last executing test programs:

1m48.555907047s ago: executing program 0 (id=1):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth0_to_team\x00', 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x810)

1m48.024378406s ago: executing program 0 (id=6):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x2000002, &(0x7f0000000340)={[{@shortad}, {@fileset={'fileset', 0x3d, 0x5}}, {@unhide}, {}, {@volume={'volume', 0x3d, 0x401}}, {@gid_ignore}, {@uid_forget}, {@anchor}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {}, {@noadinicb}]}, 0xa, 0xc36, &(0x7f0000001a40)="$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")
r0 = open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000005500)='./bus\x00', 0x0, 0x1045802, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x3, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]})
pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000000340)='\b', 0x1}], 0x1, 0x7, 0x0, 0x0)

1m47.565600695s ago: executing program 0 (id=8):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0d, &(0x7f0000000040))

1m46.962092863s ago: executing program 0 (id=10):
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
setuid(0xee01)
r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f000000ac40)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR")
chdir(&(0x7f0000000080)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000140)={{r1}, "1e3052496b3b2ef9db599ed9e0e2d3364680b0ea158aa7565429e327a0e56b71873b79e034824fcb772b07ebc205565abd026c7b4047de6c9b4d78744c4962977d506037ecfe44c3e6396713d4c038c965182c6fbd66bd02ae4d4ebc3feef772b9c96274cef0bd54349a66b0ceb5b200e97a28910b6a19932cb8da8b252ac2f3c02977ef7fab29b741e049a1a45160649c3daba2162409c945c6fb1d024d26f2b628fa6d352777f62d8976f8ef6cc469b3398625bb8e582e1750262ade258b82046cf8f326022ec7e0644d0fb8315ff81b1d8947daee27206cb90f4a3aa2535567878144eedf68db554237577c8bc6672ebb9752f89fcfe7b49bfa7a3c43dc8de421c8ec72f0f61a5939827d2618e7f8dc0155cf5d4064e1ec00c3d25b3ebaa2ef8a220805fb5679d295d3bc63df90ae4282f04e065797cd25f85bbafeb53e76ece771082154955795241b4b047a9c2a252e88be7da616ea1e83a4d873f62e172ba4d8854a0b83e8795722ca0f10a980c644aba0012ea5bf3b342af76f6bae39f0f751848a0583a1d5f8363762d4600fdd92b8fa9267dee9a3b5aae755163582c312978abee95163cfd3be6c1dc53eff0eb25f3fdc081d6e0873c95beea2c3732a5e3694bdffcf2c80c5597b91555f6c5b623c35fb5d8de5295d070a0a2c648fbe3dd83ceb883f2ccdfa6beefac0caff2b4b9a6561b3052ead0a4c7d096453862a4dce847ce3209e3f9884b890e9e23187ce0bf1c63c47b54be21b1a4207c2df2fd2c8396ee215363f966d4dc5ff93c3224063280c71d54657a46a17e75e1a60ae0ae9357f3062f39563c79a05209e51e07006a694987d22cf1f9966036d31ba5a7778f3faaca0f244bc5d85bb462c7498dc8fee10f162d8125c7ec2b07b8231bc3f25e02251fa1ceb421fecfdc5c66c3c5c7292cc69711fee4d6c8380c56cde5f3ecaa5f9d62ac4230ac9040000000000000054f07bec00b01d90fd5b1537f8c870262d2f9a5d51096e249710a1a2aded52f042ffd693fce45b507fa654491f96d351bce12415cfc572feab5c6a9001cd6ae0ef61f55284f3c8176e3b20b2812825b9cf8cd8a933b823023be9cdce07c0b0738913d41238ef65c362de1b6ce69e7fc132f4f503271999f2d44ca200defdb81aa328960281ef4fe0a8f01954fb4ba3855207754c2a888efbe7a3aec6491b465de1d54e18178f90dd04dee2ae8272a95c79978bb3d65b529dc07feb660dbcb047d5345e8d8cf2088eb9c375e91cffbae495e9676a346ee519e1a24029c4b4ad8d2b38b91e1f1546fd1ea23c3cb253ad6594e661c007430a9870fd1def910de8fc474b10c14948c8e33d75d6a50c3f7276cb6074636557d3e79f0e0596fe3c7311275cd55a988533669303bfda93a53fd77a47827868f41b92b353076326b14fcee423bf0eb884705a54c191ec541365f49ed8b3582158b13434337a20c133886596d8a947b2a7817ef0dead40f966f6443089e20193fd49e155b83d88c849dbb5bd9081da2d8520a3fc00b131bf1bd5f5052c67c3d07c5b3eda68bb198047e509e6060da3fa34d50c054cf634f096e9cad9c4f5ed57af14496dedc01336517e9a23b5de40feb9776ddfc742cb95e084e9b5b84995cd22605554b857380b5d63e2f107beadc2d8d8fc0040bda0d8cf9de30c5c9aadb483dde1023f408e1c235954fa2c64849027dd719cde2ed74a0986dbf6f4ec020605a54d9e83a24b3de9cf6087bdc24d76c2d595981a9136523d6254337856f245daa41f6359ca2b16ef17d1a3e3b9a167b6619e1378bfe6c3647bf4c7bb4e8432c34eef02e2a22c874495b9e519c4b3093ee8af8f4a6b72e8325ab5953035fa5020cb198f91815a2e4c563943071cdfe6ee4ec888a9015d1f9b9b9796e2a550a09f83ccff6790b2ff29fbc556fb7eecb69894ca7afb1b3d41a600b495bfaf405c1d3710f5d21afef5a10973deaed62edcbd737727895aa6b1b613b18e18b9065a97ab4bba82c720c84efa28124cbbcb841c0308466d0c5384afe2b5ea6654e93651d4c0a0af0706bc1e2d7eb85b74b13d4460e1bfe4eec200c680d3eb85e03bdfe3c49df088443c93fa505c0f558178f50e945e11146dbf4af8ce654aee28f6bb5bdbb738d84456eb00ca8e8ced9776088bd8c3c1a0957c7ec455abb805a4c1e5714fd29c306751f3ab60c340d77d97ccfaa78b65d987ae6bf9bb611a597c2a0bdc2688bd94e069af5c4382116b8acd8083875f1d4e6c14ff6d23d181c67f85d30181021c900c270f6e6980ba56f15ed510fad88d9153e5c6641d999d09539f4468ccc9fdf41cdc71c90b968c3f0662e8de9c27eea2131364ebe63afcc1b0692c259ec82f651222f08c6bd14110f3e68b7a3ba84c6bb4873b9e430054790f8b47e05bdd7002868d9a69b8c8bbf8094e1e0b5dd90c96e3f79ca6e90743ae48cc61518dcecf7ff824147f60a388cac6def45751a4643353da1c18e4061459ea4f9b5564e816684c781caddbbf6c099bebcf9458dcf8f5791d2588e4d7eb279b4bf9e66ddb02012eb2a0d8184fd81c8935e8c2e2ebb0cb08b25a798757b72cda839c7248450f0825c5973b5a421edca7f2ede172bea34ecb32a611b077fb685dcfa825a3ebb8e77a8203173fc7b53a68e73b35a0947adc76d08b8b63313b09da23222300fdba30bdda295b1e02b362bd5cde2d175c136967040ecb7fa0c6c13a5783b3f72cb970fd415fbb242a4119a096587bee277130c231be8b2302b3e66093860f463b0fdd1db3b037639afbd365c623dcaad5d98b40c8339a1d4e886b39656c551c53ab2695d899a619c7b51add2589d5c8b5582926a9da2830efbc41d02075a0a30b262c531c281741f652cf246f6c9e5daa5623bbd128fe63c525c1f2d23ca354f88bfffc363b53079c3260d8d98f5ac72cc0f0c42f7820ab04d5b8586919ac60d374f5089cacabd597ac39a5cf9131d059597cc76fbd66a0a53147d2624ec998aa97e8a4b63371a03c6592de665b81e8658b4e64f84659c3f7cc5afc4e588a073dc5e22d697bec4ea409b9a0a71ec9ae65d742df28d4e5bc385c2f8dc83805b6d4f1f3d31760514d910b518fbada0a12157a2684fdae838ca5f1c19f7498d97d0ab77e57d1a0270bde58a44436a380e7d4cc63c2e417ced101a44e73aa2ef0a5a8caf567b1923e31aa8d8ece2143087d0bf6bf3af9c47fe016886683094b289ef81a6a4c163545f972ffaf285c9bb149ef76dab38fbb6b179670625b6c4fc77ccdadddb0563ae0c71fbe2f0f10dd9a7c618f6ff798dc255a4b4b7b2c3a2b1d2997acb814d9aed9c433ce9c974dc06a51c406c7cf25b591b1e9f196894024f51ae7c2a6f5e31d99250caecc32a1f7a7a591a01005ca3f17498b6400ddd84cc85cea67b90004d05fa89b14558fe5113b76b808cd9488e2034306d0e33d3d19660ebe6dfc0777642f28db1403227aa9abc35923bd267a2910c948f9692138df7ef5cbfdf4a88814ed4a42e05aa8daa9396df7e72d4fe35c035947e732c8675aa37ea204893eec3f35d1846461ab51d8454db81231fa767c11dff86cc8e551d53b34377bf30099b4e9aa223028fcdb84394f1028dd9b0aa25947ac586043ae6be1ec59cc948e64c61f061269d6287e48fa9c5559eda6e4f1582f4f8bf7957b65f9ee28872448913ff6ec106529a0b610f3d281c0d361ee01dfc880759fbc0dee637577f15ae4f73cf68804b91606f5de82a0700a7e771de1815e4acda19f6f454c9f31919c46401e47b47ceb3dda6d3214f51cdb2be979257c647e546cbea891710feaad11694133b89bef4076b2ce6ee9c0683a346cc5dd04d55923e766704342565a41c87459ebc94d2edad8d07cb9c8e3811961edefe1d7e5169cdca80165b17632da1497cbcfaba7620087dae630080955e4e3b213d1fb6d2db4f12ae4568e1a3eace5495ac8caa3eb49fb82c05be751af5dfff0af1c418f9be3cf9d94b40244078e80ae3c32ad37a0519d96e62f53b6b9bc8f78a5329821aa61dd80566feea2664bc19e38222202bcdd5918d984e304e4e7c11e0d10200d7576e832ebdeaeecedeb0dea9734fb51c7309dfb57be3753ec52a4e9a063538cf866148255bd5a504d4ebbd4b2fea8a01d7addb17c0ac1ad2fa188352365789300f71777058a5caba2d4ef059752e9b0321aebb97f13e23616b27d361ed3e5a28c86c9b6d7c488d1820f3018895e0211832655885e18e9d4f66b4693b3713454b12fb8b01c4515b24a3a1966be4f8a73f96b2cc1ba3ddc6a7f006f9d7ace13b278453dc5f34c3fc77751eb5a1643f9d78131d76bd48f1ae73efbd25f726b91129c556a33623e51b24ea40687059c67846ff58caa47cd22f92b35de630b3f8bf51ed31904f08aadf5bb42fb7bb8da031d850c0c2f599cbca6b49846371b4a021a6e85c3aaee15b91a80d8e85bd3f6bb423d9d73c4b7252ebe14ca87178cf07ca8aa27734c6739aa902081e009afbf6a66f6ce8f93cb5059b0a93bf49fc50a2df72c140f591776f8ea3553ea1975195289f82998cd87f95ddd6c7536de06771a6925d2d7f8a8e2885a2770967572155be95ba28cbf955964f9dc00864dfa0bbd4dde25c5c5ceaab71a6593b187b1fb25b140ef0925e3313b318e7624938b3ab308c7662ad5532b4cc6189069b0d0326902f3eff80c34dd0ca701acbdb1371b1852fa689848ae17e57529066f2c4b3cb9c0ed7425e7ec2a21d2cbb092f668dc817d214c9e8d0ff84455d440cca933b7e7edf5a6adff35f99402da9ef50e4db44831d17637f086e7b6fb539ae1a000e5eded646a078305d56669777fc99778148556260c3b0879b96a364d9479c34939281cf948be5a7bbaf0644daffa853b48e014c8d34fe603b9f2c0fc6ad92dc2e80dead5852de9ddfb7bddd1f772f72a9526c7ffe15c84ac36e54ac97960ce1302c8e29ac3cd2fb6df3675adcc5937d9c6a253507025e17cf0a9b24797d4394ca2acdac7bcd741cf8f57e6bcedc8d4ed2a8f26a858660eaf3fdcde067e7bbbe575eae623b31fa9e83661637995c68884b5d4f688bca6cfd0bdae8fb631c4470f3a2c9c7850f1f66097ebdce1709a239d7f916befa624422d02dd6c0de5165045f34f7be94d0e58caec62c35543de4677466a6032336ca04c74c00b53c6f90c51468bc962a8e10b80a0cff4f725f9540c91f88a42ce9e6ac25688b40d7e07ce33e099f54cb2b682d69bb3966b2bf88503d52e47ef134dafe528b0aba6482bb2603e656621d503a882c060a75842a2f578c4027c6f982f1bfe9715fbb5b95345eee6d7636573a613a9daf4f9155190ecbf8faa73090d0f3469617056f68dd509f6432d9822e003f032d6a052ed3c379a43799ad8eed715efb8c8798d3aa6073dee40b3874f4025ee070d1d48543d5c823300de10b8faabc88c719189d3100b399edf9f2f98157c3b2835b68a8f3d7fbe52cc870ac13e15bfa017b2506f92f84b1fc331d15af8cb087368346be23178a28bf9fb17e11423628317b37a54bff4ae79e1495d502a40a07d591cc2b7117731276a998632faf090226516f9fb67514491c551e6fe68b58b94e42954649f7470aab55eba42ea40c67a1af087d738d42b3debc224ee9d1382a8792a8a4a9c577866a87037dc58c6899039bbb3413ae3a2da66b266e6771c35f164008d7b7e50cb5a743cfe70a07b1fcd1310418e8f15da26e7aca3bbc8688bef59c5be06f0131051d757f56c71c607a925979dbdc76afa825064705d1cc0f3ea33"})

1m46.628973767s ago: executing program 32 (id=10):
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
setuid(0xee01)
r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f000000ac40)="$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")
chdir(&(0x7f0000000080)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000140)={{r1}, "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"})

26.441519988s ago: executing program 4 (id=517):
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f00000000c0)='.\x00', 0x2)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00')
pread64(r1, &(0x7f0000000080)=""/237, 0xed, 0x0)
r2 = syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000000100)='./file0\x00', 0x200c00, &(0x7f0000000040)={[{@lazytime}, {@uqnoenforce}, {}, {@prjquota}, {@grpquota}, {@allocsize={'allocsize', 0x3d, [0x30, 0x32, 0x6d]}}, {@noquota}]}, 0x0, 0x968e, &(0x7f000001c300)="$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")
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x4048587b, &(0x7f00000000c0)={0x2b, 0x3, 0x0, 0x2, 0xd, 0xf800})

24.413405952s ago: executing program 4 (id=534):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x380})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2})
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15)
syz_clone3(&(0x7f0000000140)={0x28001080, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, 0x0, 0x0}, 0x58)

22.848487671s ago: executing program 4 (id=544):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x6}, 0x18)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x10000, 0x6})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x0, 0xd8e0})

22.577275938s ago: executing program 4 (id=550):
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x9, &(0x7f0000000000)={[{@barrier}, {@jqfmt_vfsv0}, {@abort}, {}, {@noquota}, {@usrjquota, 0x2e}], [], 0x2e}, 0x6, 0x48d, &(0x7f0000000980)="$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")
mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000002c0), 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn'])
chdir(&(0x7f0000000340)='./file0\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000000080)=""/43, 0x2b)
getdents(r0, 0x0, 0xbb)

21.956265961s ago: executing program 4 (id=553):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

21.418480324s ago: executing program 4 (id=557):
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000000c0)=0x9)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000140)=0x2000)
ppoll(&(0x7f0000000040)=[{r0, 0x20}], 0x1, 0x0, 0x0, 0x0)
mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r0, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x4000)

20.519989711s ago: executing program 33 (id=557):
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000000c0)=0x9)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000140)=0x2000)
ppoll(&(0x7f0000000040)=[{r0, 0x20}], 0x1, 0x0, 0x0, 0x0)
mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r0, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x4000)

2.913588203s ago: executing program 6 (id=638):
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$qrtrtun(r0, &(0x7f0000000340)="8f52eb24cc808000", 0x8)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x9}}, 0x40)

2.668158942s ago: executing program 1 (id=641):
r0 = syz_io_uring_setup(0xac9, &(0x7f00000002c0)={0x0, 0x3594, 0x10, 0x1003, 0x21e}, &(0x7f0000000240)=<r1=>0x0, &(0x7f0000000340)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x0, 0x3938700}, 0x1, 0x8})
io_uring_enter(r0, 0x6efc, 0x3900, 0xb, 0x0, 0x0)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f00000000c0)={0x1, 0xffffffffffffffff, 0x35, {0x5, 0x1}, 0x1}, 0x1)
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0xb, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_LINENO={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x80)

2.551386876s ago: executing program 6 (id=642):
r0 = syz_io_uring_setup(0x24fd, &(0x7f0000000180)={0x0, 0x0, 0x10100}, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='1'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index})
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

2.271553679s ago: executing program 6 (id=644):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)='B', 0x1}], 0x1}}], 0x1, 0x400c404)
exit(0xfe)
sendmmsg$inet6(r0, &(0x7f0000004740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f00000012c0)="b3be79d0", 0x4}], 0x1}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10001}, 0x1c, 0x0}}], 0x2, 0x48c0)

2.057868507s ago: executing program 5 (id=646):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000740)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000009a5ab6e10c00000000000000040000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000000000000004400050000000000000000000000000000000000000000003c00000002000000ffffffff0002000000000000000000000600000004"], 0xfc}}, 0x0)
r2 = socket$inet6(0xa, 0x803, 0x6)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e21, 0x3, @empty, 0x6}, 0x1c)

1.829105271s ago: executing program 2 (id=648):
r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x88)
r2 = openat$cgroup(r1, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0)
r3 = openat$cgroup_type(r2, &(0x7f0000000100), 0x2, 0x0)
preadv(r3, &(0x7f0000000300)=[{&(0x7f0000000080)=""/74, 0x4a}], 0x1, 0x2, 0x4)

1.769183408s ago: executing program 1 (id=649):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, 0x14)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00')
socket$packet(0x11, 0x2, 0x300)
preadv(r2, &(0x7f0000000200)=[{&(0x7f0000000340)=""/212, 0xd4}, {&(0x7f0000000140)=""/61, 0x3d}], 0x2, 0x1a, 0x0)

1.708931072s ago: executing program 5 (id=650):
openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x1}, 0x18)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='cpuset\x00')
fchdir(r0)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x5750c0}, 0x18)

1.634165834s ago: executing program 3 (id=651):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20)
close(0x3)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94)

1.573179763s ago: executing program 2 (id=652):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0xa0}}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000c00010000001c001a8018000a"], 0x58}, 0x1, 0x2}, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)

1.47126738s ago: executing program 5 (id=653):
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000002c0)=@overlay={0xfffffffa, 0x4, 0x4, 0x8, 0x1, {}, {0xcad72c80fdf3f3e7, 0xc, 0x3, 0x9, 0x7, 0x78, "1a2805b1"}, 0x4, 0x3, {}, 0x3})
sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="c0400001", @ANYRES16=0x0, @ANYBLOB="000000000000000000001b000000200022801c000080080002000000000008000400000000000800050000000000050092000000000007002100616100007c00228034000080080003000000000008000500000000000800020000000000080003000000000008000200000000000800040000000000440000800800040000000000080007000000000008000600000000000800050000000000080001"], 0xc0}}, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000180), 0xfefc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000002000/0x3000)=nil, &(0x7f0000000000/0xe000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f0000260000/0x4000)=nil, &(0x7f0000008000/0x3000)=nil, &(0x7f0000947000/0x1000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000969000/0x1000)=nil, &(0x7f0000663000/0x1000)=nil, &(0x7f000000c000/0x2000)=nil, 0x0, 0x0, r0}, 0x68)

1.336292523s ago: executing program 1 (id=654):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r0, 0x1)
syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000400)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x4}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x4}}}}}}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x800}}}}}}}, 0x0)

1.29027685s ago: executing program 3 (id=655):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
r2 = eventfd2(0x5, 0x80800)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2})

