last executing test programs:

1m5.581951997s ago: executing program 2 (id=95):
syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000001340)='./tracing\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x1, 0x48e, &(0x7f0000000140)="$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")
syz_mount_image$vfat(&(0x7f0000000840), &(0x7f0000000880)='./file1\x00', 0x804880, &(0x7f00000008c0)=ANY=[@ANYRES8=0x0, @ANYRES8], 0x10, 0x1213, &(0x7f0000001380)="$eJzs3E9rXFUYB+A3Y2rS1PxRa7Vd6AtuxMWlycKVIEFSkAwotRFaQbg1Ex0yzpTcITAiVldu/Ryu3Ql+g2z8DO6y6bIL8UrvNG1SU4vQZMQ+z2Luyz3nxzkHhoEz3HP33/3xq+2tqtgqh9GamorWrYi8m5HRigOvr4+v12+sr7bba1czr6xeW34nMxfe+PXTb2Yi4twnPy/8MhN7S5/t31n5fe/C3sX9P6992a2yW2V/MMwybw4Gw/JmbyE3u9V2kflRr1NWnez2q87OofZObr0dEaMs+5vzc7d2OlWVZX+U251RDgc53Bll+UXZ7WdRFDk/FzzWmSd32fjpbl3XEXV9Jp6Puq7rszEX5+KFmI+F+C4iXoyX4uU4H6/EhXg1XouLTa/TmD4AAAAAAAAAAAAAAAAAAAA8O/7p/P9iLDn/DwAAAAAAAAAAAAAAAAAAAKfg4+s31lfb7bWrmbMRvR92N3Y3xtdx+9K9j1504nIsxh/RnP4fG9dXPmivXc7GUnzfu30/f3t347kmv3qQX25eJ3A/P920HeSXx/k8mp+JuXv5reg2+ZVYjPPHj79ybH423nrzUL6Ixfjt8xhELzabsR/mv13OfP/D9iP5S00/AAAA+D8o8oFj9+9F8bj2cf7B/vrJ/w88sr+ejkvTk107EdXo6+2y1evsNEXvoJj9252TK+IUx3q6RcSduilmjja1TmjQVkx8yYeKqf/GNBRPpzgbR+9M+peJ0/DwazDpmQAAAAAAAAAAAPBvnPBzhdNxzJNl701mqQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzFDhwLAAAAAAjzt06jYwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCoAAP//qH3FUA==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000002640)='.\x00', 0x0, 0x0)
getdents64(r0, 0x0, 0x0)
rename(&(0x7f0000000600)='./file1\x00', &(0x7f0000000640)='.\x02\x00')

1m5.040840954s ago: executing program 2 (id=101):
syz_mount_image$nilfs2(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x1014800, &(0x7f0000000580)=ANY=[@ANYRES16=0x0, @ANYBLOB="f9cba1923b054572145c2e67b885838cb353bc831573228abfb498e7f1fd8103aceb50858482ddb69dd9112c10e3d66c32cab6609b02bf9f07615fb29a27d49a24de56c84013a0c47945492852bdc34e69ddc25ffb9f4d1dd1af98558daa9974edd7d1abd46ee9d69da503b22758321d5031603da076b28cfc7d9477af38586cb482ad3a187ab4c7b916fad188280cee", @ANYRESOCT=0x0, @ANYRES8, @ANYRES8=0x0, @ANYRES64, @ANYRESOCT, @ANYRES64, @ANYBLOB="7540c430e8d8cb55e0610f65aa69c7eb0e142a7517e581064ff06e9ce239e0442bbf8cf256a108d756ee68844798521e40cb7b7963cd4041f65dc013adbd4ccf55477d30e5c56ff7db509a5cef7b7db994b9626f3e1e66ff309fa925885a36b49f6a215f7990ea209bdf87f38e08ed924527c0e45f594c78d32118cd03202a8875"], 0x1, 0xda6, &(0x7f0000000b00)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f00000018c0)='./file0\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001900)='.\x00', 0x0, 0x0)
ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000001940)={{0x0, 0x0, 0x40, 0xd, 0xe2}, {0x0, 0x0, 0x10, 0x20c, 0xfffffffffffffff8}, {&(0x7f00000019c0)=[0x1000, 0x2000], 0x2, 0x8, 0x1, 0x2}, {0x0, 0x0, 0x28, 0x0, 0xffffffffffffff2d}, {&(0x7f0000001a00)=[0x9], 0x1, 0x8, 0x98f, 0xffff}})
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc\x00', 0x1ff)

