qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYn3vbhIEwjsOvL4kSt8kI6a0EZqChQjACHxKSJc/AACxEQ0VrsQisABKcazpT8DzN/1dccS8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPCaLg9fvEVEEanLFGm8+Tm9R8RHpG3bjj5vWezOx+brnrP9YZLzO6a/ZUSUUfRxDgBA76puc6zW9fIv73/eQd5h3mre1ItnfhoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgyr7dszb1hQEAP2le2v47/RcHXQSFdtGY+pZCVqEiiKtjaGMpplrSCLa41G8g+AXcdcrqZ3B3cNBJkA4qIrgoN7lpjpghRb031N8Pzr3PPeTec06GwHOfEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBIDvbDwjAuhBBOlkZx4vXHR2vjzh8+vzoxbLdflrbjZyaPKIcQ7my2WxcyXMu029ndu9tst1udvxjMZjiWQCD4E0HOP0wAABw75bQlef3bcm816Ss0Qvj+7Of8fzGKw4T5/9fnj6/HY8X5fy2zFU6/andru7qzu3duc6u50dpo3autrFy6XL96ZblW7b8rqXpjAgAAwO+ppC3O/2cav9b//4viMGH+/+DGrVNJ31x6T1H+P9ao6Jf3TAAAAP5t/5/+8qkwpr9QqYSHzW63UxscD6+XB8ccpnpks2mL8/9iI+9ZAQAAAFk42C8shBB6w+v19Dy2/r80ui+u/795WroZP7MYQphP6//n1+631zNZyfTL4u/Eea8RAACAfM2nLa7/l/v7/0uHn5kJISydGcTD3kn2/y+effE+Hive/38xsxVOp5n64Pvon+shlOp5zwgAAIDjbC5tSf7/rtxb7Xx7cq1i/z8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/GDH7lEiBqIAACc7G63EBcHGxhOIdlYLFoL3EAXBI3gF7+AdvEdK0dJathALW3mTjC7bLFgk/nwfTN5LGDIvU+UNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArLU4+cpTXGZdPumfPb7enEd8Wonh5a3djRF5PWTRv1B9PHYFAAAA/Aep9PdVVT0392cRJ/Pc/zdlTvT8d1tdXvr51b6/xNL7x9hLD++fC826deKll1fXF4eDfeHPt712xjTvfD57SeUQZmfR5P2sb9v2dCOnmwMUCwB8y0GJfVL+hyIejVkYAH/Z/vLNtB/VUv+f5qPUBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADCojwAAAP//UyFtPw==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents(r0, 0x0, 0x18)

19:14:23 executing program 1:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0x75)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, r1, 0x0)
ioctl$IMADDTIMER(r0, 0x80044941, &(0x7f00000001c0))

19:14:23 executing program 4:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r1, 0x0, 0x75)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000001c0))

19:14:23 executing program 1:
r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000003c0)=0x4)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000400)={{0x1009, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0, 0xfffffffffffffef5})

19:14:24 executing program 4:
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./bus\x00', 0x6, &(0x7f0000000000)={[{@thread_pool={'thread_pool', 0x3d, 0x10000}}, {@nodatacow}, {@notreelog}, {@barrier}, {@barrier}, {@autodefrag}, {@compress_force}, {@notreelog}]}, 0x1, 0x511d, &(0x7f000000a2c0)="$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")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)

19:14:24 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x3a)
sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1}}], 0x1, 0x0)

19:14:24 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001040)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}]}, 0x2c}}, 0x0)

19:14:24 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = io_uring_setup(0x5c20, &(0x7f0000000140))
recvmmsg(0xffffffffffffffff, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, r1, 0x0)

19:14:24 executing program 2:
syz_mount_image$hfs(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@type={'type', 0x3d, "e2ffffff"}}, {@gid}, {@uid}, {@codepage={'codepage', 0x3d, 'macromanian'}}]}, 0x1, 0x2d7, &(0x7f00000023c0)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00')
read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0x2020)

19:14:24 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0x75)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r1, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000001c0))

19:14:24 executing program 1:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0x75)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, r1, 0x0)
ioctl$IMADDTIMER(r0, 0x80044941, &(0x7f00000001c0))

19:14:24 executing program 0:
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc)
r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
write$sysctl(r0, &(0x7f0000000000)='2\x00', 0x2)

19:14:24 executing program 1:
syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="040e050036200200"], 0x8)

[  265.298992][ T8884] loop2: detected capacity change from 0 to 64
[  265.326202][ T3581] Bluetooth: hci1: unexpected event for opcode 0x2036
19:14:25 executing program 1:
r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x10)

19:14:25 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup3(r1, r2, 0x0)

19:14:25 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = io_uring_setup(0x5c20, &(0x7f0000000140))
recvmmsg(0xffffffffffffffff, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, r1, 0x0)

19:14:25 executing program 1:
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)

19:14:25 executing program 2:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0x75)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r1, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000001c0))

19:14:25 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0x75)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, r1, 0x0)
ioctl$IMADDTIMER(r0, 0x80044941, &(0x7f00000001c0))

19:14:25 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000ac0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000040)="642e260fb1e4f30f01bf00000000b8c89600000f23c80f21f8350400b0000f23f8b805000000b900a000000f01d98fe978cba6090000000fae80077a00000f08660f3806dbc4e30979b47dfe0d000071b805000000b90e0000000f01c1", 0x5d}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

19:14:25 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='syztnl2\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0000ab0000000000000000004500000000000000002f90784e"]})

19:14:25 executing program 0:
syz_mount_image$hfs(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@type={'type', 0x3d, "e2ffffff"}}, {@gid}, {@uid}, {@codepage={'codepage', 0x3d, 'macromanian'}}]}, 0x1, 0x2d7, &(0x7f00000023c0)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00')
read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0x2020)

[  265.914758][ T8872] loop4: detected capacity change from 0 to 32768
[  265.964785][ T8872] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (8872)
19:14:25 executing program 2:
r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2882, 0x0)
write$proc_mixer(r0, &(0x7f0000000100)=[{'CD', @val={' \'', 'Master Playback'}}], 0x2a)
r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0)
dup3(r1, r0, 0x0)

[  266.083821][ T8911] loop0: detected capacity change from 0 to 64
[  266.107177][ T8872] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
19:14:25 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = io_uring_setup(0x5c20, &(0x7f0000000140))
recvmmsg(0xffffffffffffffff, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, r1, 0x0)

[  266.183459][ T8872] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
19:14:25 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000080)={0x74, 0x0, 0x10})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)

19:14:25 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0)

[  266.238510][ T8872] BTRFS info (device loop4): setting nodatacow, compression disabled
[  266.267270][ T8872] BTRFS info (device loop4): disabling tree log
[  266.315123][ T8872] BTRFS info (device loop4): enabling auto defrag
19:14:26 executing program 1:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0x75)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r1, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000001c0))

[  266.378475][ T8872] BTRFS info (device loop4): force zlib compression, level 3
[  266.437268][ T8872] BTRFS info (device loop4): using free space tree
19:14:26 executing program 2:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0x75)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
ioctl$IMADDTIMER(r0, 0x80044941, &(0x7f00000001c0))

[  266.477455][ T8872] workqueue: max_active 65536 requested for btrfs-worker is out of range, clamping between 1 and 512
[  266.574383][ T8872] workqueue: max_active 65536 requested for btrfs-worker-high is out of range, clamping between 1 and 512
19:14:26 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)

[  266.660133][ T8872] workqueue: max_active 65536 requested for btrfs-delalloc is out of range, clamping between 1 and 512
19:14:26 executing program 2:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f97624fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

19:14:26 executing program 1:
syz_mount_image$hfs(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@type={'type', 0x3d, "e2ffffff"}}, {@gid}, {@uid}, {@codepage={'codepage', 0x3d, 'macromanian'}}]}, 0x1, 0x2d7, &(0x7f00000023c0)="$eJzs3T9v004cx/HPOUmb/lF//rVFSCygQiVYKgoMiCUIZWVnQkCTShVREW2RgIWCGBEPgJ2nwINgAfEEYGLiAXQzuvPFdRrHaWgTN+37JSVyznf293J2fF9LrQXgzLpX//n55m/7MlJJJUl3pEBSVSpLOqfz1RebOxs7rWYjb0Ml18K+jOKWpqvO2mYzq6lt51p4of1U1my6DMMRRdHdX0UHgcK5sz9DIE3689Ctr444rmHZlS4WHcOopQfY7GlPLzVXYDgAgBPAX/8Df5mYdUVGQSAt+8v+qbr+7xUdwPG61eoqinIbpK7/bnYXGTu+/7lV+/meS+Hs+qCdJR4mmMqBzxOKj6yOCabpl1W6WIKp9Y2yVtbeqhHonWpeqtqie2/Eh25bn2iXMnLTHL23VtH96bg3bkZ5UDuk9Y1Wc9IuZMS/MNgej858Nd/NQxPqkxrJ/K8cGTtMbqTCAyMVVGz813tvcca1srXk0/5arRZ0VPnf7eSC34PXp5fV7Iwkvc32DYLdJIK8ON2+59V5WyHu3WqfVgtZrcLkU49Wix2tSv5IWFl71sq9lTIc7S6aj+aBWdIffVE9Nf8PbHzLSp2ZeT/1xtX0R0bcn4nsmmVXM+y6cuyfLpeSCLzJgfsGacC7ZR/0RLc1t/3q9dNSq9XcsguPMxaez24ZX1J5L2XWGf5CSTl1tLtfEllvouiwW46OEJjp921cO9Yvwf5+JCX29MmqbM+ypCQY9TCdlYX6N+UdkOOzEEVSj1VD+53CCbJt2oPuC6YKDgijZuddJs7/3Ezez+pcimTfwpx5en6SqY4triYZXOdUcN69Tw+Uwc30zuBSe7zRI2d0Odflq9KVVKFR7h5DH+cpYer6oUfc/wcAAAAAAAAAAAAAAAAAABg3o/hLg6L7CAAAAAAAAAAAAAAAAAAAAADAuPun5/9m/Y949/zfkOf/AmPkbwAAAP//6p531Q==")
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00')
read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0x2020)

19:14:26 executing program 2:
r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2882, 0x0)
write$proc_mixer(r0, &(0x7f0000000100)=[{'CD', @val={' \'', 'Master Playback'}}], 0x2a)
r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0)
dup3(r1, r0, 0x0)

[  266.775854][ T8872] workqueue: max_active 65536 requested for btrfs-endio is out of range, clamping between 1 and 512
[  266.838655][ T8872] workqueue: max_active 65536 requested for btrfs-endio-meta is out of range, clamping between 1 and 512
[  266.914783][ T8941] loop1: detected capacity change from 0 to 64
[  266.925965][ T8872] workqueue: max_active 65536 requested for btrfs-endio-raid56 is out of range, clamping between 1 and 512
[  267.044100][ T8872] workqueue: max_active 65536 requested for btrfs-rmw is out of range, clamping between 1 and 512
[  267.128865][ T8872] workqueue: max_active 65536 requested for btrfs-endio-write is out of range, clamping between 1 and 512
[  267.169649][ T8872] workqueue: max_active 65536 requested for btrfs-compressed-write is out of range, clamping between 1 and 512
19:14:26 executing program 3:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0x75)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, r1, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000001c0))

19:14:26 executing program 2:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = io_uring_setup(0x5c20, &(0x7f0000000140))
recvmmsg(r0, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r1, r2, 0x0)

19:14:26 executing program 0:
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90224fc601000070007030200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0)

19:14:26 executing program 1:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0x75)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
ioctl$IMADDTIMER(r0, 0x80044941, &(0x7f00000001c0))

[  267.311257][ T8872] BTRFS info (device loop4): enabling ssd optimizations
19:14:27 executing program 4:
syz_mount_image$hfs(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@type={'type', 0x3d, "e2ffffff"}}, {@gid}, {@uid}, {@codepage={'codepage', 0x3d, 'macromanian'}}]}, 0x1, 0x2d7, &(0x7f00000023c0)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00')
read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0x2020)

19:14:27 executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
mount(&(0x7f0000000200)=ANY=[@ANYBLOB='/'], &(0x7f0000000080)='./file0\x00', 0x0, 0x2000, 0x0)

19:14:27 executing program 2:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a}, 0x15)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0xfffff000, 0xe, 0x0, &(0x7f0000000880)="61df712bc884fed5722780b686dd", 0x0, 0x8000, 0x0, 0xfffffffffffffeca, 0x0, &(0x7f0000000000), &(0x7f0000000800)="ffe200004e379b19393a41afde6b0b1235c1278ebf59a5d4d697bc199e060b675b46d4ff37c7f91ceaa6790cd8570f080b0d2375918cd7dfcf26aa90dc6a5617be488475b892958512c8e814c24d7efc26f9f2512dec8c759773c42a2fca2735984613809a78eb", 0x0, 0x2}, 0x28)

19:14:27 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a}, 0x15)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x40086607, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0xfffff000, 0x28, 0x0, &(0x7f0000000880)="61df712bc884fed5722780b686dd", 0x0, 0x8000, 0x0, 0xfffffffffffffeca, 0x0, &(0x7f0000000000), &(0x7f0000000800)="ffe200004e379b19393a41afde6b0b1235c1278ebf59a5d4d697bc199e060b675b46d4ff37c7f91ceaa6790cd8570f080b0d2375918cd7dfcf26aa90dc6a5617be488475b892958512c8e814c24d7efc26f9f2512dec8c759773c42a2fca2735984613809a78eb", 0x0, 0x2}, 0x28)

19:14:27 executing program 1:
r0 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10)
sendmmsg$inet(r0, &(0x7f0000003ac0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x20004000)
syz_mount_image$f2fs(&(0x7f0000010580), &(0x7f00000105c0)='./file0\x00', 0x0, &(0x7f0000010600)=ANY=[@ANYBLOB], 0x1, 0x10578, &(0x7f0000010640)="$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")
writev(r0, &(0x7f0000003280)=[{&(0x7f00000007c0)='\\', 0x1}], 0x1)

[  267.475144][ T3564] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
19:14:27 executing program 2:
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
poll(&(0x7f0000000140)=[{r0, 0x4}], 0x1, 0x0)
mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x0)

[  267.475332][ T8963] syz-executor.3[8963] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
19:14:27 executing program 3:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0x75)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, r1, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000001c0))

19:14:27 executing program 0:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = io_uring_setup(0x5c20, &(0x7f0000000140))
recvmmsg(r0, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r1, r2, 0x0)

19:14:27 executing program 2:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
inotify_init()

19:14:27 executing program 3:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0x75)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
ioctl$IMADDTIMER(r0, 0x80044941, &(0x7f00000001c0))

19:14:27 executing program 0:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
setuid(r2)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)

[  267.530868][ T8963] syz-executor.3[8963] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  267.979574][   T27] audit: type=1326 audit(1711653267.660:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8981 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc6e67dda9 code=0x7ffc0000
19:14:27 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f96024fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

19:14:27 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100fbffffff0000000000000000300014e91e00000200000000000000000000020000000000000002000004680800000000000001"], 0x0, 0x4a}, 0x20)
r0 = socket$kcm(0xa, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x400007, 0x7, 0x0, 0x1}, 0x48)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000))

19:14:27 executing program 4:
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r0 = epoll_create(0x4)
r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = dup(r1)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040))

19:14:27 executing program 0:
syz_emit_ethernet(0x1f, &(0x7f0000000040)=ANY=[@ANYBLOB="bb3bbbbbbb070000030000000003424203"], 0x0)

[  268.182089][   T27] audit: type=1326 audit(1711653267.660:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8981 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc6e67dda9 code=0x7ffc0000
[  268.297339][   T27] audit: type=1326 audit(1711653267.700:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8981 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7efc6e67dda9 code=0x7ffc0000
19:14:28 executing program 3:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0x75)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, r1, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000001c0))

19:14:28 executing program 0:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = io_uring_setup(0x5c20, &(0x7f0000000140))
recvmmsg(r0, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r1, r2, 0x0)

19:14:28 executing program 2:
openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000340)=ANY=[], 0x75)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044941, &(0x7f00000001c0))

19:14:28 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, 0x0)
sendmmsg$inet(r0, &(0x7f0000000980)=[{{&(0x7f0000000680)={0x2, 0x4e20, @loopback}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000480)=[@ip_retopts={{0x10, 0x0, 0x2}}], 0x10}}], 0x2, 0x0)

[  268.438537][   T27] audit: type=1326 audit(1711653267.700:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8981 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc6e67dda9 code=0x7ffc0000
19:14:28 executing program 3:
r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, r0, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6000)
io_setup(0x202, &(0x7f0000000200)=<r2=>0x0)
ftruncate(r1, 0x81fd)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x1670e68)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000180)={0x11, 0x10, 0xfa00, {0x0}}, 0x18)
io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030000, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000, 0x1100}])

[  268.562954][   T27] audit: type=1326 audit(1711653267.700:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8981 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc6e67dda9 code=0x7ffc0000
19:14:28 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$bt_BT_SECURITY(r0, 0x10e, 0x9, 0x0, 0xffffffffffffffbf)

19:14:28 executing program 4:
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)={0x0, 0x0, 0x8})
r1 = fcntl$dupfd(r0, 0x0, r0)
write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0x38)

19:14:28 executing program 2:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002700)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
syz_clone(0x1a4400, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480))

19:14:28 executing program 0:
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0)
r1 = geteuid()
fchownat(r0, &(0x7f0000000080)='./file0\x00', r1, 0x0, 0x0)

[  268.816349][ T9011] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO
19:14:28 executing program 0:
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r0 = epoll_create(0x4)
r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = dup(r1)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040))

19:14:28 executing program 2:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0x75)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000001c0))

19:14:28 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = io_uring_setup(0x5c20, &(0x7f0000000140))
recvmmsg(0xffffffffffffffff, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, r1, 0x0)

19:14:28 executing program 0:
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x100c009, &(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB='\b\x00'], 0x3, 0x369, &(0x7f0000001a40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000001dc0)=""/4113, 0x523)

[  269.078762][    C1] sd 0:0:1:0: [sda] tag#5315 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  269.089761][    C1] sd 0:0:1:0: [sda] tag#5315 CDB: Read(6) 08 00 00 00 00 00
19:14:28 executing program 4:
openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000340)=ANY=[], 0x75)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044941, &(0x7f00000001c0))

19:14:28 executing program 2:
r0 = socket$inet(0x2, 0x6, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)

[  269.171611][ T9024] loop0: detected capacity change from 0 to 256
19:14:28 executing program 3:
prctl$PR_SET_MM_MAP(0x41, 0x3, 0x0, 0x0)
r0 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93<u\xbe\xeag\xd2\x04e\xf2s\xde}o#\x90\xda\x9cs,r\xfd:\xcb\xc7\vTmPZJ\xac\x8b\xd0\xc0\xbcRK\xcb\x1e8\xce\xbd[N\xb0\xb4<\xeb\x86[\xec\x8f\x14\n\x83\x9e&\\\xb7!\xed\xa0\xc3,\x90m\x0f\x00\x00\x00\x00\x00\x00\xff\xd0\xb3\x94\x00\x00\x00\x00\x00\x00\x00\x9dH\xf8\xffRo\xa3W\xe1\xed\x8eS\xaeX\x93\x7f\xd3\xb9\x84Q\x9c\"\xd9\xf5\xe4e\xf9\xcam\xe3\x03\xe4\xad\xd5&A\x02\xc8\xa9\xfe\xcb\x87\xd9\xd3\x8c\f\xc08T~\xc4\xbd\x90?\x1f\x9c\x9b0\x19 \x9f\xd1p`\xc0/\x00u\x19\x1d\xac\xe8%\xb7\t\x9f4\xbb\x89\xe9\xc1\x81\xb0\xd6\xf7\x90\x1f\x94\x01M.\x16\x05\x16\xb9\xe9\xdc~\xd3-s\xe6;\x94\x1c^\x06\xdav;\xccD\x95sj\xe0\xd5\xbeS\xac\xe5N\xea\x9eyl[[\xce5\xee\x05\x9c\x96\xabJ^c\xf7\x19\xb4\xd8\xe4\x87\x9dp\xea?/\xcb\x9a\xaa5\'Q\fuG\x81\x8a@\x97M=v\xfe\a\xabp\xf3\x93\x9d\x7f@9\xc0\xd2\xf1\x00\x10\x00\x00\x00\x00\x00\x00\x82\x13\xb2\xa9\xef\xa5\xf8\x8bk\xb3\x9ev\x92\x0e\xd1\x1f\x17Dx[\xad\xb0\x9d/\x96\xe42mO\x9fh\xea\xf3\x14\xcd\x96\x89_)\x1b\xe2\xd6\b\x94b\xaf;\x92T\xafz\x94\x9fG\xfb\xfd|$k\x03\xd7;\x9ay\xee\xf9W?\xb3\xf9\xf8I.E4\xc3eWq\xfa\":$\xd0\x17Q\x94\xf5\xe5mk\x8e&\xf1;#z\xef*\xce\x99\x04\xb9\x90\xbc\xc9#-\x8di\xae\xc5\xdf\x13\xd2K\x8b\xf5\f\xb2x\xdd\xd5\xb4\xa9^~O<\x12\xe3\xc3P|7\xc4\xc8\xb1r0Z\x98\x87^\xc8C\x1b\x96\xb4lsyF\xc5\xbc\xffOE\xe9\xd70\xe7\xfep\x83\xa7\xa1\xd9\xe4\xba\x92\x17\xbf\xe0\xe1\x01\xb7\x8b\x18j\x19n\xc8\xff\xe9\xf4\xf4\xcf a\xd7_w\x0f\x9dF\xae\xccA-/\x83\xabU\xd5\xbf8\xa4O\xb4\xef\xc8\xccH\xd1=\xbe\xbex\xb5-\x05\x01\x11\xfa\xcf\x1dm\xb5X\xe9\xb5O\x15\xc7;Lb\xce\x1a\xcc\x98\xe8\xe9e\xe0\xc2N\xe7\xd7\x1d\x92\x87F8\x9e\xf7\xdd\xdaW\xf5X\x80\xa0f\xceo\xd8\x7f\xc0\x96\bSB\xce&\x04$\xc3\xe31U\x84\x82\xf0{i\x1d\x02\x10\xc6C\x01^\xcf\x93?w\x01\x84\xa0\xd6\xa2\x10\xa4\xfcG\xabD\xd6dGZ\xb2Cx\x1b\xfdD9\x17\xe6\xcauM\xe3\x05)\xe2\x03\xe2j$F1n@\xde\n9t.[\xad\xb5\f<o\xdb\xa4\x90\xc4\xd0I\xa6\x96\xa1\x00\xbb\xdd\x94\x00t/1YekG\x7f\xbdrI\x1e\x8a4=\xa2\xe9\x82<\x9e|\xf5\xa4\x05#\x7f\xa8\x01\x00\x82ih\xf9?\x03Q\xf5\xc4\x95\x99 \xa7v~:$\x02O\xe3\xaa\x1f\x00\xebh\'\xd2q\x10\x1e\x94n\xd7w\xb1\xc8G\x89\xf4\x8ct\xf9R\x85\x1b8OE\x04\x9a\xd8\x80\x10x\xbf\n0\b,r\xc6r\xf7=\xfe\xc1\x16\xe6\xee\xbb:-h\xba\x8b\x14\x9a?\x8e\x03;\xe5\x04\xd8\xa9\x9a\xd3\x05(\x7f|\xadU\xafe\x87V.i4$6U,R\x9b\n{\'\xfe1\xc4\xb09\x96{\xc0e\xa1\xe7\xa9\xb4\x1a\n\xf5\xd7zuvz\x972\xd4\xfb\x13u2\xab\x18\x01~r\xbbcW!)\xf4\x9b\x1dI\x9ex;\xb2\xe3I\xbd\x16T\xb75\xa6\a\xb7\xa1\x8d\xc9\x12\xb1\xbd\xbc\xd9c\xe9\xe6k\xee\x06\x83\xf4\xab\x18\x038\x8f\xc9^\x0f\xab\xea&P\b\xef#\xf6\xc3\xfc\xd4\xa0\xfd\x15N\xd3\xa0\x80\x9f\bU\xa63\xf6\xc9\xecZ`\xa4\xa0(\xf9\x98B\xaf\xde*\x91\xddk\xa1`d\xf0\x97\xc9e\xc1\"EC\x9a?x\x89\x8d\xb3\xfaF}\x82D\xf8\f\xf1`\x90D\xd1|%(\xd8\t\xea\x00C\xce\x7fo+?v\xee\xc6bL\x1d\xbe\x84p\x8d\xa3\xec\xf7\xe0\xfe\x8c=<\xf2\x1f@\xe66E\xa7\x9c\xd3\xb6\xf5\xe0\x14\xb8\xd4`\x85\xe3;\x8c\xf8\xf2\xd9)\x0e\xd0\xff\xa5K\xf3\xf1\xc4\x18\xf4Z\xdci\x91\x84\xe8\xb7\x10\x90\xbc\xect\x14\xdfR\xe2\x80\xf8a\x92\xb2R\xdf0\xcaQ\xdf\x87\xbdjp\x1ch3h\xcf<\x82\x97\xa5s/m\xb2\x1dd\xf7\xfc\xf5\xa9\x1d\xd34{\xcc\x1f\t,i\x16\x82\xad\x8e\xb6\x17\x0f\xaa\x85^/w\xbb~\xff\xce\x92\x90\x83\n\xe5\x14\x95\x92|\xfe-S%\x91i\xafh\x97z\x00@K\xbb\xc2\fcD\xff\xdcl\xa1\xfaR\xbc\xd0k\\\x92\x19a6Sv\x05%{\xe2\xe9\xf1\xddRB$8\xb0q9\xa1g&\x17\xe5P\xef\xb1<\xb6\xe2\xb2\xc06^\x0f4\xba\x10\xba\x00\x00\x00\x00\x00\x00\x00\x00\xef\xba\"\xb7\xc7~T\xc4Ei\xfdk\xa9\"F\xa9C\xa0\xd3\xa0\x1b\xbf\x13\xfb\x14S<\xa6\n5\x86\x9e\xb2=8\'g`\x8f\xa8\x027\xbd\xb5s\xe9dti\xc0\xbd\\H\xe5v\xdd\x0fP\x8b+-\x02i\x8eZU\xa8YB\xfc\xc2R7\xe9\x11\x06\x1aRd\xa93\xa1\\\xf4_s\xf7\xe8+\xbdg\x13\xaea\x04\xd8\x82\xf6\x90\xaf1\x86b\x81J\xb7E\xb0\xe2\xd6\x93S\xb3\x98\xcb\xf9\xde=\xd6T\x8d\xea\xab\xa9Z!\xd3-\xa6_\xc4\xa4\xb6+\x89\xdc]O<g\x06~\x12W\x86\x06\xba\x15#\xa7Q\xffa\x926>\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000080)={r1, 0x0, 0x2000, 0x8000})
ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000040))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x80010, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0xc080661a, &(0x7f0000000080))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0x19, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@ldst={0x0, 0x2, 0x0, 0x4, 0x9, 0xfffffffffffffff4}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xf}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000700)='GPL\x00', 0x4, 0x8e, &(0x7f0000000a00)=""/142, 0x0, 0x5, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000ac0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000b00)={0x3, 0x4, 0x1, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[r2, r2], 0x0, 0x10, 0x1000}, 0x90)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000440)=""/74, 0x106, 0x4a, 0x1, 0xe00}, 0x20)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000c80))
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@bloom_filter={0x1e, 0x5, 0x2, 0x2f9, 0x20, r2, 0x0, '\x00', 0x0, r3, 0x2, 0x2, 0x5, 0xb}, 0x48)
io_uring_setup(0x2f0c, &(0x7f0000000280)={0x0, 0xcd0b, 0x0, 0x2, 0x2c6, 0x0, r2})
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xfeffff1e, 0x11, r1, 0x0)
syz_open_pts(r2, 0x400004)
fcntl$addseals(r0, 0x409, 0x0)

[  269.227366][ T9024] FAT-fs (loop0): Directory bread(block 64) failed
[  269.253954][ T9024] FAT-fs (loop0): Directory bread(block 65) failed
19:14:29 executing program 2:
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = dup(r0)
fcntl$lock(r1, 0x25, &(0x7f00000002c0)={0x0, 0x1})

[  269.298820][ T9024] FAT-fs (loop0): Directory bread(block 66) failed
[  269.305986][ T9024] FAT-fs (loop0): Directory bread(block 67) failed
19:14:29 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f00000004c0)=ANY=[@ANYRESDEC, @ANYBLOB="c0e538f79c3f31de7c660100955941e9050000fd1db6c80386963702df00009c1b286ad880ca4d5c027e83d9809ba5ff5868630a2e875c795e70aebe07e642e9ce4c6a3f75b5bb3ea945de7c75314220c5144025489fa655e826810bc5051fa775e5c3b009c47cd5017525a9"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000002640)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x3c8, 0x38, 0x377, 0x7fffffff, 0x0, 0x20, 0x0, 0x0, 0x0, 0x8b}, [{0x5, 0x0, 0xfffff1df}, {0x0, 0x0, 0x5}], "7e709de466b5b24fb9b4fa77ff1f65cad0fe84d3479261096093a76b8720b88210dcd4e63090c87090820409302a42e1919a44de72f8a3ec9fcc0ddb6194bd55bfc07519af1704a2945043e7139c0536c7b39b84ca0305a0eff1ea97fe36ff7891873815aaa715ea4004af3d1bb9bed8404c0df7cf120fc64e2b1e3064a8236ad81c8b930e26028f58a2a2f5a1bec3f3356b21ede7a9ccb9fbde47fc3f7d7e6799ae58e8213e40ebec0fcfaa2ef5de5d21ddcdf883a744e6badca1644127", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x936)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x265)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000010000044506f00000000000000007681bf877e00c590f0dcd09dd9089300000000000000b40b203dc8dd000000000000224d802423e85965d672ccacd72dfa6968f1098bbcffff000076f93fd027c3af7b45f2fc"])
syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000340)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0xfff, 0x0, 0x0, 0x3ff]})
preadv(r2, &(0x7f0000000600)=[{&(0x7f0000000a40)=""/157, 0x9d}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000002180)={[{}, {}, {0x0, 0x7fff}]})
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000b00)={0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff7fffffff]})
preadv(0xffffffffffffffff, &(0x7f0000002580)=[{&(0x7f0000000180)=""/28, 0x1c}, {0x0}, {0x0}, {&(0x7f0000002240)=""/151, 0x97}, {0x0}, {&(0x7f0000002380)=""/37, 0x25}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000640))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

19:14:29 executing program 3:
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r0 = epoll_create(0x4)
r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = dup(r1)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040))

[  269.348633][ T3581] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  269.358097][ T3581] Bluetooth: hci1: Injecting HCI hardware error event
[  269.368536][ T3579] Bluetooth: hci1: hardware error 0x00
[  269.388888][ T9024] FAT-fs (loop0): Directory bread(block 68) failed
19:14:29 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000000c0)={0x2, 0x0, [{0xd, 0x3, 0x5}, {0x1}]})

[  269.435900][ T9024] FAT-fs (loop0): Directory bread(block 69) failed
[  269.503935][ T9024] FAT-fs (loop0): Directory bread(block 70) failed
[  269.534702][ T9024] FAT-fs (loop0): Directory bread(block 71) failed
19:14:29 executing program 2:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0x75)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000001c0))

[  269.555052][ T9024] FAT-fs (loop0): Directory bread(block 72) failed
[  269.592987][ T9024] FAT-fs (loop0): Directory bread(block 73) failed
[  269.751372][ T9039] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
19:14:30 executing program 1:
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r0 = epoll_create(0x4)
r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = dup(r1)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040))

19:14:30 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = io_uring_setup(0x5c20, &(0x7f0000000140))
recvmmsg(0xffffffffffffffff, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, r1, 0x0)

19:14:30 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = socket$kcm(0x15, 0x5, 0x0)
setsockopt$sock_attach_bpf(r1, 0x114, 0x3, 0x0, 0xfea5)

19:14:30 executing program 2:
openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000340)=ANY=[], 0x75)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044941, &(0x7f00000001c0))

19:14:30 executing program 4:
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

[  270.440013][ T8968] loop1: detected capacity change from 0 to 131072
[  270.477557][ T8968] F2FS-fs (loop1): Failed to start F2FS issue_checkpoint_thread (-12)
19:14:30 executing program 2:
sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_pts(0xffffffffffffffff, 0x0)
readv(r0, &(0x7f0000001500), 0x0)
getgid()
getgid()
setsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, 0x0, 0x0)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f0000000080)='./file0\x00', 0x15d)
rmdir(0x0)

19:14:30 executing program 0:
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x0)
openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)

19:14:30 executing program 3:
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x100c009, &(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB='\b\x00'], 0x3, 0x369, &(0x7f0000001a40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000001dc0)=""/4113, 0x523)

19:14:30 executing program 4:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0x75)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000001c0))

[  270.709777][ T9056] loop3: detected capacity change from 0 to 256
19:14:30 executing program 2:
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f0000005380), 0x4)

19:14:30 executing program 4:
r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = dup3(r0, r1, 0x0)
fstat(r2, &(0x7f0000000600))

[  270.826223][ T9056] FAT-fs (loop3): Directory bread(block 64) failed
[  270.874268][ T9056] FAT-fs (loop3): Directory bread(block 65) failed
[  270.906063][ T9056] FAT-fs (loop3): Directory bread(block 66) failed
19:14:30 executing program 2:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0x75)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
ioctl$IMADDTIMER(r0, 0x80044941, 0x0)

[  270.939046][ T9056] FAT-fs (loop3): Directory bread(block 67) failed
[  270.947557][ T9056] FAT-fs (loop3): Directory bread(block 68) failed
19:14:30 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0)
mkdir(&(0x7f00000002c0)='./bus\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})
mkdir(&(0x7f0000000200)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0)
mount(&(0x7f0000000040)=@filename='./bus/file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x3000, 0x0)

[  271.015382][ T9056] FAT-fs (loop3): Directory bread(block 69) failed
[  271.068703][ T9056] FAT-fs (loop3): Directory bread(block 70) failed
[  271.086397][ T9056] FAT-fs (loop3): Directory bread(block 71) failed
[  271.108311][ T9056] FAT-fs (loop3): Directory bread(block 72) failed
19:14:30 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = io_uring_setup(0x5c20, &(0x7f0000000140))
recvmmsg(0xffffffffffffffff, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, r1, 0x0)

[  271.127236][ T9056] FAT-fs (loop3): Directory bread(block 73) failed
19:14:30 executing program 4:
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

19:14:30 executing program 2:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c0001000004000904000001c6cbea00090587033b"], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000))

19:14:31 executing program 3:
openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000340)=ANY=[], 0x75)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f00000001c0))

[  271.438777][ T3579] Bluetooth: hci1: Opcode 0x0c03 failed: -110
19:14:31 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)

19:14:31 executing program 3:
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040))
openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r1 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
fcntl$setstatus(r1, 0x4, 0x0)

19:14:31 executing program 4:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0x75)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
ioctl$IMADDTIMER(r0, 0x80044941, 0x0)

[  271.638667][ T7967] usb 3-1: new high-speed USB device number 27 using dummy_hcd
19:14:31 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0)
mkdir(&(0x7f00000002c0)='./bus\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})
mkdir(&(0x7f0000000200)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0)
mount(&(0x7f0000000040)=@filename='./bus/file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x3000, 0x0)

19:14:31 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = io_uring_setup(0x0, &(0x7f0000000140))
recvmmsg(r0, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r1, r2, 0x0)

19:14:31 executing program 4:
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x100c009, &(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB='\b\x00'], 0x3, 0x369, &(0x7f0000001a40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000001dc0)=""/4113, 0x523)

[  271.898525][ T7967] usb 3-1: Using ep0 maxpacket: 32
19:14:31 executing program 3:
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

19:14:31 executing program 0:
openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000340)=ANY=[], 0x75)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f00000001c0))

[  271.981629][ T9095] loop4: detected capacity change from 0 to 256
[  272.018532][ T7967] usb 3-1: config index 0 descriptor too short (expected 156, got 27)
[  272.039370][ T7967] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  272.071130][ T9095] FAT-fs (loop4): Directory bread(block 64) failed
19:14:31 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0xb4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_FRAME={0x88, 0x33, @action_no_ack={{}, @tdls_teardown={0xc, 0x3, {0x0, {0x37, 0x52, {0x0, 0x0, "03084c18362bdf6e7813be440afdee07", "4051c3ec42d1ebc97c49382cf55c84487aad6d1e17acd7fcca2103978ac6de2e", "9fc392454ffca82ac4ba60422179cd3cdec16c5514db74042079dae492a0eea4"}}, {0x65, 0x12, {@from_mac, @broadcast, @broadcast}}}}}}]}, 0xb4}}, 0x0)

[  272.095154][ T9095] FAT-fs (loop4): Directory bread(block 65) failed
[  272.108011][ T9095] FAT-fs (loop4): Directory bread(block 66) failed
[  272.128526][ T9095] FAT-fs (loop4): Directory bread(block 67) failed
[  272.135819][ T9095] FAT-fs (loop4): Directory bread(block 68) failed
[  272.150974][ T9095] FAT-fs (loop4): Directory bread(block 69) failed
[  272.168033][ T9095] FAT-fs (loop4): Directory bread(block 70) failed
[  272.182705][ T9095] FAT-fs (loop4): Directory bread(block 71) failed
19:14:31 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = dup(r2)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000800003a"])

[  272.194695][ T9095] FAT-fs (loop4): Directory bread(block 72) failed
[  272.205932][ T9095] FAT-fs (loop4): Directory bread(block 73) failed
[  272.238740][ T7967] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  272.261097][ T7967] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  272.296645][ T7967] usb 3-1: Product: syz
19:14:32 executing program 3:
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r0 = epoll_create(0x4)
openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000040))

19:14:32 executing program 4:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0x75)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
ioctl$IMADDTIMER(r0, 0x80044941, 0x0)

[  272.308293][ T7967] usb 3-1: Manufacturer: syz
[  272.320344][ T7967] usb 3-1: SerialNumber: syz
[  272.344690][ T7967] usb 3-1: config 0 descriptor??
19:14:32 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0)
mkdir(&(0x7f00000002c0)='./bus\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})
mkdir(&(0x7f0000000200)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0)
mount(&(0x7f0000000040)=@filename='./bus/file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x3000, 0x0)

19:14:32 executing program 3:
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x0)
openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)

[  272.403675][ T7967] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  272.455315][ T7967] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0
19:14:32 executing program 4:
openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000340)=ANY=[], 0x75)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f00000001c0))

19:14:32 executing program 0:
request_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='\x00', 0xfffffffffffffffc)

[  272.607817][ T8980] usb 3-1: USB disconnect, device number 27
[  272.632392][ T8980] ldusb 3-1:0.0: LD USB Device #0 now disconnected
19:14:32 executing program 4:
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

19:14:32 executing program 1:
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x100c009, &(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB='\b\x00'], 0x3, 0x369, &(0x7f0000001a40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000001dc0)=""/4113, 0x523)

19:14:32 executing program 0:
r0 = socket$key(0xf, 0x3, 0x2)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x90)
sendfile(r0, r1, &(0x7f0000000040), 0x1)
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000b9240c8aee6631ad071808fe5ec25c497c626f69d02a71d1d27602d048db08101209e5e4cce0e9628b0636f3baa"], 0x1, 0x5d8, &(0x7f00000006c0)="$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")
openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000001c0)='reno\x00', 0x5)
bind$inet(r2, &(0x7f0000000380)={0x2, 0x200000000004e23, @local}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)

[  272.884876][ T9122] loop1: detected capacity change from 0 to 256
[  272.963703][ T9122] FAT-fs (loop1): Directory bread(block 64) failed
[  272.966584][ T9124] loop0: detected capacity change from 0 to 1024
[  272.977008][ T9122] FAT-fs (loop1): Directory bread(block 65) failed
[  272.986331][ T9122] FAT-fs (loop1): Directory bread(block 66) failed
[  273.004450][ T9122] FAT-fs (loop1): Directory bread(block 67) failed
19:14:32 executing program 4:
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r0 = epoll_create(0x4)
openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000040))

19:14:32 executing program 0:
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f00000001c0)=""/66, 0x42}], 0x1}}], 0x1, 0x0, 0x0)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)

[  273.043193][ T9122] FAT-fs (loop1): Directory bread(block 68) failed
[  273.066708][ T9122] FAT-fs (loop1): Directory bread(block 69) failed
[  273.104451][ T9122] FAT-fs (loop1): Directory bread(block 70) failed
[  273.131688][ T9122] FAT-fs (loop1): Directory bread(block 71) failed
19:14:32 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0)
mkdir(&(0x7f00000002c0)='./bus\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})
mkdir(&(0x7f0000000200)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0)
mount(&(0x7f0000000040)=@filename='./bus/file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x3000, 0x0)

[  273.158939][ T9122] FAT-fs (loop1): Directory bread(block 72) failed
[  273.175090][ T9122] FAT-fs (loop1): Directory bread(block 73) failed
[  273.188519][ T3581] Bluetooth: hci0: command 0x0406 tx timeout
19:14:33 executing program 1:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0x75)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, 0x0)

19:14:33 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = io_uring_setup(0x0, &(0x7f0000000140))
recvmmsg(r0, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r1, r2, 0x0)

19:14:33 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xb, 0x16, &(0x7f0000000b00)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf2000000000000007000000080000003d0301000000000095000000000000006916000000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f3d2401000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9755ba08508460b603daf5a7d1dbdd2d17f2f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a6538b89dc6c60bf70d742a81b72bab8395fa64810b5bb8fab4d4d897db2c544c0ec50b8eac8c63d2b1cd06a39702bd547f5ebaa6954f01cef3c9bacec15e2e3b2bd352e93a22adfe8efe33ffa78b02af242f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564b8f8a621483fb2a5ff221e0d831d64759d17b8c59d0f2b06e7f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d545741fbbbea3e47b1750f272980087b7f8a13cce7014137f250370b8a70ae3eaf6d6f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf9a87c0f0c8cd51e56d9e5e7708f156b6cb08566bc86ba6997bb7ae18b9cdf9e6cfda9c6390190e2d468e8c38a818a6a1397b5fbbaa4ddc9a36df424135a28d1e5eaa50850ade812fe83ac7ea0136dc3729879ca51977eef8c2c546938b7b8a4656a71a783b302d7918e6c206af735e9a985cd4cda46d39bca00ff4aa309fd6a598af5e0199f1eb562875450c10d95b7ffb00"/759], &(0x7f0000000100)='GPL\x00'}, 0x48)

19:14:33 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)

19:14:33 executing program 4:
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xa08800, &(0x7f0000000140)=ANY=[], 0x1, 0x671, &(0x7f0000000a40)="$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")
rmdir(&(0x7f00000002c0)='./file1\x00')

19:14:33 executing program 0:
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r0 = epoll_create(0x4)
openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000040))

19:14:33 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000000c0)={0x1, 0x0, 0x1})

19:14:33 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newqdisc={0x4c, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}}, 0x0)

[  273.768903][ T9145] loop4: detected capacity change from 0 to 1024
19:14:33 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0)
mkdir(&(0x7f00000002c0)='./bus\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})
mkdir(&(0x7f0000000200)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@filename='./bus/file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x3000, 0x0)

19:14:33 executing program 3:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0x75)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, 0x0)

19:14:33 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000140)='syzkaller\x00'}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10)
chdir(0x0)

19:14:33 executing program 1:
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x55)
read$dsp(r0, &(0x7f00000001c0)=""/4096, 0x1000)

19:14:33 executing program 3:
r0 = getegid()
syz_mount_image$hfsplus(&(0x7f0000000200), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x80000c, &(0x7f00000003c0)=ANY=[@ANYBLOB='nobarrier,decompose,gid=', @ANYRESHEX=0x0, @ANYBLOB=',barrier,gid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=r0, @ANYBLOB=',uid=', @ANYRESHEX=0x0, @ANYBLOB="2c6e6c733d64656661756c742c001bb4a4447bd69aa8532125707aa318f1e60d28086a88ef2208cc30839fc1be7ad88539fad2c027aca664454d7bf988a9fa9f5f0cab42326f5c70febc7902ce02b8ec0adb23bef1c917d0bd"], 0x1, 0x6e3, &(0x7f00000009c0)="$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")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0)
ftruncate(r1, 0x8001)

19:14:33 executing program 0:
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r0 = epoll_create(0x4)
r1 = dup(0xffffffffffffffff)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040))

19:14:33 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000003c0)={0x79, 0x0, 0x3000000})

[  274.187101][ T9162] loop3: detected capacity change from 0 to 1024
19:14:33 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000000c0)={0x1, 0x0, 0x1})

19:14:34 executing program 2:
syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x9}, {0x49, [{}, {}]}}}, 0xc)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)

19:14:34 executing program 3:
writev(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
r1 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xeeux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8, 0x7})
mq_timedreceive(r1, &(0x7f0000000180)=""/196, 0xc4, 0x0, 0x0)
mq_timedsend(r1, 0x0, 0x0, 0x3ed7, &(0x7f0000000140)={0x0, 0x989680})

[  274.341695][    T9] hfsplus: b-tree write err: -5, ino 4
19:14:34 executing program 1:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000340)=ANY=[], 0x75)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, 0x0)

[  274.417316][ T3579] Bluetooth: hci4: Malformed Event: 0x13
19:14:34 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000140)='syzkaller\x00'}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10)
chdir(0x0)

