last executing test programs:

47.52940242s ago: executing program 2 (id=305):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0c010000", @ANYRES16=r1, @ANYBLOB="ffaf00000000000ec0006700000008000100030000000800c400ff0300000800c3"], 0x10c}, 0x1, 0x0, 0x0, 0x400c080}, 0x4880)

47.290888735s ago: executing program 2 (id=307):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0815002800051104000000000000000001000005540201"], 0x1508}}, 0x0)

47.066904198s ago: executing program 2 (id=308):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x163183)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000001240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001280), 0x0, 0x10, &(0x7f00000012c0), 0xfffffffffffffd00}, 0x48)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x5)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000240)={{0x3}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000780)={0x2, 0xffffff3a, 0x0, 0x0, 0xf})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r1, 0x0, 0x21, &(0x7f0000000100)=0xffffffff, 0x4)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)

47.000314405s ago: executing program 2 (id=310):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000001580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000080)={[{@init_itable_val={'init_itable', 0x3d, 0x4}}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@resgid}, {@grpjquota}]}, 0x3, 0x446, &(0x7f0000000200)="$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")
openat$dm_control(0xffffffffffffff9c, 0x0, 0x880, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000002040)={0x4, 0xab}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000002080)=0x8)
syz_mount_image$iso9660(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x810000, &(0x7f0000000740)=ANY=[@ANYBLOB="73686f776173736f632c0080da3e68c346f09759880adda7fb5264a2f9a5376cd7c5d2ddfca3e914f85cffd5047acdc68e67c6179a91f4b17bfee47a6f9f901f2685c19d25d93a65403e593e0aea376762d3323a54ea772757b22259d244f61622274d5e8b21d835ceb3afac660819b63431b9fe729c02baeb2313404366fa28fed4"], 0x5, 0x567, &(0x7f0000000800)="$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")
mount$overlay(0x0, &(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0), 0x1204001, &(0x7f0000000e00)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000e40)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./file2\x00', 0x80000, 0x0)
r1 = socket$kcm(0xa, 0x6, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0xe, 0x4, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f00000012c0)='GPL\x00', 0x4, 0xfd90, &(0x7f0000001300)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000001400), 0x366, 0x10, &(0x7f0000001440), 0x1dd}, 0x48)
setsockopt$sock_attach_bpf(r1, 0x10d, 0x11, &(0x7f0000001480)=r2, 0x4)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r0, 0x1000)
sched_setaffinity(0x0, 0x8, &(0x7f00000020c0)=0x2)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000002100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000002180)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000002200), 0x318, 0x0)
recvmmsg(r4, &(0x7f0000002240), 0x10106, 0x2, 0x0)
sched_setaffinity(r3, 0xfffffffffffffffb, &(0x7f00000014c0)=0x3)
syz_mount_image$reiserfs(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x1000400, &(0x7f0000000f40), 0xfd, 0x1133, &(0x7f0000002540)="$eJzs2bFqVE0UB/D/7G6+5LNZufYXQQsLCQnrA5hCYVsttZGwIJgqC4KyrY/gG/gWvoKmsnZJr8WCpXDlZvdqIkKUrELg9ytmzh5m9swtz0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgNUg+leRaL6m6XC9JSer6aHycpO7yV9/1eyl5MBlP7x2O7k+T9E+Wl0dJaXelZPKq2r2xVY2qUbVb3bm7d/P99MXLZ08ODiaHq78pqTNfrPUrSjf0T+fKWmsAAADApdVc2DCvn/9Opf8+/p36AAAAwHnWfqEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8IeaYbKxiqsu2UtSkro+Gh8nqc/s2DwZN/7tMQEAAIALKOnl8fBX+eU1wA+382FYvufb+Utp4528GaYM2iX98+ttre/oAAAAcGk8fXvmZ7O5Ck6/r39t/k/TNE3bd9/KYNmXrxrp6xlke3sZr6Z83lu24js/1ZovZg+vLGb788VsvzT97ikfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC+sQMHAgAAAACC/K0HuQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALYKAAD//7fM4Dg=")
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000022c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000002380)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x3}, 0x9c)
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
bind$inet6(r6, &(0x7f0000002480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r7 = syz_open_dev$vim2m(&(0x7f0000001500), 0xffff, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000001540)={0x6, 0xfffffffa})
sendto$inet6(r6, &(0x7f0000000680)='X', 0x1, 0x0, &(0x7f0000002500)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(r6, 0x2)

46.977148157s ago: executing program 2 (id=311):
r0 = syz_open_dev$sndpcmp(&(0x7f00000002c0), 0x1, 0x203)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000300)={0x0, [0x2, 0xffff133c, 0xb], [{0x0, 0xffffffff}, {0x2}, {0x0, 0xfffb}, {0xffffffff}, {0x2000006}, {0x0, 0x2}, {0x800000}, {0x7}, {}, {0x0, 0x1}, {0x0, 0xffffffff}, {0x0, 0x4}], 0x10})
openat(0xffffffffffffff9c, 0x0, 0x40, 0x1ff)
io_setup(0x1, &(0x7f0000000440))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000280)={{0x80000000, 0x0, 0x4, [0x0, 0xf7df]}, {0x80000000, 0x0, 0x4, [0x6]}, 0x1, [0x8, 0x3df]})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'})
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
ptrace$getregset(0x4205, r5, 0x403, &(0x7f0000000240)={&(0x7f0000000180)=""/116, 0x74})

45.932738814s ago: executing program 2 (id=317):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x7a, &(0x7f0000000180)={@local, @broadcast, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "4f3bf5", 0x40, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '%nZ', 0x0, 0x33, 0x0, @empty, @remote, [@fragment={0x4}], "05d3e680eadfc23e"}}}}}}}, 0x0)
sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0815000000051104000000000000000001000005540201"], 0x1508}}, 0x0)
r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x200041, 0x1)
getdents64(r1, &(0x7f0000000100)=""/75, 0x4b)

45.87755504s ago: executing program 32 (id=317):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x7a, &(0x7f0000000180)={@local, @broadcast, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "4f3bf5", 0x40, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '%nZ', 0x0, 0x33, 0x0, @empty, @remote, [@fragment={0x4}], "05d3e680eadfc23e"}}}}}}}, 0x0)
sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0815000000051104000000000000000001000005540201"], 0x1508}}, 0x0)
r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x200041, 0x1)
getdents64(r1, &(0x7f0000000100)=""/75, 0x4b)

28.086547806s ago: executing program 1 (id=471):
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x4175, &(0x7f0000000100)={0x0, 0x136f, 0x10000, 0x3, 0x2d0}, 0x0, 0x0, 0x0)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x56, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @period={0x5d, 0x5, 0xc, 0x7, 0x7ff, {0x0, 0x6, 0x4, 0x7ff}, 0x0, 0x0}})
r1 = syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x822b01)
getgroups(0x1, &(0x7f0000000000)=[0xee01])
read$FUSE(0xffffffffffffffff, &(0x7f0000001c00)={0x2020}, 0x2020)
getgid()
getgid()
getgroups(0x0, &(0x7f0000005c80))
write$char_usb(r1, &(0x7f0000000280)="e2", 0xff0f)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201})
write$tun(0xffffffffffffffff, 0x0, 0xfdef)
ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000880)=""/4096)
syz_open_dev$tty1(0xc, 0x4, 0x1)
pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0)
close(r0)

26.444811385s ago: executing program 1 (id=480):
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x14, &(0x7f00000000c0)=ANY=[], 0xfd, 0x1508, &(0x7f0000000f40)="$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")
r0 = open(&(0x7f0000002480)='./file1\x00', 0x145142, 0x0)
ftruncate(r0, 0x852)

26.067927933s ago: executing program 1 (id=482):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000840)=@broute={'broute\x00', 0x20, 0x1000000, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000740], 0x0, 0x0, 0x0}, 0x108)

25.827029638s ago: executing program 1 (id=484):
syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000440)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f00000028c0)=ANY=[@ANYBLOB='time_offset=0x0000000000000000,discard,namecase=1,dmask=00000000000000000000177,errors=continue,errors=remount-ro,iocharset=cp857,fmask=00000000000000000000075,namecase=1,uid=', @ANYRESHEX=0xee01, @ANYBLOB="00050000000000000000d0948ce90800684bb58dd5679ddda3ece25a51743067f74f3ceacc7c6dce58aa904fd44c5979ccd05d29a70fcb6642fefe52d63ad8a7a8c88c32d40567f2b7872e436e677d0876391a1da8255b8f89dab8"], 0x1, 0x1550, &(0x7f0000000f80)="$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")
mount$bind(&(0x7f0000002a00)='./file0\x00', &(0x7f0000002a40)='./file0\x00', 0x0, 0x101091, 0x0)

25.643297747s ago: executing program 1 (id=485):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x5}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000000100)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)='\b', 0x1}], 0x1}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0)={0x0, 0x10, 0xc493}, 0x8)

24.731864461s ago: executing program 1 (id=497):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
dup(0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x1a0001)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x183c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000300)={0x750, 0x0, 0x0, 'queue0\x00', 0x5})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x20002, 0x80)
ioctl(r5, 0x40104d04, &(0x7f0000000180)="9c81")
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./config\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/functions/hid.usb0/no_out_endpoint\x00', 0x2, 0x0)
symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00')

24.672984977s ago: executing program 33 (id=497):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
dup(0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x1a0001)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x183c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000300)={0x750, 0x0, 0x0, 'queue0\x00', 0x5})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x20002, 0x80)
ioctl(r5, 0x40104d04, &(0x7f0000000180)="9c81")
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./config\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/functions/hid.usb0/no_out_endpoint\x00', 0x2, 0x0)
symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00')

21.850573286s ago: executing program 0 (id=518):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000003c0)={@remote, 0x4}, 0x4f)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000840)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x4, 0x2, 0x3, 0xc, 0x0, 0x7}, 0x20)
r1 = syz_open_procfs(0x0, &(0x7f0000000880)='net/anycast6\x00')
preadv(r1, &(0x7f0000001d40)=[{&(0x7f0000000580)=""/63, 0x3f}], 0x1, 0x9, 0xd)

21.72470291s ago: executing program 0 (id=519):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r0, &(0x7f0000000280)='usbip-vudc.0', 0xc)
write(r0, &(0x7f0000000400)='\n', 0x1)

21.710383971s ago: executing program 0 (id=520):
socket$netlink(0x10, 0x3, 0x0)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs\x00', 0x1ef)
mount(0x0, &(0x7f0000000100)='./tracefs\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/test\x00', 0x777)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0)
write(r1, &(0x7f0000000200)='100000', 0x6)
write(0xffffffffffffffff, &(0x7f0000000280)='1', 0x1)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r2, &(0x7f0000000300)='0', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./tracefs/instances/foo\x00', 0x1ff)

19.460694792s ago: executing program 0 (id=531):
openat$sndseq(0xffffffffffffff9c, 0x0, 0x8400)
mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000800)='./proc\x00', &(0x7f0000000840)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f00000008c0)='270', 0x3)
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000002440)='/dev/comedi2\x00', 0x1, 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000002480)={'pcl818\x00', [0x140, 0x2, 0x3, 0xdf92, 0x1, 0x2, 0x7ffd, 0x6, 0x8, 0xf, 0x2, 0x10, 0xf8, 0x8, 0x4ce, 0x9e99, 0x8000, 0x3fd, 0x9, 0x8, 0x4, 0x2, 0xa, 0x9, 0xffd, 0x200000, 0xaf, 0x0, 0x10001fc, 0x0, 0x2]})

19.460438582s ago: executing program 0 (id=532):
r0 = socket$kcm(0x29, 0x2, 0x0)
sendmmsg$sock(r0, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000940)="83", 0x1}], 0x1}}], 0x1, 0x80)
sendmmsg$inet(r0, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x41)

19.404184338s ago: executing program 0 (id=533):
dup(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x14b102)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)="94", 0xf000}, {0x0}], 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x42, 0x2, 0x8, 0x0, 0x1}, 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r1}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x8000, r2, 0x0, 0xf2ffffffffffffff}, 0x38)

4.193323619s ago: executing program 34 (id=533):
dup(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x14b102)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)="94", 0xf000}, {0x0}], 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x42, 0x2, 0x8, 0x0, 0x1}, 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r1}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x8000, r2, 0x0, 0xf2ffffffffffffff}, 0x38)

4.034090476s ago: executing program 5 (id=607):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
mkdirat(0xffffff9c, &(0x7f00000005c0)='./proc\x00', 0x1ed)
mount(0x0, &(0x7f000000bec0)='./proc\x00', &(0x7f000000bf00)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffff9c, &(0x7f000000bf40)='./proc/sys/net/ipv6/conf/all/force_mld_version\x00', 0x1, 0x5)
write$cgroup_int(r0, &(0x7f000000bf80)=0x1, 0x12)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f000000bfc0)={0x0, 0x0, &(0x7f000000c000)={&(0x7f000000c040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x33}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)

3.861049364s ago: executing program 4 (id=612):
get_mempolicy(0x0, &(0x7f0000000440), 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x1)

3.79929316s ago: executing program 4 (id=613):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
connect$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x4e22, 0x1000, @dev={0xfe, 0x80, '\x00', 0x21}, 0x9}, 0x1c)
fsopen(&(0x7f0000000680)='ext3\x00', 0x0)
setsockopt$inet_sctp6_SCTP_REUSE_PORT(0xffffffffffffffff, 0x84, 0x24, &(0x7f0000000180), 0x4)
setxattr$security_capability(0x0, &(0x7f0000000240), &(0x7f0000000380)=@v2={0x2000000, [{0xfff, 0x6}, {0x6, 0x1}]}, 0x14, 0x1)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00'})
dup(r0)
r2 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f00000004c0)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53})
ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1004, 0x1)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r3, &(0x7f0000000dc0)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(r3, &(0x7f0000002e00)={0x50, 0x0, r4, {0x7, 0x1f, 0x1000001, 0x5069f481, 0x8, 0x7fff, 0x0, 0x800, 0x0, 0x0, 0x10}}, 0x50)
syz_fuse_handle_req(r3, &(0x7f0000002e80)="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", 0x2000, &(0x7f0000004e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004f40)={0x20, 0x0, 0x400000000000000, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000004f80)='./file0\x00', 0x181581, 0x2)
syz_fuse_handle_req(r3, &(0x7f0000004fc0)="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", 0x2000, 0x0)
ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x1)
ioctl$UI_DEV_CREATE(r2, 0x5501)

3.7977689s ago: executing program 5 (id=622):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000)
madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19)
syz_clone3(&(0x7f0000000080)={0x180801600, &(0x7f0000000100), 0x0, 0x0, {0xc}, 0x0, 0x0, 0x0, 0x0}, 0x58)

3.444723136s ago: executing program 6 (id=618):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f0000000940)='tcp 2', 0x5)

3.444462006s ago: executing program 5 (id=620):
r0 = socket(0x2, 0x3, 0x6)
sendmsg$rds(r0, &(0x7f0000002600)={&(0x7f0000000540)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10, 0x0}, 0x22040014)

3.443308816s ago: executing program 6 (id=621):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000040))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, &(0x7f00000000c0)=""/68, 0x0, 0x60000})
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000140))
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000280)=0x1)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0xa7c, r1}, 0x38)

3.40958795s ago: executing program 3 (id=623):
r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000240)=ANY=[@ANYBLOB="12010002000000407c2c25010000000000010902270001010080fa0904000003ffffff0007058102000200070502020002000705830340"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./mysys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
read(0xffffffffffffffff, &(0x7f0000000100), 0x100)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

