last executing test programs:

7m17.698715941s ago: executing program 1 (id=2):
syz_clone(0x88206100, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x80, 0x140)
openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x800, 0x80)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f00000001c0)=r0}, 0x20)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00')
syz_read_part_table(0x4074, &(0x7f0000000400)="$eJzszzFKK1EUBuB/kjcvowwEQStBDBZ2MnZWs4v0kjVYWag4O7EUF+A+3IOlLiESZKIxtoEg31cczpmfM/fesN3e+6ZafiqSPM+e9pIcT9I1zWf4r893vrab85S71SB1kqv1n08fN3p3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg24y+9YOV5DZJ93J92s/VovxflNlhups2F3VSHYyT+2HK9qjIfjI5++WMYfKapEjylmQ63txzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/5HJlGv2M6765W199OEnXlst0Pv9gd44JAABhGAhmxCAmMRkstPudgf92nD3JfdtXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04kAEAAAAQ5m+dR/sBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4KQAA//9ggxZC")
fchdir(r1)
r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], 0x0, 0x11ef, &(0x7f0000003e40)="$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")
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000040)={'veth1\x00', {0x2, 0x4e23, @empty=0xfdfdffff}})
bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r3, 0x2)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r5, 0x26, &(0x7f0000000380)={0x300, 0x0, 0x103ff})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00'}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="b702000000000080bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b70000000000000095000000000000008e17f199a68b061b93d83298a8cdda1ce784909b849d5550ad855dab54d8877a6db61d69f2ffcaa10350e11cb97ce8df1bc9a0c4eeceb9971e43405d621ffbc9b0d8ca56b50f0c010d631f6dbc8486bc5d5bf2ca8285056892db03cf1c62d57c08a90b189d190c341035de53a9a53608c10556e5734eb84049761451ce540c772e069f80cb201b2de17dfdb4b60939d5d6aed4062049b87e03e2cd18a77dda613e0c64497fcc059c062234d5595f6fbaa187b81d1106000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8000000000000000b91c61bd99dc89f12907af7dccd106cb937b450f859ce8292a79c3e40000b59b0fc46d6cec3c080a882add4e1179bd4a44f231a2d73148be4248cdc138408ba953df4aece69311687f4122073a236c3a32efa04137d46f0247d2638da3261c8162bb7c7824be6195a66d2e17e122040e11001131ce319045e5b3334e68475ac3f46aa2837f9004600daded9b19b35eebe52613c346e255421b23a278fd00004270b1cd5fc9aa2286ccca37db965d9dd366598f5ec993cb0cf127e2a46cfbdf63eea190d86a4d1b75ae98480100bd5828954a7d093a54f7e75b3753508ca3c41685d1e407315e59d626c23b3f89a926e9382966853774e7dd1f1a2177cdf2802237c177d543e8da47a01f05e113e53518270239b69c117e2637c31085f4d8a596b6edab26afaf6605b231199f38a6fc7eb83714387450ea18eafbace8eec18a4b2c442e7b88a7611c1283bec84e1715fb9f4fcaf52c08058fc4f21c0ad71adabdd850aed3eeec6eaab347bdf474e17b9aa345d1e6e3bb83f90230bdf53e7d0e5c3f914d905422b83f30936674ba8f0bffaf2305c0972df71fe5f4e01506471e897bced7798509e64df360d95f9a4099f86438ac2bbcbdbd1d9db21a1d5c065567fd70aae68096827fa5c2d9bd20292344c7dcf6241447cfbb05b5d0fdb4e08afbac5397b64aa369922ed7ed8918f97294b6854210d2b93aaf92159dbaa2f186d4a420c68d6baf1c31de4f0bf478bfd51bb1e96ea849a80ae5a89be7e38474c7aade344d68324f9e12a6b9770e6bd12ae69efffaee58040753701af84c2924c1b5aea1650f42c9ae9820a33095f062fb88313d035ea405515a61a4be64f9fa0985c5be592090cc48291004609fdac2ab6100000000000000a84570c7c00d647daf8af334050b61e9b2d3f0adad1d1ff47be19b8da2799e9ecef8efabe73f92dbd0760f8bbd9c590bd1371e2b5d9a2ea2190f5e4f5cd641cdfe5d89f84a368ef7e6ff1eacdc0ec9e97b8f9c9e314661ea0aa8a104008d188b66b3a4aedeed9df4238a08fc2fb1007233cc2c87fcaa0cccd8ec03444471c1dd660c87acc17bff740d199a7c0c52c63c0408b5158e0000000c275eedb02f141113cf2c55b2c08c2c68cc99d2bb5840fba332e1c82862ec9b90106248f81d32a47ac94ddee815dba8aeb5d3121cf247a81aef7805b020e9eec44cbe3055be69fe066824ba2292b9cdce41635fc00df96fb10a3a8cc60c4a76c65ebbb0640e0a29de94edf5cbefac1c5fa96e7080af804b22cabce10ea52f1018527f4aa39cdafa3eff63de2a7f50d042667820f6f86f276afb2b8134301e031351ee13013137e9d5cec0c84d7e3f82c6fd12eb98f9ea654bcb9ce59a2015183c6e65bb0537e611b830d74c30fb8207fca0990acdbb51e4e234026e00000000b3ebae3eb52c140953a350fcf0124b1a30b1afc29ea56f8413686d912eb8118d73ef9c6d3843ebcb555301c0205dd3bd9b1d742e334319c8979c322e92"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r6, 0x0, 0xe, 0xfffffffffffffead, &(0x7f0000000080)="3a173357f297c605804ab3828443", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

7m16.685375401s ago: executing program 1 (id=10):
syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000800)='./file1\x00', 0x200800, &(0x7f0000000180)={[{@shortname_winnt}, {@fat=@gid}, {@shortname_lower}, {@shortname_winnt}, {@fat=@time_offset={'time_offset', 0x3d, 0xfffffffffffffb85}}]}, 0x11, 0x305, &(0x7f0000002480)="$eJzs3UGLG2UYB/Cna7srK9vZgwgK4ote9DLsrl/AIC2IC8ralepBmLqzGjJNlkyopIh68+rnKB69CeIX2It3b9724rGHYiQZmyY1ogjboe3vB8n7JG/+8A5hwnMJz9n17272juv8uBjF2lsp1iJi7W7E9qxqXGieLjSv1mPRN/FGdv3Xlz/46ON3O/v7Vw5Sutq59uZeSunyKz998eX3r/48eu7DHy7/uBGn25+c/b732+kLpy+e/XHt826dunXqD0apSDcGg1FxoyrTUbfu5Sm9X5VFXaZuvy6HS/vH1eDkZJyK/tHW5smwrOtU9MepV47TaJBGw3EqPiu6/ZTnedraDP7N4Z2Dg6LT9ik4X8Nhp5jevBt/2zm808qBAIBW/ef+f/r+rNb/Pzn0/0+Daf+//tf9u0z/DwAAAAAAAAAAAAAAj4O7k0k2mUyy++vDjxWRSy0ck3PyP75/niALf9x7NqL69tbhrcNmbfY7x9GNKsrYiSzuRUzmmvrqO/tXdtLMdmzd/LrJT9dnlvO7kcX26vxuk0/L+UuxuZjfiyyeX53fW5lfj9dfW8jnkcUvn8YgqjiKafZB/qvdlN5+b/+h/MbscwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8HfI0t3J+f57/036Tn8/X34ks7q2ez7+zcj7/xXjpYrvXDgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD31ePbvaKqyqFCoVDMi7Z/mQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODRezD0u+2TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KZ6fLtXVFU5PMei7WsEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4nPwZAAD//38rKVo=")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a)

7m15.817957052s ago: executing program 1 (id=13):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000080), 0x1, 0x525, &(0x7f0000000880)="$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")
mknod$loop(0x0, 0x0, 0x1)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x100, 0x0)
open_by_handle_at(r0, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0)

7m14.790413583s ago: executing program 1 (id=20):
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, 0x0)
mkdir(0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000040), 0x12)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./file0\x00', 0xc80, &(0x7f0000000180)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b26209f1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc563b62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x1, 0x266, &(0x7f0000002240)="$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")
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

7m14.579077206s ago: executing program 1 (id=22):
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000002c0), 0x90802)
read$qrtrtun(r1, &(0x7f0000000340)=""/248, 0xf8)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff)
r4 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x4, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0305602, 0x0)
sendmsg$NLBL_MGMT_C_VERSION(r2, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x4)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x108, &(0x7f0000000280)=0x4, 0x0, 0x4)
ioctl$TCSBRKP(r0, 0x5425, 0x10001)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r5 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0)
r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000100)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000280)={@hyper})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r8, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @any, 0x0, 0x0, 0x5e, 0xfffffffffffffff9, 0x6})
r9 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$PNPIPE_ENCAP(r9, 0x113, 0x1, 0x0, 0x0)

7m13.342613789s ago: executing program 1 (id=27):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x47, 0xc11, &(0x7f0000000d00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x27ffff7, 0x4012011, r0, 0x0)
setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
fanotify_mark(0xffffffffffffffff, 0x7e, 0x800003a, 0xffffffffffffffff, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"})
truncate(&(0x7f0000000080)='./file1\x00', 0x400000f000)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x24}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)

7m13.087631844s ago: executing program 32 (id=27):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x47, 0xc11, &(0x7f0000000d00)="$eJzs3V1oXOl5B/DnnSOtRto00WYTb9Jm04GUxCi18VdsBZcgZxW1AccbIit0r6LRh51h5ZGR5MabtkFtSQu9Cd2b0psimi4t5KJX3V5WabaQUAol5CK9KAiaLHvRC10ECi0bhXPmHWlky7ayXlvS7u+3zP7PnHnO+P0YnzkCvzoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAER89nOXTp1OB90KAOBxujL5pVNnff8DwLvKVT//AwAAAAAAAAAAAADAYZeiiGORYujVzTRdPe+oX261b92eGp/Y+7DBFClqUVT15aN++szZc586f2G0m/c//u324Xh+8uqlxnOLN24uzS8vz881ptqt2cW5+X2/w8Mef6eRagAaN168NXft2nLjzMmzu16+Pfz6wJPHhi9eOHF+tFs7NT4xMdlT09f/lv/0u9xrhccTUUQzUrw5/EZqRkQtHn4sHvDZedQGq06MVJ2YGp+oOrLQarZXyhdTLVfVIho9B411x+gxzMVDGYtYLZtfNnik7N7kzeZSc2ZhvvHF5tJKa6W12E61TmvL/jSiFqMpYi0iNgbufrv+KOKjkeLlU5tpJiKK7jh8sloY/OD21B5BH/ehbGejP2KtdgTm7BAbiCKuRIqfvXY8Zssxy4/4eMQXynw14pUyPxORyg/GuYif7vE54mjqiyL+PVIsps00V50PuueVy19ufL59bbGntnteOfLfD4/TIT831aOImeqMv5ne+sUOAAAAAAAAAAAAAAAAAG+3wSji25HiT579vWpdcVTr0t93cfQ9L/x275rxZx7wPmXtyYhYre1vTW5/XjqcauV/j6Bj7Es9ivhGXv/3RwfdGAAAAAAAAAAAAAAAAAAAgHe1Il6IFF85cTytRe89xVvt642rzZmFzl1hu/f+7d4zfWtra6uROjmWczrnas61nOs5N3JGLR+fcyzndM7VnGs513Nu5IwiH59zLOd0ztWcaznXc27kjL58fM6xnNM5V3Ou5VzPuZEzDsm9ewEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3klqUcTPI8W3vraZIkXEWMR0dHJ94KBbBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACU6qmIk5Fi/YV69XytFnE1In6+tbXVfUTEZpkP66D7CgAAAAAAAAAAAAAAAAAAAIdWKuJjkeLp/9tMjYi4Pfz6wJPHhi9eOHF+tIgiUlnSW//85NVLjecWb9xcml9enp9rTLVbs4tz8/v94+qXW+1bt6fGJx5JZx5o8BG3f7D+3OLNl5Za17+6sufrQ/VLM8srS83ZvV+OwahFTPfuGakaPDU+UTV6odVsV4em2j0aWIsY229nAAAAAAAAAAAAAAAAAAAAODSGUhGfixQ/+a9zqbtuvK+z5v9XOs+K7dpX/mDndwEs3JFdvb8/YD/bab8NHakW3jemxicmJnt29/XfXVq2KaUinokUn3j5Q9V6+BRDe66NL+veW9bdOJfrhn+trFvdVVUfmRqfaFxZbJ+4tLCwONtcac4szDcmbzZn9/2LAwAAAAAAAAAAAAAAAAAAAOA+hlIRP4oU//P3/5G6953P6//7Os961v//VrWEvlJPu3Nbtbb/vdXa/s72+y6ODn302XvtfxTr/8s2pVTENyPF2R99qLqffnf9//QdtWXdn0WKN579SK6rPVHWNbvd6bzjtdbC/Kmy9q8jxa+/2a2NqvZ6rn16p/Z0WTsYKf5yc3ftV3PtB3Zqz5S1xyPF9/5779oP7tSeLWt/Ein+6e8a3dqhsvb3c+2xndqTs4sLcw8a1nL+vxMp/vbK76Run+85/z2//2H1jtx215zff/vtmv/hnn2reV7/NM9/8wHzfz5SfKf+kVzXGfuZ/PpT1f935v8TkeI//2137bVc+/6d2tP77dZBK+f/25Hiu3/14+0+5/nPI7szQ73z/6t9u3P7U3JA8/9Uz77h3K7ZX3Is3o2WX/r6i82FhfklGzZs2NjeOOgzE49D+f3/55Hi/48VqXsdk7//39N5tnP997/f2Pn+v3hHbjug7//39+y7mK9a+vsi6is3bvY/E1FffunrJ1o3mtfnr8+3z5w+9elPnz996vT5/ie6F3c7W/seu3eCcv5/ECl++A8/3P45Zvf1397X/0N35LYDmv+ne/u067pm30PxrlTO/99Eiqc+++Ptnzfvd/3f/fn/+Md25/bfvwOa/w/07BvO7Wr9kmMBAAAAAAAAAABwlAylIv4iUvzuH/9m6q4h2s+//5u7I7cd0L//Otazb+4xrWvY9yADABwi5fXfByPFP299f3st9+7rv/iNbm3v9d+9HIb7/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFGXoog/jBRDr26m9YHyeUf9cqt96/bU+MTehw2mSFGLoqovH/XTZ86e+9T5C6PdvP/xb7cPx/OTVy81nlu8cXNpfnl5fq4x1W7NLs7N7/sdHvb4O41UA9C48eKtuWvXlhtnTp7d9fLt4dcHnjw2fPHCifOj3dqp8YmJyZ6avv63/KffJd1j/xNRxPcjxZvDb6TvDkTU4uHH4gGfnUdtsOrESNWJqfGJqiMLrWZ7pXwx1XJVLaLRc9BYd4wew1w8lLGI1bL5ZYNHyu5N3mwuNWcW5htfbC6ttFZai+1U67S27E8jajGaItYiYmPg7rfrjyK+GSlePrWZ/mUgouiOwyevTH7p1NkHt6f2CPq4D2U7G/0Ra7UjMGeH2EAU8Y+R4mevHY/vDUT0RecRH4/4QpmvRrxS5mciUvnBOBfx0z0+RxxNfVHEuUixmDbTawPl+aB7Xrn85cbn29cWe2q755Uj//3wOB3yc1M9ivhBdcbfTP/q7zUAAAAAAAAAAAAAAADAIVLEWqT4yonjqVofvL2muNW+3rjanFnoLOvrrv3rrpne2traaqROjuWczrmacy3nes6NnFHLx+ccyzmdczXnWs71nBs5o8jH5xzLOZ1zNedazvWcGzmjLx+fcyzndM7VnGs513Nu5IxDsnYPAAAAAAAAAAAAAAAAAAB4Z6lFUd3F/Vtf20xbA537S09HJ9fdD/Qd7xcBAAD//0kCdPc=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x27ffff7, 0x4012011, r0, 0x0)
setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
fanotify_mark(0xffffffffffffffff, 0x7e, 0x800003a, 0xffffffffffffffff, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"})
truncate(&(0x7f0000000080)='./file1\x00', 0x400000f000)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x24}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)

5m9.081734362s ago: executing program 2 (id=535):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, 0x0})
ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f00000001c0)={0xb0000, 0x0, {[0x400000000000008b, 0xfffffffffffffffe, 0x2, 0x4, 0x1000000000, 0x4]}})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

5m8.234058202s ago: executing program 2 (id=542):
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000000)=<r4=>0x0)
ptrace$poke(0x4, r4, &(0x7f0000000180), 0x6)
r5 = accept4(r3, 0x0, 0x0, 0x0)
sendmsg$alg(r5, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008a40)="7c72bf03f7d9c0fd0826786ffcfb99e55c1272594d5be5c7f1de9562bbf652", 0x1f}, {&(0x7f0000008c80)="9d", 0x7fffefe1}], 0x2}, 0x0)
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xee01)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = socket$key(0xf, 0x3, 0x2)
socket(0x10, 0x3, 0x9)
sendmsg$key(r6, &(0x7f0000001340)={0x0, 0x3, 0x0}, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000c00)=ANY=[], 0x1, 0x6e5, &(0x7f0000000680)="$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")

5m7.172042565s ago: executing program 2 (id=548):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
fanotify_init(0x1, 0x2)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x78, 0x0, 0x9, {0x6, 0xcbff, 0x0, {0x5, 0x5, 0x200000003, 0x6c, 0x7, 0x6, 0x1, 0x6, 0x101, 0x1000, 0xfffffffe, 0xffffffffffffffff, 0x0, 0x3, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c460d04000c028000000000000003003e00ecffffff940200000000000040000000000000004d020000000000000000000000003800010001017f00080003"], 0x78)
close(r2)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0)

5m7.052948972s ago: executing program 2 (id=550):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv6_newroute={0x2c, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8, 0x17, 0xffffffff}, @RTA_PRIORITY={0x8, 0x6, 0x1743}]}, 0x2c}}, 0x0)
sendmmsg$alg(r1, &(0x7f0000004dc0)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000300)="11326d384a8050", 0x7}], 0x1, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000000}], 0x1, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='wlan0\x00', 0x10)
sendmmsg$inet6(r3, &(0x7f0000001880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4400c800)
splice(r1, &(0x7f0000000140)=0x97a7, r0, &(0x7f0000000180)=0x7, 0x5, 0x5)
recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/4, 0x4}, {&(0x7f0000010080)=""/182, 0xb6}], 0x2}, 0x40010120)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204001, &(0x7f0000000240), 0x1, 0xb9f, &(0x7f0000000c00)="$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")
r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
write$binfmt_register(r4, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xdc\xf2\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c)
r5 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0)

5m6.516704774s ago: executing program 2 (id=551):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@orlov}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfa, 0x491, &(0x7f0000000a00)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x60)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

5m6.172987414s ago: executing program 2 (id=558):
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000002c0), 0x90802)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff)
r3 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x4, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0305602, 0x0)
sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x4)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x108, &(0x7f0000000280)=0x4, 0x0, 0x4)
ioctl$TCSBRKP(r0, 0x5425, 0x10001)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0)
r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000100)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000280)={@hyper})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r7, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @any, 0x0, 0x0, 0x5e, 0xfffffffffffffff9, 0x6})
r8 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$PNPIPE_ENCAP(r8, 0x113, 0x1, 0x0, 0x0)

5m5.609349298s ago: executing program 33 (id=558):
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000002c0), 0x90802)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff)
r3 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x4, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0305602, 0x0)
sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x4)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x108, &(0x7f0000000280)=0x4, 0x0, 0x4)
ioctl$TCSBRKP(r0, 0x5425, 0x10001)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0)
r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000100)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000280)={@hyper})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r7, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @any, 0x0, 0x0, 0x5e, 0xfffffffffffffff9, 0x6})
r8 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$PNPIPE_ENCAP(r8, 0x113, 0x1, 0x0, 0x0)

3m37.473559241s ago: executing program 0 (id=1139):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40c4}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r0=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r0, {0xffff, 0xffe0}, {0xd, 0x10}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x18, 0x2, [@TCA_FLOW_EMATCHES={0x14, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xa}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)={0x24, 0x11, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x14, 0x0, 0x0, 0x0, [@typed={0xd, 0x0, 0x0, 0x0, @binary="56ccabd869c2033840"}]}]}, 0x24}], 0x1, 0x0, 0x0, 0xc010}, 0x40080)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x188}}], 0x1, 0x810)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

3m36.168051818s ago: executing program 0 (id=1142):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}}, 0x24}}, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000040)={0x2000, 0x0, 0x0, 'queue1\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'})
close_range(r1, 0xffffffffffffffff, 0x0)

3m36.032952236s ago: executing program 0 (id=1147):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0)
sendmsg$NL80211_CMD_FRAME(r1, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000002c0)={'fscrypt:', @desc1}, &(0x7f0000000300)={0x0, "576b6ef53b7d29775a598a05bd75178e57e16568b009ec328b5d6764d965e1081fc3c390db93cc994509274386773707579006e9c352280cd69fe358a15ef916", 0x36}, 0x48, r4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'syz_tun\x00', <r5=>0x0})
r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0)
socket$inet6_icmp(0xa, 0x2, 0x3a)
getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000640)={{{@in=@multicast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in=@private}, 0x0, @in6=@mcast1}}, &(0x7f0000000480)=0xe8)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in=@empty, @in=@private=0xa010100, 0x4e21, 0x8, 0x4e23, 0x1, 0xa, 0xc0, 0x80, 0x3c, r5, r7}, {0x391, 0x8, 0x5, 0x10c0, 0x100, 0x1, 0x5, 0x7fffffffffffffff}, {0x4000, 0x40, 0xfff, 0x8}, 0x3, 0x6e6bbb, 0x0, 0x0, 0x1}, {{@in=@remote, 0x4d5, 0xff}, 0x2, @in6=@local, 0x3501, 0x2, 0x0, 0xe, 0x24c, 0x9, 0x7fff}}, 0xe8)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, 0x0)
openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_open_procfs(r0, &(0x7f00000001c0)='net/dev_mcast\x00')

3m34.94763522s ago: executing program 0 (id=1149):
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x4000, &(0x7f0000000480), 0x1, 0x3d0, &(0x7f00000004c0)="$eJzs3M1uG0UcAPD/br5I+mEjcUCFgyUQBAFxHQhQhEThyscFeAArSUuF21SNkWjJoSBOnDggbhz6Ahx4gKpCSEi8Ai+AKlUozQFuQWvvOm4cp7Fix2r6+0mjndkdZ/bv3axm1rsTwGOrEhHnI2IiIhYjopSvT/MUN9spq3d/c2N5a3NjOYnt7U/+SSLJ1xV/K8mXJ/LCfBqRfhfxzM3edtev3/ii3misXsvL1eblq9X16zdevXS5fnH14uqV2pvnarWlxbdqrw8t1p+ef+ncxPvnz/z8V+nO0vT0bLa/J/Nt3XEMSyUqne9kt6VhNzZm0+PeAQAADiTN+/6Trf5/KSZaubZSVDfGunMAAADAUGy/my8BAACAYywx9gcAAIBjrngO4P7mxnKRxvg4wpG7915ElHfebd7qxD8ZT+R1pkb4fmslIq6+kJSyFCN6DxkAoNudrP9zdq/+XxpPd9WbiWj1h2aH3H5lV7m3/5PeHXKTD8j6f+9ExFZP/y8tqpQn8tKpVldxKrlwqbF6NiJOR8R8TM1k5do+bXzw7y8f99uWxf97cup0kbL2s+VOjfTu5MyDn1mpN+uHibnbvW8izkzuFX/S6f8mETF3iDYmvr71dr9tD49/tLZvRby45/Hfmbkn2X9+omrrfKgWZ0Wv/7799aN+7Y87/uz4z+0ffznpnq9pffA2bn/+57P9tnWPfwY5/6eTT1v5Ylz2Vb3ZvFaLmE4+7F2/uPPZolzUz+Kff27v///i+pfkc1qdzK8Bg/r+h99eOUj8WcraL8aCRyGLf2Wg4z945o3bf3zWr/2Hx58d//YcYPP5moNc/w66g4f57gAAAOBRkbbuayTpQiefpgsL7fsdT8Vc2lhbb758Ye3LKyvt+x/lmEqLO12lrvuhtfbP6J3y4q7yaxHxZET8WJptlReW1xor4w4eAAAAHhMn+oz/M38f2VMIAAAAwMiVx70DAAAAwMgZ/wMAAMCxdph5/WRkZI5rZtxXJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEfb/wEAAP//Wt22ag==")
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./bus\x00', 0x0, 0x63d017, 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r1, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = dup(r3)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f00000001c0)={@desc={0x1, 0x0, @desc3}})

