last executing test programs:

36.779670524s ago: executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x0, 0x3}, 0x48)
socket$inet6(0xa, 0x0, 0x6)
r1 = syz_open_procfs(0x0, &(0x7f00000005c0)='net/raw6\x00')
read$FUSE(r1, &(0x7f0000000a40)={0x2020}, 0x2020)
preadv(r1, &(0x7f00000003c0)=[{0x0}], 0x1, 0x0, 0x0)
r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0)
mmap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x0, 0x12, r2, 0x0)
mremap(&(0x7f0000eae000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f00002c9000/0x1000)=nil)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xff88}, {0x6, 0x0, 0x7, 0x9}, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0x5}, {0x18, 0x8, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

35.658870473s ago: executing program 1:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0)
ioctl$RTC_PIE_ON(r0, 0x7005)
r1 = syz_io_uring_setup(0x2dfd, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_setup(0x5e2, &(0x7f0000000200), &(0x7f0000000180)=<r3=>0x0, &(0x7f0000000380))
syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4})
io_uring_enter(r1, 0x381b, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x444, &(0x7f0000000ac0)=ANY=[@ANYBLOB="75746638006d61703d6f983c756661703d6e6f726d616c2c6909000000f2ff00003dda5de4d586f0df206d65656b416d6f64653d3078303030303010303071303030303030302c73657373696f6e3d307830faffffff30303030303030f4e4b4f82c6d61736b3d4d4159574b50be30c8486470722677b93165cfe6f62127553b2017754598752d977369672c7063723d303030303030303030303030303030303030332c64566e745f6d6561737572652c00000000000000006bbf4d6406b59dbc529c00000000000000fada265ab14119997600a2299d2c35a2efc1bf037787a0d801f26d335ef2ba9ac2423a358ccbb776b21e1d3b", @ANYRESDEC=0x0, @ANYRESHEX], 0xfe, 0x667, &(0x7f00000002c0)="$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")
openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x140)

33.432428157s ago: executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x2010880, &(0x7f0000000600)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB=',discard=0x0000000000000009,gid=', @ANYRES8, @ANYBLOB="2c696e746567726974792c6572726f72733d636f6e74696e75652c726573697a653d307830303030303030303000020000000000006e6f696e7465677269747900696f636861727365743d69736f383835392d312c67727071756f74612c75737271756f74612c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',quota,gid=', @ANYRESHEX=0x0, @ANYBLOB=',noquota,errors=remount-ro,iocharset=cp860,noquota,noquota,resize=0x0000000000000009,subj_type=+-]{.&Q.,fowner=', @ANYRESDEC=0x0, @ANYBLOB=',measure,\x00'], 0x5, 0x6130, &(0x7f0000000780)="$eJzs3b2PHGcdB/Dfvt5LiHNKEQULoYsTXkKIX4MxBEhSQEGTArlFti6XyMIBZBvkRBY+dA0FFX8BCIkSIUpEwR+QgpaOiopINhIoFYPm7nl8s+td75nz7ezd8/lI65nfPLO7z9x3Z1+8M/sEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABDf/c73znUi4spP04K1iE9FL6IbsVLX6xGxsr6W1+9HxPOx0xzPRcRgKaK+/s4/z0S8FhEfnYi4d//ORr34/D778e0//O2333/q7b/+fnDmP3+81Xt92nq3b//y33+6e7BtBgAAgNJUVVV10sf8k+nzfbftTgEAc5Ff/6skL1+YuntIt/+rf7z950XYPrVarVar51g3VZPdbRYRsdW8Tv2ewdfxAHDEbMUnbXeBFsm/aP2IeKrtTgALrdN2BzgU9+7f2eikfDvN14P13fZ8LMhI/ludB+d3TJvOMn6MybweX9vRi2en9GdlTn1YJDn/7nj+V3bbh2m9w85/XqblP9w99ak4Of/eeP5jjk/+3Yn5lyrn33+s/HvyBwAAAACABZb//3+t5e9/lw6+KfvyqO9/1+fUBwAAAAAAAAB40g46/t8Dxv8DAACAhVV/Vq/9+sTesmm/xVYvv9yJeHpsfaAw6WSZ1bb7AQAAAAAAAAAAAAAl6e8ew3u5EzGIiKdXV6uqqi9N4/XjOuj1j7rStx9K1vaTPAAA7ProxNi5/J2I5Yi4nH7rb7C6ulpVyyur1Wq1spTfzw6XlquVxufaPK2XLQ338Ya4P6zqG1tuXK9p1uflWe3jt1ff17Dq7aNjT8gg/TWnNLcUNgAku69G97wiHTNV9cy0Nx8wwv5//Nj/2Y+2H6cAAADA4auqquqkn/M+mb7z77bdKQBgLvLr//j3AodSRxzu7avVarVarX5k3VRNdrdZRMRW8zr1ewbD8QPAEbMVn7TdBVok/6L1I+L5tjsBLLRO2x3gUNy7f2ejk/LtNF8P0vju+ViQkfy3OjvXy9efNJ1l/BiTeT2+tqMXz07pz3Nz6sMiyfl3x/O/sts+TOsddv7zMi3/ejvXWuhP23L+vfH8xxyf/LsT8y9Vzr//WPn35A8AAAAAAAss////mu9/8yYDAAAAAAAAwJFz7/6djXzea/7+/zMT1nP+5/GU8+/Iv0g5/+5Y/l8cW6/XmP/4rb38/3X/zsbvbv3z03m63/yX8kwnPbI66RHRSffU6afpQbbuYduD3rC+p0Gn2+unY36qwbtxLa7HZpwdWbeb/h577edG2uueDkbaz4+09x9qvzDSPki/O1Ct5PbTsRE/iuvxzk573bY0Y/uXZ7RXM9pz/j37f5Fy/v3Gpc5/NbV3xqbR2DWb+31zOul+3rz22V+cPeRt2Y/t6D3YtqZ6+0610J+dv8lTw/jJzc0bp29fvXXrxrlIk5Gl5yNNnrCc/2DnsrT3/P/ibnt+3m/urx//fPjQ8/6s/BfFdvSn5v9iY77e3pfn3Lc25PyH6ZLzfye1T9r/j3b+0/f/V1roDwAAAAAAAAAAAAAAADxKVVU7p4i+GREX0/k/bZ2bCQDMV379r5K8XK1Wq9Vq9fGrm6rJ3mgWEfGX5nXq9ww/m3RjAMAi+29E/L3tTtAa+Rcs/95fPX2p7c4Ac3Xzgw9/cPX69c0bN9vuCQAAAAAAAADw/8rjf643xn9+KSLWxtYbGf/1rVg/6Pif/TzzYIDRJzzQ9xTb3WGv2xhu/IXYGZ/79LTxv0/Fo8f/7s+4v8GM9uGM9qUZ7csTl+6lNfFEj4ac/wuN8c7r/E+ODb9ewviv42PelyDnf6rxeK7z/8LYes38q98sXP5b+11xO7oj+Z+59f6Pz9z84MNXr71/9b3N9zZ/eOHcubMXLl68dOnSmXevXd88u/vv4fR6AeT889jXjgMtS84/Zy7/suT8P5dq+Zcl5//5VMu/LDn//H5P/mXJ+efPPvIvS87/5VTLvyw5/y+lWv5lyfm/kmr5lyXn/+VUy78sOf9XUy3/suT8T6da/mXJ+Z9J9T7y9/Pwx0jOP3/DZf8vS84/H9kg/7Lk/M+nWv5lyflfSLX8y5Lzfy3V8i9Lzv8rqZZ/WXL+F1Mt/7Lk/L+aavmXJed/KdXyL0vO/2upln9Zcv5fT7X8y5Lzfz3V8i9Lzv8bqZZ/WXL+30y1/MuS8/9WquVflpz/G6mWf1n2fv/fjBkzZvJM289MAAAAAAAAAAAAAMC4eRxO3PY2AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/9iBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFfbuNUaus74f+Jm92GuHEAMhOPkbsnaMMc6SXV/iC/+6mHBtgFIgodALtutdmwXf8NolUCSbBkokHBVVVE1ftAUUtZGqCqviBa1SmhdVL6+a9gV9U1FVQmpUBRSQkNqKZquZ8zzPzszOzuza483seT4fKfnZM2fmnDnzzOx+N/nuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQLOtb5v5Uq0oivo/jX9tKoqX1f+8YXxT47I3v9RHCAAAANyo/238+4Xb0gVHlnGjpm3+7nX/+K35+fn54iPDvzv61fn5dMV4UYyuL4rGddG1f/9orXmb4NFirDbU9PehHrsf7nH9SI/rR3tcv67H9et7XD/W4/pFJ2CRDeXPYxp3tr3xx03lKS1uL0Yb123vcKtHa+uHhuLPchpqjdvMj54sZovTxUwx1bJ9uW2tsf3TW+v7encR9zXUtK8t9RXyo8+diMdQC+d4e8u+Fu4z+sFbi/Ef/+hzJ/744vN3dpo9T0PL/ZXHuXNb/Ti/EC4pj7VWrE/nJB7nUNNxbunwnAy3HGetcbv6n9uP84VlHufwwmGuqvbnfKwYavz52cZ5Gmn+sV46T1vCZf91T1EUVxYOu32bRfsqhoqNLZcMLTw/Y+WKrN9HfSm9shhZ0Trduox1Wp/T21vXaftrIj7/W8PtRpY4huan6QefX7foeV/pOo3qj3qp10r7Guz3a2VQ1mBcF882HvRjHdfg9vD4P7dj6TXYce10WIPpcTetwW291uDQuuHGMacnoda4zcIa3N2y/XBjT7XGfG5H9zU4efHM+cm5z3z2TbNnjp+aOTVzdu/u3VN79+8/ePDg5MnZ0zNT5b+v82wPvo3FUHoNbAvnLr4G3tC2bfNSnf96/16HY11eh5vatu3363Ck/cHVVucFuXhNl6+Nh+onfezqULHEa6zx/Oy68ddhetxNr8ORptdhx68pHV6HI8t4Hda3Ob9red+zjDT90+kYbtbXgk1Na7D9+5H2Ndjv70cGZQ2OhXXxr7uW/lqwJRzvYxMr/X5keNEaTA83vPfUL0nf748dbIxO6/Ku+hW3rCsuzc1cuO+R4xcvXthdhLEqXtW0VtrX68amx1QsWq9DK16vR2Zf99hdHS7fFM7V2Jvq/xpb8rmqb7Pvvu7PVeOrW+fz2XLpniKMPlvt89npq3n9fKYs2eV81rf5wuSNfy+ecmnT++/oEu+/Mfe/WO4v3dWjw6Mj5et3OJ2d0Zb349anaqTx3lVr7PuFyeW9H4+Gf1b7/fj2Lu/Hm9u27ff78Wj7g4vvx7VeP+1YdDgr0v58joV1cnqq+/txfZvNe1a6Jke6vh/fE2YtnP83hqSQclHT2llq3aZ9jYyMhsc1EvfQuk73tmw/GrJZfV9P7bm+dbrznvK+htOjW7Ba63S8bdt+r9P0frXUOq1d91Lsqv35HAvr4va93ddpfZtn9t34e+eG+Mem9851vdbg6PC6+jGPpkVYvt/Pb4hr8L7iRHGuOF1MN65d11hPtca+Ju5f3hpcF/5ZyXtl0eH5X+ka3NxlDe5s27bfazB9HVtq7dVGFj/4Pmh/PsfCunji/u5rsL7N2w/093vXneGStE3T967tP19b6mded7Wdppv5M6/6cf7Nge4/m61vc/rgSnNm9/N0b7jklg7nqf31u9RrarpYnfO0ORzn8weXPk/146lv89VDy1xPR4qiuPypBxo/7w3/feXPL333Wy3/3aXTf9O5/KkHfnjryb9dyfEDsPa9WI6N5de6pv8ytZz//g8AAACsCTH3D4WZyP8AAABQGTH3x/8rPJH/AQAAoDJi7h8JM8kk/29++/OzL14uUjN/PojXp9PwYLld7LhOhb+Pzy+oX/7AkzM/+cvLy9v3UFEUP33wNzpuv/nBeFyl8XCc197RevniG15e1v6PPbywXXN//Wvh/uPjWe4y6FTBnSqK4unbHm/sZ/yjVxvzmQePNeYHrzz2aH2bFw6Vf4+3f+5V5fZ/EMq/R04eb7n9c+E8fD/Mqfd0Ph/xdt+8+sYtBz68sL94u9q2lzce9hMfK+83/p6crzxabh/P81LH/1dffuqb9e0feX3n47881Pn4nwr3+2SY//3acvvm56D+93i7L4bjj/uLt7vvG9/pePzXvlRuf/6d5XbHwoz73xn+vv2dz882n69HasdbHlfxrnK7uP+p7/524/p4f/H+249/7OjVlvPRvj6e+efyfibbto+Xx/1Ef9G2//r9NK/PuP+nfutYy3nutf9rH3zutfX7bd//vW3bDbfdvv03Nv3hFx/vuL94PEf+7HzL4znygfA6Dvt/4mNhPYbr/+fa4y37jY59oPX9J27/tU2XWx5P9O4fl/u/9pZTjfkf4z/5/VteduvLr9xdP3dF8eyHyvvrtf9Tf3Su5fi/fseuxvMRr48d/fb9LyXu/8KnJ86em7s0O910Vhu/O+e95fGsH9uwsX68t4X31va/Hz138eMzF8anxqeKYry6v0Lvun0jzB+W48pKb7/r4fB83vV7T2/c8U9fjpf/y0Pl5VffU37dekPY7ivh8k3l8zdfu8H9P7H1jsbru/ZM+feWHnsfbNn+nweXtWF4/O3fF8T1fv7VH2+ch/p1ja8b8XV9g8f/venyfr4dzut8+M3M2+5Y2F/z9vF3I1z9UPl6v+HzF97m4vP6J+H5ft/3y/uPxxUf7/fC9zHf2dz6fhfXx7cvD7Xff+O3eFwJ7yfFlfL6uFU831dfuKPj4cXfQ1JcubPx999J93Pnih7mUuY+Mzd5evbspUcmL87MXZyc+8xnj545d+nsxaON3+V59BO9br/w/rSx8f40PbN/XzG1oSiKc8XUKrxh3Zzjr/9pecd//uET0wemdkzPnDx+6eTFh8/PXDh1Ym7uxMz03I7jJ0/OfLrX7WenD+/ec2jvgT0Tp2anDx88dGjvoYnZs+fqh1EeVA/7pz45cfbC0cZN5g7vO7T7/vv3TU2cOTc9c/jA1NTEpV63b3xtmqjf+tcnLsycPn5x9szMxNzsZ2cO7z60f/+enr8N8Mz5k3PjkxcunZ28NDdzYbJ8LOMXGxfXv/b1uj3VNPdv5fez7WrlL+Ir3n/v/vT7Weue/PySd1Vu0vYLRJ8Pv4vmH15x/uBy/h5z/2iYSSb5HwAAAHIQc/+6MBP5HwAAACoj5v71YSbyPwAAAFRGzP1jYSaZ5H/9f/3/5fX/y+v1//Pq/5//VNkrXev9/9if1//Pw0vc/7/h/ev/6/9Xr/+//P78Wj9+/X/9fxYbtP5/zP0biiLL/A8AAAA5iLl/Y5iJ/A8AAACVEXP/LWEm8j8AAABURsz9LwszyST/6/8vq/+/p1fhqvr9f5//r/9frM3+f3xy9P+zseL+/Ycfavmr/n+g/6//r/+v/6//zw0bXfKal6r/H3P/rWEmmeR/AAAAyEHM/S8PM5H/AQAAoDJi7r8tzET+BwAAgMqIuX9TmEkm+V//3+f/6//r/1e6/3+jn//fdDD6/2uDz//vrkP//+6OG+r/r7D/P6b/vxb7/6P9Pf7B7v/3PHz9f26KQfv8/5j7XxFmkkn+BwAAgBzE3P/KMBP5HwAAACoj5v5XhZnI/wAAAFAZMfffHmaSSf7X/9f/1//X/9f/77z/3p//X/5J/3+w6P935/P/e/D5/3n1//t8/IPd/+/35/+PvqP99vr/dDJo/f+Y+18dZpJJ/gcAAIAcxNx/R5iJ/A8AAACVEXP/a8JM5H8AAACojJj7N4eZZJL/9f/1//X/9f/1/zvvv3f/v6T/P1j0/7vrd/9/uO1y/f+S/r/+f+X7/x2++dX/p5NB6//H3H9nmEkm+R8AAAByEHP/XWEm8j8AAABURsz9/y/MRP4HAACAyoi5f0uYSSb5X/9f/1//P6/+/73r9P/1/6tN/787n//fg/6//r/+/zI//3+xlfT/1/e6Mypj0Pr/Mfe/Nswkk/wPAAAAOYi5/3VhJvI/AAAAVEbM/XeHmcj/AAAAUBkx94+HmWSS//X/q9X//9O/fuLuQv9f/7/H/iva/4/LQP8/c/r/3en/96D/r/+v/78q/X/yMWj9/5j7t4aZZJL/AQAAIAcx928LM5H/AQAAoDJi7r8nzET+BwAAgMqIuX97mEkm+V//v1r9/0j/X/+/2/4r2v9P9P/zpv/fQdOLVP+/B/1//f/s+//xu1/9f/pj0Pr/Mfe/Pswkk/wPAAAAOYi5f0eYifwPAAAAlRFz/xvCTOR/AAAAqIyY+3eGmWSS//X/9f/1//X/9f8771//f23S/+9O/78H/X/9/+z7/z7/n/4atP5/zP1vDDPJJP8DAABADmLu3xVmIv8DAABAZcT/f7P8/17lfwAAAKiimPsnwkwyyf/6//r/OfX/a/r/+v/6/5Wn/9+d/n8P+v/6//r/+v/01aD1/2Puf1OYSSb5HwAAAHIQc/99YSbyPwAAAFRGzP2TYSbyPwAAAFRGzP1TYSaZ5H/9f/3/nPr/Pv+/pf8/VhT6//r/1aP/353+fw/6//r/Vev/F4X+Py+pQev/x9y/O8wkk/wPAAAAOYi5f0+YifwPAAAAlRFz/94wE/kfAAAAKiPm/n1hJpnkf/1//X/9/2z7/z7/X/+/kvT/u9P/70H/X/+/av1/n//PS2zQ+v8x998fZpJJ/gcAAIAcxNy/P8xE/gcAAIDKiLn/QJiJ/A8AAACVEXP/wTCTTPK//n9F+v+/+fct+9b/1//vtv/+9P836P+Hqf8/WCra/29/WVw3/f8e9P/1//X/9f/pq0Hr/8fcfyjMJJP8DwAAADmIuf/NYSbyPwAAAFRGzP3/P8xE/gcAAIDKiLn/Z8JMMsn/+v8V6f+30f/X/++2f5//r/9fZRXt//eN/n8P+v/6//r/+v/01c3v/8c/La//H3P/4TCTTPI/AAAA5CDm/p8NM5H/AQAAoDJi7n9LmIn8DwAAAJURc/+RMJNM8r/+v/6//r/+/83p/7+laDeI/f/64tH/rxb9/+70/3vQ/9f/1//X/6evBu3z/2Puf2uYSSb5HwAAAHIQc/8DYSbyPwAAAFRGzP1vCzOR/wEAAKAyYu5/e5hJJvlf/1//X/9f/9/n/3fev/7/2qT/353+fw/6//r/+v/6//TVoPX/Y+5/R5hJJvkfAAAAchBz/zvDTOR/AAAAqIyY+98VZiL/AwAAQGXE3P/uMJNM8r/+v/6//r/+v/5/5/3r/69N+v/d6f/3oP+v/6//r/9PXw1a/z/m/p8LM8kk/wMAAEAOYu5/MMxE/gcAAIDKiLn/PWEm8j8AAABURsz97w0zyST/6//r/+v/6//r/3fev/7/2qT/353+fw8D0P+vf03T/1+bx6//r//PYoPW/4+5/31hJpnkfwAAAMhBzP0/H2Yi/wMAAEBlxNz//jAT+R8AAAAqI+b+XwgzyST/6//r/+v/6/9n0f+v30j/Pwv6/93p//fQof+/3uf/6//r/+v/c90Grf8fc/8Hwkwyyf8AAACQg5j7PxhmIv8DAABAZcTc/6EwE/kfAAAAKiPm/ofCTDLJ//r/Wfb/00PW/y/p/2fQ//f5/9nQ/+9O/7+HAfj8f/3/tXv8+v/6/yw2aP3/mPsfDjPJJP8DAABADmLu/3CYifwPAAAAlRFz/y+Gmcj/AAAAUBkx938kzCST/K//n2X/3+f/r1r/f6RlfeTU/x9rej7TutT/1/9fBfr/3en/96D/r/8/yP3/sJo3LHF7/X8G0aD1/2Pu/2iYSSb5HwAAAHIQc/8vhZnI/wAAAFAZMff/cpiJ/A8AAACVEXP/r4SZZJL/9f/1//X/ff6/z//vvH/9/7VJ/787/f8e9P/1/we5/9+D/j+DaND6/zH3/2qYSSb5HwAAAHIQc//HwkzkfwAAAKiMmPuPhpnI/wAAAFAZMfcfCzPJJP/r/7f3/+Mnqvah/18raoX+v/6//v/CutT/1/9fBf3r/7/m1qLQ/9f/1//X/9f/1//nRgxa/z/m/uNhJpnkfwAAAMhBzP2/FmYi/wMAAEBlxNx/IsxE/gcAAIDKiLl/Oswkk/yv/+/z//vV//+p/r/+f6D/35n+/+rw+f/d6f/3oP+v/6//r/9PXw1a/z/m/pkwk0zyPwAAAFRY+nFwzP0nw0zkfwAAAKiMmPtPhZnI/wAAAFAZMfd/PMwkk/yv/78K/f8N4YKK9/8L/f8V9P9HWrbX/y/p/+v/94P+f3f6/z3o/+v/6//r/9NXg9b/j7l/Nswkk/wPAAAAOYi5/xNhJvI/AAAAVEbM/Z8MM5H/AQAAoDJi7j8dZpJJ/tf/9/n/uff/a0Vxxef/6/932r/+/9qk/9+d/n8P+v/6//r/+v/01aD1/2PuPxNmkkn+BwAAgBzE3H82zET+BwAAgMqIuf9cmIn8DwAA/8fefTTZdVZ7HD522ZY0uvcb3Du+ozuEEV+BCQNmVHlMlQGTgzE5g8k5mJxzTibnnLPJOZpgDFWi3L3Wslp9tLctHXXv/a7nmSxa5eaclpqGP6pfbYBh5O6/Km5psv/1//r/7v3/5lie/3/wn9f/79P/6/934VB/f9kd+/xz9v//f6er76H/1//r/yfp//X/+n/OtrT+P3f/veKWJvsfAAAAOsjdf++4xf4HAACAYeTuv0/cYv8DAADAMHL3Xx23NNn/+n/9v/5f/3+g/79B/6//XzfP/5+m/5+h/9f/6//1/+zU0vr/3P33jVua7H8AAADoIHf//eIW+x8AAACGkbv//nGL/Q8AAADDyN3/gLilyf7X/+v/9f/6f8//3/76+v910v9P0//P0P/r//X/+n92amn9f+7+B8YtTfY/AAAAdJC7/0Fxi/0PAAAAw8jd/+C4xf4HAACAYeTuf0jc0mT/6//1//p//b/+f/vr6//X6frNbT8T9P+H6f9nzPT/m43+f8rt7ue3f3nref/noP/X/3PY0vr/3P0PjVua7H8AAADoIHf/w+IW+x8AAACGkbv/mrjF/gcAAIBh5O5/eNzSZP/r//X/+n/9v/5/++vr/9fJ8/+nXXj//3//fc8r+/b/nv8/zfP/9f/6f862tP4/d/+1cUuT/Q8AAAAd5O5/RNxi/wMAAMAwcvc/Mm6x/wEAAGAYufsfFbc02f/6/zb9/17tov/X/+v/9f+j0/9P8/z/GXs/5k7Vh/p//b/+X//PhVla/5+7/9FxS5P9DwAAAB3k7n9M3GL/AwAAwDBy9z82brH/AQAAYBi5+x8XtzTZ//r/Nv2/5//r//X/+v8W9P/T9P8zRnn+/3l+1xx3P3+hjvv96//1/xy2tP4/d//j45Ym+x8AAAA6yN3/hLjF/gcAAIBh5O5/Ytxi/wMAAMAwcvc/KW5psv/1//r/dfT/+Qr6f/2//l//P03/P03/P2OU/v88HXc/v/b3r//X/3PY0vr/3P1Pjlua7H8AAADoIHf/U+IW+x8AAACGkbv/qXGL/Q8AAADDyN3/tLilyf7X/+v/19H/r//5/yf1//p//f+R0P9P0//P0P/r//X/+n92amn9f+7+6+KWJvsfAAAAOsjd//S4xf4HAACAYeTuf0bcYv8DAADAMHL3PzNuabL/9f/6f/2/5//r/7e/vv5/nfT/0/T/M/T/+n/9v/6fnVpQ/3/GZ53cPCtuabL/AQAAoIPc/c+OW+x/AAAAGEbu/ufELfY/AAAADCN3/3Pjlib7X/+/mP5/L+cbq/8/tdls9P+bpv3/qTP+POv7Uv+v/z8C+v9p+v8Z+n/9v/5f/89OLaj/3/s4d//z4pYm+x8AAAA6yN3//LjF/gcAAIBh5O5/Qdxi/wMAAMAwcve/MG5psv/1/4vp//eM1f97/v/Z3x+d+n/P/z9M/3809P/T9P8z9P/6f/2//p+dWlr/n7v/RXHTFZef95cIAAAALEzu/hfHLU3+/h8AAAA6yN3/krjF/gcAAICVuu7Qr+Tuf2nc0mT/6/932/9fccav6f/1/2d/f+j/9f/6/4tP/z9N/z9D/6//1//r/9mppfX/uftfFrc02f8AAADQQe7+6+MW+x8AAACGkbv/5XGL/Q8AAADDyN3/irilyf7X/3v+v/5f/6//3/76+v910v9PW3b/f7p+nOj/9f9rfP9X3e3K/9nc+mnn3/+fuO1f6v8Zwx3o/0+fPn3NRe//c/e/Mm5psv8BAACgg9z9r4pb7H8AAAAYRu7+V8ct9j8AAAAMI3f/a+KWJvtf/9+0/89vdf3/Hv2//n/b6+v/10n/P23Z/b/n/+v/1/3+Pf9f/89hS3v+f+7+18YtTfY/AAAAdJC7/3Vxi/0PAAAAw8jd//q4xf4HAACAYeTuf0Pc0mT/6/+b9v+e/6//1/8fdf9/y0b/fyRW0f+fOvfrL73/v1b/r/+f0K7/v+udD3yo/9f/c9jS+v/c/W+MW5rsfwAAAOggd/+b4hb7HwAAAIaRu//NcYv9DwAAAMPI3f+WuOmyJvtf/6//1//r//X/21//iJ//f8Vms9H/78Aq+v8JS+//Pf9f/z+lXf9/Fv2//p/Dltb/5+5/a9zSZP8DAABAB7n73xa32P8AAAAwjNz9b49b7H8AAAAYRu7+d8QtTfa//l//r//X/w/f/1+7iv7f8/93RP8/Tf8/Q/+v/9f/6/85EsfV/+fuf2fc0mT/AwAAQAe5+98Vt9j/AAAAMIzc/e+OW+x/AAAAGEbu/vfELU32v/5f/6//1/+fWFz/f/LAv1+T5//r/3dE/z9N/z9D/6//1/9fp/9nl5b2/P/c/e+NW5rsfwAAAOggd//74tb/dWv/AwAAwDBy978/brH/AQAAYBi5+z8QtzTZ//p//b/+X/8//PP/9f+t6P+nLbz/3/v90v/r/9f6/gfp/z3/n51aWv+fu/+DcUuT/Q8AAAAd5O7/UNxi/wMAAMAwcvd/OG6x/wEAAGAYuftviFua7H/9v/5f/6//1//v/xnq/8eg/592NP3/Kc//1/9XP39J/KdA/6//n/t8xrS0/j93/0filib7HwAAADrI3f/RuMX+BwAAgGHk7v9Y3GL/AwAAwCpdtuXXcvd/PG5psv/1//p//b/+X/+//fX1/+uk/5+28Of/6/9X1///74GP1vb8/7P/+0v/r/9n946//9//X2z5ce7+T8QtTfY/AAAAdJC7/5Nxi/0PAAAAw8jd/6m4xf4HAACAYeTu/3Tc0mT/6//1//p//b/+f/vr6//XSf8/Tf8/Q/9/rM/PX/v71//r/zns+Pv/gx/n7v9M3NJk/wMAAEAHufs/G7fY/wAAADCM3P2fi1vsfwAAABjG3u7PuKzh/tf/6//1//p//f/219f/r5P+f5r+f4b+X/+v/9f/s1NL6/8/v/dZJzdfiFua7H8AAADoIHf/F+MW+x8AAACGkbv/S3GL/Q8AAADDyN3/5bilyf6/uP3/zZPV3RH1/ye2/WP6/7X1/6dPn75G/6//P/j13Nb/36j/p+j/p+n/Z+j/9f/6f/0/O7W0/j93/1filib7HwAAADrI3f/VuMX+BwAAgGHk7v9a3GL/AwAAwDBy9389bmmy/z3/fwH9/0n9v+f/6/83nv+v/98R/f80/f+MEfv/k7f/yz/ufv5CHff7X0D/f0n80NH/sxhL6/9z938jbmmy/wEAAKCD3P3fjFvsfwAAABhG7v5vxS32PwAAAAwjd/+345Ym+1//f3T9/62/d12e/39qs/396//1//p//f/Fpv+fpv+fMWL/fwccdz+/9ve/gP7f8/9ZnKX1/7n7vxO3NNn/AAAA0EHu/u/GLfY/AAAADCN3//fiFvsfAAAAhpG7//txS5P9r/9fwPP/B+z/Pf9/+/eH/n/R/f+l+v8x6P+n6f9n6P/1//r/HfX/+d2s/+9uaf1/7v4fxC1N9j8AAAB0kLv/h3GL/Q8AAADDyN3/o7jF/gcAAIBh5O6/MW45Y/9va7tHof/X/+v/9f/6/+2vr/9fJ/3/tNvb/5/YXFj/n/T/+n/9f9f+3/P/2be0/j93/4/jFn//DwAAAKtz+Tl+PXf/T+IW+x8AAACGkbv/p3GL/Q8AAADDyN3/s7jlpkuP6y0dKf2//l//r//X/29/ff3/Oun/p3n+/wz9/y76+bvo/8fo/zcb/T8Xbmn9f+7+n8ct/v4fAAAAhpG7/xdxi/0PAAAAw8jd/8u4xf4HAACAYeTu/1Xc0mT/6//1/xfY/++lmfr/ffr/ffr/7fT/R0P/P03/P0P/7/n/+n/P/2enltb/5+7/ddzSZP8DAABAB7n7fxO32P8AAAAwjNz9v41b7H8AAAAYRu7+38UtTfb/sfX/8Vut/199/+/5//p//b/+f1H0/9P0/zP0//p//b/+n51aWv+fu//3cUuT/Q8AAAAd5O7/Q9xi/wMAAMAwcvf/MW6x/wEAAGAYufv/FLc02f+e/6//1//r//X/219f/79O+v9p+v/t6g9K/6//1//r/9mppfX/ufv/HLc02f8AAADQQe7+v8Qt9j8AAAAMI3f/TXGL/Q8AAADDyN3/17ilyf7X/+v/9f/6/931//s/Q/X/2+n/j4b+f9px9v93/6/5l/X8/2Pv//Mt6P/1//p/dmJp/X/u/r/FLU32PwAAAHSQu//vcYv9DwAAAMPI3f+PuMX+BwAAgGHk7r85bmmy/2f6/xP1D+r/J+n/D75//f/274/x+/99F7H/P7XR/+v/Z+j/p3n+/wz9v+f/6//1/+zU0vr/3P3/jFua7H8AAADoIHf/LXGL/Q8AAADDyN3/r7jF/gcAAIBh5O7/d9zSZP97/r/+X/+v/19R/3/g69H/6/+30f9P0//P0P/r//X/+n92amn9f+7+/wQAAP//rO9Jsg==")
socket$tipc(0x1e, 0x2, 0x0)
r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
inotify_add_watch(r0, &(0x7f00000001c0)='./file0\x00', 0x404)
times(0x0)
r1 = epoll_create1(0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00')
pread64(r2, &(0x7f0000000480)=""/176, 0xb0, 0x38)
r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000280)={0xc})
pselect6(0x40, &(0x7f0000000400), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000002c0)='./bus\x00', 0x1800840, &(0x7f0000000040)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c756e695f786c6174653d302c756e695f786c6174653d312c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e39352c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c696f636861727365743d69736f383835392d31342c636f6465706167653d3934392c696f636861727365743d63703837342c757466383d302c696f636861727365743d63703733372c001938b3e0fb3efa657e845da77a378d805cb98ff66dfc13853c6d993ed3b4a554b48eeb3861c4e9e7f3576ace707f60da42b36a5ba78fd5ece40bff32bb40a0a18d4ede0f8429e1605300f9d2fab85fb7fc7bc09181c20c72425dc43c476d8787539f53bc439cb3e0c4270444f16859305d6955d99f31530624420d07d03cb5974611bce35bb0ac746337b85839fc2fe1c4ac96b45c85dc78247cf8a4d48e1543bc22c9912269d8f973562e2ea7143ce70ae2f0b891f6"], 0x4, 0x362, &(0x7f0000000480)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000340)={[{@numtail}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@shortname_lower}, {@fat=@sys_immutable}, {@utf8}, {@uni_xlateno}, {@shortname_mixed}, {@shortname_win95}, {@uni_xlateno}]}, 0x0, 0x274, &(0x7f0000000580)="$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")
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0)
r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$SIOCRSSL2CALL(r5, 0x89e2, &(0x7f00000000c0)=@null={0x40, 0x40, 0x40, 0x40, 0x40, 0x2})
ioctl$SIOCRSSL2CALL(r5, 0x89e2, &(0x7f0000000180)=@bcast)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r4, &(0x7f0000002140)={0x2020}, 0x2100)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, 0x0)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3)