3.40175576s ago: executing program 5 (id=624):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zlib'}}]}, 0x25, 0x559a, &(0x7f0000005680)="$eJzs3X2QVWUdB/Bzd1lYZGI3BMGBFShfQEIhpVRS7kBBuDJtkjU2GQtioaAwzBI1ii04WLgam1kz5QxCiwjDUmszGmXlygyQk9PWjIPIgjLThjG9SMXEFjU2e+99Lveey+5eyVxfPh9m99zn/s7znOeeOX/c72WfcyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACIoujgjtr/rB1ZV75+06hFt199cPSq0RNWVDWdHHWg+rzdl/absWjovuntdw6b0bH6SPX65tsu6IyiRKpfItN/3vSPX/+FufPmlIcBaz+Z3lZWdnfIdNfD6Ub/vCe7+uX/zI+iqCw2QGlmu7s0p52IHyBaXjhgj8pmbVsycEGyduvmp+ouX7J1XOFLp0t5X0+gr2Suq45T11Iy9bsktke2nXPpJfIu0XT/+AX3prwIAOB1mVST2mTfjmbe4mbb9fF6rJ2MtRtj7fAOoTG3cSbS4/bvbp5j4vU+mmcyHRUGdDvPWD1z/rPtmnj/WDsWNV7HPPN3zUSa8u7muSxW76t5AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALyVvFa3Ys34z714sOyX549bvfLk4WvLL3zoq/8uWXrzS68dqlnzl7ah+6a33zlsRsfqI9Xrm2+7oDOKKlP9EunuiWknXr1kYvWcUeuf+N7ETc+OP16aGTds++XsHO0PD66siKIFOZWOMOzRwVFUk19INaPvFhZuTT2YHQoAAAC8k5yb+l2SbafjYFleO5FKk4nUvyAdFstmbVsycEGyduvmp+ouX7J13JmPV9PNeMnTjpdtV576SeQE4xB/4+OdqoddlxeM07P4iPE8P+X5l1+oGHHtT5+pOu+mlde/NPKax9tmfnP48UX7K+8YtGrc2CsK8n9lz/k/nDn5HwAAgP+F/B8fp2e95f/PzK+75Y5HvnJszD2HVw66+8H9G4eVH7nplsn7/jj8hosvvqz2xoL8PybvkAX5P8w45P+S6MzyPwAAALyV/b/zf7JgnJ71lv/bhzff/MB7Di2sbOt4evtlK/b0X3j1RUMOPHTR3In3XjdozPkNBfl/UnH5v1/utMOTz4UJL66IoknFn1QAAAAgT/h/91MfLYS8nv7kIJ7XW+dtGd3y6swvTxj78KH6P1Vtnvj5jUMe37lh5jd2PXf3/RPbzi7I/8ni8n/Zm/NyAQAAgCI0HTpnxNBPJ38e3X/01vnf/+yuR+9b+sWrLtnbOWvC2l9UP72jviD/1xSX/wf0zcsBAAAATuPE+GsW/mPnkd9e1/yJ+5qO/v5Lq0p/NaNp9/62hqZ/bh81e/XkgvxfW1z+Pyuzzax8SHfaE/4K4VsVUVTe9WBZurA3apyWLQAAAABvkJDT75ryfMm9A6edu2Xub06Me+KFPZ/aN3vxhnPWTGp69n2tiz9y4WMF+X9Zz/f/D3c6COv/8+7/V7D+P6eQvuvfVDcGAAAA4N2ocD1/uD1++psLuvv+/WLX///w6xv+mqiqf/ID8342q/P9zT/Z2zr1wZNVf5hz/OGW5MgnL32xIP/XF5f/S3O3b+T3/wEAAMAZeLt9/9+NBeP0rLf7/7c980j1o1d+6GtXza2buuN3H77iz68Mn9qwPXpl+UfbFx342K5fF+T/xuLyf9gOyn15reH83FMRRSO6HmTuJrgtTHdxrNBSllNIn/hYj7mhR6bQMiCnkLIs1uODFVE0tutBfazw3lBojBWODc4UNsYKbaGQuR6yhR/ECq3hSvvO4Mx044Ufh0JmgUVLWEExKLskItbj79316Cqctkd79uAAAADvKiE8Z7JsWX4zikfZlkRvO5zV2w4lve1Q2tsO/WI7xHfs7vmoNr8Qnv/Rt294ecBdD2yom7Jl04KqhrPX/euxyZNuX7Z2Z93SziF/W7euIP9vLC7/h1PRP73pbv1/FNb/Z77XMLv+vzYUKmOFllCoid8xoCYcIx12G8IxKmsyPY6NyBYAAADgHS18LlDax/MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/7J373FW1nXiwL8zzIUZhplRMS+RISaKwTCMKYaZID/TnwQOq6WFJgSDjgxCXEzQTUTd1VzB2+ZtE0jdtIwoNbVUeGnekspLsKl5SfHSK41lS5Js133NnPM9nPOcOc5BQBn3/f5jzvecz/f6nMuc7/M85/sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/N2z85GVfeHmfj/xg3cKBi1eP+krfI4cMn3DMNTceu/jhb0/e777f//8+aw575sydR60955XRi245de+3QmjuKFeSKl5y6F/XNQwePabvotuvGbz0kYF/qUjXm46HXu1/StN3zoutru0dwh0lIZQlA4NrUoHy9P2aWF/fmhB2CJsCmRIt1akSyYbDA1UhLAmbApmq7qoKoSYrcOwT9624uD1xRVUIe4cQKpNtPFuZaqMqGRhQkQpUJwPTy1KBv76TkgncWZoKwBaLb4bMi355c26G+s7LFXj9lW+1jn2wksPrERP1hfO9MXIbdypLRfKB5i162vKqY5vIe3us9G7rBu+2vO18iact+4tU+hvKO5tClaF0csuUiXPaZsdHSkNDQ49CNW2j5/np9WdN2px0t3kdxg7Ub5XX4aoLe49d/OhRw2+tG35Dn0ELN25pNwtt3m2tMqRfc93meYxG+DzpBm+/vG9J/XzpCiHsf9v42798wcs3L7h87K4HPbHTsDc+u/vdLT+75YTxxx++fsVXf//jvPl//bvP/+PLOd6W5uSOrb5dm5qbx0dqYmJdbWpuDgAAAN1Gd9hr+srq/5722X3HDX185OrqW2+659SL7/v8tT9r3a/t4bE77fj8vvN+lDf/71fc8f94yL8me7QrQxjRkTi3LoRdOx5PBW6O3flqXQh7dqSacwMjE4GVIezWkRiYqSpRomcs0S8ReLU2HRiRCDwYA82JwI0xcEkicF4MLE8EJsXAykTgsBgIrbnj2K82PY6iA1UxMCG1EZfHsxD+XBtbS2yrZzJVAQAAbCXp2WF57t2scx22NEOcXi6v6ipDPAO7YIbKRA3JGWxmWlWwhrKuaijtqobMuOe/+/Dzai7pqua80zBKcjNcWXXLpT8aNumNu2e8tOG0Iz7x2quP1S/96afXXfPGU9Mr79/j8ofz5v+N7z7/r+ykIyV5x/9DGNfxN+YuTUfaMvEJzTkZAAAAgC3w1sADvvydsq/NfeH3jwz75K+vfez1lQ9/dO8zb1v7/Bk/+NZ3au4fnTf/H1Hc+f9xn0iPrMxhVdwNMbUuhMbcQKrag/MDqaPevdIBAAAA6A4yx+Mzx8Jb07epU7ST8+n8/M2bmT8e+B/Raf7131p2/Y6feGT2Q7W3zXhqw+NfWTl64bEz3xh05dmP7HvoQU+N/Gze/L+5uPP/q3NvU514MPbi8roQemYFHoq9bA906BcDLxyaG0iP/8G4AS6KVaVPTMhUdVEsMSEGGhOBJYVKPJYpsWtuIP1kZRo/NzOO1nSJrAAAAAC87+LugHhcPp7/v2LBXZf9x41/umzVgUtnnzz98de+V1H5zknL7zyxzwX39li008hJefP/CZt3/n/HPDjv9P62XiEMKQuhR/KHAauqUwsDxkBNSTpxT3Wqrh7JqhZUh3Bw+8CSVb2YXv+/LLnG4JNVqapiYNf+N60f0J64oSqEIdmBNeOXHtCemJMIZBr/YlUIH28fbbLxn/RMNV6ebPyqniHskRXIVDWpZwjtjVUkq7q/Mn0dg2RVyytD2CkrkKlqWGUIcwMA3VX8Xzo5+8FZc+dNndjW1jJzGybiTvyqMKW1raVh0vS2yZUF+jQ50eecdYzOyR9TsZe++V16jaLVx0ytKyad+aFgY3Zb6R35eWcOpu/HL0PlHeNsKs+5u39yyPvuld9EyPoqVWjIpdt4yNXZlWx6EvPqj/krQq/Qc86slpkNZ0ycPXvm0NTfYrM3pf7G40ypbTU0ua2qO+tbES+PgstlJbzXbTUgu5Ihs6fNGDJr7rzBrdMmntxycstpwz7VNKxp6P5NjUPaB5X+28VIB3RWc2Kk7ywtclhbcaS7l2VV8n58aEhISHS3xE2Xj39m0UcXV3538UmXPHH++WefcvrOt1057ft9p48fdOXnlkz9et78f8a7z//jp0784E+vz1Do+H99PMyfenzTYf4JMbCk2OP/9YWO5mdODOiXCMyPgfkO8wMAAPDhEHdHxr2Zcad07SvfOP1/Tjii9NA/HP2LpqGDdrnw1qkDbnx94+kf23vekmvLKvKv/ze/uN//b6X1/zNL1x9VaJn/gbFEY6H1/5PL/GfW/59faP3/5DL/mfX/l3wA6//PyQQSm+TP1v8HAAA+DN6/9f+7XN4/eYGAvAxdLu+fvEBAXoYul/Ev9gIBm73+/89/XrbDx47YrW/ZF56YuNedB/7mpGkP7vKjUVev+3RT/TfPWPPzZXnz/0uKm/9buB8AAAC2Hyfs+6UBC14a8vVzpj/ww8Ezdn7purOfH3HPL4/75MYxfddVr+v76bz5/5Li5v/v//p/odD5//0KBZoLLQxo/T8AAAC6qULr//3t42d987p+O24Y1O/M29+6emrJ8L2fO/XXbRc9NOrwj435xyWTrs2b/y8vbv4fT7sozckde/N2bWpNu5Bc025dbeYnAwAAANA9lIaGhvIi8+YsjDryvbf5dHop0HdLZ9vtE6vWnHvvdX8fcvP5C9Ydf3rtQUf+oeyQOydf99KCU/boX/Pc2rz5/8ri5v85v8tYdWHvsYsfPWr427fWDb+hz6CFGzcd/wcAAAC2nWL3SwAAAAAAAAAAAAAAAB+8Y1b95Kz/+uWY4+4cNu/qR3d+/OT//PqsM1on/aLtiHUHPLv0hk/tk/f7/zCuo1yh3//H6/7F3xf0yckdW+16/b/0/WNHL5vbsWThqtoQ9soOTF0wdYeQvjb/PtmBFScO3KU9sSBZ4u7nDnu5PXFSMnDk4B03tCc+kwhMiIsk7pYMxKsqbuidCMTlFZ9MBuL2WJ4MVKQDF/ZOjaMkua3+UJPaViXJbfV0TQh1WYHMtrqjJtVGSXKAVyQCmQF+LRmIAxybDpQme7WsV6pXMVATiy7uleoVAADbrfgtsDxMaW1raYxf4ePt7mW5t1HOkmXn5FdbUmTzv0svTbb6mKl1xaR7JL+LbrrWeHmobB/C0Lyvq9lZSjpGuXVq6WLT9Skw5K5WeystUC5pczddReERVaVG1DBpetvk8i4Hvn/XWZrKuswyNG+yk52ltGOTFlFLEX0pYkRFbpsiuhzvl4aGhh6JXMNjsD7k6OoVUezv9bPX+Sv0KsjOs3zUQQOOW/bcgRMWPXnQtKnhI5e9M2Li5FmHXPHiU0vnjxw0oUfe/L++uPl/Zfa4NqQvBjA/Xlnv4LoQJhQ5IgAAAPjwO+W05y674P5LX32hecDL04dcuuK3c6+aV1Z783mHP3336W+OX3jSlsYHDHtj6Kl3/ebcjU2jHrqy99X3X7PTkXU//H/Vvea+tWLQmy/cvVfe/L9fcfP/uAcrfSg4tbdjZbz+/7l1IXRcWr8+Fbg5DverdSHs2ZFqjiVSF9Q/KpZoTAVujjtMBsYSE5pzq+oZA8sTgVdr04GVicCDMZDeS3FTSO/KubQ2hAM6UuNyS8yIJeoTgaNjoF8i0BADjYlA7xgYkQi83jsdaE4EHo2B0Jq7rW7tnd5WAAAAmyM9zyrPvRuS87zlZV1lKOkqQ3VXGUq7ylDZVYZCo4j3fxwzlCdOXinJylSerLUqUUtehngx/M3uV16G8FhuzmTBvKbj+QeZ8w1KcjNccWbF9Dc/33/R8UPGrB/ftPhzc38a/uHtOW9d8OYvz6977pqNJXnz/8bi5v/Vubep1h+M8/9N1/9LBR6K3bs8njreLwZeODQ3kN4x8GCc7F6Uqao5XSI9ab8olhgRA/0SgRkxMCIRmDAuHViyS24gPdPONH5upvHWdImsAAAAALzv4g6CuJsmzv+fXTv+iWnjf3vQZX1nLzx/+VFffvrXx736i3t73v3d/osebitZuzpv/j+iuPl/bK9XdmPnxd6s7R3CHSWbepMJDK5JBeJ+jJr48/i+NSHskLWDI1OipTpVoiLRcHigKvUL9YpkVXdVpdYYiPePfeK+FRe3J66oCmHvrL0vmTaerUy1UZUMDKhIBaqTgellqUDc85MJ3FmaCsAWy+wVjC+o9KkuGfWdlyvw+vuwXBM0Oby8faCd5OvsN1fbSmXygfQ+1YzNe9ryqmObyHt7rPRu647vtnrvtuwvUulvKO9sClWG0sktUybOaZsdH8n+JWuebfQ8Z/9KtZj0Vngdzn/vve1aZbIDjYmPj8bOy3X+OiyJ1a26sPfYxY8eNfzWuuE39Bm0cGPR3Sgg/lB45rCr6rM377ZWGdKvuW73edLs86Q7/hvo52kLIYy7d+xFjYfcuHDSiP7X73xH7fDLvzT4lkMbnx1XM2eXw8e89sV5efP/5uLm/2WJ2w4b48acVRfCvlkbd1Xc/KPqUp+DWYHUp+RO+YHUIfeXagt+cgIAAMDWltndkdlf0Jq+TZ0Qnpwn5+dv3sz8cX/FiE7zF9vv/lecsnL0hAN/23f8XoccvM9Zdy04er+/Tbz+tT9Wj5z0wPd+tfr6vPn/hHef//dMdNPxf8f/2UYc/+/U9r4rumfygflbtCs6rzq2Ccf/O7W9v9sc/++U4/+O/3fG8f8uOP7fqe39acv7ljTDl64Qwr9f/vm/vX3Pbv02LC393pQH5vU//rLvL1r2k52f+efH/mn69H33/FXe/H9GcfN/6/91vmhfZv2/CYXW/5tRaP2/+db/AwAAtqkCC80l53l5q/flZUiu3peXocsFArtcYtD6f5u9/t+L/3Lpgr2mjv3GiWc9dnDvR+tHrRkz6O8nvbrnmuuevHLoIyf8/dt58//5xc3/48uhV3br3WX9v37jClR1SQzMsDAgAAAA26NCOwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4YJ31xynnjVjw+J+ap39l/fLx32nd8fGHprzefMQPRy87es0pu5xyb581hz1z5s6j1p7zyuhFt5y691shtHaUK0kVLzn0r+saBo8e03fR7dcMXvrIwL9UpustT99+NCd3bPXt2hCWZD1SExPratvvbAocO3rZ3LL2xKraEPbKDkxdMHWH9sSNtSHskx1YceLAXdoTC5Il7n7usJfbEyclA0cO3nFDe+Iz6UBJsrv/1jvV3ZJkdy/uHUJdViDT3VN751aVaeOIdKA02cZ3a1JtxEBNLHpVTaqNGGiLJVp7hjCkLIQeyaoeqUxV1SNZ1U8rU1X1SFZ1dmUIB4cQypJVPV+RqqosOfLHKlJVxcCu/W9aP6A9sbQihCHZgTXjlx7QnpiZCGQaP6YihI+3v2SSjd9anmq8PNn4v5aHsEcIoSJZ4s2yVImKZIkXy0LYKSuwaSOWhTA38OEQP30mZz84a+68qRPb2lpmbsNERbqtqjClta2lYdL0tsmViT4VUpKVfuec9z72360/a1L77epjptYVky5Llyvv6HJTec7d/bf33sd+VWdXsun5yKs/5q8IvULPObNaZjacMXH27JlDU3+Lzd6U+tsjHU1tq6HdZVsNyK5kyOxpM4bMmjtvcOu0iSe3nNxy2rBPNQ1rGrp/U+OQ9kGl/26NkS59/0e6e1lWJe/H+19CQqK7JUpzPt0at/fP8bwv+ps6Wh4qOz6g86YV2VlKOka5NQY98j2O+L18TelyREPzJg55WZq6zrJ/3mRiU5aqVJaOr3V5k8Psmko7Nmm8XxoaGnoU2g71uXezN+8bW7B5n05vumLTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwv+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwLAAAAAAgzN86jJ4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAD//+GI8JI=")
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x110)
r0 = open(&(0x7f0000015300)='./bus\x00', 0x14927e, 0x0)
fallocate(r0, 0x0, 0x0, 0x1000f4)
r1 = open(&(0x7f0000015340)='./bus\x00', 0x185102, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0xc0189436, &(0x7f0000015380)={0x0, 0x4, 0x8000, 0x4, 0x4})

3.274769024s ago: executing program 6 (id=625):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x48, 0x10ad9}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x1}]}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x4c}, 0x1, 0x8100}, 0x2800804c)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
mkdirat(0xffffffffffffffff, 0x0, 0x4)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x10b)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000300)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000400), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f0000000440), 0x10106, 0x2, 0x0)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$getregset(0x4205, r5, 0x402, &(0x7f0000000480)={&(0x7f00000004c0)=""/108, 0x6c})
bind$rxrpc(r1, &(0x7f0000000540)=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @empty}}, 0x24)
listen(r1, 0x1)
sendmsg(r1, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[{0x18, 0x110, 0x1, "02"}, {0x10, 0x110, 0xe}], 0x28}, 0x0)
r6 = socket$rxrpc(0x21, 0x2, 0x2)
sendmsg(r6, &(0x7f0000000600)={&(0x7f0000000640)=@rxrpc=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @loopback}}, 0x80, 0x0, 0x0, &(0x7f00000006c0)=[{0x18, 0x110, 0x1, "01000000"}], 0x18}, 0x0)
recvmsg$can_j1939(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)}, 0x0)
semop(0x0, &(0x7f0000000400)=[{0x6, 0x9, 0x1000}, {0x4, 0x3, 0x1800}, {0x0, 0x8191}, {0x0, 0x1, 0x800}], 0x4)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000440)=[0xff, 0x6, 0x0, 0x8, 0x7fff])
semop(0x0, &(0x7f0000000740)=[{0x4, 0xbf, 0x1800}, {0x4, 0x3, 0x1800}, {0x1, 0x6, 0x1000}], 0x3)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
ioctl$BTRFS_IOC_QGROUP_CREATE(r7, 0x4010942a, &(0x7f0000000040)={0x1, 0x3aa})

2.695841563s ago: executing program 5 (id=626):
r0 = socket(0x10, 0x803, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000005800)=ANY=[@ANYBLOB="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"], &(0x7f0000005700)=""/199, 0x3e, 0xc7, 0x1}, 0x28)
r1 = syz_mount_image$btrfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x800810, &(0x7f00000000c0)={[{@commit={'commit', 0x3d, 0xdfd}}, {@noenospc_debug}, {@compress_force}, {@metadata_ratio={'metadata_ratio', 0x3d, 0x1a22a}}, {@flushoncommit}, {@datacow}, {@max_inline={'max_inline', 0x3d, [0x38, 0x31, 0x65]}}, {@nodiscard}]}, 0x1, 0x510a, &(0x7f00000005c0)="$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")
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, 0x0)
getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x8400, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0)
syz_mount_image$f2fs(&(0x7f0000000380), &(0x7f0000000480)='./file2\x00', 0x10, &(0x7f00000059c0)=ANY=[@ANYBLOB="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"/344], 0x6, 0x550f, &(0x7f0000005b40)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f000000b080)='./file1\x00', 0xc41, 0x20)
fallocate(r4, 0x20, 0x4000, 0x4000)
ioctl$FS_IOC_SETFLAGS(r3, 0x40186f40, &(0x7f00000001c0)=0x800000)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="e0000000430001002abd7000020000000a0000000800020002000000080002005d00000069000100afb96f5c0efa3afceef4e0bdc803d5b861befa98351f3c12886a70eb39506ad76561fe84e0eba821a43e59e95ea54ee04fe59ac6ada3b7c51037175e087138c2c14e53e81f2012ad996265c789b1653cf3422ff76eaecdce5653aeb194d62f92a089fe22e1000000100001002827a72b595b7b2823215b"], 0xe0}, 0x1, 0x0, 0x0, 0x81}, 0x8000002)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="64000000100037f502000000ffffffff00000000", @ANYRES32=r2, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32=0x0, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010)

2.568513056s ago: executing program 3 (id=627):
socket$packet(0x11, 0x3, 0x300)
socket$kcm(0x2, 0xa, 0x2)
preadv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/42, 0x2a}], 0x1, 0x33, 0x2000051b)

2.469958066s ago: executing program 3 (id=628):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./nfsd/threads\x00', 0x2, 0x0)
write(r0, &(0x7f00000009c0)='1', 0x1)

2.408706402s ago: executing program 3 (id=629):
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x4000)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
listen(0xffffffffffffffff, 0x5)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002"], 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x4, r1}, 0x38)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94)
r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r3 = socket(0x2d, 0x2, 0x0)
connect$netlink(r3, &(0x7f00000001c0)=@unspec={0x2d}, 0xc)
write$6lowpan_control(r2, &(0x7f0000000080)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e)
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)

2.384539785s ago: executing program 6 (id=630):
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket(0x10, 0x2, 0x0)
timerfd_create(0x8, 0x0)
write(r1, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
recvmmsg(r1, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})

803.968217ms ago: executing program 3 (id=631):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f0000000940)='tcp 2', 0x5)