3m33.653291877s ago: executing program 0 (id=1154):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, 0x0, &(0x7f00000023c0))
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5)
r4 = syz_open_pts(r0, 0x2000)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$F2FS_IOC_GARBAGE_COLLECT(r2, 0x4004f506, 0x0)
listen(r5, 0x7c2)
close_range(r0, r4, 0x0)

3m32.886760772s ago: executing program 0 (id=1156):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
fadvise64(r2, 0x63, 0x2, 0x1)

3m32.793773358s ago: executing program 34 (id=1156):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
fadvise64(r2, 0x63, 0x2, 0x1)

2m17.598219918s ago: executing program 3 (id=1647):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00'})
r1 = socket(0x840000000002, 0x3, 0xff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000540)={0x2, 0x4e60, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10)
sendmmsg$inet(r1, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94)

2m17.496869964s ago: executing program 3 (id=1648):
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
pipe(&(0x7f0000019480)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
r1 = socket(0x2, 0x3, 0xff)
setsockopt$inet_int(r1, 0x0, 0xd, &(0x7f0000000380)=0x7fffffff, 0x4)
setsockopt$inet_int(r1, 0x0, 0x3, 0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10)
fstat(0xffffffffffffffff, 0x0)
syz_fuse_handle_req(r0, &(0x7f0000001c00)="bb132411583540a64448084536321cd675a3ec227157a8ae5842e0ba2e28d30a6c5648da14f864ad9e0dca3f9ef725123c032b307e2efc9f4e0c89125419e7465e6ad319f92f9608bdac1ff7f2dfd56d32c0d39ad3d9da6a6c1cba5bd942859ac99b70ae6952c28bf834b5c5899c0eb58be4d6a6c01853b0d4eb19f93f763ae4c76c9ca105b910d9f97f4cefd62fec8222b4f528c2061fd86862d5bac318126dea07dde906f1c8d15d389091e2ad18a8ad6619b8975ec8d6b0a7f483234a6cd5085540cd9efed9e67a7f1d70f546d7ac217e72138fc94fd4698ed416fe1c298432e792d7a0e31a846fd857d7ed41c1bc9c34e3a81ea1f1f0b45332f25d081ac17f2ca8d5d9c95d96210506090aaaa623b8eebf5cfd904b413c3fded9b9d994b419b09f180a5e6135aee2255d954515687a94186370737fa8a51c1a9d7db3a3bedd2d231e3e2ad100a508a1983a27e4dc7750a8d147b9cb6f5453893b33fe57d8cd4b42bcb62894ac7004340cb00b17fa5c0fc0bd510b0c97a8229a06dbf22e91aaf0d665586c7d0ae91f0fa2e8de78c25051e9ab4a27cb7413a8b086d09bf2c61b8e502e1146eda7a42baa15c51bb1a30a0a6bd863da8fadd90a81a3e90723d5913445e4f596d1bdd1cc2c33c9d507d504a035acaf3717c33ef3319f29225bbb1e11a8c368a31fde5e22c58560553b09ad888960cd2b5fb1b527e8d5adf81074619902519d0bb97bd5c74e2f65e8c5151c0780f3fe9707a4e24e0cb2fa50467316daf6df00038b4ab2d80976bf1e6422d5e173cdbf3c6476aa7a924807c140b689e1dae92e01c43518245ea74077846c10022f3c8a3d8f663bcf36bce1716aa0f09b620106886010b75c98bf6d50d4cd7cb96eb4145ed6ecee50bf633484158450a5ead5b6b6b9aaa5736239fd00046b94d5205593550bcc16723263bbd025d72c236ae2dbe1308921329fa266a5082486ef292408ecb05ac35f8784584bb67a3f7ab9d52b256688e28ed00b3ff8bcafba68db05fc4846a5a8eac66baa03bacf42a0413a65bf1111438ae207ce16a57d6f133a6bc9887c884133dd889e72c325118a71905296fcbce945b9cb83c5a1bedb7b5199b065e26a23c94b727ad2bdcd6b5dd51ef2d87d812400bf02f9d2fc68f188ed85a84fd7f4d987ee0893e8a2960968b814b1dac1d44f01517f89c97dddeb6d89f98b1ff178894a16bcaf5a390499b9d80806e7d4b16b41d840668795238eaff85f9152c99c4f963651990204ee7d1bd27912759485cf13ae54a949ec901869085b48365f5ec7bf11dfeca1bee299b8f45e806555b1d5b80a6c8ba0ad9c27d5f4b19ca65085dcaa6ed2a0be7ed56fc9abdf4c9c98205ff86b37906f45128aff380be038bd0fab7d95abfe6e89679f91cd33717a522fc5b88caf4a23c50b202b4c8c62313424b9f311b3a3c0dcc10cc0414cb1b72f20b3eb49a3a44f16cd307c63d56ae143d5c66be9a2d2a79b32f2205f472f8123b3374ffd144881a7c26ea00984560a9cbb75559fe825548d1a799a4b5628c82d36179f0c4f5ecef2501f93c8863f108b76fb37d7fe779a3edf76edbe2604459bc73fd77a7ca5756f560c19add79f0d8cb60078f4d391acfbabfd848ef8631d9c7c74580df570fd24dad0f1e992b576eb3eff615cb615e9007672f353365c0c6c778326675157710ecfe5c8f57e9c0fcb91800b74ecddf6409d3789d6fb39fcb707e27569db22758bfa8fde7dbf3e228986711e5b9fbba6f396b774d4eec19ae363830eb693ac03da1e3cbfe761897d4768a1f71b487f6ffaf22f8a0e276d92ba555759967759abe462b035e44a386111f37f3a70a1ee5ac95548e9528ffad16a26649676299a8f56569bcd265c8f7527cc9efebba8180251e963b0da6f44671bdf46575d6dfecad1fd2db40614dea5506e69f427aac221f303db91241a1c3bcd74bcb4035ac41858195bc8866f8ce6afbe908b49f44e6242dab3e1379fb01d8fb0b7bf7aeea68d15ed33ea0937473b1176046361a0de13932e4289059a6d764a3a3f50e0e57f93c6ebe3fbedde564d84f5c19ae317ac9175a788bdd1fb6670c137d3594cda737319ce4c2fe9684e0398069e18c702de2764081662579035d2a8589a1f7304e9a7370c00c0d01d2520f8ab2394eea2346be573d6301e67c6df2e1c20ac63a7e82d0b22c7243caacebd1897ffc52c3635d781542c5c1531e7d18271ebea710111346d545580f432c7b8e016a4f942759824f6f5e7690198d7e1a4ec842aad05cbde0e7115af3c3ca0788cd5d2570a002edb8cdebe6f00b7cc0ec5045ab397ccf9d9ee24803e668efc601193dfa557d601604b4b3abb0fb5f0b09ae70e8ea09176f525b07abc668ea94cd9040656a89f4233a88f877e4032007571291511b3bf6ed163b3c20b0f45abf8ec4672164f5880be733cd8a122f123f215c4cd3b16888c1be781c036957108f227c1afc82ddd876f1e1653db284d85ea800d5fab0e37ff020234f900f50c062010a7b9f6d589ede91da9ff53f62c2a91987cd18ae64613423aca3ccbafbb779270ae279598419d28ca43ab9e1f75a685c5fa0c69a14facc1d21133a91c54547058f38f478a2da805ca25c92a6fb6cdab1b63245a8cee78724232b5ceca8b151e4a46e4a0722d75c6d03dfc23d7a9cf5bcee32e68ce63ab133e3d14a3b93919de02453ecb558627c32f360dd2ce61606787752a56cff16558b6e71961189e2b187c38e5ca36b894c7df8860552caaf6c52b205c63c4a76a1431d5438e931fd850e3db1e3dbb75e062d43e45e6262b81786da8fa76711471d9d8cf045f10afd8d3b1a54f173064ebcff69a63f8d5458e98a3de802ab6d36a9c5c52015c126f8897618471c14ced4a933144bdff9b6283515b50f89adc551cb4d501a5ed324d7aaf875916b5a192d789e9c3880dc7152c38c94408736f0cb5b6f7177395076d793f8c6413d36c7f7610c9e8748a395126fcc9f212034b74d5df11cbe5994794d7c6563ef812fdc0595ee61963d436916a433a6bf347475a5a81e8986138cea567e7f3cda95a9f043b2d676a9929d4a10a9c4fed30b0cc67ba941784b70105961a407d2b6e6dcb68165c4e9e501bf9ef7fd004006392d00297a239f5389d92cc23829afe776764f282f7f2ef444445602e9e543e8eb609b54ecf86557dac75238c920c4d4e514c7374bc24128a1415015f73bac034f0a8a65a10807157c9867f92689da93529caf807122ce4d1418f12e4f9c176952480babead47f350cd44465b7097ce6648f25d1390f0aea2c8de563f8f7354952c3d2eaebf0aa9f91d7ecf0853fa790c3550f77bd4cc4af29be28c58fa4cec10210a6c827844c3e96996407237a482e9e88c395ef389111edcc572266f4228c9de591103942822e51290ae23dbf262008c89e48324c4943681ae742a2de200374aaa4bc50d3e9b14b67e2811628fdf34bbde756c84bae1af26b8d24136a3a286fa5b44da598f046c1ba60f0eca16e8a0d6bf45c968e035180f476128f166c96746ca0f05c0340792fe7d5f3e30e39309e43c31797d0594284b0dd58a130737a41e43b1cb2aa43d73a2b24019dbaba08a6ba83d6e3a98e1c783747d44bd88f90df9d0350d38e86f7265616763c8d4dfb35199601d93eb8cda77f8c5bfc8189244d75c6436ec5ff50db377b729f035c36bc69128fda5596ea2cf630d68ac327ba4c309bb94d826cda7050a6a24b97ebdad5c0e54ffb4bd02c384cb1a92ce879c1dc63ea9ed33f42efe50293f21adc958dd6b71309aec57b030ac28bce7ed20fbd570983e9b7a3b372a3eef28b4b791f5d3a3ca205c8ff6b2254e07a424da55a2e2802fb3547e509f7af6ba8f9898749bb583bbb5a2c172f2d9a3ac115249350930e8311ac6b200416ee6b4ae481cbf0f24064a063d6d2ace31679f87fb8d1e1444d64bf6c69102bc952de22715083e75a46f865a0e1ac8f4596d9232111edc0f325a6e40e0a72fd07e595098ffdfbcff6071eb522c00282db4b8c59005b8076395bc07e82fa3e868384f9a8458cb1567e4904ad0215afeea0a23b5d72ae4b069b4146deb387d17b138284ef575055568a46ebc10cdc0bcf70f3618ef64e53014e22d16cd0247a70ecf08ca268a2a9ceee410235139dee297f6dda669cf95015f851b9920f0a59651ceae7c3010e1672d312667141267c52ed30ccb472200a3a117de0f4c99a153df1cbc8f7adcc85d3f8b6eb98da6de906e7b3f68e1fedac13e7a0e94be49cbe458056951d0ed45ac3595bacdb43f8b4637c21d5bdfdb2b1cf659ce5210137b083f84af8fb1ea8b6c53cf234cb77b8072b1e34e00245db9abc470ffb461b39d1e350f007ca1fc27077de5f2a037a8c0dd48e0c5ba798965a923462b81f1136107bb2b311703c1e94c1147d2ee8065353710b4462425985f03b985284216fac598728cbc63cfb3d6843bd55c51db25d15fde35ada693b3feff626174a4c948b5302e5c719d7bb839c5e3667b8e3460edd38185c8ce8aefa3bde1c64074593d99d4ef4a6e95d05a04586c25164497c54a13392032bbe4dc425c0bf03ae1fced39356c33de77ef01a1be50fd26330f0157a31763e7d6214864657a05c917a7c19a0c8fbfa57f8a8ec8339fa9eb3f2eaba17b14042d2538be0d4081a62ef9682f7bc27075b1450f966c20ef9a24efaea00a2e2d8d8c54b48c3f2d4ed4fed6a136cb1feca89edd98bcd25560482cb556222690f7d8bc11cfeb32313765160d66e9a9014b2e947403954975cd2a9031be5e3e303822cbb91391dffd91e893c8b41268f2cd3e966e3a2ed6d5a7290c825030c3b9f1e01fef74ed90e5b796439d328355a2dd378645a5726ffe60d44dc7d1c971e3e4e62202a334bf9c5ba06e64bed748560cd1204d2656050aa171111195b43c83de120046c0b50b6e0c8092017d15dcfb4b626e2731ea32aa017aac4aafbca93145a24bcddbd531b5a17e14f33556a866721f2e0e604ce5524a8a291b5085a332036c660e4e1f8f27b8ba420c2fd342f24ac2805e351a253a71a80d430cd0f4a9957d40f967103a0e37ceaa71894ff4e94aea1c07307de97eb8bc8d8c7c7fc63a9b2c117fdc737d10cf6fdcebfe21067e95602a8cff149768c7f232ca4cf130e0c4688a744f2eb140ce9c7da14539667db4e7b27da39efe33ccb4344a44348419d51b3ebaccf4d99b46a7dd6d35ee4ef8c9f15cc1ec9cf40dcaa9367a45f2609d82a3f1ffcf0b1b93448b553eda32d02c0e16fe26c38c80d1e42d8eefcaf40f590b52f545e58559bf90cab4270b5b4caf109b76cff99639464369d26e274e74ba31f80801da30ea950c751e759365edd88eb740c786149a151c1d0d4853232a2aeb3bedb8fe0309c6198bff8358e95a937d720237695377fb4ccefed9d279e77b137c7e653a7776302aac890a30450660dd74f430fb08cf8b0c5d02ba72e1f30b4d32c03e4f94e2648482d4354d178c55fa41ac9b0da4a61cb9bbae0b97a09d1a82c285624a0c55190ef5eb9bfac7b4a15676ae9a0bbc4fa1dbf38c2c424f68940a413b6709e2cc4d07cb8ad580105471c173f9d6779f4939e3725c348f5b7e46d185032cac1ecd2c73e0b69c64eef4accc1717f5951880e9bed5bd139d1862084edacf11b8a38a12b977f6420132e6dd97a2c03074bb5b00e89c4c0558ce143e8f2f8bebbd897cf1dc870705f17cf151f2b73dad744a2e4a695a3cf03e0448d2beb0b9e4fc46b1f5b58a81cb209c7a36fb0b88130e030eab382a9c9537956d38a67db8c2ec74c2847cdfd07befaf7532de82a4b0506d2278aad6f739c6da764b032942cf062dbe700a215137101a47662a7b41218a35e72cefad9d24bbf1498fc2604ffbba9ccb5fd7fcc8dedfd993e8dd0321ba7d7046c7c11c39f76bee704a1e977015ab45cb866f8564157c3639b27e27486be4f260850a95580754474aef9dd2f3d54af5af19a8c05d5b5696da13a6fb1202414386951ea6ab038e94cfb915578b672346594f863c76024d039517f0015772b0b6d657c6edc23a76854bbcf8d55d8d244d57a1a7c60982f3a7c7de30ecf17788b297479b13014cf8521a73f5e3b70db990de72d5be9816220f3057e8bdd67d717d17952343794bbf30f58588f1516d9967c29e75ec52a8f084457dd41c4cb25926bb05ee4f4df8ca636aa62ae6847fe03a022fedc94c8b9eb4b2040343f0c8e4a042da8d1769a55b3b4533a118343f2594fb01b7ee30f60e1584c702c498b94e3298182ed6d69a58c655a6645c695b32f4a071744b26693d714f4ebe12c86b1e7bd1d7e4713fd6f76f4186e43f659800c757e507decaa51fe09c44304a6d0079f11269d457cbf4fbf4b15cd62c5e5d0f965c948b0a41a5ca4335252fc4f1962472e834421268b851b598a0592b6861547c03de2251c2434acbf70d30f2acd42c6d873a1303fb99dd72ed986434189d9656de0a2752b0653becffe68a0cd84c26397a9d4892d2362f85187f32b7ce8f20fb8fd00d19867a7da60d8d284921c529f568ab3bc1f1aa7605c2d4ad5f080a3cd518988df5543e75bbb55c5e6893f8c90e846c892ab98b8fe78671b4bd28ed0e9596f8650ee38a41d571403f292c4343333f332b5383688b7c4e2a44bb87852d11b615f7ff52c549cdf83329080cb9c9556c4b486b84ed44b3bd527700e2ce99dcebdbf836a950f13ed56c022560f0cde8f34692a403859669705fa58045279d4550e9669c35abce8fdc8f60f7e7dbcd565e1eb1c401ac943b8d53bc9fd99ddceff958baa628e4ef8b6817c7a1974c54b5020e747a59178a95ba95df23c7f7cadb862ffb705e512fb8859494763759e11cebfdb1d3553efa0aa6153d1674fc927f8900d9bf952039c49d08808a297f45f75256bed054fd00c963066285d6461380960f724443e5523ee3f3c19ed790bcd41cb3ab8e424c918f2faa4015754c89a8815a2b2241dc9ac03e6e2e8b3a996a262bb93cde5aa3ba375bfa329096c5ab05d2b4207efc73ecd1f92247916ee0abe916a56444f71c28b374231aad87ecf4cc85591495f623a1f6b8c09668c9c66edbb779f262db058c3671778437658684c9e9ab34c39b129b1b3072233e3a9459355d7fc03c368e71243640ebc9531acf6ec7d26ad72e3f1ee3894c66850bf818adc7decafa7d1f5430114d562d3a9813ab9a0aec3e2078f827daebdf4d2341e8dc455b87c6655a45e1155cc1f3d346f03eb17608f27820822f2fd5d92fac986f7bb3cb124277e7d6d265f634e8eb7dfb49d675a780139fc8f7d693f80f5a02b49abba9136dde215740d74727d93b6de69bdf44055bf47d399075b9b718619c860346caedfd587062b3407025fd1a5b94f9f739d2c259d749c7c484445456c0bb13b00d7612297278afa6a6824f9babb6c381a49bb9836cd8dd0fd38cada551fb78380f84ce20860b28676d7dbe55d85c05d41c88d5ec1ddafd77b1a0b07aa8b9c4fc15ffb82c268ee945742eaac367a5104b547e1202805c6a585f49f8831c703bb9103defc472f2db35004d4853a4d50388bf14734a6e5d2a9d1473b71e078007f12dafefc4b7e26886806c2475c08639c6acf8bd7133e922707554a8cea19c4e5c623a0a9f0d5b0f82ec75b3cc898868d36d723a2667723ee92d98cc353f33fe574aef00989e34838cb6b6bf0625de3bcab61a71bf0ed9ddd46bbe5e331c8ad19990185a9aee87dfa6b2d02b15f41b0f031f89821e923500bbc1fb4e7c6052e750b50927bf59a0accd270a1a9a694051232352baf77bb15ca267455adf577fd3772d32de0614fb07884fe802fa2ffa7dd26332c6abbb474a9696f9b858bffe88be10fbe279a75436f8aa41377626ad8c781c94fb2b18f8880c8c069c8b6f51bcb6b098762f2b33d18d720cd1e577e9f595cea534126669aa9ccc68160fc2808c7d7b22ef78d7a5cfa1214bd83da3d16ab225f14a025fd213dbaabea6b9cff6e3b986e82f4be3581f625c3fa7c39e0f6421c63a6949bdf0e45ce97181abe4364f479d67ef597b97848b3f5bd26448eace084488107990c50f6f6c04da01ef012496517c80cc05efee39965e92a4235a3c48a183917b1c1db7b57fe17dc4846fcfdb1661016af4659af6f0aae6cc78aa295cf7361dc688517740c637651d4e03fbfb369030db4fbb88a3ca4180c7c6f35e187c88275b3fa571c13f68499e81324047c0618a360d6e88babc931313ecb9f6c191d254bac36f19ba3cfe98f731395e9aef2fbd6ea4c89e2e8fdca1474132d36052691be2070943a41a20b222e0f021041a9dc6bb1e8ed117198bbeef6cc754a905510f0c53d41c8042d2c680f767cd80b2dd1d71904818880955810e5ee042373799ebafa84db07eac54c3c433dac9755fb5ffdb3b9926e5aa32c52580e8bf0f5b10b25eb7a53498fef679dae54fdbfbb7334dc75cf94c8fdb90799b8728c7d08e0feeb3b6275f648d3e2d334172b79f82ab239ed62ca0a42b32ae064ced423d4d508868dc334ec78fbcdf25ff7601734bf8cebbfa0bde2df6863e8afc8acdb116a8503eb52c90f46228749d51978cef30d72216e31f4b24916b7e3eb9903660d0427f1d6c0d2a49b50a107466d309abcab892ae5b6f3c40c556990238835c82eda926391f016a0574e9bcf9c614aa0093306f2fde0e91928c1c1be11c5ec38436e048810268256710d2e37deef48664a5e8cab6618accc7c27949ec2e83e0ea14ad0936691855a58ea6e0f05f1b96f2d0adc816e279db238b7d393bad2970971a93c86644e635f24ec04187a60d653a314b898903874656e3d7341cab500201ed0136ac9a6fd4f74d824a48926ae14eb9bd5ad20cd58abba43502cc43a5937ed9ecf4e18ebb888a16acde923c9b34e0a53daa03ff60bf8d2262202810cd7f45fc5c725f810a7b4a31d1872d8b20201f2e9674552ea4662652f4cd98f88edf2d72c1523f349bd5ca060e2f02ae896c4cc1d1ad748207041af39cd7881e8f3001e2e87e1a00d2b003782a74e805337e92121e8575f4a8a53546f4b082ec252c2689ba8bafd44fcfd1fbd6bb9c135da683e6c11755ef8b23e1fb24e5d037e4b61837faa28d257a4508c55b717b258d1ecf19d11caefe0747e48130ed2123337ce95ceb90cf1f251df5433d9f1a2bcf2e8a34e04ee6f515fe4f7d0cafae4efab76b8b4058dd5e20088829a9572b8379d0b5df0a73c6f5b3f7de4ccf90a929d4a219e7a46d021fbc54361067fa35a60c1bf233d9c8307ab5a032bcdbd25e7afcaa90f1579b62a834f9be849c3c0678ecc937794924ce58ce9956dbab6c0e5653f1af2e1d4a2a7d8d09f46580270f0aaf2d62d99560296bd43f01fdb4147cf0f0c6b99d4a3a89a7d0cf94d6d3c2d7ff20027bfab0a37926de00a789b6b47072d3e5943a625d3ba2859c075dbb92021a78145dfeacd06fcf2073613d7914752d4abd76c665df836319d4d9ec0b994ca4418f81d1c9a9fdfd62bb0a5f5e5da9fe820f0b79400a3cb0690cbbcd3e2ab436cd330f19cc1b6fddb0b8a9125e1ebc78ee53656b7c62514e1a7d0f2161899da2d55f5c5355f7b9672be7cb02729686af6364e462e941dcdf4b5985852cc0f0c4c0c772c7afba507cfbe0dfb449a2a75e17a33586fc3f0d17b0a7eff3fe62796be036dbdb7ae19feaef8bdc95b8b8e8567aedb639aff6be3d2dc5e7d825f4ff7938a2aa6d89ef56000749ad2a674c6ab59d2d064ece76eee4f45e55addb46511725d16bf7484e39ea665ef1f6f6fbd2a47e65fed86c0f2483a129327810e3409192f2142bafb88be009abeffb2b538a90f9a6871e51eb040aa4ea7a6f6c7cc2fe99967f4873d9628a6833c875c393b7dbd442726950e4a9d0ad653334d44662dd7d152229feb6ffe4559e53b07ec016d963f4bccaa57bf0bfad82b380cdfb321a1f72392782d251dc72fc78340731c18258ed9656f5e31d33ac33ac2673edbb14cd337eb67f9840e3272fdbb5724ee32340a9235d587eda7699f1231d5464ce768da1d816d5e3342315ff25fba3acb173234bc21c335840bff278b486ede43c62262fcdc1ac76ec72340b11b669ce1dd31b52894fda8c0f13543e5915249df376d09061df16fef1a485271b31803ac14ec1b5c2c392aaf76ee325e38e33fc73be6eb6df48fc3b68f31df805dde51f3a938242213275d93519e9fd106f233a5e3abe5c7f1c7f7a56d949a5e82e84e86cb3c45333ca82fd813259fd099b379a92d7de503c230cca0b88d154efe9e844b836c3125085863a5984805cfc0e4381da8feec0f2689b144a10330fbf2c9442287dd795389f0605366bb14be883cd53d50212d9be60fff3e07feeb7930b831dec3e23d8acbec1bb48aaf0e3fd19df2785b15650c2ef79c75c8b2e4303823c11dcbdcaf20d557827324fa025218685414e86d37f9e1814ecc06ba7bd7a271c7493a0c60b92b703885637cbba903e765993dd9b8e1939092a080af334f2a3b8ccfc0a1a05165e1f2316a14b741b1993f9a6a1859d903ca53294e6fac0ba9c471b52eeac25ef8f3ebb7895b804d12ad1e49972362cafaa21cbd93d62972778bc8deffc68c4ab4d936d5e4b389f53c375d6009184304a7b18bce7e8914bf300970a3f113ddc28a932314dadb203cdffcd28d54b29d73dff3e111a623070582862ce11d43675df4353a01eeffbad7f2ca85740c11357deac7968909f9e7ac0ac17852faa4484420f44a9c48de521eb6752e6fb69534602ab75c1a09d4843947bd9f601e8a5131a676b69860a0de2c3d17d6e2bfc2f04198f28ca03a44b185929b846c4a7746ad594fb31206c9f54e4ee15d88861d345c2124f436c7e66a670038d5a7cd486beec71b8e4a0a2fb17514607864389acf21ceb4153462ca0716fbec5456dc9ec47bac395e5f1875eae46a880837e791e7ae69b052b2dada0cabb3af9efb8b5c4bf7b8a3631df2e7cbcad4c15af04bf8ccaa4c24c8412e37253d1d4fd3624c24646f3dd260f2bcb0d75d927fd0bc8aec71c2524e49a246ba5b7e0b21f07bc588e4a09b2d9732a046041df7b63c009d030b5925ebdaa7a6894e3db0315150b0514472161a9fb9bea9ca816f847a95c0dfa81a74fd9503195e2d40bd4ac0b1dbe7ca4cb88e5ce4521fa4552d7fcb486efa8977cb67cb579b91acc0e5813a5eb039168a420945e35b5ef339c267c8e48d68133cad588dcb10f24325f680b0117ac39800483cd97ed5c6163bf502a120bd32449ae6539156fcfe5ff998d57e4430e7bb948951274a3e751c2f8f40014cb41488b60ceb055519945d8d6631c14234484b131e9245c62f968310831948dcc5443def985b53e3cd3636e5f651811ba1fc5a328c4e662255d588d6d65cda3d8a95fd783980fbbf5258bc811204250f975d3b7ab64e05d30dc6f77e1b297b87af2843df42b7eb3b18d9b88b99b0952bc7194dc0325cc1cf5b208e8a750da15a790355ec3391e91e32d3590a9ad0286bb9aea222ada8127fde398b0d4d8fd81574695b9a3099a00317691526eb4a60e88bc6587dbcf569aa4756699f9b7b05467ff5a70141e8825fed42fb0e0b3ab", 0x2000, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2m17.338299733s ago: executing program 3 (id=1652):
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x800)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000002d40)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
write$FUSE_CREATE_OPEN(r2, &(0x7f0000000280)={0xa0, 0x0, 0x0, {{0x0, 0x1, 0x5, 0x6, 0xffc, 0x6, {0x1, 0x1, 0x65cd, 0x0, 0xffffffffffff15ef, 0x3ff, 0x7, 0x7fff, 0x7, 0x2000, 0x8, 0x0, 0x0, 0x2, 0x10000}}}}, 0xa0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x80, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
chmod(&(0x7f00000006c0)='./file0\x00', 0x2)