1m4.224661277s ago: executing program 2 (id=105):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x1c, r2, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}}, 0x0)
sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x14, r2, 0x1, 0xfffffffc, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000)

1m3.936694958s ago: executing program 2 (id=111):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000180), &(0x7f0000000440)='./file0\x00', 0x4000, &(0x7f0000000480)={[{@force}, {}, {@nobarrier}, {@nls={'nls', 0x3d, 'cp855'}}]}, 0x2, 0x5fd, &(0x7f00000004c0)="$eJzs3c1vHGcdB/DvbPwSB5G6bdIWBMJKDqBGJF5vm/qAREAI+VChSlwqoR6sZJNY2biVvUVuhZDD65X/oEXIOXPigDhEgjN/ApY49IDE3begmZ21N7Hrl8bxrunnIz37PDPPzDPP8/PMszuzsjbAl9bCuxl/lCILV95eK5c3N1qdzY3W/X45yWSSRjLWy1IsJ8V4ciO9lK+VK+vmis87znufvDX/WfPhg97SWJ2q7Rv77Xc463XKTJIzdX5c7d08oL2fHdDY5EC5DNjlfuBg2B7vsn6U3Z/xugVGQdF739xlOjmX5Gz/fayeHRon27vjd6RZDgAAAE6pF7aylbWcH3Y/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4DSpf/+/qFOjX55J0f/9/4l6XeryqfZo2B0AAAAAAAAAgGPwra1sZS3n+8uPi+o7/0vVwoXq9Sv5MKtpZyVXs5bFdNPNSppJpgcamlhb7HZXmofYc27PPedOZrwAAAAAAAAA8H/qV1nY+f4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABGQZGc6WVVutAvT6cxluRskolyu/Xkb/3yafZo2B0AAACAE/DCVraylvP95cdFdc//SnXffzYfZjndLKWbTtq5VT0L6N31NzY3Wp3Njdb9Mu1u9wf/PVI3qhbTe/aw95Fnqy0uVvV/mkgW8uP8NFcyk3eykqX8PIvppp2Z/KgqLabIdP30Yrrfz737e+OJpXcO6utrVU+mcjtLVd+u5mbeTye30qjGUG2z/xEflNEpvl87ZIxu1Xk5oj/U+clb32PddBWR8e2IzNaxL6Px4v6ROOJ58vSRmmlsP4O68Bxifq7Oy1j/bmgx38vTkZgbOPte2T8SyaV/f/MvdzvL9+7eXr0yOkP6gp6ORGsgEq9+qSIxUUejN4v2Z8vSwbPlpWrf81nKT/J+bqWdNzOfNzOXN/JGZjOf6wNxvXjwtXYnyVGutcvfqQtTSX5f56OhjOuLA3EdnOmmq7rBNTtReun4Z6Sxr9eF8hi/rvPR8HQkmgOReHn/SPzxcfm62lm+t3J38YNDHu/bdV5etr8dqbm5PF9e2u7Rk2dHWfdy+YfcVdes6i5s1zV21V3811fruoOu1In6M9zuluaqulf3rGtVda8N1O31KQeAkXfu9XMTU/+Z+ufUp1O/mbo79fbZH07OT35jIuP/GPvrmT83Hja+V7yeT/PLnft/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgi1v96ON7i51Oe0VB4dQWxuqzeVT6M9qFMloHbzzkiQl47q51739wbfWjj7+7dH/xTvtOe7nVal6fm78+P3f92u2lTnu29zrsbgLPwc6b/rB7AgAAAAAAAAAAABzWSfzLwbDHCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJxuC+9m/FGKNGevzpbLmxutTpn65Z0tx5I0khS/SIq/JzfSS5keaK74vOO898lb8581Hz7YaWusv31jv/0mDzWK9TplJsmZOn8GT7R385nbK7ZHWAbscj9wMGz/CwAA//8BTQrw")
mkdirat(0xffffffffffffff9c, &(0x7f0000000ac0)='./proc\x00', 0x1a8)
mount(0x0, &(0x7f0000000b00)='./proc\x00', &(0x7f0000000b40)='proc\x00', 0x0, 0x0)

