last executing test programs:

5m55.316220073s ago: executing program 32 (id=212):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x6, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000500)="0f20e035000010000f22e00f0f2f9766ba6100b0f1eec4c3dd7d6b007066ba2000ed66baa100b0abeec4c1f950c4c4e1895568ffb9800000c00f3235010000000f30b805000000b9000000000f01d9", 0x4f}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

5m53.66287434s ago: executing program 33 (id=226):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="05"], 0x10)
close(r0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1}, &(0x7f0000000500), &(0x7f0000000540)=r0}, 0x20)

5m48.354116266s ago: executing program 34 (id=255):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0x3a, &(0x7f0000000ac0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x100000001}}}}}}, 0x0)

4m28.014163826s ago: executing program 35 (id=764):
openat(0xffffffffffffff9c, &(0x7f0000000480)='.\x00', 0x10000, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
creat(&(0x7f0000000080)='./bus\x00', 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001c40)=ANY=[@ANYBLOB="200000006800e97800000000000000000a000000000000000800", @ANYRES64=r0], 0x20}}, 0x0)

3m48.770022717s ago: executing program 36 (id=1088):
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r2 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1})
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040))

3m38.647584198s ago: executing program 8 (id=1153):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28)
close(0x3)

3m38.416554253s ago: executing program 8 (id=1154):
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$SNDCTL_SEQ_TESTMIDI(r0, 0x40045108, &(0x7f0000000200))
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
ioctl$SNDCTL_SEQ_RESET(r1, 0x5100)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_RESET(r1, 0x5100)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000080)=@x={0x94, 0x1, "7ace6f3ea2ab"})

3m38.317354786s ago: executing program 8 (id=1156):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x1}, 0x1c)
listen(r0, 0x0)

3m38.086173941s ago: executing program 8 (id=1158):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@jqfmt_vfsv0}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$eJzs28tvG0UYAPBv13FKXySU8ugDCBRExCNp0gI9cAGBxAEkJDiUY0jSqtRtUBMkWlUQECpHVIk74ojEX8AJLgg4IXGFO6pUoVxaOBmtvZs4jp0mwY5L/ftJm8zsjjPzeXbs2Z1sAH1rJPuRROyJiN8jYqieXV1gpP7r5tLl6b+XLk8nUa2+9VdSK3dj6fJ0UbR43e48M5pGpJ8lcahFvfMXL52dqlRmL+T58YVz74/PX7z07JlzU6dnT8+enzxx4vixiReen3yuI3Fmbbpx8KO5wwdee+fqG9Mnr77787dJEX9THB0yst7BJ6rVDlfXW3sb0slADxvCppQiIuuucm38D0UpVjpvKF79tKeNA7qqWq1Wd7c/vFgF7mBJbLTk2fzzArgzFF/02fVvsW3T1OO2cP2l+gVQFvfNfKsfGYg0L1Nuur7tpJGIOLn4z1fZFt25DwEAsMr32fznmVbzvzTubyh3d742NBwR90TEvoi4NyL2R8R9EbWyD0TEg5usv3mRZO38J722pcA2KJv/vZivba2e/xWzvxgu5bm9tfjLyakzldmj+XsyGuUdWX5inTp+eOW3L9oda5z/ZVtWfzEXzNtxbWDH6tfMTC1M/ZeYG13/JOLgQKv4k+WVgCQiDkTEwS3Wceapbw63O9Yu/vJG/nAH1pmqX0c8We//xWiKv5Csvz45fldUZo+OF2fFWr/8euXNdvXfuv+7K+v/XS3P/+X4h5PG9dr5zddx5Y/P217TbPX8H0zerqUH830fTi0sXJiIGExerze6cf/kymuLfFE+i3/0SOvxvy9W3olDEZGdxA9FxMMR8Uje9kcj4rGIOLJO/D+9/Ph7W4+/u7L4ZzbV/yuJwWje0zpROvvjd6sqHd5M/Fn/H6+lRvM9G/n820i7tnY2AwAAwP9PGhF7IknHltNpOjZW/3/5/bErrczNLzx9au6D8zP1ZwSGo5wWd7qGGu6HTuSX9UV+sil/LL9v/GVpZy0/Nj1Xmel18NDndrcZ/5k/S71uHdB1nteC/mX8Q/8y/qF/Gf/Qv1qM/529aAew/Vp9/3/cg3YA269p/Fv2gz7i+h/6l/EP/cv4h740vzNu/ZC8hMSaRKS3RTMkupTo9ScTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZ/wbAAD//9E940M=")
mkdir(&(0x7f0000000100)='./bus\x00', 0x169)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000a80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
chroot(&(0x7f0000000580)='./file0/../file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00')

3m37.64468546s ago: executing program 8 (id=1160):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x4, 0x4, 0x8}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4)
sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)

3m36.571772534s ago: executing program 8 (id=1165):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000640)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x23}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6c}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r1}, &(0x7f0000001780)=0x4, 0x0}, 0x20)
socketpair(0x18, 0x0, 0x0, &(0x7f0000000000))

3m36.088097054s ago: executing program 37 (id=1165):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000640)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x23}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6c}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r1}, &(0x7f0000001780)=0x4, 0x0}, 0x20)
socketpair(0x18, 0x0, 0x0, &(0x7f0000000000))

3m28.384716323s ago: executing program 9 (id=1187):
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil)
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00')
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9})
prlimit64(0x0, 0x8, &(0x7f0000001080)={0x4, 0x7}, 0x0)
preadv(r0, &(0x7f0000000680)=[{&(0x7f0000001180)=""/4113, 0x1011}], 0x1, 0x16, 0xfffffff9)

3m28.311835395s ago: executing program 9 (id=1188):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80004}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x68, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x1a, &(0x7f0000001b00)={@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x61663a2cbc13e3eb}, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@llc_tr={0x11, {@snap={0x1, 0x0, "9b", "afe7e9", 0x88f8}}}}}, 0x0)

3m27.720739538s ago: executing program 9 (id=1191):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x78, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x4, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x48, 0x2, [@TCA_CGROUP_EMATCHES={0x44, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x34, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x2}]}}]}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x40010)

3m27.355546456s ago: executing program 9 (id=1193):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000680)='./file0\x00', 0x12148cd, &(0x7f0000006f80)={[{@utf8no}, {@fat=@umask}, {@shortname_mixed}, {@uni_xlate}, {@fat=@time_offset={'time_offset', 0x3d, 0x4eb}}, {@rodir}, {@utf8}, {@uni_xlate}, {@shortname_mixed}, {@shortname_lower}, {@uni_xlate}, {@numtail}, {@uni_xlateno}, {@utf8}, {@numtail}, {@rodir}]}, 0x0, 0x2db, &(0x7f0000006c80)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333406, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x11080, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0)
read$FUSE(r0, &(0x7f0000004c40)={0x2020}, 0x2020)

3m27.037754753s ago: executing program 9 (id=1195):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x7d, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e20, 0x7fff, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x8}}, 0x2, 0x400}, 0x90)

3m26.572167093s ago: executing program 9 (id=1198):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000009140)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r1, {0x7, 0x2b, 0xfffffffd, 0x0, 0x0, 0xfffc, 0x2, 0x0, 0x0, 0x0, 0x100, 0x4}}, 0x50)
read$FUSE(r0, 0x0, 0x0)
stat(&(0x7f000000b840)='./file0\x00', 0x0)
syz_fuse_handle_req(r0, &(0x7f0000007100)="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", 0x2000, &(0x7f000000bd40)={0x0, 0x0, 0x0, &(0x7f000000b280)={0x18, 0xffffffffffffffda, 0x6, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000b500)={0x78, 0x0, 0x7, {0x101, 0xffff1afd, 0x0, {0x5, 0x0, 0x1ff000000, 0xfffffffffffffffe, 0x0, 0x5, 0x0, 0x7ff, 0x6, 0x8000, 0x9, r2, r3, 0x400000, 0x4}}}, 0x0, 0x0, 0x0, 0x0, &(0x7f000000bbc0)={0x20, 0x0, 0x100, {0x1, 0x4, 0x6c0, 0x7}}, 0x0})

3m26.180253302s ago: executing program 38 (id=1198):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000009140)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r1, {0x7, 0x2b, 0xfffffffd, 0x0, 0x0, 0xfffc, 0x2, 0x0, 0x0, 0x0, 0x100, 0x4}}, 0x50)
read$FUSE(r0, 0x0, 0x0)
stat(&(0x7f000000b840)='./file0\x00', 0x0)
syz_fuse_handle_req(r0, &(0x7f0000007100)="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", 0x2000, &(0x7f000000bd40)={0x0, 0x0, 0x0, &(0x7f000000b280)={0x18, 0xffffffffffffffda, 0x6, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000b500)={0x78, 0x0, 0x7, {0x101, 0xffff1afd, 0x0, {0x5, 0x0, 0x1ff000000, 0xfffffffffffffffe, 0x0, 0x5, 0x0, 0x7ff, 0x6, 0x8000, 0x9, r2, r3, 0x400000, 0x4}}}, 0x0, 0x0, 0x0, 0x0, &(0x7f000000bbc0)={0x20, 0x0, 0x100, {0x1, 0x4, 0x6c0, 0x7}}, 0x0})

2m32.4175703s ago: executing program 6 (id=1606):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000)=0xb6, 0x4)
setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000100)=0x6, 0x4)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
recvfrom(r0, 0x0, 0x0, 0x32, 0x0, 0x0)
syz_emit_ethernet(0x2e, &(0x7f0000000380)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x40, 0x100, @void}}}}}}}, 0x0)
sendmmsg$inet(r0, &(0x7f0000000780)=[{{&(0x7f0000000140)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000400)="686691d86f163d983892927d724356ee1384e1d853f783a4169e69e8e72ba5cdbff98b3f5b2cc3a3f1d3bd9ac6cf6ace36e023287ca77e6a4644b3e99d0988c31cdc1d7f4aea3d87c3357689439579a1a2ca1b4164384fe1de1e5a84385e33c6be13729434eca02b742f2ecfce272eafa1a1578465df25b63ad8015c789e17d80e21c5b58e4967ee9cb45da2897570a67795b9e8d8a8671caba6d0a024585a6f50afcacd7641ae2fb1f0687102a25a21c64936", 0xb3}], 0x1}}], 0x1, 0x0)

2m31.474353501s ago: executing program 6 (id=1616):
r0 = socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xffffffff}, 0x10)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc, 0x2}, 0x10)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000)
r2 = dup3(r1, r0, 0x0)
recvmmsg(r2, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}, 0x1}], 0x1, 0x40000001, 0x0)

2m30.993240211s ago: executing program 6 (id=1620):
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000440)=0x4)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc)
ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0)
ioctl$SNDRV_PCM_IOCTL_STATUS32(r2, 0x806c4120, &(0x7f0000000300))

2m27.795964371s ago: executing program 6 (id=1648):
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='errors=continue,dots,dmask=00000000000000000000004,uid=', @ANYRESHEX=0x0, @ANYBLOB=',dots,showexec,time_offset=0x00000000000003a4,nodots,check=relaxed,nodots,dots,nodots,dots,flush,codepage=874,flush,dots,dots,flush,dots,dmask=01777777777777777777774,dots,subj_role=dots,fowner<', @ANYRESDEC=0x0, @ANYRESHEX], 0x1, 0x21a, &(0x7f0000000640)="$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")
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x200, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
eventfd(0x8c66)
mkdir(&(0x7f00000000c0)='./bus\x00', 0xa5)
chdir(&(0x7f00000003c0)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)

2m27.460544108s ago: executing program 6 (id=1651):
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000180)='./file0\x00', 0x200010, &(0x7f00000008c0)=ANY=[], 0x1, 0xf43, &(0x7f0000002140)="$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")
creat(&(0x7f0000000380)='./bus\x00', 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfb0e00000000000000a9000ff8c37ee7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file4\x00', 0x1000, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file4'}}], [], 0x2c})

2m26.348720883s ago: executing program 6 (id=1659):
r0 = mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/109, 0x6d}], 0x1)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1})
close(0x3)
syz_memcpy_off$KVM_EXIT_MMIO(r0, 0x20, &(0x7f0000000100)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18)

2m10.541106979s ago: executing program 39 (id=1659):
r0 = mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/109, 0x6d}], 0x1)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1})
close(0x3)
syz_memcpy_off$KVM_EXIT_MMIO(r0, 0x20, &(0x7f0000000100)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18)

2m2.28876662s ago: executing program 4 (id=1817):
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00')
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x132, 0xffffffffffffffff, 0xffffd000)
lseek(r0, 0x1, 0x1)
getdents64(r0, &(0x7f0000000000)=""/121, 0x79)

1m59.372422184s ago: executing program 4 (id=1829):
io_uring_setup(0xc8c, &(0x7f00000002c0)={0x0, 0xd4ff, 0x40, 0x0, 0x15e})
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$tipc(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040018}, 0x0)
sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4)
recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0)
close(r1)
close(0x3)

1m58.944705284s ago: executing program 4 (id=1834):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xb)
getdents64(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000f4ff00008500000017000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000001700000095"], 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x0, &(0x7f0000000300)="0101000071a78326c799dbe888a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

1m57.610825822s ago: executing program 4 (id=1840):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@init_itable}, {@jqfmt_vfsv1}, {@nolazytime}, {@grpjquota}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0xb}}, {@bh}, {@init_itable}]}, 0x1, 0x56f, &(0x7f0000003780)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x2000c080)
sendmsg(0xffffffffffffffff, 0x0, 0x44004)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x1000)
unlink(&(0x7f00000002c0)='./file0/file2\x00')

1m56.992004496s ago: executing program 4 (id=1844):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg$inet(r0, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003640)='c', 0x1}], 0x1}}], 0x1, 0x400c001)
sendmmsg$inet(r0, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)='@', 0x1}, {&(0x7f00000007c0)='y', 0x1}, {&(0x7f0000000340)="b9", 0x1}, {&(0x7f0000000940)="99", 0x1}, {&(0x7f00000008c0)='z', 0x1}, {&(0x7f00000009c0)='~', 0x1}, {&(0x7f0000000a00)='x', 0x1}, {&(0x7f0000000440)="06", 0x1}, {&(0x7f0000000580)='k', 0x1}, {&(0x7f00000006c0)="1d", 0x1}, {&(0x7f0000000800)='a', 0x1}, {&(0x7f0000000280)='$', 0x1}], 0xc}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc", 0x1}, {&(0x7f0000000100)="c9", 0x1}, {&(0x7f0000002180)='-', 0x1}, {&(0x7f0000002240)='R', 0x1}, {&(0x7f00000033c0)="c4", 0x1}], 0x5}}], 0x2, 0x4000000)
setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4)

1m54.212220627s ago: executing program 4 (id=1857):
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x169442, 0x1e8)
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140))
unshare(0x6020400)
syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file0\x00', 0x1, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0xc, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x121500, 0x20)
fchown(r0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x80000000008, 0x0)

1m53.651015639s ago: executing program 40 (id=1857):
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x169442, 0x1e8)
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140))
unshare(0x6020400)
syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file0\x00', 0x1, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0xc, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x121500, 0x20)
fchown(r0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x80000000008, 0x0)

1m32.64218056s ago: executing program 0 (id=1983):
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x44})
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000001dc0)={0x11, 0xfe, 0x80000}, 0x20)

1m32.428792145s ago: executing program 0 (id=1985):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0)
r2 = open(&(0x7f0000000440)='./file0\x00', 0x880, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000), 0x560c89bb)
io_setup(0x1, &(0x7f0000000b80)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000200)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x2, r2, 0x0, 0x0, 0x0, 0x0, 0x4}])
r4 = creat(&(0x7f0000000080)='./file0\x00', 0x20)
splice(r0, 0x0, r4, 0x0, 0x8000, 0x0)

1m31.408156667s ago: executing program 0 (id=1994):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x40000, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x27a}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000005c0)={0x0, 0x2, 0x7a}, 0x8)