29.253334841s ago: executing program 1:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = dup(r1)
prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x7}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0) (async)
write$UHID_INPUT(r2, &(0x7f0000001980)={0x708, {"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", 0x1000}}, 0x1006) (async)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async)
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x202)
ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f0000000040)=0x1000) (async)
write(r0, &(0x7f0000000340)="41000000010006", 0x7)

28.647118261s ago: executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='netlink_extack\x00', r0}, 0x10)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x1a)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x900, &(0x7f0000000000)={&(0x7f0000000380)={0x14, 0x12, 0xa01}, 0x14}}, 0x0)

25.731644103s ago: executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_DISABLE_BEARER(r1, 0x0, 0x0)

11.073445532s ago: executing program 3:
syz_open_dev$tty1(0xc, 0x4, 0x4) (async)
socket$key(0xf, 0x3, 0x2)
r0 = add_key$keyring(&(0x7f0000000480), &(0x7f0000000f00)={'syz', 0x2}, 0x0, 0x0, 0x0)
keyctl$negate(0xc, 0x0, 0xffffffffffffffff, r0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) (async, rerun: 64)
keyctl$negate(0xd, r0, 0x9, r0) (rerun: 64)
r2 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000cc0)=ANY=[@ANYBLOB="180000000001000000000000000c90d15f67333fae168f33d58cec48f80700431ec6726d1660152e615388efbe"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80) (async, rerun: 64)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e8, 0x1c0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x318, 0x20a, 0x278, 0x318, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x4}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@loopback, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) (async, rerun: 64)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) (async)
r5 = dup(r2)
write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) (async, rerun: 64)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) (rerun: 64)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2, &(0x7f0000000e40)=ANY=[@ANYRES8=r4, @ANYRES32=r6, @ANYRESOCT], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10)
write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) (async)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000004c0)=ANY=[@ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',\x00']) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async)
mount$overlay(0x0, &(0x7f0000000440)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)) (async)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x7ffd, 0x0, r6, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0x7, &(0x7f0000000d00)=ANY=[@ANYRESOCT, @ANYRES32=r8, @ANYRESHEX=r4, @ANYRESDEC=0x0, @ANYRESHEX=r4], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffffe)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000ec0)='btrfs_setup_cluster\x00', r9}, 0x10) (async)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) (async)
ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000000)={0x4, 0x9})
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000f8ff00000000bf07010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, 0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='xen_mmu_flush_tlb_one_user\x00', r10}, 0x10)

10.964775792s ago: executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x5d7, 0x0)
ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f00000001c0)={0x0, 0x0, @value})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r2}, [@IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x5, {0x0, @remote}}]}]}, @IFLA_IFALIASn={0x4}]}, 0x54}}, 0x0)
syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x280085e, &(0x7f0000000100)=ANY=[], 0xa, 0x229, &(0x7f00000005c0)="$eJzs2z1PFEEcx/HfPtxxoIARtTCaEI1oI+dDZWHUjoo3QEXgVOIaUbSAmAiNWphQ2dlYmZhYWBqDnbHyBViY2GmIFJdYWbBmz32Am3vO3a4e30/D7Pxm2NkNc/eH5QRgz7qqcVmylA8OjhUOrI9ZWS8JQEr88Ou26yfsKATQ324OZ70CANnYuia9OCX9LD+ck5OPyoKgAvi6KWlj4olWFeb2gKRXnyU3rh+21qSjbphbBQ1W1xcvpdPRfGvIqD+C+UNxvm9HMhjnZ05G59+vYY1oNBckBzUW5vPx/CNN6x23reoIAID+ZGmyWd5wgK3rC17pXN08V8nP183zlfxCk/xifDwQt2aeTz9471/eDvLJuTvefKNlAqjB7mD/fzmetJ0m+9+ts/+rf08AkL6l5ZVbs57nP5IqjdK9sCdsRH8RSHocY0xXGtEzhxYGR08ojSj4Hjt6HHP6+oR57d27CjtZ2Kik3tyof7ihGtG3qb/3JO6xe3HndzVO/Pj9ePHZ23etDH7T5ins+KduZqNUrhojW+rhdY0bu2DWK7Q23Vr1/TZPWvPlIvnngEK3X4kApK14//ZicWl55eyCI+lGKRe94U9936xU9sXG9T2A/1fypl8rXTN6/N2H0x8//Spfev20gzNfkfTBfCAIAAAAAAAAAAAAAADadkiHs14CAAAAgJSYn/65O9Ltjy5lfY0AAAAAAAAAAAAAAAAAAPSbPwEAAP//dhAJcA==")
r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r3, &(0x7f0000000300)=""/104, 0x68)
getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8)

10.344069153s ago: executing program 3:
epoll_create1(0x0)
r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$RTC_PIE_ON(r0, 0x7005)
r1 = syz_io_uring_setup(0x2dfd, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_setup(0x5e2, &(0x7f0000000200), &(0x7f0000000180)=<r3=>0x0, &(0x7f0000000380))
syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4})
io_uring_enter(r1, 0x381b, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x444, &(0x7f0000000ac0)=ANY=[@ANYBLOB="75746638006d61703d6f983c756661703d6e6f726d616c2c6909000000f2ff00003dda5de4d586f0df206d65656b416d6f64653d3078303030303010303071303030303030302c73657373696f6e3d307830faffffff30303030303030f4e4b4f82c6d61736b3d4d4159574b50be30c8486470722677b93165cfe6f62127553b2017754598752d977369672c7063723d303030303030303030303030303030303030332c64566e745f6d6561737572652c00000000000000006bbf4d6406b59dbc529c00000000000000fada265ab14119997600a2299d2c35a2efc1bf037787a0d801f26d335ef2ba9ac2423a358ccbb776b21e1d3b", @ANYRESDEC=0x0, @ANYRESHEX], 0xfe, 0x667, &(0x7f00000002c0)="$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")
openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x140)

10.281909277s ago: executing program 2:
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x14}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000800))
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000001c0)=0x594)
ioctl$TUNSETLINK(r1, 0x400454cd, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48)
creat(&(0x7f0000000840)='./file0\x00', 0x0)
socket$igmp(0x2, 0x3, 0x2)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3fc}, 0x0, 0x0)

9.787117559s ago: executing program 4:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
pselect6(0x65, &(0x7f0000000180)={0xfffffffffffffffd, 0x3}, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x8000, &(0x7f0000000000), 0x80, 0x62d, &(0x7f0000000c40)="$eJzs3c9rHNcdAPDvzEqyZauVXUqpTUsFPdhQvJZcU7c92e6hPhhqqA8h5GBhSY7w+geWDLZjsAw5JJBACLmG4Ev+gZBr0DXkFgKJbzkHnBCc5JAEb5jZWWuz2rU3kla78Xw+MDNv3szue98dvZ03MzuaAEprKhulEfsi4lwSMdmybCIaC6eK9R5+fft8NiRRr///qySSIq+5/qNiujsbJY3XfHwy4neV9eUu3bx1cbZWb7gTcXj50tXDSzdvHVq8NHth/sL85Zkj/zx6bPpfMx9uTZy7i+mp0//70+svv/iPhU9qh5I4HmdHX5qLtji2ylTj040sxNb8kYg4liU6fC6wnSrF3+NoRPwhJqOSzzVMxuJrA60c0Ff1SmP/VB+rA6WTxKBrAAxGsx/QPLbvx3HwMHtwIhvf6BD/SHH0vjM/Ntr1MGk5MspyI/ZsQfkrEfHj7f1vZ0N0OQ8xsgXldC3/bkT8sdP2T/L49+SRZvGnkba8LktPF+c2svr9ZxN1SFrSvf393dlEaT/3S+Jv3Q5Z/MeLaZZ/ssv7P+0Uz1TbfNnaHwCDsXqi2JFnHZFY2/9lPcNm/yfa+z/19/NrQ+37ro3ovv9Lt+Ddny7v/4102v839/c783142tYPS2Ll2zOd33K0PePzV0+92a38qZb+XzZk5Tf7gj3YdNfwwd2I/W3xv5J/9Mnj7Z906P9mq5zrsYz/fvrlqW7LNhn/ptXvRRzoePyz1ivNUm3XJ5NoXp88OnN4YbE2P90Ydyzjg49eeLdb+YOOP9v+u7rE/6Ttn+Vd7bGM987cu9RI7Vi3bOKp8adfjCVn89RYPl5rXmPJ6WKVxuTG7PLytSNPrktznXw604j/4F87t/8u8ecHH+PNr8weXH3u4sNuyza5/R/Ve1yxmyz+uQ1u/zd6LOO756//uduy9fGvnZMY32hQAAAAAAAAUFJpfg02SauP02laLS68/T52pbUrS8t/W7hy/fJcxMH895CjafNK92RjPsnmZ4rfwzbnj7TN/z0i9kbEW5XxfL56/kptbtDBAwAAAAAAAAAAAAAAAAAAwJDYXdz//6h4Htg3lTStVgddK2Db9PMBc8Bw0/6hvPL2vz3PWwOGjP0/lFfH9u9LAUpBU4fy0v6hvLR/KC/tH8pL+4fy6t7+1y252++6AAAAAABbZu9fVu+PRMTKv8fzITNWLBsdaM2AftPGobwqg64AMDCPL/C7/R9Kp6f+//fFPwfsf3WAAUg6Zeadg/qTG/9qx1cCAAAAAAAAAAAAAH1wYN/q/cT9/1BKbvuD8trY/f+Vjb8UGBqd/vW/x4FAOTjGh5Lr4STAzm4L3P8PAAAAAAAAAAAAANtmIh+StFr8DHgi0rRajfhNROyJ0WRhsTY/HRG/jYjPKqM7svmZQVcaAAAAAAAAAAAAAAAAAAAAnjFLN29dnK3V5q+1Jn5Yl/NsJ5pPPB2W+rQmIul7EWm05YxHxDDE3p/ESEtOErGSbfmteOdk838/MQyfT5EY8BcTAAAAAAAAAAAAAAAAAACUUMu9x53tf2ebawQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA22/t+f/9Sww6RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg1+mnAAAA//+EYjvS")
r6 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f00000008c0)={[{@force}, {@gid}, {@part={'part', 0x3d, 0xffffffffffffffff}}, {@gid}, {@force}, {}, {@nls={'nls', 0x3d, 'cp874'}}, {@umask={'umask', 0x3d, 0x85}}, {@creator={'creator', 0x3d, "85f19471"}}]}, 0x1, 0x6da, &(0x7f0000004980)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents(r6, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r8, r7, 0x16, 0x0, @val=@tcx={@prog_fd}}, 0x40)

