last executing test programs:

9m47.803095094s ago: executing program 32 (id=22):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x7ffe)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8)
syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
syz_mount_image$cramfs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000400)=ANY=[], 0xfe, 0x15a, &(0x7f00000001c0)="$eJzs0D9rWmEUx/Hvc+9z1VLFllqQQqvQxVYK/qHdSvGWSh1aoaVLJ8HetoJiqZC4RQnZMghZHUKyhkBegUaHkJAsyZvI4hbIaLj3akKI7yDns4i/85zfgfvp/UlKceNjs/Hvv9NqOb+S38pfit/PB4OCmwegvXdr7r8fFuAvmqGGSRfceByx+F2rO0a1WXf/TwoQBOyHuLkFROf37JimqyGLv596CaOn3juDu5mTx/L2nmmwo36WAaa1B37fYz9z+y4AE5QKzI49N1krpRNPFLT76d2do6/Hh6U3rz8467li71U4bqZXYAtbhQ7Gf87M2db8N5/LvctnsgZvT73CTg/9ObwEPxVot8/A6wsQf6F/wKqCDe/WZF9FgNHmZbkRvP7WnWUzCSrRr1bi1nYl9sjATGl3MmUBb0Jo0UgIIYQQQgghhBBCCCGEEEIIIcR9dxUAAP//e59N9w==")

9m40.878141603s ago: executing program 1 (id=45):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000001900)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}], [], 0x6b}})
lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000380))

9m40.631021453s ago: executing program 1 (id=46):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./file2\x00', 0x8, &(0x7f0000000240)={[{@autodefrag}, {@autodefrag}, {@barrier}, {@max_inline={'max_inline', 0x3d, [0x6d]}}, {@clear_cache}, {@discard}, {@noenospc_debug}, {@space_cache_v2}, {@thread_pool={'thread_pool', 0x3d, 0x1}}]}, 0x1, 0x55a3, &(0x7f000000ac40)="$eJzs3X9snHUdB/DnruvaFdeWMOuArGwDJFtEOjdNCCR2bNNpYTnphE3I+gNH0DmtY8NVCCtinIERijWMwQoLbn9MEYqucyiJBewqul8IJtNFBbPFNWOkOBExYTG9u+d299zaHhMpwuu1tM/zvc/z/d73njx/3PvW73MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABEHwx+N3TL/t3roJ26+ru++8a85e+2D3kuMX3rq1avND20v2dTz31aNVq1qPLF1w0/2JpkfW93d3BkEs2S+W7t9w2fwrr69vuKI0HLDxc6ltZeVQT5nq+mKqMTbnwcF+uT9NQRAURwYoSm/npXfiOQNkdlfkDzisayf1tE4dP69x28qujc8uu3xL/ktnUOloT2C0pK+rgyeupdrk73jkiEw769KL5Vyiqf7RC+4deREAwFtSk0huMm9H029xM+22aD3Sro202yPt8B1Ce3bjVKTGHTvUPCdH66M0z9pUVCgZcp6Revr8Z9qJaP9IOxI13sI8cw9NR5rSoebZEqmP1jwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3k0uuH5m/d49D7/8ldbf/u7h17/16sePrGq8ZaC7/qJ1ix/v2PG9vx2tWtV6ZOmCm+5PND2yvr+7Mwgqk/1iqe6xZ6ri8ZkDddseu6e3puFDC9cUpccNt2OyDg72hzsXVwRBc1blYDhsf3kQJHILyWawIb/wpeTOZ8ICAAAA7yVnJn/HM+1UHCzOaceSaTKW/BdKhcVrJ/W0Th0/r3Hbyq6Nzy67fMupj5cYYrzak46XaVee+IllBeMw/kbHO1EPD12RN87woiNG8/zpx/qnNdfdUHrl7gsWzphdv+XS4CfTD3csX3TfhBfHL9nXXpOX/yuHz//hmZP/AQAA+G/I/9FxhjdS/m+uqZh0cOp3ix67rur44fkP/Lyz7/kn4w8VD3Q//dLYcbf9cnVe/p+c85R5+T+ccZj/48Gp5X8AAAB4N/tf5//avHGGN1L+/8X+zZ//98pvTDk84187Xnj69xdvnVI+/7WyGTe8+cSCVxp2tf0pL//XFJb/x2RPO3xwVzjhZRVBUFP4SQUAAAByhP/vfuKjhTCvpz45iOb1y+4qe3LXG+tvjJ/V8o8zFvfPqv7i7tVf37ApNrChc92O5XNX5OX/2sLyf/E783IBAACAAvxm+y13V395ydYtew7N2XFnYvPYS+a+uuennVf1vXwsUfT8zX15+T9RWP4vGZ2XAwAAAJzEU+MmPnfo0UNfm7177YS9q9rmPD5t3+qFD/xz9t+veOnPxzddWJ6X/xsLy/9l6W165UOq087wrxA6KoKgdHCnJVXoC9o/mSkAAAAAb5Mwpzc1revduX7MrNfOPvzDNSuW/2rvpd++a2P1zQd+XXX7ucf2996Yl/9bhr//f3ing3D9f879//LW/2cVUnf9u8SNAQAAAHg/yl/PH94eP/XNBUN9/36h6/8/euaBko7m8ysnx7dVz3rig31Xra1+fVHHRZ/YfusbH46V//VTefm/rbD8X5S9fTu//w8AAABOwf/b9/8tzhtneCPd/79v3DPnrPnsPT+o/WbZU+e+eXfzd9oPTj9v87QzPlJ0fvecmX/4fl7+by8s/4fb07JfXk94fm6vCIKJgzvpuwluDae7LFLoKs4qpE58pEd92CNd6CrJKiS1RHp8rCIIpgzutEUKp4eF9khhoDxd2BQp7A0L6eshU3g0UugJr7R7y9PTjRZ+FhbSCyy6whUUp2WWRER6HBuqx2DhpD0OZJ4cAADgfSUMz+ksW5zbDKJRtis20gFlIx0QH+mAopEOGBM5IHrgUI8HjbmF8PEfz+1e+so1D9b1Xt1w9KzZe5bc0faBnkW9O7/wo55z/nL1Cws/nZf/NxWW/8NTMTa1GWr9fxCu/09/r2Fm/X9jWKiMFLrCQiJ6x4BE+BypsHtn+ByViXSPgYmZAgAAALynhZ8LFI3yPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/sHfvcVJVd4LATzf9oJum6YgBY4ygRkR3aZomGEQcUXRXo4tNJKtjhtAIjXZoAwq4YsyKr3GV6GLUmBjZwY+jJg6r+CDqRIXoiElGJfE5Kz4HnciqS9BR45gs++m+dYqqW112IaC0+/3+0XWqfud569F17r11LgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/P/hsiX3Nrw58H9965ffW/f697409TdTD9m8y19uqHt3yDlPbT5ocN0tbw1asPCNtklnXtsyffk1G1YuDaGlq1xZUrzsoUHl5aP/cMxdt13xcNO0wVPOrcrUm4mHfp1/yjN3Loytvto/hLvLQqhIB0bUJYHKzP26WN8edSF8LmwJZEu01SYl0g2Hh2tCWBa2BLJV3VsTQl1OYMoTD666rDNxVU0I+4YQqtNtvFCdtFGTDgyrSgK16cCciiTw/uZENnBPeRKAbRbfDNkX/YqW/AwN3Zcr8vqr3G4d+3Slh9cnJhqK53vrsB3cqRxV6QdatulpK6iOHaLg7bHau60XvNsKtvMST1vuF6nMN5TNW0LVoXxm26zpCzrmx0fKQ2Njn2I17aDned2mc2ZsTbrXvA5jBxq2y+vwgdpJ9Ze9PfHglSf/8fR956+duq3dfC5nk+amd7TqkHnN9ZrnMZrg86QXvP0KviUN9aUrhHD8nz5f9sycl3bf+MGrJ068/YWLr5628JopE58d9Iux/3jtLndPu7xg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MbKxP5uYAAADQa/SGvaZfHf3qS6c+dPeiF5cfV/Hdcb86abf6irO/33H8rivHf/HSK9sf36Vg/j+0tOP/8ZB/Xe5oV4cwoStxwYAQdut6PAn8LHbn5AEh7NWVaskPHJYKrA7hC12J/bNVpUr0jSWGpgK/r88EJqQCa2KgJRW4MQaWpAIXxsCKVGBGDKxOBQ6PgdCeP44D6jPjKDlQEwOtyUZcEc9CeKc+tpbaVuuyVQEAAGwnmdlhZf7dnHMdtjVDnF6uqOkpQzwDu2iG6lQN6RlsdlpVtIaKnmoo76mG7LgXffTwC2ou66nmgtMwyvIzfDjkO+UDJu79o7tuHHFT84sTv/vu2OO/8uc33129/z/993vOmX/dAQXz/6aPnv9Xd9ORsoLj/yFM7vobc5dnIh3ZeGtLXgYAAABgG1z12NInbzjgqP9z38v33fmla28oX3311//vKxsv2HvUccPL+v7dt1cUzP8nlHb+f9wn0icnc3g07oaYPSCEpvxAUu3BhYHkqHe/TAAAAAB6g+zx+Oyx8PbMbXKKdno+XZi/ZSvzxwP/E7rNf/mmv372y9c+eeLCYftsuOK/nflB2efH/m6XY9eOfPytPYf9Q0PfwvP/W0o7/782/zbpxJrYiysHhNA3J/BI7GVnoMvQGHj50PxAZvxr4gZYHKvKnJiQrWpxLNEaA02pwLJiJX6bLbFbfiDzZGUbvyA7jvZMiZwAAAAAfOLi7oB4XD6e/3/P5AO+tP+gl8a8uOe9C1+bsPSEU2t/uM8tu74+oGPSmAMnHHLEMwXz/9atO/+/ax5ccHp/R78QRlaE0Cf9w4BHa5OFAWOgriyTuL82qatPuqrzakMY3zmwdFWvZNb/r0ivMfhETVJVDOy29083DetM3FATwsjcwDPfvH5MZ2J+KpBt/Bs1IQzpHG268ZV9k8Yr041f0zeEPXMC2apO7htCZ2NV6aoerM5cxyBd1W3VIQzMCWSrOrA6hIUBgF4q/iudmfvgvIVnz57e0dF2xg5MxH34NWFWe0db44w5HTOri/RpZqrPecsYnVc4plKvfPN8ZomiqUNuH15KOvs7wabctjL78QtOHMzcj9+FKrvG2VyZd3d0esjD9ylsIuR8kyo25PIdPOTa3Eq2PIkF9cf8VaFf6LtgXtsZjWdNnz//jFHJ31KzNyd/42GmZFuNSm+r2u76VsLLo+hqWSkfd1vtl1vJyPmnzR05b+HZI9pPm35K2ylt32keO6q5ecxXx45pHtk5qqbkbw9D3a+7qlND3Xx9iePajkPdvSKnkk/iU0NCQqK3JaYvKTt/wrRf3/+tPdacdtZJe/z9HjNHnPRXl/9m7omNh0z+1fV/ubZg/j/3o+f/8VMnfvJn1mcodvy/IR7mTx7fcpi/NQaWlXr8v6HY0fzsiQFDU4FFMbDIYX4AAAA+G+LuyLg3M+6Vvq7un+4+cuaMQ97/5QlTrv7bseNOPWv9vg0XX33skv+w/p0lq454u2D+v6i03/9vp/X/s0vXf63YMv/7xxJNxdb/Ty/zn13/f1Gx9f/Ty/xn1/9f9ims/78gG0htknes/w8AAHwWfHLr//e4vH/6AgEFGXpc3j99gYCCDD0u41/qBQK2ev3/OR1/UTvo8jnjDh0x98ePrNp7ycDbvvT8xF/vs/SgEfeuvOW9UbcWzP+XlDb/t3A/AAAA7Dwe+mXfb1/87rD7n3rk/SPLLv3txpuO/6u2Aw75w8DmUyYfXfP9m/6tYP6/rLT5/ye//l8odv7/0GKBlmILA1r/DwAAgF6q2Pp/Nw98eejq+SNufOznb97yUusvZo5/7d8t+cFXpg9runnNut80zFhfMP9fUdr8P552UZ6XO/bmw/pkTbuQXtNuY332JwMAAADQO5SHxsbKEvPmrYx62Mdvc11mKdCPSud6+r5BqxaUP3RVWfXGH1wy7ZDGc489c86RF63/fu2TP6md2lh9RsH8f3Vp8/+832U8UDup/rK3Jx784cqT/3j6vvPXTt1y/B8AAADYcUrdLwEAAAAAAAAAAAAAAHz6nmpdetAHo45+Y+Zeo/70jWNf+MHiL37zkb+59s9n/vzw+/Zq3zxsSsHv/8PkrnLFfv8fr/sXf1+wa17u2GrP6/9l7k855taFXUsWPlofwj65gdnnz/5cyFybf7/cwKqp+w/uTJyfLnHfi4e/1pmYlg4cNWKX9zoT41OB1rhI4hfSgXhVxff6pwJxecUn04G4PVakA1WZwCX9k3GUpbfVhrpkW5Wlt9VzdSEMyAlkt9XddUkbZekBXpUKZAd4ejoQBzgpEyhP9+rWfkmvYqAuFv2bfkmvAADYacVvgZVhVntHW1P8Ch9vd6/Iv43yliw7r7DashKbfz6zNNnUIbcPLyXdJ/1ddMu1xitDdecQRhV8Xc3NUtY1yu1TSw+bbtciQ+5ptbfyIuXStnbTVRUfUU0yosYZczpmVvY48NE9Z2mu6DHLqILJTm6W8q5NWkItJfSlhBGVuG1K6HK8Xx4aG/ukco2LwYaQp6dXRKm/189d56/YqyA3z9/WXHtpn8F93v+38Rc99OCAyo5TJ7ddtPtj/zxw1Mwf//DB1mt+XzD/byht/l+dO673MhcDWBSvrHfwgBBaSxwRAAAAfPb9z3OX33HinDUbZq2uePZ3v5tdftyJlZvPueucsy967v7FR13y72/e1viKsqc2nfjGprP++o2ffOW6h8966fAZZ901ad0h69uqb/zuXyw/dUjB/H9oafP/uAcrcyg42duxOl7//4IBIXRdWr8hCfwsDvfkASHs1ZVqiSWSC+p/LZZoSgI/iztM9o8lWlvyq+obAytSgd/XZwKrU4E1MZDZS/HTkNmVc0V9CGO6UpPzS8yNJRpSgeNiYGgq0BgDTalA/xiYkAq82T8TaEkF/jEGQnv+trqzf2ZbAQAAbI3MPKsy/25Iz/NWVPSUoaynDLU9ZSjvKUN1TxmKjSLevyNmqEydvFKWk6kyXWtNqpaCDPFi+Fvdr4IM4bf5OdMFC5qO5x9kzzcoy88w7od3tB70tXk/3nTxjx4/8sALj1xy5duXHt1v8JXP/u/2c/v131RbMP9vKm3+X5t/m7S+Js7/t1z/Lwk8Ert3ZTx1fGgMvHxofiCzY2BNnOwuzlbVkimRmbQvjiUmxMDQVGBuDExIBVonZwLLBucHMjPtbOMXZBtvz5TICQAAAMAnLu4giLtp4vx/5bjwzh5Hvt+8+5UD5457/JHzjphes2t1zT+PX7t0/KXVD+3Xt2D+P6G0+X9sr19uYxfG3rzaP4S7y7b0JhsYUZcE4n6Muvjz+D3qQvhczg6ObIm22qREVarh8HBN8gv1qnRV99YkawzE+1OeeHDVZZ2Jq2pC2Ddn70u2jReqkzZq0oFhVUmgNh2YU5EE4p6fbOCe8iQA2yy7VzC+oDKnumQ1dF+uyOvvs3JN0PTwCvaBdpOvu99c7SjV6Qcy+1Sztu5pK6iOHaLg7bHau603vtsavNtyv0hlvqFs3hKqDuUz22ZNX9AxPz6S+0vWAjvoec79lWop6e3wOlz08Xvbs+p0B5pSHx9N3Zfr/nVYFqt7oHZS/WVvTzx45cl/PH3f+WunltyNIuIPhQ++de4Bz+Vs3h2tOmRec73u86TF50lv/Dcw1NMWQlh+wawnn/iX95+vWN/8Xw4cu/y2Nx9b/pODHpg14gsbLvnyxrfePapg/t9S2vy/InXb5YO4MecNCGF4zsZ9NG7+iQOSz8GcQPIpObAwkBxyX19f9JMTAAAAtrfs7o7s/oL2zG1yQnh6nlyYv2Ur88f9FRO6zV9qvweO+YfvHXrV69/4+vrdL3906VPr/tObrxwx7dAHNj29YuXrzcd+/umC+X/rR8//+6a66fi/4//sII7/d2tn3xXdN/3Aom3aFV1QHTuE4//d2tnfbY7/d8vxf8f/u+P4fw8c/+/Wzv60FXxLmutLVwihdcANt/+idvrwflec860Za3/+9DtN416oO/foO//H4YvDNeet+nPB/H9uafN/6/91v2hfdv2/1mLr/80ttv7fIuv/AQAAO1SRhebS87yC1fsKMqRX7yvI0OMCgT0uMWj9v61e/6/2pLNPeqX+rb2umXj7f75z+oXPn3Tis/v2ef6E20+4aeTVw1/68oaC+f+i0ub/8eXQL7f13rL+39DJRapaEgNzLQwIAADAzqjYDgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+XSseXPzFzYv3OeimZz9/0+H/umzNrL1/dcDm0WNObhy+eGDZlX/3L28NWrDwjbZJZ17bMn35NRtWLg2hvatcWVK87KFB5eWj/3DMXbdd8XDTtMFTzq3O1FuZuf1iXu7Y6of1ISzLeaQuJjbWd97ZEphyzK0LKzoTj9aHsE9uYPb5sz/XmbixPoT9cgOrpu4/uDNxfrrEfS8e/lpnYlo6cNSIXd7rTIzPBMrS3b2uf9LdsnR3L+sfwoCcQLa73+6fX1W2jf+YCZSn27i5LmkjBupi0R/VJW3EQEcs0d43hJEVIfRJV/Xr6qSqPumq/r46qapPuqr/Wh3C+BBCRbqqF6uSqirSI19blVQVA7vt/dNNwzoTy6pCGJkbeOab14/pTJyeCmQb/3pVCEM6XzLpxu+oTBqvTDd+VWUIe4YQqtIl/rUiKVGVLvFKRQgDcwLZxk+tCGFh4DMhfvjMzH1w3sKzZ0/v6Gg7YwcmqjJt1YRZ7R1tjTPmdMysTvWpmLKc9ObzPv7Yn990zozO26lDbh9eSroiU66yq8vNlXl3R+/svY/9qs2tZMvzUVB/zF8V+oW+C+a1ndF41vT5888YlfwtNXtz8rdPJppsq1G9ZVvtl1vJyPmnzR05b+HZI9pPm35K2ylt32keO6q5ecxXx45pHtk5qqbk7/YY6vWf/FB3r8ip5JP4AJCQkOhtifK8T7emnf2DvOCL/paOVobqrg/ogmlFbpayrlFuj0Ef9jFH/HG+p/Q4olEFE4eCLM09ZxldMJnYkqUmydL1va5gcphbU3nXJo33y0NjY59i26Eh/27u5n1rGzbvusymKzUNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/D924EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBYAAAAAEOZvHUbPBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKUAAAD//5twzl8=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x40942, 0x12b)
r1 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20)
fallocate(r1, 0x0, 0x0, 0x1001f0)
r2 = open(&(0x7f00000000c0)='./file1\x00', 0x185042, 0x182)
copy_file_range(r2, 0x0, r0, 0x0, 0xfffffbffa003e45c, 0x700000000000000)
ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, 0x0)

9m38.111794276s ago: executing program 1 (id=50):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000)
write$vhost_msg_v2(r0, &(0x7f00000007c0)={0x2, 0x0, {&(0x7f0000000840)=""/168, 0xac, 0x0, 0x1, 0x2}}, 0x45)
write$vhost_msg(r0, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48)
write$vhost_msg_v2(r0, &(0x7f0000000400)={0x2, 0x0, {&(0x7f0000000080)=""/169, 0xa9, 0x0, 0x2, 0x2}}, 0x48)
write$vhost_msg_v2(r0, &(0x7f00000005c0)={0x2, 0x0, {&(0x7f0000000340)=""/77, 0x4d, 0x0, 0x3, 0x2}}, 0x48)
write$vhost_msg_v2(r0, &(0x7f00000039c0)={0x2, 0x0, {&(0x7f0000000680)=""/184, 0xfffffefd, 0x0, 0x3, 0x2}}, 0x48)
write$vhost_msg_v2(r0, &(0x7f0000000a00)={0x2, 0x0, {&(0x7f0000000900)=""/230, 0xe6, 0x0, 0x1, 0x2}}, 0x48)
write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000e40)=""/187, 0xbb, 0x0, 0x2, 0x3}}, 0x48)

9m37.220259709s ago: executing program 1 (id=52):
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x818808, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file4\x00', 0x1018000, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file4'}}], [], 0x2c})
chdir(&(0x7f00000001c0)='./file0\x00')
chdir(&(0x7f00000003c0)='./bus\x00')
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x1)
syz_mount_image$minix(&(0x7f0000000100), &(0x7f0000000a40)='./file1\x00', 0x2004010, &(0x7f0000001180)=ANY=[], 0x9, 0x1f2, &(0x7f00000004c0)="$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")
getdents64(r0, &(0x7f0000000180)=""/92, 0x5c)

9m36.893850595s ago: executing program 1 (id=54):
syz_emit_ethernet(0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000e600000077"], 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a000100696e6e6572000000400002800800024000000084080003"], 0xa8}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x4, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0xa000}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x404c810}, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4)
sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0)

9m36.362822838s ago: executing program 1 (id=55):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000000)={{0x4, 0xeeef0000, 0xb, 0x0, 0x81, 0x4, 0xa, 0x4e, 0x0, 0x7, 0x7f, 0x1}, {0x5000, 0x0, 0xb, 0x5, 0x2, 0xb, 0xc, 0x3, 0x0, 0x81, 0x8, 0x1}, {0x5000, 0x1000, 0x0, 0x5, 0x2, 0x1, 0x7, 0xf, 0x8, 0x6, 0x2}, {0xffff1000, 0xd5dd0000, 0xe, 0x2, 0x1, 0x3, 0x6, 0x0, 0x1, 0x6, 0x4, 0x9}, {0x100002, 0xeeee8000, 0x9, 0x0, 0x80, 0xee, 0x0, 0x7, 0x7c, 0x40, 0xe, 0x9}, {0x10000, 0x4, 0x8, 0x1, 0x7, 0x4, 0x1, 0x1, 0x6, 0x86, 0xb, 0x2}, {0xeeee8000, 0x8000000, 0x4, 0x7, 0x7, 0x3, 0x1d, 0x47, 0x30, 0x2, 0x8, 0xe1}, {0xf000, 0x2, 0xc, 0xf8, 0xfd, 0xe, 0x2, 0x4, 0x3, 0x8, 0x1, 0xce}, {0x4, 0x7}, {0x6000, 0x8}, 0x80000035, 0x0, 0x0, 0x40, 0x200000007, 0x1000, 0xeeef0000, [0x5, 0x8001, 0x8, 0x40000]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

