last executing test programs:

6m35.757076101s ago: executing program 32 (id=42):
r0 = socket(0x10, 0x803, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x8481, 0x0)
ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000000c0))
ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000000)=0x27)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000005c0), 0x0)
r3 = open(0x0, 0x0, 0x4)
ioctl$IOC_PR_PREEMPT_ABORT(r3, 0x401870cc, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x3fa1dc947ffe4b82})

6m5.024150897s ago: executing program 0 (id=111):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xa)
sendmmsg$inet(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="316f825a3d29f96a2093a917017b4cd300000000bee70035ed313e19d6dd1fb41a20baf7f73430670040cdd4b16742e94b62f4eb1c5d9daab7f3028100ae8180db94b9de7c030062b0e6fe7766a0842912179154a96fa88e161d4a9f77a486e10d1d50e44155790748b7226fa4bb5d77e85729336ba6369a4c33ac53b45d46a92db9fda99df4429dc23db6a1706328df4e75eb173a81bd4af8b89d1870c9b2382a7d9d67b1cd03b076bf90286b63eb7aaea4cbb1280955e9a59cd8e5e8ac68c27da3d542ae", 0xc5}], 0x1}}], 0x1, 0x4000004)
sendmmsg$inet(r0, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001140)="a475b3", 0x3}], 0x1}}], 0x1, 0x1)

6m4.218971697s ago: executing program 0 (id=113):
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES64], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}]}]}, 0x20}}, 0x0)
syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f00000000c0)={0x2})

6m1.452605475s ago: executing program 0 (id=116):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18)
write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x20200}}, 0x50)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004c0c4}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2)

6m0.654862288s ago: executing program 0 (id=119):
syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000080)='./file1\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x278, &(0x7f0000000200)="$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")
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)

6m0.148391948s ago: executing program 0 (id=121):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x9, @multicast, 'macvlan0\x00'}}, 0x1e)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x200000000000004a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246)
r2 = dup(r1)
ioctl$PPPIOCSPASS(r2, 0x40107447, 0x0)

5m57.070894486s ago: executing program 0 (id=130):
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0)
syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000001240)=ANY=[@ANYRES16=0x0, @ANYRESOCT=0x0, @ANYRES16, @ANYRES32=0x0, @ANYBLOB="a6af1c1d142bbbe86c2b6c42ac9eefc3f3124a519189b105d77c5f5267121c170995cd3bb174096f3c", @ANYBLOB="a51b7d19e69bbcb11700c2dcb2d851f79d44e9bb8469d2a5dd66597db213ade6acfaffd88afce31be876c207fb5d362b6e91010b006a4279f2d4d02752a02b76b5413c5e7cd22d3cfad489bd1b84a85aa8ad47cc69d09522d51cf5cf88cf9da13593310d5e0d03a6e17940ddd391c7796ad75f4fa75bd62cb78c43c92e61de110508c5d605a2f981314c38526ac5aac6e4445e32d7cf128b440ca715e901f8b4299226dfd9bfec7a37f3bf63e1906fe520b65051ea9c14827e9cd737a6952d478ff3cb4436a913", @ANYBLOB="01ce6671a3b30f673148672100038bbb4413ea284b892438cdddda3dc5766f98f85fb413504b3bbb8dce2bcd2b09f68cd741168d69dae50652ca7b67c5b0a27ab80ff9afa5000443de8c748e1d5beabee7c1346b215f641ae190d56ea4ab81bacd909929deb5757040e8d5b2752ea779c30f600bd516a68d881e9cc7289826d49e35134a94e27f115c8195a0f152cbd840ffdb008356c72319cceb43ccb1280556efdf0fdf582fd3cfc830dff178a068d948b7400f5aef57b6dcbfde7af6012383adb085c40e4c295c2a3be750a42400e58523d24b8eecd758aabcee22347bdb78b72b400d080a044ebde5d39ad91ff0ef75aa244381cf00cd6fe9b9a92a9968104bf02481022af426853287e521a4e3cfe480f984efcea1319ff932ebd3bc75aefea41074799f3502a7472a6686b4011a41d7f0cfb25b3dc3077b4e8ded17cfff2b1d59bc12f637c36690f5ca91ee999ec138f6ce76522e652939847435edb78f9ae18489f9d2b73c81609399f0d123f1721171bd72c012623f04d8965d3e5785d057c17998ab36af821c9b308731422ba3859b9895ace14068ea58f8cb6060c205caf209a73628eff5b9270a4a55c2d7fc59a4fe6e023bd424d8b010e2232d1b2e6ca603b466b2c82afff4a8cc469e8664d54769fc97df122b3ff8c34354dad46f900eaf6e72e5e9f8090000000000000074dadad47a42af7cdae5bde6a12f412fe2a876aa191e78e91fbf780e2f4a20f57d41376b29f990ce63aa6edf622d2203fee37df269abf869d13b175852b775fff70491d1e5d1311b7e82cba4584c147c6e79c77e89ef954a101ddb98c5ba2b312528485ece7aff23cc6fee599daea0fca71a902c969fc9077bd75970cf0f11b52af4c82b49640cc3fabbc401dead4f83aa0c4072a9e98ab5afca90be17961fc073e2f8ec0000000000f7f574d97d4b4fcece55eeac5968262e9bd94c1d1bc1138cda4410bee318185f933c130b8765e5078e7642abf5aa7fb04f7b7c930d776622f38fc1422af38d18398766ab0e98f3b07603981b1d0c0b353eb0ae7089ea49a060367512a13eea1d7d608b7297a902508744e4d75dfcdf75fc6dc73f23ef3e97dc7a357cc2e6a0f0c43636f5bdc6beddc09858a6a2ced9d33bd0e0eca77d1821865ad6e4d61b2b65005d", @ANYBLOB="f84abbddf9a1ffaa92ae6cee2439b3ef645b0793261cd23ffa1e72d013d2c85761ad9c3fa20472431a921c0f7e7554a1f8200793587dbc97c8aa7f83b9e7c9965a37", @ANYRES32], 0x0, 0x1d9, &(0x7f0000000800)="$eJzslU9rE0EYxn+zO0kazaFnrxbbi6bZgvgN7AfwAxjStRY3/ukGNKHg6qUXD+KXKPgpPAh69yAieKkHBT1UPFUkMjvvjLNaiIqhFPaB5X3eZ94/M7PMzPX8Tt4Cvh/sDFikhKLDW6XQwLKy2mHT2i9ip4IP2vo90Z+KfS82H09ePbJ0cqOfZel2Pp5BlIJZMRXyu6T/uNkR5OXDqqL4tzrzJ6PY7myWNakOPa4Et8qYX9Ill2NfxTzI1w6Eysf/UbkbKA3mvQrwyrfO7N/05on9nUfGxJLeprotJ49Ef5WVI9dXfvlBxOfSeX2wMzDkqtxiRtuwnzsSZYxxngcxZzQUoGKmvo4ub0tYBrqj4e1uPp6c3xr2N9PN9GaSrF1cfXFajuj0Pmxl6aoKphEZovEw57QdjDeAdz/HCwKoYGoGp0C5XJfiLueVs0FiG6IgN6xh6z7z/VuixQy5wjkWgLuFGU6wu7WEqaa5Zpa2jiIWp6eDecIhEQvlwIXBrWxjF4VyaXtoX6O3T8M7iTimUbp2yS9/V+yS2HWxe2L3xbq3y71JuqzwSbyVAprc649G2+XjZZnXEq8li75zJF3da6jcTFrUqFGjRo0aNWqcEPwIAAD//+lITgc=")
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000040), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000000300)=""/132, 0x84)
lseek(r0, 0x500, 0x0)

5m55.788894817s ago: executing program 33 (id=130):
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0)
syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000001240)=ANY=[@ANYRES16=0x0, @ANYRESOCT=0x0, @ANYRES16, @ANYRES32=0x0, @ANYBLOB="a6af1c1d142bbbe86c2b6c42ac9eefc3f3124a519189b105d77c5f5267121c170995cd3bb174096f3c", @ANYBLOB="a51b7d19e69bbcb11700c2dcb2d851f79d44e9bb8469d2a5dd66597db213ade6acfaffd88afce31be876c207fb5d362b6e91010b006a4279f2d4d02752a02b76b5413c5e7cd22d3cfad489bd1b84a85aa8ad47cc69d09522d51cf5cf88cf9da13593310d5e0d03a6e17940ddd391c7796ad75f4fa75bd62cb78c43c92e61de110508c5d605a2f981314c38526ac5aac6e4445e32d7cf128b440ca715e901f8b4299226dfd9bfec7a37f3bf63e1906fe520b65051ea9c14827e9cd737a6952d478ff3cb4436a913", @ANYBLOB="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", @ANYBLOB="f84abbddf9a1ffaa92ae6cee2439b3ef645b0793261cd23ffa1e72d013d2c85761ad9c3fa20472431a921c0f7e7554a1f8200793587dbc97c8aa7f83b9e7c9965a37", @ANYRES32], 0x0, 0x1d9, &(0x7f0000000800)="$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")
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000040), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000000300)=""/132, 0x84)
lseek(r0, 0x500, 0x0)

5m52.88973396s ago: executing program 2 (id=138):
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400)
ioctl$TUNSETOFFLOAD(r0, 0x8004745a, 0x2000000c)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_pressure(r1, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r2, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f)
write$cgroup_pressure(r2, &(0x7f0000000180)={'some', 0x20, 0x0, 0x20, 0x6}, 0x2f)

5m50.770160928s ago: executing program 2 (id=144):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220f00000003a8407a730b93bf0280b3"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000002140), 0x0, 0x0)
r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
ioctl$HIDIOCGUSAGE(r2, 0x40184810, 0x0)
ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f00000000c0)={0x3})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x30}}, 0x0)