19:14:34 executing program 2:
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r0 = epoll_create(0x4)
r1 = dup(0xffffffffffffffff)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040))

19:14:34 executing program 0:
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x55)
read$dsp(r0, &(0x7f00000001c0)=""/4096, 0x1000)

19:14:34 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = io_uring_setup(0x0, &(0x7f0000000140))
recvmmsg(r0, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r1, r2, 0x0)

19:14:34 executing program 2:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$rfkill(r0, &(0x7f00000000c0), 0x8)

19:14:34 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000000c0)={0x1, 0x0, 0x1})

19:14:34 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newrule={0x30, 0x20, 0x205, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth1\x00'}]}, 0x30}}, 0x0)

19:14:34 executing program 1:
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009b23fd406d04c1088dee000000010902240001000000000904000000ff010000072401000000000b24020106eecb7762bf92"], 0x0)

19:14:34 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000140)='syzkaller\x00'}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10)
chdir(0x0)

19:14:34 executing program 0:
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = socket(0xa, 0x802, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10)

19:14:34 executing program 2:
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000000)={[{@huge_within_size}]})
chdir(&(0x7f0000000140)='./file0\x00')
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
ftruncate(r0, 0x8208200)
r1 = open(&(0x7f0000000780)='./bus\x00', 0x14117e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x604100, 0x7ffffe, 0x4002011, r1, 0x0)
creat(&(0x7f0000000340)='./bus\x00', 0x0)

19:14:34 executing program 4:
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r0 = epoll_create(0x4)
r1 = dup(0xffffffffffffffff)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040))

19:14:34 executing program 4:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$rfkill(r0, &(0x7f00000000c0), 0x8)

19:14:34 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000000c0)={0x1, 0x0, 0x1})

19:14:34 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='syzkaller\x00', 0x4, 0xff0, &(0x7f000062b000)=""/4080}, 0x3d)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0x26, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

19:14:34 executing program 4:
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x55)
read$dsp(r0, &(0x7f00000001c0)=""/4096, 0x1000)

[  275.102516][ T7968] usb 2-1: new high-speed USB device number 26 using dummy_hcd
19:14:34 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0)
mkdir(&(0x7f00000002c0)='./bus\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})
mkdir(&(0x7f0000000200)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@filename='./bus/file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x3000, 0x0)

19:14:34 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000140)='syzkaller\x00'}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10)
chdir(0x0)

19:14:34 executing program 0:
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = dup(r0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000040))

19:14:35 executing program 0:
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000000)={[{@huge_within_size}]})
chdir(&(0x7f0000000140)='./file0\x00')
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
ftruncate(r0, 0x8208200)
r1 = open(&(0x7f0000000780)='./bus\x00', 0x14117e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x604100, 0x7ffffe, 0x4002011, r1, 0x0)
creat(&(0x7f0000000340)='./bus\x00', 0x0)

19:14:35 executing program 0:
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = socket(0xa, 0x802, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10)

19:14:35 executing program 4:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$rfkill(r0, &(0x7f00000000c0), 0x8)

19:14:35 executing program 4:
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f00000000c0)={0x1, 0x0, 0x1})

[  275.478779][ T7968] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d
[  275.505697][ T7968] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
19:14:35 executing program 3:
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x4001, 0x3, 0x2c0, 0x160, 0x500b, 0x148, 0x0, 0x148, 0x160, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'team_slave_1\x00'}}, @common=@addrtype={{0x30}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318)

19:14:35 executing program 0:
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab02, 0xfffffffffffffffa)

[  275.551284][ T7968] usb 2-1: config 0 descriptor??
[  275.610823][ T7968] usb 2-1: Found UVC 0.00 device <unnamed> (046d:08c1)
[  275.617993][ T7968] usb 2-1: No valid video chain found.
19:14:35 executing program 4:
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = dup(r0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000040))

19:14:35 executing program 3:
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000000)={[{@huge_within_size}]})
chdir(&(0x7f0000000140)='./file0\x00')
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
ftruncate(r0, 0x8208200)
r1 = open(&(0x7f0000000780)='./bus\x00', 0x14117e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x604100, 0x7ffffe, 0x4002011, r1, 0x0)
creat(&(0x7f0000000340)='./bus\x00', 0x0)

19:14:35 executing program 0:
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x55)
read$dsp(r0, &(0x7f00000001c0)=""/4096, 0x1000)

19:14:35 executing program 4:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
read$rfkill(r0, &(0x7f00000000c0), 0x8)

[  275.811105][ T3654] usb 2-1: USB disconnect, device number 26
19:14:35 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = io_uring_setup(0x5c20, 0x0)
recvmmsg(r0, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r1, r2, 0x0)

19:14:35 executing program 4:
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = socket(0xa, 0x802, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10)

19:14:35 executing program 0:
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f00000000c0)={0x1, 0x0, 0x1})

19:14:35 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000240)='cpuacct.usage_user\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="b902bb084c68a26c69924a0ecab26d054e00000000955e598f0659043610a3fd00f74d7beb764baf7df19f862d0fb0"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xc000})
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

19:14:35 executing program 2:
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r2, @ANYBLOB="30000e008000000094f2ffffffff08021100000050505050505000000000000000000000640000007206030303030303080026006c09000008000c006400000008000d00000000000a003402020202020200000c001b80050001001000"], 0x7c}}, 0x0)

19:14:35 executing program 0:
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = dup(r0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000040))

19:14:35 executing program 0:
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000000)={[{@huge_within_size}]})
chdir(&(0x7f0000000140)='./file0\x00')
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
ftruncate(r0, 0x8208200)
r1 = open(&(0x7f0000000780)='./bus\x00', 0x14117e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x604100, 0x7ffffe, 0x4002011, r1, 0x0)
creat(&(0x7f0000000340)='./bus\x00', 0x0)

[  276.266289][ T9252] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
19:14:36 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff00080002000aa42e"], 0x44}}, 0x0)

19:14:36 executing program 1:
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read$dsp(r0, &(0x7f00000001c0)=""/4096, 0x1000)

19:14:36 executing program 2:
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = socket(0xa, 0x802, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10)

19:14:36 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0)
mkdir(&(0x7f00000002c0)='./bus\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})
mkdir(&(0x7f0000000200)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@filename='./bus/file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x3000, 0x0)

19:14:36 executing program 2:
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f00000000c0)={0x1, 0x0, 0x1})

19:14:36 executing program 2:
r0 = epoll_create(0x4)
r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = dup(r1)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040))

19:14:36 executing program 2:
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r2, @ANYBLOB="30000e008000000094f2ffffffff08021100000050505050505000000000000000000000640000007206030303030303080026006c09000008000c006400000008000d00000000000a003402020202020200000c001b80050001001000"], 0x7c}}, 0x0)

19:14:36 executing program 3:
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009b23fd406d04c1088dee000000010902240001000000000904000000ff010000072401000000000b24020106eecb7762bf92"], 0x0)

19:14:36 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_names\x00')
preadv(r0, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1, 0x0, 0x0)

[  276.836628][ T9270] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
19:14:36 executing program 2:
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000000)={[{@huge_within_size}]})
chdir(&(0x7f0000000140)='./file0\x00')
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
ftruncate(r0, 0x8208200)
r1 = open(&(0x7f0000000780)='./bus\x00', 0x14117e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x604100, 0x7ffffe, 0x4002011, r1, 0x0)

19:14:36 executing program 4:
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = socket(0xa, 0x802, 0x0)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10)

19:14:36 executing program 2:
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000000c0)={0x1, 0x0, 0x1})

19:14:36 executing program 4:
r0 = epoll_create(0x0)
r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = dup(r1)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040))

19:14:36 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = io_uring_setup(0x5c20, 0x0)
recvmmsg(r0, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r1, r2, 0x0)

19:14:36 executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000180)="97")

[  277.138549][ T8980] usb 4-1: new high-speed USB device number 31 using dummy_hcd
19:14:36 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
r1 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x4000000000000006)

19:14:36 executing program 4:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3f22bbd2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0)

19:14:37 executing program 4:
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000000)={[{@huge_within_size}]})
chdir(&(0x7f0000000140)='./file0\x00')
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
ftruncate(r0, 0x8208200)
mmap(&(0x7f0000000000/0x600000)=nil, 0x604100, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)

19:14:37 executing program 0:
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = socket(0xa, 0x802, 0x0)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10)

19:14:37 executing program 4:
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read$dsp(r0, &(0x7f00000001c0)=""/4096, 0x1000)

19:14:37 executing program 0:
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000000c0)={0x1, 0x0, 0x1})

[  277.488507][ T3654] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  277.528710][ T8980] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d
[  277.538237][ T8980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
19:14:37 executing program 0:
r0 = epoll_create(0x0)
r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = dup(r1)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040))

[  277.571607][ T8980] usb 4-1: config 0 descriptor??
19:14:37 executing program 0:
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x8000)
write$binfmt_script(r0, 0x0, 0x2000)

[  277.632982][ T8980] usb 4-1: Found UVC 0.00 device <unnamed> (046d:08c1)
[  277.643812][ T8980] usb 4-1: No valid video chain found.
19:14:37 executing program 0:
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r0 = socket$inet(0x2, 0x80001, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000080)={0x1, 'team_slave_1\x00'}, 0x18)

19:14:37 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0)
mkdir(&(0x7f00000002c0)='./bus\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})
mkdir(&(0x7f0000000200)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0)
mount(&(0x7f0000000040)=@filename='./bus/file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x3000, 0x0)

[  277.760880][ T9305] IPVS: Error connecting to the multicast addr
[  277.836729][ T3609] usb 4-1: USB disconnect, device number 31
[  277.868697][ T3654] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  277.884554][ T3654] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  277.894227][ T3654] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  277.910102][ T3654] usb 3-1: config 0 descriptor??
19:14:37 executing program 1:
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000000)={[{@huge_within_size}]})
chdir(&(0x7f0000000140)='./file0\x00')
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
ftruncate(r0, 0x8208200)
mmap(&(0x7f0000000000/0x600000)=nil, 0x604100, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)

19:14:37 executing program 4:
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = socket(0xa, 0x802, 0x0)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10)

19:14:37 executing program 1:
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000000c0)={0x1, 0x0, 0x1})

19:14:37 executing program 4:
r0 = epoll_create(0x0)
r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = dup(r1)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040))

19:14:37 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000000c0)={0x1, 0xfffffffc})

19:14:37 executing program 4:
ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000200)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}]}]}, 0x2c}}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'})

19:14:37 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = io_uring_setup(0x5c20, 0x0)
recvmmsg(r0, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r1, r2, 0x0)

19:14:38 executing program 3:
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read$dsp(r0, &(0x7f00000001c0)=""/4096, 0x1000)

[  278.321901][ T9320] tipc: Started in network mode
[  278.327487][ T9320] tipc: Node identity aaaaaaaaaa32, cluster identity 4711
[  278.342697][ T9320] tipc: Enabled bearer <eth:vlan0>, priority 10
[  278.360227][ T9320] tipc: Resetting bearer <eth:vlan0>
[  278.390411][ T3654] keytouch 0003:0926:3333.0009: fixing up Keytouch IEC report descriptor
[  278.412963][ T3654] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0009/input/input31
[  278.535143][ T9320] tipc: Disabling bearer <eth:vlan0>
[  278.549991][ T3654] keytouch 0003:0926:3333.0009: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0
19:14:38 executing program 4:
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000000)={[{@huge_within_size}]})
chdir(&(0x7f0000000140)='./file0\x00')
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
ftruncate(r0, 0x8208200)
mmap(&(0x7f0000000000/0x600000)=nil, 0x604100, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0)

19:14:38 executing program 0:
connect$inet(0xffffffffffffffff, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10)

19:14:38 executing program 4:
syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f00000000c0)={0x1, 0x0, 0x1})

19:14:38 executing program 4:
r0 = epoll_create(0x4)
r1 = openat$userio(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = dup(r1)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040))

19:14:38 executing program 0:
open(&(0x7f0000000180)='./file0\x00', 0x42, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000880)=@generic={&(0x7f0000000840)='./file0\x00'}, 0x18)

[  278.792808][ T3609] usb 3-1: USB disconnect, device number 28
[  278.808757][    C0] keytouch 0003:0926:3333.0009: usb_submit_urb(ctrl) failed: -19
19:14:38 executing program 4:
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009b23fd406d04c1088dee000000010902240001000000000904000000ff010000072401000000000b24020106eecb7762bf92"], 0x0)

19:14:38 executing program 0:
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0)
dup2(r0, r1)

19:14:38 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0)
mkdir(&(0x7f00000002c0)='./bus\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})
mkdir(&(0x7f0000000200)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0)
mount(&(0x7f0000000040)=@filename='./bus/file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x3000, 0x0)

19:14:38 executing program 3:
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000000)={[{@huge_within_size}]})
chdir(&(0x7f0000000140)='./file0\x00')
creat(&(0x7f0000000000)='./bus\x00', 0x0)
r0 = open(&(0x7f0000000780)='./bus\x00', 0x14117e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x604100, 0x7ffffe, 0x4002011, r0, 0x0)

19:14:38 executing program 3:
syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f00000000c0)={0x1, 0x0, 0x1})

19:14:38 executing program 3:
connect$inet(0xffffffffffffffff, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10)

19:14:38 executing program 3:
r0 = epoll_create(0x4)
r1 = openat$userio(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = dup(r1)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040))

19:14:38 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000040)={@val, @val, @arp=@generic={0x0, 0x88f7}}, 0x22)

[  279.189311][  T152] usb 5-1: new high-speed USB device number 35 using dummy_hcd
19:14:39 executing program 2:
ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000180)=0x55)
read$dsp(0xffffffffffffffff, &(0x7f00000001c0)=""/4096, 0x1000)

19:14:39 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0)
dup2(r0, r1)

19:14:39 executing program 3:
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000000)={[{@huge_within_size}]})
chdir(&(0x7f0000000140)='./file0\x00')
creat(&(0x7f0000000000)='./bus\x00', 0x0)
r0 = open(&(0x7f0000000780)='./bus\x00', 0x14117e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x604100, 0x7ffffe, 0x4002011, r0, 0x0)

19:14:39 executing program 1:
syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f00000000c0)={0x1, 0x0, 0x1})

19:14:39 executing program 2:
connect$inet(0xffffffffffffffff, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10)

19:14:39 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0))
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = io_uring_setup(0x5c20, &(0x7f0000000140))
recvmmsg(0xffffffffffffffff, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, r1, 0x0)

19:14:39 executing program 3:
r0 = epoll_create(0x4)
r1 = openat$userio(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = dup(r1)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040))

19:14:39 executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000180)="97")

19:14:39 executing program 1:
syz_clone(0x15020500, 0x0, 0x0, 0x0, 0x0, 0x0)

[  279.568877][  T152] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d
[  279.591221][  T152] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  279.625811][  T152] usb 5-1: config 0 descriptor??
19:14:39 executing program 3:
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x55)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000))
read$dsp(r0, &(0x7f00000001c0)=""/4096, 0x1000)
read$dsp(r0, &(0x7f0000000080)=""/16, 0x10)

[  279.681921][  T152] usb 5-1: Found UVC 0.00 device <unnamed> (046d:08c1)
[  279.699282][  T152] usb 5-1: No valid video chain found.
19:14:39 executing program 1:
ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000180)=0x55)
read$dsp(0xffffffffffffffff, &(0x7f00000001c0)=""/4096, 0x1000)

19:14:39 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, 0x0)

19:14:39 executing program 1:
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000000)={[{@huge_within_size}]})
chdir(&(0x7f0000000140)='./file0\x00')
creat(&(0x7f0000000000)='./bus\x00', 0x0)
r0 = open(&(0x7f0000000780)='./bus\x00', 0x14117e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x604100, 0x7ffffe, 0x4002011, r0, 0x0)

19:14:39 executing program 0:
r0 = socket(0xa, 0x802, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10)

[  279.898897][  T152] usb 5-1: USB disconnect, device number 35
[  279.939744][ T3609] usb 3-1: new high-speed USB device number 29 using dummy_hcd
19:14:39 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0))
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = io_uring_setup(0x5c20, &(0x7f0000000140))
recvmmsg(0xffffffffffffffff, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, r1, 0x0)

19:14:39 executing program 1:
r0 = epoll_create(0x4)
openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = dup(0xffffffffffffffff)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040))

19:14:39 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=@newlink={0x28, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r2, 0x20024}, [@IFLA_GSO_MAX_SEGS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0)

19:14:39 executing program 0:
ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000180)=0x55)
read$dsp(0xffffffffffffffff, &(0x7f00000001c0)=""/4096, 0x1000)

19:14:39 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, 0x0)

19:14:39 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0)
mkdir(&(0x7f00000002c0)='./bus\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})
mkdir(&(0x7f0000000200)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0)
mount(&(0x7f0000000040)=@filename='./bus/file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x3000, 0x0)

19:14:39 executing program 1:
r0 = socket(0x0, 0x802, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10)

19:14:40 executing program 1:
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000000)={[{@huge_within_size}]})
chdir(&(0x7f0000000140)='./file0\x00')
ftruncate(0xffffffffffffffff, 0x8208200)
r0 = open(&(0x7f0000000780)='./bus\x00', 0x14117e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x604100, 0x7ffffe, 0x4002011, r0, 0x0)

[  280.328682][ T3609] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  280.344344][ T3609] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  280.355681][ T3609] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
19:14:40 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0))
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = io_uring_setup(0x5c20, &(0x7f0000000140))
recvmmsg(0xffffffffffffffff, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r0, r1, 0x0)

[  280.392264][ T3609] usb 3-1: config 0 descriptor??
19:14:40 executing program 4:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000940)=ANY=[@ANYBLOB="d712f58aa5cac4b5f2b67c01000080000000002e7797dc18224cc5263751747b532e2ea2f9c976b6f34115342897db3fb53114e2173ef84a0136b8b48e9a17c3ec13"], 0xc0}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x121301, 0x0)
write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100))
r1 = syz_open_pts(r0, 0x82101)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0xd)
r2 = dup3(r1, r0, 0x0)
writev(r2, &(0x7f0000001680)=[{&(0x7f0000001280)='7', 0x1}], 0x1)

19:14:40 executing program 1:
r0 = epoll_create(0x4)
openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = dup(0xffffffffffffffff)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040))

19:14:40 executing program 3:
r0 = openat$audio1(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x55)
read$dsp(r0, &(0x7f00000001c0)=""/4096, 0x1000)

19:14:40 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, 0x0)

19:14:40 executing program 1:
r0 = socket(0x0, 0x802, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10)

19:14:40 executing program 3:
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x55)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000))
read$dsp(r0, &(0x7f00000001c0)=""/4096, 0x1000)
read$dsp(r0, &(0x7f0000000080)=""/16, 0x10)

19:14:40 executing program 1:
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009b23fd406d04c1088dee000000010902240001000000000904000000ff010000072401000000000b24020106eecb7762bf92"], 0x0)

[  280.889988][ T3609] keytouch 0003:0926:3333.000A: fixing up Keytouch IEC report descriptor
[  280.918603][ T3609] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.000A/input/input32
19:14:40 executing program 0:
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000000)={[{@huge_within_size}]})
chdir(&(0x7f0000000140)='./file0\x00')
ftruncate(0xffffffffffffffff, 0x8208200)
r0 = open(&(0x7f0000000780)='./bus\x00', 0x14117e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x604100, 0x7ffffe, 0x4002011, r0, 0x0)

[  281.031860][ T3609] keytouch 0003:0926:3333.000A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0
19:14:40 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = io_uring_setup(0x5c20, &(0x7f0000000140))
recvmmsg(r0, 0x0, 0x0, 0x0, 0x0)
dup3(r1, r2, 0x0)

[  281.108912][  T152] usb 2-1: new high-speed USB device number 27 using dummy_hcd
19:14:40 executing program 0:
r0 = openat$audio1(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x55)
read$dsp(r0, &(0x7f00000001c0)=""/4096, 0x1000)

19:14:40 executing program 0:
r0 = epoll_create(0x4)
openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = dup(0xffffffffffffffff)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040))

19:14:41 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000000c0)={0x0, 0x0, 0x1})

[  281.315169][ T7968] usb 3-1: USB disconnect, device number 29
19:14:41 executing program 3:
r0 = socket(0x0, 0x802, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10)

19:14:41 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0)
mkdir(&(0x7f00000002c0)='./bus\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0)
mount(&(0x7f0000000040)=@filename='./bus/file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x3000, 0x0)

19:14:41 executing program 0:
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000000)={[{@huge_within_size}]})
chdir(&(0x7f0000000140)='./file0\x00')
ftruncate(0xffffffffffffffff, 0x8208200)
r0 = open(&(0x7f0000000780)='./bus\x00', 0x14117e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x604100, 0x7ffffe, 0x4002011, r0, 0x0)

[  281.478775][  T152] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d
[  281.508926][  T152] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  281.530076][  T152] usb 2-1: config 0 descriptor??
19:14:41 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = io_uring_setup(0x5c20, &(0x7f0000000140))
recvmmsg(r0, 0x0, 0x0, 0x0, 0x0)
dup3(r1, r2, 0x0)

[  281.607945][  T152] usb 2-1: Found UVC 0.00 device <unnamed> (046d:08c1)
[  281.624958][  T152] usb 2-1: No valid video chain found.
19:14:41 executing program 3:
r0 = openat$audio1(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x55)
read$dsp(r0, &(0x7f00000001c0)=""/4096, 0x1000)

19:14:41 executing program 2:
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x55)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000))
read$dsp(r0, &(0x7f00000001c0)=""/4096, 0x1000)
read$dsp(r0, &(0x7f0000000080)=""/16, 0x10)

19:14:41 executing program 0:
epoll_create(0x4)
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = dup(r0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000040))

[  281.812798][ T7968] usb 2-1: USB disconnect, device number 27
19:14:41 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x170, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_TX_RATES={0x14c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x36, 0x2, [{0x3}, {}, {}, {}, {}, {}, {}, {}, {0x4, 0x9}, {0x0, 0x5}, {0x3, 0x4}, {}, {}, {0x0, 0x7}, {0x1, 0x1}, {0x5, 0x8}, {0x2, 0xa}, {0x3, 0x1}, {0x6, 0x2}, {0x5}, {0x6, 0x9}, {0x0, 0x4}, {0x4, 0x1}, {0x6, 0x1e}, {0x0, 0x1}, {0x2, 0x5}, {0x6, 0x7}, {0x3, 0x9}, {0x5, 0x6}, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0x8}, {0x3}, {0x0, 0x5}, {0x4, 0x6}, {0x4, 0x7}, {0x6, 0x1}, {0x6, 0x4}, {0x2, 0x3}, {0x4}, {0x0, 0x5}, {0x0, 0x1}, {0x5, 0xa}, {0x1}, {0x5, 0x6}, {0x5, 0x6}, {0x0, 0x5}, {0x5, 0x2}, {0x3, 0x6}, {0x4, 0x2}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x30, 0x6, 0x36, 0x1, 0x4, 0x16, 0x48, 0x24, 0x60, 0x9, 0x47, 0x16, 0x18, 0xb, 0xb, 0x16, 0x9, 0x1, 0x18, 0x16, 0xc, 0x24, 0x36, 0x18, 0x0, 0x30, 0xc, 0x3, 0x2]}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1c7b, 0x6a90, 0x6, 0x1, 0x4, 0x6, 0xffff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1f, 0x0, 0x63, 0x3, 0x0, 0x5, 0xa54f, 0x8001]}}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x15, 0x2, [{0x3, 0x6}, {0x7, 0x10}, {0x1, 0x4}, {0x4}, {0x0, 0x6}, {0x1, 0xa}, {0x2}, {}, {0x5, 0x5}, {0x0, 0x9}, {0x7, 0x9}, {0x3, 0x1}, {0x0, 0xa}, {0x1, 0x3}, {}, {}, {0x1, 0x6}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x6, 0x3f, 0x6, 0x3ff, 0x2, 0x5]}}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x14, 0x2, [{0x3}, {0x0, 0x3}, {0x7, 0x8}, {0x6, 0x2}, {0x0, 0x6}, {0x5}, {0x1, 0x1}, {0x0, 0x4}, {}, {0x5}, {}, {0x1}, {}, {}, {0x6, 0x2}, {}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x0, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0x4, 0x4, 0x0, 0x3, 0x7, 0x1000]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x4}]}, @chandef_params]}, 0x170}}, 0x0)

19:14:41 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000000c0)={0x0, 0x0, 0x1})

19:14:41 executing program 3:
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000000)={[{@huge_within_size}]})
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
ftruncate(r0, 0x8208200)
r1 = open(&(0x7f0000000780)='./bus\x00', 0x14117e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x604100, 0x7ffffe, 0x4002011, r1, 0x0)

19:14:41 executing program 0:
r0 = socket(0xa, 0x0, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10)

19:14:41 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = io_uring_setup(0x5c20, &(0x7f0000000140))
recvmmsg(r0, 0x0, 0x0, 0x0, 0x0)
dup3(r1, r2, 0x0)

19:14:42 executing program 0:
epoll_create(0x4)
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = dup(r0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000040))

19:14:42 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15)
dup(0xffffffffffffffff)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340)=ANY=[@ANYRES16=0x0, @ANYRES64=0x0, @ANYRES16=0x0, @ANYRES8, @ANYRES64=0x0, @ANYRES32], 0x1, 0x775, &(0x7f0000001180)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000180)='./bus\x00', r0, &(0x7f0000000240)='./bus\x00')
openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
epoll_create1(0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)

19:14:42 executing program 1:
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000180)=0x55)
read$dsp(r0, &(0x7f00000001c0)=""/4096, 0x1000)

19:14:42 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000000c0)={0x0, 0x0, 0x1})

19:14:42 executing program 0:
open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0)
mount(&(0x7f0000000000)=ANY=[@ANYBLOB="5b3a3a5d3a33cb04ed4eb4051e709d9904b05d3a8a586dcfe65943dada303a"], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0)

19:14:42 executing program 2:
r0 = socket(0xa, 0x0, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10)

[  282.585426][ T9468] loop4: detected capacity change from 0 to 2048
19:14:42 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = io_uring_setup(0x5c20, &(0x7f0000000140))
recvmmsg(r0, &(0x7f0000001d80), 0x0, 0x0, 0x0)
dup3(r1, r2, 0x0)

[  282.649352][ T9468] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  282.684216][ T9478] libceph: Failed to parse monitor IPs: -22
19:14:42 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0)
mkdir(&(0x7f00000002c0)='./bus\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0)
mount(&(0x7f0000000040)=@filename='./bus/file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x3000, 0x0)

[  282.898287][ T3564] EXT4-fs (loop4): unmounting filesystem.
19:14:42 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x200000)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000100"})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCXONC(r1, 0x540a, 0x0)

19:14:42 executing program 0:
epoll_create(0x4)
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = dup(r0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000040))

19:14:42 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000000c0)={0x1})

19:14:42 executing program 1:
fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7)
fsetxattr$security_capability(r0, &(0x7f0000000140), &(0x7f0000000080)=@v3={0x3000000, [], 0xee00}, 0x18, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=@random={'osx.', '\x86et_0rio.prioidx\x00X\xaa\xdd\xc5'}, 0x0, 0x0)

19:14:42 executing program 0:
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab09, 0x0)

19:14:42 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000002c0)={@val, @void, @eth={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x15, 0x4, 0x0, 0x0, 0x9c, 0x0, 0x6000, 0x0, 0x2f, 0x0, @empty, @multicast1, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x2, [0x0, 0x0, 0x6, 0x0]}, @generic={0x0, 0xd, "e52867cef1d83d7bffe6aa"}, @timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x0, [{}, {@remote}, {@remote}]}]}}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "027c030f0bdcd5b403015d1b00", "23d57cd5a1f5787d315f4b9ae0b25f0000000000000000000000945e00"}}}}}}}, 0xae)

19:14:42 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = io_uring_setup(0x5c20, &(0x7f0000000140))
recvmmsg(r0, &(0x7f0000001d80), 0x0, 0x0, 0x0)
dup3(r1, r2, 0x0)

19:14:43 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000023000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000080)="0f22843e0f01c32e660f38802cf2a5baf80c66b8f3f6428b66efbafc0cb00eeeb8de008ec00f01720066b9120a00000f32676736660f75110f01d1", 0x3b}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

19:14:43 executing program 0:
r0 = socket(0xa, 0x0, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10)

19:14:43 executing program 2:
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000180)=0x55)
read$dsp(r0, &(0x7f00000001c0)=""/4096, 0x1000)

19:14:43 executing program 1:
r0 = epoll_create(0x4)
r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
dup(r1)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000040))

19:14:43 executing program 0:
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$yama_ptrace_scope(r1, &(0x7f0000000040)='2\x00', 0x2)
vmsplice(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="1c19c73b5123d59cbdba1680ae4c", 0xe}], 0x1, 0x0)
r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$FUSE_NOTIFY_DELETE(r1, 0x0, 0x2c)
splice(r0, 0x0, r2, 0x0, 0x10, 0x0)

19:14:43 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000000c0)={0x1})

19:14:43 executing program 1:
fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7)
fsetxattr$security_capability(r0, &(0x7f0000000140), &(0x7f0000000080)=@v3={0x3000000, [], 0xee00}, 0x18, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=@random={'osx.', '\x86et_0rio.prioidx\x00X\xaa\xdd\xc5'}, 0x0, 0x0)

19:14:43 executing program 4:
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x10, &(0x7f00000002c0)={[{@uni_xlate}, {@shortname_lower}, {@utf8no}, {@uni_xlateno}, {}, {@utf8}, {@fat=@dmask={'dmask', 0x3d, 0x5}}, {@shortname_mixed}, {@rodir}, {@shortname_mixed}, {@rodir}]}, 0x1, 0x267, &(0x7f0000000740)="$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")

19:14:43 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = io_uring_setup(0x5c20, &(0x7f0000000140))
recvmmsg(r0, &(0x7f0000001d80), 0x0, 0x0, 0x0)
dup3(r1, r2, 0x0)

19:14:43 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000023000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000080)="0f22843e0f01c32e660f38802cf2a5baf80c66b8f3f6428b66efbafc0cb00eeeb8de008ec00f01720066b9120a00000f32676736660f75110f01d1", 0x3b}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  284.062795][ T9519] loop4: detected capacity change from 0 to 256
19:14:43 executing program 4:
r0 = socket(0xa, 0x802, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10)

19:14:43 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000000c0)={0x1, 0x2, 0x1})

19:14:43 executing program 2:
r0 = epoll_create(0x4)
r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
dup(r1)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000040))

19:14:44 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0)
mkdir(&(0x7f00000002c0)='./bus\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0)
mount(&(0x7f0000000040)=@filename='./bus/file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x3000, 0x0)

19:14:44 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff})
socket$nl_route(0x10, 0x3, 0x0)
r1 = io_uring_setup(0x5c20, &(0x7f0000000140))
recvmmsg(r0, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(0xffffffffffffffff, r1, 0x0)

19:14:44 executing program 1:
fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7)
fsetxattr$security_capability(r0, &(0x7f0000000140), &(0x7f0000000080)=@v3={0x3000000, [], 0xee00}, 0x18, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=@random={'osx.', '\x86et_0rio.prioidx\x00X\xaa\xdd\xc5'}, 0x0, 0x0)

19:14:44 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000000c0)={0x1})

19:14:44 executing program 0:
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff)
ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff)
r1 = syz_open_dev$ndb(0x0, 0x0, 0x0)
ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x0)
ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03)
ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0)

[  285.065315][   T27] audit: type=1800 audit(1711653284.740:30): pid=9454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=1957 res=0 errno=0
19:14:44 executing program 2:
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000180)=0x55)
read$dsp(r0, &(0x7f00000001c0)=""/4096, 0x1000)

19:14:44 executing program 0:
r0 = socket(0xa, 0x802, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10)

19:14:44 executing program 1:
r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0)
close(r0)
r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r2=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080), 0x2, r2})

19:14:44 executing program 4:
r0 = epoll_create(0x4)
r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
dup(r1)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000040))

19:14:45 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000023000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000080)="0f22843e0f01c32e660f38802cf2a5baf80c66b8f3f6428b66efbafc0cb00eeeb8de008ec00f01720066b9120a00000f32676736660f75110f01d1", 0x3b}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

19:14:45 executing program 0:
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000000)={[{@huge_within_size}]})
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
ftruncate(r0, 0x8208200)
r1 = open(&(0x7f0000000780)='./bus\x00', 0x14117e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x604100, 0x7ffffe, 0x4002011, r1, 0x0)

19:14:45 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1)
ioctl$TCSETS(r0, 0x89f0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "bb5dee4cbd56ae228db4bc6abe016c1400"})

19:14:45 executing program 4:
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff)
ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff)
r1 = syz_open_dev$ndb(0x0, 0x0, 0x0)
ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x0)
ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03)
ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0)

19:14:45 executing program 2:
fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7)
fsetxattr$security_capability(r0, &(0x7f0000000140), &(0x7f0000000080)=@v3={0x3000000, [], 0xee00}, 0x18, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=@random={'osx.', '\x86et_0rio.prioidx\x00X\xaa\xdd\xc5'}, 0x0, 0x0)

19:14:45 executing program 4:
syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0)
mkdir(&(0x7f00000002c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000200)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0)
mount(&(0x7f0000000040)=@filename='./bus/file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x3000, 0x0)

19:14:45 executing program 2:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="180000004800110500000000000000000a"], 0x18}}, 0x0)

19:14:45 executing program 1:
r0 = socket(0xa, 0x802, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10)

19:14:45 executing program 4:
r0 = epoll_create(0x4)
r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = dup(r1)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, 0x0)

19:14:45 executing program 1:
syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000b80)='./bus\x00', 0x10802, &(0x7f0000000280)=ANY=[], 0x1, 0x252, &(0x7f0000000780)="$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")
r0 = getpid()
sched_setscheduler(r0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000280))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000200), 0xf000)

19:14:46 executing program 4:
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, 0x0)
read$dsp(r0, &(0x7f00000001c0)=""/4096, 0x1000)

19:14:46 executing program 2:
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff)
ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff)
r1 = syz_open_dev$ndb(0x0, 0x0, 0x0)
ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x0)
ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03)
ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0)

[  286.403645][ T9577] loop1: detected capacity change from 0 to 128
19:14:46 executing program 2:
fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7)
fsetxattr$security_capability(r0, &(0x7f0000000140), &(0x7f0000000080)=@v3={0x3000000, [], 0xee00}, 0x18, 0x0)
getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=@random={'osx.', '\x86et_0rio.prioidx\x00X\xaa\xdd\xc5'}, 0x0, 0x0)

19:14:46 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000023000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000080)="0f22843e0f01c32e660f38802cf2a5baf80c66b8f3f6428b66efbafc0cb00eeeb8de008ec00f01720066b9120a00000f32676736660f75110f01d1", 0x3b}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

19:14:46 executing program 2:
syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0)
mkdir(&(0x7f00000002c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000200)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0)
mount(&(0x7f0000000040)=@filename='./bus/file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x3000, 0x0)

19:14:46 executing program 2:
r0 = socket(0xa, 0x802, 0x0)
bind$inet6(r0, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10)

19:14:46 executing program 2:
r0 = epoll_create(0x4)
r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = dup(r1)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, 0x0)

19:14:46 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000003c0))

19:14:46 executing program 4:
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff)
ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff)
r1 = syz_open_dev$ndb(0x0, 0x0, 0x0)
ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x0)
ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03)
ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0)

19:14:46 executing program 1:
syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000b80)='./bus\x00', 0x10802, &(0x7f0000000280)=ANY=[], 0x1, 0x252, &(0x7f0000000780)="$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")
r0 = getpid()
sched_setscheduler(r0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000280))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000200), 0xf000)

19:14:47 executing program 4:
fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7)
fsetxattr$security_capability(r0, &(0x7f0000000140), &(0x7f0000000080)=@v3={0x3000000, [], 0xee00}, 0x18, 0x0)
getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=@random={'osx.', '\x86et_0rio.prioidx\x00X\xaa\xdd\xc5'}, 0x0, 0x0)

[  287.379968][ T9610] loop1: detected capacity change from 0 to 128
19:14:47 executing program 2:
syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0)
mkdir(&(0x7f00000002c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000200)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0)
mount(&(0x7f0000000040)=@filename='./bus/file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x3000, 0x0)

19:14:47 executing program 3:
r0 = socket(0xa, 0x802, 0x0)
bind$inet6(r0, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10)

19:14:47 executing program 4:
r0 = epoll_create(0x4)
r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = dup(r1)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, 0x0)

19:14:47 executing program 1:
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, 0x0)
read$dsp(r0, &(0x7f00000001c0)=""/4096, 0x1000)

19:14:47 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000023000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000080)="0f22843e0f01c32e660f38802cf2a5baf80c66b8f3f6428b66efbafc0cb00eeeb8de008ec00f01720066b9120a00000f32676736660f75110f01d1", 0x3b}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

19:14:47 executing program 3:
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff)
ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff)

19:14:47 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000003c0))

19:14:47 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff})
socket$nl_route(0x10, 0x3, 0x0)
r1 = io_uring_setup(0x5c20, &(0x7f0000000140))
recvmmsg(r0, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(0xffffffffffffffff, r1, 0x0)

19:14:47 executing program 4:
fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7)
fsetxattr$security_capability(r0, &(0x7f0000000140), &(0x7f0000000080)=@v3={0x3000000, [], 0xee00}, 0x18, 0x0)
getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=@random={'osx.', '\x86et_0rio.prioidx\x00X\xaa\xdd\xc5'}, 0x0, 0x0)

19:14:48 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000280)={[{@usrquota}, {@resgid}, {@journal_path={'journal_path', 0x3d, './file0/../file0'}}, {@commit={'commit', 0x3d, 0x5}}, {@auto_da_alloc}]}, 0x8, 0x5fd, &(0x7f00000004c0)="$eJzs3c9vFGUfAPDvTH/Svu/bQt6oeJAmxkCitLSAIcZEuBOCP26eKi0EKZTQGi2SWBK8mBgvHkw8eRD/CyXx6sGrBy+eDAkxhoMYImtmO1Om293SX7tbup9PMnSeme48z5R++5199nlmAuhYI9k/acT+iLiaRAyV9nVHvnNk6fvu/3njXLYkUam8/UcSNz5JFsvHSvKvg/mL/xmK5Oc0Yl/X6nrnFq5fmpyZmb6Wl8fmL18dm1u4fvji5ckL0xemr0y8OnHi+LHjJ8aPbOn8ylWfvvX+h0OfnXn3268fJuPf/XomiZPxKP+G7LxqX9u3pZqzn9lIVJY8KG/Pfq4ntnjsneKvoeL35LGkdgM71vn897EnIp6Noegq/W8OxadvtrVxQFNVkihyFNBxkk3Ff//2NwRoseI6oHhvX+998Gppk69KgFa4d2qpA2Ap9nsiooj/7qW+weiv9g0M3E9W9PMkEbG1nrklWR0//XjmVrZEg344oDkWbxa93LX5P6nG5nD0V0sD99MV8Z+Wlmz7W5usf6SmLP6hdRZvRsRzef7vjQ3F/0gp/t/bZP3iHwAAAAAAALbPnVMR8Uq98X/p8vif3jrjfwYj4uQ21P/kz//Su/lKsg3VASX3TkW8Xnf87/IY3+GuvPTf6niAnuT8xZnpIxHxv4g4FD19WXm85rjlEcKHP9/3VaP6y+P/siWrvxgLmB/pbnfNRNypyfnJrZ43EHHvZsTz1fG/B/ItK8f/ZPk/qZP/s/i+us469r10+2yjfU+Of6BZKt9EHKyb/x9fbidr359jrHo9MFZcFaz2wsdffN+ofvEP7ZPl/4G1478vKd+vZ25jx++NiKML3ZVG+zd7/d+bvNNVHD/z0eT8/LXxiN7k9OrtExtrM+xWRTwU8ZLF/6EX1+7/W77+L8XhnohYXGedzzwa/K3RPvkf2ieL/6m18//wyvy/8ZWJ28M/NKr/7Lry/7FqTj+Ub9H/B2Wr78ex3gBtS3MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CmXRsR/IklHl9fTdHQ0YjAi/h8D6czs3PzL52c/uDKV7as+/z8tnvQ7tFROiuf/D5fKEzXloxGxNyK+7NpTLY+em52ZavfJAwAAAAAAAAAAAAAAAAAAwA4xWJ3zX+mrnf+f+b2r3a0Dmq47/yreofN0b/qVlb5tbQjQcpuPf+Bpt/7472lqO4DWaxz/Dx5WqlraHKCFXP9D59pk/Pu4AHYB+R861Tr79Pqb3Q6gHeR/AAAAAADYVfYeuPNLEhGLr+2pLpnefJ/B/rC7pe1uANA2xvBC5+qebXcLgHbxHh9Iltf+rjvZv/Ho/6Q5DQIAAAAAAAAAAAAAVjm43/x/6FRrz/83th92szXm/9cLfrcLgF2k8aM/5H7Y7bzHB56U7c3/BwAAAAAAAAAAAIAdoP/6pcmZmelrcwtP38obO6MZG1tZnNwRzdjWlUfNOXJPROyME2z1SnELjjY2o81/lwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgGX/BgAA//+dGid+")

19:14:48 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})
mkdir(&(0x7f0000000200)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0)
mount(&(0x7f0000000040)=@filename='./bus/file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x3000, 0x0)

19:14:48 executing program 1:
r0 = socket(0xa, 0x802, 0x0)
bind$inet6(r0, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10)

[  288.404764][   T27] audit: type=1800 audit(1711653288.080:31): pid=9549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=1963 res=0 errno=0
19:14:48 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000015c0)={&(0x7f0000000140)='netlink_extack\x00', r0}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={0x0}, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00'})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r0, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x0, 0x6e, &(0x7f0000000280)=[{}, {}], 0x10, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x32, 0x8, 0x8, &(0x7f0000000340)}}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffff0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00'}, 0x90)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r5=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r4}]}]}, 0x2c}}, 0x0)

[  288.455569][ T9645] loop4: detected capacity change from 0 to 1024
[  288.490099][ T9645] journal_path: Lookup failure for './file0/../file0'
19:14:48 executing program 1:
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff)

[  288.514679][ T9645] EXT4-fs: error: could not find journal device path
[  288.574866][ T3701] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
19:14:48 executing program 4:
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0)
ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0xffffffffffffffff)
ioctl$NBD_CLEAR_SOCK(r2, 0xab08)
ioctl$NBD_DO_IT(r0, 0xab03)
ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0xa0)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)

19:14:48 executing program 1:
fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=@random={'osx.', '\x86et_0rio.prioidx\x00X\xaa\xdd\xc5'}, 0x0, 0x0)

[  288.815296][ T9656] block nbd4: NBD_DISCONNECT
19:14:48 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

19:14:48 executing program 1:
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, 0x0)
read$dsp(r0, &(0x7f00000001c0)=""/4096, 0x1000)

19:14:48 executing program 3:
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000000)={[{@huge_within_size}]})
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
ftruncate(r0, 0x8208200)
r1 = open(&(0x7f0000000780)='./bus\x00', 0x14117e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x604100, 0x7ffffe, 0x4002011, r1, 0x0)

19:14:48 executing program 0:
r0 = socket(0xa, 0x802, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10)

[  289.138655][ T9658] nbd4: detected capacity change from 0 to 320
[  289.165517][ T9662] block nbd4: Disconnected due to user request.
[  289.191320][ T9662] block nbd4: shutting down sockets
19:14:48 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r2=>0x0}, &(0x7f0000000240)=0xc)
ioctl$TUNSETGROUP(r0, 0x400454ce, r2)

[  289.268728][ T9662] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  289.289042][ T9662] Buffer I/O error on dev nbd4, logical block 0, async page read
[  289.304032][   T52] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  289.314055][   T52] Buffer I/O error on dev nbd4, logical block 0, async page read
[  289.327700][  T120] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  289.337162][  T120] Buffer I/O error on dev nbd4, logical block 0, async page read
[  289.346422][  T120] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  289.356060][  T120] Buffer I/O error on dev nbd4, logical block 0, async page read
[  289.367251][  T120] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  289.379445][  T120] Buffer I/O error on dev nbd4, logical block 0, async page read
[  289.387756][   T52] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  289.397112][   T52] Buffer I/O error on dev nbd4, logical block 0, async page read
[  289.405823][   T52] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
19:14:49 executing program 2:
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff)

[  289.415607][   T52] Buffer I/O error on dev nbd4, logical block 0, async page read
[  289.425641][   T52] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  289.435209][   T52] Buffer I/O error on dev nbd4, logical block 0, async page read
[  289.443638][ T3701] ldm_validate_partition_table(): Disk read failed.
[  289.450783][   T52] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  289.460328][   T52] Buffer I/O error on dev nbd4, logical block 0, async page read
[  289.471330][   T52] Buffer I/O error on dev nbd4, logical block 0, async page read
[  289.480344][ T3701] Dev nbd4: unable to read RDB block 0
19:14:49 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff})
socket$nl_route(0x10, 0x3, 0x0)
r1 = io_uring_setup(0x5c20, &(0x7f0000000140))
recvmmsg(r0, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(0xffffffffffffffff, r1, 0x0)

19:14:49 executing program 4:
fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=@random={'osx.', '\x86et_0rio.prioidx\x00X\xaa\xdd\xc5'}, 0x0, 0x0)