9.634283177s ago: executing program 3:
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
socket$packet(0x11, 0x0, 0x300)
getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
r0 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10010000004e20, 0x0, @loopback}, 0x1c)
syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023"], 0x0)
setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f0000000000)=0x8, 0x4)

9.295414031s ago: executing program 0:
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100))
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0xc20, 0xffffffff, 0x98, 0x0, 0x98, 0xffffffff, 0xffffffff, 0xb88, 0xb88, 0xb88, 0xffffffff, 0x4, 0x0, {[{{@ip={@private, @remote, 0x0, 0x0, 'rose0\x00', 'wg2\x00'}, 0xa00, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@uncond, 0x0, 0x9a8, 0x9d0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x9, 0x1000}}}, @common=@unspec=@u32={{0x7e0}, {[{[], [], 0xd}], 0x1}}]}, @REJECT={0x28}}, {{@ip={@remote, @dev, 0x0, 0x0, 'batadv_slave_0\x00', 'rose0\x00'}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@inet=@l2tp={{0x30}}, @common=@socket0={{0x20}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xc80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r2}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000071120f000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000300)={<r4=>0xffffffffffffffff})
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
pwritev(r3, &(0x7f0000000440)=[{0x0}], 0x1, 0x0, 0x7)
ioctl$TCSETS(r5, 0x40045431, 0x0)
syz_open_pts(r5, 0x0)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000080)={0x3ff}, 0x0, 0x0)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xfffffff6, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0})
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r7 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, <r8=>0x0}, 0x4000)
mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), 0x200020, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@aname={'aname', 0x3d, '.%*{\'*^['}}], [{@subj_type={'subj_type', 0x3d, 'mountinfo\x00'}}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@seclabel}, {@uid_gt}, {@audit}, {@uid_eq={'uid', 0x3d, r8}}]}})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f00000001c0))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000c80)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000d00)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0})

9.148885829s ago: executing program 2:
socket$netlink(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x2, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f0000000100))
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a9fde5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x58}}, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r3, &(0x7f0000000000), 0xe)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r7, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x26)
connect$inet6(r6, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4, 0x100}}, 0x26)
bind$bt_l2cap(r4, &(0x7f00000003c0), 0xe)
listen(r4, 0x0)
listen(r3, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0xffffffffffffffff, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='kfree\x00', r8}, 0x10)

8.219486429s ago: executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x33}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x4, 0x7}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r0 = fsopen(&(0x7f0000000040)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)
socket$inet(0xa, 0x801, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="00220f0000000bd9cd8d96296592"], 0x0}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2000002, 0x4052, r3, 0x0)
ftruncate(r3, 0x9e5d)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
read(r4, &(0x7f0000002340)=""/4096, 0x1000)

8.191350621s ago: executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10)
r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"})
ioctl$USBDEVFS_IOCTL(r1, 0x80085504, &(0x7f0000000380)=@usbdevfs_driver={0x0, 0x0, 0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x14\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}, 0x24}}, 0x0)

7.603143109s ago: executing program 0:
io_uring_setup(0x1d7b, &(0x7f0000000400)={0x0, 0x4e15, 0x100, 0xc00012, 0x400})
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x10000]}, 0x8, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000000102010400000000000000000200000018000180140001800200"/44], 0x2c}}, 0x0)
sendfile(0xffffffffffffffff, r2, 0x0, 0x1000000000006)
syz_mount_image$fuse(0x0, &(0x7f0000000340)='\x00', 0x41000, 0x0, 0x0, 0x0, 0x0)
mount(&(0x7f00000023c0), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x52007f376e6afb23, &(0x7f0000000540)=ANY=[@ANYRES64=r4, @ANYRES16, @ANYRES32=r1, @ANYRESHEX=0x0, @ANYRESHEX=r0, @ANYRES8, @ANYBLOB="2c6e03d465636f6d706f73652c6769643d29ab72f4a2f73b811c7fd9bae7ecd520839bd791f81b6637f549a77ac6cb621635f9c08b2615964a3c43b727df50d049dc760465dea7349206240e6fb4756f276c72f20bab7d507fe4853b18ebe583cbf9009044b02137e034326e80399ca072639251325e38177eef4f05093acfe76553919ecca99460ea4ebdbcef9c4e0ed3f10f86889116979b7aa52b38442546b806d6b8964f99a04195ad43adb611", @ANYRESHEX, @ANYRESOCT=r1], 0x1, 0x700, &(0x7f00000010c0)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r5, &(0x7f0000000200), 0x43400)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000))
ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x20008081)
socket(0x0, 0x0, 0x0)
listen(0xffffffffffffffff, 0x0)
r8 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r8, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
ioctl$SG_GET_VERSION_NUM(r6, 0x2282, &(0x7f00000002c0))
r9 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r8, 0x5)
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt(r7, 0x109, 0x9, 0x0, 0x0)
connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)
sendmmsg(r9, &(0x7f0000002980), 0x0, 0x24040440)

5.003137193s ago: executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xe)
setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000040), 0x4)
pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={<r2=>0x0, @dev, @remote}, &(0x7f0000000100)=0xc)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r1, r2, 0x25, 0x2, @void}, 0x10)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000180)=<r3=>0x0)
ptrace$ARCH_SET_CPUID(0x1e, r3, 0x1, 0x1012)
r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0)
fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000200)='\'\x00', &(0x7f0000000240)="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", 0x1000)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001240), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000012c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000001280)={<r6=>0xffffffffffffffff}, 0x13f, 0x1}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000001300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x2a, @private0, 0x7ff}, {0xa, 0x4e23, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}, r6, 0x8}}, 0x48)
r7 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001380)={r4, r4, 0xc, 0x0, @void}, 0x10)
sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r7, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8095}, 0x4041)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r5, &(0x7f0000001580)={0xb, 0x10, 0xfa00, {&(0x7f00000014c0), r6}}, 0x18)
prctl$PR_SCHED_CORE(0x3e, 0x4, r3, 0x2, &(0x7f00000015c0))
r8 = bpf$ITER_CREATE(0x21, &(0x7f0000001600)={r1}, 0x8)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001680), r4)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x24, r9, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x8}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x4c800)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001780)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
bind$inet6(r1, &(0x7f00000017c0)={0xa, 0x4e21, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c)
ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000001800)={{0x1, 0x1, 0x18, <r11=>r4, {0xfffffff8}}, './file0\x00'})
write$cgroup_pid(r4, &(0x7f0000001840)=r3, 0x12)
getsockopt$sock_int(r1, 0x1, 0x5, &(0x7f0000001880), &(0x7f00000018c0)=0x4)
getpeername$netlink(r8, &(0x7f0000001900), &(0x7f0000001940)=0xc)
socket$vsock_stream(0x28, 0x1, 0x0)
r12 = open(&(0x7f0000001980)='./file0\x00', 0x1, 0x100)
r13 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=@bloom_filter={0x1e, 0x40, 0x0, 0xee6, 0x200, r4, 0xfffffc06, '\x00', 0x0, r4, 0x3, 0x4, 0x4, 0x3}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001c80)={0x6, 0xd, &(0x7f00000019c0)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r12}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @alu={0x0, 0x0, 0x4, 0xb, 0x2, 0xffffffffffffffff, 0x4}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0xa9}], &(0x7f0000001a40)='syzkaller\x00', 0x2, 0x4b, &(0x7f0000001a80)=""/75, 0x40f00, 0x30, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001b00)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000001b40)={0x4, 0xc, 0x7fff, 0x1b}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001c00)=[r4, r1, r13, r11, r10, r4], &(0x7f0000001c40)=[{0x0, 0x3, 0x6, 0x5}, {0x1, 0x1, 0x9, 0x4}, {0x1, 0x4, 0x10, 0x5}], 0x10, 0x7}, 0x90)

4.353375241s ago: executing program 3:
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, <r0=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000100)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, <r1=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)}, 0x20)
r2 = syz_usb_connect(0x2, 0x0, 0x0, 0x0)
r3 = open(&(0x7f0000000280)='.\x00', 0x258c03, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000340)=ANY=[@ANYRES16, @ANYRES64=r2, @ANYRESDEC=r3, @ANYRESDEC], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0), 0x8, 0x10, &(0x7f0000000040)={0x0, 0xfffffffc}, 0x10}, 0x90)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000580)={@multicast2, @remote, <r4=>0x0}, &(0x7f00000005c0)=0xc)
r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600)=0xffffffffffffffff, 0x4)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000006c0)={0xffffffff, <r6=>0x0}, 0x8)
r7 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r7, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00')
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/igmp6\x00')
preadv(r1, &(0x7f0000000a00)=[{&(0x7f0000000140)=""/196, 0xc4}, {&(0x7f0000000ac0)=""/131, 0x83}], 0x2, 0x200000, 0x8)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x1e, 0x7fff, 0x8, 0x1ff, 0x20, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x4}, 0x48)
r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000780), 0x240042, 0x0)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r11, &(0x7f0000000200), 0xf000)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x23, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x53f, 0x0, 0x0, 0x0, 0xfffffff8}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @jmp={0x5, 0x1, 0x2, 0x4, 0x8, 0xffffffffffffffe0, 0xfffffffffffffffc}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @generic={0x3, 0x9, 0x9, 0x1, 0xaf3c}, @map_fd={0x18, 0x3, 0x1, 0x0, r3}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f00000004c0)='GPL\x00', 0x2, 0x79, &(0x7f0000000500)=""/121, 0x41000, 0x24, '\x00', r4, 0x19, r5, 0x8, &(0x7f0000000640)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x0, 0xc, 0xd48, 0x9}, 0x10, r6, r7, 0x3, &(0x7f00000007c0)=[r8, r9, r10, r11], &(0x7f0000000800)=[{0x5, 0x1, 0xf, 0xc}, {0x4, 0x2, 0xf, 0x4}, {0x1, 0x2, 0x8, 0xc}]}, 0x90)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x301100, 0x0)
r12 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00')
r13 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1770, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r14}, 0x10)
keyctl$reject(0x13, 0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(r13, 0x0, 0x0)
syz_usb_control_io(r13, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x7, {0x7, 0x0, "7cddef3014"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
readlinkat(r12, &(0x7f0000000900)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', &(0x7f0000000980)=""/126, 0x7e)
r15 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r15, @ANYBLOB=',wfdno=', @ANYRESHEX=r12])

3.748007672s ago: executing program 2:
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) (async)
r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140))
r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo\x00')
getdents(r2, &(0x7f0000000040)=""/104, 0x68)
write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000040)={0x17, 0x0, 0x0, {{0x0, 0xfffffffffffe}}}, 0x28) (async)
write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000040)={0x17, 0x0, 0x0, {{0x0, 0xfffffffffffe}}}, 0x28)
read$FUSE(r1, &(0x7f0000002500)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000080)={0x20, 0x0, r3}, 0x20) (async)
write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000080)={0x20, 0x0, r3}, 0x20)
ioctl$FS_IOC_SETFLAGS(r0, 0xc0606610, &(0x7f0000000040)=0x60) (async)
ioctl$FS_IOC_SETFLAGS(r0, 0xc0606610, &(0x7f0000000040)=0x60)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_route(0x10, 0x3, 0x0)
creat(&(0x7f0000000140)='./bus\x00', 0x0) (async)
r4 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
ftruncate(r4, 0x3292e291) (async)
ftruncate(r4, 0x3292e291)
openat$cgroup_ro(r4, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) (async)
r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x0, 0x5f9, &(0x7f0000000640)="$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") (async)
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x0, 0x5f9, &(0x7f0000000640)="$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")
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='freezer.self_freezing\x00', 0x275a, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc020662a, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x24499207})
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200, 0x0)
r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_IOC_FAIL(r8, 0x4c81, 0xfffffffffffffffc)
write$binfmt_script(r6, &(0x7f0000000180), 0xfea7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x110, r5, 0x31f4f000) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x110, r5, 0x31f4f000)
socket$rxrpc(0x21, 0x2, 0xa) (async)
socket$rxrpc(0x21, 0x2, 0xa)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)

2.879264773s ago: executing program 4:
syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x1000091, &(0x7f0000000980)=ANY=[], 0x25, 0xb9, &(0x7f0000000100)="$eJzs0j1KxUAUBeBD/HkvItmARXaQVbgFV2BhYSkWiqAuyK24BMXK2tZmRCcxQuyj8H0wzJ17pxiY8/j+cJQuKbdJKeUuVfl0cXV9vsnC81TsL2f8M824b5P0XdLsjI2zg+nG8dPbzem08nL41d3Uzz/ZXs4J2a0x+kX/o96THAAAWEmToRbt93mYp69tcr/OwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+iI8AAAD//893HdY=")

2.60388327s ago: executing program 0:
epoll_create1(0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0)
ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005)
r0 = syz_io_uring_setup(0x2dfd, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=<r1=>0x0)
syz_io_uring_setup(0x5e2, &(0x7f0000000200), &(0x7f0000000180)=<r2=>0x0, &(0x7f0000000380))
syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4})
io_uring_enter(r0, 0x381b, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x444, &(0x7f0000000ac0)=ANY=[@ANYBLOB="75746638006d61703d6f983c756661703d6e6f726d616c2c6909000000f2ff00003dda5de4d586f0df206d65656b416d6f64653d3078303030303010303071303030303030302c73657373696f6e3d307830faffffff30303030303030f4e4b4f82c6d61736b3d4d4159574b50be30c8486470722677b93165cfe6f62127553b2017754598752d977369672c7063723d303030303030303030303030303030303030332c64566e745f6d6561737572652c00000000000000006bbf4d6406b59dbc529c00000000000000fada265ab14119997600a2299d2c35a2efc1bf037787a0d801f26d335ef2ba9ac2423a358ccbb776b21e1d3b", @ANYRESDEC=0x0, @ANYRESHEX], 0xfe, 0x667, &(0x7f00000002c0)="$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")
openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x140)

1.798812821s ago: executing program 4:
prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000440)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.739227548s ago: executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x14}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000800))
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000001c0)=0x594)
ioctl$TUNSETLINK(r1, 0x400454cd, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48)
creat(&(0x7f0000000840)='./file0\x00', 0x0)
socket$igmp(0x2, 0x3, 0x2)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3fc}, 0x0, 0x0)

1.137492121s ago: executing program 4:
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
socket$packet(0x11, 0x0, 0x300)
getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
r0 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10010000004e20, 0x0, @loopback}, 0x1c)
syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023"], 0x0)
setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f0000000000)=0x8, 0x4)

761.348363ms ago: executing program 3:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000140)={0x0, 0x7}, 0x8)
socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x311200)
socketpair(0x1e, 0x4, 0x0, &(0x7f0000000840)={<r2=>0xffffffffffffffff})
socket$igmp(0x2, 0x3, 0x2)
ioctl$NBD_DO_IT(r1, 0xab03)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)="fa4fd85f35f61e5895d1f62ada53cd080f0e2c8e07d62dda5d8eb7d781021535c40bc6b5c382fd5ef8beaa94f4f00e3268893d1648cbe6ff48b09dbbdc46e2871e50dd99182f01bf397015ac71b9780d29bcd03fb30bb09352bebdda0ade00e0dfd345776b5671", &(0x7f00000005c0)="00aca4dd08d1e3202f1d7f97084fe99ffcff6bfaf14304ec1b9a53e2494e5552fd1223ecf87c2225debd91be0973f78b5afa3f87e2067b90d5537b39d11480778a130ca7dad2f4441f6148229c92f592e344825ec685f17d3e8c88a13cb8b5ca83ff4bd0fc82768416521e", 0x7ff}, 0x38)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000008c0)={'vxcan1\x00'})
socket$can_bcm(0x1d, 0x2, 0x2)
syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x100425, &(0x7f00000003c0)=ANY=[@ANYBLOB="ab64f448a53467a1f845d636", @ANYBLOB="7537e1a3c3a8615af98be97fdd29087512507dbc4cba6e295c93f79063dc5776ea396a444a68c053d2d95fdf04030000005d439965e539ab15e930e59ab45a13d347aa61b9abf0739934eef68b52a27eebbc7a1e54791cd144caa398c8fa47178a7ee11bb2c08eabd6ebf8d5caf0c6dc650a4da71b61b769f05b3f09ea7d2b197c71504d36712b77ca6ee71b5cdfb8e970f40b8f8be9a19eae12d70d30440463ddc77faee25230ad60a959e591affc59c42d1b119a09d3e0755f44ccd656e8048e9cb5b5f2d36af70cde0f1982d048f01bb1430c2b902bb82fb671bd3eae359a135ae4bf054a3a2e43eef825", @ANYRES8, @ANYRESHEX=r2, @ANYRES16=r0, @ANYBLOB="a22e58d460c0b430479300f195797378fffb9f9d5c2e5963987bea2b2ba24ad595eb9ceae7970ee75664dc7881e5d579282b743be4d70dd621ae96669c1698040e91b2ca1d289e0b0bdec198de032fe8ca985abf46c89a8a7c60edf17b5c620e340ae9aa5c58987d657598b07ddbda85"])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000700)='>\xd0\"]m\xe0\xd2yW\x02\x0e`L\x1b\x00k\xa2\x89\x7f\x03\x1bM;\xc3\x16\xb2w#Q\xef\\\xafy\xc5 \xf5u\v\xd3\x8eH\xb9\xcfNi\xb0\xb1\xd3\x95\xa5:kc\xbd\xff}\xe2>\x98\xfb\xaf?\xc4\xdc\x87-\xc6\xe8\x82\x95\xddW\xb6f`\xcd\xab\xfd\xb1\x01\x15\xf3\xac<\xab\xa8\xd8_\xaeF\xa2\xe6\x1a#\x1f\xdf6\x88&\xd9L\x05\xc3\xf4\x02){\xb6\xe4\xa7\xc2\x80gZ]e\r*\x1dk\xe9l\xbb\x16l\xbd\xee\x9bb\xe4d9\xe1\xef\xfb\x89Kfl3KC\x8fg<\"\x93\x05\x05R\xb2\xb5[\t\xcb\xe6\xaf\xdf*\xbc~U\x16Z*\xe5\xe4\xb2\x14\x8b\xf1j\x8e\b\xe4\x1dN\x03\xe5\xbeu\x1cl\x10\x92:<_\x03tR\xe5\x05\xe7l\x97\x90\b\x04\xe8\x05^\x1b\x16\x1aB\x9e\xf2/\xd9\x9a\xa4\xfe!\xfe&\xbb\x80\xcb\x15\x00\x16\xf9\x1b\xc9*g\xb9\xf7\x88\xc5\x13\xc0-\x86\xe0u\xfc!d6\xbeY\x00\x00\x00\x00\x00\x00')
chdir(&(0x7f0000000080)='./file1\x00')
openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4b00, 0x10c)
socket$kcm(0x10, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
r4 = io_uring_setup(0x37f4, &(0x7f0000000640)={0x0, 0xa215, 0x11de, 0x3, 0x2003})
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0)
r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
pread64(r5, &(0x7f0000000300)=""/153, 0x99, 0x7fffffffffffffff)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0)
fcntl$setlease(r6, 0x400, 0x0)
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0)
fcntl$setlease(r7, 0x400, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)

693.672715ms ago: executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtfilter={0x24, 0x2c, 0x200, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x5, 0x3}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000080))
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000800)='cpuset.effective_cpus\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000140), 0xfcb8)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0xa2ec, 0x100000001})
open_tree(r3, &(0x7f0000000340)='./file0\x00', 0x80001)
r5 = openat$cgroup_ro(r3, &(0x7f0000000380)='blkio.bfq.dequeue\x00', 0x275a, 0x0)
ioctl$PPPIOCSMRRU(r3, 0x4004743b, &(0x7f00000000c0))
utimensat(r5, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0)
r6 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0)
ioctl$CEC_RECEIVE(r6, 0x5452, &(0x7f00000000c0)={0x0, 0x0, 0x80, 0x0, 0x0, 0x0, '&\x00'})
r7 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(r7, 0xc05c6104, &(0x7f0000000140)={"90125830", 0x0, 0x5, 0x9, 0x0, 0x6, "471d85552605000000000000001ff3", '\x00', "e1aa6045", "41f336e7", ["c81de44b0091fb7ce7442d42", "6d5eb3eec70d84000c00b4bd", "34334e40c300e1a48d9d3300", "e996c9c4d21135876ea2fff7"]})
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0)
r8 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
readv(r8, &(0x7f0000002140), 0x0)
r9 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffc000/0x2000)=nil)
shmctl$SHM_STAT(r9, 0xd, 0x0)