1m31.165534362s ago: executing program 0 (id=1997):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x80401c, &(0x7f0000000040)=ANY=[@ANYBLOB="666c7573685f6d657267652c6e6f666c7573685f6d657267652c6d6f64653d667261676d656e743a7365676d656e742c636f6d70726573735f63616368652c696e6c696e655f78617474722c636f6d70726573735f63616368652c6e6f696e6c696e655f78617474722c6e6f646973636172642c6261636b67726f756e645f67633d6f6e2c6261636b67726f756e645f67633d6f66662c636865636b706f696e743d64697361626c652c617467632c67635f6d657267652c6e6f626172726965722c004b1c091f21dfc606226168fd668d440f"], 0xfd, 0x5531, &(0x7f0000000540)="$eJzs3M1rI2UYAPA3/djtfrgW8eBtBxahhU1o+rHoreoufmCXsurBk6bJNGQ3yZQmTWtPHjyKB/8TUfDk0b/Bg2dv4kHxJiiZd6pbXUFomtjN7weTZ95n3jzzTg6BZyYkAFNrMfn151K4Ea6EEGZDCNdDyPdLxZbbjOGFEMLNEMLMY1upyP+ZuBRCuBpCuDEsHmuWikOf3x7c2vjprV+++e7y3LUvvv6+SANTaPi10tmL+4edGLNmjA+LfG3QymNnfVDEeKC9EI93spg/THfyCoe1k3m1PK414/xs76A3jLvtWn0Ym63dPL/XjSfsDZondfI3PKzt5+NGupPHVi/LY/M4nvfoOH63Hff6sU6jqPdRXj70+ycx5tOjNF7P3qM81rv9Ih/rZo30aBgHRSxOF+pZu5GvY+cMH/T/3Nut7sFRMkj3e62sm2xUqi9VqnfK1f2skfbT9XKt07izniw128Np5X5a62w2s6zZTiv1rLOcLDXr9XK1mizdTXdatW5SrVbWKivljeVi73by+v33knYjWRrGV1vdg36r3Ut2s/0kvmM5Wa2svbyc3Kom72xtJ9sP7t3b2n73g7vv339l683Xikn/WFaytLqyulqurpRXq8tTdP2fFIse4fXDmZQmvQCAi2fC/T8wpV48Q//feVSMn9j/7z8I4fz7/6D/H4kL1f9Oe/9/DtcPZ6L/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYWj/Mf/lGvrMYx9eK/DNF6rliXAohzIQQfn+C2XDpVM3Zos78v8yf/9savi2FvMLwHJeL7WoIYbPYfnv2vD8FAAAAeHp99fHNz2K3Hl8WJ70gxinetJm5/uGI6i2EEOYXfxxRtZnhy/MjKhbm8u1oRNXyG1gLIyoWb7nNjarafzJ7Kiw8FkoxzIx1OQAAwFic7gTG24UAAAAwTp9OegFMRimcPMo8eRac//L+rweCV06NAAAAgAuoNOkFAAAAAOcu7//9/x8AAAA83eL//wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH+wcz83agNRHICfbRzIPwVFuaeV3KCMlJBjjhEFpAkKyIEa0gA1kFtKiHCEx8vCisNKHtta9H2SGWyZH28sOMyMNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADCkP/Wujh+ff/bNOTb95OkNAAAAcMuh3q3bN8t0/ra7/r679LE7LyKijIhbY/cqXl1lVl1O/Xj/r8v76yc1/I5oE07fMe+ONxHxpTv+fRj6KQAAAMD92m+2qzRaTy/LqQtiTGnSpnz3NVNeERH18m+mtPKU9ylTWPv7nsX3TGntBNYiU1iacpvlSnuW9u9+nrVbXDRFasqbHzsXma3vAADAiKqrZtxRCAAAAGP6NnUBTKOIh6XM81LgPDXd8t7rqzMAAADgBSqmLgAAAAAYXDv+H2n/v2ag/f+aKtvjAAAAgPuU9v8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgSId6t95vtqu+Ocemnzy9AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4z/68o0AIhEEY7F3fmcz9DysNmpqaVIHw8TcGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDmd3/5PzE1ziRzr42l55Fk7dTYOjX2zo2jP4yvXwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX+/OSAiEQBFEwZ/zvpO9/WEnQM4gQAQ2PKmrRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfNHvfvk/MTXOJHOnjaXjkWTtqrF11dh70Dh6MN7+DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXO/fzGkcVBwD8zczO1lbFGCWHiCh4sBebbmtrD4J4UIIH/wQhpNsau/VHm4MtRczFm+Tci6g3EUGJt578B3puoZd66yGHCuJxZGZndqdtsNtgZ6bJ5wNv33eG4b3vm4WQ77xJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDK9rvTOMk/5sZxXJ67cffKat7fvK/PXdu8tZi3PI6aTPrJ8HL9IFpoLxEAAAD2j6Sq70MIt9Ot5byP54r6P62uyWv+758dx1U9f3/dX/VV7Z+333+78+JkornxPPmgZ9ZGw6MPptJ7fKvstuceekWvuPPFs5ek+ELiDzZe2E6L+xl9e/36e/0iPNBEtgDAbhyp+jKofh/K+0GbiQGwb/RqhXdV/ydz7eYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0ITtjfB0FUchhMXeNM7dvHtldaf+2uatxaqdvHp1M3w9HTMfIg0hnFkbDY82uppuu3jp8rmV0Wh4YYbg7cN//JhlWTbTxQ8PXgkh/B/j7CZ4p1z+uY9muDiEFjLcTfBPN9LoWhCXX3ZX8nkyghZ/KAEAsCelZcvr+tvp1nJ+LpoPIfvh3vr/9VocZqz/73x88kZ9rnr9P2hshd23tH7+86WLly6/sXZ+5ezw7PDTN48N3hocP3XixKml4lnJkicmAAAAPLIsy7LJQb9s9fo/nn9w//9QLQ4z1v9ffDf4qj5xov7f0XTTr+1MAAAA9rfnX/37r2iH81G/H75cWV+/MBh/To6PjT9bSPWRHShbvf5P5tvOCgAAAGjC9kZ0z/7/6VocZtz/f+anl36pj5mEEA6W+/9HVj8bnW5uOZ3WxJ8Tt71GAAAA2nWwbPX9/7R4/z+evPIQhxAOvzaOy38D+J/1f1rW/8n73/xcn6v+/v/x5pbYSfHC+H4U/UIIvYW2MwIAAGAve6psebH/Z7q1/Mmvhz7se/8fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoGn/BgAA//9kDEPy")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
unlinkat(0xffffffffffffff9c, 0x0, 0x0)
creat(&(0x7f0000000380)='./bus\x00', 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000680)='./bus\x00', 0x0, 0x5000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x2000000, 0x2000003})

1m28.669460777s ago: executing program 0 (id=2011):
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYRES64, @ANYRES16], 0x1, 0x38b, &(0x7f0000000b40)="$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")
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x18e)
write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[], 0x78)
r2 = open(&(0x7f00000000c0)='./bus\x00', 0x10507e, 0xa6)
fallocate(r0, 0x0, 0x0, 0x1000f4)
io_setup(0x7d, &(0x7f0000000600)=<r3=>0x0)
io_submit(r3, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0xfffffffffffffdef, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000000)="96", 0x1, 0x2200, 0x0, 0x0, r2}, 0x0])

1m25.668219883s ago: executing program 0 (id=2021):
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000040)={'IDLETIMER\x00'}, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

1m25.085893135s ago: executing program 41 (id=2021):
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000040)={'IDLETIMER\x00'}, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

6.275037073s ago: executing program 2 (id=2626):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000001900)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, 0x0, 0x50)
r2 = dup(r1)
fcntl$setpipe(r0, 0x407, 0x9)
pipe2$9p(&(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x80000)
mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x40, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}})
read$FUSE(r0, &(0x7f0000003140)={0x2020}, 0x2020)

4.852218354s ago: executing program 2 (id=2635):
socket$alg(0x26, 0x5, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0x8, 0xfff2}, {0x1, 0xc}, {0x8, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x80000000}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0ea79", 0x5}], 0x1, &(0x7f0000000540)}], 0x1, 0x40800)

4.645561848s ago: executing program 7 (id=2637):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe0000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x65, 0x0, 0x0)
syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x80c406, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRES16], 0xff, 0x2b1, &(0x7f0000000100)="$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")
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000100)={0x90000, 0x0, {[0xc, 0xd, 0x3, 0x2, 0x87c8, 0x4, 0x27b6, 0x6]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

4.11173402s ago: executing program 2 (id=2640):
r0 = syz_clone(0x0, 0x0, 0xffffff36, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
wait4(r0, 0x0, 0x80000000, 0x0)
ptrace(0x10, r0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)

3.777720647s ago: executing program 7 (id=2642):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x1010400, &(0x7f0000000080)={[{@rodir}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@fat=@check_strict}, {@uni_xlate}, {@uni_xlate}, {@uni_xlateno}, {@shortname_mixed}, {@shortname_winnt}, {@rodir}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '950'}}, {@shortname_lower}, {@shortname_winnt}, {@utf8no}, {@numtail}, {@fat=@debug}]}, 0x1, 0x37b, &(0x7f0000000940)="$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")
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x2200005c, &(0x7f0000000140)=ANY=[], 0xc1, 0x151f, &(0x7f0000000440)="$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")
r1 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x115)
fallocate(r1, 0x0, 0x0, 0x8800000)

3.515547433s ago: executing program 3 (id=2643):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x10}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4)
sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)

3.17657227s ago: executing program 3 (id=2646):
r0 = fsopen(&(0x7f0000000200)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000)
r2 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0)
getdents64(r2, &(0x7f0000000fc0)=""/224, 0xe0)
getdents64(r2, &(0x7f0000000fc0)=""/224, 0xe0)

2.920555906s ago: executing program 2 (id=2648):
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x6, 0x0, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x800)
write$P9_RVERSION(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="3801"], 0x138)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
chdir(&(0x7f0000000000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00')

2.906515087s ago: executing program 7 (id=2649):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
listen(r0, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)='/', 0x1}], 0x1, 0x0, 0x0, 0x40}, 0x0)
accept4(r0, 0x0, 0x0, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfe, 0x7fff0000}]})
close_range(r2, 0xffffffffffffffff, 0x0)

2.892523336s ago: executing program 3 (id=2650):
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r2 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2)
ftruncate(r2, 0xffff)
fcntl$addseals(r2, 0x409, 0x3)
close(0x3)
ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x1, 0x0, 0x2000})
mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000180), 0x2004890, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0])

2.851855197s ago: executing program 1 (id=2651):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081c, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000200)="$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")
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000130001002cbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB='G'], 0x20}, 0x1, 0x0, 0x0, 0x8064040}, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000180)={0x1, 0x8003}, 0x4)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r2=>0x0})
sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14)

2.760710999s ago: executing program 5 (id=2652):
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r0 = socket(0x2, 0x80805, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, &(0x7f00000004c0))

2.540168314s ago: executing program 7 (id=2653):
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x4031, 0xffffffffffffffff, 0x0)
syz_open_dev$MSR(&(0x7f00000000c0), 0x3, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
r0 = userfaultfd(0x80001)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000})

2.503017455s ago: executing program 5 (id=2654):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d80)=@delchain={0x30, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0)

2.502449485s ago: executing program 1 (id=2655):
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x8000001, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, 0x80}, 0x1c)
syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x20000)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}})

2.27698621s ago: executing program 1 (id=2656):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8})
fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x2, 0x73f0, 0x9})
fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)

2.140235643s ago: executing program 5 (id=2657):
r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x800, 0x0)
ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0)
socket(0x2, 0x80805, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4)

1.855194719s ago: executing program 3 (id=2658):
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
pipe2(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x7ffff000}], 0x1, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000800000/0x800000)=nil)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15)

1.778966961s ago: executing program 2 (id=2659):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x9b, &(0x7f0000000500)=[{&(0x7f00000006c0)="27031c00160014000000002f1eafacf706e105400000894f00050004ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0x26}], 0xf}, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300)
recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)

1.37357256s ago: executing program 7 (id=2660):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'hsr0\x00', <r1=>0x0})
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4)
sendto$packet(r0, &(0x7f0000000340)="05036d1ee8fe091c6202a0ffffffff00600312000000892f143488a87f43055762cb80948864113b022543424aa608", 0xfef2, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r1, 0x1, 0x0, 0x6, @multicast}, 0x14)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'hsr0\x00', <r3=>0x0})
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4)
sendto$packet(r2, &(0x7f0000000340)="05036d1ee8fe091c6202a0ffffffff00600312000000892f143488a87f43055762cb80948864113b022543424aa608", 0xfef2, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r3, 0x1, 0x0, 0x6, @multicast}, 0x14)

1.216665683s ago: executing program 2 (id=2661):
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f00000007c0)={[{@jqfmt_vfsold}, {@nolazytime}, {@orlov}, {@noload}, {@delalloc}, {@mblk_io_submit}, {@inlinecrypt}, {@min_batch_time={'min_batch_time', 0x3d, 0x1000}}, {@nogrpid}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x477, &(0x7f0000001380)="$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")
symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9)
mknod$loop(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1)
rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
writev(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000000)="580000001400192340835b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7008070000000000000000008000f0fffeffe809000000ffd9dd000000100001000b0808004149224e06040800", 0x58}], 0x1)

1.025209747s ago: executing program 7 (id=2662):
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x20000000000000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r0 = creat(&(0x7f0000000140)='./bus\x00', 0xc)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, &(0x7f000001f100))
write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8)
madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)

750.927373ms ago: executing program 1 (id=2663):
pipe(&(0x7f00000007c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0x42795000)
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_int(r3, 0x1, 0x200000010, &(0x7f0000000000)=0x9, 0x4)
sendto$unix(r2, &(0x7f00000004c0)="0434", 0x2, 0xd1, 0x0, 0x0)
splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0)

624.422676ms ago: executing program 3 (id=2664):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x181403, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200008500000070000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0xe, 0x0, &(0x7f0000000a80)="b8000005000000000152912e5763", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

556.725848ms ago: executing program 1 (id=2665):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
pipe2$9p(&(0x7f0000000400)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
syz_read_part_table(0x1062, &(0x7f0000000000)="$eJzsz7FNw0AcxeFn+wy2BHPQMAESgh0Qk1AwAQyQMdKmywjZIWOkzUWOLGeDJMX3VX89/XTShdtq8/ye7e90PiYP5yU5JLtxaT7zklpr/f/J/m3eumaYr6elK8mQ9G3SZMxHkq/S9dObx5LXqdtk9Vcu9ff6eh8FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPt1CgAA//+iQg6s")
write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

453.82451ms ago: executing program 5 (id=2666):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x9, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4)
sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000)

272.216874ms ago: executing program 3 (id=2667):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
unshare(0x6020400)
fcntl$lock(r0, 0x7, &(0x7f0000000340)={0x1, 0x0, 0x2, 0x80000001})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x7, &(0x7f0000000240)={0x0, 0x0, 0x4, 0x1})
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/4\x00')
pread64(r2, &(0x7f0000002140)=""/17, 0x11, 0x0)

253.614924ms ago: executing program 5 (id=2668):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200))
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
r1 = dup2(r0, r0)
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x5)
read$FUSE(r1, &(0x7f0000000a40)={0x2020}, 0x50a)
write$vhost_msg_v2(r1, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000140)=""/102, 0x66, 0x0, 0x1, 0x2}}, 0xfffffeca)

172.736786ms ago: executing program 1 (id=2669):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x8}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0x601, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0xc, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xffe0, 0x8}}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1ff80}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4884}, 0x24000840)
sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4048800}, 0x14)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

0s ago: executing program 5 (id=2670):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = dup(r1)
ioctl$TCXONC(r1, 0x540a, 0x0)
write$P9_RREADDIR(r2, &(0x7f0000000600)={0xb, 0x29, 0x2}, 0xb)

kernel console output (not intermixed with test programs):