[  289.520859][ T3701]  nbd4: unable to read partition table
[  289.546982][ T3701] ldm_validate_partition_table(): Disk read failed.
[  289.601547][ T3701] Dev nbd4: unable to read RDB block 0
19:14:49 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

19:14:49 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000000c0)={0x3, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x3}, {}, {}, {}, {}, {}, {0x40}, {}, {}, {}, {}, {}, {}, {0x0, 0x20}]}})

[  289.649515][ T3701]  nbd4: unable to read partition table
19:14:49 executing program 1:
r0 = socket(0xa, 0x802, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10)

19:14:49 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})
mkdir(&(0x7f0000000200)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0)
mount(&(0x7f0000000040)=@filename='./bus/file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x3000, 0x0)

19:14:49 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000690001000000000000000000000000000000000008000100020000e8543ef2a7f27fab2d7437fd924a3573407e14659a63de9cba5ed25dc9e58ab586824251534d842e05a170dfbf3b697948c74b9c64b572383441cda4059851831c69bbbd71cceed60a2165e6c3eaf1bca4c933fcb8a3b56257e5d8a3a078739e5d238d007635c4bee9ea876bbaa601c650a052f4cd446ac1fcbd0d3a381675d847836e4c13231c49e974d6c115e87e0268e9"], 0x20}}, 0x0)

19:14:49 executing program 4:
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0)
ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0xffffffffffffffff)
ioctl$NBD_CLEAR_SOCK(r2, 0xab08)
ioctl$NBD_DO_IT(r0, 0xab03)
ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0xa0)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)

19:14:49 executing program 2:
fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=@random={'osx.', '\x86et_0rio.prioidx\x00X\xaa\xdd\xc5'}, 0x0, 0x0)

19:14:49 executing program 2:
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff)

[  290.212824][ T9699] block nbd4: NBD_DISCONNECT
19:14:49 executing program 2:
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180))
read$dsp(r0, &(0x7f00000001c0)=""/4096, 0x1000)

[  290.302142][ T9705] nbd4: detected capacity change from 0 to 320
[  290.313838][ T9705] block nbd4: Disconnected due to user request.
[  290.325151][ T9705] block nbd4: shutting down sockets
[  290.326240][ T3701] ldm_validate_partition_table(): Disk read failed.
19:14:50 executing program 4:
r0 = socket(0xa, 0x802, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10)

[  290.369087][ T3701] Dev nbd4: unable to read RDB block 0
[  290.375597][ T3701]  nbd4: unable to read partition table
[  290.400537][ T3701] ldm_validate_partition_table(): Disk read failed.
[  290.428282][ T3701] Dev nbd4: unable to read RDB block 0
19:14:50 executing program 0:
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0)
ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0xffffffffffffffff)
ioctl$NBD_CLEAR_SOCK(r2, 0xab08)
ioctl$NBD_DO_IT(r0, 0xab03)
ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0xa0)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)

[  290.473882][ T3701]  nbd4: unable to read partition table
19:14:50 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  290.629598][ T9710] block nbd0: NBD_DISCONNECT
[  290.687520][ T9714] nbd0: detected capacity change from 0 to 320
[  290.696523][ T9714] block nbd0: Disconnected due to user request.
[  290.703963][ T9714] block nbd0: shutting down sockets
19:14:50 executing program 4:
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0)
ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0xffffffffffffffff)
ioctl$NBD_CLEAR_SOCK(r2, 0xab08)
ioctl$NBD_DO_IT(r0, 0xab03)
ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0xa0)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)

[  290.731791][ T3701] ldm_validate_partition_table(): Disk read failed.
[  290.758711][ T3701] Dev nbd0: unable to read RDB block 0
19:14:50 executing program 1:
fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
fsetxattr$security_capability(r0, &(0x7f0000000140), &(0x7f0000000080)=@v3={0x3000000, [], 0xee00}, 0x18, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=@random={'osx.', '\x86et_0rio.prioidx\x00X\xaa\xdd\xc5'}, 0x0, 0x0)

19:14:50 executing program 0:
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff)

[  290.779005][ T3701]  nbd0: unable to read partition table
[  290.880021][ T3701] ldm_validate_partition_table(): Disk read failed.
[  290.906068][ T3701] Dev nbd0: unable to read RDB block 0
19:14:50 executing program 1:
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0)
ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0xffffffffffffffff)
ioctl$NBD_CLEAR_SOCK(r2, 0xab08)
ioctl$NBD_DO_IT(r0, 0xab03)
ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0xa0)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)

19:14:50 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff})
r1 = socket$nl_route(0x10, 0x3, 0x0)
io_uring_setup(0x5c20, &(0x7f0000000140))
recvmmsg(r0, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)

19:14:50 executing program 2:
r0 = socket(0xa, 0x802, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
connect$inet(r0, 0x0, 0x0)

[  290.926606][ T3701]  nbd0: unable to read partition table
[  290.940962][ T9720] block nbd4: Device being setup by another task
[  290.959828][ T9716] block nbd4: NBD_DISCONNECT
19:14:50 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000023000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000080)="0f22843e0f01c32e660f38802cf2a5baf80c66b8f3f6428b66efbafc0cb00eeeb8de008ec00f01720066b9120a00000f32676736660f75110f01d1", 0x3b}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  291.086198][ T9720] nbd4: detected capacity change from 0 to 320
[  291.099927][ T9720] block nbd4: Disconnected due to user request.
[  291.107137][ T9720] block nbd4: shutting down sockets
[  291.134343][ T3701] ldm_validate_partition_table(): Disk read failed.
[  291.149403][ T9725] block nbd1: NBD_DISCONNECT
[  291.171169][ T3701] Dev nbd4: unable to read RDB block 0
19:14:50 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})
mkdir(&(0x7f0000000200)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0)
mount(&(0x7f0000000040)=@filename='./bus/file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x3000, 0x0)

[  291.199016][ T3701]  nbd4: unable to read partition table
[  291.243599][ T9731] nbd1: detected capacity change from 0 to 320
[  291.255058][ T3701] ldm_validate_partition_table(): Disk read failed.
[  291.266884][ T9731] block nbd1: Disconnected due to user request.
[  291.274690][ T3701] Dev nbd4: unable to read RDB block 0
[  291.299062][ T9731] block nbd1: shutting down sockets
[  291.306175][ T4352] ldm_validate_partition_table(): Disk read failed.
[  291.331197][ T4352] Dev nbd1: unable to read RDB block 0
[  291.337469][ T3701]  nbd4: unable to read partition table
19:14:51 executing program 2:
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0)
ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0xffffffffffffffff)
ioctl$NBD_CLEAR_SOCK(r2, 0xab08)
ioctl$NBD_DO_IT(r0, 0xab03)
ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0xa0)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)

19:14:51 executing program 1:
fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
fsetxattr$security_capability(r0, &(0x7f0000000140), &(0x7f0000000080)=@v3={0x3000000, [], 0xee00}, 0x18, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=@random={'osx.', '\x86et_0rio.prioidx\x00X\xaa\xdd\xc5'}, 0x0, 0x0)

[  291.355359][ T4352]  nbd1: unable to read partition table
[  291.394920][ T4352] ldm_validate_partition_table(): Disk read failed.
[  291.444906][ T4352] Dev nbd1: unable to read RDB block 0
[  291.486552][ T4352]  nbd1: unable to read partition table
19:14:51 executing program 1:
r0 = syz_open_dev$ndb(0x0, 0x0, 0x0)
ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff)

19:14:51 executing program 1:
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180))
read$dsp(r0, &(0x7f00000001c0)=""/4096, 0x1000)

[  291.629231][ T9739] block nbd2: NBD_DISCONNECT
[  291.744324][ T9745] nbd2: detected capacity change from 0 to 320
[  291.756839][ T9746] block nbd2: Disconnected due to user request.
[  291.773654][ T9746] block nbd2: shutting down sockets
[  291.803698][ T3701] ldm_validate_partition_table(): Disk read failed.
[  291.813355][ T3701] Dev nbd2: unable to read RDB block 0
[  291.825174][ T3701]  nbd2: unable to read partition table
19:14:51 executing program 2:
r0 = socket(0xa, 0x802, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
connect$inet(r0, 0x0, 0x0)

[  291.849847][ T3701] ldm_validate_partition_table(): Disk read failed.
[  291.866563][ T3701] Dev nbd2: unable to read RDB block 0
[  291.891316][ T3701]  nbd2: unable to read partition table
19:14:51 executing program 0:
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0)
ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0xffffffffffffffff)
ioctl$NBD_CLEAR_SOCK(r2, 0xab08)
ioctl$NBD_DO_IT(r0, 0xab03)
ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0xa0)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)

[  292.129113][ T9750] block nbd0: NBD_DISCONNECT
[  292.185538][ T9751] nbd0: detected capacity change from 0 to 320
[  292.210354][ T9751] block nbd0: Disconnected due to user request.
19:14:51 executing program 3:
fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
fsetxattr$security_capability(r0, &(0x7f0000000140), &(0x7f0000000080)=@v3={0x3000000, [], 0xee00}, 0x18, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=@random={'osx.', '\x86et_0rio.prioidx\x00X\xaa\xdd\xc5'}, 0x0, 0x0)

19:14:51 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000023000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000080)="0f22843e0f01c32e660f38802cf2a5baf80c66b8f3f6428b66efbafc0cb00eeeb8de008ec00f01720066b9120a00000f32676736660f75110f01d1", 0x3b}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

19:14:51 executing program 4:
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0)
ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0xffffffffffffffff)
ioctl$NBD_CLEAR_SOCK(r2, 0xab08)
ioctl$NBD_DO_IT(r0, 0xab03)
ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0xa0)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)

[  292.221551][   T27] audit: type=1800 audit(1711653291.900:32): pid=9674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=1945 res=0 errno=0
[  292.221983][ T9751] block nbd0: shutting down sockets
[  292.262030][ T3701] ldm_validate_partition_table(): Disk read failed.
19:14:52 executing program 1:
r0 = syz_open_dev$ndb(0x0, 0x0, 0x0)
ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff)

[  292.285817][ T3701] Dev nbd0: unable to read RDB block 0
[  292.292888][ T3701]  nbd0: unable to read partition table
[  292.330579][ T3701] ldm_validate_partition_table(): Disk read failed.
[  292.353089][ T3701] Dev nbd0: unable to read RDB block 0
[  292.359914][ T3701]  nbd0: unable to read partition table
19:14:52 executing program 0:
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0)
ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0xffffffffffffffff)
ioctl$NBD_CLEAR_SOCK(r2, 0xab08)
ioctl$NBD_DO_IT(r0, 0xab03)
ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0xa0)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)

[  292.419495][ T9755] block nbd4: NBD_DISCONNECT
19:14:52 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff})
r1 = socket$nl_route(0x10, 0x3, 0x0)
io_uring_setup(0x5c20, &(0x7f0000000140))
recvmmsg(r0, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)

19:14:52 executing program 2:
r0 = socket(0xa, 0x802, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
connect$inet(r0, 0x0, 0x0)

[  292.539870][ T9760] nbd4: detected capacity change from 0 to 320
[  292.559402][ T9763] block nbd4: Disconnected due to user request.
[  292.573092][ T3701] ldm_validate_partition_table(): Disk read failed.
[  292.582159][ T9762] block nbd0: NBD_DISCONNECT
19:14:52 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
mkdir(&(0x7f00000002c0)='./bus\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}})
mkdir(&(0x7f0000000200)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0)
mount(&(0x7f0000000040)=@filename='./bus/file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x3000, 0x0)

[  292.590636][ T3701] Dev nbd4: unable to read RDB block 0
[  292.599827][ T9763] block nbd4: shutting down sockets
[  292.607121][ T3701]  nbd4: unable to read partition table
[  292.627026][ T3701] ldm_validate_partition_table(): Disk read failed.
[  292.665309][ T9768] nbd0: detected capacity change from 0 to 320
[  292.689794][ T3701] Dev nbd4: unable to read RDB block 0
[  292.690444][ T9768] block nbd0: Disconnected due to user request.
[  292.707512][ T3701]  nbd4: unable to read partition table
19:14:52 executing program 4:
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
ftruncate(r0, 0x8208200)
r1 = open(&(0x7f0000000780)='./bus\x00', 0x14117e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x604100, 0x7ffffe, 0x4002011, r1, 0x0)

[  292.753050][ T9768] block nbd0: shutting down sockets
[  292.754173][ T4352] ldm_validate_partition_table(): Disk read failed.
19:14:52 executing program 2:
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180))
read$dsp(r0, &(0x7f00000001c0)=""/4096, 0x1000)

[  292.796407][ T4352] Dev nbd0: unable to read RDB block 0
[  292.807110][ T4352]  nbd0: unable to read partition table
19:14:52 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10)
fsopen(&(0x7f0000000080)='sysfs\x00', 0x0)

[  292.902862][ T4352] ldm_validate_partition_table(): Disk read failed.
[  292.919021][ T4352] Dev nbd0: unable to read RDB block 0
[  292.939947][ T4352]  nbd0: unable to read partition table
19:14:52 executing program 0:
r0 = syz_open_dev$ndb(0x0, 0x0, 0x0)
ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff)

19:14:52 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000023000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000080)="0f22843e0f01c32e660f38802cf2a5baf80c66b8f3f6428b66efbafc0cb00eeeb8de008ec00f01720066b9120a00000f32676736660f75110f01d1", 0x3b}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

19:14:53 executing program 3:
r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.log\x00', 0x242, 0x0)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000100)={@desc={0x1, 0x0, @desc2}, 0x21, 0x0, '\x00', @c})

19:14:53 executing program 0:
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0)
ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0xffffffffffffffff)
ioctl$NBD_CLEAR_SOCK(r2, 0xab08)

19:14:53 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
mkdir(&(0x7f00000002c0)='./bus\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}})
mkdir(&(0x7f0000000200)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0)
mount(&(0x7f0000000040)=@filename='./bus/file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x3000, 0x0)

19:14:53 executing program 3:
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0)
ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0xffffffffffffffff)
ioctl$NBD_CLEAR_SOCK(r2, 0xab08)
ioctl$NBD_DO_IT(r0, 0xab03)

19:14:53 executing program 1:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="a1ab000000000000000005000000080003000a00dd"], 0x1c}}, 0x0)

[  293.528549][ T9790] block nbd0: Device being setup by another task
[  293.538099][ T9789] block nbd0: NBD_DISCONNECT
[  293.567389][ T9787] block nbd0: Disconnected due to user request.
19:14:53 executing program 2:
syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff)

[  293.576588][ T9787] block nbd0: shutting down sockets
19:14:53 executing program 0:
fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfea7)
fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000080)=@v3={0x3000000, [], 0xee00}, 0x18, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=@random={'osx.', '\x86et_0rio.prioidx\x00X\xaa\xdd\xc5'}, 0x0, 0x0)

[  293.668927][ T9794] block nbd3: NBD_DISCONNECT
19:14:53 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000023000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000080)="0f22843e0f01c32e660f38802cf2a5baf80c66b8f3f6428b66efbafc0cb00eeeb8de008ec00f01720066b9120a00000f32676736660f75110f01d1", 0x3b}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

19:14:53 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff})
r1 = socket$nl_route(0x10, 0x3, 0x0)
io_uring_setup(0x5c20, &(0x7f0000000140))
recvmmsg(r0, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
dup3(r1, 0xffffffffffffffff, 0x0)

19:14:53 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = dup(r2)
ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000a80)=ANY=[@ANYBLOB="01"])
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x3b, 0x0, [{0xc0010140}]})

19:14:53 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
mkdir(&(0x7f00000002c0)='./bus\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}})
mkdir(&(0x7f0000000200)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0)
mount(&(0x7f0000000040)=@filename='./bus/file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x3000, 0x0)

19:14:53 executing program 0:
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x55)
read$dsp(0xffffffffffffffff, &(0x7f00000001c0)=""/4096, 0x1000)

19:14:53 executing program 2:
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0)
ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0xffffffffffffffff)
ioctl$NBD_CLEAR_SOCK(r2, 0xab08)

19:14:53 executing program 0:
syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff)

19:14:53 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000026001102"], 0x24}}, 0x0)
recvmmsg(r0, &(0x7f00000018c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

[  294.208588][ T9818] block nbd2: Device being setup by another task
[  294.255418][ T9817] block nbd2: NBD_DISCONNECT
[  294.261989][ T9816] block nbd2: Disconnected due to user request.
[  294.270827][ T9816] block nbd2: shutting down sockets
19:14:54 executing program 2:
fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfea7)
fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000080)=@v3={0x3000000, [], 0xee00}, 0x18, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=@random={'osx.', '\x86et_0rio.prioidx\x00X\xaa\xdd\xc5'}, 0x0, 0x0)

19:14:54 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000023000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000080)="0f22843e0f01c32e660f38802cf2a5baf80c66b8f3f6428b66efbafc0cb00eeeb8de008ec00f01720066b9120a00000f32676736660f75110f01d1", 0x3b}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

19:14:54 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = dup(r2)
ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000a80)=ANY=[@ANYBLOB="01"])
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x3b, 0x0, [{0xc0010140}]})

19:14:54 executing program 3:
r0 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0)
mkdir(&(0x7f00000002c0)='./bus\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}})
mkdir(&(0x7f0000000200)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0)
mount(&(0x7f0000000040)=@filename='./bus/file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x3000, 0x0)

[  294.400168][ T3581] block nbd3: Disconnected due to user request.
19:14:54 executing program 3:
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x55)
read$dsp(0xffffffffffffffff, &(0x7f00000001c0)=""/4096, 0x1000)

[  294.576348][ T9832] 9pnet_fd: Insufficient options for proto=fd
19:14:54 executing program 0:
syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff)

19:14:54 executing program 1:
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0)
ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0xffffffffffffffff)
ioctl$NBD_CLEAR_SOCK(r2, 0xab08)

19:14:54 executing program 2:
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$yama_ptrace_scope(r1, &(0x7f0000000040)='2\x00', 0x2)
vmsplice(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="1c19c73b5123d59cbdba1680ae4c", 0xe}], 0x1, 0x0)
r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
splice(r0, 0x0, r2, 0x0, 0x10, 0x3)

19:14:54 executing program 0:
fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfea7)
fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000080)=@v3={0x3000000, [], 0xee00}, 0x18, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=@random={'osx.', '\x86et_0rio.prioidx\x00X\xaa\xdd\xc5'}, 0x0, 0x0)

19:14:54 executing program 3:
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0)
ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0xffffffffffffffff)
ioctl$NBD_CLEAR_SOCK(r2, 0xab08)
ioctl$NBD_DO_IT(r0, 0xab03)

[  294.859559][ T9838] block nbd1: NBD_DISCONNECT
[  294.871292][ T9837] block nbd1: Disconnected due to user request.
19:14:54 executing program 2:
r0 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0)
mkdir(&(0x7f00000002c0)='./bus\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}})
mkdir(&(0x7f0000000200)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0)
mount(&(0x7f0000000040)=@filename='./bus/file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x3000, 0x0)

[  294.901915][ T9837] block nbd1: shutting down sockets
19:14:54 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000023000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000080)="0f22843e0f01c32e660f38802cf2a5baf80c66b8f3f6428b66efbafc0cb00eeeb8de008ec00f01720066b9120a00000f32676736660f75110f01d1", 0x3b}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

[  295.029999][ T9844] block nbd3: NBD_DISCONNECT
[  295.039043][ T9847] 9pnet_fd: Insufficient options for proto=fd
[  295.771716][ T3581] block nbd3: Disconnected due to user request.
19:14:55 executing program 4:
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$yama_ptrace_scope(r1, &(0x7f0000000040)='2\x00', 0x2)
vmsplice(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="1c19c73b5123d59cbdba1680ae4c", 0xe}], 0x1, 0x0)
r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
splice(r0, 0x0, r2, 0x0, 0x10, 0x3)

19:14:55 executing program 1:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
read$FUSE(r0, &(0x7f0000003880)={0x2020}, 0x2020)

19:14:55 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = dup(r2)
ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000a80)=ANY=[@ANYBLOB="01"])
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x3b, 0x0, [{0xc0010140}]})

19:14:55 executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000100060000000077f2ab26850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x45)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_delrule={0x1c, 0x21, 0x1}, 0x1c}}, 0x0)

19:14:55 executing program 3:
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x55)
read$dsp(0xffffffffffffffff, &(0x7f00000001c0)=""/4096, 0x1000)

[  295.862238][   T27] audit: type=1800 audit(1711653295.540:33): pid=9774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=1962 res=0 errno=0
19:14:55 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7)
fsetxattr$security_capability(r0, &(0x7f0000000140), &(0x7f0000000080)=@v3={0x3000000, [], 0xee00}, 0x18, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=@random={'osx.', '\x86et_0rio.prioidx\x00X\xaa\xdd\xc5'}, 0x0, 0x0)

19:14:55 executing program 1:
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r2, 0xab08)

19:14:55 executing program 3:
r0 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0)
mkdir(&(0x7f00000002c0)='./bus\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}})
mkdir(&(0x7f0000000200)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0)
mount(&(0x7f0000000040)=@filename='./bus/file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x3000, 0x0)

19:14:55 executing program 2:
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000023000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000080)="0f22843e0f01c32e660f38802cf2a5baf80c66b8f3f6428b66efbafc0cb00eeeb8de008ec00f01720066b9120a00000f32676736660f75110f01d1", 0x3b}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r0, 0xae80, 0x0)

19:14:55 executing program 3:
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0)
ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0xffffffffffffffff)
ioctl$NBD_CLEAR_SOCK(r2, 0xab08)
ioctl$NBD_DO_IT(r0, 0xab03)

[  296.121237][ T9864] 9pnet_fd: Insufficient options for proto=fd
19:14:55 executing program 0:
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
ftruncate(r0, 0x8208200)
r1 = open(&(0x7f0000000780)='./bus\x00', 0x14117e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x604100, 0x7ffffe, 0x4002011, r1, 0x0)

[  296.179256][ T9862] block nbd1: NBD_DISCONNECT
[  296.197022][ T9861] block nbd1: Disconnected due to user request.
19:14:55 executing program 2:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2)
close(r0)

[  296.228735][ T9861] block nbd1: shutting down sockets
19:14:55 executing program 1:
syz_mount_image$ntfs3(&(0x7f0000000080), &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f00000000c0)=ANY=[], 0x1, 0x1f43a, &(0x7f0000020740)="$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")
open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)

[  296.349445][ T9868] block nbd3: NBD_DISCONNECT
19:14:56 executing program 2:
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x55)
read$dsp(r0, 0x0, 0x0)

19:14:56 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = dup(r2)
ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000a80)=ANY=[@ANYBLOB="01"])
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x3b, 0x0, [{0xc0010140}]})

[  296.639221][ T9875] loop1: detected capacity change from 0 to 4096
[  296.668249][ T9875] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512)
[  296.774581][ T9875] ntfs3: loop1: Mark volume as dirty due to NTFS errors
19:14:56 executing program 2:
r0 = syz_open_procfs(0x0, 0x0)
r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0)
mkdir(&(0x7f00000002c0)='./bus\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})
mkdir(&(0x7f0000000200)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0)
mount(&(0x7f0000000040)=@filename='./bus/file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x3000, 0x0)

19:14:56 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7)
fsetxattr$security_capability(r0, &(0x7f0000000140), &(0x7f0000000080)=@v3={0x3000000, [], 0xee00}, 0x18, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=@random={'osx.', '\x86et_0rio.prioidx\x00X\xaa\xdd\xc5'}, 0x0, 0x0)

19:14:56 executing program 2:
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000023000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000080)="0f22843e0f01c32e660f38802cf2a5baf80c66b8f3f6428b66efbafc0cb00eeeb8de008ec00f01720066b9120a00000f32676736660f75110f01d1", 0x3b}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r0, 0xae80, 0x0)

[  296.927733][ T4699] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22.
[  296.965605][ T9884] 9pnet_fd: Insufficient options for proto=fd
19:14:56 executing program 3:
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab08)

19:14:56 executing program 2:
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x1ff)

[  297.088803][ T3581] block nbd3: Disconnected due to user request.
19:14:56 executing program 1:
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x55)
read$dsp(r0, 0x0, 0x0)

19:14:56 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_names\x00')
preadv(r0, &(0x7f0000001340)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0xfffffffd, 0x0)

19:14:57 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="290000002000190f00003fffffffda060a00008bfee80001dd0048040d000600fe7f00000005000500", 0x29}], 0x1)

[  297.355596][ T9891] block nbd3: shutting down sockets
19:14:57 executing program 3:
r0 = syz_open_procfs(0x0, 0x0)
r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0)
mkdir(&(0x7f00000002c0)='./bus\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})
mkdir(&(0x7f0000000200)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0)
mount(&(0x7f0000000040)=@filename='./bus/file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x3000, 0x0)

19:14:57 executing program 1:
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0)
ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0xffffffffffffffff)
ioctl$NBD_CLEAR_SOCK(r2, 0xab08)
ioctl$NBD_DO_IT(r0, 0xab03)
ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0xa0)

19:14:57 executing program 4:
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000023000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000080)="0f22843e0f01c32e660f38802cf2a5baf80c66b8f3f6428b66efbafc0cb00eeeb8de008ec00f01720066b9120a00000f32676736660f75110f01d1", 0x3b}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r0, 0xae80, 0x0)

19:14:57 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7)
fsetxattr$security_capability(r0, &(0x7f0000000140), &(0x7f0000000080)=@v3={0x3000000, [], 0xee00}, 0x18, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=@random={'osx.', '\x86et_0rio.prioidx\x00X\xaa\xdd\xc5'}, 0x0, 0x0)

[  297.499619][ T9902] 9pnet_fd: Insufficient options for proto=fd
[  297.522682][ T9904] netlink: 'syz-executor.2': attribute type 6 has an invalid length.
19:14:57 executing program 3:
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0xa08800, &(0x7f0000000140)=ANY=[], 0x1, 0x671, &(0x7f0000000a40)="$eJzs3c1rHOcdB/DvrFay5IKjJHbilkBFDGmpqS1ZKK16idtD0SGU4B5CoRdhy7HwWgmSUpRQivp+7SF/QHrQodBToXdDCj21veWqUwkUeslJN5eZnZVWllfZlSWt1Xw+ZnaemWeel/nNzDM7WswE+NJauJrmwxRZuPrmRrm8vTXb2t6aPVdnt5KU6UbSbM9SrCTFJ8nNtKd8tVxZb1/0auej5flbn36+/Vl7qVlP1faNw8r1Z7OeMpVkpJ4fNHqk+m73rO9wi7upYncPy4Bd6QQOhu3RAZuDFH/K6xZ4FhTt++YBk8n5JOP194DUo0PjdHt3/AYa5QAAAOCMem4nO9nIhWH3AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM6S+v3/RT01OumpFJ33/4/V61KnbzWG3Oen8XDYHQAAAAAAAACAY/D1nexkIxc6y4/av+y/Wn1erD6/kvezlqWs5lo2spj1rGc1M0kmuyoa21hcX1+d6aPkjSeWvHEaewsAAAAAAAAA/7d+lYW93/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBZUCQj7Vk1XeykJ9NoJhlPMlZut5n8q5M+I4onrXx4+v0AAACApzJ+hDLP7WQnG7nQWX5UVM/8L1XPy+N5PytZz3LW08pS7tTP0OVTf2N7a7a1vTX7YHtrtmr4p4/a2vV8/78DdaOqMe2/PTy55cvVFhO5m+VqzbXcrjpzJ42qZOly3Z/daX8jvyz7NPFGrc+e3annZWN/6PVXhOPQGLTAZFVodDci03XfyoqePzwSX3h0moe2NJPG7l9+Lh7SUmeXigFjfr5TLsnvHov5G//+00/6rOYE7EaikSoSN7rOvpcOj3nyjb/++e17rZX79+6uXT2x0+i0PH5OzHZF4uUzHYnmgNtPV5G4tLu8kB/mx7maqbyV1SznZ1nMepZSj4xZrM/n8nOyK0rJgUjd3Lf01hf1ZKw+Lu1RtJ8+TeVclVrMq1XZC1lOkXdzJ0t5vfp3IzP5TuYyl/muI3yp5xGu9q0aaRuDXfVXvpm9S/335UjdX7nk7/1uOLj2LbWM6/Ndce0ecyervO41e1F6oY/70YBjY/NrdaJs49dHuW2cmMcjMdMViRcPj8Qfq2tjrbVyf/Xe4ns96t98bPm10b30b0/yzjyw8nx5IeP1SLL/7CjzXtwdZfbHa6z+xaWd1ziQd6nKK4rOlfqjnlfqWP0d7mBNN6q8lw/mjXR6frkrb9/3rbz7j+HEE4ABnf/W+bGJ/0z8c+Ljid9M3Jt4c/wH57577pWxjP5t9HvN6ZHXGq8Uf8nH+cXe8z8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB0ax98eH+x1VpafXKi0TvreBNF/SKfXts0M5FT6MZpJopk89hrzvD3q49E5yWCT1vP2zefid0504mRJJ01I9nLqg/RUV4uCpwJ19cfvHd97YMPv738YPGdpXeWVkbn5uan5+den71+d7m1NN3+HHYvgZOw931g2D0BAAAAAAAAAAAA+nUa/9Ogq7mpIe4qAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcEYtXE1zNEVmpq9Nl8vbW7Otcuqk97ZsJmk0kuLnSfFJcjPtKZNd1RW92vloef7Wp59vf7ZXV7OzfeOwcv3ZrKdMJRmp5weMHa2+273q61uxu4dlwK50AgfD9r8AAAD//4uaBUc=")
setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x0)
removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00')

[  297.589317][ T9905] block nbd1: Device being setup by another task
[  297.617466][ T9901] block nbd1: NBD_DISCONNECT
19:14:57 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
chdir(&(0x7f0000000180)='./file0\x00')
setreuid(0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)

19:14:57 executing program 2:
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab08)

[  297.756617][ T9911] loop3: detected capacity change from 0 to 1024
[  297.794927][ T9905] nbd1: detected capacity change from 0 to 320
19:14:57 executing program 4:
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x55)
read$dsp(r0, 0x0, 0x0)

19:14:57 executing program 2:
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$yama_ptrace_scope(r1, &(0x7f0000000040)='2\x00', 0x2)
vmsplice(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="1c19c73b5123d59cbdba1680ae4c", 0xe}], 0x1, 0x0)
r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
splice(r0, 0x0, r2, 0x0, 0x10, 0x3)

[  297.928025][ T9914] block nbd2: shutting down sockets
19:14:57 executing program 3:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0xc}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x54)
ftruncate(r2, 0x800)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0)
sendfile(r2, r3, 0x0, 0x1dd00)

19:14:57 executing program 4:
r0 = syz_open_procfs(0x0, 0x0)
r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0)
mkdir(&(0x7f00000002c0)='./bus\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})
mkdir(&(0x7f0000000200)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0)
mount(&(0x7f0000000040)=@filename='./bus/file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x3000, 0x0)

19:14:57 executing program 2:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000023000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000080)="0f22843e0f01c32e660f38802cf2a5baf80c66b8f3f6428b66efbafc0cb00eeeb8de008ec00f01720066b9120a00000f32676736660f75110f01d1", 0x3b}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)

[  298.133159][   T27] audit: type=1804 audit(1711653297.810:34): pid=9922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir4106518200/syzkaller.fKlw0t/113/bus" dev="sda1" ino=1958 res=1 errno=0
19:14:57 executing program 3:
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7)
fsetxattr$security_capability(r0, &(0x7f0000000140), &(0x7f0000000080)=@v3={0x3000000, [], 0xee00}, 0x18, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=@random={'osx.', '\x86et_0rio.prioidx\x00X\xaa\xdd\xc5'}, 0x0, 0x0)

[  298.189378][ T9924] 9pnet_fd: Insufficient options for proto=fd
19:14:57 executing program 2:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c)

[  298.221091][   T27] audit: type=1800 audit(1711653297.810:35): pid=9922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1958 res=0 errno=0
19:14:58 executing program 4:
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab08)

19:14:58 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="410800ac0dcab26d055e000000bd955e598f0659043610a7fd00f74d7beb768419edc188144582da4901e23f83097342585acd6eda525e408e1d6436edc34c5b1b96bcc7bcc38400cd1400000000000000fa5a56b1badfe65ae93bb92d1632f72f8fcb1795b550ef8d8001a778ad9f908b7a4353cc60ee4729e3662e4f53fb74bd2393b307f107ac2b7e989905b3014d8c993300eaff92040e86bd11"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000800)=[{{0x0, 0x28, &(0x7f0000000600)=[{&(0x7f0000000080)="5113e66f71e12e335cd42db1b212760cfc1524ee673683133b0f", 0x1a}], 0x1}}], 0x1, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000})
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[  298.317095][ T3581] block nbd1: Disconnected due to user request.
19:14:58 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
chdir(&(0x7f0000000180)='./file0\x00')
r0 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setuid(r1)
mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0)

[  298.479287][ T9931] block nbd4: shutting down sockets
19:14:58 executing program 4:
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$yama_ptrace_scope(r1, &(0x7f0000000040)='2\x00', 0x2)
vmsplice(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="1c19c73b5123d59cbdba1680ae4c", 0xe}], 0x1, 0x0)
r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
splice(r0, 0x0, r2, 0x0, 0x10, 0x3)

19:14:58 executing program 4:
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0xfffffffffffffffa)

19:14:58 executing program 0:
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000b9240c8aee6631ad071808fe5ec25c497c626f69d02a71d1d27602d048db08101209e5e4cce0e9628b0636f3baa"], 0x1, 0x5d8, &(0x7f00000006c0)="$eJzs3U1vG8cdB+Df0rJsuoDDJHaSFi0q2IcWMWqLYuLoUKBuURQ6BEWAXnLJQbDpWDCtBBJTKEFR2H299hskPcjnnnooejCQnvsVBPSQQ4HedXOxyyXFWIoixbJIJc8DDGeGszs78/fuiLuEwQDfWEtv5/SjFFm68uZGWd/a7PS2Njv3huUkZ5I0kplBlmI1KT5NbmSQ8u3yzbq74ouO887Hbyx+1n74YFCbqVO1fWO//Q7mfp0yl+RUnR9Vfzefur9iNMMyYJeHgYNJe7zL/cPs/pTXLTANisHfzV1aybkkZ+vPAalXh8bxju7oHWqVAwAAgBPque1sZyPnJz0OAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOEnq3/8v6tQYludSDH//f7Z+L3X5RHs06QEAAAAAAAAAwBH4/na2s5Hzw/rjovrO/1JVuVC9fisfZD3drOVqNrKcfvpZSztJa6yj2Y3lfn+tfYA9F/bcc+F45gsAAAAAAAAAX1O/y9LO9/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADANiuTUIKvShWG5lcZMkrNJZsvt7if/HJZPskeTHgAAAAAcg+e2s52NnB/WHxfVPf9L1X3/2XyQ1fSzkn566eZW9SxgcNff2Nrs9LY2O/fKtLvfn/7vUMOoeszg2cPeR56vtrg42mMpv8ivciVzeStrWcmvs5x+upnLz6vScoq06qcXreE49x7vjc/V3vqysb5SjaSZ21mpxnY1N/NeermVRjWHapv9j/igjE7xk9oBY3SrzssZ/aXOp0OrisjpUUTm69iX0Xh+/0gc8jx58kjtNEbPoC48g5ifq/My1n+a6pgvjJ19L+0fieTSf7739zu91bt3bq9fmZ4pfUVPRqIzFomXv1GRmK2jMVhFD7daXqr2PZ+V/DLv5Va6eT2LeT0LeS2vZT6LuT4W14sHuNYah7vWLv+wLjST/LnOp0MZ1+fH4jq+0rWqtvF3dqL0wtGvSDPfqQvlMX5f59PhyUi0xyLx4v6R+Ovj8nW9t3p37c7y+wc83g/qvLxs/zhVa3N5vrxQ/mNVtc+fHWXbi3u2tau2C6O2xq62i6O2L7tSZ+vPcLt7WqjaXt6zrVO1vTLWttenHACm3rlXz802/9v8d/OT5h+ad5pvnv3ZmcUz353N6X/N/OPU3xoPGz8uXs0n+e3O/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDVrX/40d3lXq+7pqCgoDAqTHplAp61a/17719b//CjH63cW363+253tdNpX19YvL64cP3a7ZVed37wOulhAs/Azh/9SY8EAAAAAAAAAAAAOKjj+O8Ek54jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcLItvZ3Tj1KkPX91vqxvbXZ6ZRqWd7acSdJIUvwmKT5NbmSQ0hrrrvii47zz8RuLn7UfPtjpa2a4fWO//Q7mfp0yl+RUnR9Vfzefur9iNMMyYJeHgYNJ+38AAAD//+NBDmE=")

19:14:58 executing program 2:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000023000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000080)="0f22843e0f01c32e660f38802cf2a5baf80c66b8f3f6428b66efbafc0cb00eeeb8de008ec00f01720066b9120a00000f32676736660f75110f01d1", 0x3b}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)

19:14:58 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
r1 = open(0x0, 0x10b942, 0x0)
mkdir(&(0x7f00000002c0)='./bus\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})
mkdir(&(0x7f0000000200)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0)
mount(&(0x7f0000000040)=@filename='./bus/file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x3000, 0x0)

19:14:58 executing program 3:
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7)
fsetxattr$security_capability(r0, &(0x7f0000000140), &(0x7f0000000080)=@v3={0x3000000, [], 0xee00}, 0x18, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=@random={'osx.', '\x86et_0rio.prioidx\x00X\xaa\xdd\xc5'}, 0x0, 0x0)

[  299.264252][   T27] audit: type=1800 audit(1711653298.940:36): pid=9870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=1942 res=0 errno=0
19:14:59 executing program 3:
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r2, 0xab08)

19:14:59 executing program 2:
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$yama_ptrace_scope(r1, &(0x7f0000000040)='2\x00', 0x2)
vmsplice(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="1c19c73b5123d59cbdba1680ae4c", 0xe}], 0x1, 0x0)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10, 0x3)

19:14:59 executing program 4:
r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
write$sysctl(r0, &(0x7f0000000000)='7\x00', 0x2)

19:14:59 executing program 2:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f0000000100)='./file0\x00')
readlinkat(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000400)=""/83, 0x53)

19:14:59 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0xc}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r0, @ANYRESHEX=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = dup(r3)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700)
write$cgroup_int(r5, &(0x7f0000000200), 0x43400)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0x7}, 0xc)
r6 = syz_clone3(&(0x7f0000000f00)={0x2c825300, &(0x7f0000000b00), &(0x7f0000000d40), &(0x7f0000000d80), {0x5}, &(0x7f0000000dc0)=""/61, 0xff7e, &(0x7f0000001000)=""/173, &(0x7f0000000ec0)=[0x0, 0xffffffffffffffff, 0x0], 0x3}, 0x58)
r7 = syz_open_procfs(r6, &(0x7f0000000f80)='net/packet\x00')
preadv(r7, &(0x7f0000000000)=[{&(0x7f0000000040)=""/53, 0x35}], 0x1, 0x503, 0xfffffff7)
r8 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x80, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000006c0)={'batadv0\x00', <r9=>0x0})
r10 = fcntl$dupfd(r8, 0x0, r8)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1b, 0xf, &(0x7f0000001440)=ANY=[@ANYBLOB="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"], &(0x7f00000005c0)='GPL\x00', 0x2, 0xbb, &(0x7f0000000600)=""/187, 0x735090beed5d0fb6, 0x11, '\x00', r9, 0x4, r10, 0x8, &(0x7f0000000700)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000740)={0x1}, 0x10, 0xffffffffffffffff}, 0x80)
r11 = socket$inet6(0xa, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x6, 0x5, &(0x7f0000000500)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x3}, @map_fd={0x18, 0xa, 0x1, 0x0, r7}, @generic={0x8, 0x5, 0x8, 0x9, 0x10001}], &(0x7f0000000fc0)='syzkaller\x00', 0x9, 0xa2, &(0x7f0000000c80)=""/162, 0x41000, 0xc, '\x00', r9, 0x1d, r10, 0x8, &(0x7f0000001100)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000001140)={0x0, 0x4, 0x5, 0x5}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000001200)=[0xffffffffffffffff, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r7, r10]}, 0x80)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x2, 0x1, 0x1f, 0x0, 0x400000000}, 0x20)
r12 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00')
sendfile(r11, r12, &(0x7f0000000240)=0x208, 0x9)
open(&(0x7f0000000400)='./file0\x00', 0x800, 0x100)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0)

[  299.499727][ T9953] block nbd3: NBD_DISCONNECT
[  299.505218][ T9951] block nbd3: Disconnected due to user request.
[  299.528596][ T9951] block nbd3: shutting down sockets
19:14:59 executing program 3:
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
ftruncate(r0, 0x8208200)
r1 = open(&(0x7f0000000780)='./bus\x00', 0x14117e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x604100, 0x7ffffe, 0x4002011, r1, 0x0)

19:14:59 executing program 2:
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7)
fsetxattr$security_capability(r0, &(0x7f0000000140), &(0x7f0000000080)=@v3={0x3000000, [], 0xee00}, 0x18, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=@random={'osx.', '\x86et_0rio.prioidx\x00X\xaa\xdd\xc5'}, 0x0, 0x0)

19:14:59 executing program 2:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000023000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000080)="0f22843e0f01c32e660f38802cf2a5baf80c66b8f3f6428b66efbafc0cb00eeeb8de008ec00f01720066b9120a00000f32676736660f75110f01d1", 0x3b}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)

19:14:59 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
r1 = open(0x0, 0x10b942, 0x0)
mkdir(&(0x7f00000002c0)='./bus\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})
mkdir(&(0x7f0000000200)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0)
mount(&(0x7f0000000040)=@filename='./bus/file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x3000, 0x0)

19:14:59 executing program 2:
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$yama_ptrace_scope(r1, &(0x7f0000000040)='2\x00', 0x2)
vmsplice(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="1c19c73b5123d59cbdba1680ae4c", 0xe}], 0x1, 0x0)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10, 0x3)

[  300.202385][ T9976] loop0: detected capacity change from 0 to 1024
[  317.191243][ T1255] ieee802154 phy0 wpan0: encryption failed: -22
[  317.197847][ T1255] ieee802154 phy1 wpan1: encryption failed: -22
19:15:27 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000023000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000080)="0f22843e0f01c32e660f38802cf2a5baf80c66b8f3f6428b66efbafc0cb00eeeb8de008ec00f01720066b9120a00000f32676736660f75110f01d1", 0x3b}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

19:15:27 executing program 4:
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r2, 0xab08)

19:15:27 executing program 2:
r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
write$sysctl(r0, &(0x7f0000000000)='7\x00', 0x2)

19:15:27 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40042, 0x1ff)
write$binfmt_elf32(r0, &(0x7f0000001140)=ANY=[@ANYBLOB="7f454c46000000400000000000000000030003"], 0x158)
close(r0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0)

19:15:27 executing program 3:
fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7)
fsetxattr$security_capability(r0, &(0x7f0000000140), &(0x7f0000000080)=@v3={0x3000000, [], 0xee00}, 0x18, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=@random={'osx.', '\x86et_0rio.prioidx\x00X\xaa\xdd\xc5'}, 0x0, 0x0)

19:15:27 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
r1 = open(0x0, 0x10b942, 0x0)
mkdir(&(0x7f00000002c0)='./bus\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})
mkdir(&(0x7f0000000200)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0)
mount(&(0x7f0000000040)=@filename='./bus/file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x3000, 0x0)

[  327.549353][ T9978] block nbd4: NBD_DISCONNECT
[  327.562511][ T9977] block nbd4: Disconnected due to user request.
[  327.604504][ T9977] block nbd4: shutting down sockets
19:15:27 executing program 2:
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$yama_ptrace_scope(r1, &(0x7f0000000040)='2\x00', 0x2)
vmsplice(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="1c19c73b5123d59cbdba1680ae4c", 0xe}], 0x1, 0x0)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10, 0x3)