668.710281ms ago: executing program 3 (id=632):
close(0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x3d6f0000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000100)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000180), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./security\x00', 0x1ff)
mount(0x0, &(0x7f0000000280)='./security\x00', &(0x7f00000002c0)='securityfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./security/ima/policy\x00', 0x1, 0x0)
write(r3, &(0x7f0000000340)='apprai', 0x6)

577.024721ms ago: executing program 6 (id=633):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x7f, 0x4d, 0x2ba8, 0x0, <r1=>0x0})
r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x1, 0x3, 0x9})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000280))
r3 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000300)={0x4008, 0x4d, 0x5})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0x1, 0x3, 0x9})
r4 = syz_open_dev$dri(&(0x7f0000000380), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000003c0)={0x200, 0x51, 0x4, 0x0, <r5=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000400)={r5})
r6 = syz_open_dev$dri(&(0x7f0000000440), 0xcaf8, 0x40000)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000480)={r1})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f00000004c0)={0x7, 0x52a1, 0x1e})
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000500)={0x1, &(0x7f0000000800)=[{0x6, 0xf, 0x0, 0x7fff8000}]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000840)={0x1, 0x4, 0xe608})
close_range(r7, 0xffffffffffffffff, 0x0)

559.238692ms ago: executing program 4 (id=634):
socket$packet(0x11, 0x2, 0x300)
syz_emit_ethernet(0x56, &(0x7f0000000e00)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0x20, 0x2b, 0x0, @remote, @local, {[@routing={0x3a, 0x2, 0x2, 0x1, 0x0, [@mcast1]}], {0x0, 0x0, 0x8}}}}}}, 0x0)

198.832729ms ago: executing program 4 (id=635):
r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r1 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$DM_DEV_CREATE(r1, 0xc138fd03, &(0x7f0000000080)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {<r2=>0x0, {'syz', 0x0, '2\x00'}}})
openat$dm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x88841, 0x0)
ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000840)={0x4, 0x0, 0x0, 0x170, 0x138, 0x1, 0x0, 0xa4400, 0x0, 0x0, @by_dev={r2}, [@snap_origin={0x0, 0x1810, 0x0, 0x38, 'snapshot-origin\x00', @ram={'/dev/ram', 0x1}}]})

198.504109ms ago: executing program 6 (id=636):
syz_usb_connect(0x1, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230820090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000640)='W', 0x1}], 0x1, 0x8000, 0x7)
close(r0)

151.700524ms ago: executing program 4 (id=637):
socket$packet(0x11, 0x3, 0x300)
socket$kcm(0x2, 0xa, 0x2)
preadv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/42, 0x2a}], 0x1, 0x33, 0x2000051b)

86.611101ms ago: executing program 5 (id=638):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)='<', 0x1)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000700)={'team0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0x300}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd], 0x0, [0x2, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}]}}]}, 0x94}, 0x1, 0x7a00}, 0x0)
recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x42, 0x0)
syz_mount_image$hfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x4000, &(0x7f0000000180)=ANY=[@ANYBLOB="71756965742c6469725f756d61736b3d30303030303030303030303030303030303030303030372c696f636861727365743d6b6f69382d722c636f6465706167653d6b6f69382d72752c71756965742c66696c655f756d61736b3d30303030303030303030303030303030303030303030362c66696c655f756d61736b3d30303030303030303030303030303030303030313236342c63726561746f723d8c10b0812c66696c655f756d61736b3d30303030303030303030303030303030303030303030322c0063458b8eded22e0b4081b59940f79211dd3e735f57164b50bdf46f8f03a49b"], 0x2, 0x379, &(0x7f0000000280)="$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")
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000600)={0x1, &(0x7f0000000640)=[{0x6, 0xc3, 0x0, 0x7fff0000}]})
umount2(&(0x7f0000000680)='.\x00', 0x2)
close_range(r5, 0xffffffffffffffff, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fsync(0xffffffffffffffff)

0s ago: executing program 4 (id=639):
setns(0xc9, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd\x00', 0x1cd)
mount(0x0, &(0x7f0000000700)='./nfsd\x00', &(0x7f0000000840)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f0000000940)='tcp 2', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./nfsd/threads\x00', 0x2, 0x0)
write(r1, &(0x7f00000009c0)='1', 0x1)

kernel console output (not intermixed with test programs):