1m3.555217317s ago: executing program 2 (id=116):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f00000005c0), 0x10)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {&(0x7f0000000940)=""/161, 0xa1}], 0x2}, 0x9}], 0x1, 0x10002, 0x0)
ioctl$SIOCGSTAMP(r0, 0x8906, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0)

1m2.807922202s ago: executing program 2 (id=119):
unshare(0x8040480)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), r0)
r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000002c0)='ns/net\x00')
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x3c, r1, 0x1, 0x0, 0x0, {0x3}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}]}, 0x3c}}, 0x0)

1m2.021903512s ago: executing program 32 (id=119):
unshare(0x8040480)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), r0)
r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000002c0)='ns/net\x00')
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x3c, r1, 0x1, 0x0, 0x0, {0x3}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}]}, 0x3c}}, 0x0)

35.735905689s ago: executing program 4 (id=302):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newpolicy={0x17c, 0x13, 0x101, 0x0, 0x20000000, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@rand_addr=0x64010102, 0x4e20, 0xd, 0x8400, 0x9, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5, 0x0, 0x0, 0x0, 0x6, 0x3, 0x4, 0x8}, {0x0, 0x1, 0x0, 0x100}, 0x8}, [@tmpl={0xc4, 0x5, [{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d2, 0x2b}, 0xa, @in=@broadcast, 0x0, 0x0, 0x1, 0x1, 0x5, 0x2, 0x80000009}, {{@in6=@mcast1, 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x0, 0x3, 0x2, 0x48, 0x4, 0x8000, 0x5}, {{@in=@dev={0xac, 0x14, 0x14, 0x18}, 0x4d4, 0x2b}, 0xa, @in6=@remote, 0x0, 0x4, 0x2, 0x3, 0x0, 0x5, 0x6}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x20048000}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000940)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ecff80", 0x18, 0x11, 0x0, @private0, @mcast2, {[], {0x0, 0x4e22, 0x18, 0x0, @wg=@data={0x3, 0x800}}}}}}}, 0x0)

35.447548247s ago: executing program 4 (id=306):
mmap$IORING_OFF_SQ_RING(0x0, 0xbffffc, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$hfs(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="696f636861727365743d63703836362c66696c655f756d61736b3d30303030303030303030303030303030303030353034362c63726561746f723d44e026f52c636f6465706167653d63703433372c71756965742c0058feb839cfb4ef4e5a79c954a1997d9f05a48a6ad15ff7a3efc2141e6a8773b040760e5d198566eeaffd59d83533431dbd9206d9"], 0x5, 0x304, &(0x7f0000000740)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='.\x00', 0x0, 0x0)
lseek(r0, 0x1, 0x1)
getdents64(r0, 0x0, 0x22)

34.967016214s ago: executing program 4 (id=309):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000b40)={0x0, 0x10, 0x572, 0x9, 0x7, "ff000d00009a468e0cd912098d00"})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000c00)={0xfffe, 0x8481, 0x9846, 0x7ff7, 0x10, "05000000a7323900"})
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000c40)=0xa)