19:15:27 executing program 4:
syz_mount_image$sysv(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x84, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYBLOB="71d941593e16f55c96896addddecf399d322c10e7f71ad360c6545cfd31ad89aee1ac888d60aff1006c9770d7987f957c1f85d37e281c7ac7c1a7f3153119a885dc3ca32522b4f56f9701153ea2b57873a1dddc2c98f7c78449e9671219ef9bce682fe43de49e326959c7f798803529a49e620ca55", @ANYRES8], 0x1, 0x9e96, &(0x7f0000000180)="$eJxEmnPwJ4fydr+bbGzbdk5s27Zt+8T5jI3Ytu1sbNu27X1rf/feevu/qZp6qrvP01VT3XPrAG8b4O0DvGOAdw7wrgHePcB7BnjvAO8b4P0DfGCAIwb44AAfGuDDA3xkgI8O8LEBPj7AJwb45ACfGuDTA3xmgM8O8LkBPj/AFwb44gBfGuDLA3xlgK8O8LUBvj7ANwb45gDfGuDbA3xngO8O8L0Bvj/ADwb44QA/GuDHA/xkgJ8O8LMBfj7ALwb45QC/GuDXA/xmgN8O8LsBfj/AHwb44wB/GuDPA/xlgL8O8LcB/j7APwb45wD/GuDfA/xngP8OcOQAhwIcFuBoAY4e4PAAxwhwzADHCnDsAMcJcNwAxwtw/AAnCHDCACcKcOIAJwlw0gAnC3DyAKcIcMoApwpw6gCnCXDaAKcLcPoAZwhwxgBnCnDmAGcJcNYAZwtw9gDnCHDOAOcKcO4A5wlw3gDnC3D+ABcIcMEAFwpw4QAJcJEAFw1wsQAXD3CJAJcMcKkAlw5wmQCXDXC5AJcPcIUAVwxwpQBXDnCVAFcNcLUAVw9wjQDXDHCtANcOcJ0A1w1wvQDXD3CDADcMcKMANw5wkwA3DXCzADcPcIsAtwxwqwC3DnCbALcNcLsAtw9whwB3DHCnAHcOcJcAdw1wtwB3D3CPAPcMcK8A9w5wnwD3DXC/APcP8IAADwzwoAAPDvCQYEwPDfCwAA8P8IgAjwzwqACPDvCYAA3w2ACPC/D4gNFHsT8xwJMCPDnAUwIcBBgEGAYYBRgHmASYBpgFmAdYBFgGWAVYB9gE2AbYBQyN0jw1wNMCPD3AMwI8M8CzAjw7wHMCPDfA8wI8P8ALArwwwIsCvDjASwK8NMDLArw8wCsCvDLAqwK8OsBrArw2wOsCvD7AGwK8McCbArw5wFsCvDXA24Kxh4aG8I4A7wzwrgDvDvCeAO8N8L4A7w/wgQBHBPhggA8F+PCoOQiHhh4dxfaLof+LJwJ8Mhj+f3pPB/jMqN79J3w+wBcCfDHAlwJ8OcBXAnw1wNcCfD3ANwJ8M8C3Anw7wHcCfDfA9wJ8P8APAvwwwI8C/DjATwL8NMDPAvw8wC8C/DLArwL8OsBvAvw2wO8C/D7AHwL8McCfAvw5wF8C/DXA3wL8PcA/AvwzwL8C/DvAfwL8N8CRAQ6FOCzE0cJRdePwEMcIccwQxwpx7BDHCXHcEMcLcfyQOSYIccIQJwpx4hAnCXHSECcLcfIQpwhxyhCnCnHqEKcJcdoQpwtx+hBn+K/uTCHOHOIsIc4a4mwhzh7iHCHOGeJcIc4d4jwhzhvifCHOH+ICIS4Y4kIhLhwiIS4S4qIhLhbi4iEuEeKSIS4V4tIhLhPisiEuF+LyIa4Q4oohrhTiyiGuEuKqIa4W4uohrhHimiGuFeLaIa4T4rohrhfi+iFuEOKGIW4U4sYhbhLipiFuFuLmIW4R4pYhbhXi1iFuE+K2IW4X4vYh7hDijiHuFOLOow0NjeKwa4i7hbh7iHuEuGeIe4W4d4j7hLhviPuFuH+IB4R4YIgHhXhwiIeEeGiIh4V4eIhHhHhkiEeFeHSIx4RoiMeGeFyIx4d4QognhnhSiCeHeEqIgxCDEMMQo/D/+zwNMQsxD7EIsQyxCrEOsQmxDbELsQ/x1BBPC/H0EM8I8cwQzwrx7BDPCfHcEM8L8fwQLwjxwhAvCvHiEC8J8dIQLwvx8hCvCPHKEK8K8eoQrwnx2hCvC/H6EG8I8cYQbxrFbvP5hoYNDQ3dGuJtId4e4h0h3hniXSHeHeI9Id4b4n0h3h/iAyGOCPHBEB8K8eFRfh/CR0N8LMTHQ3wixCdDfCrEp0N8JsRnQ3wuxOdDfCHEF0N8KcSXQ3wlxFdDfC3E10N8I8Q3Q3wrxLdDfCfEd0N8L8T3Q/wgxA9D/CjEj0P8JMRPQ/wsxM9D/CLEL0P8KsSvQ/wmxG9D/C7E70P8IcQfQ/wpxJ9D/CXEX0P8LcTfQ/wjxD9D/CvEv0P8J8R/QxwZ4lCEwyIcLcLRIxwe4RgRjhnhWBGOHeE4EY4b4XgRjh/hBBFOGOFEEU4c4SQRThrhZBFOHuEUEU4Z4VQRTh3hNBFOG+F0EU4f4QwRzhjhTBHOHOEsEc4a4WwRzh7hHBHOGeFcEc4d4TwRzhvhfBHOH+ECES4Y4UIRLhwhES4S4aIRLhbh4hEuEeGSES4V4dIRLhPhshEuF+HyEa4Q4YoRrhThyhGuEuGqEa4W4eoRrhHhmhGuFeHaEa4T4boRrhfh+hFuEOGGEW4U4cYRbhLhphFuFuHmEW4R4ZYRbhXh1hFuE+G2EW4X4fYR7hDhjhHuFOHOEe4S4a4R7hbh7hHuEeGeEe4V4d4R7hPhvhHuF+H+ER4Q4YERHhThwREeEuGhER4W4eERHhHhkREeFeHRER4ToREeG+FxER4f4QkRnhjhSRGeHOEpEQ4iDCIMI4wijCNMIkwjzCLMIywiLCOsIqwjbCJsI+wi7CM8NcLTIjw9wjMiPDPCsyI8O8JzIjw3wvMiPD/CCyK8MMKLIrw4wksivDTCyyK8PMIrIrwywqsivDrCayK8NsLrIrw+whsivDHCmyK8OcJbIrw1wtsivD3COyK8M8K7Irw7wnsivDfC+yK8P8IHIhwR4YMRPhThwxE+EuGjET4W4eMRPhHhkxE+FeHTET4T4bMRPhfh8xG+EOGLEb4U4csRvhLhqxG+FuHrEb4R4ZsRvhXh2xG+E+G7Eb4X4fsRfhDhhxF+FOHHEX4S4acRfhbh5xF+EeGXEX4V4dcRfhPhtxF+F+H3Ef4Q4Y8R/hThzxH+EuGvEf4W4e8R/hHhnxH+FeHfEf4T4b8RjoxwKMZhMY4W4+gxDo9xjBjHjHGsGMeOcZwYx41xvBjHj3GCGCeMcaIYJ45xkhgnjXGyGCePcYoYp4xxqhinjnGaGKeNcboYp49xhhhnjHGmGGeOcZYYZ41xthhnj3GOGOeMca4Y545xnhjnjXG+GOePP5logRgXjHGhGBeOkRgXiXHRGBeLcfEYl4hxyRiXinHpGJeJcdkYl4tx+RhXiHHFGFeKceUYV4lx1RhXi3H1GNeIcc0Y14px7RjXiXHdGNeLcf0YN4hxwxg3inHjGDeJcdMYN4tx8xi3iHHLGLeKcesYt4lx2xi3i3H7GHeIcccYd4px5xh3iXHXGHeLcfcY94hxzxj3inHvGPeJcd8Y94tx/xgPiPHAGA+K8eAYD4nx0BgPi/HwGI+I8cgYj4rx6BiPidEYj43xuBiPj/GEGE+M8aQYT47xlBgHMQYxhjFGMcYxJjGmMWYx5jEWMZYxVjHWMTYxtjF2MfYxnhrjaTGeHuMZMZ4Z41kxnh3jOTGeG+N5MZ4f4wUxXhjjRTFeHOMlMV4a42UxXh7jFTFeGeNVMV4d4zUxXhvjdTFeH+MNMd4Y400x3hzjLTHeGuNtMd4e4x0x3hnjXTHeHeM9Md4b430x3h/jAzGOiPHBGB+K8eEYH4nx0Rgfi/HxGJ+I8ckYn4rx6RififHZGJ+L8fkYX4jxxRhfivHlGF+J8dUYX4vx9RjfiPHNUf0ewrdjfCfGd2N8L8b3Y/wgxg9j/CjGj2P8JMZPY/wsxs9j/CLGL2P8KsavY/wmxm9j/C7G72P8IcYfY/wpxp9j/CXGX2P8LcbfY/wjxj9j/CvGv2P8J8Z/YxwZ41CCwxIcLcHRExye4BgJjpngWAmOneA4CY6b4HgJjp/gBAlOmOBECU6c4CQJTprgZAlOnuAUCU6Z4FQJTp3gNAlOm+B0CU6f4AwJzpjgTAnOnOAsCc6a4GwJzp7gHAnOmeBcCc6d4DwJzpvgfAnOn+ACCS6Y4EIJLpwgCS6S4KIJLpbg4gkukeCSCS6V4NIJLpPgsgkul+DyCa6Q4IoJrpTgygmukuCqCa6W4OoJrpHgmgmuleDaCa6T4LoJrpfg+glukOCGCW6U4MYJbpLgpgluluDmCW6R4JYJbpXg1gluk+C2CW6X4PYJ7pDgjgnulODOCe6S4K4J7pbg7gnukeCeCe6V4N4J7pPgvgnul+D+CR6Q4IEJHpTgwQkekuChCR6W4OEJHpHgkQkeleDRCR6ToAkem+BxCR6f4AkJnpjgSQmenOApCQ4SDBIME4wSjBNMEkwTzBLMEywSLBOsEqwTbBJsE+wS7BM8NcHTEjw9wTMSPDPBsxI8O8FzEjw3wfMSPD/BCxK8MMGLErw4wUsSvDTByxK8PMErErwywasSvDrBaxK8NsHrErw+wRsSvDHBmxK8OcFbErw1wdsSvD3BOxK8M8G7Erw7wXsSvDfB+xK8P8EHEhyR4IMJPpTgwwk+kuCjCT6W4OMJPpHgkwk+leDTCT6T4LMJPpfg8wm+kOCLCb6U4MsJvpLgqwm+luDrCb6R4JsJvpXg2wm+k+C7Cb6X4PsJfpDghwl+lODHCX6S4KcJfpbg5wl+keCXCX6V4NcJfpPgtwl+l+D3Cf6Q4I8J/pTgzwn+kuCvCf6W4O8J/pHgnwn+leDfCf6T4L8JjkxwKMVhKY6W4ugpDk9xjBTHTHGsFMdOcZwUx01xvBTHT3GCFCdMcaIUJ05xkhQnTXGyFCdPcYoUp0xxqhSnTnGaFKdNcboUp09xhhRnTHGmFGdOcZYUZ01xthRnT3GOFOdMca4U505xnhTnTXG+FOdPcYEUF0xxoRQXTpEUF0lx0RQXS3HxFJdIcckUl0px6RSXSXHZFJdLcfkUV0hxxRRXSnHlFFdJcdUUV0tx9RTXSHHNFNdKce0U10lx3RTXS3H9FDdIccMUN0px4xQ3SXHTFDdLcfMUt0hxyxS3SnHrFLdJcdsUt0sxSXGHFHdMcacUd05xlxR3TXG3FHdPcY8U90xxrxT3TnGfFPdNcb8U90/xgBQPTPGgFA9O8ZAUD03xsBQPT/GIFI9M8agUj07xmBRN8dgUj0vx+BRPSPHEFE9K8eQUT0lxkGKQYphilGL833zTFLMU8xSLFMsUqxTrFJsU2xS7FPsUT03xtBRPT/GMFM9M8awUz07xnBTPTfG8FM9P8YIUL0zxohQvTvGSFC9N8bIUL0/xihSvTPGqFK9O8ZoUr03xuhSvT/GGFG9M8aYUb07xlhRvTfG2FG9P8Y4U70zxrhTvTvGeFO9N8b4U70/xgRRHpPhgig+l+HCKj6T4aIqPpfh4ik+k+GSKT6X4dIrPpPhsiiNHjhz5fIovpPhiii+l+HKKr6T4aoqvpfh6im+k+GaKb6X4dorvpPhuiu+l+H6KH6T4YYofpfhxip+k+GmKn6X4eYpfpPhlil+l+HWK36T4bYrfpfh9ij+k+GOKP6X4c4q/pPhrir+l+HuKf6T4Z4p/pfh3iv+k+O+o/FMcynBYhqNlOHqGwzMcI8MxMxwrw7EzHCfDcTMcL8PxM5wgwwkznCjDiTOcJMNJM5wsw8kznCLDKTOcKsOpM5wmw2kznC7D6TOcIcMZM5wpw5kznCXDWUfH2TKcPcM5Mpwzw7nyoaFR+c2T4bwZzpfh/BkukOGCGS6U4cIZkuEiGS6a4WIZLp7hEhkumeFSGS6d4TIZLpvhchkun+EKGa6Y4UoZrpzhKhmumuFqGa6e4RoZrpnhWhmuneE6Ga6b4XoZrp/hBhlumOFGGW6c4SYZbprhZhlunuEWGW6Z4VYZbp3hNhlum+F2GW6f4Q4Z7pjhThnunOEuGe6a4W4Z7p7hHhnumeFeGe6d4T4Z7pvhfhnun+EBGR6Y4UEZHpzhIRkemuFhGR6e4REZHpnhURkeneExGZrhsRkel+HxGZ6Q4YkZnpThyRmekuEgwyDDMMMowzjDJMM0wyzDPMMiwzLDKsM6wybDNsMuwz7DUzM8LcPTMzwjwzMzPCvDszM8J8NzMzwvw/MzvCDDCzO8KMOLM4b+t2+8LMPLM7wiwyszvCrDqzNGXpPhtRlel+H1Gd6QMXyUR27K8OYMb8nw1gxvy/D2DO/I8M4M78rw7gzvyfDeDO/L8P4MH8hwRIYPZvhQhg9n+EiGj2b4WIaPZ/hEhk9m+FSGT2f4TIbPZvhchs9n+EKGL2b4UoYvZ/hKhq9m+FqGr2f4RoZvZvhWhm9n+E6G72b4XobvZ/hBhh9m+FGGH2f4SYZ/jvxPfJ7hFxl+meFXGX6d4TfZf24R32X4fYY/ZPhjhj9l+HOGv2T4a4a/Zfh7hn+M0svwrwz/zvCfDP/NcGSGQzkOy3G0HEfPcXiOY+Q4Zo5j5Th2juPkOG6O4+U4fo4T5DhhjhPlOHGOk+Q4aY6T5Th5jlPkOGWOU+U4dY7T5DhtjtPlOH2OM+Q4Y44z5ThzjrPkOGuOs+U4e45z5DhnPmr+ce4c58lx3hzny3H+HBfIccEcF8px4RzJcZEcF81xsRwXz3GJHJfMcakcl85xmRyXzXG5HJfPcYUcV8xxpRxXznGVHFfNcbUcV89xjRzXzHGtHNfOcZ0c181xvRzXz3GDHDfMcaMcN85xkxw3zXGzHDfPcYsct8xxqxy3znGbHLfNcbsct89xhxx3zHGnHHfOcZccd81xtxx3z3GPHPfMca8c985xnxz3zXG/HPfP8YAcD8zxoBwPzvGQHA/N8bAcD8/xiByPzPGoHI/O8ZgczfHYHI/L8fgcT8jxxBxPyvHkHE/JcZBjkGOYY5RjnGOSY5pjlmOeY5FjmWOVY51jk2ObY5djn+OpOZ6W4+k5npHjmTmelePZOZ6T47k5npfj+TlekOOFOV6U48U5XpLjpTleluPlOV6R45U5XpXj1Tlek+O1OV6X4/U53pDjjTnelOPNOd6S46053pbj7TnekeOdOd6V49053pPjvTnel+P9OT6Q44gcH8zxoRwfzvGRHB/N8bEcH8/xiRyfzPGpHJ/O8Zkcn83xuRyfz/GFHF/M8aUcX87xlRxfzfG1HF/P8Y0c38zxrRzfzvGdHN/N8b0c38/xgxw//GOkH+X4cY6f5Phpjp/l+HmOX+T4ZY5f5fh1jt/k+G2O3+X4fY4/5Phjjj/lODTx0NAvOf6a4285/p7jHzn+meNfOf6d4z85/pvjyFHvFziswNEKHL3A4QWOUeCYBY5V4NgFjlPguAWOV+D4BU5Q4IQFTlTgxAVOUuCkBU5W4OQFTlHglAVOVeDUBU5T4LQFTlfg9AXOUOCMBc5U4MwFzlLgrAXOVuDsBc5R4JwFzlXg3AXOU+C8Bc5X4PwFLlDgggUuVODCBVLgIgUuWuBiBS5e4BIFLlngUgUuXeAyBS5bMDSq3uULXKHAFQtcqcCVC1ylwFULXK3A1Qtco8A1C1yrwLULXKfAdQtcr8D1C9ygwA0L3KjAjQvcpMBNC9yswM0L3KLALQvcqsCtC9ymwG0L3K7A7QvcocAdC9ypwJ0L3KXAXQvcrcDdC9yjwD0L3KvAvQvcp8B9C9yvwP0LPKDAAws8qMCDCzykwEMLPKzAwws8osAji/98o44cOfKEYwq0wGMLPK7A4ws8ocATCzypwJMLPKXAQYFBgWGBUYFxgUmBaYFZgXmBRYFlgVWBdYFNgW2BXYF9gacWeFqBpxd4RoFnFnhWgWcXeE6B5xZ4XoHnF3hBgRcWeFGBFxd4SYGXFnhZgZcXeEWBVxZ4VYFXF3hNgdcWeF2B1xd4Q4E3FnhTgTcXeEuBtxZ4W4G3F3hHgXcWeFeBdxd4T4H3FnhfgfcX+ECBIwp8sMCHCny4wEcKfLTAxwp8vMAnCnyywKcKfLrAZwp8tsDnCny+wBcKfLHAlwp8ucBXCny1wNcKfL3ANwp8s8C3Cny7wHcKfLfA9wp8v8APCvywwI8K/LjATwr8tMDPCvy8wC8K/LLArwr8usBvCvy2wO8K/L7AHwr8scCfCvy5wF8K/LXA3wr8vcA/CvyzwL8K/LvAfwr8d5Q3ChwqcViJo5U4eonDSxyjxDFLHKvEsUscp8RxSxyvxPFLnKDECUucqMSJS5ykxElLnKzEyUucosQpS5yqxKlLnKbEaUucrsTpS5yhxBlLnKnEmUucpcRZS5ytxNlLnKPEOUucq8S5S5ynxHlLnK/E+UtcoMQFS1yoxIVLpMRFSly0xMVKXLzEJUpcssSlSly6xGVKXLbE5UpcvsQVSlyxxJVKXLnEVUpctcTVSly9xDVKXLPEtUpcu8R1Sly3xPVKXL/EDUrcsMSNSty4xE1K3LTEzUrcvMQtStyyxK1K3LrEbUrctsTtSty+xB1K3LEc5k4l7lziLiXuWuJuJe5e4h4l7lniXiXuXeI+Je5b4n4l7l/iASUeWOJBJR5c4iElHlriYSUeXuIRJR5Z4lElHl3iMSVa4rElHlfi8SWeUOKJJZ5U4sklnlLioMSgxLDEqMS4xKTEtMSsxLzEosSyxKrEusSmxLbErsS+xFNLPK3E00s8o8QzSzyrxLNLPKfEc0s8r8TzS7ygxAtLvKjEi0u8pMRLS7ysxMtLvKLEK0u8qsSrS7ymxGtLvK7E60u8ocQbS7ypxJtLvKXEW0u8rcTbS7yjxDtLvKvEu0u8p8R7S7yvxPtLfKDEESU+WOJDJT5c4iMlPlriYyU+XuITJT5Z4lMlPl3iMyU+W+JzJT5f4gslvljiSyW+XOIrJb5a4mslvl7iGyW+WeJbJb5d4jslvlvieyW+X+IHJX5Y4kclflziJyV+WuJnJX5e4hclflniVyV+XeI3JX5b4nclfl/iDyX+WOJPJf5c4i8l/lribyX+XuIfJf5Z4l8l/l3iPyX+W+LIEocqHFbhaBWOXuHwCseocMwKx6pw7ArHqXDcCsercPwKJ6hwwgonqnDiCiepcNIKJ6tw8gqnqHDKCqeqcOoKp6lw2gqnq3D6CmeocMYKZ6rGHpq5wlkqnLXC2SqcvcI5KpyzwrkqnLvCeSqct8L5Kpy/wgUqXLDChSpcuEIqXKTCRStcrMLFK1yiwiUrXKrCpYeGD42qc9kKl6tw+QpXqHDFCleqcOUKV6lw1QpXq3D1CteocM0K16pw7QrXqXDdCtercP0KN6hwwwo3qnDjCjepcNMKN6tw8wq3qHDLCreqcOsKt6lw2wq3q3D7CneocMcKd6pw5wp3qXDXCnercPcK96hwzwr3qnDvCvepcN8K96tw/woPqPDACg+q8OAKD6nw0AoPq/DwCo+o8MgKj6rw6AqPqdAKj63wuAqPr/CECk+s8KQKT67wlAoHFQYVhhVGFcYVJhWmFWYV5hUWFZYVVhXWo3wyhG2FXYV9hadWeFqFp1d4RoVnVnhWhWdXeE6F51Z4XoXnV3hBhRdWeFGFF1d4SYWXVnhZhZdXeEWFV1Z4VYVXV3hNhddWeF2F11d4Q4U3VnhThTdXeEuFt1Z4W4W3V3hHhXdWeFeFd1d4T4X3VnhfhfdX+ECFIyp8sMKHKny4wkcqfLTCxyp8vMInKnyywqcqfLrCZyp8tsKRYw0NPV/hCxW+WOFLFb5c4SsVvlrhaxW+XuEbFb5Z4VsVvl3hOxW+W+F7Fb5f4QcVfljhRxV+XOEnFX5a4WcVfl7hFxV+WeFXFX5d4TcVflvhdxV+X+EPFf5Y4U8V/lzhLxX+WuFvFf5e4R8V/lnhXxX+XeE/Ff47Kv8Kh2ocVuNoNY5e4/Aax6hxzBrHqnHsGsepcdwax6tx/BonqHHCGieqceIaJ6lx0honq3HyGqeoccoap6px6hqnqXHaGqercfoaZ6hxxhpnqnHmGmepcdYaZ6tx9hrnqHHOGueqce4a56lx3hrnq3H+GheoccEaF6px4RoZVcPQ0NCiNS5W4+I1LlHjkjUuVePSNS5T47I1Llfj8jWuUOOKNa5U48o1rlLjqjWuVuPqNa5R45o1rlXj2jWuU+O6Na5X4/o1blDjhjVuVOPGNW5S46Y1blbj5jVuUeOWNW5V49Y1blPjtjVuV+P2Ne5Q44417lTjzjXuUuOuNe5W4+417jFs2IlDQ7hXjXvXuE+N+9a4X43713hAjQfWeFCNB9d4SI2H1nhYjYfXeESNR9Z4VI1H13hMjdZ4bI3H1Xh8jSfUeGKNJ9V4co2n1DioMagxrDGqMa4xqTGtMasxr7GosayxqrGusamxrbGrsa/x1BpPq/H0Gs+o8cwaz6rx7BrPqfHcGs+r8fwaL6jxwhovqvHiGi+p8dIaL6vx8hqvqPHKGq+q8eoar6nx2hqvq/H6Gm+o8cYab6rx5hpvqfHWGm+rmXloaMg7aryzxrtqvLvGe2q8t8b7ary/xgdqHFHjgzU+VOPDNT5S46M1Plbj4zU+UeOTNT5V49M1PlPjszU+V+PzNb5Q44s1vlTjyzW+UuOrNb5W4+s1vlHjmzW+VePbNb5T47s1vlfj+zV+UOOHNX5U48c1flLjpzV+VuPnNX5R45f/nc2va/ymxm9r/K7G72v8ocYfa/ypxp9r/KXGX2v8rcbfa/yjxj9r/KvGv2v8p8Z/axxZ41CDwxocrcHRGxze4BgNjtngWA2O3eA4DY7b4HgNjt/gBA1O2OBEDU7c4CQNTtrgZA1O3uAUDU7Z4FQNTt2s8t+VLk7X4PQNztDgjA3O1ODMDc7S4KwNztbg7A3O0eCcDc7V4NwNztPgvA3O1+D8DS7Q4IINLtTgwg3S4CINLtrgYg0u3uASDS7Z4FINLt3gMg0u2+ByDS7f4AqjNEfgSg2u3OAqDa7a4GoNrt7gGg2u2eBaDa7d4DoNrtvgeg2u3+AGDW7Y4EYNbtzgJg1u2uBmDW7e4BYNbtngVg1u3eA2DW7b4HYNbt/gDg3u2OBODe7c4C4N7trgbg3u3uAeDe7Z4F4N7t3gPg3u2+B+De7f4AENHtjgQQ0e3OAhDR7a4GENHt7gEQ0e2eBRDR7d4DEN2uCxDR7X4PENntDgiQ2e1ODJDZ7S4KDBoMGwwajBuMGkwbTBrMG8waLBssGqwbrBpsG2wZF//WfZcGqDpzV4eoNnNHhmg/9b7J/T4LkNntfg+Q1e0OCFDV7U4MUNXtLgpQ1e1uDlDV7RMPK/PyF7dYPXNHhtg9c1eH2DNzR4Y8NY/7sb3NLgrQ3e1uDtDd7R4J0N3tXg3Q3e0+C9Dd7X4P0NPtDgiAYfbPChBh9u8JEGH23wsQYfb/CJBp9s8KkGn27wmQafbfC5Bp9v8IUGX2zwpQZfbvCVBl9t8LUGX2/wjQbfbPCtBt9u8J0G323wvQbfb/CDBj9s8KMGP27wkwY/bfCzBj9v8IsGv2zwqwa/bvCbBr9t8LsGv2/whwZ/bPCnBn9u8JcGf23wtwZ/b/CPBv9s8K8G/27wnwb/HT7kyFFcWhzW4mgtjt7i8BbHaHHMFsdqcewWxxk50X+62+L4LU7Q4oQjR/7f88QtTtLipC1O1uLkLU7R4pQtTtXi1C1O0+K0LU7X4vQtztDijC3O1OLMLc7S4qwtztYy2iiGc7Q4Z4tztTh3i/O0OG+L87U4f4sLtLhgiwu1uHCLtLhIi4u2uFiLi7e4RItLtrhUi0u3uEyLy7a4XIvLt7hCiyu2uFKLK7e4Sourtrhai6u3uEaLa7a4Votrt7hOi+u2uF6L67e4QYsbtrhRixu3uEmLm7a4WYubt7hFi1u2uFWLW7e4TYvbtrhdi9u3uEOLO7a4U4s7t7hLi7u2uFuLu7e4R4t7trhXi3u3uE+L+7a4X4v7t3hAiwe2eFCLB7d4SIuHtnhYi4e3eESLR7Z4VItHt3hMi7Z4bIvHtXh8iye0eGKLJ7V4countDhoMWgxbDFqMW4xaTFtMWsxb7FosWyxarFusWmxbbFrsW/x1BZPa/H0Fs9o8cwWz2rx7BbPafHcFs9r8fwWL2jxwhYvavHiFi9p8dIWL2vx8havaPHKFq9q8eoWr2nx2hava/H6Fm9o8cYWb2rx5hZvafHWFm9r8fYW72jxzhbvavHuFu9p8d4W72vx/hYfaHFEiw+2+FCLD7f4SIuPtvhYi4+3+ESLT7b4VItPt/hMi8+2+FyLz7f4QosvtvhSiy+3+EqLr7b4Wouvt/hGi2+2+FaLb7f4Tovvtvhei++3+EGLH7b4UYsft/hJi5+2+FmLn7f4RYtftvhVi1+3+E2L37b4XYvft/hDiz+2+FOLP7f4S4u/tvhbi7+3+EeLf7b4V4t/t/hPi/+2OLLFoQ6HdThah6N3OLzDMTocs8OxOhy7w3E6HLfD8Tocv8MJOpyww4k6nLjDSTqctMPJOpy8wyk6nLLDqTqcusNpOpy2w+k6nL7DGTqcscOZOpy5w1k6nLXD2TqcvcM5Opyzw7k6nLvDeTqct8P5Opy/wwU6XLDDhTpcuEM6XKTDRTtcrMPFO1yiwyU7XKrDpTtcpsNlO1yuw+U7XKHDFTtcqcOVO1ylw1U7XK3D1Ttco8M1O1yrw7U7XKfDdTtcr8P1O9ygww073KjDjTvcpMNNO9ysw8073KLDLTvcqsOtO9ymw2073G7YkNt3uEOHO3a4U4c7d7hLh7t2uFuHu3e4R4d7drhXh3t3uE+H+3a4X4f7d3hAhwd2eFCHB3d4SIeHdnhYh4d3eESHR3Z4VIdHd3hMh3Z4bIfHdXh8hyd0eGKHJ3V4coendDjoMOgw7DDqMO4w6TDtMOsw77DosOyw6rDusOmw7bDrsO/w1A5P6/D0Ds/o8MwOz+rw7A7P6fDcDs/r8PwOL+jwwg4v6vDiDi/p8NIOL+vw8g6v6PDKDq/q8OoOr+nw2g6v6/D6Dm/o8MYOb+rw5g5v6fDWDm/r8PYO7+jwzg7v6vDuDu/p8N4O7+vw/g4f6HBEhw92+FCHD3f4SIePdvhYh493+ESHT3b4VIdPd/hMh892+FyHz3f4QocvdvhShy93+EqHr3b4Woevd/hGh292+FaHb3f4Tofvdvheh+93+EGHH3b4UYcfd/hJh592+FmHn3f4RYdfdvhVh193+E2H33b4XYffd/hDhz92+FOHP3f4S4e/dvhbh793+EeHf3b4V4d/d/hPh/92OLLDoR6H9Thaj6P3OLzHMXocs8exehy7x3F6HLfH8Xocv8cJepywx4l6nLjHSXqctMfJepy8xyl6nLLHqXqcusdpepy2x+l6nL7HGXqcsceZepy5x1l6nLXH2Xqcvcc5epyzx7l6nLvHeXqct8f5epy/xwV6XLDHhXpcuEd6XKTHRXtcrMfFe1yixyV7XKrHpXtcpsdle1yux+V7XKHHFXtcqceVe1ylx1V7XK3H1Xtco8c1e1yrx7V7XKfHdXtcr8f1e9ygxw173KjHjXvcpMdNe9ysx8173KLHLXvcqsete9ymx2173G5m3L7HHXrcscedety5x1163LXH3XrcvefPkT3u2eNePe7d4z497tvjfj3u3+MBPR7Y40FjDg2NYnhIj4f2eFiPh/d4RI9H9nhUj0f3eEyP9nhsj8f1eHyPJ/R4Yo8n9Xhyj6f0OOgx6DHsMeox7jHpMe0x6zHvseix7LHqse6x6bHtseux7/HUHk/r8fQez+jxzB7P6vHsHs/p8dwez+vx/B4v6PHCHi/q8eIeL+nx0h4v6/HyHq/o8coer+rx6h6v6fHaHq/r8foeb+jxxh5v6vHmHm/p8dYeb+vx9h7v6PHOHu/q8e4e7+nx3h7v6/H+Hh/ocUSPD/b4UI8P9/hIj4/2+FiPj/f4RI9P9vhUj0/3+EyPz/b4XI/P9/hCjy8O/YfDyz2+0uOrPb7W4+s9vtHjmz2+1ePbPb7T47s9vtfj+z1+0OOHPX70/4h6B++xj6jfOmqb1Lbtdte2bdu2d9uktn9fG6lt27Zt222Sd/W+z3PvP3DWmdlnzcznfGbWDOCnA/jZAH4+gF8M4JcD+NUAfj2A3wzgtwP43QB+P4A/DOCPA/jTAP48gL8M4K8D+NsA/j6AfwzgnwP41wD+PYD/DOC/AzhmAMcO4H81NijAwQEOCXBogMMCHC/A8QOcIMDhAY4IcMIAJwpw4gAnCXDSACcLcPIApwhwygCnCnDqAKcJcNoApwtw+gBnCHDGAGcKcOYAZwlw1gBnC3D2gOH/5TBngHMFOHeA8wQ4b4DzBTh/gAsEuGCACwW4cICLBLhogIsFuHiABLhEgEsGuFSASwe4TIDLBrhcgMsHuEKAKwa4UoArB7hKgKsGuFqAqwe4RoBrBrhWgGsHuE6A6wa4XoDrB7hBgBsGuFGAGwe4SYCbBrhZgJsHuEWAWwa4VYBbB7hNgNsGuF2A2we4Q4A7BrhTgDsHuEuAuwa4W4C7B7hHgHsGuFeAewe4T4D7BrhfgPsHeECABwZ4UIAHB3hIgIcGeFiAhwd4RIBHBnhUgEcHeEyAxwajBh0X4PEBnhCgAZ4Y4EkBnhzgyABHBXhKgKcGeFqApwd4RoBnBnhWgGcHeE6A5wZ4XoDnj/wfpR3gRQFeHOAlAV4a4GUBDgQYBBgGGAUYB5gEmAaYBZgHWARYBlgFWAfYBNgG2AXYBzg6wMsDvCLAKwO8KsCrA7wmwGsDxvtfrX9DgDcGeFOANwd4S4C3BnhbgLcHeEeAdwZ4V4B3B3hPgPcGeF+A9wf4QIAPBvhQgA8H+EiAjwb4WICPB/hEgE8G+FSATwf4TIDPBvhcgM8H+EKALwb4UoAvB/hKgK8G+FqArwf4RoBvBvhWgG8H+E6A7wb4XoDvB/hBgB8G+FGAHwf4SYCfBvhZgJ8H+EWAXwb4VYBfB/hNgN8G+F2A3wf4Q4A/BvhTgD8H+EuAvwb4W4C/B/hHgH8G+FeAfwf4T4D/BjgmwLEBjgtwUIiDQxwS4tAQh4U4XojjhzhBiMNDHBHihCFOFOLEIU4S4qQhThbi5CFOEeKUIU4V4tQhThPitCFOF+L0Ic4Q4owhzhTizCHOEuKsIc4W4uwhzhHinCHOFeLcIc4T4rwhzhfi/CEuEOKCIS4U4sIhLhLioiEuFuLiIRLiEiEuGeJSIS4d4jIhLhviciEuH+IKIa4Y4krhiP/bj1w1xNVCXD3ENUJcM8S1Qlw7xHVCXDfE9UJcP8QNQtwwxI1C3DjETULcNMTNQtw8xC1C3DLErULcOsRtQtw2xO1C3D7EHULcMcSdQtw5xF1C3DXE3ULcPcQ9QtwzxL1C3DvEfULcN8T9Qtw/xANCPDDEg0I8OMRDQjw0xMNCPDzEI0I8MsSjQjw6xGNCPDbE40I8PsQTQjTEE0M8KcSTQxwZ4qgQTwnx1BBPC/H0EM8I8cwQzwrx7BDPCfHcEM8L8fwQLwjxwhAvCvHiEC8J8dIQLwtxIMQgxDDEKMQ4xCTENMQsxDzEIsQyxCrEOsQmxDbELsQ+xNEhXh7iFSFeGeJVIV4d4jUhXhvidSFeH+INId4Y4k0h3hziLSHeGuJtId4e4h0hDnrRoXeFeHeI94R4b4j3hXh/iA+E+GCID4X4cIiPhPhoiI+F+HiIT4T4ZIhPhfh0iM+E+GyIz4X4fIgvhPhiiC+F+HKIr4T4aoivhfh6iG+E+GaIb4X4dojvhPhuiO+F+H6IH4T/Zy3zoxA/DvGTED8N8bMQPw/xixC/DAf7VYhfh/hNiN+G+F2I34f4Q4g/hvhTiD+H+EuIv4b4W4i/h/hHiH+G+FeIf4f4T4j/hjgmxLEhjvtvfiIcHOGQCIdGOCzC8SIcP8IJIhwe4YgIJ4xwoggnjnCSCCeNcLIIJ49wiginjHCqCKeOcJoIp41wuginj3CGCGeMcKYIZ45wlghnjXC2CGePcI4I54xwrgjnjnCeCOeNcL4I549wgQgXjHChCBeOcJEIF41wsQgXj5AIl4hwyQiXinDpCJeJcNkIl4tw+QhXiHDFCFeKcOUIV4lw1QhXi3D1CNeIcM0I14pw7QjXiXDdCNeLcP0IN4hwwwg3inDjCDeJcNMIN4tw8wi3iHDLCLeKcOsIt4lw2wi3i3D7CHeIcMcId4pw5wh3iXDXCHeLcPcI94hwzwj3inDvCPeJcN8I94tw/wgPiPDACA+K8OAID4nw0AgPi/DwCI+I8MgIj4rw6AiPifDYCI+L8PgIT4jQCE+M8KQIT45wZISjIjwlwlMjPC3C0yM8I8IzIzwrwrMjPCfCcyM8L8J/IrwgwgsjvCjCiyO8JMJLI7wswoEIgwjDCKMI4wiTCNMIswjzCIsIywirCOsImwjbCLsI+whHR3h5hFdEeGWEV0V4dYTXRHhthNdFeH2EN0R4Y4Q3RXhzhLdEeGuEt0V4e4R3RHhnhHdFeHeE90R4b4T3RXh/hA9E+GCED0X4cISPRPhohI9F+HiET0T4ZIRPRfh0hM9E+GyEz0X4fIQvRPhiNOT/7CUvR/hKhK9G+FqEr0f4RoRvRvhWhG9H+E6E70b4XoTvR/hBhB9G+FGEH0f4SYSfRvhZhJ9H+EWEX0b4VYRfR/hNhN9G+F2E30f4Q4Q/RvhThD9H+EuEv0b4W4S/R/hHhH9G+FeEf/8Pu38jHBPh2AjHRTgoxsExDolxaIzDYhwvxvFjnCDG4TGOiHHCGCeKceIYJ4lx0hgni3HyGKeIPxo0ZYxTxTh1jNPEOG2M08U4fYwzxDhjjDPFOHOMs8Q4a4yzxTh7jHPEOGeMc8U4d4zzxDhvjPPFOH+MC8S4YIwLxbhwjIvEuGiMi8W4eIzEuESMS8a4VIxLx7hMjMvGuFyMy8e4QowrxrhSjCvHuEqMq8a4Woyrx7hGjGvGuFaMa8e4TozrxrhejOvHuEGMG8a4UYwbx7hJjJvGuFmMm8e4RYxbxrhVjFvHuE2M28a4XYzbx7hDjDvGuFOMO8e4S4y7xrhbjLvHuEeMe8a4V4x7x7hPjPvGuF+M+8d4QIwHxnhQjAfHeEiMh8Z4WIyHx3hEjEfGeFSMR8d4TIzHxnhcjMfHeEKMxnhijCfFeHKMI2McFeMpMZ4a42kxnh7jGTGeGeNZMZ4d4zkxnhvjeTGeH+MFMV4Y40UxXhzjJTFeGuNlMQ7EGMQYxhjFGMeYxJjGmMWYx1jEWMZYxVjH2MTYxtjF2Mc4OsbLY7wixitjvCrGq2O8JsZrY7wuxutjvCHGG2O8KcabY7wlxltjvC3G22O8I8Y7Y7wrxrtjvCfGe2O8L8b7Y3wgxgdjfCjGh2N8JMZHY3wsxsdjfCLGJ2N8KsanY3wmxmdjfC7G52N8IcYXY3wpxpdjfCXGV2N8LcbXY3wjxjdjfCvGt2N8J8Z3Y3wvxvdj/CDGD2P8KMaPY/wkxk9j/CzGz2P8IsYvY/wqxq9j/CbGb2P8LsbvY/whxh9j/CnGn2P8JcZfY/wtxt9j/CPGP2P8K8a/Y/wnxn9jHBPj2BjHxTgowcEJDklwaILDEhwvwfETnCDB4QmOSHDCBCdKcOIEJ0lw0gQnS3DyBKdIcMoEp0pw6gSnSXDaBKdLcPoEZ0hwxgRnSnDmBGdJcNYEZ0tw9gTnSHDOBOdKcO4E50lw3gTnS3D+BBdIcMEEF0pw4QQXSXDRBBdLcPEESXCJBJdMcKkEl05wmQSXTXC5BJdPcIUEV0xwpQRXTnCVBFdNcLUEV09wjQTXTHCtBNdOcJ0E101wvQTXT3CDBDdMcKMEN05wkwQ3TXCzBDdPcIsEt0xwqwS3TnCbBLdNcLsEt09whwR3THCnBHdOcJcEd01wtwR3T3CPBPdMcK8E905wnwT3TXC/BPdP8IAED0zwoAQPTvCQBA9N8LAED0/wiASPTPCoBI9O8JgEj03wuASPT/CEBE3wxARPSvDkBEcmOCrBUxI8NcHTEjw9wTMSPDPBsxI8O8FzEjw3wfMSPD/BCxK8MMGLErw4wUsSvDTByxIcSDBIMEwwSjBOMEkwTTBLME+wSLBMsEqwTrBJsE2wS7BPcHSClyd4RYJXJnhVglcneE2C1yZ4XYLXJ3hDgjcmeFOCNyd4S4K3JnhbgrcneEeCdyZ4V4J3J3hPgvcmeF+C9yf4QIIPJvhQgg8n+EiCjyb4WIKPJ/hEgk8m+FSCTyf4TILPJvhcgs8n+EKCLyb4UoIvJ/hKgq8m+FqCryf4RoJvJvhWgm8n+E6C7yb4XoLvJ/hBgh8m+FGCHyf4SYKfJvhZgp8n+EWCXyb4VYJfJ/hNgt8m+F2C3yf4Q4I/JvhTgj8n+EuCvyb4W4K/J/hHgn8m+FeCfyf4T4L/JjgmwbEJjktwUIqDUxyS4tAUh6U4XorjpzhBisNTHJHihClOlOLEKU6S4qQpTpbi5ClOkeKUKU6V4tQpTpPitClOl+L0Kc6Q4owpzpTizCnOkuKsKc6W4uwpzpHinCnONf4g505xnhTnTXG+FOdPcYEUF0xxoUG4cIqLpLhoiouluHiKpLhEikumuFSKS6e4TIrLprhcisunuEKKK6a4Uoorp7hKiqumuFqKq6e4RoprprhWimunuE6K66a4Xorrp7hBihumuFGKG6e4SYqbprhZipunuEWKW6a4VYpbp7hNitumuF2K26e4Q4o7prhTijunuEuKu6a4W4q7p7hHinumuFeKe6e4T4r7prhfivuneECKB6Z4UIoHp3hIioemeFiKh6d4RIpHpnhUikeneEyKx6Z4XIrHp3hCiqZ4YoonpXhyiiNTHJXiKSmemuJpKZ6e4hkpnpniWSmeneI5KZ6b4nkpnp/iBSlemOJFKV6c4iUpXpriZSkOpBikGKYYpRinmKSYppilmKdYpFimWKVYp9ik2KbYpdinODrFy9MbvSLFK1O8KsWrU7wmxWtTvC7F61O8IcUbU7wpxZtTvCXFW1O8LcXbU7wjxTtTvCvFu1O8J8V7U7wvxftTfCDFB1N8KMWHU3wkxUdTfCzFx1N8IsUnU3wqxadTfCbFZ1N8LsXnU3whxRdTfCnFl1N8JcVXU3wtxddTfCPFN1N8K8W3U3wnxXdTfC/F91P8IMUPU/woxY9T/CTFT1P8LMXPU/wixS9T/CrFr1P8JsVvU/wuxe9T/CHFH1P8KcWfU/wlxV9T/C3F31P8I8U/U/wrxb9T/CfFf1Mck+LYFMelOCjDwRkOyXBohsMyHC/D8TOcIMPhGY7IcMIMJ8pw4gwnyXDSDCfLcPIMp8hwygynynDqDKfJcNoMp8tw+gxnyHDGDGfKcOYMZ8lw1gxny3D2DOfIcM4M58pw7gznyXDeDOfLcP4MF8hwwQwXynDhDBfJcNEMF8tw8QzJcIkMl8xwqQyXznCZDJfNcLkMl89whQxXzHClDFfOcJUMV81wtQxXz3CNDNfMcK0M185wnQzXzXC9DNfPcIMMN8xwoww3znCTDDfNcLMMN89wiwy3zHCrDLfOcJsMt81wuwy3z3CHDHfMcKcMd85wlwx3zXC3DHfPcI8M98xwr2yke2e4T4b7ZrhfhvtneECGB2Z4UIYHZ3hIhodmeFiGh2d4RIZHZnhUhkdneEyGx2Z4XIbHZ3hChmZ4YoYnZXhyhiMzHJXhKRmemuFpGZ6e4RkZnpnhWRmeneE5GZ6b4XkZnp/hBRlemOFFGV6c4SUZXprhZRkOZBhkGGYYZRhnmGSYZphlmGdYZFhmWGVYZ9hk2GbYZdhnODrDyzO8IsMrM7wqw6szvCbDazO8LsPrM7whwxszvCnDmzO8JcNbM7wtw9szvCPDOzO8K8O7M7wnw3szvC/D+zN8IMMHM3wow4czfCTDRzN8LMPHM3wiwyczfCrDpzN8JsNnM3wuw+czfCHDFzN8KcOXM3wlw1czfC3D1zN8I8M3M3wrw7czfCfDdzN8L8P3M/wgww8z/CjDjzP8JMNPM/wsw88z/CLDLzP8KsOvM/wmw28z/C7D7zP8IcMfM/wpw58z/CXDXzP8LcPfM/wjwz8z/CvDvzP8J8N/MxyT4dgMx2U4KMfBOQ7JcWiOw3IcL8fxc5wgx+E5jshxwhwnynHiHCfJcdIcJ8tx8hynyHHKHKfKceocp8lx2hyny3H6HGfIccYcZ8px5hxnyXHWHGfLcfYc58hxzhznynHuHOfJcd4c58tx/hwXyHHBHBfKceEcF8lx0RwXy3HxHMlxiRyXzHGpHJfOcZkcl81xuRyXz3GFHFfMcaUcV85xlRxXzXG1HFfPcY0c18xxrRzXznGdHNfNcb0c189xgxw3zHGjHDfOcZMcN81xsxw3z3GLHLfMcasct84ZPOx/PKrtctw+xx1y3DHHnXLcOcddctw1x91y3D3HPXLcM8e9ctw7x31y3DfH/XLcP8cDcjwwx4NyPDjHQ3I8NMfDcjw8xyNyPDLHo3I8Osdjcjw2x+NyPD7HE3I0xxNzPCnHk3McmeOoHE/J8dQcT8vx9BzPyPHMHM/K8ewcz8lx3Lix487L8fwcL8jxwhwvyvHiHC/J8dIcL8txIMcgxzDHKMc4xyTHNMcsxzzHIscyxyrHOscmxzbHLsc+x9E5Xp7jFTlemeNVOV6d4zU5XpvjdTlen+MNOd6Y40053pzjLTnemuNtOd6e4x053pnjXTneneM9Od6b43053p/jAzk+mONDOT6c4yM5PprjYzk+nuMTOT6Z41M5Pp3jMzk+m+NzOT6f4ws5vpjjSzm+nOMrOb6a42s5vp7jGzm+meNbOb6d4zs5vpvjezm+n+MHOX6Y40c5fpzjJzl+muNnOX6e4xc5fpnjVzl+neM3OX6b43c5fp/jDzn+mONPOf6c4y85/prjbzn+nuMfOf6Z4185/p3jPzn+m+OYHMf+xzTHQQUOLnBIgUMLHFbgeAWOX+AEBQ4vcESBExY4UYETFzhJgZMWOFmBkxc4RYFTFjhVgVMXOE2B0xY4XYHTFzhDgTMWOFOBMxc4S4GzFjhbgbMXOEeBcxY4V4FzFzhPgfMWOF+B8xe4QIELFrhQgQsXuEiBixa4WIGLF0iBSxS4ZIFLFbh0gcsUuGyByxW4fIErFLhigSsVuHKBqxS4aoGrFbh6gWsUuGaBaxW4doHrFLhugesVuH6BGxS4YYEbFbhxgZsUuGmBmxW4eYFbFLhlgVsVuHWB2xS4bYHbFbh9gTsUuGOBOxW4c4G7FLhrgbsVDP5fP3vPAvcqcO8C9ylw3wL3K3D/Ag8o8MACDyrw4AIPKfDQAg8r8PACjyjwyAKPKvDoAo8p8NgCjyvw+AJPKNACTyzwpAJPLnBkgaMKPKXAUws8rcDTCzyjwDMLPKvAsws8p8BzCzyvwPMLvKDACwu8qMCLC7ykwEsLvKzAgQKDAsMCowLjApMC0wKzAvMCiwLLAqsC6wKbAtsCuwL7AkcXeHmBVxR4ZYFXFXh1gdcUeG2B1xV4fYE3FHhjgTcVeHOBtxQMubXA2wq8vcA7CryzwLsKvLvAewq8t8D7Cry/wAcKfLDAhwp8uMBHCny0wMcKfLzAJwp8ssCnCny6wGcKfLbA5wp8vsAXCnyxwJcKfLnAVwp8tcDXCny9wDcKfLPAtwp8u8B3Cny3wPcKfL/ADwr8sMCPCvy4wE8K/LTAzwr8vMAvCvyywK8K/LrAbwr8tsDvCvy+wB8K/LHAnwr8ucBfCvy1wN8K/L3APwr8s8C/Cvy7wH8K/LfAMQWOLXBcgYNKHFzikBKHljisxPFKHL/ECUocXuKIEicscaISJy5xkhInLXGyEicvcYoSpyxxqhKnLnGaEqctcboSpy9xhhJnHIEzlThzibOUOGuJs5U4e4lzlDhniXOVOHeJ85Q4b4nzlTh/iQuUuGCJC5W4cImLlLhoiYuVuHiJlLhEiUuWuFSJS5e4TInLlrhcicuXuEKJK5a4Uokrl7hKiauWuFqJq5e4RolrlrhWiWuXuE6J65a4Xonrl7hBiRuWuFGJG5e4SYmblrhZiZuXuEWJW5a4VYlbl7hNiduWuF2J25e4Q4k7lrhTiTuXuEuJu5a4W4m7l7hHiXuWuFeJe//HYNCgQfuWuF+J+5d4QIkHlnhQiQeXeEiJh5Z4WImHl3hEiUeWeFSJR5d4TInHlnhciceXeEKJlnhiiSeVeHKJI0scVeIpJZ5a4mklnl7iGSWeWeJZJZ5d4jklnlvieSWeX+IFJV5Y4kUlXlziJSVeWuJlJQ6UGJQYlhiVGJeYlJiWmJWYl1iUWJZYlViX2JTYltiV2Jc4usTLS7yixCtLvKrEq0u8psRrS7yuxOtLvKHEG0u8qcSbS7yl/H//Fdxe4h0l3lniXSXeXeI9Jd5b4n0l3l/iAyU+WOJDJT5c4iMlPlriYyU+XuITJT5Z4lMlPl3iMyU+W+JzJT5f4guj8MUSXyrx5RJfKfHVEl8r8fUS3yjxzRLfKvHtEt8p8d0S3yvx/RI/KPHDEj8q8eMSPynx0xI/K/HzEr8o8csSvyrx6xK/KfHbEr8r8fsSfyjHjfvfuyw/l/hLib+W+FuJv5f4R4l/lvhXiX+X+E+J/5Y4psSxJY4rcVCFgyscUuHQCodVOF6F41c4QYXDKxxR4YQVTlThxBVOUuGkFU5W4eQVTlHhlBVOVeHUFU5T4bQVTlfh9BXOUOGMFc70X7xBgwbNUuGsFc5W4ewVzlHhnBXOVeHcFc5T4bwVzlfh/BUuUOGCFS5U4cIVLlLhohUuVuHiFVLhEhUu+V/+gwYNWrrCZSpctsLlKly+whUqXLHClSpcucJVKly1wtUqXL3CNSpcs8K1Kly7wnUqXLfC9Spcv8INKtywwo0q3LjCTSrctMLNKty8wi0q3LLCrSrcusJtKty2wu0q3L7CHSrcscKdKty5wl0q3LXC3SrcvcI9Ktyzwr0q3LvCfSrct8L9Kty/wgMqPLDCgyo8uMJDKjy0wsMqPLzCIyo8ssKjKjy6wmMqPLbC4yo8vsITKrTCEys8qcKTKxxZ4agKT6nw1ApPq/D0Cs+o8MwKz6rw7ArPqfDcCs+r8PwKL6jwwgovqvDiCi+p8NIKL6twoMKgwrDCqMK4wqTCtMKswrzCosKywqrCusKmwrbCrsK+wtEVXl7hFRVeWeFVFV5d4TUVXlvhdRVeX+ENFd5Y4U0V3lzhLRXeWuFtFd5e4R0V3lnhXRXeXeE9Fd5b4X0V3l/hAxU+WOFDFT5c4SMVPlrhYxU+XuETFT5Z4VMVPl3hMxU+W+FzFT5f4QsVvljhSxW+XOErFb5a4WsVvl7hGxW+WeFbFb5d4TsVvlvhexW+X+EHFX5Y4UcVflzhJxV+WuFnFX5e4RcVflnhVxV+XeE3FX5b4XcVfl/hDxX+WOFPFf5c4S8V/lrhbxX+XuEfFf5Z4V8V/l3hPxX+W+GYCsdWOK7CQTUOrnFIjUNrHFbjeDWOX+MENQ6vcUSNE9Y4UY0T1zhJjZPWOFmNk9c4RY1T1jhVjVPXOE2N09Y4XY3T1zhDjTPWOFONM9c4S42z1jhbjbPXOEeNc9Y4V41z1zhPjfPWOF+N89e4QI0L1rhQjQvXuEiNi9a4WI2L10iNS9S4ZI1L1bh0jcvUuGyNy9W4fI0r1LhijSvVuHKNq9S4ao2r1bh6jWvUuGaNa9W4do3r1LhujevVuH6NG9S4YY0b1bhxjZvUuGmNm9W4eY1b1LhljVvVuHWN29S4bY3b1bh9jTvUuGONO9W4c4271LhrjbvVuHuNe9S4Z4171bh3jfvUuG+N+9W4f40H1HhgjQfVeHCNh9R4aI2H1Xh4jUfUeGSNR9V4dI3H1HhsjcfVeHyNJ9RojSfWeFKNJ9c4ssZRNZ5S46k1nlbj6TWeUeOZNZ5V49k1nlPjuTWeV+P5NV5Q44U1XlTjxTVeUuOlNV5W40CNQY1hjVGNcY1JjWmNWY15jUWNZY1VjXWNTY1tjV2NfY2ja7y8xitqvLLGq2q8usZrary2xutqvL7GG2q8scabary5xltqvLXG22q8vcY7aryzxrtqvLvGe2q8t8b7ary/xgdqfLDGh2p8uMZHany0xsdqfLzGJ2p8ssanany6xmdqfLbG52p8vsYXanyxxpdqfLnGV2p8tcbXany9xjdqfLPGt2p8u8Z3any3xvdqfL/GD2r8sMaPavy4xk9q/LTGz2r8vMYvavyyxq9q/LrGb2r8tsbvavy+xh9q/LHGn2r8ucZfavy1xt9q/L3GP2r8s8a/avy7xn9q/LfGMTWOrXFcjYMaHNzgkAaHNjiswfEaHL/BCRoc3uCIBidscKIGJ25wkgYnbXCyBidvcIoGp2xwqganbnCaBqdtcLoGp29whgZnbHCmBmducJYGZ21wtgZnb3COBudscK4G525wngbnbXC+BudvcIEGF2xwoQYXbnCRBhdtcLEGF2+QBpdocMkGl2pw6QaXaXDZZsIjsyn///PRCg2u2OBKDa7c4CoNrtrgag2u3uAaDa7Z4FoNrt3gOg2u2+B6DcPXb3CDBjdscKMGN25wkwY3bXCzBjdvcIsGt2xwqwa3bnCbBrdtcLsGt29whwYHDcOdGty5wV0a3LXB3RrcvcE9Gtyzwb0a3LvBfRrct8H9Gty/wQMaPLDBgxo8uMFDGjy0wcMaPLzBIxo8ssGjGjy6wWMaPLbB4xo8vsETGrTBExs8qcGTGxzZ4KgGT2nw1AZPa/D0Bs9o8MwGz2rw7AbPafDcBs9r8PwGL2jwwgYvavDiBi9p8NIGL2twoMGgwbDBqMG4waTBdN7ErMG8waLBssGqwbrBpsG2wa7BvsHRDV7e4BUNXtngVQ1e3eA1DV7b4HUNXt/gDQ3e2OBNDd7c4C0N3trgbQ3e3uAdDd7Z4F0N3t3gPQ3e2+B9Dd7f4AMNPtjgQw0+3OAjDT7a4GMNPt7gEw0+2eBTDT7d4DMNPtvgcw0+3+ALDb7Y4EsNvtzgKw2+2uBrDb7e4BsNvtngWw2+3eA7Db7b4HsNvt/gBw1+2OBHDX7c4CcNftrgZw1+3uAXDX7Z4FcNft3gNw1+2+B3DX7f4A8N/tjgTw3+3OAvDf7a4G8N/t7gHw3+2eBfDf7d4D8N/tvgmAbHNjjuv5pscXCLQ1oc2uKwFsdrcfwWJ2hxeIsjWpywxYlanLjFSVqctMXJWpy8xSlanLLFqVqcusVpWpx2gkFO1+L0Lc7Q4owtztTizC3O0uKsLc7W4uwtztHinC3O1eLcLc7T4rwtztfi/C0u0OKCLS7U4sItLtLioi0u1uLiLdLiEi0u2eJSLS7d4jItLtvici0u3+IKLa7Y4kotrtziKi2u2uJqLa7e4hotrtniWi2u3eI6La7b4notrt/iBi1u2OJGLW7c4iYtbtriZi1u3uIWLW7Z4lYtbt3iNi1u2+J2LW7f4g4t7tjiTi3u3OIuLe7a4m4t7t7iHi3u2eJeLe7d4j4t7tvifi3u3+IBLR7Y4kEtHtziIS0e2uJhLR7e4hEtHtniUS0e3eIxLR7b4nEtHt/iCS3a4oktntTiyS2ObHFUi6e0eGqLp7V4eotntHhmi2e1eHaL57R4bovntXh+ixe0eGGLF7V4cYuXtHhpi5e1ONBi0GLYYtRi3GLSYtpi1mLeYtFi2WLVYt1i02LbYtdi3+LoFi9v8YoWr2zxqhavbvGaFq9t8boWr2/xhhZvbPGmFm9u8ZYWb23xthZvb/GOFu9s8a4W727xnhbvbfG+Fu9v8YEWH2zxoRYfbvGRFh9t8bEWH2/xiRafbPGpFp9u8ZkWn23xuRafb/GFFl9s8aUWX27xlRZfbfG1Fl9v8Y0W32zxrRbfbvGdFt9t8b0W32/xgxY/bPGjlv9ksZ+0+GmLn7X4eYtftPhli1+1w/y6xW9a/LbF71r8vsUfWvyxxZ9a/LnFX1r8tcXfWvy9xT9a/LPFv1r8u8V/Wvy3xTEtjm1xXIuDOhzc4ZAOh3Y4rMPxOhy/wwk6HN7hiA4n7HCiDifucJIOJ+1wsg4n73CKDqfscKoOp+5wmg6n7XC6DqfvcIYOZ+xwpg5n7nCWDmftcLYOZ+9wjg7n7HCuDufucJ4O5+1wvg7n73CBDhfscKEOF+5wkQ4X7XCxDhfvkA6X6HDJDpfqcOnu//XUl+tw+Q5X6Bj031hX6nDlDlfpcNUOV+tw9Q7X6HDNDtfqcO0O1+lw3Q7X63D9DjfocMMON+pw4w436XDTDjfrcPMOt+hwyw636nDrDrfpcNsOt+tw+w536HDHDnfqcOcOd+lw1w5363D3DvfocM8O9+pw7w736XDfDvfrcP8OD+jwwA4P6vDgDg/p8NAOD+vw8A6P6PDIDo/q8OgOj+nw2A6P6/D4Dk/o0A5P7PCkDk/ucGSHozo8pcNTOzytw9M7PKPDMzs8q8OzOzynw3M7PK/D8zu8oMMLO7yow4s7vKTDSzu8rMOBDoMOww6jDuMOkw7TDrMO8w6LDssOqw7rDpsO2w67DvsOR3d4eYdXdHhlh1d1eHWH13R4bYfXdXh9hzd0eGOHN3V4c4e3dHhrh7d1eHuHd3R4Z4d3dXh3N/j/vvu6r8P7O3ygwwc7fKjDhzt8pMNHO3ysw8c7fKLDJzt8qsOnO3ymw2c7fK7D5zt8ocMXO3ypw5c7fKXDVzt8rcPXO3yjwzc7fKvDtzt8p8N3O3yvw/c7/KDDDzv8qMOPO/ykw087/KzDzzv8osMvO/yqw687/KbDbzv8rsPvO/yhwx87/KnDnzv8pcNfO/ytw987/KPDPzv8q8O/O/ynw387HNPh2A7HdTiox8E9DulxaI/Dehyvx/F7nKDH4T2O6HHCHifqceIeJ+lx0h4n63HyHqfoccoep+px6h6n6XHaHqfrcfoeZ+hxxh5n6nHmHmfpcdYeZ/uf+HP0OGePc/U4d4/z9Dhvj/P1OH+PC/S4YI8L9bhwj4v0uGiPi/W4eI/0uESPS/a4VI9L97hMj8v2uFyPy/e4Qo8r9rhSjyv3uEqPq/a4Wo+r97hGj2v2uFaPa/e4To/r9rhej+v3uEGPG/a4UY8b97hJj5v2uFmPm/e4RY9b9rhVj1v3uE2P2/a4XY/b97hDjzv2uFOPO/e4S4+79rhbj7v3uEePe/a4V49797hPj/v2uF+P+/d4QI8H9nhQjwf3eEiPh/Z