1.184616501s ago: executing program 2 (id=656):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='tlb_flush\x00', r1, 0x0, 0x10000000000000}, 0x18)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0)

1.183838504s ago: executing program 6 (id=657):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80c80, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xeeef0000, 0xdddd1000, 0x0, 0x0, 0x8, 0x8, 0xa, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080000, 0x0, 0xc, 0x8, 0x7c, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x2fff, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xdc}, {0x100000, 0xeeee8000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xf000, 0x3000, 0x9, 0xfd, 0x0, 0x4, 0x20, 0xe, 0x0, 0x3c}, {0xdddd1000, 0x0, 0xd, 0x7, 0x0, 0x0, 0x2, 0xfe, 0x0, 0x0, 0x82, 0x4}, {0x8080000, 0x0, 0xf, 0x6, 0x5, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0xfe}, {0x80a0000, 0xdddd0000, 0x0, 0x1, 0x0, 0x1, 0x0, 0xa, 0x26, 0x0, 0xf8}, {0x80a0000, 0x4}, {0x6000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0x0, 0x0, [0x0, 0x0, 0x1]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.103282215s ago: executing program 5 (id=658):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r1=>0x0})
bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10)
setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000080)=0x1, 0x4)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0)
close(0x3)

991.018975ms ago: executing program 3 (id=659):
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xd0, &(0x7f0000000000)=0x46, 0x4)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)

929.131639ms ago: executing program 1 (id=660):
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$FUSE_DIRENTPLUS(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="10000000feffffffee"], 0x10)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40)

877.122005ms ago: executing program 5 (id=661):
syz_mount_image$minix(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x21445a, &(0x7f00000001c0)=ANY=[], 0x1, 0x1c4, &(0x7f00000003c0)="$eJzs209u00AUx/Gf4xAn5V+hwAIhtRISsGrTAJXY0aOE1lQoBiRg04pF6QU4A+diwwHIArFBXTBo/CcFuzahYI9Rvp+F7fq9Gb+RNfU4UQRgYT3Wmjx56tg/bvWX3694Fdnd5goDUDuT7r+bOX30pHlzAbSc/y3Zr7kuBEDDptsa2Of/5y9vd+T3ZuuC7Gi6LR1m8U5QWD9M30k3u1L81uD1k85+Xl98kO5m7b2lfPOv9szSLH4+F+7F/d+7nV3/gi7qki5rWVd0VSvp9Xdn7W/86fKnOCAAABaAp/XfxUsSzsXbgZ4+i8Kh/GLCkwdxlo1vlvbfi+Ojyri/Wl5fELdf33kZ7VYNA8ApOmee/wnfzr+jYUVG9fwH4M7r/YPJOIrCVy046P9ajwmk05IlfTKr0l9eNGjDkP/fg0D5M93JODLpBypz9WPvdyE0KG11pP1jY0wuZDupf8jH5t92eJg/Y1fTzu/pwcQ/KcP1fyYAddt4cyf9JuD5eC/cC1+MhsNHWw/vb26NNuI3+2TrukwANTh5+ruuBAAAAAAAAAAAAAAAnNU1XXddAgAAAICGNPG7ItdjBACgdX4EAAD//5qhEmQ=")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x3000)
ftruncate(r0, 0xc17a)
syz_mount_image$xfs(&(0x7f0000000040), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000000180)={[{@pquota}, {@discard}, {@nolargeio}, {@lazytime}, {@nogrpid}, {@bsdgroups}, {@quota}, {@nolazytime}]}, 0x1, 0x97ee, &(0x7f0000012f40)="$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")
sync_file_range(r0, 0x7, 0x0, 0x6)

816.453378ms ago: executing program 2 (id=662):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffb}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x5]}, 0x8, 0x800)

760.864874ms ago: executing program 6 (id=663):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x100)
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000000400)=""/132, 0x84)
lseek(r0, 0xfffffffffffffffc, 0x1)

705.187302ms ago: executing program 3 (id=664):
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mknod(&(0x7f00000000c0)='./file1/file3\x00', 0xc000, 0x81b)
r0 = landlock_create_ruleset(&(0x7f0000000440)={0x6621}, 0x18, 0x0)
landlock_restrict_self(r0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2)

537.655295ms ago: executing program 1 (id=665):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
r1 = socket$inet6(0xa, 0x80002, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c)

498.977896ms ago: executing program 2 (id=666):
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x101880, 0x9e)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
write(r0, &(0x7f0000000440)="2cd83ffff800aa6ff3eb4c", 0xb)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x54, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x8], 0x0, 0x0, 0x1}}, 0x40)

498.017931ms ago: executing program 6 (id=667):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000300)={[{@grpid}, {@mblk_io_submit}, {@nodioread_nolock}, {@test_dummy_encryption}, {@inode_readahead_blks}, {@nodelalloc}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$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")
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000008380)={0x0, ""/256, <r1=>0x0, 0x0, <r2=>0x0, 0x0, ""/16, ""/16, ""/16, 0x0, <r3=>0x0})
syz_mount_image$msdos(&(0x7f0000000380), &(0x7f0000000100)='.\x00', 0x3a0a4b5, &(0x7f000000c7c0)=ANY=[@ANYRES16=r1, @ANYRES64=r3, @ANYBLOB="12a4095a2aac12f0bfcb206d982e44066381388d27f14002d8d7431d3947f6399c7ff9f5193fc0398653e5a67bbb319f02bf4ac6f6ccd5acbfe1350cc3a6d2d48cf6c089ddf67171ffb3b15988e7b394c5daf3e12ca05e4dbdad7edd45f10cbc296a53a530d4c2d203ee650d5fff3a9b5aae78794fe84327e508172cdd72eeff5af4d6db9379befb0dde8e64b91d31a84ce8a7598bb78cc85108874811fc650f0520a5", @ANYRESOCT=r3, @ANYRES64, @ANYRES16=r2, @ANYRES64=0x0, @ANYBLOB="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", @ANYRES8, @ANYRESOCT], 0x0, 0x0, &(0x7f0000000000))
syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x8a, &(0x7f00000001c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xa3}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@block_validity}, {@minixdf}, {@grpjquota}, {@noinit_itable}]}, 0x1, 0x463, &(0x7f0000001040)="$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")
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000))

476.749543ms ago: executing program 3 (id=668):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x6b)
setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000900)={0x0, 0x0, 0x2, 0x7, 0x1ffd, 0x2}, 0x14)
listen(r0, 0x1ff)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
sendto$inet(r1, &(0x7f0000000100)="518da8", 0x3, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10)

267.540137ms ago: executing program 5 (id=669):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18)
connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18)
sendmmsg$inet(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="ba5c74decb6fdd6797", 0x9}], 0x1}}], 0x1, 0x20000810)
recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f00000002c0)=""/182, 0xb6}], 0x2}}], 0x1, 0x0, 0x0)

241.774247ms ago: executing program 1 (id=670):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, &(0x7f0000002240)="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", 0xfffffffffffffee9, 0x4004085, 0x0, 0x49)
setsockopt$inet_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000080)=0x1, 0x4)

719.618µs ago: executing program 2 (id=671):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn'])
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x46)
r1 = fanotify_init(0x200, 0x0)
fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0)
fanotify_mark(r1, 0x1, 0x40000020, r0, &(0x7f00000000c0)='./file0\x00')

0s ago: executing program 3 (id=672):
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="4001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0)
ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x0, 0x0, {0xfffe, 0x1}, {0x74, 0x2}, @const={0x6, {0x7f, 0x0, 0x8000, 0xfffd}}})
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01)
write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068)

kernel console output (not intermixed with test programs):