2m17.230542439s ago: executing program 3 (id=1657):
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x4000, &(0x7f0000000480), 0x1, 0x3d0, &(0x7f00000004c0)="$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")
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./bus\x00', 0x0, 0x63d017, 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = dup(r2)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x11, 0x0, 0x0)

2m16.54802315s ago: executing program 3 (id=1660):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000000040)=0x9, 0x4)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x110a, 0x2})
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000024c0)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x2, 0x100000000000000, &(0x7f0000000540)="8099"})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0x0, 0x0, 0x0})

2m14.788968184s ago: executing program 3 (id=1669):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00'})
r2 = socket(0x840000000002, 0x3, 0xff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5)
connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000540)={0x2, 0x4e60, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10)
sendmmsg$inet(r2, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94)

2m14.5131538s ago: executing program 35 (id=1669):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00'})
r2 = socket(0x840000000002, 0x3, 0xff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5)
connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000540)={0x2, 0x4e60, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10)
sendmmsg$inet(r2, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94)

1m47.877555906s ago: executing program 6 (id=1792):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000280)="f1", 0x1)
sendfile(0xffffffffffffffff, r0, 0x0, 0x40001)
sendfile(0xffffffffffffffff, r1, 0x0, 0x7ffff000)

1m46.764642182s ago: executing program 6 (id=1803):
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a40), 0x2, 0x0)
write$UHID_INPUT(r0, 0x0, 0x0)

1m46.558324444s ago: executing program 6 (id=1805):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000007000000040000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_emit_ethernet(0x0, 0x0, 0x0)
clock_nanosleep(0xfffffff2, 0x225c17d03, &(0x7f0000000400)={0x0, 0x989680}, 0x0)
r3 = socket$inet_icmp(0x2, 0x2, 0x1)
sendmmsg$inet(r3, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc8804)
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10)
syz_open_procfs(0x0, &(0x7f0000000300)='net/icmp\x00')
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setownex(r4, 0xf, &(0x7f0000000140)={0x2})
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x31)
r5 = socket$inet6_icmp(0xa, 0x2, 0x3a)
bind$inet6(r5, &(0x7f0000000240)={0xa, 0x4e23, 0x1000, @empty}, 0x1c)

1m45.702653205s ago: executing program 6 (id=1814):
syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$eJzs3V1oXOl5B/DnnSOtRto00WYTb9Jm04GUxCi18VdsBZcgZxW1AccbIit0r6LRh51h5ZGR5MabtkFtSQu9Cd2b0psimi4t5KJX3V5WabaQUAol5CK9KAiaLHvRC10ECi0bhXPmHWlky7ayXlvS7u+3zP7PnHnO+P0YnzkCvzoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAER89nOXTp1OB90KAOBxujL5pVNnff8DwLvKVT//AwAAAAAAAAAAAADAYZeiiGORYujVzTRdPe+oX261b92eGp/Y+7DBFClqUVT15aN++szZc586f2G0m/c//u324Xh+8uqlxnOLN24uzS8vz881ptqt2cW5+X2/w8Mef6eRagAaN168NXft2nLjzMmzu16+Pfz6wJPHhi9eOHF+tFs7NT4xMdlT09f/lv/0u9xrhccTUUQzUrw5/EZqRkQtHn4sHvDZedQGq06MVJ2YGp+oOrLQarZXyhdTLVfVIho9B411x+gxzMVDGYtYLZtfNnik7N7kzeZSc2ZhvvHF5tJKa6W12E61TmvL/jSiFqMpYi0iNgbufrv+KOKjkeLlU5tpJiKK7jh8sloY/OD21B5BH/ehbGejP2KtdgTm7BAbiCKuRIqfvXY8Zssxy4/4eMQXynw14pUyPxORyg/GuYif7vE54mjqiyL+PVIsps00V50PuueVy19ufL59bbGntnteOfLfD4/TIT831aOImeqMv5ne+sUOAAAAAAAAAAAAAAAAAG+3wSji25HiT579vWpdcVTr0t93cfQ9L/x275rxZx7wPmXtyYhYre1vTW5/XjqcauV/j6Bj7Es9ivhGXv/3RwfdGAAAAAAAAAAAAAAAAAAAgHe1Il6IFF85cTytRe89xVvt642rzZmFzl1hu/f+7d4zfWtra6uROjmWczrnas61nOs5N3JGLR+fcyzndM7VnGs513Nu5IwiH59zLOd0ztWcaznXc27kjL58fM6xnNM5V3Ou5VzPuZEzDsm9ewEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3klqUcTPI8W3vraZIkXEWMR0dHJ94KBbBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACU6qmIk5Fi/YV69XytFnE1In6+tbXVfUTEZpkP66D7CgAAAAAAAAAAAAAAAAAAAIdWKuJjkeLp/9tMjYi4Pfz6wJPHhi9eOHF+tIgiUlnSW//85NVLjecWb9xcml9enp9rTLVbs4tz8/v94+qXW+1bt6fGJx5JZx5o8BG3f7D+3OLNl5Za17+6sufrQ/VLM8srS83ZvV+OwahFTPfuGakaPDU+UTV6odVsV4em2j0aWIsY229nAAAAAAAAAAAAAAAAAAAAODSGUhGfixQ/+a9zqbtuvK+z5v9XOs+K7dpX/mDndwEs3JFdvb8/YD/bab8NHakW3jemxicmJnt29/XfXVq2KaUinokUn3j5Q9V6+BRDe66NL+veW9bdOJfrhn+trFvdVVUfmRqfaFxZbJ+4tLCwONtcac4szDcmbzZn9/2LAwAAAAAAAAAAAAAAAAAAAOA+hlIRP4oU//P3/5G6953P6//7Os961v//VrWEvlJPu3Nbtbb/vdXa/s72+y6ODn302XvtfxTr/8s2pVTENyPF2R99qLqffnf9//QdtWXdn0WKN579SK6rPVHWNbvd6bzjtdbC/Kmy9q8jxa+/2a2NqvZ6rn16p/Z0WTsYKf5yc3ftV3PtB3Zqz5S1xyPF9/5779oP7tSeLWt/Ein+6e8a3dqhsvb3c+2xndqTs4sLcw8a1nL+vxMp/vbK76Run+85/z2//2H1jtx215zff/vtmv/hnn2reV7/NM9/8wHzfz5SfKf+kVzXGfuZ/PpT1f935v8TkeI//2137bVc+/6d2tP77dZBK+f/25Hiu3/14+0+5/nPI7szQ73z/6t9u3P7U3JA8/9Uz77h3K7ZX3Is3o2WX/r6i82FhfklGzZs2NjeOOgzE49D+f3/55Hi/48VqXsdk7//39N5tnP997/f2Pn+v3hHbjug7//39+y7mK9a+vsi6is3bvY/E1FffunrJ1o3mtfnr8+3z5w+9elPnz996vT5/ie6F3c7W/seu3eCcv5/ECl++A8/3P45Zvf1397X/0N35LYDmv+ne/u067pm30PxrlTO/99Eiqc+++Ptnzfvd/3f/fn/+Md25/bfvwOa/w/07BvO7Wr9kmMBAAAAAAAAAABwlAylIv4iUvzuH/9m6q4h2s+//5u7I7cd0L//Otazb+4xrWvY9yADABwi5fXfByPFP299f3st9+7rv/iNbm3v9d+9HIb7/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFGXoog/jBRDr26m9YHyeUf9cqt96/bU+MTehw2mSFGLoqovH/XTZ86e+9T5C6PdvP/xb7cPx/OTVy81nlu8cXNpfnl5fq4x1W7NLs7N7/sdHvb4O41UA9C48eKtuWvXlhtnTp7d9fLt4dcHnjw2fPHCifOj3dqp8YmJyZ6avv63/KffJd1j/xNRxPcjxZvDb6TvDkTU4uHH4gGfnUdtsOrESNWJqfGJqiMLrWZ7pXwx1XJVLaLRc9BYd4wew1w8lLGI1bL5ZYNHyu5N3mwuNWcW5htfbC6ttFZai+1U67S27E8jajGaItYiYmPg7rfrjyK+GSlePrWZ/mUgouiOwyevTH7p1NkHt6f2CPq4D2U7G/0Ra7UjMGeH2EAU8Y+R4mevHY/vDUT0RecRH4/4QpmvRrxS5mciUvnBOBfx0z0+RxxNfVHEuUixmDbTawPl+aB7Xrn85cbn29cWe2q755Uj//3wOB3yc1M9ivhBdcbfTP/q7zUAAAAAAAAAAAAAAADAIVLEWqT4yonjqVofvL2muNW+3rjanFnoLOvrrv3rrpne2traaqROjuWczrmacy3nes6NnFHLx+ccyzmdczXnWs71nBs5o8jH5xzLOZ1zNedazvWcGzmjLx+fcyzndM7VnGs513Nu5IxDsnYPAAAAAAAAAAAAAAAAAAB4Z6lFUd3F/Vtf20xbA537S09HJ9fdD/Qd7xcBAAD//0kCdPc=")
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00')
read$FUSE(r0, &(0x7f00000045c0)={0x2020}, 0x2020)

1m45.033054365s ago: executing program 6 (id=1816):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0})
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0)
syz_kvm_add_vcpu$x86(0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x5, 0x1000000, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24000080)
r1 = socket$inet(0x2, 0x3, 0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000005fc0)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x20000)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
getpriority(0x1, 0x0)

1m43.966389608s ago: executing program 6 (id=1825):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000007000000040000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_emit_ethernet(0x0, 0x0, 0x0)
clock_nanosleep(0xfffffff2, 0x225c17d03, &(0x7f0000000400)={0x0, 0x989680}, 0x0)
r3 = socket$inet_icmp(0x2, 0x2, 0x1)
sendmmsg$inet(r3, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc8804)
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10)
syz_open_procfs(0x0, &(0x7f0000000300)='net/icmp\x00')
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setownex(r4, 0xf, &(0x7f0000000140)={0x2})
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x31)
r5 = socket$inet6_icmp(0xa, 0x2, 0x3a)
bind$inet6(r5, &(0x7f0000000240)={0xa, 0x4e23, 0x1000, @empty}, 0x1c)

1m43.858038104s ago: executing program 36 (id=1825):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000007000000040000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_emit_ethernet(0x0, 0x0, 0x0)
clock_nanosleep(0xfffffff2, 0x225c17d03, &(0x7f0000000400)={0x0, 0x989680}, 0x0)
r3 = socket$inet_icmp(0x2, 0x2, 0x1)
sendmmsg$inet(r3, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc8804)
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10)
syz_open_procfs(0x0, &(0x7f0000000300)='net/icmp\x00')
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setownex(r4, 0xf, &(0x7f0000000140)={0x2})
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x31)
r5 = socket$inet6_icmp(0xa, 0x2, 0x3a)
bind$inet6(r5, &(0x7f0000000240)={0xa, 0x4e23, 0x1000, @empty}, 0x1c)

7.650594597s ago: executing program 5 (id=2451):
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

7.581777851s ago: executing program 5 (id=2452):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
ptrace$setregset(0x4205, r0, 0x200, &(0x7f0000000100)={0x0})
r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
r4 = fsmount(r3, 0x0, 0x0)
r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5)
write$cgroup_subtree(r5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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")
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0)
setreuid(0xee01, 0xee01)
ioctl$EXT4_IOC_MIGRATE(r6, 0x6609)
syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0)
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f00000035c0)={{0x2, 0x4e21, @broadcast}, {0x0, @broadcast}, 0x22, {0x2, 0x0, @empty}, 'veth0_to_team\x00'})

7.472890928s ago: executing program 7 (id=2454):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, 0x0)
sched_getaffinity(r0, 0x8, &(0x7f0000000080))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_emit_ethernet(0x52, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x62001, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_freeze_timeout', 0x202, 0x2)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
fcntl$setstatus(r3, 0x4, 0x40800)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events.local\x00', 0x275a, 0x0)
ftruncate(r4, 0x2000009)
sendfile(r3, r4, 0x0, 0x7ffff004)

6.864207623s ago: executing program 8 (id=2456):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000070000000400000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
clock_nanosleep(0xfffffff2, 0x225c17d03, 0x0, 0x0)
r3 = socket$inet_icmp(0x2, 0x2, 0x1)
sendmmsg$inet(r3, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc8804)
r4 = socket$inet_icmp(0x2, 0x2, 0x1)
bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
fcntl$setownex(r6, 0xf, &(0x7f0000000140)={0x2})
sendmmsg$unix(r5, 0x0, 0x0, 0x40015)
r7 = open(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x0)
write$cgroup_subtree(r7, 0x0, 0x31)
bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e23, 0x1000, @empty}, 0x1c)
pread64(0xffffffffffffffff, &(0x7f0000000940)=""/239, 0xef, 0x8)
syz_read_part_table(0x5a7, &(0x7f00000005c0)="$eJzs071LZFcYB+D3XlZmm43LsrDFEljIsNVkF0yxW8wUi8wO06wSErGwDljEQrCwkBlGaz/+AcUvEBuxn1KcgEQyNpEpg3VAsbG6QbxCkGnyZTB5nubCe973nnP43Rs8aGn8mmVZEhFZ4Y9Pf7tb/Vh/Nfrh628ikpiIiM9+qv98vZLkHbdv3Y/k0e8n64Wh7vrR8EVkWXbSKW6meb2dRjQj4vtftgb/4tX4H9irHA7OL0zXFmcrk6e1uWaWRPXlUnVq5d1GuTH2ojyef1jttN900vyb9z8rdt9vH2cj56tP3gx0ulePb/tKtz9E9D0ID9Td/Neet3qtq0+vd2belp71DhrLee6Xyb99UgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4L9ur3I4OL8wXVucrUye1ubOvvruy+rLperUyruNcmPsRXk8velrp/ezf7H7fvs4GzlfffJmoBPp0A95XynpM7z26J85FPfmbv5rz1u91tWn1zszb0vPegeN5Tz3y375AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0Uf1YfzX64fPHEUlMRMRw+nTrup4VbtaTvG8/f47k9XphqLt+NHyx+/THL046xc3RvN5OI5oRMXDvN+HP+C0AAP//Zq2Fog==")

6.098853299s ago: executing program 5 (id=2460):
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@bsdgroups}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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")
chdir(&(0x7f0000000240)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x60840, 0x8)
io_setup(0x5, &(0x7f0000000200)=<r0=>0x0)
r1 = inotify_init()
inotify_add_watch(r1, &(0x7f0000000340)='.\x00', 0x300)
io_submit(r0, 0x0, &(0x7f0000000440))

5.882229692s ago: executing program 8 (id=2461):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0)
write(r2, &(0x7f0000000280)="f1", 0x1)
sendfile(r2, r0, 0x0, 0x40001)
sendfile(r2, r1, 0x0, 0x7ffff000)

5.767478308s ago: executing program 7 (id=2462):
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

5.40408087s ago: executing program 7 (id=2464):
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES16=0x0, @ANYRES16, @ANYRES8], 0x1, 0x36e, &(0x7f0000000c00)="$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")
r0 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0)
io_setup(0x7d, &(0x7f0000000600)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000)="96", 0x1, 0x2200, 0x0, 0x0, r0}])

5.135120536s ago: executing program 7 (id=2465):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x20, 0xa, 0x7, {0x7, 0xf, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000380)={0x40, 0xd}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0xf7}, &(0x7f0000000540)={0x20, 0x1, 0xe, "dd648a1ff11c78b0c93a071b21fd"}, 0x0})
ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f0000000080)={0xff, "66226d0245e874547b346cea45be9847576b5e1d1a96d134064b8df59702c4e6d04adada32c1e452f3323a2d14fffb991bbdc89e43d2c86ff455ae7ae6300cc1"})

4.545735651s ago: executing program 5 (id=2466):
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x4000, &(0x7f0000000480), 0x1, 0x3d0, &(0x7f00000004c0)="$eJzs3M1uG0UcAPD/br5I+mEjcUCFgyUQBAFxHQhQhEThyscFeAArSUuF21SNkWjJoSBOnDggbhz6Ahx4gKpCSEi8Ai+AKlUozQFuQWvvOm4cp7Fix2r6+0mjndkdZ/bv3axm1rsTwGOrEhHnI2IiIhYjopSvT/MUN9spq3d/c2N5a3NjOYnt7U/+SSLJ1xV/K8mXJ/LCfBqRfhfxzM3edtev3/ii3misXsvL1eblq9X16zdevXS5fnH14uqV2pvnarWlxbdqrw8t1p+ef+ncxPvnz/z8V+nO0vT0bLa/J/Nt3XEMSyUqne9kt6VhNzZm0+PeAQAADiTN+/6Trf5/KSZaubZSVDfGunMAAADAUGy/my8BAACAYywx9gcAAIBjrngO4P7mxnKRxvg4wpG7915ElHfebd7qxD8ZT+R1pkb4fmslIq6+kJSyFCN6DxkAoNudrP9zdq/+XxpPd9WbiWj1h2aH3H5lV7m3/5PeHXKTD8j6f+9ExFZP/y8tqpQn8tKpVldxKrlwqbF6NiJOR8R8TM1k5do+bXzw7y8f99uWxf97cup0kbL2s+VOjfTu5MyDn1mpN+uHibnbvW8izkzuFX/S6f8mETF3iDYmvr71dr9tD49/tLZvRby45/Hfmbkn2X9+omrrfKgWZ0Wv/7799aN+7Y87/uz4z+0ffznpnq9pffA2bn/+57P9tnWPfwY5/6eTT1v5Ylz2Vb3ZvFaLmE4+7F2/uPPZolzUz+Kff27v///i+pfkc1qdzK8Bg/r+h99eOUj8WcraL8aCRyGLf2Wg4z945o3bf3zWr/2Hx58d//YcYPP5moNc/w66g4f57gAAAOBRkbbuayTpQiefpgsL7fsdT8Vc2lhbb758Ye3LKyvt+x/lmEqLO12lrvuhtfbP6J3y4q7yaxHxZET8WJptlReW1xor4w4eAAAAHhMn+oz/M38f2VMIAAAAwMiVx70DAAAAwMgZ/wMAAMCxdph5/WRkZI5rZtxXJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEfb/wEAAP//Wt22ag==")
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./bus\x00', 0x0, 0x63d017, 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r1, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = dup(r3)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, 0x0)

4.521359002s ago: executing program 8 (id=2467):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[0xffffffffffffffff]}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000480)={0x1, &(0x7f0000000440)=[{0x6, 0x1c, 0x2, 0xfffffff7}]})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r4, 0x0, 0x0, 0x10040, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14)

4.270578097s ago: executing program 8 (id=2469):
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000000))
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendmsg$alg(r4, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008a40)="7c72bf03f7d9c0fd0826786ffcfb99e55c1272594d5be5c7f1de9562bbf652", 0x1f}, {&(0x7f0000008c80)="9d", 0x7fffefe1}], 0x2}, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
socket(0x10, 0x3, 0x9)
sendmsg$key(r5, &(0x7f0000001340)={0x0, 0x3, 0x0}, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000c00)=ANY=[], 0x1, 0x6e5, &(0x7f0000000680)="$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")

4.254381328s ago: executing program 4 (id=2470):
write$sndseq(0xffffffffffffffff, &(0x7f0000000040)=[{0x8, 0xbf, 0x1, 0x5, @tick=0x7f, {0x3, 0x3}, {0x1}, @time=@time={0x9, 0x9}}, {0x5, 0x6, 0x2, 0x7f, @tick=0x6, {0x7, 0x5b}, {0x9, 0x9}, @queue={0x0, {0x3, 0xce9d}}}], 0x38)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x13, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)
setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000080)=0x6, 0x4)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

