last executing test programs:

7m4.706783736s ago: executing program 32 (id=343):
r0 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88000)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001280)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x10, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea80000000000000000000000deff0000000000000000000000000000000800", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}})

7m3.185979425s ago: executing program 33 (id=350):
symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp'])

6m30.516444413s ago: executing program 6 (id=450):
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x45050, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0xd0fa2fe0fef57559, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$netlink(r3, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000080)=ANY=[@ANYBLOB], 0x1c}], 0x1}, 0x0)

6m25.737586752s ago: executing program 6 (id=466):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='mm_page_alloc\x00'}, 0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
request_key(0x0, &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000500)={@dev, @multicast1}, 0x0)
sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, 0x0, 0x40)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bf"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0)
unlink(&(0x7f0000000080)='./file1\x00')

6m24.075991963s ago: executing program 6 (id=470):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x35623}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000841}, 0x4)

6m22.405096914s ago: executing program 6 (id=474):
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f0000001900)=ANY=[], 0xfd, 0x222, &(0x7f00000016c0)="$eJzs2k2LW2UUB/Bz25HWKdNEfKMF8UE3urk0Wblw0UFaEAOKNoIK0lvnRkMyyZAbBiLSzs6tH8G1uHQnSL/AbPwEXbibzSy7EK+0KZ0X4mIQJ9j5/TY5cPKH5+FcLmdx9979YXPQq/JeMY1zWRYr12MnHmbRjHNxPuZ24u277zx47ZPPPv9gvdO58XFKN9dvtdoppcuv//bFdz+/cX966dNfLv96IXabX+7tt//YfWX3yt5ft77pV6lfpdF4mop0ZzyeFneGZdroV4M8pY+GZVGVqT+qysmRfm843tqapWK0sba6NSmrKhWjWRqUszQdp+lkloqvi/4o5Xme1laDf6P708O6jv36udtR1/XzP8al+7H2IBqRvZCyF69nL9/OXt3JruzXdWPZR+U/Yf5nm/mfbeZ/th1a6i5GbH6/3d3uzn/n/fVe9GMYZVyLRvwZjx6TJ+b1zfc7N66lx5qRNu89yd/b7p4/mm9FI5qL8615Ph3NX4jVw/l2NOKlxfn2wvzFeOvNQ/k8GvH7VzGOYWzEo+xB/m4rpfc+7BzLX338PwCAZ02enlq4v+X5P/Xn+RPsh8f2q5W4urLcuxNRzb4dFMNhOVEoFIqnxbLfTJyGg6Ev+yQAAAAAAAAAAACcxGl8TrjsOwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/w9/BwAA///8j/If")
chdir(&(0x7f0000004340)='./file0\x00')
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$binfmt_elf64(r0, &(0x7f00000006c0)=ANY=[], 0xfd14)
mknod(&(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0)

6m21.88250132s ago: executing program 6 (id=477):
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x45050, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0xd0fa2fe0fef57559, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$netlink(r3, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000080)=ANY=[@ANYBLOB], 0x1c}], 0x1}, 0x0)

6m20.692990265s ago: executing program 6 (id=484):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001a80)={0x4, 0x0, &(0x7f0000001900)=[@enter_looper], 0x1, 0x0, &(0x7f0000000040)="a1"})
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

6m20.587106377s ago: executing program 34 (id=484):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001a80)={0x4, 0x0, &(0x7f0000001900)=[@enter_looper], 0x1, 0x0, &(0x7f0000000040)="a1"})
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

5m54.233610885s ago: executing program 3 (id=598):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x1, @empty}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0x2, 0x0, 0x0, @dev, 0x6}}, 0x5, 0x3, 0x0, 0x0, 0x54}, 0x9c)

5m53.185893368s ago: executing program 3 (id=600):
sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, 0x0, 0x24044411)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x40, 0x13, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x102}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x40}}, 0x0)

5m51.665535117s ago: executing program 3 (id=607):
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), 0xffffffffffffffff)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
sendmmsg$inet6(r0, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f0000000340)="84", 0x1}], 0x2}}], 0x1, 0x4400c800)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
r2 = socket$kcm(0xa, 0x6, 0x0)
setsockopt$sock_attach_bpf(r2, 0x10d, 0xa, &(0x7f0000000000), 0x4)
sendto$inet6(r0, &(0x7f0000000280)="8820dd4bbf1b0dce338fdd47f9606178fd47a144dee798ae33bc", 0x1a, 0x3b80, 0x0, 0x0)

5m50.212842446s ago: executing program 3 (id=612):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x810000, &(0x7f0000000040)={[{@auto_da_alloc}]}, 0x3, 0x4d4, &(0x7f0000000340)="$eJzs3E9sFNUfAPDvbLu0wI8fFREFUYpobExsofw9eMFo4kETIx702LSVIAUM7UEIkZIYPBoS78aj8ebBq3oznky84sGDiSEhhgvgxTGzO9Nu90+7C22Xup9PMu17M2/mvTfz3uzbebsbQM8azv4kEf+LiJsRsb0aXZpguPrv3p0rk/fvXJmM+TQ99VdSSXc3i+eK/bbmkZFSROnTpO6AVbOXLp+dmJmZvpjHx+bOfTQ2e+nyy2fOTZyePj19fvzEiSOHDx0/Nn6080o1yS+r1909n1zYu/uN92+8NdlfrB/M/9fWo6X+zooxvMy2Fzo71CNvW004aTxPV9e1MLRtMG/W5Ur/3x59nTZyYMNK0zQdaL15Pq13rWENsGEl0e0SAN1RvNBn73+LZZ2GHo+E2yerb4Cyet/Ll+qW/ijlacp1729X03BEvDf/95fZEss9h/h9jQoAAPScH04WI8H68V8pdtWk+38+hzIUEY9FxI6IeDwidkbEExGVtE9GxFP1GSQR6TL576yLN45/Srcepn4rycZ/r+RzW0vHf8XoL4b68ti2iGLAPH0wPycjUR744MzM9KFl8vjxtV8/b7WtdvyXLVn+xVgwL8et/roHdFMTcxMPXOE6t69F7Omvr3/Sn124YiYgiYjdEbGng+MO1YTPvPT13oVIeWm6letfkTaZ0ut4Pq6Z9KuIF6vXfz6WXP/FHJPW85P/HBs/OjYYM9MHx7JWkLWK2FSfx8+/XH+7Vf4r1v+7P+p3ef3496cevuK57PpvqWn/UczfLtZ/KIlIFuZrZzvP4/pvn1WOO3ygcduDtv9NybuVcHGyP56Ym7t4KGJT8mbj+vHFfYt4kT6r/8iB5v1/R34WsuXpiMga8TMR8WxE7MvLvj8inouIJlVb8NOrz3/Yalub7X/NZPWfanr/W3L9F+fr2wwUO2dr+s7uv3m/xc2jvet/pBIaydc0v/8lS24R7Zb04c4eAAAAbAylqHz2vzS6EC6VRkerz4B2xpbSzIXZuX0RcX6q+h2BoSiXiidd1efB5aR4/jlUEx+vix/Onxt/0be5Eh+dvDAz1e3KQ4/bWunzSUP/z/zZ1+3SAWvOV36gd63U/3fdWKeCAOvO6z/0rpr+P98iybxPysB/k9d/6F3N+v/V+Kbhg+wr7QNsLKm+DD1N/4fe1R/vLIRLXS0JsN46ev3fvnblANZVp9/r7yyQDjTfNBhNfjFgcG2KsblJXl0JZCOrVTxgOSLaS7z5QbIofk2h9S88lDo74EA0buqL5fZKOvgdhyKQnZUVE5/eteqNP80/K7/azebbxX5abvNyr1KgK7cjAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAVfdvAAAA//8XK9av")
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x10)
creat(&(0x7f0000000040)='./bus\x00', 0x120)
mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000240)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0)
syz_clone(0x40043400, 0x0, 0x0, 0x0, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000080), 0x208e24b)
getdents64(r0, 0x0, 0x0)

5m48.26116535s ago: executing program 3 (id=618):
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000340)={0x7ff, 0xa757, {0x51, 0x800, 0x6, {0x0, 0xfff9}, {0x80, 0x2}, @const={0x4, {0xc, 0xd, 0x81, 0x8}}}, {0x54, 0xd, 0x7, {0x5, 0x4}, {0x4, 0xffff}, @cond=[{0xfff7, 0x0, 0xafe2, 0x3ff, 0x3, 0x3}, {0x200, 0x5, 0x3, 0xd471, 0x2, 0x2}]}})
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x40)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000fcffffff000000000000000085"], 0x0, 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)

5m47.801771736s ago: executing program 3 (id=621):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
setitimer(0x0, 0xfffffffffffffffe, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00'})
read$nci(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8)
accept4(r3, 0x0, 0x0, 0x80000)
sendto$inet6(0xffffffffffffffff, &(0x7f00000022c0)="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", 0xb99, 0x4, 0x0, 0x0)

5m47.589666538s ago: executing program 35 (id=621):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
setitimer(0x0, 0xfffffffffffffffe, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00'})
read$nci(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8)
accept4(r3, 0x0, 0x0, 0x80000)
sendto$inet6(0xffffffffffffffff, &(0x7f00000022c0)="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", 0xb99, 0x4, 0x0, 0x0)

5m6.143790645s ago: executing program 7 (id=893):
syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x800)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="b0"], 0xb0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
statfs(&(0x7f00000001c0)='./file0\x00', 0x0)

5m4.725639433s ago: executing program 7 (id=906):
ioprio_get$uid(0x3, 0x0)

5m4.481660496s ago: executing program 7 (id=913):
socket$nl_generic(0x11, 0x3, 0x10)
r0 = fsopen(&(0x7f0000000000)='jfs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='resize', &(0x7f0000000100)='0', 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$alg(0x26, 0x5, 0x0)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000001800)={0x0, 0x0, 0x0}, 0xae1e003fa9d5a544)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x4000880)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000841, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
open(0x0, 0x10241, 0x0)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e000400020000000010000300"], 0x6c}}, 0x0)
setreuid(0xffffffffffffffff, 0xee00)
keyctl$setperm(0x5, 0x0, 0x220c)
add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0xfffffe00, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff)

5m3.28317673s ago: executing program 7 (id=917):
write$UHID_CREATE(0xffffffffffffffff, 0x0, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$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")
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x185641, 0x0)
r1 = open(&(0x7f00000003c0)='./bus\x00', 0x84902, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r1, 0x0)
write$FUSE_ATTR(r0, &(0x7f0000000440)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0xffffffffff7ffffe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000}}}, 0x78)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x400, 0x9, 0x0, 0x2, 0x7ff})

5m2.462539791s ago: executing program 7 (id=925):
socket$nl_route(0x10, 0x3, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x580, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20008004}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x90, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000140)={0x100, 0x640, &(0x7f0000000240), 0x0})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2, 0x0, 0x8}, 0x18)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x4000080)

5m1.605326332s ago: executing program 7 (id=936):
mkdir(&(0x7f00000000c0)='./cgroup/../file0\x00', 0x70)
creat(&(0x7f0000000100)='./cgroup/../file0\x00', 0x8)

5m1.174681577s ago: executing program 36 (id=936):
mkdir(&(0x7f00000000c0)='./cgroup/../file0\x00', 0x70)
creat(&(0x7f0000000100)='./cgroup/../file0\x00', 0x8)

4m42.982227524s ago: executing program 8 (id=1019):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x20, 0x0, 0x9, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x4c040)

4m42.909478605s ago: executing program 8 (id=1020):
socket$inet(0x2, 0x1, 0x0)
syz_mount_image$ext4(&(0x7f00000006c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000000), 0xfe, 0x264, &(0x7f0000000700)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0)
ioctl(r0, 0x1, &(0x7f0000000080))

4m42.757774117s ago: executing program 8 (id=1021):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

4m42.53015909s ago: executing program 8 (id=1027):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil)
r1 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0)
write$binfmt_script(r1, &(0x7f0000000080), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

4m39.112981952s ago: executing program 8 (id=1043):
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x10c42, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"/797], 0x1, 0x27a, &(0x7f0000000540)="$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")
r0 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x4000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000580)='gid', 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x82000804)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0)
open(0x0, 0x4a0540, 0xc0)
getresuid(&(0x7f00000000c0), &(0x7f00000001c0)=<r4=>0x0, 0x0)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
fchown(0xffffffffffffffff, r4, r5)
open$dir(0x0, 0x0, 0x0)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
syslog(0x3, &(0x7f0000000140)=""/201, 0xc9)

4m38.446807551s ago: executing program 8 (id=1050):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x320001a, &(0x7f0000001e80)=ANY=[@ANYBLOB="7379735f696d6d757461626c652c646d61736b3d30313737373737373737373737373737373737373737332c73686f72746e616d653d6c6f7765722c636865636b3d7374726963742c2c756e695f786c6174653d302c726f6469722c726f6469722c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c756e695f786c6174653d312c756e695f786c6174653d312c6572726f72733d636f6e74696e75650000000000000003667365743d30121df478303030383030303030303030303465302c757466383d302c0077b5b28056fc4549d277ed7fab6b0be27ef17f888ccab55cccc917ad315c8ea56f5a89c104f92d058b92f5881e69e06002f5914c03fefbeb09121733eaf5ded73df976fbd4cfcb8b70b0bf44da1b46bc3935431d5e60a641f9e4ebbf71c77fc9a810ce726b8c6d6295a5f2e2b069b95ba8ecce52ded99b82923228c37d5e1ec11cdbcabb8a89cbf2cf2771d69e3cf0e676cc6e5b2e542e426bceaab9b2cf261046247bce0565d13a6ca8137aba85fe39756814fda1f0624b33a2025792a477ccfff09befb1d0cf1599d272628028b9786e1fbfb3d637c2561421488c9de8d3739a94bf13ac582f6b67de0cad933631794271b2259fe5d73a74ad7da615c31505c7c0c168052d38e5b64c4bb7d0599e5dcf0000000000000000000000000000002790cf17418aa278cfc0c9d1c81c63e58b877706a4b7eed8a5aff253298db2939adc0efdab4745ab0e09ef8beaaf04e5374c2e7e4656e47fe5a25502919954242f8d771fc2acf14f2cee04696a9d84091f20646210edf871d3f20ad66fcf4b816323b8abb307381d32da887dcc71e35f364baa1b93fd5ee36c02aa4628511442992ced893ab924472440b53fc08cc41403e167b1f2605e04d5f0c16ed49969b59d650d88642b10c7893f64421a40f4822ffcc284dfe9ae1c6e4a04293c970f2dae776decf07b085eb5fdeda7d365b0f86c7fcd8df00a87f4dbbf8e623667e3b65e4c487055a2e5cd64402a4de537bf113fc7370099e4faebe6ea9d4f155f8f5f4c5f9b205ce1bbc8c0002a19457e05a210d9e9820bc7f318ebfdfcc22f83150503b2c7fb0340a249135057f87882717e166ef509c14fdcf38f63141e4ed36737c6e55498b350f41c8caed3e347c149162b4c6ed629be8eaaa25d59747816197aff2cf68a42d73e8146c72fedb130521de285872a4ca5353cc354a0b0e2ce57275b34276d28d91b2c0c2fa1041f818ea96f65a3000057dfb8858cfd194f7431e4b734f848268c5a000f01000000010000000360236584faaf1a4d4fabd3b68929729fd006fa91186ac3d0d222e00c77ad726cdc16c8456d6f598254bda7c72b24a6b213162cd6e6f205d16a083b5bf85cd0ea669c5fb5535a49d95389c186be0d5d6aaf673c3b675e34dbc89407aa23b2cd4f0d7674421b4896983d7958b0cf1c7c1322b944e316711ed73c720ac25fea464ea96fdf6be3f67430188cb9f1ea81316df61c875ff59c8ffa9ffe954ccb28f037ca003109618cff0ec917fc7abe19b6a10a0eae6c72b067e29580d666042466d68ce5d192fae5bdea0b94a9bfbd0efae746ff081eb028e5566a25db8f43ddd07c39db9bed54a8a9d5763d42", @ANYRES16], 0xfc, 0x2b6, &(0x7f00000007c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
creat(&(0x7f0000000300)='./file0\x00', 0xc3)
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = socket(0x10, 0x80002, 0x0)
write$P9_RLERRORu(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r2, @ANYRESDEC], 0x52)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}})

4m38.279105883s ago: executing program 37 (id=1050):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x320001a, &(0x7f0000001e80)=ANY=[@ANYBLOB="7379735f696d6d757461626c652c646d61736b3d30313737373737373737373737373737373737373737332c73686f72746e616d653d6c6f7765722c636865636b3d7374726963742c2c756e695f786c6174653d302c726f6469722c726f6469722c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c756e695f786c6174653d312c756e695f786c6174653d312c6572726f72733d636f6e74696e75650000000000000003667365743d30121df478303030383030303030303030303465302c757466383d302c0077b5b28056fc4549d277ed7fab6b0be27ef17f888ccab55cccc917ad315c8ea56f5a89c104f92d058b92f5881e69e06002f5914c03fefbeb09121733eaf5ded73df976fbd4cfcb8b70b0bf44da1b46bc3935431d5e60a641f9e4ebbf71c77fc9a810ce726b8c6d6295a5f2e2b069b95ba8ecce52ded99b82923228c37d5e1ec11cdbcabb8a89cbf2cf2771d69e3cf0e676cc6e5b2e542e426bceaab9b2cf261046247bce0565d13a6ca8137aba85fe39756814fda1f0624b33a2025792a477ccfff09befb1d0cf1599d272628028b9786e1fbfb3d637c2561421488c9de8d3739a94bf13ac582f6b67de0cad933631794271b2259fe5d73a74ad7da615c31505c7c0c168052d38e5b64c4bb7d0599e5dcf0000000000000000000000000000002790cf17418aa278cfc0c9d1c81c63e58b877706a4b7eed8a5aff253298db2939adc0efdab4745ab0e09ef8beaaf04e5374c2e7e4656e47fe5a25502919954242f8d771fc2acf14f2cee04696a9d84091f20646210edf871d3f20ad66fcf4b816323b8abb307381d32da887dcc71e35f364baa1b93fd5ee36c02aa4628511442992ced893ab924472440b53fc08cc41403e167b1f2605e04d5f0c16ed49969b59d650d88642b10c7893f64421a40f4822ffcc284dfe9ae1c6e4a04293c970f2dae776decf07b085eb5fdeda7d365b0f86c7fcd8df00a87f4dbbf8e623667e3b65e4c487055a2e5cd64402a4de537bf113fc7370099e4faebe6ea9d4f155f8f5f4c5f9b205ce1bbc8c0002a19457e05a210d9e9820bc7f318ebfdfcc22f83150503b2c7fb0340a249135057f87882717e166ef509c14fdcf38f63141e4ed36737c6e55498b350f41c8caed3e347c149162b4c6ed629be8eaaa25d59747816197aff2cf68a42d73e8146c72fedb130521de285872a4ca5353cc354a0b0e2ce57275b34276d28d91b2c0c2fa1041f818ea96f65a3000057dfb8858cfd194f7431e4b734f848268c5a000f01000000010000000360236584faaf1a4d4fabd3b68929729fd006fa91186ac3d0d222e00c77ad726cdc16c8456d6f598254bda7c72b24a6b213162cd6e6f205d16a083b5bf85cd0ea669c5fb5535a49d95389c186be0d5d6aaf673c3b675e34dbc89407aa23b2cd4f0d7674421b4896983d7958b0cf1c7c1322b944e316711ed73c720ac25fea464ea96fdf6be3f67430188cb9f1ea81316df61c875ff59c8ffa9ffe954ccb28f037ca003109618cff0ec917fc7abe19b6a10a0eae6c72b067e29580d666042466d68ce5d192fae5bdea0b94a9bfbd0efae746ff081eb028e5566a25db8f43ddd07c39db9bed54a8a9d5763d42", @ANYRES16], 0xfc, 0x2b6, &(0x7f00000007c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
creat(&(0x7f0000000300)='./file0\x00', 0xc3)
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = socket(0x10, 0x80002, 0x0)
write$P9_RLERRORu(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r2, @ANYRESDEC], 0x52)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}})

4m2.035107555s ago: executing program 1 (id=1236):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x8)
write$uinput_user_dev(r0, &(0x7f0000000840)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x10, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x3], [0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x3, 0x0, 0x4, 0x0, 0xffeffffe, 0x0, 0x800005], [0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5b2bb47c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x20], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c)

4m1.933696706s ago: executing program 1 (id=1239):
openat(0xffffffffffffff9c, &(0x7f00000012c0)='.\x00', 0x0, 0xc2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0)
write$FUSE_CREATE_OPEN(r3, 0x0, 0x0)
ioprio_get$uid(0x3, 0x0)

4m0.645788292s ago: executing program 1 (id=1242):
syz_usb_connect$uac1(0x0, 0x93, &(0x7f0000001340)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x3, 0x1, 0x9, 0x0, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xba9f, 0x6}, [@processing_unit={0xc, 0x24, 0x7, 0x5, 0x1, 0x8, "56ce87ce64"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x4, 0x8, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x6, 0x8, 0x9, {0x7, 0x25, 0x1, 0x82, 0x8, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x4, 0xfb, 0x2}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x9b, 0x2, 0x6, 0x6}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x3, 0x5, 0x0, {0x7, 0x25, 0x1, 0x84, 0x80, 0x3}}}}}}}]}}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0})
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
mount$9p_fd(0x0, 0x0, 0x0, 0x8081, 0x0)

3m57.494830002s ago: executing program 1 (id=1256):
syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x801, &(0x7f0000000040)=ANY=[], 0x4, 0x17e, &(0x7f0000000500)="$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")
pipe2$9p(&(0x7f0000001900)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}})
chmod(&(0x7f0000000140)='./file0\x00', 0x0)

3m56.555540243s ago: executing program 1 (id=1259):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x3000046, &(0x7f0000000840)={[{@nombcache}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nomblk_io_submit}, {@user_xattr}, {@bh}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}]}, 0x1, 0x553, &(0x7f0000000200)="$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")
r0 = open(&(0x7f0000000480)='./bus\x00', 0x14927e, 0x0)
pipe(&(0x7f0000002480)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
splice(r0, 0x0, r1, 0x0, 0x20000000007, 0xf)