d cc 0x1003 length: 249 > 9
[  111.339883][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  111.418068][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  111.465132][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  111.488165][ T5958] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  111.577244][ T5832] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  111.621774][ T6346] loop2: detected capacity change from 0 to 32768
[  111.711287][ T6346]  loop2: p1 p3 < >
[  111.748374][ T5958] usb 4-1: USB disconnect, device number 5
[  111.806571][ T6360] netlink: 24 bytes leftover after parsing attributes in process `syz.1.111'.
[  111.876589][ T5958] usblp0: removed
[  111.978720][ T6360] netlink: 'syz.1.111': attribute type 1 has an invalid length.
[  112.113875][ T6066] bridge_slave_1: left allmulticast mode
[  112.130836][ T6066] bridge_slave_1: left promiscuous mode
[  112.142330][ T6066] bridge0: port 2(bridge_slave_1) entered disabled state
[  112.188427][ T6066] bridge_slave_0: left allmulticast mode
[  112.214964][ T6066] bridge_slave_0: left promiscuous mode
[  112.255107][ T6066] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.611134][ T6362] udevd[6362]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  112.622630][ T5972] udevd[5972]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  113.588364][ T5835] Bluetooth: hci2: command tx timeout
[  113.598250][ T6066] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  114.244447][ T6066] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  114.269971][ T6443] evm: overlay not supported
[  114.309530][ T6445] loop2: detected capacity change from 0 to 1024
[  114.349470][ T6066] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  114.382417][ T6448] Bluetooth: MGMT ver 1.23
[  114.435085][ T6066] bond0 (unregistering): Released all slaves
[  114.522243][ T6450] loop1: detected capacity change from 0 to 764
[  114.626102][ T6450] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  114.668701][   T36] hfsplus: b-tree write err: -5, ino 4
[  114.742462][ T6457] loop5: detected capacity change from 0 to 4096
[  114.805480][ T6457] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  114.887360][ T6457] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  115.020788][ T5995] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.179078][ T6463] geneve2: entered promiscuous mode
[  115.330541][ T1343] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 55769 - 0
[  115.380130][ T1343] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 55769 - 0
[  115.600168][ T1163] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 55769 - 0
[  115.627818][ T1163] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 55769 - 0
[  115.668438][ T5835] Bluetooth: hci2: command tx timeout
[  115.692677][ T6352] chnl_net:caif_netlink_parms(): no params data found
[  115.751695][ T6066] hsr_slave_0: left promiscuous mode
[  115.777629][ T6066] hsr_slave_1: left promiscuous mode
[  115.794647][ T6066] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  115.813065][ T6066] batman_adv: batadv0: Removing interface: batadv_slave_0
[  115.823363][ T6066] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  115.838980][ T6066] batman_adv: batadv0: Removing interface: batadv_slave_1
[  115.875160][ T6066] veth1_macvtap: left promiscuous mode
[  115.881030][ T6066] veth0_macvtap: left promiscuous mode
[  115.888530][ T6066] veth1_vlan: left promiscuous mode
[  115.897946][ T6066] veth0_vlan: left promiscuous mode
[  115.946147][ T5958] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  116.104922][ T5958] usb 6-1: Using ep0 maxpacket: 16
[  116.119170][ T5958] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  116.138243][ T5958] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  116.174791][ T5958] usb 6-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00
[  116.199295][ T5958] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.216788][ T5958] usb 6-1: config 0 descriptor??
[  116.673063][ T5958] waltop 0003:172F:0032.0002: hidraw0: USB HID v0.81 Device [HID 172f:0032] on usb-dummy_hcd.5-1/input0
[  116.849559][ T6506] loop2: detected capacity change from 0 to 32768
[  116.877743][ T5958] usb 6-1: USB disconnect, device number 2
[  116.884612][ T6066] team0 (unregistering): Port device team_slave_1 removed
[  116.918582][ T5972]  loop2: p1 p2 p3 < p5 p6 >
[  116.928568][ T5972] loop2: p1 size 242222080 extends beyond EOD, truncated
[  116.938730][ T5972] loop2: p2 start 4294967295 is beyond EOD, truncated
[  116.962745][ T6066] team0 (unregistering): Port device team_slave_0 removed
[  116.985641][ T6506]  loop2: p1 p2 p3 < p5 p6 >
[  116.995395][ T6506] loop2: p1 size 242222080 extends beyond EOD, truncated
[  117.008896][ T6506] loop2: p2 start 4294967295 is beyond EOD, truncated
[  117.298955][ T6362] udevd[6362]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  117.299594][ T6150] udevd[6150]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory
[  117.313046][ T5880] udevd[5880]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory
[  117.334481][ T5972] udevd[5972]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  117.386247][ T6362] udevd[6362]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  117.394777][ T5880] udevd[5880]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory
[  117.397737][ T5972] udevd[5972]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  117.418145][   T30] audit: type=1326 audit(1762316705.260:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6510 comm="syz.2.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f067cb8f6c9 code=0x7fc00000
[  117.452123][ T6150] udevd[6150]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory
[  117.755013][ T5835] Bluetooth: hci2: command tx timeout
[  117.775175][ T6486] Zero length message leads to an empty skb
[  117.800854][ T6495] netlink: 566 bytes leftover after parsing attributes in process `syz.3.157'.
[  117.985216][   T30] audit: type=1326 audit(1762316705.820:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6510 comm="syz.2.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f067cb8f6c9 code=0x7fc00000
[  118.321635][ T5958] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  118.373416][ T6352] bridge0: port 1(bridge_slave_0) entered blocking state
[  118.437369][ T6352] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.456679][ T6352] bridge_slave_0: entered allmulticast mode
[  118.479034][ T6352] bridge_slave_0: entered promiscuous mode
[  118.492599][ T6352] bridge0: port 2(bridge_slave_1) entered blocking state
[  118.498534][ T5958] usb 4-1: Using ep0 maxpacket: 16
[  118.501594][ T6352] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.512498][ T6352] bridge_slave_1: entered allmulticast mode
[  118.537812][ T5958] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  118.552281][ T6352] bridge_slave_1: entered promiscuous mode
[  118.556459][ T5958] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  118.606158][ T5958] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  118.650930][ T5958] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00
[  118.681952][ T5958] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.730635][ T5958] usb 4-1: config 0 descriptor??
[  118.842501][ T6352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  118.874577][ T6352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  119.035842][ T6352] team0: Port device team_slave_0 added
[  119.064597][ T6352] team0: Port device team_slave_1 added
[  119.206584][ T5958] input: HID 05ac:8241 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:05AC:8241.0003/input/input5
[  119.233588][ T6352] batman_adv: batadv0: Adding interface: batadv_slave_0
[  119.266584][ T6352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  119.346823][ T6352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  119.384520][ T5958] appleir 0003:05AC:8241.0003: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.3-1/input0
[  119.399406][ T6352] batman_adv: batadv0: Adding interface: batadv_slave_1
[  119.437991][ T6352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  119.456200][ T5958] usb 4-1: USB disconnect, device number 6
[  119.537600][ T6352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  119.672110][ T6561] fido_id[6561]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  119.794775][ T6352] hsr_slave_0: entered promiscuous mode
[  119.817990][ T6352] hsr_slave_1: entered promiscuous mode
[  119.829783][ T5844] Bluetooth: hci2: command tx timeout
[  119.830576][ T6352] debugfs: 'hsr0' already exists in 'hsr'
[  119.841586][ T6352] Cannot create hsr debugfs directory
[  120.055003][ T6548] loop2: detected capacity change from 0 to 40427
[  120.112825][ T6548] F2FS-fs (loop2): invalid crc value
[  120.385604][ T5844] Bluetooth: hci5: command 0x1003 tx timeout
[  120.387654][ T5835] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  120.490624][ T6548] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  120.571975][ T6548] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  121.047714][ T5834] syz-executor: attempt to access beyond end of device
[  121.047714][ T5834] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  121.119655][ T5834] CPU: 1 UID: 0 PID: 5834 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  121.119684][ T5834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  121.119700][ T5834] Call Trace:
[  121.119709][ T5834]  <TASK>
[  121.119718][ T5834]  dump_stack_lvl+0x189/0x250
[  121.119769][ T5834]  ? __pfx_dump_stack_lvl+0x10/0x10
[  121.119808][ T5834]  ? __pfx_queue_work_on+0x10/0x10
[  121.119833][ T5834]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  121.119866][ T5834]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  121.119912][ T5834]  f2fs_handle_critical_error+0x37c/0x540
[  121.119945][ T5834]  f2fs_write_end_io+0x886/0xb60
[  121.119994][ T5834]  __submit_merged_bio+0x27a/0x6a0
[  121.120027][ T5834]  __submit_merged_write_cond+0x255/0x530
[  121.120061][ T5834]  f2fs_write_data_pages+0x261d/0x3000
[  121.120129][ T5834]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  121.120236][ T5834]  ? __lock_acquire+0xab9/0xd20
[  121.120272][ T5834]  ? do_raw_spin_lock+0x121/0x290
[  121.120306][ T5834]  ? do_raw_spin_unlock+0x122/0x240
[  121.120327][ T5834]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  121.120357][ T5834]  do_writepages+0x32e/0x550
[  121.120396][ T5834]  ? do_raw_spin_unlock+0x122/0x240
[  121.120422][ T5834]  filemap_fdatawrite+0x199/0x240
[  121.120448][ T5834]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  121.120528][ T5834]  ? do_raw_spin_unlock+0x122/0x240
[  121.120554][ T5834]  f2fs_sync_dirty_inodes+0x31f/0x830
[  121.120603][ T5834]  f2fs_write_checkpoint+0x93e/0x2440
[  121.120633][ T5834]  ? __lock_acquire+0xab9/0xd20
[  121.120690][ T5834]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  121.120781][ T5834]  kill_f2fs_super+0x2cc/0x6d0
[  121.120827][ T5834]  ? __pfx_kill_f2fs_super+0x10/0x10
[  121.120878][ T5834]  ? shrinker_free+0x2ce/0x3e0
[  121.120903][ T5834]  deactivate_locked_super+0xbc/0x130
[  121.120938][ T5834]  cleanup_mnt+0x425/0x4c0
[  121.120967][ T5834]  ? lockdep_hardirqs_on+0x9c/0x150
[  121.120991][ T5834]  task_work_run+0x1d4/0x260
[  121.121014][ T5834]  ? __pfx_task_work_run+0x10/0x10
[  121.121032][ T5834]  ? __x64_sys_umount+0x122/0x160
[  121.121057][ T5834]  ? exit_to_user_mode_loop+0x40/0x130
[  121.121085][ T5834]  exit_to_user_mode_loop+0xe9/0x130
[  121.121109][ T5834]  do_syscall_64+0x2cd/0xfa0
[  121.121130][ T5834]  ? lockdep_hardirqs_on+0x9c/0x150
[  121.121150][ T5834]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  121.121171][ T5834]  ? clear_bhb_loop+0x60/0xb0
[  121.121196][ T5834]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  121.121216][ T5834] RIP: 0033:0x7f067cb909f7
[  121.121242][ T5834] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  121.121259][ T5834] RSP: 002b:00007fff59af1e28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  121.121288][ T5834] RAX: 0000000000000000 RBX: 00007f067cc11d7d RCX: 00007f067cb909f7
[  121.121301][ T5834] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff59af1ee0
[  121.121314][ T5834] RBP: 00007fff59af1ee0 R08: 0000000000000000 R09: 0000000000000000
[  121.121326][ T5834] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff59af2f70
[  121.121339][ T5834] R13: 00007f067cc11d7d R14: 000000000001d83d R15: 00007fff59af2fb0
[  121.121376][ T5834]  </TASK>
[  121.121385][ T5834] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  122.116000][ T6352] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  122.154607][ T6352] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  122.246622][ T6352] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  122.364489][ T6352] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  122.712067][ T6606] loop5: detected capacity change from 0 to 131072
[  122.759415][ T6606] F2FS-fs (loop5): invalid crc value
[  122.842792][ T6606] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  122.862365][ T6606] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  122.900214][ T6352] 8021q: adding VLAN 0 to HW filter on device bond0
[  123.007506][ T6352] 8021q: adding VLAN 0 to HW filter on device team0
[  123.076572][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state
[  123.083858][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state
[  123.143640][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state
[  123.150917][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state
[  123.402690][ T6645] loop1: detected capacity change from 0 to 47
[  123.410832][ T6352] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  124.147066][ T6352] 8021q: adding VLAN 0 to HW filter on device batadv0
[  124.253214][ T6664] input: syz1 as /devices/virtual/input/input6
[  124.525061][ T6672] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  124.574134][ T6672] binder: 6671:6672 ioctl c018620b 200000000000 returned -14
[  124.589277][ T6674] loop3: detected capacity change from 0 to 256
[  125.321256][ T6352] veth0_vlan: entered promiscuous mode
[  125.369740][ T6352] veth1_vlan: entered promiscuous mode
[  125.477312][ T6352] veth0_macvtap: entered promiscuous mode
[  125.514667][ T6352] veth1_macvtap: entered promiscuous mode
[  125.579945][ T6352] batman_adv: batadv0: Interface activated: batadv_slave_0
[  125.632885][ T6352] batman_adv: batadv0: Interface activated: batadv_slave_1
[  125.699446][ T1343] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  125.779109][ T1163] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  125.820447][ T1163] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  125.918691][ T6702] ALSA: mixer_oss: invalid OSS volume 'LI'
[  125.926085][ T1163] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  126.220140][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.227041][ T6710] loop1: detected capacity change from 0 to 1024
[  126.260688][ T6710] EXT4-fs: inline encryption not supported
[  126.262832][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.307239][ T6710] EXT4-fs: Ignoring removed nobh option
[  126.325827][ T6710] EXT4-fs: Ignoring removed bh option
[  126.388638][ T6710] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  126.528637][   T30] audit: type=1800 audit(1762316714.360:5): pid=6710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.209" name="file1" dev="loop1" ino=15 res=0 errno=0
[  126.553140][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.597557][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.674324][ T5832] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.716496][ T6692] loop3: detected capacity change from 0 to 32768
[  126.760625][ T6692] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.204 (6692)
[  126.856358][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  126.923137][ T6692] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  126.990105][ T6692] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  127.320860][ T6692] BTRFS info (device loop3): enabling ssd optimizations
[  127.357585][ T6692] BTRFS info (device loop3): turning on async discard
[  127.408919][ T6692] BTRFS info (device loop3): enabling free space tree
[  127.652924][ T5829] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  127.698725][ T6714] loop5: detected capacity change from 0 to 32768
[  127.741926][ T6714] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.210 (6714)
[  127.866716][ T6714] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  127.903997][ T6714] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm
[  128.254293][ T6714] BTRFS info (device loop5): setting nodatasum
[  128.325031][ T6714] BTRFS info (device loop5): turning off barriers
[  128.331568][ T6714] BTRFS info (device loop5): turning on async discard
[  128.389905][ T6714] BTRFS info (device loop5): enabling free space tree
[  128.434945][ T6714] BTRFS info (device loop5): enabling auto defrag
[  128.441470][ T6714] BTRFS info (device loop5): use zlib compression, level 3
[  129.049632][ T5995] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  129.394958][ T5887] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  129.618248][ T5887] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  129.649245][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.709156][ T5887] usb 2-1: Product: syz
[  129.722729][ T5887] usb 2-1: Manufacturer: syz
[  129.757450][ T5887] usb 2-1: SerialNumber: syz
[  129.803027][ T5887] usb 2-1: config 0 descriptor??
[  129.852559][ T6807] loop2: detected capacity change from 0 to 32768
[  129.861939][ T6807] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.226 (6807)
[  129.893876][ T6807] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  129.904167][ T6807] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  130.082477][ T6807] BTRFS info (device loop2): enabling ssd optimizations
[  130.089572][ T6807] BTRFS info (device loop2): turning on async discard
[  130.096624][ T6807] BTRFS info (device loop2): enabling free space tree
[  130.748979][ T5834] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  131.073664][    T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!!
[  131.114200][ T5887] usb 2-1: f81604_read: reg: 100e failed: -EPROTO
[  131.183181][ T6835] loop3: detected capacity change from 0 to 32768
[  131.202671][ T5887] usb 2-1: f81604_read: reg: 200f failed: -EPROTO
[  131.279075][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  131.308664][ T5887] usb 2-1: USB disconnect, device number 4
[  131.363561][   T30] audit: type=1800 audit(1762316719.190:6): pid=6835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.229" name="file1" dev="loop3" ino=4 res=0 errno=0
[  131.395028][ T5887] usb 2-1: f81604_read: reg: 100f failed: -ENODEV
[  131.412519][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  131.518358][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  131.572281][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  131.698815][ T5887] usb 2-1: f81604_read: reg: 200f failed: -ENODEV
[  131.711979][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  131.721068][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  131.729869][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  131.740624][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  131.992678][ T6871] process 'syz.1.237' launched './file0' with NULL argv: empty string added
[  132.335081][   T30] audit: type=1800 audit(1762316720.170:7): pid=6876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.241" name="bus" dev="tmpfs" ino=329 res=0 errno=0
[  133.328844][ T6908] netlink: 4 bytes leftover after parsing attributes in process `syz.3.245'.
[  133.367587][ T6908] netlink: 'syz.3.245': attribute type 13 has an invalid length.
[  133.416088][ T6066] nci: nci_ntf_packet: unsupported ntf opcode 0xf2a
[  133.498357][ T6908] vxlan0: entered promiscuous mode
[  133.544785][ T3024] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  133.578986][ T3024] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  133.599649][ T3024] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  133.624216][ T3024] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  133.798177][ T6921] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  133.888843][ T6861] loop2: detected capacity change from 0 to 32768
[  133.942570][ T6861] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  134.104431][ T6861] XFS (loop2): Ending clean mount
[  134.505087][ T5938] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  134.587879][ T5958] usb 4-1: new full-speed USB device number 7 using dummy_hcd
[  134.625476][ T6954] loop1: detected capacity change from 0 to 16
[  134.686835][ T5834] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  134.705104][ T5938] usb 5-1: Using ep0 maxpacket: 32
[  134.725680][ T5938] usb 5-1: config index 0 descriptor too short (expected 54082, got 18)
[  134.734088][ T5938] usb 5-1: config 78 has too many interfaces: 64, using maximum allowed: 32
[  134.775778][ T5938] usb 5-1: config 78 has an invalid descriptor of length 0, skipping remainder of the config
[  134.940340][ T5938] usb 5-1: config 78 has 0 interfaces, different from the descriptor's value: 64
[  135.027705][ T5958] usb 4-1: unable to get BOS descriptor or descriptor too short
[  135.044220][ T6956] loop5: detected capacity change from 0 to 2048
[  135.062064][ T5958] usb 4-1: not running at top speed; connect to a high speed hub
[  135.080466][ T5938] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  135.090677][ T5938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.118326][ T5958] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  135.129479][ T5938] usb 5-1: Product: syz
[  135.133696][ T5938] usb 5-1: Manufacturer: syz
[  135.167293][ T5958] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  135.176439][ T5938] usb 5-1: SerialNumber: syz
[  135.186706][ T5958] usb 4-1: string descriptor 0 read error: -22
[  135.193115][ T5958] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  135.209774][ T5958] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.221763][ T6956] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  135.301387][ T6954] erofs (device loop1): mounted with root inode @ nid 36.
[  135.337776][ T5958] usb 4-1: 0:2 : does not exist
[  135.495503][ T5938] usb 5-1: USB disconnect, device number 3
[  136.176557][ T5958] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5)
[  136.220521][ T5958] usb 4-1: 5:0: failed to get current value for ch 1 (-22)
[  136.364155][ T5958] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5)
[  136.402056][ T6969] loop4: detected capacity change from 0 to 2048
[  136.417343][ T5958] usb 4-1: USB disconnect, device number 7
[  137.214955][ T5887] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  137.236742][ T6991] binder: 6990:6991 ioctl c0306201 2000000001c0 returned -22
[  137.395191][ T5887] usb 4-1: Using ep0 maxpacket: 32
