T12252] veth0_vlan: left promiscuous mode
[ 2419.448008][T24390] program syz.8.4022 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2419.992446][T17240] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[ 2420.207398][T17240] usb 9-1: Using ep0 maxpacket: 8
[ 2420.216893][T17240] usb 9-1: config 8 has 0 interfaces, different from the descriptor's value: 1
[ 2420.265829][T17240] usb 9-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice=5f.1d
[ 2420.279637][T17240] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2420.309184][T17240] usb 9-1: Product: syz
[ 2420.315427][T17240] usb 9-1: Manufacturer: syz
[ 2420.320072][T17240] usb 9-1: SerialNumber: syz
[ 2422.694299][T12252] team0 (unregistering): Port device team_slave_1 removed
[ 2423.345170][T12252] team0 (unregistering): Port device team_slave_0 removed
[ 2423.752366][T17240] usb 9-1: USB disconnect, device number 6
[ 2423.767358][T12252] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2424.142026][T12252] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2425.129005][T24426] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4028'.
[ 2425.153337][T24426] netlink: set zone limit has 8 unknown bytes
[ 2427.486715][T12252] bond0 (unregistering): Released all slaves
[ 2427.629366][T24307] team0: Port device team_slave_1 added
[ 2428.452524][T24307] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2428.464040][T24307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2428.543972][T24307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2428.592448][T24307] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2428.626912][T24307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2428.656407][T24307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2429.023983][T24307] hsr_slave_0: entered promiscuous mode
[ 2429.031222][T24307] hsr_slave_1: entered promiscuous mode
[ 2429.078357][T24307] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2429.104393][T24307] Cannot create hsr debugfs directory
[ 2431.147023][T24471] kvm: pic: non byte write
[ 2431.556679][T24307] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 2431.701863][T24307] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 2431.781645][T24307] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 2431.867769][T24307] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 2432.318868][T24307] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2432.397164][T24307] 8021q: adding VLAN 0 to HW filter on device team0
[ 2432.462040][ T8577] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2432.469344][ T8577] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2432.647902][T11771] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2432.655167][T11771] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2433.087355][T24481] loop3: detected capacity change from 0 to 40427
[ 2433.127167][T24481] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[ 2433.152374][T24481] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[ 2433.220106][T24481] F2FS-fs (loop3): Found nat_bits in checkpoint
[ 2433.568749][T24481] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[ 2433.615751][T24481] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[ 2433.681763][T24307] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2434.526509][T24537] overlayfs: failed to resolve './file2': -2
[ 2436.628477][T24307] veth0_vlan: entered promiscuous mode
[ 2436.679536][T24307] veth1_vlan: entered promiscuous mode
[ 2436.796730][T24307] veth0_macvtap: entered promiscuous mode
[ 2436.836429][T24307] veth1_macvtap: entered promiscuous mode
[ 2436.899286][T24307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2436.966162][T24307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2437.042378][T24307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2437.142515][T24307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2437.202280][T24307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2437.303762][T24307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2437.374693][T24307] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2437.552279][T24307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2437.654158][T24307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2437.674451][T24307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2437.685125][T24307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2437.702295][T24307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2437.713176][T24307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2437.724980][T24307] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2437.736722][T24307] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2437.745808][T24307] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2437.755236][T24307] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2437.764526][T24307] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2438.259567][T12252] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2438.298676][T12252] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2438.407746][ T8577] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2438.451203][ T8577] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2438.647020][T20570] Bluetooth: hci0: unexpected event for opcode 0x202d
[ 2439.757577][ T1184] usb 10-1: new high-speed USB device number 25 using dummy_hcd
[ 2440.012826][ T1184] usb 10-1: Using ep0 maxpacket: 16
[ 2440.023126][ T1184] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2440.042298][ T1184] usb 10-1: config 0 has no interfaces?
[ 2440.062855][ T1184] usb 10-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[ 2440.091613][ T1184] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2440.111911][ T1184] usb 10-1: Product: syz
[ 2440.153016][ T1184] usb 10-1: Manufacturer: syz
[ 2440.172773][ T1184] usb 10-1: SerialNumber: syz
[ 2440.217931][ T1184] usb 10-1: config 0 descriptor??
[ 2440.537879][ T1184] usb 10-1: USB disconnect, device number 25
[ 2441.683328][T17240] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[ 2442.095831][T17240] usb 6-1: Using ep0 maxpacket: 16
[ 2442.106163][T17240] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2442.132316][T17240] usb 6-1: config 0 has no interfaces?
[ 2442.140912][T17240] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[ 2442.165966][T24636] loop3: detected capacity change from 0 to 4096
[ 2442.181290][T17240] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2442.206906][T24636] EXT4-fs (loop3): Test dummy encryption mode enabled
[ 2442.216102][T17240] usb 6-1: Product: syz
[ 2442.220353][T17240] usb 6-1: Manufacturer: syz
[ 2442.231768][T24636] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[ 2442.253416][T17240] usb 6-1: SerialNumber: syz
[ 2442.287321][T24636] System zones: 0-5
[ 2442.296268][T17240] usb 6-1: config 0 descriptor??
[ 2442.351292][T24636] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2442.393282][T24626] loop9: detected capacity change from 0 to 40427
[ 2442.405071][T24626] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12
[ 2442.418089][T24626] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[ 2442.545459][T24626] F2FS-fs (loop9): Found nat_bits in checkpoint
[ 2443.428276][T17240] usb 6-1: USB disconnect, device number 31
[ 2443.534807][T24626] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[ 2443.545470][T17097] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2443.563618][T24626] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[ 2443.920214][T20570] Bluetooth: hci3: unexpected event for opcode 0x202d
[ 2443.989110][T24653] overlayfs: failed to resolve './file2': -2
[ 2449.010981][T24687] loop8: detected capacity change from 0 to 40427
[ 2449.227413][T24687] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12
[ 2449.236025][T24687] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[ 2449.297712][T24687] F2FS-fs (loop8): Found nat_bits in checkpoint
[ 2449.405943][T24687] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0
[ 2449.440664][T24687] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[ 2451.171898][T24710] kvm: pic: non byte write
[ 2451.524574][T24715] binder: BINDER_SET_CONTEXT_MGR already set
[ 2451.540924][T24715] binder: 24714:24715 ioctl 4018620d 200000000040 returned -16
[ 2451.956729][T20570] Bluetooth: hci0: unexpected event for opcode 0x202d
[ 2453.748169][T24739] loop3: detected capacity change from 0 to 4096
[ 2453.787530][T24739] EXT4-fs (loop3): Test dummy encryption mode enabled
[ 2453.906890][T24739] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[ 2453.932765][T24739] System zones: 0-5
[ 2453.969759][T24739] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2455.257652][T17097] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2456.348499][T24745] loop8: detected capacity change from 0 to 40427
[ 2456.375959][T24745] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12
[ 2456.389242][T24745] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[ 2456.418617][T24745] F2FS-fs (loop8): Found nat_bits in checkpoint
[ 2456.634906][T24745] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0
[ 2456.651601][T24745] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[ 2458.847624][T20570] Bluetooth: hci4: unexpected event for opcode 0x202d
[ 2460.162027][T24795] loop9: detected capacity change from 0 to 4096
[ 2460.174107][T24795] EXT4-fs (loop9): Test dummy encryption mode enabled
[ 2460.191532][T24795] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[ 2460.205169][T24795] System zones: 0-5
[ 2460.279197][T24795] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2461.889983][T24307] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2463.605429][T24814] kvm: pic: non byte write
[ 2467.666114][T24850] loop8: detected capacity change from 0 to 4096
[ 2467.693397][T24850] EXT4-fs (loop8): Test dummy encryption mode enabled
[ 2467.725301][T24850] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[ 2467.762493][T24850] System zones: 0-5
[ 2467.799374][T24850] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2468.184587][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[ 2468.190980][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[ 2469.041614][T21036] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2472.055549][T24898] loop5: detected capacity change from 0 to 4096
[ 2472.099225][T24898] EXT4-fs (loop5): Test dummy encryption mode enabled
[ 2472.197699][T24898] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[ 2472.229478][T24898] System zones: 0-5
[ 2472.250862][T24898] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2473.491511][T20676] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2473.937269][T24911] kvm: pic: non byte write
[ 2475.426997][T24931] Invalid ELF section header size
[ 2475.877820][T24936] loop8: detected capacity change from 0 to 4096
[ 2475.927777][T24936] EXT4-fs (loop8): Test dummy encryption mode enabled
[ 2475.954964][T24936] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[ 2475.986323][T24936] System zones: 0-5
[ 2476.048587][T24936] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2476.422625][  T786] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[ 2476.692366][  T786] usb 4-1: Using ep0 maxpacket: 16
[ 2476.751737][  T786] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2476.800941][  T786] usb 4-1: config 0 has no interfaces?
[ 2476.815341][  T786] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[ 2476.876686][  T786] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2476.912407][  T786] usb 4-1: Product: syz
[ 2476.926825][  T786] usb 4-1: Manufacturer: syz
[ 2476.931520][  T786] usb 4-1: SerialNumber: syz
[ 2477.003400][  T786] usb 4-1: config 0 descriptor??
[ 2477.055792][T21036] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2477.295889][T17240] usb 4-1: USB disconnect, device number 42
[ 2479.846916][T24981] loop8: detected capacity change from 0 to 4096
[ 2479.872719][T24981] EXT4-fs (loop8): Test dummy encryption mode enabled
[ 2479.898681][T24981] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[ 2479.946552][T24981] System zones: 0-5
[ 2479.957670][T24981] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2480.190755][T11475] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[ 2480.592773][T11475] usb 4-1: Using ep0 maxpacket: 16
[ 2480.659072][T11475] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2480.761199][T11475] usb 4-1: config 0 has no interfaces?
[ 2480.838856][T11475] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[ 2480.897557][T11475] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2480.929498][T11475] usb 4-1: Product: syz
[ 2480.954650][T11475] usb 4-1: Manufacturer: syz
[ 2480.978046][T11475] usb 4-1: SerialNumber: syz
[ 2481.004852][T11475] usb 4-1: config 0 descriptor??
[ 2481.028905][T25005] binder: BINDER_SET_CONTEXT_MGR already set
[ 2481.049896][T25005] binder: 25004:25005 ioctl 4018620d 200000000040 returned -16
[ 2481.323950][T11475] usb 4-1: USB disconnect, device number 43
[ 2483.435893][T20570] Bluetooth: hci3: unexpected event for opcode 0x202d
[ 2483.774233][T21036] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2485.382716][ T2178] usb 10-1: new high-speed USB device number 26 using dummy_hcd
[ 2485.572301][ T2178] usb 10-1: Using ep0 maxpacket: 16
[ 2485.588020][ T2178] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2485.610510][ T2178] usb 10-1: config 0 has no interfaces?