x15c
[   47.801250][ T4941]  dump_stack+0x1c/0x5c
[   47.802138][ T4941]  should_fail_ex+0x3cc/0x524
[   47.803134][ T4941]  __should_failslab+0xc0/0x11c
[   47.804147][ T4941]  should_failslab+0x10/0x28
[   47.805156][ T4941]  slab_pre_alloc_hook+0x6c/0x31c
[   47.806321][ T4941]  kmem_cache_alloc_lru+0x60/0x284
[   47.807476][ T4941]  erofs_alloc_inode+0x2c/0x68
[   47.808451][ T4941]  iget5_locked+0xa4/0x22c
[   47.809478][ T4941]  erofs_iget+0xb4/0x21f0
[   47.810529][ T4941]  erofs_lookup+0x1ac/0x44c
[   47.811583][ T4941]  __lookup_slow+0x25c/0x38c
[   47.812668][ T4941]  lookup_slow+0x60/0x84
[   47.813671][ T4941]  walk_component+0x278/0x374
[   47.814797][ T4941]  path_lookupat+0x168/0x3f0
[   47.815829][ T4941]  filename_lookup+0x1d4/0x490
[   47.816982][ T4941]  user_path_at_empty+0x5c/0x84
[   47.818140][ T4941]  path_listxattr+0xb0/0x1b8
[   47.819203][ T4941]  __arm64_sys_llistxattr+0x80/0x94
[   47.820341][ T4941]  invoke_syscall+0x98/0x290
[   47.821345][ T4941]  el0_svc_common+0x13c/0x258
[   47.822366][ T4941]  do_el0_svc+0x5c/0x134
[   47.823301][ T4941]  el0_svc+0x58/0x12c
[   47.824199][ T4941]  el0t_64_sync_handler+0x84/0xf0
[   47.825358][ T4941]  el0t_64_sync+0x18c/0x190
[   47.876196][ T4925] F2FS-fs (loop2): Invalid SB checksum offset: 0
[   47.878704][ T4925] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[   47.882716][ T4925] F2FS-fs (loop2): invalid crc value
[   47.909197][ T4925] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[   47.946519][ T4925] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[   47.948102][ T4925] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   48.096688][ T4957] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[   48.099568][ T4957] EXT4-fs (loop3): Errors on filesystem, clearing orphan list.
[   48.101737][ T4957] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   48.128084][ T4957] EXT4-fs (loop3): re-mounted. Quota mode: writeback.
[   48.137508][ T4330] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[   48.234604][ T4331] EXT4-fs (loop3): unmounting filesystem.
[   48.583855][ T4334] Bluetooth: hci2: unexpected event 0x08 length: 23 > 4
[   48.926787][ T4979] F2FS-fs (loop1): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288)
[   48.936573][ T4979] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   48.940833][ T4979] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x35f7
[   48.946174][ T4979] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x3ffff
[   48.952302][ T4979] F2FS-fs (loop1): invalid crc value
[   48.976609][ T4979] F2FS-fs (loop1): Found nat_bits in checkpoint
[   48.995744][ T4979] F2FS-fs (loop1): Start checkpoint disabled!
[   49.016641][ T4979] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   49.018286][ T4979] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[   49.104681][ T4979] FAULT_INJECTION: forcing a failure.
[   49.104681][ T4979] name failslab, interval 1, probability 0, space 0, times 0
[   49.108355][ T4979] CPU: 1 PID: 4979 Comm: syz.1.116 Not tainted syzkaller #0
[   49.109925][ T4979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   49.112029][ T4979] Call trace:
[   49.112680][ T4979]  dump_backtrace+0x1c4/0x1f0
[   49.113697][ T4979]  show_stack+0x2c/0x3c
[   49.114636][ T4979]  __dump_stack+0x30/0x40
[   49.115448][ T4979]  dump_stack_lvl+0xf4/0x15c
[   49.116470][ T4979]  dump_stack+0x1c/0x5c
[   49.117409][ T4979]  should_fail_ex+0x3cc/0x524
[   49.118436][ T4979]  __should_failslab+0xc0/0x11c
[   49.119526][ T4979]  should_failslab+0x10/0x28
[   49.120534][ T4979]  __kmem_cache_alloc_node+0x7c/0x318
[   49.121727][ T4979]  __kmalloc_node+0xc8/0x184
[   49.122768][ T4979]  kvmalloc_node+0x88/0x1d4
[   49.123717][ T4979]  f2fs_kvzalloc+0x11c/0x2b0
[   49.124775][ T4979]  __exchange_data_block+0x264/0x1fa0
[   49.125954][ T4979]  f2fs_insert_range+0x298/0x34c
[   49.127015][ T4979]  f2fs_fallocate+0x3e8/0x8c4
[   49.127967][ T4979]  vfs_fallocate+0x4a4/0x5fc
[   49.128940][ T4979]  __arm64_sys_fallocate+0xc4/0x114
[   49.130137][ T4979]  invoke_syscall+0x98/0x290
[   49.131182][ T4979]  el0_svc_common+0x13c/0x258
[   49.132251][ T4979]  do_el0_svc+0x5c/0x134
[   49.133214][ T4979]  el0_svc+0x58/0x12c
[   49.134150][ T4979]  el0t_64_sync_handler+0x84/0xf0
[   49.135342][ T4979]  el0t_64_sync+0x18c/0x190
[   49.460069][    T9] kworker/u4:0: attempt to access beyond end of device
[   49.460069][    T9] loop1: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[   49.502867][ T4995] set_capacity_and_notify: 4 callbacks suppressed
[   49.502874][ T4995] loop2: detected capacity change from 0 to 8
[   49.524407][ T4995] squashfs image failed sanity check
[   49.554191][ T4995] FAULT_INJECTION: forcing a failure.
[   49.554191][ T4995] name failslab, interval 1, probability 0, space 0, times 0
[   49.557240][ T4995] CPU: 1 PID: 4995 Comm: syz.2.119 Not tainted syzkaller #0
[   49.558820][ T4995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   49.561052][ T4995] Call trace:
[   49.561756][ T4995]  dump_backtrace+0x1c4/0x1f0
[   49.562800][ T4995]  show_stack+0x2c/0x3c
[   49.563756][ T4995]  __dump_stack+0x30/0x40
[   49.564797][ T4995]  dump_stack_lvl+0xf4/0x15c
[   49.565906][ T4995]  dump_stack+0x1c/0x5c
[   49.566885][ T4995]  should_fail_ex+0x3cc/0x524
[   49.567896][ T4995]  __should_failslab+0xc0/0x11c
[   49.568943][ T4995]  should_failslab+0x10/0x28
[   49.569937][ T4995]  kmem_cache_alloc+0x88/0x310
[   49.571025][ T4995]  skb_clone+0x194/0x308
[   49.572025][ T4995]  netlink_broadcast+0x580/0x1054
[   49.573205][ T4995]  kobject_uevent_net_broadcast+0x32c/0x528
[   49.574592][ T4995]  kobject_uevent_env+0x550/0x88c
[   49.575757][ T4995]  disk_force_media_change+0x168/0x29c
[   49.576962][ T4995]  __loop_clr_fd+0x2f0/0x564
[   49.577975][ T4995]  lo_ioctl+0x1018/0x18a8
[   49.578845][ T4995]  blkdev_ioctl+0x654/0xb74
[   49.579760][ T4995]  __arm64_sys_ioctl+0x14c/0x1c8
[   49.580840][ T4995]  invoke_syscall+0x98/0x290
[   49.581906][ T4995]  el0_svc_common+0x13c/0x258
[   49.583021][ T4995]  do_el0_svc+0x5c/0x134
[   49.583991][ T4995]  el0_svc+0x58/0x12c
[   49.584924][ T4995]  el0t_64_sync_handler+0x84/0xf0
[   49.586105][ T4995]  el0t_64_sync+0x18c/0x190
[   49.628437][ T4997] loop1: detected capacity change from 0 to 64
[   49.650076][ T4997] Zero length message leads to an empty skb
[   49.992950][ T5011] FAULT_INJECTION: forcing a failure.
[   49.992950][ T5011] name failslab, interval 1, probability 0, space 0, times 0
[   49.995930][ T5011] CPU: 0 PID: 5011 Comm: syz.2.125 Not tainted syzkaller #0
[   49.997580][ T5011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   49.999992][ T5011] Call trace:
[   50.000748][ T5011]  dump_backtrace+0x1c4/0x1f0
[   50.001746][ T5011]  show_stack+0x2c/0x3c
[   50.002617][ T5011]  __dump_stack+0x30/0x40
[   50.003603][ T5011]  dump_stack_lvl+0xf4/0x15c
[   50.004668][ T5011]  dump_stack+0x1c/0x5c
[   50.005696][ T5011]  should_fail_ex+0x3cc/0x524
[   50.006798][ T5011]  __should_failslab+0xc0/0x11c
[   50.008007][ T5011]  should_failslab+0x10/0x28
[   50.009113][ T5011]  slab_pre_alloc_hook+0x6c/0x31c
[   50.010308][ T5011]  kmem_cache_alloc_lru+0x60/0x284
[   50.011473][ T5011]  __d_alloc+0x40/0x68c
[   50.012319][ T5011]  d_alloc_pseudo+0x28/0x8c
[   50.013381][ T5011]  alloc_file_pseudo+0xd8/0x1f4
[   50.014511][ T5011]  __shmem_file_setup+0x1a0/0x26c
[   50.015654][ T5011]  shmem_file_setup+0x40/0x54
[   50.016722][ T5011]  __arm64_sys_memfd_create+0x2d8/0x458
[   50.018053][ T5011]  invoke_syscall+0x98/0x290
[   50.019138][ T5011]  el0_svc_common+0x13c/0x258
[   50.020249][ T5011]  do_el0_svc+0x5c/0x134
[   50.021185][ T5011]  el0_svc+0x58/0x12c
[   50.022001][ T5011]  el0t_64_sync_handler+0x84/0xf0
[   50.023194][ T5011]  el0t_64_sync+0x18c/0x190
[   50.024278][    C0] vkms_vblank_simulate: vblank timer overrun
[   50.066360][ T5015] loop3: detected capacity change from 0 to 1024
[   50.076501][ T5015] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[   50.097047][ T5015] EXT4-fs (loop3): Errors on filesystem, clearing orphan list.
[   50.099257][ T5015] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   50.121627][ T5015] EXT4-fs (loop3): re-mounted. Quota mode: writeback.
[   50.178911][ T4331] EXT4-fs (loop3): unmounting filesystem.
[   50.190311][ T5009] loop4: detected capacity change from 0 to 40427
[   50.192450][ T5009] F2FS-fs (loop4): Invalid SB checksum offset: 0
[   50.194076][ T5009] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[   50.196564][ T5009] F2FS-fs (loop4): invalid crc value
[   50.231727][ T5024] loop3: detected capacity change from 0 to 1024
[   50.237003][ T5009] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[   50.263561][ T5009] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[   50.265032][ T5009] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   50.281770][ T5024] hfsplus: inconsistency in B*Tree (1,0,1,0,1)
[   50.288954][ T5024] hfsplus: inconsistency in B*Tree (1,0,1,0,1)
[   50.342711][ T1575] hfsplus: b-tree write err: -5, ino 25
[   50.347065][ T1575] hfsplus: b-tree write err: -5, ino 4
[   50.348326][ T1575] hfsplus: b-tree write err: -5, ino 2
[   50.349880][ T1575] hfsplus: b-tree write err: -5, ino 26
[   50.351353][ T1575] hfsplus: b-tree write err: -5, ino 27
[   50.443932][ T5038] jffs2: notice: (5038) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   50.612581][ T5044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   50.632703][ T5044] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   50.638233][ T5048] loop4: detected capacity change from 0 to 1024
[   50.642089][   T24] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   50.644853][   T24] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   50.647464][ T5046] device-mapper: table: 248:1: thin-pool: target type may not be included in a read-only table (-EINVAL)
[   50.649672][ T5046] device-mapper: ioctl: error adding target to table
[   50.659435][ T5048] hfsplus: Filesystem is marked locked, mounting read-only.
[   50.691557][ T4334] Bluetooth: hci3: unexpected event 0x08 length: 23 > 4
[   50.846913][ T5058] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[   50.846913][ T5058] The task syz.4.132 (5058) triggered the difference, watch for misbehavior.
[   50.935747][ T5044] hid-generic 0000:0000:0000.0003: pid 5044 passed too large report
[   51.266187][ T5063] loop2: detected capacity change from 0 to 1024
[   51.279560][ T5063] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[   51.288462][ T5063] EXT4-fs (loop2): Errors on filesystem, clearing orphan list.
[   51.292566][ T5063] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   51.314408][ T5063] EXT4-fs (loop2): re-mounted. Quota mode: writeback.
[   51.358215][ T5066] netlink: 188 bytes leftover after parsing attributes in process `syz.0.140'.
[   51.382671][ T4335] EXT4-fs (loop2): unmounting filesystem.
[   51.391967][ T5066] loop0: detected capacity change from 0 to 8
[   51.448162][ T5068] loop2: detected capacity change from 0 to 4096
[   51.461267][ T5068] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   51.530937][   T11] Bluetooth: hci5: Frame reassembly failed (-84)
[   52.019471][ T5080] device-mapper: verity: sha512 using implementation "sha512-ce"
[   52.021058][ T5080] device-mapper: table: 248:2: verity: Invalid salt (-EINVAL)
[   52.022568][ T5080] device-mapper: ioctl: error adding target to table
[   52.088535][ T5078] loop3: detected capacity change from 0 to 32768
[   52.112372][ T5076] F2FS-fs (loop1): Invalid SB checksum offset: 0
[   52.116233][ T5076] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[   52.120604][ T5076] F2FS-fs (loop1): invalid crc value
[   52.127671][ T5078] XFS (loop3): Mounting V5 Filesystem
[   52.133998][ T5076] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[   52.161752][ T5078] XFS (loop3): Ending clean mount
[   52.184525][ T5076] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[   52.186108][ T5076] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   52.240350][ T4331] XFS (loop3): Unmounting Filesystem
[   52.832109][ T4332] Bluetooth: hci3: unexpected event 0x08 length: 23 > 4
[   52.972672][ T5115] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[   52.977408][ T5115] EXT4-fs (loop3): Errors on filesystem, clearing orphan list.
[   52.979334][ T5115] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   52.989813][ T5115] EXT4-fs (loop3): re-mounted. Quota mode: writeback.
[   53.037480][ T4331] EXT4-fs (loop3): unmounting filesystem.
[   53.068018][ T5118] FAULT_INJECTION: forcing a failure.
[   53.068018][ T5118] name failslab, interval 1, probability 0, space 0, times 0
[   53.075287][ T5118] CPU: 1 PID: 5118 Comm: syz.3.153 Not tainted syzkaller #0
[   53.076744][ T5118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   53.078908][ T5118] Call trace:
[   53.079628][ T5118]  dump_backtrace+0x1c4/0x1f0
[   53.080665][ T5118]  show_stack+0x2c/0x3c
[   53.081548][ T5118]  __dump_stack+0x30/0x40
[   53.082558][ T5118]  dump_stack_lvl+0xf4/0x15c
[   53.083665][ T5118]  dump_stack+0x1c/0x5c
[   53.084716][ T5118]  should_fail_ex+0x3cc/0x524
[   53.085798][ T5118]  __should_failslab+0xc0/0x11c
[   53.086913][ T5118]  should_failslab+0x10/0x28
[   53.087991][ T5118]  __kmem_cache_alloc_node+0x7c/0x318
[   53.089280][ T5118]  __kmalloc_node+0xc8/0x184
[   53.090368][ T5118]  kvmalloc_node+0x88/0x1d4
[   53.091442][ T5118]  dm_ctl_ioctl+0x5f8/0xf1c
[   53.092532][ T5118]  __arm64_sys_ioctl+0x14c/0x1c8
[   53.093685][ T5118]  invoke_syscall+0x98/0x290
[   53.094749][ T5118]  el0_svc_common+0x13c/0x258
[   53.095869][ T5118]  do_el0_svc+0x5c/0x134
[   53.096831][ T5118]  el0_svc+0x58/0x12c
[   53.097738][ T5118]  el0t_64_sync_handler+0x84/0xf0
[   53.098972][ T5118]  el0t_64_sync+0x18c/0x190
[   53.129183][ T5107] F2FS-fs (loop1): Found nat_bits in checkpoint
[   53.166060][ T5107] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   53.187376][ T5127] ima: Unable to open file: /easure uid>+L'f&vd¹Kuì\|¤RÑ>(/:}ùÆ”Šîö~A\poÜ%kèÎéEâCgIƒídä1°»wï@‘GGyÁP0E‹eìÆG9C]4ðÖ²M\AýlôpGõø¢ŸbŽžÖ	 (-2)
[   53.187566][ T5126] ima: policy update failed
[   53.191830][   T27] audit: type=1802 audit(53.170:7): pid=5126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.155" res=0 errno=0
[   53.249934][ T5132] FAULT_INJECTION: forcing a failure.
[   53.249934][ T5132] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   53.252624][ T5132] CPU: 1 PID: 5132 Comm: syz.4.157 Not tainted syzkaller #0
[   53.254377][ T5132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   53.256678][ T5132] Call trace:
[   53.257424][ T5132]  dump_backtrace+0x1c4/0x1f0
[   53.258487][ T5132]  show_stack+0x2c/0x3c
[   53.259405][ T5132]  __dump_stack+0x30/0x40
[   53.260350][ T5132]  dump_stack_lvl+0xf4/0x15c
[   53.261320][ T5132]  dump_stack+0x1c/0x5c
[   53.262219][ T5132]  should_fail_ex+0x3cc/0x524
[   53.263302][ T5132]  should_fail+0x14/0x24
[   53.264291][ T5132]  should_fail_usercopy+0x20/0x30
[   53.265472][ T5132]  copyin+0x2c/0x148
[   53.266356][ T5132]  _copy_from_iter+0x404/0xf98
[   53.267455][ T5132]  netlink_sendmsg+0x614/0x9d8
[   53.268639][ T5132]  ____sys_sendmsg+0x588/0x90c
[   53.269823][ T5132]  __sys_sendmsg+0x288/0x374
[   53.270908][ T5132]  __arm64_sys_sendmsg+0x80/0x94
[   53.272136][ T5132]  invoke_syscall+0x98/0x290
[   53.273249][ T5132]  el0_svc_common+0x13c/0x258
[   53.274361][ T5132]  do_el0_svc+0x5c/0x134
[   53.275343][ T5132]  el0_svc+0x58/0x12c
[   53.276339][ T5132]  el0t_64_sync_handler+0x84/0xf0
[   53.277556][ T5132]  el0t_64_sync+0x18c/0x190
[   53.296950][ T4330] syz-executor: attempt to access beyond end of device
[   53.296950][ T4330] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   53.359779][ T5135] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   53.369917][ T5135] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (52061!=20869)
[   53.371795][ T5135] EXT4-fs (loop4): external journal device major/minor numbers have changed
[   53.376351][ T5135] EXT4-fs (loop4): filesystem has both journal inode and journal device!
[   53.407286][ T5136] tipc: Started in network mode
[   53.408336][ T5136] tipc: Node identity 7f000001, cluster identity 4711
[   53.409929][ T5136] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   53.416875][ T5135] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[   53.418990][ T5135] tipc: Enabled bearer <udp:syz0>, priority 10
[   53.533277][ T4334] Bluetooth: hci5: Opcode 0x1003 failed: -110
[   53.988211][ T5139] F2FS-fs (loop4): Invalid SB checksum offset: 0
[   53.990823][ T5139] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[   53.994131][ T5139] F2FS-fs (loop4): invalid crc value
[   54.003503][ T5139] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[   54.013738][ T4335] EXT4-fs (loop2): unmounting filesystem.
[   54.046364][ T5139] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[   54.050982][ T5139] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   54.069608][ T5152] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended
[   54.072531][ T5152] EXT4-fs (loop1): Errors on filesystem, clearing orphan list.
[   54.074652][ T5152] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   54.089186][ T5152] EXT4-fs (loop1): re-mounted. Quota mode: writeback.
[   54.136389][ T4330] EXT4-fs (loop1): unmounting filesystem.
[   54.616920][ T5161] netlink: 3 bytes leftover after parsing attributes in process `syz.2.165'.
[   54.625215][   T24] tipc: Node number set to 2130706433
[   54.662084][ T5171] FAULT_INJECTION: forcing a failure.
[   54.662084][ T5171] name failslab, interval 1, probability 0, space 0, times 0
[   54.665005][ T5171] CPU: 1 PID: 5171 Comm: syz.4.167 Not tainted syzkaller #0
[   54.666402][ T5171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   54.668513][ T5171] Call trace:
[   54.669225][ T5171]  dump_backtrace+0x1c4/0x1f0
[   54.670250][ T5171]  show_stack+0x2c/0x3c
[   54.671145][ T5171]  __dump_stack+0x30/0x40
[   54.672089][ T5171]  dump_stack_lvl+0xf4/0x15c
[   54.673049][ T5171]  dump_stack+0x1c/0x5c
[   54.673951][ T5171]  should_fail_ex+0x3cc/0x524
[   54.675046][ T5171]  __should_failslab+0xc0/0x11c
[   54.676214][ T5171]  should_failslab+0x10/0x28
[   54.677308][ T5171]  slab_pre_alloc_hook+0x6c/0x31c
[   54.678513][ T5171]  kmem_cache_alloc_lru+0x60/0x284
[   54.679740][ T5171]  __d_alloc+0x40/0x68c
[   54.680743][ T5171]  d_alloc_pseudo+0x28/0x8c
[   54.681827][ T5171]  alloc_file_pseudo+0xd8/0x1f4
[   54.682923][ T5171]  __shmem_file_setup+0x1a0/0x26c
[   54.683978][ T5171]  shmem_file_setup+0x40/0x54
[   54.685000][ T5171]  __arm64_sys_memfd_create+0x2d8/0x458
[   54.686366][ T5171]  invoke_syscall+0x98/0x290
[   54.687442][ T5171]  el0_svc_common+0x13c/0x258
[   54.688566][ T5171]  do_el0_svc+0x5c/0x134
[   54.689633][ T5171]  el0_svc+0x58/0x12c
[   54.690623][ T5171]  el0t_64_sync_handler+0x84/0xf0
[   54.691869][ T5171]  el0t_64_sync+0x18c/0x190
[   55.000715][ T5175] set_capacity_and_notify: 8 callbacks suppressed
[   55.000724][ T5175] loop3: detected capacity change from 0 to 40427
[   55.006164][ T5177] loop4: detected capacity change from 0 to 40427
[   55.007572][ T5173] loop2: detected capacity change from 0 to 40427
[   55.010044][ T5173] F2FS-fs (loop2): build fault injection attr: rate: 14, type: 0x3ffff
[   55.012168][ T5173] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x30e4
[   55.014249][ T5173] F2FS-fs (loop2): invalid crc value