5m47.277293904s ago: executing program 2 (id=153):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
syz_mount_image$jfs(&(0x7f00000003c0), &(0x7f0000000540)='./file0\x00', 0x2000000, &(0x7f0000000840)=ANY=[], 0x1, 0x6291, &(0x7f000000c200)="$eJzs3cuOHFcZB/Cv+jaXEMfKIgoWQpPEXEKIr8EYAiRZwIINC+QtsjWZRBYOINsgJ7LwRLNhwUOAkFgCYsmKB8iCLTseAEs2EiirFKqZc8Y1nW732M509cz5/aRx1denavqU/119marqEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA/PAHPz5bRcTlX6Ubjkd8LvoRvYiVpl6LiJW143n5QUQ8H9vN8VxEDJciqtz4TMRrEfHRsYh792+vNzed22c/vv+Xf/7hJ0/96B9/Gp7+319v9l+fttytW7/979/uPP72AgAAQInquq6r9DH/RPp83+u6UwDAXOTX/zrJt6sXrt5csP6o1Wq1+hDWbfVkd9pFRGy212neMzgcDwCHzGZ83HUX6JD8izaIiKe67gSw0KquO8CBuHf/9nqV8q3arwdrO+35XJA9+W9Wu9d3TJvOMn6OybweX1vRj2en9GdlTn1YJDn/3nj+l3faR2m5g85/XqblP9q59Kk4Of/+eP5jjk7+vYn5lyrnP3ik/PvyBwAAAACABZb//n+84+O/S0++KfvysOO/a3PqAwAAAAAAAAB81p50/L9dlfH/AAAAYFE1n9Ubvzv24LZp38XW3H6pinh6bHmgMOlimdWu+wEAAAAAAAAAAAAAJRnsnMN7qYoYRsTTq6t1XTc/beP1o3rS9Q+70rcfStb1kzwAAOz46NjYtfxVxHJEXErf9TdcXV2t6+WV1Xq1XlnK72dHS8v1SutzbZ42ty2N9vGGeDCqm1+23Fqvbdbn5Vnt47+vua9R3d9Hx+ajw8ABICJ2Xo3ueUU6Yur6mej6XQ6Hg/3/6LH/sx9dP04BAACAg1fXdV2lr/M+kY7597ruFAAwF/n1f/y4gFqtVqvV6qNXt9WT3WkXEbHZXqd5z2A4fgA4ZDbj4667QIfkX7RBRDzfdSeAhVZ13QEOxL37t9erlG/Vfj1I47vnc0H25L9Zba+X1580nWX8HJN5Pb62oh/PTunPc3PqwyLJ+ffG87+80z5Kyx10/vMyLf9mO4930J+u5fz74/mPOTr59ybmX6qc/+CR8u/LHwAAAAAAFlj++//xhTr+O3rczZnpYcd/1w7sXgEAAAAAAADgYN27f3s9X/eaj/9/YcJyrv88mnL+lfyLlPPvjeX/1bHl+q35u289yP8/92+v//Hmvz+fp/vNfynPVOmRVaVHRJXuqRqk6ZNs3adtDfuj5p6GVa8/SOf81MN34mpci404s2fZXvr/eNB+dk9709Phdnvd32k/t6d9sNue1z+/p32YznSqV3L7qViPn8e1eHu7vWlbmrH9yzPa6xntOf++/b9IOf9B66fJfzW1V2PTxt0Pe5/a79vTSffz5tUv/ubMwW/OTFvR3922tmb7XuygP9v/J0+N4pc3Nq6funXl5s3rZyNN9tx6LtLkM5bzH6af3ef/l3ba8/N+e3+9++HokfNfFFsxmJr/S635ZntfnnPfupDzH6WfnP/bqX3y/n+Y85++/7/SQX8AAAAAAAAAAAAAAADgYeq63r5E9M2IuJCu/+nq2kwAYL7y63+d5NvnVfcfd/0/792OrvqvVs+5rhasP3OtP6kXqz9q9WGs2+rJ3mgXEfH39jrNe4ZfT/plAMAi+yQi/tV1J+iM/AuWv++vmZ7sujPAXN14/4OfXrl2beP6ja57AgAAAAAAAAA8rjz+51pr/OeTdV3fGVtuz/ivb8Xak47/OcgzuwOMThmouv/o2/QwW71Rv9cabvyFmDb+93B37mHjfw9m3N9wRvtoRvvSjPblGe0TL/Royfm/0Brv/GREnBgbfr2E8V/Hx7wvQc7/xdbjucn/K2PLtfOvf3+Y8+/tyf/0zfd+cfrG+x+8evW9K+9uvLvxs/Nnz545f+HCxYsXT79z9drGmZ1/O+zxwcr557GvnQdalpx/zlz+Zcn5fynV8i9Lzv/LqZZ/WXL++f2e/MuS88+ffeRflpz/y6mWf1ly/l9LtfzLkvN/JdXyL0vO/+upln9Zcv6vplr+Zcn5n0q1/MuS8z+d6n3mv3LQ/WI+cv75CJf9vyw5/3xmg/zLkvM/l2r5lyXnfz7V8i9Lzv+1VMu/LDn/b6Ra/mXJ+V9ItfzLkvP/ZqrlX5ac/8VUy78sOf9vpVr+Zcn5fzvV8i9Lzv/1VMu/LDn/76Ra/mXJ+X831fIvS87/e6mWf1ly/m+kWv5lefD9/2bMmDGTZ7p+ZgIAAAAAAAAAAAAAxs3jdOKutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD/7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKe3cXI9dZ3w/8zL557UBiIOTv5G/C2jHGOJvs+iV+oXUx4bXhrSSEQl+wXe/aLPgNr10CjWpHgRIJo6KKtuGiLaCozU2FVeWCVgHlArWqVIm0F/QGUaFyEVUBBSokWkG2mnOe59mZ2dmZtXfszJzz+Ujk5505M+fMmWdm92vz3QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGi06S2zn6tlWVar1YoL1mfZy+pz7cT6/JI3vrTHBwAAAKzeL/P/vnBTuuDgCm7UsM0/3f6dpxYWFhayDw3/6eiXFhbSFRNZNromy/Lross/+HCtcZvg0Wy8NtTw9VCX3Q93uX6ky/WjXa4f63L9mi7Xj3e5fskJWGJtVkt3tiX/4/rilGY3Z6P5dVva3OrR2pqh+rlLt81q+W0WRo9lc9mJbDabbtq+2LaWb//0pvq+3pnFfQ017GtjfYX85OGj8Rhq4RxvadrX4n1GP3pzNvHTnzx89K/PPX9ru9n1NDTdX3Gc2zbXj/Mz4ZLiWGvZmnRO4nEONRznxjbPyXDTcdby29X/3HqcL6zwOIcXD/O6an3Ox7Oh/M/P5udppJa1OU8bw2U/vyPLsouLh926zZJ9ZUPZuqZLhhafn/FiRdbvo76UXpmNXNE63bSCdVqfM1ua12nrayI+/5vC7UaWOYbGp+lHj4w1PO+/WLiadRrVH/Vyr5XWNdjr10q/rMG4Lp7NH/RjbdfglvD4H966/Bpsu3barMH0uBvW4OZua3BobDg/5vQk1PLbLK7BHU3bD+d7quXzua2d1+DUuZNnpuY/9em75k4eOT57fPbUrh07pnft2bNv376pY3MnZqeL/17l2e5/67Kh9BrYHM5dfA28vmXbxqW68NWxJe+/V/s6HO/wOlzfsm2vX4cjrQ+udn1ekEvXdPHa+ED9pI9fGsqWeY3lz8/21b8O0+NueB2ONLwO235PafM6HFnB67C+zZntK/uZZaThf+2OYfnvBatbg+sb1mDrzyOta7DXP4/0yxocD+vie9uX/16wMRzvY5NX+vPI8JI1mB5ueO+pX5J+3h/fl4926/K2+hU3jGXn52fP3v3QkXPnzu7IwrguXtWwVlrX67qGx5QtWa9DV7xeD87d/thtbS5fH87V+F31/4wv+1zVt9l9d+fnKv/u1v58Nl26Mwujx673+Wz33bx+Psey7MvffuT+bz785bcsez7refMzU6v/WTzl0ob339Fl3n9j7n+x2F+6q0eHR0eK1+9wOjujTe/HzU/VSP7eVcv3/cLUyt6PR8P/rvf78c0d3o83tGzb6/fj0dYHF9+Pa93+tmN1Wp/P8bBOTkx3fj+ub7Nh55WuyZGO78d3hFkL5/8NISmkXNSwdpZbt2lfIyOj4XGNxD00r9NdTdvH9Vbf15M7r26dbrujuK/h9OgWXa91OtGyba/Xafq7r+XWaa3b375dndbnczysi5t3dV6n9W2e2b3698618Y8N751j3dbg6PBY/ZhH0yLM3++zhbVxDd6dHc1OZyeymfzasXw91fJ9Td6zsjU4Fv53vd8rN3RYg9tatu31Gkzfx5Zbe7WRpQ++B1qfz/GwLh6/p/MarG/z1r29/dl1W7gkbdPws2vr368t93det7Wcpmu1VkbCcX57b+e/m61vc2LflebMzufpznDJDW3OU+vrd7nX1Ex2fc7ThnCcz+9b/jzVj6e+zZf2r3A9Hcyy7MIn7s3/vjf8+8rfnf/uU03/7tLu33QufOLeH7/82D9eyfEDMPheLMa64ntdw79MreTf/wEAAICBEHP/UJiJ/A8AAAClEXN//H+FJ/I/AAAAlEbM/SNhJhXJ/xve+vzcixey1MxfCOL16TTcV2wXO67T4euJhUX1y+99YvZn/3BhZfseyrLsF/f9QdvtN9wXj6swEY7z8tuaL1/iqbtWtO/DD15I+23sr38l3H98PCtdBu0quNNZlj190xfy/Ux8+FI+n7nvcD7vv/jYo/VtXthffB1v/9yriu3/IpR/Dx470nT758J5+GGY0+9qfz7i7b5+6Q0b935wcX/xdrXNN+YP+/GPFPcbf0/OFx8tto/nebnj/+bnn/x6ffuHXtf++C8MtT/+J8P9PhHm/7ym2L7xOah/HW/32XD8cX/xdnd/7Vttj//y54rtz7y92O5wmHH/28LXW97+/Fzj+XqodqTpcWXvKLaL+5/+7h/n18f7i/ffevzjhy41nY/W9fHMvxX3M9Wyfbw87if6+5b91++ncX3G/T/5R4ebznO3/V++/7nX1O+3df93tmx35hPb8/0v3l/zb2z6y89+oe3+4vEc/NszTY/n4PvD6zjs//GPhPUYrv/fy8X9tf52hcPvb37/idt/Zf2FpscTvfOnxf4vv+l4PteMr113w8tefuPF19bPXZY9u6a4v277P/5Xp5uO/6u3FOcjXh87+q37X07c/9lPTp46PX9+biad1Ydvyn93zruL44nHe1N4b239+tDpcx+dPTsxPTGdZRPl/RV6V+1rYf64GBc7b72w5B10+4Ph+bztz59et/VfPx8v//cPFJdfelfxfev1YbsvhsvXh+fvyva/1OObbslf37VnwhEuLP19wauxcct/7VvRhuHxt/5cENf7mVd/ND8P9evy7xvxdb3K4//+THE/3wjndSH8ZubNtyzur3H7+LsRLj1QvN5Xff7C21x8Xv8mPN/v+WFx//G44uP9fvg55lsbmt/v4vr4xoWh1vvPf4vHxfB+kl0sro9bxfN96YVb2h5e/D0k2cVb86//JN3PrVf0MJcz/6n5qRNzp84/NHVudv7c1PynPn3o5Onzp84dyn+X56GPdbv94vvTuvz9aWZ2z+4sf7c6XYxr7KU+/jMPHp3ZO711ZvbYkfPHzj14Zvbs8aPz80dnZ+a3Hjl2bPaT3W4/N3Ngx879u/bunDw+N3Ng3/79u/ZPzp06XT+M4qC62DP98clTZw/lN5k/sHv/jnvu2T09efL0zOyBvdPTk+e73T7/3jRZv/XvT56dPXHk3NzJ2cn5uU/PHtixf8+enV1/G+DJM8fmJ6bOnj81dX5+9uxU8VgmzuUX17/3dbs95TT/H8XPs61qxS/iy9535570+1nrnnhk2bsqNmn5BaLPh99F88+vOLNvJV/H3D8aZlKR/A8AAABVEHP/WJiJ/A8AAAClEXP/mjAT+R8AAABKI+b+8TCTiuT/0vX/N1xY0f71//X/G8+X/n/F+v8P9Fv/v3i/0P/vjdX27/X/A/1//X/9f/1//X96oN/6/zH3r82ySuZ/AAAAqIKY+9eFmcj/AAAAUBox998QZiL/AwAAQGnE3P+yMJOK5H/9f/1//X/9/w79/581vyXo/+v/9z/9/870/7vQ/5/KqtX/v9jL49f/1/9nqX7r/8fc//Iwk4rkfwAAAKiCmPtvDDOR/wEAAKA0Yu6/KcxE/gcAAIDSiLl/fZhJRfK//r/+v/6//r/P/2+/f/3/waT/35n+fxf6/z7/X/9f/5+e6rf+f8z9rwgzqUj+BwAAgCqIuf+VYSbyPwAAAPSfkau7Wcz9rwozWZL/r3IHAAAAwEsu5v6bs5YieEX+/V//X/+///v/a9J1+v/6/1lf9v+HM/3//qH/35n+fxf6//r/+v/6//RUv/X/89yfjWevDjOpSP4HAACAKoi5/5YwE/kfAAAASiPm/v8XZiL/AwAAQGnE3L8hzKQi+V//X/+///v/Pv9f/7/f+/8+/7+f6P93pv/fhf6//r/+v/4/PdVv/f+Y+28NM6lI/gcAAIAqiLn/tjAT+R8AAABKI+b+/x9mIv8DAABAacTcvzHMpCL5X/+/z/v/sTmq/9+l/z+W31b/X/8/0/+vPP3/zvT/u9D/1//X/9f/p6f6rf8fc/9rwkwqkv8BAACgCmLuvz3MRP4HAACA0oi5/7VhJvI/AAAAlEbM/RNhJhXJ//r/fd7/L3rwYz7/3+f/6//r/+v/r4z+f2f6/13o/+v/96T/v3BB/1//n0K/9f9j7t8UZlKR/A8AAABVEHP/5jAT+R8AAABKI+b+O8JM5H8AAAAojZj7t4SZVCT/6/8PRP8/0//X/9f/1//X/18Z/f/O9P+70P/X//f5//r/9FS/9f9j7n9dmElF8j8AAABUQcz9W8NM5H8AAAAojZj7Xx9mIv8DAABAacTcvy3MpCL5X/9f/1//X/9f/7/9/vX/B5P+f2f6/13o/+v/6//r/9NT/db/j7n/DWEmFcn/AAAAUAUx928PM5H/AQAAoDRi7r8zzET+BwAAgNKIuX8yzKQi+V//X/9f/1//X/+//f71/weT/n9n+v9d6P/3qj8/rP+v/6//T9aH/f+Y++8KM6lI/gcAAIAqiLn/7jAT+R8AAABKI+b+qTAT+R8AAABKI+b+6TCTiuR//X/9/1X3/xsevP5/Bfr/r128X/3/gv5/f9H/70z/v4ve9f9Hsmr3/33+/1X3/0f1/ymVfuv/x9y/I8ykIvkfAAAAqiDm/p1hJvI/AAAAlEbM/bvCTOR/AAAAKI2Y+3eHmVQk/+v/6//7/H/9f5//337/+v+DSf+/s973/+ND1P/3+f/6/z7/X/+fpfqt/x9z/z1hJhXJ/wAAAFAFMffvCTOR/wEAAKA0Yu7fG2Yi/wMAAEBpxNy/L8ykIvlf/1//X/9f/1//v/3+9f8Hk/5/Z1X//P/13Q5A/1//X/9f/59VeuAPG7/qt/5/zP37w0wqkv8BAACgCmLuf2OYifwPAAAApRFz/6+Emcj/AAAAUBox9/9qmElZ8n+X5qH+v/6//r/+v/5/+/3r/w8m/f/Oqt7/70r/X/9f/1//n57qt/5/zP0HwkzKkv8BAACAlPt/LcxE/gcAAIDSiLn/TWEm8j8AAACURsz9B8NMKpL/9f/1//X/9f/1/9vv/3r3/8fi/er/r4r+f2f6/13o/+v/6//r/9NT/db/j7n/zWEmFcn/AAAAUAUx998bZiL/AwAAQGnE3P+WMBP5HwAAAEoj5v63hplUJP/r/+v/6//r/+v/t9+/z/8fTPr/nen/d6H/r/+v/6//T0/1W/8/5v63hZlUJP8DAABAFcTc//YwE/kfAAAASiPm/neEmcj/AAAAUBox978zzKQi+V//X/9f/1//X/+//f71/weT/n9n+v9d9LL/P972/vX/r6GX+vj1//X/Warf+v8x9/96mElF8j8AAABUQcz994WZyP8AAABQGjH3vyvMRP4HAACA0oi5/91hJhXJ//r/2drGy/X/9f/zC/T/9f/1/weW/n9nA9b//+WN4fKB7P/7/H/9/y79/5GWr69J//8Hy/X/F9a03l7/n2uh3/r/Mfe/J8ykIvkfAAAAqiDm/veGmcj/AAAAUBox978vzET+BwAAgNKIuf83wkwqkv/1/+vHsdhe1v8va/9/SP9f/1//vyL0/zsbsP7/YH/+v/6//r/P/9f/p+/6/zH3vz/MpCL5HwAAAKog5v77w0zkfwAAACiNmPsfCDOR/wEAAKA0Yu7/QJhJRfK//n9z91z/v6z9f5//n+n/6/9XhP5/Z/r/Xej/6//3W///P/X/GWz91v+Puf/BMJOK5H8AAACogpj7PxhmIv8DAABAacTc/5thJvI/AAAAlEbM/R8KM6lI/tf/H5T+/8SA9v8f0f+/hv3/228sttP/1/9nkf5/Z/r/Xej/6//3W//f5/8z4Pqt/x9z/4fDTFae/8dXvCUAAADwkoi5/7fCTCry7/8AAABQBTH3/3aYifwPAAAApRFz/++EmVQk/+v/X5P+f/6lz//3+f+t68Pn/+v/6/9fe9ev/x/fefT/9f/1/yP9/zL0//97bZbp/9M7/db/j7n/d8NMKpL/AQAAoApi7v9ImIn8DwAAAAOh3WeytYq5/1CYifwPAAAApRFz/+Ewk4rkf/3/Qfn8f/3/rGr9/z/b/C/f+857D+/Q/9f/1/+/Itf18//rL36f/6//r/+f6P+Xof/v8//prX7r/8fcfyTMpCL5HwAAAKog5v7fCzOR/wEAAKA0Yu4/GmYi/wMAAEBpxNw/E2ZSkfyv/6//r//fp/3/Af78/3g+9P+b9az/H9909f/bKvr3aRVd2/7/Bxd74vr/V9r/H2t7qf6//v8gH7/+v/4/S/Vb/z/m/tkwk4rkfwAAAKiCkPuHjhVz8Qr5HwAAAEoj5v7jYSbyPwAAAJRGzP0fDTOpSP7X/9f/1//X//f5/+3336n/Xxvx+f/9KvXvf56/UPT/W/RP/789/X/9/0E+fv1//X+W6rf+f8z9c2EmFcn/AAAAUAUx938szET+BwAAgNKIuf/jYSbyPwAAAJRGzP0nwkwqkv/1//X/9f/1//X/2++/bz//X/+/o9X27/X/A/1//X/9f/1//X96oN/6/zH3nwwzqUj+BwAAgP9j786eLK3vOo4/jTM1PYUX3lmlN1Z56Z/AhVzrH+CFF3ohVZYXoKLizuC+oii4K4K7CVkgEEISyL5ANghZgSQkIftKNkJCTWq6v9/vTJ8+/ZzuntPdz/P7vV4X85UOPeeYagc+0/P26UHu/mvjFvsfAAAAmpG7/7q4xf4HAACAZuTu/8W4pZP9r/+fYf9/hf5/X/3/j+v/93p9/b/+v2X6/3H6/xX0//p//b/+n7WaWv+fu/+X4pZO9j8AAAD0IHf/L8ct9j8AAAA0I3f/9XGL/Q8AAADNyN3/K3FLJ/t/of/fGPrs/zPjnUf/7/n/nv+v/9+i/9f/L3O8/f9NF37l0//r//X/Qf+/r/7/zF6fr/+nRVPr/3P3/2rcst/h98Stz6z8xQQAAAA4Ubn7fy1u6eT7/wAAANCD3P03xC32PwAAADQjd/+vxy2d7P/1Pf//7NbHZ9r/F/2//n/rA/p//b/+f7Y8/39cT/3/9Y9fee2z9/3w/Qd5ff2//t/z//X/rNfU+v/c/b8Rt3Sy/wEAAKAHuft/M26x/wEAAKAZuft/K26x/wEAAKAZuft/O27pZP+vr/+f9fP/i/5f/7/1Af2//l//P1v6/3E99f+HeX39v/5f/6//Z72m1v/n7v+duKWT/Q8AAAA9yN3/u3GL/Q8AAADNyN1/Y9xi/wMAAEAzcvefi1s62f/6/6Pv/1/Q/+v/4+r/9f/6/6On/x+n/19B/6//1//r/1mrqfX/uftvils62f8AAADQg9z9vxe32P8AAADQjNz9vx+32P8AAADQjNz9fxC3dLL/9f+e/6//1//r/5e/vv5/nvT/4/T/K+j/L7efP63/1//r/7nUAfv/50d+2V5L/5+7/w/jlk72PwAAAPQgd/8fxS32PwAAADQjd/8fxy32PwAAADQjd/+fxC2d7H/9v/5f/6//P3T/v/tLb4v+fzn9//HQ/4+bTP+/cWrph7vt/5/bfqMN9P+e/6//1/+zw9Se/5+7/0/jlk72PwAAAPQgd/+fxS0j+//Av5kPAAAAnKjc/X8et/j+PwAAAMxeVme5+/8ibulk/+v/9f/6f/2/5/8vf/2x/v/+S96f/n9a9P/jJtP/76Hb/n+4+H71//N9//p//T+7Ta3/z93/l3FLJ/sfAAAAepC7/+a4xf4HAACAZuTu/6u4xf4HAACAZuTu/+u4pZP9v7z/v/if6//3R/+/8/3r/5d/fayr/8+fUf8/2v9f7fn/feql//+hg/7E4fj7/zP6/50/v/7/CJ30+2+8/z+76vP1/ywztf4/d/8tcUsn+x8AAAB6kLv/b+IW+x8AAACakbv/b+MW+x8AAACakbv/1rilk/3v+f/6f/3//Pr/xef/J/3/tuN4/v9w7P3/Kf3/PvXS/x+W5/+voP/vsv8/tab333j/7/n/HMrU+v/c/bfFLZ3sfwAAAOjBbc8NW7v/74bB/gcAAIA5uvTPDiz+gdKQu//v4xb7HwAAAJqRu/8f4pZO9r/+X/+/xv7/ynx9/f/yr4+j6v89/7+H/t/z//dL/z9O/7+C/v8o+v9TU+//V7z/xf7/9r0+fwr9/436fyZmR///4MWPn1T/n7v/H+OWTvY/AAAA9CB3/z/FLfY/AAAANCN3/z/HLfY/AAAANCN3/7/ELZ3s/yPv/8/u/dr6/+b6f8//1/9v0f8vp/8/Hvr/cQfo/y98qev/9f9dPP9/Xe9/Cv2/5/8zNTv6/0ucVP+fu/9f45ZO9j8AAAD0IHf/v8Ut9j8AAAA0I3f/7XGL/Q8AAADNyN3/73FLJ/vf8//1//p//b/+f/nr6//nSf8/zvP/V9D/6//1//p/1mpq/X/u/jvilk72PwAAAPQgd/+dcYv9DwAAAM3I3f8fcYv9DwAAAM3I3f+fcUsn+1//f7T9f35c/6//H/T/+n/9/7Hotv/fWPZPot326P8f+flzP7nzI/p//b/+X/+v/2cNJtH/n7/4b5e5+/8rbulk/wMAAEAPcvf/d9xi/wMAAEAzcvf/T9xi/wMAAEAzcvf/b9xywP3/A2t9V8dH/+/5//p//b/+f/nr6//naXb9/+mdf+n5//p//f9837/+X//PbpPo/y/569z9/xe3+P4/AAAANCN3///HLfY/AAAANCN3/4viFvsfAAAAmpG7/8VxSyf7X/+v/9f/6//1/8tf/7D9/+awnP7/eMyu/1+g/9f/6//n+/5b6/9P6/9Zg6n1/7n774pbOtn/AAAA0IPc/S+JW+x/AAAAaEbu/pfGLfvc/2eO5F0BAAAA65S7/2VxSyff/9f/6//1//p//f/y1/f8/3nS/4/T/w/DcPfIG1jW/58/o//X/3fZ/3v+P+swtf4/d//L45ZO9j8AAAD0IHf/3XGL/Q8AAADNyN1/T9xi/wMAAEAzcve/Im7pZP/r//X/+n/9v/5/+evr/+dJ/z9O/7+C5//r//X/+n/Wamr9f+7+e+OWTvY/AAAA9CB3/31xi/0PAAAAzcjd/8q4xf4HAACAZuTuvz9u6WT/6//1//p//f+R9P/n9P+L9P/H4+j6/0H/r//X/6+g/9f/6/9ZdFz9//Px6/2q/j93/6vilk72PwAAAPQgd/8DcYv9DwAAAM3I3f/quMX+BwAAgGbk7n9N3NLJ/tf/6//1//r/y+z/z3r+v/5/Sjz/f9za+v9rBv2//n8X/b/+X//PouPq//fq/Rf/Onf/a+OWTvY/AAAANOCKVX9D7v4H4xb7HwAAAJqRu/+huMX+BwAAgGbk7n9d3NLJ/tf/6/939v/DoP/X/6/l+f/6/12W9P+bg/5/7fT/4zz/fwX9f5v9/xVDQ/3/2T0/X//PFE2t/8/d//q4pZP9DwAAAD3I3f+GuMX+BwAAgGbk7n9j3GL/AwAAQDNy978pbmlp/7+wd/o2//7/zMIn6v+HYXjyBs//1/+PvL7+fzL9f/23qv9fH/3/OP3/Cvr/Nvt/z//X/3Niptb/5+5/c9zS0v4HAACAzuXuf0vcYv8DAADAzP1M/WGs3P1vjVvsfwAAAGhG7v63xS2d7P/59/+Ln6j/Hy7r+f/6/60P6P/1//r/2brc/v6Ozfhnmv5/pv3/9v9l6v8PZz/9/MYe/94z6P/X3P/nV4X+n3mbWv+fu//tcUsn+x8AAAB6kLv/4bjF/gcAAIBm5O5/JG6x/wEAAKAZufvfEbd0sv/36P/rP9f/74/+f+f71/8v//pYZ/+/qf/vtv8/o/8fNZXn/1911U88qv/3/P8W+/8x+n/P/9f/s2hq/X/u/nfGLZ3sfwAAAOhB7v53xS32PwAAADQjd/+74xb7HwAAAJqRu/89cUsn+393/3962C5Uty3r/6NRa6D/39z1cf2//n/rAzPo/wf9f7f9v+f/j5tK/+/5/4d7//p//f+c3/+B+v8f2f35+n9aNLX+P3f/o3FLJ/sfAAAAepC7/7Gt33q1/wEAAKBFj239uDm8N26x/wEAAKAZufsfj1s62f97PP9/tP8fPP9/F/3/zvev/1/+9aH/1//r/4+e/n+c/n8F/b/+3/P/r/u579P/sz5T6/9z978vbtkafj/6/Yf8XxMAAACYkNz9749bOvn+PwAAAPQgd/8H4hb7HwAAAJqRu/+DcUsn+1//r//X/+v/9f/LX1//P0/6/3H6/xX66f83l33wpPv5y3XS77+Z/t/z/1mjqfX/ufs/FLd0sv8BAACgB7n7Pxy32P8AAADQjNz9T8Qt9j8AAAA0I3f/k3FLJ/tf/6//b7///1n9/8Lr6//1/y3T/+c/0ZfT/6/QT/+/1En383N///p//T+7Ta3/z93/VNzSyf4HAACAHuTu/0jcYv8DAABAM3L3fzRusf8BAACgGbn7Pxa3dLL/9f999f8bQ4/9v+f/6//1/z2ZT/9/56llH/X8f/2//n++71//r/9nt6n1/7n7n9441eX+BwAAgLn6qR/7haf2+/c+vfXj5vDxuMX+BwAAgGbk7v9E3GL/AwAAQDNy938ybulk/+v/++r/Vz3//7T+X/+v/9f/z9x8+v/l9P/6f/3/fN+//l//z25T6/9z9z8Tt1wy/Jb+P+gBAAAAZiN3/6filk6+/w8AAAA9yN3/6bhl1/4/v88/1Q4AAABMTe7+z8QtnXz/X/8/8f5/OKL+P/4+z//fpv9f2f/HT6H/1/9Pn/5/3GX2/+c39P/6/xH6f/2//p9FU+v/c/c/cO/Q5f4HAACARu34HYXPbv24OXwubrH/AQAAoBm5+z8ft9j/AAAA0Izc/V+IWzrZ//r/iff/h3r+/9n6nw76/H/9f2P9/82bS1/f8//1/y3T/4/z/P8V9P/6f/2//p+1OkD/vzVIj7r/z93/xbilk/0PAAAAPcjd/6W4xf4HAACAZuTu/3LccvUw3LjwZ94AAACAecrd/5W4pZPv/+v/T6D/v+XMMBxp/7+P5//r//vo//d4/Xb6/x+88tzDP33NPXfp/7noOPv//FrQ/+v/9f/b9P+d9/8XftD/s2Bqz//P3f/VuKWT/Q8AAAA9yN3/bNxi/wMAAEAzcvd/LW65sP8fOql3BQAAAKxT7v6vxy2dfP9f/9/i8//n2f/nf9cn0P+fm1//n01x7/2/5//r/3fz/P9x+v8V9P/6f/2/5/+zVlPr/3P3fyNu6WT/AwAAQA9y938zbsn9v3Hg37oHAAAAJiZ3/7fiFt//BwAAgGbk7n8ubulk/+v/9f9T6f+T5/9f/DzP/9+m/9f/H4T+f5z+fwX9v/5f/6//Z62m1v/n7v923NLJ/gcAAIAe5O5/Pm6x/wEAAKAZufu/E7fY/wAAANCM3P3fjVs62f/6f/2//l//r/9f/vr6/3nS/4/T/6+g/9f/6//1/6zV1Pr/3P3fCwAA//9yF3XW")
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000800))
umount2(0x0, 0x8)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x281008a, &(0x7f0000002340)={[{@numtail}, {@shortname_win95}, {@fat=@errors_remount}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@utf8no}, {@fat=@flush}, {@rodir}, {@shortname_win95}, {@shortname_winnt}, {@shortname_win95}, {@shortname_mixed}, {@uni_xlateno}, {@utf8}, {@shortname_mixed}, {@uni_xlateno}, {@shortname_lower}]}, 0x97, 0x2a9, &(0x7f0000000500)="$eJzs3T9ra2UYAPDnpGkSdEgEJxE8oINTabu6pEgLxUxKBnXQYluQJggtFPyDsZOri6OriyC4+SVc/AaCq+BmwcKRk5xjkt40N+m9ae+f32/p2/c8z3ue9/QtpcN58vGr/ZPDNI4vvvojGo0kKu1ox2USrahE6ZuY0v4uAICn2WWWxd/ZyDJ5SUQ0VlcWALBCS//9/2XlJQEAK/be+x+8s9Pp7L6bpo3Y63973s3/s8+/jq7vHMen0Yuj2IxmXEVk/xuN97IsG1TTXCve6A/Ou3lm/6PfivV3/ooY5m9FM1rDqen8/c7uVjoykT/I63ihuH87z9+OZrw84/77nd3tGfnRrcWbr0/UvxHN+P2T+Cx6cTgsYpQflYivt9L07ez7f778MC8vz08G5936MG4sW7vjHw0AAAAAAAAAAAAAAAAAAAAAAM+wjaJ3Tj2G/XvyqaL/ztpV/s16pKXWdH+eUX5SLnStP9Agix/K/jybaZpmReA4vxqvVKN6P7sGAAAAAAAAAAAAAAAAAACAJ8vZ51+cHPR6R6ePZVB2Ayhf67/tOu2JmddifnB9fK9KMZyzcqyVMUnE3DLyTSxc879F24PbPbqXbqr5p58XXufHh++9GKwvEPOIg/J0nRwks59hPcqZRnlIfp2MqcWC96rddClb6vjVZl5qLr332ovDwWBOTCTzCnvrz9GTK2aS67uoDZ/qzPT1YjCRPh3TWPw8578pD0h06wAAAAAAAAAAAAAAAAAAgJUav/Q74+LF3NRKVl9ZWQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwp8af/7/EYFAkLxBci9Oze94iAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz4H/AgAA///uD2MO")
openat$qrtrtun(0xffffffffffffff9c, 0x0, 0xb140)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x20000)
truncate(0x0, 0x2)
fcntl$dupfd(r0, 0x0, r0)
mkdir(&(0x7f0000000000)='./control\x00', 0x0)
r1 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x60)
lseek(r1, 0x8, 0x1)
getdents64(r1, 0x0, 0x0)

5m44.229261443s ago: executing program 2 (id=161):
syz_mount_image$minix(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x804008, &(0x7f0000000100)=ANY=[], 0x5a, 0x20d, &(0x7f0000000200)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0)
mkdir(&(0x7f0000000240)='./file1/file0\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})

5m41.367993064s ago: executing program 2 (id=169):
unshare(0x20020000)
fcntl$addseals(0xffffffffffffffff, 0x409, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
syz_clone(0x4060000, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000000)='.\x00', 0x800, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x200)

5m39.902343566s ago: executing program 2 (id=172):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r2, 0x0, 0x0)
sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4c010)

5m38.672291387s ago: executing program 34 (id=172):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r2, 0x0, 0x0)
sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4c010)

4m52.071684682s ago: executing program 7 (id=275):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'pim6reg1\x00', 0x2})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x6)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast})
close(r0)

4m51.219287827s ago: executing program 7 (id=278):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000a80)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYBLOB="c3f8146927cf9fa6c239250356b7d7df2ef4f55fcce2b1185408c1a865e41d2d2e070077056fc720b12bca879914d817688cb155b5422267202c5712ce62bcba161e8d3c8e782010c14cd8", @ANYRES32, @ANYRESDEC, @ANYRESHEX=r1, @ANYBLOB="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"/497, @ANYRESHEX=0x0, @ANYRES16=r0], 0xfd, 0x1e6, &(0x7f0000000880)="$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")
r2 = syz_io_uring_setup(0x8010d, &(0x7f0000000140)={0x0, 0x7645, 0x0, 0x1000, 0x20000}, &(0x7f0000000240)=<r3=>0x0, &(0x7f0000000000)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x12, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, {0x400}, 0x1})
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='rxrpc_recvmsg\x00', r5}, 0x10)
r6 = socket(0x21, 0x2, 0x10000000000002)
connect$rxrpc(r6, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x3a)
sendmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, '\x00'}], 0x18, 0xe000}, 0x5}], 0x1, 0x0)
recvmmsg(r6, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10002, 0x0)
io_uring_enter(r2, 0x47fc, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
clock_nanosleep(0x1, 0x1, &(0x7f0000000340)={0x77359400}, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r7, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @local, 0x1}, 0x1c)
sendto$inet6(r7, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup3(r7, r8, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r8, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x4000)=nil, 0xc00, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/4096, 0x1000, 0x0, 0x0}, &(0x7f0000000280)=0x40)
ioctl$KVM_CAP_DISABLE_QUIRKS2(r1, 0x4068aea3, &(0x7f0000000440)={0xcc, 0x0, 0x4e})

4m49.846997865s ago: executing program 7 (id=283):
socket$netlink(0x10, 0x3, 0x2)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r2 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f0000000a40)={{r2}, "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"})
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000000c0)={0x28, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x11}, @void, @val={0xc, 0x99, {0x80, 0x2a}}}}}, 0x28}, 0x1, 0x0, 0x0, 0xa094}, 0x0)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
close(0x3)
socket$inet(0x2, 0x80001, 0x84)
setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000540)={0x4, {{0xa, 0x4e24, 0x7, @local, 0x8}}, 0x1, 0x1, [{{0xa, 0x4e23, 0x4, @mcast1, 0x3}}]}, 0x110)
listen(r5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c}, @info_request={0x3}}}}}, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt(r6, 0x84, 0x81, 0x0, 0x0)
setsockopt(r6, 0x84, 0x81, &(0x7f00000003c0), 0x0)
connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r7, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}}, 0x0)