[ 2485.631588][ T2178] usb 10-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[ 2485.648327][ T2178] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2485.666142][ T2178] usb 10-1: Product: syz
[ 2485.678079][ T2178] usb 10-1: Manufacturer: syz
[ 2485.693565][ T2178] usb 10-1: SerialNumber: syz
[ 2485.720944][ T2178] usb 10-1: config 0 descriptor??
[ 2486.110741][T20790] usb 10-1: USB disconnect, device number 26
[ 2486.898920][T25063] binder: BINDER_SET_CONTEXT_MGR already set
[ 2486.916135][T25063] binder: 25062:25063 ioctl 4018620d 200000000040 returned -16
[ 2487.330753][T20570] Bluetooth: hci0: unexpected event for opcode 0x202d
[ 2488.080545][T25078] tmpfs: Bad value for 'nr_blocks'
[ 2490.630928][T25104] Invalid ELF header magic: != ELF
[ 2492.473162][T25120] loop3: detected capacity change from 0 to 4096
[ 2492.524633][T25123] tmpfs: Bad value for 'nr_blocks'
[ 2492.622275][T25120] EXT4-fs (loop3): Test dummy encryption mode enabled
[ 2492.935287][T25120] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[ 2492.971323][T25120] System zones: 0-5
[ 2493.000859][T25120] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2493.949541][T17097] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2496.223794][T25158] Invalid ELF header magic: != ELF
[ 2497.107847][T25167] loop5: detected capacity change from 0 to 4096
[ 2497.173118][T25167] EXT4-fs (loop5): Test dummy encryption mode enabled
[ 2497.196766][T25167] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[ 2497.207751][T25167] System zones: 0-5
[ 2497.239450][T25167] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2498.251899][T20676] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2499.716597][T20570] Bluetooth: hci4: unexpected event for opcode 0x202d
[ 2501.073426][T25209] Invalid ELF header magic: != ELF
[ 2502.100064][T25229] loop8: detected capacity change from 0 to 4096
[ 2502.187153][T25229] EXT4-fs (loop8): Test dummy encryption mode enabled
[ 2502.235783][T25229] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[ 2502.264352][T25229] System zones: 0-5
[ 2502.381095][T25229] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2503.458789][T21036] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2504.368700][T25236] loop5: detected capacity change from 0 to 40427
[ 2504.399838][T25236] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[ 2504.426750][T25236] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 2504.476154][T25236] F2FS-fs (loop5): Found nat_bits in checkpoint
[ 2506.697383][T25280] Invalid ELF header magic: != ELF
[ 2507.358123][T25287] tmpfs: Bad value for 'nr_blocks'
[ 2508.622997][T20570] Bluetooth: hci3: unexpected event for opcode 0x202d
[ 2509.749403][T25305] kvm: pic: non byte write
[ 2510.164564][T25295] loop9: detected capacity change from 0 to 40427
[ 2510.192788][T25295] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12
[ 2510.279733][T25295] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[ 2510.653377][T25295] F2FS-fs (loop9): Found nat_bits in checkpoint
[ 2510.860107][T25319] Invalid ELF header magic: != ELF
[ 2511.098447][T25295] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[ 2511.324192][T25295] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[ 2511.952413][T20790] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[ 2512.168914][T25334] overlayfs: missing 'lowerdir'
[ 2513.084344][T20570] Bluetooth: hci0: unexpected event for opcode 0x202d
[ 2513.146100][T20790] usb 6-1: Using ep0 maxpacket: 16
[ 2513.183501][T20790] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2513.212296][T20790] usb 6-1: config 0 has no interfaces?
[ 2513.238860][T20790] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[ 2513.259319][T20790] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2513.272245][T20790] usb 6-1: Product: syz
[ 2513.276592][T20790] usb 6-1: Manufacturer: syz
[ 2513.290897][T20790] usb 6-1: SerialNumber: syz
[ 2513.303293][T20790] usb 6-1: config 0 descriptor??
[ 2513.615491][ T5855] usb 6-1: USB disconnect, device number 32
[ 2513.768945][T25351] Invalid ELF header magic: != ELF
[ 2515.918200][T25375] tmpfs: Bad value for 'nr_blocks'
[ 2517.007802][T25389] Invalid ELF section header size
[ 2517.412904][ T5855] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[ 2517.742691][ T5855] usb 4-1: Using ep0 maxpacket: 16
[ 2517.772393][ T5855] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2517.807701][ T5855] usb 4-1: config 0 has no interfaces?
[ 2517.819014][ T5855] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[ 2517.833230][ T5855] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2517.846617][ T5855] usb 4-1: Product: syz
[ 2517.851369][ T5855] usb 4-1: Manufacturer: syz
[ 2517.856189][ T5855] usb 4-1: SerialNumber: syz
[ 2517.873297][ T5855] usb 4-1: config 0 descriptor??
[ 2518.186377][ T1184] usb 4-1: USB disconnect, device number 44
[ 2519.844810][T25425] Invalid ELF section header size
[ 2520.661141][T25436] kvm: pic: non byte write
[ 2520.700886][T25438] tmpfs: Bad value for 'nr_blocks'
[ 2520.730482][T20570] Bluetooth: hci0: unexpected event for opcode 0x202d
[ 2521.882366][ T5855] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[ 2522.242268][ T5855] usb 6-1: Using ep0 maxpacket: 16
[ 2522.254114][ T5855] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2522.271478][ T5855] usb 6-1: config 0 has no interfaces?
[ 2522.285679][ T5855] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[ 2522.304361][ T5855] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2522.335206][ T5855] usb 6-1: Product: syz
[ 2522.347933][ T5855] usb 6-1: Manufacturer: syz
[ 2522.359938][ T5855] usb 6-1: SerialNumber: syz
[ 2522.375532][ T5855] usb 6-1: config 0 descriptor??
[ 2522.499470][T25471] Invalid ELF section header size
[ 2523.090589][ T1184] usb 6-1: USB disconnect, device number 33
[ 2523.492417][T25481] tmpfs: Bad value for 'nr_blocks'
[ 2524.922392][T20570] Bluetooth: hci3: unexpected event for opcode 0x202d
[ 2525.639105][T25506] Invalid ELF section header size
[ 2526.135247][T25503] kvm: pic: non byte write
[ 2526.390990][T25515] tmpfs: Bad value for 'nr_blocks'
[ 2526.974555][T11471] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[ 2527.212306][T11471] usb 9-1: Using ep0 maxpacket: 16
[ 2527.286589][T11471] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2527.425534][T11471] usb 9-1: config 0 has no interfaces?
[ 2527.544871][T11471] usb 9-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[ 2527.675549][T11471] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2527.738509][T11471] usb 9-1: Product: syz
[ 2527.760805][T11471] usb 9-1: Manufacturer: syz
[ 2527.788942][T11471] usb 9-1: SerialNumber: syz
[ 2527.869376][T11471] usb 9-1: config 0 descriptor??
[ 2528.196499][T17240] usb 9-1: USB disconnect, device number 7
[ 2528.880586][T25543] Invalid ELF section header size
[ 2529.627347][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[ 2529.635042][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[ 2529.850499][T20570] Bluetooth: hci0: unexpected event for opcode 0x202d
[ 2529.929742][T25552] tmpfs: Bad value for 'nr_blocks'
[ 2530.153703][T25555] kvm: pic: non byte write
[ 2530.427517][T25558] loop3: detected capacity change from 0 to 4096
[ 2530.440362][T25558] EXT4-fs (loop3): Test dummy encryption mode enabled
[ 2530.452022][T25558] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[ 2530.460863][T25558] System zones: 0-5
[ 2530.474156][T25558] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2531.694957][T20570] Bluetooth: hci1: command 0x0406 tx timeout
[ 2531.714234][T17097] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2532.572525][  T786] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[ 2532.757128][  T786] usb 4-1: Using ep0 maxpacket: 16
[ 2532.805348][  T786] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2532.823787][  T786] usb 4-1: config 0 has no interfaces?
[ 2532.836757][  T786] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[ 2532.858562][  T786] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2532.882444][  T786] usb 4-1: Product: syz
[ 2532.887127][  T786] usb 4-1: Manufacturer: syz
[ 2532.891787][  T786] usb 4-1: SerialNumber: syz
[ 2532.944342][  T786] usb 4-1: config 0 descriptor??
[ 2532.969571][T25584] tmpfs: Bad value for 'nr_blocks'
[ 2533.079468][T25586] Invalid ELF section header size
[ 2533.670270][ T1184] usb 4-1: USB disconnect, device number 45
[ 2535.033400][   T28] audit: type=1800 audit(2000002192.020:746): pid=25602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.4291" name="bus" dev="overlay" ino=1434 res=0 errno=0
[ 2537.154589][T25604] loop5: detected capacity change from 0 to 4096
[ 2537.182636][T25604] EXT4-fs (loop5): Test dummy encryption mode enabled
[ 2537.285357][ T9492] Bluetooth: hci3: unexpected event for opcode 0x202d
[ 2537.335084][T25604] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[ 2537.372624][T25604] System zones: 0-5
[ 2537.427500][T25604] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2538.736865][T20676] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2540.201917][T25632] Invalid ELF section header size
[ 2541.217642][T25641] kvm: pic: non byte write
[ 2541.347473][T25646] binder: 25645:25646 ioctl 4018620d 0 returned -22
[ 2541.662481][T11475] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[ 2541.872358][T11475] usb 6-1: Using ep0 maxpacket: 16
[ 2541.896380][T11475] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2541.930851][T11475] usb 6-1: config 0 has no interfaces?
[ 2541.957130][T11475] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[ 2541.985154][T11475] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2542.010211][T11475] usb 6-1: Product: syz
[ 2542.022043][T11475] usb 6-1: Manufacturer: syz
[ 2542.035818][T11475] usb 6-1: SerialNumber: syz
[ 2542.043800][T25652] loop9: detected capacity change from 0 to 4096
[ 2542.062723][T25652] EXT4-fs (loop9): Test dummy encryption mode enabled
[ 2542.072394][T11475] usb 6-1: config 0 descriptor??