[   55.015689][ T5175] F2FS-fs (loop3): Wrong NAT boundary, start(2560) end(3584) blocks(0)
[   55.015690][ T5177] F2FS-fs (loop4): build fault injection attr: rate: 14, type: 0x3ffff
[   55.017729][ T5175] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[   55.019076][ T5177] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x30e4
[   55.027708][ T5175] F2FS-fs (loop3): invalid crc value
[   55.029817][ T5173] F2FS-fs (loop2): Found nat_bits in checkpoint
[   55.034808][ T5173] F2FS-fs (loop2) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x57c/0x8b8
[   55.039970][ T5177] F2FS-fs (loop4): invalid crc value
[   55.041454][ T5173] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   55.047054][ T5173] F2FS-fs (loop2) : inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x608/0x1b5c
[   55.050603][ T5173] F2FS-fs (loop2) : inject page alloc in f2fs_grab_cache_page of f2fs_get_read_data_page+0x100/0x60c
[   55.055795][ T5173] F2FS-fs (loop2) : inject checkpoint error in f2fs_balance_fs of f2fs_convert_inline_inode+0x574/0x5c8
[   55.061006][ T4332] Bluetooth: hci3: unexpected event 0x08 length: 23 > 4
[   55.062469][ T5177] F2FS-fs (loop4): Found nat_bits in checkpoint
[   55.067810][ T5175] F2FS-fs (loop3): Found nat_bits in checkpoint
[   55.078544][ T5177] F2FS-fs (loop4) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x57c/0x8b8
[   55.138146][ T5191] FAULT_INJECTION: forcing a failure.
[   55.138146][ T5191] name failslab, interval 1, probability 0, space 0, times 0
[   55.140657][ T5191] CPU: 1 PID: 5191 Comm: syz.2.168 Not tainted syzkaller #0
[   55.142237][ T5191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   55.144396][ T5191] Call trace:
[   55.145054][ T5191]  dump_backtrace+0x1c4/0x1f0
[   55.146146][ T5191]  show_stack+0x2c/0x3c
[   55.146191][ T5175] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[   55.147126][ T5191]  __dump_stack+0x30/0x40
[   55.147146][ T5191]  dump_stack_lvl+0xf4/0x15c
[   55.147153][ T5191]  dump_stack+0x1c/0x5c
[   55.148682][ T5175] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   55.149646][ T5191]  should_fail_ex+0x3cc/0x524
[   55.152857][ T5175] syz.3.169: attempt to access beyond end of device
[   55.152857][ T5175] loop3: rw=2049, sector=45096, nr_sectors = 128 limit=40427
[   55.153214][ T5191]  __should_failslab+0xc0/0x11c
[   55.153234][ T5191]  should_failslab+0x10/0x28
[   55.153246][ T5191]  __kmem_cache_alloc_node+0x7c/0x318
[   55.153253][ T5191]  kmalloc_trace+0x48/0x94
[   55.153259][ T5191]  alloc_workqueue+0x1b4/0xeec
[   55.153264][ T5191]  loop_configure+0x538/0xf28
[   55.153272][ T5191]  lo_ioctl+0xb3c/0x18a8
[   55.153279][ T5191]  blkdev_ioctl+0x654/0xb74
[   55.153284][ T5191]  __arm64_sys_ioctl+0x14c/0x1c8
[   55.153291][ T5191]  invoke_syscall+0x98/0x290
[   55.153298][ T5191]  el0_svc_common+0x13c/0x258
[   55.158399][ T5177] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   55.159408][ T5191]  do_el0_svc+0x5c/0x134
[   55.163822][ T5177] F2FS-fs (loop4) : inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x608/0x1b5c
[   55.163906][ T5191]  el0_svc+0x58/0x12c
[   55.175005][ T5191]  el0t_64_sync_handler+0x84/0xf0
[   55.176160][ T5191]  el0t_64_sync+0x18c/0x190
[   55.191744][ T5195] loop1: detected capacity change from 0 to 16
[   55.197259][ T5177] F2FS-fs (loop4) : inject page alloc in f2fs_grab_cache_page of f2fs_get_read_data_page+0x100/0x60c
[   55.204235][ T5195] erofs: (device loop1): mounted with root inode @ nid 36.
[   55.210203][ T5177] F2FS-fs (loop4) : inject checkpoint error in f2fs_balance_fs of f2fs_convert_inline_inode+0x574/0x5c8
[   55.223492][ T5195] overlayfs: './bus' not a directory
[   55.247320][ T4331] syz-executor: attempt to access beyond end of device
[   55.247320][ T4331] loop3: rw=2049, sector=45224, nr_sectors = 8 limit=40427
[   55.349020][ T5198] loop1: detected capacity change from 0 to 1024
[   55.367644][ T5198] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended
[   55.388893][ T5198] EXT4-fs (loop1): Errors on filesystem, clearing orphan list.
[   55.390544][ T5198] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   55.400984][ T5198] EXT4-fs (loop1): re-mounted. Quota mode: writeback.
[   55.475981][ T4330] EXT4-fs (loop1): unmounting filesystem.
[   55.543262][ T5208] loop4: detected capacity change from 0 to 2048
[   56.711722][ T5214] FAULT_INJECTION: forcing a failure.
[   56.711722][ T5214] name failslab, interval 1, probability 0, space 0, times 0
[   56.715095][ T5214] CPU: 1 PID: 5214 Comm: syz.0.179 Not tainted syzkaller #0
[   56.716599][ T5214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   56.718576][ T5214] Call trace:
[   56.719248][ T5214]  dump_backtrace+0x1c4/0x1f0
[   56.720211][ T5214]  show_stack+0x2c/0x3c
[   56.721044][ T5214]  __dump_stack+0x30/0x40
[   56.721998][ T5214]  dump_stack_lvl+0xf4/0x15c
[   56.723012][ T5214]  dump_stack+0x1c/0x5c
[   56.723998][ T5214]  should_fail_ex+0x3cc/0x524
[   56.725113][ T5214]  __should_failslab+0xc0/0x11c
[   56.726284][ T5214]  should_failslab+0x10/0x28
[   56.727364][ T5214]  __kmem_cache_alloc_node+0x7c/0x318
[   56.728626][ T5214]  __kmalloc+0xc4/0x180
[   56.729594][ T5214]  tomoyo_encode+0x260/0x484
[   56.730657][ T5214]  tomoyo_realpath_from_path+0x4b4/0x508
[   56.731907][ T5214]  tomoyo_path_number_perm+0x1c4/0x540
[   56.733136][ T5214]  tomoyo_file_ioctl+0x2c/0x3c
[   56.734230][ T5214]  security_file_ioctl+0x80/0xbc
[   56.735357][ T5214]  __arm64_sys_ioctl+0xa8/0x1c8
[   56.736471][ T5214]  invoke_syscall+0x98/0x290
[   56.737510][ T5214]  el0_svc_common+0x13c/0x258
[   56.738594][ T5214]  do_el0_svc+0x5c/0x134
[   56.739599][ T5214]  el0_svc+0x58/0x12c
[   56.740506][ T5214]  el0t_64_sync_handler+0x84/0xf0
[   56.741670][ T5214]  el0t_64_sync+0x18c/0x190
[   56.749517][ T5208] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   56.821936][ T5214] ERROR: Out of memory at tomoyo_realpath_from_path.
[   56.933276][ T5215] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[   57.326287][ T5204] loop2: detected capacity change from 0 to 40427
[   57.332449][ T5204] F2FS-fs (loop2): build fault injection attr: rate: 14, type: 0x3ffff
[   57.335416][ T5204] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x30e4
[   57.339531][ T5204] F2FS-fs (loop2): invalid crc value
[   57.376054][ T5212] loop1: detected capacity change from 0 to 40427
[   57.392435][ T5212] F2FS-fs (loop1): Invalid SB checksum offset: 0
[   57.392794][ T5204] F2FS-fs (loop2): Found nat_bits in checkpoint
[   57.393938][ T5212] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[   57.398666][ T4340] EXT4-fs (loop4): unmounting filesystem.
[   57.417157][ T5212] F2FS-fs (loop1): invalid crc value
[   57.417893][ T5204] F2FS-fs (loop2) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x57c/0x8b8
[   57.432023][ T5204] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   57.437303][ T5204] F2FS-fs (loop2) : inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x608/0x1b5c
[   57.440997][ T5204] F2FS-fs (loop2) : inject page alloc in f2fs_grab_cache_page of f2fs_get_read_data_page+0x100/0x60c
[   57.447284][ T5204] F2FS-fs (loop2) : inject checkpoint error in f2fs_balance_fs of f2fs_convert_inline_inode+0x574/0x5c8
[   58.217985][ T5212] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[   58.253604][ T5212] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[   58.255236][ T5212] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   58.261725][ T5244] 9pnet_fd: Insufficient options for proto=fd
[   58.374917][ T5246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   58.376764][ T5246] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   58.391190][ T5244] loop3: detected capacity change from 0 to 32768
[   58.394173][ T5244] (syz.3.185,5244,1):ocfs2_parse_options:1446 ERROR: Unrecognized mount option "heartbKat=none" or missing value
[   58.397043][ T5244] (syz.3.185,5244,1):ocfs2_fill_super:1176 ERROR: status = -22
[   58.443078][ T5249] loop2: detected capacity change from 0 to 2048
[   58.449048][ T5249] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found!
[   58.451322][ T5249] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found!
[   58.456761][ T5249] UDF-fs: Scanning with blocksize 512 failed
[   58.479668][ T5248] EXT4-fs: inline encryption not supported
[   58.484739][ T5249] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[   58.486332][ T5249] UDF-fs: Scanning with blocksize 1024 failed
[   58.496292][ T5248] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[   58.504361][ T5249] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[   58.510573][ T5249] UDF-fs: Scanning with blocksize 2048 failed
[   58.518666][ T5248] EXT4-fs error (device loop4): ext4_iget_extra_inode:4766: inode #15: comm syz.4.187: corrupted in-inode xattr
[   58.521546][ T5248] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.187: couldn't read orphan inode 15 (err -117)
[   58.524907][ T5249] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=385, location=385
[   58.529290][ T5248] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   58.535649][ T5249] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[   58.537304][ T5249] UDF-fs: Scanning with blocksize 4096 failed
[   58.538672][ T5249] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1)
[   58.539728][ T5244] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   58.568602][ T5248] netlink: 'syz.4.187': attribute type 13 has an invalid length.
[   58.590849][ T4340] EXT4-fs (loop4): unmounting filesystem.
[   58.635806][ T4332] Bluetooth: hci2: unexpected event 0x08 length: 23 > 4
[   58.662329][ T5258] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended
[   58.666670][ T5258] EXT4-fs (loop4): Errors on filesystem, clearing orphan list.
[   58.668770][ T5258] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   58.702008][ T5258] EXT4-fs (loop4): re-mounted. Quota mode: writeback.
[   58.955651][ T4340] EXT4-fs (loop4): unmounting filesystem.
[   59.088645][ T5267] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.192 (5267)
[   59.093075][ T5267] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   59.096257][ T5267] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm
[   59.097905][ T5267] BTRFS info (device loop0): using free space tree
[   59.195299][ T5267] BTRFS info (device loop0): enabling ssd optimizations
[   59.229241][ T4336] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   59.431135][ T5302] netlink: 168 bytes leftover after parsing attributes in process `syz.3.197'.
[   60.342566][ T5310] set_capacity_and_notify: 5 callbacks suppressed
[   60.342575][ T5310] loop3: detected capacity change from 0 to 40427
[   60.349644][ T5310] F2FS-fs (loop3): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288)
[   60.351571][ T5310] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   60.353945][ T5310] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x35f7
[   60.355791][ T5310] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x3ffff
[   60.358266][ T5310] F2FS-fs (loop3): invalid crc value
[   60.359487][ T5323] loop4: detected capacity change from 0 to 1024
[   60.363086][ T5310] F2FS-fs (loop3): Found nat_bits in checkpoint
[   60.369040][ T5323] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended
[   60.371530][ T5323] EXT4-fs (loop4): Errors on filesystem, clearing orphan list.
[   60.376900][ T5323] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   60.676580][ T5310] F2FS-fs (loop3): Start checkpoint disabled!
[   60.680948][ T5310] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   60.682934][ T5323] EXT4-fs (loop4): re-mounted. Quota mode: writeback.
[   60.685826][ T5310] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[   60.711199][ T5306] loop2: detected capacity change from 0 to 40427
[   60.721050][ T5306] F2FS-fs (loop2): Invalid SB checksum offset: 0
[   60.722182][ T5306] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[   60.726075][ T5306] F2FS-fs (loop2): invalid crc value
[   60.746909][ T4340] EXT4-fs (loop4): unmounting filesystem.
[   60.751487][ T4504] kworker/u4:6: attempt to access beyond end of device
[   60.751487][ T4504] loop3: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[   60.768509][ T5306] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[   60.796966][ T5306] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[   60.798344][ T5306] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   60.858962][ T5344] netlink: 'syz.1.206': attribute type 1 has an invalid length.
[   60.860987][ T5344] netlink: 'syz.1.206': attribute type 12 has an invalid length.
[   60.870719][ T5344] netlink: 224 bytes leftover after parsing attributes in process `syz.1.206'.
[   60.875367][ T5344] netlink: 'syz.1.206': attribute type 1 has an invalid length.
[   60.879255][ T5344] netlink: 'syz.1.206': attribute type 12 has an invalid length.
[   60.898213][ T5344] netlink: 224 bytes leftover after parsing attributes in process `syz.1.206'.
[   60.903726][ T5344] netlink: 'syz.1.206': attribute type 1 has an invalid length.
[   60.905341][ T5344] netlink: 'syz.1.206': attribute type 12 has an invalid length.
[   60.906883][ T5344] netlink: 224 bytes leftover after parsing attributes in process `syz.1.206'.
[   60.916113][ T5344] netlink: 'syz.1.206': attribute type 1 has an invalid length.
[   60.917854][ T5344] netlink: 'syz.1.206': attribute type 12 has an invalid length.
[   60.919472][ T5344] netlink: 224 bytes leftover after parsing attributes in process `syz.1.206'.
[   60.926479][ T5353] loop3: detected capacity change from 0 to 512
[   60.928438][ T5344] netlink: 'syz.1.206': attribute type 1 has an invalid length.
[   60.929980][ T5344] netlink: 224 bytes leftover after parsing attributes in process `syz.1.206'.
[   60.932024][ T5353] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   60.934620][ T5344] netlink: 224 bytes leftover after parsing attributes in process `syz.1.206'.
[   60.936436][ T4332] Bluetooth: hci4: unexpected event 0x08 length: 23 > 4
[   60.936695][ T5344] netlink: 224 bytes leftover after parsing attributes in process `syz.1.206'.
[   60.941752][ T5344] netlink: 224 bytes leftover after parsing attributes in process `syz.1.206'.
[   60.953409][ T5344] netlink: 224 bytes leftover after parsing attributes in process `syz.1.206'.
[   60.957581][ T5353] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.204: invalid indirect mapped block 32768 (level 2)
[   60.961066][ T5344] netlink: 224 bytes leftover after parsing attributes in process `syz.1.206'.
[   60.973614][ T5353] EXT4-fs (loop3): 1 orphan inode deleted
[   60.978326][ T5353] EXT4-fs (loop3): 1 truncate cleaned up
[   60.979883][ T5353] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   61.069732][ T4331] EXT4-fs (loop3): unmounting filesystem.
[   61.171801][ T5363] loop1: detected capacity change from 0 to 512
[   61.261852][ T5363] EXT4-fs (loop1): Test dummy encryption mode enabled
[   61.266498][ T5363] EXT4-fs error (device loop1): ext4_orphan_get:1409: inode #15: comm syz.1.211: inode has both inline data and extents flags
[   61.269278][ T5363] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.211: couldn't read orphan inode 15 (err -117)
[   61.272773][ T5363] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   61.336845][ T4330] EXT4-fs (loop1): unmounting filesystem.
[   61.762727][ T5393] loop0: detected capacity change from 0 to 1024
[   61.780664][ T5393] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended
[   61.850926][ T5393] EXT4-fs (loop0): Errors on filesystem, clearing orphan list.
[   61.856136][ T5397] loop3: detected capacity change from 0 to 512
[   61.858004][ T5393] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   61.870146][ T5397] EXT2-fs (loop3): DAX enabled. Warning: EXPERIMENTAL, use at your own risk
[   61.878922][ T5397] EXT2-fs (loop3): DAX unsupported by block device. Turning off DAX.
[   61.881164][ T5393] EXT4-fs (loop0): re-mounted. Quota mode: writeback.
[   61.889418][ T5397] EXT2-fs (loop3): warning: mounting ext3 filesystem as ext2
[   62.222258][ T4336] EXT4-fs (loop0): unmounting filesystem.
[   62.283108][ T5411] random: crng reseeded on system resumption
[   62.417033][ T5401] loop4: detected capacity change from 0 to 40427
[   62.419471][ T5401] F2FS-fs (loop4): Invalid SB checksum offset: 0
[   62.421073][ T5401] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[   62.424638][ T5401] F2FS-fs (loop4): invalid crc value
[   62.438932][ T5401] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[   62.500756][ T5401] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[   62.502555][ T5401] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   62.862512][ T3903] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[   62.867614][ T3903] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[   62.910153][ T5294] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[   62.936171][ T5438] FAULT_INJECTION: forcing a failure.
[   62.936171][ T5438] name failslab, interval 1, probability 0, space 0, times 0
[   62.938535][ T5438] CPU: 0 PID: 5438 Comm: syz.1.227 Not tainted syzkaller #0
[   62.939990][ T5438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   62.942114][ T5438] Call trace:
[   62.942864][ T5438]  dump_backtrace+0x1c4/0x1f0
[   62.943961][ T5438]  show_stack+0x2c/0x3c
[   62.944890][ T5438]  __dump_stack+0x30/0x40
[   62.945829][ T5438]  dump_stack_lvl+0xf4/0x15c
[   62.946839][ T5438]  dump_stack+0x1c/0x5c
[   62.947752][ T5438]  should_fail_ex+0x3cc/0x524
[   62.948799][ T5438]  __should_failslab+0xc0/0x11c
[   62.949820][ T5438]  should_failslab+0x10/0x28
[   62.950767][ T5438]  kmem_cache_alloc+0x88/0x310
[   62.951776][ T5438]  skb_clone+0x194/0x308
[   62.952637][ T5438]  packet_rcv+0x4c0/0x1084
[   62.953572][ T5438]  dev_queue_xmit_nit+0x4bc/0x9c0
[   62.954665][ T5438]  dev_hard_start_xmit+0xf8/0x8c8
[   62.955734][ T5438]  __dev_queue_xmit+0x1640/0x3330
[   62.956763][ T5438]  __netlink_deliver_tap+0x468/0x6d8
[   62.957874][ T5438]  netlink_deliver_tap+0x1ac/0x1b0
[   62.958889][ T5438]  netlink_unicast+0x5e0/0x80c
[   62.959885][ T5438]  netlink_sendmsg+0x6f0/0x9d8
[   62.961039][ T5438]  ____sys_sendmsg+0x588/0x90c
[   62.962192][ T5438]  __sys_sendmsg+0x288/0x374
[   62.963258][ T5438]  __arm64_sys_sendmsg+0x80/0x94
[   62.964429][ T5438]  invoke_syscall+0x98/0x290
[   62.965518][ T5438]  el0_svc_common+0x13c/0x258
[   62.966585][ T5438]  do_el0_svc+0x5c/0x134
[   62.967590][ T5438]  el0_svc+0x58/0x12c
[   62.968563][ T5438]  el0t_64_sync_handler+0x84/0xf0
[   62.969767][ T5438]  el0t_64_sync+0x18c/0x190
[   63.128316][ T4332] Bluetooth: hci4: unexpected event 0x08 length: 23 > 4
[   63.128761][ T3903] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[   63.577066][ T5294] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[   63.590784][ T5442] loop1: detected capacity change from 0 to 32768
[   63.591069][ T5431] ceph: No mds server is up or the cluster is laggy
[   63.598857][ T5434] ceph: No mds server is up or the cluster is laggy
[   63.630453][ T5442] XFS (loop1): Mounting V5 Filesystem
[   63.633684][ T4409] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[   63.667886][ T5442] XFS (loop1): Ending clean mount
[   63.672371][ T5442] XFS (loop1): Quotacheck needed: Please wait.
[   63.691705][ T5442] XFS (loop1): Quotacheck: Done.
[   63.697934][ T5461] loop2: detected capacity change from 0 to 1024