4.186487242s ago: executing program 5 (id=2471):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000070000000400000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
clock_nanosleep(0xfffffff2, 0x225c17d03, &(0x7f0000000400)={0x0, 0x989680}, 0x0)
r3 = socket$inet_icmp(0x2, 0x2, 0x1)
sendmmsg$inet(r3, 0x0, 0x0, 0xc8804)
r4 = socket$inet_icmp(0x2, 0x2, 0x1)
bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
fcntl$setownex(r6, 0xf, &(0x7f0000000140)={0x2})
sendmmsg$unix(r5, 0x0, 0x0, 0x40015)
r7 = open(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x0)
write$cgroup_subtree(r7, 0x0, 0x31)
bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e23, 0x1000, @empty}, 0x1c)
pread64(0xffffffffffffffff, &(0x7f0000000940)=""/239, 0xef, 0x8)
syz_read_part_table(0x5a7, &(0x7f00000005c0)="$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")

3.972865485s ago: executing program 4 (id=2472):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40c4}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r0=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r0, {0xffff, 0xffe0}, {0xd, 0x10}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x18, 0x2, [@TCA_FLOW_EMATCHES={0x14, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xa}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)={0x24, 0x11, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x14, 0x0, 0x0, 0x0, [@typed={0xd, 0x0, 0x0, 0x0, @binary="56ccabd869c2033840"}]}]}, 0x24}], 0x1, 0x0, 0x0, 0xc010}, 0x40080)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x188}}], 0x1, 0x810)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

3.356629801s ago: executing program 8 (id=2473):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
msgrcv(0x0, 0x0, 0x0, 0x0, 0xa1e3a9fe3eb9c551)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x1fd, 0x0, 0xdddd1000, 0x1000, &(0x7f0000394000/0x1000)=nil})
userfaultfd(0x80001)
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f)
r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
read$dsp(r2, &(0x7f00000002c0)=""/4096, 0x1000)
write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb628678", 0x1e)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)

3.356402182s ago: executing program 5 (id=2474):
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3.165537342s ago: executing program 37 (id=2474):
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2.289788324s ago: executing program 4 (id=2477):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT, @ANYRESHEX, @ANYRESHEX, @ANYBLOB="9cf9ad258963981511d9de699a75f5d71cb604eabc48fd892b4dc3737520bd5bda32268404ab99a848bf77fb6a5725f795bbb1f2dfdf284e7f82f6668ecefa6a85a7cc434bd34e91014dabf203309be1bf6999d8f59d0dd567ecf9a87c680dd467a682cb262e4d90b57237e3cdf84c85df4749a4ef6a67dc6556b6ff4ae8f5026f865e4075efa250a02a670d48851a6cf97522e52300c7ef213ef50de6979ee12e2ecb9f5068e3e68e8d06c5ad68570a9e9e1fec5bcfedf4b7f56b0fa96f8b4cdb9f5178efb59d90367e10da96bd6b57ac82f23fd4d18692fe381bc4f2cc390a5056cccee185b77089246101c0647c3486055342dd36"], 0x1, 0x2c2, &(0x7f0000000ac0)="$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")
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000200)='./file0/file0\x00', 0x812488, 0x0, 0xff, 0x0, &(0x7f00000007c0))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_pidfd_open(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
ptrace$getenv(0x4201, 0x0, 0x8000000000000000, &(0x7f00000004c0))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r2, 0x0, 0x7, 0x0)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4(r3, 0x0, 0x40000000, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x2c0, 0x60, 0xd0e0000, 0x2c0, 0x100, 0x390, 0x1d8, 0x1d8, 0x390, 0x1d8, 0x7fffffe, 0x0, {[{{@uncond, 0xee02, 0x2a0, 0x2c0, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{0x3, 0x77, 0x7, 0x2}, {0x6, 0x5d, 0x8, 0xf}, {0x0, 0x7, 0x4, 0x5}, {0x200, 0x10, 0x4, 0x401}, {0x2, 0x7, 0x9, 0x7}, {0x8, 0x2, 0x40, 0x80}, {0x7, 0x10, 0x4, 0xc27e}, {0x0, 0x8, 0x1, 0x9}, {0xa66, 0xf9, 0x2, 0x40}, {0xf207, 0x18, 0x1, 0x6}, {0x2, 0x8, 0x6, 0xb6}, {0x0, 0x5, 0x5, 0x4}, {0x9, 0x7f, 0x5, 0x2}, {0x5, 0x2, 0xf, 0xc00}, {0x1, 0x9, 0x2, 0x54}, {0x3, 0x2b, 0x2, 0x3}, {0xffff, 0x5, 0x6d, 0x7}, {0x6, 0xa, 0x5, 0x51d8}, {0x8, 0xe, 0x5}, {0x0, 0x40, 0x7, 0x88}, {0x7, 0x2, 0x6, 0x3}, {0x98d, 0x2, 0xff, 0x5}, {0x81, 0x1, 0x3, 0x7f}, {0x1, 0x2, 0xc0, 0x86f}, {0x8, 0x2, 0x9, 0x6}, {0x7, 0x75, 0x7, 0xd}, {0x6, 0x6, 0x6, 0x8001}, {0x120, 0x5, 0x2, 0x3dbd}, {0x5, 0x8, 0x9, 0x1}, {0x0, 0x3, 0x9, 0xff}, {0x0, 0x4, 0x0, 0xfffffff8}, {0x7, 0x1, 0x9, 0xd}, {0xfff, 0x7, 0x0, 0xbc}, {0x0, 0x4c, 0x8, 0xff}, {0x8, 0xc0, 0x80, 0x4}, {0x1, 0x1, 0x0, 0x508d}, {0x1ff, 0x5, 0x81, 0xd}, {0x0, 0x0, 0x2, 0x5}, {0x401, 0x3, 0x80, 0x9}, {0x9, 0x2, 0x0, 0x8}, {0x0, 0x1, 0xfb, 0x7}, {0xa, 0xff, 0x1, 0x7fffffff}, {0x7, 0x4, 0x7, 0x40}, {0xa, 0xc, 0x6, 0x5}, {0x9, 0x8, 0x7, 0x10000}, {0xe9, 0x6, 0x3, 0x3}, {0xb, 0x7, 0x7, 0x200}, {0xe, 0x5, 0x6, 0x2}, {0x9, 0x5, 0x0, 0x1}, {0x9, 0x1, 0x7, 0x1}, {0x1c0, 0x5, 0x2, 0x8e1}, {0x0, 0x5, 0x0, 0x7f07}, {0x6, 0x0, 0x1, 0x1ff}, {0x2, 0x28, 0xfc, 0x8}, {0x6, 0x3, 0x7, 0x2}, {0xa, 0xc5, 0x4, 0x3}, {0x3, 0x71, 0x8, 0x7}, {0x6e, 0x2, 0x0, 0x8}, {0x0, 0x7, 0x7, 0x10000}, {0x9, 0x7, 0x5, 0x7}, {0x100, 0x8, 0x3}, {0xd34, 0x7, 0x8}, {0x9, 0x9, 0x1, 0x80000001}, {0x6, 0xfe, 0x3, 0x3}], {0x1}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@multicast2, @empty, 0xffffffff, 0xffffff00, 'veth1_virt_wifi\x00', 'xfrm0\x00', {}, {}, 0x1, 0x1, 0x6c}, 0x9400, 0x70, 0xd0, 0x94}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x5, 0x0, 0x6, 0x4, 0x6], 0x0, 0x3}, {0x0, [0x5, 0x1, 0x6, 0x0, 0x3, 0x1]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x488)

2.091599116s ago: executing program 8 (id=2478):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003d37d840890457e00000000000010902240003000000000904"], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000700)={0x0, 0x17, 0x1, "df"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000200)={0x40, 0x5, 0x3, "3d8c57"}, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x2}, 0x0, 0x0})

1.269973935s ago: executing program 9 (id=2479):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[0xffffffffffffffff]}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000480)={0x1, &(0x7f0000000440)=[{0x6, 0x1c, 0x2, 0xfffffff7}]})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r4, 0x0, 0x0, 0x10040, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14)

1.226678467s ago: executing program 4 (id=2480):
mmap(&(0x7f0000009000/0x4000)=nil, 0x4000, 0x3000000, 0x32, 0xffffffffffffffff, 0x1a326000)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
listen(0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0xa6, &(0x7f00000003c0)=""/166}, 0x80)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000001000000080000000b"], 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r2, r1, 0x7}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6}, 0x20)
write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc)

1.209900938s ago: executing program 7 (id=2481):
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x4000, &(0x7f0000000480), 0x1, 0x3d0, &(0x7f00000004c0)="$eJzs3M1uG0UcAPD/br5I+mEjcUCFgyUQBAFxHQhQhEThyscFeAArSUuF21SNkWjJoSBOnDggbhz6Ahx4gKpCSEi8Ai+AKlUozQFuQWvvOm4cp7Fix2r6+0mjndkdZ/bv3axm1rsTwGOrEhHnI2IiIhYjopSvT/MUN9spq3d/c2N5a3NjOYnt7U/+SSLJ1xV/K8mXJ/LCfBqRfhfxzM3edtev3/ii3misXsvL1eblq9X16zdevXS5fnH14uqV2pvnarWlxbdqrw8t1p+ef+ncxPvnz/z8V+nO0vT0bLa/J/Nt3XEMSyUqne9kt6VhNzZm0+PeAQAADiTN+/6Trf5/KSZaubZSVDfGunMAAADAUGy/my8BAACAYywx9gcAAIBjrngO4P7mxnKRxvg4wpG7915ElHfebd7qxD8ZT+R1pkb4fmslIq6+kJSyFCN6DxkAoNudrP9zdq/+XxpPd9WbiWj1h2aH3H5lV7m3/5PeHXKTD8j6f+9ExFZP/y8tqpQn8tKpVldxKrlwqbF6NiJOR8R8TM1k5do+bXzw7y8f99uWxf97cup0kbL2s+VOjfTu5MyDn1mpN+uHibnbvW8izkzuFX/S6f8mETF3iDYmvr71dr9tD49/tLZvRby45/Hfmbkn2X9+omrrfKgWZ0Wv/7799aN+7Y87/uz4z+0ffznpnq9pffA2bn/+57P9tnWPfwY5/6eTT1v5Ylz2Vb3ZvFaLmE4+7F2/uPPZolzUz+Kff27v///i+pfkc1qdzK8Bg/r+h99eOUj8WcraL8aCRyGLf2Wg4z945o3bf3zWr/2Hx58d//YcYPP5moNc/w66g4f57gAAAOBRkbbuayTpQiefpgsL7fsdT8Vc2lhbb758Ye3LKyvt+x/lmEqLO12lrvuhtfbP6J3y4q7yaxHxZET8WJptlReW1xor4w4eAAAAHhMn+oz/M38f2VMIAAAAwMiVx70DAAAAwMgZ/wMAAMCxdph5/WRkZI5rZtxXJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEfb/wEAAP//Wt22ag==")
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./bus\x00', 0x0, 0x63d017, 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r1, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = dup(r3)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, 0x0)

1.089494766s ago: executing program 4 (id=2482):
write$sndseq(0xffffffffffffffff, &(0x7f0000000040)=[{0x8, 0xbf, 0x1, 0x5, @tick=0x7f, {0x3, 0x3}, {0x1}, @time=@time={0x9, 0x9}}, {0x5, 0x6, 0x2, 0x7f, @tick=0x6, {0x7, 0x5b}, {0x9, 0x9}, @queue={0x0, {0x3, 0xce9d}}}], 0x38)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x13, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)
setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000080)=0x6, 0x4)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

874.656278ms ago: executing program 9 (id=2483):
syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000580), 0x1, 0x4ee, &(0x7f0000000d40)="$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")
quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f00000000c0)={0xe, 0x1, 0x0, 0x6})

821.788571ms ago: executing program 4 (id=2484):
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000000))
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendmsg$alg(r4, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008a40)="7c72bf03f7d9c0fd0826786ffcfb99e55c1272594d5be5c7f1de9562bbf652", 0x1f}, {&(0x7f0000008c80)="9d", 0x7fffefe1}], 0x2}, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
socket(0x10, 0x3, 0x9)
sendmsg$key(r5, &(0x7f0000001340)={0x0, 0x3, 0x0}, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000c00)=ANY=[], 0x1, 0x6e5, &(0x7f0000000680)="$eJzs3c1vHGcdB/DvrNeON1TBaRMaoSBMIhWkiMSJlUK4YBBCOVSoKoeercRprGySKnFRWiFwAcEJiUP/gILkGweExD0oXLiUW68+VkLiEnGIelk0s7P27nr9lvgloZ9PNZnnmeeZZ377m2dmvOtaG+AL6+q5NB+myNVzbzwo66srs+3VldkjdXM7SVluJM3uKsWdpHiUzJXtRd+SvvUGHy1eeevTx6ufdWvNeqn6j2213wgj+i7XS6br8aZH7jm+00Ms1+HlpSTX6vWgiZ2ONdCxTNrZeg2HrjOokc7ybnbfzXULPGd6T6ei+9zcYCo5mmSy/jkg9d2hcXAR7qlv9Aq7ussBAADAC+qTu4cdAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALx4qu//b61VG91NyXSK3vf/T/S21eXn0NyOez7c1zgAAAAAAAAA4GB8/Ume5EGO9eqdovqd/5mqciKfd5Iv5b3cz0Lu5XweZD5LWcq9XEwy1TfQxIP5paV7F9f2LI3e89LIPS8d1CsGAAAAAAAAgP9Lv0pr/ff/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwPCiSse6qWk7U60yl0cx6W5aTfyWZOOx4d6EYtfHhwccBAAAAz2TyKfb58pM8yYMc69U7RfWe/yvV++XJvJc7WcpiltLOQq7X76HLd/2N1ZXZ9urK7O1yKeuD4/7gP7sKY6IeYayqjTryqapHKzeyWG05n2tVMNfT6B77bHKqF09fXH0+LGMqvl/bYWTNOq3lwf6w2acIe2Lwo4jGFj1b68ElaxmZqWMr9zzezUBRfVCTDGdi+OxsOFhzoDZVdRlfO9LFNNY++TmxDzk/Wq/L1/Pbfc35TvTnYi0TjVSZuNSbfeU1s3Umkm/+7c9v32zfuXXzxv1zh/uSdmFsk+3Dc2K2LxOvvtCZaO6y/0yViZNr9av5cX6ac5nOm7mXxfws81nKQjp1+3w9n8t/p7bO1NxA7c3tIpmoz0v3nO0kpun8qCrN50y177EspsjdXM9CXq/+u5SL+U4u53Ku9J3hk5vGXb226qpvDF/1vTP995HBn/1WXSjvbr9bv8vNbfWKN5ude6V77y/zerwvr91Z/3it1/G+62CmL0sv97IzPnLwp7k3Nr9aF8pj/Hqb58TBmqozUV5AvadEL7pXuploVs+ijfP8j51yv7TvdDo359/dZPzlofpr9bqcVitf2653z+hTsbfK+fJyJus7yeDsKNteWbvL9LV11udyt23wiVvud7JqK4relfqT3K0mwMYrdaL+GW7jSJeqtleH2k7X9/Cy7VRf28DPW7mbdq4fQP4AeBr/fHutOJWjE61/tz5pfdz6Tetm643JHx757pHTExn/x/j3mjNjrzVOF3/Nx/nF+vt/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg6d1//4Nb8+32wr3RhcbmTQOFVoa3bDfyUKGov9BnVJ9b9bcU7GrAQy5MJhnYUn3P0YGH0RoOY0Oh88vkwPPT+xLB0X1+XxaaOzrdcwNb/rJxwA+3j2csQ/NwB9fFPhYaOdiDjmX0BDisOxJwUC4s3X73wv33P/j24u35dxbeWbgzfvnylZkrl1+fvXBjsb0w0/33sKME9sP6Q/+wIwEAAAAAAAAAAAB2atQfBpx5abs/GtlQaCQZ/hsP/2chAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsCeunkvzYYpcnDk/U9ZXV2bb5dIrr/dsJmk0kuLnSfEomUt3yVTfcEX+9CidEcf5aPHKW58+Xv1sfaxmt3/SqNeb27o1yXK9ZDrJWL1+BgPjXXvm8Yr/9l5DmbDPO53O3LPFB3vjfwEAAP//qWztYw==")

594.772885ms ago: executing program 9 (id=2485):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3)
ioctl$TCGETA(r0, 0x5405, 0x0)

305.112132ms ago: executing program 7 (id=2486):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3)

292.344422ms ago: executing program 9 (id=2487):
r0 = socket(0xa, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2001)

110.584104ms ago: executing program 9 (id=2488):
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x800)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
syz_mount_image$fuse(0x0, &(0x7f0000002d40)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
write$FUSE_CREATE_OPEN(r2, &(0x7f0000000280)={0xa0, 0x0, 0x0, {{0x0, 0x1, 0x5, 0x6, 0xffc, 0x6, {0x1, 0x1, 0x65cd, 0x0, 0xffffffffffff15ef, 0x3ff, 0x7, 0x7fff, 0x7, 0x2000, 0x8, 0x0, 0x0, 0x2, 0x10000}}}}, 0xa0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x80, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
chmod(&(0x7f00000006c0)='./file0\x00', 0x2)

0s ago: executing program 9 (id=2489):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT, @ANYRESHEX, @ANYRESHEX, @ANYBLOB="9cf9ad258963981511d9de699a75f5d71cb604eabc48fd892b4dc3737520bd5bda32268404ab99a848bf77fb6a5725f795bbb1f2dfdf284e7f82f6668ecefa6a85a7cc434bd34e91014dabf203309be1bf6999d8f59d0dd567ecf9a87c680dd467a682cb262e4d90b57237e3cdf84c85df4749a4ef6a67dc6556b6ff4ae8f5026f865e4075efa250a02a670d48851a6cf97522e52300c7ef213ef50de6979ee12e2ecb9f5068e3e68e8d06c5ad68570a9e9e1fec5bcfedf4b7f56b0fa96f8b4cdb9f5178efb59d90367e10da96bd6b57ac82f23fd4d18692fe381bc4f2cc390a5056cccee185b77089246101c0647c3486055342dd36"], 0x1, 0x2c2, &(0x7f0000000ac0)="$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")
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000200)='./file0/file0\x00', 0x812488, 0x0, 0xff, 0x0, &(0x7f00000007c0))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_pidfd_open(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
ptrace$getenv(0x4201, 0x0, 0x8000000000000000, &(0x7f00000004c0))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r2, 0x0, 0x7, 0x0)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4(r3, 0x0, 0x40000000, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, 0x0, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x2c0, 0x60, 0xd0e0000, 0x2c0, 0x100, 0x390, 0x1d8, 0x1d8, 0x390, 0x1d8, 0x7fffffe, 0x0, {[{{@uncond, 0xee02, 0x2a0, 0x2c0, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{0x3, 0x77, 0x7, 0x2}, {0x6, 0x5d, 0x8, 0xf}, {0x0, 0x7, 0x4, 0x5}, {0x200, 0x10, 0x4, 0x401}, {0x2, 0x7, 0x9, 0x7}, {0x8, 0x2, 0x40, 0x80}, {0x7, 0x10, 0x4, 0xc27e}, {0x0, 0x8, 0x1, 0x9}, {0xa66, 0xf9, 0x2, 0x40}, {0xf207, 0x18, 0x1, 0x6}, {0x2, 0x8, 0x6, 0xb6}, {0x0, 0x5, 0x5, 0x4}, {0x9, 0x7f, 0x5, 0x2}, {0x5, 0x2, 0xf, 0xc00}, {0x1, 0x9, 0x2, 0x54}, {0x3, 0x2b, 0x2, 0x3}, {0xffff, 0x5, 0x6d, 0x7}, {0x6, 0xa, 0x5, 0x51d8}, {0x8, 0xe, 0x5}, {0x0, 0x40, 0x7, 0x88}, {0x7, 0x2, 0x6, 0x3}, {0x98d, 0x2, 0xff, 0x5}, {0x81, 0x1, 0x3, 0x7f}, {0x1, 0x2, 0xc0, 0x86f}, {0x8, 0x2, 0x9, 0x6}, {0x7, 0x75, 0x7, 0xd}, {0x6, 0x6, 0x6, 0x8001}, {0x120, 0x5, 0x2, 0x3dbd}, {0x5, 0x8, 0x9, 0x1}, {0x0, 0x3, 0x9, 0xff}, {0x0, 0x4, 0x0, 0xfffffff8}, {0x7, 0x1, 0x9, 0xd}, {0xfff, 0x7, 0x0, 0xbc}, {0x0, 0x4c, 0x8, 0xff}, {0x8, 0xc0, 0x80, 0x4}, {0x1, 0x1, 0x0, 0x508d}, {0x1ff, 0x5, 0x81, 0xd}, {0x0, 0x0, 0x2, 0x5}, {0x401, 0x3, 0x80, 0x9}, {0x9, 0x2, 0x0, 0x8}, {0x0, 0x1, 0xfb, 0x7}, {0xa, 0xff, 0x1, 0x7fffffff}, {0x7, 0x4, 0x7, 0x40}, {0xa, 0xc, 0x6, 0x5}, {0x9, 0x8, 0x7, 0x10000}, {0xe9, 0x6, 0x3, 0x3}, {0xb, 0x7, 0x7, 0x200}, {0xe, 0x5, 0x6, 0x2}, {0x9, 0x5, 0x0, 0x1}, {0x9, 0x1, 0x7, 0x1}, {0x1c0, 0x5, 0x2, 0x8e1}, {0x0, 0x5, 0x0, 0x7f07}, {0x6, 0x0, 0x1, 0x1ff}, {0x2, 0x28, 0xfc, 0x8}, {0x6, 0x3, 0x7, 0x2}, {0xa, 0xc5, 0x4, 0x3}, {0x3, 0x71, 0x8, 0x7}, {0x6e, 0x2, 0x0, 0x8}, {0x0, 0x7, 0x7, 0x10000}, {0x9, 0x7, 0x5, 0x7}, {0x100, 0x8, 0x3}, {0xd34, 0x7, 0x8}, {0x9, 0x9, 0x1, 0x80000001}, {0x6, 0xfe, 0x3, 0x3}], {0x1}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@multicast2, @empty, 0xffffffff, 0xffffff00, 'veth1_virt_wifi\x00', 'xfrm0\x00', {}, {}, 0x1, 0x1, 0x6c}, 0x9400, 0x70, 0xd0, 0x94}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x5, 0x0, 0x6, 0x4, 0x6], 0x0, 0x3}, {0x0, [0x5, 0x1, 0x6, 0x0, 0x3, 0x1]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x488)

kernel console output (not intermixed with test programs):