9m35.920199913s ago: executing program 33 (id=55):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000000)={{0x4, 0xeeef0000, 0xb, 0x0, 0x81, 0x4, 0xa, 0x4e, 0x0, 0x7, 0x7f, 0x1}, {0x5000, 0x0, 0xb, 0x5, 0x2, 0xb, 0xc, 0x3, 0x0, 0x81, 0x8, 0x1}, {0x5000, 0x1000, 0x0, 0x5, 0x2, 0x1, 0x7, 0xf, 0x8, 0x6, 0x2}, {0xffff1000, 0xd5dd0000, 0xe, 0x2, 0x1, 0x3, 0x6, 0x0, 0x1, 0x6, 0x4, 0x9}, {0x100002, 0xeeee8000, 0x9, 0x0, 0x80, 0xee, 0x0, 0x7, 0x7c, 0x40, 0xe, 0x9}, {0x10000, 0x4, 0x8, 0x1, 0x7, 0x4, 0x1, 0x1, 0x6, 0x86, 0xb, 0x2}, {0xeeee8000, 0x8000000, 0x4, 0x7, 0x7, 0x3, 0x1d, 0x47, 0x30, 0x2, 0x8, 0xe1}, {0xf000, 0x2, 0xc, 0xf8, 0xfd, 0xe, 0x2, 0x4, 0x3, 0x8, 0x1, 0xce}, {0x4, 0x7}, {0x6000, 0x8}, 0x80000035, 0x0, 0x0, 0x40, 0x200000007, 0x1000, 0xeeef0000, [0x5, 0x8001, 0x8, 0x40000]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

9m20.420832825s ago: executing program 5 (id=56):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000a40)="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", 0x219, 0x20000080, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0)

9m20.038662396s ago: executing program 5 (id=92):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x228100)
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r1=>0x0], 0x40000012})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x300, 0x1, &(0x7f0000000340)=[r1], &(0x7f0000000040)=[0x1], &(0x7f0000000200), 0x0, 0x0, 0x7f})

9m19.6201598s ago: executing program 5 (id=93):
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[<r3=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000004c0)={0x0, 0xfffffffffffffe8e, r3, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000600)={r4, 0x0, 0xa22, 0x3, 0x0, [<r5=>0x0], [0x0, 0x4, 0x3], [0x2, 0x0, 0x0, 0x40000], [0x0, 0x1ff, 0x1]})
ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000300)={r4})
ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f00000002c0)={r5, <r6=>0x0})
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f00000000c0)={r6})

9m19.387036119s ago: executing program 5 (id=95):
syz_mount_image$udf(&(0x7f0000000a40), &(0x7f0000000100)='./file0\x00', 0x2004400, &(0x7f0000000600)=ANY=[@ANYBLOB="73686f72746164000000006d653d3030303030303030303030303030303030b030342c6e6f6164696e6963622c7569643d00", @ANYBLOB="a85f0dc3446ae0c36ba4848c770920cd9addace5c10dee3a96f810395203ae3bd777155e0b6764a2fd6da6853696460e4dc9849661ef1979cffa16b5bf59dabf336f10c3c559e5e6957f06f8cc8dc9d87dce1e2fe00f1a9e839df7923f50ee737985bd9b461e751d8f2be497d8651d589f890f61b87b83f3c7ad3ba191fa8e9a0ea1b14157305d0891f22ea0bbafcc5044e7177fcb08366d582b977b1847305408f72d19577993c4f746315483175fd218fe2194c2e6c97f561184a4f7c739d2ae93ba3016354f0d2ed26e6b810ebbbd0d1f93e7251bd3b5ed60ea3c840a2bbe7fc0", @ANYRES32], 0x1, 0xa1b, &(0x7f0000001540)="$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")
setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff})
r0 = open(&(0x7f0000000080)='./bus\x00', 0x143142, 0x0)
pwrite64(r0, &(0x7f0000000300)='_', 0x1, 0x10000000005)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x800, 0x400, 0x0, 0x0, 0x20, 0x0, "ef35af413bb901527fe4d0ce345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000dcd2fffffff2ff0000000000000000006800", [0x4]})
pwrite64(r1, &(0x7f00000002c0)="ef", 0x1, 0x0)

9m18.224081403s ago: executing program 5 (id=100):
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000001080)={0x0, @in6={{0xa, 0x3, 0x1ff, @mcast1}}}, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r1, &(0x7f0000000380), 0x0, 0x48819)
socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x4e21, 0x26, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x0, 0x0, 0x2a, 0x0, "b25dd300350731437df94f0a338977934d6951cdd6c61e31687172d956b141e3f4e87e6ab615ea379a12c5a6f5c6e7b3ab38f5f3570909f89f3e47ec97b12cc30a1c48cd0300fd5dfad4624800"}, 0xd8)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
syz_emit_ethernet(0x8a, &(0x7f00000014c0)={@local, @random="e462e98700", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x7c, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x1a, 0x10, 0x7, 0x0, 0xe7, {[@mptcp=@remove_addr={0x1e, 0x4d, 0x2, 0x0, "88391a84ed441d2486917d411bdd858b3945eb7b104049c25287cdf6564600b902e2e7d74b3c7698494b8b50fa2b86bdbac1834970ce2e08de17956124b826200627da5d2be5a728d214"}, @sack_perm={0x4, 0x2}, @sack_perm={0x4, 0x2}]}}}}}}}, 0x0)

9m15.724905254s ago: executing program 5 (id=105):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000cc0)}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000001800)="353a35d6094e4ee7d764b6993f65136c5d6b84d9b1324a0b25e094700c9a66f9181738098f32e3e48859c3878d53a9752474da0d6af299d849d48f2fa2c8c807d7a1521da940585790ff1e6f9da83e32b751d1af9cfac640c1361f5ae8b99c187dafe9ea854120f6eaab11e7fdeb3f2152ebdbc21520ca01f64bb821576deef4ed6696cdddc1768b5b4fbd68a687cb6ba52ecf5cc6f8f05062f26de19d6aaaeb6cbca00e46685f77d2b3e8dd9d0d099e799cd5a76c67ab283f790366f7f744508edc", 0xc2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000380)="d5469d85d0d60f65e265272f992fe2e8", 0x10}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000005c0)="33ca667d023ea8f11964db", 0xb}, {&(0x7f0000001a80)="d61f2c7a6ddbff16a09972b62284a63c170b9a6ec5cd29dfa047b76a9a0eeb4055c9dd2244e47c59e557c459c397cd02eb261fc7d521b1f2e95c3ce17726db0d3236a6d3b52d3f066554d84292329c8a6f034ff8d85d61dcf7ae508c5925903fb1feb7d07fe481313ad476131cf19514d6c77835e9cf82df2f153d9b82985da3e260fc6942d18345ac61b2958886a77e2a2726097d1888a25bee0fdec661520a057f8559f17e462bdf938f7f2303447bfaa744d3891372a825c63e83ff21650af922eaac39ab491cec071d31eebd6526d7a8ddd052d30beb962aeca814ad530c1413e502b92f3e51eaf75ec5b595b19e4945a1a821a8c47f804465f9e04d0ec9aff13036fe4f3a56b324e9ea795cc89d0f30433f3fa8aa7cc4dd93197840d644c6e48329c266316227ea917708cde40163a6b092d3c722a71e9f21255315cb87a74916d56da0479e7e8865b289fc8095a8477e7fee5eda0c55ec6d53c7aac85f6171717935832962f6db7889683497f3f5a4aa6c6af16908cc4c853536c4f624a75cae053c053f8490c028c15bf043adf4729306a4069324be546a83f71c16a15b86f1d6cb5505808acf055c982dfb14eaaa45b139ccc18952a1c1cbde3bb0d4882d72aa508b511b9a3e2b1a11b9", 0x1ce}], 0x2}}], 0x4, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

9m15.060229038s ago: executing program 34 (id=105):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000cc0)}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000001800)="353a35d6094e4ee7d764b6993f65136c5d6b84d9b1324a0b25e094700c9a66f9181738098f32e3e48859c3878d53a9752474da0d6af299d849d48f2fa2c8c807d7a1521da940585790ff1e6f9da83e32b751d1af9cfac640c1361f5ae8b99c187dafe9ea854120f6eaab11e7fdeb3f2152ebdbc21520ca01f64bb821576deef4ed6696cdddc1768b5b4fbd68a687cb6ba52ecf5cc6f8f05062f26de19d6aaaeb6cbca00e46685f77d2b3e8dd9d0d099e799cd5a76c67ab283f790366f7f744508edc", 0xc2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000380)="d5469d85d0d60f65e265272f992fe2e8", 0x10}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000005c0)="33ca667d023ea8f11964db", 0xb}, {&(0x7f0000001a80)="d61f2c7a6ddbff16a09972b62284a63c170b9a6ec5cd29dfa047b76a9a0eeb4055c9dd2244e47c59e557c459c397cd02eb261fc7d521b1f2e95c3ce17726db0d3236a6d3b52d3f066554d84292329c8a6f034ff8d85d61dcf7ae508c5925903fb1feb7d07fe481313ad476131cf19514d6c77835e9cf82df2f153d9b82985da3e260fc6942d18345ac61b2958886a77e2a2726097d1888a25bee0fdec661520a057f8559f17e462bdf938f7f2303447bfaa744d3891372a825c63e83ff21650af922eaac39ab491cec071d31eebd6526d7a8ddd052d30beb962aeca814ad530c1413e502b92f3e51eaf75ec5b595b19e4945a1a821a8c47f804465f9e04d0ec9aff13036fe4f3a56b324e9ea795cc89d0f30433f3fa8aa7cc4dd93197840d644c6e48329c266316227ea917708cde40163a6b092d3c722a71e9f21255315cb87a74916d56da0479e7e8865b289fc8095a8477e7fee5eda0c55ec6d53c7aac85f6171717935832962f6db7889683497f3f5a4aa6c6af16908cc4c853536c4f624a75cae053c053f8490c028c15bf043adf4729306a4069324be546a83f71c16a15b86f1d6cb5505808acf055c982dfb14eaaa45b139ccc18952a1c1cbde3bb0d4882d72aa508b511b9a3e2b1a11b9", 0x1ce}], 0x2}}], 0x4, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

9m3.76781925s ago: executing program 4 (id=148):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r2=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2}, 0x90)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1)

9m3.194688567s ago: executing program 4 (id=149):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/85, 0x0})
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000400)=0x4000000)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000))
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000500)=0x1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af04, &(0x7f0000000200))
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000440)={0x1, 0x0, [{0x4000, 0xbd, &(0x7f00000002c0)=""/189}]})

9m2.855399614s ago: executing program 4 (id=151):
openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1008082, &(0x7f00000001c0)={[{@nodioread_nolock}, {@nolazytime}, {@abort}, {@errors_continue}, {@dioread_nolock}, {@jqfmt_vfsv0}, {@nomblk_io_submit}, {@nobarrier}]}, 0x0, 0x5e0, &(0x7f00000011c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x187302, 0x40)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

9m2.209094906s ago: executing program 4 (id=155):
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x4, 0x511, &(0x7f0000000540)="$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")
creat(&(0x7f0000000340)='./bus\x00', 0x11a)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x41800, 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x84)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000003, 0x28011, r0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000200)={'syz1\x00', {0x800, 0xbc64, 0x2, 0x6}, 0x26, [0x9, 0x5, 0x71, 0x0, 0x2, 0x6, 0xfffffff8, 0x1, 0xfffffff9, 0x6, 0x2, 0x101, 0x2, 0x4, 0x74, 0xfffffffa, 0x3, 0x1000, 0x101, 0x66ca, 0x6, 0x4, 0x5, 0x80000000, 0x6, 0x5, 0x7, 0x49, 0x470, 0x10, 0x7, 0x7fff, 0x8, 0x5e5, 0xffffffff, 0x4, 0x0, 0x8, 0x0, 0x1, 0xffffede2, 0x80000000, 0x2, 0x400, 0x80000001, 0x0, 0x404, 0x3, 0x9, 0x401, 0x2, 0xfffffffb, 0x4, 0x5, 0x4, 0x7, 0x6, 0x1, 0x0, 0x0, 0x3, 0x5, 0x1b2, 0xfffffff8], [0xfffffffa, 0x4, 0x8, 0xc, 0x3, 0x8000, 0xffff, 0x9, 0x9, 0x7, 0x69b9, 0x5, 0x2, 0x6, 0x8, 0x7, 0xe, 0x6, 0xe1, 0x769, 0xd, 0x1, 0xfff, 0x4, 0x5471, 0x2, 0xc5d, 0x6, 0x0, 0x0, 0xc, 0x8, 0x3, 0x80, 0x5, 0x70, 0x6af, 0x2, 0x5, 0x5, 0xf, 0x0, 0x8, 0x10000, 0x691, 0x3, 0x5, 0xfffff801, 0x5, 0x2, 0x9000000, 0x3, 0x2, 0x0, 0x5, 0x1, 0xee7, 0xee, 0x0, 0x5, 0x44af, 0x5, 0x0, 0xb117dd18], [0x10001, 0x6, 0x200, 0x8, 0x18, 0x1ba, 0x2, 0x4, 0x8, 0x100, 0x10, 0xc6c, 0x7, 0x2, 0x3, 0x8, 0x4, 0x80, 0xfffffbff, 0x5, 0xffffff8a, 0x8, 0x8, 0x2, 0x3, 0xffff8e4f, 0x7, 0x0, 0x3, 0x2, 0x200, 0x6, 0x80, 0x6, 0x7f, 0xfffffff9, 0x46a, 0x4, 0x9, 0x8, 0x2, 0x3, 0x9, 0xbef, 0x2, 0xa, 0x8, 0xff, 0x6, 0x80000000, 0x3, 0x2, 0x6, 0x80000001, 0x5, 0x7, 0x1, 0x7, 0x9, 0xfffffffb, 0x0, 0x6, 0x8, 0x1], [0x7, 0x4, 0xfffff173, 0x101, 0x20, 0x7fffffff, 0x4, 0x200, 0x7, 0x3, 0x7, 0x1, 0x97, 0x4, 0x9, 0x0, 0x1, 0x3, 0x3, 0x2, 0x7, 0x3, 0x783, 0x6, 0x7, 0xfffff53f, 0x5, 0xffffffc0, 0x6, 0x0, 0x2852, 0x1, 0x2400000, 0x5, 0x10, 0x6, 0x9, 0x2, 0xffff0000, 0x800, 0x1, 0x2, 0x800, 0x6, 0x1, 0x6, 0x10000, 0xffffffff, 0x6, 0x40, 0x1, 0x3, 0x4b22, 0x2, 0x9a22, 0x8001, 0xffff2270, 0x3, 0x5, 0xf1a0, 0x8001, 0x8, 0x6, 0x55b2]}, 0x45c)
r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fremovexattr(r1, &(0x7f0000000040)=@known='system.posix_acl_default\x00')

9m1.708727517s ago: executing program 4 (id=157):
mkdir(&(0x7f00000003c0)='./file0\x00', 0x21)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2800000, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43)
mknodat$loop(r0, &(0x7f00000002c0)='./file1\x00', 0x4, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x400)
rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

9m1.260017733s ago: executing program 4 (id=161):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x100004c, &(0x7f0000000100), 0x1, 0x553, &(0x7f0000001080)="$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")
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x408ac, &(0x7f0000000d80), 0x3, 0x445, &(0x7f0000000800)="$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")
fdatasync(0xffffffffffffffff)
open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000400)='./bus\x00', 0xc40, 0x0)
ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000080)=0x3f)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
fallocate(r1, 0x0, 0x0, 0x8000c62)
copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x863, 0x0)

9m0.775712532s ago: executing program 35 (id=161):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x100004c, &(0x7f0000000100), 0x1, 0x553, &(0x7f0000001080)="$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")
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x408ac, &(0x7f0000000d80), 0x3, 0x445, &(0x7f0000000800)="$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")
fdatasync(0xffffffffffffffff)
open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000400)='./bus\x00', 0xc40, 0x0)
ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000080)=0x3f)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
fallocate(r1, 0x0, 0x0, 0x8000c62)
copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x863, 0x0)

8m54.692058763s ago: executing program 2 (id=195):
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000240)={{0x80a0000, 0xd000, 0xa, 0x3, 0xc, 0x6, 0x9, 0xc, 0x0, 0x5, 0x81, 0x7}, {0x6000, 0x4, 0xd, 0x1, 0x0, 0x5, 0x0, 0x6, 0xf9, 0x4, 0x34, 0xfe}, {0x10000, 0x6000, 0x9, 0x8, 0x4, 0x15, 0xc5, 0xa5, 0xf, 0x5, 0x4, 0x9}, {0x6000, 0xf000, 0x4, 0x8, 0x1, 0x3, 0x7, 0x1, 0x8, 0x40, 0xc}, {0x3000, 0x5000, 0x18, 0x1, 0x0, 0x7, 0x2, 0x5, 0x5, 0xf4, 0xca, 0x1}, {0xeeee8000, 0xf000, 0x3, 0xc, 0xeb, 0x16, 0x0, 0x7b, 0x9, 0x91, 0x8, 0x74}, {0x1, 0x2, 0xc, 0xa, 0x5, 0xb, 0x9, 0x4, 0xbd, 0xa, 0x9, 0x5}, {0x3000, 0x10000, 0x0, 0x8, 0x0, 0x7, 0x0, 0x7, 0x4, 0xa, 0x60}, {0x8080000, 0xf9ec}, {0x5000, 0x400}, 0xc0000018, 0x0, 0x5000, 0x28204, 0xc, 0x2800, 0xd000, [0x1000, 0x1, 0x7, 0xdc]})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x4)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x4, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7458e68ed33226a8d1c8e17", 0x0, 0xb2})
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0x8, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x1, 0xf8, 0x0, 0x1, 0x0, 0x3, 0x6, 0x6, 0x9, 0x4, 0xfe, '\x00', 0x4, 0x4})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

8m54.23222676s ago: executing program 2 (id=197):
r0 = userfaultfd(0x1)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4c0})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000140)={0x5, 0x0, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil})
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b0000000001"])
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f0000000600)={0xbe, 0x0, 0x1})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

8m53.949257503s ago: executing program 2 (id=198):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000200)={0x20, 0x8}, 0x0, 0x0, 0x0, 0x0})

8m49.908322659s ago: executing program 2 (id=204):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000200)={@flat=@weak_handle={0x77682a85, 0x1000, 0x1}, @flat=@weak_binder={0x77622a85, 0x110a}, @fda={0x66646185, 0x2, 0x6, 0x23}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

8m49.806471618s ago: executing program 2 (id=205):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x1ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, 0xffffffffffffffff, 0x7}}, 0x48)
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe)
mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180))

8m48.827484747s ago: executing program 2 (id=211):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002140), 0x802, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
ioctl$KVM_GET_LAPIC(r4, 0x8400ae8e, &(0x7f0000000a80))
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)

8m44.243248067s ago: executing program 7 (id=162):
r0 = syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f00000001c0)={[{@debug}, {@nomblk_io_submit}]}, 0x1, 0x4fd, &(0x7f0000000880)="$eJzs3c9rHH0ZAPBnJrvv27R53bzqoRZsi60kRbtJGtsGD1VB9FRQ673GZBtCNtmSbNomFE3xDxBEVPCiJy+Cf4Ag/RNEKOhdVBTRVg8K1ZHdnY1pupsfNtmtm88HvpkfO7PP82TY2fnODDsBnFgXI2I8IrIsy65ERCmfn+YttlqtsdyL54/nGi2JLLvzlySSfF77vd7Nh2fy1U5FxFe+GPH15PW4axubS7PVamU1n56oLycvs2zz6uLy7EJlobIyPT11Y+bmzPWZySOpczQibn3+D9/79k++cOsXn3z427t/Gv9Gq8CWnXUcpVbpxeb/oq0QEavHEaxPCs0KW673ORcAAPbWON7/YER8LCKuRCmGmkdzAAAAwCDJPjMSL5PW9T8AAABgMKURMRJJWs7v9x2JNC2XW/fwfjhOp9XaWv0TWWn7fMFoFNN7i9XKZH7vwGgUk8b0VH6PbXv62q7p6Yh4PyK+WxpuTpfnatX5vp75AAAAgJPjzK7+/99Lrf4/AAAAMGBG+50AAAAAcOz0/wEAAGDw6f8DAADAQPvS7duNlrWffz3/YGN9qfbg6nxlbam8vD5Xnqut3i8v1GoLzd/sW97v/aq12v1Pxcr6o4l6Za0+sbaxeXe5tr5Sv7v4yiOwAQAAgB56/8LT3yQRsfXp4TQismTHa8WIbGjnwoXe5wccn/QwC//++PIAem+o3wkAfeOQHk6uYr8TAPpuv/1A15t3fnn0uQAAAMdj7CPb1/+breGdficF9ER+/T9J+p0I0HOu/8PJ5fofnFzFvY4AdApg4KUH+Ki/+fX/LDtUUgAAwJEbabYkLef9gJFI03I54r3mYwGKyb3FamUyIj4QEb8uFd9tTE8110ycHgAAAAAAAAAAAAAAAAAAAAAAAACAA8qyJLIuhreXAQAAAP6fRaR/TPLnf42VLo/sPj/wTvKPUnMYEQ9/eOf7j2br9dWpxvy/bs+v/6A5fyiu9frsBQAAANBJs/9+LR9O9TsbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbNi+eP59qtl3H//LmIGO0UvxCnmsNTUYyI039LorBjvSQiho4g/taTiDjbKX7SSCtG8yx2x08jYrjP8c8cQXw4yZ429j+f7fT5S+Nic9j581fI25vqvv9Lt/d/Q132f+91esP09Vnnnv1somv8JxHnCp33P+34SZf4lw5Y49e+urnZ7bXsxxFjHb9/kldiTSSF+xNrG5tXF5dnFyoLlZXp6akbMzdnrs9MTtxbrFbyvx1jfOejP//3XvWf7hJ/dJ/6Lx+w/n89e/T8Q63R4q6XivGjLBu/1Hn7n42IUpZlu+O3v/s+nm/uxvRYe3yrNb7T+Z/+6vyFPeqf71L/ftt//ID1X/nyt353wEUBgB5Y29hcmq1WK6tGdoz8M3sr0hiYkeE47FqF/z3obOy1TPsgtge1fzMP9VZsgkOP9HGnBAAAHIv/HvT3OxMAAAAAAAAAAAAAAAAAAAA4ufb7GbA4gp8T2x1zqz+lAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADs6T8BAAD//58DzhY=")
open_tree(r0, 0x0, 0x8800)
newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x0, 0x6000)
setfsgid(0xee00)
r1 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r2)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000021c0)='proc\x00', 0x800000, 0x0)
r3 = syz_open_procfs(r1, &(0x7f0000000100)='stack\x00')
pread64(r3, &(0x7f0000000140)=""/15, 0xf, 0x4)