id=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1440" name="file0" dev="loop6" ino=14 res=0 errno=0
[  276.303757][ T9838] overlayfs: failed to clone lowerpath
[  276.331178][ T7644] kworker/u4:17: attempt to access beyond end of device
[  276.331178][ T7644] loop6: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  276.422903][ T8841] usb 2-1: Using ep0 maxpacket: 8
[  276.430687][ T8841] usb 2-1: unable to get BOS descriptor or descriptor too short
[  276.459179][ T8841] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  276.520219][ T8841] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  276.571128][ T8841] usb 2-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40
[  276.600860][ T8841] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  276.619389][ T8841] usb 2-1: Product: syz
[  276.626762][ T8841] usb 2-1: Manufacturer: syz
[  276.638620][ T8841] usb 2-1: SerialNumber: syz
[  276.879025][ T8841] usb 2-1: 0:1 : does not exist
[  276.890139][ T8841] usb 2-1: unit 5 not found!
[  276.903179][ T4287] Bluetooth: hci1: command 0x0401 tx timeout
[  276.909945][ T8841] usb 2-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8214); report any issues to g@b4.vu
[  276.924756][ T8842] hub 5-1:4.128: config failed, can't read hub descriptor (err -22)
[  276.987262][ T8841] usb 2-1: Error initialising Scarlett Gen 3 Mixer Driver: -22
[  277.003510][ T8842] usb 5-1: USB disconnect, device number 5
[  277.074856][ T8841] snd-usb-audio: probe of 2-1:1.0 failed with error -22
[  277.104849][ T8841] usb 2-1: USB disconnect, device number 5
[  277.140683][ T4503] udevd[4503]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  277.186239][ T9864] loop6: detected capacity change from 0 to 2048
[  277.238374][ T9864] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  277.628990][ T9878] netlink: 'syz.5.1460': attribute type 39 has an invalid length.
[  278.111227][ T9872] loop7: detected capacity change from 0 to 32768
[  278.145346][ T9872] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 scanned by syz.7.1462 (9872)
[  278.190549][   T26] audit: type=1326 audit(43731.460:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9894 comm="syz.5.1466" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f588579de99 code=0x7ffc0000
[  278.236332][ T9872] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  278.260955][   T26] audit: type=1326 audit(43731.500:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9894 comm="syz.5.1466" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f588579de99 code=0x7ffc0000
[  278.287933][ T9872] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm
[  278.320786][ T9872] BTRFS info (device loop7): force clearing of disk cache
[  278.344698][ T9872] BTRFS info (device loop7): use zlib compression, level 3
[  278.367346][   T26] audit: type=1326 audit(43731.500:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9894 comm="syz.5.1466" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f588579de99 code=0x7ffc0000
[  278.393616][ T9872] BTRFS info (device loop7): enabling ssd optimizations
[  278.416534][ T9872] BTRFS info (device loop7): using spread ssd allocation scheme
[  278.437407][ T9885] loop1: detected capacity change from 0 to 32768
[  278.444080][ T9872] BTRFS info (device loop7): using free space tree
[  278.490058][   T26] audit: type=1326 audit(43731.500:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9894 comm="syz.5.1466" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f588579de99 code=0x7ffc0000
[  278.763784][   T26] audit: type=1326 audit(43731.500:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9894 comm="syz.5.1466" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f588579de99 code=0x7ffc0000
[  278.789946][ T9885] JBD2: Ignoring recovery information on journal
[  278.814298][ T9885] jbd2_journal_bmap: journal block not found at offset 32 on loop1-75
[  278.823754][ T9885] JBD2: bad block at offset 32
[  278.830855][ T9872] BTRFS info (device loop7): rebuilding free space tree
[  278.874093][ T9885] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  278.933440][   T26] audit: type=1326 audit(43731.500:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9894 comm="syz.5.1466" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f588579de99 code=0x7ffc0000
[  279.001907][ T9872] BTRFS info (device loop7): checking UUID tree
[  279.099442][   T26] audit: type=1326 audit(43731.500:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9894 comm="syz.5.1466" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f588579de99 code=0x7ffc0000
[  279.253564][   T26] audit: type=1326 audit(43731.500:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9894 comm="syz.5.1466" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f588579de99 code=0x7ffc0000
[  279.367809][   T26] audit: type=1326 audit(43731.500:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9894 comm="syz.5.1466" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f588579de99 code=0x7ffc0000
[  279.538498][ T5083] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  279.548949][ T8960] ocfs2: Unmounting device (7,1) on (node local)
[  279.761608][ T4503] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 11 /dev/loop7 scanned by udevd (4503)
[  280.077379][ T9963] loop1: detected capacity change from 0 to 1024
[  280.093082][ T4317] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  280.093761][ T9963] EXT4-fs: Ignoring removed oldalloc option
[  280.137239][ T9963] EXT4-fs: Ignoring removed orlov option
[  280.209486][ T9963] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  280.325195][ T4317] usb 5-1: unable to get BOS descriptor or descriptor too short
[  280.354970][ T4317] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  280.372847][ T4317] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  280.392369][ T4317] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[  280.416170][ T4317] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[  280.450888][ T4317] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  280.467749][ T4317] usb 5-1: config 1 interface 1 has no altsetting 0
[  280.490821][ T8960] EXT4-fs (loop1): unmounting filesystem.
[  280.499943][ T4317] usb 5-1: string descriptor 0 read error: -22
[  280.520415][ T4317] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  280.587752][ T4317] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  281.456953][ T4317] usb 5-1: 2:0: failed to get current value for ch 1 (-32)
[  281.458065][T10013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1491'.
[  281.536326][T10014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1491'.
[  281.672135][  T955] usb 5-1: USB disconnect, device number 6
[  281.874460][T10028] netlink: 7 bytes leftover after parsing attributes in process `syz.6.1496'.
[  282.743355][  T955] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  282.932964][  T955] usb 8-1: Using ep0 maxpacket: 32
[  282.945779][  T955] usb 8-1: config 0 has an invalid interface number: 132 but max is 0
[  282.964464][  T955] usb 8-1: config 0 has no interface number 0
[  282.980837][  T955] usb 8-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  283.005444][  T955] usb 8-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  283.023043][  T955] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  283.041407][  T955] usb 8-1: Product: syz
[  283.045917][  T955] usb 8-1: Manufacturer: syz
[  283.050555][  T955] usb 8-1: SerialNumber: syz
[  283.068200][  T955] usb 8-1: config 0 descriptor??
[  283.086259][  T955] em28xx 8-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  283.102516][  T955] em28xx 8-1:0.132: Video interface 132 found:
[  283.289406][T10054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  283.303524][T10054] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  283.536129][  T955] em28xx 8-1:0.132: unknown em28xx chip ID (0)
[  283.891469][T10091] loop6: detected capacity change from 0 to 512
[  283.971463][T10091] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  284.094975][T10091] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  284.160224][  T955] em28xx 8-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5)
[  284.181690][  T955] em28xx 8-1:0.132: failed to read eeprom (err=-5)
[  284.190250][  T955] em28xx 8-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5]
[  284.440505][T10103] loop1: detected capacity change from 0 to 32768
[  284.448529][  T955] em28xx 8-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  284.457117][  T955] em28xx 8-1:0.132: analog set to bulk mode.
[  284.463279][T10103] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1515 (10103)
[  284.476671][ T4987] EXT4-fs (loop6): unmounting filesystem.
[  284.481337][  T955] usb 8-1: USB disconnect, device number 6
[  284.489077][  T955] em28xx 8-1:0.132: Disconnecting em28xx
[  284.499996][ T4317] em28xx 8-1:0.132: Registering V4L2 extension
[  284.539228][T10103] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  284.549526][T10103] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  284.558961][T10103] BTRFS info (device loop1): setting nodatasum
[  284.565221][T10103] BTRFS info (device loop1): force zlib compression, level 3
[  284.572655][T10103] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8)
[  284.582699][T10103] BTRFS info (device loop1): use lzo compression, level 0
[  284.590239][T10103] BTRFS info (device loop1): turning on flush-on-commit
[  284.597277][T10103] BTRFS info (device loop1): enabling auto defrag
[  284.603923][T10103] BTRFS info (device loop1): max_inline at 4096
[  284.610187][T10103] BTRFS info (device loop1): force zlib compression, level 3
[  284.617669][T10103] BTRFS info (device loop1): using free space tree
[  284.656870][T10103] BTRFS info (device loop1): enabling ssd optimizations
[  284.905184][ T8960] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  285.061357][ T4351] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop1 scanned by udevd (4351)
[  285.466552][ T4317] em28xx 8-1:0.132: Config register raw data: 0xffffffed
[  285.494877][ T4317] em28xx 8-1:0.132: AC97 chip type couldn't be determined
[  285.502046][ T4317] em28xx 8-1:0.132: No AC97 audio processor
[  285.559459][T10144] loop7: detected capacity change from 0 to 8192
[  285.589545][ T4317] usb 8-1: Decoder not found
[  285.615923][ T4317] em28xx 8-1:0.132: failed to create media graph
[  285.626762][T10144] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  285.650264][ T4317] em28xx 8-1:0.132: V4L2 device video103 deregistered
[  285.661191][T10144] REISERFS (device loop7): found reiserfs format "3.5" with non-standard journal
[  285.686002][ T4317] em28xx 8-1:0.132: Remote control support is not available for this card.
[  285.696094][T10144] REISERFS (device loop7): using ordered data mode
[  285.702621][T10144] reiserfs: using flush barriers
[  285.713334][  T955] em28xx 8-1:0.132: Closing input extension
[  285.740988][T10144] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  285.798270][  T955] em28xx 8-1:0.132: Freeing device
[  285.823198][T10144] REISERFS (device loop7): checking transaction log (loop7)
[  285.877179][T10144] REISERFS (device loop7): Using r5 hash to sort names
[  285.915583][T10144] REISERFS (device loop7): using 3.5.x disk format
[  285.961199][T10144] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage.
[  286.119211][T10165] loop1: detected capacity change from 0 to 512
[  286.168133][T10165] EXT4-fs: quotafile must be on filesystem root
[  286.408171][T10147] loop4: detected capacity change from 0 to 32768
[  286.463990][T10147] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 11
[  286.863769][ T4351] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 11
[  287.203006][T10150] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  287.376744][T10189] loop6: detected capacity change from 0 to 512
[  287.409810][T10189] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  287.427292][T10150] usb 8-1: config 0 has no interfaces?
[  287.433304][T10150] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  287.462708][T10150] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  287.495373][T10150] usb 8-1: config 0 descriptor??
[  287.556092][T10189] EXT4-fs (loop6): 1 truncate cleaned up
[  287.573907][T10189] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  287.684085][T10175] loop1: detected capacity change from 0 to 40427
[  287.713827][T10175] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64)
[  287.723806][T10175] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  287.732892][T10181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  287.741472][T10181] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  287.752588][T10181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  287.764828][T10175] F2FS-fs (loop1): invalid crc value
[  287.786470][T10175] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  287.795748][T10181] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  287.814102][ T4987] EXT4-fs (loop6): unmounting filesystem.
[  287.821423][ T7634] usb 8-1: USB disconnect, device number 7
[  287.989146][T10175] F2FS-fs (loop1): Start checkpoint disabled!
[  288.049482][T10175] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  288.064419][T10175] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  288.281704][   T26] kauditd_printk_skb: 24 callbacks suppressed
[  288.281718][   T26] audit: type=1800 audit(43741.550:702): pid=10175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1529" name="file0" dev="loop1" ino=14 res=0 errno=0
[  288.383807][ T7656] kworker/u4:25: attempt to access beyond end of device
[  288.383807][ T7656] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  288.472969][ T7634] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  288.670394][ T7634] usb 8-1: Using ep0 maxpacket: 8
[  288.683261][ T7634] usb 8-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=66.9e
[  288.733261][ T7634] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  288.768494][ T7634] usb 8-1: Product: syz
[  288.775777][ T7634] usb 8-1: Manufacturer: syz
[  288.816044][ T7634] usb 8-1: SerialNumber: syz
[  288.839725][ T7634] usb 8-1: config 0 descriptor??
[  288.876524][ T7634] gspca_main: spca500-2.14.0 probing 046d:0900
[  289.272747][ T7634] gspca_spca500: reg write: error -71
[  289.282598][ T7634] gspca_spca500: reg write: error -71
[  289.306991][ T7634] gspca_spca500: reg write: error -71
[  289.344358][ T7634] gspca_spca500: reg write: error -71
[  289.362078][ T7634] gspca_spca500: reg write: error -71
[  289.382642][ T7634] gspca_spca500: reg write: error -71
[  289.402622][ T7634] gspca_spca500: reg write: error -71
[  289.428912][ T7634] gspca_spca500: reg write: error -71
[  289.451375][ T7634] gspca_spca500: reg write: error -71
[  289.461707][ T7634] gspca_spca500: reg write: error -71
[  289.475565][ T7634] gspca_spca500: reg write: error -71
[  289.491636][ T7634] gspca_spca500: reg write: error -71
[  289.515515][ T7634] gspca_spca500: reg write: error -71
[  289.555332][ T7634] usb 8-1: USB disconnect, device number 8
[  289.587068][T10254] "syz.6.1549" (10254) uses obsolete ecb(arc4) skcipher
[  291.076023][T10286] loop4: detected capacity change from 0 to 32768
[  291.119132][T10286] XFS (loop4): Mounting V5 Filesystem
[  291.181528][T10286] XFS (loop4): Ending clean mount
[  291.250515][T10286] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_bnobt block 0x4 
[  291.272993][T10286] XFS (loop4): Unmount and run xfs_repair
[  291.279114][T10286] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  291.294830][T10286] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[  291.342879][T10286] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[  291.351784][T10286] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[  291.415898][T10286] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[  291.452702][T10286] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[  291.465224][T10327] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1567'.
[  291.483001][T10286] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  291.492196][T10286] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  291.552328][T10286] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  291.593226][T10286] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x4 len 4 error 74
[  291.689990][T10286] XFS (loop4): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x17e5/0x1ed0 (fs/xfs/libxfs/xfs_defer.c:580).  Shutting down filesystem.
[  291.768377][T10286] XFS (loop4): Please unmount the filesystem and rectify the problem(s)
[  291.897234][T10337] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1570'.
[  291.947924][T10337] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1570'.
[  292.463191][ T8783] XFS (loop4): Unmounting Filesystem
[  292.600983][T10365] loop7: detected capacity change from 0 to 256
[  292.673655][T10365] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3967cd3a, utbl_chksum : 0xe619d30d)
[  292.965726][T10373] IPv6: ADDRCONF(NETDEV_CHANGE): nr6: link becomes ready
[  293.668020][T10398] loop7: detected capacity change from 0 to 256
[  293.686691][T10398] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  293.710934][T10398] exFAT-fs (loop7): Medium has reported failures. Some data may be lost.
[  293.755373][T10398] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  295.038632][T10438] netlink: 'syz.7.1603': attribute type 1 has an invalid length.
[  295.172155][T10438] device bond1 entered promiscuous mode
[  295.214178][T10438] 8021q: adding VLAN 0 to HW filter on device bond1
[  296.307398][T10486] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1617'.
[  296.793715][T10498] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1622'.
[  297.296091][T10519] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1627'.
[  297.322942][T10519] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1627'.
[  297.342297][T10519] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1627'.
[  297.363249][T10519] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[  299.836614][T10605] loop6: detected capacity change from 0 to 256
[  300.331580][T10614] loop6: detected capacity change from 0 to 4096
[  300.524977][T10619] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  300.742921][T10614] loop6: detected capacity change from 4096 to 64
[  300.846305][T10623] syz.6.1651: attempt to access beyond end of device
[  300.846305][T10623] loop6: rw=0, sector=264, nr_sectors = 8 limit=64
[  300.963362][T10623] NILFS (loop6): I/O error reading meta-data file (ino=3, block-offset=130)
[  301.043724][T10623] overlayfs: failed to create directory ./file0/work (errno: 5); mounting read-only
[  301.128103][T10636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1655'.
[  302.098648][ T8835] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  302.282974][ T8835] usb 2-1: Using ep0 maxpacket: 16
[  302.290118][ T8835] usb 2-1: unable to get BOS descriptor or descriptor too short
[  302.306767][ T8835] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  302.317464][ T8835] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  302.336516][ T8835] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  302.382348][ T8835] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[  302.433525][ T8835] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  302.462364][ T8835] usb 2-1: Product: syz
[  302.471848][ T8835] usb 2-1: Manufacturer: syz
[  302.493083][ T8835] usb 2-1: SerialNumber: syz
[  302.506811][T10681] lo speed is unknown, defaulting to 1000
[  302.542100][T10685] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1673'.
[  302.602717][T10687] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1673'.
[  302.735639][ T8835] usb 2-1: Audio class v2/v3 interfaces need an interface association
[  302.773526][ T8835] snd-usb-audio: probe of 2-1:1.0 failed with error -22
[  302.861819][T10693] loop7: detected capacity change from 0 to 128
[  302.954629][T10693] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  303.132460][ T8835] usb 2-1: 2:1 : bogus bTerminalLink 6
[  303.308141][ T5083] EXT4-fs (loop7): unmounting filesystem.
[  303.376341][ T8835] usb 2-1: USB disconnect, device number 6
[  303.397677][T10681] netlink: 'syz.5.1672': attribute type 4 has an invalid length.
[  303.906689][T10722] device gretap0 entered promiscuous mode
[  304.440309][T10745] device gre1 entered promiscuous mode
[  304.834749][T10756] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1691'.
[  304.905174][T10756] netlink: 'syz.7.1691': attribute type 11 has an invalid length.
[  304.938879][T10756] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  304.947799][T10756] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  304.956569][T10756] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  304.965316][T10756] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  305.000195][T10756] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1691'.