[ 2542.109571][ T9492] Bluetooth: hci3: unexpected event for opcode 0x202d
[ 2542.164042][T25652] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[ 2542.237577][T25652] System zones: 0-5
[ 2542.429417][T25652] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2543.792058][   T23] usb 6-1: USB disconnect, device number 34
[ 2543.800344][T24307] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2544.396176][T25670] Invalid ELF section header size
[ 2546.158523][T25694] binder: 25693:25694 ioctl 4018620d 0 returned -22
[ 2546.954291][T25699] loop3: detected capacity change from 0 to 4096
[ 2546.991648][T25699] EXT4-fs (loop3): Test dummy encryption mode enabled
[ 2547.075617][ T9492] Bluetooth: hci1: unexpected event for opcode 0x202d
[ 2547.131464][T25699] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[ 2547.149974][T25699] System zones: 0-5
[ 2547.167713][T25699] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2548.475473][T17097] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2548.605572][T25713] Invalid ELF section header size
[ 2550.143182][T25729] binder: BINDER_SET_CONTEXT_MGR already set
[ 2550.149453][T25729] binder: 25727:25729 ioctl 4018620d 200000000040 returned -16
[ 2550.157879][T25723] kvm: pic: non byte write
[ 2550.172461][T11471] usb 10-1: new high-speed USB device number 27 using dummy_hcd
[ 2550.362540][T11471] usb 10-1: Using ep0 maxpacket: 16
[ 2550.455892][T11471] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2550.589049][T11471] usb 10-1: config 0 has no interfaces?
[ 2550.827748][T11471] usb 10-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[ 2550.839605][T11471] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2550.908605][T11471] usb 10-1: Product: syz
[ 2550.938158][T11471] usb 10-1: Manufacturer: syz
[ 2550.955672][T11471] usb 10-1: SerialNumber: syz
[ 2551.007170][T11471] usb 10-1: config 0 descriptor??
[ 2551.248252][   T28] audit: type=1800 audit(2000002209.090:747): pid=25739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4327" name="bus" dev="overlay" ino=2599 res=0 errno=0
[ 2551.793959][T21644] usb 10-1: USB disconnect, device number 27
[ 2552.534068][T25741] loop5: detected capacity change from 0 to 4096
[ 2552.681529][T25741] EXT4-fs (loop5): Test dummy encryption mode enabled
[ 2552.885424][T25741] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[ 2553.015536][T25741] System zones: 0-5
[ 2553.130657][T25741] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2555.219941][ T9492] Bluetooth: hci1: unexpected event for opcode 0x202d
[ 2555.308105][T20676] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2555.847572][T25760] Invalid ELF section header size
[ 2556.719098][T25769] binder: BINDER_SET_CONTEXT_MGR already set
[ 2556.758244][T25769] binder: 25768:25769 ioctl 4018620d 200000000040 returned -16
[ 2557.804738][T25784] tmpfs: Bad value for 'nr_blocks'
[ 2557.929149][T25786] binder: 25783:25786 ioctl 4018620d 0 returned -22
[ 2557.972455][T17240] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[ 2558.202406][T17240] usb 9-1: Using ep0 maxpacket: 16
[ 2558.225571][T17240] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2558.237191][T17240] usb 9-1: config 0 has no interfaces?
[ 2558.258331][T17240] usb 9-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[ 2558.269191][T17240] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2558.286511][T17240] usb 9-1: Product: syz
[ 2558.293620][T17240] usb 9-1: Manufacturer: syz
[ 2558.298347][T17240] usb 9-1: SerialNumber: syz
[ 2558.323429][T17240] usb 9-1: config 0 descriptor??
[ 2558.793087][T21644] usb 9-1: USB disconnect, device number 8
[ 2562.479043][ T9492] Bluetooth: hci1: unexpected event for opcode 0x202d
[ 2563.014697][T25808] Invalid ELF section header size
[ 2563.816157][T25812] binder: BINDER_SET_CONTEXT_MGR already set
[ 2563.869351][T25812] binder: 25811:25812 ioctl 4018620d 200000000040 returned -16
[ 2564.498836][T25822] tmpfs: Bad value for 'nr_blocks'
[ 2565.662369][  T786] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[ 2565.882250][  T786] usb 4-1: Using ep0 maxpacket: 16
[ 2565.899117][  T786] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2565.909700][  T786] usb 4-1: config 0 has no interfaces?
[ 2565.922870][  T786] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[ 2565.932970][  T786] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2565.941196][  T786] usb 4-1: Product: syz
[ 2565.946395][  T786] usb 4-1: Manufacturer: syz
[ 2565.951264][  T786] usb 4-1: SerialNumber: syz
[ 2565.979392][  T786] usb 4-1: config 0 descriptor??
[ 2566.380462][ T1184] usb 4-1: USB disconnect, device number 46
[ 2568.366912][T25866] Invalid ELF section header size
[ 2568.984684][ T9492] Bluetooth: hci1: unexpected event for opcode 0x202d
[ 2570.331580][T25884] tmpfs: Bad value for 'nr_blocks'
[ 2571.032331][  T786] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[ 2571.233994][  T786] usb 6-1: Using ep0 maxpacket: 16
[ 2571.282446][  T786] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2571.343011][  T786] usb 6-1: config 0 has no interfaces?
[ 2571.363341][  T786] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[ 2571.378326][  T786] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2571.398318][  T786] usb 6-1: Product: syz
[ 2571.408430][  T786] usb 6-1: Manufacturer: syz
[ 2571.413445][  T786] usb 6-1: SerialNumber: syz
[ 2571.434538][  T786] usb 6-1: config 0 descriptor??
[ 2571.691672][  T786] usb 6-1: USB disconnect, device number 35
[ 2578.862331][ T1184] usb 6-1: new full-speed USB device number 36 using dummy_hcd
[ 2579.127275][ T1184] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 2579.138658][ T1184] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2579.173234][ T1184] usb 6-1: Product: syz
[ 2579.177890][ T1184] usb 6-1: Manufacturer: syz
[ 2579.192250][ T1184] usb 6-1: SerialNumber: syz
[ 2579.203706][ T1184] usb 6-1: config 0 descriptor??
[ 2579.436288][ T1184] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 2579.441026][  T786] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[ 2579.672264][  T786] usb 9-1: Using ep0 maxpacket: 16
[ 2579.683770][  T786] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2579.700755][  T786] usb 9-1: config 0 has no interfaces?
[ 2579.719524][  T786] usb 9-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[ 2579.732199][  T786] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2579.750635][  T786] usb 9-1: Product: syz
[ 2579.760771][  T786] usb 9-1: Manufacturer: syz
[ 2579.770897][  T786] usb 9-1: SerialNumber: syz
[ 2579.786785][  T786] usb 9-1: config 0 descriptor??
[ 2580.296549][T21644] usb 9-1: USB disconnect, device number 9
[ 2581.238334][ T1184] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -32
[ 2583.511700][T21644] usb 6-1: USB disconnect, device number 36
[ 2587.787074][T26004] binder: 26002:26004 ioctl 40189206 200000000340 returned -22
[ 2588.102356][T20526] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[ 2589.005841][T20526] usb 6-1: Using ep0 maxpacket: 16
[ 2589.023857][T20526] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2589.034224][T20526] usb 6-1: config 0 has no interfaces?
[ 2589.042839][T20526] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[ 2589.051943][T20526] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2589.074670][T20526] usb 6-1: Product: syz
[ 2589.078915][T20526] usb 6-1: Manufacturer: syz
[ 2589.092928][T20526] usb 6-1: SerialNumber: syz
[ 2589.109988][T20526] usb 6-1: config 0 descriptor??
[ 2590.171718][T17240] usb 6-1: USB disconnect, device number 37
[ 2591.718239][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[ 2591.730592][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[ 2592.578407][T26036] fuse: Bad value for 'fd'
[ 2592.806631][T26039] Invalid ELF section header size
[ 2593.231987][T26042] program syz.5.4396 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2598.244815][   T28] audit: type=1800 audit(2000002253.670:748): pid=26059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4399" name="bus" dev="overlay" ino=532 res=0 errno=0
[ 2599.113383][ T1184] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[ 2599.513632][ T1184] usb 4-1: Using ep0 maxpacket: 16
[ 2599.576230][ T1184] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2599.612378][ T1184] usb 4-1: config 0 has no interfaces?
[ 2599.634441][ T1184] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[ 2599.659243][ T1184] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2599.688557][ T1184] usb 4-1: Product: syz
[ 2599.712490][ T1184] usb 4-1: Manufacturer: syz
[ 2599.733148][ T1184] usb 4-1: SerialNumber: syz
[ 2599.763133][ T1184] usb 4-1: config 0 descriptor??
[ 2601.843586][T20790] usb 4-1: USB disconnect, device number 47
[ 2605.822344][ T5855] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[ 2606.069910][ T5855] usb 9-1: Using ep0 maxpacket: 8
[ 2606.297368][T26116] loop9: detected capacity change from 0 to 4096
[ 2606.430863][T26116] EXT4-fs (loop9): Test dummy encryption mode enabled
[ 2606.446232][ T5855] usb 9-1: config 8 has 0 interfaces, different from the descriptor's value: 1
[ 2606.456302][T26116] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[ 2606.472895][T26116] System zones: 0-5
[ 2606.524954][ T5855] usb 9-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice=5f.1d
[ 2607.431169][ T5855] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2607.469378][T26116] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2607.542386][ T5855] usb 9-1: Product: syz
[ 2607.555711][ T5855] usb 9-1: Manufacturer: syz
[ 2607.570894][ T5855] usb 9-1: SerialNumber: syz
[ 2609.308285][   T28] audit: type=1800 audit(2000002267.150:749): pid=26129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4420" name="bus" dev="overlay" ino=2709 res=0 errno=0
[ 2609.653758][T24307] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2610.454807][ T5855] usb 9-1: can't set config #8, error -71
[ 2610.665560][ T5855] usb 9-1: USB disconnect, device number 10
[ 2611.192998][T26148] Invalid ELF section header size
[ 2611.368490][ T1184] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[ 2611.762498][ T1184] usb 4-1: Using ep0 maxpacket: 16
[ 2611.815620][ T1184] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2611.862904][ T1184] usb 4-1: config 0 has no interfaces?
[ 2611.899626][ T1184] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[ 2611.911238][ T1184] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2611.930019][ T1184] usb 4-1: Product: syz
[ 2611.939663][ T1184] usb 4-1: Manufacturer: syz
[ 2611.966206][ T1184] usb 4-1: SerialNumber: syz
[ 2611.978617][T26148] program syz.9.4426 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2611.995090][ T1184] usb 4-1: config 0 descriptor??
[ 2612.673344][T26158] loop9: detected capacity change from 0 to 4096
[ 2612.692536][T26158] EXT4-fs (loop9): Test dummy encryption mode enabled
[ 2612.711679][T26158] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[ 2612.732552][T26158] System zones: 0-5
[ 2612.761148][T26158] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2612.770063][ T9492] Bluetooth: hci0: unexpected event for opcode 0x202d
[ 2614.015976][T24307] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2614.039129][ T1184] usb 4-1: USB disconnect, device number 48
[ 2615.450687][T26182] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4432'.