688.954058ms ago: executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x4000000, &(0x7f00000002c0)={&(0x7f0000000200)=@delneigh={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x7}}, 0x1c}}, 0x0)

152.109038ms ago: executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'xfrm0\x00', <r2=>0x0})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@union={0x4, 0x0, 0x0, 0x8}]}, {0x0, [0x0, 0x0, 0x0, 0x61, 0x2e]}}, 0x0, 0x2b}, 0x20)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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")
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r4 = open_tree(r3, &(0x7f0000000640)='\x00', 0x81000)
renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', r4, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB="800000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="80100400000000005800128009000100766c616e0000000090ff028006000100000000000600050081000000340003800c00010000000000000000000c00010020000000000000000c00010000000000ff0100000c000100001000000000000008000500", @ANYRES32=r2, @ANYBLOB="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"], 0x80}}, 0x0)

0s ago: executing program 0:
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'erspan0\x00', &(0x7f00000002c0)={'syztnl1\x00', <r0=>0x0, 0x0, 0x0, 0x0, 0x0, {{0x35, 0x4, 0x0, 0x0, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x0, 0x0, 0x0, 0x4]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x3}, 0x659}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@dev}, {@remote, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @ra={0x94, 0x4}, @lsrr={0x83, 0xb, 0x0, [@private=0xa010102, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x0)
r3 = dup(r2)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000005c0)={0x10000, 0x3, 0x10000, 0x1000, &(0x7f000025a000/0x1000)=nil})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000004c0)={0xa4, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x12, 0x0, 0x1, [@generic="25b57e35619bf282cfcd8fba0cb7f2934efacde0a223b473fe77f3e5ba760d3793b2f943b7528ea34883bc4a506cf756740574b89d396af9b59638700500000005006f88d6e1db9b2b"]}, @nested={0x3e, 0x6, 0x0, 0x1, [@generic="37c14f9a8ead341bf43ea3970236c74b2e318966b7420623d7f5c9fde55324d4c519e80f9f4d6b22b3f1b672c61240c38914eb560eb9ca62fa58"]}]}, 0xa4}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000380)='rcu_stall_warning\x00', r6}, 0x10)
bind$inet6(r5, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f0000000040)={'wg2\x00'})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000280)={'syztnl2\x00', r0, 0x0, 0x9, 0x20, 0x7, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x27}}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='fscache_cache\x00', r6}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x43}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000001000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
epoll_create(0x689)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000})
ioctl$INCFS_IOC_FILL_BLOCKS(0xffffffffffffffff, 0x80106720, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x6, 0x15, &(0x7f00000000c0)="a99f9b09cbd2399d6f7579a8c228cc67cbcb44cbbc", 0x0, 0x1}]})
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

kernel console output (not intermixed with test programs):