 failed
[  355.560313][T10325] FAT-fs (loop4): Directory bread(block 33) failed
[  355.566871][T10325] FAT-fs (loop4): Directory bread(block 34) failed
[  355.573594][T10325] FAT-fs (loop4): Directory bread(block 35) failed
[  355.580226][T10325] FAT-fs (loop4): Directory bread(block 36) failed
[  355.586751][T10325] FAT-fs (loop4): Directory bread(block 37) failed
[  355.593637][T10325] FAT-fs (loop4): Directory bread(block 38) failed
[  355.602981][T10325] FAT-fs (loop4): Directory bread(block 39) failed
[  355.610069][T10325] FAT-fs (loop4): Directory bread(block 40) failed
[  355.616782][T10325] FAT-fs (loop4): Directory bread(block 41) failed
[  355.668135][T10327] loop5: detected capacity change from 0 to 128
[  355.891477][T10327] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  355.902628][T10327] ext4 filesystem being mounted at /333/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  356.155984][  T144] team0 (unregistering): Port device team_slave_1 removed
[  356.176829][  T144] team0 (unregistering): Port device team_slave_0 removed
[  356.197567][  T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  356.222852][  T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  356.328798][  T144] bond0 (unregistering): Released all slaves
[  356.389763][T10270] chnl_net:caif_netlink_parms(): no params data found
[  357.040009][T10348] loop5: detected capacity change from 0 to 1024
[  357.066723][T10270] bridge0: port 1(bridge_slave_0) entered blocking state
[  357.077608][T10270] bridge0: port 1(bridge_slave_0) entered disabled state
[  357.088396][T10270] device bridge_slave_0 entered promiscuous mode
[  357.107730][T10348] EXT4-fs (loop5): Ignoring removed orlov option
[  357.114451][T10270] bridge0: port 2(bridge_slave_1) entered blocking state
[  357.122258][T10270] bridge0: port 2(bridge_slave_1) entered disabled state
[  357.130995][T10270] device bridge_slave_1 entered promiscuous mode
[  357.154403][T10348] EXT4-fs (loop5): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback.
[  357.264372][T10270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  357.288265][T10270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  357.374575][T10270] team0: Port device team_slave_0 added
[  357.383209][T10270] team0: Port device team_slave_1 added
[  357.404837][T10364] loop5: detected capacity change from 0 to 1024
[  357.414837][T10270] batman_adv: batadv0: Adding interface: batadv_slave_0
[  357.425254][T10270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  357.457571][T10270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  357.468791][   T21] Bluetooth: hci3: command 0x041b tx timeout
[  357.539260][T10270] batman_adv: batadv0: Adding interface: batadv_slave_1
[  357.541668][T10364] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  357.556864][T10270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  357.560667][T10364] ext4 filesystem being mounted at /336/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  357.611537][T10270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  358.034503][T10270] device hsr_slave_0 entered promiscuous mode
[  358.238318][ T4249] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  358.248086][T10270] device hsr_slave_1 entered promiscuous mode
[  358.283620][T10378] loop5: detected capacity change from 0 to 128
[  358.389289][T10378] FAT-fs (loop5): Directory bread(block 32) failed
[  358.395840][T10378] FAT-fs (loop5): Directory bread(block 33) failed
[  358.458914][T10378] FAT-fs (loop5): Directory bread(block 34) failed
[  358.479840][T10386] loop6: detected capacity change from 0 to 1024
[  358.495767][T10378] FAT-fs (loop5): Directory bread(block 35) failed
[  358.543237][T10378] FAT-fs (loop5): Directory bread(block 36) failed
[  358.559247][ T4330] hfsplus: b-tree write err: -5, ino 4
[  358.577767][T10378] FAT-fs (loop5): Directory bread(block 37) failed
[  358.594834][T10378] FAT-fs (loop5): Directory bread(block 38) failed
[  358.609021][ T4249] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  358.630423][T10378] FAT-fs (loop5): Directory bread(block 39) failed
[  358.632874][T10270] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  358.657029][ T4249] usb 5-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00
[  358.671970][T10378] FAT-fs (loop5): Directory bread(block 40) failed
[  358.692460][T10378] FAT-fs (loop5): Directory bread(block 41) failed
[  358.699468][ T4249] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  358.775169][T10270] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  358.812305][T10270] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  358.822274][ T4249] usb 5-1: config 0 descriptor??
[  358.864095][T10270] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  359.636221][ T4236] Bluetooth: hci3: command 0x040f tx timeout
[  359.946088][T10270] 8021q: adding VLAN 0 to HW filter on device bond0
[  360.294581][ T4778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  360.363042][ T4778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  360.484234][T10270] 8021q: adding VLAN 0 to HW filter on device team0
[  360.516742][ T1425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  360.526818][ T1425] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  360.528913][ T4249] usbhid 5-1:0.0: can't add hid device: -71
[  360.536559][ T1425] bridge0: port 1(bridge_slave_0) entered blocking state
[  360.542065][T10396] binder: 10384:10396 ioctl c0306201 200000000600 returned -14
[  360.547906][ T1425] bridge0: port 1(bridge_slave_0) entered forwarding state
[  360.564193][ T1425] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  360.574395][ T4249] usbhid: probe of 5-1:0.0 failed with error -71
[  360.597061][ T4249] usb 5-1: USB disconnect, device number 9
[  360.608879][ T4228] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  360.664840][T10426] loop4: detected capacity change from 0 to 2048
[  360.677604][T10270] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  360.704511][T10270] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  360.718030][ T1425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  360.726970][ T1425] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  360.751989][ T1425] bridge0: port 2(bridge_slave_1) entered blocking state
[  360.759124][ T1425] bridge0: port 2(bridge_slave_1) entered forwarding state
[  360.774546][ T1425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  360.803683][ T1425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  360.828399][ T1425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  360.842584][ T1425] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  360.855165][ T1425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  360.874432][ T1425] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  360.904947][ T1425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  360.913798][ T1425] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  360.923149][T10426] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,dioread_lock,,errors=continue. Quota mode: none.
[  360.923305][ T1425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  360.948958][ T4228] usb 7-1: Using ep0 maxpacket: 8
[  360.963323][T10426] ext4 filesystem being mounted at /338/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  360.964489][ T1425] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  361.079253][ T4228] usb 7-1: config 179 has an invalid interface number: 65 but max is 0
[  361.158453][ T4228] usb 7-1: config 179 has no interface number 0
[  361.273048][T10426] fs-verity (loop4, inode 13): Unknown hash algorithm number: 3
[  361.336826][ T4228] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  361.470339][ T1425] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  361.485930][ T4228] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  361.490246][ T1425] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  361.513102][ T4228] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9
[  361.544455][ T4228] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024
[  361.574820][ T4228] usb 7-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  361.653115][ T4228] usb 7-1: config 179 interface 65 has no altsetting 0
[  361.660096][ T4228] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  361.669201][ T4228] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  361.709418][   T21] Bluetooth: hci3: command 0x0419 tx timeout
[  361.731867][ T4228] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input11
[  361.887464][ T1425] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  361.901991][ T1425] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  361.944544][T10270] 8021q: adding VLAN 0 to HW filter on device batadv0
[  361.961109][ T4268] usb 7-1: USB disconnect, device number 6
[  361.978741][    C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  362.166914][T10461] ODEBUG: Out of memory. ODEBUG disabled
[  362.887631][T10467] loop7: detected capacity change from 0 to 128
[  362.974854][ T4268] xpad 7-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  363.019613][T10469] loop5: detected capacity change from 0 to 256
[  363.106718][T10469] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  363.853878][T10467] FAT-fs (loop7): Directory bread(block 32) failed
[  363.866670][T10467] FAT-fs (loop7): Directory bread(block 33) failed
[  363.875130][T10467] FAT-fs (loop7): Directory bread(block 34) failed
[  363.883851][T10467] FAT-fs (loop7): Directory bread(block 35) failed
[  363.896548][ T4777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  363.907817][T10467] FAT-fs (loop7): Directory bread(block 36) failed
[  363.909486][ T4777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  363.959119][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  363.967334][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  364.015215][T10467] FAT-fs (loop7): Directory bread(block 37) failed
[  364.060358][ T1872] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  364.060488][T10467] FAT-fs (loop7): Directory bread(block 38) failed
[  364.077992][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  364.086268][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  364.100911][T10270] device veth0_vlan entered promiscuous mode
[  364.115921][T10270] device veth1_vlan entered promiscuous mode
[  364.227161][T10501] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1717'.
[  364.735107][T10270] device veth0_macvtap entered promiscuous mode
[  364.774323][T10270] device veth1_macvtap entered promiscuous mode
[  364.841257][T10270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  364.877136][T10467] FAT-fs (loop7): Directory bread(block 39) failed
[  364.883845][T10467] FAT-fs (loop7): Directory bread(block 40) failed
[  364.890406][T10467] FAT-fs (loop7): Directory bread(block 41) failed
[  364.924119][T10270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  364.958888][T10270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  364.972346][T10270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  364.984052][T10270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  364.996016][ T1872] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  365.007508][ T1872] usb 7-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00
[  365.016733][T10270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  365.027191][ T1872] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  365.040044][T10270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  365.054588][ T1872] usb 7-1: config 0 descriptor??
[  365.065824][T10270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  365.082935][T10270] batman_adv: batadv0: Interface activated: batadv_slave_0
[  365.826562][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  365.880138][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  365.894320][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  365.905054][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  365.914230][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  365.928061][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  365.937183][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  365.955346][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  366.002634][T10270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  366.024311][T10270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  366.045392][T10270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  366.056277][T10270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  366.089757][T10270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  366.155727][T10270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  366.324870][T10270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  366.418378][T10270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  366.483293][T10270] batman_adv: batadv0: Interface activated: batadv_slave_1
[  366.562232][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  366.587295][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  366.603900][T10270] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  366.628791][ T1872] usbhid 7-1:0.0: can't add hid device: -71
[  366.634765][ T1872] usbhid: probe of 7-1:0.0 failed with error -71
[  366.642897][T10270] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  366.653271][ T1872] usb 7-1: USB disconnect, device number 7
[  366.660186][T10270] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  366.674764][T10270] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  366.996455][T10529] loop5: detected capacity change from 0 to 256
[  367.372789][T10529] exfat: Bad value for 'uid'
[  367.426074][ T4310] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  367.458910][ T4310] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  367.500870][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  367.515060][ T4330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  367.532641][T10539] loop6: detected capacity change from 0 to 128
[  367.544900][ T4330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  367.562681][T10538] loop4: detected capacity change from 0 to 1024
[  367.575048][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  367.586947][T10537] loop5: detected capacity change from 0 to 1024
[  367.640603][T10544] loop8: detected capacity change from 0 to 512
[  367.657390][T10537] EXT4-fs (loop5): Ignoring removed oldalloc option
[  367.672982][T10539] FAT-fs (loop6): Directory bread(block 32) failed
[  367.685338][T10537] EXT4-fs (loop5): Ignoring removed bh option
[  367.696516][T10539] FAT-fs (loop6): Directory bread(block 33) failed
[  367.704942][T10538] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  367.715934][T10544] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  367.728459][T10537] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  367.749309][T10539] FAT-fs (loop6): Directory bread(block 34) failed
[  367.755865][T10539] FAT-fs (loop6): Directory bread(block 35) failed
[  367.819124][T10539] FAT-fs (loop6): Directory bread(block 36) failed
[  367.825785][T10539] FAT-fs (loop6): Directory bread(block 37) failed
[  367.834938][T10537] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,usrquota,data_err=ignore,nobarrier,oldalloc,grpquota,noload,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback.
[  367.859513][T10539] FAT-fs (loop6): Directory bread(block 38) failed
[  367.926802][T10539] FAT-fs (loop6): Directory bread(block 39) failed
[  367.933802][T10539] FAT-fs (loop6): Directory bread(block 40) failed
[  367.942528][T10539] FAT-fs (loop6): Directory bread(block 41) failed
[  367.949590][   T25] audit: type=1804 audit(1769155243.774:34): pid=10537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.1725" name="/newroot/347/file1/bus" dev="loop5" ino=18 res=1 errno=0
[  368.020186][T10562] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1729'.
[  369.450344][   T21] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  369.615966][T10606] loop5: detected capacity change from 0 to 256
[  369.875486][T10619] loop7: detected capacity change from 0 to 512
[  369.963578][T10621] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1741'.
[  370.009285][   T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  370.150523][   T21] usb 5-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00
[  370.373470][   T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  370.502824][   T21] usb 5-1: config 0 descriptor??
[  370.509464][T10626] loop8: detected capacity change from 0 to 128
[  370.551800][T10630] loop6: detected capacity change from 0 to 1024
[  370.570091][T10626] FAT-fs (loop8): Directory bread(block 32) failed
[  370.576668][T10626] FAT-fs (loop8): Directory bread(block 33) failed
[  370.588220][T10626] FAT-fs (loop8): Directory bread(block 34) failed
[  370.593133][T10630] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option
[  370.621729][T10626] FAT-fs (loop8): Directory bread(block 35) failed
[  370.627727][T10630] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  370.628321][T10626] FAT-fs (loop8): Directory bread(block 36) failed
[  370.690021][T10630] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003]
[  370.735004][T10630] System zones: 0-1, 3-36
[  370.740398][T10626] FAT-fs (loop8): Directory bread(block 37) failed
[  370.747060][T10626] FAT-fs (loop8): Directory bread(block 38) failed
[  370.755173][T10626] FAT-fs (loop8): Directory bread(block 39) failed
[  370.762696][T10630] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,delalloc,bsdgroups,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback.
[  370.781501][T10626] FAT-fs (loop8): Directory bread(block 40) failed
[  370.788028][T10626] FAT-fs (loop8): Directory bread(block 41) failed
[  370.981736][T10619] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  371.299012][   T21] usbhid 5-1:0.0: can't add hid device: -71
[  371.305086][   T21] usbhid: probe of 5-1:0.0 failed with error -71
[  371.320992][   T21] usb 5-1: USB disconnect, device number 10
[  371.487051][T10664] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  371.495958][T10666] loop8: detected capacity change from 0 to 8
[  371.523931][T10666] squashfs: Unknown parameter 'c@'
[  371.704607][T10667] loop8: detected capacity change from 0 to 1024
[  372.082726][T10681] loop5: detected capacity change from 0 to 2048
[  372.675264][T10667] EXT4-fs (loop8): fragment/cluster size (16384) != block size (1024)
[  372.764738][T10687] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1755'.
[  373.181266][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  373.187601][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  373.205572][T10695] loop8: detected capacity change from 0 to 128
[  373.219688][T10696] loop5: detected capacity change from 0 to 512
[  373.282118][T10696] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  373.284034][T10695] FAT-fs (loop8): Directory bread(block 32) failed
[  373.328828][T10695] FAT-fs (loop8): Directory bread(block 33) failed
[  373.335436][T10695] FAT-fs (loop8): Directory bread(block 34) failed
[  373.349550][T10695] FAT-fs (loop8): Directory bread(block 35) failed
[  373.357641][T10695] FAT-fs (loop8): Directory bread(block 36) failed
[  373.365518][T10695] FAT-fs (loop8): Directory bread(block 37) failed
[  373.372477][T10695] FAT-fs (loop8): Directory bread(block 38) failed
[  373.382881][T10695] FAT-fs (loop8): Directory bread(block 39) failed
[  373.389963][T10695] FAT-fs (loop8): Directory bread(block 40) failed
[  373.396651][T10695] FAT-fs (loop8): Directory bread(block 41) failed
[  373.555986][T10711] loop5: detected capacity change from 0 to 256
[  374.658441][T10711] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  374.731308][T10711] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  374.923069][T10711] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  375.064329][T10726] loop4: detected capacity change from 0 to 2048
[  375.415391][T10725] loop6: detected capacity change from 0 to 512
[  375.490235][T10725] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  375.693858][T10730] loop5: detected capacity change from 0 to 2048
[  375.798482][T10730] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  375.967492][T10741] loop4: detected capacity change from 0 to 512
[  375.984733][T10738] loop8: detected capacity change from 0 to 512
[  376.352838][T10741] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  377.238947][ T4236] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  377.638887][ T4236] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  377.651281][T10770] loop4: detected capacity change from 0 to 16
[  377.668463][T10774] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1783'.
[  377.669795][ T4236] usb 9-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00
[  377.693747][T10770] erofs: (device loop4): mounted with root inode @ nid 36.
[  377.703888][   T25] audit: type=1800 audit(1769155253.534:35): pid=10770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1782" name="file1" dev="loop4" ino=86 res=0 errno=0
[  377.711207][ T4236] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  377.799222][ T4236] usb 9-1: config 0 descriptor??
[  377.825055][T10781] loop4: detected capacity change from 0 to 128
[  377.889578][T10781] FAT-fs (loop4): Directory bread(block 32) failed
[  377.896261][T10781] FAT-fs (loop4): Directory bread(block 33) failed
[  377.915195][T10781] FAT-fs (loop4): Directory bread(block 34) failed
[  377.938478][T10781] FAT-fs (loop4): Directory bread(block 35) failed
[  377.967465][T10781] FAT-fs (loop4): Directory bread(block 36) failed
[  377.996943][T10781] FAT-fs (loop4): Directory bread(block 37) failed
[  378.024921][T10781] FAT-fs (loop4): Directory bread(block 38) failed
[  378.044690][T10781] FAT-fs (loop4): Directory bread(block 39) failed
[  378.065059][T10781] FAT-fs (loop4): Directory bread(block 40) failed
[  378.087193][T10781] FAT-fs (loop4): Directory bread(block 41) failed
[  378.248995][T10791] loop6: detected capacity change from 0 to 2048
[  378.280296][ T4236] ntrig 0003:1B96:0008.0006: unbalanced collection at end of report description
[  378.289631][ T4236] ntrig 0003:1B96:0008.0006: parse failed
[  378.295389][ T4236] ntrig: probe of 0003:1B96:0008.0006 failed with error -22
[  378.375555][T10791] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  378.488961][ T4236] usb 9-1: USB disconnect, device number 2
[  379.036856][T10796] loop6: detected capacity change from 0 to 512
[  379.786168][T10804] loop6: detected capacity change from 0 to 1024
[  380.279501][T10818] set_capacity_and_notify: 1 callbacks suppressed
[  380.279530][T10818] loop7: detected capacity change from 0 to 1024
[  380.438495][T10816] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  380.439072][T10814] erofs: (device loop4): mounted with root inode @ nid 36.
[  380.456131][T10804] EXT4-fs (loop6): Ignoring removed oldalloc option
[  380.485755][   T25] audit: type=1800 audit(1769155256.314:36): pid=10814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1795" name="file1" dev="loop4" ino=86 res=0 errno=0
[  380.506658][T10804] EXT4-fs (loop6): Ignoring removed bh option
[  380.513580][T10816] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  380.538361][T10804] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  380.701346][T10804] EXT4-fs (loop6): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,usrquota,data_err=ignore,nobarrier,oldalloc,grpquota,noload,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback.
[  380.733295][T10831] loop4: detected capacity change from 0 to 128
[  380.824819][T10831] FAT-fs (loop4): error, corrupted directory (invalid entries)
[  380.839869][T10831] FAT-fs (loop4): Filesystem has been set read-only
[  381.148738][ T3521] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  381.210627][T10845] kvm: emulating exchange as write
[  381.257847][T10849] loop5: detected capacity change from 0 to 1024
[  381.281586][T10849] EXT4-fs (loop5): Ignoring removed oldalloc option
[  381.293876][T10849] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  381.319347][T10849] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,usrquota,max_dir_size_kb=0x0000000000000001,mb_optimize_scan=0x0000000000000001,oldalloc,grpquota,noload,user_xattr,nodelalloc,dioread_nolock,,errors=continue. Quota mode: writeback.
[  381.474886][T10854] loop5: detected capacity change from 0 to 16
[  381.499548][T10854] erofs: (device loop5): mounted with root inode @ nid 36.
[  381.533220][   T25] audit: type=1800 audit(1769155257.364:37): pid=10854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1808" name="file1" dev="loop5" ino=86 res=0 errno=0
[  381.578833][ T3521] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  381.598142][ T3521] usb 9-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00
[  381.608574][ T3521] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  381.647978][ T3521] usb 9-1: config 0 descriptor??
[  381.928100][T10871] loop5: detected capacity change from 0 to 1024
[  381.984896][T10870] loop6: detected capacity change from 0 to 2048
[  381.995086][T10871] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option
[  382.004438][T10871] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  382.027849][T10871] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003]
[  382.057958][T10871] System zones: 0-1, 3-36
[  382.118103][T10870] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  382.219685][ T3521] ntrig 0003:1B96:0008.0007: unbalanced collection at end of report description
[  382.318211][T10871] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,delalloc,bsdgroups,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback.
[  382.487748][ T3521] ntrig 0003:1B96:0008.0007: parse failed
[  382.524244][ T3521] ntrig: probe of 0003:1B96:0008.0007 failed with error -22
[  382.603103][ T3521] usb 9-1: USB disconnect, device number 3
[  382.773296][T10876] loop7: detected capacity change from 0 to 1024
[  382.807794][T10897] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1819'.
[  382.892168][T10899] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1818'.
[  383.461019][T10906] loop8: detected capacity change from 0 to 16
[  383.500709][T10906] erofs: (device loop8): mounted with root inode @ nid 36.
[  383.521574][   T25] audit: type=1800 audit(1769155259.354:38): pid=10906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1821" name="file1" dev="loop8" ino=86 res=0 errno=0
[  383.831244][T10876] EXT4-fs (loop7): Ignoring removed oldalloc option
[  384.372738][T10876] EXT4-fs (loop7): Ignoring removed bh option
[  384.379481][T10876] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  384.491589][T10876] EXT4-fs (loop7): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,usrquota,data_err=ignore,nobarrier,oldalloc,grpquota,noload,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback.
[  384.716540][T10929] loop5: detected capacity change from 0 to 512
[  384.738249][T10952] loop4: detected capacity change from 0 to 1024
[  384.809167][T10940] chnl_net:caif_netlink_parms(): no params data found
[  384.865564][   T25] audit: type=1800 audit(1769155260.694:39): pid=10952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1831" name="file1" dev="loop4" ino=20 res=0 errno=0
[  385.065671][T10968] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1833'.
[  385.257424][T10969] EXT4-fs (loop5): Ignoring removed bh option
[  385.320438][T10940] bridge0: port 1(bridge_slave_0) entered blocking state
[  385.327894][T10940] bridge0: port 1(bridge_slave_0) entered disabled state
[  385.335985][T10940] device bridge_slave_0 entered promiscuous mode
[  385.356021][T10940] bridge0: port 2(bridge_slave_1) entered blocking state
[  385.377202][T10940] bridge0: port 2(bridge_slave_1) entered disabled state
[  385.404337][T10969] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none.
[  385.408023][T10940] device bridge_slave_1 entered promiscuous mode
[  385.447867][T10940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  385.460701][T10940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  385.529820][T10940] team0: Port device team_slave_0 added
[  385.560465][T10940] team0: Port device team_slave_1 added
[  385.576897][T10940] batman_adv: batadv0: Adding interface: batadv_slave_0
[  385.586081][T10940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  385.617523][T10969] EXT4-fs error (device loop5): ext4_find_dest_de:2115: inode #12: block 7: comm syz.5.1835: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0
[  385.699355][T10969] EXT4-fs (loop5): Remounting filesystem read-only