4WI+H93hEj0f2eFSPR/d4TI/H9nhcj8f3eEKP9nhijyf1eHKPI3sc1eMpPZ7a42k9nt7jGT2e2eNZPZ7d4zk9ntvjeT2e3+MFPV7Y40U9XtzjJT1e2uNlPQ70GPQY9hj1GPeY9Jj2mPWY91j0WPZY9Vj32PTY9tj12Pc4usfL/4fPlT1e1ePVPV7T47U9Xtfj9T3e0OONPd7U48093tLjrT3e1uPtPd7R45093tXj3T3e0+O9Pd7X4/09PtDjgz0+1OPDPT7S46M9Ptbj4z0+0eOTPT7V49M9PtPjsz0+1+PzPb7Q44s9vtTjyz2+0uOrPb7W4+s9vtHjmz2+1ePbPb7T47s9vtfj+z1+0OOHPX7U48c9ftLjpz1+1uPnPX7R45c9ftXj1z1+0+O3PX7X4/c9/tDjjz3+1OPPPf7S4689/tbj7z3+0eOfPf7V4989/tPjvz2O6XFsj+N6HDQaB4/GIaNx6P9H1DsHDX7D69vPtotud2vb5lXbtm3bvqqtbVtfG09t27Zte9/p75w5b/5PMp/Mfc0kmdx3Ahwa4LAAhwc4IsDxAhwZ4PgBjgpwdIATBDhhgBMFOHGAkwQ4aYCTBTh5gFMEOGWAUwU4dYDTBDhtgNMFOH2AMwQ4Y4AzBThzgLME/5dTP3b2AOcIcM4A5wpw7gDnCXDeAOcLcP4AFwhwwQAXCnDhAAlwkQAXDXCxABcPGOe/upYMcKkAlw5wmQCXDXC5AJcPcIUAVwxwpQBXDnCVAFcNcLUAVw9wjQDXDHCtANcOcJ0A1w1wvQDXD3CDADcMcKMANw5wkwA3DXCzADcPcIsAtwxwqwC3DnCbALcNcLsAtw9whwB3DHCnAHcOcJcAdw1wtwB3D3CPAPcMcK8A9w5wnwD3DXC/APcP8IAADwzwoAAPDvCQAA8N8LAADw/wiACPDPCoAI8O8JgADfDYAI8L8PgATwjwxADHBHhSgCcHeEqApwZ4WoCnB3hGgGcGeFaAZwd4ToDnBnhegOcHeEGAFwZ4UYAXB3hJgJcGeFmAlwd4RYBXBnhVgFcHeE2A1wZ4XYDXB3hDgDcGeFOANwd4S4BBgGGAUYBxgEmAaYBZgHmARYBlgFWAdYBNgG2AXYB9gIMB3hrgbQHeHuAdAd4Z4F0B3h3gPQHeG+B9Ad4f4AMBPhjgQwE+HOAjAT4a4GMBPh7gEwE+GeBTAT4d4DMBPhvgcwE+H+ALAb4Y4EsBvhzgKwG+GuBrAb4e4BsBvhngWwG+HeA7Ab4b4HsBvh/gBwF+GOBHAX4c4CcBfhrgZwF+HuAXAX4Z4FcBfh3gNwF+G+B3AX4f4A8B/hjgTwH+HOAvAf4a4G8B/h7gHwH+GeBfAf4d4D8B/vsfcwEOhDgkxHFCHDfEoSEOC3F4iCNCHC/EkSGOH+KoEEeHOEGIE4Y4UYgThzhJiJOGOFmIk4c4RYhThjhViFOHOE2I04Y4XYjThzhDiDOGOFOIM4c4S4izhjhbiLOH7PHfvn3OEOcKce4Q5wlx3hDnC3H+EBcIccEQFwpx4RAJcZEQFw1xsRAXD3GJEJcMcakQlw5xmRCXDXG5EJcPcYUQVwxxpRBXDnGVEFcNcbUQVw9xjRDXDHGtENcOcZ0Q1w1xvRDXD3GDEDcMcaMQNw5xkxA3DXGzEDcPcYsQtwxxqxC3DnGbELcNcbsQtw9xhxB3DHGnEHcOcZcQdw1xtxB3D3GPEPcMca8Q9w5xnxD3DXG/EPcP8YAQDwzxoBAPDvGQEA8N8bAQDw/xiBCPDPGoEI8O8ZgQDfHYEI8L8fgQTwjxxBDHhHhSiCeHeEqIp4Z4Woinh3hGiGeGeFaIZ4d4TojnhnheiOeHeEGIF4Z4UYgXh3hJiJeGeFmIl4d4RYhXhnhViFeHeE2I14Z4XYjXh3hDiDeGeFOIN4d4S4hBiGGIUYhxiEmIaYhZiHmIRYhliFWIdYhNiG2IXYh9iIMh3hribSHeHuIdId4Z4l0h3h3iPSHeG+J9Id4f4gMhPhjiQyE+HOIjIT4a4mMhPh7iEyE+GeJT4YBPh/hMiM+G+FyIz4f4QogvhvhSiC+H+EqIr4b4Woivh/hGiG+G+FaIb4f4TojvhvheiO+H+EGIH4b4UYgfh/hJiJ+G+FmIn4f4RYhfhvhViF+H+E2I34b4XYjfh/hDiD+G+FOIP4f4S4i/hvhbiL+H+EeIf4b4V4h/h/hPiP+GODbEgQiHRDhOhONGODTCYREOj3BEhONFODLC8SMcFeHoCCeIcMIIJ4pw4ggniXDSCCeLcPIIp4hwygininDqCKeJcNoIp4tw+ghniHDGCGeKcOYIZ4lw1ghni3D2COeIcM4I54pw7gjniXDeCOeLcP4IF4hwwQgXinDhCIlwkQgXjXCxCBePcIkIl4xwqQiXjnCZCJeNcLkIl49whQhXjHClCFeOcJUIV41wtQhXj3CNCNeMcK0I145wnQjXjXC9CNePcIMIN4xwowg3jnCTCDeNcLMIN49wiwi3jHCrCLeOcJsIt41wuwi3j3CHCHeMcKcId45wlwh3jXC3CHcfO9Y9Itwzwr0i3DvCfSLcN8L9Itw/wgMiPDDCgyI8OMJDIjw0wsMiPDzCIyI8MsKjIjw6wmMiNMJjIzwuwuMjPCHCEyMcE+FJEZ4c4SkRnhrhaRGeHuEZEZ4Z4VkRnh3hORGeG+F5EZ4f4QURXhjhRRFeHOElEV4a4WURXh7hFRFeGeFVEV4d4TURXhvhdRFeH+ENEd4Y4U0R3hzhLREGEYYRRhHGESYRphFmEeYRFhGWEVYR1hE2EbYRdhH2EQ5GeGuEt0V4e4R3RHhnhHdFeHeE90R4b4T3RXh/hA9E+GCED0X4cISPRPhohI9F+HiET0T4ZIRPRfh0hM9E+GyEz0X4fIQvRPhihC9F+HKEr0T4aoSvRfh6hG9E+GaEb0X4doTvRPju/zL2foQfRPhhhB9F+HGEn0T4aYSfRfh5hF9E+GWEX0X4dYTfRPhthN9F+H2EP0T4Y4Q/RfhzhL9E+GuEv0X4e4R/RPhnhH9F+HeE/0T4b4RjIxyIcUiM48Q4boxDYxwW4/AYR8Q4XowjYxw/xlExjo5xgoGBgf/6TRTjxDFOEjNm0hgni3HyGKeIccoYp4px6pghA/9z9eJ0MU4f4wwxzhjjTDHOHOMsMc4a42wxzh7jHDHOGeNcMc4d4zwxzhvjfDHOH+MCMS4Y40IxLhwjMS4S46IxLhbj4jEuEeOSMS4V49IxLhPjsjEuF+PyMa4Q44oxrhTjyjGuEuOqMa4W4+oxrhHjmjGuFePaMa4T47oxrhfj+jFuEOOGMW4U48YxbhLjpjFuFuPmMW4R45YxbhXj1jFuE+O2MW4X4/Yx7hDjjjHuFOPOMe4S464x7hbj7jHuEeOeMe4V494x7hPjvjHuF+P+MR4Q44ExHhTjwTEeEuOhMR4W4+ExHhHjkTEeFePRMR4TozEeG+Nx8f/8l/BfOzHGMTGeFOPJMZ4S46kxnhbj6TGeEeOZMZ4V49nxcM+J8dwYz4vx/BgviPHCGC+K8eIYL4nx0hgvi/HyGK+I8coYr4rx6hivifHaGK+L8foYb4jxxhhvivHmGG+JMfhPfwMDA1GMcYxJjGmMWYx5jEWMZYxVjHWMTYxtjF2MfYyDMd4a420x3h7jHTHeGeNdMd4d4z0x3hvjfTHeH+MDMT4Y40MxPhzjIzE+GuNjMT4e4xMxPhnjUzE+HeMzMT4b43MxPh/jCzG+GONLMb4c4ysxvhrjazG+HuMbMb4Z41sxvh3jOzG+G+N7Mb4f4wcxfhjjRzF+HOMnMX4a42cxfh7jFzF+GeNXMX4d4zcxfhvjdzF+H+MPMf4Y408x/hzjLzH+GuNvMf4e4x8x/hnjXzH+HeM/Mf4b49ihOJDgkATHSXDcBIcmOCzB4QmOSHC8BEcmOH6CoxIcneAECU6Y4EQJTpzgJAlOmuBkCU6e4BQJTpngVAlOneA0CU6b4HQJTp/gDAnOmOBMCc6c4CwJzprgbAnOnuAcCc6Z4FwJzp3gPAnOm+B8Cc6f4AIJLpjgQgkunCAJLpLgogkulnDs4gkukeCSCS6V4NIJLpPgsgkul+DyCa6Q4IoJrpTgygmukuCqCa6W4OoJrpHgmgmuleDaCa6T4LoJrpfg+glukOCGCW6U4MYJbpLgpgluluDmCW6R4JYJbpXg1gluk+C2CW6X4PYJ7pDgjgnulODOCe6S4K4J7pbg7gnukeCeCe6V4N4J7pPgvgnul+D+CR6Q4IEJHpTgwQkekuChCR6W4OEJHpHgkQkeleDRCR6ToAkem+BxCR6f4AkJnpjgmARPSvDkBE9J8NQET0vw9ATPSPDMBM9K8OwEz0nw3ATPS/D8BC9I8MIEL0rw4gQvSfDSBC9L8PIEr0jwygSvSvDqBK9J8NoEr0vw+gRvSPDGBG9K8OYEb0kwSDBMMEowTjBJGPu/sYPmCRYJlglWCdYJNgm2CXYJ9gkOJnhrgrcleHuCdyR4Z4J3JXh3gvckeG+C9yV4f4IPJPhggg8l+HCCjyT4aIKPJfh4gk8k+GSCTyX4dILPJPhsgs8l+HyCLyT4YoIvJfhygq8k+GqCryX4eoJvJPhmgm8l+HaC7yT4boLvJfh+gh8k+GGCHyX4cYKfjD3BTxP8LMHPE/wiwS8T/CrBrxP8JsFvE/wuwe8T/CHBHxP8KcGfE/wlwV8T/C3B3xP8I8E/E/wrwb8T/CfBfxMcm+BAikNSHCfFcVMcmuKwFIenOCLF8VIcmeL4KY5KcXSKE6Q4YYoTpThxipOkOGmKk6U4eYpTpDhlilOlOHWK06Q4bYrTpTh9ijOkOGOKM6U4c4qzpDhrirOlOHuKc6Q4Z4pzpTh3ivOkOG+K86U4f4oLpLhgiguluHCKpLhIioumuFiKi6e4RIpLprhUikunuEyKy6a4XIrLp7hCiiumuFKKK6cMOTHFVVNcLcXVU1wjxTVTXCvFtVNcJ8V1U1wvxfVT3CDFDVPcKMWNU9wkxU1T3CzFzVPcIsUtU9wqxa1T3CbFbVPcLsXtU9whxR1T3CnFnVPcJcVdU9wtxd1T3CPFPVPcK8W9U9wnxX1T3C/F/VM8IMUDUzwoxYNTPCTFQ1M8LMXDUzwixSNTPCrFo1M8JkVTPDbF41I8PsUTUvyv7jEpnpTiySmekuKpKZ6W4ukpnpHimSmeleLZKZ6T4rkpnpfi+SlekOKFKV6U4sUpXpLipSleluLlKV6R4pUpXpXi1Slek+K1KV6X4vUp3pDijSnelOLN6T6jb0kxSDFMMUoxTjFJMU0xSzFPsUixTLFKsU6xSbFNsUuxT3EwxVtTvC3F21O8I8U7U7wrxbtTvCfFe1O8L8X7U3wgxQdTfCjFh1N8JMVHU3wsxcdTfCLFJ1N8KsWnU3wmxWdTfC7F51N8IcUXU3wpxZdTfCXFV1N8LcXXU3wjxTdTfCvFt1N8J8V3U3wvxfdT/CDFD1P8KMWPU/wkxU9T/CzFz1P8IsUvU/wqxa9T/CbFb1P8LsXvU/whxR9T/CnFn1P8JcVfU/wtxd9T/CPFP1P8K8W/U/wnxX9THJviQIZDMhwnw3EzHJrhsAyHZzgiw/EyHJnh+BmOynB0hhNkOGGGE2U4cYaTZDhphpNlOHmGU2Q4ZYZTZTh1htNkOG2G02U4fYYzZDhjhjNlOHOGs2Q4a4azZTh7hnNkOGeGc2U4d4bzZDhvhvNlOH+GC2SMWTDDhTJcOEMyXCTDRTNcLMPFM1wiwyUzXCrDpTNcJsNlM1wuw+UzXCHDFTNcKcOVM1wlw1UzXC3D1TNcI8M1M1wrw7UzXCfDdTNcL8P1M9wgY8iGGW6U4cYZbpLhphluluHmGW6R4ZYZbpXh1hluk+G2GW6X4fYZ7pDhjhnulOHOGe6S4a4Z7pbh7hnukeGeGe6V4d4Z7pPhvhnul+H+GR6Q4YEZHpThwRkekuGhGR6W4eEZHpHhkRkeleHRGR6ToRkem+FxGR6f4QkZnpjhmAxPyvDkDE/J8NQMT8vw9AzPyPDMDM/K8OwMz8nw3AzPy/D8DC/I8MIML8rw4gwvyfDSDC/L8PIMr8jwygyvyvDqDK/J8NoMr8vw+gxvyPDGDG/K8OYMb8kwyDDMMMowzjDJMM0wyzDPsMiwzLDKsM6wybDNsMuwz3Aww1szvC3D2zO8I8M7M7wrw7szvCfDezO8L8P7M3wgwwczfCjDhzN8JMNHM3wsw8czfCLDJzN8KsOnM3wmw2czfC7D5zN8IcMXM3wpw5czfCXDVzN8LcPXM3wjwzczfCvDtzN8J8N3M3wvw/cz/CDDDzP8KMOPM/wkw08z/CzDzzP8IsMvM/wqw68z/CbDbzP8LsPvM/whwx8z/CnDnzP8JcNfM/wtw98z/CPDPzP8K8O/M/wnw38zHJvhQI5Dchwnx3FzHJrjsByH5zgix/FyHJnj+DmOynF0jhPkOGGOE+U4cY6T5DhpjpPlOHmOU+Q4ZY5T5Th1zrTzDAw4bY7T5Th9jjPkOGOOM+U4c46z5DhrjrPlOHuOc+Q4Z45z5Th3jvPkOG+O8+U4f44L5LhgjgvluHCO5LhIjovmuFiOi+e4RI5L5rhUjkvnuEyOy+a4XI7L57hCjivmuFKOK+e4So6r5rhajqvnuEaOa+a4Vo5r57hOjuvmuF6O6+e4QY4b5rhRjhvnuEmOm+a4WY6b57hFjlvmuFWOW+e4TY7b5rhdjtvnuEOOO+a4U44757hLjrvmuFuOu+e4R4575rhXjnvnuE+O++a4X47753hAjgfmeFCOB+d4SI6H5nhYjofneESOR+Z4VI5H53hMjuZ4bI7H5Xh8jifkeGKOY3I8KceTczwlx1NzPC3H03M8I8czczwrx7NzPCfHc3M8L8fzc7wgxwtzvCjHi3O8JMdLc7wsx8tzvCLHK3O8Kserc7wmx2tzvC7H63O8Iccbc7wpx5tzvCXHIMcwxyjHOMckxzTHLMc8xyLHMscqxzrHJsc2xy7HPsfBHG/N8bYcb8/xjhzvzPGuHO/O8Z4c783xvhzvz/GBHB/M8aEcH87xkRwfzfGxHB/P8Ykcn8zxqRyfzvGZHJ/N8bkcn8/xhRxfzPGlHF/O8ZUcX83xtRxfz/GNHN/M8a0c387H+E6O7+b4Xo7v5/hBjh/m+FGOH+f4SY6f5vhZjp/n+EWOX+b4VY5f5/hNjt/m+F2O3+f4Q44/5vhTjj/n+EuOv+b4W46/5/hHjn/m+FeOf+f4T47/5jg2x4EChxQ4ToHjFji0wGEFDi9wRIHjFTiywPELHFXg6AInKHDCAicqcOICJylw0gInK3DyAqcocMoCpypw6gKnKXDaAqcrcPoCZyhwxgJnKnDmAmcpcNYCZytw9gLnKHDOAucqcO4C5ylw3gLnK3D+AhcocMECFypw4QIpcJECFx07duwJBS5e4BIFLlngUgUuXeAyBS5b4HIFLl/gCgWuWOBKBa5c4CoFrlrgagWuXuAaBa5Z4FoFrl3gOgWuW+B6Ba5f4AYFbljgRgVuXOAmBW5a4GYFbl7gFgVuWeBWBW5d4DYFblvgdgVuX+AOBe5Y4E4F7lzgLgXuWuBuBe5e4B4F7lngXgXuXeCYgYGBfQvcr8D9CzygwAMLPKjAgws8pMBDCzyswMMLPKLAIws8qsCjCzymQAs8tsDjCjy+wP/W6sT/xi7wpAJPLvCUAk8t8LQCTy/wjALPLPCsAs8u8JwCzy3wvALPL/CCAi8s8KICLy7wkgIvLfCyAi8v8IoCryzwqgKvLvCaAq8t8LoCry/whgJvLEb839u8WwaGGBQYFhgVGBeYFJgWmBWYF1gUWBZYFVgX2BTYFtgV2Bc4WOCtBd5W4O0F3lHgnQXeVeDdBd5T4L0F3lfg/QU+UOCDBT5U4MMFPlLgowU+VuDjBT5R4JMFPlXg0wU+U+CzBT5X4PMFvlDgiwW+VODLBb5S4KsFvlbg6wW+UeCbBb5V4NsFvlPguwW+V+D7BX5Q4IcFflTgxwV+UuCnBX5W4OcFflHglwV+VeDXBX5T4LcFflfg9wX+UOCPBf5U4M8F/lLgrwX+VuDvBf5R4J8F/lXg3wX+U+C/BY4tcKDEISWOU+K4JQ4tcViJw0scUeJ4JY4scfwSR5U4usQJSpywxIlKnLjESUqctMTJSpy8xClKnLLEqUqcusRpSpy2xOlKnL78/z3aM5U4c4mzlDhribOVOHuJc5Q4Z4lzlTh3ifOUOG+J85U4f4kLlLhgiQuVuHCJlLhIiYuWuFiJi5e4RIlLlrhUiUuXuEyJy5a4XInLl7hCiSuWuFKJK5e4SomrlrhaiauXuEaJa5a4Volrl7hOieuWuF6J65e4QYkblrhRiRuXuEmJm5a4WYmbl7hFiVuWuFWJW5e4TYnblrhdiduXuEOJO5a4U4k7l7hLibuWuFuJu5e4R4l7lrhXiXuXuE+J+5a4X4n7l3hAiQeWeFCJB5d4SImHlnhYiYeXeESJR5Z4VIlHl3hMiZZ4bInHlXh8iSeUeGKJY0o8qcSTSzylxFNLPK3E00s8o8QzSzyrxLNLPKfEc0s8r8TzS7ygxAtLvKjEi0u8pMRLS7ysxMtLvKLEK0u8qsSrS7ymxGtLvK7E60u8ocQbS7ypxJtLvKXEoMSwxKjEuMSkxLTErMS8xKLEssSqxLrEpsS2xK7EvsTBEm8t8bYSby/xjhLvLPGuEu8u8Z4S7y3xvhLvL/GBEh8s8aESHy7xkRIfLfGxEh8v8YkSnyzxqRKfLvGZEp8t8bkSny/xhRJfLPGlEl8u8ZUSXy3xtRJfL/GNEt8s8a0S3y7xnRLfLfG9Et8v8YMSPyzxoxI/LvGTEj8t8bMSPy/xixK/LPGrEr8u8ZsSvy3xuxK/L/GHEn8s8acSfy7xlxJ/LfG3En8v8Y8S/yzxrxL/LvGfEv8tcWyJAxUOqXCcCsetcGiFwyocXuGICsercGSF41c4qhru6AonqHDCCieqcOIKJ6lw0gonq3DyCqeocMoKp6pw6gqnqXDaCqercPoKZ6hwxgpnqnDmCmepcNYKZ6tw9v+df84K56pw7grnqXDeCuercP4KF6hwwQoXqnDhCqlwkQoXrXCxChevcIkKl6xwqQqXrnCZCpetcLkKl69whQpXrHClCleucJUKV61wtQpXr3CNCtescK0K165wnQrXrXC9CtevcIMKN6xwowo3rnCTCjetcLMKN69wiwq3rHCrCreucJsKt61wuwq3r3CHCnescKcKd65wlwp3rXC3CnevcI8K96xwrwr3rnCfCvetcL8K96/wgAoPrPCgCg+u8JAKD63wsAoPr/CICo+s8KgKj67wmAqt8NgKj6vw+ApPqPDECsdUeFKFJ1d4SoWnVnhahadXeEaFZ1Z4VoVnV3hOhedWeF6F51d4QYUXVnhRhRdXeEmFl1Z4WcXAf9q6osIrK7yqwqsrvKbCayu8rsLrK7yhwhsrvKnCmyu8pcKgwrDCqMK4wqTCtMKswrzCosKywqrCusKmwrbCrsK+wsEKb63wtgpvr/COCu+s8K4K767wngrvrfC+Cu+v8IEKH6zwoQofrvCRCh+t8LEKH6/wiQqfrPCpCp+u8JkKn63wuQqfr/CFCl+s8KUKX67wlQpfrfC1Cl+v8I0K36zwrQrfrvCdCt+t8L0K36/wgwo/rPCjCj+u8JMKP63wswo/r/CLCr+s8KsKv67wmwq/rfC7Cr+v8IcKf6zwpwp/rvCXCn+t8LcKf6/wjwr/rPCvCv+u8J8K//2P9wEcqHFIjePUOG6NQ2scVuPwGkfUOF6NI2scv8ZRNY6ucYIaJ6xxohonrnGSGietcbIaJ69xihqnrHGqGqeucZoap61xuhqnr3GGGmescaYaZ65xlhpnrXG2GmevcY4a56xxrhrnrnGeGuetcb4a569xgRoXrHGhGheukRoXqXHRGhercfEal6hxyRqXqnHpGpepcdkal6tx+RpXqHHFGleqceUaV6lx1RpXq3H1Gteocc0a16px7RrXqXHdGtercf0aN6hxwxo3qnHjGjepcdMaN6tx8xq3qHHLGreqcesat6lx2xq3q3H7Gneocccad6px5xp3qXHXGnercfca96hxzxr3qnHvGvepcd8a96tx/xoPqPHAGg+q8eAaD6nx0BoPq/HwGo+o8cgaj6rx6BqPqdEaj63xuBqPr/GEGk+scUyNJ9V4co2n1HhqjafVeHqNZ9R4Zo1n1Xh2jefUeG6N59V4fo0X1HhhjRfVeHGNl9R4aY2X1Xh5jVfUeGWNV9V4dY3X1HhtjdfVeH2NN9R4Y4031XhzjbfUGNQY1hjVGNeY1JjWmNWY11jUWNZY1VjX2NTY1tjV2Nc4WOOtNd5W4+013lHjnTXeVePdNd5T47013lfj/TU+UOODNT5U48M1PlLjozU+VuPjNT5R45M1PlXj0zU+U+Oz0wwZ+I+d52t8ocYXa3ypxpdrfKXGV2t8rcbXa3yjxjdrfKvGt2t8p8Z3a3yvxvdr/KDGD2v8qMaPa/ykxk9r/KzGz2v8osYva/yqxq9r/KbGb2v8rsbva/yhxh9r/KnGn2v8pcZfa/ytxt9r/KPGP2v8q8a/a/ynxn9rHFvjQINDGhynwXEbHNrgsAaHNziiwfEaHNng+A2OanB0gxM0OGGDEzU4cYOTNDhpg5M1OHmDUzQ4ZYNTNTh1g9M0OG2D0zU4fYMzNDhjgzM1OHODszQ4a4OzNTh7g3M0OGeDczU4d4PzNDhvg/M1OH+DCzS4YIMLNbhwgzS4SIOLNrhYg4s3uESDSza4VINLN7hMg8s2uFyDyze4QoMrNrhSgys3uEqDqza4WoOrN7hGg2s2uFaDaze4ToPrNrheg+s3uEGDGza4UYMbN7hJg5s2uFmDmze4RYNbNrhVg1s3uE2D2za4XYPbN7hDgzs2uFODOze4S4O7Nrhbg7s3uEeDeza4V4N7N7hPg/s2uF+D+zd4QIMHNnhQgwc3eEiDhzZ4WIOHN3hEg0c2eFSDRzd4TIM2eGyDxzV4fIMnNHhig2MaPKnBkxs8pcFTGzytwdMbPKPBMxs8q8GzGzynwXMbPK/B8xu8oMELG7yowYsbvKTBSxu8rMHLG7yiwSsbvKrBqxu8psFrG7yuwesbvKHBGxu8qcGbGwZOHBgwaDBsMGowbjBpMG0wazBvsGiwbLBqsG6wabBtsGuwb3CwwVsbvK3B2xu8o8E7G7yrwbsbvKfBexu8r8H7G3ygwQcbfKjBhxt8pMFHG3yswccbfKLBJxt8qsGnG3ymwWcbfK7B5xt8ocEXG3ypwZcbfKXBVxt8rcHXG3yjwTcbfKvBtxt8p8F3G3yvwfcb/KDBDxv8qMGPG/ykwU8b/KzBzxv8osEvG/yqwa8b/KbBbxv8rsHvG/yhwR8b/KnBnxv8pcFfG/ytwd8b/KPBPxv8q8G/G/ynwX8bHNvgQItDWhynxXFbHNrisBaHt//Pk/z/zukjWxy/xVEtjm5xghYnbHGiFiducZIWJ21xshYnb3GKFqdscaoWp25xmhanbXG6FqdvcYYWZ2xxphZnbnGWFmdtcbYWZ29xjhbnbHGuFuducZ4W521xvhbnb3GBFhdscaEWF26RFhdpcdEWF2tx8RaXaHHJFpdqcekWl2lx2RaXa3H5FldoccUWV2px5RZXaXHVFldrcfUW12hxzRbXanHtFtdpcd0W12tx/RY3aHHDFjdqceMWN2lx0xY3a3HzFrdoccsWt2px6xa3aXHbFrdrcfsWd2hxxxZ3anHnFndpcdcWd2tx9xb3aHHEwMDAXi3u3eI+Le7b4n4t7t/iAS0e2OJBLR7cDhk4pMVDWzysxcNbPKLFI1s8qsWjWzymRVs8tsXjWjy+xRNaPLHFMe3IgZNaPLnFU1o8tcXTWjy9xTNaPLPFs1o8u8VzWjy3xfNaPL/FC1q8sMWLWry4xUtavLTFy1q8vMUrWryyxatavLrFa1q8tsXrWry+xRtavLHFm1q8ucVbWgxaDFuMWoxbTFpMW8xazFssWixbrFqsW2xabFvsWuxbHGzx1hZva/H2Fu9o8c4W72rx7hbvafHeFu9r8f4WH2jxwRYfavHhFh9p8dEWH2vx8RafaPHJFp9q8ekWn2nx2Rafa/H5Fl9o8cUWX2rx5RZfafHVFl9r8fUW32jxzRbfavHtFt9p8d0W32vx/RY/aPHDFj9q8eMWP2nx0xY/a/HzFr9o8csWv2rx6xa/afHbFr9r8fsWf2jxxxZ/avHnFn9p8dcWf2vx9xb/aPHPFv9q8e8W/2nx3xbHtjjQ4ZAOx+lw3A6Hdjisw+EdjuhwvA5Hdjh+h6M6HN3hBB1O2OFEHU7c4SQdTtrhZB1O3uEUHU7Z4VQdTt3hNB1O2+F0HU7f4QwdztjtOGpgAGfucJYOZ+1wtg5n73CODufscK4O5+5wng7n7XC+DufvcIEOF+xwoQ4X7pAOF+lw0Q4X63DxDpfocMkOl+pw6Q6X6XDZDpfrcPkOV+hwxQ5X6nDlDlfpcNUOV+tw9Q7X6HDNDtfqcO0O1+lw3Q7X63D9DjfocMMON+pw4w436XDTDjfrcPMOt+hwyw636nDrDrfpcNsOt+tw+w536HDHDnfqcOcOd+lw1w5363D3DvfocM8O9+pw7w736XDfDvfrcP8OD+jwwA4P6vDgDg/p8NAOD+vw8A6P6PDIDo/q8OgOj+nQDo/t8LgOj+/whA5P7HBMhyd1eHKHp3R4aoendXh6h2d0eGaHZ3V4dofndHhuh+d1eH6HF3R4YYcXdXhxh5d0eGmHl3V4eYdXdHhlx5D/dHV1h9d0eG2H13V4fYc3dHhjhzd1eHOHt3QYdBh2GHUYd5h0mHaYdZh3WHRYdlh1WHfYdNh22HXYdzjY4a0d3tbh7R3e0eGdHd7V4d0d3tPhvR3e1+H9HT7Q4YMdPtThwx0+0uGjHT7W4eMdPtHhkx0+1eHTHT7T4bMdPtfh8x2+0OGLHb7U4csdvtLhqx2+1uHrHb7R4ZsdvtXh2x2+0+G7Hb7X4fsdftDhhx1+1OHHHX7S4acdftbh5x1+0eGXHX7V4dcdftPhtx1+1+H3Hf7Q4Y8d/tThzx3+0uGvHf7W4e8d/tHhnx3+1eHfHf7T4b8dju1woMchPY7T47g9Du1xWI/DexzR43g9juxx/B5H9Ti6xwl6nLDHiXqcuMdJepy0x8l6nLzHKXqcssepepy6x2l6nLbH6XqcvscZepyxx5l6nLnHWXqctcfZepy9xzl6nLPHuXqcez2cp8d5e5yvx/l7XKDHBXtcqMeFe6THRXpctMfFely8xyV6XLLHpXpcusdlely2x+V6XL7HFXpcsceVely5x1V6XLXH1Xpcvcc1elyzx7V6XLvHdXpct8f1ely/xw163LDHjXrcuMdNety0x8163LzHLXrcssetety6x2163LbH7Xrcvscdetyxx5163LnHXXrctcfdety9xz163LPHvXrcu8d9ety3x/163L/HA3o8sMeDejy4x0N6PLTHw3o8vMcjejyyx6N6PLrHY3q0x2N7PK7H43s8occTexzT40k9ntzjKT2e2uNpPZ7e4xk9ntnjWT2e3eM5PZ7b43k9nt/jBT1e2ONFPV7c4yU9XtrjZT1e3uMVPV7Z41U9Xt3jNT1e2+N1PV7f4w093tjjTT3e3OMtPQY9hj1GPcY9Jj2mPWY95j0WPZY9Vj3WwwYG/tNw22PXY9/jYI+39nhbj7f3eEePd/Z4V4939//jLbi3x/t6vL/HB3p8sMeHeny4x0d6fLTHx3p8vMcnenyyx6d6fLrHZ3p8tsfneny+xxd6fLHHl3p8ucdXeny1x9d6fL3HN3p8s8e3eny7x3d6fLfH93p8v8cPevywx496/LjHT3r8tMfPevy8xy96/LLHr3r8usdvevy2x+96/L7HH3r8scefevy5x196/LXH33r8vcc/evyzx796/LvHf3r8t8exPQ4M4pBBHGcQxx3EoYM4bBCHD+KIQRxvEEcO4viDOGoQRw/iBIM44SBONIgTD+IkgzjpIE42iJMP4hSDOOUgTjWIUw/iNIM47SBON4jTD+IMgzjj/0fTOUWPcX5t+5ekSm3bbq/aqe2mTm2bV9sktW3bbsdGbdu2jXwr79f/nD1ne26sWfdes/cT4GwBzh7gHAHOGeBcAc4d4DwBzhvgfAHOH+ACAS4Y4EIBLhzgIgEuGuBiAS4eIAEuEeCSAS4V4NIBLhPgsgEuF+DyAa4Q4IoBrhTgygGuEuCwAFcNcLUAVw9wjQDXDHCtANcOcJ0A1w1wvQDXD3CDADcMcKMANw5wkwA3DXCzADcfNjAwFsvhAW4Z4FYBbh3gNgFuG+B2AW4f4IgAdwhwxwB3CnDnAHcJcNcAdwtw9wD3CHDPAPcKcO8A9wlw3wD3C3D/AA8I8MAADwrw4AAPCfDQAA8L8PAAjwjwyACPCvDoAI8J8NgADfC4AI8P8IQARwY4KsDRAZ4Y4EkBnhzgKQGeGuBpAZ4e4BkBnhngWQGeHeA5AZ4b/P9dy2OfCwK8MMCLArw4wEsCvDTAywK8PMArArwywKsCvDrAawK8NsDrArw+wBsCvDHAmwK8OcBbArw1wNsCvD3AOwK8M8C7Arw7wHsCvDfA+wK8P2DMXwE+GOBDAT4cYBBgOJbf/+pLAkwDzP7TWxFgGWAVYB1gE2AbYBdgH+AjAT4a4GMBPh7gEwE+GeBTAT4d4DMBPhvgcwE+H+ALAb4Y4EsBvhzgKwG+GuBrAb4e4BsBvhngWwG+HeA7Ab4b4HsBvh/83xTWjIMH8KMAPw7wkwA/DfCzAD8P8IsAvwzwqwC/DvCbAL8N8LsAvw/whwB/DPCnAH8O8JcAfw3wtwB/D/CPAP8McCxOfwf4T4D/BjgmwIEQB4U4OMQhIY4T4rghjhfi+CFOEOLQECcMcaIQJw5xkhAnDXGyECcPcYoQpwxxqhCnDnGaEKcNcboQpw9xhhBnDAcmmCnEmUOcJcRZQ5wtxNlDnCPEOUOcK8S5Q5wnxHlDnC/E+UNcIMQFQ1woxIVDXCTERUNcLMTFQyTEJUJcMsSlQlw6xGVCXDbE5UJcPsQVQlwxxJVCXDnEVUIcFuKqIa4W4uohrhHimiGuFeLaIa4T4rohrhfi+iFuEOKGIW4U4sYhbhLipiFuFuLmIW4R4vAQtwxxqxC3DnGbELcNcbsQtw9xRIg7hLhjiDuFuHOIu4S4a4i7hbh7iHuEuGeIe4W4d4j7hLhviPuFuH+IB4R4YIgHhXhwiIeEeGiIh4V4eIhHhHhkiEeFeHSIx4R4bIiGeFyIx4d4QogjQxwV4ugQTwzxpBBPDvGUEE8N8bQQTw/xjBDPDPGsEM8O8ZwQzw3xvBDPD/GCEC8M8aIQLw7xkhAvDfGyEC8P8YoQrwzxqhCvDvGaEK8N8boQrw/xhhBvDPGmEG8O8ZYQbw3xthBvD/GOEO8M8a4Q7w7xnhDvDfG+EO8P8YEQHwzxoRAfDjEIMQzHjD82X8YhJiGmIWYh5iEWIZYhViHWITYhtiF2IfYhPhLioyE+FuLjIT4R4pMhPhXi0yE+E+KzIT4X4vMhvhDiiyG+FOLLIb4S4qshvhbi6yG+EeKbIb4V4tshvhPiuyG+F+L7IX4Q4ochfhTixyF+EuKnIX4W4uchfhHilyF+FeLXIX4T4rchfhfi9yH+EOKPIf4U4s8h/hLiryH+FuLvIf4R4p8h/hXi3yH+E+K/IY4JcSDCQREOjnBIhONEOG6E40U4foQTRDg0wgkjnCjCiSOcJMJJI5wswskjnCLCKSOcKsKpI5wmwmkjnC7C6SOcIcIZI5wpwpkjnCXCWSP8MsLZI5wjwjkjXHMynDvCeSKcN8L5Ipw/wgUiXDDChSJcOMJFIlw0wsUiXDxCIlwiwiUjXCrCpSNcJsJlI1wuwuUjXCHCFSNcKcKVI1wlwmERrhrhahGuHuEaY2uIcK0I145wnQjXjXC9CNePcIMIN4xwowg3jnCTCDeNcLMIN49wiwiHR7hlhFtFuHWE20S4bYTbRbh9hCMi3CHCHSPcKcKdI9wlwl0j3C3C3SPcI8I9I9wrwr0j3CfCfSPcL8L9IzwgwgMjPCjCgyM8JMJDIzwswsMjPCLCIyM8KsKjIzwmwmMjNMLjIjw+whMiHBnhqAhHR3hihCdFeHKEp0R4aoSnRXh6hGdEeGaEZ0V4doTnRHhuhOdFeH6EF0R44Vi9DODFEV4S4aURXhbh5RFeEeGVEV4V4dURXhPhtRFeF+H1Ed4Q4Y0R3hThzRHeEuGtEd4W4e0R3hHhnRHeFeHdEd4T4b0R3hfh/RE+EOGDET4U4cMRBhGGEUYRxhEmEaYRZhHmERYRlhFWEdYRNhG2EXYR9hE+EuGjET4W4eMRPhHhkxE+FeHTET4T4bMRPhfh8xG+EOGLEb4U4csRvhLhqxG+FuHrEb4R4ZsRvhXh2xG+E+G7Eb4X4fsRfhDhhxF+NNZnAwMDn0T4aYSfRfh5xOAv/vPKVxF+HeE3EX4b4XcRfh/hDxH+GOFPEf4c4S8R/hrhbxH+HuEfEf4Z4V8R/h3hPxH+G+GYCAdiHBTj4BiHxDhOjOPGOF6M48c4QYxDY5wwxolinDjGSWKcNMbJYpw8xilinDLGqWKcOsZpYpw2xulinD7GGWKcMcaZYpw5xllinDXG2WKcPcY5YpwzxrlinDvGeWKcN8b5Ypw/xgViXDDGhWJcOMZFYlw0xsViXDxGYlwixiVjXCrGpWNcJsZlY1wuxuVjXCHGFWNcKcaVY1wlxmExrhrjajGuHuMaMa4Z41oxrh3jOjGuG+N6Ma4f4wYxbhjjRjFuHOMmMW4a42Yxbh7jFjEOj3HLGLeKcesYt4lx2xi3i3H7GEfEuEOMO8a4U4w7x7hLjLvGuFuMu8e4R4x7xrhXjHvHuE+M+8a4X4z7x3hAjAfGeFCMB8d4SIyHxnjY2GAb4xExHhnjUTEeHeMxMR4bozEeF+PxMZ4Q48gYR8U4OsYTYzwpxpNjPCXGU2M8LcbTYzwjxjNjPCvGs2M8J8ZzYzwvxvNjvCDGC2O8KMaLY7wkxktjvCzGy2O8IsYrY7wqxqtjvCZmxLUxXhfj9THeEOONMd4U480x3hLjrTHeFuPtMd4R450x3hXj3THeE+O9Md4X4/0xAwODBnwwxodifDjGIMYwxijGOMYkxjTGLMY8xiLGMsYqxjrGJsY2xi7GPsZHYnw0xsdifDzGJ2J8MsanYnw6xmdifDbG52J8PsYXYnwxxpdifDnGV2J8NcbXYnw9xjdifDPGt2J8O8Z3Ynw3xvdifD/GD2L8MMaPYvw4xk9i/DTGz2L8PMYvYvwyxq9i/DrGb2L8NsbvYvw+xh9i/DHGn2L8OcZfYvw1xt9i/D3GP2L8M8a/Yvw7xn9i/DfGMTEOJDgowcEJDkkYf+x53ATHS3D8BCdIcGiCEyY4UYITJzhJgpMmOFmCkyc4RYJTJjhVglMnOE2C0yY4XYLTJzhDgjMmOFOCMyc4S4KzJjhbgrMnOEeCcyY4V4JzJzhPgvMmOF+C8ye4QIILJrhQggsnuEiCiya4WIKLJ0iCSyS4ZIJLJbh0gsskuGyCyyW4fIIrJLhigisluHKCqyQ4LMFVE1wtwdUTXCPBNRNcK8G1E1wnwXUTXC/B9RPcIMENE9wowY0T3CTBTRPcLMHNE9wiweEJbpngVgluneA2CW6b4HYJbp/giAR3SHDHBHdKcOcEd0lw1wR3S3D3BPdIcM8E90pw7wT3SXDfBPdLcP8ED0jwwAQPSvDgBA9J8NAED0vw8ASPSPDIBI9K8OgEj0nw2ARN8LgEj0/whARHJjgqwdEJnpjgSQmenOApCZ6a4GkJnp7gGQmemeBZCZ6d4DkJnpvgeQmen+AFCV6Y4EUJXpzgJQlemuBlCV6e4BUJXpngVQleneA1CV6b4HUJXp/gDQnemOBNCd6c4C0J3prgbQnenuAdCd6Z4F0J3p3gPQnem+B9Cd6f4AMJPpjgQwk+nGCQYJhglGCcYJJgmmCWYJ5gkWCZYJVgnWCTYJtgl2Cf4CMJPprgYwk+nuATCT6Z4FMJPp3gMwk+m+BzCT6f4AsJvpjgSwm+nOArCb6a4GsJvp7gGwm+meBbCb6d4DsJvpvgewm+n+AHCX6Y4EcJfpzgJwl+muBnCX6e4BcJfpngVwl+neA3CX6b4HcJfp/gDwn+mOBPCf6c4C8J/prgbwn+nuAfCf6Z4F8J/p3gPwn+m+CYBAdSHJTi4BSHpDhOiuOmOF6K46c4QYpDU5wwxYlSnDjFSVKcNMXJUpw8xSlSnDLFqVKcOsVpUpw2xelSnD7FGVKcMcWZUpw5xVlSnDXF2VKcPcU5UsZ+uZwrxblTnCfFeVOcL8X5U1wgxQVTXCjFhVNcJMVFU1wsxcVTJMUlUlwyxaVSXDrFZVJcNsXlUlw+xRVSXDHFlVJcOcVVUhyW4qoprpbi6imukeKaKa6V4toprpPiuimul+L6KW6Q4oYpbpTixilukuKmKW6W4uYpbpHi8BS3THGrFLdOcZsUt01xuxS3T3FEijukuGOKO6W4c4q7pLhriruluHuKe6S4Z4p7pbh3OsR9Utw3xf1S3D/FA1I8MMWDUjw4xUNSPDTFw1I8PMUjUjwyxaNSPDrFY1I8NkVTPC7F41M8IcWRKY5KcXSKJ6Z4Uoonp3hKiqemeFqKp6d4RopnpnhWimeneE6K56Z4Xornp3hBihemeFGKF6d4SYqXpnhZipeneEWKV6Z4VYpXp3hNitemeF2K16d4Q4o3pnhTijeneEuKt6Z4W4q3p3hHinemeFeKd6d4T4r3pnhfiven+ECKD6b4UIoPpxikGKZD/2+eKE4xSTFNMUsxT7FIsUyxSrFOsUmxTbFLsU/xkRQfTfGxFB9P8YkUn0zxqRSfTvGZFJ9N8bkUn0/xhRRfTPGlFF9O8ZUUX03xtRRfT/GNFN9M8a0U307xnRTfTfG9FN9P8YMUP0zxoxQ/TvGTFD9N8bMUP0/xixS/TPGrFL9O8ZsUv03xuxS/H+uz//qcP6X4c4q/pPhrir+l+HuKf6T4Z4p/pfh3iv+k+G+KY1IcyHBQhoMzHJLhOBmOm+F4GY6f4QQZDs1wwgwnynDiDCfJcNIMJ8tw8gynyHDKDKfKcOoMp8lw2gyny3D6DGfIcMYMZ8pw5gxnyXDWDGfLcPYM58hwzgznynDuDOfJcN4M58tw/gwXyHDBDBfKcOEMF8lw0QwXy3DxDMlwiQyXzHCpDJfOcJkMl81wuQyXz3CFDFfMcKUMV85wlQyHZbhqhqtluHqGa2ST/59m1spw7QzXyXDdDNfLcP0MN8hwwww3ynDjDDfJcNMMN8tw8wy3yHB4hltmuFWGW2e4TYbbZrhdhttnOCLDHTLcMcOdMtw5w10y3DXD3TLcPcM9Mtwzw70y3DvDfTLcN8P9Mtw/wwMyPDDDgzI8+H9N+AwPy/DwDI/I8MgMj8oYdHSGx2R4bIZmeFyGx2d4QoYjMxyV4egMT8zwpAxPzvCUDE/N8LQMT8/wjAzPzPCsDM/O8JwMz83wvAzPz/CCDC/M8KIML87wkgwvzfCyDC/P8IoMr8wGRl2V4dUZXpPhtRlel+H1Gd6Q4Y0Z3pThzRnekuGtGd6W4e0Z3pHhnRneleHdGd6T4b0Z3jcWt4GR/22OxocyfDgbNM5YDsMMowzjDJMM0wyzDPMMiwzLDKsM6wybDNsMuwz7DB/J8NEMH8vw8QyfyPDJDJ/K8OkMn8nw2Qyfy/D5DF/I8MUMX8rw5QxfyfDVDF/L8PUM38jwzQzfyvDtDN/J8N0M38vw/Qw/yPDDDD/K8OMMP8nw0ww/y/DzDL/I8MsMv8rw6wy/yfDbDL/L8PsMf8jwxwx/yvDnDH/J8NcMf8vw9wz/yPDPDP/K8O8M/8nw3wzHZDiQ46AcB+c4JMdxchw3x/FyHD/HCXIcmuOEOU6U48Q5TpLjpDlOljNk8hynyHHKHKfKceocp8lx2hyny3H6HGfIccYcZ8px5hxnyXHWHGfLcfYc58hxzhznynHuHOfJcd4c58tx/hwXyHHBHBfKceEcF8lx0RwXy3HxHMlxiRyXzHGpHJfOcZkcl81xuRyXz3GFHFfMcaUcV85xlRyH5bhqjqvluHqOa+S4Zo5r5bh2juvkuG6O6+W4fo4b5LhhjhvluHGOm+S4aY6b5bh5jlvkODzHLXPcKsetc9wmx21z3C7H7XMckeMOOe6Y40457pzjLjnumuNuOe6e4x457pnjXjnuneM+Oe6b43457p/jATkemONBOR6c4yE5HprjYTkenuMROR6Z41E5Hp3jMTkem6M5Hpfj8TmekOPIHEflODrHE3M8KceTczwlx1NzPC3H03M8I8czczwrx7NzPCfHc//Ty/k5XpDjhTlelOPFOV6S46U5Xpbj5TlekeOVOV6V49U5XpPjtTlel+P1Od6Q44053pTjzeMODIzV5K053pbj7TnekeOdOd6V49053pPjvTnel+P9OT6Q44M5PpTjwzkGOYY5RjnGOSY5pjlmOeY5FjmWOVY51jk2ObY5djn2OT6S46M5Ppbj4zk+keOTOT6V49M5PpPjszk+l+PzOb6Q44s5vpTjyzm+kuOrOb6W4+s5vpHjmzm+lePbOb6T47s5vpfj+zl+kOOHOX6U48c5fpLjpzl+luPnOX6R45c5fpXj1zl+k+O3OX6X4/c5/pDjjzn+lOPPOf6S4685/pbj7zn+keOfOf6V4985/pPjvzmOyXGgwEEFDi5wSIHjFDhugeMVOH6BExQ49L/zRAVOXOAkBU5a4GQFTl7gFAVOWeBUBU5d4DQFTlvgdAVOX+AMBc5Y4EwFzlzgLAXOWuBsBc5e4BwFzlngXAXOXeA8Bc5b4HwFzl/gAgUuWOBCBS5c4CIFLlrgYgUuXiAFLlHgkgUuVeDSBS5T4LIFLlfg8gWuUOCKxf/ljP/7p3mVAocVuGqBqxW4eoFrFLhmgWsVuHaB6xS4boHrFbh+gRsUuGGBGxW4cYGbFLhpgZsVuHmBWxQ4vMAtC9yqwK0L3KbAbQvcrsDtCxxR4A4F7ljgTgXuXOAuBe5a4G4F7l7gHgXuWeBeBe5d4D4F7lvgfgXuX+ABBR5Y4EEFHlzgIQUeWuBhBR5e4BEFHlngUQUeXeAxBR5boAUeV+DxBZ5Q4MgCRxU4usATCzypwJMLPKXAUws8rcDTCzyjwDMLPKvAsws8p8BzCzyvwPMLvKDACwu8qMCLC7ykwEsLvKzAywu8osArC7yqwKsLvKbAawu8rsDrC7yhwBsLvKnAmwu8pcBbC7ytwNsLvKPAOwu8q8C7C7ynwHsLvK/A+wt8oMAHC3yowIcLDAoM/yN6rL6TAtMCswLzAosCywKrAusCmwLbArsC+wIfKfDRAh8r8PECnyjwyQKfKvDpAp8p8NkCnyvw+QJfKPDFAl8q8OUCXymG+GqBrxX4eoFvFPhmgW8V+HaB7xT4boHvFfh+gR8U+GGBHxX4cYGfFPhpgZ8V+HmBXxT4ZYFfFfh1gd8U+G2B3xX4fYE/FPhjgT8V+HOBvxT4a4G/Ffh7gX8U+GeBfxX4d4H/FPhvgWMKHChxUImDSxxS4jgljlvieCWOX+IEJQ4tccISJypx4hInKXHSEicrcfISpyhxyhKnKnHqEqcpcdoSpytx+hJnKHHGEmcqceYSZylx1hJnK3H2Encucc4S5ypx7hLnKXHeEucrcf4SFyhxwRIXKnHhEhcpcdESFytx8RIpcYkSlyxxqRKXLnGZEpctcbkSly9xhRJXLHGlElcucZUSh5W4aomrlbh6iWuUuGaJa5W4donrlLhuieuVuH6JG5S4YYkblbhxiZuUuGmJm5W4eYlblDi8HBj8v10WW5e4TYnblrhdiduXOKLEHUrcscSd/nv3XUrctcTdSty9xD1K3LPEvUrcu8R9Sty3xP1K3L/EA0o8sMSDSjy4xENKPLTEw0o8vMQjSjyyxKNKPLrEY0o8tkRLPK7E40s8ocSRJY4qcXSJJ5Z4Uoknl3hKiaeWeFqJp5d4RolnlnhWiWeXeE6J55Z4Xonnl3hBiReWeFGJF5d4SYmXlnhZiZeXeEWJV5Z4VYlXl3hNideWeF2J15d4Q4k3lnhTiTeXeEuJt5Z4W4m3l3hHiXeWeFeJd5d4T8n/3O39JT5Q4oMlPlTiwyUGJYYlRiXGJSYlpiVmJeYlFiWWJVYl1iU2JbYldiX2JT5S4qMlPlbi4yU+UeKTJT5V4tMlPlPisyU+V+LzJb5Q4oslvlTiyyW+UuKrJb5W4uslvlHimyW+VeLbJb5T4rslvlfi+yV+UOKHJX5U4sclflLipyV+VuLnJX5R4pclflXi1yV+U+K3JX5X4vcl/lDijyX+VOLPJf5S4q8l/lbi7yX+UeKfJf5V4t8l/lPivyWOKXGgwkEVDq5wSIXjVDhuheNVOH6FE1Q4tMIJK5yowokrnKTCSSucrMLJK5yiwikrnKrCqSucpsJpK5yuwukrnKHCGSucqcKZK5ylwlkrnK3C2Suco8I5K5yrwrkrnKfCeSucr8L5K1ygwgUrXKjChStcpMJFK1yswsUrpMIlKlyywqUqXLrCZSpctsLlKly+whUqXLHClSpcucJVKhxW4aoVrlbh6hWuUeGaFa5V4doVrlPhuhWuV+H6FW5Q4YYVblThxhVuUuGmFW5W4eYVblHh8Aq3rHCrCreucJsKt61wuwq3r3BEhTtUuGOFO1W4c4W7VLhrhbtVuHuFe1S4Z4V7Vbh3hftUuG+F+1W4f4UHVHhghQdVeHCFh1R4aIWHVXh4hUdUeGSFR1V4dIXHVHhshVZ4XIXHV3hChSMrHFXh6ApPrPCkCk+u8JQKT63wtApPr/CMCs+s8KwKz67wnArPrfC8Cs+v8IIKL6zwogovrvCSCi+t8LIKL6/wigqvrPCqCq+u8JoKr63wugqvr/CGCm+s8KYKb67wlgpvrfC2Cm+v8I4K76zwrgrvrvCeCu+t8L4K76/wgQofrPChCh+uMKgwrDCqMK4wqTCtMKswr7CosKywqrCusKmwrbCrsK/wkQofrfCxCh+v8IkKn6zwqQqfrvCZCp+thj/wXIXPV/hChS9W+FKFL1f4SoWvVvhaha9X+EaFb1b4VoVvV/hOhe9W+F6F71f4QYUfVvhRhR9X+EmFn1b4WYWfV/hFhV9W+FWFX1f4TYXfVvhdhd9X+EOFP1b4U4U/V/hLhb9W+FuFv1f4R4V/VvhXhX9X+E+F/1Y4psKBGgfVOLjGITWOU+O4NY5X4/g1TlDj0BonrHGiGieucZIaJ61xshonr3GKGqescaoap65xmhqnrXG6GqevcYYaZ6xxphpnrnGWGmetcbYaZ69xjhrnrHGuGueucZ4a561xvhrnr3GBGhescaEaF65xkRoXrXGxGhevkRqXqHHJGpeqcekal6lx2RqXq3H5GleoccUaV6px5RpXqXFYjavWuFqNq9e4Ro1r1rhWjWvXuE6N69a4Xo3r17hBjRvWuFGNG9e4SY2b1rhZjZvXuEWNw2vcssataty6xm1q3LbG7WrcvsYRNe5Q44417lTjzjXuUuOuNe5W4+417lHjnjXuVePeNe5T47417lfj/uPhATUeWONBNR5c4yE1HlrjYTUeXuMRNR5Z41E1Hl3jMTUeW6M1Hlfj8TWeUOPIGkfVOLrGE2s8qcaTazylxlNrPK3G02s8o8YzazyrxrNrPKfGc2s8r8bza7ygxgtrvKjGi2u8pMZLa7ysxstrvKLGK2u8qsara7ymxmtrvK7G62u8ocYba7ypxptrvKXGW2u8rcbba7yjxjtrvKvGu2u8p8Z7a7yvxvtrfKDGB2t8qMaHawxqDGuMaoxrTGpMa8xqzGssaixrrGqsa2xqbGvsauxrfKTGR2t8rMbHa3yixidrfKrGp2t8psZna3yuxudrfKHGF2t8qcaXa3ylxldrfK3G12t8o8Y3a3yrxrdrfKfGd2t8r8b3a/ygxg9r/KjGj2v8pMZPa/ysxs9r/KLGL2v8qsava/ymxm9r/K7G72v8ocYfa/ypxp9r/KXGX2v8rcbfa/yjxj9r/KvGv2v8p8Z/axxT40CDgxoc3OCQBsdpcNwGx2tw/AYnaHBogxM2OFGDEzc4SYOTNjhZg5M3OEWDUzY4VYNTNzhNg9M2OF2D0zc4Q4MzNjhTgzM3OEuDszY4W4OzNzhHg3M2OFeDczc4T4PzNjhfg/M3uECDCza4UIMLN7hIg4s2uFiDizdIg0s0uGSDSzW4dIPLNLhsg8s1uHyDKzS4YoMrNbhyg6s0OKzBVRtcrcHVG1yjwTUbXKvBtRtcp8F1G1yvwfUb3KDBDRvcqMGNG9ykwU0b3KzBzRvcosHhDW7Z4FYNbt3gNg1u2+B2DW7f4IgGd2hwxwZ3anDnBndpcNcGd2tw9wb3aHDPBvdqcO8G92lw3wb3a3D/Bg9o8MAGD2rw4AYPafDQBg9r8PAGj2jwyAaPavDoBo9p8NgGbfC4Bo9v8IQGRzY4qsHRDZ7Y4EkNntzgKQ2e2uBpDZ7e4BkNntngWQ2e3eA5DZ7b4HkNnt/gBQ1e2OBFDV7c4CUNXtrgZQ1e3uAVDV7Z4FUNXt3gNQ1e2+B1DV7f4A0N3tjgTQ3e3OAtDd7a4G0N3t7gHQ3e2eDYTHV3g/c0eG+D9zV4f4MPNPhggw81+HCDQYNhg1GDcYNJg2mDWYN5g0WDZYNVg3WDTYNtg12DfYOPNPhog481+HiDTzT4ZINPNfh0g880+GyDzzX4fIMvNPhigy81+HKDrzT4aoOvNfh6g280+GaDbzX4doPvNPhug+81+H6DHzT4YYMfNfhxg580+GmDnzX4eYNfNPhlg181+HWD3zT4bYPfNfh9gz80+GODPzX4c4O/NPhrg781+HuDfzT4Z4N/Nfh3g/80+G+DY8Zi2uKgFge3OKTFcVoct8XxWhy/xQlaHNrihC1O1OLELU7S4qQtTtbi5C1O0eKULU7V4tQtTtPitC1O1+L0Lc7Q4owtztTizC3O0uKsLc7W4uwtztHinC3O1eLcLc7T4rwtztfi/C0u0OKCLS7U4sItLtLioi0u1uLiLdLiEi0u2eJSLS7d4jItLtvici0u3+IKLa7Y4kotrvy/G4laXLXF1VpcvcU1WlyzxbVaXLvFdVpct8X1Wly/xQ1a3LDFjVrcuMVNWty0xc1a3LzFLVoc3uKWLW7V4tYtbtPiti1u1+L2LY5ocYcWd2xxpxZ3bnGXFndtcbcWd29xjxb3bHGvFvducZ8W921xvxb3b/GAFg9s8aAWD27xkBYPbfGwFg9v8YgWj2zxqBaPbvGYFo9t0RaPa/H4Fk9ocWSLo1oc3eKJLZ7U4sktntLiqS2e1uLpLZ7R4pktntXi2S2e0+K5LZ7X4vktXtDihS1e1OLFLV7S4qUtXtbi5S1e0eKVLV7VMvrqFq9p8doWr2vx+hZvaPHGFm9q8eYWb2nx1hZva/H2Fu9o8c4W72rx7hbvafHeFu9r8f4WH2jxwRYfavHhFoMWwxajFuMWkxbTFrMW8xaLFssWqxbrFpsW2xa7FvsWH2nx0RYfa/HxFp9o8ckWn2rx6RafafHZFp9r8fkWX2jxxRZfavHlFl9p8dUWX2vx9RbfaPHNFt9q8e0W32nx3Rbfa/H9Fj9o8cMWP2rx4xY/afHTFj9r8fMWv2jxyxa/avHrFr9p8dsWv2vx+xZ/aPHHFn9q8ecWf2nx1xZ/a/H3Fv9o8c8W/2rx7xb/afHfFse0ONDhoA4Hdzikw3E6HLfD8Tocv8MJOhza4YQdTtThxB1O0uGkHU7W4eQdTtHhlB1O1eHUHU7T4bQdTtfh9B3O0OGMHc7U4cwdztLhrB3O1uHsHc7R4ZwdztXh3B3O0+G8Hc7X4fwdLtDhgh0u1OHCHS7S4aIdLtbh4h3S4RIdLtnhUh0u3eEyHS7b4XIdLt/hCh2u2OFKHa7c4SrdwMCwDlftcLUOV+9wjQ7X7HCtDtfucJ0O1+1wvQ7X73CDDjfscKMON+5wkw437XCzDjfvcIsOh3e4ZYdbdbh1h9t0uG2H23W4fYcjOtyhwx073KnDnTvcpcNdO9ytw9073KPDPTvcq8O9O9ynw3073K/D/Ts8oMMDOzyow4M7PKTDQzs8rMPDOzyiwyM7PKrDozs8psNjO7TD4zo8vsMTOhzZ4agOR3d4YocndXhyh6d0eGqHp3V4eodndHhmh2d1eHaH53R4bofndXh+hxd0eGGHF3V4cYeXdHhph5d1eHmHV3R4ZYdXdXh1h9d0eG2H13V4fYc3DBvwxo6h/+vp3dLhrR3e1uHtHd7R4Z0d3tXh3R3e0+G9Hd7X4f0dPtDhgx0+1OHDHQYdhh1GHcYdJh2mHWYd5h0WHZYdVh3WHTYdth12HfYdPtLhox0+1uHjHT7R4ZMdPtXh0x0+0+GzHT7X4fMdvtDhix2+1OHLHb7S4asdvtbh6x2+0eGbHb7V4dsdvtPhux2+1+H7HX7Q4YcdftThxx1+0uGnHX7W4ecdftHhlx1+1eHXHX7T4bcdftfh9x3+0OGPHf7U4c8d/tLhrx3+1uHvHf7R4Z8d/tXh3x3+0+G/HY7pcKDHQT0O7nFIj+P0OG6P4/U4fo8T9Di0xwl7nKjHiXucpMdJe5ysx8l7nKLHKXucqsepe5ymx2l7nK7H6XucoccZe5ypx5l7nKXHWXucrcfZe5yjxzl7nKvHuXucp8d5e5yvx/l7XKDHBXtcqMeFe1ykx0V7XKzHxXukxyV6XLLHpXpcusdlely2x+V6XL7HFXpcsceVely5x1V6HNbjqj2u1uPqPa7R45o9rtXj2j2u0+O6Pa7X4/o9btDjhj1u1OPGPW7S46Y9btbj5j1u0ePwHrfscaset+5xmx637XG7HrfvcUSPO/S4Y4879bhzj7v0uGuPu/W4e4979Lhnj3v1uHeP+/S47zi4X4/793hAjwf2eFCPB/d4yAQDA2N5PKzHw3s8oscjezyqx6N7PKbHY3u0x+N6PL7HE3oc2eOoHkf3eGKPJ/V4co+n9Hhqj6f1eHqPZ/R4Zo9n9Xh2j+f0eG6P5/V4fo8X9Hhhjxf1eHGPl/R4aY+X9Xh5j1f0eGWPV/V4dY/X9Hhtj9f1eH2PN/R4Y4839Xhzj7f0eGuPt/V4e4939Hhnj3f1eHeP9/R4b4/39Xh/jw/0+GCPD/X4cI//LwAA///KBSpL")