ended to keep mac addresses unique to avoid problems!
[  266.292782][ T5360] batman_adv: batadv0: Interface activated: batadv_slave_0
[  266.298026][ T5615]  ? show_regs+0x148/0x160
[  266.326274][ T5615]  ? __warn+0x2c2/0x770
[  266.330757][ T5615]  ? skb_ensure_writable+0x22a/0x4a0
[  266.336496][ T5615]  ? report_bug+0x929/0xbd0
[  266.341389][ T5615]  ? skb_ensure_writable+0x22a/0x4a0
[  266.347125][ T5615]  ? handle_bug+0x47/0x70
[  266.347459][ T5604] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 17 (err -117)
[  266.351679][ T5615]  ? exc_invalid_op+0x1f/0x50
[  266.369192][ T5615]  ? asm_exc_invalid_op+0x1f/0x30
[  266.374720][ T5615]  ? __pfx_bpf_skb_pull_data+0x10/0x10
[  266.380490][ T5615]  ? skb_ensure_writable+0x48/0x4a0
[  266.386144][ T5615]  ? skb_ensure_writable+0x229/0x4a0
[  266.391735][ T5615]  ? skb_ensure_writable+0x22a/0x4a0
[  266.397466][ T5615]  ? kmsan_get_metadata+0x146/0x1d0
[  266.403290][ T5615]  bpf_skb_pull_data+0xa4/0x250
[  266.408589][ T5615]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  266.414866][ T5615]  ___bpf_prog_run+0x13fe/0xe0f0
[  266.420194][ T5615]  ? kmsan_get_metadata+0x146/0x1d0
[  266.425845][ T5615]  __bpf_prog_run32+0xb2/0xe0
[  266.430851][ T5615]  ? __pfx___bpf_prog_run32+0x10/0x10
[  266.436680][ T5615]  bpf_test_run+0x499/0xc30
[  266.441548][ T5615]  ? bpf_test_run+0x388/0xc30
[  266.446720][ T5615]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  266.452871][ T5615]  bpf_prog_test_run_skb+0x14ea/0x1f20
[  266.458839][ T5615]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  266.463111][ T5604] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  266.465026][ T5615]  bpf_prog_test_run+0x6b7/0xad0
[  266.465220][ T5615]  __sys_bpf+0x6aa/0xd90
[  266.487562][ T5615]  __x64_sys_bpf+0xa0/0xe0
[  266.492273][ T5615]  x64_sys_call+0x96b/0x3b50
[  266.497360][ T5615]  do_syscall_64+0xcf/0x1e0
[  266.502199][ T5615]  ? clear_bhb_loop+0x25/0x80
[  266.507330][ T5615]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  266.513531][ T5615] RIP: 0033:0x7fa3a927cf69
[  266.518343][ T5615] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  266.538444][ T5615] RSP: 002b:00007fa3aa03f0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  266.547321][ T5615] RAX: ffffffffffffffda RBX: 00007fa3a93b3f80 RCX: 00007fa3a927cf69
[  266.555684][ T5615] RDX: 0000000000000050 RSI: 00000000200003c0 RDI: 000000000000000a
[  266.563903][ T5615] RBP: 00007fa3a92da6fe R08: 0000000000000000 R09: 0000000000000000
[  266.572275][ T5615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  266.580635][ T5615] R13: 000000000000000b R14: 00007fa3a93b3f80 R15: 00007ffc1b833bf8
[  266.589063][ T5615]  </TASK>
[  266.592271][ T5615] ---[ end trace 0000000000000000 ]---
[  266.604763][ T5199] rc_core: IR keymap rc-hauppauge not found
[  266.611105][ T5199] Registered IR keymap rc-empty
[  266.618572][ T5199] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  266.631214][ T5199] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input7
[  266.655084][ T5360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  266.666349][ T5360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  266.676496][ T5360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  266.687561][ T5360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  266.700763][ T5360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  266.712416][ T5360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  266.722953][ T5360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  266.733761][ T5360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  266.749932][ T5360] batman_adv: batadv0: Interface activated: batadv_slave_1
[  266.770591][ T5620] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor.0: bg 0: block 65: padding at end of block bitmap is not set
[  266.890905][ T5360] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  266.906076][ T5360] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  266.917264][ T5360] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  266.920315][ T5620] EXT4-fs error (device loop0): ext4_acquire_dquot:6882: comm syz-executor.0: Failed to acquire dquot type 0
[  266.926407][ T5360] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  266.983751][ T5623] loop1: detected capacity change from 0 to 164
[  267.015587][ T5621] rc rc0: two consecutive events of type space
[  267.046319][ T5615] loop3: detected capacity change from 0 to 128
[  267.061720][ T5623] Unable to read rock-ridge attributes
[  267.070854][ T5620] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'.
[  267.085320][ T5615] EXT4-fs warning (device loop3): ext4_init_metadata_csum:4609: metadata_csum and uninit_bg are redundant flags; please run fsck.
[  267.093054][ T5619] Unable to read rock-ridge attributes
[  267.100258][ T5615] EXT4-fs (loop3): VFS: Found ext4 filesystem with invalid superblock checksum.  Run e2fsck?
[  267.262325][   T25] usb 3-1: USB disconnect, device number 2
[  268.260710][ T5604] ext4: Unknown parameter '/dev/loop0'
[  268.683801][ T5079] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  269.155799][   T29] kauditd_printk_skb: 34 callbacks suppressed
[  269.155873][   T29] audit: type=1326 audit(1717902526.864:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5645 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3a927cf69 code=0x0
[  269.761676][ T5657] net_ratelimit: 44 callbacks suppressed
[  269.761752][ T5657] dccp_v6_rcv: dropped packet with invalid checksum
[  270.296588][ T5662] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'.
[  270.431690][ T5669] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'.
[  270.941351][ T5672] loop3: detected capacity change from 0 to 128
[  271.006878][ T5672] EXT4-fs warning (device loop3): ext4_init_metadata_csum:4609: metadata_csum and uninit_bg are redundant flags; please run fsck.
[  271.021736][ T5672] EXT4-fs (loop3): VFS: Found ext4 filesystem with invalid superblock checksum.  Run e2fsck?
[  271.072694][ T5675] loop0: detected capacity change from 0 to 164
[  271.186586][ T5675] Unable to read rock-ridge attributes
[  271.257691][ T5675] Unable to read rock-ridge attributes
[  272.030087][ T5688] loop0: detected capacity change from 0 to 512
[  272.106455][ T5688] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  272.246416][ T5688] EXT4-fs error (device loop0): ext4_orphan_get:1394: inode #17: comm syz-executor.0: iget: bad i_size value: -6917529027641081756
[  272.261623][ T5688] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 17 (err -117)
[  272.301621][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  272.309950][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  272.380955][ T5688] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  272.486198][ T2953] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  272.494607][ T2953] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  272.572217][ T5702] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor.0: bg 0: block 65: padding at end of block bitmap is not set
[  272.611519][ T5702] Quota error (device loop0): write_blk: dquota write failed
[  272.619786][ T5702] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  272.637276][    T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!!
[  272.662816][ T5705] Quota error (device loop0): do_check_range: Getting block 144 out of range 0-5
[  272.944070][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  272.985289][ T5702] EXT4-fs error (device loop0): ext4_acquire_dquot:6882: comm syz-executor.0: Failed to acquire dquot type 0
[  273.066036][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  273.137094][ T5706] loop2: detected capacity change from 0 to 64
[  273.214841][ T5706] hfs: dir_umask requires a value
[  273.220087][ T5706] hfs: unable to parse mount options
[  273.870909][ T5714] loop1: detected capacity change from 0 to 512
[  274.087988][ T5714] EXT4-fs error (device loop1): ext4_orphan_get:1420: comm syz-executor.1: bad orphan inode 17
[  274.132626][ T5714] ext4_test_bit(bit=16, block=4) = 1
[  274.138685][ T5714] is_bad_inode(inode)=0
[  274.143031][ T5714] NEXT_ORPHAN(inode)=0
[  274.147490][ T5714] max_ino=32
[  274.150864][ T5714] i_nlink=1
[  274.154226][ T5714] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  274.524984][ T5718] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.1'.
[  274.575587][ T5688] ext4: Unknown parameter '/dev/loop0'
[  274.726219][ T5720] process 'syz-executor.2' launched '/dev/fd/3' with NULL argv: empty string added
[  274.740659][ T5702] syz-executor.0 (5702) used greatest stack depth: 4344 bytes left
[  274.942656][ T5084] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  275.135018][ T5713] loop3: detected capacity change from 0 to 65536
[  275.256177][ T5079] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  275.312816][ T5713] XFS (loop3): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  275.558351][ T5713] XFS (loop3): Ending clean mount
[  275.569348][ T5713] XFS (loop3): Quotacheck needed: Please wait.
[  275.601975][ T5713] XFS (loop3): Quotacheck: Done.
[  275.758943][ T5735] loop0: detected capacity change from 0 to 256
[  275.783729][ T5735] FAT-fs (loop0): Unrecognized mount option "shortname=w" or missing value
[  275.806158][ T5091] XFS (loop3): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  275.834759][   T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  275.982099][ T5738] loop4: detected capacity change from 0 to 164
[  276.009112][ T5735] loop0: detected capacity change from 0 to 1764
[  276.070411][ T5738] Unable to read rock-ridge attributes
[  276.095454][ T5738] Unable to read rock-ridge attributes
[  276.215697][   T10] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  276.228862][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  276.307268][   T10] usb 2-1: config 0 descriptor??
[  276.337762][ T5741] loop2: detected capacity change from 0 to 128
[  276.353977][ T5741] EXT4-fs warning (device loop2): ext4_init_metadata_csum:4609: metadata_csum and uninit_bg are redundant flags; please run fsck.
[  276.369000][ T5741] EXT4-fs (loop2): VFS: Found ext4 filesystem with invalid superblock checksum.  Run e2fsck?
[  276.883229][ T5746] loop2: detected capacity change from 0 to 256
[  277.054455][ T5746] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  277.515570][   T10] ath6kl: Failed to submit usb control message: -110
[  277.522954][   T10] ath6kl: unable to send the bmi data to the device: -110
[  277.530542][   T10] ath6kl: Unable to send get target info: -110
[  277.551907][ T5749] loop1: detected capacity change from 0 to 4096
[  277.602519][ T5749] ntfs3: loop1: Unsupported bytes per MFT record 32768.
[  277.633655][ T5749] ntfs3: loop1: try to read out of volume at offset 0x1ffe00
[  278.014033][ T5755] loop4: detected capacity change from 0 to 4096
[  278.035549][ T5758] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  278.056685][ T5755] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512).
[  278.193037][   T29] audit: type=1800 audit(1717902535.854:185): pid=5758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1949 res=0 errno=0
[  278.215138][   T29] audit: type=1800 audit(1717902535.874:186): pid=5758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1949 res=0 errno=0
[  278.258521][   T10] ath6kl: Failed to init ath6kl core: -110
[  278.277593][   T10] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -110
[  278.522429][ T5755] ntfs3: loop4: mft corrupted
[  278.528179][ T5755] ntfs3: loop4: Failed to load $Extend (-22).
[  278.534696][ T5755] ntfs3: loop4: Failed to initialize $Extend.
[  278.644118][ T5759] loop2: detected capacity change from 0 to 4096
[  278.663580][ T5765] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
[  278.848295][ T5765] bridge0: port 2(bridge_slave_1) entered disabled state
[  278.858264][ T5765] bridge0: port 1(bridge_slave_0) entered disabled state
[  279.027975][ T5766] loop3: detected capacity change from 0 to 64
[  279.076625][ T5766] minix: Unknown parameter '0x0000000000000000'
[  279.213128][   T10] usb 2-1: USB disconnect, device number 2
[  279.427758][ T5765] loop3: detected capacity change from 0 to 2048
[  279.457623][ T5765] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  279.511433][ T5771] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  279.523498][ T5765] syz-executor.3: attempt to access beyond end of device
[  279.523498][ T5765] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048
[  279.607855][ T5772] loop2: detected capacity change from 0 to 512
[  279.658272][ T5775] loop4: detected capacity change from 0 to 1024
[  279.724184][ T5772] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  279.757723][ T5775] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  279.930660][ T5772] EXT4-fs error (device loop2): ext4_orphan_get:1394: inode #17: comm syz-executor.2: iget: bad i_size value: -6917529027641081756
[  280.035409][ T5772] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz-executor.2: couldn't read orphan inode 17 (err -117)
[  280.054830][ T5775] loop4: detected capacity change from 1024 to 0
[  280.064805][    C0] I/O error, dev loop4, sector 32 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 0
[  280.075523][ T5783] EXT4-fs error (device loop4): __ext4_find_entry:1684: inode #2: comm syz-executor.4: reading directory lblock 0
[  280.088162][ T5783] syz-executor.4: attempt to access beyond end of device
[  280.088162][ T5783] loop4: rw=145409, sector=2, nr_sectors = 2 limit=0
[  280.088841][ T5772] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  280.102091][ T5783] Buffer I/O error on dev loop4, logical block 1, lost sync page write
[  280.102203][ T5783] EXT4-fs (loop4): I/O error while writing superblock
[  280.134152][ T5775] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma?
[  280.154705][ T5778] ext4lazyinit: attempt to access beyond end of device
[  280.154705][ T5778] loop4: rw=536576, sector=6, nr_sectors = 2 limit=0
[  280.168804][ T5778] ext4lazyinit: attempt to access beyond end of device
[  280.168804][ T5778] loop4: rw=12288, sector=6, nr_sectors = 2 limit=0
[  280.182934][ T5778] EXT4-fs error (device loop4): ext4_wait_block_bitmap:584: comm ext4lazyinit: Cannot read block bitmap - block_group = 0, block_bitmap = 3
[  280.197780][ T5778] ext4lazyinit: attempt to access beyond end of device
[  280.197780][ T5778] loop4: rw=145409, sector=2, nr_sectors = 2 limit=0
[  280.215960][ T5778] Buffer I/O error on dev loop4, logical block 1, lost sync page write
[  280.225735][ T5778] EXT4-fs (loop4): I/O error while writing superblock
[  280.372785][ T5360] syz-executor.4: attempt to access beyond end of device
[  280.372785][ T5360] loop4: rw=12288, sector=32, nr_sectors = 2 limit=0
[  280.451386][ T5786] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor.2: bg 0: block 65: padding at end of block bitmap is not set
[  280.547378][ T5786] Quota error (device loop2): write_blk: dquota write failed
[  280.555679][ T5786] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  280.566141][ T5786] EXT4-fs error (device loop2): ext4_acquire_dquot:6882: comm syz-executor.2: Failed to acquire dquot type 0
[  280.625555][ T1226] ieee802154 phy0 wpan0: encryption failed: -22
[  280.632314][ T1226] ieee802154 phy1 wpan1: encryption failed: -22
[  280.713551][ T5360] syz-executor.4: attempt to access beyond end of device
[  280.713551][ T5360] loop4: rw=524288, sector=12, nr_sectors = 2 limit=0
[  280.733250][ T5360] syz-executor.4: attempt to access beyond end of device
[  280.733250][ T5360] loop4: rw=524288, sector=14, nr_sectors = 2 limit=0
[  280.748900][ T5360] syz-executor.4: attempt to access beyond end of device
[  280.748900][ T5360] loop4: rw=524288, sector=16, nr_sectors = 2 limit=0
[  280.763353][ T5360] syz-executor.4: attempt to access beyond end of device
[  280.763353][ T5360] loop4: rw=524288, sector=18, nr_sectors = 2 limit=0
[  280.777928][ T5360] EXT4-fs error (device loop4): ext4_get_inode_loc:4502: inode #2: block 5: comm syz-executor.4: unable to read itable block
[  280.791447][ T5360] Buffer I/O error on dev loop4, logical block 1, lost sync page write
[  280.800162][ T5360] EXT4-fs (loop4): I/O error while writing superblock
[  280.807355][ T5360] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5738: IO failure
[  280.816726][ T5360] Buffer I/O error on dev loop4, logical block 1, lost sync page write
[  280.830541][ T5360] EXT4-fs (loop4): I/O error while writing superblock
[  280.838852][ T5360] EXT4-fs error (device loop4): ext4_dirty_inode:5942: inode #2: comm syz-executor.4: mark_inode_dirty error
[  280.850954][ T5360] Buffer I/O error on dev loop4, logical block 1, lost sync page write
[  280.859668][ T5360] EXT4-fs (loop4): I/O error while writing superblock
[  280.871579][ T5788] Quota error (device loop2): do_check_range: Getting block 144 out of range 0-5
[  280.990715][ T5786] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'.
[  281.091375][ T5790] loop1: detected capacity change from 0 to 164
[  281.222034][ T5790] Unable to read rock-ridge attributes
[  281.293787][ T5790] Unable to read rock-ridge attributes
[  281.435591][ T5787] loop3: detected capacity change from 0 to 40427
[  281.464146][ T5787] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  281.466105][   T11] EXT4-fs error (device loop4): __ext4_get_inode_loc_noinmem:4487: inode #2: block 5: comm kworker/u8:0: unable to read itable block
[  281.472314][ T5787] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  281.494855][   T11] Buffer I/O error on dev loop4, logical block 1, lost sync page write
[  281.503428][   T11] EXT4-fs (loop4): I/O error while writing superblock
[  281.569564][ T5360] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  281.586403][ T5787] F2FS-fs (loop3): Found nat_bits in checkpoint
[  281.813915][ T5360] Buffer I/O error on dev loop4, logical block 1, lost sync page write
[  281.822746][ T5360] EXT4-fs (loop4): I/O error while writing superblock
[  281.906152][ T5787] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  281.907359][ T5776] Buffer I/O error on dev loop4, logical block 64, lost sync page write
[  281.913381][ T5787] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  282.336805][ T4254] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  282.354735][   T25] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  282.603782][ T4254] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  282.661264][ T5772] ext4: Unknown parameter '/dev/loop2'
[  282.752320][ T4254] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  282.810421][   T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  282.822785][   T25] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  282.837064][   T25] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  282.847316][   T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  282.861596][   T25] usb 4-1: config 0 descriptor??
[  282.959869][ T4254] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  282.995487][   T29] audit: type=1804 audit(1717902540.664:187): pid=5801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir714059297/syzkaller.BDGYaA/24/bus" dev="sda1" ino=1965 res=1 errno=0
[  283.357826][   T29] audit: type=1804 audit(1717902540.814:188): pid=5803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir714059297/syzkaller.BDGYaA/24/bus" dev="sda1" ino=1965 res=1 errno=0
[  283.460497][   T25] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[  283.468507][   T25] plantronics 0003:047F:FFFF.0001: unknown global tag 0xe
[  283.475958][   T25] plantronics 0003:047F:FFFF.0001: item 0 1 1 14 parsing failed
[  283.542783][ T4254] bridge_slave_1: left allmulticast mode
[  283.549012][ T4254] bridge_slave_1: left promiscuous mode
[  283.555718][ T4254] bridge0: port 2(bridge_slave_1) entered disabled state
[  283.621067][ T5078] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  283.676624][   T25] plantronics 0003:047F:FFFF.0001: parse failed
[  283.684129][   T25] plantronics 0003:047F:FFFF.0001: probe with driver plantronics failed with error -22
[  283.774738][ T4254] bridge_slave_0: left allmulticast mode
[  283.780633][ T4254] bridge_slave_0: left promiscuous mode
[  283.803257][ T4254] bridge0: port 1(bridge_slave_0) entered disabled state
[  285.069760][ T4254] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  285.171553][ T4254] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  285.239024][ T4254] bond0 (unregistering): Released all slaves
[  285.296285][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  285.306137][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  285.315932][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  285.325662][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  285.338590][    T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!!
[  285.349813][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  285.359111][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  285.388416][ T5813] loop2: detected capacity change from 0 to 64
[  285.484939][    T8] usb 4-1: USB disconnect, device number 2
[  285.614811][   T25] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  285.694251][ T5813] minix_free_block (loop2:1): bit already cleared
[  285.701438][ T5813] minix_free_block (loop2:4): bit already cleared
[  285.715980][ T5813] minix_free_block (loop2:3): bit already cleared
[  285.722725][ T5813] minix_free_block (loop2:2): bit already cleared
[  286.116429][   T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  286.127948][   T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  286.138270][   T25] usb 1-1: New USB device found, idVendor=056a, idProduct=0059, bcdDevice= 0.00
[  286.148034][   T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  286.187167][   T25] usb 1-1: config 0 descriptor??
[  286.512220][ T4254] hsr_slave_0: left promiscuous mode
[  286.553565][ T4254] hsr_slave_1: left promiscuous mode
[  286.617706][ T4254] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  286.625869][ T4254] batman_adv: batadv0: Removing interface: batadv_slave_0
[  286.683997][ T4254] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  286.692287][ T4254] batman_adv: batadv0: Removing interface: batadv_slave_1
[  286.784996][   T25] wacom 0003:056A:0059.0002: hidraw0: USB HID v0.00 Device [HID 056a:0059] on usb-dummy_hcd.0-1/input0
[  286.816752][ T4254] veth1_macvtap: left promiscuous mode
[  286.822521][ T4254] veth0_macvtap: left promiscuous mode
[  286.830592][ T4254] veth1_vlan: left promiscuous mode
[  286.836469][ T4254] veth0_vlan: left promiscuous mode
[  286.889420][ T5090] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  286.900902][ T5090] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  287.015395][ T5090] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  287.066907][ T5135] usb 1-1: USB disconnect, device number 9
[  287.126668][ T5090] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  287.138765][ T5090] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  287.148362][ T5090] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  288.137344][ T4254] team0 (unregistering): Port device team_slave_1 removed
[  288.187160][ T4254] team0 (unregistering): Port device team_slave_0 removed
[  288.750115][ T5831] loop2: detected capacity change from 0 to 2048
[  288.856956][ T5838] ALSA: mixer_oss: invalid OSS volume '~�|4��z('[��b"Q�_�'
[  288.865262][ T5838] ALSA: mixer_oss: invalid OSS volume '�'
[  288.965037][ T5831] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  289.230557][ T5090] Bluetooth: hci0: command tx timeout
[  290.379919][ T5821] chnl_net:caif_netlink_parms(): no params data found
[  290.965081][ T5847] loop3: detected capacity change from 0 to 40427
[  291.052571][ T5847] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  291.060718][ T5847] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  291.175315][ T5847] F2FS-fs (loop3): Found nat_bits in checkpoint
[  291.304978][ T5090] Bluetooth: hci0: command tx timeout
[  291.518477][ T5847] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  291.526424][ T5847] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  292.056664][    T8] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  292.496676][    T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  292.510568][    T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  292.524763][    T8] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  292.534102][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  292.618097][    T8] usb 4-1: config 0 descriptor??
[  292.633051][ T5868] loop1: detected capacity change from 0 to 64
[  292.662653][ T5865] loop0: detected capacity change from 0 to 1764
[  292.797063][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state
[  292.809991][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state
[  292.817947][ T5821] bridge_slave_0: entered allmulticast mode
[  292.827252][ T5821] bridge_slave_0: entered promiscuous mode
[  292.838234][ T5868] overlayfs: failed to resolve './file0:/': -2
[  292.925193][ T5868] MPI: mpi too large (187712 bits)
[  292.950271][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state
[  292.958774][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state
[  292.966649][ T5821] bridge_slave_1: entered allmulticast mode
[  292.975772][ T5821] bridge_slave_1: entered promiscuous mode
[  293.095695][    T8] usbhid 4-1:0.0: can't add hid device: -71
[  293.102354][    T8] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  293.201484][    T8] usb 4-1: USB disconnect, device number 3
[  293.425617][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  293.451233][ T5090] Bluetooth: hci0: command tx timeout
[  293.576805][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  293.989052][ T5821] team0: Port device team_slave_0 added
[  294.010446][ T5877] vim2m vim2m.0: Fourcc format (0x31384142) invalid.
[  294.028893][ T5821] team0: Port device team_slave_1 added
[  294.216956][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0
[  294.224498][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  294.255521][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  294.365280][   T29] audit: type=1800 audit(1717902552.014:189): pid=5879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name=2321200A5277C0363AEFF7777B1ECD47CD3D4E6EF032023D6C8541F98197841201A2110CF46499CE7E34CA05C1B704AEB7C7A52C1514843C9C4E6F882BAF86B2C61AC2962E6225A88483A49182F1FB6B dev="sda1" ino=1956 res=0 errno=0
[  294.410433][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1
[  294.417842][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  294.449288][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  294.910663][ T5821] hsr_slave_0: entered promiscuous mode
[  294.976166][ T5821] hsr_slave_1: entered promiscuous mode
[  294.976536][ T5884] syz-executor.1[5884] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  295.009614][ T5884] syz-executor.1[5884] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  295.326346][ T5882] loop1: detected capacity change from 0 to 2048
[  295.465888][ T5090] Bluetooth: hci0: command tx timeout
[  295.885551][ T5890] loop0: detected capacity change from 0 to 2048
[  295.978010][ T5890] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  296.304870][ T5135] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  296.481571][ T5821] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  296.532956][ T5821] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  296.612258][ T5821] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  296.639383][ T5905] loop2: detected capacity change from 0 to 512
[  296.663053][ T5821] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  296.683056][ T5905] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  296.697210][ T5905] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  296.739673][ T5135] usb 4-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=cd.35
[  296.749221][ T5135] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  296.763009][ T5135] usb 4-1: config 0 descriptor??
[  296.810950][ T5905] EXT4-fs (loop2): 1 truncate cleaned up
[  296.817254][ T5905] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  296.861161][ T5079] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  296.889846][ T5135] dw2102: su3000_identify_state
[  296.895072][ T5135] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state.
[  296.906229][ T5135] dw2102: su3000_power_ctrl: 1, initialized 0
[  296.912541][ T5135] dvb-usb: bulk message failed: -22 (2/0)
[  296.958666][ T5135] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  296.999010][ T5905] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2250: inode #15: comm syz-executor.2: corrupted in-inode xattr: overlapping e_value 
[  297.035084][   T29] audit: type=1800 audit(1717902554.704:190): pid=5905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file1" dev="loop2" ino=15 res=0 errno=0
[  297.061998][ T5135] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2))
[  297.070301][ T5135] usb 4-1: media controller created
[  297.075887][ T5135] dvb-usb: bulk message failed: -22 (6/0)
[  297.081873][ T5135] dw2102: i2c transfer failed.
[  297.086951][ T5135] dvb-usb: bulk message failed: -22 (6/0)
[  297.092888][ T5135] dw2102: i2c transfer failed.
[  297.098041][ T5135] dvb-usb: bulk message failed: -22 (6/0)
[  297.103996][ T5135] dw2102: i2c transfer failed.
[  297.113240][ T5135] dvb-usb: bulk message failed: -22 (6/0)
[  297.120352][ T5135] dw2102: i2c transfer failed.
[  297.125443][ T5135] dvb-usb: bulk message failed: -22 (6/0)
[  297.131400][ T5135] dw2102: i2c transfer failed.