[  305.010496][T10756] netlink: 'syz.7.1691': attribute type 11 has an invalid length.
[  305.359160][T10773] netlink: 'syz.5.1698': attribute type 1 has an invalid length.
[  305.390248][T10773] netlink: 'syz.5.1698': attribute type 4 has an invalid length.
[  305.408634][T10773] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.1698'.
[  305.448998][T10769] loop1: detected capacity change from 0 to 8192
[  305.458520][T10777] netlink: 'syz.5.1698': attribute type 1 has an invalid length.
[  305.504182][T10769] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  305.561905][T10777] netlink: 'syz.5.1698': attribute type 4 has an invalid length.
[  305.620821][T10777] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.1698'.
[  306.794773][T10821] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1714'.
[  308.509352][T10866] loop1: detected capacity change from 0 to 512
[  308.660506][T10869] loop7: detected capacity change from 0 to 256
[  308.682564][T10866] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  308.761861][T10869] exFAT-fs (loop7): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d)
[  308.849254][T10869] exFAT-fs (loop7): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  309.119040][ T8960] EXT4-fs (loop1): unmounting filesystem.
[  309.530974][T10885] netlink: 'syz.5.1733': attribute type 4 has an invalid length.
[  309.551642][T10885] netlink: 'syz.5.1733': attribute type 7 has an invalid length.
[  309.573916][T10885] netlink: 194740 bytes leftover after parsing attributes in process `syz.5.1733'.
[  309.590415][T10888] loop4: detected capacity change from 0 to 2048
[  309.612995][ T4317] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  309.638511][T10888] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  309.715680][T10888] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  309.803187][ T4317] usb 2-1: Using ep0 maxpacket: 32
[  309.810039][ T4317] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  309.840534][ T4317] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  309.886867][ T4317] usb 2-1: config 0 descriptor??
[  309.962228][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  309.994750][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  310.006917][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  310.029379][T10893] device bridge_slave_0 left promiscuous mode
[  310.041792][T10893] bridge0: port 1(bridge_slave_0) entered disabled state
[  310.059299][T10893] device bridge_slave_1 left promiscuous mode
[  310.066310][T10893] bridge0: port 2(bridge_slave_1) entered disabled state
[  310.097329][T10893] bond0: (slave bond_slave_0): Releasing backup interface
[  310.130741][ T4317] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  310.152938][ T4317] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  310.173807][ T4317] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  310.200215][ T4317] usb 2-1: media controller created
[  310.255524][T10893] bond0: (slave bond_slave_1): Releasing backup interface
[  310.288399][ T4317] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  310.501873][T10893] team0: Port device team_slave_0 removed
[  310.565539][T10893] team0: Port device team_slave_1 removed
[  310.590545][T10893] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  310.609719][T10893] batman_adv: batadv0: Removing interface: batadv_slave_0
[  310.637718][T10893] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  310.658494][T10893] batman_adv: batadv0: Removing interface: batadv_slave_1
[  310.750936][T10893] team0: Port device netdevsim0 removed
[  310.827588][T10898] team0: Port device xfrm0 added
[  311.223459][ T4317] stb0899_attach: Driver disabled by Kconfig
[  311.229484][ T4317] az6027: no front-end attached
[  311.229484][ T4317] 
[  311.259481][ T4317] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  311.279036][ T4317] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input10
[  311.346703][ T4317] dvb-usb: schedule remote query interval to 400 msecs.
[  311.368188][ T4317] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  311.601348][ T4317] usb 2-1: USB disconnect, device number 7
[  311.743565][ T4317] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  313.649969][T10959] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link
[  314.064381][T10960] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  314.189784][T10960] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  314.335273][T10960] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface
[  314.378523][T10960] bond0 (unregistering): Released all slaves
[  314.675912][T10971] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  315.033619][T10977] loop7: detected capacity change from 0 to 1764
[  315.473029][T10988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1758'.
[  315.508432][T10988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1758'.
[  316.143406][T11011] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1766'.
[  316.978027][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  316.984405][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  317.117729][T11027] batman_adv: batadv0: Adding interface: dummy0
[  317.154727][T11027] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  317.187548][T11027] batman_adv: batadv0: Interface activated: dummy0
[  317.301940][T11027] batadv0: mtu less than device minimum
[  317.357940][T11027] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  317.371021][T11027] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  317.383367][T11027] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  317.395690][T11027] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  317.407741][T11027] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  317.420010][T11027] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  317.432309][T11027] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  317.444692][T11027] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  317.456925][T11027] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  317.988879][ T4283] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  318.002029][ T4283] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  318.011102][ T4283] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  318.020508][ T4283] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  318.029442][ T4283] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  318.036832][ T4283] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  318.083174][T11050] lo speed is unknown, defaulting to 1000
[  318.548514][T11050] chnl_net:caif_netlink_parms(): no params data found
[  318.882602][T11050] bridge0: port 1(bridge_slave_0) entered blocking state
[  318.963076][T11050] bridge0: port 1(bridge_slave_0) entered disabled state
[  319.012304][T11050] device bridge_slave_0 entered promiscuous mode
[  319.091346][T11050] bridge0: port 2(bridge_slave_1) entered blocking state
[  319.152204][T11050] bridge0: port 2(bridge_slave_1) entered disabled state
[  319.182596][T11050] device bridge_slave_1 entered promiscuous mode
[  319.288417][T11050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  319.361069][T11050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  319.507284][T11050] team0: Port device team_slave_0 added
[  319.569759][T11050] team0: Port device team_slave_1 added
[  319.689709][T11050] batman_adv: batadv0: Adding interface: batadv_slave_0
[  319.728880][T11050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  319.867947][T11050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  319.925362][T11050] batman_adv: batadv0: Adding interface: batadv_slave_1
[  319.954199][T11050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  320.081769][T11050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  320.099434][ T4283] Bluetooth: hci0: command 0x0409 tx timeout
[  320.191525][T11114] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1787'.
[  320.298007][T11114] unsupported nlmsg_type 40
[  320.348404][T11050] device hsr_slave_0 entered promiscuous mode
[  320.403756][T11050] device hsr_slave_1 entered promiscuous mode
[  320.424457][T11050] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  320.452897][T11050] Cannot create hsr debugfs directory
[  321.703058][ T4320] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  321.902977][ T4320] usb 8-1: Using ep0 maxpacket: 32
[  321.914471][ T4320] usb 8-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  321.968326][ T4320] usb 8-1: config 0 interface 0 has no altsetting 0
[  321.991822][ T4320] usb 8-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[  322.057416][ T4320] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  322.103056][ T4320] usb 8-1: config 0 descriptor??
[  322.182813][ T4283] Bluetooth: hci0: command 0x041b tx timeout
[  322.230043][T11144] loop4: detected capacity change from 0 to 40427
[  322.241855][T11144] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64)
[  322.249192][T11144] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  322.260084][T11144] F2FS-fs (loop4): invalid crc value
[  322.270195][T11144] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  322.453907][T11144] F2FS-fs (loop4): Start checkpoint disabled!
[  322.548561][T11144] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  322.565871][T11144] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  322.700992][T11050] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  322.742261][T11050] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  322.772525][T11050] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  322.824138][T11050] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  322.862381][T11144] syz.4.1797: attempt to access beyond end of device
[  322.862381][T11144] loop4: rw=2049, sector=53248, nr_sectors = 992 limit=40427
[  322.889460][ T4320] corsair-cpro 0003:1B1C:0C10.000A: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.7-1/input0
[  323.106138][T11050] 8021q: adding VLAN 0 to HW filter on device bond0
[  323.169568][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  323.188056][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  323.229832][T11050] 8021q: adding VLAN 0 to HW filter on device team0
[  323.272265][ T7644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  323.296832][ T7644] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  323.311342][ T7644] bridge0: port 1(bridge_slave_0) entered blocking state
[  323.312604][ T4320] corsair-cpro: probe of 0003:1B1C:0C10.000A failed with error -71
[  323.318503][ T7644] bridge0: port 1(bridge_slave_0) entered forwarding state
[  323.340029][ T7644] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  323.383918][ T7644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  323.414400][ T7644] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  323.436635][ T4320] usb 8-1: USB disconnect, device number 9
[  323.461119][ T7644] bridge0: port 2(bridge_slave_1) entered blocking state
[  323.468277][ T7644] bridge0: port 2(bridge_slave_1) entered forwarding state
[  323.512054][ T7644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  323.547733][ T7644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  323.596565][ T7644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  323.656166][ T7644] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  323.709129][ T7644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  323.761948][ T7644] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  323.806862][T11190] fido_id[11190]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory
[  323.839357][T11050] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  323.868174][T11050] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  323.955697][ T7644] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  323.978542][ T7644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  324.043957][ T7644] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  324.080550][ T7644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  324.125631][ T7644] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  324.149196][ T7644] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  324.253188][ T4283] Bluetooth: hci0: command 0x040f tx timeout
[  324.889610][ T7644] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  324.931246][ T7644] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  324.972610][T11050] 8021q: adding VLAN 0 to HW filter on device batadv0
[  325.085635][ T7644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  325.100716][ T7644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  325.145462][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  325.168842][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  325.182668][T11233] overlayfs: failed to clone upperpath
[  325.197185][T11050] device veth0_vlan entered promiscuous mode
[  325.219966][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  325.274759][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  325.374949][T11232] lo speed is unknown, defaulting to 1000
[  325.380430][T11050] device veth1_vlan entered promiscuous mode
[  325.616367][ T7644] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  325.643527][ T7644] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  325.685543][ T7644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  325.723965][ T7644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  325.766389][T11050] device veth0_macvtap entered promiscuous mode
[  325.906711][T11050] device veth1_macvtap entered promiscuous mode
[  325.922004][ T8353] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  325.941114][ T8353] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  325.987437][T11050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  326.027155][T11050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  326.062123][T11050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  326.109654][T11050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  326.152646][T11050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  326.193546][T11050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  326.229765][T11050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  326.268749][T11050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  326.311100][T11050] batman_adv: batadv0: Interface activated: batadv_slave_0
[  326.335332][ T4283] Bluetooth: hci0: command 0x0419 tx timeout
[  326.353188][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  326.370533][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  326.424272][T11050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  326.456897][T11050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  326.498233][T11050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  326.541190][T11050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  326.591658][T11050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  326.622671][T11050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  326.662105][T11050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  326.710929][T11050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  326.751518][T11050] batman_adv: batadv0: Interface activated: batadv_slave_1
[  326.777267][T11234] netlink: 'syz.7.1815': attribute type 4 has an invalid length.
[  326.790029][ T7649] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  326.823600][ T7649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  326.879709][T11050] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  326.912904][T11050] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  326.951738][T11050] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  326.992078][T11050] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  327.414060][ T7656] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  327.421924][ T7656] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  327.724342][ T7649] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  327.758172][ T8353] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  327.830414][ T8353] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  327.899806][ T7656] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  328.843003][ T7636] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  329.043109][ T7636] usb 1-1: Using ep0 maxpacket: 32
[  329.061547][ T7636] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[  329.092337][ T7636] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  329.129063][ T7636] usb 1-1: Product: syz
[  329.139168][ T7636] usb 1-1: Manufacturer: syz
[  329.159456][ T7636] usb 1-1: SerialNumber: syz
[  329.182103][ T7636] usb 1-1: config 0 descriptor??
[  329.208832][ T7636] gspca_main: gspca_topro-2.14.0 probing 06a2:0003
[  329.754529][T11322] netlink: 'syz.7.1838': attribute type 2 has an invalid length.
[  330.087597][T11329] loop4: detected capacity change from 0 to 1024
[  330.132644][T11329] EXT4-fs: Ignoring removed bh option
[  330.243932][T11329] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  330.623138][ T7636] gspca_topro: Sensor soi763a
[  330.656931][ T8783] EXT4-fs error (device loop4): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /115/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  330.753792][ T8783] EXT4-fs (loop4): Remounting filesystem read-only
[  330.808022][ T8783] EXT4-fs error (device loop4): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /115/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  330.851688][ T7636] usb 1-1: USB disconnect, device number 3
[  330.902501][ T8783] EXT4-fs (loop4): Remounting filesystem read-only
[  330.942171][ T8783] EXT4-fs error (device loop4): empty_inline_dir:1903: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[  331.052197][ T8783] EXT4-fs (loop4): Remounting filesystem read-only
[  331.093134][ T8783] EXT4-fs warning (device loop4): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  331.150474][ T8783] EXT4-fs error (device loop4): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /115/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  331.196502][ T8783] EXT4-fs (loop4): Remounting filesystem read-only
[  331.206003][ T8783] EXT4-fs error (device loop4): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /115/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  331.231581][ T8783] EXT4-fs (loop4): Remounting filesystem read-only
[  331.288477][ T8783] EXT4-fs error (device loop4): empty_inline_dir:1903: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[  331.355551][ T8783] EXT4-fs (loop4): Remounting filesystem read-only
[  331.382724][ T8783] EXT4-fs warning (device loop4): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  331.473202][ T8783] EXT4-fs error (device loop4): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /115/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  331.580722][ T8783] EXT4-fs (loop4): Remounting filesystem read-only
[  331.600772][ T8783] EXT4-fs error (device loop4): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /115/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  331.623079][T11353] loop0: detected capacity change from 0 to 128
[  331.709973][ T8783] EXT4-fs (loop4): Remounting filesystem read-only
[  331.727467][ T8783] EXT4-fs error (device loop4): empty_inline_dir:1903: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[  331.733890][T11353] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  331.834652][ T8783] EXT4-fs (loop4): Remounting filesystem read-only
[  331.865533][ T8783] EXT4-fs warning (device loop4): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  331.897631][T11353] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz.0.1846: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1
[  331.913283][ T8783] EXT4-fs error (device loop4): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /115/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  331.968843][ T8783] EXT4-fs warning (device loop4): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  332.030618][ T8783] EXT4-fs warning (device loop4): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  332.138334][ T8783] EXT4-fs warning (device loop4): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  332.193788][ T8783] EXT4-fs warning (device loop4): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  332.234935][T11050] EXT4-fs (loop0): unmounting filesystem.
[  332.273247][ T8783] EXT4-fs warning (device loop4): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  332.314362][ T8783] EXT4-fs warning (device loop4): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  332.360481][ T8783] EXT4-fs warning (device loop4): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  332.390158][T11369] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1849'.