[   63.700870][ T5461] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[   63.709806][ T5461] EXT4-fs (loop2): Errors on filesystem, clearing orphan list.
[   63.711473][ T5461] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   63.720172][ T5461] EXT4-fs (loop2): re-mounted. Quota mode: writeback.
[   63.733139][ T4330] XFS (loop1): Unmounting Filesystem
[   63.784646][ T4335] EXT4-fs (loop2): unmounting filesystem.
[   63.876566][ T5467] hfsplus: invalid length 32517 has been corrected to 255
[   63.974210][   T11] hfsplus: b-tree write err: -5, ino 25
[   63.975549][   T11] hfsplus: b-tree write err: -5, ino 4
[   63.976740][   T11] hfsplus: b-tree write err: -5, ino 2
[   64.496498][ T2067] ieee802154 phy1 wpan1: encryption failed: -22
[   64.548025][ T5471] F2FS-fs (loop3): Invalid SB checksum offset: 0
[   64.549438][ T5471] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[   64.561965][ T5471] F2FS-fs (loop3): invalid crc value
[   64.568813][ T5485] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   64.571701][ T5485] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[   64.589540][ T5485] REISERFS (device loop1): using ordered data mode
[   64.591030][ T5485] reiserfs: using flush barriers
[   64.594881][ T5471] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[   64.612513][ T5485] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   64.624641][ T5485] REISERFS (device loop1): checking transaction log (loop1)
[   64.631875][ T5485] REISERFS (device loop1): Using r5 hash to sort names
[   64.641714][ T5485] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[   64.650767][ T5485] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[   64.662009][ T5471] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[   64.666090][ T5471] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   64.731515][ T5485] FAULT_INJECTION: forcing a failure.
[   64.731515][ T5485] name failslab, interval 1, probability 0, space 0, times 0
[   64.738518][ T5481] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64)
[   64.740290][ T5485] CPU: 1 PID: 5485 Comm: syz.1.240 Not tainted syzkaller #0
[   64.741994][ T5485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   64.744216][ T5485] Call trace:
[   64.744979][ T5485]  dump_backtrace+0x1c4/0x1f0
[   64.746025][ T5485]  show_stack+0x2c/0x3c
[   64.747001][ T5485]  __dump_stack+0x30/0x40
[   64.748021][ T5485]  dump_stack_lvl+0xf4/0x15c
[   64.749109][ T5485]  dump_stack+0x1c/0x5c
[   64.750121][ T5485]  should_fail_ex+0x3cc/0x524
[   64.751239][ T5485]  __should_failslab+0xc0/0x11c
[   64.752370][ T5485]  should_failslab+0x10/0x28
[   64.753495][ T5485]  __kmem_cache_alloc_node+0x7c/0x318
[   64.754719][ T5485]  __kmalloc+0xc4/0x180
[   64.755685][ T5485]  tomoyo_realpath_from_path+0xc4/0x508
[   64.757005][ T5485]  tomoyo_path_number_perm+0x1c4/0x540
[   64.758173][ T5485]  tomoyo_path_chown+0x68/0xec
[   64.759281][ T5485]  security_path_chown+0xf4/0x148
[   64.760499][ T5485]  chown_common+0x3e0/0x59c
[   64.761618][ T5485]  ksys_fchown+0xe0/0x158
[   64.762643][ T5485]  __arm64_sys_fchown+0x7c/0x94
[   64.763812][ T5485]  invoke_syscall+0x98/0x290
[   64.764906][ T5485]  el0_svc_common+0x13c/0x258
[   64.766049][ T5485]  do_el0_svc+0x5c/0x134
[   64.767128][ T5485]  el0_svc+0x58/0x12c
[   64.768063][ T5485]  el0t_64_sync_handler+0x84/0xf0
[   64.769261][ T5485]  el0t_64_sync+0x18c/0x190
[   64.790371][ T5481] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   64.792906][ T5481] F2FS-fs (loop0): invalid crc value
[   64.793935][ T5485] ERROR: Out of memory at tomoyo_realpath_from_path.
[   64.797895][ T5481] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[   64.813127][ T5481] F2FS-fs (loop0): Start checkpoint disabled!
[   64.822847][ T5481] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   64.826686][ T5481] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[   64.842251][ T5481] syz.0.239: attempt to access beyond end of device
[   64.842251][ T5481] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   65.027048][ T4332] Bluetooth: hci4: unexpected event 0x08 length: 23 > 4
[   65.115009][   T39] kworker/u4:2: attempt to access beyond end of device
[   65.115009][   T39] loop0: rw=1, sector=45104, nr_sectors = 24 limit=40427
[   65.120626][   T39] kworker/u4:2: attempt to access beyond end of device
[   65.120626][   T39] loop0: rw=2049, sector=45128, nr_sectors = 8 limit=40427
[   65.442443][ T5515] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[   65.451165][ T5515] EXT4-fs (loop3): Errors on filesystem, clearing orphan list.
[   65.456455][ T5515] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   65.469268][ T5515] EXT4-fs (loop3): re-mounted. Quota mode: writeback.
[   65.524473][ T4331] EXT4-fs (loop3): unmounting filesystem.
[   65.552885][ T5522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   66.116557][ T5528] set_capacity_and_notify: 6 callbacks suppressed
[   66.116565][ T5528] loop3: detected capacity change from 0 to 40427
[   66.127286][ T5528] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[   66.128699][ T5528] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   66.131076][ T5528] F2FS-fs (loop3): invalid crc value
[   66.136709][ T5528] F2FS-fs (loop3): Found nat_bits in checkpoint
[   66.150332][ T5528] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   66.151791][ T5528] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   66.257379][ T4528] kworker/u4:7: attempt to access beyond end of device
[   66.257379][ T4528] loop3: rw=1, sector=45096, nr_sectors = 8 limit=40427
[   66.709088][ T5548] loop4: detected capacity change from 0 to 512
[   66.713023][ T5548] ext4: Unknown parameter 'audit'
[   66.757646][ T5552] loop2: detected capacity change from 0 to 1024
[   66.759281][ T5552] EXT4-fs: Ignoring removed nomblk_io_submit option
[   66.767044][ T5548] loop4: detected capacity change from 0 to 256
[   66.772593][ T5548] exfat: Deprecated parameter 'namecase'
[   66.777131][ T5548] exfat: Deprecated parameter 'namecase'
[   66.782177][ T5552] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   66.790802][ T5548] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d)
[   66.804954][ T5548] exfat: Unknown parameter 'trans'
[   66.811761][ T5548] smc: net device lo applied user defined pnetid SYZ0
[   66.831159][ T5552] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   66.881594][ T5557] loop0: detected capacity change from 0 to 8192
[   66.897091][ T5557] REISERFS warning (device loop0): super-6504 reiserfs_getopt: the option "grpjquota" requires an argument
[   66.897091][ T5557] 
[   66.917897][ T5561] loop4: detected capacity change from 0 to 1024
[   66.918425][ T5555] loop3: detected capacity change from 0 to 40427
[   66.921521][ T5555] F2FS-fs (loop3): Invalid SB checksum offset: 0
[   66.922944][ T5555] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[   66.925297][ T5561] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended
[   66.929892][ T4335] EXT4-fs (loop2): unmounting filesystem.
[   66.931576][ T5555] F2FS-fs (loop3): invalid crc value
[   66.931712][ T5561] EXT4-fs (loop4): Errors on filesystem, clearing orphan list.
[   66.948602][ T5561] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   66.958868][ T5561] EXT4-fs (loop4): re-mounted. Quota mode: writeback.
[   66.961615][ T5555] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[   67.014375][ T4340] EXT4-fs (loop4): unmounting filesystem.
[   67.015894][ T5555] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[   67.017227][ T5555] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   67.158977][ T5570] loop1: detected capacity change from 0 to 32768
[   67.180896][ T5570] XFS (loop1): Mounting V5 Filesystem
[   67.202434][ T5570] XFS (loop1): Ending clean mount
[   67.236735][ T4332] Bluetooth: hci3: unexpected event 0x08 length: 23 > 4
[   67.730298][ T4330] XFS (loop1): Unmounting Filesystem
[   67.874617][ T5595] loop2: detected capacity change from 0 to 2048
[   67.876668][ T5595] UDF-fs: bad mount option "iocharset5koi8-r" or missing value
[   67.907476][ T5598] loop4: detected capacity change from 0 to 512
[   67.911026][ T5598] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[   67.913094][ T5598] System zones: 1-12
[   67.916038][ T5598] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.270: missing EA_INODE flag
[   67.918608][ T5598] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.270: error while reading EA inode 12 err=-117
[   67.921268][ T5598] EXT4-fs (loop4): 1 orphan inode deleted
[   67.922748][ T5598] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   67.932678][ T5595] __nla_validate_parse: 55 callbacks suppressed
[   67.932687][ T5595] netlink: 12 bytes leftover after parsing attributes in process `syz.2.269'.
[   68.112039][ T4340] EXT4-fs (loop4): unmounting filesystem.
[   68.156194][ T5608] netlink: 4 bytes leftover after parsing attributes in process `syz.4.272'.
[   68.510591][ T5603] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.271 (5603)
[   68.520228][ T5603] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   68.522559][ T5603] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm
[   68.532658][ T5603] BTRFS info (device loop2): setting nodatasum
[   68.533967][ T5603] BTRFS info (device loop2): force zlib compression, level 3
[   68.535465][ T5603] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8)
[   68.537398][ T5603] BTRFS info (device loop2): use lzo compression, level 0
[   68.539006][ T5603] BTRFS info (device loop2): turning on flush-on-commit
[   68.540475][ T5603] BTRFS info (device loop2): enabling auto defrag
[   68.541934][ T5603] BTRFS info (device loop2): max_inline at 4096
[   68.543922][ T5603] BTRFS info (device loop2): using free space tree
[   68.691273][ T5626] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[   68.695127][ T5626] EXT4-fs (loop3): Errors on filesystem, clearing orphan list.
[   68.697290][ T5626] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   68.706513][ T5626] EXT4-fs (loop3): re-mounted. Quota mode: writeback.
[   68.712342][ T5603] BTRFS info (device loop2): enabling ssd optimizations
[   69.064241][ T4331] EXT4-fs (loop3): unmounting filesystem.
[   69.085395][ T4335] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   69.265453][ T5660] FAULT_INJECTION: forcing a failure.
[   69.265453][ T5660] name failslab, interval 1, probability 0, space 0, times 0
[   69.275641][ T5660] CPU: 1 PID: 5660 Comm: syz.2.280 Not tainted syzkaller #0
[   69.277056][ T5660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   69.279282][ T5660] Call trace:
[   69.280044][ T5660]  dump_backtrace+0x1c4/0x1f0
[   69.281142][ T5660]  show_stack+0x2c/0x3c
[   69.282082][ T5660]  __dump_stack+0x30/0x40
[   69.282975][ T5660]  dump_stack_lvl+0xf4/0x15c
[   69.283950][ T5660]  dump_stack+0x1c/0x5c
[   69.284848][ T5660]  should_fail_ex+0x3cc/0x524
[   69.285966][ T5660]  __should_failslab+0xc0/0x11c
[   69.287091][ T5660]  should_failslab+0x10/0x28
[   69.288055][ T5660]  __kmem_cache_alloc_node+0x7c/0x318
[   69.289267][ T5660]  kmalloc_trace+0x48/0x94
[   69.290240][ T5660]  alloc_fs_context+0x7c/0x778
[   69.291224][ T5660]  fs_context_for_mount+0x34/0x44
[   69.292313][ T5660]  do_new_mount+0xfc/0x818
[   69.293282][ T5660]  path_mount+0x5ac/0xe6c
[   69.294233][ T5660]  __arm64_sys_mount+0x4a0/0x5a0
[   69.295314][ T5660]  invoke_syscall+0x98/0x290
[   69.296299][ T5660]  el0_svc_common+0x13c/0x258
[   69.297326][ T5660]  do_el0_svc+0x5c/0x134
[   69.298273][ T5660]  el0_svc+0x58/0x12c
[   69.299160][ T5660]  el0t_64_sync_handler+0x84/0xf0
[   69.300272][ T5660]  el0t_64_sync+0x18c/0x190
[   69.383225][ T5642] F2FS-fs (loop1): Invalid SB checksum offset: 0
[   69.385986][ T5642] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[   69.386093][ T5662] IPVS: length: 138 != 8
[   69.403395][ T5642] F2FS-fs (loop1): invalid crc value
[   69.425344][ T5663] FAT-fs (loop2): Unrecognized mount option "00000000073218064384ÿÿÿÿ" or missing value
[   69.428042][ T5642] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[   69.448713][ T5670] autofs4:pid:5670:autofs_fill_super: called with bogus options
[   69.452604][ T5642] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[   69.454664][ T5642] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   69.598470][ T5674] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[   69.600422][ T5674] System zones: 1-12
[   69.601585][ T5674] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.283: missing EA_INODE flag
[   69.614816][    T7] cfg80211: failed to load regulatory.db
[   69.623519][ T5674] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.283: error while reading EA inode 12 err=-117
[   69.671799][ T5674] EXT4-fs (loop4): 1 orphan inode deleted
[   69.673084][ T5674] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   69.702501][ T5674] FAULT_INJECTION: forcing a failure.
[   69.702501][ T5674] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   69.735717][ T5674] CPU: 1 PID: 5674 Comm: syz.4.283 Not tainted syzkaller #0
[   69.737188][ T5674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   69.739447][ T5674] Call trace:
[   69.740140][ T5674]  dump_backtrace+0x1c4/0x1f0
[   69.741265][ T5674]  show_stack+0x2c/0x3c
[   69.742285][ T5674]  __dump_stack+0x30/0x40
[   69.743322][ T5674]  dump_stack_lvl+0xf4/0x15c
[   69.744384][ T5674]  dump_stack+0x1c/0x5c
[   69.745328][ T5674]  should_fail_ex+0x3cc/0x524
[   69.746345][ T5674]  should_fail+0x14/0x24
[   69.747224][ T5674]  should_fail_usercopy+0x20/0x30
[   69.748354][ T5674]  strncpy_from_user+0x48/0x59c
[   69.749425][ T5674]  getname_flags+0xec/0x458
[   69.750415][ T5674]  user_path_at_empty+0x40/0x84
[   69.751377][ T5674]  path_setxattr+0xbc/0x260
[   69.752336][ T5674]  __arm64_sys_lsetxattr+0xc4/0xe0
[   69.753477][ T5674]  invoke_syscall+0x98/0x290
[   69.754507][ T5674]  el0_svc_common+0x13c/0x258
[   69.755560][ T5674]  do_el0_svc+0x5c/0x134
[   69.756549][ T5674]  el0_svc+0x58/0x12c
[   69.757551][ T5674]  el0t_64_sync_handler+0x84/0xf0
[   69.758809][ T5674]  el0t_64_sync+0x18c/0x190
[   69.887728][ T4340] EXT4-fs (loop4): unmounting filesystem.
[   69.937050][ T4332] Bluetooth: hci4: unexpected event 0x08 length: 23 > 4
[   70.487006][ T5692] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended
[   70.722154][ T5692] EXT4-fs (loop0): Errors on filesystem, clearing orphan list.
[   70.876324][ T5692] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   70.918325][ T5692] EXT4-fs (loop0): re-mounted. Quota mode: writeback.
[   70.999545][ T4336] EXT4-fs (loop0): unmounting filesystem.
[   71.356161][ T5704] netlink: 28 bytes leftover after parsing attributes in process `syz.0.293'.
[   72.227438][ T5728] set_capacity_and_notify: 11 callbacks suppressed
[   72.227448][ T5728] loop2: detected capacity change from 0 to 512
[   72.230695][ T5728] ext3: Unknown parameter 'euid'
[   72.232590][ T5722] loop1: detected capacity change from 0 to 40427
[   72.237386][ T5722] F2FS-fs (loop1): Invalid SB checksum offset: 0
[   72.238591][ T5722] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[   72.240743][ T5722] F2FS-fs (loop1): invalid crc value
[   72.248701][ T5722] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[   72.257710][ T5726] loop3: detected capacity change from 0 to 8192
[   72.281743][ T5722] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[   72.283711][ T5722] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   72.369378][ T5734] loop4: detected capacity change from 0 to 1024
[   72.386136][ T5704] loop0: detected capacity change from 0 to 131072
[   72.450722][ T5734] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended
[   72.457864][ T5734] EXT4-fs (loop4): Errors on filesystem, clearing orphan list.
[   72.459624][ T5734] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   72.468828][ T5734] EXT4-fs (loop4): re-mounted. Quota mode: writeback.
[   72.572717][ T5741] loop2: detected capacity change from 0 to 128
[   73.312946][ T5741] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[   73.315829][ T5741] hpfs: filesystem error: improperly stopped
[   73.316990][ T5741] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[   73.318768][ T5741] hpfs: You really don't want any checks? You are crazy...
[   73.320241][ T5741] hpfs: Code page index out of array
[   73.321315][ T5741] hpfs: code page support is disabled
[   73.323522][ T5741] hpfs: hpfs_map_4sectors(): unaligned read
[   73.324859][ T5741] hpfs: hpfs_map_4sectors(): unaligned read
[   73.325949][ T5741] hpfs: filesystem error: unable to find root dir
[   73.360994][ T4332] Bluetooth: hci2: unexpected event 0x08 length: 23 > 4
[   73.361316][ T4340] EXT4-fs (loop4): unmounting filesystem.
[   73.431831][ T5749] FAULT_INJECTION: forcing a failure.
[   73.431831][ T5749] name failslab, interval 1, probability 0, space 0, times 0
[   73.435692][ T5749] CPU: 1 PID: 5749 Comm: syz.4.302 Not tainted syzkaller #0
[   73.437036][ T5749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   73.438915][ T5749] Call trace:
[   73.439592][ T5749]  dump_backtrace+0x1c4/0x1f0
[   73.440559][ T5749]  show_stack+0x2c/0x3c
[   73.441376][ T5749]  __dump_stack+0x30/0x40
[   73.442305][ T5749]  dump_stack_lvl+0xf4/0x15c
[   73.443276][ T5749]  dump_stack+0x1c/0x5c
[   73.444264][ T5749]  should_fail_ex+0x3cc/0x524
[   73.445363][ T5749]  __should_failslab+0xc0/0x11c
[   73.446505][ T5749]  should_failslab+0x10/0x28
[   73.446571][ T5748] loop4: detected capacity change from 0 to 1024
[   73.447534][ T5749]  slab_pre_alloc_hook+0x6c/0x31c
[   73.449997][ T5749]  kmem_cache_alloc_lru+0x60/0x284
[   73.451162][ T5749]  __d_alloc+0x40/0x68c
[   73.452092][ T5749]  d_alloc_pseudo+0x28/0x8c
[   73.453086][ T5749]  alloc_file_pseudo+0xd8/0x1f4
[   73.454199][ T5749]  __shmem_file_setup+0x1a0/0x26c
[   73.455360][ T5749]  shmem_file_setup+0x40/0x54
[   73.456420][ T5749]  __arm64_sys_memfd_create+0x2d8/0x458
[   73.457662][ T5749]  invoke_syscall+0x98/0x290
[   73.458671][ T5749]  el0_svc_common+0x13c/0x258
[   73.459701][ T5749]  do_el0_svc+0x5c/0x134
[   73.460638][ T5749]  el0_svc+0x58/0x12c
[   73.461485][ T5749]  el0t_64_sync_handler+0x84/0xf0
[   73.462549][ T5749]  el0t_64_sync+0x18c/0x190
[   73.659004][ T5762] netlink: 224 bytes leftover after parsing attributes in process `syz.2.305'.
[   73.804651][ T5767] netlink: 72 bytes leftover after parsing attributes in process `syz.4.306'.
[   73.806708][ T5769] netlink: 72 bytes leftover after parsing attributes in process `syz.4.306'.
[   73.862217][ T5767] loop4: detected capacity change from 0 to 16
[   73.864380][ T5767] cramfs: Unknown parameter '½'
[   74.071511][ T5777] loop2: detected capacity change from 0 to 512
[   74.073765][ T5777] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   74.078741][ T5777] EXT4-fs (loop2): 1 truncate cleaned up
[   74.080299][ T5777] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   74.086453][ T5781] validate_nla: 122 callbacks suppressed
[   74.086463][ T5781] netlink: 'syz.0.309': attribute type 1 has an invalid length.
[   74.101227][ T5781] device bond1 entered promiscuous mode
[   74.106029][ T5781] 8021q: adding VLAN 0 to HW filter on device bond1