19:15:27 executing program 3:
syz_mount_image$f2fs(&(0x7f0000010580), &(0x7f00000105c0)='./file0\x00', 0x1218058, &(0x7f0000000000)=ANY=[], 0x1, 0x105a6, &(0x7f0000020bc0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents(r0, 0x0, 0x0)

19:15:27 executing program 2:
r0 = socket$inet6_sctp(0x1c, 0x5, 0x84)
connect$inet6(r0, &(0x7f0000000040)={0x1c, 0x1c}, 0x1c)

19:15:27 executing program 0:
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0)
ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0xffffffffffffffff)
ioctl$NBD_CLEAR_SOCK(r2, 0xab08)
ioctl$NBD_DO_IT(r0, 0xab03)
ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0xa0)

[  327.843208][ T9991] loop4: detected capacity change from 0 to 128
[  327.925067][ T9991] VFS: Found a Xenix FS (block size = 512) on device loop4
[  327.987492][ T9991] sysv_free_block: trying to free block not in datazone
[  328.012587][ T9991] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  328.039210][ T9997] block nbd0: NBD_DISCONNECT
19:15:27 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000240)='cpuacct.usage_user\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="b902bb084c68a26c690dcab26d054e00000000955e598f0659043610a3fd00f74d7beb764baf7df19d"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

19:15:27 executing program 2:
r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
write$sysctl(r0, &(0x7f0000000000)='7\x00', 0x2)

[  328.071623][  T120] block nbd1: Possible stuck request ffff888062338000: control (read@0,4096B). Runtime 30 seconds
[  328.095996][T10000] nbd0: detected capacity change from 0 to 320
19:15:28 executing program 2:
r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x0, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x0, 0x4, {0x6, @sdr}})

19:15:28 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
r1 = open(&(0x7f0000000080)='./file1\x00', 0x0, 0x0)
mkdir(&(0x7f00000002c0)='./bus\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})
mkdir(&(0x7f0000000200)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0)
mount(&(0x7f0000000040)=@filename='./bus/file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x3000, 0x0)

19:15:28 executing program 4:
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$yama_ptrace_scope(r1, &(0x7f0000000040)='2\x00', 0x2)
r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
splice(r0, 0x0, r2, 0x0, 0x10, 0x3)

19:15:28 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
ioctl$EVIOCGABS20(r0, 0x40044591, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080))
epoll_pwait(r1, &(0x7f0000000b80)=[{}], 0x1, 0x0, 0x0, 0x0)

19:15:28 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
pipe2$9p(&(0x7f00000002c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15)
r3 = dup(r2)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}})
mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

[  328.707713][T10014] syz-executor.4[10014] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
19:15:28 executing program 2:
fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7)
fsetxattr$security_capability(r0, &(0x7f0000000140), &(0x7f0000000080)=@v3={0x3000000, [], 0xee00}, 0x18, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=@random={'osx.', '\x86et_0rio.prioidx\x00X\xaa\xdd\xc5'}, 0x0, 0x0)

[  328.707826][T10014] syz-executor.4[10014] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  328.762100][ T3581] block nbd0: Disconnected due to user request.
19:15:28 executing program 4:
r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
write$sysctl(r0, &(0x7f0000000000)='7\x00', 0x2)

19:15:28 executing program 2:
r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x0, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0xc0000000, 0x0, {0x6, @sdr}})

19:15:28 executing program 4:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe00181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
r1 = socket$key(0xf, 0x3, 0x2)
r2 = dup(r1)
sendmsg$key(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)={0x2, 0x1, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1a, 0x18, 0x0, 0x0, 0xc2, "a7a7e06c790066e127da03ac177dd755c2bc1890472dc01a1d36a89dcfe80fd576c3ae36f61fb81a4a353f61b31837759fe8c170f30400000000000000eda86f7215421f000000662b9ec805905e67e1ae71be5125e647725bc594f30d705924f46e0b5b64fe70795c9fb335eb7d024629eb6d887c8cba4a641265edb03d6822f81220c6f4dfcb3b0f435385faeb0866ef3b82155d588100925f93fb3101b5d1cd087ad501ae4b593d8dbf7d6612d019fdc0a0320524ba0b63682dd1af734ad9f2a4"}]}, 0xe0}}, 0x0)

19:15:28 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
r1 = open(&(0x7f0000000080)='./file1\x00', 0x0, 0x0)
mkdir(&(0x7f00000002c0)='./bus\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})
mkdir(&(0x7f0000000200)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0)
mount(&(0x7f0000000040)=@filename='./bus/file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x3000, 0x0)

19:15:28 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000000)={0x6000, 0x88000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0xffffffffffffff40}, "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", "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"})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000040)="660fc77200f34998f3410fc736460f1a6086f2360f211e0f20c035020000000f22c0400f21ee66470f3880649d05b9800000c00f3235004000000f30430f92c6", 0x40}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

19:15:28 executing program 2:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000000380), &(0x7f0000000440)=0x8c)

19:15:29 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
mount(&(0x7f0000000200)=ANY=[@ANYBLOB='/M'], &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='exfat\x00', 0x0, 0x0)

19:15:29 executing program 4:
fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfea7)
fsetxattr$security_capability(r0, &(0x7f0000000140), &(0x7f0000000080)=@v3={0x3000000, [], 0xee00}, 0x18, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=@random={'osx.', '\x86et_0rio.prioidx\x00X\xaa\xdd\xc5'}, 0x0, 0x0)

[  329.434604][T10035] syz-executor.2[10035] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
19:15:29 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5010, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xb}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
syz_usb_control_io$hid(r0, &(0x7f0000000400)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x6, {[@global, @local=@item_4={0x3, 0x2, 0x0, "390d77d6"}]}}, 0x0}, &(0x7f0000000580)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0})

[  329.434718][T10035] syz-executor.2[10035] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  329.555952][ T3579] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  329.588605][ T3579] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  329.597538][ T3579] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
19:15:29 executing program 2:
r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x0, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0xc0000000, 0x0, {0x6, @sdr}})

[  329.606414][ T3578] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  329.628802][ T3578] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  329.636202][ T3578] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
19:15:29 executing program 2:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x77359400}, 0x0, 0x0)
ioctl$KVM_RUN(r0, 0xae80, 0x0)

19:15:29 executing program 2:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000002b00), 0x9c)

19:15:29 executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$full(0xffffffffffffff9c, 0x0, 0x800, 0x0)

[  329.918632][  T152] usb 5-1: new high-speed USB device number 36 using dummy_hcd
19:15:29 executing program 2:
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r2, 0xab08)

[  330.135988][T10037] chnl_net:caif_netlink_parms(): no params data found
[  330.145250][T10054] block nbd2: NBD_DISCONNECT
[  330.153930][T10053] block nbd2: Disconnected due to user request.
[  330.160664][  T152] usb 5-1: Using ep0 maxpacket: 32
[  330.176621][T10053] block nbd2: shutting down sockets
19:15:29 executing program 2:
fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfea7)
fsetxattr$security_capability(r0, &(0x7f0000000140), &(0x7f0000000080)=@v3={0x3000000, [], 0xee00}, 0x18, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=@random={'osx.', '\x86et_0rio.prioidx\x00X\xaa\xdd\xc5'}, 0x0, 0x0)

[  330.298666][  T152] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  330.314164][  T152] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
19:15:30 executing program 2:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000e00)={0x84, &(0x7f0000000a00)={0x0, 0x0, 0x6, "843a3568b0e7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[  330.341391][  T152] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  330.362146][  T152] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  330.383288][  T152] usb 5-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00
[  330.399928][  T152] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  330.423705][  T152] usb 5-1: config 0 descriptor??
[  330.435091][T10037] bridge0: port 1(bridge_slave_0) entered blocking state
[  330.453879][T10037] bridge0: port 1(bridge_slave_0) entered disabled state
[  330.468669][T10037] device bridge_slave_0 entered promiscuous mode
[  330.478198][T10037] bridge0: port 2(bridge_slave_1) entered blocking state
[  330.490424][T10037] bridge0: port 2(bridge_slave_1) entered disabled state
[  330.507751][T10037] device bridge_slave_1 entered promiscuous mode
[  330.555102][T10037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  330.567763][T10037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  330.609793][T10037] team0: Port device team_slave_0 added
[  330.619566][T10037] team0: Port device team_slave_1 added
[  330.654514][T10037] batman_adv: batadv0: Adding interface: batadv_slave_0
[  330.661870][T10037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  330.688658][T10037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  330.698753][ T9999] loop3: detected capacity change from 0 to 131072
[  330.702084][T10037] batman_adv: batadv0: Adding interface: batadv_slave_1
[  330.713038][T10037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  330.729865][ T9999] F2FS-fs (loop3): invalid crc value
[  330.744581][ T7968] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  330.747812][T10037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  330.796904][ T9999] F2FS-fs (loop3): Found nat_bits in checkpoint
[  330.833297][T10037] device hsr_slave_0 entered promiscuous mode
[  330.841779][T10037] device hsr_slave_1 entered promiscuous mode
[  330.911883][  T152] kye 0003:0458:5010.000B: item fetching failed at offset 1/5
[  330.922374][  T152] kye 0003:0458:5010.000B: parse failed
[  330.939131][  T152] kye: probe of 0003:0458:5010.000B failed with error -22
19:15:30 executing program 3:
madvise(&(0x7f0000472000/0x4000)=nil, 0x4000, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x11)

[  331.118409][  T152] usb 5-1: USB disconnect, device number 36
[  331.118707][ T7968] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  331.140776][ T7968] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  331.167374][T10037] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  331.179528][ T7968] usb 3-1: config 0 descriptor??
[  331.303902][T10037] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  331.404838][T10037] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
19:15:31 executing program 3:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x2, 0x8, 0x8}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='ext4_request_inode\x00', r2}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000400)='ext4_request_inode\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r0}, &(0x7f0000000340), &(0x7f00000003c0)}, 0x20)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0)

[  331.511628][T10037] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
19:15:31 executing program 4:
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
vmsplice(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="1c19c73b5123d59cbdba1680ae4c", 0xe}], 0x1, 0x0)
r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
splice(r0, 0x0, r2, 0x0, 0x10, 0x3)

[  331.658706][ T7968] usb 3-1: Cannot set MAC address
[  331.664174][ T7968] MOSCHIP usb-ethernet driver: probe of 3-1:0.0 failed with error -71
[  331.679345][ T3578] Bluetooth: hci5: command tx timeout
19:15:31 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
execve(0x0, &(0x7f0000000200)=[&(0x7f0000000140)='\'\x00'], 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000040))

[  331.710855][ T7968] usb 3-1: USB disconnect, device number 30
19:15:31 executing program 4:
r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x0, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0xc0000000, 0x4, {0x0, @sdr}})

19:15:31 executing program 3:
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff)
ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff)
r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r1, 0xab08)