[  332.443004][T10150] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  332.632931][T10150] usb 8-1: Using ep0 maxpacket: 16
[  332.641881][T10150] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  332.701483][T10150] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[  332.749664][T10150] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89
[  332.805919][T10150] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  332.843069][T10150] usb 8-1: SerialNumber: syz
[  332.900438][T10150] usb 8-1: 0:2 : does not exist
[  333.211487][T11387] loop0: detected capacity change from 0 to 256
[  333.322143][T11387] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  333.478798][ T6145] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  333.542908][ T6145] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  333.799926][ T6145] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  333.823037][ T6145] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  334.019826][ T6145] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  334.019912][ T6145] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  334.240201][ T6145] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  334.293630][ T6145] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  334.483130][ T8836] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  334.496552][T10150] usb 8-1: 5:0: failed to get current value for ch 1 (-22)
[  334.537648][T10150] usb 8-1: 5:0: failed to get current value for ch 2 (-22)
[  334.600312][T10150] usb 8-1: 5:0: failed to get current value for ch 3 (-22)
[  334.660664][T10150] usb 8-1: 5:0: cannot get min/max values for control 5 (id 5)
[  334.683005][ T8836] usb 1-1: Using ep0 maxpacket: 16
[  334.689841][ T8836] usb 1-1: config index 0 descriptor too short (expected 37359, got 202)
[  334.755168][T10150] usb 8-1: USB disconnect, device number 10
[  334.761653][ T8836] usb 1-1: config 33 has too many interfaces: 95, using maximum allowed: 32
[  334.813382][ T8836] usb 1-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config
[  334.853077][ T8836] usb 1-1: config 33 has 1 interface, different from the descriptor's value: 95
[  334.911676][ T8836] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  334.951959][ T8836] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  334.993058][ T8836] usb 1-1: Product: syz
[  334.997283][ T8836] usb 1-1: Manufacturer: syz
[  335.001895][ T8836] usb 1-1: SerialNumber: syz
[  335.096065][ T4287] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  335.109328][ T4287] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  335.123956][ T4287] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  335.134269][ T4286] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  335.144856][ T4286] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  335.153469][ T4286] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  335.310148][T11414] lo speed is unknown, defaulting to 1000
[  335.316588][ T8836] usb 1-1: 0:2 : does not exist
[  335.329306][ T8836] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[  335.424546][ T8836] usb 1-1: USB disconnect, device number 4
[  335.478322][ T4503] udevd[4503]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:33.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  336.328481][T11414] chnl_net:caif_netlink_parms(): no params data found
[  336.896290][T11458] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1872'.
[  337.187093][T11414] bridge0: port 1(bridge_slave_0) entered blocking state
[  337.197126][T11414] bridge0: port 1(bridge_slave_0) entered disabled state
[  337.213069][ T4286] Bluetooth: hci1: command 0x0409 tx timeout
[  337.229347][T11414] device bridge_slave_0 entered promiscuous mode
[  337.333839][ T6145] device hsr_slave_0 left promiscuous mode
[  337.354472][ T6145] device hsr_slave_1 left promiscuous mode
[  337.390457][ T6145] batman_adv: batadv0: Interface deactivated: dummy0
[  337.419447][ T6145] batman_adv: batadv0: Removing interface: dummy0
[  337.452570][ T6145] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  337.497254][ T6145] batman_adv: batadv0: Removing interface: batadv_slave_0
[  337.524479][ T6145] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  337.553271][ T6145] batman_adv: batadv0: Removing interface: batadv_slave_1
[  337.596163][ T6145] device bridge_slave_1 left promiscuous mode
[  337.602443][ T6145] bridge0: port 2(bridge_slave_1) entered disabled state
[  337.671328][ T6145] device bridge_slave_0 left promiscuous mode
[  337.696027][ T6145] bridge0: port 1(bridge_slave_0) entered disabled state
[  337.845511][ T6145] device veth1_macvtap left promiscuous mode
[  337.863386][ T6145] device veth0_macvtap left promiscuous mode
[  337.869543][ T6145] device veth1_vlan left promiscuous mode
[  337.907227][ T6145] device veth0_vlan left promiscuous mode
[  338.471013][T11497] overlayfs: failed to clone upperpath
[  339.295353][ T4286] Bluetooth: hci1: command 0x041b tx timeout
[  339.381465][ T6145] team0 (unregistering): Port device team_slave_1 removed
[  339.469452][ T6145] team0 (unregistering): Port device team_slave_0 removed
[  340.318491][T11414] bridge0: port 2(bridge_slave_1) entered blocking state
[  340.326024][T11414] bridge0: port 2(bridge_slave_1) entered disabled state
[  340.338806][T11414] device bridge_slave_1 entered promiscuous mode
[  340.354546][T11475] lo speed is unknown, defaulting to 1000
[  340.364338][T11492] device bond0 entered promiscuous mode
[  340.386975][T11492] device batadv0 entered promiscuous mode
[  340.422884][T11494] netlink: 'syz.7.1878': attribute type 10 has an invalid length.
[  340.432022][T11494] device syz_tun entered promiscuous mode
[  340.469492][T11494] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  340.600787][T11414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  340.666080][T11414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  340.859454][T11414] team0: Port device team_slave_0 added
[  340.871357][T11520] loop0: detected capacity change from 0 to 64
[  340.973977][T11521] Cannot find add_set index 0 as target
[  340.979889][T11414] team0: Port device team_slave_1 added
[  341.124016][T11520] hfs: request for non-existent node 131072 in B*Tree
[  341.148086][T11414] batman_adv: batadv0: Adding interface: batadv_slave_0
[  341.169998][T11520] hfs: request for non-existent node 131072 in B*Tree
[  341.193948][T11414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  341.280024][T11414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  341.327838][T11414] batman_adv: batadv0: Adding interface: batadv_slave_1
[  341.366688][T11414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  341.393483][ T4286] Bluetooth: hci1: command 0x040f tx timeout
[  341.416593][T11414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  341.747504][T11414] device hsr_slave_0 entered promiscuous mode
[  341.798451][T11414] device hsr_slave_1 entered promiscuous mode
[  342.283159][ T7634] usb 8-1: new full-speed USB device number 11 using dummy_hcd
[  342.496657][ T7634] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  342.528094][ T7634] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  342.552937][ T7634] usb 8-1: Product: syz
[  342.567371][ T7634] usb 8-1: Manufacturer: syz
[  342.585538][ T7634] usb 8-1: SerialNumber: syz
[  342.617299][ T7634] usb 8-1: config 0 descriptor??
[  342.843153][ T7634] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  343.329062][T11561] IPVS: persistence engine module ip_vs_pe_ not found
[  343.460704][ T4286] Bluetooth: hci1: command 0x0419 tx timeout
[  343.831682][T11414] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  343.851792][T11578] overlayfs: failed to clone upperpath
[  343.862298][T11414] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  343.883381][T11414] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  343.921631][T11414] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  344.185711][T11414] 8021q: adding VLAN 0 to HW filter on device bond0
[  344.226966][ T7644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  344.241258][ T7644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  344.269869][ T7634] dvb_usb_rtl28xxu: probe of 8-1:0.0 failed with error -71
[  344.271625][T11414] 8021q: adding VLAN 0 to HW filter on device team0
[  344.333621][ T7634] usb 8-1: USB disconnect, device number 11
[  344.334996][ T7644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  344.378727][ T7644] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  344.418884][ T7644] bridge0: port 1(bridge_slave_0) entered blocking state
[  344.426073][ T7644] bridge0: port 1(bridge_slave_0) entered forwarding state
[  344.472974][ T7644] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  344.499924][ T7644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  344.521321][ T7644] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  344.562401][ T7644] bridge0: port 2(bridge_slave_1) entered blocking state
[  344.569595][ T7644] bridge0: port 2(bridge_slave_1) entered forwarding state
[  344.625011][ T7644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  344.663971][ T7644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  344.714212][ T7644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  344.752997][ T7644] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  344.781100][ T7644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  344.833886][ T7644] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  344.877439][T11414] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  344.933646][T11414] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  344.989072][ T7644] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  345.018022][ T7644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  345.051424][ T7644] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  345.090930][ T7644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  345.123213][ T7644] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  345.163444][T11611] netlink: 'syz.0.1911': attribute type 1 has an invalid length.
[  345.207448][T11613] device macvlan2 entered promiscuous mode
[  345.242992][ T7644] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  345.960741][ T7669] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  345.974099][ T7669] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  346.002611][T11414] 8021q: adding VLAN 0 to HW filter on device batadv0
[  346.081479][ T6145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  346.105998][ T6145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  346.191349][ T6145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  346.207215][ T6145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  346.235390][T11414] device veth0_vlan entered promiscuous mode
[  346.250190][ T6145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  346.282437][ T6145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  346.339665][T11414] device veth1_vlan entered promiscuous mode
[  346.374257][T11649] overlayfs: failed to clone upperpath
[  346.399810][ T7656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  346.430139][ T7656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  346.478632][T11414] device veth0_macvtap entered promiscuous mode
[  346.507154][T11414] device veth1_macvtap entered promiscuous mode
[  346.574212][T11414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  346.618352][T11414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  346.637658][T11659] loop0: detected capacity change from 0 to 16
[  346.681133][T11659] erofs: (device loop0): mounted with root inode @ nid 36.
[  346.688812][T11414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  346.721910][T11414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  346.763527][T11414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  346.791427][T11414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  346.817097][T11414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  346.843451][T11414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  346.870069][T11414] batman_adv: batadv0: Interface activated: batadv_slave_0
[  346.918323][ T8353] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  346.929797][ T8353] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  346.978230][ T8353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  347.013004][ T7634] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  347.015528][ T8353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  347.051823][T11414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  347.104540][T11414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  347.132086][T11414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  347.151101][T11414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  347.164511][T11414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  347.175957][T11414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  347.196221][T11414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  347.202879][ T7634] usb 1-1: Using ep0 maxpacket: 32
[  347.227204][T11414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  347.237811][ T7634] usb 1-1: unable to get BOS descriptor or descriptor too short
[  347.247277][T11414] batman_adv: batadv0: Interface activated: batadv_slave_1
[  347.261572][ T7634] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  347.281186][ T6145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  347.302312][ T6145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  347.344411][ T7634] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  347.371667][T11414] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  347.386872][ T7634] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[  347.414859][T11414] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  347.431741][ T7634] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  347.440230][T11414] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  347.455571][ T7634] usb 1-1: Product: syz
[  347.459795][ T7634] usb 1-1: Manufacturer: syz
[  347.480296][T11414] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  347.495886][ T7634] usb 1-1: SerialNumber: syz
[  347.695449][ T6145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  347.723674][ T6145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  347.791889][ T8347] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  347.844602][ T7644] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  347.864431][ T7644] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  347.888380][ T7644] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  347.938070][ T7634] usb 1-1: unit 0 not found!
[  348.157975][ T7634] usb 1-1: USB disconnect, device number 5
[  348.226014][ T4503] udevd[4503]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  348.253601][T11700] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1929'.
[  348.378583][ T4318] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  348.565298][ T4318] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  348.592612][ T4318] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  348.648265][ T4318] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  348.686440][T11711] netlink: 'syz.7.1931': attribute type 2 has an invalid length.
[  348.715028][ T4318] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  348.745654][ T4318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  348.748692][T11711] netlink: 'syz.7.1931': attribute type 9 has an invalid length.
[  348.780850][T11711] netlink: 'syz.7.1931': attribute type 10 has an invalid length.
[  348.790778][ T4318] usb 3-1: config 0 descriptor??
[  348.796208][T11711] netlink: 'syz.7.1931': attribute type 11 has an invalid length.
[  348.814688][T11711] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1931'.
[  349.232487][ T8836] Process accounting resumed
[  349.317942][ T4318] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving
[  349.335474][ T4318] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  349.627443][T10150] usb 3-1: USB disconnect, device number 3
[  350.196172][T11750] loop7: detected capacity change from 0 to 512
[  350.253295][T11750] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  350.357810][T11752] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1942'.
[  350.371665][T11750] EXT4-fs (loop7): 1 truncate cleaned up
[  350.389912][T11750] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  350.420257][T11752] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  350.503312][T11752] batman_adv: batadv0: Removing interface: batadv_slave_0
[  350.552421][T11752] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  350.622997][T11752] batman_adv: batadv0: Removing interface: batadv_slave_1
[  350.647614][ T5083] EXT4-fs (loop7): unmounting filesystem.
[  350.691231][T11763] loop2: detected capacity change from 0 to 7
[  350.716570][T11763]  loop2:
[  350.735803][T11763] loop2: partition table partially beyond EOD, truncated
[  351.029843][T11767] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1948'.
[  351.034738][T11769] loop2: detected capacity change from 0 to 512
[  351.081133][T11767] device bond1 entered promiscuous mode
[  351.087507][T11767] 8021q: adding VLAN 0 to HW filter on device bond1
[  351.102103][T11770] device bridge1 entered promiscuous mode
[  351.109724][T11770] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  351.133871][T11772] bond1: (slave bridge1): Error: Slave device does not support XDP
[  351.198533][ T8353] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  351.222077][T11769] EXT4-fs (loop2): 1 truncate cleaned up
[  351.233068][T11769] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  351.454751][T11778] fuse: Bad value for 'fd'
[  351.636339][T11414] EXT4-fs (loop2): unmounting filesystem.
[  353.194322][T11827] netlink: 'syz.7.1967': attribute type 1 has an invalid length.
[  353.254437][T11827] netlink: 'syz.7.1967': attribute type 2 has an invalid length.
[  353.282935][T11827] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1967'.
[  354.037592][T11847] loop0: detected capacity change from 0 to 512
[  354.091113][T11847] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  354.158244][T11847] EXT4-fs (loop0): 1 truncate cleaned up
[  354.167454][T11847] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  354.236638][T11050] EXT4-fs (loop0): unmounting filesystem.
[  354.844077][T11854] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  355.399712][T11896] loop7: detected capacity change from 0 to 2048
[  355.573871][T11896] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  355.763092][T11896] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  355.916453][ T5083] EXT4-fs (loop7): unmounting filesystem.
[  356.008843][T11910] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1989'.
[  356.134354][T11916] bridge2: port 1(vlan4) entered blocking state
[  356.145213][T11916] bridge2: port 1(vlan4) entered disabled state
[  356.448058][T11926] loop2: detected capacity change from 0 to 1024
[  356.564161][T11926] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  356.796030][T11414] EXT4-fs (loop2): unmounting filesystem.
[  356.914789][T11941] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1998'.
[  357.187378][T11941] device batadv0 left promiscuous mode
[  357.227593][T11945] lo speed is unknown, defaulting to 1000
[  357.738700][T11930] loop0: detected capacity change from 0 to 40427
[  357.801346][T11930] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64)
[  357.835671][T11930] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  357.892406][T11930] F2FS-fs (loop0): invalid crc value
[  357.941247][T11930] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  358.279676][T11930] F2FS-fs (loop0): Start checkpoint disabled!
[  358.401117][T11930] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  358.439899][T11930] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  358.743157][T11930] loop0: detected capacity change from 40427 to 0
[  358.884478][T11050] F2FS-fs (loop0): Inconsistent error blkaddr:5633, sit bitmap:0
[  358.892764][T11050] CPU: 1 PID: 11050 Comm: syz-executor Not tainted syzkaller #0
[  358.900464][T11050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  358.910538][T11050] Call Trace:
[  358.913895][T11050]  <TASK>
[  358.916922][T11050]  dump_stack_lvl+0x188/0x24e
[  358.921751][T11050]  ? show_regs_print_info+0x12/0x12
[  358.926971][T11050]  ? f2fs_get_next_page_offset+0x6a0/0x6a0
[  358.932853][T11050]  ? kernel_text_address+0x9c/0xd0
[  358.938042][T11050]  f2fs_is_valid_blkaddr+0xc4a/0x1260
[  358.943486][T11050]  f2fs_map_blocks+0xba8/0x36a0
[  358.948406][T11050]  ? f2fs_get_block+0x140/0x140
[  358.953279][T11050]  ? xa_load+0x60/0x2e0
[  358.957476][T11050]  ? xa_load+0x2b3/0x2e0