4m46.786781901s ago: executing program 7 (id=288):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000004c0)={[{@resuid}, {@init_itable}, {@stripe}, {@noblock_validity}]}, 0x3, 0x453, &(0x7f0000001f80)="$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")
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
chdir(&(0x7f0000000240)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)

4m44.509899077s ago: executing program 7 (id=293):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xc, @broadcast, 'veth1_to_team\x00'}}, 0x1e)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x101a40, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x3, @local, 'geneve0\x00'}}, 0x1e)
ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1)
ioctl$PPPIOCBRIDGECHAN(r1, 0x40047435, &(0x7f0000000200)=0x1)

4m43.61147583s ago: executing program 7 (id=298):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000180), 0xfea7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
r2 = socket$rxrpc(0x21, 0x2, 0xa)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01080000c582b61bdd04878800080103"], 0x2c}}, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r2], 0x4}}, 0x0)
sendfile(r4, r3, 0x0, 0x100000002)

4m41.826471508s ago: executing program 35 (id=298):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000180), 0xfea7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
r2 = socket$rxrpc(0x21, 0x2, 0xa)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01080000c582b61bdd04878800080103"], 0x2c}}, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r2], 0x4}}, 0x0)
sendfile(r4, r3, 0x0, 0x100000002)

1m57.010563199s ago: executing program 8 (id=1018):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001440)={'\x00', 0x1})
ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x3)
ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x0)

1m55.63530507s ago: executing program 8 (id=1025):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet(r1, &(0x7f0000000740)="e3", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x3}, 0x8)

1m55.027299242s ago: executing program 8 (id=1028):
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x4000000)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0))
ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000080)={&(0x7f00000000c0)=""/120, 0x78})

1m54.678718156s ago: executing program 8 (id=1030):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1000e, &(0x7f0000000300), 0x1, 0x445, &(0x7f0000000b00)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x30000, 0x0, 0x41, 0x0, 0x0)
open$dir(&(0x7f0000000140)='./bus\x00', 0x10000, 0x21)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
chdir(&(0x7f0000000000)='./file0\x00')
open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)

1m53.36071841s ago: executing program 8 (id=1038):
syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
syz_emit_ethernet(0x42, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0x10, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}]}}}}}}}, 0x0)

1m52.651179238s ago: executing program 8 (id=1039):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, 0x0)

1m51.706254773s ago: executing program 36 (id=1039):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, 0x0)

45.894881654s ago: executing program 5 (id=1285):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7d2})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x0)

45.449487057s ago: executing program 5 (id=1288):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x4, @private2, 0x6}, 0x1c)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x38, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0x5, @mcast1, 0x70a}, @in6={0xa, 0x4e24, 0x0, @private2}]}, &(0x7f0000000400)=0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a5108000200104013"], 0x44}}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0xfff0)

44.234339753s ago: executing program 5 (id=1295):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200001, @void, @value}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x6, 0x7fe4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000380), 0x5, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000180018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast})

42.955049721s ago: executing program 5 (id=1303):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1000e, &(0x7f0000000300), 0x3, 0x445, &(0x7f0000000b00)="$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")
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000380)='sys_enter\x00', r1}, 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40042, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
fchmodat(r2, &(0x7f00000000c0)='./file1\x00', 0x0)

41.271189299s ago: executing program 5 (id=1308):
syz_mount_image$exfat(&(0x7f0000000300), &(0x7f0000000240)='./file0\x00', 0x3000040, &(0x7f0000000440)=ANY=[], 0x0, 0x1503, &(0x7f0000004800)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
close(r0)
ioctl$SIOCSIFHWADDR(r0, 0x8b29, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001800)=@newqdisc={0x468, 0x24, 0x4ee4e6a52ff56541, 0x3, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x0, 0x0, 0x10, 0xfffffffd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa486, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffc, 0x0, 0x0, 0x800, 0x6a4846db, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, @TCA_TBF_RATE64={0xc}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x40}}}]}}]}, 0x468}}, 0x0)

40.123402175s ago: executing program 5 (id=1310):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xde02})
close(r0)
socket$netlink(0x10, 0x3, 0x0)
preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000680)=""/215, 0xd7}], 0x1, 0x0, 0x91)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)

39.492548125s ago: executing program 37 (id=1310):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xde02})
close(r0)
socket$netlink(0x10, 0x3, 0x0)
preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000680)=""/215, 0xd7}], 0x1, 0x0, 0x91)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)

12.231607473s ago: executing program 3 (id=1366):
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
fcntl$setstatus(r0, 0x4, 0x2800)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x30)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000400)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10)
ioctl$FS_IOC_GETFSMAP(r5, 0x40305839, &(0x7f0000000680)=ANY=[])
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_timeval(r6, 0x1, 0x2, 0x0, 0x0)
getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x4, &(0x7f0000000000)=""/152, 0x0)
syz_io_uring_setup(0x0, 0x0, 0x0, 0x0)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r6, 0x4018f50b, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0)

10.887082201s ago: executing program 3 (id=1371):
r0 = syz_open_dev$audion(&(0x7f0000000440), 0x0, 0x400000)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00'})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000001d00070f000000000000000007000000"], 0x1c}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@barrier}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}]}, 0xfe, 0x46d, &(0x7f0000000f00)="$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")
chdir(&(0x7f0000000280)='./file0\x00')
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000)
r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000180)=0x6f)
r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000001e40)=0x5)
read$dsp(r4, &(0x7f00000001c0)=""/143, 0x8f)
write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004900)={0x28, 0x4a, 0xff, 0x0, 0x25dfdbff, {0xa}, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}]}, 0x28}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION2(0xffffffffffffffff, 0x40a0ae49, &(0x7f0000000040)={0x10003, 0x1, 0x2, 0x2000, &(0x7f0000ffb000/0x2000)=nil, 0x261})
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3000000003080101000000000007955f17ed0004800800054000000016080006402e766c800500030084000050"], 0x30}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, &(0x7f0000000180)={0x4, 0x8080000, 0x73, 0x1, 0xfffffffa})

8.742763122s ago: executing program 3 (id=1378):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x1, 0xfffffffb, 0x0, 0x0, 0x0, 0x2})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f00000000c0))
r3 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil)
shmctl$IPC_SET(r3, 0x1, &(0x7f00000000c0)={{0x0, 0xee01, 0xffffffffffffffff, 0x0, 0x0, 0x102, 0x4}, 0x3ff, 0xa, 0x9, 0xffffffff, 0x0, 0x0, 0x9})
shmat(r3, &(0x7f00001ff000/0x3000)=nil, 0x1000)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xc00, &(0x7f0000000680)=ANY=[@ANYBLOB="2c756d61736b3d300004000000000000000000", @ANYBLOB="0ce3150a3fe7fb06ee987419dcc049e62687c406de08e5069bd2ce5de5c0c93d98ca9d2b9db4cac9afabc7d31688743966e73ec0830e06671e9676caf017c5a2bcdda23921da922aeaf4344d74a8a39f1584ad52d37b8b71", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="86e1ce1e04f85a7860f1c8c3f9787adc4197eca5b59cc2683c529bc60583a432b864088927d63a6c9517439b3460f1dcf70305d5f0d720ca722e4b9b36c417c56879d5452e726a", @ANYRES32=r1, @ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0, @ANYRES16, @ANYRESDEC=0x0], 0x1, 0x6190, &(0x7f0000001b00)="$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")
rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00')

7.290599161s ago: executing program 6 (id=1382):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0)
mount$tmpfs(0x0, &(0x7f0000000180)='./file1/file4\x00', &(0x7f00000001c0), 0x0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0)
r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000, r1}, 0x0)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
landlock_restrict_self(r0, 0x0)
linkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)
linkat(0xffffffffffffff9c, &(0x7f0000000500)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file1/file4/file7/file5\x00', 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file1/file4/file7/file6\x00', 0x2)

6.881740981s ago: executing program 1 (id=1384):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
close(r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
ioctl$TUNSETLINK(r3, 0x400454cd, 0x308)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240))
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'})

5.798177799s ago: executing program 6 (id=1385):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0xffffff1f}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876)
r1 = syz_open_dev$midi(&(0x7f00000001c0), 0x200000000000000, 0x282480)
pipe(&(0x7f0000000d00))
unshare(0x8000400)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x89901)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xe, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="04"], 0x10)
r5 = socket(0x1, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r3, &(0x7f0000000240), &(0x7f00000000c0)=@tcp=r5}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r3, &(0x7f0000000100), &(0x7f00000001c0)=@tcp=r5}, 0x20)
syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), r2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='rseq_ip_fixup\x00'}, 0x18)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000680)='./file1\x00', 0x1018ed8, &(0x7f00000005c0)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nobarrier}, {@nodelalloc}, {@usrquota}, {@nolazytime}, {@noblock_validity}, {@block_validity}, {@barrier}]}, 0x6, 0x647, &(0x7f0000002740)="$eJzs3c9rHG0dAPDvzCZpfvmmr4j4BsWAhxakaVKLVS+29WAPBQv2IOKhoUlq6PYHSQq2FpqABwUFEa9FevEf8C69exNBvXkWqkjFgpauzOxsu9nsZrdNdjfJfD6w2WeeeTbP893ZZ+eZnX12AiituexPGvFJxJsbScRM07rpqK+cK8q9/Nfjm9ktiVrtu/9MIinyGuWT4n6qWBiPiD9GxKcru+vdePjo9lK1Vvck4uzmnftnNx4+OrN2Z+nWyq2Vu4vnvnb+wsLXF88vNjX0w00V91eufufzv/jJD7+6+qfqmSQuxvXRHy9HSxwHZS7m4k0RYnP+SERcyBJtnpej5hiEUGqV4vU4GhGfjZmo5Et1M7H286E2DuirWiWitrekWwHgqNK9oawa44DGsX1vx8HX+zwqGZwXl+oHQLvjHyk+chjPj40mXyZNR0b1zzZOHkD9WR2vH48/ff149mns+Bzi1dutM3IA9XSytR0Rn2sXf5K37WQeaRZ/uuNYP4mIhYgYK9r3rX20IWlK9+NzmL30GH8li795O6QRcbG4z/Ivf2D9rR9rDTp+AMrp+aViR76VLTX2f83nKxr7/3z886SRO73/UzK5Ye//Oo//Gvv78Xzck7aMw7Ixy7X2/3K0NeNvP7vyq07118d/s08bt6z+xlhwEF5sR8y2xP/TLNhi/JPFn7QZ/2ZFblzsrY5v//kfVzqtG3b8tWcRp9oe/7wblWapPc5Pnl1dq64s1P+2reP3f/jBbzvV3z7+E32ItL1s+092iL9p+6etj8uek/vt/+V2a8bvrj2706n+6a7bP/37WFI/3hwrcn60vbm5vhgxllwtihT5S5ub6+d2/v/LUzuX62Ve1fL7xXr8p7/Uvv/veP23RDXReMvswf3v3X7Zad2HvP6b3pzf1HpsQydZ/Ce6b/9d/T/L+2WPdfzn+w++0Gld+/iTfcUEAAAAAAAAZZXm52CTdP5tOk3n5+vzZT8Tk2n13sbml1fvPbi7HHE6/z7kaBppkn9lZKa+nKyuVVcWi+/DNpbPtSx/JSI+johfVyby5fmb96rLww4eAAAAAAAAAAAAAAAAAAAADompYv5/4zrV/67U5/8DJdH9AnO7rv8AHBP9vMAkcLjl/X+vXfxHg2sLMFj2/1Be+j+Ul/4P5aX/Q3np/1Be+j+Ul/4P5aX/AwAAAMCx9PEXn/81iYitb0zkt8xYsc6kXzjeRt+rdKVv7QAGT4+G8np76t9gH0qnp/H/f4sfB+x/c4AhSNpl5oOD2t6d/3nbR76zvf+2AQAAAAAAAAAAAAB1pz7pPP///eYGA0eNaX9QXvuY/++nA+CI89P/UF6O8YEus/hjvNOKbvP/AQAAAAAAAAAAAIADM53fknS+mAs8HWk6Px/xqYg4GaPJ6lp1ZSEiPoqIv1RGT2TLi8NuNAAAAAAAAAAAAAAAAAAAABwzGw8f3V6qVlfWmxP/25VzvBONq6B2L1zrocyeiW/Gez4qksE/LRMRMfSN0rfESFNOErGVbflD0bD1jTgczcgTQ35jAgAAAAAAAAAAAAAAAACAEmqae9ze7G8G3CIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGLx31//vklierD+gp8I7E8OOEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4mv4fAAD//+uzO4c=")
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
syz_open_dev$mouse(&(0x7f0000000d40), 0x7, 0x4100)
writev(r1, &(0x7f00000000c0)=[{0x0}], 0x1)
rmdir(&(0x7f0000001c00)='./file0\x00')

5.632269141s ago: executing program 4 (id=1386):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0, 0x809b000})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x80001)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000e, @void, @value}, 0x94)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)

5.136743276s ago: executing program 4 (id=1388):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}]}, 0x1c}}, 0x890)
socket$inet6(0xa, 0x80001, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000002700)=[{&(0x7f0000000f00)=""/220, 0xdc}], 0x1, 0x90, 0x4)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040))
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4584f5c839a765ea)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000300)={0xdddd1000, 0x118800})
unshare(0x2a020400)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

5.006675929s ago: executing program 1 (id=1389):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f00000002c0)={0x8f, 0x0, 0xe})
eventfd(0x0)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = eventfd2(0x44, 0x80001)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r3, 0x3, 0x2, r3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2004cb], 0x0, 0x200})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

4.960154231s ago: executing program 9 (id=1390):
r0 = landlock_create_ruleset(&(0x7f0000000140)={0x895}, 0x10, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
r1 = landlock_create_ruleset(&(0x7f0000000140)={0x895}, 0x10, 0x0)
landlock_restrict_self(r1, 0x0)
landlock_restrict_self(r1, 0x0)
landlock_restrict_self(r1, 0x0)
landlock_restrict_self(r1, 0x0)
landlock_restrict_self(r1, 0x0)
landlock_restrict_self(r1, 0x0)
landlock_restrict_self(r0, 0x0)
unlink(&(0x7f0000000140)='./cgroup\x00')

4.770130426s ago: executing program 3 (id=1391):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x28, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x28}}, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r1, 0x0, 0x0)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c)
connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e24, 0xfffffffd}, 0x1c)
r2 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x51}, 0x9c)
bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0xcf88, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

4.593331912s ago: executing program 9 (id=1392):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x9, 0x80, 0x0, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x404}, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
socket$packet(0x11, 0x3, 0x300)
setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
splice(0xffffffffffffffff, 0x0, r7, 0x0, 0x10003, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000000680)={'filter\x00', 0x7, 0x4, 0x418, 0x0, 0x110, 0x220, 0x330, 0x330, 0x330, 0x4, &(0x7f0000000080), {[{{@arp={@local, @broadcast, 0xffffff00, 0xffffffff, 0xc, 0x0, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff, 0xff]}}, 0x8, 0x4, 0x10, 0x2, 0x1992, 0xa6, 'veth0_macvtap\x00', 'ip6tnl0\x00', {0xff}, {0xff}, 0x0, 0x4}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="10fb291d938b", @multicast2, @private=0xa010100, 0x2, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @dev={0xac, 0x14, 0x14, 0x16}, @empty, 0x4, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @dev={0xac, 0x14, 0x14, 0x35}, @broadcast, 0x8, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468)
connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000340)=[@window, @mss={0x2, 0x1}, @window={0x3, 0x0, 0xfffe}, @timestamp, @sack_perm, @timestamp, @timestamp, @sack_perm], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r6, &(0x7f00000004c0)="3ce2de4d8d957a8de4e490b6cd03b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c7e982472e6aac70e5d52ca2c1bab47b1f6d00f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87", 0x109e8, 0x805, 0x0, 0x6)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
close_range(r1, 0xffffffffffffffff, 0x0)

4.270617482s ago: executing program 4 (id=1393):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap(&(0x7f0000727000/0x400000)=nil, 0x400000, 0xf, 0x11012, 0xffffffffffffffff, 0xdb149000)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$alg(0x26, 0x5, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
fcntl$F_SET_RW_HINT(r2, 0x40c, 0x0)
ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$SNDRV_PCM_IOCTL_REWIND(0xffffffffffffffff, 0x40044146, 0x0)
ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
select(0x20000000, 0x0, 0x0, 0x0, 0x0)

3.961750685s ago: executing program 6 (id=1394):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000000000000000000000000000bb", @ANYRES32=0x41424344], 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000280)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @broadcast}, {0x2, 0x0, @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='gretap0\x00'})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

3.516093981s ago: executing program 1 (id=1395):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r9, @ANYBLOB], 0x84}}, 0x20000000)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x18, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x4000000)
r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r10, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x30}}, 0x0)

3.33711651s ago: executing program 9 (id=1396):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4400)
r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x29, 0x2, 0x0)
write$cgroup_pressure(r1, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x4e, 0x0, 0x0)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x40}, 0x4}, 0x1c)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x5452, 0x0)
sendmsg$kcm(r1, 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0)
r3 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0x3, @local, 'geneve0\x00'}}, 0x1e)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x80280, 0x0)
ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000100)=0x1)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
ioctl$PPPIOCCONNECT(r4, 0x4004743a, 0x0)

3.019638743s ago: executing program 4 (id=1397):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r9, @ANYBLOB], 0x84}}, 0x20000000)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x18, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x4000000)
r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r10, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x30}}, 0x0)

2.940405324s ago: executing program 1 (id=1398):
connect$netlink(0xffffffffffffffff, &(0x7f0000000240)=@unspec, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, 0x2, 0x6, 0x801}, 0x14}}, 0x0)
r0 = socket(0x18, 0x0, 0x0)
connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x2, @empty, 'geneve1\x00'}}, 0x1e)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48810}, 0x0)
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0xc, @broadcast, 'veth1_to_team\x00'}}, 0x1e)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x101a40, 0x0)
r3 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0x3, @local, 'geneve0\x00'}}, 0x1e)
ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x2)
ioctl$PPPIOCBRIDGECHAN(r2, 0x40047435, &(0x7f0000000200)=0x1)

2.86481433s ago: executing program 9 (id=1399):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}]}, 0x1c}}, 0x890)
socket$inet6(0xa, 0x80001, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000002700)=[{&(0x7f0000000f00)=""/220, 0xdc}], 0x1, 0x90, 0x4)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040))
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4584f5c839a765ea)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
unshare(0x2a020400)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

2.721219451s ago: executing program 6 (id=1400):
unlink(&(0x7f0000000140)='./cgroup\x00')

2.434066316s ago: executing program 1 (id=1401):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}]}, 0x1c}}, 0x890)
socket$inet6(0xa, 0x80001, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000002700)=[{&(0x7f0000000f00)=""/220, 0xdc}], 0x1, 0x90, 0x4)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040))
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4584f5c839a765ea)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000300)={0xdddd1000, 0x118800})
unshare(0x2a020400)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

2.23205627s ago: executing program 6 (id=1402):
socket(0x8000000010, 0x2, 0x0)
socket$inet6(0xa, 0x2, 0x0)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$packet(0x11, 0x3, 0x300)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x10, 0x2, 0x10)
socket$packet(0x11, 0x2, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100))
r0 = socket(0x1, 0x803, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0xff7f, 0xef}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0)

1.912417758s ago: executing program 3 (id=1403):
socket$nl_generic(0x10, 0x3, 0x10)
sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="eb", 0x1, 0x0, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4)
syz_emit_ethernet(0x2b, &(0x7f00000007c0)=ANY=[@ANYBLOB="a6aaaaaaaaaaaaaaaaaaaaaa08004500001d0000000000119078000000000000000000004e20", @ANYBLOB="5f0ba8db7c0ae9f0df522fba61ce2615375134a6b35ea760503f5bc7f3cd8bf01374adf7000000000000"], 0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000500)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0xc0002015})
epoll_pwait(r2, &(0x7f0000000040)=[{}, {}], 0x2, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x20, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000140003006d6163766c616e300000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x44}, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0)
r5 = accept$alg(r4, 0x0, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/pid\x00')
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000001c0)="348b0d151f8218e3c73697e4080049c4", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50)
recvmmsg(r5, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000002c40)=""/18, 0x12}], 0x1}}], 0x1, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a300000000014000780080008400000000008001240200000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0)

1.758540486s ago: executing program 6 (id=1404):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r8, @ANYBLOB], 0x84}}, 0x20000000)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r9, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x30}}, 0x0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r9, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000084}, 0x40)

1.660956898s ago: executing program 1 (id=1405):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}]}, 0x1c}}, 0x890)
socket$inet6(0xa, 0x80001, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000002700)=[{&(0x7f0000000f00)=""/220, 0xdc}], 0x1, 0x90, 0x4)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040))
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4584f5c839a765ea)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)

1.649957263s ago: executing program 4 (id=1406):
pipe(0x0)
io_setup(0x3ff, &(0x7f0000000500))
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="30000000030805000000000000000000000000000c0004800800014000000000060002400000000005000300ff"], 0x30}}, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xcf, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = socket(0x23, 0x5, 0x0)
listen(r1, 0x0)
ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x6)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)

1.475379138s ago: executing program 9 (id=1407):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xdef0, 0x8000000000000000}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(0x0, r2)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0)
r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
sendfile(r4, r3, 0x0, 0x23b)
fsopen(0x0, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)

299.351994ms ago: executing program 3 (id=1408):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x18, r8, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x4000000)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r9, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x30}}, 0x0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r9, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000084}, 0x40)

203.853218ms ago: executing program 9 (id=1409):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4400)
r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x29, 0x2, 0x0)
write$cgroup_pressure(r1, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x4e, 0x0, 0x0)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x40}, 0x4}, 0x1c)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x5452, 0x0)
sendmsg$kcm(r1, 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0)
r3 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0x3, @local, 'geneve0\x00'}}, 0x1e)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x80280, 0x0)
ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000100)=0x1)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
ioctl$PPPIOCCONNECT(r4, 0x4004743a, 0x0)