[  331.846229][T10037] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  331.859846][T10037] netdevsim netdevsim1 netdevsim1: renamed from eth1
19:15:31 executing program 4:
r0 = memfd_create(&(0x7f0000006e80)='\x00\xac=\x9d\xd2\xdb\x1a\'\xf8\n\xedcJ\x8e\x84\xd4N\x00\x9b\x1f\t\xbd\x11\x86T\x16\xa3\xb3\x950\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\x00\x02\xb4\xfdHA\xce\x9a\xde\xe4\xb6\xbcK#^\x00}2\xc6:|R\x01\x00\x00\x00\xa3\xb9\xff\xff\xebw\xdeM\x0f7i$\xf1\xd4\x9b\xc7\xb2\xbeD`\x8f\xc3\x96\xbc#4\x17\xf5\xb3\xc9\xb2\x94\xa8_f!\xdf\x90}\xba\xa3\x01\xe2\xcf\xb7\"S\a\x04ry\x00#4\x87m\xf7\xe3\xf5\xa7\xda\xb9\xcbU\xbe\x06]\xa9\xb6R~\xc9l}\xb7I\xfeH\xb3\x15\x8c\x06d\xf8c\xc0{\v\xd2\x9d\x8e\\\xae>\xf6quc9\xe0\xbf\xdd\xdc\x99\xf4\\\xd0\x96:\xfb\x8c\x12o\xcc-\x13\x00\x00v\xae\x80Zp\x95c]\x98\x8c\x01\x8fo\xafjN\xcb\x98\xdf\xd3[V\xbd[\xb9\x10v\xee\xdc\xc8G\xd0\xdc9\xccO\xf74\x84o\x99\xe9\x14\x00\x00dU\x00\x00\x00\b\xfb\xb5Z\xb0-\xc8\xdb\x88f\xf4W\xeb\x06\xc2\xd1\xb6\xd1%\xca\x8f\x013|\x8ez\x1eo\x18\xb6#@P&[\xad\x00\nmU\x823\\&P\xdc\xbcS\x80\xc1dJ!LH\xaa\a\x82\xf3\xde\x96\x85\xc5\xdd\xa8\x92\xc7\xcb\x91\xf2[Y\x06\x8a\x9fN\x10\xb9\xf4\xecq\xce\xd2\x17\x88\x18\xcc7r\xd7\xeaz\xcevR\xcau\r\xf1\t\xc2$k\xdf\x8f\xe2\xbe\xfe\x14AN\xf8\xc6\xa8`Fs[6k\x00\x9d\x8e\x0f\x14Uc\x15n\xd5!}\x00+\xa5\xdcxUY3<v\xf1\r\xaei\xa0Xam\vN\x7fR\x96*^\xd3\x01V\x8d.\xdd\x1a\xaa\xa6*\xed\xcch\x7f\xfbm\x92\b\x18\xbc\xa7\xd7\x1d0\x19\b\xe1\xb1\xf4\x7f\xca\xbeg\xb1bEm[\x04\tX8\x15#\x94\xa6M?\xe0\x871\x80\xc5~_\x12J\xeb \x00R\xa7=/\xfd:\xaf\xc3\x18\x10\f\xa1\x1a\xa7Yt\x151\xc7T\xea\b\xeb-\xec9`US\xdf\xf1\x00\x99\v`*\x97\xd8M\x99\n\xd0\xb4FwD\x16\xfa\x81\x05\x00\x00\x00\x1b\xb7r\x1a\x9a\xa7_))\xc4\xe8\x044\xf0\x0f:\x91\x9b-\x01\xc7\x02\xd3Q\xef\v\x1b\xc8\xf3\x1b\x1b[\x05wil\x02\x0f\x12\xad\x18\x1f!H\xfe6\xd4\xd04l\xc8M\x9d@\xd2M\xf6\xfb>\x9b\xe7\xa1\x95\xc8\xf4G\xc3G\xf0\xed+\xa4\xec~7\xf3\"\x9c\x9e\xfaN\xc5\x8cM\xa7D\xb5\xe5\xfb\xda\xbc\x8a\xdc\x8adI\r\fO\xa7-\x98\xa3FM\xc2', 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='cmdline\x00')
sendfile(r0, r1, 0x0, 0x9d)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000c, 0x11, r0, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./bus\x00', 0x90100, 0x0)
read$FUSE(r2, 0x0, 0x0)

[  331.933209][T10037] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  331.976613][T10037] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  332.012378][T10080] block nbd3: NBD_DISCONNECT
[  332.112350][T10037] 8021q: adding VLAN 0 to HW filter on device bond0
[  332.127639][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  332.136765][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  332.164043][T10037] 8021q: adding VLAN 0 to HW filter on device team0
[  332.180592][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  332.190505][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  332.200715][ T3609] bridge0: port 1(bridge_slave_0) entered blocking state
[  332.207859][ T3609] bridge0: port 1(bridge_slave_0) entered forwarding state
[  332.229190][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  332.237753][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  332.246912][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  332.255611][ T3609] bridge0: port 2(bridge_slave_1) entered blocking state
[  332.262847][ T3609] bridge0: port 2(bridge_slave_1) entered forwarding state
[  332.270898][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  332.280953][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  332.291395][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  332.302460][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  332.320345][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  332.328943][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  332.337729][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  332.346740][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  332.355899][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  332.369309][T10037] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  332.383390][T10037] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  332.393984][ T7968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  332.403447][ T7968] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  332.560533][ T8980] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  332.569874][ T8980] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  332.584001][T10037] 8021q: adding VLAN 0 to HW filter on device batadv0
[  332.608524][ T8980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  332.617381][ T8980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  332.635623][ T7968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  332.644523][ T7968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  332.653907][ T7968] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  332.662087][ T7968] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  332.672312][T10037] device veth0_vlan entered promiscuous mode
[  332.685809][T10037] device veth1_vlan entered promiscuous mode
[  332.708093][ T7968] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  332.717050][ T7968] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  332.725793][ T7968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  332.735441][ T7968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  332.746474][T10037] device veth0_macvtap entered promiscuous mode
[  332.759241][T10037] device veth1_macvtap entered promiscuous mode
[  332.774677][T10037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  332.786594][T10037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  332.796860][T10037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  332.807447][T10037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  332.818566][T10037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  332.829864][T10037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  332.840578][T10037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  332.852039][T10037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  332.863976][T10037] batman_adv: batadv0: Interface activated: batadv_slave_0
[  332.873988][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  332.883585][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  332.892883][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  332.903251][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  332.915295][T10037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  332.927466][T10037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  332.938596][T10037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  332.950359][T10037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  332.961099][T10037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  332.974495][T10037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  332.985351][T10037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  332.997239][T10037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  333.010780][T10037] batman_adv: batadv0: Interface activated: batadv_slave_1
[  333.020221][ T7967] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  333.030443][ T7967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  333.044915][T10037] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  333.055032][T10037] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  333.064616][T10037] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  333.076576][T10037] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  333.155625][   T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  333.164163][   T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  333.177164][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  333.207264][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  333.216264][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  333.230223][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  333.751007][ T3578] Bluetooth: hci5: command tx timeout
[  335.830041][ T3578] Bluetooth: hci5: command tx timeout
[  337.908694][ T3578] Bluetooth: hci5: command tx timeout
[  339.748942][ T3578] Bluetooth: hci4: command 0x0406 tx timeout
19:15:57 executing program 0:
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
vmsplice(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="1c19c73b5123d59cbdba1680ae4c", 0xe}], 0x1, 0x0)
r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
splice(r0, 0x0, r2, 0x0, 0x10, 0x3)

19:15:57 executing program 3:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10)
timer_create(0x0, 0x0, &(0x7f0000000000))
timer_getoverrun(0x0)

19:15:57 executing program 4:
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000040)=ANY=[@ANYRES8=0x0, @ANYRESHEX=0x0, @ANYRES16=0x0], 0x1, 0x76a, &(0x7f0000000fc0)="$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")
rename(&(0x7f00000002c0)='./file2\x00', &(0x7f0000000340)='./bus\x00')
r0 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0)
write$binfmt_script(r0, &(0x7f0000001740)=ANY=[], 0x1014)

19:15:57 executing program 2:
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x80000c, &(0x7f0000000480)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303030342c6e6c733d63703433372c73657373696f6e3d307866666666666666662c666666666637662c747970653d883b7f382c6e6c733d69736f383835392d372c6e6f6465636f6d706f73652c7569643d", @ANYRESHEX=0x0, @ANYBLOB="2c756d61736b3d30303030303030303030303030303030303030303030312c63726561746f723d85f194712c626172726965722c63726561746f723d65fe04c22c6e6f6465636f6d706f73652c6465636f6d706f73652c756d61736b3d30303030303030303030303030303030303030303030332c7569643d", @ANYRESHEX=0x0, @ANYBLOB="2c63726561746f723dca076de42c756d61736b3d30303030303030303030303030303030303030303030362c6e6f626172726921fc2c6769643d", @ANYRESHEX, @ANYBLOB=',\x00'], 0x1, 0x6da, &(0x7f0000004980)="$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")

19:15:57 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000023000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000080)="0f22843e0f01c32e660f38802cf2a5baf80c66b8f3f6428b66efbafc0cb00eeeb8de008ec00f01720066b9120a00000f32676736660f75110f01d1", 0x3b}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

19:15:57 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
mount(&(0x7f0000000200)=ANY=[@ANYBLOB='/'], &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='exfat\x00', 0x0, 0x0)

[  357.920954][T10090] loop4: detected capacity change from 0 to 2048
[  357.942955][T10089] loop2: detected capacity change from 0 to 1024
[  357.963091][T10089] hfsplus: session requires an argument
19:15:57 executing program 3:
r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x0, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0xc0000000, 0x4, {0x0, @sdr}})

[  357.969724][T10089] hfsplus: unable to parse mount options
[  358.014513][T10096] syz-executor.1[10096] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
19:15:57 executing program 2:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r0}, 0x10)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

[  358.014635][T10096] syz-executor.1[10096] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  358.055631][T10090] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  358.129929][T10096] /: Can't open blockdev
19:15:57 executing program 3:
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff)
ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff)
r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r1, 0xab08)

19:15:57 executing program 1:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})

[  358.154803][  T120] block nbd1: Possible stuck request ffff888062338000: control (read@0,4096B). Runtime 60 seconds
19:15:57 executing program 4:
r0 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write$sysctl(r0, &(0x7f0000000000)='7\x00', 0x2)

19:15:57 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000023000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000080)="0f22843e0f01c32e660f38802cf2a5baf80c66b8f3f6428b66efbafc0cb00eeeb8de008ec00f01720066b9120a00000f32676736660f75110f01d1", 0x3b}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  358.253081][T10105] block nbd3: NBD_DISCONNECT
[  358.258277][T10090] syz-executor.4 (10090) used greatest stack depth: 18656 bytes left
[  358.299267][ T3564] EXT4-fs (loop4): unmounting filesystem.
19:15:58 executing program 3:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x77359400}, 0x0, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)

19:15:58 executing program 4:
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f00000001c0), 0x2, 0x0)
read(r1, 0x0, 0x0)

19:15:58 executing program 2:
r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x0, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0xc0000000, 0x4, {0x0, @sdr}})

19:15:58 executing program 3:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10)
r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
sync_file_range(r1, 0x0, 0x0, 0x0)

19:15:58 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000005000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='mm_khugepaged_scan_pmd\x00', r0}, 0x10)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000001f40)={'ip6gre0\x00', &(0x7f0000001ec0)={'ip6gre0\x00', 0x0, 0x4, 0x7, 0x8, 0x0, 0x35, @private0, @ipv4={'\x00', '\xff\xff', @empty}, 0x1, 0x40, 0x9, 0x5}})
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000007580)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x4000081)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r2, 0x0, 0x0)
dup2(r2, r1)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x2, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0)
getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab)
r7 = socket$tipc(0x1e, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r7, 0x1, 0x0, 0x0, 0x4, {0xa, 0x4e23, 0x5, @loopback}}}, 0x3a)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f00000004c0)={0x1})
sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000073c0)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0000000000000000f3ff00000800010062706600200002000800030000000c0008000600", @ANYRES32, @ANYBLOB="0c0007002e2f66696c65300d9e31aecc76cc51ca5b6c3706e40419e1785c120250c0cc3ee5db574b84469f2f32d36e31f80b9b69ec2207dcae23a59ddc13d5795f439e4fba0a84edc6d963a19716c4d30e288885726bcfc162b1b49b"], 0x4c}}, 0x0)

19:15:58 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000240)='cpuacct.usage_user\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="b902bb084c68a26c690dcab26d054e00000000955e598f0659043610a3fd00f74d7beb764baf7df19d"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xc000})
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

19:15:58 executing program 3:
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff)
ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff)
r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r1, 0xab08)

19:15:58 executing program 2:
r0 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write$sysctl(r0, &(0x7f0000000000)='7\x00', 0x2)

[  358.671877][T10124] block nbd3: NBD_DISCONNECT
19:15:58 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000023000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000080)="0f22843e0f01c32e660f38802cf2a5baf80c66b8f3f6428b66efbafc0cb00eeeb8de008ec00f01720066b9120a00000f32676736660f75110f01d1", 0x3b}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

19:15:58 executing program 2:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x77359400}, 0x0, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)

19:15:58 executing program 3:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000013c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
flock(r1, 0x6)

[  358.795209][   T52] block nbd0: Connection timed out, retrying (0/2 alive)
[  358.804782][   T52] blk_print_req_error: 324 callbacks suppressed
[  358.804801][   T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  358.822936][   T52] buffer_io_error: 323 callbacks suppressed
[  358.822955][   T52] Buffer I/O error on dev nbd0, logical block 0, async page read
[  358.837979][   T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  358.848282][   T52] Buffer I/O error on dev nbd0, logical block 0, async page read
[  358.857752][   T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  358.867815][   T52] Buffer I/O error on dev nbd0, logical block 0, async page read
[  358.877231][   T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  358.886740][   T52] Buffer I/O error on dev nbd0, logical block 0, async page read
[  358.895653][   T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  358.905772][   T52] Buffer I/O error on dev nbd0, logical block 0, async page read
[  358.914487][   T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  358.924326][   T52] Buffer I/O error on dev nbd0, logical block 0, async page read
[  358.934293][   T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  358.944233][   T52] Buffer I/O error on dev nbd0, logical block 0, async page read
[  358.958600][   T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  358.968230][   T52] Buffer I/O error on dev nbd0, logical block 0, async page read
[  358.976762][ T4352] ldm_validate_partition_table(): Disk read failed.
[  358.987226][   T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  358.996689][   T52] Buffer I/O error on dev nbd0, logical block 0, async page read
[  359.004923][   T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  359.015221][   T52] Buffer I/O error on dev nbd0, logical block 0, async page read
[  359.039678][ T4352] Dev nbd0: unable to read RDB block 0
19:15:58 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000040)="363e660faebf000000000f20d835080000000f22d866ba410066b800000f0726400f01c966b8e5000f00d00f20dff30f1aa8008000008f2878c32900c4410e11eb"}], 0xaaaaaaaaaaaab33, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  359.063734][ T4352]  nbd0: unable to read partition table
[  359.092561][ T4352] ldm_validate_partition_table(): Disk read failed.
[  359.100112][ T4352] Dev nbd0: unable to read RDB block 0
[  359.106219][ T4352]  nbd0: unable to read partition table
19:15:58 executing program 4:
syz_emit_ethernet(0x4e, &(0x7f0000000080)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1295cc", 0x18, 0x3a, 0x0, @private0, @mcast2, {[], @mld={0x83, 0x0, 0x0, 0x0, 0x0, @remote}}}}}}, 0x0)

19:15:58 executing program 3:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000005000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='mm_khugepaged_scan_pmd\x00', r0}, 0x10)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000001f40)={'ip6gre0\x00', &(0x7f0000001ec0)={'ip6gre0\x00', 0x0, 0x4, 0x7, 0x8, 0x0, 0x35, @private0, @ipv4={'\x00', '\xff\xff', @empty}, 0x1, 0x40, 0x9, 0x5}})
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000007580)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x4000081)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r2, 0x0, 0x0)
dup2(r2, r1)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x2, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0)
getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab)
r7 = socket$tipc(0x1e, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r7, 0x1, 0x0, 0x0, 0x4, {0xa, 0x4e23, 0x5, @loopback}}}, 0x3a)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f00000004c0)={0x1})
sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000073c0)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0000000000000000f3ff00000800010062706600200002000800030000000c0008000600", @ANYRES32, @ANYBLOB="0c0007002e2f66696c65300d9e31aecc76cc51ca5b6c3706e40419e1785c120250c0cc3ee5db574b84469f2f32d36e31f80b9b69ec2207dcae23a59ddc13d5795f439e4fba0a84edc6d963a19716c4d30e288885726bcfc162b1b49b"], 0x4c}}, 0x0)

19:15:59 executing program 4:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0)
r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r1, 0xab08)

19:15:59 executing program 3:
r0 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write$sysctl(r0, &(0x7f0000000000)='7\x00', 0x2)

19:15:59 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg1\x00', 0x1001})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x20)
close(r0)

[  359.522949][T10147] block nbd4: NBD_DISCONNECT
19:15:59 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x77359400}, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

19:15:59 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000240)='cpuacct.usage_user\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="b902bb084c68a26c690dcab26d054e00000000955e598f0659043610a3fd00f74d7beb764baf7df19d"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xc000})
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

19:15:59 executing program 2:
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000)

[  359.726377][ T3579] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  359.755380][ T3579] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  359.765956][ T3579] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
19:15:59 executing program 3:
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0xea, 0x0, 0x2016}}}, 0x7)
syz_emit_vhci(0x0, 0x0)

[  359.776454][ T3579] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  359.798874][ T3579] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  359.809129][ T3579] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
19:15:59 executing program 3:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = dup2(r0, r0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0)
sendto$inet6(r2, &(0x7f00000002c0)='\f', 0x1, 0x0, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup3(r2, r3, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/4096, 0xfffffffffffffeea, 0x0, 0x0}, &(0x7f0000000280)=0x40)
r4 = fcntl$dupfd(r3, 0x0, r3)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000001380)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xa9, 0x0, 0x0, 0xc00c0000}, &(0x7f0000001400)=0x40)

19:15:59 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}})

[  359.882533][ T3579] Bluetooth: hci3: unexpected event for opcode 0x2016
[  359.964901][T10164] syz-executor.2[10164] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
19:15:59 executing program 2:
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
write$sysctl(0xffffffffffffffff, &(0x7f0000000000)='7\x00', 0x2)

19:15:59 executing program 4:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0)
r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r1, 0xab08)

19:15:59 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x77359400}, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

19:15:59 executing program 2:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000000c0)={0x92, @tick=0xffffffff})

[  359.965007][T10164] syz-executor.2[10164] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  360.354761][T10176] block nbd4: NBD_DISCONNECT
19:16:00 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000200)="0f00dd0f181cfa43f4b800000000ba000000800f30c48111e3a2f806000066660f3881b500000100660f38810026f2ab6426430f8ea510606c67440f79aee8dbd001f26d", 0x44}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000140)={[], 0x10000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

19:16:00 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000200)="0f00dd0f181cfa43f4b800000000ba000000800f30c48111e3a2f806000066660f3881b500000100660f38810026f2ab6426430f8ea510606c67440f79aee8dbd001f26d", 0x44}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000140)={[], 0x10000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[  360.537397][T10154] chnl_net:caif_netlink_parms(): no params data found
[  360.812700][T10154] bridge0: port 1(bridge_slave_0) entered blocking state
[  360.820416][T10154] bridge0: port 1(bridge_slave_0) entered disabled state
[  360.851795][T10154] device bridge_slave_0 entered promiscuous mode
[  360.897150][T10154] bridge0: port 2(bridge_slave_1) entered blocking state
[  360.905628][T10154] bridge0: port 2(bridge_slave_1) entered disabled state
[  360.921042][T10154] device bridge_slave_1 entered promiscuous mode
[  360.989223][T10154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  361.011025][T10154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  361.111995][T10154] team0: Port device team_slave_0 added
[  361.121140][T10154] team0: Port device team_slave_1 added
[  361.158925][T10154] batman_adv: batadv0: Adding interface: batadv_slave_0
[  361.166305][T10154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  361.196008][T10154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  361.213923][T10154] batman_adv: batadv0: Adding interface: batadv_slave_1
[  361.225139][T10154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  361.253890][T10154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  361.317381][T10154] device hsr_slave_0 entered promiscuous mode
[  361.333853][T10154] device hsr_slave_1 entered promiscuous mode
[  361.346120][T10154] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  361.355466][T10154] Cannot create hsr debugfs directory
[  361.495010][   T11] device hsr_slave_0 left promiscuous mode
[  361.503750][   T11] device hsr_slave_1 left promiscuous mode
[  361.512224][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  361.523635][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  361.535029][   T11] device bridge_slave_1 left promiscuous mode
[  361.541724][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  361.551894][   T11] device bridge_slave_0 left promiscuous mode
[  361.559605][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  361.661748][   T11] team0 (unregistering): Port device team_slave_1 removed
[  361.682563][   T11] team0 (unregistering): Port device team_slave_0 removed
[  361.697011][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  361.717391][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  361.799303][   T11] bond0 (unregistering): Released all slaves
[  361.828570][ T3578] Bluetooth: hci0: command tx timeout
[  362.604732][T10154] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  362.622408][T10154] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  362.647009][T10154] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  362.666706][T10154] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  362.885866][T10154] 8021q: adding VLAN 0 to HW filter on device bond0
[  362.932168][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  362.959371][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  362.972372][T10154] 8021q: adding VLAN 0 to HW filter on device team0
[  363.010281][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  363.029427][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  363.049448][  T152] bridge0: port 1(bridge_slave_0) entered blocking state
[  363.057682][  T152] bridge0: port 1(bridge_slave_0) entered forwarding state
[  363.078953][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  363.098576][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  363.129254][  T152] bridge0: port 2(bridge_slave_1) entered blocking state
[  363.136466][  T152] bridge0: port 2(bridge_slave_1) entered forwarding state
[  363.168979][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  363.177259][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  363.199900][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  363.221190][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  363.240170][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  363.304957][T10154] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  363.328412][T10154] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  363.361613][ T8980] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  363.371661][ T8980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  363.389692][ T8980] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  363.409601][ T8980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  363.439294][ T8980] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  363.455157][ T8980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  363.464122][ T8980] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  363.480853][ T8980] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  363.858905][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  363.867751][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  363.891215][T10154] 8021q: adding VLAN 0 to HW filter on device batadv0
[  363.910935][ T3578] Bluetooth: hci0: command tx timeout
[  363.917073][ T3578] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  363.928633][ T3578] Bluetooth: hci3: Injecting HCI hardware error event
[  363.940413][ T3579] Bluetooth: hci3: hardware error 0x00
[  363.991617][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  364.002283][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  364.067662][ T8980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  364.086529][ T8980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  364.100011][T10154] device veth0_vlan entered promiscuous mode
[  364.115787][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  364.124385][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  364.147116][T10154] device veth1_vlan entered promiscuous mode
[  364.205042][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  364.221711][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  364.237431][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  364.258068][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  364.270578][T10154] device veth0_macvtap entered promiscuous mode
[  364.326513][T10154] device veth1_macvtap entered promiscuous mode
[  364.356238][T10154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  364.369566][T10154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  364.379783][T10154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  364.392900][T10154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  364.407587][T10154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  364.424158][T10154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  364.435546][T10154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  364.446150][T10154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  364.463243][T10154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  364.477482][T10154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  364.503767][T10154] batman_adv: batadv0: Interface activated: batadv_slave_0
[  364.521833][ T6759] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  364.541019][ T6759] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  364.563100][ T6759] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  364.575949][ T6759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  364.594338][T10154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  364.615411][T10154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  364.626158][T10154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  364.637756][T10154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  364.649576][T10154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  364.660938][T10154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  364.671514][T10154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  364.683296][T10154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  364.694054][T10154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  364.706436][T10154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  364.721632][T10154] batman_adv: batadv0: Interface activated: batadv_slave_1
[  364.749388][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  364.759529][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  364.772453][T10154] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  364.783585][T10154] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  364.802979][T10154] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  364.817975][T10154] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  364.976593][   T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  364.996010][   T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  365.049316][ T6759] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  365.069613][   T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  365.080253][   T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  365.096128][ T6759] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  365.988587][ T3579] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  365.988685][ T3578] Bluetooth: hci0: command tx timeout
[  368.069963][ T3578] Bluetooth: hci0: command tx timeout
[  368.164924][ T3002] udevd[3002]: worker [3701] /devices/virtual/block/nbd1 is taking a long time
[  378.642659][ T1255] ieee802154 phy0 wpan0: encryption failed: -22
[  378.649411][ T1255] ieee802154 phy1 wpan1: encryption failed: -22
19:16:27 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0xffffff83, 0x1, 0x6})

19:16:27 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000240)='cpuacct.usage_user\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="b902bb084c68a26c690dcab26d054e00000000955e598f0659043610a3fd00f74d7beb764baf7df19d"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xc000})
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

19:16:27 executing program 1:
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000023000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000080)="0f22843e0f01c32e660f38802cf2a5baf80c66b8f3f6428b66efbafc0cb00eeeb8de008ec00f01720066b9120a00000f32676736660f75110f01d1", 0x3b}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)

19:16:27 executing program 4:
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000105c0)='./file0\x00', 0x1218058, &(0x7f0000000000)=ANY=[], 0x1, 0x105a6, &(0x7f0000020bc0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x41009432, &(0x7f00000000c0))

19:16:27 executing program 0:
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
vmsplice(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="1c19c73b5123d59cbdba1680ae4c", 0xe}], 0x1, 0x0)
r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
splice(r0, 0x0, r2, 0x0, 0x10, 0x3)

[  388.229638][  T120] block nbd1: Possible stuck request ffff888062338000: control (read@0,4096B). Runtime 90 seconds
19:16:27 executing program 3:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000009fff514a000000003a810000850000000700000085000000d000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='contention_end\x00', r0}, 0x10)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
modify_ldt$write2(0x11, &(0x7f0000000140), 0x10)
syz_clone3(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

19:16:28 executing program 0:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0)
r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r1, 0xab08)

[  388.490314][T10292] block nbd0: NBD_DISCONNECT
19:16:28 executing program 0:
pipe(&(0x7f00000002c0)={<r0=>0xffffffffffffffff})
fchownat(r0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0)

19:16:28 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000200)="0f00dd0f181cfa43f4b800000000ba000000800f30c48111e3a2f806000066660f3881b500000100660f38810026f2ab6426430f8ea510606c67440f79aee8dbd001f26d", 0x44}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000140)={[], 0x10000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

19:16:28 executing program 0:
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount$tmpfs(0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000000)={[{@huge_within_size}]})
chdir(&(0x7f0000000140)='./file0\x00')
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
ftruncate(r0, 0x8208200)
r1 = open(&(0x7f0000000780)='./bus\x00', 0x14117e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x604100, 0x7ffffe, 0x4002011, r1, 0x0)

19:16:28 executing program 2:
madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4)

19:16:28 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})

19:16:28 executing program 3:
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
vmsplice(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="1c19c73b5123d59cbdba1680ae4c", 0xe}], 0x1, 0x0)
r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
splice(r0, 0x0, r2, 0x0, 0x10, 0x3)

[  389.060970][ T1196] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
19:16:28 executing program 3:
r0 = syz_open_dev$ndb(0x0, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r2, 0xab08)

[  389.197277][ T1196] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  389.294670][T10310] block nbd3: NBD_DISCONNECT
19:16:29 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0xffffff83, 0x1, 0x6})

[  389.386621][ T1196] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
19:16:29 executing program 3:
madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0)
madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0)

[  389.529142][ T1196] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
19:16:29 executing program 3:
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0)
ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0xffffffffffffffff)
ioctl$NBD_CLEAR_SOCK(r2, 0xab08)
ioctl$NBD_DO_IT(r0, 0xab03)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)

[  389.944092][T10317] block nbd3: NBD_DISCONNECT
[  390.012755][T10319] block nbd3: Disconnected due to user request.
[  390.038212][T10319] block nbd3: shutting down sockets
19:16:29 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x77359400}, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

19:16:30 executing program 3:
r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
write$sysctl(r0, 0x0, 0x0)

[  390.430448][ T3579] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  390.444277][ T3579] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  390.455749][ T3579] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  390.466747][ T3579] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  390.476849][ T3579] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  390.485206][ T3579] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
19:16:30 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
socket$packet(0x11, 0x0, 0x300)
socket$packet(0x11, 0x2, 0x300)
creat(&(0x7f0000000040)='./bus\x00', 0x0)
quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000280)={0x0, 0x1, 0x6, @multicast}, 0x10)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, 0x0, 0x40000)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xa}}, 0x14}}, 0x0)

19:16:30 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000002040), &(0x7f0000002080)=0x10)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00001a6000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="2ef08627f30f011e00206f26660f38dbca6767363816baa00066ed826dd60066b90b0a000066b80080000066ba000000000f3065d1b10000b819010f00d0", 0x3e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

19:16:30 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r1=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c000580050027"], 0x44}}, 0x0)

[  391.133436][T10325] chnl_net:caif_netlink_parms(): no params data found
19:16:30 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x1f, 0x33, @action={{{}, {}, @device_b}, @vht_op_mode_ntf={0x15, 0x2, {0x0, 0x0, 0x0, 0x0, 0x1}}}}]}, 0x3c}}, 0x0)

19:16:31 executing program 3:
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0)
ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0xffffffffffffffff)
ioctl$NBD_DO_IT(r0, 0xab03)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)

[  391.535715][T10325] bridge0: port 1(bridge_slave_0) entered blocking state
[  391.549963][T10325] bridge0: port 1(bridge_slave_0) entered disabled state
[  391.584771][T10325] device bridge_slave_0 entered promiscuous mode
[  391.612222][T10356] block nbd3: shutting down sockets
19:16:31 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x77359400}, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  391.690284][ T1196] device hsr_slave_0 left promiscuous mode
[  391.698209][ T1196] device hsr_slave_1 left promiscuous mode
19:16:31 executing program 0:
syz_emit_ethernet(0x4f, &(0x7f0000000000)={@broadcast, @random="ef4ac323a7d9", @val, {@ipv4}}, 0x0)

19:16:31 executing program 4:
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
tkill(r0, 0x4)
ptrace$peeksig(0x4209, r0, &(0x7f0000000000)={0x0, 0x0, 0x2}, &(0x7f0000000040)=[{}, {}])

[  391.775786][ T1196] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  391.790049][   T27] audit: type=1800 audit(1711653391.470:37): pid=10300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=1953 res=0 errno=0
[  391.798833][ T1196] batman_adv: batadv0: Removing interface: batadv_slave_0
[  391.901488][ T1196] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  391.918516][ T1196] batman_adv: batadv0: Removing interface: batadv_slave_1
19:16:31 executing program 3:
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000600)={'syztnl1\x00', 0x0})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001800)={0x0, 0x0, "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", "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"})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140))
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x1c, r4, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0)

[  391.943928][ T1196] device bridge_slave_1 left promiscuous mode
[  391.971372][ T1196] bridge0: port 2(bridge_slave_1) entered disabled state
19:16:31 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r1=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c000580050027"], 0x44}}, 0x0)

[  392.012689][ T1196] device bridge_slave_0 left promiscuous mode
[  392.036734][ T1196] bridge0: port 1(bridge_slave_0) entered disabled state
[  392.101762][ T1196] device veth1_macvtap left promiscuous mode
[  392.107889][ T1196] device veth0_macvtap left promiscuous mode
[  392.127702][ T1196] device veth1_vlan left promiscuous mode
[  392.138485][ T1196] device veth0_vlan left promiscuous mode
19:16:31 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x1f, 0x33, @action={{{}, {}, @device_b}, @vht_op_mode_ntf={0x15, 0x2, {0x0, 0x0, 0x0, 0x0, 0x1}}}}]}, 0x3c}}, 0x0)

19:16:32 executing program 0:
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0)
ioctl$NBD_DO_IT(r0, 0xab03)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)

[  392.549043][ T3578] Bluetooth: hci5: command tx timeout
[  392.629287][T10375] block nbd0: server does not support multiple connections per device.
[  392.652532][T10375] block nbd0: shutting down sockets
19:16:32 executing program 0:
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000000)={[{@huge_within_size}]})
chdir(&(0x7f0000000140)='./file0\x00')
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
ftruncate(r0, 0x8208200)
r1 = open(&(0x7f0000000780)='./bus\x00', 0x14117e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x604100, 0x7ffffe, 0x4002011, r1, 0x0)

[  392.804674][ T1196] team0 (unregistering): Port device team_slave_1 removed
[  392.841432][ T1196] team0 (unregistering): Port device team_slave_0 removed
[  392.887950][ T1196] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  392.925255][ T1196] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  393.105703][ T1196] bond0 (unregistering): Released all slaves
[  393.188018][T10325] bridge0: port 2(bridge_slave_1) entered blocking state
[  393.200681][T10325] bridge0: port 2(bridge_slave_1) entered disabled state
[  393.217672][T10325] device bridge_slave_1 entered promiscuous mode
19:16:33 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f00000005c0)={0x0, 0x1, &(0x7f0000000300)=[r2], 0x0, 0x0, 0x0})

19:16:33 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x77359400}, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  393.460298][T10325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  393.524491][T10325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
19:16:33 executing program 4:
acct(&(0x7f0000001940)='./file0\x00')

[  393.683742][T10325] team0: Port device team_slave_0 added
[  393.735878][T10325] team0: Port device team_slave_1 added
19:16:33 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r1=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c000580050027"], 0x44}}, 0x0)

19:16:33 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100000620702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)

[  393.880343][T10325] batman_adv: batadv0: Adding interface: batadv_slave_0
[  393.888113][T10325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  393.957386][T10325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  393.995575][T10325] batman_adv: batadv0: Adding interface: batadv_slave_1
19:16:33 executing program 3:
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0)
ioctl$NBD_DO_IT(r0, 0xab03)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)

[  394.019735][T10325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
19:16:33 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'})

[  394.106273][T10325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  394.198889][T10399] block nbd3: server does not support multiple connections per device.
[  394.221930][T10397] block nbd3: shutting down sockets
19:16:34 executing program 3:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='jbd2_update_log_tail\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x6, 0x8, 0x40}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='jbd2_update_log_tail\x00', r2}, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu\x00', 0x26e1, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0x40086607, 0x20001412)

[  394.410522][T10325] device hsr_slave_0 entered promiscuous mode
19:16:34 executing program 4:
r0 = socket(0x200000100000011, 0x803, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'xfrm0\x00', <r2=>0x0})
sendto$packet(r0, &(0x7f0000000280)='M', 0x500, 0x0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14)

[  394.463381][T10325] device hsr_slave_1 entered promiscuous mode
[  394.639916][ T3578] Bluetooth: hci5: command tx timeout
19:16:34 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x77359400}, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

19:16:34 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10)

[  395.778780][   T27] audit: type=1800 audit(1711653395.460:38): pid=10379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=1967 res=0 errno=0
[  395.798912][    C0] vkms_vblank_simulate: vblank timer overrun
[  395.842082][T10325] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  395.881824][T10325] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  396.001421][T10325] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  396.013346][T10325] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  396.308742][T10325] 8021q: adding VLAN 0 to HW filter on device bond0
[  396.342028][ T7967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  396.360040][ T7967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  396.394011][T10325] 8021q: adding VLAN 0 to HW filter on device team0
[  396.434959][ T7967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  396.459363][ T7967] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  396.485309][ T7967] bridge0: port 1(bridge_slave_0) entered blocking state
[  396.494097][ T7967] bridge0: port 1(bridge_slave_0) entered forwarding state
[  396.549992][ T7968] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  396.579933][ T7968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  396.603359][ T7968] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  396.619896][ T7968] bridge0: port 2(bridge_slave_1) entered blocking state
[  396.627444][ T7968] bridge0: port 2(bridge_slave_1) entered forwarding state
[  396.644859][ T7968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  396.681466][ T6759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  396.691697][ T6759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  396.708879][ T3578] Bluetooth: hci5: command tx timeout
[  396.720436][ T6759] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  396.729522][ T6759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  396.749555][ T6759] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  396.769462][ T8980] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  396.786658][T10325] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  396.800895][T10325] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  396.814360][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  396.824143][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  396.835793][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  396.852221][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  396.862344][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  397.169788][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  397.177635][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  397.196097][T10325] 8021q: adding VLAN 0 to HW filter on device batadv0
[  397.223515][ T8980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  397.239584][ T8980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  397.299697][ T8980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  397.311432][ T8980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  397.323882][T10325] device veth0_vlan entered promiscuous mode
[  397.340753][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  397.350498][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  397.376377][T10325] device veth1_vlan entered promiscuous mode
[  397.426927][T10325] device veth0_macvtap entered promiscuous mode
[  397.437561][ T8980] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  397.448186][ T8980] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  397.457335][ T8980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  397.474029][ T8980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  397.495585][T10325] device veth1_macvtap entered promiscuous mode
[  397.517113][ T8980] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  397.556261][T10325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  397.570541][T10325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  397.591881][T10325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  397.607941][T10325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  397.628237][T10325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  397.646236][T10325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  397.665291][T10325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  397.692360][T10325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  397.706121][T10325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  397.723712][T10325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  397.744853][T10325] batman_adv: batadv0: Interface activated: batadv_slave_0
[  397.768249][ T6759] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  397.785543][ T6759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  397.796687][T10325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  397.809276][T10325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  397.820807][T10325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  397.843588][T10325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  397.855004][T10325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  397.866590][T10325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  397.878469][T10325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  397.889760][T10325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  397.904307][T10325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  397.916749][T10325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  397.930160][T10325] batman_adv: batadv0: Interface activated: batadv_slave_1
[  397.942268][ T8980] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  397.951346][ T8980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  397.964828][T10325] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  397.976323][T10325] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  397.986486][T10325] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  397.996356][T10325] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  398.082464][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  398.096743][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  398.121636][ T3692] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  398.131036][ T8980] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  398.131126][ T3692] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  398.155806][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  398.793832][ T3578] Bluetooth: hci5: command tx timeout
[  418.310169][  T120] block nbd1: Possible stuck request ffff888062338000: control (read@0,4096B). Runtime 120 seconds
19:16:58 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'})

19:16:58 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f00000002c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15)
r2 = dup(r1)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
r5 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0)
fstat(r5, 0x0)

19:16:58 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480))
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c000580050027"], 0x44}}, 0x0)

19:16:58 executing program 0:
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0)
ioctl$NBD_DO_IT(r0, 0xab03)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)

19:16:58 executing program 1:
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000023000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000080)="0f22843e0f01c32e660f38802cf2a5baf80c66b8f3f6428b66efbafc0cb00eeeb8de008ec00f01720066b9120a00000f32676736660f75110f01d1", 0x3b}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)

19:16:58 executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x3d5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000008000008500000050000000a500000097000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r2 = dup2(0xffffffffffffffff, r1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
syz_usb_control_io$hid(r0, &(0x7f0000000500)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0x0, "328151d1"}, @global=@item_4={0x3, 0x1, 0x0, "bbcd655d"}]}}, 0x0}, 0x0)

19:16:58 executing program 3:
syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003000000102505a8a44000010203010902"], &(0x7f0000000140)={0x0, 0x0, 0x45})

19:16:58 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x77359400}, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  419.099607][T10459] block nbd0: server does not support multiple connections per device.
[  419.124608][T10458] block nbd0: shutting down sockets
19:16:58 executing program 0:
syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x1000000, &(0x7f0000000200)={[{@iocharset={'iocharset', 0x3d, 'cp860'}}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@utf8}, {}, {@namecase}]}, 0x1, 0x150e, &(0x7f00000041c0)="$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")
creat(&(0x7f0000000040)='./file0/file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0)

[  419.333695][T10468] loop0: detected capacity change from 0 to 256
[  419.352225][T10468] exfat: Deprecated parameter 'utf8'
[  419.373244][T10468] exfat: Deprecated parameter 'namecase'
[  419.393640][T10468] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d)
[  419.408588][ T3613] usb 2-1: new high-speed USB device number 28 using dummy_hcd
19:16:59 executing program 4:
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000000)={[{@huge_within_size}]})
chdir(&(0x7f0000000140)='./file0\x00')
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
ftruncate(r0, 0x8208200)
r1 = open(&(0x7f0000000780)='./bus\x00', 0x14117e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x604100, 0x7ffffe, 0x4002011, r1, 0x0)

[  419.438641][ T3654] usb 4-1: new high-speed USB device number 32 using dummy_hcd
19:16:59 executing program 0:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})

[  419.632443][    T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  419.661418][ T3613] usb 2-1: Using ep0 maxpacket: 16
[  419.698508][ T3654] usb 4-1: Using ep0 maxpacket: 16
[  419.761623][    T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  419.808546][ T3613] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  419.826845][ T3613] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  419.851828][ T3613] usb 2-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00
[  419.865762][ T3613] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  419.878807][ T3654] usb 4-1: config 0 has no interfaces?
[  419.884885][ T3613] usb 2-1: config 0 descriptor??
[  419.901443][    T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  419.971498][    T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  420.039469][ T3654] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  420.054424][ T3654] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  420.077121][ T3654] usb 4-1: Product: syz
[  420.100592][ T3654] usb 4-1: Manufacturer: syz
[  420.112514][ T3654] usb 4-1: SerialNumber: syz
[  420.146060][ T3654] usb 4-1: config 0 descriptor??
[  420.429717][ T3613] input: HID 054c:03d5 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:054C:03D5.000C/input/input33
[  420.483618][ T3654] usb 4-1: USB disconnect, device number 32
[  420.548010][ T3613] sony 0003:054C:03D5.000C: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.1-1/input0
[  420.604911][ T3613] usb 2-1: USB disconnect, device number 28
[  420.832894][ T3581] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  420.861325][ T3581] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  420.872314][ T3581] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
19:17:00 executing program 3:
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000023000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000080)="0f22843e0f01c32e660f38802cf2a5baf80c66b8f3f6428b66efbafc0cb00eeeb8de008ec00f01720066b9120a00000f32676736660f75110f01d1", 0x3b}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)

[  420.890525][ T3579] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  420.900221][ T3579] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  420.907867][ T3579] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
19:17:00 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480))
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c000580050027"], 0x44}}, 0x0)

19:17:00 executing program 1:
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f0000001500)=[{&(0x7f0000000200)="a9abdf360c93b529af18760eba0b4c9f8e4605e88712b4cdb0a48767ad7458902cbe654b8ed74ca696ab9e31b96b08f2f76a8aeb1ce5c1e63d3c2dbcbef38ce48ecbddf0df2a0fd3f75a3634b661f7dce952aaa29963e6d0", 0x58}, {&(0x7f0000000340)="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", 0xfa9}], 0x2)

19:17:00 executing program 3:
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0xffffffffffffffff)
ioctl$NBD_DO_IT(r0, 0xab03)
ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04)

19:17:01 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x77359400}, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  421.428837][T10497] block nbd3: server does not support multiple connections per device.
[  421.440765][T10495] block nbd3: shutting down sockets
19:17:01 executing program 3:
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x3, &(0x7f0000000200), 0x1, 0x175, &(0x7f0000000240)="$eJzsVb1OMkEUPZcdFr6v+PLVxsRColAIy6LGTivDA/gAEliRuPjDkiiEYq14Dxtew8J3sDCxwcKYWGBvMDNzdx0eQBOSOcnuuffM3LkzU5w5ja4iAPicjZo4gIKDf3giggCwRlo7zGl+czWXOX8Vmkus3zHPGdFgeNYIw6D3g8Fv9LCBDWywbMF3un+bwbvyssfZqCmDY3YpqbX0R+YcB8CDMWdFqI8czNM50vxksgmg0u9eVqLBcKvTbbSDdnDu+7Vdb9vzdvzKSScMPP0no0VGeyUklwBIT/1jjGcBPLPB/sUiyNgaj5NZ6xrmXFxfrM0YtQkT7tNa9nbIKzjCBvIArmMy1IJaRUAdqQ6Cw0lVGPvTvfJqoNy8CFtjECgpm0Cka1SnyKaJbya1vTjZ9pi5wFxnnjBPmZM3K3mLhFrhhbNiDLi4afT7vaqUdJRqfqr5/2PzwmTXD3fxcKs5WFhYWFhYWFgsGb4CAAD//59xaTw=")

[  421.649768][    T9] device hsr_slave_0 left promiscuous mode
[  421.660681][    T9] device hsr_slave_1 left promiscuous mode
[  421.669638][T10505] loop3: detected capacity change from 0 to 8
[  421.676476][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  421.685579][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[  421.700073][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  421.708262][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
19:17:01 executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x5, 0x0, 0xb, 0x2, 0x0, 0xfff8}, {0x18, 0x8}, {}, {0x14, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x5, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000016c0)={<r0=>0xffffffffffffffff})
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = dup2(r0, r1)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b26, &(0x7f00000000c0)={'wlan1\x00'})

[  421.762070][    T9] device bridge_slave_1 left promiscuous mode
[  421.802073][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
19:17:01 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000023000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000080)="0f22843e0f01c32e660f38802cf2a5baf80c66b8f3f6428b66efbafc0cb00eeeb8de008ec00f01720066b9120a00000f32676736660f75110f01d1", 0x3b}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  421.840111][    T9] device bridge_slave_0 left promiscuous mode
[  421.882252][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  421.940258][    T9] device veth1_macvtap left promiscuous mode
[  421.963613][    T9] device veth0_macvtap left promiscuous mode
[  421.981636][    T9] device veth1_vlan left promiscuous mode
[  421.995903][    T9] device veth0_vlan left promiscuous mode
19:17:01 executing program 3:
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000001780), 0x3, 0x2)
pwritev2(r0, &(0x7f0000002f00)=[{&(0x7f0000001d00)='j', 0x1}], 0x1, 0x0, 0x0, 0x0)

19:17:01 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480))
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c000580050027"], 0x44}}, 0x0)

19:17:02 executing program 4:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000008000008500000050000000a50000009700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r1 = dup2(r0, r0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000001a00)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x0})