3m54.467197749s ago: executing program 1 (id=1264):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000040)={0x1, 0x8, 0x5, 0x5181, @vifc_lcl_addr=@loopback, @remote}, 0x10)

3m53.169073775s ago: executing program 38 (id=1264):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000040)={0x1, 0x8, 0x5, 0x5181, @vifc_lcl_addr=@loopback, @remote}, 0x10)

13.414009753s ago: executing program 9 (id=2043):
r0 = userfaultfd(0x801)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1438192441010002e29f050000000001d8539000d96a2a7f373f3232198a20c8dfc626872f65c95e3241e46a63dc3408f2f80871fd8dc42450daa0e133369faec7fda68587937657ba"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x2000)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
openat$nvram(0xffffffffffffff9c, &(0x7f00000014c0), 0x40280, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000003c0)=""/142, 0x8e}], 0x1, &(0x7f0000000340)=""/21, 0x15}, 0x9}, {{&(0x7f0000000500)=@qipcrtr, 0x80, &(0x7f0000000680)=[{&(0x7f0000000580)=""/114, 0x72}, {&(0x7f0000000a80)=""/83, 0x53}, {&(0x7f0000001500)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000880)=""/234, 0xea}], 0x5}, 0x1}], 0x2, 0x41, &(0x7f0000001480)={0x77359400})
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f0000000000)={0x3, 0x203, 0x8000000000000000, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x10000000}, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r3}, 0x8)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x3, @empty}, 0x1c)
sendto$inet6(r2, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, &(0x7f0000000c80)='|', 0x1, 0xbcff, 0x0, 0x0)
r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, 0x0)
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x210080, 0x0)
writev(r2, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x34000}], 0x1)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
socket$inet6_udp(0xa, 0x2, 0x0)

12.794043471s ago: executing program 9 (id=2047):
socket$inet6(0xa, 0x5, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
socket$rds(0x15, 0x5, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x2a, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_smc(0x2b, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
socket$inet(0x2, 0x4000000805, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fcfc0000080011000000000008000e0080", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

12.668070842s ago: executing program 9 (id=2049):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = fcntl$getown(r0, 0x9)
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, 0x0, 0x0)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0)
r6 = dup(r5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r6, 0x0)
ioctl$BLKRRPART(r6, 0x125f, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
gettid()
getdents64(0xffffffffffffffff, &(0x7f0000000200)=""/55, 0x37)
read$FUSE(r6, &(0x7f00000038c0)={0x2020}, 0x2020)
timer_create(0x0, 0x0, 0x0)

12.05731011s ago: executing program 9 (id=2052):
openat(0xffffffffffffff9c, &(0x7f00000012c0)='.\x00', 0x0, 0xc2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r1 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0)
write$FUSE_CREATE_OPEN(r1, 0x0, 0x0)
ioprio_get$uid(0x3, 0x0)

11.330039419s ago: executing program 9 (id=2056):
userfaultfd(0x80001)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
pipe(0x0)
pipe(&(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$binfmt_misc(r3, &(0x7f00000000c0), 0xfdef)
syz_fuse_handle_req(r2, 0x0, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
fanotify_init(0x10, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
set_mempolicy(0x1, 0x0, 0x3ff)

9.326447604s ago: executing program 9 (id=2060):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCFLSH(r0, 0x400455c8, 0x4)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x32)

8.418768005s ago: executing program 0 (id=2064):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0)
ftruncate(r0, 0x8800000)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45)
read$FUSE(r4, &(0x7f0000005200)={0x2020}, 0xffffff53)

6.140027214s ago: executing program 5 (id=2066):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0)
sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x114, r1, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}]}, 0x114}}, 0x0)

6.081365024s ago: executing program 4 (id=2067):
unshare(0x20000400)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, 0x0, 0x0)

6.060562915s ago: executing program 4 (id=2068):
write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)={'#! ', '', [], 0xa, "d1d4fea1fcde57afe352f2be6c"}, 0x11)
fstat(0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x1008000, &(0x7f0000000040)=ANY=[], 0x1, 0x5e7, &(0x7f0000000680)="$eJzs3cFvHFcdB/DvbBxnHaTUcZM2oEpYRaoQFsl6LZGUC1AKslCFKnHgbBEnsbJJK3uL3B4gIA4Vp/4JRcj/AOJYpBxoDxzg1LNRj0jcfdtqZmfX62TrJrab3TSfjzT73ps38/b3fjM7mVkr2gDPrNWlzNxPkdWlN7bL9u7OSmd3Z+XOoJ7kTJJG0kxSlKv/nuSz5F76S7456BgpH/LpR82bn3zw8fv9VjlWs5jpb18ctt+jGcYy34+1Kk9qvPaxxzs4w4Uki8eLD05Gb+C/Y7uP+bkEAKZZkZwat34+OVvfsJfPAf274v499lPt3qQDAAAAgCfgub3sZTvnJh0HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPE3q3/8v6qUxqC+mGPz+/2y9LnX9qXZ/0gEAAAAAAAAAwAn49l72sp1zg3avqP7m/3LVuFC9fiPvZCvr2czlbGct3XSzmeUk8yMDzW6vdbuby4+wZ3vsnu0nM18AAAAAAAAA+Jr6Y1b3//4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADToEhO9YtquTCoz6cxk6SZZLbc7l7yn0H9aXZ/0gEAAADAE/DcXvaynXODdq+onvlfqJ77m3knd9PNRrrpZD3Xq+8C+k/9jd2dlc7uzsqdcnl43J/8/7HCqEZM/7uH8e98qdpiLjeyUa25nN/krXRyPY1qz9KlQTzj4/pDGVPxo9ojRna9LsuZ/6Iup8N8lZHTw4y06tjKbJw/PBOPeXQefKflNIbf/Fz4CnJ+ti7L+bw+1Tlvj5x9LxyeiWTh13++eqtz9/atG1tL0zOlI3owEysjmXjxmcpEq8rExWF7NT/Pr7KUxbyZzWzkt1lLN+tZzOtVba0+n8vX+cMz9eMDrTe/LJLZ+rj0r6KPF9PL1b7nspFf5q1cr45oK1dzNe38IK+mdeAIXxwb9+97dfder9dL4/E+9d/5bl05neRndTkdyryeH8nr6DV3vuobXbOfpYWTvzbOfKuulGfPa1N3bTz/wL8Sg0w8f3gm/lKdOFudu7c3b629/Yjv90pdlhn46TATM/Xa3qkTmdSRlOfLwjCWg2dH2ff82L7lqu/CsK/xUN/FYd+XfVJn63u4h0dqV30vju3r73dppG/c/RYAU+/s987Ozv1v7t9zH879ae7W3BvN185cO/PSbE7/8/QPZ1qnXmm8VPwtH+Z3+8//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA0W29+97ttU5nffPIlcEvER13HBUVlempTPrKBHzVrnTvvH1l6933vr9xZ+3m+s31u6+2rl1bXl6+2rpyY6OzXr9OOkoA4CTt3/RPOhIAAAAAAAAAAAAAAOCLPIn/TjzpOQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF9vq0uZuZ8iy63LrbK9u7PSKZdBfX/LZpKirPwjyWfJvfSXzI8MV3zR+3z6UfPmJx98/P7+WM1q+3+1T2IWB2JpPBDTccdrj4z31yMNVwwzs5hkoS5h4j4PAAD//6LKBsA=")
syz_mount_image$hfsplus(&(0x7f0000000840), &(0x7f00000008c0)='./file1\x00', 0x2948c61, &(0x7f0000000000)=ANY=[], 0xf, 0x6af, &(0x7f00000000c0)="$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")
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
llistxattr(0x0, 0x0, 0x0)

6.050133685s ago: executing program 5 (id=2069):
syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x2, 0x58a, &(0x7f0000000740)="$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")
openat(0xffffffffffffff9c, 0x0, 0x40, 0x0)
openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1)

4.587780093s ago: executing program 4 (id=2071):
r0 = userfaultfd(0x801)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1438192441010002e29f050000000001d8539000d96a2a7f373f3232198a20c8dfc626872f65c95e3241e46a63dc3408f2f80871fd8dc42450daa0e133369faec7fda68587937657ba"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x2000)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
openat$nvram(0xffffffffffffff9c, &(0x7f00000014c0), 0x40280, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000003c0)=""/142, 0x8e}], 0x1, &(0x7f0000000340)=""/21, 0x15}, 0x9}, {{&(0x7f0000000500)=@qipcrtr, 0x80, &(0x7f0000000680)=[{&(0x7f0000000580)=""/114, 0x72}, {&(0x7f0000000a80)=""/83, 0x53}, {&(0x7f0000001500)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000880)=""/234, 0xea}], 0x5}, 0x1}], 0x2, 0x41, &(0x7f0000001480)={0x77359400})
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f0000000000)={0x3, 0x203, 0x8000000000000000, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x10000000}, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r3}, 0x8)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x3, @empty}, 0x1c)
sendto$inet6(r2, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, &(0x7f0000000c80)='|', 0x1, 0xbcff, 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0)
ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0)
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x210080, 0x0)
writev(r2, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x34000}], 0x1)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
socket$inet6_udp(0xa, 0x2, 0x0)

4.581113403s ago: executing program 2 (id=2072):
socket$inet6(0xa, 0x5, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
socket$rds(0x15, 0x5, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x2a, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_smc(0x2b, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
socket$inet(0x2, 0x4000000805, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fcfc0000080011000000000008000e0080000000", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

4.498458904s ago: executing program 2 (id=2073):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$int_in(r3, 0x5421, &(0x7f0000000240)=0x2)
connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
shutdown(r3, 0x0)
connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10)

4.493627544s ago: executing program 5 (id=2074):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0), 0xfc, 0x574, &(0x7f0000001980)="$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")
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
memfd_create(0x0, 0xe)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
syz_open_dev$MSR(&(0x7f0000000580), 0x1, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffff4f7}, {}, 0x0, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x4d6, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8)
r3 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001d"], 0xb8}}, 0x0)

3.514616457s ago: executing program 2 (id=2075):
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='fd\x00')
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
userfaultfd(0x800)
ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x4)
lseek(r0, 0x5, 0x0)
getdents64(r0, 0xffffffffffffffff, 0x43)

3.513965606s ago: executing program 4 (id=2076):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0xffff, 0x2, @loopback, 0x840000}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "0002002000", "07f217bd74511e465bbbd5de01000000f9044677d4d588363d63af84db44be59", "00f8ff00", "8ce63ecbc640735f"}, 0x38)
sendto$inet6(r0, &(0x7f0000000100)='S', 0x1, 0x8000, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
close(r0)

3.405248478s ago: executing program 4 (id=2077):
socket$inet_udplite(0x2, 0x2, 0x88)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x4004000)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prlimit64(0x0, 0x0, &(0x7f0000000300)={0x0, 0x9c}, 0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf090000ff030000b6090400000000006500060009000000180100002020702500000000002020207b9af8ff000000002d9a00000000000034090000f8ffffffb702000008000000b7030000ffffffff15000000060000003d93000000000000b5030000020000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB="2c726f6f746d6ff86295232ca36473f8dc30303030303034303030142c757365725f69643d3cf35a1e6c4d014bc27bb6a6facfe1fa8d4e42002f280bb394e2fe4b660553", @ANYRESDEC=0x0, @ANYBLOB="2c67726f65705f69643d4e2a3d6c299e0b31a559d9186dd89ce7322705f70f297a91a1e1", @ANYRESDEC=0x0])
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000480)='system.posix_acl_default\x00', &(0x7f0000000400)={{}, {}, [{0x2, 0x1}], {0x4, 0x1}, [{0x8, 0x4}], {0x10, 0x1}, {0x20, 0x7}}, 0x34, 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x200000, 0x4})
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1f006100d29c4997277c860754e37b42d646eecf0f092c2700000000f9", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
unshare(0x2a020400)
setrlimit(0x2, &(0x7f00000002c0)={0x0, 0x6de3})
pselect6(0x40, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x0, 0x1}, &(0x7f00000000c0)={0x1f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000018000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000af00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x202001, 0x2)
openat(r6, &(0x7f0000000280)='./file0\x00', 0x10e41, 0xc0)
recvmsg(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002d00)=""/78, 0x4e}, 0x0)

2.41051785s ago: executing program 2 (id=2078):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$unix(0x1, 0x2, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884)

1.696249609s ago: executing program 5 (id=2079):
socket$nl_netfilter(0x10, 0x3, 0xc)
epoll_create(0x2)
epoll_create1(0x0)
epoll_create(0x7)
socket$key(0xf, 0x3, 0x2)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10)

1.663816069s ago: executing program 0 (id=2080):
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365c0254a7c6fc7ea6155a71b613b02d1645aab67271075189c3540c4dd19ebfb3c4acf87f2eeb258e62cc6ae96db360d874500cb86b4185ee533bf708", 0x3f}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62071e7ec69f658d5a52d7eb7ea31db43f8cf570f335a80860ac4cc240dc149d8468493db8aad089f590d62e0bcb9d1dcee636ee311ee51839b7201745baef82209b2ab741dc5ea481ae9dcebe39b1101a42a8c82de46107541c240ad0d9ee4a9340cffd72aaea692a60993637c81d23a0d0ebbae66f1eb2771df2482c043d8715ae788b56cc91eaa4d6bbdec82d8f91eb822d0b5f3ebd86", 0xa5}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdbcfb8a86a74f6799f98c36e23e210f053830ac8e978a0785884001a7099c4b9016f1a65a57390caf78c272cbf9711f94505dd525af1ff7d013438df5b844226f41b81e58eb73366", 0x4b}, {&(0x7f0000000540)="f2e659a0b00d26c2ee15", 0xa}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001340)="b8", 0x1}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x6}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000140)}, {&(0x7f0000000340)="e4", 0x1}], 0x2}}], 0x4, 0x4000000)
setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4)