[  137.427000][ T5887] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[  137.457637][ T5887] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  137.488556][ T5887] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[  137.527180][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  137.564993][ T5887] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  137.574711][ T5887] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  137.644731][ T5887] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  137.690896][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.702004][ T6971] loop2: detected capacity change from 0 to 32768
[  137.728600][ T5887] usb 4-1: config 0 descriptor??
[  137.746966][ T6971] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.261 (6971)
[  137.827134][ T6971] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  137.855220][ T6971] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  137.957196][ T6971] BTRFS info (device loop2): enabling ssd optimizations
[  137.978081][ T5887] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  138.018463][ T6971] BTRFS info (device loop2): turning on async discard
[  138.048499][ T6971] BTRFS info (device loop2): enabling free space tree
[  138.073751][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  138.092845][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  138.198718][ T5887] usb 4-1: USB disconnect, device number 8
[  138.244148][ T5887] usblp0: removed
[  138.273952][ T5834] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  138.478514][ T7030] netlink: 'syz.4.272': attribute type 21 has an invalid length.
[  138.495835][ T7030] netlink: 'syz.4.272': attribute type 22 has an invalid length.
[  138.529576][ T7030] netlink: 'syz.4.272': attribute type 23 has an invalid length.
[  138.549765][ T7030] netlink: 'syz.4.272': attribute type 25 has an invalid length.
[  138.572274][ T7030] netlink: 'syz.4.272': attribute type 26 has an invalid length.
[  138.600618][ T7030] netlink: 16 bytes leftover after parsing attributes in process `syz.4.272'.
[  139.244741][ T7005] loop5: detected capacity change from 0 to 32768
[  139.376143][ T7005] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  139.549619][ T7005] XFS (loop5): Ending clean mount
[  139.624206][ T7005] XFS (loop5): Quotacheck needed: Please wait.
[  139.753594][ T7039] loop2: detected capacity change from 0 to 32768
[  139.775125][ T7039] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.274 (7039)
[  139.807817][ T7005] XFS (loop5): Quotacheck: Done.
[  139.851921][ T7039] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  139.925132][ T7039] BTRFS info (device loop2): using blake2b (blake2b-256-lib) checksum algorithm
[  140.030037][ T5995] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  140.111820][ T7039] BTRFS info (device loop2): enabling ssd optimizations
[  140.148916][ T7039] BTRFS info (device loop2): turning on async discard
[  140.157021][ T7039] BTRFS info (device loop2): enabling free space tree
[  140.338971][   T30] audit: type=1800 audit(1762316728.180:8): pid=7039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.274" name="file1" dev="loop2" ino=261 res=0 errno=0
[  140.450210][ T7080] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes
[  140.687948][ T5834] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  140.925904][ T7087] overlayfs: invalid redirect ((null))
[  141.018765][ T7060] loop4: detected capacity change from 0 to 32768
[  141.066074][ T7060] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.281 (7060)
[  141.164748][ T7060] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  141.208442][ T7060] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm
[  141.530070][ T7060] BTRFS info (device loop4): setting nodatasum
[  141.555024][ T7060] BTRFS info (device loop4): turning off barriers
[  141.571820][ T7060] BTRFS info (device loop4): turning on async discard
[  141.589197][ T7060] BTRFS info (device loop4): enabling free space tree
[  141.624935][ T7060] BTRFS info (device loop4): enabling auto defrag
[  141.639271][ T7060] BTRFS info (device loop4): use zlib compression, level 3
[  142.029517][ T6352] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  143.640955][ T7147] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  143.658331][ T7154] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  143.667327][ T7147] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  143.694743][ T7147] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  143.730124][ T7147] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  143.745106][ T7147] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  143.786646][ T7147] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  143.801012][ T7143] loop3: detected capacity change from 0 to 32768
[  143.811376][ T7143] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.302 (7143)
[  143.834659][ T7147] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  143.858612][ T7147] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  143.880091][ T7143] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  143.899060][ T7147] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  143.908445][ T7143] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  143.921373][ T7147] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  143.937879][ T7147] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  143.945579][ T7159] fuse: Bad value for 'fd'
[  143.946054][ T7147] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  143.984728][ T7147] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  143.994455][ T7145] loop2: detected capacity change from 0 to 40427
[  144.042231][ T7145] F2FS-fs (loop2): invalid crc value
[  144.098345][ T7143] BTRFS info (device loop3): enabling ssd optimizations
[  144.105547][ T7143] BTRFS info (device loop3): turning on async discard
[  144.112365][ T7143] BTRFS info (device loop3): enabling free space tree
[  144.275681][ T5938] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  144.319755][ T5829] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  144.324330][ T7145] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  144.343231][ T7145] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  144.448494][ T5938] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  144.534927][ T5938] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  144.574605][ T5938] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  144.604267][ T5938] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  144.649454][ T5938] usb 2-1: Manufacturer: syz
[  144.685473][ T5834] syz-executor: attempt to access beyond end of device
[  144.685473][ T5834] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  144.702416][ T5938] usb 2-1: config 0 descriptor??
[  144.730208][ T5834] CPU: 0 UID: 0 PID: 5834 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  144.730236][ T5834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  144.730247][ T5834] Call Trace:
[  144.730256][ T5834]  <TASK>
[  144.730265][ T5834]  dump_stack_lvl+0x189/0x250
[  144.730305][ T5834]  ? __pfx_dump_stack_lvl+0x10/0x10
[  144.730335][ T5834]  ? __pfx_queue_work_on+0x10/0x10
[  144.730360][ T5834]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  144.730402][ T5834]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  144.730464][ T5834]  f2fs_handle_critical_error+0x37c/0x540
[  144.730502][ T5834]  f2fs_write_end_io+0x886/0xb60
[  144.730580][ T5834]  __submit_merged_bio+0x27a/0x6a0
[  144.730623][ T5834]  __submit_merged_write_cond+0x255/0x530
[  144.730659][ T5834]  f2fs_write_data_pages+0x261d/0x3000
[  144.730736][ T5834]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  144.730785][ T5834]  ? kernel_text_address+0xa5/0xe0
[  144.730847][ T5834]  ? stack_depot_save_flags+0x40/0x860
[  144.730908][ T5834]  ? __lock_acquire+0xab9/0xd20
[  144.730946][ T5834]  ? do_raw_spin_lock+0x121/0x290
[  144.730982][ T5834]  ? do_raw_spin_unlock+0x122/0x240
[  144.731002][ T5834]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  144.731033][ T5834]  do_writepages+0x32e/0x550
[  144.731075][ T5834]  ? do_raw_spin_unlock+0x122/0x240
[  144.731102][ T5834]  filemap_fdatawrite+0x199/0x240
[  144.731128][ T5834]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  144.731217][ T5834]  ? do_raw_spin_unlock+0x122/0x240
[  144.731244][ T5834]  f2fs_sync_dirty_inodes+0x31f/0x830
[  144.731293][ T5834]  f2fs_write_checkpoint+0x93e/0x2440
[  144.731322][ T5834]  ? __lock_acquire+0xab9/0xd20
[  144.731385][ T5834]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  144.731498][ T5834]  kill_f2fs_super+0x2cc/0x6d0
[  144.731538][ T5834]  ? __pfx_kill_f2fs_super+0x10/0x10
[  144.731593][ T5834]  ? shrinker_free+0x2ce/0x3e0
[  144.731619][ T5834]  deactivate_locked_super+0xbc/0x130
[  144.731655][ T5834]  cleanup_mnt+0x425/0x4c0
[  144.731685][ T5834]  ? lockdep_hardirqs_on+0x9c/0x150
[  144.731711][ T5834]  task_work_run+0x1d4/0x260
[  144.731736][ T5834]  ? __pfx_task_work_run+0x10/0x10
[  144.731754][ T5834]  ? __x64_sys_umount+0x122/0x160
[  144.731781][ T5834]  ? exit_to_user_mode_loop+0x40/0x130
[  144.731812][ T5834]  exit_to_user_mode_loop+0xe9/0x130
[  144.731838][ T5834]  do_syscall_64+0x2cd/0xfa0
[  144.731859][ T5834]  ? lockdep_hardirqs_on+0x9c/0x150
[  144.731879][ T5834]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.731900][ T5834]  ? clear_bhb_loop+0x60/0xb0
[  144.731927][ T5834]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.731946][ T5834] RIP: 0033:0x7f067cb909f7
[  144.731966][ T5834] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  144.731982][ T5834] RSP: 002b:00007fff59af1e28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  144.732004][ T5834] RAX: 0000000000000000 RBX: 00007f067cc11d7d RCX: 00007f067cb909f7
[  144.732018][ T5834] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff59af1ee0
[  144.732030][ T5834] RBP: 00007fff59af1ee0 R08: 0000000000000000 R09: 0000000000000000
[  144.732042][ T5834] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff59af2f70
[  144.732055][ T5834] R13: 00007f067cc11d7d R14: 0000000000023462 R15: 00007fff59af2fb0
[  144.732096][ T5834]  </TASK>
[  144.732104][ T5834] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  144.964645][ T7184] loop3: detected capacity change from 0 to 256
[  145.163567][ T7184] exfat: Deprecated parameter 'utf8'
[  145.304018][ T7184] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d)
[  145.536507][ T7190] loop3: detected capacity change from 0 to 256
[  145.633336][ T5938] uclogic 0003:256C:006D.0004: failed retrieving string descriptor #100: -71
[  145.681708][ T5844] Bluetooth: hci1: command 0x0c1a tx timeout
[  145.693473][ T5938] uclogic 0003:256C:006D.0004: failed retrieving pen parameters: -71
[  145.706144][ T5938] uclogic 0003:256C:006D.0004: failed probing pen v1 parameters: -71
[  145.714332][ T5938] uclogic 0003:256C:006D.0004: failed probing parameters: -71
[  145.727114][ T5938] uclogic 0003:256C:006D.0004: probe with driver uclogic failed with error -71
[  145.740335][ T5938] usb 2-1: USB disconnect, device number 5
[  145.746777][ T5844] Bluetooth: hci3: command 0x0c1a tx timeout
[  145.904963][ T5844] Bluetooth: hci4: command 0x0c1a tx timeout
[  145.985686][ T5844] Bluetooth: hci2: command 0x0405 tx timeout
[  146.011149][ T7200] loop5: detected capacity change from 0 to 16
[  146.040279][ T7200] erofs (device loop5): mounted with root inode @ nid 36.
[  146.205260][ T5887] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  146.405119][ T5887] usb 5-1: Using ep0 maxpacket: 8
[  146.420081][ T5887] usb 5-1: config 0 has an invalid interface number: 55 but max is 0
[  146.440376][ T5887] usb 5-1: config 0 has no interface number 0
[  146.449127][ T7213] loop1: detected capacity change from 0 to 1024
[  146.455884][ T7214] loop5: detected capacity change from 0 to 1024
[  146.475460][ T5887] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  146.476528][ T7214] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  146.494042][ T5887] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  146.576176][ T7214] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #3: block 1: comm syz.5.322: lblock 1 mapped to illegal pblock 1 (length 1)
[  146.587278][ T5887] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  146.603126][ T7214] Quota error (device loop5): write_blk: dquota write failed
[  146.621600][ T7214] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  146.645058][ T7214] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.322: Failed to acquire dquot type 0
[  146.668214][ T7214] EXT4-fs error (device loop5): ext4_free_blocks:6706: comm syz.5.322: Freeing blocks not in datazone - block = 0, count = 4096
[  146.683671][ T5887] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  146.722153][ T6066] hfsplus: b-tree write err: -5, ino 4
[  146.736878][ T7214] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.322: Invalid inode bitmap blk 0 in block_group 0
[  146.761830][ T1343] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1)
[  146.779182][ T5887] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  146.804983][ T7214] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem
[  146.824954][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.836583][ T7214] EXT4-fs (loop5): 1 orphan inode deleted
[  146.844341][ T7214] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  146.845156][ T1343] Quota error (device loop5): remove_tree: Can't read quota data block 1
[  146.875984][ T5887] usb 5-1: config 0 descriptor??
[  146.908472][ T5887] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  146.942250][ T1343] EXT4-fs error (device loop5): ext4_release_dquot:6981: comm kworker/u8:7: Failed to release dquot type 0
[  146.948737][ T7214] EXT4-fs error (device loop5): ext4_search_dir:1474: inode #2: block 16: comm syz.5.322: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0
[  146.978880][ T7219] loop1: detected capacity change from 0 to 512
[  147.005962][ T7219] EXT4-fs: Ignoring removed nobh option
[  147.031597][ T7219] EXT4-fs error (device loop1): ext4_iget_extra_inode:5072: inode #15: comm syz.1.325: corrupted in-inode xattr: e_value size too large
[  147.071413][ T7219] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.325: couldn't read orphan inode 15 (err -117)
[  147.111721][ T7198] ldusb 5-1:0.55: Write buffer overflow, 2147479232 bytes dropped
[  147.123530][ T5895] usb 5-1: USB disconnect, device number 4
[  147.138421][ T5895] ldusb 5-1:0.55: LD USB Device #0 now disconnected
[  147.164707][ T7219] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  147.212169][ T5995] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.351015][ T5832] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.728786][   T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  147.745594][ T5844] Bluetooth: hci1: command 0x0c1a tx timeout
[  147.825104][ T5844] Bluetooth: hci3: command 0x0c1a tx timeout
[  147.917532][   T10] usb 4-1: config index 0 descriptor too short (expected 45, got 36)
[  147.946172][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  147.985032][ T5844] Bluetooth: hci4: command 0x0c1a tx timeout
[  147.988798][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  148.040218][ T7236] loop4: detected capacity change from 0 to 256
[  148.057805][   T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  148.066224][ T5844] Bluetooth: hci2: command 0x0405 tx timeout
[  148.129077][   T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  148.182398][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.234008][   T10] usb 4-1: config 0 descriptor??
[  148.243470][ T7236] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  148.268977][ T7242] loop2: detected capacity change from 0 to 128
[  148.377648][ T7226] loop5: detected capacity change from 0 to 40427
[  148.384344][   T30] audit: type=1800 audit(1762316736.220:9): pid=7242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.335" name="file1" dev="loop2" ino=1048627 res=0 errno=0
[  148.407597][ T7226] F2FS-fs: heap/no_heap options were deprecated
[  148.465115][ T7226] F2FS-fs (loop5): build fault injection rate: 19
[  148.471605][ T7226] F2FS-fs (loop5): build fault injection type: 0x3bfe8c
[  148.511832][ T7226] F2FS-fs (loop5): invalid crc value
[  148.587183][ T7226] F2FS-fs (loop5): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x615/0x970
[  148.690664][   T10] plantronics 0003:047F:FFFF.0005: reserved main item tag 0xd
[  148.769677][   T10] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  148.907082][ T7226] F2FS-fs (loop5): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x20a/0x3f0
[  148.963211][ T7226] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  149.017267][ T5958] usb 4-1: USB disconnect, device number 9
[  149.047197][ T7226] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  149.109844][ T7253] fido_id[7253]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory
[  149.130577][ T7226] F2FS-fs (loop5): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  149.157596][   T30] audit: type=1800 audit(1762316737.000:10): pid=7226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.327" name="file1" dev="loop5" ino=10 res=0 errno=0
[  149.198602][ T7226] syz.5.327: attempt to access beyond end of device
[  149.198602][ T7226] loop5: rw=34817, sector=45096, nr_sectors = 8 limit=40427
[  149.317844][ T7226] F2FS-fs (loop5): inject truncate fail in f2fs_truncate of f2fs_file_write_iter+0x20b6/0x24a0
[  149.557793][ T5995] syz-executor: attempt to access beyond end of device
[  149.557793][ T5995] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  149.604934][ T5995] CPU: 0 UID: 0 PID: 5995 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  149.604968][ T5995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  149.604981][ T5995] Call Trace:
[  149.604989][ T5995]  <TASK>
[  149.604997][ T5995]  dump_stack_lvl+0x189/0x250
[  149.605037][ T5995]  ? __pfx_dump_stack_lvl+0x10/0x10
[  149.605068][ T5995]  ? __pfx_queue_work_on+0x10/0x10
[  149.605092][ T5995]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  149.605125][ T5995]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  149.605169][ T5995]  f2fs_handle_critical_error+0x37c/0x540
[  149.605202][ T5995]  f2fs_write_end_io+0x886/0xb60
[  149.605250][ T5995]  __submit_merged_bio+0x27a/0x6a0
[  149.605283][ T5995]  __submit_merged_write_cond+0x255/0x530
[  149.605313][ T5995]  f2fs_write_data_pages+0x261d/0x3000
[  149.605370][ T5995]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  149.605441][ T5995]  ? __mod_zone_page_state+0xd7/0x140
[  149.605480][ T5995]  ? folios_put_refs+0x58b/0x670
[  149.605516][ T5995]  ? __lock_acquire+0xab9/0xd20
[  149.605551][ T5995]  ? do_raw_spin_lock+0x121/0x290
[  149.605584][ T5995]  ? do_raw_spin_unlock+0x122/0x240
[  149.605604][ T5995]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  149.605634][ T5995]  do_writepages+0x32e/0x550
[  149.605671][ T5995]  ? do_raw_spin_unlock+0x122/0x240
[  149.605696][ T5995]  filemap_fdatawrite+0x199/0x240
[  149.605731][ T5995]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  149.605811][ T5995]  ? do_raw_spin_unlock+0x122/0x240
[  149.605835][ T5995]  f2fs_sync_dirty_inodes+0x31f/0x830
[  149.605882][ T5995]  f2fs_write_checkpoint+0x93e/0x2440
[  149.605912][ T5995]  ? __lock_acquire+0xab9/0xd20
[  149.605968][ T5995]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  149.606062][ T5995]  kill_f2fs_super+0x2cc/0x6d0
[  149.606099][ T5995]  ? __pfx_kill_f2fs_super+0x10/0x10
[  149.606149][ T5995]  ? shrinker_free+0x2ce/0x3e0
[  149.606173][ T5995]  deactivate_locked_super+0xbc/0x130
[  149.606208][ T5995]  cleanup_mnt+0x425/0x4c0
[  149.606237][ T5995]  ? lockdep_hardirqs_on+0x9c/0x150
[  149.606261][ T5995]  task_work_run+0x1d4/0x260
[  149.606285][ T5995]  ? __pfx_task_work_run+0x10/0x10
[  149.606302][ T5995]  ? __x64_sys_umount+0x122/0x160
[  149.606328][ T5995]  ? exit_to_user_mode_loop+0x40/0x130
[  149.606358][ T5995]  exit_to_user_mode_loop+0xe9/0x130
[  149.606383][ T5995]  do_syscall_64+0x2cd/0xfa0
[  149.606403][ T5995]  ? lockdep_hardirqs_on+0x9c/0x150
[  149.606424][ T5995]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  149.606444][ T5995]  ? clear_bhb_loop+0x60/0xb0
[  149.606469][ T5995]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  149.606489][ T5995] RIP: 0033:0x7f30be3909f7
[  149.606508][ T5995] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  149.606524][ T5995] RSP: 002b:00007ffc4573e2c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  149.606546][ T5995] RAX: 0000000000000000 RBX: 00007f30be411d7d RCX: 00007f30be3909f7
[  149.606560][ T5995] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc4573e380
[  149.606572][ T5995] RBP: 00007ffc4573e380 R08: 0000000000000000 R09: 0000000000000000
[  149.606585][ T5995] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc4573f410
[  149.606598][ T5995] R13: 00007f30be411d7d R14: 000000000002477a R15: 00007ffc4573f450
[  149.606634][ T5995]  </TASK>
[  149.606756][ T5995] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  149.896947][ T5844] Bluetooth: hci1: command 0x0c1a tx timeout
[  149.911610][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout
[  150.109600][ T5835] Bluetooth: hci4: command 0x0c1a tx timeout
[  150.144992][ T5835] Bluetooth: hci2: command 0x0405 tx timeout
[  150.224045][ T7272] loop2: detected capacity change from 0 to 2048
[  150.365539][ T7277] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  150.545052][  T116] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  150.705662][  T116] usb 5-1: Using ep0 maxpacket: 16
[  150.724467][  T116] usb 5-1: config 28 has an invalid interface number: 169 but max is 0
[  150.735538][  T116] usb 5-1: config 28 has no interface number 0
[  150.741784][  T116] usb 5-1: config 28 interface 169 has no altsetting 0
[  150.814935][  T116] usb 5-1: string descriptor 0 read error: -71
[  150.821288][  T116] usb 5-1: New USB device found, idVendor=04e8, idProduct=a101, bcdDevice= 4.48
[  150.855006][  T116] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.917465][  T116] r8152-cfgselector 5-1: Unknown version 0x0000
[  150.923841][  T116] r8152-cfgselector 5-1: rejected 1 configuration due to insufficient available bus power
[  150.985048][  T116] r8152-cfgselector 5-1: no configuration chosen from 1 choice
[  151.016174][  T116] r8152-cfgselector 5-1: USB disconnect, device number 5
[  151.050684][ T7285] loop5: detected capacity change from 0 to 256
[  151.069219][ T7285] exfat: Deprecated parameter 'namecase'
[  151.155456][ T7285] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d)
[  151.240888][ T7290] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  151.638848][ T7304] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  152.649783][ T7329] loop1: detected capacity change from 0 to 512
[  152.745963][ T7329] EXT4-fs: Ignoring removed nomblk_io_submit option
[  152.860168][ T7329] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  153.005123][ T7329] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c800e028, mo2=0003]
[  153.013489][ T7329] EXT4-fs (loop1): orphan cleanup on readonly fs
[  153.257918][ T7329] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0
[  153.338778][ T7329] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  153.350904][ T7340] loop5: detected capacity change from 0 to 32768