[   74.129097][ T4335] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 54: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[   74.141326][ T4335] EXT4-fs error (device loop2): ext4_empty_dir:3179: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[   74.157747][ T4335] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 54: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[   74.166715][ T4335] EXT4-fs error (device loop2): ext4_empty_dir:3179: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[   74.177081][ T4335] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 54: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[   74.189463][ T4335] EXT4-fs error (device loop2): ext4_empty_dir:3179: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[   74.196993][ T4335] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 54: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[   74.201460][ T4335] EXT4-fs error (device loop2): ext4_empty_dir:3179: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[   74.209167][ T4335] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 54: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[   74.213683][ T4335] EXT4-fs error (device loop2): ext4_empty_dir:3179: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[   74.422640][ T5789] loop0: detected capacity change from 0 to 1024
[   74.431514][ T5789] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended
[   74.434503][ T5789] EXT4-fs (loop0): Errors on filesystem, clearing orphan list.
[   74.436369][ T5789] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   74.556188][ T4336] EXT4-fs (loop0): unmounting filesystem.
[   75.042888][ T5794] F2FS-fs (loop0): Invalid SB checksum offset: 0
[   75.044337][ T5794] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[   75.047411][ T5794] F2FS-fs (loop0): invalid crc value
[   75.066293][ T5803] fuse: Unknown parameter 'fd?0x0000000000000004'
[   75.070475][ T5794] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[   75.088110][ T5794] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[   75.089517][ T5794] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   75.114898][ T5483] EXT4-fs (loop2): unmounting filesystem.
[   75.302072][ T4334] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   75.305249][ T4334] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   75.308328][   T48] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   75.310888][   T48] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   75.312842][   T48] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   75.315820][   T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   75.450776][ T5827] device bridge0 entered promiscuous mode
[   75.470589][ T5830] vcan0: tx drop: invalid da for name 0x0000000000000002
[   75.509672][ T1589] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.535247][ T5835] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended
[   75.537687][ T5835] EXT4-fs (loop4): Errors on filesystem, clearing orphan list.
[   75.539556][ T5835] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   75.565943][   T48] Bluetooth: hci0: unexpected event 0x08 length: 23 > 4
[   75.632244][ T4340] EXT4-fs (loop4): unmounting filesystem.
[   75.646524][ T1589] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.679776][ T5818] rxe_eth0 speed is unknown, defaulting to 1000
[   76.059550][ T1589] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.128690][ T5818] chnl_net:caif_netlink_parms(): no params data found
[   76.150234][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.151929][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.156163][ T5818] device bridge_slave_0 entered promiscuous mode
[   76.159457][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.161076][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.163012][ T5818] device bridge_slave_1 entered promiscuous mode
[   76.207753][ T1589] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.219253][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   76.222660][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   76.240590][ T5818] team0: Port device team_slave_0 added
[   76.242833][ T5818] team0: Port device team_slave_1 added
[   76.249614][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0
[   76.251196][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   76.256492][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   76.259547][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1
[   76.261196][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   76.267439][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   76.325657][ T5818] device hsr_slave_0 entered promiscuous mode
[   76.343544][ T5818] device hsr_slave_1 entered promiscuous mode
[   76.384628][ T5818] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   76.387901][ T5818] Cannot create hsr debugfs directory
[   76.449668][ T5818] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   76.506793][ T5818] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   76.536626][ T5818] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   76.569007][ T5856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   76.570907][ T5856] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   76.574945][ T5818] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   76.761337][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.770468][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   76.772135][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   76.818074][ T5818] 8021q: adding VLAN 0 to HW filter on device team0
[   76.821733][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   76.823619][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   76.825403][ T4555] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.826872][ T4555] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.833440][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   76.835515][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   76.837280][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   76.839314][ T4555] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.840866][ T4555] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.884757][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   76.886976][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   76.889410][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   76.892060][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   76.896808][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   76.898670][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   76.900964][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   76.902684][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   76.905113][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   76.907438][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   76.910489][ T5818] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   76.918240][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   77.163402][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   77.165073][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   77.187423][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0
[   77.373921][   T48] Bluetooth: hci1: command 0x0409 tx timeout
[   77.491206][ T5876] set_capacity_and_notify: 3 callbacks suppressed
[   77.497998][ T5876] loop4: detected capacity change from 0 to 164
[   77.500258][ T5877] loop0: detected capacity change from 0 to 256
[   77.502069][ T5877] exfat: Deprecated parameter 'utf8'
[   77.508345][ T5876] Unable to read rock-ridge attributes
[   77.524512][ T5877] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5a1fe699, utbl_chksum : 0xe619d30d)
[   77.533017][ T5876] Unable to read rock-ridge attributes
[   77.542310][ T5876] iso9660: Corrupted directory entry in block 1 of inode 1792
[   77.544591][ T5876] Unable to read rock-ridge attributes
[   77.545711][ T5876] iso9660: Corrupted directory entry in block 1 of inode 1792
[   77.685792][ T5889] loop0: detected capacity change from 0 to 256
[   77.687806][ T5889] FAT-fs (loop0): Unrecognized mount option "check=utrict" or missing value
[   77.690503][ T5882] IPv6: NLM_F_CREATE should be specified when creating new route
[   77.778288][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   77.780730][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   77.802058][ T5892] loop4: detected capacity change from 0 to 4096
[   77.809924][ T5892] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512)
[   77.812073][ T5880] loop3: detected capacity change from 0 to 40427
[   77.824790][ T5880] F2FS-fs (loop3): Invalid SB checksum offset: 0
[   77.826015][ T5880] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[   77.836600][ T5880] F2FS-fs (loop3): invalid crc value
[   77.845903][ T5880] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[   77.848123][ T5818] device veth0_vlan entered promiscuous mode
[   77.851564][ T5818] device veth1_vlan entered promiscuous mode
[   77.857271][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   77.859475][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   77.861760][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   77.865628][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   77.867635][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   77.880919][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   77.882957][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   77.885431][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   77.889179][ T5818] device veth0_macvtap entered promiscuous mode
[   77.892465][ T5818] device veth1_macvtap entered promiscuous mode
[   77.935942][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   77.940240][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.946677][ T5880] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[   77.948170][ T5880] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   77.953006][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   77.959209][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.962596][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.090924][ T5902] loop1: detected capacity change from 0 to 1024
[   78.124040][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.141020][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.259929][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.262969][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   78.265470][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.269037][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0
[   78.270933][ T5902] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended
[   78.291012][ T5902] EXT4-fs (loop1): Errors on filesystem, clearing orphan list.
[   78.296755][ T5902] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   78.463077][   T48] Bluetooth: hci4: unexpected event 0x08 length: 23 > 4
[   78.496974][ T5717] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   78.500452][ T5717] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   78.502657][ T5717] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   78.505820][ T5717] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   78.528627][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   78.532017][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.534450][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   78.536967][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.539367][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   78.541969][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.544141][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   78.546764][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.549107][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   78.551620][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   78.558315][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1
[   78.562317][ T5818] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.564545][ T5818] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.566620][ T5818] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.568746][ T5818] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.594223][ T5717] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   78.599324][ T5717] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   78.619853][ T4330] EXT4-fs (loop1): unmounting filesystem.
[   78.687029][ T5918] netlink: 44 bytes leftover after parsing attributes in process `syz.1.342'.
[   78.731202][ T5920] loop0: detected capacity change from 0 to 1024
[   78.760609][ T5920] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   78.907162][ T5931] FAULT_INJECTION: forcing a failure.
[   78.907162][ T5931] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[   78.910613][ T5931] CPU: 0 PID: 5931 Comm: syz.1.347 Not tainted syzkaller #0
[   78.912202][ T5931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   78.914508][ T5931] Call trace:
[   78.915265][ T5931]  dump_backtrace+0x1c4/0x1f0
[   78.916339][ T5931]  show_stack+0x2c/0x3c
[   78.917283][ T5931]  __dump_stack+0x30/0x40
[   78.918265][ T5931]  dump_stack_lvl+0xf4/0x15c
[   78.919241][ T5931]  dump_stack+0x1c/0x5c
[   78.920225][ T5931]  should_fail_ex+0x3cc/0x524
[   78.921308][ T5931]  should_fail_alloc_page+0x74/0xb8
[   78.922435][ T5931]  prepare_alloc_pages+0x1b8/0x4f0
[   78.923525][ T5931]  __alloc_pages+0x134/0x544
[   78.924557][ T5931]  __folio_alloc+0x1c/0x44
[   78.925572][ T5931]  vma_alloc_folio+0x37c/0x8ac
[   78.926691][ T5931]  alloc_zeroed_user_highpage_movable+0x78/0x8c
[   78.928185][ T5931]  handle_mm_fault+0x1788/0x3018
[   78.929368][ T5931]  do_page_fault+0x310/0xa5c
[   78.930482][ T5931]  do_translation_fault+0x94/0xc8
[   78.931683][ T5931]  do_mem_abort+0x70/0x198
[   78.932732][ T5931]  el0_da+0x74/0x14c
[   78.933663][ T5931]  el0t_64_sync_handler+0x90/0xf0
[   78.934865][ T5931]  el0t_64_sync+0x18c/0x190
[   79.229813][ T5931] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[   79.316286][ T4528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.320259][ T4528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.324940][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   79.332477][ T4528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.339603][ T4528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.351926][ T5938] loop1: detected capacity change from 0 to 256
[   79.355173][ T5938] FAT-fs (loop1): Unrecognized mount option "codepa" or missing value
[   79.555359][   T48] Bluetooth: hci1: command 0x041b tx timeout
[   79.723273][ T4631] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   79.754148][ T1589] device hsr_slave_0 left promiscuous mode
[   79.783774][ T1589] device hsr_slave_1 left promiscuous mode
[   79.834066][ T5948] tmpfs: Unknown parameter 'noswap'
[   79.835901][   T48] Bluetooth: hci4: unexpected cc 0x042f length: 9 > 7
[   79.841801][ T5948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   79.846512][ T1589] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   79.848457][ T1589] batman_adv: batadv0: Removing interface: batadv_slave_0
[   79.851257][ T1589] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   79.852763][ T1589] batman_adv: batadv0: Removing interface: batadv_slave_1
[   79.863098][ T5948] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   79.865409][ T1589] device bridge_slave_1 left promiscuous mode
[   79.867610][ T1589] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.904201][ T1589] device bridge_slave_0 left promiscuous mode
[   79.905561][ T1589] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.023600][ T1589] device veth1_macvtap left promiscuous mode
[   80.025146][ T1589] device veth0_macvtap left promiscuous mode
[   80.026507][ T1589] device veth0_vlan left promiscuous mode
[   80.616212][ T5975] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size
[   80.797988][ T5978] loop0: detected capacity change from 0 to 256
[   81.613278][   T48] Bluetooth: hci1: command 0x040f tx timeout
[   82.027824][ T1589] team0 (unregistering): Port device team_slave_1 removed
[   82.165033][ T1589] team0 (unregistering): Port device team_slave_0 removed
[   82.293822][ T1589] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   82.434805][ T1589] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   83.564316][ T1589] bond0 (unregistering): Released all slaves
[   83.693350][   T48] Bluetooth: hci1: command 0x0419 tx timeout
[   83.797628][ T5972] netlink: 'syz.3.359': attribute type 1 has an invalid length.
[   84.325720][ T6018] input: syz0 as /devices/virtual/input/input4
[   84.358703][ T5998] loop5: detected capacity change from 0 to 32768
[   84.368857][ T5998] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.318 (5998)
[   84.386449][ T5998] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[   84.397594][ T5998] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[   84.401365][ T5998] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[   84.404341][ T5998] BTRFS info (device loop5): use zstd compression, level 3
[   84.405843][ T5998] BTRFS info (device loop5): using free space tree
[   84.624197][ T5295] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   84.642320][ T5998] BTRFS info (device loop5): enabling ssd optimizations
[   84.688782][ T5818] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[   84.809696][ T5295] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[   84.811844][ T5295] usb 1-1: config 0 has no interface number 0
[   84.822533][ T5295] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[   84.833218][ T5295] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   84.835002][ T5295] usb 1-1: Product: syz
[   84.849768][ T5295] usb 1-1: Manufacturer: syz
[   84.850940][ T5295] usb 1-1: SerialNumber: syz
[   84.865966][ T6061] netlink: 28 bytes leftover after parsing attributes in process `syz.4.375'.
[   84.875733][ T5295] usb 1-1: config 0 descriptor??
[   85.087987][ T5295] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[   85.096310][ T5295] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[   85.116092][ T5295] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[   85.130382][ T5295] usb 1-1: media controller created
[   85.142739][ T6041] loop3: detected capacity change from 0 to 40427
[   85.160887][ T6041] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x9)
[   85.168516][ T5295] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   85.172992][ T6041] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[   85.187114][ T6041] F2FS-fs (loop3): build fault injection attr: rate: 13, type: 0x3ffff
[   85.207176][ T6041] F2FS-fs (loop3): invalid crc value
[   85.217661][ T6041] F2FS-fs (loop3) : inject kmalloc in f2fs_kmalloc of f2fs_create_flush_cmd_control+0xf0/0x31c
[   85.225806][ T6041] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-12)
[   85.510822][ T6084] pimreg: tun_chr_ioctl cmd 35111
[   86.257856][ T5295] i2c i2c-1: ec100: i2c rd failed=-110 reg=33
[   86.292967][ T5295] usb 1-1: USB disconnect, device number 2
[   86.919976][ T6150] loop4: detected capacity change from 0 to 32768
[   86.927285][ T6150] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.396 (6150)
[   86.943593][ T6150] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[   86.945570][ T6150] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[   86.947460][ T6150] BTRFS info (device loop4): use zlib compression, level 3
[   86.963709][ T6150] BTRFS info (device loop4): using free space tree
[   87.195215][ T6150] BTRFS info (device loop4): enabling ssd optimizations
[   87.247783][ T4340] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8