[  297.136489][ T5135] dvb-usb: bulk message failed: -22 (6/0)
[  297.142431][ T5135] dw2102: i2c transfer failed.
[  297.147566][ T5135] dvb-usb: MAC address: 02:02:02:02:02:02
[  297.186224][ T5905] EXT4-fs warning (device loop2): ext4_xattr_set_entry:1793: inode #15: comm syz-executor.2: unable to update i_inline_off
[  297.199708][ T5905] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2847: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  297.444674][ T5135] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  297.627225][ T5135] dvb-usb: bulk message failed: -22 (3/0)
[  297.633222][ T5135] dw2102: command 0x0e transfer failed.
[  297.639083][ T5135] dvb-usb: bulk message failed: -22 (3/0)
[  297.645109][ T5135] dw2102: command 0x0e transfer failed.
[  297.661490][ T5078] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  297.677821][ T5921] loop0: detected capacity change from 0 to 64
[  297.984393][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0
[  298.045481][ T5135] dvb-usb: bulk message failed: -22 (3/0)
[  298.051492][ T5135] dw2102: command 0x0e transfer failed.
[  298.057485][ T5135] dvb-usb: bulk message failed: -22 (3/0)
[  298.063425][ T5135] dw2102: command 0x0e transfer failed.
[  298.069753][ T5135] dvb-usb: bulk message failed: -22 (1/0)
[  298.075843][ T5135] dw2102: command 0x51 transfer failed.
[  298.081584][ T5135] dvb-usb: bulk message failed: -22 (5/0)
[  298.087633][ T5135] dw2102: i2c probe for address 0x68 failed.
[  298.093806][ T5135] dvb-usb: bulk message failed: -22 (5/0)
[  298.099835][ T5135] dw2102: i2c probe for address 0x69 failed.
[  298.106121][ T5135] dvb-usb: bulk message failed: -22 (5/0)
[  298.112035][ T5135] dw2102: i2c probe for address 0x6a failed.
[  298.118412][ T5135] dw2102: probing for demodulator failed. Is the external power switched on?
[  298.127592][ T5135] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)'
[  298.243886][ T5821] 8021q: adding VLAN 0 to HW filter on device team0
[  298.325151][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[  298.332860][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[  298.446062][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[  298.453751][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[  298.609681][ T5821] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  298.621106][ T5821] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  299.369834][ T5935] loop3: detected capacity change from 0 to 40427
[  299.444538][ T5135] rc_core: IR keymap rc-tt-1500 not found
[  299.450504][ T5135] Registered IR keymap rc-empty
[  299.458239][ T5135] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0
[  299.473594][ T5135] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input11
[  299.514145][ T5935] F2FS-fs (loop3): invalid crc value
[  299.555802][ T5935] F2FS-fs (loop3): Found nat_bits in checkpoint
[  299.736366][ T5135] dvb-usb: schedule remote query interval to 250 msecs.
[  299.743573][ T5135] dw2102: su3000_power_ctrl: 0, initialized 1
[  299.750266][ T5135] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected.
[  299.816920][ T5135] usb 4-1: USB disconnect, device number 4
[  299.861398][ T5925] loop2: detected capacity change from 0 to 4096
[  299.912024][ T5935] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  299.947122][ T5925] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512).
[  300.068858][ T5135] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected.
[  300.380374][ T5925] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  300.454889][ T5925] ntfs3: loop2: Failed to load $Extend (-22).
[  300.461363][ T5925] ntfs3: loop2: Failed to initialize $Extend.
[  301.035832][ T5135] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  301.487452][ T5135] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  301.497232][ T5135] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  301.597379][ T5135] usb 3-1: config 0 descriptor??
[  301.707298][ T5135] cp210x 3-1:0.0: cp210x converter detected
[  302.036994][ T5962] loop0: detected capacity change from 0 to 32768
[  302.059115][ T5962] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (5962)
[  302.112446][ T5135] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71
[  302.120439][ T5135] cp210x 3-1:0.0: querying part number failed
[  302.162361][ T5962] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  302.174867][ T5962] BTRFS info (device loop0): using sha256 (sha256-generic) checksum algorithm
[  302.177644][ T5135] usb 3-1: cp210x converter now attached to ttyUSB0
[  302.186366][ T5962] BTRFS info (device loop0): using free-space-tree
[  302.261011][ T5135] usb 3-1: USB disconnect, device number 3
[  302.271104][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0
[  302.325826][ T5135] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  302.338140][ T5135] cp210x 3-1:0.0: device disconnected
[  302.878156][ T5079] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  303.195924][ T5988] loop2: detected capacity change from 0 to 164
[  303.284926][ T5988] Unable to read rock-ridge attributes
[  303.328229][ T5988] Unable to read rock-ridge attributes
[  304.022269][ T5821] veth0_vlan: entered promiscuous mode
[  304.202659][ T5821] veth1_vlan: entered promiscuous mode
[  304.537923][ T5821] veth0_macvtap: entered promiscuous mode
[  304.568500][ T6001] binder: Bad value for 'stats'
[  304.589588][ T5821] veth1_macvtap: entered promiscuous mode
[  304.670897][   T29] audit: type=1804 audit(1717902562.344:191): pid=6002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2063511940/syzkaller.C3Q3zF/42/bus" dev="sda1" ino=1955 res=1 errno=0
[  304.700995][   T29] audit: type=1326 audit(1717902562.354:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6000 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f16bf67cf69 code=0x0
[  304.769308][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  304.780410][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.795740][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  304.808161][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.818344][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  304.829993][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.842959][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  304.853832][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.870320][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0
[  305.014840][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  305.026021][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  305.036411][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  305.047415][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  305.057563][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  305.069178][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  305.090320][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  305.106202][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  305.122875][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1
[  305.276172][ T5821] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  305.285533][ T5821] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  305.294803][ T5821] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  305.309343][ T5821] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  305.437106][ T5090] Bluetooth: hci1: ACL packet for unknown connection handle 0
[  305.613825][ T6011] loop1: detected capacity change from 0 to 64
[  306.241331][ T6008] overlay: ./file0 is not a directory
[  306.272724][   T29] audit: type=1800 audit(1717902563.894:193): pid=6019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1962 res=0 errno=0
[  306.294412][   T29] audit: type=1800 audit(1717902563.904:194): pid=6019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1962 res=0 errno=0
[  308.067687][ T6032] loop1: detected capacity change from 0 to 32768
[  308.096058][ T6033] loop3: detected capacity change from 0 to 164
[  308.140679][ T6032] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (6032)
[  308.208786][ T6033] Unable to read rock-ridge attributes
[  308.283648][ T6033] Unable to read rock-ridge attributes
[  308.506805][ T6036] loop2: detected capacity change from 0 to 40427
[  308.524824][ T6036] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  308.533040][ T6036] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  308.593838][ T6036] F2FS-fs (loop2): Found nat_bits in checkpoint
[  308.603440][ T6032] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  308.615620][ T6032] BTRFS info (device loop1): using sha256 (sha256-generic) checksum algorithm
[  308.627055][ T6032] BTRFS info (device loop1): using free-space-tree
[  308.901375][ T6036] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  308.908906][ T6036] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  309.146951][ T6036] bio_check_eod: 20 callbacks suppressed
[  309.147042][ T6036] syz-executor.2: attempt to access beyond end of device
[  309.147042][ T6036] loop2: rw=2049, sector=45096, nr_sectors = 128 limit=40427
[  309.187417][   T29] audit: type=1800 audit(1717902566.734:195): pid=6032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=263 res=0 errno=0
[  309.346938][ T5078] syz-executor.2: attempt to access beyond end of device
[  309.346938][ T5078] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  310.049851][ T5084] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  310.783058][ T6067] loop0: detected capacity change from 0 to 32768
[  310.820598][ T6067] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (6067)
[  310.855309][ T6067] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  310.866276][ T6067] BTRFS info (device loop0): using sha256 (sha256-generic) checksum algorithm
[  310.877794][ T6067] BTRFS info (device loop0): using free-space-tree
[  312.818279][ T5079] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  313.161090][ T6095] loop1: detected capacity change from 0 to 32768
[  313.372231][ T6095] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  313.601389][ T6107] loop3: detected capacity change from 0 to 16
[  313.668883][ T6107] erofs: Unknown parameter '��������'
[  313.723708][ T6095] XFS (loop1): Ending clean mount
[  313.742780][ T6095] XFS (loop1): Quotacheck needed: Please wait.
[  313.785913][   T29] audit: type=1326 audit(1717902571.444:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6108 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f16bf67cf69 code=0x0
[  313.940250][ T6095] XFS (loop1): Quotacheck: Done.
[  314.134726][ T5084] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  314.168450][ T3880] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  314.176508][ T3880] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  314.254783][ T3204] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  314.262864][ T3204] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  314.726518][ T6116] loop2: detected capacity change from 0 to 164
[  314.799824][ T6116] Unable to read rock-ridge attributes
[  314.816310][ T6116] Unable to read rock-ridge attributes
[  315.897308][ T6127] loop0: detected capacity change from 0 to 4096
[  315.937168][ T6127] ntfs3: Unknown parameter '01777777777777777777777'
[  316.930894][ T6139] loop3: detected capacity change from 0 to 40427
[  316.966974][ T6139] F2FS-fs (loop3): invalid crc value
[  317.028634][ T6139] F2FS-fs (loop3): Found nat_bits in checkpoint
[  317.119736][ T6127] 9pnet_fd: Insufficient options for proto=fd
[  317.369575][ T6139] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  317.559859][   T29] audit: type=1804 audit(1717902575.104:197): pid=6139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3095107524/syzkaller.hwiJBx/39/file0/bus" dev="loop3" ino=10 res=1 errno=0
[  317.628417][ T5091] syz-executor.3: attempt to access beyond end of device
[  317.628417][ T5091] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  318.158791][ T6151] loop1: detected capacity change from 0 to 40427
[  318.186458][ T6151] F2FS-fs (loop1): invalid crc value
[  318.319383][ T6151] F2FS-fs (loop1): Found nat_bits in checkpoint
[  318.653206][ T6151] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  318.760972][ T5084] syz-executor.1: attempt to access beyond end of device
[  318.760972][ T5084] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  320.015902][ T6175] loop4: detected capacity change from 0 to 164
[  320.114855][ T6175] Unable to read rock-ridge attributes
[  320.142722][ T6175] Unable to read rock-ridge attributes
[  321.238545][ T6182] loop0: detected capacity change from 0 to 32768
[  321.257000][ T6182] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (6182)
[  321.322938][ T6182] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  321.333693][ T6182] BTRFS info (device loop0): using sha256 (sha256-generic) checksum algorithm
[  321.345216][ T6182] BTRFS error (device loop0): cannot disable free-space-tree
[  321.352875][ T6182] BTRFS info (device loop0): disk space caching is enabled
[  321.371841][ T6182] BTRFS error (device loop0): open_ctree failed
[  321.409357][ T6188] loop4: detected capacity change from 0 to 512
[  321.622039][ T6188] EXT4-fs error (device loop4): __ext4_iget:4913: inode #2: block 16777216: comm syz-executor.4: invalid block
[  321.766475][ T6188] EXT4-fs (loop4): get root inode failed
[  321.772502][ T6188] EXT4-fs (loop4): mount failed
[  322.180552][ T6188] loop4: detected capacity change from 0 to 256
[  322.379142][ T6188] exFAT-fs (loop4): failed to load upcase table (idx : 0x00017f3e, chksum : 0x4fb01312, utbl_chksum : 0xe619d30d)
[  322.788845][ T6200] loop2: detected capacity change from 0 to 4096
[  322.830738][ T6200] ntfs3: Unknown parameter '01777777777777777777777'
[  323.036401][   T43] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  323.053904][ T6200] 9pnet_fd: Insufficient options for proto=fd
[  323.147143][ T5135] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  323.428806][ T5135] usb 4-1: Using ep0 maxpacket: 32
[  323.450247][   T43] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  323.459890][   T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  323.499467][   T43] usb 1-1: config 0 descriptor??
[  323.568089][ T5135] usb 4-1: config index 0 descriptor too short (expected 35577, got 27)
[  323.576712][   T43] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  323.583159][ T5135] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  323.592170][ T5135] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  323.602912][ T5135] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92
[  323.612246][ T5135] usb 4-1: config 1 has no interface number 0
[  323.619060][ T5135] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  323.632472][ T5135] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  323.762913][ T5135] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found
[  323.910256][ T6218] loop1: detected capacity change from 0 to 164
[  323.973267][ T6218] Unable to read rock-ridge attributes
[  323.991508][ T6209] loop3: detected capacity change from 0 to 64
[  323.997164][ T6218] Unable to read rock-ridge attributes
[  324.199977][ T5135] snd_usb_pod 4-1:1.1: set_interface failed
[  324.206730][ T5135] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected
[  324.215137][ T5135] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -71
[  324.276804][ T5135] usb 4-1: USB disconnect, device number 5
[  324.493601][   T29] audit: type=1800 audit(1717902582.144:198): pid=6225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1961 res=0 errno=0
[  324.790555][ T6230] loop4: detected capacity change from 0 to 256
[  324.834085][ T6230] FAT-fs (loop4): Unrecognized mount option "uni_x" or missing value
[  325.913799][ T6236] loop1: detected capacity change from 0 to 32768
[  326.019296][ T6236] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  326.350448][ T6236] XFS (loop1): Ending clean mount
[  326.420396][ T6236] XFS (loop1): Quotacheck needed: Please wait.
[  326.447313][ T6239] loop4: detected capacity change from 0 to 4096
[  326.482345][ T5062] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0xae/0x2f0, xfs_bnobt block 0x8 
[  326.494547][ T5062] XFS (loop1): Unmount and run xfs_repair
[  326.505235][ T5062] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  326.505632][ T6239] ntfs3: Unknown parameter '01777777777777777777777'
[  326.512767][ T5062] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  326.530394][ T5062] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[  326.539765][ T5062] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 00 a7 4b ab  ..*.w.B.......K.
[  326.549079][ T5062] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01  ....[.O.........
[  326.558277][ T5062] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00  ...6............
[  326.567432][ T5062] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  326.576708][ T5062] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  326.586145][ T5062] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  326.625166][ T3880] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x354/0x5c0" at daddr 0x8 len 8 error 74
[  326.709460][ T6236] XFS (loop1): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[  326.711491][   T43] gspca_stv06xx: I2C: Read error writing address: -71
[  326.729629][   T43] usb 1-1: USB disconnect, device number 10
[  326.870929][ T5084] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  326.925440][ T5084] XFS (loop1): Uncorrected metadata errors detected; please run xfs_repair.
[  327.184866][ T6239] 9pnet_fd: Insufficient options for proto=fd
[  327.344608][ T5135] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  327.605827][ T5135] usb 1-1: Using ep0 maxpacket: 16
[  327.745030][ T5135] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  327.756607][ T5135] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  327.766804][ T5135] usb 1-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00
[  327.776246][ T5135] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  327.834425][ T5135] usb 1-1: config 0 descriptor??
[  328.357667][ T5135] chicony 0003:04F2:1421.0003: hidraw0: USB HID v0.00 Device [HID 04f2:1421] on usb-dummy_hcd.0-1/input0
[  328.472506][ T6263] loop1: detected capacity change from 0 to 164
[  328.500391][ T6263] Unable to read rock-ridge attributes
[  328.536869][ T6263] Unable to read rock-ridge attributes
[  328.727027][   T29] audit: type=1804 audit(1717902586.394:199): pid=6262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir364829104/syzkaller.cMHO3B/10/file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="sda1" ino=1967 res=1 errno=0
[  329.106381][ T6271] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  329.220729][   T43] usb 1-1: USB disconnect, device number 11
[  329.247855][ T6274] loop3: detected capacity change from 0 to 64
[  329.373761][ T6274] hfs: unable to locate alternate MDB
[  329.379659][ T6274] hfs: continuing without an alternate MDB
[  330.402265][ T6289] loop2: detected capacity change from 0 to 1024
[  330.456554][ T6292] loop1: detected capacity change from 0 to 1024
[  330.562276][ T6292] EXT4-fs: Ignoring removed orlov option
[  330.618645][ T6289] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  330.631605][ T6289] ext4 filesystem being mounted at /root/syzkaller-testdir2063511940/syzkaller.C3Q3zF/59/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  330.757942][ T6292] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  330.772846][ T6287] loop4: detected capacity change from 0 to 40427
[  330.830617][ T6287] F2FS-fs (loop4): invalid crc value
[  330.880474][ T6287] F2FS-fs (loop4): Found nat_bits in checkpoint
[  331.286219][ T6287] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  331.526712][ T5821] syz-executor.4: attempt to access beyond end of device
[  331.526712][ T5821] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  331.738344][ T5084] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  331.970316][ T6313] loop0: detected capacity change from 0 to 164
[  332.279108][ T6313] Unable to read rock-ridge attributes
[  332.317390][ T6313] Unable to read rock-ridge attributes
[  332.659380][ T5078] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  334.248233][ T6329] loop1: detected capacity change from 0 to 64
[  334.533879][ T6336] input: syz1 as /devices/virtual/input/input12
[  335.216367][   T43] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  335.486556][   T43] usb 3-1: Using ep0 maxpacket: 8
[  335.513516][ T5062] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  335.638214][   T43] usb 3-1: config 0 has no interfaces?
[  335.644015][   T43] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  335.653621][   T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  335.721773][   T43] usb 3-1: config 0 descriptor??
[  335.804840][ T5062] usb 5-1: Using ep0 maxpacket: 32
[  335.954877][ T5062] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  335.966535][ T5062] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  335.978305][ T5062] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  335.987847][ T5062] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  336.095975][ T5062] usb 5-1: config 0 descriptor??
[  336.116229][ T6344] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  336.183822][ T5062] hub 5-1:0.0: USB hub found
[  336.459567][ T6344] netlink: 'syz-executor.4': attribute type 34 has an invalid length.
[  336.526090][ T6344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  336.539255][ T6344] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  336.695204][ T5062] hub 5-1:0.0: config failed, hub has too many ports! (err -19)
[  337.235620][ T5062] usbhid 5-1:0.0: can't add hid device: -71
[  337.242345][ T5062] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  337.316411][ T6358] loop1: detected capacity change from 0 to 164
[  337.344862][ T5062] usb 5-1: USB disconnect, device number 2
[  337.443483][ T6358] Unable to read rock-ridge attributes
[  337.486003][ T6358] Unable to read rock-ridge attributes
[  337.974206][ T5062] usb 3-1: USB disconnect, device number 4
[  338.237553][ T6370] loop2: detected capacity change from 0 to 64
[  338.394526][ T6370] warning: `syz-executor.2' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  338.821221][ T6378] loop0: detected capacity change from 0 to 1024
[  338.987176][ T5090] Bluetooth: hci3: command 0x0406 tx timeout
[  338.998898][ T5076] Bluetooth: hci4: command 0x0406 tx timeout
[  339.006130][ T5083] Bluetooth: hci1: command 0x0406 tx timeout
[  339.085423][ T6378] hfsplus: bad catalog entry type
[  339.255406][ T6378] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'.
[  339.455624][ T6377] loop3: detected capacity change from 0 to 32768
[  339.473988][ T6377] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (6377)
[  339.524013][ T6377] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  339.534681][ T6377] BTRFS info (device loop3): using sha256 (sha256-generic) checksum algorithm
[  339.546169][ T6377] BTRFS info (device loop3): using free-space-tree
[  339.589247][ T3880] hfsplus: b-tree write err: -5, ino 4
[  339.852978][ T6382] loop4: detected capacity change from 0 to 4096
[  340.187078][ T6404] loop1: detected capacity change from 0 to 164
[  340.194927][ T6377] btrfs: Unknown parameter 'undelete'
[  340.266160][ T6408] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  340.288609][ T6404] Unable to read rock-ridge attributes
[  340.442391][ T6404] Unable to read rock-ridge attributes
[  341.057797][ T5091] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  341.202787][ T6416] vcan0: tx drop: invalid da for name 0x0000000000000003
[  341.572364][ T6420] QAT: failed to copy from user.
[  341.642557][ T6420] team0: entered promiscuous mode
[  341.648044][ T6420] team_slave_0: entered promiscuous mode
[  341.662064][ T6420] team_slave_1: entered promiscuous mode
[  341.722709][ T6420] team0: left promiscuous mode
[  341.728089][ T6420] team_slave_0: left promiscuous mode
[  341.734897][ T6420] team_slave_1: left promiscuous mode
[  342.051207][ T1226] ieee802154 phy0 wpan0: encryption failed: -22
[  342.058747][ T1226] ieee802154 phy1 wpan1: encryption failed: -22
[  342.974756][ T5062] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  343.034775][ T6442] ptrace attach of "/root/syz-executor.3 exec"[5091] was attempted by "/root/syz-executor.3 exec"[6442]
[  343.103079][    C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies.
[  343.206473][ T6442] openvswitch: netlink: Flow actions attr not present in new flow.
[  343.387858][ T5062] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  343.404952][ T5062] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  343.419549][ T5062] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  343.429206][ T5062] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  343.487537][ T6435] loop2: detected capacity change from 0 to 1764
[  343.563591][ T5062] usb 1-1: config 0 descriptor??
[  343.605571][ T6442] loop3: detected capacity change from 0 to 2048
[  343.695887][ T6442]  loop3: p1 < > p3
[  343.723065][ T6447] loop4: detected capacity change from 0 to 164
[  343.734977][   T43] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  343.740687][ T6442] loop3: p3 size 134217728 extends beyond EOD, truncated
[  343.806712][ T6447] Unable to read rock-ridge attributes
[  343.817145][ T6447] Unable to read rock-ridge attributes
[  343.839606][    C1] hrtimer: interrupt took 407032 ns
[  344.136029][   T43] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  344.147461][   T43] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  344.162652][   T43] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  344.365778][   T43] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  344.376390][   T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  344.385146][   T43] usb 2-1: Product: syz
[  344.390011][   T43] usb 2-1: Manufacturer: syz
[  344.396947][   T43] usb 2-1: SerialNumber: syz
[  344.404117][ T5062] usbhid 1-1:0.0: can't add hid device: -71
[  344.410996][ T5062] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  344.452024][ T6449] loop4: detected capacity change from 0 to 164
[  344.486406][ T5062] usb 1-1: USB disconnect, device number 12
[  344.512344][ T6449] Unable to read rock-ridge attributes
[  344.540643][ T6449] Unable to read rock-ridge attributes
[  345.477790][ T6454] loop2: detected capacity change from 0 to 32768
[  345.756787][   T29] audit: type=1800 audit(1717902603.284:200): pid=6458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1950 res=0 errno=0
[  345.779105][   T29] audit: type=1800 audit(1717902603.304:201): pid=6454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=7 res=0 errno=0
[  345.917214][ T6454] read_mapping_page failed!
[  346.050204][ T6445] loop1: detected capacity change from 0 to 2048
[  346.099216][ T6463] loop4: detected capacity change from 0 to 512
[  346.177190][ T6463] EXT4-fs: Ignoring removed nomblk_io_submit option
[  346.192125][ T6463] EXT4-fs: old and new quota format mixing
[  346.346118][   T43] cdc_ncm 2-1:1.0: bind() failure
[  346.421608][   T43] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71
[  346.480124][   T43] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71
[  346.520009][   T43] usbtest 2-1:1.1: probe with driver usbtest failed with error -71
[  346.557462][   T43] usb 2-1: USB disconnect, device number 3
[  346.557815][ T6463] loop4: detected capacity change from 0 to 1764
[  347.010133][ T6473] loop0: detected capacity change from 0 to 164
[  347.118814][ T6473] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet.
[  348.520780][ T6480] loop1: detected capacity change from 0 to 164
[  348.745388][ T6480] Unable to read rock-ridge attributes
[  348.778905][ T6480] Unable to read rock-ridge attributes
[  349.191453][ T3204] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  349.490081][ T3204] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  349.626623][ T6485] loop3: detected capacity change from 0 to 164
[  349.792916][ T3204] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  349.871410][ T6485] Unable to read rock-ridge attributes
[  349.888306][ T6482] loop0: detected capacity change from 0 to 40427
[  349.902063][ T6482] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  349.910321][ T6482] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  349.977906][ T6485] Unable to read rock-ridge attributes
[  350.001147][ T6482] F2FS-fs (loop0): Found nat_bits in checkpoint
[  350.063935][ T3204] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  350.300999][ T6482] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  350.308757][ T6482] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  350.445020][ T4714] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  350.834957][ T4714] usb 2-1: Using ep0 maxpacket: 8
[  350.851742][ T3204] bridge_slave_1: left allmulticast mode
[  350.857845][ T3204] bridge_slave_1: left promiscuous mode
[  350.865526][ T3204] bridge0: port 2(bridge_slave_1) entered disabled state
[  350.955056][ T4714] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32
[  351.115419][ T3204] bridge_slave_0: left allmulticast mode
[  351.121527][ T3204] bridge_slave_0: left promiscuous mode
[  351.129629][ T3204] bridge0: port 1(bridge_slave_0) entered disabled state
[  351.135706][ T4714] usb 2-1: New USB device found, idVendor=1690, idProduct=0712, bcdDevice=78.9d
[  351.146556][ T4714] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  351.155011][ T4714] usb 2-1: Product: syz
[  351.159429][ T4714] usb 2-1: Manufacturer: syz
[  351.164420][ T4714] usb 2-1: SerialNumber: syz