8m43.522713695s ago: executing program 7 (id=230):
execve(0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000140), 0x22882, 0x0)
ppoll(&(0x7f0000000080)=[{r0, 0x4}], 0x1, 0x0, 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x10000000000)
r2 = syz_io_uring_setup(0xbde, &(0x7f0000000540)={0x0, 0xec25, 0x400, 0x41, 0x40000337}, &(0x7f0000000dc0)=<r3=>0x0, &(0x7f0000000a40)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0)

8m42.030403426s ago: executing program 7 (id=237):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000000f00)="52348bf9812fc081678b5760a4c4967393fd8939aaf12a894c5424df616c4eea14fbac2dad114a75c405d89fafa5715b56abba4bbceca456d8225e3f6eb57a03287e74c7bd74e40e3fda3150f92d181e7c82cb2f8ea0416fc4c0f111161cdb9a52911925644e25f871d02f403c83214f830f93b30b874e75cab53f1ed7871f21c0d654a47fab0637868517d7e8d9915e99b4dc2dcafdcb2ef2a012ec95418a544c32181fb969e01318e00a12fd1b2a0eb57bcf7de086e320f2d4be4e1453010be849e4d7dba41558329699aacd3d1c7d97b9bf74caf8b7946647309d209558b1965ef7ea4576ec0e289b73c2089310271d0a67d88a312f4cb0194c4f28ec3c2fe269311d0cec1fe0efef17d376d183b08e392b6cb58e930e1f959dd4528ec95350fc86e5297e6d59af036b132df17833881238ba8692842a8da4d5b4a37c94915331143d9128a197495433c2f550b4455a9ae03b937305e192e861ca3a60f9b3a14288e3daeb6936593485388a4aaab39b3843ee2960d9c8728eafb904333e7b78a270480e8dd89bc4cf0b79000000000000000a1a44d5f9c4fdad8a2fcdb04f76de29a50a0428148f4bc3eff1e84d25ea95dabddfba6162366450b6bcf1409f920caf1be5702af0402e2cef4896d9544a26ebfab694d7a47eca55bd2f62e7d7eb1f6061f7e441df5ab31344f02179764822036ef706133ea1a6380e042f074b2b0ddcc578cb8a668a846b9d5792f8d434f8ec7b562594587c49e8e6b3450e545fc070644bd06a36106cdb63f9e8ad7ae50b5b44e47f377961f5e29392330fb40d63c911ffd13e094f0452cc5c77b0731b56211b2d8a7554f6077ae593626a54f56d6dea49058fd1d48db02a7b33d50474b58a7e14e6a4d935bfaf4865f00074d59ece4b2d5f5e768e952733ee2c34b3e4b0be230f792f8b16f872afbbd155fe5314d4f54ea7b747eb2cd2410db7464c73ecd4815cda0bcc839fb603bb3f0c04b2d233b54a78b7aa3db974e469c8788e155cc2ef39bcf8491101058093c842df8cd0ac03d29e6d6902187f31eaf960b306debf734d8d26cc34a7e62c", 0x2fc}], 0x1}}], 0x1, 0x20004004)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

8m41.546750155s ago: executing program 36 (id=237):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000000f00)="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", 0x2fc}], 0x1}}], 0x1, 0x20004004)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

8m33.671890351s ago: executing program 37 (id=211):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002140), 0x802, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
ioctl$KVM_GET_LAPIC(r4, 0x8400ae8e, &(0x7f0000000a80))
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)

7m7.365456171s ago: executing program 8 (id=587):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x180, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

7m6.25405249s ago: executing program 8 (id=596):
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x4e23, @empty}}, 0x0, 0x0, 0x8, 0x0, "a386bcb957f6ee650a88e81a5cb3b0852da5b6b13aa9aed3e923ad05392be7124f3883a973ec229f5fab90b052c3572c8e868f4f1ff8e2f4bff94f46103f6fb8ed729eed0700000000000000de127097"}, 0xd8)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000000)={0x79})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@ipv4_newroute={0x1c, 0x18, 0x0, 0x70bd2c, 0x25dfdbfd, {0x2, 0x0, 0x14, 0x26, 0xfc, 0x3, 0xfd, 0xbd9b57c46a7f8446, 0x200}}, 0x1c}, 0x1, 0x0, 0x0, 0x8081}, 0x20040000)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x4)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f00000001c0)=0x1fff)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x3, 0xffffffff, 0x8, 0xdeb9, 0x8, 0x5, 0x6, 0xfffffffffffffff2, 0x5, 0x6736, 0x2, 0x5, 0x7, 0xfffffffffffffff9, 0xa7, 0xa9], 0xdddd0000, 0x82200})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000740)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

7m4.656376669s ago: executing program 8 (id=601):
mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket(0x10, 0x3, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102)

7m3.426160478s ago: executing program 8 (id=605):
syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x3010050, &(0x7f0000000600)=ANY=[], 0x1, 0x14fe, &(0x7f0000000700)="$eJzs3Au0ztXWMPA511p/NklPkvuaa/55kssiSXJJSCRJkiS5JSRJkoTEJrckJCH3JPeQ3GIn9/st9yQ5kiQJCUnWN3Q6n/e8nfftnO+c7/V9Z8/fGGvsNff/mfNZa889nv9ljL2/7Ti4av1qlesyM/xT8M9fUgEgBQD6AcA1ABABQKlspbIBDoNMGlP/uTcR/1oPTbvSKxBXkvQ/fZP+p2/S//RN+p++Sf/TN+l/+ib9T9+k/0KkZ1un575WRvod/3PP/0Ge//8/R87//0YOFxvz5fpi13f6B1Kk/+mb9D99k/6nb9L/9E36n75J///NRQCV/pvD0v/0TfovRHp2pZ8/y7iy40r//gkhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGESB/OhcsMAPxlfqXXJYQQQgghhBBCiH+dkPFKr0AIIYQQQgghhBD/9yEo0GAgggyQEVIgE2SGqyALXA1Z4RpIwLWQDa6D7HA95ICckAtyQx7IC/nAAoEDhhjyQwFIwg1QEG6EQlAYikBR8FAMisNNUAJuhpJwC5SCW6E03AZloCyUg/JwO1SAO6AiVILKcCdUgbugKlSDu6E63AM14F6oCfdBLbgfasMDUAcehLrwENSDh6E+PAIN4FFoCI2gMTSBpv9H+S9CV3gJukF3SIUe0BNehl7QG/pAX+gHr0B/eBUGwGswEAbBYHgdhsAbMBTehGEwHEbAWzASRsFoGANjYRyMh7dhArwDE+FdmASTYQpMhWkwHWbAezATZsFseB/mwAcwF+bBfFgAC+FDWASLIQ0+giXwMSyFZbAcVsBKWAWrYQ2shXWwHjbARtgEm2ELbIVPYBtshx2wE3bBbtgDn8Je+Az2weewH774B/PP/qf8TggIqFChQYMZMAOmYApmxsyYBbNgVsyKCUxgNsyG2TE75sAcmAtzYR7Mg/kwHxISMjLmx/yYxCQWxIJYCAthESyCHj0Wx+JYAm/GklgSS2EpLI2lsQyWxbJYHstjBayAFbEiVsbKWAWrYFWsinfj3XgP1sAaWBNrYi2shbWxNtbBOlgX62I9rIf1sT42wAbYEBtiY2yMTbEpNsNm2BybY0tsia2wFbbG1tgG22BbbIvtsB22x/bYATtgR+yInbAzdsYX8UV8CV/C7lhF9cCe2BN7YS/sg32xL76C/fFVfBVfw4E4CAfj6/g6voFD8QwOw+E4AkdgBTUKR+MYZDUOx+N4nIATcCJOxEk4GSfjVJyG03EGzsCZOAtn4fs4Bz/AD3AezsMFuBAX4iJcjGmYhkvwLC7FZbgcV+BKXIUrcQ2uxTW4HjfgetyEm3ALbsFP8BPcjttxJ+7E3bgbP8VP8TP8DAfiftyPB/AAHsSDeAgP4WE8jEfwCB7Fo3gMj+FxPI4n8CSewpN4Gk/jGTyL5/AcnsfzeAGfz/N1vd2F1w0EdYlRRmVQGVSKSlGZVWaVRWVRWVVWlVAJlU1lU9lVdpVD5VC5VC6VR+VR+VQ+RYoUq1jlV/lVUiVVQVVQFVKFVBFVRHnlVXFVXJVQJVRJVVKVUreq0uo2VUaVVS18eVVeVVAtfUVVSVVWlVUVdZeqqqqpaqq6qq5qqBqqpqqpaqlaqrZ6QNVRPbAPPqQudaa+GoQN1GBsqBqpxqqJegMfU83UUGyuWqiW6gk1HIdha9XMt1FPq7ZqNLZTz6ox+JzqoMZhR/WC6qQ6qy7qRdVVNffdMvz2EaimYi/VW/VRfdVMvEtd6lhV9ZoaqAapwep1tQDfUEPVm2qYGq5GqLfUSDVKjVZj1Fg1To1Xb6sJ6h01Ub2rJqnJaoqaqqap6WqGek/NVLPUbPW+mqM+UHPVPDVfLVAL1YdqkVqs0tRHaon6WC1Vy9RytUKtVKvUarVGrVXr1Hq1QW1Um9RmtUVtVZ+obWq72qF2ql1qt9qjPlV71Wdqn/pc7VdfqAPqT+qg+lIdUl+pw+prdUR9o46qb9Ux9Z06rr5XJ9RJdUr9oE6rH9UZdVadUz+p8+pndUH9oi6qoECjVlproyOdQWfUKTqTzqyv0ln01TqrvkYn9LU6m75OZ9fX6xw6p86lc+s8Oq/Op60m7TTrWOfXBXRS36AL6ht1IV1YF9FFtdfFdHF9ky6hb9Yl9S26lL5Vl9a36TK6rC6ny+vbdQV9h66oK+nK+k5dRd+lq+pq+m5dXd+ja+h7dU19n66l79e19QO6jn5Q19UP6Xr6YV1fP6Ib6Ed1Q91IN9ZNdFP9mG6mH9fNdQvdUj+hW+kndWv9lG6jn9Zt9TO6nX5Wt9fP6Q76ed1Rv6A76c66i/5FX9RBd9PddaruoXvql3Uv3Vv30X11P/2K7q9f1QP0a3qgHqQH69f1EP2GHqrf1MP0cD1Cv6VH6lF6tB6jx+pxerx+W0/Q7+iJ+l09SU/WU/RUPU1P131+qzT778h/52/kD/j13bforfoTvU1v1zv0Tr1L79Z79B69V+/V+/Q+vV/v1wf0AX1QH9SH9CF9WB/WR/QRfVQf1cf0MX1cH9cn9En9k/5Bn9Y/6jP6rD6rf9Ln9Xl94befARg0ymhjTGQymIwmxWQymc1VJou52mQ115iEudZkM9eZ7OZ6k8PkNLlMbpPH5DX5jDVknGETm/ymgEmaG0xBc6MpZAqbIqao8aaYKW5u+qfz/2h9TU1T08w0M81Nc9PStDStTCvT2rQ2bUwb09a0Ne1MO9PetDcdTAfT0XQ0nUwn08V0MV1NV9PNdDOpJtX0NC+bXqa36WP6mn7mFdPf9DcDzAAz0Aw0g81gM8QMMUPNUDPMDDMjzAgz0ow0o81oM9aMNePNeDPBTDATzUQzyUwyU8wUM81MMzPMDDPTzDSzzWwzx8wxc81cM9/MNwvNQrPILDJpJs0sMUvMUrPMLDMrzAqzyqwya8was86sMxvMBrPJbDJLzVaz1Wwz28wOs8PsMrvMHrPH7DV7zT6zz+w3+80Bc8AcNAfNIXPIHDaHzRFzxBw1R80xc8wcN8fNCXPCnDKnzGlz2pwxZ8w5c86cN+fNBXPBXDQXL132RSpSkYlMlCHKEKVEKVHmKHOUJcoSZY2yRokoEWWLskXZo+ujHFHOKFeUO8oT5Y1SwUYUuYijOMofFYiS0Q1RwejGqFBUOCoSFY18VCwqHt0UlYhujkpGt0Sloluj0tFtUZmobFQuKh/dHlWI7ogqRpWiytGdUZXorqhqVC26O6oe3RPViO6Nakb3RbWi+6Pa0QNRnejBqG70UFQvejiqHz0SNYgejRpGjaLGUZOo6b+0fghncj7uu9nuNtX2sD3ty7aX7W372L62n33F9rev2gH2NTvQDrKD7et2iH3DDrVv2mF2uB1h37Ij7Sg72o6xY+04O96+bSfYd+xE+66dZCfbKXaqnWan2xn2PTvTzrKz7ft2jv3AzrXz7Hy7wC60H9pFdrFNsx/ZJfZju9Qus8vtCrvSrrKr7Rq71q6z6+0Gu9FuspvtFrvVfmK32e12h91pd9nddo/91O61n9l99nO7335hD9g/2YP2S3vIfmUP26/tEfuNPWq/tcfsd/a4/d6esCftKfuDPW1/tGfsWXvO/mTP25/tBfuLvWjDpYv7S6d3MmQoA2WgFEqhzJSZslAWykpZKUEJykbZKDtlpxyUg3JRLspDeSgf5aNLmJjyU35KUpIKUkEqRIWoCBUhT56KU3EqQSWoJJWkUlSKSlNpKkNlqByVo9vpdrqD7qBKVInupDvpLrqLqlE1qk7VqQbVoJpUk2pRLapNtakO1aG6VJfqUT2qT/WpATWghtSQGlNjakpNqRk1o+bUnFpSS2pFrag1taY21IbaUltqR+2oPbWnDtSBOlJH6kSdqAt1oa7UlbpRN0qlVOpJPakX9aI+1If6UT/qT/1pAA2ggTSQBtNgGkJDaCgNpWE0nEbQWzSSRtFoGkNjaRyNp/E0gSbQRJpIk2gSTaEpNI2m0QyaQTNpJs2m2TSH5tBcmkvzaT4tpIW0iBZRGqXRElpCS2kpLafltJJW0mpaTWtpLa2n9bSRNtJm2kxbaStto220g3bQLtpFe2gP7aW9tI/20X7aTwfoAB2kg3SIDtFhOkxH6AgdpaN0jI7RcTpOJ+gEnaJTdJpO0xk6Q+foHJ2nn+kC/UIXKVCKU5DZXeWyuKtdVneNS3GZ3KU4AoBLcS6X2+VxeV0+Z10Ol/OvYnLOFXKFXRFX1HlXzBV3N/0uLuPKunKuvLvdVXB3uIq/i6u7e1wNd6+r6e5z1dzdfxXXcve72u4RV8c96uq6Rq6ea+Lqu0dcA/eoa+gaucauiWvlnnSt3VOujXvatXXP/C5e5Ba7tW6dW+82uL3uM3fO/eSOum/defez6+a6u37uFdffveoGuNfcQDfod/EI95Yb6Ua50W6MG+vG/S6e4qa6aW66m+HeczPdrN/FC92Hbo5Lc3PdPDffLfg1vrSmNPeRW+I+dkvdMrfcrXAr3Sq32q3532td4Ta5zW6L2+M+ddvcdrfD7XS73O5f40v72Oc+d/vdF+6I+8YddF+6Q+6YO+y+/jW+tL9j7jt33H3vTriT7pT7wZ12P7oz7uyv+7+09x/cL+6iCw4YWbFmwxFn4Iycwpk4M1/FWfhqzsrXcIKv5Wx8HWfn6zkH5+RcnJvzcF7Ox5aJHTPHnJ8LcJJv4IJ8IxfiwlyEi7LnYlycb+ISfDOX5Fu4FN/Kpfk2LsNluRyX59u5At/BFbkSV+Y7uUoIXJWr8d1cne/hGnwv1+T7uBbfz7X5Aa7DD3Jdfojr8cNcnx/hBvwoN+RG3JibcFN+jJvx49ycW3BLfoJb8ZPcmp/iNvw0t+VnuB0/y+35Oe7Az3NHfoE7cWfuwi9yV36Ju3F3TuUe3JNf5l7cm/twX+7Hr3B/fpUH8Gs8kAfxYH6dh/AbPJTf5GE8nEfwWzySR/FoHsNjeRyP57d5Ar/DE/ldnsSTeQpP5Wk8nWfwezyTZ/Fsfp/n8Ac8l+fxfF7AC/lDXsSLOY0/4iX8MS/lZbycV/BKXsWreQ2v5XW8njfwRt7Em3kLb+VPeBtv5x28k3fxbt7Dn/Je/oz38ee8n7/gA/wnPshf8iH+ig/z13yEv+Gj/C0f4+/4OH/PJ/gkn+If+DT/yGf4LJ/jn/g8/8wX+Be+yIEhxljFOjZxFGeIM8YpcaY4c3xVnCW+Os4aXxMn4mvjbPF1cfb4+jhHnDPOFeeO88R543yxjSl2McdxnD8uECfjG+KC8Y1xobhwXCQuGvu4WFw8vikuEd8cl4xviUvFt8al49viMnHZ+JH7yse3xxXiO+KKcaW4cnxnXCW+K64aV4vvjqvH98Q14nvjmvF9ccn4/rh2/EBcJ34wrhs/FNeLH47rx4/EDeJH44Zxo7hx3CRuGj8WN4sfj5vHLeKW8RNxq/jJuHX8VNwmfjpuGz/zh8dT4x5xz/jl+OU4hHv1/OSC5MLkh8lFycXJtORHySXJj5NLk8uSy5MrkiuTq5Krk2uSa5PrkuuTG5Ibk5uSm5NbkiFUywgevfLaGx/5DD6jT/GZfGZ/lc/ir/ZZ/TU+4a/12fx1Pru/3ufwOX0un9vn8Xl9Pm89eefZxz6/L+CT/gZf0N/oC/nCvogv6r0v5ov7Jr6pb+qb+cd9c9/Ct/RP+Cf8k/5J/5R/yj/t2/pnfDv/rG/vn/Md/PP+ef+C7+Q7+y7+Rd/Vv+S7+e4+1af6nr6n7+V7+T6+j+/n+/n+vr8f4Af4gX6gH+wH+yF+iB/qh/phfpgf4Uf4kX6kH+1H+7F+rB/vx/sJfoKf6Cf6SX6Sn+Kn+Gl+mp/hZ/iZfqaf7Wf7OYXm+Ll+rp/v5/uFfqFf5Bf5NJ/ml/glfqlf6pf75X6lX+lX+9V+rV/r1/v1fqPf6Df7zX6r3+q3+W1+h9/hd/ldfo/f4/f6vX6f3+f3+/3+gD/gD/qD/pD/yh/2X/sj/ht/1H/rj/nv/HH/vT/hT/pT/gd/2v/oz/iz/pz/yZ/3P/sL/hd/0Qc/PvF2YkLincTExLuJSYnJiSmJqYlpiemJGYn3EjMTsxKzE+8n5iQ+SMxNzEvMTyxILEx8mFiUWJxIS3yUWJL4OLE0sSyxPLEisTKxKhFC3m1xyB8KhGS4IRQMN4ZCoXAoEooGH4qF4uGmUCLcHEqGW0KpcGsoHW4LZULZUC48GhqGRqFxaBKahsdCs/B4aB5ahJbhidAqPBlah6dCm/B0aBueCe3Cs6F9eC50CM+HjuGF0Cl0Dl3Ci6FreCl0C91DaugReoaXQ6/QO/QJfUO/8EroH14NA8JrYWAYFAaH18OQ8EYYGt4Mw8LwMCK8FUaGUWF0GBPGhnFhfHg7TAjvhInh3TApTA5TwtQwLUwPM8J7YWaYFWaH98Oc8EGYG+aF+WFBWBg+DIvC4pAWPgpLwsdhaVgWlocVYWVYFVaHNWFtWBfWhw1hY9gUNoctYWv4JGwL28OOsDPsCrvDnvBp2Bs+C/vC52F/+CIcCH8KB8OX4VD4KhwOX4cj4ZtwNHwbjoXvwvHwfTgRToZT4YdwOvwYzoSz4Vz4KZwPP4cL4ZdwUf5mTQghhBDi76L/4HiPv/G9DACgfpv3BICrt+c+/J9rbszx53lvladVAgCe7t7xob+MKlVSU1N/e+1SDVGBeQCQ+Ov6f4mXQUt4EtpACyjxN9fXW3U+z39QP3krQOb/kJMCl+PL9W/+L+o/9sSIRaXjc9n+m/rzAAoVuJyTCS7Hl+uX/C/q52z2B+vP9OV4gOb/IScLXI4v1y8Oj8Mz0OavXimEEEIIIYQQQvxZb1Wu/R/dP1+6P89jLudkhMvxH92fCyGEEEIIIYQQ4sp7rnOXpx5r06ZF+79vgr89F/jHsmQiE5n8fza50p9MQgghhBBCiH+1yxf9V3olQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCFE+vU/8e/ErvQehRBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCiCvtfwUAAP//luw5aQ==")
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x1017082, &(0x7f0000001dc0)=ANY=[@ANYBLOB="6769643d666f726765742c6164696e6963622c636e63686f723d30303030303030303030303030303030303030342c756d61736b3d30303030303030303030303030303030303030303030312c73686f727461646531114e3d666f726765742c756e64656c6574652c7569643d", @ANYRESDEC=0x0, @ANYBLOB=',lastblock=00000000000000001023,longad,dmode=00000000000000000000011,nostrict,partition=00000000002147483647,umask=00000000000000000177777,dont_measure,appraise_type=imasig,euid<', @ANYRESDEC, @ANYBLOB=',pcr=00000000000000000017,fsmagic=0x8000000000000000,\x00'], 0x2, 0xc2d, &(0x7f00000001c0)="$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")
mkdir(0x0, 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_usb_connect(0x0, 0x4f, 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e)

6m59.702245389s ago: executing program 8 (id=614):
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e0c003920"], 0xf)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)

6m59.163245473s ago: executing program 8 (id=620):
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
r2 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000000300)=""/91, &(0x7f0000000080)=""/52, 0x6000})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1)

6m58.495025357s ago: executing program 38 (id=620):
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
r2 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000000300)=""/91, &(0x7f0000000080)=""/52, 0x6000})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1)

6.674160272s ago: executing program 6 (id=1448):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x14)

5.983614877s ago: executing program 6 (id=1449):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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")
syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040e04093120"], 0x7)

5.670534912s ago: executing program 6 (id=1453):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000100001000000000000000000d100000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028004080080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a19020000000000000000010020000c00024000000000000000010900010073797a3100000000200004"], 0xe8}}, 0x0)

5.430636172s ago: executing program 6 (id=1457):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000001c0)={0x400, 0x300, 0x0, 0x0, 0x1000, 0xfffffffe, 0x0, 0x0, {0x0, 0xfffffff6, 0x3}, {0x0, 0x20000000}, {0x0, 0x1}, {}, 0x0, 0x190, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1})

5.430409972s ago: executing program 3 (id=1458):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000)
madvise(&(0x7f0000304000/0x2000)=nil, 0x2000, 0x4)