[ 2615.530084][T26182] netlink: set zone limit has 8 unknown bytes
[ 2617.393376][T26202] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4438'.
[ 2618.192406][T26204] Invalid ELF section header size
[ 2619.282952][T26206] loop5: detected capacity change from 0 to 4096
[ 2619.362798][T26206] EXT4-fs (loop5): Test dummy encryption mode enabled
[ 2619.439333][T26206] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[ 2619.482488][T26206] System zones: 0-5
[ 2619.535610][T26206] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2619.682319][T20790] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[ 2619.862263][ T1184] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[ 2620.781636][T20790] usb 4-1: Using ep0 maxpacket: 16
[ 2620.812381][ T1184] usb 9-1: Using ep0 maxpacket: 8
[ 2620.826449][T20790] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2620.854051][ T1184] usb 9-1: config 8 has 0 interfaces, different from the descriptor's value: 1
[ 2620.870864][T20790] usb 4-1: config 0 has no interfaces?
[ 2620.879827][T20676] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2620.898701][T20790] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[ 2620.917239][T20790] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2620.932496][T20790] usb 4-1: Product: syz
[ 2620.937281][ T1184] usb 9-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice=5f.1d
[ 2620.949150][T20790] usb 4-1: Manufacturer: syz
[ 2620.953971][ T1184] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2620.962266][T20790] usb 4-1: SerialNumber: syz
[ 2620.981086][ T1184] usb 9-1: Product: syz
[ 2620.993443][T20790] usb 4-1: config 0 descriptor??
[ 2621.001531][ T1184] usb 9-1: Manufacturer: syz
[ 2621.038683][ T1184] usb 9-1: SerialNumber: syz
[ 2621.302076][T20526] usb 4-1: USB disconnect, device number 49
[ 2624.846715][ T1184] usb 9-1: USB disconnect, device number 11
[ 2625.388390][T26237] Invalid ELF section header size
[ 2625.793159][T26243] fuse: Bad value for 'fd'
[ 2627.053590][T26248] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4453'.
[ 2627.514995][T26263] loop8: detected capacity change from 0 to 4096
[ 2627.583090][T26263] EXT4-fs (loop8): Test dummy encryption mode enabled
[ 2627.662176][T26271] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4456'.
[ 2628.134082][T26263] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[ 2628.173272][T26263] System zones: 0-5
[ 2628.181644][T26263] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2629.464555][T21036] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2629.888305][ T9492] Bluetooth: hci0: unexpected event for opcode 0x202d
[ 2630.891093][T26312] Invalid ELF section header size
[ 2631.416083][T26311] loop8: detected capacity change from 0 to 40427
[ 2631.430568][T26311] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12
[ 2631.444725][T26311] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[ 2631.462266][T11475] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[ 2631.488024][T26311] F2FS-fs (loop8): Found nat_bits in checkpoint
[ 2631.610237][T26311] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0
[ 2631.619898][T26311] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[ 2631.665796][T11475] usb 4-1: Using ep0 maxpacket: 16
[ 2631.682747][T11475] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[ 2631.702416][T11475] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2631.710604][T11475] usb 4-1: Product: syz
[ 2631.732239][T11475] usb 4-1: Manufacturer: syz
[ 2631.737043][T11475] usb 4-1: SerialNumber: syz
[ 2631.774096][T11475] usb 4-1: config 0 descriptor??
[ 2632.869866][T11475] dvb_usb_dtv5100: probe of 4-1:0.0 failed with error -110
[ 2633.010996][T21036] F2FS-fs (loop8): invalid namelen(0), ino:0, run fsck to fix.
[ 2633.027963][T21036] F2FS-fs (loop8): invalid namelen(0), ino:0, run fsck to fix.
[ 2633.057023][T21036] F2FS-fs (loop8): invalid namelen(0), ino:0, run fsck to fix.
[ 2633.064870][T21036] F2FS-fs (loop8): invalid namelen(0), ino:0, run fsck to fix.
[ 2633.077234][T21036] F2FS-fs (loop8): invalid namelen(0), ino:0, run fsck to fix.
[ 2633.088233][T21036] F2FS-fs (loop8): invalid namelen(0), ino:0, run fsck to fix.
[ 2633.100825][T21036] F2FS-fs (loop8): invalid namelen(0), ino:0, run fsck to fix.
[ 2633.265267][T26331] loop5: detected capacity change from 0 to 4096
[ 2633.282345][T26331] EXT4-fs (loop5): Test dummy encryption mode enabled
[ 2633.296277][T26331] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[ 2633.305167][T26331] System zones: 0-5
[ 2633.319901][T26331] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2634.666650][T26337] Cannot find add_set index 0 as target
[ 2634.796847][T26342] Invalid ELF section header size
[ 2634.879243][T20676] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2635.577956][T26342] program syz.9.4468 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2635.798468][ T9492] Bluetooth: hci1: unexpected event for opcode 0x202d
[ 2635.932247][T17240] usb 6-1: new full-speed USB device number 38 using dummy_hcd
[ 2635.948787][T20790] usb 4-1: USB disconnect, device number 50
[ 2636.951191][T17240] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 2636.967053][T17240] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2636.976131][T17240] usb 6-1: Product: syz
[ 2636.980346][T17240] usb 6-1: Manufacturer: syz
[ 2636.985426][T17240] usb 6-1: SerialNumber: syz
[ 2637.026539][T17240] usb 6-1: config 0 descriptor??
[ 2637.039535][T26362] Invalid ELF section header size
[ 2637.468248][T17240] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 2638.671151][   T28] audit: type=1800 audit(2000002296.520:750): pid=26381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.4477" name="bus" dev="overlay" ino=1706 res=0 errno=0
[ 2639.700651][T17240] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -32
[ 2641.656224][T17240] usb 6-1: USB disconnect, device number 38
[ 2642.673606][T26399] kvm: pic: non byte write
[ 2643.023591][T26403] Invalid ELF section header size
[ 2644.765280][T26412] binder: 26411:26412 ioctl 4018620d 0 returned -22
[ 2646.770033][T26430] fuse: Bad value for 'fd'
[ 2649.976379][T26449] Invalid ELF section header size
[ 2650.111944][T26453] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4495'.
[ 2650.129096][T26453] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4495'.
[ 2650.242831][T26457] binder: 26455:26457 ioctl 4018620d 0 returned -22
[ 2652.511167][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[ 2653.502251][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[ 2655.208762][T26490] Invalid ELF section header size
[ 2656.406770][T26500] kvm: pic: non byte write
[ 2656.432619][ T9492] Bluetooth: hci0: unexpected event for opcode 0x202d
[ 2657.672717][T26513] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4510'.
[ 2660.218671][T26531] Invalid ELF section header size
[ 2660.887787][T26533] loop5: detected capacity change from 0 to 4096
[ 2660.942310][T26533] EXT4-fs (loop5): Test dummy encryption mode enabled
[ 2661.148876][T26533] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[ 2661.192427][T26533] System zones: 0-5
[ 2661.202956][T26533] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2661.891852][T20676] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2662.223571][T26551] binder: 26550:26551 ioctl c0306201 0 returned -14
[ 2662.702247][T17240] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[ 2662.927791][T17240] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2662.979901][T17240] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2663.004342][T17240] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[ 2663.035763][T17240] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2663.112843][T17240] usb 6-1: config 0 descriptor??
[ 2664.201473][T26553] loop8: detected capacity change from 0 to 40427
[ 2664.231452][T26553] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12
[ 2664.277659][T26553] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[ 2664.285624][T17240] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0
[ 2664.323270][T17240] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0
[ 2664.368130][T17240] cp2112 0003:10C4:EA90.001B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0
[ 2664.596510][T17240] cp2112 0003:10C4:EA90.001B: Part Number: 0x82 Device Version: 0xFE
[ 2664.637014][T26553] F2FS-fs (loop8): Found nat_bits in checkpoint
[ 2664.898076][T26574] Invalid ELF section header size
[ 2664.918836][T17240] cp2112 0003:10C4:EA90.001B: error requesting SMBus config
[ 2665.464084][T17240] cp2112: probe of 0003:10C4:EA90.001B failed with error -5
[ 2665.793282][T25747] usb 6-1: reset high-speed USB device number 39 using dummy_hcd
[ 2666.361165][T26587] binder: 26585:26587 ioctl c0306201 0 returned -14
[ 2666.439174][T26586] loop9: detected capacity change from 0 to 4096
[ 2666.466560][T26586] EXT4-fs (loop9): Test dummy encryption mode enabled
[ 2666.523870][T26586] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[ 2666.555723][T26586] System zones: 0-5
[ 2666.590275][T26586] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2666.793657][T17240] usb 6-1: USB disconnect, device number 39
[ 2668.213215][T26599] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4527'.
[ 2668.240625][T24307] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2668.847331][T26607] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4532'.
[ 2668.964216][T26608] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4532'.
[ 2671.175022][T26624] Invalid ELF section header size
[ 2673.388679][   T28] audit: type=1800 audit(2000002331.240:751): pid=26636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.4540" name="bus" dev="overlay" ino=1777 res=0 errno=0
[ 2675.298237][T26640] loop3: detected capacity change from 0 to 4096
[ 2675.617542][T26640] EXT4-fs (loop3): Test dummy encryption mode enabled
[ 2675.799686][T26640] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR
[ 2675.805702][T26640] EXT4-fs: failed to create workqueue
[ 2675.939002][T26640] EXT4-fs (loop3): mount failed
[ 2677.860058][ T9492] Bluetooth: hci0: unexpected event for opcode 0x202d
[ 2680.186655][T26680] Invalid ELF section header size
[ 2682.355234][T26694] loop9: detected capacity change from 0 to 4096
[ 2682.416817][T26694] EXT4-fs (loop9): Test dummy encryption mode enabled
[ 2682.440685][T26694] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[ 2682.472233][T20790] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[ 2682.599794][T26694] System zones: 0-5
[ 2682.732947][T20790] usb 6-1: Using ep0 maxpacket: 16
[ 2682.920750][T20790] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[ 2682.939670][T26694] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2683.074683][T20790] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2683.113425][T20790] usb 6-1: Product: syz
[ 2683.128134][T20790] usb 6-1: Manufacturer: syz
[ 2683.167379][T20790] usb 6-1: SerialNumber: syz
[ 2683.223441][T20790] usb 6-1: config 0 descriptor??