1.60535975s ago: executing program 2 (id=2081):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000380)='./bus\x00', 0x8, &(0x7f0000000300), 0x1, 0x55ae, &(0x7f000000ac40)="$eJzs3X9snHUdB/DnruvaFdeWMOuArGwDJFtEOjdNCCR2bNNpYTnphE3I+gNH0DmtY8NVCCtinIERijWMwQoLbn9MEYqucyiJBewqul8IJtNFBbPFNWOkOBExYTG9u+d299zaHhMpwuu1tM/zvc/z/d73njx/3PvW73MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABEHwx+N3TL/t3roJ26+ru++8a85e+2D3kuMX3rq1avND20v2dTz31aNVq1qPLF1w0/2JpkfW93d3BkEs2S+W7t9w2fwrr69vuKI0HLDxc6ltZeVQT5nq+mKqMTbnwcF+uT9NQRAURwYoSm/npXfiOQNkdlfkDzisayf1tE4dP69x28qujc8uu3xL/ktnUOloT2C0pK+rgyeupdrk73jkiEw769KL5Vyiqf7RC+4deREAwFtSk0huMm9H029xM+22aD3Sro202yPt8B1Ce3bjVKTGHTvUPCdH66M0z9pUVCgZcp6Revr8Z9qJaP9IOxI13sI8cw9NR5rSoebZEqmP1jwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3k0uuH5m/d49D7/8ldbf/u7h17/16sePrGq8ZaC7/qJ1ix/v2PG9vx2tWtV6ZOmCm+5PND2yvr+7Mwgqk/1iqe6xZ6ri8ZkDddseu6e3puFDC9cUpccNt2OyDg72hzsXVwRBc1blYDhsf3kQJHILyWawIb/wpeTOZ8ICAAAA7yVnJn/HM+1UHCzOaceSaTKW/BdKhcVrJ/W0Th0/r3Hbyq6Nzy67fMupj5cYYrzak46XaVee+IllBeMw/kbHO1EPD12RN87woiNG8/zpx/qnNdfdUHrl7gsWzphdv+XS4CfTD3csX3TfhBfHL9nXXpOX/yuHz//hmZP/AQAA+G/I/9FxhjdS/m+uqZh0cOp3ix67rur44fkP/Lyz7/kn4w8VD3Q//dLYcbf9cnVe/p+c85R5+T+ccZj/48Gp5X8AAAB4N/tf5//avHGGN1L+/8X+zZ//98pvTDk84187Xnj69xdvnVI+/7WyGTe8+cSCVxp2tf0pL//XFJb/x2RPO3xwVzjhZRVBUFP4SQUAAAByhP/vfuKjhTCvpz45iOb1y+4qe3LXG+tvjJ/V8o8zFvfPqv7i7tVf37ApNrChc92O5XNX5OX/2sLyf/E783IBAACAAvxm+y13V395ydYtew7N2XFnYvPYS+a+uuennVf1vXwsUfT8zX15+T9RWP4vGZ2XAwAAAJzEU+MmPnfo0UNfm7177YS9q9rmPD5t3+qFD/xz9t+veOnPxzddWJ6X/xsLy/9l6W165UOq087wrxA6KoKgdHCnJVXoC9o/mSkAAAAAb5Mwpzc1revduX7MrNfOPvzDNSuW/2rvpd++a2P1zQd+XXX7ucf2996Yl/9bhr//f3ing3D9f879//LW/2cVUnf9u8SNAQAAAHg/yl/PH94eP/XNBUN9/36h6/8/euaBko7m8ysnx7dVz3rig31Xra1+fVHHRZ/YfusbH46V//VTefm/rbD8X5S9fTu//w8AAABOwf/b9/8tzhtneCPd/79v3DPnrPnsPT+o/WbZU+e+eXfzd9oPTj9v87QzPlJ0fvecmX/4fl7+by8s/4fb07JfXk94fm6vCIKJgzvpuwluDae7LFLoKs4qpE58pEd92CNd6CrJKiS1RHp8rCIIpgzutEUKp4eF9khhoDxd2BQp7A0L6eshU3g0UugJr7R7y9PTjRZ+FhbSCyy6whUUp2WWRER6HBuqx2DhpD0OZJ4cAADgfSUMz+ksW5zbDKJRtis20gFlIx0QH+mAopEOGBM5IHrgUI8HjbmF8PEfz+1e+so1D9b1Xt1w9KzZe5bc0faBnkW9O7/wo55z/nL1Cws/nZf/NxWW/8NTMTa1GWr9fxCu/09/r2Fm/X9jWKiMFLrCQiJ6x4BE+BypsHtn+ByViXSPgYmZAgAAALynhZ8LFI3yPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/sHfvcVJVd4LATzf9oJum6YgBY4ygRkR3aZomGEQcUXRXo4tNJKtjhtAIjXZoAwq4YsyKr3GV6GLUmBjZwY+jJg6r+CDqRIXoiElGJfE5Kz4HnciqS9BR45gs++m+dYqqW112IaC0+/3+0XWqfud569F17r11LgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/P/hsiX3Nrw58H9965ffW/f697409TdTD9m8y19uqHt3yDlPbT5ocN0tbw1asPCNtklnXtsyffk1G1YuDaGlq1xZUrzsoUHl5aP/cMxdt13xcNO0wVPOrcrUm4mHfp1/yjN3Loytvto/hLvLQqhIB0bUJYHKzP26WN8edSF8LmwJZEu01SYl0g2Hh2tCWBa2BLJV3VsTQl1OYMoTD666rDNxVU0I+4YQqtNtvFCdtFGTDgyrSgK16cCciiTw/uZENnBPeRKArVHV3YPxzZB90a9oyc/Q0H1lRV5/lR+3czuZ9PD6xERD8XxvHbaDO5Wj4Lls2aanrduXBttdwdtjtXdbL3i3FWznJZ623C9SmW8om7eEqkP5zLZZ0xd0zI+PlIfGxj7FatpBz/O6TefM2Jp0r3kdxg40bJfX4QO1k+ove3viwStP/uPp+85fO3Vbu/lczibNTe9o1SHzmus1z2M04dP7PNm8LYW3r539aSv4ljTUl64QwvF/+nzZM3Ne2n3jB6+eOPH2Fy6+etrCa6ZMfHbQL8b+47W73D3t8oL5f8NHz//jyznelufljq1+WJ/MzeMjdTGxsT6ZmwMAAECv0Rv2mn519KsvnfrQ3YteXH5cxXfH/eqk3eorzv5+x/G7rhz/xUuvbH98l4L5/9DSjv/HQ/51uaNdHcKErsQFA0LYrevxJPCz2J2TB4SwV1eqJT9wWCqwOoQvdCX2z1aVKtE3lhiaCvy+PhOYkAqsiYGWVODGGFiSClwYAytSgRkxsDoVODwGQnv+OA6oz4yj5EBNDLQmG3FFPAvhnfrYWmpbrctWBQAAsJ1kZoeV+XdzznXY1gxxermipqcM8QzsohmqUzWkZ7DZaVXRGip6qqG8pxqy41700cMvqLmsp5oLTsMoy8/w4ZDvlA+YuPeP7rpxxE3NL0787rtjj//Kn998d/X+//Tf7zln/nUHFMz/mz56/l/dTUfKCo7/hzC562/MXZ6JdGTjrS15GQAAAIBtcNVjS5+84YCj/s99L99355euvaF89dVf/7+vbLxg71HHDS/r+3ffXlEw/59Q2vn/cZ9In5zM4dG4G2L2gBCa8gNJtQcXBpKj3v0yAQAAAOgNssfjs8fC2zO3ySna6fl0Yf6WrcwfD/xP6Db/5Zv++tkvX/vkiQuH7bPhiv925gdlnx/7u12OXTvy8bf2HPYPDX0Lz/9vKe38/9r826QTa2IvrhwQQt+cwCOxl52BLkNj4OVD8wOZ8a+JG2BxrCpzYkK2qsWxRGsMNKUCy4qV+G22xG75gcyTlW38guw42jMlcgIAAADwiYu7A+Jx+Xj+/z2TD/jS/oNeGvPinvcufG3C0hNOrf3hPrfs+vqAjkljDpxwyBHPFMz/W7fu/P+ueXDB6f0d/UIYWRFCn/QPAx6tTRYGjIG6skzi/tqkrj7pqs6rDWF858DSVb2SWf+/Ir3G4BM1SVUxsNveP900rDNxQ00II3MDz3zz+jGdifmpQLbxb9SEMKRztOnGV/ZNGq9MN35N3xD2zAlkqzq5bwidjVWlq3qwOnMdg3RVt1WHMDAnkK3qwOoQFgYAeqn4r3Rm7oPzFp49e3pHR9sZOzAR9+HXhFntHW2NM+Z0zKwu0qeZqT7nLWN0XuGYSr3yzfOZJYqmDrl9eCnp7O8Em3LbyuzHLzhxMHM/fheq7Bpnc2Xe3dHpIQ/fp7CJkPNNqtiQy3fwkGtzK9nyJBbUH/NXhX6h74J5bWc0njV9/vwzRiV/S83enPyNh5mSbTUqva1qu+tbCS+PoqtlpXzcbbVfbiUj5582d+S8hWePaD9t+iltp7R9p3nsqObmMV8dO6Z5ZOeompK/PQx1v+6qTg118/Uljms7DnX3ipxKPolPDQkJid6WmL6k7PwJ0359/7f2WHPaWSft8fd7zBxx0l9d/pu5JzYeMvlX1//l2oL5/9yPnv/HT534yZ9Zn6HY8f+GeJg/eXzLYf7WGFhW6vH/hmJH87MnBgxNBRbFwCKH+QEAAPhsiLsj497MuFf6urp/uvvImTMOef+XJ0y5+m/Hjjv1rPX7Nlx89bFL/sP6d5asOuLtgvn/otJ+/7+d1v/PLl3/tWLL/O8fSzQVW/8/vcx/dv3/RcXW/08v859d/3/Zp7D+/4JsILVJ3rH+PwAA8Fnwya3/3+Py/ukLBBRk6HF5//QFAgoy9LiMf6kXCNjq9f/ndPxF7aDL54w7dMTcHz+yau8lA2/70vMTf73P0oNG3LvylvdG3Vow/19S2vzfwv0AAACw83jol32/ffG7w+5/6pH3jyy79Lcbbzr+r9oOOOQPA5tPmXx0zfdv+reC+f+y0ub/n/z6f6HY+f9DiwVaii0MaP0/AAAAeqli6//dPPDloavnj7jxsZ+/ectLrb+YOf61f7fkB1+ZPqzp5jXrftMwY33B/H9FafP/eNpFeV7u2JsP65M17UJ6TbuN9dmfDAAAAEDvUB4aGytLzJu3MuphH7/NdZmlQD8qnevp+watWlD+0FVl1Rt/cMm0QxrPPfbMOUdetP77tU/+pHZqY/UZBfP/1aXN//N+l/FA7aT6y96eePCHK0/+4+n7zl87dcvxfwAAAGDHKXW/BAAAAAAAAAAAAAAA8Ol7qnXpQR+MOvqNmXuN+tM3jn3hB4u/+M1H/ubaP5/588Pv26t987ApBb//D5O7yhX7/X+87l/8fcGuebljqz2v/5e5P+WYWxd2LVn4aH0I++QGZp8/+3Mhc23+/XIDq6buP7gzcX66xH0vHv5aZ2JaOnDUiF3e60yMTwVa4yKJX0gH4lUV3+ufCsTlFZ9MB+L2WJEOVGUCl/RPxlGW3lYb6pJtVZbeVs/VhTAgJ5DdVnfXJW2UpQd4VSqQHeDp6UAc4KRMoDzdq1v7Jb2KgbpY9G/6Jb0CAGCnFb8FVoZZ7R1tTfErfLzdvSL/Nspbsuy8wmrLSmz++czSZFOH3D68lHSf9HfRLdcarwzVnUMYVfB1NTdLWdcot08tPWy6XYsMuafV3sqLlEvb2k1XVXxENcmIGmfM6ZhZ2ePAR/ecpbmixyyjCiY7uVnKuzZpCbWU0JcSRlTitimhy/F+eWhs7JPKNS4GG0Kenl4Rpf5eP3edv2Kvgtw8f1tz7aV9Bvd5/9/GX/TQgwMqO06d3HbR7o/988BRM3/8wwdbr/l9wfy/obT5f3XuuN7LXAxgUbyy3sEDQmgtcUQAAADw2fc/z11+x4lz1myYtbri2d/9bnb5cSdWbj7nrnPOvui5+xcfdcm/v3lb4yvKntp04hubzvrrN37ylesePuulw2ecddekdYesb6u+8bt/sfzUIQXz/6Glzf/jHqzMoeBkb8fqeP3/CwaE0HVp/YYk8LM43JMHhLBXV6ollkguqP+1WKIpCfws7jDZP5Zobcmvqm8MrEgFfl+fCaxOBdbEQGYvxU9DZlfOFfUhjOlKTc4vMTeWaEgFjouBoalAYww0pQL9Y2BCKvBm/0ygJRX4xxgI7fnb6s7+mW0FAACwNTLzrMr8uyE9z1tR0VOGsp4y1PaUobynDNU9ZSg2inj/jpihMnXySllOpsp0rTWpWgoyxIvhb3W/CjKE3+bnTBcsaDqef5A936AsP8O4H97RetDX5v1408U/evzIAy88csmVb196dL/BVz77v9vP7dd/U23B/L+ptPl/bf5t0vqaOP/fcv2/JPBI7N6V8dTxoTHw8qH5gcyOgTVxsrs4W1VLpkRm0r44lpgQA0NTgbkxMCEVaJ2cCSwbnB/IzLSzjV+Qbbw9UyInAAAAAJ+4uIMg7qaJ8/+V48I7exz5fvPuVw6cO+7xR847YnrNrtU1/zx+7dLxl1Y/tF/fgvn/hNLm/7G9frmNXRh782r/EO4u29KbbGBEXRKI+zHq4s/j96gL4XM5OziyJdpqkxJVqYbDwzXJL9Sr0lXdW5OsMRDvT3niwVWXdSauqglh35y9L9k2XqhO2qhJB4ZVJYHadGBORRKIe36ygXvKkwBss+xewfiCypzqktXQfbkir7/PyjVB08Mr2AfaTb7ufnO1o1SnH8jsU83auqetoDp2iIK3x2rvtt74bmvwbsv9IpX5hrJ5S6g6lM9smzV9Qcf8+EjuL1kL7KDnOfdXqqWkt8PrcNHH723PqtMdaEp9fDR1X67712FZrO6B2kn1l7098eCVJ//x9H3nr51acjeKiD8UPvjWuQc8l7N5d7TqkHnN9brPkxafJ73x38BQT1sIYfkFs5584l/ef75iffN/OXDs8tvefGz5Tw56YNaIL2y45Msb33r3qIL5f0tp8/+K1G2XD+LGnDcghOE5G/fRuPknDkg+B3MCyafkwMJAcsh9fX3RT04AAADY3rK7O7L7C9ozt8kJ4el5cmH+lq3MH/dXTOg2f6n9HjjmH7536FWvf+Pr63e//NGlT637T2++csS0Qx/Y9PSKla83H/v5pwvm/60fPf/vm+qm4/+O/7ODOP7frZ19V3Tf9AOLtmlXdEF17BCO/3drZ3+3Of7fLcf/Hf/vjuP/PXD8v1s7+9NW8C1pri9dIYTWATfc/ova6cP7XXHOt2as/fnT7zSNe6Hu3KPv/B+HLw7XnLfqzwXz/7mlzf+t/9f9on3Z9f9ai63/N7fY+n+LrP8HAADsUEUWmkvP8wpW7yvIkF69ryBDjwsE9rjEoPX/tnr9v9qTzj7plfq39rpm4u3/+c7pFz5/0onP7tvn+RNuP+GmkVcPf+nLGwrm/4tKm//Hl0O/3NZ7y/p/QycXqWpJDMy1MCAAAAA7o2I7CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPh0rXhw8Rc3L97noJue/fxNh//rsjWz9v7VAZtHjzm5cfjigWVX/t2/vDVowcI32iadeW3L9OXXbFi5NIT2rnJlSfGyhwaVl4/+wzF33XbFw03TBk85tzpTb2Xm9ot5uWOrH9aHsCznkbqY2FjfeWdLYMoxty6s6Ew8Wh/CPrmB2efP/lxn4sb6EPbLDayauv/gzsT56RL3vXj4a52JaenAUSN2ea8zMT4TKEt397r+SXfL0t29rH8IA3IC2e5+u39+Vdk2/mMmUJ5u4+a6pI0YqItFf1SXtBEDHbFEe98QRlaE0Cdd1a+rk6r6pKv6++qkqj7pqv5rdQjjQwgV6aperEqqqkiPfG1VUlUM7Lb3TzcN60wsqwphZG7gmW9eP6YzcXoqkG3861UhDOl8yaQbv6Myabwy3fhVlSHsGUKoSpf414qkRFW6xCsVIQzMCWQbP7UihIWBz4T44TMz98F5C8+ePb2jo+2MHZioyrRVE2a1d7Q1zpjTMbM61adiynLSm8/7+GN/ftM5Mzpvpw65fXgp6YpMucquLjdX5t0dvbP3PvarNreSLc9HQf0xf1XoF/oumNd2RuNZ0+fPP2NU8rfU7M3J3z6ZaLKtRvWWbbVfbiUj5582d+S8hWePaD9t+iltp7R9p3nsqObmMV8dO6Z5ZOeompK/22Oo13/yQ929IqeST+IDQEJCorclyvM+3Zp29g/ygi/6WzpaGaq7PqALphW5Wcq6Rrk9Bn3Yxxzxx/me0uOIRhVMHAqyNPecZXTBZGJLlpokS9f3uoLJYW5N5V2bNN4vD42NfYpth4b8u7mb961t2LzrMpuu1DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPD/2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBYAAAAAECYv3UYPRsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAlwIAAP//WKHPZA==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000140)=ANY=[])

1.58409658s ago: executing program 0 (id=2082):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x29)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e20, 0x6, @empty, 0x4}}, 0x0, 0x0, 0x3fc, 0x8, 0x32}, 0x9c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
io_uring_enter(0xffffffffffffffff, 0x54, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000040), 0xa, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0)
ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x50, 0x0, 0x7, 0x1000000}, {0x6}]})

1.425072663s ago: executing program 5 (id=2083):
socket$inet6(0xa, 0x5, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
socket$rds(0x15, 0x5, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x2a, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_smc(0x2b, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
socket$inet(0x2, 0x4000000805, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fcfc0000080011000000000008000e0080000000", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

807.94805ms ago: executing program 5 (id=2084):
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x490420, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x100}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0)
ioctl$SNAPSHOT_SET_SWAP_AREA(r2, 0xc0046686, 0x0)

741.347861ms ago: executing program 0 (id=2085):
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000)
r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5d", 0x2, 0xfffffffffffffffe)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
rseq(&(0x7f0000000400), 0x20, 0x0, 0x0)
r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, 0x0, 0x0, 0x0)

708.096481ms ago: executing program 0 (id=2086):
syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000040)='./file1\x00', 0x3014487, &(0x7f0000006480)={[{@quota}, {@iocharset={'iocharset', 0x3d, 'none'}}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@iocharset={'iocharset', 0x3d, 'none'}}, {@uid={'uid', 0x3d, 0xee01}}, {@errors_remount}, {@quota}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@uid={'uid', 0x3d, 0xee01}}]}, 0x24, 0x61b6, &(0x7f00000002c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x4)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000000)={@desc={0x1, 0x0, @auto='\x00\x00&\x00'}})

221.853787ms ago: executing program 4 (id=2087):
r0 = userfaultfd(0x801)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1438192441010002e29f050000000001d8539000d96a2a7f373f3232198a20c8dfc626872f65c95e3241e46a63dc3408f2f80871fd8dc42450daa0e133369faec7fda68587937657ba"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x2000)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
openat$nvram(0xffffffffffffff9c, &(0x7f00000014c0), 0x40280, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000003c0)=""/142, 0x8e}], 0x1, &(0x7f0000000340)=""/21, 0x15}, 0x9}, {{&(0x7f0000000500)=@qipcrtr, 0x80, &(0x7f0000000680)=[{&(0x7f0000000580)=""/114, 0x72}, {&(0x7f0000000a80)=""/83, 0x53}, {&(0x7f0000001500)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000880)=""/234, 0xea}], 0x5}, 0x1}], 0x2, 0x41, &(0x7f0000001480)={0x77359400})
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f0000000000)={0x3, 0x203, 0x8000000000000000, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x10000000}, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r3}, 0x8)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x3, @empty}, 0x1c)
sendto$inet6(r2, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, &(0x7f0000000c80)='|', 0x1, 0xbcff, 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0)
ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0)
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x210080, 0x0)
writev(r2, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x34000}], 0x1)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
socket$inet6_udp(0xa, 0x2, 0x0)

163.828198ms ago: executing program 2 (id=2088):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x101040)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000018c0)={0x1c, 0x0, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}, [@beacon]}, 0x1c}}, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000440)=ANY=[], 0x1, 0x6d0, &(0x7f0000001340)="$eJzs3cFvHFcdB/DvrNeOt1TBaRMaoSKsRCpIEYkTK4VwwSCEcqhQVQ49W4nTWN0kVeKitEKQAoITEof+AQXJNw4IiXtQuHApt159rITEJeIQ9bJoZmfXu/Y6Xif2OoHPJxrPe/Nm3vzmN29mvOusNsD/rctn0ryfIpfPvHG3rG+sL7Y31heP1M3tJGW5kTS7sxQ3k+JBslS2FwNTBubbfLx66a3PHm583q0166laf6q/3exYIY/Yx716ynzd3/zILafH6r/bVxVeXkxypZ4Pmxm3r6EVy6Sdrudw6Drb3NvL5jte78Czr/d0KrrPzW3mkhfqJ3P1O0F9d2hMLsKDsae7HAAAADynPr112BEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA86f+/v+inhr1PPMpet//P9NbVpefQUtjr3n/QOMAAAAAAAAAgMn4+qM8yt0c7dU7RfU3/1NV5Xi+6CRfyvu5k5XcztnczXLWspbbOZ9kbqCjmbvLa2u3z/e3LI3e8sLILS9M6ogBAAAAAAAA4H/SL9Pa/Ps/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8C4pkqjurpuP1PHNpNLPZlnvJP5PMHHa8e1CMWnh/8nEAAADAU5l9gm2+/CiPcjdHe/VOUb3m/0r1enk27+dm1rKatbSzkqv1a+jyVX9jY32xvbG+eKOcyvpwv9//957CmKl7mKpqo/Z8slqjlWtZrZaczZUqmKtpdPd9OjnZi2cgrgEflTEV36uNGVmzTmu5s9/v9C7Cvhh+K6LxmDVbm8El/Yws1LGVWx7rZqCo3qhJtmZi17PTHKrNVb1O9/d0Po3+Oz/HDyDnL9Tz8nh+c6A536t+JhqpMnGhN/rKa+bxmUi+8dc/vX29ffPd69funHl2DmkXUzss3zomFgcy8cpznYnmHtdfqDJxol+/nB/lJzmT+byZ21nNT7OctaykU7cv1+O5/Dn3+EwtDdXe3C2Smfq8dM/ZODHN54dVaTmnqm2PZjVFbuVqVvJ69e9CzufbuZiLuTRwhk/sGHd1bNVV39h61ffO9N9GBn/6m3WhvLv9dvMut/S4I95pdO6X7r2/zOuxgbx2R/3D/lrHBq6DhYEsvdTLzvTIzp/k3tj8al0o9/GrXZ4TkzVXZ6K8gHpPiV50L3cz0ayeRdvH+R865XZp3+x0ri+/t0P/97bUX6vn5bBa/9pua/eMPhX7qxwvL2W2vpMMj46y7eX+XWagrbM5lrttw0/ccrsTVVtR9K7UH+dWNQC2X6kz9e9w23u6ULW9MrJtsWo7OdA29PtWbqWdqxPIHwBP4h9v94tzeWGm9a/Wp61PWr9uXW+9MfuDI9858upMpv8+/d3mwtRrjVeLv+ST/Hzz9T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDk7nzw4bvL7fbK7dGFxs5NQ4VWti7Zqecjo/sp6i/0GWNfz0VhNsnQkup7jiYeRmtrGNsKnV8kE89P70sER6/zu7LQ3DaiRhWWhpb8eXuHH+0xwmK86+IAC41MdqdTGT0ADvGmBEzEubUb752788GH31q9sfzOyjsrN6cvXry0cOni64vnrq22Vxa6Pw87SuAgbD70DzsSAAAAAAAAAAAAYFyjPhhw6sXdPjQy1mc8/M9CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYF9cPpPm/RQ5v3B2oaxvrC+2y6lX3lyzmaTRSIqfJcWDZCndKXMD3RX544N0Ruzn49VLb332cOPzzb6a3fWTRj3f2eNbk9yrp8wnmarnT2GovytP3V/xn94xlAn7otPpLD1dfLA//hsAAP//P3v0tA==")
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
symlink(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
symlink(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000240)='.\x02\x00')
rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

0s ago: executing program 0 (id=2089):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0), 0xfc, 0x574, &(0x7f0000001980)="$eJzs3c9rHFUcAPDvbJI2/aFJoRT1IIEerNRumsQfFTzUk4gWC3qvS7INJZtuyW5KEwu2B3vxIkUQsSB69+6x+A/4VxS0UKQEPXiJzGY2XZPZNNlumm3384Fp35uZzZvvvvm+fbOzywbQt8bSfwoRL0fEN0nESMu2wcg2jq3tt/Lw+nS6JLG6+ulfSSTZuub+Sfb/oazyUkT89lXEycLmdmtLy3OlSqW8kNXH6/NXxmtLy6cuzZdmy7Ply5NTU2fempp89523uxbr6+f/+f6Tux+e+fr4yne/3D9yO4mzcTjb1hrHE7jRWhmLsew5GYqzG3ac6EJjvSTZ6wOgIwNZng9FOgaMxECW9blWR57moQG77Ms0rYE+lch/6FPNeUDz2r5L18HPjAfvr10AbY5/cO29kRhuXBsdXEn+d2WUXu+OdqH9tI1f/7xzO12i3fsQ+7vQEMAGN25GxOnBwc3jX5KNf507vY19NrbRb68/sJfupvOfN/LmP4X1+U/kzH8O5eRuJx6f/4X7XWimrXT+917u/Hf9ptXoQFZ7oTHnG0ouXqqU07HtxYg4EUP70/pERHyQfxPk88LKvdV27bfO/9Ilbb85F8yO4/7ghvnfTKleevLI1zy4GfFK7vw3We//JKf/0+fj/DbbOFa+82q7bY+Pf3et/hTxWm7/P+rMZOv7k+ON82G8eVZs9vetY7+3a3+v40/7/+DW8Y8mrfdraztv48fhf8vttnV6/u9LPmuU92XrrpXq9YWJiH3Jx5vXTz56bLPe3D+N/8Txrce/vPP/QJrY24z/1tFbrbsO7yz+3ZXGP7Oj/t954d5HX/zQrv3t9f+bjdKJbM12xr/tHuCTPHcAAAAAAADQawoRcTiSQnG9XCgUi2uf7zgaBwuVaq1+8mJ18fJMNL4rOxpDhead7pGWz0NMZJ+HbdYnN9SnIuJIRHw7cKBRL05XKzN7HTwAAAAAAAAAAAAAAAAAAAD0iEMRw3nf/0/9MZD/mDargWfRFj/5DTzn2ud/tqUbv/QE9CSv/9C/5D/0L/kP/Uv+Q/+S/9C/5D/0L/kP/Wsn+f/zuV08EAAAAAAAAAAAAAAAAAAAAAAAAAAAAHg+nD93Ll1WVx5en07rM1eXFueqV0/NlGtzxfnF6eJ0deFKcbZana2Ui9PV+cf9vUq1emViMhavjdfLtfp4bWn5wnx18XL9wqX50mz5QnnoqUQFAAAAAAAAAAAAAAAAAAAAz5ba0vJcqVIpLygodFQY7I3D6MFCoTcOo8PCXo9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDIfwEAAP//wGE62g==")
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
memfd_create(0x0, 0xe)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
syz_open_dev$MSR(&(0x7f0000000580), 0x1, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffff4f7}, {}, 0x0, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x4d6, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8)
socket$key(0xf, 0x3, 0x2)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001d"], 0xb8}}, 0x0)

kernel console output (not intermixed with test programs):