0s ago: executing program 4 (id=1410):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x9, &(0x7f00000000c0)=@raw=[@map_fd={0x18, 0x3, 0x1, 0x0, 0x1}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xffffffffffffffff}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xd}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x8}], &(0x7f00000001c0)='GPL\x00', 0x6, 0x43, &(0x7f0000000280)=""/67, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0x0, 0x1ff, 0x3}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000340)=[0xffffffffffffffff], &(0x7f0000000380)=[{0x5, 0x5, 0x9, 0xb}, {0x3, 0x1, 0x0, 0xc}, {0x0, 0x3, 0x10, 0xb}, {0x1, 0x5, 0x7}, {0x1, 0x1, 0x6, 0x4}], 0x10, 0x2eb, @void, @value}, 0x94)
openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz0\x00', 0x200002, 0x0)
ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x7)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0xffffffffffffffff, 0x2, 0x8}, 0xc)
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa00010, &(0x7f0000001f80)=ANY=[@ANYBLOB='iocharset=iso8859-1,nostrict,iocharset=default,anchor=00000000000000000145,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c706172746974696f6e3d30303030303030303030303030303030303030322c756e64656c6574652c706172746974696f6e3d30303030303030303030303030303030303030312c756e686964652c001e066340c987db28915dbe6892bc3dce41ae76eaf528dc889820692d753009e30e567403a6c30e933de68a0a923eec1dccf226b58adb7d968bafe76628bceade8672fb893f87dc88"], 0x1, 0xc5a, &(0x7f0000001040)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
r1 = syz_open_dev$swradio(&(0x7f00000000c0), 0x0, 0x2)
pread64(r1, &(0x7f0000000400)=""/42, 0x2a, 0x0)
write(r0, &(0x7f0000000000)="09000000010001", 0x7)
open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0)

kernel console output (not intermixed with test programs):