[  358.961733][T11050]  ? xa_load+0x60/0x2e0
[  358.965912][T11050]  ? page_index+0xe6/0x490
[  358.970354][T11050]  f2fs_mpage_readpages+0xa40/0x2830
[  358.975685][T11050]  ? dquot_release_reservation_block+0xa0/0xa0
[  358.981891][T11050]  ? __mod_lruvec_page_state+0xa1/0x410
[  358.987538][T11050]  ? f2fs_readahead+0x180/0x380
[  358.992406][T11050]  ? blk_start_plug+0x94/0x110
[  358.997241][T11050]  read_pages+0x187/0x860
[  359.001658][T11050]  ? __lock_acquire+0x7c40/0x7c40
[  359.006726][T11050]  ? page_cache_ra_unbounded+0x750/0x750
[  359.012377][T11050]  ? folio_add_lru+0x319/0xcf0
[  359.017155][T11050]  ? folio_add_lru+0x508/0xcf0
[  359.021936][T11050]  ? filemap_add_folio+0x186/0x3d0
[  359.027086][T11050]  page_cache_ra_unbounded+0x667/0x750
[  359.032578][T11050]  f2fs_readdir+0x48b/0xa00
[  359.037187][T11050]  ? f2fs_fill_dentries+0xcc0/0xcc0
[  359.042426][T11050]  ? mutex_lock_nested+0x10/0x10
[  359.047479][T11050]  ? end_current_label_crit_section+0x14b/0x170
[  359.053827][T11050]  ? iterate_dir+0x10d/0x550
[  359.058490][T11050]  ? down_read_killable+0x1cc/0x340
[  359.063698][T11050]  ? fsnotify_perm+0x248/0x550
[  359.068519][T11050]  iterate_dir+0x213/0x550
[  359.073010][T11050]  ? f2fs_fill_dentries+0xcc0/0xcc0
[  359.078228][T11050]  __se_sys_getdents64+0xf2/0x270
[  359.083274][T11050]  ? __x64_sys_getdents64+0x80/0x80
[  359.088491][T11050]  ? filldir+0x6f0/0x6f0
[  359.092757][T11050]  ? lockdep_hardirqs_on+0x94/0x140
[  359.098031][T11050]  do_syscall_64+0x4c/0xa0
[  359.102460][T11050]  ? clear_bhb_loop+0x60/0xb0
[  359.107153][T11050]  ? clear_bhb_loop+0x60/0xb0
[  359.111863][T11050]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  359.117834][T11050] RIP: 0033:0x7f05c87c6833
[  359.122325][T11050] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[  359.141993][T11050] RSP: 002b:00007fff94d22278 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[  359.150478][T11050] RAX: ffffffffffffffda RBX: 0000555561f00a40 RCX: 00007f05c87c6833
[  359.158465][T11050] RDX: 0000000000008000 RSI: 0000555561f00a70 RDI: 0000000000000005
[  359.166445][T11050] RBP: 0000555561f00a70 R08: 00007f05c89f0e20 R09: 0000000000000001
[  359.174428][T11050] R10: 0000000000000000 R11: 0000000000000293 R12: 0000555561f00a44
[  359.182408][T11050] R13: ffffffffffffffe8 R14: 0000000000000010 R15: 00007fff94d24520
[  359.190407][T11050]  </TASK>
[  359.472449][T11992] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2013'.
[  359.771037][T11050] F2FS-fs (loop0): Inconsistent error blkaddr:5633, sit bitmap:0
[  359.852438][T11050] CPU: 0 PID: 11050 Comm: syz-executor Not tainted syzkaller #0
[  359.860129][T11050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  359.870198][T11050] Call Trace:
[  359.873491][T11050]  <TASK>
[  359.876432][T11050]  dump_stack_lvl+0x188/0x24e
[  359.881131][T11050]  ? show_regs_print_info+0x12/0x12
[  359.886359][T11050]  ? f2fs_get_next_page_offset+0x6a0/0x6a0
[  359.892205][T11050]  f2fs_is_valid_blkaddr+0xc4a/0x1260
[  359.897602][T11050]  f2fs_get_read_data_page+0x40f/0x640
[  359.903082][T11050]  ? f2fs_reserve_block+0x240/0x240
[  359.908309][T11050]  f2fs_find_data_page+0x9b/0x3b0
[  359.913350][T11050]  f2fs_readdir+0x4ba/0xa00
[  359.917888][T11050]  ? f2fs_fill_dentries+0xcc0/0xcc0
[  359.923110][T11050]  ? mutex_lock_nested+0x10/0x10
[  359.928066][T11050]  ? end_current_label_crit_section+0x14b/0x170
[  359.934375][T11050]  ? iterate_dir+0x10d/0x550
[  359.938980][T11050]  ? down_read_killable+0x1cc/0x340
[  359.944188][T11050]  ? fsnotify_perm+0x248/0x550
[  359.948967][T11050]  iterate_dir+0x213/0x550
[  359.953396][T11050]  ? f2fs_fill_dentries+0xcc0/0xcc0
[  359.958612][T11050]  __se_sys_getdents64+0xf2/0x270
[  359.963670][T11050]  ? __x64_sys_getdents64+0x80/0x80
[  359.968879][T11050]  ? filldir+0x6f0/0x6f0
[  359.973144][T11050]  ? lockdep_hardirqs_on+0x94/0x140
[  359.978353][T11050]  do_syscall_64+0x4c/0xa0
[  359.982780][T11050]  ? clear_bhb_loop+0x60/0xb0
[  359.987473][T11050]  ? clear_bhb_loop+0x60/0xb0
[  359.992166][T11050]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  359.998119][T11050] RIP: 0033:0x7f05c87c6833
[  360.002543][T11050] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[  360.022162][T11050] RSP: 002b:00007fff94d22278 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[  360.030589][T11050] RAX: ffffffffffffffda RBX: 0000555561f00a40 RCX: 00007f05c87c6833
[  360.038568][T11050] RDX: 0000000000008000 RSI: 0000555561f00a70 RDI: 0000000000000005
[  360.046549][T11050] RBP: 0000555561f00a70 R08: 00007f05c89f0e20 R09: 0000000000000001
[  360.054532][T11050] R10: 0000000000000000 R11: 0000000000000293 R12: 0000555561f00a44
[  360.062517][T11050] R13: ffffffffffffffe8 R14: 0000000000000010 R15: 00007fff94d24520
[  360.070515][T11050]  </TASK>
[  361.228193][  T955] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[  361.428470][  T955] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  361.585022][ T8353] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  361.628333][  T955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  361.637157][  T955] usb 3-1: Product: syz
[  361.641367][  T955] usb 3-1: Manufacturer: syz
[  361.646266][  T955] usb 3-1: SerialNumber: syz
[  361.666706][  T955] usb 3-1: config 0 descriptor??
[  361.680550][  T955] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  361.840128][ T8353] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  362.023577][ T8353] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  362.220099][ T8353] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  363.292241][  T955] gspca_stk1135: reg_w 0x200 err -71
[  363.299727][  T955] gspca_stk1135: serial bus timeout: status=0x00
[  363.328066][  T955] gspca_stk1135: Sensor write failed
[  363.341672][  T955] gspca_stk1135: serial bus timeout: status=0x00
[  363.370260][  T955] gspca_stk1135: Sensor write failed
[  363.410846][  T955] gspca_stk1135: serial bus timeout: status=0x00
[  363.421722][ T4286] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  363.436434][ T4286] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  363.445489][ T4286] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  363.448795][  T955] gspca_stk1135: Sensor read failed
[  363.476167][ T4286] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  363.483659][ T4286] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  363.490897][ T4286] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  363.552755][  T955] gspca_stk1135: serial bus timeout: status=0x00
[  363.576329][  T955] gspca_stk1135: Sensor read failed
[  363.614044][  T955] gspca_stk1135: Detected sensor type unknown (0x0)
[  363.640069][  T955] gspca_stk1135: serial bus timeout: status=0x00
[  363.657336][  T955] gspca_stk1135: Sensor read failed
[  363.670938][  T955] gspca_stk1135: serial bus timeout: status=0x00
[  363.695593][  T955] gspca_stk1135: Sensor read failed
[  363.709558][  T955] gspca_stk1135: serial bus timeout: status=0x00
[  363.727419][  T955] gspca_stk1135: Sensor write failed
[  363.741407][  T955] gspca_stk1135: serial bus timeout: status=0x00
[  363.757668][  T955] gspca_stk1135: Sensor write failed
[  363.771760][  T955] stk1135: probe of 3-1:0.0 failed with error -71
[  363.808996][  T955] usb 3-1: USB disconnect, device number 4
[  364.005204][T12042] lo speed is unknown, defaulting to 1000
[  364.687486][T12085] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2039'.
[  364.896025][T12085] bridge2: port 1(vlan2) entered blocking state
[  364.915244][T12085] bridge2: port 1(vlan2) entered disabled state
[  364.995142][T12042] chnl_net:caif_netlink_parms(): no params data found
[  365.185094][ T4318] kernel write not supported for file bpf-prog (pid: 4318 comm: kworker/0:8)
[  365.416985][ T8353] device hsr_slave_0 left promiscuous mode
[  365.439497][ T8353] device hsr_slave_1 left promiscuous mode
[  365.491858][ T8353] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  365.533025][ T4283] Bluetooth: hci0: command 0x0409 tx timeout
[  365.567685][ T8353] batman_adv: batadv0: Removing interface: batadv_slave_0
[  365.600295][ T8353] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  365.629929][ T8353] batman_adv: batadv0: Removing interface: batadv_slave_1
[  365.689857][ T8353] device bridge_slave_1 left promiscuous mode
[  365.709054][ T8353] bridge0: port 2(bridge_slave_1) entered disabled state
[  365.750055][ T8353] device bridge_slave_0 left promiscuous mode
[  365.768021][ T8353] bridge0: port 1(bridge_slave_0) entered disabled state
[  365.885185][ T8353] device veth1_macvtap left promiscuous mode
[  365.907732][ T8353] device veth0_macvtap left promiscuous mode
[  365.931393][ T8353] device veth1_vlan left promiscuous mode
[  365.955583][ T8353] device veth0_vlan left promiscuous mode
[  366.775511][T12138] loop7: detected capacity change from 0 to 1024
[  366.818755][T12138] EXT4-fs: Ignoring removed oldalloc option
[  366.838194][T12138] EXT4-fs: Ignoring removed oldalloc option
[  366.869008][T12138] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  366.991715][T12138] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  367.229121][ T5083] EXT4-fs (loop7): unmounting filesystem.
[  367.455171][   T26] audit: type=1326 audit(43820.731:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12152 comm="syz.5.2056" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f588579de99 code=0x0
[  367.613071][ T4283] Bluetooth: hci0: command 0x041b tx timeout
[  368.919504][ T8353] team0 (unregistering): Port device team_slave_1 removed
[  369.066191][ T8353] team0 (unregistering): Port device team_slave_0 removed
[  369.147571][ T8353] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  369.289896][ T8353] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  369.702930][ T4283] Bluetooth: hci0: command 0x040f tx timeout
[  369.867119][ T8353] bond0 (unregistering): Released all slaves
[  369.977289][T12114] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2046'.
[  370.002903][T12190] netlink: 'syz.5.2064': attribute type 39 has an invalid length.
[  370.284478][T12042] bridge0: port 1(bridge_slave_0) entered blocking state
[  370.293299][T12042] bridge0: port 1(bridge_slave_0) entered disabled state
[  370.304706][T12042] device bridge_slave_0 entered promiscuous mode
[  370.326877][T12042] bridge0: port 2(bridge_slave_1) entered blocking state
[  370.348115][T12042] bridge0: port 2(bridge_slave_1) entered disabled state
[  370.383621][T12042] device bridge_slave_1 entered promiscuous mode
[  370.726501][T12042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  370.796128][T12042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  371.105437][T12042] team0: Port device team_slave_0 added
[  371.410879][T12042] team0: Port device team_slave_1 added
[  371.616418][T12042] batman_adv: batadv0: Adding interface: batadv_slave_0
[  371.713455][T12042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  371.774393][ T4283] Bluetooth: hci0: command 0x0419 tx timeout
[  371.872752][T12042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  371.877829][T12229] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20003
[  371.887672][T12042] batman_adv: batadv0: Adding interface: batadv_slave_1
[  371.902847][T12042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  372.156893][T12042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  372.764939][T12042] device hsr_slave_0 entered promiscuous mode
[  372.796917][T12042] device hsr_slave_1 entered promiscuous mode
[  372.823151][T12042] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  372.836491][T12042] Cannot create hsr debugfs directory
[  373.504089][T12261] netlink: 'syz.2.2079': attribute type 12 has an invalid length.
[  373.547028][T12261] netlink: 'syz.2.2079': attribute type 29 has an invalid length.
[  373.585209][T12261] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2079'.
[  373.615018][T12261] netlink: 'syz.2.2079': attribute type 3 has an invalid length.
[  374.054497][T12277] netlink: 'syz.2.2084': attribute type 1 has an invalid length.
[  374.875409][T12042] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  374.933247][T12042] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  374.963736][T12042] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  375.018219][T12042] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  375.315964][T12042] 8021q: adding VLAN 0 to HW filter on device bond0
[  375.396555][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  375.417627][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  375.460783][T12042] 8021q: adding VLAN 0 to HW filter on device team0
[  375.494479][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  375.517588][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  375.548593][ T4748] bridge0: port 1(bridge_slave_0) entered blocking state
[  375.555752][ T4748] bridge0: port 1(bridge_slave_0) entered forwarding state
[  375.608600][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  375.646867][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  375.694131][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  375.757953][ T4748] bridge0: port 2(bridge_slave_1) entered blocking state
[  375.765121][ T4748] bridge0: port 2(bridge_slave_1) entered forwarding state
[  375.810344][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  375.844242][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  375.906492][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  375.941342][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  375.974575][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  376.014077][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  376.053386][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  376.090269][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  376.137742][T12042] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  376.183599][T12042] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  376.234425][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  376.248955][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  376.288597][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  377.224779][ T8353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  377.249100][ T8353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  377.288285][T12370] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2112'.
[  377.315424][T12042] 8021q: adding VLAN 0 to HW filter on device batadv0
[  377.361691][ T8353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  377.377063][ T8353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  377.458142][ T7644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  377.476861][ T7644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  377.510269][T12042] device veth0_vlan entered promiscuous mode
[  377.520867][ T7644] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  377.536280][ T7644] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  377.562518][T12042] device veth1_vlan entered promiscuous mode
[  377.629951][ T7644] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  377.642400][ T7644] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  377.665685][ T7644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  377.692679][ T7644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  377.719098][T12042] device veth0_macvtap entered promiscuous mode
[  377.749074][ T7644] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  377.787787][T12042] device veth1_macvtap entered promiscuous mode
[  377.840537][T12042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  377.885108][T12042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  377.911926][T12042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  377.956239][T12042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  377.971831][T12042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  377.983909][T12042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  378.000362][T12042] batman_adv: batadv0: Interface activated: batadv_slave_0
[  378.017976][ T8353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  378.037973][ T8353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  378.073122][T12042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  378.097357][T12042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  378.130505][T12042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  378.172594][T12042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  378.194343][T12042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  378.222091][T12042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  378.276566][T12042] batman_adv: batadv0: Interface activated: batadv_slave_1
[  378.309565][ T7669] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  378.335445][ T7669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  378.411187][T12042] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  378.425830][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  378.432145][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  378.492550][T12042] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  378.535587][T12042] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  378.581579][T12042] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  378.863934][ T6145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  378.890718][ T6145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  378.933836][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  378.975290][ T6145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  379.006566][ T6145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  379.050558][ T7644] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  379.288192][T12432] netlink: 'syz.5.2128': attribute type 1 has an invalid length.
[  379.307234][T12432] netlink: 64583 bytes leftover after parsing attributes in process `syz.5.2128'.
[  379.904965][T12449] x_tables: unsorted entry at hook 2
[  380.000117][T12457] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2135'.
[  380.019112][T12457] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2135'.
[  380.107410][T12458] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2135'.
[  380.258400][T12462] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2135'.
[  380.346962][T12462] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2135'.
[  380.365100][T12465] block device autoloading is deprecated and will be removed.
[  381.149918][T12496] overlayfs: failed to clone upperpath
[  381.822626][T12508] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  381.826320][ T4283] Bluetooth: hci1: link tx timeout
[  381.838275][ T4283] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  382.252749][T12525] netlink: 'syz.7.2154': attribute type 12 has an invalid length.
[  382.728637][T12545] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2158'.
[  383.074487][T12558] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2161'.
[  383.273110][T12564] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2163'.
[  383.396905][T12564] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2163'.
[  383.852991][ T4283] Bluetooth: hci1: command 0x0406 tx timeout
[  383.869752][T12580] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2168'.
[  383.913063][T12580] (unnamed net_device) (uninitialized): peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms
[  384.020347][T12582] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2168'.
[  384.072443][T12582] bond2: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms
[  384.098060][   T26] audit: type=1326 audit(43837.371:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12581 comm="syz.5.2171" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f588579de99 code=0x7fc00000
[  384.653054][ T8842] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  384.843365][   T26] audit: type=1326 audit(43838.111:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12581 comm="syz.5.2171" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5885797c17 code=0x7fc00000
[  384.894913][ T8842] usb 4-1: unable to get BOS descriptor or descriptor too short
[  384.910362][ T8842] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  384.949670][   T26] audit: type=1326 audit(43838.141:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12581 comm="syz.5.2171" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f588573f219 code=0x7fc00000
[  384.982402][ T8842] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  385.022711][ T8842] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[  385.083007][ T8842] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[  385.086708][   T26] audit: type=1326 audit(43838.141:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12581 comm="syz.5.2171" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f588573f2dd code=0x7fc00000