[  153.413685][ T7340] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  153.422286][ T7340] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  153.430134][ T7329] EXT4-fs (loop1): Cannot turn on quotas: error -22
[  153.480325][ T7345] loop2: detected capacity change from 0 to 4096
[  153.483369][ T7329] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.369: bg 0: block 40: padding at end of block bitmap is not set
[  153.537153][ T7348] loop3: detected capacity change from 0 to 256
[  153.561814][ T7329] EXT4-fs (loop1): Remounting filesystem read-only
[  153.586327][ T7340] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  153.599178][ T5938] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  153.611920][ T5938] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  153.612471][ T7351] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  153.640651][ T7329] EXT4-fs (loop1): 1 truncate cleaned up
[  153.676541][ T7329] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  153.712801][ T7348] exFAT-fs (loop3): failed to load upcase table (idx : 0x00002e7f, chksum : 0x03279930, utbl_chksum : 0xe619d30d)
[  153.771816][ T5938] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 159ms
[  153.843239][ T7345] NILFS error (device loop2): nilfs_dotdot: directory #12 missing '.'
[  153.909062][ T5938] gfs2: fsid=syz:syz.0: jid=0: Done
[  153.915518][ T7340] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  153.942664][ T7345] Remounting filesystem read-only
[  153.991166][ T5832] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  154.224401][ T5834] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer
[  154.329802][ T7358] loop3: detected capacity change from 0 to 512
[  154.409429][ T7358] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  154.425556][ T7360] block nbd2: not configured, cannot reconfigure
[  154.492567][ T7358] EXT4-fs (loop3): Test dummy encryption mode enabled
[  154.583672][ T7358] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.380: inode has both inline data and extents flags
[  154.724736][ T7358] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.380: couldn't read orphan inode 15 (err -117)
[  154.886808][ T7358] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  154.979291][ T7358] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni"
[  155.199409][ T7358] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx"
[  155.622656][ T5829] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  156.604124][ T7399] loop5: detected capacity change from 0 to 512
[  157.205606][ T7411] loop2: detected capacity change from 0 to 8192
[  157.311727][ T7399] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  157.392311][ T7399] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  157.678506][ T5995] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  157.935556][ T7383] loop1: detected capacity change from 0 to 262144
[  157.943977][ T7383] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.390 (7383)
[  157.970437][ T7383] BTRFS info (device loop1): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  157.985196][ T7383] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  158.131182][ T7383] BTRFS info (device loop1): enabling ssd optimizations
[  158.142371][ T7383] BTRFS info (device loop1): enabling free space tree
[  158.231662][ T7383] BTRFS info (device loop1): balance: start -d -m -s
[  158.253786][ T7383] BTRFS info (device loop1): relocating block group 30408704 flags metadata|dup
[  158.328367][ T7383] BTRFS info (device loop1): found 3 extents, stage: move data extents
[  158.382956][ T7383] BTRFS info (device loop1): relocating block group 22020096 flags system|dup
[  158.439335][ T7383] BTRFS info (device loop1): found 1 extents, stage: move data extents
[  158.478615][ T7441] netlink: 8 bytes leftover after parsing attributes in process `syz.5.405'.
[  158.488702][ T7383] BTRFS info (device loop1): relocating block group 13631488 flags data
[  158.514770][ T7383] BTRFS info (device loop1): balance: canceled
[  158.564133][ T5832] BTRFS info (device loop1): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  159.077940][ T7452] netlink: 24 bytes leftover after parsing attributes in process `syz.3.411'.
[  159.113445][ T7454] loop2: detected capacity change from 0 to 512
[  159.134065][ T7452] netlink: 'syz.3.411': attribute type 1 has an invalid length.
[  159.164590][ T7452] netlink: 28 bytes leftover after parsing attributes in process `syz.3.411'.
[  159.197624][ T7454] EXT4-fs: Ignoring removed i_version option
[  159.247177][ T7454] EXT4-fs: Ignoring removed bh option
[  159.350095][ T7454] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  159.401129][ T7467] loop3: detected capacity change from 0 to 24
[  159.416630][ T7454] ext4 filesystem being mounted at /91/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  159.426175][ T7467] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  159.483163][ T7467] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  159.491964][   T30] audit: type=1800 audit(1762316747.330:11): pid=7454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.412" name="file1" dev="loop2" ino=15 res=0 errno=0
[  159.539879][ T7467] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  159.545133][ T7469] loop4: detected capacity change from 0 to 512
[  159.653530][ T7469] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  159.706534][ T7469] ext4 filesystem being mounted at /48/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  159.738495][ T7475] loop3: detected capacity change from 0 to 64
[  159.765533][ T5834] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.804914][    T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  159.978727][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  160.014595][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  160.046732][ T6352] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.079193][    T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  160.132543][    T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  160.163270][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.243139][    T9] usb 2-1: config 0 descriptor??
[  160.588018][ T7484] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  160.619480][ T7484] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  160.665232][ T7484] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  160.695628][ T7484] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  160.716619][    T9] plantronics 0003:047F:FFFF.0006: reserved main item tag 0xd
[  160.748585][ T7484] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  160.783100][    T9] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  161.008348][    T9] usb 2-1: USB disconnect, device number 6
[  161.309248][ T7506] loop2: detected capacity change from 0 to 1024
[  161.552918][ T7485] loop5: detected capacity change from 0 to 40427
[  161.560990][ T6066] hfsplus: b-tree write err: -5, ino 3
[  161.588440][ T7485] F2FS-fs: heap/no_heap options were deprecated
[  161.635970][ T7485] F2FS-fs (loop5): build fault injection rate: 19
[  161.642456][ T7485] F2FS-fs (loop5): build fault injection type: 0x3bfe8c
[  161.660520][ T5200] udevd[5200]: worker [6362] terminated by signal 33 (Unknown signal 33)
[  161.691766][ T5200] udevd[5200]: worker [6362] failed while handling '/devices/virtual/block/loop5'
[  161.719188][ T7485] F2FS-fs (loop5): invalid crc value
[  161.793222][ T7485] F2FS-fs (loop5): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x615/0x970
[  161.868346][ T7522] Bluetooth: hci0: unsupported parameter 178
[  161.885496][ T7522] Bluetooth: hci0: invalid length 0, exp 2 for type 12
[  162.061948][ T7485] F2FS-fs (loop5): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x20a/0x3f0
[  162.066249][ T7528] syz.4.439 uses obsolete (PF_INET,SOCK_PACKET)
[  162.113261][ T7485] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  162.167936][ T7485] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  162.254139][ T7530] loop3: detected capacity change from 0 to 4096
[  162.261975][ T7485] F2FS-fs (loop5): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  162.290236][ T7530] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  162.333093][ T7485] F2FS-fs (loop5): inject page alloc in f2fs_grab_cache_folio of f2fs_new_node_folio+0x131/0xa40
[  162.473484][ T5995] F2FS-fs (loop5): inject inconsistent footer in sanity_check_node_footer of f2fs_get_dnode_of_data+0xab4/0x1cf0
[  162.534925][ T7530] ntfs3(loop3): Failed to initialize $Extend/$Reparse.
[  162.552650][ T5995] F2FS-fs (loop5): inconsistent node block, node_type:3, nid:11, node_footer[nid:11,ino:3,ofs:2041,cpver:0,blkaddr:0]
[  162.626520][ T5844] Bluetooth: hci3: command 0x0c1a tx timeout
[  162.632603][ T5844] Bluetooth: hci1: command 0x0c1a tx timeout
[  162.705421][ T5844] Bluetooth: hci4: command 0x0c1a tx timeout
[  162.723349][ T5995] syz-executor: attempt to access beyond end of device
[  162.723349][ T5995] loop5: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  162.785839][ T5844] Bluetooth: hci2: command 0x0405 tx timeout
[  162.803611][ T5995] CPU: 1 UID: 0 PID: 5995 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  162.803638][ T5995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  162.803649][ T5995] Call Trace:
[  162.803657][ T5995]  <TASK>
[  162.803666][ T5995]  dump_stack_lvl+0x189/0x250
[  162.803706][ T5995]  ? __pfx_dump_stack_lvl+0x10/0x10
[  162.803737][ T5995]  ? __pfx_queue_work_on+0x10/0x10
[  162.803762][ T5995]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  162.803796][ T5995]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  162.803843][ T5995]  f2fs_handle_critical_error+0x37c/0x540
[  162.803879][ T5995]  f2fs_write_end_io+0x886/0xb60
[  162.803930][ T5995]  __submit_merged_bio+0x27a/0x6a0
[  162.803953][ T5995]  ? up_write+0x1c4/0x420
[  162.803989][ T5995]  __submit_merged_write_cond+0x44c/0x530
[  162.804023][ T5995]  f2fs_sync_node_pages+0x1479/0x15e0
[  162.804073][ T5995]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  162.804133][ T5995]  ? f2fs_write_checkpoint+0xdad/0x2440
[  162.804171][ T5995]  ? up_write+0x1c4/0x420
[  162.804198][ T5995]  ? do_raw_spin_unlock+0x122/0x240
[  162.804225][ T5995]  f2fs_write_checkpoint+0xdde/0x2440
[  162.804255][ T5995]  ? __lock_acquire+0xab9/0xd20
[  162.804314][ T5995]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  162.804423][ T5995]  kill_f2fs_super+0x2cc/0x6d0
[  162.804462][ T5995]  ? __pfx_kill_f2fs_super+0x10/0x10
[  162.804514][ T5995]  ? shrinker_free+0x2ce/0x3e0
[  162.804540][ T5995]  deactivate_locked_super+0xbc/0x130
[  162.804575][ T5995]  cleanup_mnt+0x425/0x4c0
[  162.804606][ T5995]  ? lockdep_hardirqs_on+0x9c/0x150
[  162.804631][ T5995]  task_work_run+0x1d4/0x260
[  162.804656][ T5995]  ? __pfx_task_work_run+0x10/0x10
[  162.804674][ T5995]  ? __x64_sys_umount+0x122/0x160
[  162.804701][ T5995]  ? exit_to_user_mode_loop+0x40/0x130
[  162.804730][ T5995]  exit_to_user_mode_loop+0xe9/0x130
[  162.804757][ T5995]  do_syscall_64+0x2cd/0xfa0
[  162.804777][ T5995]  ? lockdep_hardirqs_on+0x9c/0x150
[  162.804800][ T5995]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  162.804821][ T5995]  ? clear_bhb_loop+0x60/0xb0
[  162.804847][ T5995]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  162.804867][ T5995] RIP: 0033:0x7f30be3909f7
[  162.804886][ T5995] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  162.804903][ T5995] RSP: 002b:00007ffc4573e2c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  162.804925][ T5995] RAX: 0000000000000000 RBX: 00007f30be411d7d RCX: 00007f30be3909f7
[  162.804939][ T5995] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc4573e380
[  162.804951][ T5995] RBP: 00007ffc4573e380 R08: 0000000000000000 R09: 0000000000000000
[  162.804963][ T5995] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc4573f410
[  162.804977][ T5995] R13: 00007f30be411d7d R14: 0000000000027a2a R15: 00007ffc4573f450
[  162.805015][ T5995]  </TASK>
[  163.119847][ T5995] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  163.130348][ T5995] CPU: 0 UID: 0 PID: 5995 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  163.130376][ T5995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  163.130388][ T5995] Call Trace:
[  163.130396][ T5995]  <TASK>
[  163.130405][ T5995]  dump_stack_lvl+0x189/0x250
[  163.130445][ T5995]  ? __pfx_dump_stack_lvl+0x10/0x10
[  163.130477][ T5995]  ? __pfx_queue_work_on+0x10/0x10
[  163.130502][ T5995]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  163.130535][ T5995]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  163.130592][ T5995]  f2fs_handle_critical_error+0x37c/0x540
[  163.130627][ T5995]  f2fs_write_end_io+0x886/0xb60
[  163.130679][ T5995]  __submit_merged_bio+0x27a/0x6a0
[  163.130703][ T5995]  ? up_write+0x1c4/0x420
[  163.130741][ T5995]  __submit_merged_write_cond+0x44c/0x530
[  163.130775][ T5995]  f2fs_sync_node_pages+0x1479/0x15e0
[  163.130824][ T5995]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  163.130884][ T5995]  ? f2fs_write_checkpoint+0xdad/0x2440
[  163.130921][ T5995]  ? up_write+0x1c4/0x420
[  163.130948][ T5995]  ? do_raw_spin_unlock+0x122/0x240
[  163.130974][ T5995]  f2fs_write_checkpoint+0xdde/0x2440
[  163.131004][ T5995]  ? __lock_acquire+0xab9/0xd20
[  163.131063][ T5995]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  163.131162][ T5995]  kill_f2fs_super+0x2cc/0x6d0
[  163.131211][ T5995]  ? __pfx_kill_f2fs_super+0x10/0x10
[  163.131261][ T5995]  ? shrinker_free+0x2ce/0x3e0
[  163.131285][ T5995]  deactivate_locked_super+0xbc/0x130
[  163.131319][ T5995]  cleanup_mnt+0x425/0x4c0
[  163.131349][ T5995]  ? lockdep_hardirqs_on+0x9c/0x150
[  163.131374][ T5995]  task_work_run+0x1d4/0x260
[  163.131397][ T5995]  ? __pfx_task_work_run+0x10/0x10
[  163.131415][ T5995]  ? __x64_sys_umount+0x122/0x160
[  163.131441][ T5995]  ? exit_to_user_mode_loop+0x40/0x130
[  163.131470][ T5995]  exit_to_user_mode_loop+0xe9/0x130
[  163.131495][ T5995]  do_syscall_64+0x2cd/0xfa0
[  163.131513][ T5995]  ? lockdep_hardirqs_on+0x9c/0x150
[  163.131533][ T5995]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.131566][ T5995]  ? clear_bhb_loop+0x60/0xb0
[  163.131591][ T5995]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.131610][ T5995] RIP: 0033:0x7f30be3909f7
[  163.131628][ T5995] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  163.131644][ T5995] RSP: 002b:00007ffc4573e2c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  163.131665][ T5995] RAX: 0000000000000000 RBX: 00007f30be411d7d RCX: 00007f30be3909f7
[  163.131678][ T5995] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc4573e380
[  163.131690][ T5995] RBP: 00007ffc4573e380 R08: 0000000000000000 R09: 0000000000000000
[  163.131702][ T5995] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc4573f410
[  163.131714][ T5995] R13: 00007f30be411d7d R14: 0000000000027a2a R15: 00007ffc4573f450
[  163.131770][ T5995]  </TASK>
[  163.131778][ T5995] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  163.466518][ T5995] CPU: 1 UID: 0 PID: 5995 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  163.466548][ T5995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  163.466560][ T5995] Call Trace:
[  163.466568][ T5995]  <TASK>
[  163.466577][ T5995]  dump_stack_lvl+0x189/0x250
[  163.466616][ T5995]  ? __pfx_dump_stack_lvl+0x10/0x10
[  163.466647][ T5995]  ? __pfx_queue_work_on+0x10/0x10
[  163.466671][ T5995]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  163.466704][ T5995]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  163.466747][ T5995]  f2fs_handle_critical_error+0x37c/0x540
[  163.466779][ T5995]  f2fs_write_end_io+0x886/0xb60
[  163.466829][ T5995]  __submit_merged_bio+0x27a/0x6a0
[  163.466853][ T5995]  ? up_write+0x1c4/0x420
[  163.466889][ T5995]  __submit_merged_write_cond+0x44c/0x530
[  163.466923][ T5995]  f2fs_sync_node_pages+0x1479/0x15e0
[  163.466970][ T5995]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  163.467028][ T5995]  ? f2fs_write_checkpoint+0xdad/0x2440
[  163.467063][ T5995]  ? up_write+0x1c4/0x420
[  163.467090][ T5995]  ? do_raw_spin_unlock+0x122/0x240
[  163.467115][ T5995]  f2fs_write_checkpoint+0xdde/0x2440
[  163.467144][ T5995]  ? __lock_acquire+0xab9/0xd20
[  163.467201][ T5995]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  163.467304][ T5995]  kill_f2fs_super+0x2cc/0x6d0
[  163.467342][ T5995]  ? __pfx_kill_f2fs_super+0x10/0x10
[  163.467393][ T5995]  ? shrinker_free+0x2ce/0x3e0
[  163.467418][ T5995]  deactivate_locked_super+0xbc/0x130
[  163.467452][ T5995]  cleanup_mnt+0x425/0x4c0
[  163.467482][ T5995]  ? lockdep_hardirqs_on+0x9c/0x150
[  163.467506][ T5995]  task_work_run+0x1d4/0x260
[  163.467531][ T5995]  ? __pfx_task_work_run+0x10/0x10
[  163.467548][ T5995]  ? __x64_sys_umount+0x122/0x160
[  163.467574][ T5995]  ? exit_to_user_mode_loop+0x40/0x130
[  163.467603][ T5995]  exit_to_user_mode_loop+0xe9/0x130
[  163.467647][ T5995]  do_syscall_64+0x2cd/0xfa0
[  163.467667][ T5995]  ? lockdep_hardirqs_on+0x9c/0x150
[  163.467687][ T5995]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.467708][ T5995]  ? clear_bhb_loop+0x60/0xb0
[  163.467735][ T5995]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.467754][ T5995] RIP: 0033:0x7f30be3909f7
[  163.467773][ T5995] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  163.467789][ T5995] RSP: 002b:00007ffc4573e2c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  163.467811][ T5995] RAX: 0000000000000000 RBX: 00007f30be411d7d RCX: 00007f30be3909f7
[  163.467826][ T5995] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc4573e380
[  163.467838][ T5995] RBP: 00007ffc4573e380 R08: 0000000000000000 R09: 0000000000000000
[  163.467851][ T5995] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc4573f410
[  163.467865][ T5995] R13: 00007f30be411d7d R14: 0000000000027a2a R15: 00007ffc4573f450
[  163.467904][ T5995]  </TASK>
[  163.467912][ T5995] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  163.973855][ T7544] input: syz0 as /devices/virtual/input/input9
[  164.105677][ T7547] loop4: detected capacity change from 0 to 512
[  164.116384][ T7547] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  164.175172][ T7547] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  164.371881][ T7547] EXT4-fs (loop4): 1 orphan inode deleted
[  164.404874][ T7547] EXT4-fs (loop4): 1 truncate cleaned up
[  164.425052][ T7554] syz_tun: entered allmulticast mode
[  164.429046][ T7547] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  164.557110][ T7556] dvmrp8: entered allmulticast mode
[  164.568100][ T7547] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  164.844921][ T6352] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.968145][ T7565] loop1: detected capacity change from 0 to 1024
[  164.992960][ T7565] EXT4-fs: Ignoring removed orlov option
[  165.051052][ T7565] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  165.084547][ T7565] EXT4-fs: Ignoring sb option on remount
[  165.094673][ T7565] EXT4-fs: Ignoring removed orlov option
[  165.101090][ T7565] EXT4-fs: Remounting file system with no journal so ignoring journalled data option
[  165.111174][ T7565] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  165.150327][ T7565] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000.
[  165.221496][ T5832] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.355874][ T7576] kvm: user requested TSC rate below hardware speed
[  165.438436][ T7580] loop1: detected capacity change from 0 to 512
[  165.451354][ T7580] EXT4-fs: Ignoring removed bh option
[  165.584676][ T7580] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  165.687864][ T7580] ext4 filesystem being mounted at /93/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  165.889832][ T5832] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.915165][ T5958] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  166.117675][ T5958] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  166.134892][ T5958] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  166.146173][ T7592] loop4: detected capacity change from 0 to 2048
[  166.153576][ T7592] EXT4-fs: Ignoring removed bh option
[  166.167547][ T5958] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  166.208302][ T5958] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.267165][ T7592] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  166.294287][ T7592] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  166.296944][ T7584] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  166.314518][ T7592] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 12 with max blocks 22 with error 28
[  166.339867][ T5958] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  166.379889][ T7597] loop5: detected capacity change from 0 to 8
[  166.390513][ T7592] EXT4-fs (loop4): This should not happen!! Data will be lost
[  166.390513][ T7592] 
[  166.398843][ T7602] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  166.482543][ T7597] SQUASHFS error: lzo decompression failed, data probably corrupt
[  166.502968][ T7592] EXT4-fs (loop4): Total free blocks count 0
[  166.505019][ T7602] EXT4-fs (loop4): This should not happen!! Data will be lost
[  166.505019][ T7602] 
[  166.562386][ T7602] EXT4-fs (loop4): Total free blocks count 0
[  166.573376][ T7575] loop2: detected capacity change from 0 to 32768
[  166.580805][ T7602] EXT4-fs (loop4): Free/Dirty block details
[  166.594110][ T7597] SQUASHFS error: Failed to read block 0x1c6: -5
[  166.605332][ T7597] SQUASHFS error: Unable to read metadata cache entry [1c4]
[  166.635493][ T7597] SQUASHFS error: Unable to read inode 0x11f
[  166.644016][ T7592] EXT4-fs (loop4): Free/Dirty block details
[  166.662787][ T7592] EXT4-fs (loop4): free_blocks=2415919104
[  166.715442][ T7575] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  166.842920][ T5958] usb 4-1: USB disconnect, device number 10
[  166.957062][ T7575] XFS (loop2): Ending clean mount
[  167.212708][ T5834] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  167.515636][   T30] audit: type=1326 audit(1762316755.360:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7625 comm="syz.1.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8df78f6c9 code=0x7fc00000
[  167.689392][  T116] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  167.741848][  T116] hid-generic 0000:0000:0000.0007: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  167.953798][ T7634] fido_id[7634]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  167.999598][ T7639] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer.
[  168.153574][ T7620] loop4: detected capacity change from 0 to 32768
[  168.170904][ T7620] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.471 (7620)
[  168.199840][   T30] audit: type=1326 audit(1762316756.040:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7625 comm="syz.1.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8df78f6c9 code=0x7fc00000
[  168.255335][ T7620] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  168.300318][ T7620] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm
[  168.301468][ T7647] loop5: detected capacity change from 0 to 2048
[  168.355017][   T10] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[  168.393279][ T7658] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  168.469861][ T7620] BTRFS info (device loop4): enabling ssd optimizations