5.423712533s ago: executing program 9 (id=1459):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdir(0x0, 0x0)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r7 = fanotify_init(0x8, 0x80000)
fanotify_mark(r7, 0x105, 0x4800003a, r6, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000340)={{0xfffffff7, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x8})
r8 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r8, 0xc1105517, &(0x7f0000000a40)={{0x0, 0x0, 0x9, 0x0, 'syz1\x00', 0x80001}, 0x6, 0x100, 0x2, 0x0, 0x0, 0x7, 'syz0\x00', 0x0})
sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xa0}}, 0x40880)
sendmmsg$inet_sctp(r0, &(0x7f0000001d80)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="2000000000000000840000"], 0x20, 0x4004004}], 0x1, 0x48850)

5.154078234s ago: executing program 3 (id=1460):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x11, &(0x7f0000000240)={[{@nombcache}, {@resgid}, {@norecovery}, {@commit={'commit', 0x3d, 0x5}}, {@nombcache}]}, 0x8, 0x61b, &(0x7f0000000980)="$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")
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x8000, 0x0)

4.373153088s ago: executing program 0 (id=1461):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x8b1fb000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
close(0xffffffffffffffff)
socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7}], 0x1c)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmmsg$inet6(r0, 0x0, 0x0, 0x3404c8d4)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2000402, &(0x7f00000003c0)={'trans=rdma,', {'port', 0x3d, 0x4e1f}, 0x2c, {[{@timeout={'timeout', 0x3d, 0x4}}, {@timeout={'timeout', 0x3d, 0x9}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '(8+:'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}, {@subj_role={'subj_role', 0x3d, '/dev/fuse\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/fuse\x00'}}, {@dont_hash}, {@appraise}]}})

4.370725518s ago: executing program 9 (id=1462):
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002340), 0x208400, 0x0)
r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10)
r5 = accept4(r4, 0x0, 0x0, 0x0)
accept4(r5, 0x0, 0x0, 0x0)
r6 = socket$isdn_base(0x22, 0x3, 0x0)
setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000001080)=r0, 0x4)
sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000)
socket(0x10, 0x6, 0x111c)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)

4.181762653s ago: executing program 3 (id=1463):
r0 = socket$inet(0x2, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000000000)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x8, 0xffffffffffffffff, [{0x6, 0x2}]}]}}}], 0x18}}], 0x1, 0x4040880)

3.382727257s ago: executing program 6 (id=1464):
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_notify={{0x18, 0x17}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, "cb2242c83bf4531f3a44ac5334677057", 0x2}}}, 0x1a)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)

3.303684204s ago: executing program 3 (id=1465):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x60, 0x2, 0x6, 0x101, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1800000}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}]}, 0x60}}, 0x2)

3.263986267s ago: executing program 9 (id=1466):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000008000), 0x2, 0x0)
ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f00000081c0)={0x7fffffff, 0x101, "23cbbe22e60299a4026a1fd4efaf4a66a786ca9a383e47f294483ea6835196fe", 0x8, 0xffff, 0x6, 0x8001, 0x100})
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x18, 0x34, 0x1, 0x70bd2a, 0x25dfdbfb, {0xd}, [@typed={0x4, 0x40}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x4048085)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r6, &(0x7f00000083c0)={0x2020, 0x0, <r7=>0x0}, 0x2020)
write$FUSE_INIT(r6, &(0x7f0000000100)={0x50, 0x0, r7, {0x7, 0x1f, 0x1, 0x80a000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x50)
syz_fuse_handle_req(r6, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0xfffffffffffffffc, {0x0, 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0)
io_setup(0x1fd, &(0x7f0000000480)=<r9=>0x0)
io_submit(r9, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0xf0, r8, &(0x7f00000000c0)='!', 0xb7f40}])
dup3(r8, r6, 0x80000)

3.11045426s ago: executing program 3 (id=1467):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000340)='cdg\x00', 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0)
sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x11, 0x0, 0x11)
recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25)
sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1, 0x0, 0x0, 0xf5000000}, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x40000, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1)

2.941970923s ago: executing program 0 (id=1468):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x401, 0x80, 0x9, 0x0, 0xffffffff}, 0x1c)

1.782378257s ago: executing program 9 (id=1469):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0)
mmap$xdp(&(0x7f0000481000/0x4000)=nil, 0x4000, 0x2000008, 0x9b013, r0, 0x80000000)

1.096858022s ago: executing program 6 (id=1470):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0x184, 0x10, 0x713, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@remote}, {@in6=@remote, 0x4d3, 0x32}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x184}}, 0x0)

1.038629277s ago: executing program 0 (id=1471):
r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000280)={0x1, @pix_mp={0x1, 0x18ad, 0x50313134, 0x8, 0x7, [{0xf7, 0x2}, {0x7}, {0x9}, {0x3, 0x6}, {0xd, 0x6}, {0x4, 0x81}, {0xc324, 0xff}, {0xff, 0x7}], 0xf7, 0x2, 0x4, 0xa7f32f3fb048a0ca, 0x6}})

1.037281207s ago: executing program 9 (id=1472):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd5cd7000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r4 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
tgkill(r4, r4, 0x21)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
ioctl$FS_IOC_GETFSSYSFSPATH(r3, 0x80811501, &(0x7f0000000340)={0x80})
wait4(r4, 0x0, 0x40000000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000180)='./file1\x00', 0x8000, &(0x7f0000000400)=ANY=[@ANYRES64=0x0], 0x1, 0x14fe, &(0x7f0000001580)="$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")
open$dir(&(0x7f0000000240)='./file3\x00', 0x20040, 0x40)
userfaultfd(0x801)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f0000000080)={'#! ', './bus'}, 0x9)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r6, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x3b, 0x4, 0x4c8, 0x1e8, 0x2f8, 0x3e0, 0x2f8, 0x3e0, 0x3e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}, {{@arp={@broadcast, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_hsr\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @loopback}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x520)

416.554167ms ago: executing program 3 (id=1473):
r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0)
write$binfmt_script(r0, 0x0, 0x0)
syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x22000c0, &(0x7f0000000080)={[{@codepage={'codepage', 0x3d, 'cp437'}}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}]}, 0x4, 0x335, &(0x7f0000000880)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000002, &(0x7f0000000280), 0x9, 0x537, &(0x7f0000000fc0)="$eJzs3c9vI1cdAPCvJ4mTbtNmF3qACtgFCgtarb3xtlHVC90LCFWVEIgD4rANiTcKseMQO1UTIpH+DXDgCn8CByQOSD1x4MYRiQNCKgekBSLQBgkkoxlPUm/idL2Nf0D8+UijmTfPM9/3ksy8mefJvAAm1o2IOIiIYkS8FREL+fpCPsXrnSn93KPD/ZWjw/2VQrTb3/pbIctP10XXNqln833ORcQ3vxbxvcLZuM3dvY3lWq26nafLrfpWubm7d3u9vrxWXatuVipLi0t3Xr37SmVgdb1e/8XDr66/8e1f/+rT7//u4Ms/TIs1n+d112OQOlWfOYmTmo6IN4YRbAym8nlxzOXgo0ki4mMR8bns+F+IqeyvEwC4zNrthWgvdKcBgMsuyfrACkkp7wuYjyQplTp9eC/ElaTWaLZuPWjsbK52+squxkzyYL1WvXNt9g8/yK4YZgppejHLy/KzdOVU+m5EXIuIn8w+k6VLK43a6vguewBgoj17qv3/52yn/e9Dj2/1AID/G3PjLgAAMHLafwCYPNp/AJg8fbT/+Zf9B0MvCwAwGk9x/58MsxwAwOjo/weAyaP9B4CJ8o0330yn9lH+/uvVt3d3Nhpv316tNjdK9Z2V0kpje6u01misZe/sqT9pf7VGY2vx5dh5p9yqNlvl5u7e/XpjZ7N1P3uv9/3qzEhqBQB8mGvX3/t9ISIOXnsmm6JrLAdtNVxunueByeUlfjC5jPYFk6v/e/zfDrUcwPj0vA+Y67n4uJ8+RRDPGcH/lJuf7L//3xjPcLno/4fJNfWRtpodeDmA0dP/D5Or3S6cHvO/eJIFAFxKF3jGv/2jQV2EAGP1pOeAB/L9PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFwy8xHx/SgkpXws8PlIklIp4rmIuBozhQfrteqdiHg+rkfEzGyaXhx3oQGAC0r+UsjH/7q58NL86dxi4V/ZYP/FtPXP120vpuv/frJ+9nj4sMoH211gXEEAYMDeWW61tiv5vOtG/tHh/srxNMryPLwX/8mHIl45OtzPpk7OdExn87nsWuLKPwp5ujMW6YsRMTWA+AfvRsQnetW/kPWNXM1HPu2OH3ns50YaP3ksfpLldebpxdfHB1AWmDTv3YuI13sdf0ncyOa9j/+57Ax1cQ/vdXZ2fO47OtwvHsc/Pv9N9YifHvM3+o3x8m++fmZle6GT927Ei9OPxT85/xzHL5wT/6U+4//xU5/58VfOyWv/LOJm9I7fHavcqm+Vm7t7t9fry2vVtepmpbK0uHTn1buvVMpZH3X5uKf6rL++duv588qW1v/KOfHneta/eLLtF/qs/8///dZ3P/sh8b/0+V7xk3ihZ/yOtE38Yp/xl6/88tzhu9P4q+fU/0m//1t9xn//z3urfX4UABiB5u7exnKtVt2+0EJ6FzqI/ZxZSIs40B32WCh2Ff5PMdxYT7UwM6yf6tAXpk+uFQe75++kexxxdZKB1+JCC49GFWu85yVg+D446MddEgAAAAAAAAAAAAAA4Dyj+NelcdcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAy+u/AQAA//9xkcaD")
rmdir(&(0x7f0000000080)='./file0\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000)
mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil)
shmdt(r4)
shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000300)=""/251)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000d40))
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
epoll_create(0x5)
syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./file2\x00', 0x1c802, &(0x7f0000000ec0)=ANY=[], 0x1, 0x5eea, &(0x7f000000e480)="$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")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f00000007c0))
openat(0xffffffffffffff9c, 0x0, 0x101442, 0x0)
ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x541b, 0x400000020040005)

415.856817ms ago: executing program 0 (id=1481):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000780)={0x28, 0x0, 0x8, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9200}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000064)

296.953936ms ago: executing program 0 (id=1474):
syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0x7f, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x2, 0xf7}}}, 0xe)
fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3)

83.387244ms ago: executing program 9 (id=1475):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)

0s ago: executing program 0 (id=1476):
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0)

kernel console output (not intermixed with test programs):