found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00
[  231.842998][ T5812] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  231.918611][ T5812] usb 1-1: config 0 descriptor??
[  232.181594][ T6795] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  232.433731][ T5812] hid-rmi 0003:0461:4E72.0001: report_id 61939 is invalid
[  232.465725][ T5812] hid-rmi 0003:0461:4E72.0001: item 0 2 1 8 parsing failed
[  232.515669][ T5812] hid-rmi 0003:0461:4E72.0001: parse failed
[  232.572810][ T5812] hid-rmi: probe of 0003:0461:4E72.0001 failed with error -22
[  232.777133][ T5812] usb 1-1: USB disconnect, device number 8
[  233.326153][ T6828] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[  233.354478][ T6829] device veth1_to_team entered promiscuous mode
[  233.960894][ T6814] device veth1_to_team left promiscuous mode
[  234.101702][ T6836] loop7: detected capacity change from 0 to 128
[  234.133252][ T6843] loop0: detected capacity change from 0 to 128
[  234.174540][ T6836] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256
[  234.210946][ T6843] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback.
[  234.216705][ T6836] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  234.224804][ T6843] ext4 filesystem being mounted at /200/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  234.282144][ T6852] loop5: detected capacity change from 0 to 512
[  234.301360][ T6854] netlink: 172 bytes leftover after parsing attributes in process `syz.8.886'.
[  234.919892][ T6852] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  234.989057][ T6852] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  235.061133][ T6852] EXT4-fs error (device loop5): __ext4_new_inode:1286: comm syz.5.883: failed to insert inode 16: doubly allocated?
[  235.204028][ T6869] loop7: detected capacity change from 0 to 512
[  235.673433][ T6869] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[  235.699947][ T6869] EXT4-fs (loop7): 1 truncate cleaned up
[  235.706115][ T6869] EXT4-fs (loop7): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrquota,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: writeback.
[  236.172210][ T6894] mmap: syz.0.899 (6894): VmData 37457920 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[  236.850002][ T6895] 9pnet: p9_client_clunk (6895): Trying to clunk with invalid fid
[  236.857861][ T6895] CPU: 0 PID: 6895 Comm: syz.7.893 Not tainted 5.15.180-syzkaller #0
[  236.866063][ T6895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  236.876144][ T6895] Call Trace:
[  236.879450][ T6895]  <TASK>
[  236.882398][ T6895]  dump_stack_lvl+0x1e3/0x2d0
[  236.887109][ T6895]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  236.892777][ T6895]  ? panic+0x860/0x860
[  236.896856][ T6895]  p9_client_clunk+0x2d0/0x390
[  236.901624][ T6895]  v9fs_statfs+0x170/0x4e0
[  236.906045][ T6895]  ? slab_free_freelist_hook+0xdd/0x160
[  236.911615][ T6895]  ? v9fs_drop_inode+0x120/0x120
[  236.916556][ T6895]  ? rcu_is_watching+0x11/0xa0
[  236.921347][ T6895]  user_statfs+0x20e/0x450
[  236.925770][ T6895]  ? vfs_statfs+0x2b0/0x2b0
[  236.930275][ T6895]  __x64_sys_statfs+0xe4/0x1a0
[  236.935060][ T6895]  ? fd_statfs+0x380/0x380
[  236.939473][ T6895]  ? __context_tracking_exit+0x4c/0x80
[  236.944933][ T6895]  ? __lock_acquire+0x1ff0/0x1ff0
[  236.949962][ T6895]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  236.955955][ T6895]  ? syscall_enter_from_user_mode+0x2e/0x240
[  236.961937][ T6895]  ? lockdep_hardirqs_on+0x94/0x130
[  236.967223][ T6895]  ? syscall_enter_from_user_mode+0x2e/0x240
[  236.973222][ T6895]  do_syscall_64+0x3b/0x80
[  236.977657][ T6895]  ? clear_bhb_loop+0x15/0x70
[  236.982338][ T6895]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  236.988233][ T6895] RIP: 0033:0x7fb58b738969
[  236.992643][ T6895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  237.012250][ T6895] RSP: 002b:00007fb5895a0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000089
[  237.020688][ T6895] RAX: ffffffffffffffda RBX: 00007fb58b95ffa0 RCX: 00007fb58b738969
[  237.028664][ T6895] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000001c0
[  237.036642][ T6895] RBP: 00007fb58b7baab1 R08: 0000000000000000 R09: 0000000000000000
[  237.044657][ T6895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  237.052629][ T6895] R13: 0000000000000000 R14: 00007fb58b95ffa0 R15: 00007fff86671fd8
[  237.060636][ T6895]  </TASK>
[  237.093113][ T6908] loop5: detected capacity change from 0 to 256
[  237.173815][ T6908] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  237.252842][ T6908] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  237.270646][ T6908] FAT-fs (loop5): Filesystem has been set read-only
[  237.286696][ T6908] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  237.306454][ T6908] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  237.333460][ T6908] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  237.358917][ T6908] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  237.387982][ T6908] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  237.399516][ T6908] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  237.433258][ T6908] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  237.657133][ T6931] loop0: detected capacity change from 0 to 512
[  237.666528][ T6908] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  237.675557][ T6908] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  237.685193][ T6908] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  237.695057][ T6908] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  237.704983][ T6908] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  237.714051][ T6908] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  237.725731][ T6908] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  237.734559][ T6908] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  237.811841][ T6938] netlink: 72 bytes leftover after parsing attributes in process `syz.7.913'.
[  238.145618][ T6908] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  238.160761][ T6908] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  238.174258][ T6908] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  238.191264][ T6908] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  238.201473][ T6908] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  238.218208][ T6908] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  238.515879][ T6908] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  238.527915][ T6908] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  238.578815][   T26] audit: type=1800 audit(1745546494.334:90): pid=6908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.902" name="file1" dev="loop5" ino=1048647 res=0 errno=0
[  238.620288][ T6931] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  238.668905][ T6931] ext4 filesystem being mounted at /209/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  239.185368][ T6947] loop7: detected capacity change from 0 to 4096
[  239.337577][ T6947] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  239.363036][ T6960] loop5: detected capacity change from 0 to 512
[  239.398987][ T6947] EXT4-fs error (device loop7): ext4_validate_block_bitmap:420: comm syz.7.917: bg 0: bad block bitmap checksum
[  239.420781][ T6960] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  239.469508][ T5642] EXT4-fs error (device loop7): ext4_lookup:1858: inode #11: comm syz-executor: iget: checksum invalid
[  239.499221][ T6960] EXT4-fs (loop5): 1 truncate cleaned up
[  239.515025][ T6960] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,nodelalloc,commit=0x0000000000000000,errors=remount-ro,min_batch_time=0x0000000000000007,. Quota mode: none.
[  239.550356][ T5642] EXT4-fs error (device loop7): ext4_lookup:1858: inode #11: comm syz-executor: iget: checksum invalid
[  239.564989][ T6971] loop8: detected capacity change from 0 to 128
[  239.685245][ T6971] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  239.703383][ T6971] ext4 filesystem being mounted at /37/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  239.896058][ T6984] loop0: detected capacity change from 0 to 2048
[  239.952622][ T6988] loop5: detected capacity change from 0 to 2048
[  239.962764][ T6984]  loop0: p1 < > p3
[  239.975752][ T6984] loop0: p3 size 134217728 extends beyond EOD, truncated
[  240.018107][ T6988] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  240.045143][   T26] audit: type=1800 audit(1745546495.814:91): pid=6988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.933" name="file1" dev="loop5" ino=1415 res=0 errno=0
[  240.247463][ T5220] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.336478][ T6994] loop5: detected capacity change from 0 to 256
[  240.482735][ T6994] exfat: Deprecated parameter 'utf8'
[  240.488127][ T6994] exfat: Deprecated parameter 'namecase'
[  240.521254][ T5220] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.549346][ T6994] exfat: Deprecated parameter 'utf8'
[  240.599155][ T6994] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  240.626583][ T5220] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.764768][ T5220] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.884762][ T7000] loop0: detected capacity change from 0 to 256
[  240.988216][ T7000] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d)
[  241.006530][ T7004] loop5: detected capacity change from 0 to 164
[  241.302938][ T5811] Bluetooth: hci1: command 0x0406 tx timeout
[  242.207819][ T2281] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  242.853329][ T7010] loop8: detected capacity change from 0 to 2048
[  242.922426][ T7007] lo speed is unknown, defaulting to 1000
[  243.006640][ T7010] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  243.059295][ T7010] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  243.133229][ T7015] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set
[  243.150267][ T2281] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  243.178856][ T2281] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  243.269205][ T2281] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  243.278301][ T2281] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  243.296891][ T2281] usb 6-1: SerialNumber: syz
[  243.441500][ T7007] chnl_net:caif_netlink_parms(): no params data found
[  243.518650][ T7026] loop0: detected capacity change from 0 to 2048
[  243.563728][ T7026]  loop0: p1 < > p3 p4 < >
[  243.578577][ T7026] loop0: p3 start 4284289 is beyond EOD, truncated
[  243.602369][ T2281] usb 6-1: 0:2 : does not exist
[  243.622000][ T7030] loop8: detected capacity change from 0 to 128
[  243.667761][ T7007] bridge0: port 1(bridge_slave_0) entered blocking state
[  243.684787][ T2281] usb 6-1: USB disconnect, device number 3
[  243.684996][ T7007] bridge0: port 1(bridge_slave_0) entered disabled state
[  243.708296][ T7030] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  243.741583][ T7007] device bridge_slave_0 entered promiscuous mode
[  243.749570][ T7030] ext4 filesystem being mounted at /40/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  243.775082][ T7007] bridge0: port 2(bridge_slave_1) entered blocking state
[  243.865369][ T7007] bridge0: port 2(bridge_slave_1) entered disabled state
[  243.883464][ T7007] device bridge_slave_1 entered promiscuous mode
[  243.952128][ T7007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  243.982878][ T7007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  244.049001][ T7007] team0: Port device team_slave_0 added
[  244.058558][ T7007] team0: Port device team_slave_1 added
[  244.113362][ T7007] batman_adv: batadv0: Adding interface: batadv_slave_0
[  244.120973][ T7007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  244.159066][ T7007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  244.179795][ T7007] batman_adv: batadv0: Adding interface: batadv_slave_1
[  244.186858][ T7007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  244.214690][ T7007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  244.325802][ T5220] device hsr_slave_0 left promiscuous mode
[  244.340441][ T5220] device hsr_slave_1 left promiscuous mode
[  244.344872][ T7047] loop5: detected capacity change from 0 to 128
[  244.354601][ T5220] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  244.362331][ T5220] batman_adv: batadv0: Removing interface: batadv_slave_0
[  244.374850][ T5220] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  244.382504][ T5220] batman_adv: batadv0: Removing interface: batadv_slave_1
[  244.390410][ T5220] device bridge_slave_1 left promiscuous mode
[  244.396645][ T5220] bridge0: port 2(bridge_slave_1) entered disabled state
[  244.406662][ T5220] device bridge_slave_0 left promiscuous mode
[  244.423579][ T5220] bridge0: port 1(bridge_slave_0) entered disabled state
[  244.611918][ T5220] device veth1_macvtap left promiscuous mode
[  244.618132][ T5220] device veth0_macvtap left promiscuous mode
[  244.624590][ T5220] device veth1_vlan left promiscuous mode
[  244.630822][ T5220] device veth0_vlan left promiscuous mode
[  245.455220][ T5812] Bluetooth: hci2: command 0x0409 tx timeout
[  245.873990][ T5220] team0 (unregistering): Port device team_slave_1 removed
[  245.887105][ T5220] team0 (unregistering): Port device team_slave_0 removed
[  245.901975][ T5220] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  246.227188][ T5220] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  246.671873][ T5220] bond0 (unregistering): Released all slaves
[  246.759822][ T7007] device hsr_slave_0 entered promiscuous mode
[  246.766773][ T7007] device hsr_slave_1 entered promiscuous mode
[  246.775234][ T7007] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  246.783365][ T7007] Cannot create hsr debugfs directory
[  247.133166][ T7007] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  247.149859][ T7007] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  247.212483][ T7007] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  247.241180][ T7007] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  247.278859][ T7097] netlink: 16 bytes leftover after parsing attributes in process `syz.4.970'.
[  247.309235][ T5783] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  247.496109][ T7007] 8021q: adding VLAN 0 to HW filter on device bond0
[  247.516655][ T7100] netlink: 'syz.4.971': attribute type 16 has an invalid length.
[  247.524708][ T5812] Bluetooth: hci2: command 0x041b tx timeout
[  247.543085][ T7100] netlink: 'syz.4.971': attribute type 17 has an invalid length.
[  247.573627][ T5783] usb 9-1: Using ep0 maxpacket: 32
[  247.599112][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  247.607104][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  247.636354][ T7007] 8021q: adding VLAN 0 to HW filter on device team0
[  247.676735][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  247.715789][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  247.739222][ T5783] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  247.759015][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[  247.766171][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[  247.778843][ T5783] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  247.803123][ T5783] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  247.823082][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  247.842874][ T5783] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.856838][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  247.889891][ T5783] usb 9-1: config 0 descriptor??
[  247.906330][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  247.923281][ T4256] bridge0: port 2(bridge_slave_1) entered blocking state
[  247.930460][ T4256] bridge0: port 2(bridge_slave_1) entered forwarding state
[  247.962809][ T5135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  247.997538][ T5135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  248.051418][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  248.078698][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  248.104901][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  248.128011][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  248.143118][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  248.169470][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  248.198403][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  248.224863][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  248.239523][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  248.272405][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  248.433030][ T5783] savu 0003:1E7D:2D5A.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.8-1/input0
[  248.660398][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  248.667957][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  248.703223][ T7007] 8021q: adding VLAN 0 to HW filter on device batadv0
[  248.721029][ T5811] usb 9-1: USB disconnect, device number 2
[  248.842831][ T7115] loop5: detected capacity change from 0 to 16
[  248.923643][ T7115] erofs: (device loop5): mounted with root inode @ nid 36.
[  248.966113][ T7115] erofs: (device loop5): z_erofs_map_blocks_iter: unknown type 3 @ offset 180223 of nid 36
[  248.996681][ T7115] erofs: (device loop5): z_erofs_readpage: failed to read, err [-95]
[  249.374938][ T7126] lo speed is unknown, defaulting to 1000
[  250.013169][ T4215] Bluetooth: hci2: command 0x040f tx timeout
[  250.256564][ T7131] loop5: detected capacity change from 0 to 512
[  250.291640][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  250.309875][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  250.370701][ T5135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  250.384020][ T7131] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  250.399708][ T5135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  250.428334][ T7131] EXT4-fs (loop5): warning: maximal mount count reached, running e2fsck is recommended
[  250.437971][ T7007] device veth0_vlan entered promiscuous mode
[  250.452706][ T7007] device veth1_vlan entered promiscuous mode
[  250.463876][ T7137] netlink: 'syz.0.981': attribute type 16 has an invalid length.
[  250.498949][ T7137] netlink: 'syz.0.981': attribute type 17 has an invalid length.
[  250.508206][ T7131] EXT4-fs error (device loop5): ext4_orphan_get:1401: comm syz.5.978: inode #15: comm syz.5.978: iget: illegal inode #
[  250.537870][ T7131] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.978: couldn't read orphan inode 15 (err -117)
[  250.559054][ T5135] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  250.569729][ T5135] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  250.619428][ T7131] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  250.639339][ T5135] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  250.711702][ T5135] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  250.730956][ T5135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  250.761808][ T7138] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 19: invalid block bitmap
[  250.797152][ T5135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  250.841575][ T7007] device veth0_macvtap entered promiscuous mode
[  250.884912][ T7007] device veth1_macvtap entered promiscuous mode
[  250.956878][ T7007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  251.012222][ T7007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  251.116912][ T7154] loop5: detected capacity change from 0 to 512
[  251.139056][ T7007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  251.200123][ T7007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  251.280794][ T7007] batman_adv: batadv0: Interface activated: batadv_slave_0
[  251.294377][ T7154] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  251.355642][ T5135] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  251.410944][ T7154] EXT4-fs (loop5): 1 truncate cleaned up
[  251.413764][ T5135] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  251.416745][ T7154] EXT4-fs (loop5): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrquota,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: writeback.
[  251.435040][ T5135] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  251.500808][ T5135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  251.515758][ T7007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  251.527508][ T7007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  251.558670][ T7007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  251.615852][ T7007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  251.627636][ T7007] batman_adv: batadv0: Interface activated: batadv_slave_1
[  251.664133][ T5135] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  251.699516][ T5135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  251.713555][ T7007] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  251.743507][ T7007] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  251.790751][ T7007] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  251.810005][ T7007] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  251.864081][ T7160] loop8: detected capacity change from 0 to 2048
[  251.953895][ T7160]  loop8: p1 < > p3
[  251.994360][ T7160] loop8: p3 size 134217728 extends beyond EOD, truncated
[  252.075723][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  252.088864][ T4215] Bluetooth: hci2: command 0x0419 tx timeout
[  252.122043][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  252.178838][ T5135] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  252.201697][ T5135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  252.232397][ T5135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  252.310775][ T5135] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  252.346864][ T7169] loop5: detected capacity change from 0 to 164
[  252.545738][ T7175] loop9: detected capacity change from 0 to 512
[  253.608961][ T7175] EXT4-fs (loop9): inline encryption not supported
[  253.721622][ T7179] netlink: 'syz.5.992': attribute type 16 has an invalid length.
[  253.741332][ T7175] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c119, mo2=0002]
[  253.759575][ T7179] netlink: 'syz.5.992': attribute type 17 has an invalid length.
[  253.814037][ T7175] EXT4-fs error (device loop9): ext4_xattr_ibody_find:2219: inode #15: comm syz.9.991: corrupted in-inode xattr
[  253.857462][ T7175] EXT4-fs error (device loop9): ext4_orphan_get:1406: comm syz.9.991: couldn't read orphan inode 15 (err -117)
[  253.923232][ T7183] loop8: detected capacity change from 0 to 16
[  253.929621][ T7175] EXT4-fs (loop9): mounted filesystem without journal. Opts: jqfmt=vfsv1,init_itable=0x00000000000003f1,auto_da_alloc,noload,nombcache,noblock_validity,debug,inlinecrypt,,errors=continue. Quota mode: none.
[  253.991338][ T7186] loop5: detected capacity change from 0 to 128
[  254.003887][ T7183] erofs: (device loop8): mounted with root inode @ nid 36.
[  254.054833][ T7186] FAT-fs (loop5): Directory bread(block 162) failed
[  254.061543][ T7183] erofs: (device loop8): z_erofs_readahead: readahead error at page 2 @ nid 89
[  254.118923][ T7186] FAT-fs (loop5): Directory bread(block 163) failed
[  254.136263][ T7186] FAT-fs (loop5): Directory bread(block 164) failed
[  254.145901][ T7186] FAT-fs (loop5): Directory bread(block 165) failed
[  254.156687][ T4173] erofs: (device loop8): z_erofs_lz4_decompress: failed to decompress 6887 in[4096, 0] out[8192]
[  254.197737][ T7186] FAT-fs (loop5): Directory bread(block 166) failed
[  254.206594][ T7183] erofs: (device loop8): z_erofs_lz4_decompress: failed to decompress 6887 in[4096, 0] out[8192]
[  254.209145][ T7186] FAT-fs (loop5): Directory bread(block 167) failed
[  254.242481][   T26] audit: type=1800 audit(1745546510.014:92): pid=7183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.993" name="file2" dev="loop8" ino=89 res=0 errno=0
[  254.250879][ T7186] FAT-fs (loop5): Directory bread(block 168) failed
[  254.271041][ T7186] FAT-fs (loop5): Directory bread(block 169) failed
[  254.329460][ T7186] FAT-fs (loop5): Directory bread(block 162) failed
[  254.339606][ T7186] FAT-fs (loop5): Directory bread(block 163) failed
[  254.351172][ T7186] attempt to access beyond end of device
[  254.351172][ T7186] loop5: rw=3, want=232, limit=128
[  254.380606][ T7186] attempt to access beyond end of device
[  254.380606][ T7186] loop5: rw=2051, want=234, limit=128
[  254.408819][ T1110] usb 1-1: new low-speed USB device number 9 using dummy_hcd
[  254.646803][ T7206] fuse: Bad value for 'group_id'
[  254.964350][ T1110] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  254.975935][ T1110] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  254.985866][ T1110] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[  254.995001][ T1110] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  255.031200][ T1110] usb 1-1: config 0 descriptor??