[  168.488851][ T7664] netlink: 4 bytes leftover after parsing attributes in process `syz.1.483'.
[  168.494916][ T7620] BTRFS info (device loop4): turning on async discard
[  168.498844][ T7664] bridge_slave_1: left allmulticast mode
[  168.511944][ T7664] bridge_slave_1: left promiscuous mode
[  168.521865][   T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  168.524940][ T7620] BTRFS info (device loop4): enabling free space tree
[  168.540666][ T7664] bridge0: port 2(bridge_slave_1) entered disabled state
[  168.550947][   T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  168.566448][   T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  168.576257][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  168.587032][ T7620] BTRFS info (device loop4): use zlib compression, level 3
[  168.600139][ T7664] bridge_slave_0: left allmulticast mode
[  168.607278][ T7664] bridge_slave_0: left promiscuous mode
[  168.620849][ T7664] bridge0: port 1(bridge_slave_0) entered disabled state
[  168.966033][   T10] usb 3-1: usb_control_msg returned -32
[  168.971702][   T10] usbtmc 3-1:16.0: can't read capabilities
[  169.145246][ T6352] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  169.673813][ T5995] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer
[  169.762154][ T5958] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  169.964888][ T5958] usb 2-1: Using ep0 maxpacket: 8
[  170.004890][ T5958] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[  170.013220][ T5958] usb 2-1: config 179 has no interface number 0
[  170.035282][ T5958] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  170.066276][ T5958] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  170.084119][ T5958] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  170.096215][ T5958] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  170.107806][ T5958] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  170.121606][ T5958] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  170.136027][ T5958] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  170.157896][ T7678] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  170.171050][   T30] audit: type=1800 audit(1762316758.010:14): pid=7686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.490" name="bus" dev="tmpfs" ino=2 res=0 errno=0
[  170.402474][ T5958] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input10
[  170.607885][  T116] usb 2-1: USB disconnect, device number 7
[  170.607980][    C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  170.622201][    C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  170.803547][ T7694] loop5: detected capacity change from 0 to 2048
[  170.824773][ T7694] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found!
[  170.917223][ T7694] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  170.975031][   T30] audit: type=1800 audit(1762316758.810:15): pid=7694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.494" name="file1" dev="loop5" ino=1346 res=0 errno=0
[  171.011421][   T30] audit: type=1800 audit(1762316758.850:16): pid=7694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.494" name="file1" dev="loop5" ino=1346 res=0 errno=0
[  171.039804][   T30] audit: type=1800 audit(1762316758.850:17): pid=7694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.494" name="file1" dev="loop5" ino=1346 res=0 errno=0
[  171.192376][  T116] usb 3-1: USB disconnect, device number 6
[  171.644472][ T7713] loop5: detected capacity change from 0 to 256
[  172.349204][ T7696] loop3: detected capacity change from 0 to 65536
[  172.516713][ T7696] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  172.563504][ T5200] udevd[5200]: worker [5972] terminated by signal 33 (Unknown signal 33)
[  172.579348][ T5200] udevd[5200]: worker [5972] failed while handling '/devices/virtual/block/loop3'
[  172.674020][ T7696] XFS (loop3): Ending clean mount
[  172.697320][ T7696] XFS (loop3): Quotacheck needed: Please wait.
[  172.850339][ T7696] XFS (loop3): Quotacheck: Done.
[  173.140326][ T5829] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  173.395281][   T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  173.448197][ T7753] netlink: 8 bytes leftover after parsing attributes in process `syz.2.518'.
[  173.457713][ T7753] netlink: 24 bytes leftover after parsing attributes in process `syz.2.518'.
[  173.478929][ T7753] netlink: 8 bytes leftover after parsing attributes in process `syz.2.518'.
[  173.489705][ T7753] netlink: 24 bytes leftover after parsing attributes in process `syz.2.518'.
[  173.566569][   T10] usb 6-1: Using ep0 maxpacket: 16
[  173.593996][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  173.621426][   T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  173.636209][   T10] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  173.646315][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.681387][   T10] usb 6-1: config 0 descriptor??
[  174.129179][   T10] HID 045e:07da: Invalid code 65791 type 1
[  174.188733][   T10] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0008/input/input11
[  174.246511][   T10] microsoft 0003:045E:07DA.0008: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0
[  174.606433][ T7751] loop4: detected capacity change from 0 to 32768
[  174.630162][ T7778] loop3: detected capacity change from 0 to 4096
[  174.640769][ T7778] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  174.652238][ T7751] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  174.888433][    T9] IPVS: starting estimator thread 0...
[  174.982458][ T5958] usb 6-1: USB disconnect, device number 3
[  175.027296][ T7794] IPVS: using max 27 ests per chain, 64800 per kthread
[  175.057782][ T7751] XFS (loop4): Ending clean mount
[  175.271470][ T6352] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  175.888511][ T7812] binder: 7811:7812 ioctl c0306201 200000000640 returned -22
[  176.202010][ T7820] loop1: detected capacity change from 0 to 2048
[  176.293896][ T7825] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  177.065300][ T5200] udevd[5200]: worker [6150] terminated by signal 33 (Unknown signal 33)
[  177.088557][ T5200] udevd[5200]: worker [6150] failed while handling '/devices/virtual/block/loop3'
[  177.271374][ T7846] loop4: detected capacity change from 0 to 512
[  177.318366][ T7846] EXT4-fs (loop4): orphan cleanup on readonly fs
[  177.341841][ T7846] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13
[  177.354357][ T7846] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  177.354964][ T5958] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  177.372675][ T7846] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.550: attempt to clear invalid blocks 2 len 1
[  177.416616][ T7846] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.550: invalid indirect mapped block 1819239214 (level 0)
[  177.469527][ T7846] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.550: invalid indirect mapped block 1819239214 (level 1)
[  177.510886][ T7846] EXT4-fs (loop4): 1 truncate cleaned up
[  177.528384][ T7846] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  177.604962][ T5958] usb 4-1: Using ep0 maxpacket: 8
[  177.652987][ T5958] usb 4-1: config 0 has an invalid interface number: 246 but max is 0
[  177.684911][ T5958] usb 4-1: config 0 has no interface number 0
[  177.708008][ T5958] usb 4-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3
[  177.720514][ T6352] EXT4-fs error (device loop4): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: inode out of bounds - offset=24, inode=85, rec_len=20, size=1024 fake=0
[  177.749487][ T5958] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.776257][ T5958] usb 4-1: Product: syz
[  177.780616][ T5958] usb 4-1: Manufacturer: syz
[  177.785831][ T5958] usb 4-1: SerialNumber: syz
[  177.796268][ T5958] usb 4-1: config 0 descriptor??
[  177.872838][ T6352] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  177.995983][ T7855] loop5: detected capacity change from 0 to 512
[  178.026987][ T7855] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  178.047741][ T5958] msi2500 4-1:0.246: Registered as swradio24
[  178.066633][ T5958] msi2500 4-1:0.246: SDR API is still slightly experimental and functionality changes may follow
[  178.101288][ T7855] EXT4-fs (loop5): 1 truncate cleaned up
[  178.115809][ T7842] loop2: detected capacity change from 0 to 40427
[  178.132300][ T5958] usb 4-1: USB disconnect, device number 11
[  178.141047][ T7855] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  178.169371][ T7842] F2FS-fs (loop2): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288)
[  178.248830][ T7842] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  178.290403][ T7855] syz.5.554 (pid 7855) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  178.315014][ T7842] F2FS-fs (loop2): Image doesn't support compression
[  178.354345][ T7842] F2FS-fs (loop2): build fault injection rate: 690
[  178.390596][ T7842] F2FS-fs (loop2): build fault injection type: 0x35f7
[  178.400812][   T10] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  178.417220][ T7842] F2FS-fs (loop2): invalid crc value
[  178.433559][   T10] hid-generic 0000:0000:0000.0009: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  178.644238][ T5995] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  178.860035][ T7842] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  178.932328][   T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.955197][ T7842] F2FS-fs (loop2): Start checkpoint disabled!
[  178.996889][ T7842] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0
[  179.039106][ T7842] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  179.056282][ T7842] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  179.122887][   T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.179280][   T30] audit: type=1800 audit(1762316767.020:18): pid=7842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.548" name="file1" dev="loop2" ino=10 res=0 errno=0
[  179.203520][ T7842] syz.2.548: attempt to access beyond end of device
[  179.203520][ T7842] loop2: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  179.274499][ T7873] loop5: detected capacity change from 0 to 128
[  179.309633][   T50] kworker/u8:3: attempt to access beyond end of device
[  179.309633][   T50] loop2: rw=1, sector=45096, nr_sectors = 8 limit=40427
[  179.332401][   T50] kworker/u8:3: attempt to access beyond end of device
[  179.332401][   T50] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  179.358721][   T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.388064][ T7873] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  179.410750][   T50] CPU: 1 UID: 0 PID: 50 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) 
[  179.410791][   T50] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  179.410806][   T50] Workqueue: writeback wb_workfn (flush-7:2)
[  179.410846][   T50] Call Trace:
[  179.410860][   T50]  <TASK>
[  179.410870][   T50]  dump_stack_lvl+0x189/0x250
[  179.410908][   T50]  ? __pfx_dump_stack_lvl+0x10/0x10
[  179.410938][   T50]  ? __pfx_queue_work_on+0x10/0x10
[  179.410962][   T50]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  179.410995][   T50]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  179.411040][   T50]  f2fs_handle_critical_error+0x37c/0x540
[  179.411076][   T50]  f2fs_write_end_io+0x886/0xb60
[  179.411125][   T50]  __submit_merged_bio+0x27a/0x6a0
[  179.411158][   T50]  __submit_merged_write_cond+0x255/0x530
[  179.411192][   T50]  f2fs_write_data_pages+0x261d/0x3000
[  179.411259][   T50]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  179.411304][   T50]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  179.411376][   T50]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  179.411454][   T50]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  179.411483][   T50]  do_writepages+0x32e/0x550
[  179.411516][   T50]  ? reacquire_held_locks+0x127/0x1d0
[  179.411542][   T50]  ? writeback_sb_inodes+0x3bc/0x1950
[  179.411573][   T50]  __writeback_single_inode+0x143/0x12d0
[  179.411597][   T50]  ? do_raw_spin_unlock+0x122/0x240
[  179.411622][   T50]  writeback_sb_inodes+0x984/0x1950
[  179.411644][   T50]  ? lockdep_hardirqs_on+0x9c/0x150
[  179.411705][   T50]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  179.411776][   T50]  ? rcu_is_watching+0x15/0xb0
[  179.411816][   T50]  wb_writeback+0x43b/0xaf0
[  179.411848][   T50]  ? queue_io+0x391/0x590
[  179.411874][   T50]  ? __pfx_wb_writeback+0x10/0x10
[  179.411906][   T50]  ? _raw_spin_unlock_irq+0x23/0x50
[  179.411944][   T50]  wb_workfn+0x409/0xef0
[  179.411993][   T50]  ? __pfx_wb_workfn+0x10/0x10
[  179.412028][   T50]  ? __lock_acquire+0xab9/0xd20
[  179.412066][   T50]  ? process_one_work+0x868/0x15d0
[  179.412098][   T50]  ? _raw_spin_unlock_irq+0x23/0x50
[  179.412134][   T50]  ? process_one_work+0x868/0x15d0
[  179.412156][   T50]  process_one_work+0x94a/0x15d0
[  179.412179][   T50]  ? __lock_acquire+0xab9/0xd20
[  179.412228][   T50]  ? __pfx_process_one_work+0x10/0x10
[  179.412263][   T50]  ? assign_work+0x3a1/0x410
[  179.412294][   T50]  worker_thread+0x9b0/0xee0
[  179.412351][   T50]  kthread+0x711/0x8a0
[  179.412386][   T50]  ? __pfx_worker_thread+0x10/0x10
[  179.412411][   T50]  ? __pfx_kthread+0x10/0x10
[  179.412442][   T50]  ? _raw_spin_unlock_irq+0x23/0x50
[  179.412472][   T50]  ? lockdep_hardirqs_on+0x9c/0x150
[  179.412490][   T50]  ? __pfx_kthread+0x10/0x10
[  179.412521][   T50]  ret_from_fork+0x52d/0xa70
[  179.412550][   T50]  ? __pfx_ret_from_fork+0x10/0x10
[  179.412587][   T50]  ? __switch_to_asm+0x39/0x70
[  179.412622][   T50]  ? __switch_to_asm+0x33/0x70
[  179.412640][   T50]  ? __pfx_kthread+0x10/0x10
[  179.412719][   T50]  ret_from_fork_asm+0x1a/0x30
[  179.412761][   T50]  </TASK>
[  179.731375][   T50] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  179.747719][ T7873] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  179.844156][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  179.876644][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  179.886845][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  179.900893][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  179.910214][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  179.973457][   T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.005904][ T5995] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  180.166245][ T7871] loop3: detected capacity change from 0 to 32768
[  180.184118][ T7871] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.560 (7871)
[  180.214766][ T7871] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  180.247362][ T7871] BTRFS info (device loop3): using blake2b (blake2b-256-lib) checksum algorithm
[  180.414410][ T7871] BTRFS info (device loop3): enabling ssd optimizations
[  180.454965][ T7871] BTRFS info (device loop3): turning on async discard
[  180.461808][ T7871] BTRFS info (device loop3): enabling free space tree
[  180.498947][   T13] bridge_slave_1: left allmulticast mode
[  180.504665][   T13] bridge_slave_1: left promiscuous mode
[  180.535282][   T30] audit: type=1800 audit(1762316768.370:19): pid=7871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.560" name="file1" dev="loop3" ino=260 res=0 errno=0
[  180.585158][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  180.615516][   T13] bridge_slave_0: left allmulticast mode
[  180.621237][   T13] bridge_slave_0: left promiscuous mode
[  180.655698][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  180.939879][ T5829] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  181.067982][  T116] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  181.315012][  T116] usb 3-1: Using ep0 maxpacket: 32
[  181.322404][  T116] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  181.377378][  T116] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  181.396828][  T116] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  181.442593][  T116] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.482324][  T116] usb 3-1: config 0 descriptor??
[  181.525264][   T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  181.633003][ T7918] loop3: detected capacity change from 0 to 2048
[  181.718012][   T10] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  181.748293][ T7920] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  181.774347][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  181.781199][ T5844] Bluetooth: hci3: Malformed HCI Event: 0x22
[  181.838348][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  181.875028][   T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  181.915451][   T10] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  181.924682][   T10] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  181.985386][ T5844] Bluetooth: hci2: command tx timeout
[  181.995896][  T116] savu 0003:1E7D:2D5A.000A: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0
[  182.019705][   T10] usb 6-1: Manufacturer: syz
[  182.050326][   T10] usb 6-1: config 0 descriptor??
[  182.105681][ T7925] loop1: detected capacity change from 0 to 512
[  182.177951][ T7925] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  182.206213][ T7925] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  182.329388][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  182.353957][   T30] audit: type=1800 audit(1762316770.190:20): pid=7925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.567" name="bus" dev="loop1" ino=18 res=0 errno=0
[  182.392696][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  182.416637][   T13] bond0 (unregistering): Released all slaves
[  182.419440][   T30] audit: type=1800 audit(1762316770.230:21): pid=7925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.567" name="bus" dev="loop1" ino=18 res=0 errno=0
[  182.472652][ T5832] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.512802][   T10] appleir 0003:05AC:8243.000B: unknown main item tag 0x0
[  182.566365][   T10] appleir 0003:05AC:8243.000B: hiddev1,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0
[  182.866025][ T7875] chnl_net:caif_netlink_parms(): no params data found
[  183.073579][ T5829] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer
[  183.195989][   T13] hsr_slave_0: left promiscuous mode
[  183.218952][   T13] hsr_slave_1: left promiscuous mode
[  183.234729][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  183.245851][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  183.257352][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  183.266838][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  183.311163][ T7912] usb 3-1: string descriptor 0 read error: -2
[  183.323312][   T13] veth1_macvtap: left promiscuous mode
[  183.330494][ T7944] loop3: detected capacity change from 0 to 2048
[  183.349715][   T13] veth0_macvtap: left promiscuous mode
[  183.365448][   T13] veth1_vlan: left promiscuous mode
[  183.373534][ T7944] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  183.418716][   T13] veth0_vlan: left promiscuous mode
[  184.010092][ T7954] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  184.064976][ T5844] Bluetooth: hci2: command tx timeout
[  184.074958][ T5895] IPVS: starting estimator thread 0...
[  184.122260][  T985] usb 3-1: USB disconnect, device number 7
[  184.200019][ T7959] IPVS: using max 27 ests per chain, 64800 per kthread
[  184.434919][  T116] usb 6-1: USB disconnect, device number 4
[  184.553746][ T7967] loop2: detected capacity change from 0 to 2048
[  184.592633][ T7971] loop5: detected capacity change from 0 to 1024
[  184.668146][ T5895] usb 2-1: new full-speed USB device number 8 using dummy_hcd
[  184.676014][ T7967] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  184.845080][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  184.912370][ T5895] usb 2-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00
[  184.963625][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.004931][ T5895] usb 2-1: config 0 descriptor??
[  185.446958][ T5895] waltop 0003:172F:0500.000C: unknown main item tag 0x0
[  185.464308][ T5895] waltop 0003:172F:0500.000C: unknown main item tag 0x0
[  185.483284][ T5895] waltop 0003:172F:0500.000C: unknown main item tag 0x0
[  185.503015][ T5895] waltop 0003:172F:0500.000C: unknown main item tag 0x0
[  185.522500][ T5895] waltop 0003:172F:0500.000C: unknown main item tag 0x0
[  185.551399][ T5895] waltop 0003:172F:0500.000C: unknown main item tag 0x0
[  185.598945][ T5895] waltop 0003:172F:0500.000C: unknown main item tag 0x0
[  185.652896][ T5895] waltop 0003:172F:0500.000C: hidraw0: USB HID v0.00 Device [HID 172f:0500] on usb-dummy_hcd.1-1/input0
[  185.731594][ T5895] usb 2-1: USB disconnect, device number 8
[  185.867089][ T7990] netlink: 548 bytes leftover after parsing attributes in process `syz.2.583'.
[  185.898744][ T7987] fido_id[7987]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  186.074244][   T13] team0 (unregistering): Port device team_slave_1 removed
[  186.145477][ T5844] Bluetooth: hci2: command tx timeout
[  186.155363][   T13] team0 (unregistering): Port device team_slave_0 removed
[  186.320933][ T7986] loop5: detected capacity change from 0 to 32768
[  186.360093][ T7986] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  186.454083][ T7986] XFS (loop5): Ending clean mount
[  186.506184][ T7986] XFS (loop5): Quotacheck needed: Please wait.
[  186.608124][ T7986] XFS (loop5): Quotacheck: Done.
[  186.755671][ T5995] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  187.225533][ T8004] loop1: detected capacity change from 0 to 32768
[  187.273035][ T8004] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  187.294192][ T7984] netlink: 'syz.2.583': attribute type 29 has an invalid length.
[  187.463833][ T8004] XFS (loop1): Ending clean mount
[  187.525685][ T8004] XFS (loop1): Quotacheck needed: Please wait.
[  187.677637][ T8004] XFS (loop1): Quotacheck: Done.
[  187.716400][ T7875] bridge0: port 1(bridge_slave_0) entered blocking state
[  187.736030][ T7875] bridge0: port 1(bridge_slave_0) entered disabled state
[  187.761624][ T7875] bridge_slave_0: entered allmulticast mode
[  187.778605][ T7875] bridge_slave_0: entered promiscuous mode
[  187.800515][ T7875] bridge0: port 2(bridge_slave_1) entered blocking state
[  187.812972][ T7875] bridge0: port 2(bridge_slave_1) entered disabled state
[  187.821013][   T30] audit: type=1804 audit(1762316775.650:22): pid=8029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.587" name="/newroot/130/file0/file0/file0" dev="loop1" ino=9284 res=1 errno=0
[  187.844090][ T7875] bridge_slave_1: entered allmulticast mode
[  187.853893][ T7875] bridge_slave_1: entered promiscuous mode
[  187.959316][ T5832] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  187.988939][ T7875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  188.043944][ T7875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  188.225209][ T5844] Bluetooth: hci2: command tx timeout
[  188.608047][ T7875] team0: Port device team_slave_0 added
[  188.642271][ T7875] team0: Port device team_slave_1 added
[  188.815008][   T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  189.015066][   T10] usb 2-1: Using ep0 maxpacket: 16