to 1560 would solve the problem.
[  127.955269][ T6855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  128.098004][ T6855] hsr_slave_0: entered promiscuous mode
[  128.119409][ T6855] hsr_slave_1: entered promiscuous mode
[  128.146756][ T6855] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  128.166258][ T6855] Cannot create hsr debugfs directory
[  128.236310][ T7021] overlayfs: failed to clone upperpath
[  128.629723][ T7025] netlink: 12 bytes leftover after parsing attributes in process `syz.6.207'.
[  128.659267][ T7025] tipc: Started in network mode
[  128.677796][ T7025] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  128.700774][ T7025] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000
[  128.725999][ T7025] tipc: Enabled bearer <udp:syz1>, priority 10
[  128.778974][ T6855] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  128.814562][ T6855] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  128.843527][ T6855] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  128.886795][ T6855] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  129.103177][ T6855] 8021q: adding VLAN 0 to HW filter on device bond0
[  129.172179][ T6855] 8021q: adding VLAN 0 to HW filter on device team0
[  129.196505][   T48] bridge0: port 1(bridge_slave_0) entered blocking state
[  129.203709][   T48] bridge0: port 1(bridge_slave_0) entered forwarding state
[  129.260422][ T3473] bridge0: port 2(bridge_slave_1) entered blocking state
[  129.267618][ T3473] bridge0: port 2(bridge_slave_1) entered forwarding state
[  129.820410][ T6855] 8021q: adding VLAN 0 to HW filter on device batadv0
[  129.842128][   T23] tipc: Node number set to 1
[  130.101517][ T7085] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  130.365567][ T6855] veth0_vlan: entered promiscuous mode
[  130.460126][ T6855] veth1_vlan: entered promiscuous mode
[  130.536302][ T6855] veth0_macvtap: entered promiscuous mode
[  130.559127][ T7093] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  130.575663][ T6855] veth1_macvtap: entered promiscuous mode
[  130.593863][ T7092] tipc: Resetting bearer <eth:syzkaller0>
[  132.847511][ T7092] tipc: Disabling bearer <eth:syzkaller0>
[  132.898551][ T6855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  132.913892][ T6855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  132.923832][ T6855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  132.942859][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  132.942991][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  132.956145][ T6855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  132.967472][ T6855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  132.980539][ T6855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  133.008767][ T6855] batman_adv: batadv0: Interface activated: batadv_slave_0
[  133.030791][ T6855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  133.063091][ T6855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  133.097167][ T6855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  133.121967][ T6855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  133.131839][ T6855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  133.157605][ T6855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  133.188752][ T6855] batman_adv: batadv0: Interface activated: batadv_slave_1
[  133.238771][ T6855] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  133.261412][ T6855] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  133.270645][ T6855] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  133.280783][ T6855] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  133.474513][ T2938] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  133.497750][ T2938] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  133.565210][ T2938] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  133.595909][ T2938] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  133.779035][ T7144] loop7: detected capacity change from 0 to 512
[  133.806211][ T7144] EXT4-fs: Ignoring removed nomblk_io_submit option
[  133.875808][ T7144] EXT4-fs (loop7): revision level too high, forcing read-only mode
[  133.912508][ T7144] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0002]
[  133.948429][ T7144] System zones: 0-1, 15-15, 18-18, 34-34
[  133.968948][ T7144] EXT4-fs (loop7): orphan cleanup on readonly fs
[  134.007838][ T7144] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #16: comm syz.7.162: casefold flag without casefold feature
[  134.079624][ T7144] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.162: couldn't read orphan inode 16 (err -117)
[  134.118639][ T7144] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  134.182692][ T7144] EXT4-fs error (device loop7): ext4_lookup:1858: inode #16: comm syz.7.162: casefold flag without casefold feature
[  134.217864][ T7141] loop6: detected capacity change from 0 to 32768
[  134.301338][ T7141] JBD2: Ignoring recovery information on journal
[  134.405990][ T7141] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  134.828188][ T7171] syz.0.231 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  135.210363][ T7172] (syz.6.226,7172,0):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options
[  135.622909][ T6567] ocfs2: Unmounting device (7,6) on (node local)
[  135.806095][ T7157] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.991105][ T3473] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.154418][ T3473] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.269058][ T3473] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.401337][ T3473] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.003664][ T7208] overlayfs: failed to clone upperpath
[  137.385174][ T5798] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  137.396593][ T5798] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  137.406643][ T5798] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  137.419820][ T5798] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  137.432730][ T5798] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  137.440922][ T5798] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  138.257319][ T7227] Bluetooth: MGMT ver 1.22
[  138.647092][ T7216] chnl_net:caif_netlink_parms(): no params data found
[  138.888467][ T7235] program syz.6.244 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  138.899063][ T7235] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  139.383866][ T3473] hsr_slave_0: left promiscuous mode
[  139.394428][ T3473] hsr_slave_1: left promiscuous mode
[  139.405039][ T3473] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  139.416299][ T3473] batman_adv: batadv0: Removing interface: batadv_slave_0
[  139.434745][ T3473] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  139.456912][ T3473] batman_adv: batadv0: Removing interface: batadv_slave_1
[  139.480331][ T3473] bridge_slave_1: left allmulticast mode
[  139.495074][ T5800] Bluetooth: hci2: command tx timeout
[  139.537408][ T3473] bridge_slave_1: left promiscuous mode
[  139.555271][ T3473] bridge0: port 2(bridge_slave_1) entered disabled state
[  139.573255][ T3473] bridge_slave_0: left allmulticast mode
[  139.581331][ T3473] bridge_slave_0: left promiscuous mode
[  139.593253][ T3473] bridge0: port 1(bridge_slave_0) entered disabled state
[  139.640809][ T3473] veth1_macvtap: left promiscuous mode
[  139.654625][ T3473] veth0_macvtap: left promiscuous mode
[  139.667628][ T3473] veth1_vlan: left promiscuous mode
[  139.676108][ T3473] veth0_vlan: left promiscuous mode
[  140.488787][ T3473] team0 (unregistering): Port device team_slave_1 removed
[  140.541793][ T3473] team0 (unregistering): Port device team_slave_0 removed
[  140.591622][ T3473] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  140.645282][ T3473] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  141.159863][ T3473] bond0 (unregistering): Released all slaves
[  141.312443][ T7216] bridge0: port 1(bridge_slave_0) entered blocking state
[  141.319593][ T7216] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.347768][ T7216] bridge_slave_0: entered allmulticast mode
[  141.354758][ T7216] bridge_slave_0: entered promiscuous mode
[  141.370652][ T7216] bridge0: port 2(bridge_slave_1) entered blocking state
[  141.377944][ T7216] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.385433][ T7216] bridge_slave_1: entered allmulticast mode
[  141.394468][ T7216] bridge_slave_1: entered promiscuous mode
[  141.494237][ T7216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  141.548725][ T7216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  141.573603][ T5800] Bluetooth: hci2: command tx timeout
[  141.656239][ T7216] team0: Port device team_slave_0 added
[  141.678480][ T7216] team0: Port device team_slave_1 added
[  141.782238][ T7216] batman_adv: batadv0: Adding interface: batadv_slave_0
[  141.789229][ T7216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  141.835304][ T7216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  141.849905][ T7216] batman_adv: batadv0: Adding interface: batadv_slave_1
[  141.859652][ T7216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  141.889111][ T7216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  142.016944][ T7216] hsr_slave_0: entered promiscuous mode
[  142.024873][ T7216] hsr_slave_1: entered promiscuous mode
[  142.031290][ T7216] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  142.039493][ T7216] Cannot create hsr debugfs directory
[  142.096195][ T7249] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  142.272475][ T7216] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  142.288963][ T7216] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  142.317761][ T7216] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  142.336175][ T7216] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  142.435536][ T7216] 8021q: adding VLAN 0 to HW filter on device bond0
[  142.460975][ T7216] 8021q: adding VLAN 0 to HW filter on device team0
[  142.474361][ T3473] bridge0: port 1(bridge_slave_0) entered blocking state
[  142.481486][ T3473] bridge0: port 1(bridge_slave_0) entered forwarding state
[  142.498192][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  142.505362][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  142.592235][ T5927] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  142.806323][ T5927] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  142.840142][ T5927] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  142.854403][ T7216] 8021q: adding VLAN 0 to HW filter on device batadv0
[  142.882814][ T5927] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  142.908367][ T5927] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.948497][ T5927] usb 7-1: config 0 descriptor??
[  143.064897][ T5800] Bluetooth: hci0: unexpected cc 0x2039 length: 9 > 1
[  143.300278][ T7216] veth0_vlan: entered promiscuous mode
[  143.340309][ T7216] veth1_vlan: entered promiscuous mode
[  143.416321][ T7216] veth0_macvtap: entered promiscuous mode
[  143.422660][ T5927] kovaplus 0003:1E7D:2D50.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.6-1/input0
[  143.440853][ T7216] veth1_macvtap: entered promiscuous mode
[  143.473581][ T7216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  143.501979][ T7216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.522461][ T7216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  143.543614][ T7216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.574533][ T7216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  143.596332][ T7216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.610599][ T7216] batman_adv: batadv0: Interface activated: batadv_slave_0
[  143.652438][ T5800] Bluetooth: hci2: command tx timeout
[  143.698574][ T7216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  143.724000][ T7216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.738530][ T7216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  143.759806][ T7216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.770158][ T7216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  143.789234][ T7216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.800232][ T5927] kovaplus 0003:1E7D:2D50.0004: couldn't init struct kovaplus_device
[  143.803871][ T7216] batman_adv: batadv0: Interface activated: batadv_slave_1
[  143.829895][ T5927] kovaplus 0003:1E7D:2D50.0004: couldn't install mouse
[  143.855710][ T5927] kovaplus: probe of 0003:1E7D:2D50.0004 failed with error -71
[  143.859924][ T7216] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  143.880770][ T7216] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  143.889676][ T7216] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  143.902338][ T5927] usb 7-1: USB disconnect, device number 2
[  143.929488][ T7216] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  144.075352][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  144.090747][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  144.114853][ T7301] netlink: 24 bytes leftover after parsing attributes in process `syz.0.258'.
[  144.139951][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  144.159600][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  145.734205][ T5800] Bluetooth: hci2: command tx timeout
[  146.099389][   T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.317204][ T7327] program syz.8.264 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  146.347723][ T7327] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  146.574055][ T5798] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  146.586549][ T5798] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  146.598360][ T5798] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  146.600783][   T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.626777][ T5798] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  146.641719][ T5798] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  146.653413][ T5798] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  146.866395][   T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.086439][   T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.106394][ T5800] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  147.115278][ T5800] Bluetooth: hci0: Injecting HCI hardware error event
[  147.125238][ T5798] Bluetooth: hci0: hardware error 0x00
[  147.645403][ T7342] loop8: detected capacity change from 0 to 32768
[  147.755580][ T7342] XFS (loop8): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  147.769687][   T11] tipc: Disabling bearer <udp:syz1>
[  147.806700][   T11] tipc: Left network mode
[  147.832408][ T7342] XFS (loop8): Ending clean mount
[  147.840451][ T7342] XFS (loop8): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  148.161255][ T7330] chnl_net:caif_netlink_parms(): no params data found
[  148.517911][ T7330] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.526969][ T7330] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.540755][ T7330] bridge_slave_0: entered allmulticast mode
[  148.548848][ T7330] bridge_slave_0: entered promiscuous mode
[  148.558298][ T7330] bridge0: port 2(bridge_slave_1) entered blocking state
[  148.581751][ T7330] bridge0: port 2(bridge_slave_1) entered disabled state
[  148.602563][   T23] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  148.610984][ T7330] bridge_slave_1: entered allmulticast mode
[  148.636644][ T7330] bridge_slave_1: entered promiscuous mode
[  148.710149][ T5800] Bluetooth: hci3: command tx timeout
[  148.750308][ T7374] binder: 7373:7374 ioctl c0306201 2000000002c0 returned -14
[  148.815070][   T23] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  148.826026][   T23] usb 7-1: config 0 has no interfaces?
[  148.829431][ T7330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  148.831521][   T23] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  148.851566][   T23] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.871576][ T7330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  148.874301][   T23] usb 7-1: config 0 descriptor??
[  148.997767][ T7330] team0: Port device team_slave_0 added
[  149.046483][ T7330] team0: Port device team_slave_1 added
[  149.126639][   T23] usb 7-1: USB disconnect, device number 3
[  149.211154][ T7330] batman_adv: batadv0: Adding interface: batadv_slave_0
[  149.225385][ T7330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  149.262283][ T5798] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  149.282557][ T7330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  149.351016][ T7330] batman_adv: batadv0: Adding interface: batadv_slave_1
[  149.358387][ T7330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  149.386274][ T7330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  149.567247][ T7330] hsr_slave_0: entered promiscuous mode
[  149.588852][ T7330] hsr_slave_1: entered promiscuous mode
[  149.602346][ T7330] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  149.612935][ T7330] Cannot create hsr debugfs directory
[  149.956091][   T11] hsr_slave_0: left promiscuous mode
[  150.018692][   T11] hsr_slave_1: left promiscuous mode
[  150.037891][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  150.056349][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  150.079662][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  150.094546][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  150.116171][   T11] bridge_slave_1: left allmulticast mode
[  150.124694][   T11] bridge_slave_1: left promiscuous mode
[  150.137148][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.162348][   T11] bridge_slave_0: left allmulticast mode
[  150.175556][   T11] bridge_slave_0: left promiscuous mode
[  150.189193][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.278160][   T11] veth1_macvtap: left promiscuous mode
[  150.285018][   T11] veth0_macvtap: left promiscuous mode
[  150.295954][   T11] veth1_vlan: left promiscuous mode
[  150.311788][   T11] veth0_vlan: left promiscuous mode
[  150.780469][ T5798] Bluetooth: hci3: command tx timeout
[  152.304909][   T11] team0 (unregistering): Port device team_slave_1 removed
[  152.359698][   T11] team0 (unregistering): Port device team_slave_0 removed
[  152.419503][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  152.477728][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  152.859131][ T5798] Bluetooth: hci3: command tx timeout
[  153.076337][   T11] bond0 (unregistering): Released all slaves
[  153.755420][ T7330] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  153.775284][ T7330] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  153.841347][ T7330] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  153.862047][    T8] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  153.886161][ T7330] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  154.042386][    T8] usb 9-1: Using ep0 maxpacket: 32
[  154.072657][    T8] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  154.117291][    T8] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  154.141278][    T8] usb 9-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  154.160883][    T8] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.193967][    T8] usb 9-1: config 0 descriptor??
[  154.240134][ T7330] 8021q: adding VLAN 0 to HW filter on device bond0
[  154.297585][ T7330] 8021q: adding VLAN 0 to HW filter on device team0
[  154.340158][ T1297] bridge0: port 1(bridge_slave_0) entered blocking state
[  154.347336][ T1297] bridge0: port 1(bridge_slave_0) entered forwarding state
[  154.405673][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  154.412891][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  154.620452][    T8] ft260 0003:0403:6030.0005: unknown main item tag 0x7
[  154.810141][    T8] ft260 0003:0403:6030.0005: chip code: 6424 8183
[  154.932141][ T5798] Bluetooth: hci3: command tx timeout
[  154.958427][ T7330] 8021q: adding VLAN 0 to HW filter on device batadv0
[  155.012475][    T8] ft260 0003:0403:6030.0005: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.8-1/input0
[  155.227010][    T8] ft260 0003:0403:6030.0005: failed to retrieve status: -32, no wakeup
[  155.238885][ T7505] loop6: detected capacity change from 0 to 32768
[  155.371554][ T7505] ocfs2: Mounting device (7,6) on (node local, slot 0) with writeback data mode.
[  155.723100][ T7535] netlink: 16 bytes leftover after parsing attributes in process `syz.0.305'.
[  155.939825][    T8] usb 9-1: reset high-speed USB device number 2 using dummy_hcd
[  156.210397][    C0] raw-gadget.0 gadget.8: ignoring, device is not running
[  156.243980][   T27] audit: type=1800 audit(1754963026.214:14): pid=7534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.304" name="file1" dev="loop6" ino=17059 res=0 errno=0
[  156.479957][ T7330] veth0_vlan: entered promiscuous mode
[  156.511289][ T7330] veth1_vlan: entered promiscuous mode
[  156.569666][ T7330] veth0_macvtap: entered promiscuous mode
[  156.586545][ T7330] veth1_macvtap: entered promiscuous mode
[  156.592981][ T5853] usb 7-1: new full-speed USB device number 4 using dummy_hcd
[  156.637542][ T7330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  156.654294][ T7330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  156.668581][ T7330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  156.679297][ T7330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  156.689432][ T7330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  156.701098][ T7330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  156.725469][ T7330] batman_adv: batadv0: Interface activated: batadv_slave_0
[  156.743190][ T7330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  156.779686][ T7330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  156.811840][ T5853] usb 7-1: unable to get BOS descriptor or descriptor too short
[  156.840849][ T5853] usb 7-1: no configurations
[  156.845676][ T7330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  156.857851][ T5853] usb 7-1: can't read configurations, error -22
[  156.873129][ T7330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  156.891698][ T7330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  156.902460][ T7330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  156.914815][ T7330] batman_adv: batadv0: Interface activated: batadv_slave_1
[  156.928065][ T7330] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  156.937234][ T7330] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  156.946752][ T7330] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  156.955613][ T7330] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  157.107538][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  157.128034][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  157.193528][    T9] usb 9-1: USB disconnect, device number 2
[  157.226706][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  157.254056][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  157.290742][ T5870] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  157.394157][ T5870] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  157.432380][ T6567] ocfs2: Unmounting device (7,6) on (node local)
[  157.906492][ T7578] netlink: 4 bytes leftover after parsing attributes in process `syz.6.309'.
[  160.539692][ T7614] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  161.092925][ T7637] loop8: detected capacity change from 0 to 512
[  161.208478][ T7637] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #15: comm syz.8.328: iget: bad i_size value: 38620345925642
[  161.254911][ T7637] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.328: couldn't read orphan inode 15 (err -117)
[  161.352038][ T5789] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  161.390680][ T7637] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  161.602994][ T5789] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  161.679009][ T5789] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  161.817173][ T5789] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.192814][ T5789] usb 7-1: config 0 descriptor??
[  162.228850][ T5789] pwc: Askey VC010 type 2 USB webcam detected.
[  162.473799][ T7216] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.666982][ T5789] pwc: recv_control_msg error -32 req 02 val 2b00
[  162.779565][ T5789] pwc: recv_control_msg error -32 req 02 val 2700
[  162.852697][ T5789] pwc: recv_control_msg error -32 req 02 val 2c00
[  162.942892][ T5789] pwc: recv_control_msg error -32 req 04 val 1000
[  163.024590][ T5789] pwc: recv_control_msg error -32 req 04 val 1300
[  163.126142][ T5789] pwc: recv_control_msg error -32 req 04 val 1400
[  163.210626][ T5789] pwc: recv_control_msg error -32 req 02 val 2000
[  163.271707][ T5789] pwc: recv_control_msg error -32 req 02 val 2100
[  163.514100][ T5789] pwc: recv_control_msg error -71 req 02 val 2500
[  163.528639][ T5789] pwc: recv_control_msg error -71 req 02 val 2400
[  163.568209][ T5789] pwc: recv_control_msg error -71 req 02 val 2600
[  163.619252][ T5789] pwc: recv_control_msg error -71 req 02 val 2900
[  163.648234][ T5789] pwc: recv_control_msg error -71 req 02 val 2800
[  163.680467][ T5789] pwc: recv_control_msg error -71 req 04 val 1100
[  163.708928][ T5789] pwc: recv_control_msg error -71 req 04 val 1200
[  163.745298][ T5789] pwc: Registered as video103.
[  163.775160][ T5789] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input9
[  163.832351][ T5789] usb 7-1: USB disconnect, device number 6
[  164.895050][ T7697] loop8: detected capacity change from 0 to 512
[  164.930254][ T7699] overlayfs: failed to clone upperpath
[  165.009399][ T7697] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  165.097443][ T7697] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  165.376036][ T7216] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.707242][ T7725] binder_alloc: 7724: pid 7724 spamming oneway? 1 buffers allocated for a total size of 4096
[  165.816625][ T5789] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  166.033899][ T5789] usb 7-1: Using ep0 maxpacket: 16
[  166.042895][ T5789] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  166.050826][ T5789] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  166.050843][ T5789] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.050854][ T5789] usb 7-1: Product: syz
[  166.050861][ T5789] usb 7-1: Manufacturer: syz
[  166.050869][ T5789] usb 7-1: SerialNumber: syz
[  166.058492][ T5789] usb 7-1: config 0 descriptor??
[  166.059633][ T5789] hub 7-1:0.0: bad descriptor, ignoring hub
[  166.059663][ T5789] hub: probe of 7-1:0.0 failed with error -5
[  166.061276][ T5789] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input10
[  168.775637][ T7767] syz.0.352 uses obsolete (PF_INET,SOCK_PACKET)
[  168.956279][ T7771] sd 0:0:1:0: PR command failed: 1026
[  168.969171][ T7771] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  168.984277][ T7771] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  169.222921][ T5853] usb 7-1: USB disconnect, device number 7
[  170.090731][ T7788] loop9: detected capacity change from 0 to 32768
[  170.133462][ T7788] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 scanned by syz.9.355 (7788)
[  170.168642][ T7788] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  170.204373][ T7788] BTRFS info (device loop9): using crc32c (crc32c-intel) checksum algorithm
[  170.235859][ T7788] BTRFS info (device loop9): metadata ratio 2
[  170.244655][ T7788] BTRFS info (device loop9): allowing degraded mounts
[  170.284799][ T7788] BTRFS info (device loop9): force zlib compression, level 3
[  170.307468][ T7788] BTRFS info (device loop9): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  170.332158][ T7788] BTRFS info (device loop9): use zstd compression, level 3
[  170.345581][ T7788] BTRFS info (device loop9): force clearing of disk cache
[  170.360006][   T27] audit: type=1326 audit(1754963040.324:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7824 comm="syz.8.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f5bd8ebe9 code=0x7ffc0000
[  170.370960][ T7788] BTRFS info (device loop9): max_inline at 0
[  170.425783][ T7788] BTRFS info (device loop9): using free space tree
[  170.431971][   T27] audit: type=1326 audit(1754963040.324:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7824 comm="syz.8.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f5bd8ebe9 code=0x7ffc0000
[  170.503436][   T27] audit: type=1326 audit(1754963040.334:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7824 comm="syz.8.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f6f5bd8ebe9 code=0x7ffc0000
[  170.525492][    C1] vkms_vblank_simulate: vblank timer overrun
[  170.598836][   T27] audit: type=1326 audit(1754963040.334:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7824 comm="syz.8.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f5bd8ebe9 code=0x7ffc0000
[  170.622510][   T27] audit: type=1326 audit(1754963040.334:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7824 comm="syz.8.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6f5bd8ebe9 code=0x7ffc0000
[  170.660724][   T27] audit: type=1326 audit(1754963040.334:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7824 comm="syz.8.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f5bd8ebe9 code=0x7ffc0000
[  170.683410][ T7788] BTRFS info (device loop9): enabling ssd optimizations
[  170.752292][ T7788] BTRFS info (device loop9): rebuilding free space tree
[  170.775162][   T27] audit: type=1326 audit(1754963040.364:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7824 comm="syz.8.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f5bd8ebe9 code=0x7ffc0000
[  170.852009][   T27] audit: type=1326 audit(1754963040.364:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7824 comm="syz.8.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6f5bd8ebe9 code=0x7ffc0000
[  170.914899][   T27] audit: type=1326 audit(1754963040.364:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7824 comm="syz.8.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f5bd8ebe9 code=0x7ffc0000