[  255.039278][ T2281] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  255.320748][ T7211] netlink: 'syz.9.1005': attribute type 16 has an invalid length.
[  255.335229][ T7211] netlink: 'syz.9.1005': attribute type 17 has an invalid length.
[  255.679062][ T2281] usb 9-1: Using ep0 maxpacket: 8
[  255.685044][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  255.692206][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  255.839042][ T1110] usbhid 1-1:0.0: can't add hid device: -71
[  255.845342][ T2281] usb 9-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  255.854712][ T1110] usbhid: probe of 1-1:0.0 failed with error -71
[  255.874931][ T2281] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  255.905529][ T1110] usb 1-1: USB disconnect, device number 9
[  255.929812][ T2281] usb 9-1: config 0 descriptor??
[  256.291002][ T4173] Bluetooth: hci4: unexpected event for opcode 0x2002
[  256.319595][ T2281] asix 9-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  257.279481][ T7232] loop0: detected capacity change from 0 to 2048
[  257.740166][ T7234] fuse: Bad value for 'group_id'
[  257.746697][ T7211] bridge0: port 2(bridge_slave_1) entered disabled state
[  257.754220][ T7211] bridge0: port 1(bridge_slave_0) entered disabled state
[  257.804157][ T7236] loop0: detected capacity change from 0 to 256
[  257.878964][ T7236] /dev/loop0: Can't open blockdev
[  258.308950][ T2281] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  258.325622][ T2281] asix: probe of 9-1:0.0 failed with error -71
[  258.327538][ T7211] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  258.345041][ T2281] usb 9-1: USB disconnect, device number 3
[  258.395955][ T7211] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  258.898693][ T7211] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  258.909699][ T7211] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  258.925768][ T7211] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  258.935348][ T7211] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  258.997363][ T7246] loop8: detected capacity change from 0 to 128
[  259.075564][ T7246] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  259.086621][ T7246] ext4 filesystem being mounted at /56/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  259.123942][ T7246] EXT4-fs warning (device loop8): ext4_block_to_path:107: block 779448419 > max in inode 13
[  259.362826][ T7257] fuse: Bad value for 'group_id'
[  259.970911][ T7266] loop8: detected capacity change from 0 to 128
[  260.061870][ T7266] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  260.114962][ T7266] ext4 filesystem being mounted at /58/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  260.227979][ T7280] netlink: 'syz.0.1033': attribute type 16 has an invalid length.
[  260.245487][ T7280] netlink: 'syz.0.1033': attribute type 17 has an invalid length.
[  260.248453][ T7278] loop5: detected capacity change from 0 to 1024
[  260.289993][ T7266] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5806: Corrupt filesystem
[  260.307932][ T7266] EXT4-fs error (device loop8): ext4_dirty_inode:6010: inode #12: comm syz.8.1027: mark_inode_dirty error
[  260.336173][ T7278] hfsplus: invalid btree flag
[  260.344906][ T7278] hfsplus: failed to load attributes file
[  260.357274][ T7266] EXT4-fs error (device loop8): ext4_free_blocks:6223: comm syz.8.1027: Freeing blocks not in datazone - block = 53, count = 8
[  260.371344][ T7266] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5806: Corrupt filesystem
[  260.401233][ T7266] EXT4-fs error (device loop8): __ext4_ext_dirty:183: inode #12: comm syz.8.1027: mark_inode_dirty error
[  260.454427][ T7290] loop9: detected capacity change from 0 to 1024
[  260.471720][ T7266] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5806: Corrupt filesystem
[  261.811452][ T7286] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[  261.826505][ T7266] EXT4-fs error (device loop8): ext4_punch_hole:4112: inode #12: comm syz.8.1027: mark_inode_dirty error
[  261.863313][ T4353] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  262.819651][ T6102] EXT4-fs error (device loop8): ext4_map_blocks:628: inode #2: block 4: comm syz-executor: lblock 0 mapped to illegal pblock 4 (length 1)
[  262.879686][ T6102] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5806: Corrupt filesystem
[  262.920148][ T6102] EXT4-fs error (device loop8): ext4_dirty_inode:6010: inode #2: comm syz-executor: mark_inode_dirty error
[  263.145865][ T4353] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  263.194942][ T7304] netlink: 'syz.4.1045': attribute type 16 has an invalid length.
[  263.220934][ T7304] netlink: 'syz.4.1045': attribute type 17 has an invalid length.
[  263.242301][ T7308] loop9: detected capacity change from 0 to 256
[  263.314471][ T4353] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  263.340176][ T7308] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d)
[  263.377678][   T26] audit: type=1800 audit(1745546519.144:93): pid=7308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1046" name="file2" dev="loop9" ino=1048654 res=0 errno=0
[  263.443539][ T4353] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  263.444719][ T7311] loop5: detected capacity change from 0 to 1024
[  263.717019][ T7323] loop9: detected capacity change from 0 to 2048
[  263.722687][ T7324] loop5: detected capacity change from 0 to 1024
[  263.916096][ T7323] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  264.747069][ T7329] lo speed is unknown, defaulting to 1000
[  264.950737][ T7329] chnl_net:caif_netlink_parms(): no params data found
[  265.085809][ T7341] netlink: 'syz.9.1057': attribute type 16 has an invalid length.
[  265.094882][ T7341] netlink: 'syz.9.1057': attribute type 17 has an invalid length.
[  265.345483][ T7329] bridge0: port 1(bridge_slave_0) entered blocking state
[  265.368102][ T7329] bridge0: port 1(bridge_slave_0) entered disabled state
[  265.391218][ T7329] device bridge_slave_0 entered promiscuous mode
[  265.400800][ T7329] bridge0: port 2(bridge_slave_1) entered blocking state
[  265.408161][ T7329] bridge0: port 2(bridge_slave_1) entered disabled state
[  265.416727][ T7329] device bridge_slave_1 entered promiscuous mode
[  265.466562][ T7329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  266.819578][ T2281] usb 1-1: new full-speed USB device number 10 using dummy_hcd
[  266.840171][ T4216] Bluetooth: hci3: command 0x0409 tx timeout
[  266.859921][ T7329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  267.133835][ T7368] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1068'.
[  267.202549][ T7370] netlink: 'syz.4.1068': attribute type 13 has an invalid length.
[  267.219155][ T2281] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  267.249677][ T2281] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  267.274371][ T2281] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  267.307483][ T2281] usb 1-1: config 0 descriptor??
[  267.339171][ T7350] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  267.570792][ T7370] 8021q: adding VLAN 0 to HW filter on device bond0
[  267.583258][ T7370] 8021q: adding VLAN 0 to HW filter on device team0
[  267.680809][ T7370] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  267.776640][ T7329] team0: Port device team_slave_0 added
[  267.800285][   T21] lo speed is unknown, defaulting to 1000
[  267.805446][ T7329] team0: Port device team_slave_1 added
[  267.818881][ T7381] netlink: 'syz.5.1071': attribute type 16 has an invalid length.
[  267.823023][ T2281] elan 0003:04F3:0755.0003: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0
[  267.827741][ T7381] netlink: 'syz.5.1071': attribute type 17 has an invalid length.
[  267.876144][ T7370] syz.4.1068 (7370) used greatest stack depth: 17688 bytes left
[  267.950463][ T7390] loop5: detected capacity change from 0 to 128
[  268.069511][ T7329] batman_adv: batadv0: Adding interface: batadv_slave_0
[  268.076501][ T7329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  268.106750][ T4249] usb 1-1: USB disconnect, device number 10
[  268.171520][ T7329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  268.405839][ T7329] batman_adv: batadv0: Adding interface: batadv_slave_1
[  268.790990][ T7329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  268.878082][ T7329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  269.032812][ T7329] device hsr_slave_0 entered promiscuous mode
[  269.038841][ T4213] Bluetooth: hci3: command 0x041b tx timeout
[  269.058574][ T7415] loop9: detected capacity change from 0 to 1024
[  269.064581][ T7420] loop0: detected capacity change from 0 to 512
[  269.073451][ T7329] device hsr_slave_1 entered promiscuous mode
[  269.080504][ T7329] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  269.088189][ T7329] Cannot create hsr debugfs directory
[  269.094702][ T7411] netlink: 'syz.5.1086': attribute type 16 has an invalid length.
[  269.101355][ T7415] hfsplus: failed to load root directory
[  269.111862][ T7411] netlink: 'syz.5.1086': attribute type 17 has an invalid length.
[  269.150900][ T4353] device hsr_slave_0 left promiscuous mode
[  269.158965][ T4353] device hsr_slave_1 left promiscuous mode
[  269.173009][ T4353] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  269.209010][ T4353] batman_adv: batadv0: Removing interface: batadv_slave_0
[  269.244597][ T4353] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  269.254175][ T4353] batman_adv: batadv0: Removing interface: batadv_slave_1
[  269.376762][ T4353] device bridge_slave_1 left promiscuous mode
[  269.406606][ T4353] bridge0: port 2(bridge_slave_1) entered disabled state
[  269.456783][ T4353] device bridge_slave_0 left promiscuous mode
[  269.475694][ T4353] bridge0: port 1(bridge_slave_0) entered disabled state
[  269.836754][ T4353] device veth1_macvtap left promiscuous mode
[  269.966430][ T4353] device veth0_macvtap left promiscuous mode
[  270.098903][ T4353] device veth1_vlan left promiscuous mode
[  270.125192][ T4353] device veth0_vlan left promiscuous mode
[  270.335936][ T7448] loop0: detected capacity change from 0 to 128
[  271.841478][ T4213] Bluetooth: hci3: command 0x040f tx timeout
[  271.913386][ T7446] loop0: detected capacity change from 0 to 256
[  271.929179][ T4353] team0 (unregistering): Port device team_slave_1 removed
[  271.947502][ T4353] team0 (unregistering): Port device team_slave_0 removed
[  271.960168][ T4353] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  271.974816][ T4353] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  272.061300][ T4353] team0 (unregistering): Port device bond0 removed
[  272.186970][ T4353] bond0 (unregistering): Released all slaves
[  273.965110][ T2281] Bluetooth: hci3: command 0x0419 tx timeout
[  274.327967][ T7477] lo speed is unknown, defaulting to 1000
[  274.839507][ T7487] syz.9.1113 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  274.962577][ T7487] lo speed is unknown, defaulting to 1000
[  275.247908][ T7329] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  275.404161][ T7329] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  275.662632][ T7329] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  275.899368][ T7329] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  276.013790][ T7504] loop9: detected capacity change from 0 to 1024
[  276.108817][ T4215] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  276.180409][ T7508] netlink: 'syz.0.1122': attribute type 16 has an invalid length.
[  276.198807][ T7508] netlink: 'syz.0.1122': attribute type 17 has an invalid length.
[  276.249684][ T7329] 8021q: adding VLAN 0 to HW filter on device bond0
[  276.278044][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  276.287031][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  276.300517][ T7329] 8021q: adding VLAN 0 to HW filter on device team0
[  276.322010][ T5478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  276.339630][ T5478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  276.348731][ T5478] bridge0: port 1(bridge_slave_0) entered blocking state
[  276.355854][ T5478] bridge0: port 1(bridge_slave_0) entered forwarding state
[  276.363786][ T4215] usb 6-1: Using ep0 maxpacket: 32
[  276.370998][   T26] audit: type=1326 audit(1745546532.144:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7512 comm="syz.0.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0de82d9969 code=0x7ffc0000
[  276.424629][ T7329] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  276.440011][ T7329] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  276.452702][   T26] audit: type=1326 audit(1745546532.144:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7512 comm="syz.0.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0de82d9969 code=0x7ffc0000
[  276.478294][ T5478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  276.479245][   T26] audit: type=1326 audit(1745546532.164:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7512 comm="syz.0.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0de82d9969 code=0x7ffc0000
[  276.509732][ T5478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  276.521828][   T26] audit: type=1326 audit(1745546532.164:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7512 comm="syz.0.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0de82d9969 code=0x7ffc0000
[  276.549072][ T4215] usb 6-1: config 0 has an invalid interface number: 184 but max is 0
[  276.557316][ T4215] usb 6-1: config 0 has no interface number 0
[  276.578892][   T26] audit: type=1326 audit(1745546532.164:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7512 comm="syz.0.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0de82d9969 code=0x7ffc0000
[  276.583905][ T5478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  276.609920][ T4215] usb 6-1: config 0 interface 184 has no altsetting 0
[  276.671019][ T5478] bridge0: port 2(bridge_slave_1) entered blocking state
[  276.672402][   T26] audit: type=1326 audit(1745546532.164:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7512 comm="syz.0.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f0de82d9969 code=0x7ffc0000
[  276.678199][ T5478] bridge0: port 2(bridge_slave_1) entered forwarding state
[  276.766961][   T26] audit: type=1326 audit(1745546532.174:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7512 comm="syz.0.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0de82d9969 code=0x7ffc0000
[  276.803650][ T5478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  276.829245][ T4215] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  276.838370][ T4215] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  276.857187][   T26] audit: type=1326 audit(1745546532.174:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7512 comm="syz.0.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0de82d9969 code=0x7ffc0000
[  276.859157][ T5478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  276.907979][ T4215] usb 6-1: Product: syz
[  276.912303][ T4215] usb 6-1: Manufacturer: syz
[  276.917156][ T4215] usb 6-1: SerialNumber: syz
[  276.928310][   T26] audit: type=1326 audit(1745546532.174:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7512 comm="syz.0.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f0de82d9969 code=0x7ffc0000
[  276.930951][ T4215] usb 6-1: config 0 descriptor??
[  276.966987][ T5478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  276.993194][ T5478] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  277.009544][ T5478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  277.028901][   T26] audit: type=1326 audit(1745546532.174:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7512 comm="syz.0.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0de82d9969 code=0x7ffc0000
[  277.032845][ T5478] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  277.061226][ T4215] smsc75xx v1.0.0
[  277.095700][ T5478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  277.129288][ T5478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  277.151376][ T5478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  277.171141][ T5478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  277.315792][ T5478] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  277.354656][ T5478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  277.959438][ T7533] netlink: 'syz.9.1131': attribute type 12 has an invalid length.
[  278.215113][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  278.225726][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  278.239075][ T4215] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  278.259216][ T4215] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  278.270108][ T7539] netlink: 'syz.9.1132': attribute type 16 has an invalid length.
[  278.277979][ T7539] netlink: 'syz.9.1132': attribute type 17 has an invalid length.
[  278.310004][ T7329] 8021q: adding VLAN 0 to HW filter on device batadv0
[  278.387621][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  278.400214][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  278.460043][ T5135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  278.477177][ T5135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  278.506857][ T5135] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  278.535220][ T5135] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  278.560735][ T7329] device veth0_vlan entered promiscuous mode
[  278.569142][ T4215] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  278.603688][ T7329] device veth1_vlan entered promiscuous mode
[  278.609906][ T4215] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  278.640057][ T4215] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  278.670335][ T4215] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  278.683837][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  278.692783][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  278.700840][ T4215] smsc75xx: probe of 6-1:0.184 failed with error -71
[  278.708432][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  278.720507][ T4215] usb 6-1: USB disconnect, device number 4
[  278.738230][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  278.753041][ T7329] device veth0_macvtap entered promiscuous mode
[  278.778065][ T7329] device veth1_macvtap entered promiscuous mode
[  278.811406][ T7329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  278.834213][ T7329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  278.990836][ T7329] batman_adv: batadv0: Interface activated: batadv_slave_0
[  278.998845][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  279.009206][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  279.033340][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  280.238866][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  280.267599][ T7329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  280.298018][ T7329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  280.334853][ T7329] batman_adv: batadv0: Interface activated: batadv_slave_1
[  280.412342][ T7329] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  280.449719][ T7558] loop9: detected capacity change from 0 to 1024
[  280.458755][ T7329] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  280.496205][ T7329] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  280.584970][ T7329] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  280.686579][ T4175] Bluetooth: hci0: unexpected event for opcode 0x9089
[  280.693611][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  280.711340][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  280.722556][ T7558] EXT4-fs (loop9): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  280.734482][ T7558] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869)
[  280.749283][ T7558] EXT4-fs error (device loop9): ext4_get_journal_inode:5160: comm syz.9.1140: inode #1: comm syz.9.1140: iget: illegal inode #
[  280.903438][ T7558] EXT4-fs (loop9): no journal found
[  281.627159][ T5220] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  281.643644][ T4256] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  281.651950][ T5220] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  281.748358][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  282.396838][ T4256] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  282.445419][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  283.112031][ T7596] xt_CT: You must specify a L4 protocol and not use inversions on it
[  283.675847][ T7599] loop0: detected capacity change from 0 to 256
[  283.739315][ T7602] loop1: detected capacity change from 0 to 764
[  283.749010][ T7599] /dev/loop0: Can't open blockdev
[  283.825342][ T7602] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  284.492370][ T7611] loop1: detected capacity change from 0 to 1024
[  284.820787][ T7611] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a000c018, mo2=0002]
[  284.859863][ T7611] System zones: 0-1, 3-12
[  284.899846][ T7611] EXT4-fs (loop1): mounted filesystem without journal. Opts: nolazytime,bsddf,barrier=0x0000000000000000,debug,debug_want_extra_isize=0x0000000000000080,resuid=0x0000000000000000,nodelalloc,acl,min_batch_time=0x0000000000000007,,errors=continue. Quota mode: none.
[  286.533989][ T4353] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  288.301152][ T4353] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  288.535868][ T4353] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  288.653621][ T7682] loop9: detected capacity change from 0 to 1024
[  288.700407][ T7678] loop0: detected capacity change from 0 to 256
[  288.725277][ T7679] loop1: detected capacity change from 0 to 128
[  288.889493][ T7682] hfsplus: xattr search failed
[  289.158679][ T7679] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  289.204991][ T4353] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.238928][ T7679] ext4 filesystem being mounted at /5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  289.291353][ T7007] hfsplus: node 4:3 still has 1 user(s)!
[  289.488645][   T26] kauditd_printk_skb: 9 callbacks suppressed
[  289.488663][   T26] audit: type=1804 audit(1745546545.254:113): pid=7689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1181" name="/newroot/5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0" dev="loop1" ino=12 res=1 errno=0
[  290.352451][ T7699] loop9: detected capacity change from 0 to 8
[  290.395481][ T7701] loop1: detected capacity change from 0 to 128
[  290.404991][ T7703] fuse: Unknown parameter 'group_i00000000000000000000'
[  290.602868][ T7701] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  290.628947][ T7701] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  291.637555][ T7717] loop0: detected capacity change from 0 to 1024
[  292.325389][ T7717] loop0: detected capacity change from 0 to 2048
[  292.365624][ T7729] loop9: detected capacity change from 0 to 256
[  292.496951][ T7737] fuse: Unknown parameter 'group_i00000000000000000000'
[  292.570697][ T7729] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  292.683296][ T7742] capability: warning: `syz.4.1204' uses 32-bit capabilities (legacy support in use)
[  292.802754][ T7746] loop0: detected capacity change from 0 to 1024
[  293.626971][ T7756] loop1: detected capacity change from 0 to 2048
[  294.637638][ T7767] loop0: detected capacity change from 0 to 128
[  294.751701][ T7770] fuse: Unknown parameter 'group_i00000000000000000000'
[  295.378482][ T7773] loop9: detected capacity change from 0 to 1024
[  295.397062][ T7767] loop0: detected capacity change from 0 to 256
[  295.459450][ T7767] exfat: Unknown parameter ''
[  295.492474][ T4353] device hsr_slave_0 left promiscuous mode
[  295.700070][ T4353] device hsr_slave_1 left promiscuous mode
[  295.817189][ T4353] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  295.828191][ T4353] batman_adv: batadv0: Removing interface: batadv_slave_0
[  295.957129][ T7773] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  295.981012][ T4353] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  296.052427][ T4353] batman_adv: batadv0: Removing interface: batadv_slave_1
[  296.131905][ T4353] device bridge_slave_1 left promiscuous mode
[  296.188207][ T4353] bridge0: port 2(bridge_slave_1) entered disabled state
[  296.205851][ T7781] netlink: 168 bytes leftover after parsing attributes in process `syz.9.1215'.
[  296.234608][ T4353] device bridge_slave_0 left promiscuous mode
[  296.242410][ T7781] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  296.258764][ T4353] bridge0: port 1(bridge_slave_0) entered disabled state