ype=1326 audit(1731781832.192:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8054 comm="syz.5.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd4ab7e719 code=0x7ffc0000
[  427.093218][   T29] audit: type=1326 audit(1731781832.192:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8054 comm="syz.5.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd4ab7e719 code=0x7ffc0000
[  427.117135][ T5860] usb 7-1: Using ep0 maxpacket: 8
[  427.125876][   T29] audit: type=1326 audit(1731781832.202:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8054 comm="syz.5.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fcd4ab7e719 code=0x7ffc0000
[  427.150664][   T29] audit: type=1326 audit(1731781832.202:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8054 comm="syz.5.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd4ab7e719 code=0x7ffc0000
[  427.174117][   T29] audit: type=1326 audit(1731781832.202:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8054 comm="syz.5.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7fcd4ab7e719 code=0x7ffc0000
[  427.196841][   T29] audit: type=1326 audit(1731781832.202:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8054 comm="syz.5.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd4ab7e719 code=0x7ffc0000
[  427.220935][   T29] audit: type=1326 audit(1731781832.212:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8054 comm="syz.5.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcd4ab7e719 code=0x7ffc0000
[  427.392341][ T8058] 9pnet_fd: Insufficient options for proto=fd
[  427.428232][ T5860] usb 7-1: config 0 has no interfaces?
[  427.434234][ T5860] usb 7-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00
[  427.443820][ T5860] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  427.535824][ T5860] usb 7-1: config 0 descriptor??
[  427.928508][ T8066] loop8: detected capacity change from 0 to 1024
[  428.515937][ T8078] ip6gre1: entered allmulticast mode
[  428.570513][ T4359] hfsplus: b-tree write err: -5, ino 4
[  428.763459][ T8082] netlink: 104 bytes leftover after parsing attributes in process `syz.5.480'.
[  429.115905][    T8] usb 7-1: USB disconnect, device number 3
[  430.346415][ T5812] Bluetooth: hci3: Malformed LE Event: 0x1b
[  433.398350][ T8148] loop8: detected capacity change from 0 to 256
[  433.662685][ T8148] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d)
[  434.047613][ T8162] xt_bpf: check failed: parse error
[  434.069992][ T8148] exFAT-fs (loop8): error, in sector 160, dentry 12 should be unused, but 0x85
[  434.079554][ T8148] exFAT-fs (loop8): Filesystem has been set read-only
[  434.233204][ T8157] loop6: detected capacity change from 0 to 2048
[  434.259652][ T8157] EXT4-fs: Ignoring removed bh option
[  434.373888][ T8166] usb usb1: usbfs: process 8166 (syz.4.506) did not claim interface 0 before use
[  434.413668][ T8157] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  434.432355][ T8157] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  434.669124][ T8157] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.505: bg 0: block 345: padding at end of block bitmap is not set
[  434.693268][ T8171] NILFS (nullb0): couldn't find nilfs on the device
[  435.024353][ T8157] EXT4-fs (loop6): Remounting filesystem read-only
[  435.071630][ T8157] EXT4-fs warning (device loop6): ext4_xattr_inode_lookup_create:1605: inode #18: comm syz.6.505: cleanup dec ref error -117
[  435.580916][ T6582] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  435.836554][ T8197] netlink: 20 bytes leftover after parsing attributes in process `syz.5.516'.
[  437.973031][ T8241] loop4: detected capacity change from 0 to 8
[  438.132473][ T8241] cramfs: Error -3 while decompressing!
[  438.138274][ T8241] cramfs: ffffffff9466f278(18)->ffff8880485ec000(4096)
[  438.145913][ T8241] cramfs: Error -3 while decompressing!
[  438.151985][ T8241] cramfs: ffffffff9466f278(18)->ffff8880485ec000(4096)
[  438.177398][   T29] kauditd_printk_skb: 6 callbacks suppressed
[  438.177473][   T29] audit: type=1800 audit(1731781843.402:59): pid=8241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.533" name="file1" dev="loop4" ino=324 res=0 errno=0
[  438.467100][ T8246] loop8: detected capacity change from 0 to 1024
[  438.696836][ T8252] loop6: detected capacity change from 0 to 256
[  438.793385][ T8252] exfat: Deprecated parameter 'namecase'
[  438.904284][ T8257] loop5: detected capacity change from 0 to 64
[  439.502796][ T8252] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  440.741233][ T8273] netlink: 12 bytes leftover after parsing attributes in process `syz.8.546'.
[  441.357347][ T8285] loop8: detected capacity change from 0 to 16
[  441.383028][ T8286] netlink: 120 bytes leftover after parsing attributes in process `syz.3.551'.
[  442.207791][ T8271] loop4: detected capacity change from 0 to 40427
[  442.230517][ T8271] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x1fffff
[  442.239482][ T8271] F2FS-fs (loop4): Image doesn't support compression
[  442.247025][ T8271] F2FS-fs (loop4): Image doesn't support compression
[  442.269919][ T8271] F2FS-fs (loop4): invalid crc value
[  442.319547][ T8271] F2FS-fs (loop4): Found nat_bits in checkpoint
[  442.922268][   T29] audit: type=1326 audit(1731781848.102:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8302 comm="syz.5.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd4ab7e719 code=0x7ffc0000
[  442.945003][   T29] audit: type=1326 audit(1731781848.122:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8302 comm="syz.5.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd4ab7e719 code=0x7ffc0000
[  442.967797][   T29] audit: type=1326 audit(1731781848.142:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8302 comm="syz.5.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7fcd4ab7e719 code=0x7ffc0000
[  442.990459][   T29] audit: type=1326 audit(1731781848.142:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8302 comm="syz.5.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd4ab7e719 code=0x7ffc0000
[  443.013096][   T29] audit: type=1326 audit(1731781848.142:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8302 comm="syz.5.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd4ab7e719 code=0x7ffc0000
[  443.956759][ T8315] loop6: detected capacity change from 0 to 164
[  444.028165][ T8320] loop3: detected capacity change from 0 to 256
[  444.088416][ T8315] Unable to read rock-ridge attributes
[  444.307152][ T8315] Unable to read rock-ridge attributes
[  444.342887][ T5860] IPVS: starting estimator thread 0...
[  444.404460][ T8324] tipc: Started in network mode
[  444.409787][ T8324] tipc: Node identity ac1414aa, cluster identity 4711
[  444.418687][ T8324] tipc: Enabled bearer <udp:s>, priority 10
[  444.460857][ T8328] IPVS: using max 240 ests per chain, 12000 per kthread
[  445.533671][ T5860] tipc: Node number set to 2886997162
[  446.211390][ T8360] netlink: 'syz.3.578': attribute type 21 has an invalid length.
[  447.862964][ T8394] loop3: detected capacity change from 0 to 128
[  448.077861][ T8396] loop6: detected capacity change from 0 to 1024
[  448.153579][ T8400] loop5: detected capacity change from 0 to 256
[  448.493734][ T5860] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  448.606075][ T8400] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d)
[  448.931153][ T5860] usb 9-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  448.940726][ T5860] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  448.948998][ T5860] usb 9-1: Product: syz
[  448.954105][ T5860] usb 9-1: Manufacturer: syz
[  448.964217][ T5860] usb 9-1: SerialNumber: syz
[  449.115198][ T5860] usb 9-1: config 0 descriptor??
[  449.154127][ T5860] ch341 9-1:0.0: ch341-uart converter detected
[  449.382423][ T5860] usb 9-1: failed to receive control message: -121
[  449.389469][ T5860] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121
[  449.585069][ T8426] netlink: 44 bytes leftover after parsing attributes in process `syz.5.601'.
[  449.598153][ T2225] usb 9-1: USB disconnect, device number 3
[  449.606738][ T2225] ch341 9-1:0.0: device disconnected
[  450.273852][    C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies.
[  450.498928][ T8437] tmpfs: Bad value for 'mpol'
[  451.080731][ T5860] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  451.250684][ T5860] usb 4-1: Using ep0 maxpacket: 32
[  451.291933][ T5860] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  451.301579][ T5860] usb 4-1: config 0 has no interface number 0
[  451.757989][ T5860] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  451.767588][ T5860] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  451.776169][ T5860] usb 4-1: Product: syz
[  451.780678][ T5860] usb 4-1: Manufacturer: syz
[  451.785508][ T5860] usb 4-1: SerialNumber: syz
[  451.936041][ T5860] usb 4-1: config 0 descriptor??
[  452.040510][ T5860] smsc95xx v2.0.0
[  452.185510][ T8468] loop4: detected capacity change from 0 to 256
[  452.308044][ T8468] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  452.501234][ T5860] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  452.512597][ T5860] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  453.331639][    T8] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  453.547579][    T8] usb 9-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  453.557318][    T8] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  453.571055][    T8] usb 9-1: Product: syz
[  453.575487][    T8] usb 9-1: Manufacturer: syz
[  453.582311][    T8] usb 9-1: SerialNumber: syz
[  453.634843][    T8] usb 9-1: config 0 descriptor??
[  453.923586][    T8] hso 9-1:0.0: Failed to find BULK IN ep
[  453.999755][    T8] usb-storage 9-1:0.0: USB Mass Storage device detected
[  454.176073][    T8] usb 9-1: USB disconnect, device number 4
[  454.537779][ T5860] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000006c: -71
[  454.549848][ T5860] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71
[  454.850573][ T5860] usb 4-1: USB disconnect, device number 8
[  455.092329][ T2225] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  455.311108][ T2225] usb 5-1: Using ep0 maxpacket: 32
[  455.341302][ T2225] usb 5-1: unable to get BOS descriptor or descriptor too short
[  455.348106][ T8514] loop8: detected capacity change from 0 to 164
[  455.370912][ T2225] usb 5-1: config 1 interface 0 altsetting 14 bulk endpoint 0x82 has invalid maxpacket 1024
[  455.381763][ T2225] usb 5-1: config 1 interface 0 altsetting 14 bulk endpoint 0x3 has invalid maxpacket 1023
[  455.392319][ T2225] usb 5-1: config 1 interface 0 altsetting 14 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  455.405868][ T2225] usb 5-1: config 1 interface 0 has no altsetting 0
[  455.549463][ T2225] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  455.559558][ T2225] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  455.567988][ T2225] usb 5-1: Product: syz
[  455.572528][ T2225] usb 5-1: SerialNumber: syz
[  455.727530][ T8508] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  455.736176][ T8508] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  456.037441][ T8520] program syz.3.633 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  456.072623][ T2225] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71
[  456.269598][ T8524] loop8: detected capacity change from 0 to 512
[  456.300951][ T2225] usb 5-1: USB disconnect, device number 8
[  456.558702][ T8524] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.635: invalid indirect mapped block 256 (level 2)
[  456.591370][ T8524] EXT4-fs (loop8): 2 truncates cleaned up
[  456.598914][ T8524] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  456.870856][ T8530] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  457.273784][ T7361] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  457.557822][ T8548] loop4: detected capacity change from 0 to 256
[  457.941684][ T8548] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x607ca4ac, utbl_chksum : 0xe619d30d)
[  459.456191][   T29] audit: type=1800 audit(1731781864.672:65): pid=8574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.653" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  460.243272][ T8561] loop8: detected capacity change from 0 to 32768
[  460.272192][ T8561] jfs_mount: dbMount failed w/rc = -22
[  460.278359][ T8561] Mount JFS Failure: -22
[  460.283242][ T8561] jfs_mount failed w/return code = -22
[  461.611308][ T8571] loop6: detected capacity change from 0 to 4096
[  461.673942][ T8571] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512).
[  462.088438][ T8571] ntfs3(loop6): Failed to initialize $Extend/$Reparse.
[  462.675133][ T8596] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[  463.336583][ T8586] loop4: detected capacity change from 0 to 40427
[  463.355093][ T8586] F2FS-fs (loop4): Invalid log sectors per block(1) log sectorsize(9)
[  463.363679][ T8586] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  463.373239][ T8586] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x1fffff
[  463.382283][ T8586] F2FS-fs (loop4): Image doesn't support compression
[  463.389371][ T8586] F2FS-fs (loop4): Unrecognized mount option "allo_mode=default" or missing value
[  464.881560][   T29] audit: type=1326 audit(1731781870.022:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8625 comm="syz.6.669" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6d08f7e719 code=0x0
[  464.924181][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[  464.933414][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[  465.007794][ T8629] loop5: detected capacity change from 0 to 128
[  465.017209][ T8629] grow_buffers: requested out-of-range block 18446744073709551424 for device loop5
[  465.027068][ T8629] grow_buffers: requested out-of-range block 18446744073709551425 for device loop5
[  465.040116][ T8629] grow_buffers: requested out-of-range block 18446744073709551392 for device loop5
[  465.049764][ T8629] grow_buffers: requested out-of-range block 18446744073709551393 for device loop5
[  465.060061][ T8629] grow_buffers: requested out-of-range block 18446744073709551376 for device loop5
[  465.069725][ T8629] grow_buffers: requested out-of-range block 18446744073709551377 for device loop5
[  465.079430][ T8629] grow_buffers: requested out-of-range block 18446744073709551368 for device loop5
[  465.089228][ T8629] grow_buffers: requested out-of-range block 18446744073709551369 for device loop5
[  465.098927][ T8629] affs: No valid root block on device loop5
[  465.113118][ T8631] loop3: detected capacity change from 0 to 512
[  465.411935][ T8631] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  465.425306][ T8631] ext4 filesystem being mounted at /155/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  465.518207][ T8631] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  466.285383][ T8654] netlink: 104 bytes leftover after parsing attributes in process `syz.4.680'.
[  466.353968][ T8651] loop8: detected capacity change from 0 to 1024
[  466.511087][ T8651] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  466.632415][   T29] audit: type=1800 audit(1731781871.872:67): pid=8651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.678" name="bus" dev="loop8" ino=18 res=0 errno=0
[  466.984215][ T7361] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  467.754290][ T8682] netlink: 8 bytes leftover after parsing attributes in process `syz.6.692'.
[  468.253666][ T8693] loop6: detected capacity change from 0 to 8
[  468.352151][ T8693] squashfs: Unknown parameter 'ÏÁü)ÐÚ…A¤J·3ê¦N›*«U´cÇk»†OÜ
[  468.352151][ T8693] üÛ^]ç²Vê'
[  468.841500][ T8703] netlink: 'syz.5.701': attribute type 10 has an invalid length.
[  469.258223][ T8713] loop3: detected capacity change from 0 to 47
[  469.805651][ T8722] loop6: detected capacity change from 0 to 256
[  469.823920][ T8712] loop4: detected capacity change from 0 to 2048
[  469.875029][ T8723] loop5: detected capacity change from 0 to 256
[  470.026324][ T8723] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  470.144379][ T8712] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  470.144514][ T8722] FAT-fs (loop6): Directory bread(block 64) failed
[  470.144640][ T8722] FAT-fs (loop6): Directory bread(block 65) failed
[  470.178606][ T8722] FAT-fs (loop6): Directory bread(block 66) failed
[  470.185542][ T8722] FAT-fs (loop6): Directory bread(block 67) failed
[  470.192683][ T8722] FAT-fs (loop6): Directory bread(block 68) failed
[  470.199466][ T8722] FAT-fs (loop6): Directory bread(block 69) failed
[  470.206604][ T8722] FAT-fs (loop6): Directory bread(block 70) failed
[  470.213570][ T8722] FAT-fs (loop6): Directory bread(block 71) failed
[  470.220577][ T8722] FAT-fs (loop6): Directory bread(block 72) failed
[  470.227362][ T8722] FAT-fs (loop6): Directory bread(block 73) failed
[  470.679258][ T2225] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  470.687447][ T2225] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  470.695914][ T2225] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  470.704044][ T2225] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  470.711980][ T2225] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  470.719717][ T2225] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  470.727626][ T2225] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  470.735561][ T2225] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  470.743499][ T2225] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  470.751346][ T2225] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  470.759094][ T2225] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  470.767170][ T2225] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  470.777936][ T2225] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  470.786747][ T2225] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  470.794709][ T2225] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  470.802628][ T2225] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  470.816605][ T2225] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  470.824642][ T2225] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  470.832563][ T2225] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  470.840514][ T2225] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  470.848273][ T2225] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  470.856138][ T2225] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  470.864907][ T2225] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  470.875857][ T2225] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  470.884895][ T2225] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  470.894733][ T2225] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  470.903523][ T2225] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  470.911505][ T2225] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  470.919234][ T2225] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  470.927200][ T2225] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  470.935093][ T2225] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  470.943041][ T2225] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  470.977000][ T2225] hid-generic 0000:0000:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  471.114705][ T5796] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  471.449498][ T8739] loop5: detected capacity change from 0 to 128
[  471.572702][ T8739] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  471.628033][ T8740] loop3: detected capacity change from 0 to 512
[  471.766696][ T8740] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  472.076511][ T8740] EXT4-fs (loop3): 1 truncate cleaned up
[  472.084281][ T8740] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  472.848902][ T5794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  473.758283][ T8770] netlink: 56 bytes leftover after parsing attributes in process `syz.5.726'.
[  473.768486][ T8770] netlink: 8 bytes leftover after parsing attributes in process `syz.5.726'.
[  473.803617][ T8773] loop3: detected capacity change from 0 to 8
[  474.519216][ T8755] loop4: detected capacity change from 0 to 4096
[  475.092537][ T8783] hub 2-0:1.0: USB hub found
[  475.121357][ T8783] hub 2-0:1.0: 1 port detected
[  475.237171][ T8785] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  475.337563][ T8786] loop8: detected capacity change from 0 to 512
[  475.731759][   T29] audit: type=1800 audit(1731781880.962:68): pid=8755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.721" name="file1" dev="loop4" ino=15 res=0 errno=0
[  476.066481][ T8786] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2240: inode #15: comm syz.8.734: corrupted in-inode xattr: invalid ea_ino
[  476.122277][ T8786] EXT4-fs error (device loop8): ext4_orphan_get:1393: comm syz.8.734: couldn't read orphan inode 15 (err -117)
[  476.177084][ T8786] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  476.361490][ T8794] netlink: 16 bytes leftover after parsing attributes in process `syz.5.737'.
[  476.370913][ T8794] tipc: Started in network mode
[  476.376078][ T8794] tipc: Node identity 2aa8a2c43c73, cluster identity 4711
[  476.385110][ T8794] tipc: Enabled bearer <eth:hsr0>, priority 10
[  477.522730][ T2225] tipc: Node number set to 383492804
[  477.588311][ T8803] loop3: detected capacity change from 0 to 1024
[  477.607693][ T8803] EXT4-fs (loop3): Can't support bigalloc feature without extents feature
[  477.607693][ T8803] 
[  477.607800][ T8803] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities
[  477.635163][ T8805] capability: warning: `syz.6.744' uses 32-bit capabilities (legacy support in use)
[  477.676248][ T7361] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  478.516970][ T8809] tipc: Enabled bearer <eth:ip6gre0>, priority 10
[  479.070531][ T2225] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  479.221809][ T2225] usb 7-1: Using ep0 maxpacket: 16
[  479.228826][ T2225] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  479.229032][ T2225] usb 7-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.00
[  479.229187][ T2225] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  479.244075][ T2225] usb 7-1: config 0 descriptor??
[  479.491788][ T2225] usbhid 7-1:0.0: can't add hid device: -71
[  479.492358][ T2225] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  479.497444][ T2225] usb 7-1: USB disconnect, device number 4
[  481.068569][ T8841] loop6: detected capacity change from 0 to 256
[  481.117302][ T8842] loop4: detected capacity change from 0 to 256
[  481.348245][ T8842] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  481.820437][ T5860] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  482.122332][ T5860] usb 4-1: Using ep0 maxpacket: 32
[  482.173106][    T8] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  482.181689][ T5860] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  482.191591][ T5860] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  482.223652][ T5860] usb 4-1: config 0 descriptor??
[  482.306142][ T5860] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  482.520675][    T8] usb 9-1: Using ep0 maxpacket: 32
[  482.595279][ T8857] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input11
[  482.614360][    T8] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  482.625879][    T8] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  482.636296][    T8] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[  482.645892][    T8] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  482.672457][    T8] usb 9-1: config 0 descriptor??
[  483.132801][ T5860] gspca_vc032x: reg_w err -71
[  483.137749][ T5860] gspca_vc032x: I2c Bus Busy Wait 00
[  483.143448][ T5860] gspca_vc032x: I2c Bus Busy Wait 00
[  483.146500][   T29] audit: type=1800 audit(1731781888.382:69): pid=8861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.766" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  483.148848][ T5860] gspca_vc032x: I2c Bus Busy Wait 00
[  483.148909][ T5860] gspca_vc032x: I2c Bus Busy Wait 00
[  483.148963][ T5860] gspca_vc032x: I2c Bus Busy Wait 00
[  483.149021][ T5860] gspca_vc032x: I2c Bus Busy Wait 00
[  483.202443][ T5860] gspca_vc032x: I2c Bus Busy Wait 00
[  483.207929][ T5860] gspca_vc032x: I2c Bus Busy Wait 00
[  483.213812][ T5860] gspca_vc032x: I2c Bus Busy Wait 00
[  483.219293][ T5860] gspca_vc032x: I2c Bus Busy Wait 00
[  483.224880][ T5860] gspca_vc032x: I2c Bus Busy Wait 00
[  483.230437][ T5860] gspca_vc032x: I2c Bus Busy Wait 00
[  483.235916][ T5860] gspca_vc032x: I2c Bus Busy Wait 00
[  483.241827][ T5860] gspca_vc032x: I2c Bus Busy Wait 00
[  483.247311][ T5860] gspca_vc032x: I2c Bus Busy Wait 00
[  483.252940][ T5860] gspca_vc032x: I2c Bus Busy Wait 00
[  483.258432][ T5860] gspca_vc032x: I2c Bus Busy Wait 00
[  483.272246][ T5860] gspca_vc032x: I2c Bus Busy Wait 00
[  483.277771][ T5860] gspca_vc032x: Unknown sensor...
[  483.285668][ T5860] vc032x 4-1:0.0: probe with driver vc032x failed with error -22
[  483.304719][    T8] lua 0003:1E7D:2C2E.0006: unknown main item tag 0x5
[  483.575187][    T8] lua 0003:1E7D:2C2E.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:2c2e] on usb-dummy_hcd.8-1/input0
[  483.596396][ T5860] usb 4-1: USB disconnect, device number 9
[  483.636533][    T8] usb 9-1: USB disconnect, device number 5
[  485.045914][ T8891] netlink: 'syz.6.778': attribute type 1 has an invalid length.
[  485.054174][ T8891] netlink: 3 bytes leftover after parsing attributes in process `syz.6.778'.
[  486.568274][ T8909] netlink: 12 bytes leftover after parsing attributes in process `syz.4.783'.
[  488.287945][ T8939] netlink: 16 bytes leftover after parsing attributes in process `syz.4.797'.
[  490.354918][ T8957] loop6: detected capacity change from 0 to 256
[  490.409857][ T8943] loop8: detected capacity change from 0 to 32768
[  490.469488][ T8943] (syz.8.800,8943,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  490.479954][ T8943] (syz.8.800,8943,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  490.646160][ T8943] JBD2: Ignoring recovery information on journal
[  490.725550][ T8943] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  491.444394][ T7361] ocfs2: Unmounting device (7,8) on (node local)
[  494.039681][ T8979] loop5: detected capacity change from 0 to 32768
[  494.147076][ T8979] 
[  494.147076][ T8979]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  494.147076][ T8979] 
[  494.192272][ T8979] read_mapping_page failed!
[  494.192337][ T8979] ERROR: (device loop5): txAbort: 
[  494.192337][ T8979] 
[  494.193101][ T8979] ERROR: (device loop5): remounting filesystem as read-only
[  494.984844][ T8992] netlink: 12 bytes leftover after parsing attributes in process `syz.5.819'.
[  495.059218][ T8992] netlink: 24 bytes leftover after parsing attributes in process `syz.5.819'.
[  495.087842][ T8990] bridge0: port 3(syz_tun) entered blocking state
[  495.095404][ T8990] bridge0: port 3(syz_tun) entered disabled state
[  495.102933][ T8990] syz_tun: entered allmulticast mode
[  495.111474][ T8990] syz_tun: entered promiscuous mode
[  495.119005][ T8990] bridge0: port 3(syz_tun) entered blocking state
[  495.126266][ T8990] bridge0: port 3(syz_tun) entered forwarding state
[  495.216801][ T8996] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  496.966656][ T9017] loop3: detected capacity change from 0 to 512
[  498.130597][ T9017] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  498.143939][ T9017] ext4 filesystem being mounted at /191/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  498.202908][ T9033] sg_write: process 346 (syz.6.834) changed security contexts after opening file descriptor, this is not allowed.
[  498.225160][ T9033] program syz.6.834 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  498.341869][   T44] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  498.362759][ T9017] Quota error (device loop3): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8
[  498.374503][ T9017] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  498.384981][ T9017] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.830: Failed to acquire dquot type 0
[  498.591503][   T44] usb 9-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  498.601169][   T44] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  498.609469][   T44] usb 9-1: Product: syz
[  498.614340][   T44] usb 9-1: Manufacturer: syz
[  498.619185][   T44] usb 9-1: SerialNumber: syz
[  498.634489][   T44] usb 9-1: config 0 descriptor??
[  498.821503][ T9034] loop4: detected capacity change from 0 to 2048
[  498.847793][ T5794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  499.091451][   T44] usb 9-1: Firmware version (0.0) predates our first public release.
[  499.099846][   T44] usb 9-1: Please update to version 0.2 or newer
[  499.166998][ T9040] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  499.279284][   T44] usb 9-1: USB disconnect, device number 6
[  499.332334][   T29] audit: type=1800 audit(1731781904.562:70): pid=9034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.835" name="file2" dev="loop4" ino=16 res=0 errno=0
[  499.428867][ T9034] NILFS (loop4): vblocknr = 12 has abnormal lifetime: start cno (= 150994946) > current cno (= 3)
[  499.443829][ T9034] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=16)
[  499.521259][ T9034] Remounting filesystem read-only
[  499.829566][ T5796] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer
[  500.061369][ T9051] syz.4.840[9051] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  500.061778][ T9051] syz.4.840[9051] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  500.104519][ T9051] syz.4.840[9051] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  500.973230][ T5812] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  501.337955][ T9065] bridge0: port 3(syz_tun) entered blocking state
[  501.345362][ T9065] bridge0: port 3(syz_tun) entered disabled state
[  501.352681][ T9065] syz_tun: entered allmulticast mode
[  501.360941][ T9065] syz_tun: entered promiscuous mode
[  501.368557][ T9065] bridge0: port 3(syz_tun) entered blocking state
[  501.375694][ T9065] bridge0: port 3(syz_tun) entered forwarding state
[  501.937311][ T9075] syz.6.852 (9075): drop_caches: 2
[  501.948013][ T9075] syz.6.852 (9075): drop_caches: 2
[  502.599765][ T9090] loop5: detected capacity change from 0 to 2048
[  502.872730][ T9090] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  502.991706][ T9090] EXT4-fs (loop5): shut down requested (0)
[  503.652508][ T6123] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  503.665828][ T9098] loop8: detected capacity change from 0 to 2048
[  503.833475][ T9098] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  503.941569][ T9098] EXT4-fs error (device loop8): ext4_find_extent:938: inode #2: comm syz.8.859: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  504.000707][ T9098] EXT4-fs (loop8): Remounting filesystem read-only
[  504.395517][ T7361] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  504.900173][ T9111] syz.5.863 (9111): drop_caches: 2
[  504.907223][ T9111] syz.5.863 (9111): drop_caches: 2
[  505.529865][ T9121] loop4: detected capacity change from 0 to 256