[  170.997747][   T27] audit: type=1326 audit(1754963040.364:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7824 comm="syz.8.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f5bd8ebe9 code=0x7ffc0000
[  172.455554][ T7330] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  174.872244][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  174.902501][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  176.078622][ T7970] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  177.367145][ T8012] loop8: detected capacity change from 0 to 512
[  177.421047][ T8012] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #15: comm syz.8.389: casefold flag without casefold feature
[  177.467497][ T8012] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.389: couldn't read orphan inode 15 (err -117)
[  177.547650][ T8012] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  178.124004][ T7216] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  178.561800][ T8035] loop8: detected capacity change from 0 to 40427
[  178.603990][ T8035] F2FS-fs (loop8): invalid crc value
[  178.630257][ T8035] F2FS-fs (loop8): Found nat_bits in checkpoint
[  178.719948][ T8035] F2FS-fs (loop8): Start checkpoint disabled!
[  178.744366][ T8035] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6
[  179.494885][   T42] kworker/u4:2: attempt to access beyond end of device
[  179.494885][   T42] loop8: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  179.562090][   T42] F2FS-fs (loop8): Stopped filesystem due to reason: 3
[  179.569023][   T42] F2FS-fs (loop8): Stopped filesystem due to reason: 3
[  181.548382][ T8079] netlink: 60 bytes leftover after parsing attributes in process `syz.6.404'.
[  181.884880][ T8089] wg1 speed is unknown, defaulting to 1000
[  181.923300][ T8089] wg1 speed is unknown, defaulting to 1000
[  182.048667][ T8089] wg1 speed is unknown, defaulting to 1000
[  182.315873][ T8089] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  182.544322][ T8062] loop9: detected capacity change from 0 to 32768
[  182.603894][ T8101] overlayfs: failed to clone upperpath
[  182.610837][ T8062] XFS: noikeep mount option is deprecated.
[  182.655532][ T8089] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  182.881148][ T8062] XFS (loop9): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  184.021979][ T8089] wg1 speed is unknown, defaulting to 1000
[  184.084687][ T5870] Process accounting resumed
[  184.124015][ T8089] wg1 speed is unknown, defaulting to 1000
[  184.197784][ T8089] wg1 speed is unknown, defaulting to 1000
[  184.280012][ T8062] XFS (loop9): Ending clean mount
[  184.340810][ T8089] wg1 speed is unknown, defaulting to 1000
[  184.349277][ T8062] XFS (loop9): Quotacheck needed: Please wait.
[  184.452086][ T8135] bridge0: entered promiscuous mode
[  184.458094][ T8135] vlan2: entered promiscuous mode
[  184.541317][ T8062] XFS (loop9): Quotacheck: Done.
[  184.554924][ T8089] wg1 speed is unknown, defaulting to 1000
[  184.665326][ T7330] XFS (loop9): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  187.434538][ T8181] kvm: pic: single mode not supported
[  187.592016][ T5870] usb 9-1: new full-speed USB device number 3 using dummy_hcd
[  188.238345][ T5870] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  188.298238][ T5870] usb 9-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  188.347202][ T5870] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.954318][ T5870] usb 9-1: config 0 descriptor??
[  188.963624][ T8180] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  189.135890][ T8211] siw: device registration error -23
[  189.151543][ T8210] loop9: detected capacity change from 0 to 512
[  189.238559][ T8210] EXT4-fs error (device loop9): ext4_orphan_get:1399: inode #15: comm syz.9.429: iget: bad i_size value: 38620345925642
[  189.255876][ T8210] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.429: couldn't read orphan inode 15 (err -117)
[  189.386083][ T8210] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  189.415980][ T5870] elan 0003:04F3:0755.0007: unknown main item tag 0x0
[  189.432292][ T5870] elan 0003:04F3:0755.0007: unknown main item tag 0x0
[  189.444966][ T5870] elan 0003:04F3:0755.0007: item fetching failed at offset 3/5
[  189.466924][ T5870] elan 0003:04F3:0755.0007: Hid Parse failed
[  189.491358][ T5870] elan: probe of 0003:04F3:0755.0007 failed with error -22
[  189.769476][ T5870] usb 9-1: USB disconnect, device number 3
[  189.975987][ T7330] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  191.724743][ T8282] snd_virmidi snd_virmidi.0: control 0:-32767:32769:syz0:3106 is already present
[  192.702522][   T23] usb 10-1: new full-speed USB device number 2 using dummy_hcd
[  192.944052][   T23] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  192.965688][   T23] usb 10-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  192.966231][ T8305] loop8: detected capacity change from 0 to 256
[  193.001716][   T23] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  193.043235][   T23] usb 10-1: config 0 descriptor??
[  193.069720][ T8282] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  193.086789][ T8305] FAT-fs (loop8): Directory bread(block 64) failed
[  193.117113][ T8305] FAT-fs (loop8): Directory bread(block 65) failed
[  193.133372][ T8305] FAT-fs (loop8): Directory bread(block 66) failed
[  193.169116][ T8305] FAT-fs (loop8): Directory bread(block 67) failed
[  193.252294][ T8305] FAT-fs (loop8): Directory bread(block 68) failed
[  193.407819][ T8305] FAT-fs (loop8): Directory bread(block 69) failed
[  193.416876][ T8305] FAT-fs (loop8): Directory bread(block 70) failed
[  193.428689][ T8305] FAT-fs (loop8): Directory bread(block 71) failed
[  193.445945][ T8305] FAT-fs (loop8): Directory bread(block 72) failed
[  193.460842][ T8305] FAT-fs (loop8): Directory bread(block 73) failed
[  193.605901][   T23] elan 0003:04F3:0755.0008: unknown main item tag 0x0
[  193.692033][   T23] elan 0003:04F3:0755.0008: unknown main item tag 0x0
[  193.698881][   T23] elan 0003:04F3:0755.0008: item fetching failed at offset 3/5
[  193.727582][   T23] elan 0003:04F3:0755.0008: Hid Parse failed
[  193.809876][   T23] elan: probe of 0003:04F3:0755.0008 failed with error -22
[  193.840443][   T23] usb 10-1: USB disconnect, device number 2
[  193.854624][ T8317] FAT-fs (loop8): error, invalid access to FAT (entry 0x00006c61)
[  193.871287][   T27] kauditd_printk_skb: 18 callbacks suppressed
[  193.871302][   T27] audit: type=1800 audit(1754963063.824:43): pid=8317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.448" name="cpu.stat" dev="loop8" ino=1048620 res=0 errno=0
[  194.378182][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  194.384752][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  194.679430][ T8341] loop8: detected capacity change from 0 to 512
[  194.701447][ T8341] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  194.726483][ T8341] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  194.773048][ T8341] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  195.007321][ T7216] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.185729][ T8357] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  195.695227][   T27] audit: type=1326 audit(1754963065.664:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8365 comm="syz.8.461" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6f5bd8ebe9 code=0x0
[  197.388782][ T8406] loop8: detected capacity change from 0 to 40427
[  197.460286][ T8406] F2FS-fs (loop8): invalid crc value
[  197.491758][ T8406] F2FS-fs (loop8): Found nat_bits in checkpoint
[  197.718302][ T8406] F2FS-fs (loop8): Start checkpoint disabled!
[  197.774793][ T8406] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6
[  197.850731][ T8406] F2FS-fs (loop8): Unrecognized mount option "������" or missing value
[  198.667952][   T27] audit: type=1400 audit(1754963068.544:45): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3A3D7E142D901405 pid=8441 comm="syz.9.474"
[  200.194301][    T8] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  200.382267][ T7369] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  200.422026][    T8] usb 10-1: Using ep0 maxpacket: 16
[  200.437400][    T8] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  200.462113][    T8] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[  200.484418][ T8470] loop6: detected capacity change from 0 to 2048
[  200.509689][    T8] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  200.531324][    T8] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  200.551573][    T8] usb 10-1: Product: syz
[  200.558097][ T8470]  loop6: p1 < > p3
[  200.570414][    T8] usb 10-1: Manufacturer: syz
[  200.581262][ T8470] loop6: p3 size 134217728 extends beyond EOD, truncated
[  200.585676][    T8] usb 10-1: SerialNumber: syz
[  200.598296][ T7369] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  200.627030][ T7369] usb 9-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[  200.656674][ T7369] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  200.686814][ T7369] usb 9-1: config 0 descriptor??
[  200.840456][    T8] usb 10-1: 0:2 : does not exist
[  200.859379][ T8470] kvm: emulating exchange as write
[  200.877335][    T8] usb 10-1: 5:0: failed to get current value for ch 0 (-22)
[  200.962026][    T8] usb 10-1: USB disconnect, device number 3
[  201.242664][ T7369] lg-g15 0003:046D:C222.0009: unknown main item tag 0x0
[  201.268490][ T7369] lg-g15 0003:046D:C222.0009: unknown main item tag 0x0
[  201.296253][ T7369] lg-g15 0003:046D:C222.0009: unknown main item tag 0x0
[  201.319095][ T7369] lg-g15 0003:046D:C222.0009: unknown main item tag 0x0
[  201.358910][ T7369] lg-g15 0003:046D:C222.0009: hidraw0: USB HID v10.00 Device [HID 046d:c222] on usb-dummy_hcd.8-1/input0
[  201.559943][ T7311] usb 9-1: USB disconnect, device number 4
[  201.689265][ T8485] fido_id[8485]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory
[  201.780936][ T8490] loop9: detected capacity change from 0 to 4096
[  201.850495][ T8490] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  202.054674][ T8490] fs-verity: sha256 using implementation "sha256-avx2"
[  202.193460][ T7330] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.939681][ T8537] netlink: 4 bytes leftover after parsing attributes in process `syz.8.492'.
[  205.466673][ T8571] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  206.400480][ T8605] loop8: detected capacity change from 0 to 128
[  207.516007][ T8621] netlink: 44 bytes leftover after parsing attributes in process `syz.9.511'.
[  207.546512][ T8619] netlink: 44 bytes leftover after parsing attributes in process `syz.9.511'.
[  207.654005][ T8626] loop6: detected capacity change from 0 to 1024
[  207.882164][ T8626] hfsplus: request for non-existent node 33423360 in B*Tree
[  207.904684][ T8626] hfsplus: request for non-existent node 33423360 in B*Tree
[  207.975649][ T8635] hfsplus: request for non-existent node 33423360 in B*Tree
[  208.010208][ T8635] hfsplus: request for non-existent node 33423360 in B*Tree
[  208.187982][ T8626] hfsplus: request for non-existent node 33423360 in B*Tree
[  208.207817][ T8626] hfsplus: request for non-existent node 33423360 in B*Tree
[  208.234203][ T8635] hfsplus: request for non-existent node 33423360 in B*Tree
[  208.286598][ T8643] loop8: detected capacity change from 0 to 2048
[  208.294864][ T8643] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=26504, location=26504
[  209.439065][ T8635] hfsplus: request for non-existent node 33423360 in B*Tree
[  209.479634][ T8626] hfsplus: request for non-existent node 33423360 in B*Tree
[  209.502377][ T8643] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  209.505133][ T8626] hfsplus: request for non-existent node 33423360 in B*Tree
[  209.639520][ T8635] hfsplus: request for non-existent node 33423360 in B*Tree
[  209.748114][ T8635] hfsplus: request for non-existent node 33423360 in B*Tree
[  209.792260][ T8626] hfsplus: request for non-existent node 33423360 in B*Tree
[  209.821269][ T8626] hfsplus: request for non-existent node 33423360 in B*Tree
[  209.890637][ T8646] hfsplus: request for non-existent node 33423360 in B*Tree
[  209.892475][ T8652] loop8: detected capacity change from 0 to 128
[  209.937640][ T8646] hfsplus: request for non-existent node 33423360 in B*Tree
[  209.937643][ T8652] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  209.968412][ T8652] ext4 filesystem being mounted at /58/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  209.977176][ T8635] hfsplus: request for non-existent node 33423360 in B*Tree
[  209.986183][ T8635] hfsplus: request for non-existent node 33423360 in B*Tree
[  210.033368][ T8649] hfsplus: request for non-existent node 33423360 in B*Tree
[  210.045161][ T8649] hfsplus: request for non-existent node 33423360 in B*Tree
[  210.501606][ T8674] loop9: detected capacity change from 0 to 512
[  210.547907][ T8675] kvm: pic: non byte write
[  210.589269][ T8674] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  210.632158][ T8674] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  210.698239][ T8674] EXT4-fs error (device loop9): ext4_lookup:1858: inode #12: comm syz.9.522: iget: bad i_size value: 2533274857506816
[  210.748639][ T8674] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  210.782744][ T7216] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  213.455752][ T8701] syzkaller0: entered promiscuous mode
[  213.476486][ T8701] syzkaller0: entered allmulticast mode
[  213.504706][ T8708] netlink: 12 bytes leftover after parsing attributes in process `syz.9.528'.
[  213.565962][ T8708] tipc: Started in network mode
[  213.580515][ T8708] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  213.598040][ T8708] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000
[  213.608899][ T8708] tipc: Enabled bearer <udp:syz1>, priority 10
[  214.723138][   T23] tipc: Node number set to 1
[  218.502356][ T8759] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  218.542271][ T8765] wg1 speed is unknown, defaulting to 1000
[  220.581039][ T8778] loop8: detected capacity change from 0 to 32768
[  220.619968][ T8778] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 scanned by syz.8.544 (8778)
[  220.829927][ T8778] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  220.985936][ T8778] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm
[  221.170163][ T8778] BTRFS info (device loop8): using free space tree
[  221.616674][ T8819] syz_tun: entered allmulticast mode
[  221.636537][ T8818] syz_tun: left allmulticast mode
[  221.666474][ T8778] BTRFS info (device loop8): enabling ssd optimizations
[  221.712731][ T8778] BTRFS info (device loop8): auto enabling async discard
[  221.992963][ T7216] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  223.322754][ T8855] loop6: detected capacity change from 0 to 128
[  225.163876][ T8916] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  225.393431][ T8924] overlayfs: failed to clone upperpath
[  225.920134][ T8933] netlink: 'syz.9.568': attribute type 10 has an invalid length.
[  226.034778][ T8933] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  226.079601][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  226.108138][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  227.172046][ T5800] Bluetooth: hci1: command 0x0406 tx timeout
[  227.305775][ T8955] loop6: detected capacity change from 0 to 512
[  227.394729][ T8955] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.573: iget: bad i_size value: 38620345925642
[  227.416904][ T8955] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.573: couldn't read orphan inode 15 (err -117)
[  227.499264][ T8955] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  227.632253][ T8961] EXT4-fs error (device loop6): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  227.901243][ T6567] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.355766][ T8983] pimreg: entered allmulticast mode
[  229.442873][ T8988] loop6: detected capacity change from 0 to 4096
[  229.461841][ T8989] dvmrp0: entered allmulticast mode
[  229.467913][ T8991] dvmrp0: left allmulticast mode
[  229.501347][ T8991] pimreg: left allmulticast mode
[  229.533222][ T8988] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  230.435642][ T6567] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  231.704283][ T9042] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  231.734673][ T9049] syzkaller0: entered promiscuous mode
[  231.740192][ T9049] syzkaller0: entered allmulticast mode
[  231.764532][ T9042] tipc: Resetting bearer <eth:syzkaller0>
[  231.781887][ T9041] tipc: Resetting bearer <eth:syzkaller0>
[  231.879353][ T9041] tipc: Disabling bearer <eth:syzkaller0>
[  235.331293][ T9087] loop8: detected capacity change from 0 to 256
[  235.460322][ T9087] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  235.498640][ T9087] exFAT-fs (loop8): Medium has reported failures. Some data may be lost.
[  237.048242][ T9087] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  237.744581][ T7334] IPVS: starting estimator thread 0...
[  237.934708][ T9117] IPVS: using max 17 ests per chain, 40800 per kthread
[  238.859564][   T59] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  239.056978][   T59] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  239.244168][   T59] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  239.444901][   T59] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  239.549158][ T9145] loop6: detected capacity change from 0 to 512
[  239.627975][ T9145] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.623: iget: bad i_size value: 38620345925642
[  239.745147][ T9145] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.623: couldn't read orphan inode 15 (err -117)
[  239.856741][ T9145] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  240.014105][ T5800] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  240.029476][ T5800] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  240.038687][ T5800] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  240.055552][ T5800] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  240.185498][ T5800] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  240.193126][ T5800] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  240.310927][ T9154] wg1 speed is unknown, defaulting to 1000
[  240.424845][   T28] IPVS: starting estimator thread 0...
[  240.622538][ T9162] IPVS: using max 17 ests per chain, 40800 per kthread
[  241.127042][ T6567] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  242.316618][ T5798] Bluetooth: hci2: command tx timeout
[  242.607429][ T9188] netlink: 4 bytes leftover after parsing attributes in process `syz.9.629'.
[  242.647987][ T9188] netlink: 12 bytes leftover after parsing attributes in process `syz.9.629'.
[  242.706524][ T9154] chnl_net:caif_netlink_parms(): no params data found
[  244.598690][ T5798] Bluetooth: hci2: command tx timeout
[  245.532091][ T9154] bridge0: port 1(bridge_slave_0) entered blocking state
[  245.539254][ T9154] bridge0: port 1(bridge_slave_0) entered disabled state
[  245.590247][ T9154] bridge_slave_0: entered allmulticast mode
[  245.606498][ T9154] bridge_slave_0: entered promiscuous mode
[  245.874259][ T9154] bridge0: port 2(bridge_slave_1) entered blocking state
[  245.899772][ T9154] bridge0: port 2(bridge_slave_1) entered disabled state
[  245.907314][ T9154] bridge_slave_1: entered allmulticast mode
[  245.914731][ T9154] bridge_slave_1: entered promiscuous mode
[  246.580668][ T9154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  246.612262][ T5800] Bluetooth: hci2: command tx timeout
[  246.792835][ T9154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  246.948911][   T59] hsr_slave_0: left promiscuous mode
[  246.955003][   T59] hsr_slave_1: left promiscuous mode
[  246.961032][   T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  246.968559][   T59] batman_adv: batadv0: Removing interface: batadv_slave_0
[  247.002975][   T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  247.010441][   T59] batman_adv: batadv0: Removing interface: batadv_slave_1
[  247.116740][   T59] bridge_slave_1: left allmulticast mode
[  247.229837][   T59] bridge_slave_1: left promiscuous mode
[  247.353084][   T59] bridge0: port 2(bridge_slave_1) entered disabled state
[  247.708313][   T59] bridge_slave_0: left allmulticast mode
[  247.714163][   T59] bridge_slave_0: left promiscuous mode
[  247.719903][   T59] bridge0: port 1(bridge_slave_0) entered disabled state
[  247.769714][   T59] veth1_macvtap: left promiscuous mode
[  247.775583][   T59] veth0_macvtap: left promiscuous mode
[  247.791406][   T59] veth1_vlan: left promiscuous mode
[  247.816275][   T59] veth0_vlan: left promiscuous mode
[  248.470659][ T9260] loop6: detected capacity change from 0 to 512
[  248.518773][ T9260] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  248.547562][ T9260] ext4 filesystem being mounted at /115/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  248.623019][ T9260] EXT4-fs error (device loop6): ext4_do_update_inode:5230: inode #4: comm syz.6.643: corrupted inode contents
[  248.644596][    C0] vkms_vblank_simulate: vblank timer overrun
[  248.668953][ T9260] EXT4-fs error (device loop6): ext4_dirty_inode:6106: inode #4: comm syz.6.643: mark_inode_dirty error
[  248.686143][ T9260] EXT4-fs error (device loop6): ext4_do_update_inode:5230: inode #4: comm syz.6.643: corrupted inode contents
[  248.698278][ T5800] Bluetooth: hci2: command tx timeout
[  248.717320][ T9260] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #4: comm syz.6.643: mark_inode_dirty error
[  248.742986][ T9260] Quota error (device loop6): write_blk: dquota write failed
[  248.768257][ T9260] Quota error (device loop6): find_free_dqentry: Can't write quota data block 5
[  248.801460][ T9260] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota
[  248.833632][ T9260] EXT4-fs error (device loop6): ext4_acquire_dquot:6938: comm syz.6.643: Failed to acquire dquot type 1
[  248.893450][ T9268] fuse: Bad value for 'fd'
[  250.085227][   T59] team0 (unregistering): Port device team_slave_1 removed
[  250.179223][ T6567] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  250.197695][   T59] team0 (unregistering): Port device team_slave_0 removed
[  250.357661][   T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  250.433147][   T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  251.944338][   T59] bond0 (unregistering): Released all slaves
[  252.640566][ T5852] wg1 speed is unknown, defaulting to 1000
[  252.824629][ T9154] team0: Port device team_slave_0 added
[  253.045539][ T9154] team0: Port device team_slave_1 added
[  253.538182][ T9154] batman_adv: batadv0: Adding interface: batadv_slave_0
[  253.556408][ T9154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  253.597394][ T9154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  253.659588][ T9154] batman_adv: batadv0: Adding interface: batadv_slave_1
[  253.712170][ T9154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  253.779136][ T9154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  253.887510][ T9154] hsr_slave_0: entered promiscuous mode
[  253.906473][ T9154] hsr_slave_1: entered promiscuous mode
[  253.939706][ T9154] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  253.958280][ T9154] Cannot create hsr debugfs directory
[  254.819733][ T9323] fuse: Bad value for 'fd'
[  254.824838][ T9322] overlayfs: failed to clone upperpath
[  255.846845][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  255.854546][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  257.113631][ T9341] loop6: detected capacity change from 0 to 131072
[  257.123639][ T9341] F2FS-fs (loop6): Wrong CP boundary, start(512) end(1536) blocks(0)
[  257.131772][ T9341] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  257.162674][ T9341] F2FS-fs (loop6): invalid crc value
[  257.195741][ T9341] F2FS-fs (loop6): Found nat_bits in checkpoint
[  257.261260][ T9341] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  257.268481][ T9341] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4
[  257.594086][ T9362] F2FS-fs (loop6): checksum invalid, nid = 4, ino_of_node = 4, 8e2acc4a vs. 159afe7
[  259.657096][ T9154] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  259.689541][ T9154] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  259.720898][ T9154] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  259.743245][ T9154] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  259.983878][ T9154] 8021q: adding VLAN 0 to HW filter on device bond0
[  260.047428][ T9154] 8021q: adding VLAN 0 to HW filter on device team0
[  260.143805][ T9154] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  260.182214][ T9154] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  260.228225][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[  260.235556][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[  260.262337][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[  260.269497][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[  260.573475][ T9154] 8021q: adding VLAN 0 to HW filter on device batadv0
[  260.653278][ T9154] veth0_vlan: entered promiscuous mode
[  260.675886][ T9154] veth1_vlan: entered promiscuous mode
[  260.726234][ T9154] veth0_macvtap: entered promiscuous mode
[  260.747091][ T9154] veth1_macvtap: entered promiscuous mode
[  260.784737][ T9154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  260.799544][ T9154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  260.816403][ T9154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  260.827138][ T9154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  260.841678][ T9154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  260.861168][ T9154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  260.880728][ T9154] batman_adv: batadv0: Interface activated: batadv_slave_0
[  260.992650][ T9154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  261.003400][ T9154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  261.015946][ T9154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  261.027470][ T9154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  261.037710][ T9154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  261.048786][ T9154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  261.060413][ T9154] batman_adv: batadv0: Interface activated: batadv_slave_1
[  261.109805][ T9154] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  261.132168][ T9154] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  261.140909][ T9154] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  261.175353][ T9154] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  261.402553][ T3473] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  261.410420][ T3473] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  261.494190][ T2938] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  261.522124][ T2938] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  262.481637][ T9430] loop3: detected capacity change from 0 to 2048
[  262.548719][ T9430]  loop3: p1 < > p3
[  262.565722][ T9430] loop3: p3 size 134217728 extends beyond EOD, truncated
[  263.090074][ T9447] syz_tun: entered allmulticast mode
[  263.163459][ T9444] syz_tun: left allmulticast mode
[  267.274398][ T9511] overlayfs: failed to clone upperpath
[  270.245593][ T9544] loop6: detected capacity change from 0 to 512
[  270.254902][ T9544] EXT4-fs: Conflicting test_dummy_encryption options
[  274.643309][ T5798] Bluetooth: hci3: command 0x0406 tx timeout
[  279.216880][ T9620] loop3: detected capacity change from 0 to 1024
[  290.652197][ T9740] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  290.661727][ T9740] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  290.670583][ T9740] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  290.679332][ T9740] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  290.715909][ T9740] bond0: (slave vxlan0): Enslaving as an active interface with an up link
[  301.818140][ T9910] netlink: 277 bytes leftover after parsing attributes in process `syz.9.767'.
[  302.693640][ T9917] tipc: Started in network mode
[  302.698570][ T9917] tipc: Node identity d20f2180d768, cluster identity 4711
[  302.711862][ T9917] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  302.972299][ T9931] syzkaller0: entered promiscuous mode
[  302.978048][ T9931] syzkaller0: entered allmulticast mode
[  303.774984][ T9917] tipc: Resetting bearer <eth:syzkaller0>
[  305.072380][ T9914] tipc: Resetting bearer <eth:syzkaller0>
[  305.079189][ T7311] tipc: Node number set to 90644864
[  305.293096][ T9914] tipc: Disabling bearer <eth:syzkaller0>
[  305.361103][ T9951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.771'.
[  305.370146][ T9951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.771'.
[  305.382012][ T9951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.771'.
[  305.390932][ T9951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.771'.
[  305.399808][ T9951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.771'.
[  305.408650][ T9951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.771'.
[  305.417710][ T9951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.771'.
[  305.426581][ T9951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.771'.
[  305.435494][ T9951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.771'.
[  306.176356][ T9964] bridge0: port 3(erspan0) entered blocking state
[  306.214072][ T9964] bridge0: port 3(erspan0) entered disabled state
[  306.231705][ T9964] erspan0: entered allmulticast mode
[  306.243733][ T9964] erspan0: entered promiscuous mode
[  306.291194][ T9964] bridge0: port 3(erspan0) entered blocking state
[  306.298464][ T9964] bridge0: port 3(erspan0) entered forwarding state
[  306.492050][   T23] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  307.495375][   T23] usb 7-1: Using ep0 maxpacket: 32
[  307.509864][   T23] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  307.518179][   T23] usb 7-1: config 0 has no interface number 0
[  307.561009][   T23] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  307.574131][   T23] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  307.587371][   T23] usb 7-1: Product: syz