[  296.521414][ T4353] device veth1_macvtap left promiscuous mode
[  296.560131][ T4353] device veth0_macvtap left promiscuous mode
[  296.602988][ T4353] device veth1_vlan left promiscuous mode
[  296.655862][ T4353] device veth0_vlan left promiscuous mode
[  296.746365][ T7783] loop5: detected capacity change from 0 to 1024
[  296.794730][ T7785] loop0: detected capacity change from 0 to 1024
[  296.856111][   T26] audit: type=1800 audit(1745546552.624:114): pid=7783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1219" name="file1" dev="loop5" ino=20 res=0 errno=0
[  297.019664][  T154] hfsplus: b-tree write err: -5, ino 4
[  297.435309][ T4353] team0 (unregistering): Port device team_slave_1 removed
[  297.467813][ T4353] team0 (unregistering): Port device team_slave_0 removed
[  297.484732][ T4353] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  297.514534][ T4353] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  297.657542][ T4353] bond0 (unregistering): Released all slaves
[  297.831077][ T7805] loop1: detected capacity change from 0 to 1024
[  298.123077][ T7805] EXT4-fs (loop1): Ignoring removed orlov option
[  298.141231][ T7805] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option
[  299.278929][ T7805] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none.
[  299.393857][ T7824] loop5: detected capacity change from 0 to 128
[  299.934392][ T7837] loop9: detected capacity change from 0 to 8
[  300.070875][ T7837] SQUASHFS error: lzo decompression failed, data probably corrupt
[  300.094991][ T7837] SQUASHFS error: Failed to read block 0x0: -5
[  300.155640][ T7837] SQUASHFS error: Unable to read data cache entry [0]
[  300.248545][ T7837] SQUASHFS error: Unable to read page, block 0, size ff
[  300.255612][ T7837] SQUASHFS error: Unable to read data cache entry [0]
[  300.315040][ T7837] SQUASHFS error: Unable to read page, block 0, size ff
[  300.372259][ T7837] SQUASHFS error: lzo decompression failed, data probably corrupt
[  300.398422][ T7837] SQUASHFS error: Failed to read block 0x0: -5
[  300.439391][ T7837] SQUASHFS error: lzo decompression failed, data probably corrupt
[  300.671315][ T7837] SQUASHFS error: Failed to read block 0x0: -5
[  301.281236][   T26] audit: type=1800 audit(1745546557.110:115): pid=7837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1237" name="file2" dev="loop9" ino=3 res=0 errno=0
[  301.628747][   T23] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  301.649161][ T4175] Bluetooth: hci1: link tx timeout
[  301.654325][ T4175] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa
[  301.662755][ T4175] Bluetooth: hci1: link tx timeout
[  301.667957][ T4175] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  301.860051][ T7867] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1248'.
[  303.641523][   T23] usb 2-1: unable to get BOS descriptor or descriptor too short
[  303.763410][   T23] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  303.922898][   T23] usb 2-1: config 1 has no interface number 1
[  304.175340][   T23] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  305.044227][ T7893] loop1: detected capacity change from 0 to 8
[  305.102285][   T23] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  305.134991][   T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  305.219868][   T23] usb 2-1: can't set config #1, error -71
[  305.258996][   T23] usb 2-1: USB disconnect, device number 3
[  305.303953][ T7902] loop0: detected capacity change from 0 to 128
[  305.761745][ T7329] SQUASHFS error: Unable to read directory block [1d0:22]
[  305.818368][ T7329] SQUASHFS error: Unable to read directory block [1d0:22]
[  305.980263][ T7329] SQUASHFS error: Unknown inode type 0 in squashfs_iget!
[  305.994092][ T7329] SQUASHFS error: Unknown inode type 0 in squashfs_iget!
[  307.884636][ T7916] loop0: detected capacity change from 0 to 256
[  308.644256][ T7916] /dev/loop0: Can't open blockdev
[  310.674513][ T7937] lo speed is unknown, defaulting to 1000
[  311.245606][ T7947] loop9: detected capacity change from 0 to 1024
[  311.260634][ T7937] chnl_net:caif_netlink_parms(): no params data found
[  311.318237][ T7947] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  311.340968][ T7947] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  311.596054][ T7937] bridge0: port 1(bridge_slave_0) entered blocking state
[  311.621807][ T7955] trusted_key: encrypted_key: insufficient parameters specified
[  311.627269][ T7937] bridge0: port 1(bridge_slave_0) entered disabled state
[  311.658121][ T7937] device bridge_slave_0 entered promiscuous mode
[  311.705863][ T7937] bridge0: port 2(bridge_slave_1) entered blocking state
[  311.861921][ T7937] bridge0: port 2(bridge_slave_1) entered disabled state
[  311.881661][ T7937] device bridge_slave_1 entered promiscuous mode
[  313.146527][   T23] Bluetooth: hci3: command 0x0409 tx timeout
[  313.261710][ T7937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  313.360279][ T7937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  313.513906][ T7937] team0: Port device team_slave_0 added
[  313.565342][ T7937] team0: Port device team_slave_1 added
[  313.614393][ T4353] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  313.615534][ T7989] loop9: detected capacity change from 0 to 128
[  313.803673][ T7937] batman_adv: batadv0: Adding interface: batadv_slave_0
[  313.814436][ T7937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  313.844328][ T7937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  313.863278][ T7937] batman_adv: batadv0: Adding interface: batadv_slave_1
[  313.874576][ T7937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  313.931902][ T7937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  314.360884][ T4353] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  314.774809][ T4353] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  314.802971][ T7996] loop5: detected capacity change from 0 to 1024
[  314.944219][ T7937] device hsr_slave_0 entered promiscuous mode
[  314.961261][ T7937] device hsr_slave_1 entered promiscuous mode
[  314.975612][ T7937] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  314.988682][   T26] audit: type=1800 audit(1745546571.074:116): pid=7996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1285" name="file1" dev="loop5" ino=20 res=0 errno=0
[  315.002388][ T7937] Cannot create hsr debugfs directory
[  315.072220][ T5478] hfsplus: b-tree write err: -5, ino 4
[  315.081118][ T4353] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  315.200913][   T21] Bluetooth: hci3: command 0x041b tx timeout
[  315.720403][ T8009] loop9: detected capacity change from 0 to 512
[  315.798636][ T8009] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  315.859988][ T8009] EXT4-fs (loop9): 1 truncate cleaned up
[  315.882683][ T8009] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  316.785705][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  316.792231][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  317.138937][ T8024] loop5: detected capacity change from 0 to 128
[  317.259059][ T4211] Bluetooth: hci3: command 0x040f tx timeout
[  317.307577][ T8029] loop9: detected capacity change from 0 to 1024
[  317.434562][ T7937] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  317.452538][ T7937] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  318.992928][ T7937] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  319.007647][ T7937] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  319.147663][ T8029] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  319.149219][ T7937] 8021q: adding VLAN 0 to HW filter on device bond0
[  319.197743][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  319.240007][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  319.278604][ T8040] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  319.320886][ T5811] Bluetooth: hci3: command 0x0419 tx timeout
[  319.827358][ T7937] 8021q: adding VLAN 0 to HW filter on device team0
[  319.835526][ T8044] fuse: Bad value for 'fd'
[  319.877000][ T8047] loop5: detected capacity change from 0 to 128
[  319.883785][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  319.899146][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  319.915236][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  319.922433][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  319.931367][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  319.969087][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  319.985980][ T8047] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  320.001730][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  320.030045][ T8047] ext4 filesystem being mounted at /185/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  320.052124][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[  320.059314][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[  320.294820][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  320.381711][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  320.405712][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  320.434476][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  320.614489][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  321.374497][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  321.433873][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  321.641950][ T5478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  321.683276][ T5478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  321.721848][ T5478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  321.781149][ T5478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  321.802764][ T7937] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  321.859401][   T26] audit: type=1326 audit(1745546577.997:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8071 comm="syz.4.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe553346969 code=0x7ffc0000
[  321.947252][ T4353] device hsr_slave_0 left promiscuous mode
[  321.967320][   T26] audit: type=1326 audit(1745546578.007:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8071 comm="syz.4.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe553346969 code=0x7ffc0000
[  321.991257][ T4353] device hsr_slave_1 left promiscuous mode
[  321.999448][ T8077] fuse: Bad value for 'fd'
[  322.006904][ T4353] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  322.037339][ T4353] batman_adv: batadv0: Removing interface: batadv_slave_0
[  322.066643][ T4353] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  322.074652][   T26] audit: type=1326 audit(1745546578.007:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8071 comm="syz.4.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe553346969 code=0x7ffc0000
[  322.108185][ T4353] batman_adv: batadv0: Removing interface: batadv_slave_1
[  322.136011][ T4353] device bridge_slave_1 left promiscuous mode
[  322.147781][ T4353] bridge0: port 2(bridge_slave_1) entered disabled state
[  322.155390][   T26] audit: type=1326 audit(1745546578.007:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8071 comm="syz.4.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe553346969 code=0x7ffc0000
[  322.191019][ T4353] device bridge_slave_0 left promiscuous mode
[  322.207756][ T4353] bridge0: port 1(bridge_slave_0) entered disabled state
[  322.225340][   T26] audit: type=1326 audit(1745546578.007:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8071 comm="syz.4.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7fe553346969 code=0x7ffc0000
[  322.270072][ T4353] device veth1_macvtap left promiscuous mode
[  322.276142][ T4353] device veth0_macvtap left promiscuous mode
[  322.289789][ T4353] device veth1_vlan left promiscuous mode
[  322.298743][   T26] audit: type=1326 audit(1745546578.007:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8071 comm="syz.4.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe553346969 code=0x7ffc0000
[  322.326593][ T4353] device veth0_vlan left promiscuous mode
[  322.376426][   T26] audit: type=1326 audit(1745546578.007:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8071 comm="syz.4.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe553346969 code=0x7ffc0000
[  323.087217][ T4353] team0 (unregistering): Port device team_slave_1 removed
[  323.120692][ T4353] team0 (unregistering): Port device team_slave_0 removed
[  323.158685][ T4353] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  323.193327][ T4353] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  324.213895][   T21] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  324.424314][ T4353] bond0 (unregistering): Released all slaves
[  324.472213][   T21] usb 6-1: Using ep0 maxpacket: 8
[  324.740247][   T21] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[  324.750577][   T21] usb 6-1: config 179 has no interface number 0
[  324.759723][   T21] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  324.779430][   T21] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  324.791378][   T21] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  325.136633][   T21] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  325.496809][   T21] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  325.510804][ T5478] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  325.519483][   T21] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  325.531048][ T5478] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  325.753337][ T7937] 8021q: adding VLAN 0 to HW filter on device batadv0
[  325.764511][   T21] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  325.804562][ T8093] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  325.811671][ T8102] loop0: detected capacity change from 0 to 1024
[  325.884244][ T5478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  325.916926][ T5478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  325.956576][ T5478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  325.965870][ T5478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  325.976047][ T5478] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  325.985486][ T5478] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  326.010667][ T7937] device veth0_vlan entered promiscuous mode
[  326.043275][ T8105] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1315'.
[  326.093766][ T7937] device veth1_vlan entered promiscuous mode
[  326.144883][ T5478] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  326.157598][ T5478] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  326.176540][ T5478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  326.226816][   T21] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input9
[  326.238488][ T5478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  326.255502][ T7937] device veth0_macvtap entered promiscuous mode
[  326.317747][ T7937] device veth1_macvtap entered promiscuous mode
[  326.329554][ T4213] usb 6-1: USB disconnect, device number 5
[  326.341897][    C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  326.363336][ T4213] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  326.370461][ T8111] fuse: Bad value for 'fd'
[  326.443732][ T7937] batman_adv: batadv0: Interface activated: batadv_slave_0
[  326.457224][ T7937] batman_adv: batadv0: Interface activated: batadv_slave_1
[  326.475795][ T5478] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  326.491422][ T5478] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  326.511024][ T5478] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  326.525987][ T5478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  326.545633][ T5478] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  326.586122][ T5478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  326.625608][ T7937] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  326.737226][ T7937] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  326.845094][ T7937] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  327.007836][ T7937] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  327.483203][ T8126] loop9: detected capacity change from 0 to 512
[  327.529288][ T8126] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem
[  327.537897][ T8126] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (20904!=33349)
[  327.586162][ T5135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  327.622611][ T5135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  327.632147][ T8126] EXT4-fs (loop9): revision level too high, forcing read-only mode
[  327.755980][ T8126] EXT4-fs (loop9): orphan cleanup on readonly fs
[  327.766678][ T8126] EXT4-fs error (device loop9): ext4_map_blocks:628: inode #2: block 4: comm syz.9.1323: lblock 0 mapped to illegal pblock 4 (length 1)
[  327.785578][ T8126] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -117
[  327.793860][ T8126] EXT4-fs (loop9): mounted filesystem without journal. Opts: jqfmt=vfsold,noquota,errors=continue,noload,data_err=ignore,usrjquota="init_itable=0x0000000000000601,auto_da_alloc=0x0000000000000000,,errors=continue. Quota mode: writeback.
[  328.837058][ T5478] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  328.956138][ T8137] loop0: detected capacity change from 0 to 256
[  329.034328][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  329.055402][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  330.037406][ T5135] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  330.441114][ T8152] loop0: detected capacity change from 0 to 128
[  330.941844][ T8158] loop0: detected capacity change from 0 to 128
[  332.812082][ T8168] loop2: detected capacity change from 0 to 128
[  334.005119][ T8168] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  334.018549][ T8168] ext4 filesystem being mounted at /3/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  335.811809][ T8193] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1347'.
[  336.381945][ T8178] loop9: detected capacity change from 0 to 32768
[  336.530791][ T8178] XFS (loop9): Mounting V5 Filesystem
[  336.842267][ T8178] XFS (loop9): Ending clean mount
[  336.869824][ T8212] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvtap0, syncid = 4, id = 0
[  337.748209][ T7007] XFS (loop9): Unmounting Filesystem
[  339.015786][ T8225] loop5: detected capacity change from 0 to 128
[  340.412827][ T8234] Cannot find set identified by id 0 to match
[  342.222222][ T8245] loop9: detected capacity change from 0 to 4096
[  342.480752][ T8258] loop5: detected capacity change from 0 to 128
[  342.564022][ T8245] NILFS (loop9): invalid segment: Checksum error in segment payload
[  342.607339][ T8258] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  342.626021][ T8258] ext4 filesystem being mounted at /198/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  342.646774][ T8245] NILFS (loop9): trying rollback from an earlier position
[  343.310862][ T8267] loop0: detected capacity change from 0 to 128
[  343.343041][ T8245] NILFS (loop9): recovery complete
[  343.444145][ T8270] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  345.095898][   T26] audit: type=1800 audit(1745546601.325:124): pid=8245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1363" name="file1" dev="loop9" ino=12 res=0 errno=0
[  349.978286][ T8313] loop9: detected capacity change from 0 to 128
[  350.269872][ T5135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  350.285339][ T5135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  350.309952][ T5478] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  352.652093][ T8344] loop2: detected capacity change from 0 to 128
[  352.718906][ T8344] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  352.750087][ T8344] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  353.852006][ T8357] loop5: detected capacity change from 0 to 128
[  355.491567][ T4249] usb 1-1: new full-speed USB device number 11 using dummy_hcd
[  356.738820][ T4249] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  356.781242][ T4249] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping
[  356.958827][ T5811] usb 6-1: new full-speed USB device number 6 using dummy_hcd
[  356.968705][ T4249] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  356.999807][ T4249] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  357.018647][ T4249] usb 1-1: Product: syz
[  357.029856][ T4249] usb 1-1: Manufacturer: syz
[  357.040649][ T4249] usb 1-1: SerialNumber: syz
[  357.059520][ T4249] usb 1-1: config 0 descriptor??
[  357.078651][ T8368] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  357.106103][ T8368] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  357.198442][ T4249] usb 1-1: can't set config #0, error -71
[  357.208883][ T4249] usb 1-1: USB disconnect, device number 11
[  357.556475][ T5811] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  357.967783][ T5811] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  357.985267][ T5811] usb 6-1: Product: syz
[  357.997536][ T5811] usb 6-1: Manufacturer: syz
[  358.007055][ T5811] usb 6-1: SerialNumber: syz
[  358.041952][ T5811] usb 6-1: config 0 descriptor??
[  358.201927][ T8403] loop2: detected capacity change from 0 to 128
[  358.997281][ T5811] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  359.067768][ T8407] loop0: detected capacity change from 0 to 16
[  359.146101][ T8407] erofs: (device loop0): mounted with root inode @ nid 36.
[  359.192985][ T8407] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 180223 of nid 36
[  359.208985][ T8407] erofs: (device loop0): z_erofs_readpage: failed to read, err [-95]
[  359.255206][ T8408] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 180223 of nid 36
[  359.283356][ T8408] erofs: (device loop0): z_erofs_readpage: failed to read, err [-95]
[  359.307544][ T8410] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1414'.
[  359.680427][ T8423] loop0: detected capacity change from 0 to 128
[  360.966905][ T8435] team0: No ports can be present during mode change
[  360.992921][ T8435] device vlan0 entered promiscuous mode
[  361.020638][ T8435] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1423'.
[  361.124958][ T8435] team0 (unregistering): Port device team_slave_0 removed
[  361.183321][ T8435] team0 (unregistering): Port device team_slave_1 removed
[  361.234533][ T8440] loop2: detected capacity change from 0 to 128
[  361.305756][ T5811] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -71
[  361.317309][ T5811] usb 6-1: USB disconnect, device number 6
[  361.619159][ T8444] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1425'.
[  362.146767][ T8461] fuse: Bad value for 'fd'
[  365.938125][ T8491] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1443'.
[  365.958841][ T8493] loop9: detected capacity change from 0 to 128
[  366.403197][ T8502] overlayfs: option "workdir=éq‰Y’3aK" is useless in a non-upper mount, ignore
[  366.413390][ T8502] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  366.425302][ T8502] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  368.269562][ T8510] loop0: detected capacity change from 0 to 1024
[  368.861969][ T8526] loop0: detected capacity change from 0 to 128
[  368.942910][ T8534] loop9: detected capacity change from 0 to 128
[  369.366975][ T8543] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1463'.
[  369.661850][    C1] hrtimer: interrupt took 42831 ns
[  371.878827][ T8568] loop2: detected capacity change from 0 to 512
[  372.574312][ T8576] loop0: detected capacity change from 0 to 64
[  372.589964][ T8579] fuse: Unknown parameter 'user_i00000000000000000000'
[  372.612173][ T8568] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  372.629932][ T8568] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  372.748729][ T8582] loop5: detected capacity change from 0 to 128
[  372.790768][ T8585] loop2: detected capacity change from 0 to 128
[  373.050606][ T8585] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  373.226710][ T8585] ext4 filesystem being mounted at /24/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  373.412160][ T8592] fuse: Bad value for 'fd'
[  374.183903][ T8608] loop0: detected capacity change from 0 to 1024
[  374.595253][ T8599] loop5: detected capacity change from 0 to 32768
[  374.846009][ T8619] fuse: Unknown parameter 'user_i00000000000000000000'
[  374.858643][ T8599] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  375.030469][ T4213] Bluetooth: hci2: command 0x0406 tx timeout
[  375.121239][   T26] audit: type=1800 audit(1745546631.377:125): pid=8599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1480" name="file1" dev="loop5" ino=17058 res=0 errno=0
[  375.329862][ T5140] ocfs2: Unmounting device (7,5) on (node local)
[  376.420281][ T4213] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  376.525167][ T8640] loop5: detected capacity change from 0 to 128