[ 2684.059107][T20790] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[ 2684.084938][T20790] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 2684.117026][T20790] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[ 2684.120105][T24307] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2684.127056][T20790] usb 6-1: media controller created
[ 2684.189147][T26711] binder: 26709:26711 ioctl 40189206 200000000340 returned -22
[ 2684.372540][T26696] Cannot find add_set index 0 as target
[ 2684.708158][T20790] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 2685.368353][T20790] zl10353_read_register: readreg error (reg=127, ret==0)
[ 2685.452450][T20790] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[ 2685.502381][T20790] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[ 2685.563063][T20790] usb 6-1: USB disconnect, device number 40
[ 2686.223801][T20790] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[ 2686.288804][T26704] loop8: detected capacity change from 0 to 40427
[ 2687.447296][T26726] Invalid ELF section header size
[ 2691.547294][T26746] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4568'.
[ 2693.692716][T26778] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4573'.
[ 2693.962680][T26782] Invalid ELF section header size
[ 2694.864051][T26793] fuse: Bad value for 'fd'
[ 2700.042222][T11471] usb 10-1: new high-speed USB device number 28 using dummy_hcd
[ 2700.069795][   T28] audit: type=1800 audit(2000002357.910:752): pid=26838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.4585" name="bus" dev="overlay" ino=1840 res=0 errno=0
[ 2700.709960][T26840] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4584'.
[ 2700.761824][T26841] fuse: Bad value for 'fd'
[ 2701.357921][T11471] usb 10-1: Using ep0 maxpacket: 8
[ 2701.469467][T11471] usb 10-1: config 8 has 0 interfaces, different from the descriptor's value: 1
[ 2701.696141][T11471] usb 10-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice=5f.1d
[ 2701.772650][T11471] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2701.790880][T11471] usb 10-1: Product: syz
[ 2701.808121][T11471] usb 10-1: Manufacturer: syz
[ 2701.813278][T11471] usb 10-1: SerialNumber: syz
[ 2705.352770][T11471] usb 10-1: USB disconnect, device number 28
[ 2712.840093][   T28] audit: type=1800 audit(2000002368.650:753): pid=26905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4600" name="bus" dev="overlay" ino=2997 res=0 errno=0
[ 2713.957455][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[ 2713.968633][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[ 2717.101169][T26946] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4606'.
[ 2719.262606][ T5855] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[ 2719.307082][T26964] overlayfs: failed to resolve './file1': -2
[ 2719.485448][ T5855] usb 9-1: Using ep0 maxpacket: 8
[ 2719.522062][ T5855] usb 9-1: config 8 has 0 interfaces, different from the descriptor's value: 1
[ 2719.641118][ T5855] usb 9-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice=5f.1d
[ 2719.701686][ T5855] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2719.755698][ T5855] usb 9-1: Product: syz
[ 2719.809648][ T5855] usb 9-1: Manufacturer: syz
[ 2719.853146][ T5855] usb 9-1: SerialNumber: syz
[ 2722.919071][ T5855] usb 9-1: USB disconnect, device number 12
[ 2727.638341][T27005] Invalid ELF section header size
[ 2728.157064][T27010] program syz.5.4622 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2729.172376][T17240] usb 6-1: new high-speed USB device number 41 using dummy_hcd
[ 2729.372688][T17240] usb 6-1: Using ep0 maxpacket: 8
[ 2729.439278][T17240] usb 6-1: config 8 has 0 interfaces, different from the descriptor's value: 1
[ 2729.683024][T17240] usb 6-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice=5f.1d
[ 2732.049560][   T28] audit: type=1800 audit(2000002387.580:754): pid=27024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.4626" name="bus" dev="overlay" ino=1915 res=0 errno=0
[ 2732.083890][T17240] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2732.214108][T17240] usb 6-1: Product: syz
[ 2732.262454][T17240] usb 6-1: Manufacturer: syz
[ 2732.269740][T17240] usb 6-1: SerialNumber: syz
[ 2732.386047][T17240] usb 6-1: can't set config #8, error -71
[ 2732.398788][T17240] usb 6-1: USB disconnect, device number 41
[ 2736.453981][T27064] Invalid ELF section header size
[ 2736.591119][T27065] program syz.8.4636 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2738.286898][T11471] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[ 2738.582410][T11471] usb 9-1: Using ep0 maxpacket: 16
[ 2738.739313][   T28] audit: type=1800 audit(2000002396.520:755): pid=27085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4641" name="bus" dev="overlay" ino=2018 res=0 errno=0
[ 2739.985815][T11471] usb 9-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[ 2741.642184][T11471] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2741.650259][T11471] usb 9-1: Product: syz
[ 2741.654766][T11471] usb 9-1: Manufacturer: syz
[ 2741.659541][T11471] usb 9-1: SerialNumber: syz
[ 2741.901741][T11471] usb 9-1: config 0 descriptor??
[ 2741.928379][T11471] usb 9-1: can't set config #0, error -71
[ 2741.941489][T11471] usb 9-1: USB disconnect, device number 13
[ 2745.883471][T27111] fuse: Bad value for 'fd'
[ 2748.602449][   T23] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[ 2749.522489][   T23] usb 6-1: Using ep0 maxpacket: 16
[ 2749.669794][   T23] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[ 2749.679119][   T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2749.687353][   T23] usb 6-1: Product: syz
[ 2749.691690][   T23] usb 6-1: Manufacturer: syz
[ 2749.696551][   T23] usb 6-1: SerialNumber: syz
[ 2749.723995][   T23] usb 6-1: config 0 descriptor??
[ 2750.654592][   T23] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[ 2750.688415][   T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 2750.713593][   T23] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[ 2750.752329][   T23] usb 6-1: media controller created
[ 2750.855800][T27132] Cannot find add_set index 0 as target
[ 2750.916261][   T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 2752.022814][   T23] zl10353_read_register: readreg error (reg=127, ret==0)
[ 2752.029976][   T23] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[ 2752.062141][   T23] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[ 2752.085063][   T23] usb 6-1: USB disconnect, device number 42
[ 2752.233425][   T23] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[ 2755.149212][   T28] audit: type=1800 audit(2000002413.000:756): pid=27174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4664" name="bus" dev="overlay" ino=899 res=0 errno=0
[ 2756.987986][T27185] loop3: detected capacity change from 0 to 4096
[ 2757.021862][T27185] EXT4-fs (loop3): Test dummy encryption mode enabled
[ 2757.119766][T27185] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[ 2757.153217][T27185] System zones: 0-5
[ 2757.351397][T27185] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2758.934183][T17097] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2759.548150][T27223] Invalid ELF section header size
[ 2760.339062][T27223] program syz.3.4671 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2760.392286][T27089] usb 9-1: new high-speed USB device number 14 using dummy_hcd
[ 2760.538145][T27232] Invalid ELF section header size
[ 2760.610652][T27089] usb 9-1: device descriptor read/64, error -71
[ 2761.299257][T27089] usb 9-1: new high-speed USB device number 15 using dummy_hcd
[ 2761.766622][T27089] usb 9-1: device descriptor read/64, error -71
[ 2762.012668][T27089] usb usb9-port1: attempt power cycle
[ 2762.492393][T27089] usb 9-1: new high-speed USB device number 16 using dummy_hcd
[ 2762.719159][T27248] loop3: detected capacity change from 0 to 4096
[ 2762.909657][T27248] EXT4-fs (loop3): Test dummy encryption mode enabled
[ 2763.195573][T27248] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[ 2763.249877][T27248] System zones: 0-5
[ 2763.290897][T27248] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2763.352258][T27089] usb 9-1: device not accepting address 16, error -71
[ 2764.591951][T17097] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2764.648134][T27266] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4681'.
[ 2764.715229][T27266] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4681'.
[ 2764.950098][T27266] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4681'.
[ 2765.152566][T25747] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[ 2765.442313][T25747] usb 4-1: Using ep0 maxpacket: 16
[ 2765.522338][T25747] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[ 2765.541073][T25747] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2765.549802][T25747] usb 4-1: Product: syz
[ 2765.554373][T25747] usb 4-1: Manufacturer: syz
[ 2765.559017][T25747] usb 4-1: SerialNumber: syz
[ 2765.587300][T25747] usb 4-1: config 0 descriptor??
[ 2766.323790][T25747] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[ 2766.372785][T25747] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 2766.383117][T25747] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[ 2766.391289][T25747] usb 4-1: media controller created
[ 2766.523974][T25747] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 2766.531450][T27272] Cannot find add_set index 0 as target
[ 2768.072920][T25747] zl10353_read_register: readreg error (reg=127, ret==0)
[ 2768.080380][T25747] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[ 2768.098808][T25747] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[ 2768.137086][T25747] usb 4-1: USB disconnect, device number 51
[ 2768.336841][T27290] Invalid ELF section header size
[ 2768.530523][T25747] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[ 2769.352348][T17240] usb 9-1: new high-speed USB device number 18 using dummy_hcd
[ 2769.474411][T27297] loop9: detected capacity change from 0 to 4096
[ 2769.512559][T17240] usb 9-1: device descriptor read/64, error -71
[ 2769.569244][T27297] EXT4-fs (loop9): Test dummy encryption mode enabled
[ 2769.822705][T17240] usb 9-1: new high-speed USB device number 19 using dummy_hcd
[ 2769.926119][T27297] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[ 2770.004189][T27297] System zones: 0-5
[ 2770.018338][T17240] usb 9-1: device descriptor read/64, error -71
[ 2770.717709][T27297] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2770.933027][T17240] usb usb9-port1: attempt power cycle
[ 2771.632268][T17240] usb 9-1: new high-speed USB device number 20 using dummy_hcd
[ 2771.651782][T24307] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2771.716431][T17240] usb 9-1: device descriptor read/8, error -71
[ 2772.188276][T17240] usb 9-1: new high-speed USB device number 21 using dummy_hcd
[ 2773.232175][T17240] usb 9-1: device descriptor read/8, error -71
[ 2773.373474][T17240] usb usb9-port1: unable to enumerate USB device
[ 2773.487497][T27329] Invalid ELF section header size
[ 2775.512699][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[ 2775.519233][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[ 2776.688090][T27345] netlink: 44 bytes leftover after parsing attributes in process `syz.8.4702'.
[ 2776.752495][T27345] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4702'.
[ 2776.880636][T27355] loop3: detected capacity change from 0 to 4096
[ 2776.948122][T27355] EXT4-fs (loop3): Test dummy encryption mode enabled
[ 2777.017298][T27355] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[ 2777.037617][T27345] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4702'.