[  307.591577][   T23] usb 7-1: Manufacturer: syz
[  307.601989][   T23] usb 7-1: SerialNumber: syz
[  307.622646][   T23] usb 7-1: config 0 descriptor??
[  307.647096][   T23] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  307.677341][   T23] usb 7-1: selecting invalid altsetting 1
[  307.692144][   T23] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  307.719039][   T23] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  307.741294][   T23] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  307.782124][   T23] usb 7-1: media controller created
[  307.870478][   T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  307.974322][   T23] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  307.989298][   T23] zl10353_read_register: readreg error (reg=127, ret==-71)
[  308.059498][   T23] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  308.162373][   T23] usb 7-1: USB disconnect, device number 8
[  309.593312][T10012] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  311.663404][T10044] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  312.349780][T10060] loop3: detected capacity change from 0 to 64
[  316.026472][ T9154] hfs: node 4:3 still has 1 user(s)!
[  317.259712][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  317.272117][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  318.652953][T10166] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  320.368919][T10196] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  321.993385][T10210] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  325.290121][T10231] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  325.324277][T10231] syzkaller0: entered promiscuous mode
[  325.329759][T10231] syzkaller0: entered allmulticast mode
[  325.556968][T10231] tipc: Resetting bearer <eth:syzkaller0>
[  325.663785][T10230] tipc: Resetting bearer <eth:syzkaller0>
[  325.764163][T10230] tipc: Disabling bearer <eth:syzkaller0>
[  326.524713][T10262] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  326.550510][T10262] syzkaller0: entered promiscuous mode
[  326.560402][T10262] syzkaller0: entered allmulticast mode
[  326.634263][T10262] tipc: Resetting bearer <eth:syzkaller0>
[  326.651579][T10261] tipc: Resetting bearer <eth:syzkaller0>
[  326.713645][T10261] tipc: Disabling bearer <eth:syzkaller0>
[  327.149622][T10247] netlink: 'syz.9.823': attribute type 4 has an invalid length.
[  327.169684][T10247] __nla_validate_parse: 44 callbacks suppressed
[  327.169701][T10247] netlink: 17 bytes leftover after parsing attributes in process `syz.9.823'.
[  329.057607][T10318] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  329.066457][T10318] syzkaller0: entered promiscuous mode
[  329.072549][T10318] syzkaller0: entered allmulticast mode
[  329.145990][T10318] tipc: Resetting bearer <eth:syzkaller0>
[  329.177985][T10317] tipc: Resetting bearer <eth:syzkaller0>
[  329.233115][T10317] tipc: Disabling bearer <eth:syzkaller0>
[  332.450090][T10345] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  332.491740][T10345] syzkaller0: entered promiscuous mode
[  332.513674][T10345] syzkaller0: entered allmulticast mode
[  333.394840][T10349] tipc: Resetting bearer <eth:syzkaller0>
[  333.451366][T10344] tipc: Resetting bearer <eth:syzkaller0>
[  333.515098][T10344] tipc: Disabling bearer <eth:syzkaller0>
[  333.538670][T10352] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  333.564498][T10351] syzkaller0: entered promiscuous mode
[  333.571024][T10351] syzkaller0: entered allmulticast mode
[  333.702573][T10351] tipc: Resetting bearer <eth:syzkaller0>
[  333.756504][T10350] tipc: Resetting bearer <eth:syzkaller0>
[  333.834402][T10350] tipc: Disabling bearer <eth:syzkaller0>
[  337.011532][T10375] loop3: detected capacity change from 0 to 256
[  337.146776][T10375] FAT-fs (loop3): Directory bread(block 64) failed
[  337.176980][T10375] FAT-fs (loop3): Directory bread(block 65) failed
[  337.215166][T10375] FAT-fs (loop3): Directory bread(block 66) failed
[  337.221741][T10375] FAT-fs (loop3): Directory bread(block 67) failed
[  337.265007][T10375] FAT-fs (loop3): Directory bread(block 68) failed
[  337.285438][T10375] FAT-fs (loop3): Directory bread(block 69) failed
[  337.300308][T10375] FAT-fs (loop3): Directory bread(block 70) failed
[  337.317290][T10375] FAT-fs (loop3): Directory bread(block 71) failed
[  337.328982][T10375] FAT-fs (loop3): Directory bread(block 72) failed
[  337.336248][T10375] FAT-fs (loop3): Directory bread(block 73) failed
[  343.153848][T10417] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only
[  343.247456][T10425] loop3: detected capacity change from 0 to 256
[  344.650002][T10443] netlink: 4 bytes leftover after parsing attributes in process `syz.9.862'.
[  345.599954][T10456] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  348.070027][T10498] loop6: detected capacity change from 0 to 1024
[  349.882631][T10516] xt_nat: multiple ranges no longer supported
[  351.539573][ T3542] hfsplus: b-tree write err: -5, ino 3
[  355.267206][T10575] loop3: detected capacity change from 0 to 512
[  355.295518][T10575] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  355.342993][T10575] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  355.538083][T10575] EXT4-fs (loop3): 1 truncate cleaned up
[  355.586649][T10575] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  355.613040][   T27] audit: type=1800 audit(1754963481.583:46): pid=10575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.889" name="file1" dev="loop3" ino=15 res=0 errno=0
[  357.848963][ T9154] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  359.014400][T10607] loop3: detected capacity change from 0 to 16
[  359.098800][T10607] erofs: (device loop3): mounted with root inode @ nid 36.
[  359.295201][T10613] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36
[  359.335412][T10613] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -44 in[46, 4050] out[1851]
[  359.355261][T10613] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 43 of nid 36
[  361.193597][T10633] loop6: detected capacity change from 0 to 4096
[  363.007574][T10652] random: crng reseeded on system resumption
[  365.512616][ T5800] Bluetooth: hci2: command 0x0406 tx timeout
[  369.324448][T10680] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.908'.
[  376.396613][T10747] netlink: 'syz.6.921': attribute type 1 has an invalid length.
[  376.474576][T10748] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  376.490221][T10751] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  376.501974][T10751] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  376.522553][T10751] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  376.674645][T10751] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  376.718066][T10751] bond1: (slave geneve2): making interface the new active one
[  376.736208][T10751] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  377.507584][T10747] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[  377.972319][T10760] netlink: 28 bytes leftover after parsing attributes in process `syz.6.921'.
[  378.183495][T10771] netlink: 'syz.9.927': attribute type 10 has an invalid length.
[  378.202053][T10751] syz.6.921 (10751) used greatest stack depth: 19408 bytes left
[  378.218663][T10771] syz_tun: entered promiscuous mode
[  378.257899][T10771] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  378.705355][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  378.711960][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  380.945085][T10801] netlink: 384 bytes leftover after parsing attributes in process `syz.0.933'.
[  380.957241][T10801] netlink: 'syz.0.933': attribute type 2 has an invalid length.
[  382.087467][T10813] hugetlbfs: syz.9.934 (10813): Using mlock ulimits for SHM_HUGETLB is obsolete
[  385.421039][   T55] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  386.322470][   T55] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  386.349348][   T55] usb 4-1: config 0 interface 0 has no altsetting 0
[  386.367507][   T55] usb 4-1: New USB device found, idVendor=046d, idProduct=c283, bcdDevice= 0.00
[  386.377140][   T55] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  386.399362][   T55] usb 4-1: config 0 descriptor??
[  386.670545][T10840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  386.692633][T10840] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  386.813861][   T55] usbhid 4-1:0.0: can't add hid device: -71
[  386.828137][   T55] usbhid: probe of 4-1:0.0 failed with error -71
[  386.865093][   T55] usb 4-1: USB disconnect, device number 2
[  388.210051][T10880] loop3: detected capacity change from 0 to 2048
[  388.287018][T10880] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  388.766894][ T5870] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  389.116339][   T55] IPVS: starting estimator thread 0...
[  389.256411][ T5870] usb 7-1: Using ep0 maxpacket: 8
[  389.302114][ T5870] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[  389.342608][T10893] IPVS: using max 17 ests per chain, 40800 per kthread
[  389.360925][T10895] netlink: 4 bytes leftover after parsing attributes in process `syz.0.949'.
[  389.392070][ T5870] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  389.451160][ T5870] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  389.687228][ T5870] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  389.698418][ T5870] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  389.712485][ T5870] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  389.732654][ T5870] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  390.628748][ T5870] usb 7-1: usb_control_msg returned -32
[  390.637486][T10913] netlink: 'syz.0.954': attribute type 10 has an invalid length.
[  390.651334][ T5870] usbtmc 7-1:16.0: can't read capabilities
[  390.660754][T10913] syz_tun: entered promiscuous mode
[  390.678484][T10913] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  391.624670][T10913] netlink: 'syz.0.954': attribute type 10 has an invalid length.
[  393.003070][T10913] 8021q: adding VLAN 0 to HW filter on device bond0
[  393.016417][T10913] team0: Port device bond0 added
[  393.313083][   T23] usb 7-1: USB disconnect, device number 9
[  398.007970][T10988] loop6: detected capacity change from 0 to 512
[  398.579871][T10988] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  398.592900][T10988] ext4 filesystem being mounted at /198/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  398.712064][T10986] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  398.819141][T11001] netlink: 'syz.3.969': attribute type 10 has an invalid length.
[  399.174701][ T6567] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  399.313434][T11001] syz_tun: entered promiscuous mode
[  399.372467][T11001] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  399.417096][T11001] netlink: 'syz.3.969': attribute type 10 has an invalid length.
[  399.508772][T11001] 8021q: adding VLAN 0 to HW filter on device bond0
[  399.520095][T11001] team0: Port device bond0 added
[  401.899735][T11030] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  401.972779][ T5798] Bluetooth: hci2: command 0x0406 tx timeout
[  405.906671][T11077] netlink: 416 bytes leftover after parsing attributes in process `syz.6.983'.
[  407.632947][T11085] kAFS: No cell specified
[  413.221560][T11149] syzkaller0: entered promiscuous mode
[  413.235157][T11149] syzkaller0: entered allmulticast mode
[  413.409881][T11143] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  423.924695][T11256] loop6: detected capacity change from 0 to 8
[  424.149900][T11259] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1019'.
[  425.427368][T11269] netlink: 'syz.0.1018': attribute type 16 has an invalid length.
[  425.435561][T11269] netlink: 'syz.0.1018': attribute type 3 has an invalid length.
[  425.443420][T11269] netlink: 64066 bytes leftover after parsing attributes in process `syz.0.1018'.
[  425.447724][T11264] netlink: 168 bytes leftover after parsing attributes in process `syz.9.1020'.
[  427.267836][T11287] 9pnet_fd: Insufficient options for proto=fd
[  428.433878][T11294] syz.6.1025 (11294) used greatest stack depth: 17328 bytes left
[  429.571853][T11303] loop6: detected capacity change from 0 to 40427
[  429.598926][T11303] F2FS-fs (loop6): Insane cp_payload (553648128 >= 504)
[  429.606318][T11303] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  429.616919][T11303] F2FS-fs (loop6): Unrecognized mount option "�����?c�Y��t�<Ss�B���p��L�-����<�Si����4�`o+��T�2��z�o�����}K����0 l��CG�r�>r�7X���7�ė��}����%" or missing value
[  431.751829][T11323] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1031'.
[  437.769784][T11402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1043'.
[  438.577363][T11405] loop3: detected capacity change from 0 to 128
[  438.617440][T11405] ADFS-fs (loop3): error: can't find an ADFS filesystem on dev loop3.
[  438.874397][T11408] cifs: Unknown parameter 'mode'
[  439.758043][T11411] loop3: detected capacity change from 0 to 2048
[  439.775618][T11411] UDF-fs: bad mount option "�dÅS�6�\��gu��" or missing value
[  441.832911][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  441.839259][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  441.956200][T10853] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  442.043394][T11410] netlink: 'syz.3.1045': attribute type 1 has an invalid length.
[  442.240684][T11416] netlink: 168 bytes leftover after parsing attributes in process `syz.6.1046'.
[  448.824016][T11472] loop6: detected capacity change from 0 to 32768
[  448.847523][T11472] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.1059 (11472)
[  448.909934][T11472] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  448.995461][T11472] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm
[  449.046996][T11472] BTRFS info (device loop6): using free space tree
[  449.212284][T11472] BTRFS info (device loop6): enabling ssd optimizations
[  449.256383][T11472] BTRFS info (device loop6): auto enabling async discard
[  450.033238][T11472] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  450.206494][T11481] loop3: detected capacity change from 0 to 32768
[  450.817825][T11481] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  451.735481][ T6567] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  451.813579][T11481] XFS (loop3): Ending clean mount
[  451.858361][T11481] XFS (loop3): Quotacheck needed: Please wait.
[  452.544520][T11481] XFS (loop3): Quotacheck: Done.
[  452.600069][ T9154] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  452.836118][T11539] sp0: Synchronizing with TNC
[  453.579206][T11538] [U] �`
[  454.704208][T11557] loop6: detected capacity change from 0 to 512
[  454.949600][T11557] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2244: inode #15: comm syz.6.1070: corrupted in-inode xattr: overlapping e_value 
[  455.210849][T11557] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.1070: couldn't read orphan inode 15 (err -117)
[  455.433025][T11557] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  455.736636][T11568] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1070'.
[  458.343794][T11574] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  458.481557][ T6567] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  459.206127][T11597] loop6: detected capacity change from 0 to 512
[  460.312090][T11597] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended
[  460.321741][T11597] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  460.329958][T11597] System zones: 0-2, 18-18, 34-35
[  460.366200][T11597] EXT4-fs (loop6): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  460.649272][ T6567] EXT4-fs (loop6): unmounting filesystem 00000000-0700-0000-0000-000000000000.
[  468.270444][T11663] netlink: 'syz.9.1089': attribute type 10 has an invalid length.
[  470.392005][T11681] loop3: detected capacity change from 0 to 164
[  470.460818][T11681] rock: corrupted directory entry. extent=28, offset=0, size=16777216
[  470.480308][T11679] rock: corrupted directory entry. extent=28, offset=0, size=16777216
[  472.558752][T11712] caif0: entered allmulticast mode
[  473.074838][T11733] mac80211_hwsim hwsim15 wlan1: entered allmulticast mode
[  473.474752][T11733] netlink: 'syz.6.1102': attribute type 10 has an invalid length.
[  473.565397][T11733] mac80211_hwsim hwsim15 wlan1: left allmulticast mode
[  473.826216][T11733] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  474.139806][T11741] netlink: 'syz.0.1104': attribute type 1 has an invalid length.
[  474.304834][ T5871] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  474.905392][ T5871] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  474.930055][T11750] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  474.972201][ T5871] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  475.032178][ T5871] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  475.098764][ T5871] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  475.138573][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  475.197009][ T5871] usb 4-1: Product: syz
[  475.235342][ T5871] usb 4-1: Manufacturer: syz
[  475.239998][ T5871] usb 4-1: SerialNumber: syz
[  475.248511][T11741] 8021q: adding VLAN 0 to HW filter on device bond1
[  475.264458][   T12] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  475.287640][T11741] veth3: entered promiscuous mode
[  475.301807][T11741] bond1: (slave veth3): Enslaving as a backup interface with a down link
[  475.370763][T11758] tipc: Enabled bearer <udp:s>, priority 10
[  475.441096][ T3498] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  476.111438][ T5871] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  476.556750][T11778] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1110'.
[  478.633764][T11799] loop6: detected capacity change from 0 to 256
[  478.661428][T11799] FAT-fs (loop6): Unrecognized mount option "shor�name=mixed" or missing value
[  478.845914][T11702] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  480.651111][ T5870] usb 4-1: USB disconnect, device number 3
[  480.819579][ T5870] usblp0: removed
[  491.717698][T11915] Invalid ELF header magic: != ELF
[  492.661206][T11904] bridge0: port 3(erspan0) entered disabled state
[  493.092471][T11904] bridge0: port 2(bridge_slave_1) entered disabled state
[  493.099923][T11904] bridge0: port 1(bridge_slave_0) entered disabled state
[  494.395356][T11904] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  494.471673][T11904] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  494.812974][T11904] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  494.828343][T11904] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  494.859835][T11904] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  494.869410][T11904] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  495.759998][T11947] sctp: [Deprecated]: syz.0.1139 (pid 11947) Use of struct sctp_assoc_value in delayed_ack socket option.
[  495.759998][T11947] Use struct sctp_sack_info instead
[  497.617594][T11979] loop6: detected capacity change from 0 to 164
[  497.834389][T11979] rock: corrupted directory entry. extent=28, offset=0, size=16777216
[  497.858126][T11979] rock: corrupted directory entry. extent=28, offset=0, size=16777216
[  498.733508][T11986] loop9: detected capacity change from 0 to 7
[  499.137544][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  499.146783][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  499.160907][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  499.170129][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  499.266345][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  499.275611][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  499.285279][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  499.294520][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  499.321924][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  499.331140][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  499.342397][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  499.351623][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  499.359678][T11986] ldm_validate_partition_table(): Disk read failed.
[  499.409546][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  499.418793][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  499.432208][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  499.441420][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  499.481577][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  499.490804][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  499.511770][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  499.521045][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  499.529482][T11986] Dev loop9: unable to read RDB block 0
[  499.549695][T11986]  loop9: unable to read partition table
[  499.555781][T11986] loop9: partition table beyond EOD, truncated
[  499.562024][T11986] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[  499.562024][T11986] 
) failed (rc=-5)
[  500.260686][T11998] lo: entered promiscuous mode
[  500.285989][T11998] tunl0: entered promiscuous mode
[  500.296178][T11998] gre0: entered promiscuous mode
[  500.313892][T11998] gretap0: entered promiscuous mode
[  500.320592][T11998] erspan0: entered promiscuous mode
[  500.428659][T11998] ip_vti0: entered promiscuous mode
[  500.477468][T11998] ip6_vti0: entered promiscuous mode
[  500.484656][T12004] xt_CT: You must specify a L4 protocol and not use inversions on it
[  500.549075][T11998] sit0: entered promiscuous mode
[  500.851832][T11998] ip6tnl0: entered promiscuous mode
[  500.871098][T11998] ip6gre0: entered promiscuous mode
[  500.916904][T11998] ip6gretap0: entered promiscuous mode
[  500.928565][T11998] bond0: entered promiscuous mode
[  500.936528][T11998] bond_slave_0: entered promiscuous mode
[  500.969410][T11998] bond_slave_1: entered promiscuous mode
[  501.044812][T11998] vxlan0: entered promiscuous mode
[  501.259353][ T1193] libceph: connect (1)[c::]:6789 error -101
[  501.354076][ T1193] libceph: mon0 (1)[c::]:6789 connect error
[  501.381519][T11998] team0: entered promiscuous mode
[  501.510012][T11998] team_slave_0: entered promiscuous mode
[  501.582423][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  501.601874][T12010] ceph: No mds server is up or the cluster is laggy
[  501.604683][T11998] team_slave_1: entered promiscuous mode
[  501.616619][T11998] dummy0: entered promiscuous mode
[  501.622829][T11998] nlmon0: entered promiscuous mode
[  501.662331][T11998] caif0: entered promiscuous mode
[  501.683296][T11998] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  501.706926][ T5871] libceph: connect (1)[c::]:6789 error -101
[  501.754189][ T5871] libceph: mon0 (1)[c::]:6789 connect error
[  502.189969][T12024] syz.0.1154[12024] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  502.190106][T12024] syz.0.1154[12024] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  502.204752][T12024] netlink: 300 bytes leftover after parsing attributes in process `syz.0.1154'.
[  503.823141][T12037] veth1_macvtap: left promiscuous mode
[  503.828789][T12037] macsec0: entered allmulticast mode
[  509.992924][T12098] veth1_macvtap: left promiscuous mode
[  509.998482][T12098] macsec0: entered allmulticast mode
[  513.486682][T12150] xt_CT: You must specify a L4 protocol and not use inversions on it
[  515.765276][T12166] netlink: 'syz.0.1173': attribute type 10 has an invalid length.
[  515.773150][T12166] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1173'.
[  515.783318][T12166] batman_adv: batadv0: Adding interface: vlan1
[  515.789482][T12166] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  515.814675][T12166] batman_adv: batadv0: Interface activated: vlan1
[  522.337032][T12225] loop9: detected capacity change from 0 to 7
[  522.800653][    C0] blk_print_req_error: 4 callbacks suppressed
[  522.800666][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  522.815968][    C0] buffer_io_error: 4 callbacks suppressed
[  522.815978][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  522.831944][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  522.841115][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  522.852040][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  522.861192][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  522.869351][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  522.878546][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  522.902330][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  522.911563][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  522.919763][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  522.928976][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  522.936990][T12225] ldm_validate_partition_table(): Disk read failed.
[  522.948296][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  522.957482][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  522.965536][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  522.974737][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  522.987172][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  522.996351][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  523.015919][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  523.025084][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  523.033052][T12225] Dev loop9: unable to read RDB block 0
[  523.047660][T12225]  loop9: unable to read partition table
[  523.054154][T12225] loop9: partition table beyond EOD, truncated
[  523.060407][T12225] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[  523.060407][T12225] 
) failed (rc=-5)
[  523.678405][T12240] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1185'.
[  524.389203][T12241] bpq0: entered promiscuous mode
[  524.879824][   T27] audit: type=1326 audit(1754963650.843:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12247 comm="syz.9.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74e8f8ebe9 code=0x7ffc0000
[  524.916639][   T27] audit: type=1326 audit(1754963650.883:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12247 comm="syz.9.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74e8f8ebe9 code=0x7ffc0000
[  525.253169][   T27] audit: type=1326 audit(1754963651.113:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12247 comm="syz.9.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f74e8f8ebe9 code=0x7ffc0000
[  525.733106][   T27] audit: type=1326 audit(1754963651.633:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12247 comm="syz.9.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74e8f8ebe9 code=0x7ffc0000
[  525.744685][T12256] loop3: detected capacity change from 0 to 8
[  525.765347][T12256] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  525.783103][T12162] udevd[12162]: incorrect cramfs checksum on /dev/loop3
[  525.852004][   T27] audit: type=1326 audit(1754963651.643:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12247 comm="syz.9.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74e8f8ebe9 code=0x7ffc0000
[  526.094182][   T27] audit: type=1326 audit(1754963651.653:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12247 comm="syz.9.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f74e8f8ebe9 code=0x7ffc0000
[  526.918754][T12263] cramfs: Error -5 while decompressing!
[  526.943069][   T27] audit: type=1326 audit(1754963651.653:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12247 comm="syz.9.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74e8f8ebe9 code=0x7ffc0000
[  526.986739][T12263] cramfs: ffffffff96fd8308(26)->ffff888047555000(4096)
[  527.010172][   T27] audit: type=1326 audit(1754963651.653:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12247 comm="syz.9.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74e8f8ebe9 code=0x7ffc0000
[  527.033346][   T27] audit: type=1326 audit(1754963651.653:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12247 comm="syz.9.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f74e8f8ebe9 code=0x7ffc0000
[  527.056447][   T27] audit: type=1326 audit(1754963651.653:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12247 comm="syz.9.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74e8f8ebe9 code=0x7ffc0000
[  527.113789][T12263] cramfs: Error -3 while decompressing!
[  527.121023][T12263] cramfs: ffffffff96fd8322(26)->ffff888048875000(4096)
[  527.128346][T12263] cramfs: Error -3 while decompressing!
[  527.166223][T12263] cramfs: ffffffff96fd833c(16)->ffff888046c49000(4096)
[  527.177692][T12263] cramfs: Error -5 while decompressing!
[  527.183557][T12263] cramfs: ffffffff96fd8308(26)->ffff888047555000(4096)
[  531.452755][T12314] loop6: detected capacity change from 0 to 512
[  531.792169][T12314] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  532.544639][T12314] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e12c, mo2=0002]
[  532.552782][T12314] System zones: 1-12
[  532.559804][T12314] EXT4-fs (loop6): orphan cleanup on readonly fs
[  534.479997][T12314] EXT4-fs error (device loop6): ext4_validate_block_bitmap:439: comm syz.6.1197: bg 0: block 361: padding at end of block bitmap is not set
[  534.510283][T12314] EXT4-fs (loop6): Remounting filesystem read-only
[  534.517651][T12314] EXT4-fs (loop6): 1 truncate cleaned up
[  534.524708][T12314] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  534.671611][T12325] loop3: detected capacity change from 0 to 64
[  534.702389][ T6567] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  536.268261][T12339] loop6: detected capacity change from 0 to 256
[  537.069576][T12349] loop3: detected capacity change from 0 to 256
[  537.474365][T12349] FAT-fs (loop3): Unrecognized mount option "shor�name=mixed" or missing value
[  537.675447][T12339] FAT-fs (loop6): Directory bread(block 64) failed
[  537.723751][T12339] FAT-fs (loop6): Directory bread(block 65) failed
[  537.759526][T12339] FAT-fs (loop6): Directory bread(block 66) failed
[  537.852126][T12339] FAT-fs (loop6): Directory bread(block 67) failed