[  505.888032][ T9121] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  505.951552][ T9130] loop3: detected capacity change from 0 to 128
[  506.298419][ T9138] loop8: detected capacity change from 0 to 256
[  506.317540][ T9138] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  506.320800][ T9130] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  506.328596][ T9138] exFAT-fs (loop8): Medium has reported failures. Some data may be lost.
[  506.402137][ T9130] ext4 filesystem being mounted at /198/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  506.514522][ T9141] Bluetooth: MGMT ver 1.23
[  506.529508][ T9138] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  506.566158][ T9143] syz.4.878 (9143): drop_caches: 2
[  506.574297][ T9143] syz.4.878 (9143): drop_caches: 2
[  506.872661][ T5794] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  507.056662][ T9147] loop5: detected capacity change from 0 to 1024
[  507.198296][ T9147] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  507.772983][ T9165] netlink: 104 bytes leftover after parsing attributes in process `syz.4.888'.
[  507.981716][ T6123] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  508.232529][ T9172] syz.6.889 (9172): drop_caches: 2
[  508.242989][ T9172] syz.6.889 (9172): drop_caches: 2
[  508.803995][ T9180] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  509.246046][ T9185] loop6: detected capacity change from 0 to 8
[  509.472453][ T9190] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  509.560626][    T8] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  509.730504][    T8] usb 6-1: Using ep0 maxpacket: 32
[  509.799295][    T8] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  509.810814][    T8] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  509.821117][    T8] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  509.830596][    T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  509.897268][    T8] hub 6-1:4.0: USB hub found
[  510.137044][    T8] hub 6-1:4.0: config failed, hub doesn't have any ports! (err -19)
[  510.379198][ T9196] loop4: detected capacity change from 0 to 4096
[  510.491329][    T8] usb 6-1: USB disconnect, device number 6
[  511.348022][ T9205] syz.4.904 (9205): drop_caches: 2
[  511.355142][ T9205] syz.4.904 (9205): drop_caches: 2
[  511.731206][ T2225] usb 6-1: new full-speed USB device number 7 using dummy_hcd
[  511.820845][ T9212] loop4: detected capacity change from 0 to 1024
[  511.855371][ T9212] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  511.884913][ T9212] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  511.909873][ T9212] EXT4-fs (loop4): orphan cleanup on readonly fs
[  511.918457][ T9212] EXT4-fs error (device loop4): ext4_free_blocks:6589: comm syz.4.907: Freeing blocks not in datazone - block = 0, count = 4096
[  511.944675][ T2225] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  511.951173][ T9212] EXT4-fs (loop4): 1 orphan inode deleted
[  511.956817][ T2225] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 96, setting to 64
[  511.963488][ T9212] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  511.972814][ T2225] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  511.973049][ T2225] usb 6-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00
[  511.973212][ T2225] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  512.043294][ T2225] usb 6-1: config 0 descriptor??
[  512.101547][ T9207] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  512.261196][ T5796] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  512.664597][ T2225] input: HID 28bd:0909 Mouse as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:28BD:0909.0007/input/input12
[  512.790026][ T2225] uclogic 0003:28BD:0909.0007: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0909] on usb-dummy_hcd.5-1/input0
[  512.916092][ T2225] usb 6-1: USB disconnect, device number 7
[  513.029251][   T44] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  513.197986][   T44] usb 4-1: Using ep0 maxpacket: 32
[  513.247232][   T44] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  513.304379][   T44] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  513.314698][   T44] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  513.323341][   T44] usb 4-1: Product: syz
[  513.327747][   T44] usb 4-1: Manufacturer: syz
[  513.332766][   T44] usb 4-1: SerialNumber: syz
[  514.123168][ T9231] netlink: 296 bytes leftover after parsing attributes in process `syz.5.916'.
[  514.756541][ T9233] syz.6.917 (9233): drop_caches: 2
[  514.763636][ T9233] syz.6.917 (9233): drop_caches: 2
[  514.781297][ T9223] loop8: detected capacity change from 0 to 32768
[  514.848322][   T44] usb 4-1: config 0 descriptor??
[  514.905321][ T9225] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  514.972224][ T9236] IPVS: Error joining to the multicast group
[  515.597684][ T9245] loop5: detected capacity change from 0 to 128
[  515.639277][ T9245] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  515.670457][    T8] usb 4-1: USB disconnect, device number 10
[  516.502334][ T9257] netlink: 176 bytes leftover after parsing attributes in process `syz.5.926'.
[  518.416726][ T9280] loop3: detected capacity change from 0 to 512
[  518.479829][ T9281] netlink: 'syz.8.936': attribute type 2 has an invalid length.
[  518.519203][ T9280] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  518.528755][ T9280] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  518.581709][ T9280] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended
[  518.596532][ T9280] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  518.607110][ T9280] System zones: 0-2, 18-18, 34-34
[  518.619943][ T9280] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1138: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  518.646312][ T9280] EXT4-fs (loop3): 1 truncate cleaned up
[  518.654798][ T9280] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  518.835080][ T9280] EXT4-fs warning (device loop3): verify_group_input:156: Last group not full
[  519.113357][ T5794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  519.271095][ T9286] loop4: detected capacity change from 0 to 4096
[  519.632087][ T9300] loop3: detected capacity change from 0 to 64
[  519.687961][ T9300] minix: Unknown parameter 'ÿÿ18446744073709551615ÿ01777777777777777777777±ñV?Œù³ßCp~'~8pٻ젌|ž^½Ö(
cŸoö—ÈêM ) Ç0177777777777777777777718446744073709551615ÿÿÿÿÿÿÿÿÿÿ'
[  520.284567][ T9308] loop5: detected capacity change from 0 to 512
[  520.362515][ T9308] EXT4-fs: Ignoring removed bh option
[  520.533950][ T9308] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  520.550430][ T9308] ext4 filesystem being mounted at /180/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  521.069795][ T6123] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  524.853922][ T9348] loop8: detected capacity change from 0 to 32768
[  524.984049][ T9350] loop6: detected capacity change from 0 to 32768
[  525.030495][ T9350] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.959 (9350)
[  525.033425][ T9348] (syz.8.960,9348,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  525.062275][ T9348] (syz.8.960,9348,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  525.094812][ T9350] BTRFS info (device loop6): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  525.105672][ T9350] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm
[  525.116166][ T9350] BTRFS info (device loop6): using free-space-tree
[  525.134405][ T9348] JBD2: Ignoring recovery information on journal
[  525.219012][ T9348] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  525.749413][ T9351] loop4: detected capacity change from 0 to 4096
[  525.992388][ T6582] BTRFS info (device loop6): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  526.007756][ T7361] ocfs2: Unmounting device (7,8) on (node local)
[  526.009881][ T9351] ntfs3(loop4): Failed to read $AttrDef (-4).
[  526.050763][    T8] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  526.325597][    T8] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  526.335112][    T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  526.344274][    T8] usb 4-1: Product: syz
[  526.348675][    T8] usb 4-1: Manufacturer: syz
[  526.353744][    T8] usb 4-1: SerialNumber: syz
[  526.380413][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[  526.387100][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[  526.411497][    T8] usb 4-1: config 0 descriptor??
[  526.424058][    T8] ch341 4-1:0.0: ch341-uart converter detected
[  526.972580][ T9383] netlink: 'syz.4.971': attribute type 4 has an invalid length.
[  528.205611][    T8] usb 4-1: failed to send control message: -71
[  528.212458][    T8] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71
[  528.309666][ T9401] loop5: detected capacity change from 0 to 128
[  528.364074][    T8] usb 4-1: USB disconnect, device number 11
[  528.372728][    T8] ch341 4-1:0.0: device disconnected
[  528.446839][   T29] audit: type=1800 audit(1731781933.682:71): pid=9401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.976" name="file1" dev="loop5" ino=1048656 res=0 errno=0
[  528.541526][   T29] audit: type=1804 audit(1731781933.742:72): pid=9401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.976" name="/newroot/188/file2/file1" dev="loop5" ino=1048656 res=1 errno=0
[  530.022647][ T9432] loop3: detected capacity change from 0 to 1024
[  530.680825][   T44] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  530.887219][   T44] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  530.898835][   T44] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  530.909193][   T44] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  530.922711][   T44] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  530.932144][   T44] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  531.024207][ T9444] warning: `syz.4.992' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  531.085745][   T44] usb 7-1: config 0 descriptor??
[  531.151013][ T9431] loop5: detected capacity change from 0 to 4096
[  531.536531][   T44] plantronics 0003:047F:FFFF.0008: unknown main item tag 0xd
[  531.575950][   T44] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving
[  531.639124][ T9431] syz.5.987 (9431) used greatest stack depth: 4936 bytes left
[  531.656832][   T44] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[  532.812228][ T9464] loop4: detected capacity change from 0 to 1024
[  532.953064][ T9464] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  532.966395][ T9464] ext4 filesystem being mounted at /199/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  533.376778][ T5796] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  533.690981][ T5092] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  533.699735][ T5092] Bluetooth: hci4: Injecting HCI hardware error event
[  533.707689][ T5812] Bluetooth: hci4: hardware error 0x00
[  534.663224][ T9492] syz.3.1008 (9492): drop_caches: 2
[  534.676073][ T9492] syz.3.1008 (9492): drop_caches: 2
[  534.843258][ T9490] loop6: detected capacity change from 0 to 4096
[  535.319599][ T5860] usb 7-1: USB disconnect, device number 5
[  535.377055][ T9498] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  535.519374][   T29] audit: type=1800 audit(1731781940.742:73): pid=9490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1007" name="file1" dev="loop6" ino=15 res=0 errno=0
[  535.541199][   T29] audit: type=1800 audit(1731781940.742:74): pid=9490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1007" name="file1" dev="loop6" ino=15 res=0 errno=0
[  536.052575][ T9479] loop8: detected capacity change from 0 to 32768
[  536.124462][ T5812] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  536.630865][ T9479] read_mapping_page failed!
[  536.635752][ T9479] jfs_mount: diMount failed w/rc = -5
[  536.680841][ T9479] Mount JFS Failure: -5
[  536.685473][ T9479] jfs_mount failed w/return code = -5
[  537.693426][ T9523] @: renamed from vlan0 (while UP)
[  538.060621][ T9530] tun0: tun_chr_ioctl cmd 1074025680
[  538.397188][ T9532] syz.4.1022 (9532): drop_caches: 2
[  538.408872][ T9532] syz.4.1022 (9532): drop_caches: 2
[  538.757093][ T9538] loop4: detected capacity change from 0 to 1024
[  538.971946][ T9538] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  539.125792][   T29] audit: type=1800 audit(1731781944.362:75): pid=9538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1026" name="bus" dev="loop4" ino=18 res=0 errno=0
[  539.251989][ T9538] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  539.285618][ T9538] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28
[  539.298443][ T9538] EXT4-fs (loop4): This should not happen!! Data will be lost
[  539.298443][ T9538] 
[  539.308538][ T9538] EXT4-fs (loop4): Total free blocks count 0
[  539.314867][ T9538] EXT4-fs (loop4): Free/Dirty block details
[  539.321526][ T9538] EXT4-fs (loop4): free_blocks=68451041280
[  539.327586][ T9538] EXT4-fs (loop4): dirty_blocks=64
[  539.333149][ T9538] EXT4-fs (loop4): Block reservation details
[  539.339448][ T9538] EXT4-fs (loop4): i_reserved_data_blocks=4
[  539.399655][ T9538] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28
[  539.879441][ T9560] loop8: detected capacity change from 0 to 512
[  539.997293][ T9560] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  540.083259][ T9560] EXT4-fs (loop8): 1 truncate cleaned up
[  540.161466][ T9560] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  540.213263][ T9566] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  540.224630][ T9566] tipc: Enabled bearer <udp:syz1>, priority 10
[  540.351153][   T29] audit: type=1800 audit(1731781945.582:76): pid=9560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1030" name="bus" dev="overlay" ino=20 res=0 errno=0
[  540.875353][ T7361] bridge0: port 3(syz_tun) entered disabled state
[  540.898829][ T9570] loop6: detected capacity change from 0 to 4096
[  541.011829][ T7361] syz_tun (unregistering): left allmulticast mode
[  541.021462][ T7361] syz_tun (unregistering): left promiscuous mode
[  541.028328][ T7361] bridge0: port 3(syz_tun) entered disabled state
[  541.035654][ T9570] NILFS (loop6): invalid segment: Checksum error in segment payload
[  541.044144][ T9570] NILFS (loop6): trying rollback from an earlier position
[  541.145685][ T9570] NILFS (loop6): recovery complete
[  541.162089][ T9580] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  541.327260][ T4359] bridge_slave_1: left allmulticast mode
[  541.331261][ T7361] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  541.333741][ T4359] bridge_slave_1: left promiscuous mode
[  541.348882][ T4359] bridge0: port 2(bridge_slave_1) entered disabled state
[  541.455287][ T9570] overlayfs: upper fs does not support tmpfile.
[  541.484383][ T9570] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  541.486650][ T4359] bridge_slave_0: left allmulticast mode
[  541.491799][ T9570] overlayfs: failed to set xattr on upper
[  541.497626][ T4359] bridge_slave_0: left promiscuous mode
[  541.503343][ T9570] overlayfs: ...falling back to redirect_dir=nofollow.
[  541.503395][ T9570] overlayfs: ...falling back to index=off.
[  541.509766][ T4359] bridge0: port 1(bridge_slave_0) entered disabled state
[  541.516504][ T9570] overlayfs: ...falling back to uuid=null.
[  542.558668][ T4359] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  542.746735][ T9589] loop4: detected capacity change from 0 to 2048
[  542.820064][ T4359] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  543.007761][ T4359] bond0 (unregistering): Released all slaves
[  543.028648][ T4359] bond1 (unregistering): Released all slaves
[  543.129657][ T9589] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  543.215597][ T5092] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  543.234823][ T5092] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  543.245236][ T5092] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  543.261825][ T5092] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  543.285084][ T5092] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  543.299532][ T5092] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  543.571066][   T29] audit: type=1800 audit(1731781948.682:77): pid=9589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1043" name="file1" dev="loop4" ino=1346 res=0 errno=0
[  544.993029][ T9596] loop5: detected capacity change from 0 to 32768
[  545.053395][ T9596] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  545.106276][ T9606] loop6: detected capacity change from 0 to 128
[  545.234390][ T9606] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  545.288271][ T4359] hsr_slave_0: left promiscuous mode
[  545.303827][ T4359] hsr_slave_1: left promiscuous mode
[  545.324582][ T9606] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  545.332377][ T6123] ocfs2: Unmounting device (7,5) on (node local)
[  545.342668][ T4359] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  545.352324][ T4359] batman_adv: batadv0: Removing interface: batadv_slave_0
[  545.373538][ T5092] Bluetooth: hci4: command tx timeout
[  545.400042][ T4359] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  545.408448][ T4359] batman_adv: batadv0: Removing interface: batadv_slave_1
[  545.533851][ T4359] veth1_macvtap: left promiscuous mode
[  545.539823][ T4359] veth0_macvtap: left promiscuous mode
[  545.546177][ T4359] veth1_vlan: left promiscuous mode
[  545.551978][ T4359] veth0_vlan: left promiscuous mode
[  546.333634][ T9614] loop6: detected capacity change from 0 to 512
[  546.378429][ T9614] EXT4-fs: Ignoring removed nomblk_io_submit option
[  546.429277][ T9614] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  546.605077][ T9614] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a85ec028, mo2=0002]
[  546.621133][ T9614] System zones: 0-2, 18-18, 34-34
[  546.725909][ T9614] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1138: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  546.769499][ T4359] team0 (unregistering): Port device team_slave_1 removed
[  546.856365][ T4359] team0 (unregistering): Port device team_slave_0 removed
[  546.916152][ T9614] EXT4-fs (loop6): 1 truncate cleaned up
[  546.924076][ T9614] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  547.138689][ T9614] EXT4-fs error (device loop6): ext4_find_dest_de:2069: inode #2: block 3: comm syz.6.1050: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1
[  547.252033][ T9614] EXT4-fs (loop6): Remounting filesystem read-only
[  547.491722][ T5092] Bluetooth: hci4: command tx timeout
[  547.824873][ T6582] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  547.931048][ T9590] chnl_net:caif_netlink_parms(): no params data found
[  547.956293][ T9634] vcan0: tx drop: invalid sa for name 0xffffffffffffffff
[  548.501068][ T9641] tun0: tun_chr_ioctl cmd 1074025675
[  548.506885][ T9641] tun0: persist enabled
[  548.554217][ T9641] tun0: tun_chr_ioctl cmd 1074025675
[  548.560070][ T9641] tun0: persist disabled
[  548.601232][ T9644] tun0: tun_chr_ioctl cmd 1342215226
[  549.291966][ T9633] loop4: detected capacity change from 0 to 4096
[  549.532249][ T5092] Bluetooth: hci4: command tx timeout
[  549.905898][ T9590] bridge0: port 1(bridge_slave_0) entered blocking state
[  549.913896][ T9590] bridge0: port 1(bridge_slave_0) entered disabled state
[  549.921899][ T9590] bridge_slave_0: entered allmulticast mode
[  549.938702][ T9590] bridge_slave_0: entered promiscuous mode
[  550.032388][ T9590] bridge0: port 2(bridge_slave_1) entered blocking state
[  550.040518][ T9590] bridge0: port 2(bridge_slave_1) entered disabled state
[  550.048380][ T9590] bridge_slave_1: entered allmulticast mode
[  550.057886][ T9590] bridge_slave_1: entered promiscuous mode
[  550.417774][ T9590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  550.648217][ T9590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  550.952255][ T9650] loop6: detected capacity change from 0 to 32768
[  550.966818][ T9650] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1060 (9650)
[  551.024021][ T9650] BTRFS info (device loop6): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  551.035013][ T9650] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm
[  551.045699][ T9650] BTRFS info (device loop6): using free-space-tree
[  551.083550][ T9590] team0: Port device team_slave_0 added
[  551.101176][ T9590] team0: Port device team_slave_1 added
[  551.352371][ T5860] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  551.480529][ T9590] batman_adv: batadv0: Adding interface: batadv_slave_0
[  551.487727][ T9590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  551.514695][ T9590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  551.549466][ T9590] batman_adv: batadv0: Adding interface: batadv_slave_1
[  551.556982][ T9590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  551.587504][ T9590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  551.654525][ T5092] Bluetooth: hci4: command tx timeout
[  551.681971][ T5860] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  551.695174][ T5860] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  551.706805][ T5860] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  551.716220][ T5860] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  551.821737][ T5860] usb 6-1: config 0 descriptor??
[  551.993657][ T9590] hsr_slave_0: entered promiscuous mode
[  552.010027][ T9590] hsr_slave_1: entered promiscuous mode
[  552.024733][ T6582] BTRFS info (device loop6): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  552.028034][ T9590] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  552.043486][ T9590] Cannot create hsr debugfs directory
[  553.197259][ T5860] uclogic 0003:256C:006D.0009: failed retrieving string descriptor #100: -71
[  553.212666][ T5860] uclogic 0003:256C:006D.0009: failed retrieving pen parameters: -71
[  553.222479][ T5860] uclogic 0003:256C:006D.0009: failed probing pen v1 parameters: -71
[  553.231064][ T5860] uclogic 0003:256C:006D.0009: failed probing parameters: -71
[  553.239148][ T5860] uclogic 0003:256C:006D.0009: probe with driver uclogic failed with error -71
[  553.472475][ T5860] usb 6-1: USB disconnect, device number 8
[  554.289605][ T9710] tipc: Started in network mode
[  554.295162][ T9710] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  554.305202][ T9710] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  554.315683][ T9710] tipc: Enabled bearer <udp:syz1>, priority 10
[  554.876357][ T9590] 8021q: adding VLAN 0 to HW filter on device bond0
[  555.037649][ T9590] 8021q: adding VLAN 0 to HW filter on device team0
[  555.079564][ T5851] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  555.149055][ T3682] bridge0: port 1(bridge_slave_0) entered blocking state
[  555.156855][ T3682] bridge0: port 1(bridge_slave_0) entered forwarding state
[  555.244226][ T3682] bridge0: port 2(bridge_slave_1) entered blocking state
[  555.252011][ T3682] bridge0: port 2(bridge_slave_1) entered forwarding state
[  555.294763][ T5851] usb 7-1: Using ep0 maxpacket: 32
[  555.333562][ T5851] usb 7-1: config index 0 descriptor too short (expected 156, got 27)
[  555.343192][ T5851] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  555.356317][ T5851] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  555.368456][ T5851] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  555.384262][ T5851] usb 7-1: config 0 interface 0 has no altsetting 0
[  555.430844][ T5860] tipc: Node number set to 1
[  555.488756][ T5851] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  555.499242][ T5851] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  555.508255][ T5851] usb 7-1: Product: syz
[  555.512834][ T5851] usb 7-1: Manufacturer: syz
[  555.517845][ T5851] usb 7-1: SerialNumber: syz
[  555.528328][ T5851] usb 7-1: config 0 descriptor??
[  555.550944][ T5851] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  555.584041][ T5851] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  556.906482][   T29] audit: type=1326 audit(1731781962.142:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9748 comm="syz.4.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518397e719 code=0x7fc00000
[  558.132581][ T9590] 8021q: adding VLAN 0 to HW filter on device batadv0
[  559.104110][    C1] ldusb 7-1:0.0: usb_submit_urb failed (-19)
[  559.110568][ T5851] usb 7-1: USB disconnect, device number 6
[  559.121473][ T5851] ldusb 7-1:0.0: LD USB Device #0 now disconnected
[  559.146253][   T29] audit: type=1326 audit(1731781963.402:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9748 comm="syz.4.1088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f518397e719 code=0x7fc00000
[  560.066870][ T9755] loop3: detected capacity change from 0 to 32768
[  560.300481][ T9758] loop4: detected capacity change from 0 to 1024
[  560.515647][ T9765] syz.6.1094 (9765): drop_caches: 2
[  560.522724][ T9765] syz.6.1094 (9765): drop_caches: 2
[  561.234056][ T9774] loop4: detected capacity change from 0 to 16
[  561.854575][ T9778] loop4: detected capacity change from 0 to 256
[  562.083954][ T9778] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d16cac, utbl_chksum : 0xe619d30d)
[  562.236319][ T9590] veth0_vlan: entered promiscuous mode
[  562.344380][ T9590] veth1_vlan: entered promiscuous mode
[  562.396876][ T9785] loop6: detected capacity change from 0 to 64
[  562.598827][ T9590] veth0_macvtap: entered promiscuous mode
[  562.624643][ T9590] veth1_macvtap: entered promiscuous mode
[  562.681179][ T9590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  562.692935][ T9590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  562.703601][ T9590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  562.714381][ T9590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  562.726444][ T9590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  562.737738][ T9590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  562.748713][ T9590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  562.760044][ T9590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  562.775363][ T9590] batman_adv: batadv0: Interface activated: batadv_slave_0
[  562.793428][ T9590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  562.804814][ T9590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  562.815062][ T9590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  562.828383][ T9590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  562.839179][ T9590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  562.850069][ T9590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  562.860525][ T9590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  562.871276][ T9590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  562.881512][ T9590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  562.892316][ T9590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  562.907463][ T9590] batman_adv: batadv0: Interface activated: batadv_slave_1
[  563.445546][ T9795] syz.6.1104 (9795): drop_caches: 2
[  563.454750][ T9795] syz.6.1104 (9795): drop_caches: 2
[  563.680445][ T5851] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  563.851756][ T5851] usb 5-1: Using ep0 maxpacket: 16
[  563.890739][   T44] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  563.902189][ T5851] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  563.913518][ T5851] usb 5-1: config 0 interface 0 has no altsetting 0
[  563.920711][ T5851] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00
[  563.930058][ T5851] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  563.992834][ T5851] usb 5-1: config 0 descriptor??
[  564.280578][   T44] usb 6-1: Using ep0 maxpacket: 8
[  564.296887][   T44] usb 6-1: config index 0 descriptor too short (expected 74, got 45)
[  564.305676][   T44] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  564.317333][   T44] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  564.328127][   T44] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  564.338771][   T44] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  564.352400][   T44] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  564.363620][   T44] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  564.511987][ T5851] hid (null): global environment stack underflow
[  564.518787][ T5851] hid (null): unknown global tag 0x84
[  564.524767][ T5851] hid (null): report_id 0 is invalid
[  564.530721][ T5851] hid (null): unknown global tag 0xc
[  564.536741][ T5851] hid (null): unknown global tag 0xd
[  564.542643][ T5851] hid (null): report_id 2863014418 is invalid
[  564.549617][ T5851] hid (null): report_id 2384115945 is invalid
[  564.573246][ T5851] cougar 0003:060B:500A.000A: unexpected long global item
[  564.587402][ T5851] cougar 0003:060B:500A.000A: parse failed
[  564.594476][ T5851] cougar 0003:060B:500A.000A: probe with driver cougar failed with error -22
[  564.654548][ T5860] usb 5-1: USB disconnect, device number 9
[  564.724155][ T9810] loop6: detected capacity change from 0 to 128
[  564.831760][ T9810] VFS: Found a Xenix FS (block size = 512) on device loop6
[  564.870140][   T44] usb 6-1: GET_CAPABILITIES returned 2f
[  564.879307][   T44] usbtmc 6-1:16.0: can't read capabilities
[  565.106072][   T44] usb 6-1: USB disconnect, device number 9
[  565.167099][ T6582] sysv_free_block: trying to free block not in datazone
[  565.196703][ T6582] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  566.082306][ T9819] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  566.242474][ T9824] loop6: detected capacity change from 0 to 512
[  566.273557][ T9824] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  566.329202][ T9824] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e11c, mo2=0002]
[  566.339048][ T9824] EXT4-fs (loop6): orphan cleanup on readonly fs
[  566.390461][ T9824] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1112: bg 0: block 361: padding at end of block bitmap is not set
[  566.499060][ T9824] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6550: Corrupt filesystem
[  566.588276][ T9824] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #11: comm syz.6.1112: attempt to clear invalid blocks 33619980 len 1
[  566.649298][ T9824] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1112: invalid indirect mapped block 1811939328 (level 0)
[  566.685614][ T9824] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1112: invalid indirect mapped block 2185560079 (level 1)
[  566.781229][ T9824] EXT4-fs (loop6): 1 truncate cleaned up
[  566.788683][ T9824] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  567.476630][ T9839] loop3: detected capacity change from 0 to 1024
[  567.513002][ T6582] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  567.824317][ T9839] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  568.208009][   T29] audit: type=1326 audit(1731781973.412:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9845 comm="syz.6.1118" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6d08f7e719 code=0x0
[  568.231369][   T29] audit: type=1326 audit(1731781973.412:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9845 comm="syz.6.1118" exe="/root/syz-executor" sig=31 arch=c000003e syscall=230 compat=0 ip=0x7f6d08fb0805 code=0x0