[  376.730073][ T4213] usb 1-1: Using ep0 maxpacket: 32
[  377.086928][ T8645] loop9: detected capacity change from 0 to 128
[  377.130264][ T4213] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  377.164309][ T4213] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  377.199233][ T8645] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  377.233855][ T8645] ext4 filesystem being mounted at /107/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  377.350927][ T4213] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  377.371629][ T4213] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  377.428149][ T4213] usb 1-1: Product: syz
[  377.441980][ T4213] usb 1-1: Manufacturer: syz
[  377.520183][ T4213] hub 1-1:4.0: USB hub found
[  377.552631][ T8652] fuse: Unknown parameter 'user_i00000000000000000000'
[  377.566889][ T8654] loop2: detected capacity change from 0 to 64
[  377.731045][ T4213] hub 1-1:4.0: 2 ports detected
[  378.110307][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  378.121971][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  378.669851][ T4213] hub 1-1:4.0: set hub depth failed
[  378.728482][ T4213] usb 1-1: USB disconnect, device number 12
[  378.749428][ T8682] loop5: detected capacity change from 0 to 128
[  379.417354][ T8688] fuse: Unknown parameter 'user_id00000000000000000000'
[  379.933463][ T8695] loop0: detected capacity change from 0 to 256
[  380.099481][ T8695] /dev/loop0: Can't open blockdev
[  382.351031][ T8708] loop5: detected capacity change from 0 to 128
[  382.484831][ T8708] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  382.599366][ T8708] ext4 filesystem being mounted at /227/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  384.893935][ T8734] fuse: Unknown parameter 'user_id00000000000000000000'
[  385.568787][ T8742] loop9: detected capacity change from 0 to 256
[  386.306616][ T8742] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  387.737829][ T4213] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  388.319729][ T4213] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  388.366497][ T4213] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  388.477737][ T4213] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  388.553256][ T8765] fuse: Unknown parameter 'user_id00000000000000000000'
[  388.890596][ T4213] usb 1-1: config 0 descriptor??
[  388.956092][ T4213] pwc: Askey VC010 type 2 USB webcam detected.
[  389.978239][ T4213] pwc: recv_control_msg error -32 req 02 val 2b00
[  390.048575][ T4213] pwc: recv_control_msg error -32 req 02 val 2700
[  390.195372][ T8781] loop5: detected capacity change from 0 to 256
[  390.508451][ T4213] pwc: recv_control_msg error -32 req 02 val 2c00
[  390.851162][ T4213] pwc: recv_control_msg error -32 req 04 val 1300
[  390.898192][ T4213] pwc: recv_control_msg error -32 req 04 val 1400
[  390.918018][ T8781] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  390.948175][ T4213] pwc: recv_control_msg error -71 req 02 val 2000
[  390.973839][ T4213] pwc: recv_control_msg error -71 req 02 val 2100
[  391.008162][ T4213] pwc: recv_control_msg error -71 req 04 val 1500
[  391.161144][ T4213] pwc: recv_control_msg error -71 req 02 val 2500
[  391.178222][ T4213] pwc: recv_control_msg error -71 req 02 val 2400
[  391.218113][ T4213] pwc: recv_control_msg error -71 req 02 val 2600
[  391.248197][ T4213] pwc: recv_control_msg error -71 req 02 val 2900
[  391.268118][ T4213] pwc: recv_control_msg error -71 req 02 val 2800
[  391.288522][ T4213] pwc: recv_control_msg error -71 req 04 val 1100
[  391.318106][ T4213] pwc: recv_control_msg error -71 req 04 val 1200
[  391.388110][ T4213] pwc: Registered as video103.
[  391.395166][ T4213] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input10
[  391.472177][ T4213] usb 1-1: USB disconnect, device number 13
[  392.001767][ T8791] loop0: detected capacity change from 0 to 256
[  392.040033][ T8793] loop9: detected capacity change from 0 to 128
[  392.136650][ T8793] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  392.138160][ T8791] /dev/loop0: Can't open blockdev
[  392.172975][ T8793] ext4 filesystem being mounted at /119/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  392.444004][ T4173] Bluetooth: hci0: unexpected event for opcode 0x0040
[  392.943124][ T8801] device wg1 entered promiscuous mode
[  393.204971][ T8807] loop5: detected capacity change from 0 to 512
[  393.328220][ T8807] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  393.643283][ T8807] Quota error (device loop5): v2_read_file_info: Free block number too big (58381 >= 6).
[  394.031590][ T8807] EXT4-fs warning (device loop5): ext4_enable_quotas:6439: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  396.595024][ T8830] loop5: detected capacity change from 0 to 256
[  396.657340][ T8830] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  397.317592][ T4215] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  397.686365][ T8844] fuse: Bad value for 'fd'
[  398.087937][ T4215] usb 6-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[  399.094601][ T4215] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  399.114731][ T4215] usb 6-1: config 0 descriptor??
[  400.930272][ T4215] hackrf 6-1:0.0: usb_control_msg() failed -71 request 0f
[  400.946419][ T4215] hackrf 6-1:0.0: Could not detect board
[  400.952241][ T4215] hackrf: probe of 6-1:0.0 failed with error -71
[  400.960048][ T4215] usb 6-1: USB disconnect, device number 7
[  401.562664][ T8878] fuse: Unknown parameter '0x0000000000000003'
[  401.683509][ T8881] input: syz1 as /devices/virtual/input/input11
[  402.574421][ T8902] loop2: detected capacity change from 0 to 256
[  403.248645][ T8902] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  404.764080][ T8913] fuse: Unknown parameter '0x0000000000000003'
[  404.951991][ T8925] 9pnet: Insufficient options for proto=fd
[  404.966209][ T8927] loop9: detected capacity change from 0 to 128
[  407.173416][ T8947] QAT: failed to copy from user.
[  407.715172][ T8951] loop2: detected capacity change from 0 to 32768
[  408.019692][ T8951] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.1592 (8951)
[  408.054603][ T8955] fuse: Unknown parameter '0x0000000000000003'
[  408.097350][ T8951] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  408.107223][ T8951] BTRFS info (device loop2): force clearing of disk cache
[  408.114399][ T8951] BTRFS info (device loop2): enabling ssd optimizations
[  408.121403][ T8951] BTRFS info (device loop2): using spread ssd allocation scheme
[  408.129099][ T8951] BTRFS info (device loop2): using free space tree
[  408.135603][ T8951] BTRFS info (device loop2): has skinny extents
[  408.303675][ T8951] BTRFS info (device loop2): clearing free space tree
[  408.311588][ T8951] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  408.325023][ T8951] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  408.959182][ T8987] loop5: detected capacity change from 0 to 256
[  409.382864][ T8951] BTRFS info (device loop2): creating free space tree
[  409.392539][ T8951] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  409.402185][ T8951] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  409.469139][ T8987] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  409.533630][ T8951] BTRFS info (device loop2): balance: start -d -m -s
[  409.547290][ T8951] BTRFS info (device loop2): relocating block group 6881280 flags data|metadata
[  409.661494][ T8951] BTRFS info (device loop2): balance: canceled
[  409.875902][ T9000] netlink: 'syz.9.1604': attribute type 32 has an invalid length.
[  409.920404][ T9000] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1604'.
[  410.176769][ T9004] fuse: Unknown parameter '0x0000000000000003'
[  411.788311][ T9016] loop0: detected capacity change from 0 to 32768
[  413.812915][ T9038] loop2: detected capacity change from 0 to 256
[  414.468399][ T9038] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  414.504048][ T9040] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  414.746208][ T9042] loop9: detected capacity change from 0 to 32768
[  414.826494][ T9042] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode.
[  414.847279][ T9046] fuse: Unknown parameter '0x0000000000000003'
[  414.857967][   T26] audit: type=1800 audit(1745546671.120:126): pid=9042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1618" name="file1" dev="loop9" ino=17058 res=0 errno=0
[  415.191569][ T9055] loop0: detected capacity change from 0 to 2048
[  415.224832][   T26] audit: type=1800 audit(1745546671.480:127): pid=9054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1618" name="file1" dev="loop9" ino=17058 res=0 errno=0
[  415.254921][ T9042] syz.9.1618 (9042) used greatest stack depth: 17216 bytes left
[  415.510348][ T9051] loop5: detected capacity change from 0 to 32768
[  415.527579][ T7007] (syz-executor,7007,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72
[  415.568286][ T7007] ocfs2: Unmounting device (7,9) on (node local)
[  415.702775][ T9051] XFS (loop5): Mounting V5 Filesystem
[  415.907980][ T9051] XFS (loop5): Ending clean mount
[  415.926242][ T9051] XFS (loop5): Quotacheck needed: Please wait.
[  416.153318][ T9051] XFS (loop5): Quotacheck: Done.
[  416.222760][ T9082] loop0: detected capacity change from 0 to 256
[  417.021054][ T5140] XFS (loop5): Unmounting Filesystem
[  417.111430][ T9082] /dev/loop0: Can't open blockdev
[  417.883328][ T9090] fuse: Unknown parameter '0x0000000000000003'
[  417.922669][ T9092] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1634'.
[  418.747151][ T4250] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  419.007121][ T4250] usb 1-1: Using ep0 maxpacket: 16
[  419.127725][ T4250] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11
[  419.174129][ T4250] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  419.228037][ T4250] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  419.268692][ T4250] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  419.314815][ T4250] usb 1-1: config 0 descriptor??
[  419.465629][ T9098] loop9: detected capacity change from 0 to 32768
[  419.517303][ T9098] XFS (loop9): Mounting V5 Filesystem
[  419.556345][ T9098] XFS (loop9): Ending clean mount
[  419.582985][ T9098] XFS (loop9): Quotacheck needed: Please wait.
[  419.642974][ T9123] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1641'.
[  419.710492][ T9098] XFS (loop9): Quotacheck: Done.
[  419.760084][ T7007] XFS (loop9): Unmounting Filesystem
[  419.806387][ T4250] kovaplus 0003:1E7D:2D50.0004: unknown main item tag 0x3
[  419.827659][ T4250] kovaplus 0003:1E7D:2D50.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.0-1/input0
[  420.007043][ T4250] kovaplus 0003:1E7D:2D50.0004: couldn't init struct kovaplus_device
[  420.015182][ T4250] kovaplus 0003:1E7D:2D50.0004: couldn't install mouse
[  420.060823][ T4250] kovaplus: probe of 0003:1E7D:2D50.0004 failed with error -71
[  420.070524][ T4250] usb 1-1: USB disconnect, device number 14
[  420.145932][ T9127] loop5: detected capacity change from 0 to 32768
[  420.214894][ T9127] XFS (loop5): Mounting V5 Filesystem
[  420.251063][ T9127] XFS (loop5): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  420.282778][ T9127] XFS (loop5): Starting recovery (logdev: internal)
[  420.312137][ T9127] XFS (loop5): Ending recovery (logdev: internal)
[  420.344380][ T9139] fuse: Unknown parameter 'fd0x0000000000000003'
[  420.376172][   T26] audit: type=1800 audit(1745546676.630:128): pid=9127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1644" name="file2" dev="loop5" ino=4423 res=0 errno=0
[  420.534277][ T5140] XFS (loop5): Unmounting Filesystem
[  420.539896][ T9143] loop9: detected capacity change from 0 to 16
[  420.605917][ T9143] erofs: (device loop9): mounted with root inode @ nid 36.
[  420.650167][ T9143] erofs: (device loop9): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36
[  420.781533][ T9148] loop2: detected capacity change from 0 to 164
[  420.848339][ T9148] ISOFS: unable to read i-node block
[  420.886461][ T9151] loop9: detected capacity change from 0 to 256
[  420.978212][ T9151] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x76dfe2a7, utbl_chksum : 0xe619d30d)
[  421.006265][ T9151] exFAT-fs (loop9): failed to load alloc-bitmap
[  421.021789][ T9151] exFAT-fs (loop9): failed to recognize exfat type
[  421.389067][ T9167] fuse: Unknown parameter 'fd0x0000000000000003'
[  421.407114][ T2281] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  423.937210][ T2281] usb 6-1: config 0 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 4
[  424.302132][ T2281] usb 6-1: config 0 interface 0 has no altsetting 0
[  424.309665][ T2281] usb 6-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00
[  424.326996][ T2281] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  424.352455][ T2281] usb 6-1: config 0 descriptor??
[  424.377070][ T2281] usb 6-1: can't set config #0, error -71
[  424.412456][ T2281] usb 6-1: USB disconnect, device number 8
[  424.791000][ T9215] loop0: detected capacity change from 0 to 1024
[  424.926949][ T2281] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  424.972212][ T9217] kAFS: No cell specified
[  425.177031][ T2281] usb 6-1: Using ep0 maxpacket: 32
[  425.307892][ T2281] usb 6-1: config 0 has an invalid interface number: 231 but max is 0
[  425.400521][ T2281] usb 6-1: config 0 has no interface number 0
[  425.507454][ T2281] usb 6-1: config 0 interface 231 has no altsetting 0
[  425.909913][ T2281] usb 6-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=21.78
[  425.923682][ T2281] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  425.933127][ T2281] usb 6-1: Product: syz
[  425.938101][ T2281] usb 6-1: Manufacturer: syz
[  425.943178][ T2281] usb 6-1: SerialNumber: syz
[  425.951630][ T2281] usb 6-1: config 0 descriptor??
[  426.791565][ T9240] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  426.917076][ T2281] asix 6-1:0.231 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  426.935797][ T9243] lo speed is unknown, defaulting to 1000
[  426.952201][ T2281] asix: probe of 6-1:0.231 failed with error -71
[  426.990571][ T2281] usb 6-1: USB disconnect, device number 9
[  428.979822][ T9275] loop9: detected capacity change from 0 to 1024
[  429.141002][ T9273] loop5: detected capacity change from 0 to 1024
[  429.782506][ T9273] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option
[  429.934337][ T9273] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,noquota,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none.
[  433.118843][ T9312] device vlan0 entered promiscuous mode
[  433.511743][ T9318] loop5: detected capacity change from 0 to 1024
[  434.337880][ T9320] loop9: detected capacity change from 0 to 1024
[  434.391828][ T9320] EXT4-fs (loop9): Ignoring removed nobh option
[  434.446978][ T9320] EXT4-fs (loop9): Ignoring removed bh option
[  434.627862][ T9320] EXT4-fs (loop9): mounted filesystem without journal. Opts: delalloc,data_err=abort,auto_da_alloc,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,errors=remount-ro,nobh,user_xattr,bh,minixdf,. Quota mode: none.
[  434.707838][ T9329] netlink: 71 bytes leftover after parsing attributes in process `syz.4.1708'.
[  436.601616][ T2281] Bluetooth: hci3: command 0x0406 tx timeout
[  437.677687][ T9356] loop0: detected capacity change from 0 to 1024
[  437.963956][ T9367] loop0: detected capacity change from 0 to 512
[  439.237728][ T4250] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[  439.279184][ T9381] loop0: detected capacity change from 0 to 1024
[  439.522114][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  439.528514][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  439.645028][ T4250] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  439.759551][ T4250] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping
[  440.197808][ T4250] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  440.638454][ T4250] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  440.655747][ T4250] usb 3-1: Product: syz
[  440.662747][ T4250] usb 3-1: Manufacturer: syz
[  440.813669][ T4250] usb 3-1: SerialNumber: syz
[  440.820340][ T4250] usb 3-1: config 0 descriptor??
[  440.856331][ T9371] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  441.700939][ T9402] loop9: detected capacity change from 0 to 1024
[  441.740507][ T4250] usb 3-1: can't set config #0, error -71
[  441.750788][ T4250] usb 3-1: USB disconnect, device number 5
[  441.892230][ T9402] hfsplus: xattr search failed
[  443.536822][ T9424] loop9: detected capacity change from 0 to 131072
[  443.607709][ T9424] F2FS-fs (loop9): Wrong CP boundary, start(512) end(1536) blocks(0)
[  443.616335][ T9424] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[  443.634102][ T9424] F2FS-fs (loop9): invalid crc value
[  443.671029][ T9424] F2FS-fs (loop9): Found nat_bits in checkpoint
[  443.736149][ T9429] loop0: detected capacity change from 0 to 4096
[  443.742649][ T9424] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[  443.750047][ T9424] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4
[  443.820105][   T26] audit: type=1800 audit(1745546700.080:129): pid=9424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1742" name="file2" dev="loop9" ino=8 res=0 errno=0
[  443.866808][ T9429] /dev/loop0: Can't open blockdev
[  443.952334][ T9436] netlink: 'syz.9.1742': attribute type 4 has an invalid length.
[  445.025625][ T9441] loop0: detected capacity change from 0 to 1024
[  447.255754][ T9466] loop0: detected capacity change from 0 to 32768
[  447.476838][ T9466] /dev/loop0: Can't open blockdev
[  448.805965][ T9482] SET target dimension over the limit!
[  451.148995][ T4173] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201'
[  451.159233][ T4173] CPU: 1 PID: 4173 Comm: kworker/u5:2 Not tainted 5.15.180-syzkaller #0
[  451.167617][ T4173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  451.177701][ T4173] Workqueue: hci4 hci_rx_work
[  451.182411][ T4173] Call Trace:
[  451.185683][ T4173]  <TASK>
[  451.188630][ T4173]  dump_stack_lvl+0x1e3/0x2d0
[  451.193312][ T4173]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  451.198946][ T4173]  ? panic+0x860/0x860
[  451.203015][ T4173]  ? sysfs_create_dir_ns+0x282/0x390
[  451.208300][ T4173]  sysfs_create_dir_ns+0x2c6/0x390
[  451.213408][ T4173]  ? sysfs_warn_dup+0xa0/0xa0
[  451.218080][ T4173]  ? do_raw_spin_unlock+0x137/0x8b0
[  451.223291][ T4173]  kobject_add_internal+0x6e0/0xe00
[  451.228541][ T4173]  kobject_add+0x14e/0x210
[  451.232962][ T4173]  ? device_add+0x3c2/0xfd0
[  451.237466][ T4173]  ? kobject_init+0x1d0/0x1d0
[  451.242147][ T4173]  ? __raw_spin_lock_init+0x41/0x100
[  451.247457][ T4173]  ? get_device_parent+0x128/0x400
[  451.252607][ T4173]  device_add+0x476/0xfd0
[  451.256944][ T4173]  hci_conn_add_sysfs+0xe4/0x1f0
[  451.261905][ T4173]  le_conn_complete_evt+0xc15/0x1500
[  451.267199][ T4173]  ? cs_le_create_conn+0x5f0/0x5f0
[  451.272323][ T4173]  hci_le_meta_evt+0x28c/0x3f50
[  451.277180][ T4173]  ? __lock_acquire+0x1ff0/0x1ff0
[  451.282216][ T4173]  ? __mutex_lock_common+0x444/0x25a0
[  451.287610][ T4173]  ? hci_remote_host_features_evt+0x280/0x280
[  451.293764][ T4173]  ? __mutex_unlock_slowpath+0x218/0x750
[  451.299398][ T4173]  ? hci_event_packet+0x3b4/0x1550
[  451.304510][ T4173]  ? mutex_unlock+0x10/0x10
[  451.309039][ T4173]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  451.315023][ T4173]  ? print_irqtrace_events+0x210/0x210
[  451.320494][ T4173]  hci_event_packet+0xc41/0x1550
[  451.325442][ T4173]  ? rcu_lock_release+0x20/0x20
[  451.330296][ T4173]  ? hci_send_to_monitor+0x99/0x4d0
[  451.335494][ T4173]  hci_rx_work+0x237/0xa10
[  451.339952][ T4173]  process_one_work+0x8a1/0x10c0
[  451.344902][ T4173]  ? worker_detach_from_pool+0x260/0x260
[  451.350539][ T4173]  ? _raw_spin_lock_irqsave+0x120/0x120
[  451.356086][ T4173]  ? kthread_data+0x4e/0xc0
[  451.360590][ T4173]  ? wq_worker_running+0x97/0x170
[  451.365629][ T4173]  worker_thread+0xaca/0x1280
[  451.370356][ T4173]  kthread+0x3f6/0x4f0
[  451.374460][ T4173]  ? rcu_lock_release+0x20/0x20
[  451.379307][ T4173]  ? kthread_blkcg+0xd0/0xd0
[  451.383916][ T4173]  ret_from_fork+0x1f/0x30
[  451.388339][ T4173]  </TASK>
[  451.405788][ T4173] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  451.419448][ T4173] Bluetooth: hci4: failed to register connection device
[  451.437319][ T4173] Bluetooth: hci4: link tx timeout
[  451.442489][ T4173] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[  451.450977][ T4173] Bluetooth: hci4: link tx timeout
[  451.456425][ T4173] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  451.763262][ T9504] loop9: detected capacity change from 0 to 1024
[  452.589951][ T9509] loop2: detected capacity change from 0 to 512
[  452.635714][ T9509] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option
[  452.786658][ T9509] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  452.799911][ T5135] hfsplus: b-tree write err: -5, ino 3
[  452.826848][ T9509] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2
[  452.837613][ T7007] hfsplus: node 4:3 still has 1 user(s)!
[  452.861559][ T9509] EXT4-fs (loop2): 1 truncate cleaned up
[  452.870339][ T9509] EXT4-fs (loop2): mounted filesystem without journal. Opts: nomblk_io_submit,usrjquota="errors=continue,noload,data_err=ignore,grpjquota="errors=continue,errors=remount-ro,jqfmt=vfsv1,. Quota mode: writeback.
[  453.067361][ T9518] ubi31: attaching mtd0
[  453.074565][ T9518] ubi31: scanning is finished
[  453.079435][ T9518] ubi31: empty MTD device detected
[  453.201969][ T9519] EXT4-fs error (device loop2): ext4_map_blocks:628: inode #2: block 4: comm syz.2.1766: lblock 0 mapped to illegal pblock 4 (length 1)
[  453.965136][ T9519] EXT4-fs (loop2): Remounting filesystem read-only
[  453.971835][ T9518] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4
[  455.460512][ T9528] loop0: detected capacity change from 0 to 131072
[  457.122926][ T4215] libceph: connect (1)[c::]:6789 error -101
[  457.918956][ T4215] libceph: mon0 (1)[c::]:6789 connect error
[  458.197698][ T9540] loop0: detected capacity change from 0 to 8192
[  458.208578][ T9536] ceph: No mds server is up or the cluster is laggy
[  458.793585][ T4215] libceph: connect (1)[c::]:6789 error -101
[  458.799733][ T4215] libceph: mon0 (1)[c::]:6789 connect error
[  459.239252][ T9540] /dev/loop0: Can't open blockdev
[  460.774582][ T9578] loop2: detected capacity change from 0 to 16
[  460.945018][ T9578] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  461.590512][ T9584] loop0: detected capacity change from 0 to 512
[  462.890646][ T9591] loop5: detected capacity change from 0 to 1024
[  463.925228][ T5478] hfsplus: b-tree write err: -5, ino 3
[  464.112631][ T5140] hfsplus: node 4:3 still has 1 user(s)!
[  465.305349][ T9610] loop0: detected capacity change from 0 to 32768
[  466.287183][ T9624] loop9: detected capacity change from 0 to 64
[  466.452561][ T9610] loop0: detected capacity change from 0 to 8
[  466.507366][ T9610] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  466.566893][ T9610] /dev/loop0: Can't open blockdev
[  466.575012][ T9624] Trying to free block not in datazone
[  466.596462][ T9624] Trying to free block not in datazone
[  468.561820][ T9653] bond0: (slave vlan2): Opening slave failed
[  469.280487][ T9659] usb usb8: usbfs: process 9659 (syz.0.1809) did not claim interface 0 before use
[  472.458146][ T9679] loop5: detected capacity change from 0 to 4096
[  472.852962][ T9686] loop0: detected capacity change from 0 to 1024
[  473.839234][ T9692] overlayfs: failed to clone upperpath
[  473.928173][ T4215] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  474.296980][ T4215] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  474.312563][ T4215] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  474.348645][ T4215] usb 1-1: config 0 descriptor??
[  475.078505][ T4215] ath6kl: Failed to submit usb control message: -71
[  475.090718][ T4215] ath6kl: unable to send the bmi data to the device: -71
[  475.111628][ T4215] ath6kl: Unable to send get target info: -71
[  475.136557][ T4215] ath6kl: Failed to init ath6kl core: -71
[  475.173038][ T4215] ath6kl_usb: probe of 1-1:0.0 failed with error -71
[  475.189041][ T4215] usb 1-1: USB disconnect, device number 15
[  475.507284][ T9720] loop2: detected capacity change from 0 to 1024
[  475.659443][ T9720] hfsplus: xattr search failed
[  478.487358][ T9757] loop9: detected capacity change from 0 to 64
[  479.363338][ T9769] loop5: detected capacity change from 0 to 1024
[  479.543581][ T9769] hfsplus: xattr search failed
[  480.352137][ T9779] loop9: detected capacity change from 0 to 1024