[ 2777.200845][   T23] usb 6-1: new high-speed USB device number 43 using dummy_hcd
[ 2777.216983][T27355] System zones: 0-5
[ 2777.237010][T27355] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2778.222187][   T23] usb 6-1: Using ep0 maxpacket: 16
[ 2778.707370][   T23] usb 6-1: no configurations
[ 2779.116777][   T23] usb 6-1: can't read configurations, error -22
[ 2779.243902][T17097] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2779.403160][   T23] usb 6-1: new high-speed USB device number 44 using dummy_hcd
[ 2779.772190][   T23] usb 6-1: Using ep0 maxpacket: 16
[ 2780.573326][   T23] usb 6-1: device descriptor read/all, error -71
[ 2780.601145][   T23] usb usb6-port1: attempt power cycle
[ 2781.252327][   T28] audit: type=1800 audit(2000002439.080:757): pid=27394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4712" name="bus" dev="overlay" ino=3178 res=0 errno=0
[ 2783.747004][T27422] Invalid ELF section header size
[ 2784.503413][T27420] loop5: detected capacity change from 0 to 4096
[ 2784.530287][T27420] EXT4-fs (loop5): Test dummy encryption mode enabled
[ 2784.991131][T27420] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[ 2785.013387][T27420] System zones: 0-5
[ 2785.066680][T27420] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2785.405377][T25747] usb 9-1: new high-speed USB device number 22 using dummy_hcd
[ 2786.592370][T25747] usb 9-1: Using ep0 maxpacket: 16
[ 2786.604305][T25747] usb 9-1: no configurations
[ 2786.622880][T25747] usb 9-1: can't read configurations, error -22
[ 2786.777972][T20676] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2786.902609][T25747] usb 9-1: new high-speed USB device number 23 using dummy_hcd
[ 2787.232635][T25747] usb 9-1: Using ep0 maxpacket: 16
[ 2787.241121][T25747] usb 9-1: no configurations
[ 2787.246199][T25747] usb 9-1: can't read configurations, error -22
[ 2787.268868][T25747] usb usb9-port1: attempt power cycle
[ 2787.386968][T27449] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4724'.
[ 2787.414223][T27448] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4724'.
[ 2787.442461][T27089] usb 6-1: new high-speed USB device number 46 using dummy_hcd
[ 2787.480327][T27448] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4724'.
[ 2787.642362][T27089] usb 6-1: Using ep0 maxpacket: 8
[ 2787.680603][T27089] usb 6-1: config 8 has 0 interfaces, different from the descriptor's value: 1
[ 2787.742422][T25747] usb 9-1: new high-speed USB device number 24 using dummy_hcd
[ 2787.744580][T27089] usb 6-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice=5f.1d
[ 2787.792813][T25747] usb 9-1: Using ep0 maxpacket: 16
[ 2787.805286][T27089] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2787.808395][T25747] usb 9-1: no configurations
[ 2787.839931][T25747] usb 9-1: can't read configurations, error -22
[ 2787.846795][T27448] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4724'.
[ 2787.867379][T27089] usb 6-1: Product: syz
[ 2787.884725][T27089] usb 6-1: Manufacturer: syz
[ 2787.937168][T27089] usb 6-1: SerialNumber: syz
[ 2788.016261][T25747] usb 9-1: new high-speed USB device number 25 using dummy_hcd
[ 2788.262198][T25747] usb 9-1: device not accepting address 25, error -71
[ 2788.336930][T25747] usb usb9-port1: unable to enumerate USB device
[ 2791.507484][T27089] usb 6-1: USB disconnect, device number 46
[ 2792.347606][T27472] Invalid ELF section header size
[ 2792.852869][T27089] usb 6-1: new high-speed USB device number 47 using dummy_hcd
[ 2793.082797][T27089] usb 6-1: Using ep0 maxpacket: 16
[ 2793.144554][T27089] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2793.268965][T27089] usb 6-1: config 0 has no interfaces?
[ 2793.431686][T27089] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[ 2793.578449][T27089] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2793.731186][T27089] usb 6-1: Product: syz
[ 2793.806290][T27089] usb 6-1: Manufacturer: syz
[ 2793.884766][T27089] usb 6-1: SerialNumber: syz
[ 2794.098815][T27089] usb 6-1: config 0 descriptor??
[ 2794.988166][  T786] usb 6-1: USB disconnect, device number 47
[ 2795.572293][ T2178] usb 10-1: new high-speed USB device number 29 using dummy_hcd
[ 2796.671627][T27502] Invalid ELF section header size
[ 2796.676939][ T2178] usb 10-1: Using ep0 maxpacket: 16
[ 2796.858348][ T2178] usb 10-1: no configurations
[ 2796.882173][ T2178] usb 10-1: can't read configurations, error -22
[ 2797.032421][ T2178] usb 10-1: new high-speed USB device number 30 using dummy_hcd
[ 2797.972322][ T2178] usb 10-1: Using ep0 maxpacket: 16
[ 2798.037033][ T2178] usb 10-1: no configurations
[ 2798.235045][ T2178] usb 10-1: can't read configurations, error -22
[ 2798.278082][ T2178] usb usb10-port1: attempt power cycle
[ 2802.762807][T27541] Invalid ELF section header size
[ 2803.566267][T27548] Invalid ELF section header size
[ 2804.522452][ T2178] usb 6-1: new high-speed USB device number 48 using dummy_hcd
[ 2804.712632][T27548] program syz.9.4750 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2804.793430][ T2178] usb 6-1: Using ep0 maxpacket: 16
[ 2804.982544][ T2178] usb 6-1: no configurations
[ 2804.987224][ T2178] usb 6-1: can't read configurations, error -22
[ 2805.812178][ T2178] usb 6-1: new high-speed USB device number 49 using dummy_hcd
[ 2806.085933][ T2178] usb 6-1: Using ep0 maxpacket: 16
[ 2806.122444][ T2178] usb 6-1: no configurations
[ 2806.170361][ T2178] usb 6-1: can't read configurations, error -22
[ 2806.274194][ T2178] usb usb6-port1: attempt power cycle
[ 2807.869779][T27581] Invalid ELF section header size
[ 2807.875757][  T786] usb 9-1: new high-speed USB device number 26 using dummy_hcd
[ 2808.072147][  T786] usb 9-1: Using ep0 maxpacket: 8
[ 2808.091839][  T786] usb 9-1: config 8 has 0 interfaces, different from the descriptor's value: 1
[ 2808.129350][  T786] usb 9-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice=5f.1d
[ 2808.164145][  T786] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2808.173160][  T786] usb 9-1: Product: syz
[ 2808.177909][  T786] usb 9-1: Manufacturer: syz
[ 2808.183997][  T786] usb 9-1: SerialNumber: syz
[ 2809.284307][  T786] usb 9-1: USB disconnect, device number 26
[ 2809.535244][T27597] overlayfs: failed to resolve './file0': -2
[ 2812.242305][T20790] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[ 2812.483537][T20790] usb 4-1: Using ep0 maxpacket: 16
[ 2812.598929][T20790] usb 4-1: no configurations
[ 2812.694790][T20790] usb 4-1: can't read configurations, error -22
[ 2812.982908][T20790] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[ 2813.392387][T27629] Invalid ELF section header size
[ 2813.582644][T20790] usb 4-1: Using ep0 maxpacket: 16
[ 2813.662950][T20790] usb 4-1: no configurations
[ 2813.667618][T20790] usb 4-1: can't read configurations, error -22
[ 2813.800735][T20790] usb usb4-port1: attempt power cycle
[ 2814.282421][ T2178] usb 10-1: new high-speed USB device number 32 using dummy_hcd
[ 2814.409131][T20790] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[ 2814.472273][ T2178] usb 10-1: Using ep0 maxpacket: 8
[ 2814.635494][ T2178] usb 10-1: config 8 has 0 interfaces, different from the descriptor's value: 1
[ 2814.653154][T20790] usb 4-1: Using ep0 maxpacket: 16
[ 2814.656786][ T2178] usb 10-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice=5f.1d
[ 2814.671116][ T2178] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2814.692596][ T2178] usb 10-1: Product: syz
[ 2814.697200][ T2178] usb 10-1: Manufacturer: syz
[ 2814.708641][ T2178] usb 10-1: SerialNumber: syz
[ 2814.709291][T20790] usb 4-1: no configurations
[ 2814.769005][T20790] usb 4-1: can't read configurations, error -22
[ 2815.092329][T20790] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[ 2815.619278][T20790] usb 4-1: device not accepting address 55, error -71
[ 2817.042931][T20790] usb usb4-port1: unable to enumerate USB device
[ 2819.158710][ T2178] usb 10-1: USB disconnect, device number 32