[  385.141871][ T8842] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  385.191518][ T8842] usb 4-1: config 1 interface 1 has no altsetting 0
[  385.227482][ T8842] usb 4-1: string descriptor 0 read error: -22
[  385.256413][ T8842] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  385.262324][   T26] audit: type=1326 audit(43838.141:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12581 comm="syz.5.2171" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f588579de99 code=0x7fc00000
[  385.294152][ T8842] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  385.914353][T12630] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2184'.
[  386.573586][ T8842] usb 4-1: Warning! Unlikely big volume range (=17287), cval->res is probably wrong.
[  386.602879][ T8842] usb 4-1: [2] FU [Speaker Playback Volume] ch = 1, val = -17287/0/1
[  386.712323][ T8842] usb 4-1: USB disconnect, device number 6
[  387.881831][T12683] loop3: detected capacity change from 0 to 164
[  387.924460][T12685] netlink: 168 bytes leftover after parsing attributes in process `syz.7.2198'.
[  389.288211][T12715] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2206'.
[  391.426727][T12758] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2214'.
[  391.929975][T12770] overlayfs: failed to clone upperpath
[  392.215484][T12775] netlink: 'syz.3.2222': attribute type 1 has an invalid length.
[  392.254178][T12775] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2222'.
[  392.348390][T10150] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[  392.557771][T10150] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  392.598888][T10150] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  392.621469][T10150] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  392.647683][T10150] usb 8-1: config 0 descriptor??
[  392.918244][T10150] usbhid 8-1:0.0: can't add hid device: -71
[  392.927032][T10150] usbhid: probe of 8-1:0.0 failed with error -71
[  392.979552][T10150] usb 8-1: USB disconnect, device number 12
[  393.512877][T10150] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[  393.645409][T12832] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2242'.
[  393.707201][T10150] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  393.739047][T10150] usb 8-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40
[  393.769338][T10150] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  393.810413][T10150] usb 8-1: config 0 descriptor??
[  394.555721][T12864] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2252'.
[  394.611359][T12870] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2252'.
[  394.643648][T10150] aiptek 8-1:0.0: Aiptek using 400 ms programming speed
[  394.653383][T12869] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2251'.
[  394.654353][T10150] input: Aiptek as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input11
[  395.051193][T10150] usb 8-1: USB disconnect, device number 13
[  395.057401][    C1] aiptek 8-1:0.0: aiptek_irq - usb_submit_urb failed with result -19
[  395.482854][ T8842] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  395.672985][ T8842] usb 3-1: Using ep0 maxpacket: 16
[  395.679743][ T8842] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  395.763519][ T8842] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96
[  395.802226][ T8842] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8
[  395.838278][ T8842] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[  395.895084][ T8842] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  395.942878][ T8842] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  395.951095][ T8842] usb 3-1: SerialNumber: syz
[  395.990577][T12883] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  396.004566][T12883] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  396.034172][ T8842] hub 3-1:1.0: bad descriptor, ignoring hub
[  396.046785][ T8842] hub: probe of 3-1:1.0 failed with error -5
[  396.237923][T12883] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  396.262825][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  396.272815][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  396.282812][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  396.292811][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  396.512809][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  396.522821][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  396.532805][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  396.542804][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  396.552803][    T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!!
[  396.562803][    T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!!
[  396.670611][T12883] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  396.873319][   T26] audit: type=1326 audit(43850.151:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12923 comm="syz.3.2268" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa00ef9de99 code=0x0
[  397.142010][ T8842] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42
[  398.657991][T12980] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2286'.
[  398.963303][ T7636] usb 3-1: USB disconnect, device number 5
[  398.970358][ T7636] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device
[  399.274712][T13000] loop7: detected capacity change from 0 to 256
[  399.321279][T13000] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d)
[  399.478451][   T26] audit: type=1800 audit(43852.751:710): pid=13000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2292" name="file1" dev="loop7" ino=1048684 res=0 errno=0
[  399.571890][   T26] audit: type=1800 audit(43852.781:711): pid=13000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2292" name="file1" dev="loop7" ino=1048684 res=0 errno=0
[  399.598104][T13009] Cannot find del_set index 4 as target
[  400.976399][T13058] loop3: detected capacity change from 0 to 2048
[  401.059241][T13061] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  404.761607][T13147] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2339'.
[  405.063870][T13154] Cannot find del_set index 4 as target
[  405.113593][T13156] overlayfs: failed to clone upperpath
[  405.157320][T13158] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2343'.
[  405.414968][T13110] loop2: detected capacity change from 0 to 32768
[  405.529148][T13110] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  405.578788][T13110] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  405.701264][T13175] input: syz0 as /devices/virtual/input/input12
[  405.798585][T13110] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  405.808598][ T8842] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  405.808676][ T8842] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  405.961930][ T8842] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 151ms
[  405.976248][ T8842] gfs2: fsid=syz:syz.0: jid=0: Done
[  405.977985][T13110] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  406.750084][T13198] loop7: detected capacity change from 0 to 512
[  406.769218][T13200] netlink: 'syz.3.2354': attribute type 1 has an invalid length.
[  406.827829][T13198] EXT4-fs (loop7): corrupt root inode, run e2fsck
[  406.845057][T13198] EXT4-fs (loop7): mount failed
[  406.874563][T13204] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  406.983008][T13204] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  407.032312][T13204] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  408.565923][T13224] loop3: detected capacity change from 0 to 32768
[  408.972991][ T4283] Bluetooth: hci0: command 0x0411 tx timeout
[  409.465079][T13274] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2378'.
[  409.732240][   T26] audit: type=1326 audit(43863.001:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13278 comm="syz.7.2379" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdb00d9de99 code=0x0
[  412.259590][T13291] overlayfs: failed to clone upperpath
[  414.851552][T13348] netlink: 'syz.1.2399': attribute type 1 has an invalid length.
[  414.902646][T13348] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  414.920121][T13348] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  414.930759][T13348] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  415.452751][T13335] loop3: detected capacity change from 0 to 40427
[  415.553329][T13335] F2FS-fs (loop3): Invalid log_blocksize (64), supports only 12
[  415.599496][T13335] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  415.639552][T13335] F2FS-fs (loop3): invalid crc value
[  415.710844][T13335] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  415.810628][T13382] loop2: detected capacity change from 0 to 16
[  415.895309][T13382] erofs: (device loop2): mounted with root inode @ nid 36.
[  416.045724][T13335] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1
[  416.112094][T13335] F2FS-fs (loop3): Start checkpoint disabled!
[  416.156203][T13335] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  416.198290][T13335] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  416.279084][T11414] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  416.331887][T11414] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  416.547123][T13398] lo speed is unknown, defaulting to 1000
[  417.069212][T13414] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2416'.
[  417.153176][T13414] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2416'.
[  417.435083][ T8174] kworker/u4:40: attempt to access beyond end of device
[  417.435083][ T8174] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  418.290404][T13445] loop3: detected capacity change from 0 to 512
[  419.616471][T13486] loop3: detected capacity change from 0 to 512
[  419.695340][T13486] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  420.053289][T12042] EXT4-fs (loop3): unmounting filesystem.
[  421.979818][T13570] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.2458'.
[  422.846578][T13601] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2466'.
[  422.870195][T13601] (unnamed net_device) (uninitialized): peer notification delay (2365) is not a multiple of miimon (6), value rounded to 2364 ms
[  422.974793][T13602] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2466'.
[  422.984700][T13602] bond2: Unable to set peer notification delay as MII monitoring is disabled
[  423.180071][T13615] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2469'.
[  423.254548][T13615] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2469'.
[  423.461441][T13620] lo speed is unknown, defaulting to 1000
[  424.598695][T13637] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2477'.
[  424.766814][T13640] loop3: detected capacity change from 0 to 512
[  424.884441][T13640] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  425.088485][T13640] EXT4-fs (loop3): 1 truncate cleaned up
[  425.135004][T13640] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  425.617446][T13640] EXT4-fs error (device loop3): ext4_update_inline_data:358: inode #15: comm syz.3.2478: missing inline data xattr
[  425.825747][T12042] EXT4-fs (loop3): unmounting filesystem.
[  426.011993][T13662] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2484'.
[  426.247382][ T7634] usb 8-1: new high-speed USB device number 14 using dummy_hcd
[  426.442867][ T7634] usb 8-1: Using ep0 maxpacket: 8
[  426.450297][ T7634] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  426.490671][ T7634] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  426.520963][ T7634] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  426.560352][ T7634] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  426.600220][ T7634] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  426.628371][ T7634] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  426.895477][ T7634] usb 8-1: GET_CAPABILITIES returned 0
[  426.901056][ T7634] usbtmc 8-1:16.0: can't read capabilities
[  427.023039][T10150] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  427.105351][ T8835] usb 8-1: USB disconnect, device number 14
[  427.213760][T10150] usb 3-1: too many configurations: 9, using maximum allowed: 8
[  427.230697][T10150] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  427.277424][T10150] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  427.339808][T10150] usb 3-1: config 0 interface 0 has no altsetting 0
[  427.366810][T10150] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  427.403050][T10150] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  427.455024][T10150] usb 3-1: config 0 interface 0 has no altsetting 0
[  427.480773][T10150] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  427.498762][T13710] lo speed is unknown, defaulting to 1000
[  427.523814][T10150] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  427.571238][T10150] usb 3-1: config 0 interface 0 has no altsetting 0
[  427.596252][T10150] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  427.627643][T10150] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  427.671522][T10150] usb 3-1: config 0 interface 0 has no altsetting 0
[  427.697291][T10150] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  427.730001][T10150] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  427.773650][T10150] usb 3-1: config 0 interface 0 has no altsetting 0
[  427.801401][T10150] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  427.837302][T10150] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  427.907127][T10150] usb 3-1: config 0 interface 0 has no altsetting 0
[  427.950794][T10150] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  427.992533][T10150] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  428.039915][T10150] usb 3-1: config 0 interface 0 has no altsetting 0
[  428.065804][T10150] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  428.099732][T10150] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  428.135566][T10150] usb 3-1: config 0 interface 0 has no altsetting 0
[  428.159585][T10150] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  428.220434][T10150] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  428.257582][T10150] usb 3-1: Product: syz
[  428.275527][T10150] usb 3-1: Manufacturer: syz
[  428.280158][T10150] usb 3-1: SerialNumber: syz
[  428.327982][T10150] usb 3-1: config 0 descriptor??
[  428.383954][T10150] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0
[  428.455864][T13733] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2503'.
[  428.834499][    C1] usb 3-1: yurex_control_callback - control failed: -71
[  428.861650][T10150] usb 3-1: USB disconnect, device number 6
[  428.891402][T10150] yurex 3-1:0.0: USB YUREX #0 now disconnected
[  429.226451][T13755] lo speed is unknown, defaulting to 1000
[  429.252706][T13755] lo speed is unknown, defaulting to 1000
[  429.276583][T13755] lo speed is unknown, defaulting to 1000
[  429.357038][T13755] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  429.457145][T13755] lo speed is unknown, defaulting to 1000
[  429.510037][T13755] lo speed is unknown, defaulting to 1000
[  429.532184][T13755] lo speed is unknown, defaulting to 1000
[  429.557151][T13755] lo speed is unknown, defaulting to 1000
[  429.578004][T13755] lo speed is unknown, defaulting to 1000
[  429.605925][T13755] lo speed is unknown, defaulting to 1000
[  429.811214][T13771] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2517'.
[  429.871422][T13771] 8021q: adding VLAN 0 to HW filter on device bond1
[  430.531001][T13796] overlayfs: failed to clone upperpath
[  431.633431][T13825] netlink: 'syz.7.2535': attribute type 1 has an invalid length.
[  431.837785][T13825] 8021q: adding VLAN 0 to HW filter on device bond3
[  431.913075][T13833] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2536'.
[  432.178388][T13841] overlayfs: failed to clone upperpath
[  432.527629][T13828] bond3 (unregistering): Released all slaves
[  432.579659][T13844] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2539'.
[  433.439787][T13877] sctp: [Deprecated]: syz.1.2551 (pid 13877) Use of struct sctp_assoc_value in delayed_ack socket option.
[  433.439787][T13877] Use struct sctp_sack_info instead
[  433.535348][T13883] sctp: [Deprecated]: syz.1.2551 (pid 13883) Use of struct sctp_assoc_value in delayed_ack socket option.
[  433.535348][T13883] Use struct sctp_sack_info instead
[  434.050918][T13901] md: md2 stopped.
[  434.181394][T13905] loop7: detected capacity change from 0 to 512
[  434.291868][T13905] EXT4-fs error (device loop7): ext4_map_blocks:637: inode #2: block 8: comm syz.7.2561: lblock 0 mapped to illegal pblock 8 (length 1)
[  434.430584][T13905] EXT4-fs (loop7): Remounting filesystem read-only
[  434.467490][T13905] EXT4-fs warning (device loop7): dx_probe:823: inode #2: lblock 0: comm syz.7.2561: error -117 reading directory block
[  434.539908][T13905] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -117
[  434.571005][T13905] EXT4-fs error (device loop7): ext4_map_blocks:637: inode #2: block 8: comm syz.7.2561: lblock 0 mapped to illegal pblock 8 (length 1)
[  434.594467][T13905] EXT4-fs (loop7): Remounting filesystem read-only
[  434.601259][T13905] EXT4-fs warning (device loop7): dx_probe:823: inode #2: lblock 0: comm syz.7.2561: error -117 reading directory block
[  434.619200][T13905] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117
[  434.628050][T13905] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  434.753185][T13912] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 255: padding at end of block bitmap is not set
[  434.826847][T13912] EXT4-fs (loop7): Remounting filesystem read-only
[  434.861417][ T5083] EXT4-fs (loop7): unmounting filesystem.
[  435.320104][T13950] loop2: detected capacity change from 0 to 128
[  435.589638][T13957] loop5: detected capacity change from 0 to 7
[  435.589964][T13956] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2578'.
[  435.642867][T13957] Dev loop5: unable to read RDB block 7
[  435.695293][T13957]  loop5: AHDI p1 p2 p3
[  435.701429][T13957] loop5: partition table partially beyond EOD, truncated
[  435.762962][T13957] loop5: p1 start 1818582900 is beyond EOD, truncated
[  435.789989][T13957] loop5: p3 start 335544320 is beyond EOD, truncated
[  435.885298][T13959] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  436.004766][T13959] net_ratelimit: 10 callbacks suppressed
[  436.004827][T13959] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  436.121742][T13974] loop7: detected capacity change from 0 to 128
[  436.275625][T13974] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  436.387827][T13986] overlayfs: failed to clone upperpath
[  436.402561][T13974] syz.7.2583 (pid 13974) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  436.487917][T13974] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload
[  436.551132][T13974] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload
[  436.708715][ T5083] EXT4-fs (loop7): unmounting filesystem.
[  437.440843][T14016] lo speed is unknown, defaulting to 1000
[  438.004430][T14033] loop2: detected capacity change from 0 to 2048
[  438.098110][T14033] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  438.546505][  T955] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  438.744568][  T955] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  438.784696][  T955] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  438.826541][  T955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  438.866811][  T955] usb 3-1: Product: syz
[  438.871021][  T955] usb 3-1: Manufacturer: syz
[  438.901541][  T955] usb 3-1: SerialNumber: syz
[  439.136722][T14033] EXT4-fs error (device loop2): __ext4_get_inode_loc:4520: comm syz.2.2602: Invalid inode table block 4 in block_group 0
[  439.206919][T14033] EXT4-fs error (device loop2): __ext4_get_inode_loc:4520: comm syz.2.2602: Invalid inode table block 4 in block_group 0
[  439.298010][T14033] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  439.340947][T14033] EXT4-fs error (device loop2): ext4_dirty_inode:6156: inode #15: comm syz.2.2602: mark_inode_dirty error
[  439.416760][T14033] EXT4-fs error (device loop2): __ext4_get_inode_loc:4520: comm syz.2.2602: Invalid inode table block 4 in block_group 0
[  439.489665][  T955] cdc_ncm 3-1:1.0: bind() failure
[  439.523703][  T955] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  439.530546][  T955] cdc_ncm 3-1:1.1: bind() failure
[  439.594642][  T955] usb 3-1: USB disconnect, device number 7
[  439.854950][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  439.861377][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  440.127276][ T7649] EXT4-fs error (device loop2): __ext4_get_inode_loc:4520: comm kworker/u4:21: Invalid inode table block 4 in block_group 0
[  440.209734][T11414] EXT4-fs (loop2): unmounting filesystem.
[  440.705937][T14098] loop2: detected capacity change from 0 to 512