[  385.706505][T10940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  386.222753][T10940] batman_adv: batadv0: Adding interface: batadv_slave_1
[  386.229957][T10940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  386.259105][T10940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  386.419702][ T7433] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  386.498889][ T4236] Bluetooth: hci4: command 0x0409 tx timeout
[  386.694095][T10940] device hsr_slave_0 entered promiscuous mode
[  386.742641][T10940] device hsr_slave_1 entered promiscuous mode
[  387.311719][ T7433] usb 9-1: Using ep0 maxpacket: 8
[  387.471956][T10940] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  387.479803][T10940] Cannot create hsr debugfs directory
[  387.630494][ T7433] usb 9-1: config 179 has an invalid interface number: 65 but max is 0
[  387.648723][ T7433] usb 9-1: config 179 has no interface number 0
[  387.655305][ T7433] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  387.666755][ T7433] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  387.678196][ T7433] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9
[  387.689599][ T7433] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024
[  387.717926][ T7433] usb 9-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  387.748856][ T7433] usb 9-1: config 179 interface 65 has no altsetting 0
[  387.763645][ T7433] usb 9-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  387.803984][ T7433] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  387.982561][T11013] set_capacity_and_notify: 1 callbacks suppressed
[  387.982573][T11013] loop4: detected capacity change from 0 to 256
[  388.012842][ T7433] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:179.65/input/input12
[  388.026765][T11013] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  388.056025][T11013] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  388.119307][T11013] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  388.316968][T10940] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  388.383491][T10940] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  388.383703][T11029] binder: 11026:11029 ioctl 400c620e 200000000080 returned -22
[  388.403974][T11028] loop5: detected capacity change from 0 to 1024
[  388.408584][T10940] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  388.431970][T10940] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  388.465323][ T3521] usb 9-1: USB disconnect, device number 4
[  388.471998][    C0] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  388.481272][T11028] EXT4-fs (loop5): Ignoring removed oldalloc option
[  388.488238][T11028] EXT4-fs (loop5): Ignoring removed bh option
[  388.503401][ T3521] xpad 9-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  388.530360][T11028] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  388.580240][ T4268] Bluetooth: hci4: command 0x041b tx timeout
[  388.609589][T11028] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,usrquota,data_err=ignore,nobarrier,oldalloc,grpquota,noload,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback.
[  388.658629][T10940] 8021q: adding VLAN 0 to HW filter on device bond0
[  388.674738][T10940] 8021q: adding VLAN 0 to HW filter on device team0
[  388.731577][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  388.749785][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  388.829001][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  388.837894][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  388.851649][ T4310] bridge0: port 1(bridge_slave_0) entered blocking state
[  388.858768][ T4310] bridge0: port 1(bridge_slave_0) entered forwarding state
[  388.901029][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  388.938747][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  388.957934][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  388.983177][ T4339] bridge0: port 2(bridge_slave_1) entered blocking state
[  388.990274][ T4339] bridge0: port 2(bridge_slave_1) entered forwarding state
[  389.102484][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  389.722885][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  389.752056][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  389.771576][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  389.793713][T10940] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  389.808631][T10940] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  389.825594][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  389.834279][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  389.847436][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  389.939328][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  389.947749][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  389.974649][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  390.043641][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  390.084393][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  390.294350][T11104] loop5: detected capacity change from 0 to 128
[  390.310077][T11103] loop8: detected capacity change from 0 to 2048
[  390.365295][T11104] FAT-fs (loop5): error, corrupted directory (invalid entries)
[  390.394654][T11104] FAT-fs (loop5): Filesystem has been set read-only
[  390.422014][T11103] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  390.511366][ T4777] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  390.648950][ T4777] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  390.659178][ T1872] Bluetooth: hci4: command 0x040f tx timeout
[  390.670554][T10940] 8021q: adding VLAN 0 to HW filter on device batadv0
[  391.220821][T11121] loop4: detected capacity change from 0 to 1024
[  391.430516][T11121] EXT4-fs (loop4): Ignoring removed oldalloc option
[  391.437115][T11121] EXT4-fs (loop4): Ignoring removed bh option
[  391.471927][T11121] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  391.547461][T11121] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,usrquota,data_err=ignore,nobarrier,oldalloc,grpquota,noload,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback.
[  391.697658][ T4778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  391.715637][T11142] loop8: detected capacity change from 0 to 2048
[  391.727837][ T4778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  391.824391][   T25] audit: type=1804 audit(1769155267.654:40): pid=11121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1859" name="/newroot/378/file1/bus" dev="loop4" ino=18 res=1 errno=0
[  392.350725][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  392.377790][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  392.387523][T10940] device veth0_vlan entered promiscuous mode
[  392.414908][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  392.435267][T11142] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  392.489334][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  392.595500][T10940] device veth1_vlan entered promiscuous mode
[  392.667735][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  392.675994][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  392.684633][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  392.693693][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  392.711052][T10940] device veth0_macvtap entered promiscuous mode
[  392.733738][T10940] device veth1_macvtap entered promiscuous mode
[  392.755183][ T1872] Bluetooth: hci4: command 0x0419 tx timeout
[  392.779779][T10940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  392.816695][T10940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  392.861564][T10940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  392.895399][T10940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  392.915360][T10940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  392.945452][T10940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  392.965643][T10940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  392.991990][T10940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  393.040877][T10940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  393.103772][T10940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  393.124012][T11178] loop8: detected capacity change from 0 to 128
[  393.163167][T10940] batman_adv: batadv0: Interface activated: batadv_slave_0
[  393.164119][T11178] FAT-fs (loop8): error, corrupted directory (invalid entries)
[  393.191204][T11178] FAT-fs (loop8): Filesystem has been set read-only
[  393.204606][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  393.219625][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  393.230454][T10940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  393.252089][T10940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  393.288762][T10940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  393.328727][T10940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  393.358758][T10940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  393.386658][T10940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  393.413501][T10940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  393.438713][T10940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  393.468782][T10940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  393.486218][T10940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  393.518256][T10940] batman_adv: batadv0: Interface activated: batadv_slave_1
[  393.537857][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  393.558268][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  393.709234][T10940] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  393.718948][T10940] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  393.727841][T10940] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  393.737437][T10940] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  393.925434][ T4339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  394.135979][ T4339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  394.321408][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  394.454162][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  394.465401][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  394.489828][ T4777] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  394.529770][T11192] loop5: detected capacity change from 0 to 1024
[  394.585967][T11192] EXT4-fs (loop5): Ignoring removed oldalloc option
[  394.596064][T11192] EXT4-fs (loop5): Ignoring removed bh option
[  394.630078][T11192] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  394.702015][T11196] loop9: detected capacity change from 0 to 4096
[  394.793911][T11192] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,usrquota,data_err=ignore,nobarrier,oldalloc,grpquota,noload,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback.
[  394.840379][T11196] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  394.977792][   T25] audit: type=1804 audit(1769155270.804:41): pid=11192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.1874" name="/newroot/391/file1/bus" dev="loop5" ino=18 res=1 errno=0
[  395.014380][T11208] EXT4-fs (loop9): shut down requested (1)
[  395.531456][T11196] EXT4-fs error (device loop9): ext4_do_update_inode:5222: inode #15: comm syz.9.1826: corrupted inode contents
[  395.723387][T11217] loop4: detected capacity change from 0 to 512
[  395.730373][ T4330] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  395.741734][ T4330] Quota error (device loop9): write_blk: dquota write failed
[  395.797426][T11217] EXT4-fs (loop4): quotafile must be on filesystem root
[  395.922336][ T4330] Quota error (device loop9): free_dqentry: Can't write quota data block 5
[  396.408883][T11223] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1880'.
[  397.095873][T11236] loop4: detected capacity change from 0 to 128
[  398.045304][T11236] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  398.056077][T11236] ext4 filesystem being mounted at /385/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  398.674974][T11249] loop9: detected capacity change from 0 to 1024
[  398.912203][T11254] loop5: detected capacity change from 0 to 2048
[  399.533511][T11258] loop8: detected capacity change from 0 to 512
[  399.631922][T11258] EXT4-fs (loop8): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback.
[  399.674387][T11258] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  399.680132][T11268] loop4: detected capacity change from 0 to 4096
[  400.333431][T11268] EXT4-fs (loop4): Test dummy encryption mode enabled
[  400.358971][T11264] loop7: detected capacity change from 0 to 1024
[  400.377378][T11268] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c01d, mo2=0002]
[  400.435420][T11268] System zones: 0-5
[  400.441841][T11268] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,stripe=0x0000000000000061,grpid,test_dummy_encryption=v1,nombcache,data_err=ignore,acl,journal_ioprio=0x0000000000000000,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback.
[  400.536787][T11264] EXT4-fs (loop7): Ignoring removed oldalloc option
[  400.542255][T11277] loop5: detected capacity change from 0 to 512
[  400.561568][T11279] loop9: detected capacity change from 0 to 512
[  400.611715][T11279] EXT4-fs (loop9): Ignoring removed oldalloc option
[  400.629802][T11277] EXT4-fs (loop5): mounted filesystem without journal. Opts: i_version,nodiscard,min_batch_time=0x00000000000003ff,,errors=continue. Quota mode: none.
[  400.696368][T11264] EXT4-fs (loop7): Ignoring removed bh option
[  400.703233][T11264] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  400.726515][T11279] EXT4-fs error (device loop9): ext4_xattr_inode_iget:401: comm syz.9.1896: inode #1: comm syz.9.1896: iget: illegal inode #
[  400.745454][T11268] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  400.747782][T11286] loop8: detected capacity change from 0 to 256
[  400.778074][T11279] EXT4-fs error (device loop9): ext4_xattr_inode_iget:406: comm syz.9.1896: error while reading EA inode 1 err=-117
[  400.791640][T11279] EXT4-fs error (device loop9): ext4_xattr_inode_iget:401: comm syz.9.1896: inode #1: comm syz.9.1896: iget: illegal inode #
[  400.855875][ T4229] Bluetooth: hci0: command 0x0406 tx timeout
[  400.978613][T11279] EXT4-fs error (device loop9): ext4_xattr_inode_iget:406: comm syz.9.1896: error while reading EA inode 1 err=-117
[  400.983166][T11286] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  401.003611][T11291] loop5: detected capacity change from 0 to 128
[  401.023352][T11279] EXT4-fs (loop9): 1 orphan inode deleted
[  401.029688][T11279] EXT4-fs (loop9): mounted filesystem without journal. Opts: usrjquota=,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,oldalloc,,errors=continue. Quota mode: writeback.
[  401.068185][T11291] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  401.078930][T11291] ext4 filesystem being mounted at /398/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  401.123215][ T4249] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  401.171639][T11286] exFAT-fs (loop8): Medium has reported failures. Some data may be lost.
[  401.185379][T11286] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  401.273597][T11295] loop5: detected capacity change from 0 to 1024
[  401.306525][T11295] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option
[  401.315558][T11295] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  401.358002][T11295] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003]
[  401.366536][T11295] System zones: 0-1, 3-36
[  401.384020][ T4249] usb 5-1: Using ep0 maxpacket: 32
[  401.392605][T11295] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,delalloc,bsdgroups,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback.
[  401.399928][T11297] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d)
[  401.452695][T11264] EXT4-fs (loop7): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,usrquota,data_err=ignore,nobarrier,oldalloc,grpquota,noload,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback.
[  401.518931][ T4249] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  401.536925][ T4249] usb 5-1: New USB device found, idVendor=056a, idProduct=4004, bcdDevice= 0.00
[  401.549702][ T4249] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  401.581682][ T4249] usb 5-1: config 0 descriptor??
[  401.629098][   T25] audit: type=1804 audit(1769155277.464:42): pid=11305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.1891" name="/newroot/96/file1/bus" dev="loop7" ino=18 res=1 errno=0
[  401.688289][T11307] binder_alloc: 11306: pid 11306 spamming oneway? 2 buffers allocated for a total size of 5120
[  401.703271][T11307] binder_alloc: 11306: pid 11306 spamming oneway? 3 buffers allocated for a total size of 5128
[  402.210947][T11311] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  402.222039][T11311] ext4 filesystem being mounted at /5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  402.321718][ T4323] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  402.388844][ T4249] usbhid 5-1:0.0: can't add hid device: -71
[  402.395458][ T4249] usbhid: probe of 5-1:0.0 failed with error -71
[  402.416674][ T4249] usb 5-1: USB disconnect, device number 11
[  402.543109][T11319] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  402.620352][T11319] EXT4-fs error (device loop8): ext4_do_update_inode:5222: inode #15: comm syz.8.1908: corrupted inode contents
[  402.717134][T11319] EXT4-fs error (device loop8): ext4_dirty_inode:6058: inode #15: comm syz.8.1908: mark_inode_dirty error
[  402.728825][ T4323] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  402.739757][ T4323] usb 6-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00
[  402.750303][T11319] EXT4-fs error (device loop8): ext4_do_update_inode:5222: inode #15: comm syz.8.1908: corrupted inode contents
[  402.790171][ T4323] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  402.802613][T11319] EXT4-fs error (device loop8): __ext4_ext_dirty:183: inode #15: comm syz.8.1908: mark_inode_dirty error
[  402.834178][ T4323] usb 6-1: config 0 descriptor??
[  402.846996][T11319] EXT4-fs error (device loop8): ext4_do_update_inode:5222: inode #15: comm syz.8.1908: corrupted inode contents
[  402.862284][T11319] EXT4-fs error (device loop8): __ext4_ext_dirty:183: inode #15: comm syz.8.1908: mark_inode_dirty error
[  402.910769][T11325] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  402.923391][T11319] EXT4-fs error (device loop8): ext4_do_update_inode:5222: inode #15: comm syz.8.1908: corrupted inode contents
[  403.008347][T11319] EXT4-fs error (device loop8): ext4_truncate:4279: inode #15: comm syz.8.1908: mark_inode_dirty error
[  403.069589][T11319] EXT4-fs error (device loop8): ext4_evict_inode:293: comm syz.8.1908: couldn't truncate inode 15 (err -117)
[  403.184497][T11336] FAT-fs (loop9): error, corrupted directory (invalid entries)
[  403.195674][T11336] FAT-fs (loop9): Filesystem has been set read-only
[  403.296975][T11341] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad258, utbl_chksum : 0xe619d30d)
[  403.347351][T11343] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  403.390044][ T4323] usbhid 6-1:0.0: can't add hid device: -71
[  403.398087][ T4323] usbhid: probe of 6-1:0.0 failed with error -71
[  403.452521][ T4323] usb 6-1: USB disconnect, device number 9
[  403.659666][ T4187] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  403.782547][T11351] set_capacity_and_notify: 7 callbacks suppressed
[  403.782559][T11351] loop4: detected capacity change from 0 to 8
[  403.937420][T11351] Page size > filesystem block size (0).  This is currently not supported!
[  404.028924][ T4187] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  404.048741][ T4187] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[  404.128610][T11369] loop7: detected capacity change from 0 to 4096
[  404.142217][ T4187] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  404.218422][ T4187] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  404.262751][ T4187] usb 9-1: SerialNumber: syz
[  404.613297][ T4187] usb 9-1: 0:2 : does not exist
[  404.633671][T11371] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1926'.
[  404.665006][T11371] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1926'.
[  404.698635][ T4187] usb 9-1: USB disconnect, device number 5
[  404.896322][T11379] loop5: detected capacity change from 0 to 128
[  404.918558][T11380] loop9: detected capacity change from 0 to 128
[  405.326280][T11380] FAT-fs (loop9): error, corrupted directory (invalid entries)
[  405.381419][T11380] FAT-fs (loop9): Filesystem has been set read-only
[  405.530835][T11386] mmap: syz.8.1930 (11386): VmData 37457920 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data.
[  405.596701][T11369] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  405.868782][ T4187] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  405.910903][T11400] loop9: detected capacity change from 0 to 512
[  405.964889][T11369] EXT4-fs error (device loop7): ext4_do_update_inode:5222: inode #15: comm syz.7.1925: corrupted inode contents
[  405.983037][T11369] EXT4-fs error (device loop7): ext4_dirty_inode:6058: inode #15: comm syz.7.1925: mark_inode_dirty error
[  406.045514][T11400] EXT4-fs (loop9): mounted filesystem without journal. Opts: i_version,nodiscard,min_batch_time=0x00000000000003ff,,errors=continue. Quota mode: none.
[  406.152897][T11369] EXT4-fs error (device loop7): ext4_do_update_inode:5222: inode #15: comm syz.7.1925: corrupted inode contents
[  406.232131][T11369] EXT4-fs error (device loop7): __ext4_ext_dirty:183: inode #15: comm syz.7.1925: mark_inode_dirty error
[  406.248981][ T4187] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  406.277138][ T4187] usb 6-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00
[  406.282224][T11407] loop9: detected capacity change from 0 to 256
[  406.297261][ T4187] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  406.322088][ T4187] usb 6-1: config 0 descriptor??
[  406.346482][T11407] exFAT-fs (loop9): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  406.759406][T11413] loop8: detected capacity change from 0 to 16
[  406.769448][T11369] EXT4-fs error (device loop7): ext4_do_update_inode:5222: inode #15: comm syz.7.1925: corrupted inode contents
[  406.793317][T11413] erofs: (device loop8): mounted with root inode @ nid 36.
[  406.928229][T11369] EXT4-fs error (device loop7): __ext4_ext_dirty:183: inode #15: comm syz.7.1925: mark_inode_dirty error
[  406.940053][T11369] EXT4-fs error (device loop7): ext4_do_update_inode:5222: inode #15: comm syz.7.1925: corrupted inode contents
[  406.955012][T11369] EXT4-fs error (device loop7): ext4_truncate:4279: inode #15: comm syz.7.1925: mark_inode_dirty error
[  406.966235][ T4187] usbhid 6-1:0.0: can't add hid device: -71
[  406.972302][ T4187] usbhid: probe of 6-1:0.0 failed with error -71
[  406.988480][T11369] EXT4-fs error (device loop7): ext4_evict_inode:293: comm syz.7.1925: couldn't truncate inode 15 (err -117)
[  406.992019][ T4187] usb 6-1: USB disconnect, device number 10
[  407.068969][T11415] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  407.085949][T11415] erofs: (device loop8): z_erofs_lz4_decompress: failed to decompress -44 in[46, 4050] out[1851]
[  407.098428][T11415] erofs: (device loop8): z_erofs_readpage: failed to read, err [-117]
[  407.603674][T11422] loop5: detected capacity change from 0 to 128
[  407.672104][T11423] loop9: detected capacity change from 0 to 512
[  407.771183][T11423] EXT4-fs (loop9): quotafile must be on filesystem root
[  407.800930][T11422] FAT-fs (loop5): error, corrupted directory (invalid entries)
[  407.836612][T11422] FAT-fs (loop5): Filesystem has been set read-only
[  408.174632][T11450] loop9: detected capacity change from 0 to 4096
[  408.234590][T11450] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  408.277560][T11450] EXT4-fs error (device loop9): ext4_do_update_inode:5222: inode #15: comm syz.9.1953: corrupted inode contents
[  408.293370][T11450] EXT4-fs error (device loop9): ext4_dirty_inode:6058: inode #15: comm syz.9.1953: mark_inode_dirty error
[  408.311114][T11450] EXT4-fs error (device loop9): ext4_do_update_inode:5222: inode #15: comm syz.9.1953: corrupted inode contents
[  408.339312][ T4249] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  408.348318][T11450] EXT4-fs error (device loop9): __ext4_ext_dirty:183: inode #15: comm syz.9.1953: mark_inode_dirty error
[  408.361078][T11450] EXT4-fs error (device loop9): ext4_do_update_inode:5222: inode #15: comm syz.9.1953: corrupted inode contents
[  408.384632][T11450] EXT4-fs error (device loop9): __ext4_ext_dirty:183: inode #15: comm syz.9.1953: mark_inode_dirty error
[  408.408154][ T4323] kernel write not supported for file /uinput (pid: 4323 comm: kworker/0:7)
[  408.550203][T11450] EXT4-fs error (device loop9): ext4_do_update_inode:5222: inode #15: comm syz.9.1953: corrupted inode contents
[  408.646012][T11450] EXT4-fs error (device loop9): ext4_truncate:4279: inode #15: comm syz.9.1953: mark_inode_dirty error
[  408.658448][T11450] EXT4-fs error (device loop9): ext4_evict_inode:293: comm syz.9.1953: couldn't truncate inode 15 (err -117)
[  408.739320][ T4249] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  409.260276][ T4249] usb 5-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00
[  409.269394][ T4249] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  409.282644][ T4249] usb 5-1: config 0 descriptor??
[  409.820635][T11480] loop9: detected capacity change from 0 to 512
[  409.838829][ T4249] usbhid 5-1:0.0: can't add hid device: -71
[  409.844915][ T4249] usbhid: probe of 5-1:0.0 failed with error -71
[  409.859677][ T4249] usb 5-1: USB disconnect, device number 12
[  409.878885][T11480] EXT4-fs (loop9): mounted filesystem without journal. Opts: i_version,nodiscard,min_batch_time=0x00000000000003ff,,errors=continue. Quota mode: none.
[  410.976246][T11503] loop4: detected capacity change from 0 to 1024
[  411.067442][T11503] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option
[  411.088035][T11503] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  411.122702][T11503] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003]
[  411.312611][T11503] System zones: 0-1, 3-36
[  411.367215][T11503] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,delalloc,bsdgroups,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback.
[  411.742144][T11517] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1974'.
[  412.250602][T11520] loop4: detected capacity change from 0 to 1024
[  412.329471][T11520] EXT4-fs (loop4): Ignoring removed bh option
[  412.386265][T11527] loop8: detected capacity change from 0 to 512
[  412.418208][T11520] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none.
[  412.648766][ T4228] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  412.918854][ T4228] usb 10-1: Using ep0 maxpacket: 16
[  413.039468][ T4228] usb 10-1: config 0 has an invalid interface number: 29 but max is 0
[  413.048999][ T4228] usb 10-1: config 0 has no interface number 0
[  413.104957][ T4228] usb 10-1: config 0 interface 29 altsetting 0 bulk endpoint 0xA has invalid maxpacket 16
[  413.122878][T11527] EXT4-fs (loop8): 1 orphan inode deleted
[  413.150938][T11527] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpid,,errors=continue. Quota mode: writeback.
[  413.189591][ T4228] usb 10-1: config 0 interface 29 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024
[  413.216549][T11527] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  413.275048][ T4228] usb 10-1: config 0 interface 29 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024
[  413.498787][ T4228] usb 10-1: New USB device found, idVendor=050d, idProduct=2102, bcdDevice=70.d0
[  413.524139][ T4228] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  413.533524][ T4228] usb 10-1: Product: syz
[  413.537787][ T4228] usb 10-1: Manufacturer: syz
[  413.543427][ T4228] usb 10-1: SerialNumber: syz
[  413.553882][ T4228] usb 10-1: config 0 descriptor??
[  413.572607][T11550] loop5: detected capacity change from 0 to 512
[  413.579096][T11529] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  413.589748][T11529] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  413.706158][T11550] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  413.780904][   T25] audit: type=1800 audit(1769155289.614:43): pid=11550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1985" name="bus" dev="loop5" ino=18 res=0 errno=0
[  413.900691][T11557] loop5: detected capacity change from 0 to 256
[  413.928408][T11557] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  413.978748][T11557] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  414.030886][T11557] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  414.956879][T11570] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1990'.