[  351.211849][ T4714] usb 2-1: config 0 descriptor??
[  351.241316][ T6493] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  351.826168][ T6498] loop3: detected capacity change from 0 to 32768
[  352.010905][ T4714] usb 2-1: could not send command 0x1, error=-2
[  352.017560][ T4714] usb 2-1: could not initialize adapter
[  352.024488][    C0] usb 2-1: RX USB error -2.
[  352.029563][    C0] usb 2-1: error -1 when submitting rx urb
[  352.075866][ T4714] ar5523 2-1:0.0: probe with driver ar5523 failed with error -2
[  352.386295][   T29] audit: type=1800 audit(1717902609.774:202): pid=6498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=7 res=0 errno=0
[  352.411993][ T6498] read_mapping_page failed!
[  352.436582][ T4714] usb 2-1: USB disconnect, device number 4
[  352.464032][ T3204] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  352.569635][ T3204] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  352.770699][ T3204] bond0 (unregistering): Released all slaves
[  354.054132][ T3204] hsr_slave_0: left promiscuous mode
[  354.105503][ T3204] hsr_slave_1: left promiscuous mode
[  354.126583][ T3204] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  354.134522][ T3204] batman_adv: batadv0: Removing interface: batadv_slave_0
[  354.179868][ T3204] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  354.188587][ T3204] batman_adv: batadv0: Removing interface: batadv_slave_1
[  354.289035][ T3204] veth1_macvtap: left promiscuous mode
[  354.295715][ T3204] veth0_macvtap: left promiscuous mode
[  354.301614][ T3204] veth1_vlan: left promiscuous mode
[  354.307275][ T3204] veth0_vlan: left promiscuous mode
[  354.336711][ T6510] xt_recent: hitcount (4098) is larger than allowed maximum (255)
[  355.409611][ T6513] loop1: detected capacity change from 0 to 4096
[  355.442852][ T6513] ntfs3: Unknown parameter 'sparsv'
[  355.515247][ T5080] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  355.536423][ T5080] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  355.597087][ T5080] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  355.611961][ T3204] team0 (unregistering): Port device team_slave_1 removed
[  355.638576][ T3204] team0 (unregistering): Port device team_slave_0 removed
[  355.699867][ T5080] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  355.711256][ T5080] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  355.720739][ T5080] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  356.081976][ T6510] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'.
[  356.162035][ T6509] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'.
[  356.767001][ T6523] loop0: detected capacity change from 0 to 32768
[  357.078393][ T6534] ptrace attach of "/root/syz-executor.1 exec"[5084] was attempted by "/root/syz-executor.1 exec"[6534]
[  357.197066][ T6531] loop2: detected capacity change from 0 to 164
[  357.307400][ T6534] openvswitch: netlink: Flow actions attr not present in new flow.
[  357.355118][ T6531] Unable to read rock-ridge attributes
[  357.369797][ T6538] syz-executor.3: attempt to access beyond end of device
[  357.369797][ T6538] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0
[  357.406961][ T6531] Unable to read rock-ridge attributes
[  357.772358][ T6534] loop1: detected capacity change from 0 to 2048
[  357.864709][ T5094] Bluetooth: hci0: command tx timeout
[  357.878869][ T6534]  loop1: p1 < > p3
[  357.896586][ T6534] loop1: p3 size 134217728 extends beyond EOD, truncated
[  357.967308][ T6518] chnl_net:caif_netlink_parms(): no params data found
[  358.153759][ T6542] loop2: detected capacity change from 0 to 512
[  358.300946][ T6542] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  358.614628][ T6542] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1216: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  358.733808][ T6542] EXT4-fs (loop2): 1 truncate cleaned up
[  358.741013][ T6542] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  358.927848][ T6544] loop3: detected capacity change from 0 to 32768
[  359.106839][   T29] audit: type=1800 audit(1717902616.754:203): pid=6544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=7 res=0 errno=0
[  359.181102][ T6550] loop1: detected capacity change from 0 to 128
[  359.266440][ T5078] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  359.355754][ T6550] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  359.496481][ T6550] ext4 filesystem being mounted at /root/syzkaller-testdir714059297/syzkaller.BDGYaA/71/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  359.821342][ T6518] bridge0: port 1(bridge_slave_0) entered blocking state
[  359.829224][ T6518] bridge0: port 1(bridge_slave_0) entered disabled state
[  359.838159][ T6518] bridge_slave_0: entered allmulticast mode
[  359.847324][ T6518] bridge_slave_0: entered promiscuous mode
[  359.909382][ T5084] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  359.944522][ T5094] Bluetooth: hci0: command tx timeout
[  359.970719][ T6518] bridge0: port 2(bridge_slave_1) entered blocking state
[  359.978605][ T6518] bridge0: port 2(bridge_slave_1) entered disabled state
[  359.992797][ T6518] bridge_slave_1: entered allmulticast mode
[  360.002759][ T6518] bridge_slave_1: entered promiscuous mode
[  360.193256][ T6518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  360.265906][ T6518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  360.546751][ T6518] team0: Port device team_slave_0 added
[  360.643091][ T6518] team0: Port device team_slave_1 added
[  360.916431][ T6518] batman_adv: batadv0: Adding interface: batadv_slave_0
[  360.923629][ T6518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  360.950743][ T6518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  361.089927][ T6518] batman_adv: batadv0: Adding interface: batadv_slave_1
[  361.097352][ T6518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  361.128555][ T6518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  361.267680][ T6565] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  361.301929][ T6565] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma?
[  361.433912][ T6567] loop1: detected capacity change from 0 to 128
[  361.563477][ T6567] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002]
[  361.595258][ T6567] System zones: 1-3, 19-19, 35-36
[  361.632954][ T6518] hsr_slave_0: entered promiscuous mode
[  361.657506][ T6567] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  361.700674][ T6518] hsr_slave_1: entered promiscuous mode
[  361.713011][ T6567] ext4 filesystem being mounted at /root/syzkaller-testdir714059297/syzkaller.BDGYaA/73/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  361.806526][ T6567] EXT4-fs warning (device loop1): __ext4_ioctl:1259: Setting inode version is not supported with metadata_csum enabled.
[  361.975100][   T29] audit: type=1800 audit(1717902619.664:204): pid=6571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1950 res=0 errno=0
[  362.024639][ T5094] Bluetooth: hci0: command tx timeout
[  362.149801][ T5084] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  362.158444][ T6572] loop2: detected capacity change from 0 to 64
[  362.287735][ T6572] syz-executor.2: attempt to access beyond end of device
[  362.287735][ T6572] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0
[  362.301503][ T6572] (syz-executor.2,6572,1):ocfs2_get_sector:1769 ERROR: status = -5
[  362.309950][ T6572] (syz-executor.2,6572,1):ocfs2_sb_probe:749 ERROR: status = -5
[  362.318135][ T6572] (syz-executor.2,6572,1):ocfs2_fill_super:990 ERROR: superblock probe failed!
[  362.327575][ T6572] (syz-executor.2,6572,1):ocfs2_fill_super:1176 ERROR: status = -5
[  362.490319][    C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies.
[  362.530717][ T6575] loop3: detected capacity change from 0 to 164
[  362.619935][ T6575] Unable to read rock-ridge attributes
[  362.661306][ T6575] Unable to read rock-ridge attributes
[  362.973401][ T6579] loop1: detected capacity change from 0 to 256
[  363.180625][ T6518] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  363.206121][ T6581] ptrace attach of "/root/syz-executor.3 exec"[5091] was attempted by "/root/syz-executor.3 exec"[6581]
[  363.233858][ T6518] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  363.317499][ T6518] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  363.346375][ T6581] openvswitch: netlink: Flow actions attr not present in new flow.
[  363.391895][ T6518] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  363.535255][ T4714] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  363.716779][ T6581] loop3: detected capacity change from 0 to 2048
[  363.791892][ T6581]  loop3: p1 < > p3
[  363.815167][ T6581] loop3: p3 size 134217728 extends beyond EOD, truncated
[  363.996972][ T4714] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  364.008430][ T4714] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  364.019639][ T4714] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  364.029194][ T4714] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  364.104049][ T4714] usb 2-1: config 0 descriptor??
[  364.110780][ T5094] Bluetooth: hci0: command tx timeout
[  364.474750][ T6518] 8021q: adding VLAN 0 to HW filter on device bond0
[  364.610153][ T6518] 8021q: adding VLAN 0 to HW filter on device team0
[  364.680067][   T25] bridge0: port 1(bridge_slave_0) entered blocking state
[  364.687935][   T25] bridge0: port 1(bridge_slave_0) entered forwarding state
[  364.824685][ T4714] usbhid 2-1:0.0: can't add hid device: -32
[  364.831685][ T4714] usbhid 2-1:0.0: probe with driver usbhid failed with error -32
[  364.855598][   T25] bridge0: port 2(bridge_slave_1) entered blocking state
[  364.863327][   T25] bridge0: port 2(bridge_slave_1) entered forwarding state
[  365.866974][ T6613] loop2: detected capacity change from 0 to 8
[  365.889375][ T6611] loop0: detected capacity change from 0 to 164
[  365.953248][ T6613] SQUASHFS error: xz decompression failed, data probably corrupt
[  365.961808][ T6613] SQUASHFS error: Failed to read block 0x108: -5
[  365.968562][ T6613] SQUASHFS error: Unable to read metadata cache entry [106]
[  365.976263][ T6613] SQUASHFS error: Unable to read inode 0x0
[  366.007730][ T6611] Unable to read rock-ridge attributes
[  366.058131][ T6611] Unable to read rock-ridge attributes
[  366.458338][   T25] usb 2-1: USB disconnect, device number 5
[  366.849793][ T6518] 8021q: adding VLAN 0 to HW filter on device batadv0
[  367.078903][ T6621] loop0: detected capacity change from 0 to 128
[  367.163781][ T6621] efs: Unknown parameter '�G��%d5���g'
[  367.258208][ T6618] loop3: detected capacity change from 0 to 32768
[  367.305109][ T6618] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  367.492252][ T6624] loop2: detected capacity change from 0 to 1024
[  367.653288][ T6624] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  367.740650][ T6618] XFS (loop3): Ending clean mount
[  367.767355][ T6618] XFS (loop3): Quotacheck needed: Please wait.
[  367.800876][ T5062] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0xae/0x2f0, xfs_bnobt block 0x8 
[  367.812756][ T5062] XFS (loop3): Unmount and run xfs_repair
[  367.818808][ T5062] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[  367.826604][ T5062] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  367.835835][ T5062] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[  367.846321][ T5062] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 00 a7 4b ab  ..*.w.B.......K.
[  367.855634][ T5062] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01  ....[.O.........
[  367.869447][ T5062] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00  ...6............
[  367.880275][ T5062] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  367.889543][ T5062] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  367.898794][ T5062] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  367.935116][ T2953] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x354/0x5c0" at daddr 0x8 len 8 error 74
[  367.965060][ T6624] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  367.995847][ T6618] XFS (loop3): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[  368.121217][ T5091] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  368.214079][ T5091] XFS (loop3): Uncorrected metadata errors detected; please run xfs_repair.
[  368.257694][ T5078] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  368.379552][ T6648] loop1: detected capacity change from 0 to 8
[  368.501495][ T6648] fuse: Bad value for 'fd'
[  368.522849][ T6648] cramfs: Error -3 while decompressing!
[  368.529838][ T6648] cramfs: ffffffff93f14698(27)->ffff88805196a000(4096)
[  368.537355][ T6648] cramfs: Error -3 while decompressing!
[  368.543126][ T6648] cramfs: ffffffff93f14698(27)->ffff88805196a000(4096)
[  368.625633][   T29] audit: type=1800 audit(1717902626.264:205): pid=6648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="file0" dev="loop1" ino=244 res=0 errno=0
[  368.906611][ T5062] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  369.267005][ T4714] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  369.315318][ T5062] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  369.326901][ T5062] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  369.336371][ T5062] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  369.373161][ T5062] usb 2-1: config 0 descriptor??
[  369.587944][ T6518] veth0_vlan: entered promiscuous mode
[  369.665046][ T4714] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  369.676596][ T4714] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  369.686926][ T4714] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  369.696377][ T4714] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  369.736514][ T6518] veth1_vlan: entered promiscuous mode
[  369.792790][ T6653] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  369.899114][ T5062] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor
[  369.988382][ T5062] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0004/input/input13
[  370.033930][ T6518] veth0_macvtap: entered promiscuous mode
[  370.061495][ T6518] veth1_macvtap: entered promiscuous mode
[  370.111551][ T5062] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0
[  370.177270][ T5132] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  370.342226][ T6518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  370.353110][ T6518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  370.363567][ T6518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  370.374437][ T6518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  370.384585][ T6518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  370.395645][ T6518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  370.405810][ T6518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  370.416577][ T6518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  370.435513][ T6518] batman_adv: batadv0: Interface activated: batadv_slave_0
[  370.549713][ T6668] loop3: detected capacity change from 0 to 164
[  370.594080][ T6668] Unable to read rock-ridge attributes
[  370.614904][ T6668] Unable to read rock-ridge attributes
[  370.700523][    T8] usb 3-1: USB disconnect, device number 5
[  370.728260][ T6518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  370.745599][ T6518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  370.758876][ T6518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  370.772713][ T6518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  370.774986][ T5132] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  370.782809][ T6518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  370.794564][ T5132] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  370.804432][ T6518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  370.814502][ T5132] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  370.825660][ T6518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  370.825755][ T6518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  370.830847][ T6518] batman_adv: batadv0: Interface activated: batadv_slave_1
[  370.838827][ T5132] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  370.920125][ T6663] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  370.944072][   T43] usb 2-1: USB disconnect, device number 6
[  370.969768][ T6518] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  370.979141][ T6518] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  370.988386][ T6518] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  370.997600][ T6518] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  371.231194][ T6671] loop3: detected capacity change from 0 to 164
[  371.276135][ T6671] Unable to read rock-ridge attributes
[  371.313696][ T6671] Unable to read rock-ridge attributes
[  373.957043][ T6699] loop2: detected capacity change from 0 to 4096
[  373.963880][ T6702] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer.
[  374.104508][ T6707] loop3: detected capacity change from 0 to 2048
[  374.166579][ T6707] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  375.222854][ T6718] loop2: detected capacity change from 0 to 164
[  375.279684][ T6721] loop1: detected capacity change from 0 to 8
[  375.291717][ T6718] Unable to read rock-ridge attributes
[  375.321039][ T6718] Unable to read rock-ridge attributes
[  375.422824][ T6721] fuse: Bad value for 'fd'
[  375.453092][ T6721] cramfs: Error -3 while decompressing!
[  375.459178][ T6721] cramfs: ffffffff93f18698(27)->ffff88804965e000(4096)
[  375.466702][ T6721] cramfs: Error -3 while decompressing!
[  375.472460][ T6721] cramfs: ffffffff93f18698(27)->ffff88804965e000(4096)
[  375.483499][ T6723] loop3: detected capacity change from 0 to 164
[  375.518865][   T29] audit: type=1800 audit(1717902633.194:206): pid=6721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="file0" dev="loop1" ino=244 res=0 errno=0
[  375.541239][ T6723] Unable to read rock-ridge attributes
[  375.590845][ T6723] Unable to read rock-ridge attributes
[  375.925897][ T4714] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  376.291314][ T4395] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  376.299946][ T4395] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  376.436453][ T4714] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  376.447837][ T4714] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  376.457264][ T4714] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  376.495387][ T4714] usb 2-1: config 0 descriptor??
[  376.542436][ T4395] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  376.550889][ T4395] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  377.003946][ T4714] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor
[  377.128718][ T4714] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0005/input/input14
[  377.414125][ T4714] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0
[  377.543114][ T6734] loop4: detected capacity change from 0 to 1024
[  377.570556][ T6731] loop3: detected capacity change from 0 to 65536
[  377.619269][ T6734] EXT4-fs: Ignoring removed i_version option
[  377.639661][ T6731] XFS (loop3): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  377.687121][ T6734] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  377.753644][ T6731] XFS (loop3): Ending clean mount
[  377.763615][ T6731] XFS (loop3): Quotacheck needed: Please wait.
[  377.951358][ T6731] XFS (loop3): Quotacheck: Done.
[  378.129522][   T10] usb 2-1: USB disconnect, device number 7
[  378.188924][ T6518] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  378.361668][ T5062] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  378.574604][ T5062] usb 4-1: device descriptor read/64, error -71
[  378.874804][ T5062] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  379.114728][ T5062] usb 4-1: device descriptor read/64, error -71
[  379.263269][ T5062] usb usb4-port1: attempt power cycle
[  379.427398][ T5091] XFS (loop3): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  380.142165][ T6766] loop2: detected capacity change from 0 to 256
[  380.425077][ T6766] exFAT-fs (loop2): failed to read sector(0x800000078)
[  380.432207][ T6766] exFAT-fs (loop2): failed to load upcase table
[  380.438866][ T6766] exFAT-fs (loop2): failed to recognize exfat type
[  380.624122][ T6770] loop4: detected capacity change from 0 to 164
[  380.652760][ T6770] Unable to read rock-ridge attributes
[  380.672357][ T6770] Unable to read rock-ridge attributes
[  380.689146][   T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  380.934827][   T10] usb 2-1: Using ep0 maxpacket: 16
[  381.097531][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  381.109729][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  381.120153][   T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  381.133438][   T10] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  381.135516][ T6772] loop4: detected capacity change from 0 to 164
[  381.142819][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  381.236556][ T6772] Unable to read rock-ridge attributes
[  381.252345][   T10] usb 2-1: config 0 descriptor??
[  381.265299][ T6772] Unable to read rock-ridge attributes
[  381.299797][ T6774] loop2: detected capacity change from 0 to 256
[  381.409419][ T6774] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 202)
[  381.418155][ T6774] FAT-fs (loop2): Filesystem has been set read-only
[  382.740056][    T8] sound midiC3D0: rawmidi drain error (avail = 4034, buffer_size = 4096)
[  383.381356][ T6781] loop1: detected capacity change from 0 to 1024
[  383.410325][ T6781] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  383.468066][ T6781] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  383.479845][ T6781] EXT4-fs (loop1): orphan cleanup on readonly fs
[  383.487907][ T6781] EXT4-fs error (device loop1): ext4_free_blocks:6576: comm syz-executor.1: Freeing blocks not in datazone - block = 0, count = 4096
[  383.503644][ T6781] EXT4-fs (loop1): 1 orphan inode deleted
[  383.510010][ T6781] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  383.726581][ T5132] usb 1-1: USB disconnect, device number 13
[  384.212192][ T6786] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'.
[  384.343183][ T4714] IPVS: starting estimator thread 0...
[  384.468676][ T6787] IPVS: using max 240 ests per chain, 12000 per kthread
[  386.116219][ T5084] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  386.169310][   T10] usbhid 2-1:0.0: can't add hid device: -71
[  386.176213][   T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  386.192795][ T6797] loop4: detected capacity change from 0 to 8
[  386.213299][   T10] usb 2-1: USB disconnect, device number 8
[  386.425596][ T6797] fuse: Bad value for 'fd'
[  386.488795][ T6797] cramfs: Error -3 while decompressing!
[  386.494874][ T6797] cramfs: ffffffff93f14698(27)->ffff88804f765000(4096)
[  386.508483][ T6797] cramfs: Error -3 while decompressing!
[  386.514879][ T6797] cramfs: ffffffff93f14698(27)->ffff88804f765000(4096)
[  386.580363][   T29] audit: type=1800 audit(1717902644.234:207): pid=6797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="file0" dev="loop4" ino=244 res=0 errno=0
[  386.915362][ T4714] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  386.937085][ T6800] loop3: detected capacity change from 0 to 4096
[  386.987104][ T6800] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512).
[  387.093779][ T6809] loop2: detected capacity change from 0 to 164
[  387.183421][ T6809] Unable to read rock-ridge attributes
[  387.227697][ T6809] Unable to read rock-ridge attributes
[  387.286143][ T4714] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  387.297700][ T4714] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  387.307267][ T4714] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  387.372509][ T4714] usb 5-1: config 0 descriptor??
[  387.374020][ T6800] ntfs3: loop3: ino=1c, "file0" fallocate(0x41) is not supported
[  388.518898][ T6813] loop1: detected capacity change from 0 to 40427
[  388.629223][ T4714] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor
[  388.728184][ T6813] F2FS-fs (loop1): invalid crc value
[  388.826093][ T4714] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0006/input/input15
[  388.853757][ T6813] F2FS-fs (loop1): Found nat_bits in checkpoint
[  388.868608][ T6815] loop2: detected capacity change from 0 to 40427
[  388.981976][ T6815] F2FS-fs (loop2): invalid crc value
[  389.105246][ T6815] F2FS-fs (loop2): Found nat_bits in checkpoint
[  389.173667][ T6813] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  389.276600][ T4714] keytouch 0003:0926:3333.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[  389.415368][ T6815] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  389.438085][ T6829] loop3: detected capacity change from 0 to 8
[  389.809443][ T6830] fuse: Bad value for 'fd'
[  389.853738][   T10] usb 5-1: USB disconnect, device number 3
[  389.917526][ T6830] cramfs: Error -3 while decompressing!
[  389.923423][ T6830] cramfs: ffffffff93f18698(27)->ffff88811e65f000(4096)
[  389.930926][ T6830] cramfs: Error -3 while decompressing!
[  389.936812][ T6830] cramfs: ffffffff93f18698(27)->ffff88811e65f000(4096)
[  390.047032][   T29] audit: type=1800 audit(1717902647.654:208): pid=6830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.3" name="file0" dev="loop3" ino=244 res=0 errno=0
[  390.385016][   T25] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  391.056258][ T4714] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  391.077227][   T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  391.089184][   T25] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  391.098719][   T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  391.162564][   T25] usb 4-1: config 0 descriptor??
[  391.244163][ T6836] loop4: detected capacity change from 0 to 256
[  391.396771][ T4714] usb 1-1: Using ep0 maxpacket: 16
[  391.516032][ T4714] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  391.531011][ T4714] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  391.542167][ T4714] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  391.555640][ T4714] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  391.565144][ T4714] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  391.627222][ T4714] usb 1-1: config 0 descriptor??
[  391.737985][   T25] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor
[  391.780530][   T25] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0007/input/input16
[  392.394071][   T25] keytouch 0003:0926:3333.0007: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0
[  393.761893][ T6846] loop0: detected capacity change from 0 to 1024
[  393.812873][ T6846] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  393.841727][ T6846] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  393.853687][ T6846] EXT4-fs (loop0): orphan cleanup on readonly fs
[  393.863517][ T6846] EXT4-fs error (device loop0): ext4_free_blocks:6576: comm syz-executor.0: Freeing blocks not in datazone - block = 0, count = 4096
[  393.890550][ T6846] EXT4-fs (loop0): 1 orphan inode deleted
[  393.897407][ T6846] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  394.762168][ T6843] loop4: detected capacity change from 0 to 1024
[  395.509170][   T10] usb 4-1: USB disconnect, device number 9
[  396.468219][ T6861] loop2: detected capacity change from 0 to 512
[  396.554928][ T6861] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  396.655176][ T6861] EXT4-fs error (device loop2): __ext4_iget:4913: inode #2: block 33554432: comm syz-executor.2: invalid block
[  396.766600][ T6861] EXT4-fs (loop2): get root inode failed
[  396.772554][ T6861] EXT4-fs (loop2): mount failed
[  396.790543][ T5079] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  396.809317][ T6859] loop1: detected capacity change from 0 to 4096
[  396.855726][ T4714] usbhid 1-1:0.0: can't add hid device: -71
[  396.862666][ T4714] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  396.920210][ T6866] loop4: detected capacity change from 0 to 164
[  396.940954][ T4714] usb 1-1: USB disconnect, device number 14
[  396.960275][ T6859] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  397.034750][ T6866] Unable to read rock-ridge attributes
[  397.044829][ T6859] ntfs3: loop1: Failed to load $MFT (-22).
[  397.080223][ T6865] Unable to read rock-ridge attributes
[  397.365048][ T6861] loop2: detected capacity change from 0 to 1024
[  397.405638][ T6861] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  397.431441][ T6861] JBD2: no valid journal superblock found
[  397.438742][ T6861] EXT4-fs (loop2): Could not load journal inode
[  397.807423][ T6883] binder: 6881:6883 ioctl c00c620f 0 returned -14
[  398.008284][ T6886] binder: 6881:6886 ioctl c00c620f 0 returned -14
[  398.122978][ T6889] loop4: detected capacity change from 0 to 8
[  398.172578][ T6880] loop0: detected capacity change from 0 to 4096
[  398.243094][ T6880] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512).
[  398.305804][ T6889] fuse: Bad value for 'fd'
[  398.331340][ T6889] cramfs: Error -3 while decompressing!
[  398.337736][ T6889] cramfs: ffffffff93f14698(27)->ffff88802321c000(4096)
[  398.345451][ T6889] cramfs: Error -3 while decompressing!
[  398.351200][ T6889] cramfs: ffffffff93f14698(27)->ffff88802321c000(4096)
[  398.360650][   T29] audit: type=1800 audit(1717902656.074:209): pid=6889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="file0" dev="loop4" ino=244 res=0 errno=0
[  398.700610][ T6880] ntfs3: loop0: Failed to initialize $Extend/$Reparse.