[  568.993454][ T5794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  569.142237][   T44] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  569.335882][   T44] usb 6-1: Using ep0 maxpacket: 16
[  569.382849][   T44] usb 6-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4
[  569.392677][   T44] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  569.401296][   T44] usb 6-1: Product: syz
[  569.405700][   T44] usb 6-1: Manufacturer: syz
[  569.410736][   T44] usb 6-1: SerialNumber: syz
[  569.624117][   T44] usb 6-1: config 0 descriptor??
[  569.679644][   T44] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state.
[  569.760441][ T9848] loop4: detected capacity change from 0 to 32768
[  569.775310][ T9848] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1117 (9848)
[  569.809113][ T9848] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  569.820024][ T9848] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  569.831262][ T9848] BTRFS info (device loop4): using free-space-tree
[  569.880032][   T44] gp8psk: usb in 128 operation failed.
[  569.903134][   T44] gp8psk: usb in 137 operation failed.
[  569.908977][   T44] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  569.966903][   T44] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver)
[  569.976999][   T44] usb 6-1: media controller created
[  570.053985][   T44] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  570.259405][ T3612] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  570.267959][ T3612] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  570.321009][ T5796] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  570.376206][ T3612] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  570.385020][ T3612] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  570.424330][   T44] gp8psk_fe: Frontend revision 1 attached
[  570.430876][   T44] usb 6-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)...
[  570.439458][   T44] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered.
[  570.687095][   T44] gp8psk: usb in 138 operation failed.
[  570.693433][   T44] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected.
[  570.704123][   T44] gp8psk: found Genpix USB device pID = 201 (hex)
[  570.877279][   T44] usb 6-1: USB disconnect, device number 10
[  571.564883][ T9886] syz.6.1125 (9886): drop_caches: 2
[  571.572053][ T9886] syz.6.1125 (9886): drop_caches: 2
[  571.984983][   T44] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected.
[  573.950979][ T9920] syz.3.1138 (9920): drop_caches: 2
[  573.960669][ T9920] syz.3.1138 (9920): drop_caches: 2
[  575.638928][ T9934] af_packet: tpacket_rcv: packet too big, clamped from 62 to 4294967286. macoff=82
[  576.452963][ T9941] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  576.458842][ T9945] loop3: detected capacity change from 0 to 128
[  576.571081][ T9948] syz.5.1148: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz5,mems_allowed=0-1
[  576.587241][ T9948] CPU: 1 UID: 0 PID: 9948 Comm: syz.5.1148 Tainted: G        W          6.12.0-rc7-syzkaller-00189-ge8bdb3c8be08 #0
[  576.599745][ T9948] Tainted: [W]=WARN
[  576.603765][ T9948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  576.614045][ T9948] Call Trace:
[  576.617507][ T9948]  <TASK>
[  576.620629][ T9948]  dump_stack_lvl+0x216/0x2d0
[  576.625629][ T9948]  dump_stack+0x1e/0x30
[  576.630075][ T9948]  warn_alloc+0x455/0x650
[  576.634695][ T9948]  ? __vmalloc_node_range_noprof+0xd6/0x2740
[  576.640968][ T9948]  __vmalloc_node_range_noprof+0x130/0x2740
[  576.647146][ T9948]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  576.653241][ T9948]  ? kmsan_get_metadata+0x13e/0x1c0
[  576.658699][ T9948]  ? kmsan_get_metadata+0x13e/0x1c0
[  576.664243][ T9948]  ? kmsan_get_metadata+0x13e/0x1c0
[  576.669697][ T9948]  ? kmsan_get_metadata+0x13e/0x1c0
[  576.675178][ T9948]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  576.681278][ T9948]  ? kmsan_get_metadata+0x13e/0x1c0
[  576.686754][ T9948]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  576.692842][ T9948]  vmalloc_user_noprof+0x90/0xb0
[  576.698055][ T9948]  ? xskq_create+0x105/0x270
[  576.702895][ T9948]  xskq_create+0x105/0x270
[  576.707556][ T9948]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  576.713635][ T9948]  xsk_init_queue+0x115/0x1f0
[  576.718567][ T9948]  xsk_setsockopt+0x710/0xcc0
[  576.723564][ T9948]  do_sock_setsockopt+0x4bb/0x7d0
[  576.728884][ T9948]  ? __pfx_xsk_setsockopt+0x10/0x10
[  576.734391][ T9948]  __sys_setsockopt+0x327/0x4c0
[  576.739541][ T9948]  __x64_sys_setsockopt+0xe8/0x170
[  576.744966][ T9948]  x64_sys_call+0x2fc2/0x3ba0
[  576.749944][ T9948]  do_syscall_64+0xcd/0x1e0
[  576.754762][ T9948]  ? clear_bhb_loop+0x25/0x80
[  576.759738][ T9948]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  576.765921][ T9948] RIP: 0033:0x7fcd4ab7e719
[  576.770583][ T9948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  576.790479][ T9948] RSP: 002b:00007fcd4b961038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  576.799189][ T9948] RAX: ffffffffffffffda RBX: 00007fcd4ad35f80 RCX: 00007fcd4ab7e719
[  576.807403][ T9948] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  576.815621][ T9948] RBP: 00007fcd4abf175e R08: 0000000000000004 R09: 0000000000000000
[  576.823827][ T9948] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000
[  576.832020][ T9948] R13: 0000000000000000 R14: 00007fcd4ad35f80 R15: 00007ffcb7346f48
[  576.840239][ T9948]  </TASK>
[  576.848673][ T9948] Mem-Info:
[  576.855306][ T9948] active_anon:7250 inactive_anon:0 isolated_anon:0
[  576.855306][ T9948]  active_file:13529 inactive_file:38379 isolated_file:0
[  576.855306][ T9948]  unevictable:768 dirty:115 writeback:0
[  576.855306][ T9948]  slab_reclaimable:2739 slab_unreclaimable:25585
[  576.855306][ T9948]  mapped:22120 shmem:1941 pagetables:1015
[  576.855306][ T9948]  sec_pagetables:0 bounce:0
[  576.855306][ T9948]  kernel_misc_reclaimable:0
[  576.855306][ T9948]  free:384574 free_pcp:11181 free_cma:0
[  576.904578][ T9948] Node 0 active_anon:29000kB inactive_anon:0kB active_file:54116kB inactive_file:153440kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:88480kB dirty:456kB writeback:0kB shmem:6228kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5392kB pagetables:4060kB sec_pagetables:0kB all_unreclaimable? no
[  576.939009][ T9948] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:0kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  576.973678][ T9948] Node 0 DMA free:4096kB boost:0kB min:160kB low:200kB high:240kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  577.002669][ T9948] lowmem_reserve[]: 0 891 1204 0 0
[  577.008375][ T9948] Node 0 DMA32 free:579108kB boost:0kB min:36084kB low:45104kB high:54124kB reserved_highatomic:0KB active_anon:8124kB inactive_anon:0kB active_file:47272kB inactive_file:70520kB unevictable:0kB writepending:204kB present:3129332kB managed:951372kB mlocked:0kB bounce:0kB free_pcp:18836kB local_pcp:1864kB free_cma:0kB
[  577.043862][ T9948] lowmem_reserve[]: 0 0 312 0 0
[  577.049313][ T9948] Node 0 Normal free:17876kB boost:2048kB min:14720kB low:17888kB high:21056kB reserved_highatomic:0KB active_anon:20072kB inactive_anon:0kB active_file:6844kB inactive_file:82920kB unevictable:1536kB writepending:252kB present:1048580kB managed:320496kB mlocked:0kB bounce:0kB free_pcp:3428kB local_pcp:1284kB free_cma:0kB
[  577.089318][ T9948] lowmem_reserve[]: 0 0 0 0 0
[  577.099024][ T9948] Node 1 Normal free:937216kB boost:0kB min:41188kB low:51484kB high:61780kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194300kB managed:1041656kB mlocked:0kB bounce:0kB free_pcp:23292kB local_pcp:3904kB free_cma:0kB
[  577.129307][ T9948] lowmem_reserve[]: 0 0 0 0 0
[  577.134731][ T9948] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB
[  577.148342][ T9948] Node 0 DMA32: 1*4kB (M) 24*8kB (UE) 66*16kB (UME) 262*32kB (UME) 230*64kB (UME) 74*128kB (UME) 36*256kB (UM) 43*512kB (UM) 20*1024kB (UM) 7*2048kB (UM) 117*4096kB (UM) = 579108kB
[  577.171887][ T9948] Node 0 Normal: 33*4kB (UME) 35*8kB (UME) 34*16kB (UE) 42*32kB (UME) 26*64kB (UME) 17*128kB (UME) 12*256kB (UME) 7*512kB (UME) 5*1024kB (UME) 0*2048kB 0*4096kB = 17916kB
[  577.192199][ T9948] Node 1 Normal: 8*4kB (UM) 20*8kB (UME) 24*16kB (UME) 34*32kB (UME) 18*64kB (UME) 14*128kB (UE) 9*256kB (UE) 3*512kB (U) 5*1024kB (UME) 3*2048kB (U) 224*4096kB (UM) = 937216kB
[  577.217572][ T9948] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  577.231507][ T9948] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  577.241262][ T9948] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  577.251370][ T9948] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  577.261089][ T9948] 53584 total pagecache pages
[  577.269262][ T9948] 0 pages in swap cache
[  577.274823][ T9948] Free swap  = 124576kB
[  577.279160][ T9948] Total swap = 124996kB
[  577.283721][ T9948] 2097051 pages RAM
[  577.283982][ T9945] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  577.287619][ T9948] 0 pages HighMem/MovableOnly
[  577.287670][ T9948] 1517646 pages reserved
[  577.309833][ T9948] 0 pages cma reserved
[  577.342689][ T9945] ext4 filesystem being mounted at /257/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  577.377141][ T9941] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  577.418669][ T9950] syz.6.1149 (9950): drop_caches: 2
[  577.431461][ T9950] syz.6.1149 (9950): drop_caches: 2
[  577.618318][ T9941] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  577.752746][   T29] audit: type=1800 audit(1731781982.982:82): pid=9945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1146" name="file1" dev="loop3" ino=13 res=0 errno=0
[  577.773893][   T29] audit: type=1804 audit(1731781982.992:83): pid=9956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1146" name="/newroot/257/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop3" ino=12 res=1 errno=0
[  577.862864][ T9955] dccp_v6_rcv: dropped packet with invalid checksum
[  577.903111][   T29] audit: type=1326 audit(1731781983.112:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9959 comm="syz.5.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd4ab7e719 code=0x7ffc0000
[  577.925941][   T29] audit: type=1326 audit(1731781983.122:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9959 comm="syz.5.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd4ab7e719 code=0x7ffc0000
[  577.948672][   T29] audit: type=1326 audit(1731781983.132:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9959 comm="syz.5.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd4ab7e719 code=0x7ffc0000
[  577.971694][   T29] audit: type=1326 audit(1731781983.142:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9959 comm="syz.5.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd4ab7e719 code=0x7ffc0000
[  578.012495][   T29] audit: type=1326 audit(1731781983.252:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9959 comm="syz.5.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd4ab7e719 code=0x7ffc0000
[  578.108772][ T9941] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  578.135918][ T5794] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  578.476460][ T9941] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  578.513958][ T9941] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  578.539587][ T9941] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  578.568463][ T9941] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  579.011109][ T5860] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  579.170852][ T5860] usb 6-1: Using ep0 maxpacket: 16
[  579.187218][ T5860] usb 6-1: config index 0 descriptor too short (expected 16456, got 72)
[  579.196225][ T5860] usb 6-1: config 0 has an invalid interface number: 125 but max is 1
[  579.205014][ T5860] usb 6-1: config 0 has an invalid interface number: 125 but max is 1
[  579.205155][ T5860] usb 6-1: config 0 has an invalid interface number: 125 but max is 1
[  579.205296][ T5860] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[  579.205439][ T5860] usb 6-1: config 0 has no interface number 0
[  579.205568][ T5860] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[  579.205744][ T5860] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[  579.205892][ T5860] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[  579.274658][ T5860] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  579.274845][ T5860] usb 6-1: config 0 interface 125 has no altsetting 0
[  579.274972][ T5860] usb 6-1: config 0 interface 125 has no altsetting 2
[  579.332814][ T5860] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  579.332990][ T5860] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  579.333127][ T5860] usb 6-1: Product: syz
[  579.333235][ T5860] usb 6-1: Manufacturer: syz
[  579.333353][ T5860] usb 6-1: SerialNumber: syz
[  579.349725][ T5860] usb 6-1: config 0 descriptor??
[  579.364435][ T5860] usb 6-1: selecting invalid altsetting 2
[  579.688065][ T9986] loop6: detected capacity change from 0 to 512
[  579.788041][ T9986] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  579.818599][ T9986] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec018, mo2=0002]
[  579.819136][ T9986] System zones: 1-12
[  579.848492][ T9986] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  579.849869][ T9986] EXT4-fs (loop6): 1 truncate cleaned up
[  579.852269][ T9986] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  579.959521][ T9987] syz.4.1162 (9987): drop_caches: 2
[  579.961293][ T9987] syz.4.1162 (9987): drop_caches: 2
[  580.386792][ T6582] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  580.570457][ T5860] usb 6-1: USB disconnect, device number 11
[  581.326178][T10001] loop4: detected capacity change from 0 to 2048
[  581.655231][T10001] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  582.423723][T10019] syz.9.1174 (10019): drop_caches: 2
[  582.430902][T10019] syz.9.1174 (10019): drop_caches: 2
[  583.917683][T10048] loop5: detected capacity change from 0 to 16
[  584.036097][T10048] erofs: Unknown parameter ''
[  584.052390][T10053] syz.4.1186 (10053): drop_caches: 2
[  584.060995][T10053] syz.4.1186 (10053): drop_caches: 2
[  584.192130][T10052] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1184'.
[  585.296158][T10060] loop3: detected capacity change from 0 to 2048
[  585.681266][T10079] syz.9.1197 (10079): drop_caches: 2
[  585.690049][T10079] syz.9.1197 (10079): drop_caches: 2
[  585.885320][T10082] loop4: detected capacity change from 0 to 512
[  585.916458][T10082] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  585.934683][T10060] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  585.994171][T10082] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  586.031093][T10082] EXT4-fs (loop4): orphan cleanup on readonly fs
[  586.064219][T10082] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.1195: Invalid block bitmap block 0 in block_group 0
[  586.152515][T10082] EXT4-fs (loop4): Remounting filesystem read-only
[  586.187326][T10060] EXT4-fs (loop3): shut down requested (0)
[  586.189091][T10082] Quota error (device loop4): write_blk: dquota write failed
[  586.202181][T10082] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota
[  586.212653][T10082] EXT4-fs (loop4): 1 orphan inode deleted
[  586.253974][T10082] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  586.344962][T10082] syz.4.1195 (10082) used greatest stack depth: 4608 bytes left
[  586.428141][ T5794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  586.578679][T10094] loop6: detected capacity change from 0 to 1024
[  586.643429][T10094] EXT4-fs (loop6): Test dummy encryption mode enabled
[  586.688532][T10094] EXT4-fs (loop6): stripe (7) is not aligned with cluster size (16), stripe is disabled
[  586.691966][ T5796] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  586.833231][T10094] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  587.306424][T10102] loop4: detected capacity change from 0 to 256
[  587.345254][T10102] exfat: Deprecated parameter 'utf8'
[  587.351167][T10102] exfat: Deprecated parameter 'namecase'
[  587.357467][T10102] exfat: Deprecated parameter 'utf8'
[  587.628976][ T6582] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  587.717013][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[  587.723874][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[  587.827410][T10102] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d)
[  588.480838][T10116] syz.4.1209 (10116): drop_caches: 2
[  588.489254][T10116] syz.4.1209 (10116): drop_caches: 2
[  588.876185][T10124] bridge0: port 3(syz_tun) entered blocking state
[  588.883527][T10124] bridge0: port 3(syz_tun) entered disabled state
[  588.894510][T10124] syz_tun: entered allmulticast mode
[  588.903107][T10124] syz_tun: entered promiscuous mode
[  588.910774][T10124] bridge0: port 3(syz_tun) entered blocking state
[  588.917852][T10124] bridge0: port 3(syz_tun) entered forwarding state
[  588.984653][   T44] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  589.031262][T10127] loop5: detected capacity change from 0 to 512
[  589.119248][T10129] loop6: detected capacity change from 0 to 512
[  589.138714][T10127] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  589.157244][T10127] ext4 filesystem being mounted at /239/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  589.176547][   T44] usb 10-1: Using ep0 maxpacket: 16
[  589.220586][T10129] EXT4-fs (loop6): 1 truncate cleaned up
[  589.272969][T10127] EXT4-fs (loop5): shut down requested (2)
[  589.279809][T10129] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  589.346591][   T44] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  589.362141][   T44] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[  589.394075][   T44] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  589.403796][   T44] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  589.412316][   T44] usb 10-1: Product: syz
[  589.416862][   T44] usb 10-1: Manufacturer: syz
[  589.421923][   T44] usb 10-1: SerialNumber: syz
[  589.483370][T10135] EXT4-fs error (device loop6): ext4_add_entry:2437: inode #2: comm syz.6.1215: Directory hole found for htree leaf block 0
[  589.529845][ T6123] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  589.808964][T10138] loop5: detected capacity change from 0 to 2048
[  590.046643][   T44] usb 10-1: cannot find UAC_HEADER
[  590.102427][T10138] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  590.241308][   T44] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22
[  590.348824][T10138] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  590.377218][ T6582] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  590.490878][   T44] usb 10-1: USB disconnect, device number 2
[  590.535918][T10138] EXT4-fs (loop5): Remounting filesystem read-only
[  590.648939][T10138] EXT4-fs (loop5): error restoring inline_data for inode -- potential data loss! (inode 12, error -5)
[  591.097215][ T6133] udevd[6133]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  591.457280][ T6123] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  591.817517][T10140] loop4: detected capacity change from 0 to 32768
[  591.926812][T10140] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  593.619551][T10159] loop5: detected capacity change from 0 to 40427
[  593.789256][T10159] F2FS-fs (loop5): invalid crc value
[  593.824866][ T5796] ocfs2: Unmounting device (7,4) on (node local)
[  593.874130][T10159] F2FS-fs (loop5): Found nat_bits in checkpoint
[  594.527801][T10167] loop3: detected capacity change from 0 to 4096
[  594.534870][T10159] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  594.670744][T10167] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  594.791336][T10171] syz.4.1223 (10171): drop_caches: 2
[  594.805255][T10171] syz.4.1223 (10171): drop_caches: 2
[  594.848405][T10173] loop6: detected capacity change from 0 to 512
[  595.151874][ T6123] syz-executor: attempt to access beyond end of device
[  595.151874][ T6123] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  595.168034][ T6123] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  595.668903][T10173] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  595.682838][T10173] ext4 filesystem being mounted at /229/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  595.754174][T10167] netlink: 'syz.3.1224': attribute type 10 has an invalid length.
[  596.159566][ T6582] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  596.469713][   T29] audit: type=1326 audit(1731782001.692:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10187 comm="syz.3.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ec337e719 code=0x7fc00000
[  596.590345][   T29] audit: type=1326 audit(1731782001.742:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10187 comm="syz.3.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f3ec337e719 code=0x7fc00000
[  596.614045][   T29] audit: type=1326 audit(1731782001.762:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10187 comm="syz.3.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ec337e719 code=0x7fc00000
[  597.553600][   T44] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  597.657165][T10206] syz.5.1237 (10206): drop_caches: 2
[  597.669899][T10206] syz.5.1237 (10206): drop_caches: 2
[  597.772061][   T44] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  597.782817][   T44] usb 5-1: config 0 has no interfaces?
[  597.788571][   T44] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  597.798120][   T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  597.850936][   T44] usb 5-1: config 0 descriptor??
[  598.196609][ T5860] usb 5-1: USB disconnect, device number 10
[  599.095483][T10211] loop5: detected capacity change from 0 to 4096
[  599.169689][T10211] NILFS (loop5): invalid segment: Checksum error in segment payload
[  599.181583][T10211] NILFS (loop5): trying rollback from an earlier position
[  599.277359][T10211] NILFS (loop5): recovery complete
[  599.343190][T10228] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  599.617056][T10232] loop3: detected capacity change from 0 to 512
[  599.701293][   T29] audit: type=1800 audit(1731782004.922:92): pid=10211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1239" name="bus" dev="loop5" ino=12 res=0 errno=0
[  599.946271][T10232] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  599.959608][T10232] ext4 filesystem being mounted at /272/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  599.972032][T10211] loop0: detected capacity change from 64 to 0
[  600.068585][T10240] syz.4.1249 (10240): drop_caches: 2
[  600.081371][T10240] syz.4.1249 (10240): drop_caches: 2
[  600.747350][T10232] EXT4-fs error (device loop3): ext4_add_entry:2437: inode #12: comm syz.3.1247: Directory hole found for htree leaf block 0
[  601.223604][T10245] loop9: detected capacity change from 0 to 256
[  601.453530][ T5794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  601.524958][T10245] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  602.211772][T10236] loop6: detected capacity change from 0 to 40427
[  602.287312][T10236] F2FS-fs (loop6): invalid crc value
[  602.580653][T10251] loop5: detected capacity change from 0 to 4096
[  602.640078][T10236] F2FS-fs (loop6): Found nat_bits in checkpoint
[  602.821552][T10265] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  603.011384][   T29] audit: type=1800 audit(1731782008.222:93): pid=10251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1253" name="file1" dev="loop5" ino=18 res=0 errno=0
[  604.165907][T10280] syz.4.1261 (10280): drop_caches: 2
[  604.173005][T10280] syz.4.1261 (10280): drop_caches: 2
[  604.770792][T10285] loop4: detected capacity change from 0 to 1024
[  604.804432][T10285] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  604.881610][T10285] JBD2: no valid journal superblock found
[  604.887634][T10285] EXT4-fs (loop4): Could not load journal inode
[  604.894519][T10292] loop6: detected capacity change from 0 to 512
[  605.266344][T10292] loop6: detected capacity change from 0 to 1024
[  605.296893][T10292] EXT4-fs: Ignoring removed orlov option
[  605.304683][T10292] EXT4-fs: Ignoring removed nomblk_io_submit option
[  605.591559][T10292] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  605.942014][T10307] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1268'.
[  606.323749][ T6582] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  606.383817][T10314] syz.9.1272 (10314): drop_caches: 2
[  606.391011][T10314] syz.9.1272 (10314): drop_caches: 2
[  608.053330][T10347] syz.9.1284 (10347): drop_caches: 2
[  608.062247][T10347] syz.9.1284 (10347): drop_caches: 2
[  608.360999][ T5877] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  608.468679][ T5092] Bluetooth: hci3: unexpected event for opcode 0x0804
[  608.560492][ T5877] usb 4-1: Using ep0 maxpacket: 8
[  608.748618][ T5877] usb 4-1: config 0 has no interfaces?
[  608.754821][ T5877] usb 4-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00
[  608.764852][ T5877] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  608.802069][ T5877] usb 4-1: config 0 descriptor??
[  609.063741][T10345] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1283'.
[  609.252327][T10364] xfrm0: entered allmulticast mode
[  609.377529][ T5877] usb 4-1: USB disconnect, device number 12
[  609.792087][   T29] audit: type=1326 audit(1731782014.982:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10369 comm="syz.6.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d08f7e719 code=0x7ffc0000
[  609.815227][   T29] audit: type=1326 audit(1731782014.982:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10369 comm="syz.6.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f6d08f7e719 code=0x7ffc0000
[  609.841098][   T29] audit: type=1326 audit(1731782014.982:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10369 comm="syz.6.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d08f7e719 code=0x7ffc0000
[  609.864843][   T29] audit: type=1326 audit(1731782014.982:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10369 comm="syz.6.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f6d08f7e719 code=0x7ffc0000
[  609.887864][   T29] audit: type=1326 audit(1731782014.982:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10369 comm="syz.6.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d08f7e719 code=0x7ffc0000
[  610.059979][T10377] netlink: 64 bytes leftover after parsing attributes in process `syz.9.1294'.
[  610.069636][T10377] netlink: 27 bytes leftover after parsing attributes in process `syz.9.1294'.
[  610.079176][T10377] netlink: 27 bytes leftover after parsing attributes in process `syz.9.1294'.
[  610.089424][T10376] pim6reg1: entered promiscuous mode
[  610.095611][T10376] pim6reg1: entered allmulticast mode
[  610.156632][T10379] syz.6.1296 (10379): drop_caches: 2
[  610.163884][T10379] syz.6.1296 (10379): drop_caches: 2
[  610.624733][T10391] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1298'.
[  610.958386][T10398] block device autoloading is deprecated and will be removed.
[  611.051754][   T29] audit: type=1326 audit(1731782016.242:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10392 comm="syz.4.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518397e719 code=0x7fc00000
[  611.077015][   T29] audit: type=1326 audit(1731782016.242:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10392 comm="syz.4.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f518397e719 code=0x7fc00000
[  611.140994][T10395] md2: using deprecated bitmap file support
[  611.147135][T10395] md2: error: failed to get bitmap file
[  611.481525][T10404] loop5: detected capacity change from 0 to 512
[  611.552274][T10404] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  611.643776][   T29] audit: type=1326 audit(1731782016.882:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10392 comm="syz.4.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518397e719 code=0x7fc00000
[  611.654788][T10404] EXT4-fs (loop5): 1 truncate cleaned up
[  611.677617][T10404] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  611.785098][T10404] evm: overlay not supported
[  612.556673][T10401] loop6: detected capacity change from 0 to 4096
[  612.685441][T10401] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512).
[  612.730632][ T5092] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  612.739399][ T5092] Bluetooth: hci3: Injecting HCI hardware error event
[  612.804586][ T5092] Bluetooth: hci3: hardware error 0x00
[  613.120951][T10413] loop3: detected capacity change from 0 to 4096
[  613.187117][T10413] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  613.199083][T10413] NILFS (loop3): mounting unchecked fs
[  613.452918][T10401] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[  613.483243][T10413] NILFS (loop3): recovery complete
[  613.555045][T10415] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  613.641468][ T3612] bridge_slave_1: left allmulticast mode
[  613.647519][ T3612] bridge_slave_1: left promiscuous mode
[  613.656687][ T3612] bridge0: port 2(bridge_slave_1) entered disabled state
[  613.691580][   T29] audit: type=1800 audit(1731782018.862:102): pid=10401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1304" name="bus" dev="loop6" ino=33 res=0 errno=0
[  613.783249][T10300] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  613.818511][T10408] loop9: detected capacity change from 0 to 32768
[  613.836041][ T3612] bridge_slave_0: left allmulticast mode
[  613.842369][ T3612] bridge_slave_0: left promiscuous mode
[  613.848926][ T3612] bridge0: port 1(bridge_slave_0) entered disabled state
[  614.139786][T10413] overlayfs: failed to resolve './file1': -2
[  614.799679][ T3612] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  615.028291][ T3612] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  615.151094][ T3612] bond0 (unregistering): Released all slaves
[  615.194106][ T5092] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  616.524829][ T5812] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  616.572732][T10419] loop4: detected capacity change from 0 to 32768
[  616.604433][ T5812] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  616.614618][ T5812] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  616.628193][ T5812] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  616.639451][ T5812] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  616.644140][T10419] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1309 (10419)
[  616.648815][ T5812] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  616.703632][ T3612] tipc: Disabling bearer <eth:hsr0>
[  616.759670][T10419] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  616.770369][T10419] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  616.780778][T10419] BTRFS info (device loop4): using free-space-tree
[  616.797633][ T3612] tipc: Left network mode
[  617.064839][T10434] loop6: detected capacity change from 0 to 1024
[  617.159365][T10419] BTRFS error (device loop4): open_ctree failed
[  618.331331][ T3612] hsr_slave_0: left promiscuous mode
[  618.391667][ T3612] hsr_slave_1: left promiscuous mode