[  415.093403][T11576] loop5: detected capacity change from 0 to 256
[  415.602842][T11576] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d)
[  415.657636][ T4236] usb 10-1: USB disconnect, device number 2
[  415.919090][T11594] loop9: detected capacity change from 0 to 2048
[  416.029910][T11597] loop8: detected capacity change from 0 to 2048
[  416.100991][T11594] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  416.189370][T11597] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  416.436084][T11606] loop5: detected capacity change from 0 to 128
[  416.510361][T11610] loop4: detected capacity change from 0 to 256
[  416.532902][T11609] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2003'.
[  416.576498][T11606] FAT-fs (loop5): error, corrupted directory (invalid entries)
[  416.617034][T11606] FAT-fs (loop5): Filesystem has been set read-only
[  416.634537][T11610] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d)
[  416.685158][T11619] loop8: detected capacity change from 0 to 1024
[  416.763045][T11619] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  416.869578][T11619] EXT4-fs (loop8): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000003,norecovery,debug_want_extra_isize=0x0000000000000080,data_err=ignore,nodelalloc,acl,dioread_nolock,,errors=continue. Quota mode: none.
[  416.937441][T11629] loop7: detected capacity change from 0 to 2048
[  416.979479][T11619] EXT4-fs error (device loop8): __ext4_iget:4912: inode #15: block 1803188595: comm syz.8.2007: invalid block
[  417.076727][T11633] EXT4-fs (loop8): shut down requested (0)
[  417.733947][T11629] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found!
[  418.227533][T11648] loop8: detected capacity change from 0 to 512
[  418.272588][T11648] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  418.298333][T11642] device wlan0 entered promiscuous mode
[  418.310989][T11629] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  418.329436][T11642] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2013'.
[  418.375843][T11642] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  418.441283][T11654] loop4: detected capacity change from 0 to 256
[  418.496049][T11654] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d)
[  419.420897][T11681] loop4: detected capacity change from 0 to 8
[  419.548952][T11680] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  419.680591][T11690] exfat: Bad value for 'uid'
[  419.855593][T11694] FAT-fs (loop8): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  419.910956][T11696] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  420.112744][T11690] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2019'.
[  420.183796][T11700] set_capacity_and_notify: 4 callbacks suppressed
[  420.183811][T11700] loop8: detected capacity change from 0 to 256
[  420.365414][T11700] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d)
[  420.989083][T11726] loop4: detected capacity change from 0 to 512
[  421.327252][T11726] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  421.758091][T11744] loop5: detected capacity change from 0 to 128
[  422.125541][T11756] loop5: detected capacity change from 0 to 1024
[  422.203310][T11756] EXT4-fs (loop5): Ignoring removed bh option
[  422.257613][T11756] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none.
[  422.772814][T11771] loop4: detected capacity change from 0 to 2048
[  423.295167][T11775] loop7: detected capacity change from 0 to 256
[  423.554523][T11779] loop5: detected capacity change from 0 to 1024
[  423.565683][T11781] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2061'.
[  423.800563][T11775] exFAT-fs (loop7): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  423.829165][T11797] loop4: detected capacity change from 0 to 512
[  423.901475][T11797] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  424.016407][T11808] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2073'.
[  424.159155][T11809] loop5: detected capacity change from 0 to 2048
[  424.618770][ T4228] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  425.019649][T11839] loop4: detected capacity change from 0 to 512
[  425.108799][ T4228] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  425.121816][T11839] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  425.129025][ T4228] usb 9-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00
[  425.150816][T11841] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2085'.
[  425.159815][ T4257] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  425.171279][ T4228] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  425.365054][ T4228] usb 9-1: config 0 descriptor??
[  425.428720][ T4257] usb 10-1: device descriptor read/64, error -71
[  425.610390][T11858] loop4: detected capacity change from 0 to 128
[  425.631687][T11860] loop5: detected capacity change from 0 to 2048
[  425.699537][T11860] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  425.713709][ T4257] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  426.428128][ T4257] usb 10-1: device descriptor read/64, error -71
[  426.501709][ T4228] usbhid 9-1:0.0: can't add hid device: -71
[  426.507795][ T4228] usbhid: probe of 9-1:0.0 failed with error -71
[  426.532612][ T4228] usb 9-1: USB disconnect, device number 6
[  426.580890][T11875] loop4: detected capacity change from 0 to 4096
[  426.599382][ T4257] usb usb10-port1: attempt power cycle
[  426.647728][T11875] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  426.675657][T11875] EXT4-fs error (device loop4): ext4_do_update_inode:5222: inode #15: comm syz.4.2097: corrupted inode contents
[  426.694111][T11875] EXT4-fs error (device loop4): ext4_dirty_inode:6058: inode #15: comm syz.4.2097: mark_inode_dirty error
[  426.716258][T11875] EXT4-fs error (device loop4): ext4_do_update_inode:5222: inode #15: comm syz.4.2097: corrupted inode contents
[  426.729386][T11875] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #15: comm syz.4.2097: mark_inode_dirty error
[  426.744105][T11875] EXT4-fs error (device loop4): ext4_do_update_inode:5222: inode #15: comm syz.4.2097: corrupted inode contents
[  426.758038][T11875] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #15: comm syz.4.2097: mark_inode_dirty error
[  426.780105][T11875] EXT4-fs error (device loop4): ext4_do_update_inode:5222: inode #15: comm syz.4.2097: corrupted inode contents
[  426.815111][T11875] EXT4-fs error (device loop4): ext4_truncate:4279: inode #15: comm syz.4.2097: mark_inode_dirty error
[  426.840075][T11875] EXT4-fs error (device loop4): ext4_evict_inode:293: comm syz.4.2097: couldn't truncate inode 15 (err -117)
[  426.983481][T11883] loop5: detected capacity change from 0 to 512
[  427.033149][T11883] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  427.068820][ T4257] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  427.089912][T11883] EXT4-fs (loop5): 1 truncate cleaned up
[  427.128837][T11883] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  427.158884][ T4257] usb 10-1: device descriptor read/8, error -71
[  427.198405][T11896] loop7: detected capacity change from 0 to 2048
[  427.377903][T11902] loop5: detected capacity change from 0 to 128
[  427.438888][ T4257] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  427.549656][ T4257] usb 10-1: device descriptor read/8, error -71
[  427.614565][T11908] loop8: detected capacity change from 0 to 2048
[  427.623932][T11896] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  427.787287][ T4257] usb usb10-port1: unable to enumerate USB device
[  427.828442][T11906] loop4: detected capacity change from 0 to 512
[  427.995490][T11908] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  428.816132][T11935] loop4: detected capacity change from 0 to 512
[  428.876437][T11935] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.2118: iget: bad i_size value: 38620345925642
[  428.989061][T11941] loop5: detected capacity change from 0 to 2048
[  429.052950][T11935] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.2118: couldn't read orphan inode 15 (err -117)
[  429.207468][T11935] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=continue,delalloc,data_err=ignore,journal_ioprio=0x0000000000000002,data_err=ignore,nojournal_checksum,,errors=continue. Quota mode: writeback.
[  429.403859][T11935] mmap: syz.4.2118 (11935) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[  429.667364][T11938] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  429.686938][T11945] FAT-fs (loop5): error, corrupted directory (invalid entries)
[  429.696823][T11945] FAT-fs (loop5): Filesystem has been set read-only
[  430.512272][T11938] EXT4-fs error (device loop7): ext4_do_update_inode:5222: inode #15: comm syz.7.2112: corrupted inode contents
[  430.547037][T11961] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  430.615539][T11961] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  430.708245][T11938] EXT4-fs error (device loop7): ext4_dirty_inode:6058: inode #15: comm syz.7.2112: mark_inode_dirty error
[  430.725406][  T154] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  430.755853][T11938] EXT4-fs error (device loop7): ext4_do_update_inode:5222: inode #15: comm syz.7.2112: corrupted inode contents
[  430.826796][T11938] EXT4-fs error (device loop7): __ext4_ext_dirty:183: inode #15: comm syz.7.2112: mark_inode_dirty error
[  430.859659][T11938] EXT4-fs error (device loop7): ext4_do_update_inode:5222: inode #15: comm syz.7.2112: corrupted inode contents
[  430.897923][T11938] EXT4-fs error (device loop7): __ext4_ext_dirty:183: inode #15: comm syz.7.2112: mark_inode_dirty error
[  431.152810][T11938] EXT4-fs error (device loop7): ext4_do_update_inode:5222: inode #15: comm syz.7.2112: corrupted inode contents
[  431.179312][T11938] EXT4-fs error (device loop7): ext4_truncate:4279: inode #15: comm syz.7.2112: mark_inode_dirty error
[  431.306881][T11984] set_capacity_and_notify: 3 callbacks suppressed
[  431.306909][T11984] loop5: detected capacity change from 0 to 2048
[  431.322225][ T1108] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  431.647357][T11938] EXT4-fs error (device loop7): ext4_evict_inode:293: comm syz.7.2112: couldn't truncate inode 15 (err -117)
[  431.693770][T11988] loop4: detected capacity change from 0 to 16
[  431.728917][T11990] device syzkaller0 entered promiscuous mode
[  431.746075][T11988] erofs: (device loop4): mounted with root inode @ nid 36.
[  431.756245][T11990] loop8: detected capacity change from 0 to 164
[  431.807160][ T1108] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  431.844852][ T1108] usb 10-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00
[  431.851005][T11990] Unable to read rock-ridge attributes
[  431.920960][ T1108] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  431.932117][ T1108] usb 10-1: config 0 descriptor??
[  432.073588][T11996] loop5: detected capacity change from 0 to 4096
[  432.121333][T11996] EXT4-fs (loop5): Ignoring removed bh option
[  432.367539][T11996] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,bh,grpquota,stripe=0x0000000000000001,. Quota mode: writeback.
[  432.619077][ T1108] usbhid 10-1:0.0: can't add hid device: -71
[  432.627135][ T1108] usbhid: probe of 10-1:0.0 failed with error -71
[  432.718089][ T1108] usb 10-1: USB disconnect, device number 7
[  432.768733][   T21] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  432.859107][T11996] EXT4-fs error (device loop5): ext4_empty_dir:3154: inode #12: block 80: comm syz.5.2137: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0
[  432.882599][T11996] EXT4-fs (loop5): Remounting filesystem read-only
[  432.890440][T11996] EXT4-fs warning (device loop5): ext4_empty_dir:3156: inode #12: comm syz.5.2137: directory missing '..'
[  432.968730][   T21] usb 5-1: device descriptor read/64, error -71
[  433.525211][   T21] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  433.729423][   T21] usb 5-1: device descriptor read/64, error -71
[  433.859075][   T21] usb usb5-port1: attempt power cycle
[  434.453494][T12032] loop9: detected capacity change from 0 to 2048
[  434.525762][T12038] loop5: detected capacity change from 0 to 128
[  434.582468][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  434.588918][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  434.589201][   T21] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  434.708888][   T21] usb 5-1: device descriptor read/8, error -71
[  435.268785][   T21] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  435.360295][   T21] usb 5-1: device descriptor read/8, error -71
[  435.508912][   T21] usb usb5-port1: unable to enumerate USB device
[  436.136008][T12060] loop5: detected capacity change from 0 to 512
[  436.291489][T12068] loop9: detected capacity change from 0 to 512
[  436.640890][T12068] EXT4-fs (loop9): quotafile must be on filesystem root
[  436.849486][T12060] EXT4-fs (loop5): mounted filesystem without journal. Opts: i_version,nodiscard,min_batch_time=0x00000000000003ff,,errors=continue. Quota mode: none.
[  437.072443][T12080] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2165'.
[  437.117142][T12081] loop5: detected capacity change from 0 to 128
[  437.170777][T12081] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  437.228597][T12088] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2168'.
[  437.229257][   T21] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[  437.264411][T12089] loop7: detected capacity change from 0 to 1024
[  437.347296][T12090] loop8: detected capacity change from 0 to 1024
[  437.436724][T12089] EXT4-fs (loop7): Ignoring removed bh option
[  437.443257][   T21] usb 10-1: device descriptor read/64, error -71
[  437.514328][T12089] EXT4-fs (loop7): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none.
[  438.192291][T12089] EXT4-fs error (device loop7): ext4_find_dest_de:2115: inode #12: block 7: comm syz.7.2167: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0
[  438.194176][T12101] loop5: detected capacity change from 0 to 2048
[  438.254364][T12089] EXT4-fs (loop7): Remounting filesystem read-only
[  438.298799][   T21] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[  438.324853][T12101] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  438.525902][   T21] usb 10-1: device descriptor read/64, error -71
[  438.608189][T12118] loop7: detected capacity change from 0 to 512
[  438.611042][T12117] loop5: detected capacity change from 0 to 8
[  438.638702][T12117] SQUASHFS error: Failed to read block 0x260685: -5
[  438.646466][T12117] SQUASHFS error: Unable to read metadata cache entry [260685]
[  438.654754][   T21] usb usb10-port1: attempt power cycle
[  438.693820][T12117] SQUASHFS error: Unable to read directory block [260685:0]
[  439.257530][ T4187] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  439.287946][T12118] EXT4-fs (loop7): mounted filesystem without journal. Opts: i_version,nodiscard,min_batch_time=0x00000000000003ff,,errors=continue. Quota mode: none.
[  439.382162][T12123] loop5: detected capacity change from 0 to 1024
[  439.414477][T12123] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  439.476632][T12123] EXT4-fs (loop5): mounted filesystem without journal. Opts: resgid=0x0000000000000000,dioread_lock,dioread_nolock,errors=remount-ro,. Quota mode: none.
[  439.484381][T12130] loop7: detected capacity change from 0 to 128
[  439.526361][T12123] ext4 filesystem being mounted at /471/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  439.541510][T12130] FAT-fs (loop7): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  439.561492][T12133] loop8: detected capacity change from 0 to 256
[  439.628995][ T4187] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  439.646998][T12133] exFAT-fs (loop8): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  439.659294][ T4187] usb 5-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00
[  439.688898][ T4187] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  439.705707][   T21] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[  439.710705][ T4187] usb 5-1: config 0 descriptor??
[  439.858872][   T21] usb 10-1: device descriptor read/8, error -71
[  439.969845][T12139] loop5: detected capacity change from 0 to 1024
[  440.688770][ T4187] usbhid 5-1:0.0: can't add hid device: -71
[  440.695242][ T4187] usbhid: probe of 5-1:0.0 failed with error -71
[  440.738957][ T4187] usb 5-1: USB disconnect, device number 17
[  440.964261][T12158] EXT4-fs (loop8): mounted filesystem without journal. Opts: i_version,nodiscard,min_batch_time=0x00000000000003ff,,errors=continue. Quota mode: none.
[  441.191712][T12167] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2192'.
[  441.781390][T12173] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  441.843431][T12170] EXT4-fs (loop4): Ignoring removed oldalloc option
[  441.881751][   T25] audit: type=1800 audit(1769155317.714:44): pid=12173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2193" name="bus" dev="loop8" ino=18 res=0 errno=0
[  441.917590][T12170] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.2194: inode has both inline data and extents flags
[  441.986424][T12170] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.2194: couldn't read orphan inode 15 (err -117)
[  442.032013][T12175] FAT-fs (loop9): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  442.702521][T12170] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,oldalloc,discard,,errors=continue. Quota mode: writeback.
[  443.117177][T12193] set_capacity_and_notify: 4 callbacks suppressed
[  443.117190][T12193] loop8: detected capacity change from 0 to 512
[  443.188857][T12193] EXT4-fs (loop8): mounted filesystem without journal. Opts: i_version,nodiscard,min_batch_time=0x00000000000003ff,,errors=continue. Quota mode: none.
[  443.302040][T12197] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2204'.
[  443.952813][T12211] loop8: detected capacity change from 0 to 256
[  443.978774][ T1108] usb 10-1: new high-speed USB device number 12 using dummy_hcd
[  444.073855][T12211] exFAT-fs (loop8): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  444.253470][T12220] loop5: detected capacity change from 0 to 2048
[  444.306158][T12227] loop7: detected capacity change from 0 to 128
[  444.402501][ T1108] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  444.502824][T12230] Cannot find del_set index 0 as target
[  444.715201][ T1108] usb 10-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00
[  444.820974][ T1108] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  444.863611][ T1108] usb 10-1: config 0 descriptor??
[  445.019158][T12220] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  445.396420][T12234] loop8: detected capacity change from 0 to 1024
[  445.418339][T12234] EXT4-fs (loop8): Ignoring removed oldalloc option
[  445.439247][T12227] FAT-fs (loop7): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  445.479560][T12234] EXT4-fs (loop8): Ignoring removed bh option
[  445.485680][T12234] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  445.620454][T12234] EXT4-fs (loop8): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,usrquota,data_err=ignore,nobarrier,oldalloc,grpquota,noload,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback.
[  445.769523][   T25] audit: type=1804 audit(1769155321.604:45): pid=12234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.2215" name="/newroot/94/file1/bus" dev="loop8" ino=18 res=1 errno=0
[  445.808805][ T1108] usbhid 10-1:0.0: can't add hid device: -71
[  445.815313][ T1108] usbhid: probe of 10-1:0.0 failed with error -71
[  445.858833][ T1108] usb 10-1: USB disconnect, device number 12
[  445.878482][T12243] loop5: detected capacity change from 0 to 512
[  445.943579][T12243] EXT4-fs (loop5): mounted filesystem without journal. Opts: i_version,nodiscard,min_batch_time=0x00000000000003ff,,errors=continue. Quota mode: none.
[  446.004537][T12246] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2217'.
[  446.291265][T12250] loop6: detected capacity change from 0 to 7
[  446.313811][ T4176] Dev loop6: unable to read RDB block 7
[  446.323667][ T4176]  loop6: unable to read partition table
[  446.345343][ T4176] loop6: partition table beyond EOD, truncated
[  446.366364][T12250] Dev loop6: unable to read RDB block 7
[  446.372210][T12250]  loop6: unable to read partition table
[  446.388127][T12250] loop6: partition table beyond EOD, truncated
[  446.420861][T12250] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ	œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5)
[  446.628707][ T1108] usb 10-1: new high-speed USB device number 13 using dummy_hcd
[  446.714003][T12266] loop8: detected capacity change from 0 to 1024
[  446.873418][T12272] loop7: detected capacity change from 0 to 512
[  447.603398][T12279] loop5: detected capacity change from 0 to 1024
[  447.615353][T12279] EXT4-fs (loop5): Ignoring removed oldalloc option
[  447.628300][T12279] EXT4-fs (loop5): Ignoring removed bh option
[  447.683034][T12279] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  447.745257][ T1108] usb 10-1: config index 0 descriptor too short (expected 12324, got 36)
[  447.748989][T12279] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,usrquota,data_err=ignore,nobarrier,oldalloc,grpquota,noload,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback.
[  447.759192][ T1108] usb 10-1: config 102 has too many interfaces: 120, using maximum allowed: 32
[  447.786046][ T1108] usb 10-1: config 102 has an invalid descriptor of length 102, skipping remainder of the config
[  447.796715][ T1108] usb 10-1: config 102 has 0 interfaces, different from the descriptor's value: 120
[  447.815127][T12272] EXT4-fs (loop7): mounted filesystem without journal. Opts: i_version,nodiscard,min_batch_time=0x00000000000003ff,,errors=continue. Quota mode: none.
[  447.837311][   T25] audit: type=1804 audit(1769155323.664:46): pid=12279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.2231" name="/newroot/485/file1/bus" dev="loop5" ino=18 res=1 errno=0
[  447.878849][ T4228] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  448.299589][ T4228] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  448.368911][ T4228] usb 5-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00
[  448.423833][ T4228] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  448.513038][ T4228] usb 5-1: config 0 descriptor??
[  448.519061][ T1108] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  448.528585][ T1108] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  448.547358][ T1108] usb 10-1: Product: syz
[  448.567516][ T1108] usb 10-1: Manufacturer: syz
[  448.577906][ T1108] usb 10-1: SerialNumber: syz
[  448.856800][T12303] loop5: detected capacity change from 0 to 1024
[  449.012295][ T1108] usb 10-1: USB disconnect, device number 13
[  449.238980][ T4228] usbhid 5-1:0.0: can't add hid device: -71
[  449.264405][ T4228] usbhid: probe of 5-1:0.0 failed with error -71
[  449.515293][ T4228] usb 5-1: USB disconnect, device number 18
[  449.866592][T12319] loop5: detected capacity change from 0 to 1024
[  450.007138][T12319] EXT4-fs (loop5): Ignoring removed oldalloc option
[  450.046851][T12319] EXT4-fs (loop5): Ignoring removed bh option
[  450.086392][T12319] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  450.592266][T12319] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,usrquota,data_err=ignore,nobarrier,oldalloc,grpquota,noload,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback.
[  450.663555][   T25] audit: type=1804 audit(1769155326.494:47): pid=12319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.2243" name="/newroot/490/file1/bus" dev="loop5" ino=18 res=1 errno=0
[  450.672418][T12336] loop9: detected capacity change from 0 to 512
[  450.717248][T12336] EXT4-fs (loop9): mounted filesystem without journal. Opts: i_version,nodiscard,min_batch_time=0x00000000000003ff,,errors=continue. Quota mode: none.
[  450.890899][T12342] loop4: detected capacity change from 0 to 512
[  451.005040][T12342] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  451.046998][   T25] audit: type=1800 audit(1769155326.874:48): pid=12342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2250" name="bus" dev="loop4" ino=18 res=0 errno=0
[  451.149633][ T1872] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  451.177474][T12351] loop4: detected capacity change from 0 to 1024
[  451.288805][ T7433] usb 10-1: new high-speed USB device number 14 using dummy_hcd
[  451.328816][ T4249] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  451.476670][T12353] attempt to access beyond end of device
[  451.476670][T12353] loop4: rw=0, want=112670, limit=1024
[  451.487870][T12353] Buffer I/O error on dev loop4, logical block 56334, async page read
[  451.496500][T12353] attempt to access beyond end of device
[  451.496500][T12353] loop4: rw=0, want=112670, limit=1024
[  451.525382][T12353] Buffer I/O error on dev loop4, logical block 56334, async page read
[  451.538952][   T25] audit: type=1800 audit(1769155327.364:49): pid=12353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2254" name="file1" dev="loop4" ino=20 res=0 errno=0
[  451.588976][ T7433] usb 10-1: Using ep0 maxpacket: 8
[  451.708932][ T4249] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  451.723979][ T4249] usb 6-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00
[  451.733648][ T4249] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  451.748062][ T4249] usb 6-1: config 0 descriptor??
[  451.759070][ T7433] usb 10-1: unable to get BOS descriptor or descriptor too short
[  451.848877][ T7433] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  451.861669][ T7433] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  451.871586][ T1872] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  451.871847][ T7433] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024
[  451.893990][ T1872] usb 9-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00
[  451.894092][ T7433] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024
[  451.903359][ T1872] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  451.926394][ T1872] usb 9-1: config 0 descriptor??
[  451.934448][ T7433] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  451.961937][ T7433] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024
[  451.979965][ T7433] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024
[  452.054079][T12376] loop4: detected capacity change from 0 to 512
[  452.075723][T12376] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  452.095657][   T25] audit: type=1800 audit(1769155327.924:50): pid=12376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2264" name="bus" dev="loop4" ino=18 res=0 errno=0
[  452.248843][ T7433] usb 10-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[  452.258007][ T7433] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  452.434855][ T1872] cherry 0003:046A:0023.0008: unknown main item tag 0x0
[  452.472167][ T1872] cherry 0003:046A:0023.0008: unknown main item tag 0x0
[  452.506557][ T1872] cherry 0003:046A:0023.0008: unknown main item tag 0x0
[  452.542895][ T1872] cherry 0003:046A:0023.0008: unknown main item tag 0x0
[  452.581912][ T1872] cherry 0003:046A:0023.0008: unknown main item tag 0x0
[  452.690128][ T1872] cherry 0003:046A:0023.0008: hidraw0: USB HID v0.00 Device [HID 046a:0023] on usb-dummy_hcd.8-1/input0
[  452.734757][ T7433] usb 10-1: Product: syz
[  452.739513][ T7433] usb 10-1: Manufacturer: syz
[  452.744203][ T7433] usb 10-1: SerialNumber: syz
[  452.765353][ T1872] usb 9-1: USB disconnect, device number 7
[  452.768830][ T4249] usbhid 6-1:0.0: can't add hid device: -71
[  452.777123][ T4249] usbhid: probe of 6-1:0.0 failed with error -71
[  452.784602][ T7433] usb 10-1: config 0 descriptor??
[  452.809068][T12347] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  452.816184][T12347] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  452.833651][ T4249] usb 6-1: USB disconnect, device number 11
[  452.884480][T12384] fido_id[12384]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory
[  453.167068][ T7433] usb 10-1: USB disconnect, device number 14
[  453.598945][ T4249] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  453.653435][T12418] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2282'.
[  453.683226][T12420] loop4: detected capacity change from 0 to 256
[  453.708795][ T7433] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  453.747974][T12420] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  453.838720][ T4249] usb 6-1: Using ep0 maxpacket: 8