syzkaller
syzkaller login: [   88.222503][ T6236] loop0: detected capacity change from 0 to 256
[   88.256820][ T6236] FAT-fs (loop0): Directory bread(block 64) failed
[   88.258312][ T6236] FAT-fs (loop0): Directory bread(block 65) failed
[   88.266529][ T6236] FAT-fs (loop0): Directory bread(block 66) failed
[   88.268023][ T6236] FAT-fs (loop0): Directory bread(block 67) failed
[   88.269256][ T6236] FAT-fs (loop0): Directory bread(block 68) failed
[   88.283716][ T6236] FAT-fs (loop0): Directory bread(block 69) failed
[   88.285798][ T6236] FAT-fs (loop0): Directory bread(block 70) failed
[   88.288827][ T6236] FAT-fs (loop0): Directory bread(block 71) failed
[   88.290233][ T6236] FAT-fs (loop0): Directory bread(block 72) failed
[   88.291628][ T6236] FAT-fs (loop0): Directory bread(block 73) failed
[   88.319255][ T6241] netlink: 6 bytes leftover after parsing attributes in process `syz.4.415'.
[   88.532643][ T6254] syz.0.410: attempt to access beyond end of device
[   88.532643][ T6254] loop0: rw=1, sector=1800, nr_sectors = 2056 limit=256
[   88.840854][ T6257] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   88.876687][ T4437] kworker/u4:5: attempt to access beyond end of device
[   88.876687][ T4437] loop0: rw=1, sector=3856, nr_sectors = 8000 limit=256
[   88.887646][ T6257] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   89.611195][ T6278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   89.621038][ T6278] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   89.797907][ T6268] syz.1.425 (6268): drop_caches: 2
[   89.907127][ T6286] input: syz1 as /devices/virtual/input/input5
[   89.917581][ T6286] FAULT_INJECTION: forcing a failure.
[   89.917581][ T6286] name failslab, interval 1, probability 0, space 0, times 0
[   89.930872][ T6286] CPU: 0 PID: 6286 Comm: syz.0.433 Not tainted syzkaller #0
[   89.932635][ T6286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[   89.935039][ T6286] Call trace:
[   89.935827][ T6286]  dump_backtrace+0x1c4/0x1f0
[   89.936906][ T6286]  show_stack+0x2c/0x3c
[   89.937845][ T6286]  __dump_stack+0x30/0x40
[   89.938850][ T6286]  dump_stack_lvl+0xf4/0x15c
[   89.939943][ T6286]  dump_stack+0x1c/0x5c
[   89.940848][ T6286]  should_fail_ex+0x3cc/0x524
[   89.941994][ T6286]  __should_failslab+0xc0/0x11c
[   89.943149][ T6286]  should_failslab+0x10/0x28
[   89.944181][ T6286]  kmem_cache_alloc+0x88/0x310
[   89.945293][ T6286]  __kernfs_new_node+0xec/0x5fc
[   89.946419][ T6286]  kernfs_new_node+0x120/0x230
[   89.947509][ T6286]  __kernfs_create_file+0x60/0x2e0
[   89.948700][ T6286]  sysfs_add_file_mode_ns+0x1e8/0x2a4
[   89.949951][ T6286]  sysfs_create_file_ns+0x10c/0x19c
[   89.951207][ T6286]  device_add+0x4b0/0xe4c
[   89.952240][ T6286]  cdev_device_add+0x164/0x2f8
[   89.953335][ T6286]  evdev_connect+0x2ec/0x3a0
[   89.954358][ T6286]  input_register_device+0xae0/0xf80
[   89.955630][ T6286]  uinput_create_device+0x34c/0x524
[   89.956858][ T6286]  uinput_ioctl_handler+0x87c/0x12f4
[   89.958047][ T6286]  uinput_ioctl+0x38/0x4c
[   89.958999][ T6286]  __arm64_sys_ioctl+0x14c/0x1c8
[   89.960126][ T6286]  invoke_syscall+0x98/0x290
[   89.961186][ T6286]  el0_svc_common+0x13c/0x258
[   89.962287][ T6286]  do_el0_svc+0x5c/0x134
[   89.963187][ T6286]  el0_svc+0x58/0x12c
[   89.964046][ T6286]  el0t_64_sync_handler+0x84/0xf0
[   89.965131][ T6286]  el0t_64_sync+0x18c/0x190
[   89.980362][ T4530] tipc: Subscription rejected, illegal request
[   90.043568][ T6286] input: failed to attach handler evdev to device input5, error: -12
[   90.245086][ T6297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   90.247302][ T6297] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   90.588373][ T6311] loop4: detected capacity change from 0 to 128
[   90.953453][   T27] audit: type=1326 audit(90.890:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6318 comm="syz.3.444" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8db79728 code=0x7ffc0000
[   90.993899][   T27] audit: type=1326 audit(90.890:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6318 comm="syz.3.444" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8db79728 code=0x7ffc0000
[   90.998977][   T27] audit: type=1326 audit(90.890:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6318 comm="syz.3.444" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8db79728 code=0x7ffc0000
[   91.041308][   T27] audit: type=1326 audit(90.890:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6318 comm="syz.3.444" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=57 compat=0 ip=0xffff8db79728 code=0x7ffc0000
[   91.047721][ T6332] netlink: 'syz.5.447': attribute type 1 has an invalid length.
[   91.056791][   T27] audit: type=1326 audit(90.890:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6318 comm="syz.3.444" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8db79728 code=0x7ffc0000
[   91.068615][ T6339] tmpfs: Unknown parameter 'grpquota'
[   91.069890][   T27] audit: type=1326 audit(90.890:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6318 comm="syz.3.444" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8db79728 code=0x7ffc0000
[   91.082663][   T27] audit: type=1326 audit(90.890:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6318 comm="syz.3.444" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8db79728 code=0x7ffc0000
[   91.093518][   T27] audit: type=1326 audit(90.890:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6318 comm="syz.3.444" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=181 compat=0 ip=0xffff8db79728 code=0x7ffc0000
[   91.168451][   T27] audit: type=1326 audit(90.900:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6318 comm="syz.3.444" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8db79728 code=0x7ffc0000
[   91.187315][   T27] audit: type=1326 audit(90.900:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6318 comm="syz.3.444" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffff8db5c5ec code=0x7ffc0000
[   91.887410][ T6361] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   92.234919][ T6365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   92.240205][ T6365] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   92.460884][ T6377] loop5: detected capacity change from 0 to 4096
[   92.467847][ T6377] EXT4-fs: Ignoring removed nobh option
[   92.471414][ T6377] EXT4-fs: Ignoring removed bh option
[   92.477781][ T6377] EXT4-fs (loop5): Test dummy encryption mode enabled
[   92.490369][ T6377] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[   94.522154][ T5818] EXT4-fs (loop5): unmounting filesystem.
[   94.753400][ T6437] loop1: detected capacity change from 0 to 256
[   94.808720][ T6437] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3163b44b, utbl_chksum : 0xe619d30d)
[   94.844492][ T6441] tmpfs: Unknown parameter 'grpquota'
[   95.197459][ T6449] loop1: detected capacity change from 0 to 256
[   95.225406][ T6449] exfat: Deprecated parameter 'namecase'
[   95.244589][ T6449] exfat: Deprecated parameter 'namecase'
[   95.277556][ T6430] loop3: detected capacity change from 0 to 40427
[   95.291178][ T6449] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xef5d2b8f, utbl_chksum : 0xe619d30d)
[   95.296859][ T6430] F2FS-fs (loop3): build fault injection attr: rate: 14, type: 0x3ffff
[   95.305400][ T6430] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x30e4
[   95.320425][ T6430] F2FS-fs (loop3): invalid crc value
[   95.343917][ T6430] F2FS-fs (loop3): Found nat_bits in checkpoint
[   95.360581][ T6430] F2FS-fs (loop3) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x57c/0x8b8
[   95.396673][ T6430] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   95.464796][ T6430] F2FS-fs (loop3) : inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x608/0x1b5c
[   95.867570][ T6469] Driver unsupported XDP return value 0 on prog  (id 17) dev N/A, expect packet loss!
[   96.245462][ T6448] loop0: detected capacity change from 0 to 131072
[   96.268669][ T6448] F2FS-fs (loop0): Found nat_bits in checkpoint
[   96.289888][ T6448] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   96.536724][   T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   96.540821][   T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   96.542736][   T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   96.546562][ T4528] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.551639][   T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   96.557005][   T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   96.558499][   T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   96.644347][ T4528] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.776008][ T4528] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.792578][ T6507] rxe_eth0 speed is unknown, defaulting to 1000
[   97.229516][ T4528] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.248350][ T6546] netlink: 20 bytes leftover after parsing attributes in process `syz.5.500'.
[   97.251850][ T6548] netlink: 20 bytes leftover after parsing attributes in process `syz.5.500'.
[   97.256033][ T6552] process 'syz.4.502' launched './file1' with NULL argv: empty string added
[   97.349559][ T6507] chnl_net:caif_netlink_parms(): no params data found
[   97.428249][ T6619] device-mapper: ioctl: name not supplied when creating device
[   97.443122][ T6507] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.453858][ T6507] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.460637][ T6507] device bridge_slave_0 entered promiscuous mode
[   97.471822][ T6507] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.480512][ T6507] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.484507][ T6507] device bridge_slave_1 entered promiscuous mode
[   97.560628][ T6507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   97.569759][ T6507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   97.586806][ T6507] team0: Port device team_slave_0 added
[   97.588882][ T6507] team0: Port device team_slave_1 added
[   97.790369][ T6668] loop3: detected capacity change from 0 to 32768
[   97.796633][ T6668] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.508 (6668)
[   97.804357][ T6724] loop4: detected capacity change from 0 to 40427
[   97.807832][ T6724] F2FS-fs (loop4): Invalid SB checksum offset: 0
[   97.809239][ T6724] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[   97.812400][ T6724] F2FS-fs (loop4): invalid crc value
[   97.812407][ T6668] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   97.820357][ T6668] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm
[   97.822131][ T6668] BTRFS info (device loop3): setting nodatacow, compression disabled
[   97.829755][ T6668] BTRFS info (device loop3): setting datasum, datacow enabled
[   97.839854][ T6668] BTRFS info (device loop3): force clearing of disk cache
[   97.841400][ T6668] BTRFS info (device loop3): enabling ssd optimizations
[   97.842862][ T6668] BTRFS info (device loop3): using spread ssd allocation scheme
[   97.845624][ T6724] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[   97.850049][ T6668] BTRFS info (device loop3): turning on sync discard
[   97.851521][ T6668] BTRFS info (device loop3): turning on flush-on-commit
[   97.852972][ T6668] BTRFS info (device loop3): not using ssd optimizations
[   97.861627][ T6507] batman_adv: batadv0: Adding interface: batadv_slave_0
[   97.863114][ T6507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   97.871031][ T6724] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[   97.872027][ T6668] BTRFS info (device loop3): not using spread ssd allocation scheme
[   97.872398][ T6724] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   97.881388][ T6507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   97.890370][ T6668] BTRFS info (device loop3): using free space tree
[   97.910812][ T6668] BTRFS info (device loop3): rebuilding free space tree
[   97.925834][ T6507] batman_adv: batadv0: Adding interface: batadv_slave_1
[   97.927359][ T6507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   97.935696][ T6507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   98.610526][   T48] Bluetooth: hci0: command 0x0409 tx timeout
[   98.747525][ T6668] jffs2: notice: (6668) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   98.881543][ T6507] device hsr_slave_0 entered promiscuous mode
[   98.899408][ T4331] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   98.903623][ T6507] device hsr_slave_1 entered promiscuous mode
[   98.943367][ T6507] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   98.944974][ T6507] Cannot create hsr debugfs directory
[   99.031092][ T6795] rxe_eth0 speed is unknown, defaulting to 1000
[   99.096050][ T6832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   99.100931][ T6832] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   99.131371][   T27] kauditd_printk_skb: 145 callbacks suppressed
[   99.131381][   T27] audit: type=1326 audit(99.110:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6831 comm="syz.3.516" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8db79728 code=0x0
[   99.421352][ T6507] netdevsim netdevsim6 netdevsim0: renamed from eth0
[   99.455122][ T6507] netdevsim netdevsim6 netdevsim1: renamed from eth1
[   99.504356][ T6507] netdevsim netdevsim6 netdevsim2: renamed from eth2
[   99.585019][ T6915] netlink: 14 bytes leftover after parsing attributes in process `syz.4.521'.
[   99.587048][ T6507] netdevsim netdevsim6 netdevsim3: renamed from eth3
[   99.724133][ T6507] 8021q: adding VLAN 0 to HW filter on device bond0
[   99.788540][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   99.790403][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   99.794904][ T6507] 8021q: adding VLAN 0 to HW filter on device team0
[   99.810190][ T6758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   99.812183][ T6758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   99.817274][ T6758] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.818726][ T6758] bridge0: port 1(bridge_slave_0) entered forwarding state
[   99.832512][ T6758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   99.844572][ T6758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   99.846468][ T6758] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.847957][ T6758] bridge0: port 2(bridge_slave_1) entered forwarding state
[   99.849741][ T6758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   99.875662][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  100.143266][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  100.145815][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  100.147983][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  100.150849][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  100.160871][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  100.176985][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  100.182537][ T6507] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  100.191955][ T6507] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  100.246429][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  100.248426][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  100.250285][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  100.252096][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  100.265598][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  100.275493][ T6931] ip_tables: iptables: counters copy to user failed while replacing table
[  100.547278][ T6931] tipc: Enabled bearer <udp:syz1>, priority 10
[  100.654320][   T48] Bluetooth: hci0: command 0x041b tx timeout
[  100.662348][ T6507] 8021q: adding VLAN 0 to HW filter on device batadv0
[  100.674393][ T6758] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  100.676228][ T6758] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  100.746283][ T4528] device hsr_slave_0 left promiscuous mode
[  100.788184][ T4528] device hsr_slave_1 left promiscuous mode
[  100.817329][ T6947] loop4: detected capacity change from 0 to 40427
[  100.821297][ T6947] F2FS-fs (loop4): Invalid SB checksum offset: 0
[  100.822710][ T6947] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  100.826040][ T6947] F2FS-fs (loop4): invalid crc value
[  100.876090][ T4528] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  100.878174][ T4528] batman_adv: batadv0: Removing interface: batadv_slave_0
[  100.881335][ T4528] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  100.883044][ T4528] batman_adv: batadv0: Removing interface: batadv_slave_1
[  100.889942][ T6947] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  100.892507][ T4528] device bridge_slave_1 left promiscuous mode
[  100.899567][ T4528] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.916264][ T6947] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  100.917748][ T6947] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  100.958250][ T4528] device bridge_slave_0 left promiscuous mode
[  100.959732][ T4528] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.014937][ T4528] device bridge0 left promiscuous mode
[  101.385241][ T4528] device veth1_macvtap left promiscuous mode
[  101.386354][ T4528] device veth0_macvtap left promiscuous mode
[  101.387616][ T4528] device veth0_vlan left promiscuous mode
[  102.145876][ T6975] random: crng reseeded on system resumption
[  102.203507][ T6975] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5)
[  102.205125][ T6975] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  102.212641][ T6975] vhci_hcd vhci_hcd.0: Device attached
[  102.242926][ T6975] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(7)
[  102.244253][ T6975] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  102.246488][ T6975] vhci_hcd vhci_hcd.0: Device attached
[  102.270084][ T6978] vhci_hcd: connection closed
[  102.272618][ T5941] vhci_hcd: stop threads
[  102.278185][ T5941] vhci_hcd: release socket
[  102.279392][ T5941] vhci_hcd: disconnect device
[  102.281717][ T6976] vhci_hcd: connection closed
[  102.282419][ T5941] vhci_hcd: stop threads
[  102.284818][ T5941] vhci_hcd: release socket
[  102.288362][ T5941] vhci_hcd: disconnect device
[  102.630878][ T6986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  102.639353][ T6986] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  102.733346][ T4332] Bluetooth: hci0: command 0x040f tx timeout
[  103.815668][ T4528] team0 (unregistering): Port device team_slave_1 removed
[  103.937948][ T4528] team0 (unregistering): Port device team_slave_0 removed
[  104.093867][ T4528] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  104.283700][ T4528] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  104.813439][   T48] Bluetooth: hci0: command 0x0419 tx timeout
[  105.504249][ T4528] bond0 (unregistering): Released all slaves
[  105.759265][ T6993] netlink: 'syz.3.539': attribute type 10 has an invalid length.
[  105.791749][ T6993] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  105.849736][ T4809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  105.851903][ T4809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  105.870837][ T6758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  105.872778][ T6758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  105.881247][ T6758] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  105.893623][ T6758] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  105.895489][ T6507] device veth0_vlan entered promiscuous mode
[  105.899806][ T6507] device veth1_vlan entered promiscuous mode
[  105.921287][ T6758] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  105.923066][ T6758] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  105.944430][ T6758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  105.956633][ T6758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  105.960532][ T6507] device veth0_macvtap entered promiscuous mode
[  105.963049][ T7008] loop3: detected capacity change from 0 to 40427
[  105.963515][ T6507] device veth1_macvtap entered promiscuous mode
[  105.966063][ T7008] F2FS-fs (loop3): Invalid SB checksum offset: 0
[  105.967456][ T7008] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  105.971514][ T7008] F2FS-fs (loop3): invalid crc value
[  105.992556][ T6507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  106.001127][ T6507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.010001][ T6507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  106.011997][ T6507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.023843][ T6507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  106.025920][ T6507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.028390][ T7008] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  106.029959][ T6507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  106.039450][ T6507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.044635][ T6507] batman_adv: batadv0: Interface activated: batadv_slave_0
[  106.046024][ T6758] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  106.047976][ T6758] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  106.049702][ T6758] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  106.051626][ T6758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  106.066060][ T6507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  106.068845][ T7008] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[  106.068869][ T6507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.070438][ T7008] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  106.093037][ T6507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  106.115704][ T6507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.117612][ T6507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  106.119862][ T6507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.121996][ T6507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  106.143957][ T6507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.150040][ T7006] loop4: detected capacity change from 0 to 32768
[  106.178697][ T6507] batman_adv: batadv0: Interface activated: batadv_slave_1
[  106.180666][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  106.182565][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  106.191027][ T6507] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  106.192821][ T7006] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.541 (7006)
[  106.196973][ T6507] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  106.198864][ T6507] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  106.200764][ T6507] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  106.212469][ T7006] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  106.245206][ T7006] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm
[  106.249369][ T7006] BTRFS info (device loop4): using free space tree
[  106.548380][ T4504] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.552328][ T4504] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.557914][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  106.598815][ T6758] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.600485][ T6758] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.602128][ T6758] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  106.700240][ T7006] BTRFS info (device loop4): enabling ssd optimizations
[  106.744326][ T4340] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  106.889972][ T7086] device-mapper: table: 248:4: multipath: error getting device (-ENODEV)
[  106.894498][ T7086] device-mapper: ioctl: error adding target to table
[  107.015751][ T7091] loop6: detected capacity change from 0 to 32768
[  107.019341][ T7091] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.555 (7091)
[  107.036337][ T7091] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  107.038466][ T7091] BTRFS info (device loop6): using sha256 (sha256-ce) checksum algorithm
[  107.040169][ T7091] BTRFS info (device loop6): using free space tree
[  107.127567][ T7112] svc: failed to register lockdv1 RPC service (errno 111).
[  107.129328][ T7112] lockd_up: makesock failed, error=-111
[  107.202520][ T7091] BTRFS info (device loop6): enabling ssd optimizations
[  107.388653][ T6507] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  107.690784][ T7139] loop6: detected capacity change from 0 to 512
[  107.704417][ T7139] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  107.802556][ T7140] loop5: detected capacity change from 0 to 40427
[  107.804943][ T7140] F2FS-fs (loop5): Invalid SB checksum offset: 0
[  107.806312][ T7140] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[  107.809218][ T7140] F2FS-fs (loop5): invalid crc value
[  107.813071][ T7140] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  107.816297][ T7139] EXT4-fs (loop6): 1 truncate cleaned up
[  107.817698][ T7139] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  107.850276][ T7140] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0
[  107.851649][ T7140] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  108.690887][ T6507] EXT4-fs (loop6): unmounting filesystem.
[  108.711561][ T7160] Bluetooth: MGMT ver 1.22
[  108.805521][ T7168] loop4: detected capacity change from 0 to 256
[  108.819611][ T7168] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  108.927259][ T7176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  108.937766][ T7176] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  109.039697][ T7158] loop3: detected capacity change from 0 to 32768
[  109.047817][ T7158] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.561 (7158)
[  109.066793][ T7158] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  109.076822][ T7158] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm
[  109.082970][ T7158] BTRFS info (device loop3): using free space tree
[  109.179973][ T7158] BTRFS info (device loop3): enabling ssd optimizations
[  109.262381][ T4331] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  109.654141][ T7210] loop3: detected capacity change from 0 to 32768
[  109.656229][ T7210] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.567 (7210)
[  109.665031][ T7210] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  109.670334][ T7210] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm
[  109.676849][ T7210] BTRFS info (device loop3): using free space tree
[  109.711930][ T7210] BTRFS info (device loop3): enabling ssd optimizations
[  109.878950][ T4331] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  109.967508][ T7240] svc: failed to register lockdv1 RPC service (errno 111).
[  110.012562][ T7257] tmpfs: Unknown parameter 'noswap'
[  110.015749][ T4332] Bluetooth: hci2: unexpected cc 0x042f length: 9 > 7
[  110.020243][ T7257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  110.022515][ T7257] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  112.850004][ T7272] loop6: detected capacity change from 0 to 40427
[  112.860606][ T7272] F2FS-fs (loop6): Invalid SB checksum offset: 0
[  112.861728][ T7272] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock
[  112.866239][ T7272] F2FS-fs (loop6): invalid crc value
[  112.894951][ T7284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  112.907082][ T7272] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  112.909080][ T7284] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  112.925907][ T7272] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0
[  112.927270][ T7272] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  113.007601][ T7276] loop5: detected capacity change from 0 to 32768
[  113.012707][ T7276] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.578 (7276)
[  113.026956][ T7276] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  113.029700][ T7276] BTRFS info (device loop5): using sha256 (sha256-ce) checksum algorithm
[  113.039789][ T7276] BTRFS info (device loop5): using free space tree
[  113.496652][ T7306] loop4: detected capacity change from 0 to 32768
[  113.499152][ T7306] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz.4.584 (7306)
[  113.509515][ T7276] BTRFS info (device loop5): enabling ssd optimizations
[  113.566255][ T7327] svc: failed to register lockdv1 RPC service (errno 111).
[  113.608635][ T5818] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  113.720034][ T7349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  113.721761][ T7349] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  115.811662][ T7388] loop6: detected capacity change from 0 to 32768
[  115.816826][ T7388] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.598 (7388)
[  115.821830][ T7388] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  115.824343][ T7388] BTRFS info (device loop6): using sha256 (sha256-ce) checksum algorithm
[  115.826178][ T7388] BTRFS info (device loop6): using free space tree
[  115.913230][ T7388] BTRFS info (device loop6): enabling ssd optimizations
[  115.946749][ T6507] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  117.082288][ T7438] netlink: 16 bytes leftover after parsing attributes in process `syz.6.605'.
[  117.101506][   T48] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  117.124042][   T48] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  117.126499][   T48] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  117.128738][   T48] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  117.131398][   T48] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  117.138228][   T48] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  117.150878][ T7437] loop3: detected capacity change from 0 to 4096
[  117.186835][ T7436] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  117.188728][ T7436] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  117.236459][ T7436] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  117.330689][ T7439] rxe_eth0 speed is unknown, defaulting to 1000
[  117.362532][ T4495] asus 0005:0B05:8502.0004: No inputs registered, leaving
[  117.365037][ T7437] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  117.366745][ T7437] vhci_hcd: invalid port number 96
[  117.369401][ T4495] asus 0005:0B05:8502.0004: hidraw0: BLUETOOTH HID v0.00 Mouse [syz0] on syz0
[  117.371381][ T7437] vhci_hcd: default hub control req: 0311 v0005 i0060 l7
[  117.590251][ T7439] chnl_net:caif_netlink_parms(): no params data found
[  117.677008][ T7439] bridge0: port 1(bridge_slave_0) entered blocking state
[  117.682013][ T7439] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.698045][ T7439] device bridge_slave_0 entered promiscuous mode
[  117.709286][ T7439] bridge0: port 2(bridge_slave_1) entered blocking state
[  117.721094][ T7612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  117.722875][ T7439] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.731245][ T7612] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  117.733719][ T7439] device bridge_slave_1 entered promiscuous mode
[  117.761536][ T7439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  117.772350][ T7439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  117.796259][ T7439] team0: Port device team_slave_0 added
[  117.798604][ T7439] team0: Port device team_slave_1 added
[  117.811461][ T7439] batman_adv: batadv0: Adding interface: batadv_slave_0
[  117.827540][ T7439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  117.840503][ T7439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  117.846857][ T7439] batman_adv: batadv0: Adding interface: batadv_slave_1
[  117.848444][ T7439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  117.855914][ T7439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  117.988385][ T7621] loop5: detected capacity change from 0 to 32768
[  117.990517][ T7621] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.624 (7621)
[  118.323733][ T7439] device hsr_slave_0 entered promiscuous mode
[  118.330674][ T7621] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  118.333078][ T7621] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  118.336130][ T7621] BTRFS info (device loop5): use zlib compression, level 3
[  118.337795][ T7621] BTRFS info (device loop5): using free space tree
[  118.348295][ T7621] BTRFS info (device loop5): enabling ssd optimizations
[  118.363324][ T5818] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  118.374164][ T7439] device hsr_slave_1 entered promiscuous mode
[  118.423808][ T7439] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  118.427609][ T7439] Cannot create hsr debugfs directory
[  118.611794][ T7439] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  118.656701][ T7439] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  118.727522][ T7439] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  120.202643][ T7439] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  120.262290][   T48] Bluetooth: hci5: command 0x0409 tx timeout
[  120.362220][ T7789] loop5: detected capacity change from 0 to 32768
[  120.371527][ T7789] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.626 (7789)
[  120.398397][ T7789] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  120.409903][ T7789] BTRFS info (device loop5): using crc32c (crc32c-generic) checksum algorithm
[  120.423034][ T7789] BTRFS warning (device loop5): excessive commit interval 3581
[  120.430969][ T7789] BTRFS info (device loop5): force zlib compression, level 3
[  120.493476][ T7789] BTRFS info (device loop5): metadata ratio 107050
[  120.495575][ T7789] BTRFS info (device loop5): turning on flush-on-commit
[  120.498779][ T7789] BTRFS info (device loop5): max_inline at 4096
[  120.500274][ T7789] BTRFS info (device loop5): using free space tree
[  120.503491][ T7439] 8021q: adding VLAN 0 to HW filter on device bond0
[  120.517891][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  120.519824][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  120.523118][ T7439] 8021q: adding VLAN 0 to HW filter on device team0
[  120.536816][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  120.539057][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  120.540709][ T4529] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.542290][ T4529] bridge0: port 1(bridge_slave_0) entered forwarding state
[  120.547904][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  120.606181][   T27] audit: type=1807 audit(120.590:164): UNKNOWN=apprai res=0
[  120.608686][   T27] audit: type=1802 audit(120.590:165): pid=7827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.632" res=0 errno=0
[  120.734796][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  120.833653][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  120.835339][ T4529] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.836818][ T4529] bridge0: port 2(bridge_slave_1) entered forwarding state
[  120.855996][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  120.879941][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  120.882027][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  120.887475][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  120.889299][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  120.891270][ T7789] BTRFS info (device loop5): enabling ssd optimizations
[  120.897841][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  120.899684][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  120.901780][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  120.905493][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  120.905759][ T7847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  120.907711][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  120.911495][ T7439] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  120.915058][ T7847] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  120.918301][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  120.950417][ T7789] ubi0: attaching mtd0
[  120.952314][ T7789] ubi0: scanning is finished
[  120.954155][ T7789] ubi0 error: ubi_read_volume_table: the layout volume was not found
[  120.985336][ T7789] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  121.016313][ T5818] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  121.050178][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  121.053002][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  121.109085][ T7859] ------------[ cut here ]------------
[  121.113868][ T7859] kernel BUG at net/sunrpc/svc.c:605!
[  121.115017][ T7859] Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP
[  121.115893][ T7439] 8021q: adding VLAN 0 to HW filter on device batadv0
[  121.116435][ T7859] Modules linked in:
[  121.118786][ T7859] CPU: 0 PID: 7859 Comm: syz.4.639 Not tainted syzkaller #0
[  121.120444][ T7859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  121.122709][ T7859] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
[  121.124422][ T7859] pc : svc_destroy+0x178/0x184
[  121.125548][ T7859] lr : svc_destroy+0x178/0x184
[  121.126664][ T7859] sp : ffff800021ff7930
[  121.127618][ T7859] x29: ffff800021ff7930 x28: 1fffe000239b3a8f x27: ffff0000f5890000
[  121.129492][ T7859] x26: dfff800000000000 x25: ffff7000043fef2c x24: ffff800021ff7960
[  121.131356][ T7859] x23: ffff0000f36b3b40 x22: dfff800000000000 x21: 0000000000000001
[  121.133273][ T7859] x20: ffff0000d9f5c868 x19: ffff0000d9f5c850 x18: 1fffe00033c2177e
[  121.135157][ T7859] x17: ffff8000163dd000 x16: ffff8000082de324 x15: 0000000000000002
[  121.137010][ T7859] x14: 0000000000000001 x13: 1fffe00033c218f0 x12: 0000000000080000
[  121.138702][ T7859] x11: 0000000000026e11 x10: ffff80002e319000 x9 : ffff800010f10bc8
[  121.140710][ T7859] x8 : 0000000000026e12 x7 : ffff8000083bc6f0 x6 : 0000000000000000
[  121.142733][ T7859] x5 : 0000000000000080 x4 : 0000000000000001 x3 : 0000000000000000
[  121.144684][ T7859] x2 : 0000000000000006 x1 : 0000000000000000 x0 : 0000000000000000
[  121.146632][ T7859] Call trace:
[  121.147411][ T7859]  svc_destroy+0x178/0x184
[  121.148474][ T7859]  write_ports+0x850/0x9f0
[  121.149539][ T7859]  nfsctl_transaction_write+0x114/0x164
[  121.150865][ T7859]  vfs_write+0x2a8/0x7c8
[  121.151748][ T7859]  ksys_write+0x12c/0x228
[  121.152721][ T7859]  __arm64_sys_write+0x7c/0x90
[  121.153790][ T7859]  invoke_syscall+0x98/0x290
[  121.154841][ T7859]  el0_svc_common+0x13c/0x258
[  121.155922][ T7859]  do_el0_svc+0x5c/0x134
[  121.156934][ T7859]  el0_svc+0x58/0x12c
[  121.157828][ T7859]  el0t_64_sync_handler+0x84/0xf0
[  121.158952][ T7859]  el0t_64_sync+0x18c/0x190
[  121.159966][ T7859] Code: 91026260 97c355e3 17ffffc8 97c3556e (d4210000) 
[  121.161509][ T7859] ---[ end trace 0000000000000000 ]---
[  121.242280][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  121.244346][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  121.252572][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  121.254341][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  121.256578][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  121.258284][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  121.262625][ T7439] device veth0_vlan entered promiscuous mode
[  121.275215][ T7439] device veth1_vlan entered promiscuous mode
[  121.284620][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  121.286232][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  121.287902][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  121.289711][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  121.293746][ T7439] device veth0_macvtap entered promiscuous mode
[  121.304097][ T7439] device veth1_macvtap entered promiscuous mode
[  121.308784][ T7439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  121.310760][ T7439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.323034][ T7439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  121.325404][ T7439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.327572][ T7439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  121.330058][ T7439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.343229][ T7439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  121.345247][ T7439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.347200][ T7439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  121.349519][ T7439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.357823][ T7439] batman_adv: batadv0: Interface activated: batadv_slave_0
[  121.360165][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  121.362128][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  121.364920][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  121.367229][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  121.371659][ T7439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  121.373966][ T7439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.383360][ T7439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  121.385273][ T7439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.387395][ T7439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  121.393397][ T7439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.395249][ T7439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  121.403410][ T7439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.405287][ T7439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  121.407537][ T7439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.420023][ T7439] batman_adv: batadv0: Interface activated: batadv_slave_1
[  121.421571][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  121.423558][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  121.426823][ T7439] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  121.428581][ T7439] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  121.430368][ T7439] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  121.440466][ T7439] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  121.487839][ T7859] Kernel panic - not syncing: Oops - BUG: Fatal exception
[  121.489169][ T7859] SMP: stopping secondary CPUs
[  121.490124][ T7859] Kernel Offset: disabled
[  121.490987][ T7859] CPU features: 0x050000,000f0097,a65bfea7
[  121.492116][ T7859] Memory Limit: none
[  121.777268][ T7859] Rebooting in 86400 seconds..