[  189.025732][   T10] usb 2-1: unable to get BOS descriptor or descriptor too short
[  189.045102][   T10] usb 2-1: config 200 has an invalid interface number: 170 but max is 0
[  189.053817][   T10] usb 2-1: config 200 has no interface number 0
[  189.064855][   T10] usb 2-1: config 200 interface 170 has no altsetting 0
[  189.099712][   T10] usb 2-1: New USB device found, idVendor=103d, idProduct=0101, bcdDevice=ed.86
[  189.123044][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  189.140906][ T7875] batman_adv: batadv0: Adding interface: batadv_slave_0
[  189.164861][ T7875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  189.191546][   T10] usb 2-1: Product: syz
[  189.192624][ T8036] loop5: detected capacity change from 0 to 32768
[  189.196727][   T10] usb 2-1: Manufacturer: syz
[  189.226532][   T10] usb 2-1: SerialNumber: syz
[  189.249595][ T7875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  189.269544][ T8036] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  189.279831][ T8054] syzkaller1: entered promiscuous mode
[  189.289327][ T8054] syzkaller1: entered allmulticast mode
[  189.304057][ T7875] batman_adv: batadv0: Adding interface: batadv_slave_1
[  189.313297][ T7875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  189.341595][ T7875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  189.419557][ T8036] XFS (loop5): Ending clean mount
[  189.478887][ T8036] XFS (loop5): Quotacheck needed: Please wait.
[  189.488879][   T10] usb 2-1: unknown interface protocol 0x37, assuming v1
[  189.546571][   T10] usb 2-1: cannot find UAC_HEADER
[  189.630816][ T8036] XFS (loop5): Quotacheck: Done.
[  189.639522][   T10] snd-usb-audio 2-1:200.170: probe with driver snd-usb-audio failed with error -22
[  189.677092][   T10] usb 2-1: USB disconnect, device number 9
[  189.703037][ T5880] udevd[5880]: setting mode of /dev/bus/usb/002/009 to 020664 failed: No such file or directory
[  189.754985][ T5880] udevd[5880]: setting owner of /dev/bus/usb/002/009 to uid=0, gid=0 failed: No such file or directory
[  189.824303][ T7875] hsr_slave_0: entered promiscuous mode
[  189.834103][ T7895] udevd[7895]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:200.170/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  189.856477][ T7875] hsr_slave_1: entered promiscuous mode
[  189.878454][ T7875] debugfs: 'hsr0' already exists in 'hsr'
[  189.884245][ T7875] Cannot create hsr debugfs directory
[  189.897566][ T5995] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  190.146263][ T8075] loop2: detected capacity change from 0 to 128
[  190.597608][ T8087] netlink: 'syz.1.604': attribute type 1 has an invalid length.
[  190.620422][ T8087] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  190.628293][ T8087] IPv6: NLM_F_CREATE should be set when creating new route
[  190.635639][ T8087] IPv6: NLM_F_CREATE should be set when creating new route
[  190.708890][ T8092] netlink: 'syz.1.604': attribute type 1 has an invalid length.
[  190.739059][ T8092] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  190.746389][ T8092] IPv6: NLM_F_CREATE should be set when creating new route
[  191.040257][ T7875] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  191.060859][ T8101] netlink: 348 bytes leftover after parsing attributes in process `syz.1.607'.
[  191.099585][ T7875] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  191.139789][ T7875] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  191.173405][ T7875] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  191.235355][ T8068] loop3: detected capacity change from 0 to 40427
[  191.253982][ T8068] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  191.296095][ T8068] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  191.369924][ T8068] F2FS-fs (loop3): invalid crc value
[  191.638165][ T7875] 8021q: adding VLAN 0 to HW filter on device bond0
[  191.661539][ T8068] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  191.711232][ T7875] 8021q: adding VLAN 0 to HW filter on device team0
[  191.721641][ T8068] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  191.731632][ T8068] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  191.754191][ T6066] bridge0: port 1(bridge_slave_0) entered blocking state
[  191.761560][ T6066] bridge0: port 1(bridge_slave_0) entered forwarding state
[  191.844586][ T6066] bridge0: port 2(bridge_slave_1) entered blocking state
[  191.851903][ T6066] bridge0: port 2(bridge_slave_1) entered forwarding state
[  192.367030][ T8099] loop2: detected capacity change from 0 to 40427
[  192.389097][ T8099] F2FS-fs (loop2): build fault injection rate: 771
[  192.413413][ T8099] F2FS-fs (loop2): invalid crc value
[  192.642229][ T8112] loop1: detected capacity change from 0 to 32768
[  192.763727][ T8099] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  192.788920][ T7875] 8021q: adding VLAN 0 to HW filter on device batadv0
[  192.855003][ T8099] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  193.098386][ T5834] syz-executor: attempt to access beyond end of device
[  193.098386][ T5834] loop2: rw=2049, sector=45096, nr_sectors = 24 limit=40427
[  193.135649][ T5834] CPU: 1 UID: 0 PID: 5834 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  193.135679][ T5834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  193.135693][ T5834] Call Trace:
[  193.135701][ T5834]  <TASK>
[  193.135710][ T5834]  dump_stack_lvl+0x189/0x250
[  193.135753][ T5834]  ? __pfx_dump_stack_lvl+0x10/0x10
[  193.135785][ T5834]  ? __pfx_queue_work_on+0x10/0x10
[  193.135810][ T5834]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  193.135843][ T5834]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  193.135889][ T5834]  f2fs_handle_critical_error+0x37c/0x540
[  193.135926][ T5834]  f2fs_write_end_io+0x886/0xb60
[  193.135980][ T5834]  __submit_merged_bio+0x27a/0x6a0
[  193.136016][ T5834]  __submit_merged_write_cond+0x255/0x530
[  193.136053][ T5834]  f2fs_write_data_pages+0x261d/0x3000
[  193.136127][ T5834]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  193.136215][ T5834]  ? __page_cache_release+0x8a6/0xbb0
[  193.136251][ T5834]  ? folios_put_refs+0x584/0x670
[  193.136300][ T5834]  ? __lock_acquire+0xab9/0xd20
[  193.136339][ T5834]  ? do_raw_spin_lock+0x121/0x290
[  193.136376][ T5834]  ? do_raw_spin_unlock+0x122/0x240
[  193.136397][ T5834]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  193.136429][ T5834]  do_writepages+0x32e/0x550
[  193.136470][ T5834]  ? do_raw_spin_unlock+0x122/0x240
[  193.136497][ T5834]  filemap_fdatawrite+0x199/0x240
[  193.136523][ T5834]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  193.136618][ T5834]  ? do_raw_spin_unlock+0x122/0x240
[  193.136645][ T5834]  f2fs_sync_dirty_inodes+0x31f/0x830
[  193.136694][ T5834]  f2fs_write_checkpoint+0x93e/0x2440
[  193.136723][ T5834]  ? stack_depot_save_flags+0x40/0x860
[  193.136790][ T5834]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  193.136874][ T5834]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  193.136892][ T5834]  ? kfree+0x19a/0x6d0
[  193.136932][ T5834]  kill_f2fs_super+0x2cc/0x6d0
[  193.136970][ T5834]  ? __pfx_kill_f2fs_super+0x10/0x10
[  193.137028][ T5834]  ? shrinker_free+0x2ce/0x3e0
[  193.137054][ T5834]  deactivate_locked_super+0xbc/0x130
[  193.137092][ T5834]  cleanup_mnt+0x425/0x4c0
[  193.137123][ T5834]  ? lockdep_hardirqs_on+0x9c/0x150
[  193.137150][ T5834]  task_work_run+0x1d4/0x260
[  193.137176][ T5834]  ? __pfx_task_work_run+0x10/0x10
[  193.137194][ T5834]  ? __x64_sys_umount+0x122/0x160
[  193.137220][ T5834]  ? exit_to_user_mode_loop+0x40/0x130
[  193.137252][ T5834]  exit_to_user_mode_loop+0xe9/0x130
[  193.137279][ T5834]  do_syscall_64+0x2cd/0xfa0
[  193.137306][ T5834]  ? lockdep_hardirqs_on+0x9c/0x150
[  193.137327][ T5834]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  193.137347][ T5834]  ? clear_bhb_loop+0x60/0xb0
[  193.137375][ T5834]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  193.137395][ T5834] RIP: 0033:0x7f067cb909f7
[  193.137414][ T5834] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  193.137433][ T5834] RSP: 002b:00007fff59af1e28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  193.137453][ T5834] RAX: 0000000000000000 RBX: 00007f067cc11d7d RCX: 00007f067cb909f7
[  193.137467][ T5834] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff59af1ee0
[  193.137480][ T5834] RBP: 00007fff59af1ee0 R08: 0000000000000000 R09: 0000000000000000
[  193.137493][ T5834] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff59af2f70
[  193.137506][ T5834] R13: 00007f067cc11d7d R14: 000000000002f1f4 R15: 00007fff59af2fb0
[  193.137548][ T5834]  </TASK>
[  193.137570][ T5834] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  193.490058][ T5834] CPU: 1 UID: 0 PID: 5834 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  193.490086][ T5834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  193.490099][ T5834] Call Trace:
[  193.490108][ T5834]  <TASK>
[  193.490117][ T5834]  dump_stack_lvl+0x189/0x250
[  193.490157][ T5834]  ? __pfx_dump_stack_lvl+0x10/0x10
[  193.490190][ T5834]  ? __pfx_queue_work_on+0x10/0x10
[  193.490215][ T5834]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  193.490261][ T5834]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  193.490311][ T5834]  f2fs_handle_critical_error+0x37c/0x540
[  193.490349][ T5834]  f2fs_write_end_io+0x886/0xb60
[  193.490404][ T5834]  __submit_merged_bio+0x27a/0x6a0
[  193.490439][ T5834]  __submit_merged_write_cond+0x255/0x530
[  193.490476][ T5834]  f2fs_write_data_pages+0x261d/0x3000
[  193.490553][ T5834]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  193.490644][ T5834]  ? __page_cache_release+0x8a6/0xbb0
[  193.490680][ T5834]  ? folios_put_refs+0x584/0x670
[  193.490718][ T5834]  ? __lock_acquire+0xab9/0xd20
[  193.490758][ T5834]  ? do_raw_spin_lock+0x121/0x290
[  193.490795][ T5834]  ? do_raw_spin_unlock+0x122/0x240
[  193.490817][ T5834]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  193.490849][ T5834]  do_writepages+0x32e/0x550
[  193.490890][ T5834]  ? do_raw_spin_unlock+0x122/0x240
[  193.490918][ T5834]  filemap_fdatawrite+0x199/0x240
[  193.490945][ T5834]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  193.491035][ T5834]  ? do_raw_spin_unlock+0x122/0x240
[  193.491063][ T5834]  f2fs_sync_dirty_inodes+0x31f/0x830
[  193.491116][ T5834]  f2fs_write_checkpoint+0x93e/0x2440
[  193.491146][ T5834]  ? stack_depot_save_flags+0x40/0x860
[  193.491238][ T5834]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  193.491331][ T5834]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  193.491349][ T5834]  ? kfree+0x19a/0x6d0
[  193.491391][ T5834]  kill_f2fs_super+0x2cc/0x6d0
[  193.491432][ T5834]  ? __pfx_kill_f2fs_super+0x10/0x10
[  193.491488][ T5834]  ? shrinker_free+0x2ce/0x3e0
[  193.491516][ T5834]  deactivate_locked_super+0xbc/0x130
[  193.491553][ T5834]  cleanup_mnt+0x425/0x4c0
[  193.491584][ T5834]  ? lockdep_hardirqs_on+0x9c/0x150
[  193.491611][ T5834]  task_work_run+0x1d4/0x260
[  193.491638][ T5834]  ? __pfx_task_work_run+0x10/0x10
[  193.491657][ T5834]  ? __x64_sys_umount+0x122/0x160
[  193.491686][ T5834]  ? exit_to_user_mode_loop+0x40/0x130
[  193.491723][ T5834]  exit_to_user_mode_loop+0xe9/0x130
[  193.491750][ T5834]  do_syscall_64+0x2cd/0xfa0
[  193.491771][ T5834]  ? lockdep_hardirqs_on+0x9c/0x150
[  193.491793][ T5834]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  193.491813][ T5834]  ? clear_bhb_loop+0x60/0xb0
[  193.491842][ T5834]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  193.491862][ T5834] RIP: 0033:0x7f067cb909f7
[  193.491882][ T5834] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  193.491900][ T5834] RSP: 002b:00007fff59af1e28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  193.491923][ T5834] RAX: 0000000000000000 RBX: 00007f067cc11d7d RCX: 00007f067cb909f7
[  193.491937][ T5834] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff59af1ee0
[  193.491950][ T5834] RBP: 00007fff59af1ee0 R08: 0000000000000000 R09: 0000000000000000
[  193.491963][ T5834] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff59af2f70
[  193.491977][ T5834] R13: 00007f067cc11d7d R14: 000000000002f1f4 R15: 00007fff59af2fb0
[  193.492019][ T5834]  </TASK>
[  193.492028][ T5834] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  193.775452][ T8143] Invalid ELF header magic: != ELF
[  193.861110][ T5834] CPU: 0 UID: 0 PID: 5834 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  193.861138][ T5834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  193.861151][ T5834] Call Trace:
[  193.861160][ T5834]  <TASK>
[  193.861169][ T5834]  dump_stack_lvl+0x189/0x250
[  193.861208][ T5834]  ? __pfx_dump_stack_lvl+0x10/0x10
[  193.861240][ T5834]  ? __pfx_queue_work_on+0x10/0x10
[  193.861266][ T5834]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  193.861301][ T5834]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  193.861347][ T5834]  f2fs_handle_critical_error+0x37c/0x540
[  193.861382][ T5834]  f2fs_write_end_io+0x886/0xb60
[  193.861433][ T5834]  __submit_merged_bio+0x27a/0x6a0
[  193.861474][ T5834]  __submit_merged_write_cond+0x255/0x530
[  193.861508][ T5834]  f2fs_write_data_pages+0x261d/0x3000
[  193.861577][ T5834]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  193.861657][ T5834]  ? __page_cache_release+0x8a6/0xbb0
[  193.861689][ T5834]  ? folios_put_refs+0x584/0x670
[  193.861725][ T5834]  ? __lock_acquire+0xab9/0xd20
[  193.861761][ T5834]  ? do_raw_spin_lock+0x121/0x290
[  193.861794][ T5834]  ? do_raw_spin_unlock+0x122/0x240
[  193.861815][ T5834]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  193.861845][ T5834]  do_writepages+0x32e/0x550
[  193.861883][ T5834]  ? do_raw_spin_unlock+0x122/0x240
[  193.861908][ T5834]  filemap_fdatawrite+0x199/0x240
[  193.861934][ T5834]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  193.862013][ T5834]  ? do_raw_spin_unlock+0x122/0x240
[  193.862039][ T5834]  f2fs_sync_dirty_inodes+0x31f/0x830
[  193.862087][ T5834]  f2fs_write_checkpoint+0x93e/0x2440
[  193.862117][ T5834]  ? stack_depot_save_flags+0x40/0x860
[  193.862180][ T5834]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  193.862257][ T5834]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  193.862275][ T5834]  ? kfree+0x19a/0x6d0
[  193.862313][ T5834]  kill_f2fs_super+0x2cc/0x6d0
[  193.862352][ T5834]  ? __pfx_kill_f2fs_super+0x10/0x10
[  193.862403][ T5834]  ? shrinker_free+0x2ce/0x3e0
[  193.862428][ T5834]  deactivate_locked_super+0xbc/0x130
[  193.862471][ T5834]  cleanup_mnt+0x425/0x4c0
[  193.862502][ T5834]  ? lockdep_hardirqs_on+0x9c/0x150
[  193.862528][ T5834]  task_work_run+0x1d4/0x260
[  193.862552][ T5834]  ? __pfx_task_work_run+0x10/0x10
[  193.862570][ T5834]  ? __x64_sys_umount+0x122/0x160
[  193.862596][ T5834]  ? exit_to_user_mode_loop+0x40/0x130
[  193.862627][ T5834]  exit_to_user_mode_loop+0xe9/0x130
[  193.862652][ T5834]  do_syscall_64+0x2cd/0xfa0
[  193.862673][ T5834]  ? lockdep_hardirqs_on+0x9c/0x150
[  193.862693][ T5834]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  193.862713][ T5834]  ? clear_bhb_loop+0x60/0xb0
[  193.862739][ T5834]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  193.862758][ T5834] RIP: 0033:0x7f067cb909f7
[  193.862778][ T5834] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  193.862796][ T5834] RSP: 002b:00007fff59af1e28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  193.862817][ T5834] RAX: 0000000000000000 RBX: 00007f067cc11d7d RCX: 00007f067cb909f7
[  193.862830][ T5834] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff59af1ee0
[  193.862842][ T5834] RBP: 00007fff59af1ee0 R08: 0000000000000000 R09: 0000000000000000
[  193.862855][ T5834] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff59af2f70
[  193.862868][ T5834] R13: 00007f067cc11d7d R14: 000000000002f1f4 R15: 00007fff59af2fb0
[  193.862905][ T5834]  </TASK>
[  193.862913][ T5834] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  194.307156][ T8149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.611'.
[  194.316193][ T8149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.611'.
[  194.328394][ T7875] veth0_vlan: entered promiscuous mode
[  194.352556][ T7875] veth1_vlan: entered promiscuous mode
[  194.452725][ T7875] veth0_macvtap: entered promiscuous mode
[  194.491275][ T7875] veth1_macvtap: entered promiscuous mode
[  194.540319][ T7875] batman_adv: batadv0: Interface activated: batadv_slave_0
[  194.583509][ T7875] batman_adv: batadv0: Interface activated: batadv_slave_1
[  194.658059][ T6066] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  194.686969][ T6066] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  194.705415][ T6066] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  194.755885][ T6066] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  195.010894][   T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  195.040630][   T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  195.171986][ T6066] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  195.196455][ T6066] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  195.315129][ T5895] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  195.464960][ T5895] usb 6-1: Using ep0 maxpacket: 16
[  195.478924][ T5895] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  195.504357][ T5895] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  195.555410][ T5895] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  195.623797][ T5895] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  195.645642][ T5895] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  195.653700][ T5895] usb 6-1: Product: syz
[  195.690931][ T5895] usb 6-1: Manufacturer: syz
[  195.705026][ T5895] usb 6-1: SerialNumber: syz
[  196.153968][ T5895] usb 6-1: 2:1 : format type 0 is detected, processed as PCM
[  196.166881][ T8193] input: syz0 as /devices/virtual/input/input12
[  196.378653][ T8179] loop3: detected capacity change from 0 to 32768
[  196.431546][ T8179] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  196.507500][ T8179] XFS (loop3): Ending clean mount
[  196.535682][ T8179] XFS (loop3): Quotacheck needed: Please wait.
[  196.605822][ T8211] loop1: detected capacity change from 0 to 256
[  196.661134][ T8179] XFS (loop3): Quotacheck: Done.
[  196.889511][ T8216] faux_driver vkms: [drm] Unknown color mode 3; guessing buffer size.
[  196.938053][ T5829] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  196.970791][ T5895] usb 6-1: 2:1: cannot get freq at ep 0x82
[  197.137050][ T5895] usb 6-1: USB disconnect, device number 5
[  197.310209][ T5880] udevd[5880]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  197.539011][    C0] hrtimer: interrupt took 27760 ns
[  197.652750][ T8242] input: syz0 as /devices/virtual/input/input13
[  198.275616][ T8263] netlink: 20 bytes leftover after parsing attributes in process `syz.2.652'.
[  198.338952][ T8265] netlink: 20 bytes leftover after parsing attributes in process `syz.2.652'.
[  198.815852][ T8284] Bluetooth: hci0: expected 2 bytes, got 7 bytes
[  198.972342][ T8290] loop5: detected capacity change from 0 to 47
[  198.981121][   T30] audit: type=1326 audit(1762316786.810:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8291 comm="syz.2.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f067cb8f6c9 code=0x7ffc0000
[  199.065982][   T30] audit: type=1326 audit(1762316786.810:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8291 comm="syz.2.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f067cb8f6c9 code=0x7ffc0000
[  199.180339][ T8290] syz.5.661: attempt to access beyond end of device
[  199.180339][ T8290] loop5: rw=1, sector=48, nr_sectors = 2 limit=47
[  199.224883][   T30] audit: type=1326 audit(1762316786.810:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8291 comm="syz.2.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f067cb8f6c9 code=0x7ffc0000
[  199.282683][ T8290] Buffer I/O error on dev loop5, logical block 24, lost async page write
[  199.345003][   T30] audit: type=1326 audit(1762316786.810:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8291 comm="syz.2.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f067cb8f6c9 code=0x7ffc0000
[  199.407515][   T30] audit: type=1326 audit(1762316786.810:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8291 comm="syz.2.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f067cb8f6c9 code=0x7ffc0000
[  199.531970][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  199.556541][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  199.573547][   T30] audit: type=1326 audit(1762316786.820:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8291 comm="syz.2.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f067cb8f6c9 code=0x7ffc0000
[  199.684955][   T30] audit: type=1326 audit(1762316786.820:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8291 comm="syz.2.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f067cb8f6c9 code=0x7ffc0000
[  199.749786][ T8308] loop6: detected capacity change from 0 to 4096
[  199.769331][   T30] audit: type=1326 audit(1762316786.850:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8291 comm="syz.2.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f067cb8f6c9 code=0x7ffc0000
[  199.796201][ T8308] EXT4-fs: Ignoring removed mblk_io_submit option
[  199.831166][ T8308] EXT4-fs (loop6): Test dummy encryption mode enabled
[  199.842503][   T30] audit: type=1326 audit(1762316786.860:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8291 comm="syz.2.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f067cb8f6c9 code=0x7ffc0000
[  199.893172][ T8316] 
[  199.895576][ T8316] =====================================================
[  199.902538][ T8316] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected
[  199.910043][ T8316] syzkaller #0 Not tainted
[  199.914479][ T8316] -----------------------------------------------------
[  199.921429][ T8316] syz.3.672/8316 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire:
[  199.928985][ T8316] ffff88802eeec018 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0
[  199.937720][ T8316] 
[  199.937720][ T8316] and this task is already holding:
[  199.945176][ T8316] ffff888026a8c028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0
[  199.954939][ T8316] which would create a new lock dependency:
[  199.960827][ T8316]  (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3}
[  199.968946][ T8316] 
[  199.968946][ T8316] but this new dependency connects a SOFTIRQ-irq-safe lock:
[  199.978403][ T8316]  (&dev->event_lock#2){..-.}-{3:3}
[  199.978441][ T8316] 
[  199.978441][ T8316] ... which became SOFTIRQ-irq-safe at:
[  199.991609][ T8316]   lock_acquire+0x120/0x360
[  199.996218][ T8316]   _raw_spin_lock_irqsave+0xa7/0xf0
[  200.001521][ T8316]   input_event+0x76/0xe0
[  200.005873][ T8316]   hidinput_report_event+0xa1/0x100
[  200.011195][ T8316]   hid_report_raw_event+0x148b/0x1720
[  200.016681][ T8316]   hid_input_report+0x44b/0x580
[  200.021643][ T8316]   hid_irq_in+0x47e/0x6d0
[  200.026067][ T8316]   __usb_hcd_giveback_urb+0x376/0x540
[  200.031541][ T8316]   dummy_timer+0x85f/0x45b0
[  200.036149][ T8316]   __hrtimer_run_queues+0x52c/0xc60
[  200.041447][ T8316]   hrtimer_run_softirq+0x187/0x2b0