[  453.909479][T12434] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2286'.
[  453.959491][ T4249] usb 6-1: config 179 has an invalid descriptor of length 52, skipping remainder of the config
[  453.978710][ T4249] usb 6-1: config 179 has 0 interfaces, different from the descriptor's value: 1
[  453.998111][ T4249] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  454.038764][ T4249] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  454.069044][ T7433] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  454.085193][ T7433] usb 9-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00
[  454.095849][ T7433] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  454.199300][ T7433] usb 9-1: config 0 descriptor??
[  454.466131][ T1872] usb 6-1: USB disconnect, device number 12
[  455.038788][ T7433] usbhid 9-1:0.0: can't add hid device: -71
[  455.044830][ T7433] usbhid: probe of 9-1:0.0 failed with error -71
[  455.066404][ T7433] usb 9-1: USB disconnect, device number 8
[  455.214377][T12462] loop5: detected capacity change from 0 to 256
[  455.238404][T12463] loop7: detected capacity change from 0 to 512
[  455.484426][T12462] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  455.963773][T12463] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  456.596437][ T4229] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  456.714046][T12497] kvm: pic: single mode not supported
[  456.714601][T12497] kvm: pic: single mode not supported
[  456.720792][T12497] kvm: pic: level sensitive irq not supported
[  456.728577][T12497] kvm: pic: single mode not supported
[  456.734859][T12497] kvm: pic: level sensitive irq not supported
[  456.768258][T12500] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2308'.
[  456.858725][ T4229] usb 9-1: Using ep0 maxpacket: 16
[  456.981022][ T4229] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  457.005980][ T4229] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  457.044743][ T4229] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  457.097032][ T4229] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  457.133677][ T4229] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  457.181774][ T4229] usb 9-1: config 0 descriptor??
[  457.724391][ T4229] microsoft 0003:045E:07DA.0009: unbalanced collection at end of report description
[  457.734579][ T4229] microsoft 0003:045E:07DA.0009: parse failed
[  457.740724][ T4229] microsoft: probe of 0003:045E:07DA.0009 failed with error -22
[  457.926886][ T4323] usb 9-1: USB disconnect, device number 9
[  458.330884][T12510] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2311'.
[  459.426601][T12528] loop5: detected capacity change from 0 to 512
[  459.469663][T12533] loop9: detected capacity change from 0 to 2048
[  459.629714][T12535] loop8: detected capacity change from 0 to 512
[  459.716966][T12535] FAT-fs (loop8): bogus logical sector size 0
[  459.723133][T12535] FAT-fs (loop8): Can't find a valid FAT filesystem
[  459.786383][T12533] UDF-fs: error (device loop9): udf_process_sequence: Primary Volume Descriptor not found!
[  459.830542][T12533] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  459.845339][T12530] loop4: detected capacity change from 0 to 512
[  459.956002][T12528] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  460.219364][T12547] loop8: detected capacity change from 0 to 256
[  460.394912][T12547] exFAT-fs (loop8): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  460.777266][T12550] loop4: detected capacity change from 0 to 2048
[  460.845649][T12550] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  461.009067][T12563] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  461.184252][T12568] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2331'.
[  461.193288][T12571] loop5: detected capacity change from 0 to 2048
[  461.382517][T12571] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found!
[  461.651137][T12571] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  462.572470][T12600] loop9: detected capacity change from 0 to 512
[  462.618272][T12600] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  462.648571][T12589] loop8: detected capacity change from 0 to 512
[  462.762017][ T4187] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  463.081932][T12613] loop8: detected capacity change from 0 to 2048
[  464.118979][ T4187] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  464.141163][ T4187] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  464.160634][ T4187] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping
[  464.181554][ T4187] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  464.245062][T12623] loop8: detected capacity change from 0 to 1024
[  464.287732][T12623] EXT4-fs (loop8): Ignoring removed oldalloc option
[  464.298952][ T4187] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  464.310739][T12623] EXT4-fs (loop8): Ignoring removed bh option
[  464.316893][ T4187] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  464.349867][ T4187] usb 5-1: SerialNumber: syz
[  464.362178][T12623] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  464.424383][T12623] EXT4-fs (loop8): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,usrquota,data_err=ignore,nobarrier,oldalloc,grpquota,noload,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback.
[  464.545458][   T25] audit: type=1804 audit(1769155340.374:51): pid=12623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.2350" name="/newroot/119/file1/bus" dev="loop8" ino=18 res=1 errno=0
[  464.630977][ T4187] usb 5-1: 0:2 : does not exist
[  464.639299][ T4187] usb 5-1: unit 5 not found!
[  464.696054][ T4187] usb 5-1: USB disconnect, device number 19
[  464.939533][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  465.085630][T12648] loop5: detected capacity change from 0 to 2048
[  465.228059][T12648] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  465.340959][T12648] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  465.643221][T12656] loop8: detected capacity change from 0 to 2048
[  466.382140][T12685] loop8: detected capacity change from 0 to 256
[  467.555114][T12685] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d)
[  468.037115][T12708] loop5: detected capacity change from 0 to 2048
[  468.826709][T12715] loop9: detected capacity change from 0 to 1024
[  469.621482][T12733] binder: 12732:12733 ioctl c0306201 0 returned -14
[  470.665384][T12757] loop5: detected capacity change from 0 to 512
[  470.881881][T12757] EXT4-fs (loop5): Ignoring removed mblk_io_submit option
[  470.884551][T12764] loop4: detected capacity change from 0 to 1024
[  470.994174][ T4187] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  471.009003][T12764] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option
[  471.027177][T12766] input: syz1 as /devices/virtual/input/input14
[  471.044091][T12764] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  471.057443][T12757] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: comm syz.5.2397: inode #1: comm syz.5.2397: iget: illegal inode #
[  471.074254][T12757] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.2397: error while reading EA inode 1 err=-117
[  471.083649][T12764] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003]
[  471.095971][T12757] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: comm syz.5.2397: inode #1: comm syz.5.2397: iget: illegal inode #
[  471.138080][T12764] System zones: 0-1, 3-36
[  471.157250][T12757] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.2397: error while reading EA inode 1 err=-117
[  471.165505][T12764] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,delalloc,bsdgroups,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback.
[  471.192292][T12757] EXT4-fs (loop5): 1 orphan inode deleted
[  471.198115][T12757] EXT4-fs (loop5): mounted filesystem without journal. Opts: minixdf,stripe=0x0000000000000000,norecovery,noinit_itable,max_batch_time=0x0000000000000006,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,errors=continue,dioread_lock,noblock_validity,mblk_io_submit,,errors=continue. Quota mode: none.
[  471.308703][ T4187] usb 9-1: Using ep0 maxpacket: 8
[  471.439034][ T4187] usb 9-1: config 0 has an invalid interface number: 150 but max is 0
[  471.455606][ T4187] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  471.491061][ T4187] usb 9-1: config 0 has no interface number 0
[  471.510889][ T4187] usb 9-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75
[  471.541747][ T4187] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  471.580776][ T4187] usb 9-1: config 0 descriptor??
[  471.822816][T12780] device bridge_slave_0 entered promiscuous mode
[  471.998034][ T4229] usb 9-1: USB disconnect, device number 10
[  472.225824][T12791] binder: 12790:12791 ioctl c0306201 0 returned -14
[  472.396297][T12794] loop4: detected capacity change from 0 to 512
[  472.442731][T12794] EXT4-fs (loop4): Ignoring removed nobh option
[  472.465073][T12794] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  472.497758][T12794] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.2408: invalid indirect mapped block 256 (level 1)
[  472.514339][T12794] EXT4-fs (loop4): Remounting filesystem read-only
[  472.521741][T12794] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.2408: invalid indirect mapped block 2683928664 (level 1)
[  472.536373][T12794] EXT4-fs (loop4): Remounting filesystem read-only
[  472.554363][T12794] EXT4-fs (loop4): 1 truncate cleaned up
[  472.560407][T12794] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,dioread_lock,nobh,nouid32,errors=remount-ro,usrjquota=.noacl,nodiscard,jqfmt=vfsv0,delalloc,,. Quota mode: writeback.
[  472.608965][T12799] loop7: detected capacity change from 0 to 128
[  472.720210][T12802] loop4: detected capacity change from 0 to 1024
[  472.887839][T12806] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2412'.
[  472.907399][T12802] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option
[  472.926506][T12802] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  473.619721][T12802] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003]
[  473.628086][T12802] System zones: 0-1, 3-36
[  473.731080][T12802] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,delalloc,bsdgroups,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback.
[  473.872409][T12816] loop9: detected capacity change from 0 to 256
[  474.002093][T12816] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad258, utbl_chksum : 0xe619d30d)
[  474.511926][T12822] loop5: detected capacity change from 0 to 128
[  474.825288][T12816] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2415'.
[  474.952880][T12829] loop8: detected capacity change from 0 to 512
[  474.953053][T12822] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  474.970308][T12822] ext4 filesystem being mounted at /538/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  475.024027][T12829] EXT4-fs warning (device loop8): ext4_multi_mount_protect:300: Invalid MMP block in superblock
[  475.196558][T12833] loop7: detected capacity change from 0 to 128
[  475.229573][T12831] loop9: detected capacity change from 0 to 256
[  475.369527][T12833] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  475.426961][T12838] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  475.449040][T12833] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  475.459467][T12838] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  475.789807][T12853] Cannot find del_set index 0 as target
[  476.161331][T12809] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  476.449489][T12869] set_capacity_and_notify: 1 callbacks suppressed
[  476.449518][T12869] loop4: detected capacity change from 0 to 2048
[  476.854188][T12868] loop5: detected capacity change from 0 to 1024
[  476.915479][T12868] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option
[  476.939566][T12868] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  476.998527][T12868] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003]
[  477.038513][T12868] System zones: 0-1, 3-36
[  477.066128][T12868] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,delalloc,bsdgroups,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback.
[  477.941068][ T4228] Bluetooth: hci3: command 0x0406 tx timeout
[  477.988544][T12889] device syzkaller0 entered promiscuous mode
[  478.073004][T12886] loop9: detected capacity change from 0 to 128
[  478.143787][T12886] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  478.154683][T12886] ext4 filesystem being mounted at /101/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  478.647412][T12899] kvm: pic: single mode not supported
[  478.649665][T12899] kvm: pic: single mode not supported
[  478.656851][T12899] kvm: pic: level sensitive irq not supported
[  478.696376][T12909] loop9: detected capacity change from 0 to 512
[  478.716754][T12899] kvm: pic: non byte read
[  478.782572][T12913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2445'.
[  478.796658][T12893] loop5: detected capacity change from 0 to 512
[  478.807324][T12909] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  478.843628][T12915] loop8: detected capacity change from 0 to 1024
[  479.013152][T12915] EXT4-fs (loop8): Ignoring removed nomblk_io_submit option
[  479.027050][T12921] loop7: detected capacity change from 0 to 2048
[  479.033552][T12915] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  479.074558][T12915] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003]
[  479.084981][T12915] System zones: 0-1, 3-36
[  479.123130][T12915] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpquota,delalloc,bsdgroups,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback.
[  479.319297][T12925] loop9: detected capacity change from 0 to 2048
[  479.347609][T12921] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  479.359315][T12925] UDF-fs: bad mount option "GÏÌÿÿÿ�
€ãÿÿ " or missing value
[  479.523328][T12935] device syzkaller0 entered promiscuous mode
[  480.249494][T12945] loop5: detected capacity change from 0 to 128
[  480.727213][T12945] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  480.738425][T12945] ext4 filesystem being mounted at /546/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  480.834767][T12953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2457'.
[  481.205316][T12958] loop8: detected capacity change from 0 to 2048
[  481.613282][ T1108] usb 10-1: new high-speed USB device number 15 using dummy_hcd
[  481.645485][T12964] loop4: detected capacity change from 0 to 32768
[  481.651457][T12965] loop5: detected capacity change from 0 to 1024
[  481.781716][T12965] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option
[  481.786992][T12964] JBD2: Ignoring recovery information on journal
[  481.840867][T12964] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  481.855984][T12965] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  481.914354][T12970] loop8: detected capacity change from 0 to 1024
[  481.946001][ T4186] ocfs2: Unmounting device (7,4) on (node local)
[  481.954869][T12965] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003]
[  481.963573][T12970] EXT4-fs (loop8): Ignoring removed oldalloc option
[  481.989107][T12970] EXT4-fs (loop8): Ignoring removed bh option
[  481.995211][T12970] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  482.014595][T12965] System zones: 0-1, 3-36
[  482.059002][ T1108] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  482.087519][T12970] EXT4-fs (loop8): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,usrquota,data_err=ignore,nobarrier,oldalloc,grpquota,noload,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback.
[  482.105211][T12977] loop7: detected capacity change from 0 to 128
[  482.119923][T12965] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,delalloc,bsdgroups,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback.
[  482.169349][   T25] audit: type=1804 audit(1769155358.004:52): pid=12970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.2461" name="/newroot/141/file1/bus" dev="loop8" ino=18 res=1 errno=0
[  482.230789][ T1108] usb 10-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00
[  482.237747][   T25] audit: type=1800 audit(1769155358.064:53): pid=12977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2464" name="bus" dev="loop7" ino=1048675 res=0 errno=0
[  482.277911][ T1108] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  482.388248][ T1108] usb 10-1: config 0 descriptor??
[  483.076174][T12984] loop5: detected capacity change from 0 to 512
[  483.240255][T12984] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  483.342406][ T4398] EXT4-fs error (device loop5): __ext4_get_inode_loc:4327: comm syz-executor: Invalid inode table block 402655231 in block_group 0
[  483.358342][ T4398] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5854: Corrupt filesystem
[  483.374235][ T4398] EXT4-fs error (device loop5): ext4_dirty_inode:6058: inode #2: comm syz-executor: mark_inode_dirty error
[  483.458416][ T4398] EXT4-fs error (device loop5): __ext4_get_inode_loc:4327: comm syz-executor: Invalid inode table block 402655231 in block_group 0
[  483.506331][ T4398] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5854: Corrupt filesystem
[  483.521063][ T4398] EXT4-fs error (device loop5): __ext4_unlink:3327: inode #2: comm syz-executor: mark_inode_dirty error
[  483.625341][T13001] loop8: detected capacity change from 0 to 1024
[  483.778828][T12767] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 402655231: invalid block bitmap
[  483.779128][ T1108] usbhid 10-1:0.0: can't add hid device: -71
[  483.798941][ T1108] usbhid: probe of 10-1:0.0 failed with error -71
[  483.816460][ T1108] usb 10-1: USB disconnect, device number 15
[  484.000323][ T4330] EXT4-fs error (device loop5): __ext4_get_inode_loc:4327: comm kworker/u4:7: Invalid inode table block 402655231 in block_group 0
[  484.020583][T12809] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  484.175389][T12809] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  484.245884][T12809] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  484.428111][T12809] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  484.815276][T13012] loop9: detected capacity change from 0 to 1024
[  484.948569][T13012] EXT4-fs (loop9): Ignoring removed nomblk_io_submit option
[  485.043674][T13012] EXT4-fs (loop9): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  485.319686][T13012] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003]
[  485.388838][T13012] System zones: 0-1, 3-36
[  485.463150][T13012] EXT4-fs (loop9): mounted filesystem without journal. Opts: grpquota,delalloc,bsdgroups,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback.
[  485.508904][T13015] loop4: detected capacity change from 0 to 128
[  485.527920][T13015] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  485.553288][T13015] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  485.718944][T13023] Cannot find del_set index 0 as target
[  485.768786][ T7433] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[  486.306340][ T1425] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  486.345506][ T7433] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  486.382968][T13029] loop7: detected capacity change from 0 to 512
[  486.406488][ T7433] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 3
[  486.426979][ T7433] usb 9-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[  486.460940][ T7433] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  486.503279][ T7433] usb 9-1: config 0 descriptor??
[  486.651834][T13046] loop9: detected capacity change from 0 to 512
[  486.824940][T13046] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  486.882104][T13029] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  486.921185][T13025] chnl_net:caif_netlink_parms(): no params data found
[  487.095493][T13069] loop4: detected capacity change from 0 to 1024
[  487.121775][T13025] bridge0: port 1(bridge_slave_0) entered blocking state
[  487.130489][T13025] bridge0: port 1(bridge_slave_0) entered disabled state
[  487.138484][T13025] device bridge_slave_0 entered promiscuous mode
[  487.147042][T13025] bridge0: port 2(bridge_slave_1) entered blocking state
[  487.154253][T13025] bridge0: port 2(bridge_slave_1) entered disabled state
[  487.162428][T13025] device bridge_slave_1 entered promiscuous mode
[  487.178823][ T7433] Bluetooth: Can't get version to change to load ram patch err
[  487.196498][ T7433] Bluetooth: Loading sysconfig file failed
[  487.202649][ T7433] ath3k: probe of 9-1:0.0 failed with error -71
[  487.211111][ T7433] usb 9-1: USB disconnect, device number 11
[  487.293972][ T8485] EXT4-fs error (device loop7): __ext4_get_inode_loc:4327: comm syz-executor: Invalid inode table block 402655231 in block_group 0
[  487.297243][T13025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  487.316306][ T8485] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5854: Corrupt filesystem
[  487.328529][T13025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  487.337811][ T8485] EXT4-fs error (device loop7): ext4_dirty_inode:6058: inode #2: comm syz-executor: mark_inode_dirty error
[  487.383194][ T8485] EXT4-fs error (device loop7): __ext4_get_inode_loc:4327: comm syz-executor: Invalid inode table block 402655231 in block_group 0
[  487.423116][ T8485] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5854: Corrupt filesystem
[  487.442593][T13025] team0: Port device team_slave_0 added
[  487.459828][  T144] EXT4-fs error (device loop7): __ext4_get_inode_loc:4327: comm kworker/u4:1: Invalid inode table block 402655231 in block_group 0
[  487.494789][ T8485] EXT4-fs error (device loop7): __ext4_unlink:3327: inode #2: comm syz-executor: mark_inode_dirty error
[  487.513820][T13025] team0: Port device team_slave_1 added
[  487.555663][T13025] batman_adv: batadv0: Adding interface: batadv_slave_0
[  487.570718][T13025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  487.572885][T13087] loop9: detected capacity change from 0 to 128
[  487.612208][T13087] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  487.632623][T13087] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  487.649296][T13025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  487.805817][T13091] Cannot find del_set index 0 as target
[  488.352276][ T1872] Bluetooth: hci1: command 0x0409 tx timeout
[  489.218703][T13016] EXT4-fs error (device loop7): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 402655231: invalid block bitmap
[  595.668582][    C0] rcu: INFO: rcu_preempt self-detected stall on CPU
[  595.675187][    C0] rcu: 	0-...!: (10580 ticks this GP) idle=c69/1/0x4000000000000000 softirq=41015/41017 fqs=418 
[  595.686900][    C0] 	(t=10500 jiffies g=46197 q=152)
[  595.691990][    C0] rcu: rcu_preempt kthread starved for 9663 jiffies! g46197 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
[  595.703065][    C0] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  595.713001][    C0] rcu: RCU grace-period kthread stack dump:
[  595.718857][    C0] task:rcu_preempt     state:R  running task     stack:26960 pid:   15 ppid:     2 flags:0x00004000
[  595.729603][    C0] Call Trace:
[  595.732885][    C0]  <TASK>
[  595.735793][    C0]  __schedule+0x11ef/0x43c0
[  595.740359][    C0]  ? rcu_is_watching+0x11/0xa0
[  595.745127][    C0]  ? release_firmware_map_entry+0x190/0x190
[  595.750990][    C0]  schedule+0x11b/0x1e0
[  595.755119][    C0]  schedule_timeout+0x184/0x2d0
[  595.759936][    C0]  ? console_conditional_schedule+0x40/0x40
[  595.765794][    C0]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  595.771654][    C0]  ? update_process_times+0x200/0x200
[  595.777058][    C0]  ? prepare_to_swait_event+0x331/0x350
[  595.782617][    C0]  rcu_gp_fqs_loop+0x2be/0x11d0
[  595.787440][    C0]  ? dyntick_save_progress_counter+0x230/0x230
[  595.793588][    C0]  ? rcu_gp_init+0x10f0/0x10f0
[  595.798318][    C0]  ? finish_swait+0xc0/0x1d0
[  595.802874][    C0]  rcu_gp_kthread+0x9b/0x370
[  595.807429][    C0]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  595.813330][    C0]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[  595.818405][    C0]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  595.824284][    C0]  ? __kthread_parkme+0x157/0x1b0
[  595.829343][    C0]  kthread+0x436/0x520
[  595.833378][    C0]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[  595.838458][    C0]  ? kthread_blkcg+0xd0/0xd0
[  595.843038][    C0]  ret_from_fork+0x1f/0x30
[  595.847464][    C0]  </TASK>
[  595.850450][    C0] rcu: Stack dump where RCU GP kthread last ran:
[  595.856739][    C0] Sending NMI from CPU 0 to CPUs 1:
[  595.861924][    C1] NMI backtrace for cpu 1 skipped: idling at default_idle+0xb/0x10
[  595.862909][    C0] NMI backtrace for cpu 0
[  595.875065][    C0] CPU: 0 PID: 13091 Comm: syz.9.2489 Not tainted syzkaller #0
[  595.882485][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  595.892505][    C0] Call Trace:
[  595.895754][    C0]  <IRQ>
[  595.898581][    C0]  dump_stack_lvl+0x188/0x250
[  595.903262][    C0]  ? show_regs_print_info+0x20/0x20
[  595.908440][    C0]  ? load_image+0x400/0x400
[  595.912928][    C0]  ? try_to_wake_up+0x3d4/0x1050
[  595.917893][    C0]  nmi_cpu_backtrace+0x3a2/0x3d0
[  595.922847][    C0]  ? nmi_trigger_cpumask_backtrace+0x280/0x280
[  595.928964][    C0]  ? _raw_spin_lock_irqsave+0xbc/0x100
[  595.934395][    C0]  ? _raw_spin_lock+0x40/0x40
[  595.939041][    C0]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  595.945116][    C0]  nmi_trigger_cpumask_backtrace+0x163/0x280
[  595.951062][    C0]  rcu_dump_cpu_stacks+0x22f/0x380
[  595.956142][    C0]  print_cpu_stall+0x31d/0x5f0
[  595.960870][    C0]  rcu_sched_clock_irq+0x6ea/0x1120
[  595.966031][    C0]  ? rcutree_dead_cpu+0x20/0x20
[  595.970845][    C0]  ? account_process_tick+0x22a/0x3a0
[  595.976182][    C0]  update_process_times+0x193/0x200
[  595.981359][    C0]  tick_sched_timer+0x37d/0x560
[  595.986224][    C0]  ? tick_setup_sched_timer+0x2c0/0x2c0
[  595.991733][    C0]  __hrtimer_run_queues+0x4ad/0xb70
[  595.997005][    C0]  ? hrtimer_interrupt+0x8d0/0x8d0
[  596.002092][    C0]  ? ktime_get_update_offsets_now+0x3ce/0x3e0
[  596.008137][    C0]  hrtimer_interrupt+0x3bb/0x8d0
[  596.013053][    C0]  __sysvec_apic_timer_interrupt+0x137/0x4a0
[  596.019019][    C0]  sysvec_apic_timer_interrupt+0x9b/0xc0
[  596.024680][    C0]  </IRQ>
[  596.027588][    C0]  <TASK>
[  596.030488][    C0]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  596.036559][    C0] RIP: 0010:_raw_spin_unlock_irq+0x25/0x40
[  596.042343][    C0] Code: 00 00 00 66 90 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 4e 2c 98 f7 48 89 df e8 86 04 99 f7 e8 11 f3 b9 f7 fb bf 01 00 00 00 <e8> 06 0b 8d f7 65 8b 05 87 17 3d 76 85 c0 74 02 5b c3 e8 d4 24 3b
[  596.062364][    C0] RSP: 0018:ffffc9000382fbc0 EFLAGS: 00000282
[  596.068397][    C0] RAX: f6123a8450358100 RBX: ffff8880737c1280 RCX: f6123a8450358100
[  596.076421][    C0] RDX: dffffc0000000000 RSI: ffffffff8a2b2780 RDI: 0000000000000001
[  596.084359][    C0] RBP: 0000000000000000 R08: ffff8880737c1283 R09: 1ffff1100e6f8250
[  596.092297][    C0] R10: dffffc0000000000 R11: ffffed100e6f8251 R12: ffff8880737c1280
[  596.100235][    C0] R13: 0000000000000021 R14: dffffc0000000000 R15: 000000001c000004
[  596.108184][    C0]  get_signal+0x11d6/0x12c0
[  596.112730][    C0]  arch_do_signal_or_restart+0xe7/0x12c0
[  596.118342][    C0]  ? _copy_from_user+0x111/0x170
[  596.123291][    C0]  ? load_gs_index+0x130/0x130
[  596.128025][    C0]  ? get_sigframe_size+0x10/0x10
[  596.132933][    C0]  ? exit_to_user_mode_loop+0x3b/0x130
[  596.138359][    C0]  exit_to_user_mode_loop+0x9e/0x130
[  596.143606][    C0]  exit_to_user_mode_prepare+0xee/0x180
[  596.149120][    C0]  syscall_exit_to_user_mode+0x16/0x40
[  596.154546][    C0]  do_syscall_64+0x58/0xa0
[  596.158945][    C0]  ? clear_bhb_loop+0x30/0x80
[  596.163585][    C0]  ? clear_bhb_loop+0x30/0x80
[  596.168225][    C0]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  596.174126][    C0] RIP: 0033:0x7fd9b49f2cb7
[  596.178508][    C0] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89
[  596.198092][    C0] RSP: 002b:00007fd9b2c0c0e8 EFLAGS: 00000246
[  596.204124][    C0] RAX: 00000000000000ca RBX: 00007fd9b4c6e188 RCX: 00007fd9b49f2cb9
[  596.212059][    C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd9b4c6e188
[  596.219994][    C0] RBP: 00007fd9b4c6e180 R08: 0000000000000000 R09: 0000000000000000
[  596.227936][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  596.235872][    C0] R13: 00007fd9b4c6e218 R14: 00007ffea78a2640 R15: 00007ffea78a2728
[  596.243826][    C0]  </TASK>