[  481.001222][ T5478] hfsplus: bad catalog file entry
[  481.035248][ T5478] hfsplus: b-tree write err: -5, ino 3
[  481.153261][ T9790] loop9: detected capacity change from 0 to 256
[  481.239366][ T9790] exFAT-fs (loop9): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  483.313092][ T5812] hid-generic 0000:0003:0000.0005: unknown main item tag 0x0
[  483.342823][ T5812] hid-generic 0000:0003:0000.0005: unknown main item tag 0x0
[  483.397060][ T5812] hid-generic 0000:0003:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  484.023750][ T9824] loop9: detected capacity change from 0 to 1024
[  484.695099][  T154] hfsplus: bad catalog file entry
[  484.706472][  T154] hfsplus: b-tree write err: -5, ino 3
[  485.186868][   T21] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  485.856942][   T21] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  486.005376][   T21] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  486.066214][   T21] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  486.082878][   T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  486.157199][ T9831] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  486.389807][ T2281] usb 1-1: USB disconnect, device number 16
[  487.634089][ T5812] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  487.916969][ T5812] usb 1-1: Using ep0 maxpacket: 32
[  488.057160][ T5812] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  488.098543][ T5812] usb 1-1: config 0 has no interface number 0
[  488.199155][ T5812] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  488.380135][ T5812] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  488.466884][ T5812] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[  488.512889][ T5812] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  488.682150][ T9879] loop2: detected capacity change from 0 to 32768
[  488.985085][ T9895] loop9: detected capacity change from 0 to 32768
[  489.161574][ T9895] XFS (loop9): Mounting V5 Filesystem
[  489.184147][ T5812] usb 1-1: config 0 descriptor??
[  489.278706][ T9895] XFS (loop9): Ending clean mount
[  489.292380][ T2281] XFS (loop9): Metadata CRC error detected at xfs_inobt_read_verify+0x39/0xc0, xfs_finobt block 0x20 
[  489.325152][ T2281] XFS (loop9): Unmount and run xfs_repair
[  489.336776][ T2281] XFS (loop9): First 128 bytes of corrupted metadata buffer:
[  489.344290][ T2281] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff  FIB3............
[  489.373733][ T2281] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40  ....... .......@
[  489.419899][ T2281] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a  ...B..N....xv...
[  489.455201][ T2281] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37  .......F......@7
[  489.497649][ T2281] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00  ................
[  489.522315][ T2281] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00  ................
[  489.540554][ T2281] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  489.967442][ T5812] uclogic 0003:28BD:0094.0006: failed retrieving string descriptor #100: -71
[  490.015503][ T5812] uclogic 0003:28BD:0094.0006: failed retrieving pen parameters: -71
[  490.143078][ T2281] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  490.164285][ T5812] uclogic 0003:28BD:0094.0006: pen probing failed: -71
[  490.186017][ T5812] uclogic 0003:28BD:0094.0006: failed probing parameters: -71
[  490.227824][ T5812] uclogic: probe of 0003:28BD:0094.0006 failed with error -71
[  490.246186][ T9895] XFS (loop9): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x20 len 8 error 74
[  490.258622][ T9895] XFS (loop9): Failed to initialize disk quotas.
[  490.288023][ T5812] usb 1-1: USB disconnect, device number 17
[  490.407454][ T4245] XFS (loop9): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x8 
[  490.430613][ T4245] XFS (loop9): Unmount and run xfs_repair
[  490.449392][ T4245] XFS (loop9): First 128 bytes of corrupted metadata buffer:
[  490.461820][ T4245] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[  490.501442][ T4245] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40  ...............@
[  490.535956][ T4245] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a  ...B..N....xv...
[  490.592620][ T4245] 00000030: 00 00 00 00 72 89 6f 7a 00 00 00 06 00 00 00 02  ....r.oz........
[  490.616719][ T4245] 00000040: 00 00 05 9a 00 00 00 06 00 00 05 b0 00 00 0a 50  ...............P
[  490.641099][ T4245] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  490.653628][ T4245] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  490.737462][ T4245] 00000070: 00 00 00 00 00 00 00 00 00 07 00 00 00 00 00 00  ................
[  490.787326][ T9895] XFS (loop9): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x8 len 8 error 74
[  490.800648][ T9895] XFS (loop9): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1750/0x1df0 (fs/xfs/libxfs/xfs_defer.c:504).  Shutting down filesystem.
[  490.816867][ T9895] XFS (loop9): Please unmount the filesystem and rectify the problem(s)
[  490.862057][ T7007] XFS (loop9): Unmounting Filesystem
[  492.682741][   T26] audit: type=1326 audit(1745546748.940:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9959 comm="syz.9.1896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f9234969 code=0x7ffc0000
[  493.231005][ T9977] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1902'.
[  494.269735][  T154] device hsr_slave_0 left promiscuous mode
[  494.287493][  T154] device hsr_slave_1 left promiscuous mode
[  494.311085][  T154] batman_adv: batadv0: Removing interface: batadv_slave_0
[  494.504111][  T154] batman_adv: batadv0: Removing interface: batadv_slave_1
[  494.513155][  T154] device team0 left promiscuous mode
[  494.536399][  T154] device team_slave_0 left promiscuous mode
[  495.256892][  T154] device team_slave_1 left promiscuous mode
[  495.263433][  T154] bridge0: port 3(team0) entered disabled state
[  495.570045][ T9996] loop9: detected capacity change from 0 to 1024
[  495.577878][  T154] device bridge_slave_1 left promiscuous mode
[  495.584094][  T154] bridge0: port 2(bridge_slave_1) entered disabled state
[  495.645465][  T154] device bridge_slave_0 left promiscuous mode
[  495.708947][  T154] bridge0: port 1(bridge_slave_0) entered disabled state
[  495.718077][ T9996] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  496.307920][ T4213] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  496.325756][  T154] team0 (unregistering): Port device team_slave_1 removed
[  496.592633][ T2281] libceph: connect (1)[c::]:6789 error -101
[  496.634028][ T2281] libceph: mon0 (1)[c::]:6789 connect error
[  497.200549][  T154] team0 (unregistering): Port device team_slave_0 removed
[  497.223812][  T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  497.240765][T10016] ceph: No mds server is up or the cluster is laggy
[  497.247626][ T4213] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  497.258601][ T4213] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  497.262525][  T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  497.416800][ T4213] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  497.425887][ T4213] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  497.436704][ T4213] usb 1-1: SerialNumber: syz
[  497.513943][  T154] bond0 (unregistering): Released all slaves
[  497.566612][T10025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1917'.
[  497.830560][ T4213] usb 1-1: 0:2 : does not exist
[  497.840697][ T4213] usb 1-1: unit 5: unexpected type 0x0a
[  498.015100][ T4213] usb 1-1: USB disconnect, device number 18
[  498.640532][T10041] loop0: detected capacity change from 0 to 1024
[  501.412350][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  501.481912][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  504.280990][T10122] loop2: detected capacity change from 0 to 256
[  504.415661][T10122] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  505.607223][T10141] device veth0_vlan left promiscuous mode
[  505.613819][T10141] device veth0_vlan entered promiscuous mode
[  506.467046][ T4211] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  506.976803][ T4211] usb 10-1: Using ep0 maxpacket: 32
[  507.099948][ T4211] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  507.140799][ T4211] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  507.297004][ T4211] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  507.323479][ T4211] usb 10-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  507.347114][ T4211] usb 10-1: Product: syz
[  507.351408][ T4211] usb 10-1: Manufacturer: syz
[  507.427852][ T4211] hub 10-1:4.0: USB hub found
[  507.646824][ T4211] hub 10-1:4.0: 2 ports detected
[  508.326718][T10174] loop5: detected capacity change from 0 to 256
[  509.147513][T10174] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  509.186819][ T4211] hub 10-1:4.0: hub_hub_status failed (err = -71)
[  509.197164][ T4211] hub 10-1:4.0: config failed, can't get hub status (err -71)
[  509.287735][ T4211] usb 10-1: USB disconnect, device number 2
[  510.704754][T10190] loop0: detected capacity change from 0 to 1024
[  513.115743][T10222] loop0: detected capacity change from 0 to 256
[  513.276914][T10222] /dev/loop0: Can't open blockdev
[  515.346234][T10239] loop0: detected capacity change from 0 to 2048
[  516.263665][T10263] device sit0 entered promiscuous mode
[  516.335933][T10263] netlink: 'syz.0.1994': attribute type 1 has an invalid length.
[  517.038311][T10263] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1994'.
[  522.633341][T10330] loop0: detected capacity change from 0 to 128
[  523.433690][T10342] netlink: 'syz.4.2020': attribute type 16 has an invalid length.
[  523.441700][T10342] netlink: 'syz.4.2020': attribute type 17 has an invalid length.
[  524.356073][ T4211] lo speed is unknown, defaulting to 1000
[  526.572682][T10391] loop2: detected capacity change from 0 to 128
[  528.483146][T10411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2042'.
[  529.181002][T10424] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2047'.
[  532.604530][T10462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2059'.
[  532.974184][  T154] Bluetooth: hci5: Frame reassembly failed (-84)
[  532.999846][T10471] loop0: detected capacity change from 0 to 512
[  533.261202][T10472] loop2: detected capacity change from 0 to 32768
[  533.369510][T10472] XFS (loop2): Mounting V5 Filesystem
[  533.499037][T10472] XFS (loop2): Ending clean mount
[  535.075707][ T5812] Bluetooth: hci5: command 0x1003 tx timeout
[  535.093567][ T4175] Bluetooth: hci5: sending frame failed (-49)
[  535.431344][ T7937] XFS (loop2): Unmounting Filesystem
[  536.044486][T10498] loop5: detected capacity change from 0 to 512
[  536.126485][T10498] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found
[  537.186770][T10498] UDF-fs: Scanning with blocksize 512 failed
[  537.211911][ T5812] Bluetooth: hci5: command 0x1001 tx timeout
[  537.222664][T10498] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found
[  537.230281][T10498] UDF-fs: Scanning with blocksize 1024 failed
[  537.237588][ T4175] Bluetooth: hci5: sending frame failed (-49)
[  537.257450][T10498] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found
[  537.264873][T10498] UDF-fs: Scanning with blocksize 2048 failed
[  537.285928][T10498] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  537.335986][T10498] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  537.365388][T10511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2072'.
[  538.291155][T10519] loop5: detected capacity change from 0 to 1024
[  539.486348][ T5812] Bluetooth: hci5: command 0x1009 tx timeout
[  539.512630][T10519] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  540.176394][T10519] netlink: 168 bytes leftover after parsing attributes in process `syz.5.2074'.
[  541.006208][T10546] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2083'.
[  541.300533][T10538] loop2: detected capacity change from 0 to 32768
[  541.361526][T10538] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.2081 (10538)
[  541.421184][T10538] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  541.436750][T10538] BTRFS info (device loop2): using free space tree
[  541.453577][T10538] BTRFS info (device loop2): has skinny extents
[  541.576882][T10552] loop0: detected capacity change from 0 to 32768
[  541.577052][T10538] BTRFS info (device loop2): enabling ssd optimizations
[  541.661153][T10552] JFS: sb_issue_discard(ffff88806842a000, 1024, 1024, GFP_NOFS, 0) = -1 => failed!
[  541.687267][T10552] JFS: sb_issue_discard(ffff88806842a000, 2048, 1024, GFP_NOFS, 0) = -1 => failed!
[  541.697490][T10552] JFS: sb_issue_discard(ffff88806842a000, 512, 512, GFP_NOFS, 0) = -1 => failed!
[  541.707335][T10552] JFS: sb_issue_discard(ffff88806842a000, 3072, 512, GFP_NOFS, 0) = -1 => failed!
[  541.727002][T10552] JFS: sb_issue_discard(ffff88806842a000, 256, 256, GFP_NOFS, 0) = -1 => failed!
[  541.737924][T10552] JFS: sb_issue_discard(ffff88806842a000, 128, 128, GFP_NOFS, 0) = -1 => failed!
[  541.761227][T10552] JFS: sb_issue_discard(ffff88806842a000, 3584, 128, GFP_NOFS, 0) = -1 => failed!
[  541.776804][T10552] JFS: sb_issue_discard(ffff88806842a000, 64, 64, GFP_NOFS, 0) = -1 => failed!
[  541.785975][T10552] JFS: sb_issue_discard(ffff88806842a000, 3712, 64, GFP_NOFS, 0) = -1 => failed!
[  541.795761][T10552] JFS: sb_issue_discard(ffff88806842a000, 48, 16, GFP_NOFS, 0) = -1 => failed!
[  541.805310][T10552] JFS: sb_issue_discard(ffff88806842a000, 3776, 8, GFP_NOFS, 0) = -1 => failed!
[  541.818471][T10552] JFS: sb_issue_discard(ffff88806842a000, 44, 4, GFP_NOFS, 0) = -1 => failed!
[  541.828200][T10552] JFS: sb_issue_discard(ffff88806842a000, 3784, 4, GFP_NOFS, 0) = -1 => failed!
[  541.887228][ T4167] BUG: Bad page state in process syz-executor  pfn:619fc
[  541.914074][ T4167] page:ffffea0001867f00 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x619fc
[  541.925184][ T4167] flags: 0xfff00000002006(referenced|uptodate|private|node=0|zone=1|lastcpupid=0x7ff)
[  541.951541][ T4167] raw: 00fff00000002006 ffffea00007b0a88 ffffc90002daf9c0 0000000000000000
[  541.964359][ T4167] raw: 0000000000000004 ffff888075cf79b0 00000000ffffffff 0000000000000000
[  541.984805][ T4167] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set
[  542.021254][ T4167] page_owner tracks the page as allocated
[  542.032458][ T4167] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x100c40(GFP_NOFS|__GFP_HARDWALL), pid 10552, ts 541648162850, free_ts 535705734500
[  542.054132][ T4167]  get_page_from_freelist+0x3b78/0x3d40
[  542.062252][ T4167]  __alloc_pages+0x272/0x700
[  542.084505][ T4167]  __page_cache_alloc+0xd4/0x4a0
[  542.093119][ T4167]  do_read_cache_page+0x1e5/0x1040
[  542.101086][ T4167]  __get_metapage+0x398/0x1070
[  542.106020][ T4167]  dbAllocCtl+0xdb/0x9a0
[  542.122914][ T4167]  dbAllocAG+0x28b/0x10b0
[  542.127705][ T4167]  dbDiscardAG+0x34e/0xa10
[  542.132161][ T4167]  jfs_ioc_trim+0x452/0x6a0
[  542.142545][ T4167]  jfs_ioctl+0x2ac/0x3a0
[  542.146996][ T4167]  __se_sys_ioctl+0xf1/0x160
[  542.151620][ T4167]  do_syscall_64+0x3b/0x80
[  542.156073][ T4167]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  542.168476][ T4167] page last free stack trace:
[  542.173293][ T4167]  free_unref_page_prepare+0xc34/0xcf0
[  542.182513][ T4167]  free_unref_page_list+0x1f7/0x8e0
[  542.190349][ T4167]  release_pages+0x1bb9/0x1f40
[  542.195161][ T4167]  __pagevec_release+0x80/0xf0
[  542.203722][ T4167]  truncate_inode_pages_range+0x48b/0x1290
[  542.212370][ T4167]  blkdev_flush_mapping+0x182/0x340
[  542.221230][ T4167]  blkdev_put+0x4f1/0x790
[  542.226051][ T4167]  blkdev_close+0x7c/0xa0
[  542.233079][ T4167]  __fput+0x3fe/0x8e0
[  542.240961][ T4167]  task_work_run+0x129/0x1a0
[  542.245602][ T4167]  do_exit+0x6a3/0x2480
[  542.252332][ T4167]  do_group_exit+0x144/0x310
[  542.257455][ T4167]  get_signal+0xc66/0x14e0
[  542.294660][ T4167]  arch_do_signal_or_restart+0xbd/0x12b0
[  542.305855][ T4167]  exit_to_user_mode_loop+0x97/0x130
[  542.311412][ T4167]  exit_to_user_mode_prepare+0xb1/0x140
[  542.395692][ T4167] Modules linked in:
[  542.399753][ T4167] CPU: 1 PID: 4167 Comm: syz-executor Not tainted 5.15.180-syzkaller #0
[  542.408102][ T4167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  542.418155][ T4167] Call Trace:
[  542.421441][ T4167]  <TASK>
[  542.424375][ T4167]  dump_stack_lvl+0x1e3/0x2d0
[  542.429068][ T4167]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  542.434730][ T4167]  ? is_module_text_address+0x140/0x140
[  542.440312][ T4167]  bad_page+0x14b/0x170
[  542.444489][ T4167]  free_unref_page_prepare+0x48d/0xcf0
[  542.449958][ T4167]  free_unref_page_list+0x1f7/0x8e0
[  542.455161][ T4167]  ? free_unref_page_commit+0x500/0x500
[  542.460710][ T4167]  ? __mem_cgroup_uncharge_list+0xf8/0x150
[  542.466522][ T4167]  ? uncharge_batch+0x490/0x490
[  542.471412][ T4167]  ? _raw_spin_unlock+0x40/0x40
[  542.476270][ T4167]  ? __mod_zone_page_state+0x8a/0xc0
[  542.481557][ T4167]  release_pages+0x1bb9/0x1f40
[  542.486330][ T4167]  ? lru_cache_disable+0x30/0x30
[  542.491262][ T4167]  ? page_cache_free_page+0x510/0x510
[  542.496661][ T4167]  __pagevec_release+0x80/0xf0
[  542.501446][ T4167]  truncate_inode_pages_range+0x48b/0x1290
[  542.507277][ T4167]  ? invalidate_inode_page+0x370/0x370
[  542.512755][ T4167]  ? evict+0x87d/0x930
[  542.516848][ T4167]  ? _raw_spin_unlock+0x24/0x40
[  542.521696][ T4167]  dbUnmount+0x111/0x180
[  542.525955][ T4167]  jfs_umount+0x1fe/0x370
[  542.530288][ T4167]  jfs_put_super+0x86/0x180
[  542.534791][ T4167]  ? jfs_free_inode+0x20/0x20
[  542.539464][ T4167]  generic_shutdown_super+0x130/0x310
[  542.544838][ T4167]  kill_block_super+0x7a/0xe0
[  542.549624][ T4167]  deactivate_locked_super+0xa0/0x110
[  542.554996][ T4167]  cleanup_mnt+0x44e/0x500
[  542.559414][ T4167]  ? lockdep_hardirqs_on+0x94/0x130
[  542.564790][ T4167]  task_work_run+0x129/0x1a0
[  542.569389][ T4167]  exit_to_user_mode_loop+0x106/0x130
[  542.574757][ T4167]  exit_to_user_mode_prepare+0xb1/0x140
[  542.580302][ T4167]  syscall_exit_to_user_mode+0x5d/0x240
[  542.585852][ T4167]  do_syscall_64+0x47/0x80
[  542.590282][ T4167]  ? clear_bhb_loop+0x15/0x70
[  542.594994][ T4167]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  542.600886][ T4167] RIP: 0033:0x7f0de82dac97
[  542.605298][ T4167] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  542.624910][ T4167] RSP: 002b:00007fffaedf74d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  542.633327][ T4167] RAX: 0000000000000000 RBX: 00007f0de835b89d RCX: 00007f0de82dac97
[  542.641297][ T4167] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffaedf7590
[  542.649263][ T4167] RBP: 00007fffaedf7590 R08: 0000000000000000 R09: 0000000000000000
[  542.657260][ T4167] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffaedf8620
[  542.665229][ T4167] R13: 00007f0de835b89d R14: 000000000008465e R15: 00007fffaedf8660
[  542.673213][ T4167]  </TASK>
[  542.678798][ T4167] Disabling lock debugging due to kernel taint
[  542.685086][ T4167] BUG: Bad page state in process syz-executor  pfn:1ec2a
[  542.692386][ T4167] page:ffffea00007b0a80 refcount:0 mapcount:0 mapping:0000000000000000 index:0x3 pfn:0x1ec2a
[  542.702807][ T4167] flags: 0xfff00000002006(referenced|uptodate|private|node=0|zone=1|lastcpupid=0x7ff)
[  542.712631][ T4167] raw: 00fff00000002006 ffffea000163a788 ffffc90002daf9c0 0000000000000000
[  542.721514][ T4167] raw: 0000000000000003 ffff888075cf7aa8 00000000ffffffff 0000000000000000
[  542.737789][T10581] loop2: detected capacity change from 0 to 1024
[  543.052121][ T4167] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set
[  543.060970][ T4167] page_owner tracks the page as allocated
[  543.069327][ T4167] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x100c40(GFP_NOFS|__GFP_HARDWALL), pid 10552, ts 541653986123, free_ts 535705603189
[  543.088932][T10580] hfsplus: xattr search failed
[  543.096221][ T4167]  get_page_from_freelist+0x3b78/0x3d40
[  543.105050][ T4167]  __alloc_pages+0x272/0x700
[  543.111384][ T4167]  __page_cache_alloc+0xd4/0x4a0
[  543.116335][ T4167]  do_read_cache_page+0x1e5/0x1040
[  543.122070][ T4167]  __get_metapage+0x398/0x1070
[  543.126992][ T4167]  dbAdjCtl+0x138/0x9c0
[  543.131171][ T4167]  dbAllocDmapLev+0x298/0x490
[  543.135844][ T4167]  dbAllocCtl+0x147/0x9a0
[  543.140200][ T4167]  dbAllocAG+0x28b/0x10b0
[  543.144663][ T4167]  dbDiscardAG+0x34e/0xa10
[  543.149133][ T4167]  jfs_ioc_trim+0x452/0x6a0
[  543.153648][ T4167]  jfs_ioctl+0x2ac/0x3a0
[  543.157958][ T4167]  __se_sys_ioctl+0xf1/0x160
[  543.162555][ T4167]  do_syscall_64+0x3b/0x80
[  543.167808][ T4167]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  543.173721][ T4167] page last free stack trace:
[  543.178437][ T4167]  free_unref_page_prepare+0xc34/0xcf0
[  543.183909][ T4167]  free_unref_page_list+0x1f7/0x8e0
[  543.191154][ T4167]  release_pages+0x1bb9/0x1f40
[  543.195945][ T4167]  __pagevec_release+0x80/0xf0
[  543.243499][ T4167]  truncate_inode_pages_range+0x48b/0x1290
[  543.271210][ T4167]  blkdev_flush_mapping+0x182/0x340
[  543.276467][ T4167]  blkdev_put+0x4f1/0x790
[  543.280872][ T4167]  blkdev_close+0x7c/0xa0
[  543.285220][ T4167]  __fput+0x3fe/0x8e0
[  543.289611][ T4167]  task_work_run+0x129/0x1a0
[  543.294232][ T4167]  do_exit+0x6a3/0x2480
[  543.298467][ T4167]  do_group_exit+0x144/0x310
[  543.302074][ T7937] hfsplus: node 4:3 still has 1 user(s)!
[  543.303085][ T4167]  get_signal+0xc66/0x14e0
[  543.313846][ T4167]  arch_do_signal_or_restart+0xbd/0x12b0
[  543.319531][ T4167]  exit_to_user_mode_loop+0x97/0x130
[  543.324821][ T4167]  exit_to_user_mode_prepare+0xb1/0x140
[  543.330414][ T4167] Modules linked in:
[  543.334313][ T4167] CPU: 1 PID: 4167 Comm: syz-executor Tainted: G    B             5.15.180-syzkaller #0
[  543.344019][ T4167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  543.354072][ T4167] Call Trace:
[  543.357345][ T4167]  <TASK>
[  543.360267][ T4167]  dump_stack_lvl+0x1e3/0x2d0
[  543.364942][ T4167]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  543.370572][ T4167]  ? is_module_text_address+0x140/0x140
[  543.376222][ T4167]  bad_page+0x14b/0x170
[  543.380379][ T4167]  free_unref_page_prepare+0x48d/0xcf0
[  543.385848][ T4167]  free_unref_page_list+0x1f7/0x8e0
[  543.391049][ T4167]  ? free_unref_page_commit+0x500/0x500
[  543.396600][ T4167]  ? __mem_cgroup_uncharge_list+0xf8/0x150
[  543.402415][ T4167]  ? uncharge_batch+0x490/0x490
[  543.407264][ T4167]  ? _raw_spin_unlock+0x40/0x40
[  543.412114][ T4167]  ? __mod_zone_page_state+0x8a/0xc0
[  543.417414][ T4167]  release_pages+0x1bb9/0x1f40
[  543.422177][ T4167]  ? lru_cache_disable+0x30/0x30
[  543.427106][ T4167]  ? page_cache_free_page+0x510/0x510
[  543.432475][ T4167]  __pagevec_release+0x80/0xf0
[  543.437237][ T4167]  truncate_inode_pages_range+0x48b/0x1290
[  543.443061][ T4167]  ? invalidate_inode_page+0x370/0x370
[  543.448539][ T4167]  ? evict+0x87d/0x930
[  543.452609][ T4167]  ? _raw_spin_unlock+0x24/0x40
[  543.457456][ T4167]  dbUnmount+0x111/0x180
[  543.461710][ T4167]  jfs_umount+0x1fe/0x370
[  543.466055][ T4167]  jfs_put_super+0x86/0x180
[  543.470627][ T4167]  ? jfs_free_inode+0x20/0x20
[  543.475302][ T4167]  generic_shutdown_super+0x130/0x310
[  543.480672][ T4167]  kill_block_super+0x7a/0xe0
[  543.485345][ T4167]  deactivate_locked_super+0xa0/0x110
[  543.490714][ T4167]  cleanup_mnt+0x44e/0x500
[  543.495142][ T4167]  ? lockdep_hardirqs_on+0x94/0x130
[  543.500333][ T4167]  task_work_run+0x129/0x1a0
[  543.504950][ T4167]  exit_to_user_mode_loop+0x106/0x130
[  543.510316][ T4167]  exit_to_user_mode_prepare+0xb1/0x140
[  543.515854][ T4167]  syscall_exit_to_user_mode+0x5d/0x240
[  543.521396][ T4167]  do_syscall_64+0x47/0x80
[  543.525810][ T4167]  ? clear_bhb_loop+0x15/0x70
[  543.530483][ T4167]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  543.536369][ T4167] RIP: 0033:0x7f0de82dac97
[  543.540789][ T4167] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  543.560439][ T4167] RSP: 002b:00007fffaedf74d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  543.568853][ T4167] RAX: 0000000000000000 RBX: 00007f0de835b89d RCX: 00007f0de82dac97
[  543.576824][ T4167] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffaedf7590
[  543.584793][ T4167] RBP: 00007fffaedf7590 R08: 0000000000000000 R09: 0000000000000000
[  543.592972][ T4167] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffaedf8620
[  543.600946][ T4167] R13: 00007f0de835b89d R14: 000000000008465e R15: 00007fffaedf8660
[  543.608921][ T4167]  </TASK>
[  543.727920][T10583] loop0: detected capacity change from 0 to 1024
[  543.896876][T10584] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2089'.