[  440.806698][T14098] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #2: block 8: comm syz.2.2621: lblock 0 mapped to illegal pblock 8 (length 1)
[  440.833458][T14098] EXT4-fs (loop2): Remounting filesystem read-only
[  440.840008][T14098] EXT4-fs warning (device loop2): dx_probe:823: inode #2: lblock 0: comm syz.2.2621: error -117 reading directory block
[  440.947798][T14098] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117
[  440.956321][T14098] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #2: block 8: comm syz.2.2621: lblock 0 mapped to illegal pblock 8 (length 1)
[  440.971498][T14098] EXT4-fs (loop2): Remounting filesystem read-only
[  440.990131][T14098] EXT4-fs warning (device loop2): dx_probe:823: inode #2: lblock 0: comm syz.2.2621: error -117 reading directory block
[  441.009998][T14098] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117
[  441.059877][T14098] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  441.279888][T11414] EXT4-fs (loop2): unmounting filesystem.
[  441.970053][T14132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  442.093427][T14125] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  442.820042][T14149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2635'.
[  442.842971][T14149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2635'.
[  442.879125][T14149] netlink: 'syz.2.2635': attribute type 15 has an invalid length.
[  442.921249][T14149] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0
[  442.930091][T14149] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0
[  442.939079][T14149] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0
[  442.947976][T14149] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0
[  443.004624][T14149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2635'.
[  443.027562][T14149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2635'.
[  443.068366][T14149] netlink: 'syz.2.2635': attribute type 15 has an invalid length.
[  443.119938][T14149] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 60387 - 0
[  443.128956][T14149] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 60387 - 0
[  443.137864][T14149] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 60387 - 0
[  443.146914][T14149] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 60387 - 0
[  443.196011][T14165] loop7: detected capacity change from 0 to 128
[  443.242278][T14162] netlink: 'syz.3.2638': attribute type 1 has an invalid length.
[  443.368519][T14162] 8021q: adding VLAN 0 to HW filter on device bond3
[  443.503915][T14164] bond3: (slave dummy0): Enslaving as a backup interface with an up link
[  443.504253][ T8354] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  443.526219][ T8350] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready
[  443.583010][T14166] netlink: 'syz.3.2638': attribute type 10 has an invalid length.
[  443.603278][T14166] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2638'.
[  443.611896][T14175] netlink: 'syz.1.2641': attribute type 29 has an invalid length.
[  443.616465][T14166] device dummy0 entered promiscuous mode
[  443.636976][T14166] bond3: (slave dummy0): Removing an active aggregator
[  443.652047][T14166] bond3: (slave dummy0): Releasing backup interface
[  443.748381][T14175] netlink: 'syz.1.2641': attribute type 29 has an invalid length.
[  443.820916][T14180] netlink: 'syz.1.2641': attribute type 29 has an invalid length.
[  443.848685][T14151] lo speed is unknown, defaulting to 1000
[  443.897009][T14181] netlink: 'syz.1.2641': attribute type 29 has an invalid length.
[  443.910077][T14185] loop7: detected capacity change from 0 to 256
[  443.948181][T14175] netlink: 'syz.1.2641': attribute type 29 has an invalid length.
[  443.987185][T14185] FAT-fs (loop7): Directory bread(block 64) failed
[  444.028527][T14185] FAT-fs (loop7): Directory bread(block 65) failed
[  444.056824][T14185] FAT-fs (loop7): Directory bread(block 66) failed
[  444.082591][T14185] FAT-fs (loop7): Directory bread(block 67) failed
[  444.108364][T14185] FAT-fs (loop7): Directory bread(block 68) failed
[  444.122492][T14185] FAT-fs (loop7): Directory bread(block 69) failed
[  444.149022][T14185] FAT-fs (loop7): Directory bread(block 70) failed
[  444.171704][T14185] FAT-fs (loop7): Directory bread(block 71) failed
[  444.193812][T14185] FAT-fs (loop7): Directory bread(block 72) failed
[  444.200452][T14185] FAT-fs (loop7): Directory bread(block 73) failed
[  445.137480][T14215] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2654'.
[  445.612476][T14226] bond0: (slave syz_tun): Releasing active interface
[  445.662502][T14226] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  445.714370][T14226] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  445.740879][T14226] device bridge_slave_0 left promiscuous mode
[  445.795653][T14226] bridge0: port 1(bridge_slave_0) entered disabled state
[  445.850131][T14226] device bridge_slave_1 left promiscuous mode
[  445.874352][T14226] bridge0: port 2(bridge_slave_1) entered disabled state
[  445.921248][T14226] device vlan2 left promiscuous mode
[  445.941103][T14226] device vlan0 left promiscuous mode
[  446.053932][T14226] team0: Port device team_slave_0 removed
[  446.118738][T14226] team0: Port device team_slave_1 removed
[  446.170185][T14226] bridge0: port 3(vlan2) entered disabled state
[  446.216809][T14226] bond1: (slave erspan1): Releasing backup interface
[  446.260108][T14226] device erspan1 left promiscuous mode
[  446.334909][T14240] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  446.344187][T14240] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  446.606601][T14244] loop2: detected capacity change from 0 to 512
[  446.707164][T14244] EXT4-fs: Ignoring removed orlov option
[  446.757063][T14244] EXT4-fs: Ignoring removed mblk_io_submit option
[  446.820024][T14244] EXT4-fs: inline encryption not supported
[  447.070714][T14244] EXT4-fs error (device loop2): ext4_iget_extra_inode:4763: inode #15: comm syz.2.2661: corrupted in-inode xattr
[  447.195817][T14244] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.2661: couldn't read orphan inode 15 (err -117)
[  447.301658][T14244] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  447.475075][T14268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2669'.
[  447.495662][T14244] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #2: block 12: comm syz.2.2661: lblock 3 mapped to illegal pblock 12 (length 1)
[  447.533178][   T27] INFO: task syz.6.1585:10389 blocked for more than 143 seconds.
[  447.541139][   T27]       Not tainted syzkaller #0
[  447.570209][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  447.609538][   T27] task:syz.6.1585      state:D stack:24592 pid:10389 ppid:4987   flags:0x00004006
[  447.650608][   T27] Call Trace:
[  447.669548][   T27]  <TASK>
[  447.692590][   T27]  __schedule+0x107f/0x4030
[  447.715494][   T27]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  447.739728][   T27]  ? lockdep_hardirqs_on+0x94/0x140
[  447.759879][   T27]  ? _raw_spin_unlock+0x40/0x40
[  447.780732][   T27]  ? __sched_text_start+0x8/0x8
[  447.799067][   T27]  ? prepare_to_wait_event+0x430/0x470
[  447.827914][   T27]  schedule+0xb9/0x180
[  447.839468][   T27]  wb_wait_for_completion+0x16f/0x290
[  447.850595][   T27]  ? __bpf_trace_writeback_inode_template+0x20/0x20
[  447.867801][   T27]  ? rwsem_write_trylock+0x135/0x1c0
[  447.878496][   T27]  ? wake_bit_function+0x200/0x200
[  447.890609][   T27]  ? __lock_acquire+0x7c40/0x7c40
[  447.901843][   T27]  sync_inodes_sb+0x1c5/0xa10
[  447.920741][   T27]  ? filemap_fdatawrite_range+0x160/0x160
[  447.938624][   T27]  ? try_to_writeback_inodes_sb+0xc0/0xc0
[  447.951380][   T27]  ? nilfs_put_super+0x150/0x150
[  447.973375][   T27]  ? get_nr_dirty_inodes+0x290/0x2c0
[  447.979163][   T27]  sync_filesystem+0x16d/0x220
[  447.996335][   T27]  generic_shutdown_super+0x6b/0x340
[  448.023100][   T27]  kill_block_super+0x7c/0xe0
[  448.027911][   T27]  deactivate_locked_super+0x93/0xf0
[  448.048921][   T27]  cleanup_mnt+0x471/0x4f0
[  448.070493][   T27]  task_work_run+0x1d0/0x260
[  448.087288][   T27]  ? task_work_cancel+0x220/0x220
[  448.100988][   T27]  ? do_exit+0x9d0/0x2570
[  448.112763][   T27]  ? kmem_cache_free+0xf7/0x2a0
[  448.127121][   T27]  do_exit+0x9d5/0x2570
[  448.135803][   T27]  ? do_raw_spin_lock+0x128/0x2f0
[  448.141646][   T27]  ? put_task_struct+0x80/0x80
[  448.151764][   T27]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  448.167106][   T27]  ? lock_chain_count+0x20/0x20
[  448.182142][   T27]  do_group_exit+0x229/0x2e0
[  448.197161][   T27]  ? lockdep_hardirqs_on+0x94/0x140
[  448.208265][   T27]  get_signal+0x1259/0x1340
[  448.220614][   T27]  arch_do_signal_or_restart+0xc4/0x1310
[  448.240813][   T27]  ? debug_object_free+0x2c6/0x470
[  448.257335][   T27]  ? hrtimer_nanosleep+0x2ae/0x370
[  448.274431][   T27]  ? __might_fault+0xc2/0x120
[  448.293624][   T27]  ? __might_fault+0xa6/0x120
[  448.298433][   T27]  ? get_sigframe_size+0x10/0x10
[  448.314423][   T27]  ? __remove_hrtimer+0x470/0x470
[  448.328872][   T27]  ? __se_sys_clock_nanosleep+0x30b/0x3a0
[  448.352171][   T27]  ? exit_to_user_mode_loop+0x3b/0x110
[  448.374613][   T27]  exit_to_user_mode_loop+0x70/0x110
[  448.386145][   T27]  exit_to_user_mode_prepare+0xee/0x180
[  448.397916][   T27]  syscall_exit_to_user_mode+0x16/0x40
[  448.417290][   T27]  do_syscall_64+0x58/0xa0
[  448.427253][   T27]  ? clear_bhb_loop+0x60/0xb0
[  448.437140][   T27]  ? clear_bhb_loop+0x60/0xb0
[  448.450309][   T27]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  448.469594][   T27] RIP: 0033:0x7f089ad5e6ce
[  448.481078][   T27] RSP: 002b:00007f089bc31f58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6
[  448.501418][   T27] RAX: fffffffffffffdfc RBX: 00007f089bc326c0 RCX: 00007f089ad5e6ce
[  448.518309][   T27] RDX: 00007f089bc31fb0 RSI: 0000000000000000 RDI: 0000000000000000
[  448.539050][   T27] RBP: 00007f089ae33eaf R08: 0000000000000000 R09: 0000000000000000
[  448.571983][   T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  448.602164][   T27] R13: 00007f089b026038 R14: 00007f089b025fa0 R15: 00007ffd35c76da8
[  448.631068][   T27]  </TASK>
[  448.645645][   T27] 
[  448.645645][   T27] Showing all locks held in the system:
[  448.703770][T11414] EXT4-fs (loop2): unmounting filesystem.
[  448.747789][   T27] 2 locks held by kworker/u4:0/9:
[  448.765075][   T27]  #0: ffff888019e5e138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160
[  448.781224][   T27]  #1: ffffc900000e7d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160
[  448.799470][   T27] 1 lock held by rcu_tasks_kthre/12:
[  448.842324][   T27]  #0: ffffffff8cb2e4f0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0
[  448.859504][   T27] 1 lock held by rcu_tasks_trace/13:
[  448.877420][   T27]  #0: ffffffff8cb2ed10 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0
[  448.888802][   T27] 1 lock held by khungtaskd/27:
[  448.898089][   T27]  #0: ffffffff8cb2db60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290
[  448.909084][   T27] 2 locks held by getty/4028:
[  448.914011][   T27]  #0: ffff88802fef9098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70
[  448.933228][   T27]  #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41e/0x1360
[  448.943516][   T27] 3 locks held by kworker/0:8/4318:
[  448.948787][   T27]  #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160
[  448.992330][   T27]  #1: ffffc90004517d00 (xfrm_state_gc_work){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160
[  449.020806][   T27]  #2: ffffffff8cb33838 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2ec/0x890
[  449.049160][   T27] 3 locks held by kworker/1:5/4320:
[  449.062041][   T27]  #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160
[  449.087546][   T27]  #1: ffffc90004547d00 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160
[  449.117242][   T27]  #2: ffffffff8cb33838 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3c0/0x890
[  449.162239][   T27] 2 locks held by kworker/0:9/4348:
[  449.173261][   T27]  #0: ffff888017472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160
[  449.201418][   T27]  #1: ffffc900042d7d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160
[  449.230753][   T27] 1 lock held by dhcpcd/6506:
[  449.247401][   T27]  #0: ffff8880752dfa10 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x82/0x210
[  449.278919][   T27] 2 locks held by syz.6.1585/10389:
[  449.290107][   T27]  #0: ffff888068aa20e0 (&type->s_umount_key#117){+.+.}-{3:3}, at: deactivate_super+0xa0/0xd0
[  449.319594][   T27]  #1: ffff888142f467d0 (&bdi->wb_switch_rwsem){+.+.}-{3:3}, at: sync_inodes_sb+0x1a9/0xa10
[  449.352191][   T27] 1 lock held by segctord/10619:
[  449.369031][   T27] 1 lock held by syz.2.2640/14179:
[  449.390472][   T27] 1 lock held by dhcpcd/14284:
[  449.419420][   T27]  #0: ffff88807ba36130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xd40
[  449.440433][   T27] 1 lock held by dhcpcd/14285:
[  449.455906][   T27]  #0: ffff88807e0c6130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xd40
[  449.491495][   T27] 1 lock held by dhcpcd/14286:
[  449.497388][   T27]  #0: ffff888079d4a130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xd40
[  449.511550][   T27] 1 lock held by dhcpcd/14287:
[  449.516584][   T27]  #0: ffff888069d2c130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xd40
[  449.537380][   T27] 1 lock held by dhcpcd/14288:
[  449.542240][   T27]  #0: ffff888079d48130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xd40
[  449.553124][   T27] 1 lock held by dhcpcd/14289:
[  449.557908][   T27]  #0: ffff88807d544130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xd40
[  449.614423][   T27] 2 locks held by sed/14298:
[  449.641274][   T27] 
[  449.644062][   T27] =============================================
[  449.644062][   T27] 
[  449.652488][   T27] NMI backtrace for cpu 0
[  449.656813][   T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0
[  449.663997][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  449.674038][   T27] Call Trace:
[  449.677304][   T27]  <TASK>
[  449.680229][   T27]  dump_stack_lvl+0x188/0x24e
[  449.684903][   T27]  ? irq_work_queue+0xbf/0x140
[  449.689732][   T27]  ? show_regs_print_info+0x12/0x12
[  449.694926][   T27]  ? load_image+0x410/0x410
[  449.699418][   T27]  ? vprintk_emit+0x59f/0x6a0
[  449.704091][   T27]  ? printk_sprint+0x460/0x460
[  449.708851][   T27]  nmi_cpu_backtrace+0x3e6/0x460
[  449.713804][   T27]  ? nmi_trigger_cpumask_backtrace+0x450/0x450
[  449.719945][   T27]  ? _printk+0xda/0x130
[  449.724089][   T27]  ? load_image+0x410/0x410
[  449.728583][   T27]  ? load_image+0x410/0x410
[  449.733077][   T27]  ? nmi_trigger_cpumask_backtrace+0xf3/0x450
[  449.739133][   T27]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  449.745246][   T27]  nmi_trigger_cpumask_backtrace+0x1d4/0x450
[  449.751227][   T27]  watchdog+0xf0e/0xf50
[  449.755421][   T27]  ? watchdog+0x1ed/0xf50
[  449.759744][   T27]  kthread+0x29d/0x330
[  449.763830][   T27]  ? hungtask_pm_notify+0x40/0x40
[  449.768842][   T27]  ? kthread_blkcg+0xd0/0xd0
[  449.773417][   T27]  ret_from_fork+0x1f/0x30
[  449.777848][   T27]  </TASK>
[  449.781504][   T27] Sending NMI from CPU 0 to CPUs 1:
[  449.786767][    C1] NMI backtrace for cpu 1
[  449.786776][    C1] CPU: 1 PID: 14298 Comm: sed Not tainted syzkaller #0
[  449.786790][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  449.786798][    C1] RIP: 0010:filter_irq_stacks+0x66/0x90
[  449.786821][    C1] Code: 48 3d e0 01 40 8a 0f 93 c1 48 3d 10 0f 40 8a 0f 92 c2 84 d1 75 27 48 3d 00 00 60 8a 0f 92 c1 48 3d 07 00 60 8a 0f 93 c0 08 c8 <74> 11 48 ff c3 49 83 c7 08 49 39 dc 75 ae 44 89 e3 eb 06 ff c3 eb
[  449.786834][    C1] RSP: 0000:ffffc90003a37708 EFLAGS: 00000202
[  449.786846][    C1] RAX: ffffffff8a304901 RBX: 0000000000000007 RCX: 0000000000140d01
[  449.786856][    C1] RDX: 0000000000000001 RSI: 0000000000000009 RDI: ffffc90003a377e0
[  449.786865][    C1] RBP: ffffc90003a378e0 R08: 0000000000000001 R09: 1ffffffff1c42435
[  449.786875][    C1] R10: dffffc0000000000 R11: fffffbfff1c42436 R12: 0000000000000009
[  449.786885][    C1] R13: dffffc0000000000 R14: ffffc90003a377e0 R15: ffffc90003a37818
[  449.786896][    C1] FS:  00007f07ee8cbc80(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  449.786908][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  449.786918][    C1] CR2: 000055c71050b3d8 CR3: 0000000066a80000 CR4: 00000000003506e0
[  449.786931][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  449.786939][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  449.786947][    C1] Call Trace:
[  449.786952][    C1]  <TASK>
[  449.786958][    C1]  __stack_depot_save+0x35/0x480
[  449.787040][    C1]  save_stack+0x12f/0x230
[  449.787087][    C1]  ? __reset_page_owner+0x190/0x190
[  449.787102][    C1]  ? seqcount_lockdep_reader_access+0x106/0x190
[  449.787150][    C1]  ? post_alloc_hook+0x173/0x1a0
[  449.787168][    C1]  ? get_page_from_freelist+0x206b/0x2180
[  449.787187][    C1]  ? __alloc_pages+0x1ec/0x4f0
[  449.787205][    C1]  ? __folio_alloc+0xe/0x30
[  449.787222][    C1]  ? vma_alloc_folio+0x499/0x900
[  449.787241][    C1]  ? handle_mm_fault+0x1fe3/0x3d40
[  449.787254][    C1]  ? do_user_addr_fault+0x58e/0xb20
[  449.787276][    C1]  ? exc_page_fault+0x60/0x100
[  449.787290][    C1]  ? asm_exc_page_fault+0x22/0x30
[  449.787311][    C1]  ? __lock_acquire+0x7c40/0x7c40
[  449.787329][    C1]  ? do_raw_spin_trylock+0xae/0x190
[  449.787345][    C1]  __set_page_owner+0x19/0x60
[  449.787360][    C1]  post_alloc_hook+0x173/0x1a0
[  449.787379][    C1]  get_page_from_freelist+0x206b/0x2180
[  449.787401][    C1]  ? __alloc_pages+0x130/0x4f0
[  449.787435][    C1]  __alloc_pages+0x1ec/0x4f0
[  449.787454][    C1]  ? lock_chain_count+0x20/0x20
[  449.787471][    C1]  ? zone_statistics+0x170/0x170
[  449.787493][    C1]  ? count_memcg_event_mm+0x8a/0x3c0
[  449.787506][    C1]  ? count_memcg_event_mm+0x36b/0x3c0
[  449.787518][    C1]  ? __lock_acquire+0x7c40/0x7c40
[  449.787536][    C1]  ? count_memcg_event_mm+0x8a/0x3c0
[  449.787549][    C1]  ? put_page+0x270/0x270
[  449.787562][    C1]  __folio_alloc+0xe/0x30
[  449.787580][    C1]  vma_alloc_folio+0x499/0x900
[  449.787601][    C1]  handle_mm_fault+0x1fe3/0x3d40
[  449.787614][    C1]  ? mt_find+0x157/0x830
[  449.787638][    C1]  ? numa_migrate_prep+0x250/0x250
[  449.787656][    C1]  ? lock_chain_count+0x20/0x20
[  449.787672][    C1]  ? do_sys_openat2+0x20a/0x4f0
[  449.787720][    C1]  ? lock_mm_and_find_vma+0xae/0x2f0
[  449.787735][    C1]  do_user_addr_fault+0x58e/0xb20
[  449.787759][    C1]  exc_page_fault+0x60/0x100
[  449.787771][    C1]  ? clear_bhb_loop+0x60/0xb0
[  449.787791][    C1]  asm_exc_page_fault+0x22/0x30
[  449.787806][    C1] RIP: 0033:0x7f07eea2cd34
[  449.787818][    C1] Code: 8d 34 19 49 39 d0 49 89 70 60 0f 95 c2 48 29 d8 48 83 c1 10 0f b6 d2 48 83 c8 01 48 c1 e2 02 48 09 da 48 83 ca 01 48 89 51 f8 <48> 89 46 08 48 89 cf 4c 89 e6 48 89 4c 24 08 e8 18 c7 ff ff 48 8b
[  449.787829][    C1] RSP: 002b:00007ffe6e9c60c0 EFLAGS: 00010206
[  449.787841][    C1] RAX: 000000000001dc31 RBX: 0000000000001010 RCX: 000055c71050a3d0
[  449.787851][    C1] RDX: 0000000000001011 RSI: 000055c71050b3d0 RDI: 0000000000000000
[  449.787860][    C1] RBP: ffffffffffffffc0 R08: 00007f07eeb65ac0 R09: 0000000000000000
[  449.787869][    C1] R10: 0000000000000004 R11: 0000000000000297 R12: 0000000000001000
[  449.787878][    C1] R13: 0000000000000000 R14: 00000000000000ff R15: 00007f07eeb65b20
[  449.787894][    C1]  </TASK>
[  450.144196][   T27] Kernel panic - not syncing: hung_task: blocked tasks
[  450.144212][   T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0
[  450.144230][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  450.144240][   T27] Call Trace:
[  450.144245][   T27]  <TASK>
[  450.144253][   T27]  dump_stack_lvl+0x188/0x24e
[  450.144280][   T27]  ? memcpy+0x3c/0x60
[  450.144371][   T27]  ? show_regs_print_info+0x12/0x12
[  450.144392][   T27]  ? load_image+0x410/0x410
[  450.144419][   T27]  panic+0x2d3/0x710
[  450.144434][   T27]  ? schedule_preempt_disabled+0x20/0x20
[  450.144459][   T27]  ? bpf_jit_dump+0xd0/0xd0
[  450.144474][   T27]  ? __irq_work_queue_local+0x12c/0x190
[  450.144500][   T27]  ? nmi_trigger_cpumask_backtrace+0x35b/0x450
[  450.144523][   T27]  ? nmi_trigger_cpumask_backtrace+0x360/0x450
[  450.144545][   T27]  watchdog+0xf4d/0xf50
[  450.144567][   T27]  ? watchdog+0x1ed/0xf50
[  450.144588][   T27]  kthread+0x29d/0x330
[  450.144602][   T27]  ? hungtask_pm_notify+0x40/0x40
[  450.144619][   T27]  ? kthread_blkcg+0xd0/0xd0
[  450.144635][   T27]  ret_from_fork+0x1f/0x30
[  450.144665][   T27]  </TASK>
[  450.147045][   T27] Kernel Offset: disabled
[  450.309616][   T27] Rebooting in 86400 seconds..