[ 2821.007361][   T28] audit: type=1800 audit(2000002478.350:758): pid=27660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4776" name="bus" dev="overlay" ino=2179 res=0 errno=0
[ 2821.362365][T27674] Invalid ELF section header size
[ 2821.452080][    C0] ------------[ cut here ]------------
[ 2821.458365][    C0] ODEBUG: free active (active state 0) object: ffff88802686cc90 object type: timer_list hint: rose_t0timer_expiry+0x0/0x350
[ 2821.472765][    C0] WARNING: CPU: 0 PID: 27673 at lib/debugobjects.c:518 debug_check_no_obj_freed+0x446/0x540
[ 2821.483051][    C0] Modules linked in:
[ 2821.487048][    C0] CPU: 0 PID: 27673 Comm: syz.9.4778 Not tainted syzkaller #0
[ 2821.494652][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 2821.504920][    C0] RIP: 0010:debug_check_no_obj_freed+0x446/0x540
[ 2821.511335][    C0] Code: 4c 8b 4d 00 48 c7 c7 c0 6d fc 8a 48 c7 c6 20 6a fc 8a 48 c7 c2 40 6f fc 8a 8b 0c 24 4d 89 f8 41 55 e8 5e 07 2a fd 48 83 c4 08 <0f> 0b 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc ff df ff 05 d3 b3 24
[ 2821.531116][    C0] RSP: 0000:ffffc90000007a50 EFLAGS: 00010296
[ 2821.537522][    C0] RAX: 86a266f5f4471700 RBX: ffffffff970d96c8 RCX: ffff88802b270000
[ 2821.545775][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[ 2821.553904][    C0] RBP: ffffffff8aac9f00 R08: ffffc90000007647 R09: 1ffff92000000ec8
[ 2821.561954][    C0] R10: dffffc0000000000 R11: fffff52000000ec9 R12: ffff88802686ce00
[ 2821.570083][    C0] R13: ffffffff89673230 R14: ffff88802686c000 R15: ffff88802686cc90
[ 2821.578225][    C0] FS:  0000555555f9f500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[ 2821.587319][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2821.594084][    C0] CR2: 0000001b3261dff8 CR3: 00000000680d9000 CR4: 00000000003506f0
[ 2821.602222][    C0] Call Trace:
[ 2821.605572][    C0]  <IRQ>
[ 2821.608562][    C0]  slab_free_freelist_hook+0xd2/0x1b0
[ 2821.614142][    C0]  ? rose_timer_expiry+0x4c6/0x5f0
[ 2821.619344][    C0]  __kmem_cache_free+0xba/0x1f0
[ 2821.624400][    C0]  rose_timer_expiry+0x4c6/0x5f0
[ 2821.629436][    C0]  call_timer_fn+0x16e/0x530
[ 2821.634188][    C0]  ? rose_start_t1timer+0xd0/0xd0
[ 2821.639290][    C0]  ? call_timer_fn+0xbf/0x530
[ 2821.644136][    C0]  ? __run_timers+0x7d0/0x7d0
[ 2821.648903][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[ 2821.654365][    C0]  ? lockdep_hardirqs_on+0x98/0x150
[ 2821.659660][    C0]  ? rose_start_t1timer+0xd0/0xd0
[ 2821.664851][    C0]  __run_timers+0x52d/0x7d0
[ 2821.669469][    C0]  ? detach_timer+0x2b0/0x2b0
[ 2821.674347][    C0]  ? lock_chain_count+0x20/0x20
[ 2821.679306][    C0]  run_timer_softirq+0x67/0xf0
[ 2821.684260][    C0]  handle_softirqs+0x280/0x820
[ 2821.689106][    C0]  ? __irq_exit_rcu+0xc7/0x190
[ 2821.694072][    C0]  ? do_softirq+0x180/0x180
[ 2821.698654][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[ 2821.704056][    C0]  __irq_exit_rcu+0xc7/0x190
[ 2821.708719][    C0]  ? irq_exit_rcu+0x20/0x20
[ 2821.713492][    C0]  irq_exit_rcu+0x9/0x20
[ 2821.717844][    C0]  sysvec_apic_timer_interrupt+0xa4/0xc0
[ 2821.723747][    C0]  </IRQ>
[ 2821.726768][    C0]  <TASK>
[ 2821.729763][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 2821.735926][    C0] RIP: 0010:raw_spin_rq_unlock_irq+0x13/0x90
[ 2821.741978][    C0] Code: 0f 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 32 aa 10 09 66 90 41 57 41 56 53 eb 11 e8 94 52 1a 09 e8 8f 2f 2e 00 fb 5b <41> 5e 41 5f c3 f3 0f 1e fa 49 be 00 00 00 00 00 fc ff df 49 89 ff
[ 2821.761995][    C0] RSP: 0000:ffffc9000b55f3e8 EFLAGS: 00000282
[ 2821.768245][    C0] RAX: 86a266f5f4471700 RBX: ffff8880b8e3cf48 RCX: 86a266f5f4471700
[ 2821.776430][    C0] RDX: dffffc0000000000 RSI: ffffffff8aaabce0 RDI: ffffffff8afc6400
[ 2821.784580][    C0] RBP: ffffc9000b55f5f0 R08: ffffffff90da752f R09: 1ffffffff21b4ea5
[ 2821.792768][    C0] R10: dffffc0000000000 R11: fffffbfff21b4ea6 R12: dffffc0000000000
[ 2821.800924][    C0] R13: ffff8880b8e3c200 R14: dffffc0000000000 R15: ffff8880b8e3cf48
[ 2821.809176][    C0]  __schedule+0x171e/0x44d0
[ 2821.813956][    C0]  ? asan.module_dtor+0x20/0x20
[ 2821.818894][    C0]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[ 2821.824695][    C0]  ? lockdep_hardirqs_on+0x98/0x150
[ 2821.830049][    C0]  preempt_schedule_irq+0xb5/0x140
[ 2821.835381][    C0]  ? preempt_schedule_notrace+0x110/0x110
[ 2821.841218][    C0]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[ 2821.847250][    C0]  irqentry_exit+0x67/0x70
[ 2821.851777][    C0]  asm_sysvec_call_function_single+0x1a/0x20
[ 2821.857972][    C0] RIP: 0010:put_cpu_partial+0x1b0/0x250
[ 2821.863725][    C0] Code: 3b 44 24 18 0f 85 b4 00 00 00 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 2c f3 91 08 f7 c5 00 02 00 00 74 c0 fb 4d 85 e4 <75> bf eb c8 e8 d7 10 3f 02 85 c0 0f 84 e9 fe ff ff 83 3d c8 41 6e
[ 2821.883606][    C0] RSP: 0000:ffffc9000b55f760 EFLAGS: 00000246
[ 2821.889768][    C0] RAX: 86a266f5f4471700 RBX: ffff888019a4cc80 RCX: 86a266f5f4471700
[ 2821.897946][    C0] RDX: dffffc0000000000 RSI: ffffffff8aaabce0 RDI: ffffffff8afc6400
[ 2821.906129][    C0] RBP: 0000000000000286 R08: ffffffff90da752f R09: 1ffffffff21b4ea5
[ 2821.914270][    C0] R10: dffffc0000000000 R11: fffffbfff21b4ea6 R12: 0000000000000000
[ 2821.922485][    C0] R13: 0000000000000000 R14: ffff88802b270000 R15: ffff8880b8e42aa0
[ 2821.930848][    C0]  ? put_cpu_partial+0x6e/0x250
[ 2821.935912][    C0]  __slab_free+0x31d/0x410
[ 2821.940474][    C0]  ? __phys_addr+0xba/0x170
[ 2821.945175][    C0]  qlist_free_all+0x75/0xe0
[ 2821.949781][    C0]  kasan_quarantine_reduce+0x143/0x160
[ 2821.955452][    C0]  __kasan_slab_alloc+0x22/0x80
[ 2821.960402][    C0]  slab_post_alloc_hook+0x6e/0x4d0
[ 2821.965742][    C0]  kmem_cache_alloc+0x11e/0x2e0
[ 2821.970677][    C0]  ? jbd2__journal_start+0x140/0x5b0
[ 2821.976189][    C0]  jbd2__journal_start+0x140/0x5b0
[ 2821.981398][    C0]  __ext4_journal_start_sb+0x203/0x570
[ 2821.987169][    C0]  ext4_dirty_inode+0x93/0x110
[ 2821.992070][    C0]  ? __ext4_expand_extra_isize+0x400/0x400
[ 2821.997956][    C0]  __mark_inode_dirty+0x2cc/0xca0
[ 2822.003182][    C0]  file_update_time+0x197/0x1b0
[ 2822.008117][    C0]  ext4_page_mkwrite+0x1f3/0x1210
[ 2822.013359][    C0]  ? lock_chain_count+0x20/0x20
[ 2822.018342][    C0]  ? asm_sysvec_call_function_single+0x1a/0x20
[ 2822.024668][    C0]  ? lockdep_hardirqs_on+0x98/0x150
[ 2822.029959][    C0]  ? asm_sysvec_call_function_single+0x1a/0x20
[ 2822.036280][    C0]  ? ext4_change_inode_journal_flag+0x8b0/0x8b0
[ 2822.042732][    C0]  ? folio_add_wait_queue+0x281/0x2a0
[ 2822.048194][    C0]  ? folio_unlock+0xdd/0x2e0
[ 2822.053011][    C0]  do_page_mkwrite+0x153/0x3e0
[ 2822.057871][    C0]  handle_mm_fault+0x19b8/0x4920
[ 2822.063039][    C0]  ? handle_mm_fault+0xd1/0x4920
[ 2822.068107][    C0]  ? numa_migrate_prep+0x350/0x350
[ 2822.073460][    C0]  ? lock_mm_and_find_vma+0x9c/0x300
[ 2822.078835][    C0]  do_user_addr_fault+0x738/0x12e0
[ 2822.084167][    C0]  exc_page_fault+0x67/0x110
[ 2822.088864][    C0]  asm_exc_page_fault+0x26/0x30
[ 2822.093884][    C0] RIP: 0033:0x7fc4c766f6a2
[ 2822.098370][    C0] Code: 0f 1f 84 00 00 00 00 00 be 08 00 00 00 48 89 df e8 a3 75 fe ff 48 8b 53 38 48 8d 42 f8 48 89 43 38 8b 43 28 83 c0 08 89 43 28 <4c> 89 62 f8 41 8d 56 01 41 39 ee 0f 83 8d 00 00 00 41 89 d6 48 8b
[ 2822.118229][    C0] RSP: 002b:00007fff7189b790 EFLAGS: 00010202
[ 2822.124497][    C0] RAX: 0000000000006008 RBX: 00007fc4c8515720 RCX: 0000000000000000
[ 2822.132624][    C0] RDX: 0000001b3261e000 RSI: 0000000000000008 RDI: 00007fc4c8515720
[ 2822.140745][    C0] RBP: 00000000000001ee R08: 00007fc4c6dfd090 R09: 00007fc4c79d2000
[ 2822.148895][    C0] R10: 00007fc4c6dfd008 R11: 000000000000000e R12: ffffffff81ee9ecb
[ 2822.157050][    C0] R13: 00007fc4c79e6128 R14: 0000000000000147 R15: ffffffffffffa000
[ 2822.165225][    C0]  ? inode_permission+0x37b/0x480
[ 2822.170375][    C0]  </TASK>
[ 2822.173555][    C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 2822.180853][    C0] CPU: 0 PID: 27673 Comm: syz.9.4778 Not tainted syzkaller #0