[  537.858828][T12339] FAT-fs (loop6): Directory bread(block 68) failed
[  538.243227][T12339] FAT-fs (loop6): Directory bread(block 69) failed
[  538.249914][T12339] FAT-fs (loop6): Directory bread(block 70) failed
[  540.590278][T12339] FAT-fs (loop6): Directory bread(block 71) failed
[  540.642936][T12339] FAT-fs (loop6): Directory bread(block 72) failed
[  540.807062][T12339] FAT-fs (loop6): Directory bread(block 73) failed
[  542.792879][T12339] fat__get_entry: 182 callbacks suppressed
[  542.792898][T12339] FAT-fs (loop6): Directory bread(block 256) failed
[  542.819098][T12339] FAT-fs (loop6): Directory bread(block 257) failed
[  542.827228][T12339] FAT-fs (loop6): Directory bread(block 258) failed
[  542.835255][T12339] FAT-fs (loop6): Directory bread(block 259) failed
[  542.838838][T12380] loop3: detected capacity change from 0 to 128
[  542.852240][T12339] FAT-fs (loop6): Directory bread(block 260) failed
[  542.869545][T12339] FAT-fs (loop6): Directory bread(block 261) failed
[  542.880797][T12339] FAT-fs (loop6): Directory bread(block 262) failed
[  542.887885][T12339] FAT-fs (loop6): Directory bread(block 263) failed
[  542.922477][T12339] FAT-fs (loop6): Directory bread(block 264) failed
[  542.953452][T12339] FAT-fs (loop6): Directory bread(block 265) failed
[  543.362155][T12387] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1211'.
[  544.863648][T12399] loop3: detected capacity change from 0 to 256
[  544.922793][T12399] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  544.933927][T12399] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  544.964441][T12399] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  544.990803][   T27] kauditd_printk_skb: 37 callbacks suppressed
[  544.990818][   T27] audit: type=1800 audit(1754963671.954:94): pid=12397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1215" name="file1" dev="loop3" ino=1048678 res=0 errno=0
[  547.108712][T11412] Bluetooth: hci3: ACL packet for unknown connection handle 200
[  548.749330][T12438] capability: warning: `syz.0.1212' uses 32-bit capabilities (legacy support in use)
[  550.530787][T12447] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1223'.
[  551.446666][T12451] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1224'.
[  553.271266][T12461] loop6: detected capacity change from 0 to 32768
[  553.278821][T12461] XFS: ikeep mount option is deprecated.
[  554.101431][T12461] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  554.818909][T12461] XFS (loop6): Ending clean mount
[  554.946130][T12461] XFS (loop6): Quotacheck needed: Please wait.
[  555.384654][T12461] XFS (loop6): Quotacheck: Done.
[  555.876253][T12494] loop3: detected capacity change from 0 to 128
[  555.980413][T12494] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  556.132454][T12494] ext4 filesystem being mounted at /131/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  556.215970][T12494] overlayfs: failed to resolve './file3': -2
[  557.135529][ T9154] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  557.324770][ T6567] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  557.634888][T12526] Timeout policy `syz1' can only be used by L3 protocol number 2342
[  559.741695][T12519] loop3: detected capacity change from 0 to 40427
[  559.815807][T12519] F2FS-fs (loop3): Invalid segment/section count (31, 24 x 2305)
[  559.844140][T12519] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  559.898410][T12519] F2FS-fs (loop3): invalid crc value
[  559.982882][T12519] F2FS-fs (loop3): Found nat_bits in checkpoint
[  560.160698][T12519] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  560.190508][T12519] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  560.598908][T12561] futex_wake_op: syz.3.1236 tries to shift op by 36; fix this program
[  563.072133][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  563.920366][T12586] wg1 speed is unknown, defaulting to 1000
[  563.926318][T12586] wg1 speed is unknown, defaulting to 1000
[  563.932500][T12586] wg1 speed is unknown, defaulting to 1000
[  563.944150][T12586] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  563.963802][T12586] wg1 speed is unknown, defaulting to 1000
[  563.970514][T12586] wg1 speed is unknown, defaulting to 1000
[  563.977265][T12586] wg1 speed is unknown, defaulting to 1000
[  563.983813][T12586] wg1 speed is unknown, defaulting to 1000
[  566.488045][T12599] loop6: detected capacity change from 0 to 4096
[  569.890337][ T9154] syz-executor: attempt to access beyond end of device
[  569.890337][ T9154] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  569.953669][ T9154] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  572.660854][T12651] loop6: detected capacity change from 0 to 256
[  574.041705][T12651] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  576.054147][T12664] loop3: detected capacity change from 0 to 128
[  576.617059][T12664] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  576.633808][T12664] ext4 filesystem being mounted at /133/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  577.506724][ T9154] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  577.606887][T12683] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1265'.
[  579.244513][T12686] loop6: detected capacity change from 0 to 32768
[  579.304399][T12686] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  579.313250][T12686] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  579.357225][T12686] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms
[  579.405551][T12686] gfs2: fsid=syz:syz.s: first mount done, others may mount
[  580.295769][T12701] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1264'.
[  585.633736][T12736] loop6: detected capacity change from 0 to 64
[  585.709622][T12736] syz.6.1273: attempt to access beyond end of device
[  585.709622][T12736] loop6: rw=0, sector=3072, nr_sectors = 2 limit=64
[  587.676407][T12749] wg1 speed is unknown, defaulting to 1000
[  588.022483][T12747] capability: warning: `syz.6.1275' uses deprecated v2 capabilities in a way that may be insecure
[  588.315968][T12747] loop6: detected capacity change from 0 to 1024
[  588.454071][T12747] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  588.703211][T12747] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4036: comm syz.6.1275: Allocating blocks 497-513 which overlap fs metadata
[  588.773243][T12747] EXT4-fs (loop6): pa ffff88807a6f4488: logic 256, phys. 385, len 8
[  588.781804][T12747] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5377: group 0, free 0, pa_free 1
[  588.904376][T12771] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  589.220265][ T6567] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  591.312130][ T5789] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[  591.393917][T12793] IPv6: Can't replace route, no match found
[  592.341585][ T5789] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  592.370607][ T5789] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  592.408024][ T5789] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  592.432017][ T5789] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  592.598537][T12806] overlayfs: failed to clone upperpath
[  594.541653][ T5789] usb 4-1: usb_control_msg returned -71
[  594.568033][ T5789] usbtmc 4-1:16.0: can't read capabilities
[  595.131644][ T5789] usb 4-1: USB disconnect, device number 4
[  596.149041][T12824] loop6: detected capacity change from 0 to 32768
[  596.250432][T12824] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  596.797640][ T6567] ocfs2: Unmounting device (7,6) on (node local)
[  601.379170][T12888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1295'.
[  607.603567][T12933] loop3: detected capacity change from 0 to 32768
[  607.646636][T12933] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.1304 (12933)
[  607.697184][T12933] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  607.707569][T12933] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  607.717159][T12933] BTRFS info (device loop3): force zlib compression, level 3
[  607.724618][T12933] BTRFS info (device loop3): force clearing of disk cache
[  607.731787][T12933] BTRFS info (device loop3): setting nodatasum
[  607.739027][T12933] BTRFS info (device loop3): enabling disk space caching
[  607.746162][T12933] BTRFS info (device loop3): disk space caching is enabled
[  607.865350][T12951] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  607.982264][T12933] BTRFS info (device loop3): enabling ssd optimizations
[  607.989319][T12933] BTRFS info (device loop3): auto enabling async discard
[  607.998303][T12933] BTRFS info (device loop3): rebuilding free space tree
[  608.110436][T12933] BTRFS info (device loop3): disabling free space tree
[  608.119227][T12933] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  608.129613][T12933] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  608.342595][T12974] netlink: 68 bytes leftover after parsing attributes in process `syz.9.1308'.
[  609.112181][ T9154] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  609.959385][T12980] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1310'.
[  609.968511][T12980] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1310'.
[  611.242451][T13025] geneve0: entered promiscuous mode
[  611.469001][T13027] xt_connbytes: Forcing CT accounting to be enabled
[  611.475807][T13027] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  611.487737][T13027] xt_bpf: check failed: parse error
[  611.645236][T13020] geneve0: left promiscuous mode
[  613.220719][T13047] Timeout policy `syz1' can only be used by L3 protocol number 2342
[  615.126851][T13068] loop6: detected capacity change from 0 to 128
[  615.212663][T13070] loop3: detected capacity change from 0 to 64
[  615.313227][T13068] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  615.451135][T13068] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  616.532953][ T9154] hfs: node 4:3 still has 1 user(s)!
[  620.249639][T13098] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  620.256956][T13098] IPv6: NLM_F_CREATE should be set when creating new route
[  620.264364][T13098] IPv6: NLM_F_CREATE should be set when creating new route
[  620.271653][T13098] IPv6: NLM_F_CREATE should be set when creating new route
[  620.332416][T13097] overlayfs: failed to clone upperpath
[  620.652758][T10232] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  620.892463][T10232] usb 7-1: Using ep0 maxpacket: 8
[  620.909018][T10232] usb 7-1: config index 0 descriptor too short (expected 74, got 45)
[  621.691571][T10232] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  621.752536][T10232] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  621.817069][T10232] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  621.944587][T10232] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  622.001945][T10232] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  622.064451][T10232] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  622.084134][T10232] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  622.494033][T10232] usb 7-1: GET_CAPABILITIES returned 0
[  622.499590][T10232] usbtmc 7-1:16.0: can't read capabilities
[  624.290936][ T5832] usb 7-1: USB disconnect, device number 10
[  624.456397][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  626.832304][T13195] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340
[  626.914455][T13195] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  626.960802][T13198] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1346'.
[  627.447305][T13211] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1349'.
[  627.458696][T13211] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1349'.
[  627.575944][T11412] Bluetooth: hci2: Malformed Event: 0x13
[  627.844870][T13225] loop3: detected capacity change from 0 to 4096
[  628.191683][T13233] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  629.678547][T13250] loop6: detected capacity change from 0 to 128
[  629.867168][T11412] Bluetooth: hci3: unexpected event for opcode 0x0c38
[  630.036305][T13248] loop3: detected capacity change from 0 to 40427
[  630.047719][T13248] F2FS-fs (loop3): invalid crc value
[  630.058429][T13248] F2FS-fs (loop3): Found nat_bits in checkpoint
[  630.091783][T12696] blk_print_req_error: 4 callbacks suppressed
[  630.091796][T12696] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  630.108356][T13248] F2FS-fs (loop3): Start checkpoint disabled!
[  630.134027][T13248] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  630.620244][T13274] overlayfs: failed to clone lowerpath
[  630.720926][T13275] overlayfs: failed to clone upperpath
[  631.818685][T13279] loop6: detected capacity change from 0 to 4096
[  631.972755][T13279] ntfs3: loop6: Different NTFS sector size (2048) and media sector size (512).
[  632.282226][T13291] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1375'.
[  632.323891][ T3542] kworker/u4:15: attempt to access beyond end of device
[  632.323891][ T3542] loop3: rw=2049, sector=40960, nr_sectors = 32 limit=40427
[  632.365847][ T3542] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  632.408988][ T3542] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  632.424025][ T3542] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  632.447545][ T3542] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  632.610017][T11412] Bluetooth: hci3: unexpected event for opcode 0x0c23
[  632.617396][T13305] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1378'.
[  632.984103][T13313] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1378'.
[  633.853124][T11412] Bluetooth: hci3: unexpected event for opcode 0x203c
[  633.920296][T13323] loop3: detected capacity change from 0 to 164
[  633.971836][T13323] iso9660: Corrupted directory entry in block 0 of inode 1792
[  635.351459][T13329] mac80211_hwsim hwsim20 wlan0: entered promiscuous mode
[  635.397584][T13329] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  636.752048][ T5853] usb 7-1: new full-speed USB device number 11 using dummy_hcd
[  636.971259][ T5853] usb 7-1: config index 0 descriptor too short (expected 897, got 27)
[  636.999926][ T5853] usb 7-1: config 2 has an invalid interface number: 1 but max is -1
[  637.018900][ T5853] usb 7-1: config 2 has an invalid interface number: 1 but max is -1
[  637.042423][ T5853] usb 7-1: config 2 has 1 interface, different from the descriptor's value: 0
[  637.051505][ T5853] usb 7-1: config 2 has no interface number 0
[  637.078005][ T5853] usb 7-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=20.da
[  637.098353][ T5853] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  637.112276][ T5853] usb 7-1: Product: syz
[  637.116539][ T5853] usb 7-1: Manufacturer: syz
[  637.132471][ T5853] usb 7-1: SerialNumber: syz
[  637.282073][T11941] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  637.400231][ T5853] cdc_ncm 7-1:2.1: CDC Union missing and no IAD found
[  637.426320][ T5853] cdc_ncm 7-1:2.1: bind() failure
[  637.457801][ T5853] usb 7-1: no audio or video endpoints found
[  637.464013][T11941] usb 4-1: Using ep0 maxpacket: 8
[  637.501150][T11941] usb 4-1: unable to get BOS descriptor or descriptor too short
[  637.512508][ T5853] usb 7-1: USB disconnect, device number 11
[  637.523708][T11941] usb 4-1: config 0 has an invalid interface number: 88 but max is 0
[  637.542162][T11941] usb 4-1: config 0 has no interface number 0
[  637.559014][T11941] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 102, changing to 10
[  637.580725][T11941] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 24624, setting to 1024
[  637.622055][T11941] usb 4-1: config 0 interface 88 has no altsetting 0
[  637.644722][T11941] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[  637.662934][T11941] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[  637.680417][T11941] usb 4-1: Product: syz
[  637.685919][T11941] usb 4-1: Manufacturer: syz
[  637.690938][T11941] usb 4-1: SerialNumber: syz
[  637.719321][T11941] usb 4-1: config 0 descriptor??
[  637.971630][T11941] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.88/input/input13
[  638.005768][    C1] usb_acecad 4-1:0.88: can't resubmit intr, dummy_hcd.3-1/input0, status -1
[  638.026031][T11941] usb 4-1: USB disconnect, device number 5
[  639.930047][T11412] Bluetooth: hci3: unexpected event for opcode 0x0402
[  640.867923][T13412] loop6: detected capacity change from 0 to 40427
[  640.911685][T13394] xt_socket: unknown flags 0xc
[  640.954471][T13412] F2FS-fs (loop6): invalid crc value
[  641.145519][T13412] F2FS-fs (loop6): Found nat_bits in checkpoint
[  641.173939][T13412] F2FS-fs (loop6): Start checkpoint disabled!
[  641.199491][T13412] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[  643.049970][ T1319] kworker/u4:7: attempt to access beyond end of device
[  643.049970][ T1319] loop6: rw=2049, sector=40960, nr_sectors = 32 limit=40427
[  643.069118][ T1319] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  643.097987][ T1319] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  643.610477][ T1319] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  643.629082][ T1319] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  643.932222][T13433] lo: entered promiscuous mode
[  643.953627][T13433] tunl0: entered promiscuous mode
[  643.963753][T13433] gre0: entered promiscuous mode
[  643.977037][T13433] gretap0: entered promiscuous mode
[  644.007229][T13433] ip_vti0: entered promiscuous mode
[  644.019476][T13433] ip6_vti0: entered promiscuous mode
[  644.030219][T13433] sit0: entered promiscuous mode
[  644.045257][T13433] ip6tnl0: entered promiscuous mode
[  644.058885][T13433] ip6gre0: entered promiscuous mode
[  644.071279][T13433] ip6gretap0: entered promiscuous mode
[  644.084544][T13433] bridge0: port 3(erspan0) entered blocking state
[  644.091066][T13433] bridge0: port 3(erspan0) entered forwarding state
[  644.117131][T13433] bridge0: entered promiscuous mode
[  644.125627][T13433] vcan0: entered promiscuous mode
[  644.134953][T13433] bond0: entered promiscuous mode
[  644.141225][T13433] bond_slave_0: entered promiscuous mode
[  644.151470][T13433] bond_slave_1: entered promiscuous mode
[  644.161489][T13433] mac80211_hwsim hwsim21 wlan1: entered promiscuous mode
[  644.176872][T13433] 8021q: adding VLAN 0 to HW filter on device bond0
[  644.187138][T13433] team0: entered promiscuous mode
[  644.198043][T13433] team_slave_0: entered promiscuous mode
[  644.205297][T13433] team_slave_1: entered promiscuous mode
[  644.213962][T13433] 8021q: adding VLAN 0 to HW filter on device team0
[  644.236592][T13433] dummy0: entered promiscuous mode
[  644.257402][T13433] nlmon0: entered promiscuous mode
[  644.275570][T13433] caif0: entered promiscuous mode
[  644.280705][T13433] caif0: left allmulticast mode
[  644.292793][T13433] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  644.486073][T13427] loop3: detected capacity change from 0 to 32768
[  644.511223][T13427] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1410 (13427)
[  644.561200][T13427] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  644.581081][T13427] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  644.590137][T13427] BTRFS info (device loop3): using free space tree
[  644.675928][T13427] BTRFS info (device loop3): enabling ssd optimizations
[  644.687664][T13427] BTRFS info (device loop3): auto enabling async discard
[  645.262929][T13470] vlan0: entered promiscuous mode
[  645.318417][ T9154] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  646.961422][T13487] loop3: detected capacity change from 0 to 2048
[  647.049403][T13487] NILFS (loop3): invalid segment: Magic number mismatch
[  647.059334][T13487] NILFS (loop3): trying rollback from an earlier position
[  647.138452][T13487] NILFS (loop3): recovery complete
[  647.159317][T13490] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  648.750504][T13513] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  651.050411][T11412] Bluetooth: hci2: unexpected event 0x03 length: 17 > 11
[  651.665855][T13562] loop3: detected capacity change from 0 to 512
[  651.683428][T13562] EXT4-fs: Ignoring removed nomblk_io_submit option
[  651.694087][T13562] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  651.734393][T13562] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  651.747223][T13562] ext4 filesystem being mounted at /175/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  651.781588][   T27] audit: type=1800 audit(1754963778.746:95): pid=13562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1447" name="file1" dev="loop3" ino=15 res=0 errno=0
[  651.843040][   T27] audit: type=1800 audit(1754963778.776:96): pid=13562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1447" name="file1" dev="loop3" ino=15 res=0 errno=0
[  652.047081][T13571] loop6: detected capacity change from 0 to 1024
[  652.052757][ T9154] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  652.131421][T13571] EXT4-fs (loop6): bad geometry: first data block 0 is beyond end of filesystem (0)
[  652.178377][T11412] Bluetooth: hci1: unexpected event for opcode 0x2031
[  652.370726][T11412] Bluetooth: unknown link type 128
[  653.379892][T13604] loop3: detected capacity change from 0 to 1024
[  653.409523][T13604] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869)
[  653.409663][T13604] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  653.409964][T13604] EXT4-fs (loop3): invalid journal inode
[  653.410037][T13604] EXT4-fs (loop3): can't get journal size
[  653.455131][T13604] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  653.563615][T13604] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2244: inode #12: comm syz.3.1460: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[  653.713767][ T9154] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  654.454305][T11412] Bluetooth: hci3: command 0x0406 tx timeout
[  657.541038][T13666] loop3: detected capacity change from 0 to 64
[  657.966223][T13678] 
[  657.968623][T13678] ======================================================
[  657.975647][T13678] WARNING: possible circular locking dependency detected
[  657.982677][T13678] 6.6.101-syzkaller #0 Not tainted
[  657.987787][T13678] ------------------------------------------------------
[  657.994804][T13678] syz.3.1473/13678 is trying to acquire lock:
[  658.000863][T13678] ffff88802fb540b0 (&tree->tree_lock#2/1){+.+.}-{3:3}, at: hfs_find_init+0x15f/0x1d0
[  658.010389][T13678] 
[  658.010389][T13678] but task is already holding lock:
[  658.017752][T13678] ffff8880792080f8 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xdb/0x1220
[  658.028579][T13678] 
[  658.028579][T13678] which lock already depends on the new lock.
[  658.028579][T13678] 
[  658.038985][T13678] 
[  658.038985][T13678] the existing dependency chain (in reverse order) is:
[  658.048015][T13678] 
[  658.048015][T13678] -> #1 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}:
[  658.057256][T13678]        __mutex_lock+0x129/0xcc0
[  658.062295][T13678]        hfs_extend_file+0xdb/0x1220
[  658.067593][T13678]        hfs_bmap_reserve+0x107/0x430
[  658.072978][T13678]        __hfs_ext_write_extent+0x1fa/0x470
[  658.078869][T13678]        __hfs_ext_cache_extent+0x6b/0x9b0
[  658.084691][T13678]        hfs_extend_file+0x317/0x1220
[  658.090253][T13678]        hfs_get_block+0x3d8/0xbd0
[  658.095582][T13678]        __block_write_begin_int+0x566/0x1ad0
[  658.101685][T13678]        block_write_begin+0x9a/0x1e0
[  658.107075][T13678]        cont_write_begin+0x5c8/0x7e0
[  658.112462][T13678]        hfs_write_begin+0x8b/0xd0
[  658.117582][T13678]        cont_write_begin+0x2ad/0x7e0
[  658.122978][T13678]        hfs_write_begin+0x8b/0xd0
[  658.128153][T13678]        hfs_file_truncate+0x191/0x9b0
[  658.133627][T13678]        hfs_inode_setattr+0x4af/0x6e0
[  658.139078][T13678]        notify_change+0xb0d/0xe10
[  658.144198][T13678]        do_truncate+0x19b/0x220
[  658.149142][T13678]        do_sys_ftruncate+0x325/0x3d0
[  658.154513][T13678]        do_syscall_64+0x55/0xb0
[  658.159447][T13678]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  658.165879][T13678] 
[  658.165879][T13678] -> #0 (&tree->tree_lock#2/1){+.+.}-{3:3}:
[  658.173972][T13678]        __lock_acquire+0x2ddb/0x7c80
[  658.179335][T13678]        lock_acquire+0x197/0x410
[  658.184361][T13678]        __mutex_lock+0x129/0xcc0
[  658.189375][T13678]        hfs_find_init+0x15f/0x1d0
[  658.194477][T13678]        hfs_extend_file+0x2ef/0x1220
[  658.199840][T13678]        hfs_bmap_reserve+0x107/0x430
[  658.205218][T13678]        hfs_cat_create+0x1b4/0x620
[  658.210436][T13678]        hfs_mkdir+0x6c/0xe0
[  658.215036][T13678]        vfs_mkdir+0x296/0x440
[  658.219796][T13678]        do_mkdirat+0x1d4/0x440
[  658.224638][T13678]        __x64_sys_mkdirat+0x89/0xa0
[  658.229925][T13678]        do_syscall_64+0x55/0xb0
[  658.234864][T13678]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  658.241285][T13678] 
[  658.241285][T13678] other info that might help us debug this:
[  658.241285][T13678] 
[  658.251516][T13678]  Possible unsafe locking scenario:
[  658.251516][T13678] 
[  658.258972][T13678]        CPU0                    CPU1
[  658.264336][T13678]        ----                    ----
[  658.269702][T13678]   lock(&HFS_I(tree->inode)->extents_lock);
[  658.275798][T13678]                                lock(&tree->tree_lock#2/1);
[  658.283202][T13678]                                lock(&HFS_I(tree->inode)->extents_lock);
[  658.291700][T13678]   lock(&tree->tree_lock#2/1);
[  658.296566][T13678] 
[  658.296566][T13678]  *** DEADLOCK ***
[  658.296566][T13678] 
[  658.304719][T13678] 4 locks held by syz.3.1473/13678:
[  658.309909][T13678]  #0: ffff88804ff4e418 (sb_writers#33){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  658.319156][T13678]  #1: ffff888079208fb8 (&type->i_mutex_dir_key#21/1){+.+.}-{3:3}, at: filename_create+0x1f6/0x460
[  658.329885][T13678]  #2: ffff88804fc8e0b0 (&tree->tree_lock#2){+.+.}-{3:3}, at: hfs_find_init+0x15f/0x1d0
[  658.339666][T13678]  #3: ffff8880792080f8 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xdb/0x1220
[  658.350906][T13678] 
[  658.350906][T13678] stack backtrace:
[  658.356789][T13678] CPU: 1 PID: 13678 Comm: syz.3.1473 Not tainted 6.6.101-syzkaller #0
[  658.364942][T13678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  658.375008][T13678] Call Trace:
[  658.378287][T13678]  <TASK>
[  658.381228][T13678]  dump_stack_lvl+0x16c/0x230
[  658.385922][T13678]  ? load_image+0x3b0/0x3b0
[  658.390428][T13678]  ? show_regs_print_info+0x20/0x20
[  658.395621][T13678]  ? print_circular_bug+0x12b/0x1a0
[  658.400815][T13678]  check_noncircular+0x2bd/0x3c0
[  658.405762][T13678]  ? look_up_lock_class+0x75/0x140
[  658.410893][T13678]  ? print_deadlock_bug+0x5d0/0x5d0
[  658.416098][T13678]  ? lockdep_lock+0xe0/0x220
[  658.420687][T13678]  ? _find_first_zero_bit+0xd3/0x100
[  658.425981][T13678]  __lock_acquire+0x2ddb/0x7c80
[  658.430851][T13678]  ? preempt_schedule_thunk+0x1a/0x30
[  658.436242][T13678]  ? verify_lock_unused+0x140/0x140
[  658.441440][T13678]  ? _raw_spin_unlock_irqrestore+0xfa/0x110
[  658.447331][T13678]  ? _raw_spin_unlock+0x40/0x40
[  658.452181][T13678]  ? stack_trace_save+0x9c/0xe0
[  658.457019][T13678]  ? stack_trace_snprint+0xf0/0xf0
[  658.462122][T13678]  lock_acquire+0x197/0x410
[  658.466628][T13678]  ? hfs_find_init+0x15f/0x1d0
[  658.471455][T13678]  ? hfs_extend_file+0x2ef/0x1220
[  658.476506][T13678]  ? hfs_bmap_reserve+0x107/0x430
[  658.481552][T13678]  ? do_syscall_64+0x55/0xb0
[  658.486147][T13678]  ? __might_sleep+0xe0/0xe0
[  658.490728][T13678]  ? read_lock_is_recursive+0x20/0x20
[  658.496094][T13678]  __mutex_lock+0x129/0xcc0
[  658.500779][T13678]  ? hfs_find_init+0x15f/0x1d0
[  658.505563][T13678]  ? hfs_find_init+0x15f/0x1d0
[  658.510381][T13678]  ? mutex_lock_nested+0x20/0x20
[  658.515316][T13678]  ? __kmem_cache_alloc_node+0x13e/0x260
[  658.520944][T13678]  ? hfs_find_init+0x88/0x1d0
[  658.525631][T13678]  ? hfs_find_init+0x88/0x1d0
[  658.530352][T13678]  ? __kmalloc+0xe2/0x240
[  658.534691][T13678]  hfs_find_init+0x15f/0x1d0
[  658.539281][T13678]  hfs_extend_file+0x2ef/0x1220
[  658.544558][T13678]  ? hfs_get_block+0xbd0/0xbd0
[  658.549330][T13678]  ? rcu_is_watching+0x15/0xb0
[  658.554104][T13678]  ? trace_contention_end+0x39/0xe0
[  658.559305][T13678]  ? __mutex_lock+0x304/0xcc0
[  658.563992][T13678]  ? hfs_find_init+0x15f/0x1d0
[  658.568763][T13678]  ? mutex_lock_nested+0x20/0x20
[  658.573698][T13678]  hfs_bmap_reserve+0x107/0x430
[  658.578552][T13678]  hfs_cat_create+0x1b4/0x620
[  658.583222][T13678]  ? preempt_schedule+0xab/0xc0
[  658.588062][T13678]  ? preempt_schedule_common+0x82/0xc0
[  658.593603][T13678]  ? hfs_cat_build_key+0x170/0x170
[  658.598730][T13678]  ? preempt_schedule+0xab/0xc0
[  658.603575][T13678]  ? _raw_spin_unlock+0x3a/0x40
[  658.608419][T13678]  ? hfs_new_inode+0x92b/0xbf0
[  658.613219][T13678]  hfs_mkdir+0x6c/0xe0
[  658.617278][T13678]  vfs_mkdir+0x296/0x440
[  658.621523][T13678]  do_mkdirat+0x1d4/0x440
[  658.625883][T13678]  ? vfs_mkdir+0x440/0x440
[  658.630290][T13678]  __x64_sys_mkdirat+0x89/0xa0
[  658.635062][T13678]  do_syscall_64+0x55/0xb0
[  658.639488][T13678]  ? clear_bhb_loop+0x40/0x90
[  658.644155][T13678]  ? clear_bhb_loop+0x40/0x90
[  658.648822][T13678]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  658.654714][T13678] RIP: 0033:0x7ff48f58d457
[  658.659139][T13678] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  658.678748][T13678] RSP: 002b:00007ff48d7f5e68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  658.687169][T13678] RAX: ffffffffffffffda RBX: 00007ff48d7f5ef0 RCX: 00007ff48f58d457
[  658.695495][T13678] RDX: 00000000000001ff RSI: 0000200000000680 RDI: 00000000ffffff9c
[  658.703458][T13678] RBP: 0000200000000080 R08: 0000200000000d40 R09: 0000000000000000
[  658.711424][T13678] R10: 0000200000000080 R11: 0000000000000246 R12: 0000200000000680
[  658.719479][T13678] R13: 00007ff48d7f5eb0 R14: 0000000000000000 R15: 0000000000000000
[  658.727448][T13678]  </TASK>
[  658.730590][    C1] vkms_vblank_simulate: vblank timer overrun