[  422.483270][   T27] audit: type=1800 audit(1711653422.160:39): pid=10473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=1961 res=0 errno=0
[  422.536203][    T9] team0 (unregistering): Port device team_slave_1 removed
[  422.570501][    T9] team0 (unregistering): Port device team_slave_0 removed
[  422.609263][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  422.654720][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  422.794587][    T9] bond0 (unregistering): Released all slaves
19:17:02 executing program 1:
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0xffffffffffffffff)
ioctl$NBD_DO_IT(r0, 0xab03)
ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04)

19:17:02 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x77359400}, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  422.948611][ T3578] Bluetooth: hci4: command tx timeout
19:17:02 executing program 3:
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x3, &(0x7f0000000200), 0x1, 0x175, &(0x7f0000000240)="$eJzsVb1OMkEUPZcdFr6v+PLVxsRColAIy6LGTivDA/gAEliRuPjDkiiEYq14Dxtew8J3sDCxwcKYWGBvMDNzdx0eQBOSOcnuuffM3LkzU5w5ja4iAPicjZo4gIKDf3giggCwRlo7zGl+czWXOX8Vmkus3zHPGdFgeNYIw6D3g8Fv9LCBDWywbMF3un+bwbvyssfZqCmDY3YpqbX0R+YcB8CDMWdFqI8czNM50vxksgmg0u9eVqLBcKvTbbSDdnDu+7Vdb9vzdvzKSScMPP0no0VGeyUklwBIT/1jjGcBPLPB/sUiyNgaj5NZ6xrmXFxfrM0YtQkT7tNa9nbIKzjCBvIArmMy1IJaRUAdqQ6Cw0lVGPvTvfJqoNy8CFtjECgpm0Cka1SnyKaJbya1vTjZ9pi5wFxnnjBPmZM3K3mLhFrhhbNiDLi4afT7vaqUdJRqfqr5/2PzwmTXD3fxcKs5WFhYWFhYWFgsGb4CAAD//59xaTw=")

[  423.076369][T10482] chnl_net:caif_netlink_parms(): no params data found
[  423.206392][T10528] loop3: detected capacity change from 0 to 8
19:17:03 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000023000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000080)="0f22843e0f01c32e660f38802cf2a5baf80c66b8f3f6428b66efbafc0cb00eeeb8de008ec00f01720066b9120a00000f32676736660f75110f01d1", 0x3b}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  423.435091][T10482] bridge0: port 1(bridge_slave_0) entered blocking state
[  423.500483][T10482] bridge0: port 1(bridge_slave_0) entered disabled state
[  423.543952][T10482] device bridge_slave_0 entered promiscuous mode
[  423.566807][T10482] bridge0: port 2(bridge_slave_1) entered blocking state
[  423.593795][T10482] bridge0: port 2(bridge_slave_1) entered disabled state
[  423.632035][T10482] device bridge_slave_1 entered promiscuous mode
19:17:03 executing program 3:
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
utimensat(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)

[  423.648455][ T4449] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  423.764383][T10482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
19:17:03 executing program 3:
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000000)={[{@huge_within_size}]})
chdir(&(0x7f0000000140)='./file0\x00')
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
ftruncate(r0, 0x8208200)
r1 = open(&(0x7f0000000780)='./bus\x00', 0x14117e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x604100, 0x7ffffe, 0x4002011, r1, 0x0)

[  423.805272][T10482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  423.916405][T10482] team0: Port device team_slave_0 added
[  423.919929][ T4449] usb 5-1: Using ep0 maxpacket: 8
[  423.958011][T10482] team0: Port device team_slave_1 added
[  424.058717][T10482] batman_adv: batadv0: Adding interface: batadv_slave_0
[  424.066001][T10482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  424.139364][T10482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  424.148943][ T4449] usb 5-1: unable to get BOS descriptor or descriptor too short
[  424.169537][T10482] batman_adv: batadv0: Adding interface: batadv_slave_1
[  424.192322][T10482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  424.272348][T10482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  424.284537][ T4449] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  424.299821][ T4449] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  424.326401][ T4449] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  424.394746][T10482] device hsr_slave_0 entered promiscuous mode
[  424.411630][T10482] device hsr_slave_1 entered promiscuous mode
[  424.427557][T10482] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  424.442504][T10482] Cannot create hsr debugfs directory
[  424.513278][ T4449] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  424.533732][ T4449] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  424.563830][ T4449] usb 5-1: Product: syz
[  424.576277][ T4449] usb 5-1: Manufacturer: syz
[  424.592922][ T4449] usb 5-1: SerialNumber: syz
[  424.919842][ T4449] usb 5-1: 0:2 : does not exist
[  424.957385][ T4449] usb 5-1: USB disconnect, device number 37
[  425.028686][ T3578] Bluetooth: hci4: command tx timeout
19:17:05 executing program 4:
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
connect$inet6(r0, &(0x7f00000002c0), 0x1c)

19:17:05 executing program 4:
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r0=>0x0})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r0, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c000580050027"], 0x44}}, 0x0)

[  425.507310][T10482] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  425.574285][T10482] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  425.609141][T10482] netdevsim netdevsim2 netdevsim2: renamed from eth2
19:17:05 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x77359400}, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  425.640069][T10482] netdevsim netdevsim2 netdevsim3: renamed from eth3
19:17:05 executing program 4:
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x3, &(0x7f0000000200), 0x1, 0x175, &(0x7f0000000240)="$eJzsVb1OMkEUPZcdFr6v+PLVxsRColAIy6LGTivDA/gAEliRuPjDkiiEYq14Dxtew8J3sDCxwcKYWGBvMDNzdx0eQBOSOcnuuffM3LkzU5w5ja4iAPicjZo4gIKDf3giggCwRlo7zGl+czWXOX8Vmkus3zHPGdFgeNYIw6D3g8Fv9LCBDWywbMF3un+bwbvyssfZqCmDY3YpqbX0R+YcB8CDMWdFqI8czNM50vxksgmg0u9eVqLBcKvTbbSDdnDu+7Vdb9vzdvzKSScMPP0no0VGeyUklwBIT/1jjGcBPLPB/sUiyNgaj5NZ6xrmXFxfrM0YtQkT7tNa9nbIKzjCBvIArmMy1IJaRUAdqQ6Cw0lVGPvTvfJqoNy8CFtjECgpm0Cka1SnyKaJbya1vTjZ9pi5wFxnnjBPmZM3K3mLhFrhhbNiDLi4afT7vaqUdJRqfqr5/2PzwmTXD3fxcKs5WFhYWFhYWFgsGb4CAAD//59xaTw=")

[  425.956576][T10482] 8021q: adding VLAN 0 to HW filter on device bond0
[  426.007202][ T8980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  426.020225][T10577] loop4: detected capacity change from 0 to 8
[  426.037110][ T8980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  426.050887][T10482] 8021q: adding VLAN 0 to HW filter on device team0
[  426.072864][ T8980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  426.086439][ T8980] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
19:17:05 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000023000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000080)="0f22843e0f01c32e660f38802cf2a5baf80c66b8f3f6428b66efbafc0cb00eeeb8de008ec00f01720066b9120a00000f32676736660f75110f01d1", 0x3b}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  426.117219][ T8980] bridge0: port 1(bridge_slave_0) entered blocking state
[  426.124641][ T8980] bridge0: port 1(bridge_slave_0) entered forwarding state
[  426.174607][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  426.189345][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  426.208720][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  426.217726][  T152] bridge0: port 2(bridge_slave_1) entered blocking state
[  426.224942][  T152] bridge0: port 2(bridge_slave_1) entered forwarding state
[  426.246678][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  426.273694][ T6760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  426.293570][ T6760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  426.313719][ T6760] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  426.340227][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  426.353153][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  426.373939][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
19:17:06 executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000c40)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

[  426.410613][ T7967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  426.426232][ T7967] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  426.472375][T10482] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  426.507780][T10482] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  426.534905][ T6760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  426.551442][ T6760] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  426.818507][ T7967] usb 5-1: new high-speed USB device number 38 using dummy_hcd
19:17:06 executing program 3:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000008000008500000050000000a50000009700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r1 = dup2(r0, r0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000001a00)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x0})

[  426.904920][   T27] audit: type=1800 audit(1711653426.580:40): pid=10552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=1961 res=0 errno=0
[  427.108822][ T3578] Bluetooth: hci4: command tx timeout
[  427.137238][ T6760] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  427.149229][ T6760] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  427.172713][T10482] 8021q: adding VLAN 0 to HW filter on device batadv0
[  427.188901][ T7967] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  427.201280][ T8980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  427.212523][ T8980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  427.218683][ T7967] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  427.240038][ T8980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  427.250581][ T8980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  427.262056][ T7967] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  427.273950][T10482] device veth0_vlan entered promiscuous mode
[  427.276968][ T8980] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  427.291645][ T8980] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  427.304938][T10482] device veth1_vlan entered promiscuous mode
[  427.338366][ T7967] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  427.356591][ T8980] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  427.370341][ T7967] usb 5-1: config 0 descriptor??
[  427.380993][ T8980] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  427.395717][ T8980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  427.406724][ T8980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  427.448229][T10482] device veth0_macvtap entered promiscuous mode
[  427.473120][T10482] device veth1_macvtap entered promiscuous mode
[  427.506228][T10482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  427.519624][T10482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  427.530528][T10482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  427.542648][T10482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  427.574636][T10482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  427.595720][T10482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  427.615938][T10482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  427.627368][T10482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  427.645880][T10482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  427.658043][T10482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  427.671293][T10482] batman_adv: batadv0: Interface activated: batadv_slave_0
[  427.681304][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  427.695812][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  427.707372][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  427.724196][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  427.744546][T10482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  427.759877][T10482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  427.771557][T10482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  427.785655][T10482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  427.795958][T10482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  427.808150][T10482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  427.819021][T10482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  427.830986][T10482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  427.842029][T10482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  427.852928][T10482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  427.871715][T10482] batman_adv: batadv0: Interface activated: batadv_slave_1
[  427.887609][ T7967] keytouch 0003:0926:3333.000D: fixing up Keytouch IEC report descriptor
[  427.897192][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  427.908891][ T3613] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  427.926650][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  427.943119][ T7967] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.000D/input/input34
[  427.968091][T10482] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  427.990108][T10482] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  428.005703][T10482] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  428.014770][T10482] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  428.066048][ T7967] keytouch 0003:0926:3333.000D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[  428.101938][ T7967] usb 5-1: USB disconnect, device number 38
[  428.159067][ T3613] usb 4-1: Using ep0 maxpacket: 8
[  428.264465][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  428.282627][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  428.329005][ T3613] usb 4-1: unable to get BOS descriptor or descriptor too short
[  428.342302][ T6064] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  428.356727][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  428.366370][ T6064] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
19:17:08 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'})

[  428.394846][ T3654] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  428.418806][ T3613] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping
19:17:08 executing program 2:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0x4140, 0x0)

[  428.442624][ T3613] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  428.470522][ T3613] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
19:17:08 executing program 2:
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r0=>0x0})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r0, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c000580050027"], 0x44}}, 0x0)

19:17:08 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x77359400}, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

19:17:08 executing program 2:
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x3, &(0x7f0000000200), 0x1, 0x175, &(0x7f0000000240)="$eJzsVb1OMkEUPZcdFr6v+PLVxsRColAIy6LGTivDA/gAEliRuPjDkiiEYq14Dxtew8J3sDCxwcKYWGBvMDNzdx0eQBOSOcnuuffM3LkzU5w5ja4iAPicjZo4gIKDf3giggCwRlo7zGl+czWXOX8Vmkus3zHPGdFgeNYIw6D3g8Fv9LCBDWywbMF3un+bwbvyssfZqCmDY3YpqbX0R+YcB8CDMWdFqI8czNM50vxksgmg0u9eVqLBcKvTbbSDdnDu+7Vdb9vzdvzKSScMPP0no0VGeyUklwBIT/1jjGcBPLPB/sUiyNgaj5NZ6xrmXFxfrM0YtQkT7tNa9nbIKzjCBvIArmMy1IJaRUAdqQ6Cw0lVGPvTvfJqoNy8CFtjECgpm0Cka1SnyKaJbya1vTjZ9pi5wFxnnjBPmZM3K3mLhFrhhbNiDLi4afT7vaqUdJRqfqr5/2PzwmTXD3fxcKs5WFhYWFhYWFgsGb4CAAD//59xaTw=")

[  428.658816][ T3613] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  428.668199][ T3613] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  428.722894][ T3613] usb 4-1: Product: syz
[  428.727141][ T3613] usb 4-1: Manufacturer: syz
[  428.746923][ T3613] usb 4-1: SerialNumber: syz
[  428.763448][T10628] loop2: detected capacity change from 0 to 8
19:17:08 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000023000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000080)="0f22843e0f01c32e660f38802cf2a5baf80c66b8f3f6428b66efbafc0cb00eeeb8de008ec00f01720066b9120a00000f32676736660f75110f01d1", 0x3b}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

19:17:08 executing program 2:
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
ftruncate(r0, 0x8208200)
r1 = open(&(0x7f0000000780)='./bus\x00', 0x14117e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x604100, 0x7ffffe, 0x4002011, r1, 0x0)

[  429.088776][ T3613] usb 4-1: 0:2 : does not exist
[  429.140468][ T3613] usb 4-1: USB disconnect, device number 33
[  429.191630][ T3578] Bluetooth: hci4: command tx timeout
[  440.071496][ T1255] ieee802154 phy0 wpan0: encryption failed: -22
[  440.078059][ T1255] ieee802154 phy1 wpan1: encryption failed: -22
[  448.388869][  T120] block nbd1: Possible stuck request ffff888062338000: control (read@0,4096B). Runtime 150 seconds
19:17:29 executing program 0:
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r0=>0x0})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r0, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c000580050027"], 0x44}}, 0x0)

19:17:29 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'})

19:17:29 executing program 2:
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x1, 0x0, &(0x7f00000002c0)="b8", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000180)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0x7ffff038}, {0x6}]}, 0x10)
r2 = fcntl$dupfd(r0, 0x0, r1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[], 0x88}}, 0x0)

19:17:29 executing program 3:
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$setperm(0x5, r0, 0x21081c22)
keyctl$read(0xb, r0, &(0x7f0000000000)=""/4, 0x4)

19:17:29 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x77359400}, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

19:17:29 executing program 4:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='mm_page_alloc\x00', r0}, 0x10)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)

19:17:29 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000023000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000080)="0f22843e0f01c32e660f38802cf2a5baf80c66b8f3f6428b66efbafc0cb00eeeb8de008ec00f01720066b9120a00000f32676736660f75110f01d1", 0x3b}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

19:17:29 executing program 4:
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
ftruncate(r0, 0x8208200)
r1 = open(&(0x7f0000000780)='./bus\x00', 0x14117e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x604100, 0x7ffffe, 0x4002011, r1, 0x0)

19:17:29 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0xd2, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60010100009c110000000000000000000000ffff00000000ff02000000000000000000000000000100000e22009c90"], 0x0)
recvmmsg(r0, &(0x7f0000004100)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a00)=""/225, 0x94}], 0x1}}], 0x1, 0x0, 0x0)

19:17:29 executing program 3:
syz_emit_ethernet(0x6f, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x88, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x4d, 0x0, @wg=@data={0x4, 0x0, 0x0, '\x00'/53}}}}}}, 0x0)

19:17:29 executing program 3:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00', <r1=>0x0})
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000200)={@private2, r1}, 0x14)

19:17:29 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x1f, 0x33, @action={{{}, {}, @device_b}, @vht_op_mode_ntf={0x15, 0x2, {0x0, 0x0, 0x0, 0x0, 0x1}}}}]}, 0x3c}}, 0x0)

[  450.342722][ T3692] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  450.471044][ T3692] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  450.573465][ T3692] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  450.760944][ T3692] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  451.068863][ T3579] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  451.080239][ T3579] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  451.090589][ T3579] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  451.099350][ T3579] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  451.107865][ T3579] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  451.117113][ T3579] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  451.405512][T10684] chnl_net:caif_netlink_parms(): no params data found
[  451.557857][T10684] bridge0: port 1(bridge_slave_0) entered blocking state
[  451.567990][T10684] bridge0: port 1(bridge_slave_0) entered disabled state
[  451.585930][T10684] device bridge_slave_0 entered promiscuous mode
[  451.614832][T10684] bridge0: port 2(bridge_slave_1) entered blocking state
[  451.622476][T10684] bridge0: port 2(bridge_slave_1) entered disabled state
[  451.631587][T10684] device bridge_slave_1 entered promiscuous mode
[  451.685819][T10684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  451.717257][T10684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  451.764826][T10684] team0: Port device team_slave_0 added
[  451.779597][T10684] team0: Port device team_slave_1 added
[  451.840272][T10684] batman_adv: batadv0: Adding interface: batadv_slave_0
[  451.847538][T10684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  451.877416][T10684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  451.915157][ T3692] device hsr_slave_0 left promiscuous mode
[  451.922475][ T3692] device hsr_slave_1 left promiscuous mode
[  451.932177][ T3692] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  451.940675][ T3692] batman_adv: batadv0: Removing interface: batadv_slave_0
[  451.952250][ T3692] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  451.960300][ T3692] batman_adv: batadv0: Removing interface: batadv_slave_1
[  451.970136][ T3692] device bridge_slave_1 left promiscuous mode
[  451.976450][ T3692] bridge0: port 2(bridge_slave_1) entered disabled state
[  451.998598][ T3692] device bridge_slave_0 left promiscuous mode
[  452.005485][ T3692] bridge0: port 1(bridge_slave_0) entered disabled state
[  452.033023][ T3692] device veth1_macvtap left promiscuous mode
[  452.043729][ T3692] device veth0_macvtap left promiscuous mode
[  452.055782][ T3692] device veth1_vlan left promiscuous mode
[  452.066351][ T3692] device veth0_vlan left promiscuous mode
[  452.413525][ T3692] team0 (unregistering): Port device team_slave_1 removed
[  452.440292][ T3692] team0 (unregistering): Port device team_slave_0 removed
[  452.456468][ T3692] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  452.474681][ T3692] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  452.554629][ T3692] bond0 (unregistering): Released all slaves
[  452.604488][T10684] batman_adv: batadv0: Adding interface: batadv_slave_1
[  452.611698][T10684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  452.640391][T10684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  452.727767][T10684] device hsr_slave_0 entered promiscuous mode
[  452.735140][T10684] device hsr_slave_1 entered promiscuous mode
[  452.742770][T10684] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  452.753056][T10684] Cannot create hsr debugfs directory
19:17:32 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x77359400}, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

19:17:32 executing program 4:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x1, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000580)={0x0, [], [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x5c, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0x1}]})

19:17:32 executing program 3:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10)
setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x0)

19:17:32 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000023000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000080)="0f22843e0f01c32e660f38802cf2a5baf80c66b8f3f6428b66efbafc0cb00eeeb8de008ec00f01720066b9120a00000f32676736660f75110f01d1", 0x3b}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

19:17:32 executing program 4:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50)

19:17:32 executing program 3:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c000000000000002300850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r1 = dup2(r0, r0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c)
r4 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
sendto$inet6(r3, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5dac14e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
shutdown(r3, 0x1)
recvmsg(r3, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r3, @ANYRESOCT=r4, @ANYRES64=r4], 0x13c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x41517f18f97c4463}, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x20, &(0x7f0000000440)={&(0x7f00000002c0)=""/179, 0xb3, <r6=>0x0, &(0x7f0000000380)=""/138, 0x8a}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0x3, &(0x7f0000000180)=@raw=[@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0xfffffffffffffffc}, @map_fd], &(0x7f0000000080)='GPL\x00', 0x6f, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x5, 0x700, 0x40}, 0x10, r6, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)=[0x1, r2], 0x0, 0x10, 0x3f}, 0x90)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX])

19:17:32 executing program 4:
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
ftruncate(r0, 0x8208200)
r1 = open(&(0x7f0000000780)='./bus\x00', 0x14117e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x604100, 0x7ffffe, 0x4002011, r1, 0x0)

[  453.190406][ T3578] Bluetooth: hci0: command tx timeout
19:17:32 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x1f, 0x33, @action={{{}, {}, @device_b}, @vht_op_mode_ntf={0x15, 0x2, {0x0, 0x0, 0x0, 0x0, 0x1}}}}]}, 0x3c}}, 0x0)

19:17:33 executing program 2:
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./bus\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/544], 0x1, 0x545, &(0x7f0000000bc0)="$eJzs3c9rHOUbAPBnNkl/pd8mXxT8cQootFC7aZqqFQTr3WJBPddlsw0lm0zJbkoTCrUHz3qoJ0+exZNnQfwfPCh48iK1RYpQvUVmM5tuk910m26y1fl8YLbvO+9s33l25nl5Z2eWBFBYU9lLKeKliPg8iZjoaBuNvHFqY7sH929U/7p/o5rE+voHfySR5Ova2yf5v+N55cWI+OHTiJOl7f02VtcWKvV6bTmvTzcXr043VtdOXVmszNfma0uz52ZfPzszc+bsuYHFWr5ZOXT3i/fv3l7+9dRHnz04nsT5OJq3dcYxKFMxlX8mY3F+S9vMoDsbsmTYO8CujOR5PhbZGDARI3nWA/99NyNiHSioRP5DQbXnAdn1b3sZ7oxkf917d+MCaHv8oxvfjcTEenZtdOTP5JEro+x6d3IA/Wd9nD958fdsiT36HgKgm09uRcTp0dHt41+Sj3+7d7qPbbb2YfyD/fN9Nv95rdv8p5Tn5qHW69b5z3iX3N2Nx+d/6c4Auukpm/+93XX+u3nTanIkr/2vNecbSy5fqdeyse1YRJyIsYNZfaf7OT8dfmuiV1vn/C9bsv7bc8F8P+6MHnz0PXOVZuVpYu5071bEy13nv8nm8U+6HP/s87jYZx/Hnnvj515tj49/b61/FXG86/F/eEcr2fn+5HTrfJhunxXbzY6svdCr/2HHnx3/IzvHP5l03q9tPHkfr34z/mOvtt2e/weSD1vlA/m665Vmc3km4kDy3vb1Zx6+t11vb5/Ff+KVnce/buf/4Yj4uM/4v5v9+pfdx7+3svjnnuj4P3nhy/Tbd3r139/xP9sqncjX9DP+9buDT/PZAQAAAAAAwLOmFBFHIymVN8ulUrm88XzH83GkVE8bzZOX05WluWj9VnYyxkrtO90THc9DzOTPw7brZ7bUZyPi/xFxe+Rwq16upvW5YQcPAAAAAAAAAAAAAAAAAAAAz4jxHr//z/w2Muy9A/acP/kNxSX/objkPxSX/Ifikv9QXPIfikv+Q3HJfygu+Q/FJf8BAAAAAAAAAAAAAAAAAAAAAAAAAABgoC5euJAt63/fv1HN6nPXVlcW0mun5mqNhfLiSrVcTZevlufTdL5eK1fTxcf9f/U0vfpmLK1cn27WGs3pxurapcV0Zal56cpiZb52qTa2L1EBAAAAAAAAAAAAAAAAAADAv0tjdW2hUq/XlhUUFBQ2C8MemQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgoX8CAAD//z8IGNY=")
r0 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000780))

19:17:33 executing program 3:
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0xffffffffffffffff)
ioctl$NBD_DO_IT(r0, 0xab03)
ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04)

[  453.693261][T10746] loop2: detected capacity change from 0 to 1024
[  453.765613][T10748] block nbd3: server does not support multiple connections per device.
[  453.806001][T10746] EXT4-fs error (device loop2): __ext4_fill_super:5399: inode #2: comm syz-executor.2: casefold flag without casefold feature
[  453.831871][T10747] block nbd3: shutting down sockets
[  453.856424][T10746] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended
[  453.890409][T10684] netdevsim netdevsim0 netdevsim0: renamed from eth0
19:17:33 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000009c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f00000003000000000bf85edacab3"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x4802, &(0x7f0000000000))

[  453.908228][T10684] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  453.946917][T10746] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  453.986217][T10684] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  454.024429][T10684] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  454.039359][T10746] EXT4-fs warning (device loop2): ext4_resize_begin:84: There are errors in the filesystem, so online resizing is not allowed
19:17:33 executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10)
readlink(0x0, 0x0, 0x0)

[  454.148888][   T28] INFO: task syz-executor.1:9900 blocked for more than 143 seconds.
[  454.157372][   T28]       Not tainted 6.1.83-syzkaller #0
19:17:33 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
shutdown(r0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0)
dup3(r1, r0, 0x0)

[  454.196445][   T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  454.242539][   T28] task:syz-executor.1  state:D stack:25000 pid:9900  ppid:4699   flags:0x00004006
[  454.276205][   T28] Call Trace:
[  454.281137][   T28]  <TASK>
[  454.284302][   T28]  __schedule+0x142d/0x4550
[  454.308731][   T28]  ? __mutex_lock+0x6b4/0xd80
[  454.313502][   T28]  ? __sched_text_start+0x8/0x8
[  454.318482][   T22] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  454.341943][   T28]  ? __mutex_trylock_common+0x8d/0x2e0
[  454.349497][   T28]  ? do_raw_spin_unlock+0x137/0x8a0
[  454.353376][T10684] 8021q: adding VLAN 0 to HW filter on device bond0
[  454.354759][   T28]  schedule+0xbf/0x180
[  454.393285][   T28]  schedule_preempt_disabled+0xf/0x20
[  454.396113][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  454.407652][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  454.417706][   T28]  __mutex_lock+0x6b9/0xd80
[  454.428473][   T28]  ? __mutex_lock+0x53c/0xd80
[  454.433350][   T28]  ? blkdev_put+0x100/0x750
[  454.445035][T10684] 8021q: adding VLAN 0 to HW filter on device team0
[  454.449644][   T28]  ? mutex_lock_nested+0x10/0x10
[  454.464115][   T28]  ? __fsnotify_parent+0x50b/0x730
[  454.477142][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  454.478365][   T28]  ? __fsnotify_update_child_dentry_flags+0x2a0/0x2a0
[  454.509473][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  454.515515][   T28]  blkdev_put+0x100/0x750
[  454.518187][ T3609] bridge0: port 1(bridge_slave_0) entered blocking state
[  454.530223][ T3609] bridge0: port 1(bridge_slave_0) entered forwarding state
[  454.531062][   T28]  ? task_work_run+0x1fc/0x300
[  454.560192][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  454.566201][   T28]  blkdev_close+0x56/0x80
[  454.582751][   T28]  ? blkdev_open+0x2e0/0x2e0
[  454.602583][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  454.603462][   T28]  __fput+0x3b7/0x890
[  454.619837][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  454.635464][   T28]  task_work_run+0x246/0x300
[  454.640654][  T152] bridge0: port 2(bridge_slave_1) entered blocking state
[  454.647824][  T152] bridge0: port 2(bridge_slave_1) entered forwarding state
[  454.651935][   T28]  ? task_work_cancel+0x2b0/0x2b0
[  454.678368][   T28]  ? exit_to_user_mode_loop+0x39/0x100
[  454.678650][   T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  454.696748][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  454.697386][   T28]  exit_to_user_mode_loop+0xde/0x100
[  454.719622][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  454.729406][   T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  454.734720][   T28]  exit_to_user_mode_prepare+0xb1/0x140
[  454.759355][   T22] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  454.761234][   T28]  syscall_exit_to_user_mode+0x60/0x270
[  454.813341][T10684] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  454.814318][   T28]  do_syscall_64+0x49/0xb0
[  454.837320][ T3579] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  454.838484][   T22] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  454.848818][   T28]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  454.858370][T10684] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  454.871047][ T3579] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  454.881320][ T3579] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  454.896491][   T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  454.905467][ T3579] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  454.905648][   T28] RIP: 0033:0x7fdfdc87cc9a
[  454.923397][ T3579] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  454.931718][ T3579] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  454.966630][   T28] RSP: 002b:00007ffeddc01400 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[  454.976625][   T28] RAX: 0000000000000000 RBX: 0000000000000007 RCX: 00007fdfdc87cc9a
[  454.985037][   T28] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006
[  454.991971][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  454.995508][   T28] RBP: 00007fdfdc9ad980 R08: 0000001b30a20000 R09: 0000000000000536
[  455.013322][   T28] R10: 00000000818e4dc4 R11: 0000000000000293 R12: 0000000000048d1b
[  455.019463][   T22] usb 4-1: config 0 descriptor??
[  455.034081][   T28] R13: ffffffffffffffff R14: 00007fdfdc400000 R15: 00000000000489da
[  455.052894][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  455.061374][   T28]  </TASK>
[  455.061471][   T28] INFO: task syz-executor.1:9901 blocked for more than 144 seconds.
[  455.061490][   T28]       Not tainted 6.1.83-syzkaller #0
[  455.061502][   T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  455.061511][   T28] task:syz-executor.1  state:D stack:25688 pid:9901  ppid:4699   flags:0x00004006
[  455.061551][   T28] Call Trace:
[  455.061559][   T28]  <TASK>
[  455.061572][   T28]  __schedule+0x142d/0x4550
[  455.061632][   T28]  ? __mutex_lock+0x6b4/0xd80
[  455.061667][   T28]  ? __sched_text_start+0x8/0x8
[  455.061697][   T28]  ? __mutex_trylock_common+0x8d/0x2e0
[  455.094543][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  455.152945][   T28]  ? do_raw_spin_unlock+0x137/0x8a0
[  455.158546][   T28]  schedule+0xbf/0x180
[  455.163658][   T28]  schedule_preempt_disabled+0xf/0x20
[  455.173047][   T28]  __mutex_lock+0x6b9/0xd80
[  455.179227][   T28]  ? __mutex_lock+0x53c/0xd80
[  455.189648][   T28]  ? blkdev_put+0x100/0x750
[  455.201658][   T28]  ? mutex_lock_nested+0x10/0x10
[  455.218138][   T28]  ? __fsnotify_parent+0x50b/0x730
[  455.234813][   T28]  ? __fsnotify_update_child_dentry_flags+0x2a0/0x2a0
[  455.236167][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  455.256427][   T28]  blkdev_put+0x100/0x750
[  455.268703][ T3578] Bluetooth: hci0: command tx timeout
[  455.272463][   T28]  ? task_work_run+0x1fc/0x300
[  455.289471][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  455.294120][   T28]  blkdev_close+0x56/0x80
[  455.298234][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  455.316637][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  455.321408][   T28]  ? blkdev_open+0x2e0/0x2e0
[  455.326548][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  455.346327][   T28]  __fput+0x3b7/0x890
[  455.369678][   T28]  task_work_run+0x246/0x300
[  455.392719][   T28]  ? task_work_cancel+0x2b0/0x2b0
[  455.412834][   T28]  ? blkdev_ioctl+0x3a9/0x760
[  455.430466][   T28]  ? exit_to_user_mode_loop+0x39/0x100
[  455.433021][ T8980] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  455.448411][   T28]  exit_to_user_mode_loop+0xde/0x100
[  455.455785][ T8980] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  455.465272][   T28]  exit_to_user_mode_prepare+0xb1/0x140
[  455.490616][   T28]  syscall_exit_to_user_mode+0x60/0x270
[  455.504432][   T28]  do_syscall_64+0x49/0xb0
[  455.534910][   T28]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  455.557218][   T28] RIP: 0033:0x7fdfdc87dda9
[  455.572157][   T28] RSP: 002b:00007fdfdd63d0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  455.590612][   T22] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0
[  455.609645][   T22] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving
[  455.610256][   T28] RAX: 0000000000000000 RBX: 00007fdfdc9abf80 RCX: 00007fdfdc87dda9
[  455.673736][   T22] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  455.697059][   T28] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003
[  455.733400][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  455.741623][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  455.753797][T10684] 8021q: adding VLAN 0 to HW filter on device batadv0
[  455.762248][   T28] RBP: 00007fdfdc8ca47a R08: 0000000000000000 R09: 0000000000000000
[  455.805696][   T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  455.844424][   T28] R13: 000000000000000b R14: 00007fdfdc9abf80 R15: 00007ffeddc01338
[  455.861926][   T22] usb 4-1: USB disconnect, device number 34
[  455.869684][   T28]  </TASK>
[  455.876376][   T28] 
[  455.876376][   T28] Showing all locks held in the system:
[  455.888123][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  455.907705][T10482] EXT4-fs (loop2): unmounting filesystem.
[  455.915661][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  455.978465][   T28] 1 lock held by rcu_tasks_kthre/12:
[  455.995522][T10684] device veth0_vlan entered promiscuous mode
[  456.009144][   T28]  #0: ffffffff8d12ab10 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30
[  456.043327][T10761] chnl_net:caif_netlink_parms(): no params data found
[  456.057120][   T28] 1 lock held by rcu_tasks_trace/13:
[  456.064335][ T8980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  456.083560][ T8980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  456.092875][   T28]  #0: ffffffff8d12b310 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30
[  456.127870][T10684] device veth1_vlan entered promiscuous mode
19:17:35 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000023000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000080)="0f22843e0f01c32e660f38802cf2a5baf80c66b8f3f6428b66efbafc0cb00eeeb8de008ec00f01720066b9120a00000f32676736660f75110f01d1", 0x3b}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  456.164189][   T28] 1 lock held by khungtaskd/28:
[  456.178411][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  456.188222][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  456.195957][   T28]  #0: ffffffff8d12a940 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290
19:17:35 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x1f, 0x33, @action={{{}, {}, @device_b}, @vht_op_mode_ntf={0x15, 0x2, {0x0, 0x0, 0x0, 0x0, 0x1}}}}]}, 0x3c}}, 0x0)

[  456.248365][   T28] 2 locks held by kworker/u4:2/33:
[  456.268391][   T28]  #0: ffff888012479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  456.336312][   T28]  #1: ffff8880b9927788 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x43d/0x770
[  456.374765][   T28] 2 locks held by kworker/1:2/152:
19:17:36 executing program 3:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x15, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRESOCT], 0x1, 0x578, &(0x7f00000005c0)="$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")

[  456.385478][   T28]  #0: ffff888012472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  456.407428][   T28]  #1: ffffc90002d8fd20 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  456.466003][   T28] 2 locks held by kworker/u4:5/1196:
[  456.486112][   T28]  #0: ffff8880b993aa18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140
[  456.513847][   T28]  #1: ffff8880b9927788 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x43d/0x770
[  456.517890][T10792] loop3: detected capacity change from 0 to 1024
[  456.542286][   T28] 2 locks held by getty/3307:
[  456.550808][   T28]  #0: ffff88807ece0098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70
[  456.568782][   T28]  #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0
[  456.594610][   T28] 3 locks held by kworker/1:4/3609:
[  456.609038][   T28]  #0: ffff888027eeb538 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  456.636558][   T28]  #1: ffffc900041bfd20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  456.665311][   T28]  #2: ffffffff8e2991e8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xcc/0x16b0
[  456.684256][   T28] 3 locks held by kworker/1:5/3610:
[  456.691040][   T28]  #0: ffff888012470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  456.732048][   T28]  #1: ffffc900041cfd20 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  456.777806][   T28]  #2: ffffffff8d12ff38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x4f0/0x930
[  456.833396][   T28] 3 locks held by kworker/0:7/3654:
[  456.848017][   T28]  #0: ffff888027eeb538 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  456.861621][   T28]  #1: ffffc90004437d20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  456.886872][   T28]  #2: ffffffff8e2991e8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xcc/0x16b0
[  456.909659][   T28] 3 locks held by kworker/u4:7/3692:
[  456.922457][   T28] 1 lock held by udevd/3701:
[  456.935163][   T28]  #0: ffff88801f1b94c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x148/0xa10
[  456.968047][   T28] 3 locks held by kworker/1:17/8980:
[  456.986166][   T28]  #0: ffff888012470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  456.988872][T10792] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6
[  457.005108][   T28]  #1: ffffc90004a77d20 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  457.005193][   T28]  #2: ffffffff8e2991e8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50
[  457.034079][ T3579] Bluetooth: hci6: command tx timeout
[  457.043642][   T28] 1 lock held by syz-executor.1/9900:
[  457.049164][   T28]  #0: ffff88801f1b94c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0x100/0x750
[  457.058786][   T28] 1 lock held by syz-executor.1/9901:
[  457.064199][   T28]  #0: ffff88801f1b94c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0x100/0x750
[  457.074615][   T28] 1 lock held by syz-executor.1/10523:
[  457.080712][   T28]  #0: ffff88801f1b94c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x148/0xa10
[  457.092587][   T28] 1 lock held by syz-executor.0/10684:
[  457.098101][   T28]  #0: ffffffff8e2991e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0
[  457.108668][   T28] 2 locks held by syz-executor.1/10761:
[  457.114257][   T28]  #0: ffffffff8e2991e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0
[  457.123809][   T28]  #1: ffffffff8d12ff38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x360/0x930
[  457.134844][   T28] 3 locks held by kvm-nx-lpage-re/10786:
[  457.140657][   T28]  #0: ffffffff8d153168 (cgroup_mutex){+.+.}-{3:3}, at: cgroup_attach_task_all+0x23/0xe0
[  457.152175][   T28]  #1: ffffffff8cfc7d30 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_attach_lock+0xd/0x30
[  457.162243][   T28]  #2: ffffffff8d153350 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: cgroup_attach_task_all+0x2d/0xe0
[  457.174595][   T28] 2 locks held by syz-executor.4/10789:
[  457.180232][   T28]  #0: ffffffff8e2f8030 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40
[  457.188817][   T28]  #1: ffffffff8e2991e8 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5b/0x8a0
[  457.203315][   T28] 3 locks held by dhcpcd-run-hook/10795:
[  457.216497][   T28] 
[  457.220098][   T28] =============================================
[  457.220098][   T28] 
19:17:36 executing program 3:
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0)
ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0xffffffffffffffff)
ioctl$NBD_DO_IT(r0, 0xab03)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)

[  457.280457][ T8980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  457.291069][   T28] NMI backtrace for cpu 0
[  457.295477][   T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.83-syzkaller #0
[  457.297976][ T8980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  457.303299][   T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
[  457.303317][   T28] Call Trace:
[  457.303325][   T28]  <TASK>
[  457.303334][   T28]  dump_stack_lvl+0x1e3/0x2cb
[  457.303390][   T28]  ? nf_tcp_handle_invalid+0x642/0x642
[  457.303428][   T28]  ? panic+0x75d/0x75d
[  457.303445][   T28]  ? vprintk_emit+0x622/0x740
[  457.303512][   T28]  ? printk_sprint+0x490/0x490
[  457.303544][   T28]  ? nmi_cpu_backtrace+0x252/0x560
[  457.357359][T10684] device veth0_macvtap entered promiscuous mode
[  457.357860][   T28]  nmi_cpu_backtrace+0x4e1/0x560
[  457.369146][   T28]  ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0
[  457.369971][ T3579] Bluetooth: hci0: command tx timeout
[  457.375448][   T28]  ? _printk+0xd1/0x111
[  457.385010][   T28]  ? panic+0x75d/0x75d
[  457.389297][   T28]  ? __wake_up_klogd+0xcc/0x100
[  457.394727][   T28]  ? panic+0x75d/0x75d
[  457.399446][   T28]  ? nmi_trigger_cpumask_backtrace+0xe2/0x3f0
[  457.406323][   T28]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  457.412659][   T28]  nmi_trigger_cpumask_backtrace+0x1b0/0x3f0
[  457.419638][   T28]  watchdog+0xf88/0xfd0
[  457.423827][   T28]  ? watchdog+0x1f8/0xfd0
[  457.428273][   T28]  kthread+0x28d/0x320
[  457.432431][   T28]  ? hungtask_pm_notify+0x50/0x50
[  457.437951][   T28]  ? kthread_blkcg+0xd0/0xd0
[  457.442821][   T28]  ret_from_fork+0x1f/0x30
[  457.447405][   T28]  </TASK>
[  457.451952][   T28] Sending NMI from CPU 0 to CPUs 1:
[  457.457470][    C1] NMI backtrace for cpu 1
[  457.457482][    C1] CPU: 1 PID: 152 Comm: kworker/1:2 Not tainted 6.1.83-syzkaller #0
[  457.457499][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
[  457.457510][    C1] Workqueue: events_power_efficient wg_ratelimiter_gc_entries
[  457.457604][    C1] RIP: 0010:do_raw_spin_unlock+0x6b/0x8a0
[  457.457625][    C1] Code: 0f 85 00 01 00 00 4c 89 ff be 04 00 00 00 e8 fc 46 76 00 4c 89 f8 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 23 04 00 00 41 83 3f 00 <0f> 84 99 01 00 00 4d 8d 6f 10 4d 89 ec 49 c1 ec 03 41 80 3c 1c 00
[  457.457640][    C1] RSP: 0018:ffffc90002d8fb98 EFLAGS: 00000202
[  457.457654][    C1] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffffffff816bb4f4
[  457.457666][    C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff8daf33c0
[  457.457678][    C1] RBP: ffffc90002d8fde0 R08: dffffc0000000000 R09: fffffbfff1b5e679
[  457.457690][    C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000
[  457.457701][    C1] R13: dffffc0000000000 R14: 0000006a7ec26672 R15: ffffffff8daf33c0
[  457.457714][    C1] FS:  0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
[  457.457729][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  457.457741][    C1] CR2: 00007fba209bc6a8 CR3: 000000004a270000 CR4: 00000000003526e0
[  457.457756][    C1] Call Trace:
[  457.457761][    C1]  <NMI>
[  457.457768][    C1]  ? nmi_cpu_backtrace+0x3de/0x560
[  457.457793][    C1]  ? read_lock_is_recursive+0x10/0x10
[  457.457820][    C1]  ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0
[  457.457845][    C1]  ? nmi_handle+0x25/0x440
[  457.457918][    C1]  ? nmi_cpu_backtrace_handler+0x8/0x10
[  457.457944][    C1]  ? nmi_handle+0x12e/0x440
[  457.457970][    C1]  ? nmi_handle+0x25/0x440
[  457.457995][    C1]  ? do_raw_spin_unlock+0x6b/0x8a0
[  457.458012][    C1]  ? default_do_nmi+0x62/0x150
[  457.458038][    C1]  ? exc_nmi+0xa8/0x100
[  457.458062][    C1]  ? end_repeat_nmi+0x16/0x31
[  457.458089][    C1]  ? do_raw_spin_unlock+0x54/0x8a0
[  457.458107][    C1]  ? do_raw_spin_unlock+0x6b/0x8a0
[  457.458124][    C1]  ? do_raw_spin_unlock+0x6b/0x8a0
[  457.458142][    C1]  ? do_raw_spin_unlock+0x6b/0x8a0
[  457.458160][    C1]  </NMI>
[  457.458165][    C1]  <TASK>
[  457.458174][    C1]  _raw_spin_unlock+0x1a/0x40
[  457.458192][    C1]  wg_ratelimiter_gc_entries+0x3a7/0x470
[  457.458214][    C1]  ? process_one_work+0x7a9/0x11d0
[  457.458234][    C1]  process_one_work+0x8a9/0x11d0
[  457.458266][    C1]  ? worker_detach_from_pool+0x260/0x260
[  457.458289][    C1]  ? _raw_spin_lock_irqsave+0x120/0x120
[  457.458308][    C1]  ? kthread_data+0x4e/0xc0
[  457.458336][    C1]  ? wq_worker_running+0x97/0x190
[  457.458385][    C1]  worker_thread+0xa47/0x1200
[  457.458418][    C1]  ? _raw_spin_unlock+0x40/0x40
[  457.458444][    C1]  kthread+0x28d/0x320
[  457.458470][    C1]  ? worker_clr_flags+0x190/0x190
[  457.458490][    C1]  ? kthread_blkcg+0xd0/0xd0
[  457.458517][    C1]  ret_from_fork+0x1f/0x30
[  457.458549][    C1]  </TASK>
[  457.524332][T10684] device veth1_macvtap entered promiscuous mode
[  457.712367][   T28] Kernel panic - not syncing: hung_task: blocked tasks
[  457.712386][   T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.83-syzkaller #0
[  457.712411][   T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
[  457.712423][   T28] Call Trace:
[  457.712430][   T28]  <TASK>
[  457.712439][   T28]  dump_stack_lvl+0x1e3/0x2cb
[  457.712482][   T28]  ? nf_tcp_handle_invalid+0x642/0x642
[  457.712518][   T28]  ? panic+0x75d/0x75d
[  457.712539][   T28]  ? llist_add_batch+0x160/0x1d0
[  457.712657][   T28]  ? vscnprintf+0x59/0x80
[  457.712683][   T28]  panic+0x318/0x75d
[  457.712705][   T28]  ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0
[  457.712740][   T28]  ? memcpy_page_flushcache+0xfc/0xfc
[  457.712766][   T28]  ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0
[  457.712798][   T28]  ? nmi_trigger_cpumask_backtrace+0x33a/0x3f0
[  457.712833][   T28]  ? nmi_trigger_cpumask_backtrace+0x33f/0x3f0
[  457.712868][   T28]  watchdog+0xfc7/0xfd0
[  457.712910][   T28]  ? watchdog+0x1f8/0xfd0
[  457.712943][   T28]  kthread+0x28d/0x320
[  457.712977][   T28]  ? hungtask_pm_notify+0x50/0x50
[  457.713004][   T28]  ? kthread_blkcg+0xd0/0xd0
[  457.713039][   T28]  ret_from_fork+0x1f/0x30
[  457.713084][   T28]  </TASK>
[  457.714364][   T28] Kernel Offset: disabled
[  457.883687][   T28] Rebooting in 86400 seconds..