[  618.466476][ T3612] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  618.474635][ T3612] batman_adv: batadv0: Removing interface: batadv_slave_0
[  618.579218][ T3612] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  618.587166][ T3612] batman_adv: batadv0: Removing interface: batadv_slave_1
[  618.797299][ T3612] veth1_macvtap: left promiscuous mode
[  618.803161][ T3612] veth0_macvtap: left promiscuous mode
[  618.809130][ T3612] veth1_vlan: left promiscuous mode
[  618.816250][ T3612] veth0_vlan: left promiscuous mode
[  618.855624][ T5812] Bluetooth: hci1: command tx timeout
[  619.618435][T10453] loop3: detected capacity change from 0 to 32768
[  619.642525][T10453] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1316 (10453)
[  619.784339][T10453] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  619.795052][T10453] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  619.806863][T10453] BTRFS info (device loop3): using free-space-tree
[  620.003307][T10458] loop6: detected capacity change from 0 to 4096
[  620.012753][T10458] ntfs3: Unknown parameter '017777777777777777777770x0000000000000000'
[  620.309444][ T3612] team0 (unregistering): Port device team_slave_1 removed
[  620.398605][ T3612] team0 (unregistering): Port device team_slave_0 removed
[  620.897036][ T5812] Bluetooth: hci1: command tx timeout
[  620.959239][ T5794] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  621.181802][T10423] chnl_net:caif_netlink_parms(): no params data found
[  622.386019][T10423] bridge0: port 1(bridge_slave_0) entered blocking state
[  622.394015][T10423] bridge0: port 1(bridge_slave_0) entered disabled state
[  622.401992][T10423] bridge_slave_0: entered allmulticast mode
[  622.411148][T10423] bridge_slave_0: entered promiscuous mode
[  622.518645][T10423] bridge0: port 2(bridge_slave_1) entered blocking state
[  622.532225][T10423] bridge0: port 2(bridge_slave_1) entered disabled state
[  622.539482][T10506] loop9: detected capacity change from 0 to 2048
[  622.540072][T10423] bridge_slave_1: entered allmulticast mode
[  622.556902][T10423] bridge_slave_1: entered promiscuous mode
[  622.630779][    T8] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  622.736871][T10423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  622.760975][T10423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  622.853337][T10506] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  622.941262][    T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  622.952808][    T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  622.963073][    T8] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  622.973723][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  622.987219][ T5812] Bluetooth: hci1: command tx timeout
[  623.003869][T10506] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  623.022177][T10506] EXT4-fs (loop9): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28
[  623.034984][T10506] EXT4-fs (loop9): This should not happen!! Data will be lost
[  623.034984][T10506] 
[  623.047126][    T8] usb 4-1: config 0 descriptor??
[  623.055268][T10506] EXT4-fs (loop9): Total free blocks count 0
[  623.061676][T10506] EXT4-fs (loop9): Free/Dirty block details
[  623.067817][T10506] EXT4-fs (loop9): free_blocks=2415919104
[  623.074027][T10506] EXT4-fs (loop9): dirty_blocks=16
[  623.079379][T10506] EXT4-fs (loop9): Block reservation details
[  623.085790][T10506] EXT4-fs (loop9): i_reserved_data_blocks=1
[  623.203178][T10520] EXT4-fs (loop9): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28
[  623.236266][T10521] loop4: detected capacity change from 0 to 64
[  623.263059][T10423] team0: Port device team_slave_0 added
[  623.327404][T10423] team0: Port device team_slave_1 added
[  623.465748][T10423] batman_adv: batadv0: Adding interface: batadv_slave_0
[  623.474150][T10423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  623.500736][T10423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  623.547272][T10423] batman_adv: batadv0: Adding interface: batadv_slave_1
[  623.555984][T10423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  623.582659][T10423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  623.641526][    T8] usbhid 4-1:0.0: can't add hid device: -71
[  623.648224][    T8] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  623.761575][    T8] usb 4-1: USB disconnect, device number 13
[  624.075896][T10423] hsr_slave_0: entered promiscuous mode
[  624.086091][T10423] hsr_slave_1: entered promiscuous mode
[  624.930080][T10538] loop3: detected capacity change from 0 to 64
[  625.052988][ T5812] Bluetooth: hci1: command tx timeout
[  625.734693][T10549] usb usb8: usbfs: process 10549 (syz.9.1337) did not claim interface 0 before use
[  626.181167][T10423] 8021q: adding VLAN 0 to HW filter on device bond0
[  627.194941][T10423] 8021q: adding VLAN 0 to HW filter on device team0
[  627.278770][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[  627.286578][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[  627.419548][ T3612] bridge0: port 2(bridge_slave_1) entered blocking state
[  627.427386][ T3612] bridge0: port 2(bridge_slave_1) entered forwarding state
[  627.621531][T10423] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  627.632358][T10423] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  629.589851][T10423] 8021q: adding VLAN 0 to HW filter on device batadv0
[  630.943135][T10571] input: syz0 as /devices/virtual/input/input13
[  632.273326][T10423] veth0_vlan: entered promiscuous mode
[  632.391371][T10423] veth1_vlan: entered promiscuous mode
[  632.688440][T10423] veth0_macvtap: entered promiscuous mode
[  632.736600][    T8] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  632.779886][T10423] veth1_macvtap: entered promiscuous mode
[  632.885140][T10423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  632.896890][T10423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  632.907058][T10423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  632.917820][T10423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  632.927980][T10423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  632.938750][T10423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  632.949002][T10423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  632.959778][T10423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  632.975809][T10423] batman_adv: batadv0: Interface activated: batadv_slave_0
[  633.020850][    T8] usb 10-1: Using ep0 maxpacket: 32
[  633.027974][T10585] loop6: detected capacity change from 0 to 2048
[  633.063450][    T8] usb 10-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed
[  633.074251][    T8] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  633.082864][    T8] usb 10-1: Product: syz
[  633.087345][    T8] usb 10-1: Manufacturer: syz
[  633.093215][    T8] usb 10-1: SerialNumber: syz
[  633.151299][T10590] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  633.176064][T10423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  633.187513][T10423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  633.197699][T10423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  633.208468][T10423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  633.219042][T10423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  633.229789][T10423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  633.239970][T10423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  633.250908][T10423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  633.261040][T10423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  633.271831][T10423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  633.287729][T10423] batman_adv: batadv0: Interface activated: batadv_slave_1
[  633.303877][    T8] usb 10-1: config 0 descriptor??
[  633.328968][T10585] NILFS error (device loop6): nilfs_check_folio: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=201, name_len=0
[  633.395968][T10585] Remounting filesystem read-only
[  633.408025][T10595] NILFS error (device loop6): nilfs_check_folio: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=201, name_len=0
[  633.574869][T10594] syzkaller0: entered promiscuous mode
[  633.580834][T10594] syzkaller0: entered allmulticast mode
[  633.610036][T10585] NILFS error (device loop6): nilfs_check_folio: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=201, name_len=0
[  633.644190][T10585] NILFS error (device loop6): nilfs_check_folio: bad entry in directory #2: unaligned directory entry - offset=0, inode=2, rec_len=201, name_len=0
[  633.779104][T10594] syzkaller0: tun_net_xmit 1280
[  633.785258][T10594] syzkaller0: create flow: hash 728003979 index 1
[  633.818706][T10593] syzkaller0: delete flow: hash 728003979 index 1
[  633.833892][T10589] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  633.855669][T10589] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  634.549302][    T8] rtl8150 10-1:0.0: couldn't reset the device
[  634.558571][    T8] rtl8150 10-1:0.0: probe with driver rtl8150 failed with error -5
[  634.673291][    T8] usb 10-1: USB disconnect, device number 3
[  634.944396][T10609] loop4: detected capacity change from 0 to 128
[  634.967463][T10609] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  636.095776][T10625] loop4: detected capacity change from 0 to 64
[  637.710443][    T8] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  637.729828][   T29] audit: type=1326 audit(1731782042.962:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10642 comm="syz.4.1358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518397e719 code=0x7ffc0000
[  637.804860][   T29] audit: type=1326 audit(1731782043.002:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10642 comm="syz.4.1358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518397e719 code=0x7ffc0000
[  637.828226][   T29] audit: type=1326 audit(1731782043.002:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10642 comm="syz.4.1358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f518397e719 code=0x7ffc0000
[  637.851525][   T29] audit: type=1326 audit(1731782043.002:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10642 comm="syz.4.1358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518397e719 code=0x7ffc0000
[  637.874388][   T29] audit: type=1326 audit(1731782043.002:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10642 comm="syz.4.1358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518397e719 code=0x7ffc0000
[  637.899203][   T29] audit: type=1326 audit(1731782043.012:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10642 comm="syz.4.1358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f518397e719 code=0x7ffc0000
[  637.922981][   T29] audit: type=1326 audit(1731782043.012:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10642 comm="syz.4.1358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518397e719 code=0x7ffc0000
[  637.947757][   T29] audit: type=1326 audit(1731782043.012:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10642 comm="syz.4.1358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518397e719 code=0x7ffc0000
[  637.970952][   T29] audit: type=1326 audit(1731782043.032:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10642 comm="syz.4.1358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f518397e719 code=0x7ffc0000
[  637.994965][   T29] audit: type=1326 audit(1731782043.032:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10642 comm="syz.4.1358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518397e719 code=0x7ffc0000
[  638.178049][    T8] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  638.187622][    T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  638.196918][    T8] usb 4-1: Product: syz
[  638.201553][    T8] usb 4-1: Manufacturer: syz
[  638.206396][    T8] usb 4-1: SerialNumber: syz
[  638.312434][    T8] usb 4-1: config 0 descriptor??
[  638.678587][T10654] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1361'.
[  638.750726][    T8] usb 4-1: Firmware: major: 101, minor: 133, hardware type: UNKNOWN (242)
[  638.959102][    T8] usb 4-1: failed to fetch extended address, random address set
[  638.967324][    T8] usb 4-1: atusb_probe: initialization failed, error = -524
[  638.977593][    T8] atusb 4-1:0.0: probe with driver atusb failed with error -524
[  639.075507][T10649] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[  639.169723][   T44] usb 4-1: USB disconnect, device number 14
[  641.027990][T10668] loop4: detected capacity change from 0 to 40427
[  641.124594][T10668] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x1fffff
[  641.133572][T10668] F2FS-fs (loop4): Image doesn't support compression
[  641.140891][T10668] F2FS-fs (loop4): Image doesn't support compression
[  641.152665][T10668] F2FS-fs (loop4): invalid crc value
[  641.250579][T10668] F2FS-fs (loop4): Found nat_bits in checkpoint
[  641.560964][T10668] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  641.632058][ T1881] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  641.640550][ T1881] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  641.723690][T10668] F2FS-fs (loop4): inject checkpoint error in f2fs_balance_fs of f2fs_map_blocks+0x4dc0/0x6f30
[  641.803627][ T3682] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  641.812049][ T3682] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  642.098809][T10668] F2FS-fs (loop4): Stopped filesystem due to reason: 1
[  642.162169][T10678] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1367'.
[  642.927412][T10690] bridge0: port 1(bridge_slave_0) entered blocking state
[  642.935129][T10690] bridge0: port 1(bridge_slave_0) entered forwarding state
[  643.034394][T10689] loop9: detected capacity change from 0 to 8
[  643.057938][T10690] loop6: detected capacity change from 0 to 2048
[  643.143544][T10689] squashfs: Unknown parameter ''
[  643.249629][T10693] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  643.350806][T10690] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1369'.
[  643.360028][T10690] tc_dump_action: action bad kind
[  643.362443][T10694] loop3: detected capacity change from 0 to 512
[  643.377307][T10694] EXT4-fs: Ignoring removed mblk_io_submit option
[  643.391086][T10694] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  643.479431][T10694] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002]
[  643.539826][T10694] System zones: 1-12
[  643.575861][T10694] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.1371: corrupted in-inode xattr: e_value size too large
[  643.671436][T10694] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.1371: couldn't read orphan inode 15 (err -117)
[  643.728493][T10694] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  644.087594][T10704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1373'.
[  644.505341][T10709] loop9: detected capacity change from 0 to 256
[  644.560392][T10694] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1371'.
[  644.698023][T10709] exFAT-fs (loop9): failed to load upcase table (idx : 0x000104d0, chksum : 0x60c5118c, utbl_chksum : 0xe619d30d)
[  644.813872][T10693] NILFS (loop6): vblocknr = 18 has abnormal lifetime: start cno (= 504403158265495554) > current cno (= 3)
[  644.827059][T10693] NILFS error (device loop6): nilfs_bmap_propagate: broken bmap (inode number=2)
[  644.872564][T10693] Remounting filesystem read-only
[  644.879364][ T6582] NILFS (loop6): disposed unprocessed dirty file(s) when stopping log writer
[  645.351210][ T5794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  647.769424][T10736] syzkaller0: entered allmulticast mode
[  648.408155][T10719] loop3: detected capacity change from 0 to 32768
[  648.616878][T10719] add_index: next_index = 0.  Resetting!
[  648.622847][T10719] find_entry called with index >= next_index
[  648.629015][T10719] find_entry called with index >= next_index
[  648.635739][T10719] find_entry called with index >= next_index
[  648.643911][T10719] find_entry called with index >= next_index
[  648.650417][T10719] find_entry called with index >= next_index
[  649.157396][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[  649.164359][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[  649.227999][T10740] loop6: detected capacity change from 0 to 1024
[  649.326116][T10740] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  649.448343][T10740] EXT4-fs error (device loop6): ext4_ext_check_inode:524: inode #11: comm syz.6.1385: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  649.508620][T10740] EXT4-fs error (device loop6): ext4_orphan_get:1393: comm syz.6.1385: couldn't read orphan inode 11 (err -117)
[  649.572468][T10740] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  649.619052][T10740] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.1385: Invalid block bitmap block 0 in block_group 0
[  649.691454][T10740] __quota_error: 7 callbacks suppressed
[  649.691535][T10740] Quota error (device loop6): write_blk: dquota write failed
[  649.709907][T10740] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota
[  649.721688][T10740] EXT4-fs error (device loop6): ext4_acquire_dquot:6879: comm syz.6.1385: Failed to acquire dquot type 0
[  650.089981][ T6582] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  650.712699][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies.
[  652.519870][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies.
[  653.950725][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies.
[  654.022832][    C1] =====================================================
[  654.030340][    C1] BUG: KMSAN: uninit-value in tcp_parse_options+0x1006/0x1de0
[  654.038026][    C1]  tcp_parse_options+0x1006/0x1de0
[  654.043453][    C1]  tcp_validate_incoming+0x432/0x30c0
[  654.049048][    C1]  tcp_rcv_state_process+0x8ca/0x4c10
[  654.054746][    C1]  tcp_v4_do_rcv+0xbf9/0x11a0
[  654.059716][    C1]  tcp_v4_rcv+0x51df/0x5750
[  654.064497][    C1]  ip_protocol_deliver_rcu+0x2a3/0x13d0
[  654.070313][    C1]  ip_local_deliver_finish+0x336/0x500
[  654.076001][    C1]  ip_local_deliver+0x21f/0x490
[  654.081148][    C1]  ip_rcv_finish+0x4a2/0x520
[  654.085926][    C1]  ip_rcv+0xcd/0x380
[  654.090005][    C1]  __netif_receive_skb+0x319/0xa00
[  654.095433][    C1]  process_backlog+0x4ad/0xa50
[  654.100502][    C1]  __napi_poll+0xe7/0x980
[  654.105029][    C1]  net_rx_action+0xa5a/0x19b0
[  654.109928][    C1]  handle_softirqs+0x1a0/0x7c0
[  654.115023][    C1]  __do_softirq+0x14/0x1a
[  654.119547][    C1]  do_softirq+0x9a/0x100
[  654.124084][    C1]  __local_bh_enable_ip+0x9f/0xb0
[  654.129304][    C1]  __dev_queue_xmit+0x26d8/0x56d0
[  654.134614][    C1]  ip_finish_output2+0x187c/0x1b70
[  654.139948][    C1]  __ip_finish_output+0x287/0x810
[  654.145307][    C1]  ip_finish_output+0x4b/0x550
[  654.150371][    C1]  ip_output+0x15f/0x3f0
[  654.154817][    C1]  __ip_queue_xmit+0x1e95/0x2040
[  654.159956][    C1]  ip_queue_xmit+0x60/0x80
[  654.164700][    C1]  __tcp_transmit_skb+0x3c6b/0x4880
[  654.170230][    C1]  tcp_write_xmit+0x3b90/0x9070
[  654.175277][    C1]  tcp_send_fin+0xa9d/0x12e0
[  654.178073][T10809] loop4: detected capacity change from 0 to 2048
[  654.180005][    C1]  tcp_shutdown+0x198/0x1f0
[  654.191137][    C1]  __mptcp_close_ssk+0x9a9/0x16e0
[  654.196365][    C1]  mptcp_close_ssk+0x26b/0x2c0
[  654.201409][    C1]  mptcp_pm_nl_rm_addr_or_subflow+0x635/0xd10
[  654.207686][    C1]  mptcp_pm_nl_flush_addrs_doit+0xe10/0x1630
[  654.213964][    C1]  genl_rcv_msg+0x1214/0x12c0
[  654.218839][    C1]  netlink_rcv_skb+0x375/0x650
[  654.223917][    C1]  genl_rcv+0x40/0x60
[  654.228089][    C1]  netlink_unicast+0xf52/0x1260
[  654.230016][T10809] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  654.233190][    C1]  netlink_sendmsg+0x10da/0x11e0
[  654.247172][    C1]  __sock_sendmsg+0x30f/0x380
[  654.252124][    C1]  ____sys_sendmsg+0x877/0xb60
[  654.257101][    C1]  ___sys_sendmsg+0x28d/0x3c0
[  654.262105][    C1]  __x64_sys_sendmsg+0x300/0x4a0
[  654.267261][    C1]  x64_sys_call+0x2da0/0x3ba0
[  654.272266][    C1]  do_syscall_64+0xcd/0x1e0
[  654.277004][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  654.283209][    C1] 
[  654.285649][    C1] Uninit was created at:
[  654.290271][    C1]  kmem_cache_alloc_node_noprof+0x6bf/0xb80
[  654.296388][    C1]  kmalloc_reserve+0x13d/0x4a0
[  654.301518][    C1]  __alloc_skb+0x363/0x7b0
[  654.306125][    C1]  tcp_send_fin+0x3ba/0x12e0
[  654.310987][    C1]  tcp_shutdown+0x198/0x1f0
[  654.315664][    C1]  __mptcp_close_ssk+0x9a9/0x16e0
[  654.320989][    C1]  mptcp_close_ssk+0x26b/0x2c0
[  654.325964][    C1]  mptcp_pm_nl_rm_addr_or_subflow+0x635/0xd10
[  654.332346][    C1]  mptcp_pm_nl_flush_addrs_doit+0xe10/0x1630
[  654.338525][    C1]  genl_rcv_msg+0x1214/0x12c0
[  654.343479][    C1]  netlink_rcv_skb+0x375/0x650
[  654.348461][    C1]  genl_rcv+0x40/0x60
[  654.352717][    C1]  netlink_unicast+0xf52/0x1260
[  654.357774][    C1]  netlink_sendmsg+0x10da/0x11e0
[  654.362973][    C1]  __sock_sendmsg+0x30f/0x380
[  654.367836][    C1]  ____sys_sendmsg+0x877/0xb60
[  654.372901][    C1]  ___sys_sendmsg+0x28d/0x3c0
[  654.377789][    C1]  __x64_sys_sendmsg+0x300/0x4a0
[  654.383027][    C1]  x64_sys_call+0x2da0/0x3ba0
[  654.387903][    C1]  do_syscall_64+0xcd/0x1e0
[  654.392732][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  654.398829][    C1] 
[  654.401363][    C1] CPU: 1 UID: 0 PID: 10807 Comm: syz.3.1408 Tainted: G        W          6.12.0-rc7-syzkaller-00189-ge8bdb3c8be08 #0
[  654.413920][    C1] Tainted: [W]=WARN
[  654.417827][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  654.428136][    C1] =====================================================
[  654.435286][    C1] Disabling lock debugging due to kernel taint
[  654.441662][    C1] Kernel panic - not syncing: kmsan.panic set ...
[  654.448214][    C1] CPU: 1 UID: 0 PID: 10807 Comm: syz.3.1408 Tainted: G    B   W          6.12.0-rc7-syzkaller-00189-ge8bdb3c8be08 #0
[  654.460688][    C1] Tainted: [B]=BAD_PAGE, [W]=WARN
[  654.465828][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  654.476035][    C1] Call Trace:
[  654.479435][    C1]  <IRQ>
[  654.482396][    C1]  dump_stack_lvl+0x216/0x2d0
[  654.487300][    C1]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  654.493287][    C1]  dump_stack+0x1e/0x30
[  654.497635][    C1]  panic+0x4e2/0xcf0
[  654.501723][    C1]  ? kmsan_get_metadata+0xa1/0x1c0
[  654.507008][    C1]  kmsan_report+0x2c7/0x2d0
[  654.511672][    C1]  ? sock_def_readable+0x16d/0x370
[  654.516947][    C1]  ? __msan_warning+0x95/0x120
[  654.521919][    C1]  ? tcp_parse_options+0x1006/0x1de0
[  654.527401][    C1]  ? tcp_validate_incoming+0x432/0x30c0
[  654.533149][    C1]  ? tcp_rcv_state_process+0x8ca/0x4c10
[  654.538931][    C1]  ? tcp_v4_do_rcv+0xbf9/0x11a0
[  654.543944][    C1]  ? tcp_v4_rcv+0x51df/0x5750
[  654.548778][    C1]  ? ip_protocol_deliver_rcu+0x2a3/0x13d0
[  654.554682][    C1]  ? ip_local_deliver_finish+0x336/0x500
[  654.560495][    C1]  ? ip_local_deliver+0x21f/0x490
[  654.565689][    C1]  ? ip_rcv_finish+0x4a2/0x520
[  654.570632][    C1]  ? ip_rcv+0xcd/0x380
[  654.574858][    C1]  ? __netif_receive_skb+0x319/0xa00
[  654.580358][    C1]  ? process_backlog+0x4ad/0xa50
[  654.585494][    C1]  ? __napi_poll+0xe7/0x980
[  654.590182][    C1]  ? net_rx_action+0xa5a/0x19b0
[  654.595236][    C1]  ? handle_softirqs+0x1a0/0x7c0
[  654.600366][    C1]  ? __do_softirq+0x14/0x1a
[  654.605056][    C1]  ? do_softirq+0x9a/0x100
[  654.609657][    C1]  ? __local_bh_enable_ip+0x9f/0xb0
[  654.615073][    C1]  ? __dev_queue_xmit+0x26d8/0x56d0
[  654.620471][    C1]  ? ip_finish_output2+0x187c/0x1b70
[  654.626002][    C1]  ? __ip_finish_output+0x287/0x810
[  654.631416][    C1]  ? ip_finish_output+0x4b/0x550
[  654.636544][    C1]  ? ip_output+0x15f/0x3f0
[  654.641142][    C1]  ? __ip_queue_xmit+0x1e95/0x2040
[  654.646448][    C1]  ? ip_queue_xmit+0x60/0x80
[  654.651238][    C1]  ? __tcp_transmit_skb+0x3c6b/0x4880
[  654.656798][    C1]  ? tcp_write_xmit+0x3b90/0x9070
[  654.661988][    C1]  ? tcp_send_fin+0xa9d/0x12e0
[  654.666922][    C1]  ? tcp_shutdown+0x198/0x1f0
[  654.671761][    C1]  ? __mptcp_close_ssk+0x9a9/0x16e0
[  654.677151][    C1]  ? mptcp_close_ssk+0x26b/0x2c0
[  654.682288][    C1]  ? mptcp_pm_nl_rm_addr_or_subflow+0x635/0xd10
[  654.688746][    C1]  ? mptcp_pm_nl_flush_addrs_doit+0xe10/0x1630
[  654.695101][    C1]  ? genl_rcv_msg+0x1214/0x12c0
[  654.700137][    C1]  ? netlink_rcv_skb+0x375/0x650
[  654.705280][    C1]  ? genl_rcv+0x40/0x60
[  654.709592][    C1]  ? netlink_unicast+0xf52/0x1260
[  654.714831][    C1]  ? netlink_sendmsg+0x10da/0x11e0
[  654.720098][    C1]  ? __sock_sendmsg+0x30f/0x380
[  654.725110][    C1]  ? ____sys_sendmsg+0x877/0xb60
[  654.730253][    C1]  ? ___sys_sendmsg+0x28d/0x3c0
[  654.735290][    C1]  ? __x64_sys_sendmsg+0x300/0x4a0
[  654.740595][    C1]  ? x64_sys_call+0x2da0/0x3ba0
[  654.745638][    C1]  ? do_syscall_64+0xcd/0x1e0
[  654.750521][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  654.756785][    C1]  ? kmsan_internal_unpoison_memory+0x14/0x20
[  654.763058][    C1]  ? sock_put+0x94/0xc0
[  654.767400][    C1]  ? kmsan_get_metadata+0x13e/0x1c0
[  654.772758][    C1]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  654.778731][    C1]  __msan_warning+0x95/0x120
[  654.783517][    C1]  tcp_parse_options+0x1006/0x1de0
[  654.788869][    C1]  tcp_validate_incoming+0x432/0x30c0
[  654.794453][    C1]  ? ktime_get+0x4c7/0x530
[  654.799070][    C1]  tcp_rcv_state_process+0x8ca/0x4c10
[  654.804652][    C1]  ? kmsan_get_metadata+0x13e/0x1c0
[  654.810049][    C1]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  654.816058][    C1]  ? kmsan_get_metadata+0x13e/0x1c0
[  654.821435][    C1]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  654.827413][    C1]  tcp_v4_do_rcv+0xbf9/0x11a0
[  654.832259][    C1]  tcp_v4_rcv+0x51df/0x5750
[  654.836965][    C1]  ? tcp_v4_rcv+0x17c1/0x5750
[  654.841801][    C1]  ? __pfx_tcp_v4_rcv+0x10/0x10
[  654.846807][    C1]  ip_protocol_deliver_rcu+0x2a3/0x13d0
[  654.852557][    C1]  ip_local_deliver_finish+0x336/0x500
[  654.858218][    C1]  ip_local_deliver+0x21f/0x490
[  654.863242][    C1]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  654.869417][    C1]  ? __pfx_ip_local_deliver+0x10/0x10
[  654.874994][    C1]  ip_rcv_finish+0x4a2/0x520
[  654.879792][    C1]  ip_rcv+0xcd/0x380
[  654.883875][    C1]  ? __pfx_ip_rcv_finish+0x10/0x10
[  654.889194][    C1]  ? ip6_rcv_finish+0x940/0x970
[  654.894226][    C1]  ? __pfx_ip_rcv+0x10/0x10
[  654.898896][    C1]  __netif_receive_skb+0x319/0xa00
[  654.904211][    C1]  ? kmsan_get_metadata+0x13e/0x1c0
[  654.909592][    C1]  process_backlog+0x4ad/0xa50
[  654.914586][    C1]  ? __pfx_process_backlog+0x10/0x10
[  654.920080][    C1]  __napi_poll+0xe7/0x980
[  654.924598][    C1]  ? kmsan_get_metadata+0x13e/0x1c0
[  654.929969][    C1]  net_rx_action+0xa5a/0x19b0
[  654.934841][    C1]  ? kmsan_get_metadata+0x13e/0x1c0
[  654.940204][    C1]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  654.946203][    C1]  ? __pfx_net_rx_action+0x10/0x10
[  654.951514][    C1]  handle_softirqs+0x1a0/0x7c0
[  654.956492][    C1]  __do_softirq+0x14/0x1a
[  654.961001][    C1]  do_softirq+0x9a/0x100
[  654.965427][    C1]  </IRQ>
[  654.968455][    C1]  <TASK>
[  654.971487][    C1]  __local_bh_enable_ip+0x9f/0xb0
[  654.976704][    C1]  __dev_queue_xmit+0x26d8/0x56d0
[  654.981916][    C1]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  654.987887][    C1]  ? ip_finish_output2+0x74a/0x1b70
[  654.993299][    C1]  ? filter_irq_stacks+0x60/0x1a0
[  654.998523][    C1]  ? __dev_queue_xmit+0x355/0x56d0
[  655.003853][    C1]  ip_finish_output2+0x187c/0x1b70
[  655.009200][    C1]  __ip_finish_output+0x287/0x810
[  655.014431][    C1]  ? nf_nat_ipv4_out+0x587/0x7d0
[  655.019584][    C1]  ip_finish_output+0x4b/0x550
[  655.024539][    C1]  ? __rcu_read_unlock+0x48/0xe0
[  655.029654][    C1]  ip_output+0x15f/0x3f0
[  655.034093][    C1]  ? __pfx_ip_finish_output+0x10/0x10
[  655.039658][    C1]  ? __pfx_ip_output+0x10/0x10
[  655.044610][    C1]  __ip_queue_xmit+0x1e95/0x2040
[  655.049743][    C1]  ? filter_irq_stacks+0x60/0x1a0
[  655.055008][    C1]  ? kmsan_get_metadata+0x13e/0x1c0
[  655.060374][    C1]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  655.066356][    C1]  ip_queue_xmit+0x60/0x80
[  655.070963][    C1]  ? __pfx_ip_queue_xmit+0x10/0x10
[  655.076262][    C1]  __tcp_transmit_skb+0x3c6b/0x4880
[  655.081671][    C1]  ? kmsan_get_metadata+0x13e/0x1c0
[  655.087058][    C1]  tcp_write_xmit+0x3b90/0x9070
[  655.092102][    C1]  ? kmsan_get_metadata+0x13e/0x1c0
[  655.097468][    C1]  ? tcp_current_mss+0x870/0xb40
[  655.102615][    C1]  tcp_send_fin+0xa9d/0x12e0
[  655.107392][    C1]  tcp_shutdown+0x198/0x1f0
[  655.112060][    C1]  __mptcp_close_ssk+0x9a9/0x16e0
[  655.117296][    C1]  mptcp_close_ssk+0x26b/0x2c0
[  655.122251][    C1]  mptcp_pm_nl_rm_addr_or_subflow+0x635/0xd10
[  655.128545][    C1]  mptcp_pm_nl_flush_addrs_doit+0xe10/0x1630
[  655.134732][    C1]  ? __pfx_mptcp_pm_nl_flush_addrs_doit+0x10/0x10
[  655.141339][    C1]  genl_rcv_msg+0x1214/0x12c0
[  655.146187][    C1]  ? filter_irq_stacks+0x164/0x1a0
[  655.151501][    C1]  ? __pfx_mptcp_pm_nl_flush_addrs_doit+0x10/0x10
[  655.158135][    C1]  netlink_rcv_skb+0x375/0x650
[  655.163123][    C1]  ? __pfx_genl_rcv_msg+0x10/0x10
[  655.168330][    C1]  ? __pfx_genl_rcv+0x10/0x10
[  655.173171][    C1]  genl_rcv+0x40/0x60
[  655.177312][    C1]  netlink_unicast+0xf52/0x1260
[  655.182367][    C1]  netlink_sendmsg+0x10da/0x11e0
[  655.187474][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  655.192960][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  655.198398][    C1]  __sock_sendmsg+0x30f/0x380
[  655.203248][    C1]  ____sys_sendmsg+0x877/0xb60
[  655.208228][    C1]  ___sys_sendmsg+0x28d/0x3c0
[  655.213092][    C1]  ? kmsan_get_metadata+0x13e/0x1c0
[  655.218459][    C1]  ? __rcu_read_unlock+0x7b/0xe0
[  655.223594][    C1]  ? __fget_files+0x4f5/0x5c0
[  655.228468][    C1]  ? kmsan_get_metadata+0x13e/0x1c0
[  655.233820][    C1]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  655.239801][    C1]  __x64_sys_sendmsg+0x300/0x4a0
[  655.244967][    C1]  x64_sys_call+0x2da0/0x3ba0
[  655.249833][    C1]  do_syscall_64+0xcd/0x1e0
[  655.254553][    C1]  ? clear_bhb_loop+0x25/0x80
[  655.259420][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  655.265499][    C1] RIP: 0033:0x7f3ec337e719
[  655.270047][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  655.289844][    C1] RSP: 002b:00007f3ec41a9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  655.298437][    C1] RAX: ffffffffffffffda RBX: 00007f3ec3535f80 RCX: 00007f3ec337e719
[  655.306555][    C1] RDX: 0000000000000040 RSI: 00000000200001c0 RDI: 0000000000000005
[  655.314662][    C1] RBP: 00007f3ec33f175e R08: 0000000000000000 R09: 0000000000000000
[  655.322767][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  655.330869][    C1] R13: 0000000000000000 R14: 00007f3ec3535f80 R15: 00007ffd53b3b588
[  655.339003][    C1]  </TASK>
[  655.342409][    C1] Kernel Offset: disabled
[  655.346791][    C1] Rebooting in 86400 seconds..