[  200.046661][ T8316]   handle_softirqs+0x286/0x870
[  200.051524][ T8316]   __irq_exit_rcu+0xca/0x1f0
[  200.056224][ T8316]   irq_exit_rcu+0x9/0x30
[  200.060562][ T8316]   sysvec_apic_timer_interrupt+0xa6/0xc0
[  200.066300][ T8316]   asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  200.072379][ T8316]   __sanitizer_cov_trace_pc+0x0/0x70
[  200.077764][ T8316]   page_ext_lookup+0xfb/0x180
[  200.082536][ T8316]   page_table_check_clear+0x278/0x700
[  200.088000][ T8316]   unmap_page_range+0x3466/0x4370
[  200.093118][ T8316]   unmap_vmas+0x399/0x580
[  200.097537][ T8316]   vms_clear_ptes+0x35c/0x540
[  200.102321][ T8316]   vms_complete_munmap_vmas+0x206/0x8a0
[  200.107961][ T8316]   do_vmi_align_munmap+0x364/0x440
[  200.113168][ T8316]   do_vmi_munmap+0x253/0x2e0
[  200.117849][ T8316]   __vm_munmap+0x207/0x380
[  200.122360][ T8316]   __x64_sys_munmap+0x60/0x70
[  200.127133][ T8316]   do_syscall_64+0xfa/0xfa0
[  200.131882][ T8316]   entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.137891][ T8316] 
[  200.137891][ T8316] to a SOFTIRQ-irq-unsafe lock:
[  200.144921][ T8316]  (tasklist_lock){.+.+}-{3:3}
[  200.144952][ T8316] 
[  200.144952][ T8316] ... which became SOFTIRQ-irq-unsafe at:
[  200.157589][ T8316] ...
[  200.157597][ T8316]   lock_acquire+0x120/0x360
[  200.164793][ T8316]   _raw_read_lock+0x36/0x50
[  200.169391][ T8316]   __do_wait+0xde/0x740
[  200.173642][ T8316]   do_wait+0x1f8/0x510
[  200.177807][ T8316]   kernel_wait+0xab/0x170
[  200.182230][ T8316]   call_usermodehelper_exec_work+0xbe/0x230
[  200.188219][ T8316]   process_one_work+0x94a/0x15d0
[  200.193252][ T8316]   worker_thread+0x9b0/0xee0
[  200.197942][ T8316]   kthread+0x711/0x8a0
[  200.202111][ T8316]   ret_from_fork+0x52d/0xa70
[  200.206845][ T8316]   ret_from_fork_asm+0x1a/0x30
[  200.211703][ T8316] 
[  200.211703][ T8316] other info that might help us debug this:
[  200.211703][ T8316] 
[  200.221933][ T8316] Chain exists of:
[  200.221933][ T8316]   &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock
[  200.221933][ T8316] 
[  200.235513][ T8316]  Possible interrupt unsafe locking scenario:
[  200.235513][ T8316] 
[  200.243832][ T8316]        CPU0                    CPU1
[  200.249198][ T8316]        ----                    ----
[  200.254588][ T8316]   lock(tasklist_lock);
[  200.258842][ T8316]                                local_irq_disable();
[  200.265617][ T8316]                                lock(&dev->event_lock#2);
[  200.272832][ T8316]                                lock(&client->buffer_lock);
[  200.280210][ T8316]   <Interrupt>
[  200.283666][ T8316]     lock(&dev->event_lock#2);
[  200.288535][ T8316] 
[  200.288535][ T8316]  *** DEADLOCK ***
[  200.288535][ T8316] 
[  200.296685][ T8316] 7 locks held by syz.3.672/8316:
[  200.301794][ T8316]  #0: ffff88802946e118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480
[  200.310977][ T8316]  #1: ffff88801c3eb230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340
[  200.321106][ T8316]  #2: ffffffff8df3b520 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340
[  200.330817][ T8316]  #3: ffffffff8df3b520 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890
[  200.340422][ T8316]  #4: ffffffff8df3b520 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340
[  200.349603][ T8316]  #5: ffff888026a8c028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0
[  200.359805][ T8316]  #6: ffffffff8df3b520 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0
[  200.368886][ T8316] 
[  200.368886][ T8316] the dependencies between SOFTIRQ-irq-safe lock and the holding lock:
[  200.379300][ T8316]  -> (&dev->event_lock#2){..-.}-{3:3} {
[  200.384979][ T8316]     IN-SOFTIRQ-W at:
[  200.389088][ T8316]                       lock_acquire+0x120/0x360
[  200.395447][ T8316]                       _raw_spin_lock_irqsave+0xa7/0xf0
[  200.402506][ T8316]                       input_event+0x76/0xe0
[  200.408588][ T8316]                       hidinput_report_event+0xa1/0x100
[  200.415627][ T8316]                       hid_report_raw_event+0x148b/0x1720
[  200.422836][ T8316]                       hid_input_report+0x44b/0x580
[  200.429523][ T8316]                       hid_irq_in+0x47e/0x6d0
[  200.435686][ T8316]                       __usb_hcd_giveback_urb+0x376/0x540
[  200.442902][ T8316]                       dummy_timer+0x85f/0x45b0
[  200.449242][ T8316]                       __hrtimer_run_queues+0x52c/0xc60
[  200.456281][ T8316]                       hrtimer_run_softirq+0x187/0x2b0
[  200.463233][ T8316]                       handle_softirqs+0x286/0x870
[  200.469863][ T8316]                       __irq_exit_rcu+0xca/0x1f0
[  200.476310][ T8316]                       irq_exit_rcu+0x9/0x30
[  200.482386][ T8316]                       sysvec_apic_timer_interrupt+0xa6/0xc0
[  200.489850][ T8316]                       asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  200.497712][ T8316]                       __sanitizer_cov_trace_pc+0x0/0x70
[  200.504835][ T8316]                       page_ext_lookup+0xfb/0x180
[  200.511363][ T8316]                       page_table_check_clear+0x278/0x700
[  200.518566][ T8316]                       unmap_page_range+0x3466/0x4370
[  200.525422][ T8316]                       unmap_vmas+0x399/0x580
[  200.531582][ T8316]                       vms_clear_ptes+0x35c/0x540
[  200.538181][ T8316]                       vms_complete_munmap_vmas+0x206/0x8a0
[  200.545558][ T8316]                       do_vmi_align_munmap+0x364/0x440
[  200.552506][ T8316]                       do_vmi_munmap+0x253/0x2e0
[  200.558940][ T8316]                       __vm_munmap+0x207/0x380
[  200.565204][ T8316]                       __x64_sys_munmap+0x60/0x70
[  200.571725][ T8316]                       do_syscall_64+0xfa/0xfa0
[  200.578071][ T8316]                       entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.585982][ T8316]     INITIAL USE at:
[  200.589977][ T8316]                      lock_acquire+0x120/0x360
[  200.596257][ T8316]                      _raw_spin_lock_irqsave+0xa7/0xf0
[  200.603237][ T8316]                      input_inject_event+0xa5/0x340
[  200.609926][ T8316]                      kbd_led_trigger_activate+0xbc/0x100
[  200.617141][ T8316]                      led_trigger_set+0x52d/0x950
[  200.623651][ T8316]                      led_trigger_set_default+0x260/0x2a0
[  200.630939][ T8316]                      led_classdev_register_ext+0x73d/0x960
[  200.638322][ T8316]                      input_leds_connect+0x517/0x790
[  200.645110][ T8316]                      input_register_device+0xd00/0x1170
[  200.652240][ T8316]                      atkbd_connect+0x73b/0xa50
[  200.658579][ T8316]                      serio_driver_probe+0x82/0xd0
[  200.665167][ T8316]                      really_probe+0x26d/0xad0
[  200.671510][ T8316]                      __driver_probe_device+0x18c/0x320
[  200.678543][ T8316]                      driver_probe_device+0x4f/0x240
[  200.685359][ T8316]                      __driver_attach+0x349/0x650
[  200.691882][ T8316]                      bus_for_each_dev+0x233/0x2b0
[  200.698566][ T8316]                      serio_handle_event+0x1f9/0x8d0
[  200.705333][ T8316]                      process_one_work+0x94a/0x15d0
[  200.712016][ T8316]                      worker_thread+0x9b0/0xee0
[  200.718354][ T8316]                      kthread+0x711/0x8a0
[  200.724174][ T8316]                      ret_from_fork+0x52d/0xa70
[  200.730511][ T8316]                      ret_from_fork_asm+0x1a/0x30
[  200.737018][ T8316]   }
[  200.739608][ T8316]   ... key      at: [<ffffffff99b8c3e0>] input_allocate_device.__key.5+0x0/0x20
[  200.748739][ T8316] -> (&client->buffer_lock){....}-{3:3} {
[  200.754492][ T8316]    INITIAL USE at:
[  200.758393][ T8316]                    lock_acquire+0x120/0x360
[  200.764481][ T8316]                    _raw_spin_lock_irq+0xa2/0xf0
[  200.770911][ T8316]                    evdev_read+0x370/0xca0
[  200.776825][ T8316]                    vfs_readv+0x5aa/0x850
[  200.782732][ T8316]                    do_readv+0x14d/0x2d0
[  200.788480][ T8316]                    do_syscall_64+0xfa/0xfa0
[  200.794589][ T8316]                    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.802060][ T8316]  }
[  200.804568][ T8316]  ... key      at: [<ffffffff99b8c680>] evdev_open.__key.25+0x0/0x20
[  200.812744][ T8316]  ... acquired at:
[  200.816551][ T8316]    lock_acquire+0x120/0x360
[  200.821238][ T8316]    _raw_spin_lock+0x2e/0x40
[  200.825929][ T8316]    evdev_pass_values+0xb9/0xbd0
[  200.830961][ T8316]    evdev_events+0x1aa/0x340
[  200.835649][ T8316]    input_pass_values+0x1c2/0x890
[  200.840769][ T8316]    input_event_dispose+0x330/0x6b0
[  200.846210][ T8316]    input_inject_event+0x1dd/0x340
[  200.851424][ T8316]    evdev_write+0x2fc/0x480
[  200.856031][ T8316]    vfs_write+0x27e/0xb30
[  200.860454][ T8316]    ksys_write+0x145/0x250
[  200.864959][ T8316]    do_syscall_64+0xfa/0xfa0
[  200.869644][ T8316]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.875716][ T8316] 
[  200.878063][ T8316] 
[  200.878063][ T8316] the dependencies between the lock to be acquired
[  200.878074][ T8316]  and SOFTIRQ-irq-unsafe lock:
[  200.891592][ T8316]   -> (tasklist_lock){.+.+}-{3:3} {
[  200.896908][ T8316]      HARDIRQ-ON-R at:
[  200.901069][ T8316]                         lock_acquire+0x120/0x360
[  200.907582][ T8316]                         _raw_read_lock+0x36/0x50
[  200.914090][ T8316]                         __do_wait+0xde/0x740
[  200.920253][ T8316]                         do_wait+0x1f8/0x510
[  200.926323][ T8316]                         kernel_wait+0xab/0x170
[  200.932660][ T8316]                         call_usermodehelper_exec_work+0xbe/0x230
[  200.940561][ T8316]                         process_one_work+0x94a/0x15d0
[  200.947503][ T8316]                         worker_thread+0x9b0/0xee0
[  200.954105][ T8316]                         kthread+0x711/0x8a0
[  200.960188][ T8316]                         ret_from_fork+0x52d/0xa70
[  200.966786][ T8316]                         ret_from_fork_asm+0x1a/0x30
[  200.973559][ T8316]      SOFTIRQ-ON-R at:
[  200.977720][ T8316]                         lock_acquire+0x120/0x360
[  200.984226][ T8316]                         _raw_read_lock+0x36/0x50
[  200.990735][ T8316]                         __do_wait+0xde/0x740
[  200.996902][ T8316]                         do_wait+0x1f8/0x510
[  201.002978][ T8316]                         kernel_wait+0xab/0x170
[  201.009317][ T8316]                         call_usermodehelper_exec_work+0xbe/0x230
[  201.017217][ T8316]                         process_one_work+0x94a/0x15d0
[  201.024163][ T8316]                         worker_thread+0x9b0/0xee0
[  201.030858][ T8316]                         kthread+0x711/0x8a0
[  201.036939][ T8316]                         ret_from_fork+0x52d/0xa70
[  201.043535][ T8316]                         ret_from_fork_asm+0x1a/0x30
[  201.050308][ T8316]      INITIAL USE at:
[  201.054389][ T8316]                        lock_acquire+0x120/0x360
[  201.060814][ T8316]                        _raw_write_lock_irq+0xa2/0xf0
[  201.067666][ T8316]                        copy_process+0x2262/0x3c10
[  201.074263][ T8316]                        kernel_clone+0x21e/0x840
[  201.080691][ T8316]                        user_mode_thread+0xdd/0x140
[  201.087380][ T8316]                        rest_init+0x23/0x300
[  201.093463][ T8316]                        start_kernel+0x3ac/0x410
[  201.099901][ T8316]                        x86_64_start_reservations+0x24/0x30
[  201.107375][ T8316]                        x86_64_start_kernel+0x143/0x1c0
[  201.114591][ T8316]                        common_startup_64+0x13e/0x147
[  201.121572][ T8316]      INITIAL READ USE at:
[  201.126080][ T8316]                             lock_acquire+0x120/0x360
[  201.132936][ T8316]                             _raw_read_lock+0x36/0x50
[  201.139793][ T8316]                             __do_wait+0xde/0x740
[  201.146301][ T8316]                             do_wait+0x1f8/0x510
[  201.152718][ T8316]                             kernel_wait+0xab/0x170
[  201.159398][ T8316]                             call_usermodehelper_exec_work+0xbe/0x230
[  201.167654][ T8316]                             process_one_work+0x94a/0x15d0
[  201.174946][ T8316]                             worker_thread+0x9b0/0xee0
[  201.181889][ T8316]                             kthread+0x711/0x8a0
[  201.188324][ T8316]                             ret_from_fork+0x52d/0xa70
[  201.195268][ T8316]                             ret_from_fork_asm+0x1a/0x30
[  201.202472][ T8316]    }
[  201.205151][ T8316]    ... key      at: [<ffffffff8dc0a058>] tasklist_lock+0x18/0x40
[  201.213077][ T8316]    ... acquired at:
[  201.217070][ T8316]    lock_acquire+0x120/0x360
[  201.221779][ T8316]    _raw_read_lock+0x36/0x50
[  201.226477][ T8316]    send_sigio+0x101/0x370
[  201.231029][ T8316]    dnotify_handle_event+0x169/0x440
[  201.236412][ T8316]    fsnotify+0x1668/0x1ab0
[  201.240926][ T8316]    __fsnotify_parent+0x3fe/0x540
[  201.246051][ T8316]    notify_change+0xc55/0xf40
[  201.250822][ T8316]    do_truncate+0x1a4/0x220
[  201.255504][ T8316]    vfs_truncate+0x493/0x520
[  201.260271][ T8316]    do_sys_truncate+0xdb/0x190
[  201.265124][ T8316]    __x64_sys_truncate+0x5b/0x70
[  201.270153][ T8316]    do_syscall_64+0xfa/0xfa0
[  201.274838][ T8316]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.280912][ T8316] 
[  201.283244][ T8316]  -> (&f_owner->lock){....}-{3:3} {
[  201.288653][ T8316]     INITIAL USE at:
[  201.292648][ T8316]                      lock_acquire+0x120/0x360
[  201.298906][ T8316]                      _raw_write_lock_irq+0xa2/0xf0
[  201.305605][ T8316]                      __f_setown+0x67/0x370
[  201.311628][ T8316]                      fcntl_dirnotify+0x3fa/0x6a0
[  201.318145][ T8316]                      do_fcntl+0x6d0/0x1910
[  201.324141][ T8316]                      __se_sys_fcntl+0xc8/0x150
[  201.330485][ T8316]                      do_syscall_64+0xfa/0xfa0
[  201.336820][ T8316]                      entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.344457][ T8316]     INITIAL READ USE at:
[  201.348904][ T8316]                           lock_acquire+0x120/0x360
[  201.355695][ T8316]                           _raw_read_lock_irqsave+0xaf/0x100
[  201.363174][ T8316]                           send_sigio+0x38/0x370
[  201.369603][ T8316]                           dnotify_handle_event+0x169/0x440
[  201.376975][ T8316]                           fsnotify+0x1668/0x1ab0
[  201.383491][ T8316]                           __fsnotify_parent+0x3fe/0x540
[  201.390619][ T8316]                           notify_change+0xc55/0xf40
[  201.397390][ T8316]                           do_truncate+0x1a4/0x220
[  201.403989][ T8316]                           vfs_truncate+0x493/0x520
[  201.410678][ T8316]                           do_sys_truncate+0xdb/0x190
[  201.417539][ T8316]                           __x64_sys_truncate+0x5b/0x70
[  201.424567][ T8316]                           do_syscall_64+0xfa/0xfa0
[  201.431256][ T8316]                           entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.439326][ T8316]   }
[  201.441912][ T8316]   ... key      at: [<ffffffff9986f9c0>] file_f_owner_allocate.__key+0x0/0x20
[  201.450863][ T8316]   ... acquired at:
[  201.454752][ T8316]    lock_acquire+0x120/0x360
[  201.459454][ T8316]    _raw_read_lock_irqsave+0xaf/0x100
[  201.464919][ T8316]    send_sigio+0x38/0x370
[  201.469345][ T8316]    kill_fasync+0x24d/0x4d0
[  201.473943][ T8316]    lease_break_callback+0x26/0x30
[  201.479246][ T8316]    __break_lease+0x6a5/0x1620
[  201.484102][ T8316]    vfs_truncate+0x428/0x520
[  201.488796][ T8316]    do_sys_truncate+0xdb/0x190
[  201.493658][ T8316]    __x64_sys_truncate+0x5b/0x70
[  201.498787][ T8316]    do_syscall_64+0xfa/0xfa0
[  201.503469][ T8316]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.509544][ T8316] 
[  201.511871][ T8316] -> (&new->fa_lock){....}-{3:3} {
[  201.517006][ T8316]    INITIAL USE at:
[  201.521003][ T8316]                    lock_acquire+0x120/0x360
[  201.527076][ T8316]                    _raw_write_lock_irq+0xa2/0xf0
[  201.533596][ T8316]                    fasync_remove_entry+0xf1/0x1c0
[  201.540194][ T8316]                    lease_modify+0x1ca/0x3c0
[  201.546269][ T8316]                    generic_setlease+0x9ae/0x1240
[  201.552784][ T8316]                    fcntl_setlease+0xc6/0x4c0
[  201.558944][ T8316]                    do_fcntl+0x6a9/0x1910
[  201.564796][ T8316]                    __se_sys_fcntl+0xc8/0x150
[  201.570963][ T8316]                    do_syscall_64+0xfa/0xfa0
[  201.577083][ T8316]                    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.584557][ T8316]    INITIAL READ USE at:
[  201.588888][ T8316]                         lock_acquire+0x120/0x360
[  201.595395][ T8316]                         _raw_read_lock_irqsave+0xaf/0x100
[  201.602684][ T8316]                         kill_fasync+0x199/0x4d0
[  201.609118][ T8316]                         lease_break_callback+0x26/0x30
[  201.616151][ T8316]                         __break_lease+0x6a5/0x1620
[  201.622836][ T8316]                         vfs_truncate+0x428/0x520
[  201.629361][ T8316]                         do_sys_truncate+0xdb/0x190
[  201.636061][ T8316]                         __x64_sys_truncate+0x5b/0x70
[  201.642916][ T8316]                         do_syscall_64+0xfa/0xfa0
[  201.649430][ T8316]                         entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.657334][ T8316]  }
[  201.659832][ T8316]  ... key      at: [<ffffffff9986f9e0>] fasync_insert_entry.__key+0x0/0x20
[  201.668519][ T8316]  ... acquired at:
[  201.672322][ T8316]    lock_acquire+0x120/0x360
[  201.677004][ T8316]    _raw_read_lock_irqsave+0xaf/0x100
[  201.682468][ T8316]    kill_fasync+0x199/0x4d0
[  201.687073][ T8316]    evdev_pass_values+0x627/0xbd0
[  201.692190][ T8316]    evdev_events+0x1e6/0x340
[  201.696874][ T8316]    input_pass_values+0x288/0x890
[  201.701989][ T8316]    input_event_dispose+0x330/0x6b0
[  201.707285][ T8316]    input_inject_event+0x1dd/0x340
[  201.712500][ T8316]    evdev_write+0x2fc/0x480
[  201.717107][ T8316]    vfs_write+0x27e/0xb30
[  201.721616][ T8316]    ksys_write+0x145/0x250
[  201.726124][ T8316]    do_syscall_64+0xfa/0xfa0
[  201.730807][ T8316]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.736873][ T8316] 
[  201.739199][ T8316] 
[  201.739199][ T8316] stack backtrace:
[  201.745174][ T8316] CPU: 1 UID: 0 PID: 8316 Comm: syz.3.672 Not tainted syzkaller #0 PREEMPT(full) 
[  201.745195][ T8316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  201.745206][ T8316] Call Trace:
[  201.745213][ T8316]  <TASK>
[  201.745222][ T8316]  dump_stack_lvl+0x189/0x250
[  201.745252][ T8316]  ? __pfx_dump_stack_lvl+0x10/0x10
[  201.745277][ T8316]  ? __pfx__printk+0x10/0x10
[  201.745300][ T8316]  validate_chain+0x1f05/0x2140
[  201.745334][ T8316]  __lock_acquire+0xab9/0xd20
[  201.745357][ T8316]  ? kill_fasync+0x199/0x4d0
[  201.745381][ T8316]  lock_acquire+0x120/0x360
[  201.745400][ T8316]  ? kill_fasync+0x199/0x4d0
[  201.745430][ T8316]  _raw_read_lock_irqsave+0xaf/0x100
[  201.745447][ T8316]  ? kill_fasync+0x199/0x4d0
[  201.745471][ T8316]  ? __pfx__raw_read_lock_irqsave+0x10/0x10
[  201.745486][ T8316]  ? do_raw_spin_lock+0x121/0x290
[  201.745516][ T8316]  kill_fasync+0x199/0x4d0
[  201.745540][ T8316]  ? kill_fasync+0x53/0x4d0
[  201.745564][ T8316]  evdev_pass_values+0x627/0xbd0
[  201.745584][ T8316]  ? evdev_pass_values+0x5d1/0xbd0
[  201.745604][ T8316]  evdev_events+0x1e6/0x340
[  201.745619][ T8316]  ? evdev_events+0x79/0x340
[  201.745635][ T8316]  ? input_pass_values+0x8d/0x890
[  201.745649][ T8316]  input_pass_values+0x288/0x890
[  201.745668][ T8316]  ? input_handle_event+0x70c/0xf30
[  201.745699][ T8316]  input_event_dispose+0x330/0x6b0
[  201.745723][ T8316]  input_inject_event+0x1dd/0x340
[  201.745746][ T8316]  ? input_inject_event+0xb6/0x340
[  201.745769][ T8316]  evdev_write+0x2fc/0x480
[  201.745788][ T8316]  ? __pfx_evdev_write+0x10/0x10
[  201.745805][ T8316]  ? bpf_lsm_file_permission+0x9/0x20
[  201.745822][ T8316]  ? security_file_permission+0x75/0x290
[  201.745850][ T8316]  ? rw_verify_area+0x255/0x4d0
[  201.745865][ T8316]  ? __lock_acquire+0xab9/0xd20
[  201.745883][ T8316]  ? __pfx_evdev_write+0x10/0x10
[  201.745900][ T8316]  vfs_write+0x27e/0xb30
[  201.745919][ T8316]  ? __pfx_vfs_write+0x10/0x10
[  201.745936][ T8316]  ? __fget_files+0x2a/0x420
[  201.745957][ T8316]  ? __fget_files+0x2a/0x420
[  201.745976][ T8316]  ? __fget_files+0x3a0/0x420
[  201.745995][ T8316]  ? __fget_files+0x2a/0x420
[  201.746018][ T8316]  ksys_write+0x145/0x250
[  201.746035][ T8316]  ? __pfx_ksys_write+0x10/0x10
[  201.746052][ T8316]  ? do_syscall_64+0xbe/0xfa0
[  201.746070][ T8316]  do_syscall_64+0xfa/0xfa0
[  201.746086][ T8316]  ? lockdep_hardirqs_on+0x9c/0x150
[  201.746102][ T8316]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.746118][ T8316]  ? clear_bhb_loop+0x60/0xb0
[  201.746136][ T8316]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.746153][ T8316] RIP: 0033:0x7f5d9ef8f6c9
[  201.746168][ T8316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  201.746183][ T8316] RSP: 002b:00007f5d9fdcf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  201.746201][ T8316] RAX: ffffffffffffffda RBX: 00007f5d9f1e5fa0 RCX: 00007f5d9ef8f6c9
[  201.746213][ T8316] RDX: 0000000000001068 RSI: 0000200000000040 RDI: 0000000000000004
[  201.746224][ T8316] RBP: 00007f5d9f011f91 R08: 0000000000000000 R09: 0000000000000000
[  201.746234][ T8316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  201.746244][ T8316] R13: 00007f5d9f1e6038 R14: 00007f5d9f1e5fa0 R15: 00007ffe35b209b8
[  201.746263][ T8316]  </TASK>
[  201.782192][    T9] Bluetooth: hci1: Opcode 0x0c1a failed: -110
[  201.807804][   T30] audit: type=1326 audit(1762316786.860:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8291 comm="syz.2.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f067cb8f6c9 code=0x7ffc0000
[  201.832723][    T9] Bluetooth: hci1: Error when powering off device on rfkill (-110)
[  201.915946][ T5844] Bluetooth: hci1: command 0x0c1a tx timeout
[  202.161604][ T8308] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  202.222212][ T8308] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  202.260995][ T8308] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  202.270731][ T8308] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  202.303289][ T7875] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.224871][    T9] Bluetooth: hci3: Opcode 0x0c1a failed: -110
[  204.224892][ T5844] Bluetooth: hci3: command 0x0c1a tx timeout
[  204.237068][    T9] Bluetooth: hci3: Error when powering off device on rfkill (-110)
[  206.304900][ T5844] Bluetooth: hci4: command 0x0c1a tx timeout
[  206.310968][    T9] Bluetooth: hci4: Opcode 0x0c1a failed: -110
[  206.317966][    T9] Bluetooth: hci4: Error when powering off device on rfkill (-110)
[  208.385037][    T9] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  208.391150][    T9] Bluetooth: hci0: Error when powering off device on rfkill (-110)