[  398.874577][   T25] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  399.209441][ T5062] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  399.288268][   T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  399.299800][   T25] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  399.316177][   T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  399.352531][ T5079] ntfs3: loop0: ino=1a, ntfs_sync_fs failed, -22.
[  399.363631][   T25] usb 5-1: config 0 descriptor??
[  399.544520][ T5062] usb 4-1: Using ep0 maxpacket: 16
[  399.685627][ T5062] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  399.697330][ T5062] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  399.707517][ T5062] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  399.725955][ T5062] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  399.737020][ T5062] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  399.776856][ T6908] loop1: detected capacity change from 0 to 164
[  399.782935][ T5062] usb 4-1: config 0 descriptor??
[  399.833004][ T6908] Unable to read rock-ridge attributes
[  399.877783][   T25] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor
[  399.889018][ T6908] Unable to read rock-ridge attributes
[  399.943290][   T25] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0008/input/input18
[  401.608825][   T25] keytouch 0003:0926:3333.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[  401.938932][ T6919] loop3: detected capacity change from 0 to 1024
[  401.969391][ T6919] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  402.110691][ T6919] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  402.122822][ T6919] EXT4-fs (loop3): orphan cleanup on readonly fs
[  402.140379][ T6919] EXT4-fs error (device loop3): ext4_free_blocks:6576: comm syz-executor.3: Freeing blocks not in datazone - block = 0, count = 4096
[  402.156838][ T6919] EXT4-fs (loop3): 1 orphan inode deleted
[  402.162866][ T6919] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  402.633607][ T4714] usb 5-1: USB disconnect, device number 4
[  403.578160][ T1226] ieee802154 phy0 wpan0: encryption failed: -22
[  403.585867][ T1226] ieee802154 phy1 wpan1: encryption failed: -22
[  404.487237][ T6922] loop1: detected capacity change from 0 to 32768
[  404.500005][ T6922] jfs: Unrecognized mount option "gid=�" or missing value
[  404.975826][ T5062] usbhid 4-1:0.0: can't add hid device: -71
[  404.982603][ T5062] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  405.005256][ T5091] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  405.053910][ T6922] loop1: detected capacity change from 0 to 256
[  405.068526][ T5062] usb 4-1: USB disconnect, device number 10
[  405.095218][   T29] audit: type=1800 audit(1717902662.694:210): pid=6922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1939 res=0 errno=0
[  405.198849][ T6922] FAT-fs (loop1): Directory bread(block 64) failed
[  405.205958][ T6922] FAT-fs (loop1): Directory bread(block 65) failed
[  405.212908][ T6922] FAT-fs (loop1): Directory bread(block 66) failed
[  405.219956][ T6922] FAT-fs (loop1): Directory bread(block 67) failed
[  405.227100][ T6922] FAT-fs (loop1): Directory bread(block 68) failed
[  405.233897][ T6922] FAT-fs (loop1): Directory bread(block 69) failed
[  405.245187][ T6922] FAT-fs (loop1): Directory bread(block 70) failed
[  405.253155][ T6922] FAT-fs (loop1): Directory bread(block 71) failed
[  405.260263][ T6922] FAT-fs (loop1): Directory bread(block 72) failed
[  405.267230][ T6922] FAT-fs (loop1): Directory bread(block 73) failed
[  405.373117][ T6926] Non-string source
[  405.433660][ T6922] loop1: detected capacity change from 0 to 128
[  405.472173][ T6926] veth1_to_bridge: entered promiscuous mode
[  405.502839][ T5062] bridge0: port 2(bridge_slave_1) entered disabled state
[  406.613055][ T3880] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  406.940392][ T3880] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  407.247355][ T6938] loop4: detected capacity change from 0 to 40427
[  407.272912][ T3880] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  407.287872][ T6938] F2FS-fs (loop4): Unrecognized mount option "/proc/capi/capi20ncci" or missing value
[  407.613560][ T6946] loop2: detected capacity change from 0 to 164
[  407.706401][ T3880] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  407.856920][ T6948] loop3: detected capacity change from 0 to 8
[  407.911239][ T6946] Unable to read rock-ridge attributes
[  407.957987][ T6946] Unable to read rock-ridge attributes
[  408.130116][ T3880] bridge_slave_1: left allmulticast mode
[  408.136366][ T3880] bridge_slave_1: left promiscuous mode
[  408.142932][ T3880] bridge0: port 2(bridge_slave_1) entered disabled state
[  408.164530][ T6948] fuse: Bad value for 'fd'
[  408.173890][ T6948] cramfs: Error -3 while decompressing!
[  408.180707][ T6948] cramfs: ffffffff93f18698(27)->ffff888048a72000(4096)
[  408.188323][ T6948] cramfs: Error -3 while decompressing!
[  408.194060][ T6948] cramfs: ffffffff93f18698(27)->ffff888048a72000(4096)
[  408.228715][ T3880] bridge_slave_0: left allmulticast mode
[  408.234954][ T3880] bridge_slave_0: left promiscuous mode
[  408.241490][ T3880] bridge0: port 1(bridge_slave_0) entered disabled state
[  408.261964][ T6951] loop0: detected capacity change from 0 to 64
[  408.325129][   T29] audit: type=1800 audit(1717902665.914:211): pid=6948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.3" name="file0" dev="loop3" ino=244 res=0 errno=0
[  408.376234][ T6951] MINIX-fs: mounting unchecked file system, running fsck is recommended
[  408.664540][  T781] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  409.054483][ T5199] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  409.071638][  T781] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  409.083468][  T781] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  409.093026][  T781] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  409.125271][  T781] usb 4-1: config 0 descriptor??
[  409.201803][ T3880] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  409.304942][ T3880] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  409.324496][ T5199] usb 3-1: Using ep0 maxpacket: 16
[  409.359651][ T3880] bond0 (unregistering): Released all slaves
[  409.487785][ T5199] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  409.499559][ T5199] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  409.509746][ T5199] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  409.523107][ T5199] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  409.532677][ T5199] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  409.562251][ T5199] usb 3-1: config 0 descriptor??
[  409.635959][  T781] keytouch 0003:0926:3333.0009: fixing up Keytouch IEC report descriptor
[  409.725672][  T781] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0009/input/input19
[  410.433502][  T781] keytouch 0003:0926:3333.0009: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0
[  410.790515][ T5080] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  410.800819][ T5080] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  410.817175][ T5080] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  410.842281][ T5080] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  410.885675][ T5080] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  410.899496][ T5080] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  411.066592][   T43] usb 4-1: USB disconnect, device number 11
[  411.075837][ T3880] hsr_slave_0: left promiscuous mode
[  411.133213][ T3880] hsr_slave_1: left promiscuous mode
[  411.166547][ T3880] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  411.175026][ T3880] batman_adv: batadv0: Removing interface: batadv_slave_0
[  411.267563][ T3880] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  411.275426][ T3880] batman_adv: batadv0: Removing interface: batadv_slave_1
[  411.341090][ T3880] veth1_macvtap: left promiscuous mode
[  411.347246][ T3880] veth0_macvtap: left promiscuous mode
[  411.353180][ T3880] veth1_vlan: left promiscuous mode
[  411.358904][ T3880] veth0_vlan: left promiscuous mode
[  412.398766][ T3880] team0 (unregistering): Port device team_slave_1 removed
[  412.486654][ T6979] loop3: detected capacity change from 0 to 256
[  412.490885][ T3880] team0 (unregistering): Port device team_slave_0 removed
[  412.665177][ T6979] FAT-fs (loop3): Unrecognized mount option "shortname��������|��=mixed" or missing value
[  412.984959][ T5094] Bluetooth: hci3: command tx timeout
[  413.806541][ T6988] loop3: detected capacity change from 0 to 164
[  413.985093][ T6988] Unable to read rock-ridge attributes
[  414.062942][ T6988] Unable to read rock-ridge attributes
[  414.337488][ T6967] chnl_net:caif_netlink_parms(): no params data found
[  414.915321][ T5199] usbhid 3-1:0.0: can't add hid device: -32
[  414.921976][ T5199] usbhid 3-1:0.0: probe with driver usbhid failed with error -32
[  415.065777][ T5094] Bluetooth: hci3: command tx timeout
[  415.357230][ T7008] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  415.904097][ T7013] syz-executor.4[7013] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  415.904876][ T7013] syz-executor.4[7013] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  415.974897][ T7015] syz-executor.4[7015] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  416.054525][ T6967] bridge0: port 1(bridge_slave_0) entered blocking state
[  416.074468][ T6967] bridge0: port 1(bridge_slave_0) entered disabled state
[  416.082296][ T6967] bridge_slave_0: entered allmulticast mode
[  416.091742][ T6967] bridge_slave_0: entered promiscuous mode
[  416.096554][ T7017] syz-executor.4 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  416.184799][ T7015] syz-executor.4[7015] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  416.252776][ T6967] bridge0: port 2(bridge_slave_1) entered blocking state
[  416.266183][ T7011] loop0: detected capacity change from 0 to 4096
[  416.285001][ T6967] bridge0: port 2(bridge_slave_1) entered disabled state
[  416.292826][ T6967] bridge_slave_1: entered allmulticast mode
[  416.309880][ T6967] bridge_slave_1: entered promiscuous mode
[  416.315470][ T7011] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512).
[  416.631867][ T6967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  416.723656][ T6967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  416.883203][   T29] audit: type=1800 audit(1717902674.554:212): pid=7011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=33 res=0 errno=0
[  416.904697][   T29] audit: type=1800 audit(1717902674.574:213): pid=7020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=33 res=0 errno=0
[  417.037754][ T6967] team0: Port device team_slave_0 added
[  417.105584][ T6967] team0: Port device team_slave_1 added
[  417.144984][ T5094] Bluetooth: hci3: command tx timeout
[  417.377739][ T6967] batman_adv: batadv0: Adding interface: batadv_slave_0
[  417.386085][ T6967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  417.412734][ T6967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  417.570397][ T6967] batman_adv: batadv0: Adding interface: batadv_slave_1
[  417.578487][ T6967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  417.604954][ T6967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  418.068402][ T6967] hsr_slave_0: entered promiscuous mode
[  418.074466][ T7032] xt_ecn: cannot match TCP bits for non-tcp packets
[  418.116478][ T6967] hsr_slave_1: entered promiscuous mode
[  418.160287][ T6967] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  418.168297][ T6967] Cannot create hsr debugfs directory
[  418.883900][ T7032] loop0: detected capacity change from 0 to 4096
[  418.910205][ T7032] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512).
[  419.212358][ T7032] ntfs3: loop0: Failed to initialize $Extend/$Reparse.
[  419.224668][ T5094] Bluetooth: hci3: command tx timeout
[  419.412085][ T7032] delete_channel: no stack
[  419.568172][ T7042] loop3: detected capacity change from 0 to 164
[  419.625041][ T7042] Unable to read rock-ridge attributes
[  419.644966][ T7042] Unable to read rock-ridge attributes
[  419.669388][ T6967] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  419.756208][ T6967] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  419.815879][ T6967] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  419.888041][ T6967] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  419.970105][ T7045] loop0: detected capacity change from 0 to 8
[  420.022895][ T7045] cramfs: wrong endianness
[  420.471106][ T5199] usb 3-1: USB disconnect, device number 6
[  421.130688][ T7058] loop4: detected capacity change from 0 to 512
[  421.243192][ T7058] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  421.257419][ T7058] ext4 filesystem being mounted at /root/syzkaller-testdir1786218537/syzkaller.Y9R7dY/23/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  421.265073][ T7051] fuse: Bad value for 'fd'
[  421.321642][ T6967] 8021q: adding VLAN 0 to HW filter on device bond0
[  421.662565][ T6967] 8021q: adding VLAN 0 to HW filter on device team0
[  421.836477][  T781] bridge0: port 1(bridge_slave_0) entered blocking state
[  421.844330][  T781] bridge0: port 1(bridge_slave_0) entered forwarding state
[  422.099381][  T781] bridge0: port 2(bridge_slave_1) entered blocking state
[  422.107268][  T781] bridge0: port 2(bridge_slave_1) entered forwarding state
[  422.286841][ T6518] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  422.373225][ T6967] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  422.384394][ T6967] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  423.551875][ T7064] loop2: detected capacity change from 0 to 32768
[  423.569226][ T7064] XFS (loop2): no-recovery mounts must be read-only.
[  423.683453][ T6967] 8021q: adding VLAN 0 to HW filter on device batadv0
[  424.471479][ T7077] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  424.508764][ T7077] loop2: detected capacity change from 0 to 64
[  424.521808][ T7077] minix: Unknown parameter '@'
[  424.686657][ T6967] veth0_vlan: entered promiscuous mode
[  424.795831][ T6967] veth1_vlan: entered promiscuous mode
[  424.930336][ T7080] loop4: detected capacity change from 0 to 1024
[  425.020420][ T7080] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  425.141672][ T6967] veth0_macvtap: entered promiscuous mode
[  425.238752][ T6967] veth1_macvtap: entered promiscuous mode
[  425.260221][ T7085] loop3: detected capacity change from 0 to 164
[  425.348591][ T7085] Unable to read rock-ridge attributes
[  425.368493][ T7085] Unable to read rock-ridge attributes
[  425.375573][ T6518] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  425.458992][ T6967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  425.469905][ T6967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  425.482139][ T6967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  425.493293][ T6967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  425.503442][ T6967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  425.514303][ T6967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  425.526428][ T6967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  425.537805][ T6967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  425.553158][ T6967] batman_adv: batadv0: Interface activated: batadv_slave_0
[  425.661286][ T6967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  425.673034][ T6967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  425.683218][ T6967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  425.693985][ T6967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  425.704132][ T6967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  425.715205][ T6967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  425.731409][ T6967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  425.743902][ T6967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  425.759549][ T6967] batman_adv: batadv0: Interface activated: batadv_slave_1
[  425.933183][ T6967] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  425.942748][ T6967] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  425.951924][ T6967] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  425.961121][ T6967] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  426.283979][ T7101] tracefs: Unknown parameter 'trans'
[  426.305985][  T781] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  426.383211][ T7102] bond_slave_0: entered promiscuous mode
[  426.389438][ T7102] bond_slave_1: entered promiscuous mode
[  426.395941][ T7102] vlan2: entered promiscuous mode
[  426.401204][ T7102] bond0: entered promiscuous mode
[  426.453478][ T7102] bond0: left promiscuous mode
[  426.462341][ T7102] bond_slave_0: left promiscuous mode
[  426.468123][ T7102] bond_slave_1: left promiscuous mode
[  426.569790][  T781] usb 5-1: Using ep0 maxpacket: 16
[  426.715063][  T781] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  426.726656][  T781] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  426.736907][  T781] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  426.755869][  T781] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  426.766830][  T781] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  426.817300][  T781] usb 5-1: config 0 descriptor??
[  428.971233][ T7118] loop4: detected capacity change from 0 to 1024
[  428.992380][ T7118] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  429.121601][ T7118] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  429.132864][ T7118] EXT4-fs (loop4): orphan cleanup on readonly fs
[  429.147459][ T7118] EXT4-fs error (device loop4): ext4_free_blocks:6576: comm syz-executor.4: Freeing blocks not in datazone - block = 0, count = 4096
[  429.197683][ T7118] EXT4-fs (loop4): 1 orphan inode deleted
[  429.205884][ T7118] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  429.469577][ T5132] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  430.102070][ T7121] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
[  430.687815][ T5132] usb 4-1: unable to read config index 0 descriptor/all
[  430.696098][ T5132] usb 4-1: can't read configurations, error -71
[  430.742638][ T7121] loop0: detected capacity change from 0 to 1024
[  431.735698][ T5132] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  432.026983][ T5132] usb 4-1: Using ep0 maxpacket: 8
[  432.156314][ T5132] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  432.167982][ T5132] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  432.179957][ T5132] usb 4-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00
[  432.190001][ T5132] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  432.310076][ T6518] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  432.328129][ T5132] usb 4-1: config 0 descriptor??
[  432.348377][  T781] usbhid 5-1:0.0: can't add hid device: -71
[  432.355634][  T781] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  432.429739][  T781] usb 5-1: USB disconnect, device number 5
[  432.624971][   T29] audit: type=1326 audit(1717902690.284:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7127 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a927cf69 code=0x7ffc0000
[  432.648487][   T29] audit: type=1326 audit(1717902690.304:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7127 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa3a927cf69 code=0x7ffc0000
[  432.672891][   T29] audit: type=1326 audit(1717902690.324:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7127 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a927cf69 code=0x7ffc0000
[  432.700915][   T29] audit: type=1326 audit(1717902690.324:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7127 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa3a927cf69 code=0x7ffc0000
[  432.725702][   T29] audit: type=1326 audit(1717902690.324:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7127 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a927cf69 code=0x7ffc0000
[  432.749040][   T29] audit: type=1326 audit(1717902690.334:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7127 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fa3a927cf69 code=0x7ffc0000
[  432.772442][   T29] audit: type=1326 audit(1717902690.334:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7127 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a927cf69 code=0x7ffc0000
[  432.800239][   T29] audit: type=1326 audit(1717902690.344:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7127 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa3a927cccb code=0x7ffc0000
[  432.825065][   T29] audit: type=1326 audit(1717902690.344:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7127 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa3a927cccb code=0x7ffc0000
[  432.848685][   T29] audit: type=1326 audit(1717902690.364:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7127 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa3a92a8375 code=0x7ffc0000
[  432.907525][ T5132] gt683r_led 0003:1770:FF00.000A: unknown main item tag 0x3
[  432.999366][ T5132] gt683r_led 0003:1770:FF00.000A: hidraw0: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.3-1/input0
[  433.047426][ T7139] loop4: detected capacity change from 0 to 64
[  433.127958][ T7139] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop4
[  433.151623][ T7141] loop0: detected capacity change from 0 to 164
[  433.211604][ T7141] Unable to read rock-ridge attributes
[  433.243484][ T7141] Unable to read rock-ridge attributes
[  433.674109][ T7145] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer.
[  434.338405][  T781] usb 4-1: USB disconnect, device number 13
[  434.359960][   T43] gt683r_led 0003:1770:FF00.000A: failed to send set report request: -19
[  434.830659][ T7158] autofs: Unknown parameter '>�"]m��yW`L'
[  435.105921][   T54] =====================================================
[  435.113255][   T54] BUG: KMSAN: uninit-value in virtqueue_add+0x1e86/0x65c0
[  435.120574][   T54]  virtqueue_add+0x1e86/0x65c0
[  435.125639][   T54]  virtqueue_add_sgs+0x186/0x1b0
[  435.130791][   T54]  virtscsi_add_cmd+0x838/0xad0
[  435.135883][   T54]  virtscsi_queuecommand+0x898/0xa60
[  435.141370][   T54]  scsi_queue_rq+0x4cc7/0x5a80
[  435.146355][   T54]  blk_mq_dispatch_rq_list+0x79b/0x3440
[  435.152188][   T54]  __blk_mq_sched_dispatch_requests+0x11b7/0x26e0
[  435.158855][   T54]  blk_mq_sched_dispatch_requests+0x12f/0x270
[  435.165165][   T54]  blk_mq_run_work_fn+0xd0/0x280
[  435.170329][   T54]  process_scheduled_works+0xa81/0x1bd0
[  435.176115][   T54]  worker_thread+0xea5/0x1560
[  435.180991][   T54]  kthread+0x3e2/0x540
[  435.184933][ T7166] loop4: detected capacity change from 0 to 512
[  435.185198][   T54]  ret_from_fork+0x6d/0x90
[  435.185313][   T54]  ret_from_fork_asm+0x1a/0x30
[  435.201046][   T54] 
[  435.203458][   T54] Uninit was stored to memory at:
[  435.208860][   T54]  copy_page_from_iter_atomic+0x12b7/0x2ae0
[  435.214987][   T54]  generic_perform_write+0x4c1/0xc60
[  435.220508][   T54]  ext4_buffered_write_iter+0x564/0xaa0
[  435.226244][   T54]  ext4_file_write_iter+0x208/0x3450
[  435.231683][   T54]  __kernel_write_iter+0x64d/0xc80
[  435.237056][   T54]  dump_user_range+0x8dc/0xee0
[  435.242017][   T54]  elf_core_dump+0x57c7/0x5ae0
[  435.247056][   T54]  do_coredump+0x32d5/0x4920
[  435.251811][   T54]  get_signal+0x267e/0x2d00
[  435.256486][   T54]  arch_do_signal_or_restart+0x53/0xcb0
[  435.262246][   T54]  syscall_exit_to_user_mode+0x5d/0x160
[  435.267978][   T54]  do_syscall_64+0xdc/0x1e0
[  435.272661][   T54]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  435.278744][   T54] 
[  435.281143][   T54] Uninit was created at:
[  435.285614][   T54]  __alloc_pages+0x9d6/0xe70
[  435.290358][   T54]  alloc_pages_mpol+0x299/0x990
[  435.295371][   T54]  alloc_pages+0x1bf/0x1e0
[  435.299969][   T54]  dump_user_range+0x4a/0xee0
[  435.304821][   T54]  elf_core_dump+0x57c7/0x5ae0
[  435.309777][   T54]  do_coredump+0x32d5/0x4920
[  435.314536][   T54]  get_signal+0x267e/0x2d00
[  435.319198][   T54]  arch_do_signal_or_restart+0x53/0xcb0
[  435.324979][   T54]  syscall_exit_to_user_mode+0x5d/0x160
[  435.330716][   T54]  do_syscall_64+0xdc/0x1e0
[  435.335404][   T54]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  435.341486][   T54] 
[  435.343885][   T54] Bytes 0-1023 of 1024 are uninitialized
[  435.349639][   T54] Memory access of size 1024 starts at ffff8880465dac00
[  435.356677][   T54] 
[  435.359080][   T54] CPU: 1 PID: 54 Comm: kworker/1:1H Tainted: G        W          6.9.0-syzkaller-02707-g614da38e2f7a #0
[  435.370353][   T54] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[  435.380803][   T54] Workqueue: kblockd blk_mq_run_work_fn
[  435.386622][   T54] =====================================================
[  435.393640][   T54] Disabling lock debugging due to kernel taint
[  435.399890][   T54] Kernel panic - not syncing: kmsan.panic set ...
[  435.406400][   T54] CPU: 1 PID: 54 Comm: kworker/1:1H Tainted: G    B   W          6.9.0-syzkaller-02707-g614da38e2f7a #0
[  435.417674][   T54] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[  435.427863][   T54] Workqueue: kblockd blk_mq_run_work_fn
[  435.433596][   T54] Call Trace:
[  435.436967][   T54]  <TASK>
[  435.439991][   T54]  dump_stack_lvl+0x216/0x2d0
[  435.444865][   T54]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  435.450856][   T54]  dump_stack+0x1e/0x30
[  435.455201][   T54]  panic+0x4e2/0xcd0
[  435.459285][   T54]  ? kmsan_get_metadata+0xf1/0x1d0
[  435.464580][   T54]  kmsan_report+0x2d5/0x2e0
[  435.469242][   T54]  ? kmsan_get_metadata+0x146/0x1d0
[  435.474604][   T54]  ? kmsan_internal_set_shadow_origin+0x66/0xe0
[  435.481064][   T54]  ? kmsan_internal_check_memory+0x48c/0x560
[  435.487344][   T54]  ? kmsan_handle_dma+0xac/0xc0
[  435.492349][   T54]  ? virtqueue_add+0x1e86/0x65c0
[  435.497559][   T54]  ? virtqueue_add_sgs+0x186/0x1b0
[  435.502862][   T54]  ? virtscsi_add_cmd+0x838/0xad0
[  435.508069][   T54]  ? virtscsi_queuecommand+0x898/0xa60
[  435.513709][   T54]  ? scsi_queue_rq+0x4cc7/0x5a80
[  435.518822][   T54]  ? blk_mq_dispatch_rq_list+0x79b/0x3440
[  435.524757][   T54]  ? __blk_mq_sched_dispatch_requests+0x11b7/0x26e0
[  435.531568][   T54]  ? blk_mq_sched_dispatch_requests+0x12f/0x270
[  435.538019][   T54]  ? blk_mq_run_work_fn+0xd0/0x280
[  435.543293][   T54]  ? process_scheduled_works+0xa81/0x1bd0
[  435.549189][   T54]  ? worker_thread+0xea5/0x1560
[  435.554276][   T54]  ? kthread+0x3e2/0x540
[  435.558691][   T54]  ? ret_from_fork+0x6d/0x90
[  435.563441][   T54]  ? ret_from_fork_asm+0x1a/0x30
[  435.568564][   T54]  ? scsi_queue_rq+0x4335/0x5a80
[  435.573673][   T54]  ? blk_mq_dispatch_rq_list+0x79b/0x3440
[  435.579602][   T54]  ? __blk_mq_sched_dispatch_requests+0x11b7/0x26e0
[  435.586401][   T54]  ? blk_mq_sched_dispatch_requests+0x12f/0x270
[  435.592846][   T54]  ? blk_mq_run_work_fn+0xd0/0x280
[  435.598130][   T54]  ? process_scheduled_works+0xa81/0x1bd0
[  435.604025][   T54]  ? worker_thread+0xea5/0x1560
[  435.609046][   T54]  ? kthread+0x3e2/0x540
[  435.613555][   T54]  ? ret_from_fork+0x6d/0x90
[  435.618303][   T54]  ? ret_from_fork_asm+0x1a/0x30
[  435.623512][   T54]  ? kmsan_get_metadata+0x146/0x1d0
[  435.628885][   T54]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  435.634884][   T54]  ? kmsan_get_metadata+0x146/0x1d0
[  435.640244][   T54]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  435.646231][   T54]  ? should_fail_ex+0x4a/0x800
[  435.651198][   T54]  ? kmsan_get_metadata+0x146/0x1d0
[  435.656559][   T54]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  435.662541][   T54]  ? kmsan_get_metadata+0x146/0x1d0
[  435.667910][   T54]  kmsan_internal_check_memory+0x48c/0x560
[  435.673949][   T54]  kmsan_handle_dma+0xac/0xc0
[  435.678797][   T54]  virtqueue_add+0x1e86/0x65c0
[  435.683773][   T54]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  435.689759][   T54]  ? kmsan_get_metadata+0x146/0x1d0
[  435.695132][   T54]  ? kmsan_get_metadata+0x146/0x1d0
[  435.700518][   T54]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  435.706529][   T54]  virtqueue_add_sgs+0x186/0x1b0
[  435.711666][   T54]  virtscsi_add_cmd+0x838/0xad0
[  435.716742][   T54]  virtscsi_queuecommand+0x898/0xa60
[  435.722247][   T54]  ? __pfx_virtscsi_queuecommand+0x10/0x10
[  435.728236][   T54]  scsi_queue_rq+0x4cc7/0x5a80
[  435.733212][   T54]  ? __pfx_scsi_queue_rq+0x10/0x10
[  435.738496][   T54]  blk_mq_dispatch_rq_list+0x79b/0x3440
[  435.744262][   T54]  ? sbitmap_get+0x430/0x670
[  435.749031][   T54]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  435.755046][   T54]  ? dd_dispatch_request+0x9a1/0xa20
[  435.760539][   T54]  __blk_mq_sched_dispatch_requests+0x11b7/0x26e0
[  435.767183][   T54]  ? finish_task_switch+0x1c8/0x8f0
[  435.772588][   T54]  ? __blk_mq_sched_dispatch_requests+0x1031/0x26e0
[  435.779405][   T54]  blk_mq_sched_dispatch_requests+0x12f/0x270
[  435.785696][   T54]  blk_mq_run_work_fn+0xd0/0x280
[  435.790811][   T54]  ? __pfx_blk_mq_run_work_fn+0x10/0x10
[  435.796539][   T54]  process_scheduled_works+0xa81/0x1bd0
[  435.802302][   T54]  worker_thread+0xea5/0x1560
[  435.807155][   T54]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  435.813156][   T54]  kthread+0x3e2/0x540
[  435.817411][   T54]  ? __pfx_worker_thread+0x10/0x10
[  435.822715][   T54]  ? __pfx_kthread+0x10/0x10
[  435.827513][   T54]  ret_from_fork+0x6d/0x90
[  435.832131][   T54]  ? __pfx_kthread+0x10/0x10
[  435.836922][   T54]  ret_from_fork_asm+0x1a/0x30
[  435.841897][   T54]  </TASK>
[  437.248569][   T54] Shutting down cpus with NMI
[  437.253501][   T54] Kernel Offset: disabled
[  437.257890][   T54] Rebooting in 86400 seconds..