[ 2822.188312][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 2822.198386][    C0] Call Trace:
[ 2822.201680][    C0]  <IRQ>
[ 2822.204535][    C0]  dump_stack_lvl+0x16c/0x230
[ 2822.209232][    C0]  ? show_regs_print_info+0x20/0x20
[ 2822.214443][    C0]  ? load_image+0x3b0/0x3b0
[ 2822.218961][    C0]  panic+0x2c0/0x710
[ 2822.222863][    C0]  ? bpf_jit_dump+0xd0/0xd0
[ 2822.227401][    C0]  __warn+0x2e0/0x470
[ 2822.231408][    C0]  ? debug_check_no_obj_freed+0x446/0x540
[ 2822.237145][    C0]  ? debug_check_no_obj_freed+0x446/0x540
[ 2822.242877][    C0]  report_bug+0x2be/0x4f0
[ 2822.247223][    C0]  ? debug_check_no_obj_freed+0x446/0x540
[ 2822.252956][    C0]  ? debug_check_no_obj_freed+0x446/0x540
[ 2822.258689][    C0]  ? debug_check_no_obj_freed+0x448/0x540
[ 2822.264423][    C0]  handle_bug+0xcf/0x120
[ 2822.268673][    C0]  exc_invalid_op+0x1a/0x50
[ 2822.273184][    C0]  asm_exc_invalid_op+0x1a/0x20
[ 2822.278045][    C0] RIP: 0010:debug_check_no_obj_freed+0x446/0x540
[ 2822.284387][    C0] Code: 4c 8b 4d 00 48 c7 c7 c0 6d fc 8a 48 c7 c6 20 6a fc 8a 48 c7 c2 40 6f fc 8a 8b 0c 24 4d 89 f8 41 55 e8 5e 07 2a fd 48 83 c4 08 <0f> 0b 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc ff df ff 05 d3 b3 24
[ 2822.303999][    C0] RSP: 0000:ffffc90000007a50 EFLAGS: 00010296
[ 2822.310074][    C0] RAX: 86a266f5f4471700 RBX: ffffffff970d96c8 RCX: ffff88802b270000
[ 2822.318065][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[ 2822.326051][    C0] RBP: ffffffff8aac9f00 R08: ffffc90000007647 R09: 1ffff92000000ec8
[ 2822.334035][    C0] R10: dffffc0000000000 R11: fffff52000000ec9 R12: ffff88802686ce00
[ 2822.342019][    C0] R13: ffffffff89673230 R14: ffff88802686c000 R15: ffff88802686cc90
[ 2822.350032][    C0]  ? rose_transmit_link+0x740/0x740
[ 2822.355262][    C0]  slab_free_freelist_hook+0xd2/0x1b0
[ 2822.360650][    C0]  ? rose_timer_expiry+0x4c6/0x5f0
[ 2822.365776][    C0]  __kmem_cache_free+0xba/0x1f0
[ 2822.370643][    C0]  rose_timer_expiry+0x4c6/0x5f0
[ 2822.375591][    C0]  call_timer_fn+0x16e/0x530
[ 2822.380183][    C0]  ? rose_start_t1timer+0xd0/0xd0
[ 2822.385250][    C0]  ? call_timer_fn+0xbf/0x530
[ 2822.389967][    C0]  ? __run_timers+0x7d0/0x7d0
[ 2822.394676][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[ 2822.399882][    C0]  ? lockdep_hardirqs_on+0x98/0x150
[ 2822.405096][    C0]  ? rose_start_t1timer+0xd0/0xd0
[ 2822.410134][    C0]  __run_timers+0x52d/0x7d0
[ 2822.414650][    C0]  ? detach_timer+0x2b0/0x2b0
[ 2822.419332][    C0]  ? lock_chain_count+0x20/0x20
[ 2822.424197][    C0]  run_timer_softirq+0x67/0xf0
[ 2822.428971][    C0]  handle_softirqs+0x280/0x820
[ 2822.433843][    C0]  ? __irq_exit_rcu+0xc7/0x190
[ 2822.438626][    C0]  ? do_softirq+0x180/0x180
[ 2822.443141][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[ 2822.448448][    C0]  __irq_exit_rcu+0xc7/0x190
[ 2822.453060][    C0]  ? irq_exit_rcu+0x20/0x20
[ 2822.457582][    C0]  irq_exit_rcu+0x9/0x20
[ 2822.461833][    C0]  sysvec_apic_timer_interrupt+0xa4/0xc0
[ 2822.467492][    C0]  </IRQ>
[ 2822.470429][    C0]  <TASK>
[ 2822.473360][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 2822.479347][    C0] RIP: 0010:raw_spin_rq_unlock_irq+0x13/0x90
[ 2822.485341][    C0] Code: 0f 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 32 aa 10 09 66 90 41 57 41 56 53 eb 11 e8 94 52 1a 09 e8 8f 2f 2e 00 fb 5b <41> 5e 41 5f c3 f3 0f 1e fa 49 be 00 00 00 00 00 fc ff df 49 89 ff
[ 2822.504955][    C0] RSP: 0000:ffffc9000b55f3e8 EFLAGS: 00000282
[ 2822.511026][    C0] RAX: 86a266f5f4471700 RBX: ffff8880b8e3cf48 RCX: 86a266f5f4471700
[ 2822.519179][    C0] RDX: dffffc0000000000 RSI: ffffffff8aaabce0 RDI: ffffffff8afc6400
[ 2822.527159][    C0] RBP: ffffc9000b55f5f0 R08: ffffffff90da752f R09: 1ffffffff21b4ea5
[ 2822.535228][    C0] R10: dffffc0000000000 R11: fffffbfff21b4ea6 R12: dffffc0000000000
[ 2822.543206][    C0] R13: ffff8880b8e3c200 R14: dffffc0000000000 R15: ffff8880b8e3cf48
[ 2822.551286][    C0]  __schedule+0x171e/0x44d0
[ 2822.555821][    C0]  ? asan.module_dtor+0x20/0x20
[ 2822.560688][    C0]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[ 2822.566329][    C0]  ? lockdep_hardirqs_on+0x98/0x150
[ 2822.571558][    C0]  preempt_schedule_irq+0xb5/0x140
[ 2822.576772][    C0]  ? preempt_schedule_notrace+0x110/0x110
[ 2822.582600][    C0]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[ 2822.588420][    C0]  irqentry_exit+0x67/0x70
[ 2822.592850][    C0]  asm_sysvec_call_function_single+0x1a/0x20
[ 2822.598832][    C0] RIP: 0010:put_cpu_partial+0x1b0/0x250
[ 2822.604400][    C0] Code: 3b 44 24 18 0f 85 b4 00 00 00 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 2c f3 91 08 f7 c5 00 02 00 00 74 c0 fb 4d 85 e4 <75> bf eb c8 e8 d7 10 3f 02 85 c0 0f 84 e9 fe ff ff 83 3d c8 41 6e
[ 2822.624079][    C0] RSP: 0000:ffffc9000b55f760 EFLAGS: 00000246
[ 2822.630159][    C0] RAX: 86a266f5f4471700 RBX: ffff888019a4cc80 RCX: 86a266f5f4471700
[ 2822.638139][    C0] RDX: dffffc0000000000 RSI: ffffffff8aaabce0 RDI: ffffffff8afc6400
[ 2822.646120][    C0] RBP: 0000000000000286 R08: ffffffff90da752f R09: 1ffffffff21b4ea5
[ 2822.654100][    C0] R10: dffffc0000000000 R11: fffffbfff21b4ea6 R12: 0000000000000000
[ 2822.662089][    C0] R13: 0000000000000000 R14: ffff88802b270000 R15: ffff8880b8e42aa0
[ 2822.670112][    C0]  ? put_cpu_partial+0x6e/0x250
[ 2822.675081][    C0]  __slab_free+0x31d/0x410
[ 2822.679560][    C0]  ? __phys_addr+0xba/0x170
[ 2822.684101][    C0]  qlist_free_all+0x75/0xe0
[ 2822.688637][    C0]  kasan_quarantine_reduce+0x143/0x160
[ 2822.694114][    C0]  __kasan_slab_alloc+0x22/0x80
[ 2822.699021][    C0]  slab_post_alloc_hook+0x6e/0x4d0
[ 2822.704148][    C0]  kmem_cache_alloc+0x11e/0x2e0
[ 2822.709009][    C0]  ? jbd2__journal_start+0x140/0x5b0
[ 2822.714300][    C0]  jbd2__journal_start+0x140/0x5b0
[ 2822.719417][    C0]  __ext4_journal_start_sb+0x203/0x570
[ 2822.724889][    C0]  ext4_dirty_inode+0x93/0x110
[ 2822.729659][    C0]  ? __ext4_expand_extra_isize+0x400/0x400
[ 2822.735479][    C0]  __mark_inode_dirty+0x2cc/0xca0
[ 2822.740525][    C0]  file_update_time+0x197/0x1b0
[ 2822.745401][    C0]  ext4_page_mkwrite+0x1f3/0x1210
[ 2822.750437][    C0]  ? lock_chain_count+0x20/0x20
[ 2822.755296][    C0]  ? asm_sysvec_call_function_single+0x1a/0x20
[ 2822.761456][    C0]  ? lockdep_hardirqs_on+0x98/0x150
[ 2822.766666][    C0]  ? asm_sysvec_call_function_single+0x1a/0x20
[ 2822.772849][    C0]  ? ext4_change_inode_journal_flag+0x8b0/0x8b0
[ 2822.779136][    C0]  ? folio_add_wait_queue+0x281/0x2a0
[ 2822.784529][    C0]  ? folio_unlock+0xdd/0x2e0
[ 2822.789136][    C0]  do_page_mkwrite+0x153/0x3e0
[ 2822.793949][    C0]  handle_mm_fault+0x19b8/0x4920
[ 2822.798938][    C0]  ? handle_mm_fault+0xd1/0x4920
[ 2822.803933][    C0]  ? numa_migrate_prep+0x350/0x350
[ 2822.809070][    C0]  ? lock_mm_and_find_vma+0x9c/0x300
[ 2822.814375][    C0]  do_user_addr_fault+0x738/0x12e0
[ 2822.819502][    C0]  exc_page_fault+0x67/0x110
[ 2822.824108][    C0]  asm_exc_page_fault+0x26/0x30
[ 2822.828959][    C0] RIP: 0033:0x7fc4c766f6a2
[ 2822.833382][    C0] Code: 0f 1f 84 00 00 00 00 00 be 08 00 00 00 48 89 df e8 a3 75 fe ff 48 8b 53 38 48 8d 42 f8 48 89 43 38 8b 43 28 83 c0 08 89 43 28 <4c> 89 62 f8 41 8d 56 01 41 39 ee 0f 83 8d 00 00 00 41 89 d6 48 8b
[ 2822.852997][    C0] RSP: 002b:00007fff7189b790 EFLAGS: 00010202
[ 2822.859067][    C0] RAX: 0000000000006008 RBX: 00007fc4c8515720 RCX: 0000000000000000
[ 2822.867044][    C0] RDX: 0000001b3261e000 RSI: 0000000000000008 RDI: 00007fc4c8515720
[ 2822.875019][    C0] RBP: 00000000000001ee R08: 00007fc4c6dfd090 R09: 00007fc4c79d2000
[ 2822.882997][    C0] R10: 00007fc4c6dfd008 R11: 000000000000000e R12: ffffffff81ee9ecb
[ 2822.890975][    C0] R13: 00007fc4c79e6128 R14: 0000000000000147 R15: ffffffffffffa000
[ 2822.898952][    C0]  ? inode_permission+0x37b/0x480
[ 2822.903997][    C0]  </TASK>
[ 2822.907366][    C0] Kernel Offset: disabled
[ 2822.911817][    C0] Rebooting in 86400 seconds..