34.509263253s ago: executing program 4 (id=316):
r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x18000, &(0x7f0000000340)=ANY=[@ANYRES64=r0, @ANYRES16, @ANYBLOB="928e98d1602c077783c5dfd98a9a70e4f1e6375c03d4e46881bc036c28a293c46aae713ee0dc58290e7d1948c35176ea2d956a1a0640ead108c6801059510c3fb8321352a2ecbfe8dcb7eb81ffd370cc082a8c5a8b382de48fef9d4d9d56301ede897c5f3dc4c1db8b28fcd1583e361318a5a520b9c094bbd4139f6f648a99317e9da18c79402fbf7c246086aa5872e446856a1706ced028", @ANYRES8=0x0, @ANYRES16, @ANYRES64, @ANYRESHEX], 0x1, 0x304, &(0x7f0000000400)="$eJzs3M9PE2kYwPGnPyhtCZTDZje7yYZ3dy/rZQLVs9IYSIxNJEiNPxKTAabadGxJp8HUGJGTV+PNf8AD4ciNRPkHuHjTixdvXEw8yME4ptMZSssUpLSUH99PQubhfd5nOm9byDMNL1u3Xz7KZy0tq5clGFUSEBHZFhmWoHgC7jHoxBHZ7blcGPj64e+bd+5eT6XTE9NKTaZmLiaVUkMjbx8/jbnT1vtlc/j+1pfk583fN//c+jHzMGepnKUKxbLS1WzxU1mfNQ01n7PymlJTpqFbhsoVLKNUyxdr+axZXFioKL0wPxhfKBmWpfRCReWNiioXVblUUaEHeq6gNE1Tg3HBQTIr09N6qs3iuQ5fDLqkVErpIRGJ7clkVnpyQQAAoKea+/+gqE72/6v/bpQHbq0Nuf3/esSv/7/0sXauhv4/KiK+/b/3+L79v364/n9vR3RK2XZbZUfq/3EyjET2DAXqYTVZSulx9+fXsXxvddQJ6P8BAAAAAAAAAAAAAAAAAAAAADgNtm07Ydt2wjt6X/0iEnU2ltS+9ykNiciVHlwyOugIrz/OgPrGvfCQiPliMbOYqR3dCRsiYjqvf0K+O+8HVzX2dh6pqmF5Zy659UuLmZCTSWUlJ6YYMiaJPmmut+3Ja+mJMVXTWN8n8d31SUnIb/71Sd/6iPz/3656TRLyfk6KYsq8u2HOq382ptTVG+mm+pgzDwAAAACAs0BTO3zv3zWtVb5Wv3N/Pdr0+UCofn896nt/Hpa/wr1dOwAAAAAA54VVeZLXTdMo7QSDItI4EpPmOZ0Mwl06s7fCX63y/paheyvdJ/AevCEVdQc7/rQEDvG0tAiC0k7VSHU1qin1z7LP2vcLvI+NWs2RqXF35HXLOd0J/nj15lvnTnh5LXrAStsPQvu/AfqO57cPAAAAgONUb/q9kfHeXhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOfQcfx3tF6vEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgpfgYAAP//2a0C7Q==")
mount$bind(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./file0/../file0\x00', 0x0, 0x101090, 0x0)
chroot(&(0x7f0000000840)='./file0/../file0/../file0/../file0\x00')
mount(0x0, &(0x7f0000000880)='./file0/../file0/../file0\x00', &(0x7f00000008c0)='sysfs\x00', 0x0, 0x0)

34.119876324s ago: executing program 4 (id=321):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000380)='./file0\x00', 0x801, &(0x7f00000003c0)=ANY=[], 0x2, 0x185, &(0x7f00000001c0)="$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")
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/zram0/disksize\x00', 0x1, 0x0)
write(r0, &(0x7f0000000440)="31478f31477ab756e95f92965998c7e7134d40485c4fb2e603f5081d5151688e860400000059280d0000001e4b42fb13cf18888fb4fc0307473661a5aca4fb737727e8e1732e2d58a67de0a8911bc5c52f227566af7fbed65941b761f49361b876148b2bf9c7648d22afdcd1407902087bb3c90a3f2f9e06d1a25ce85b5485c1ac3fc2015b42ff5989be000013129c42a7db9513197eed3ba31aae4eee2fef275e09826b9b86dfedf8c5080112d0a762e5a4b9204fb793a01f34c737f4edfd455dbb377213b804abcf9c271ce74e485156dc0e04afcc650b530b23a67fbfbf4679", 0xe1)

33.48929926s ago: executing program 4 (id=328):
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='sysfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000480)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4, 0x80)
lseek(r0, 0xf, 0x1)

32.970534061s ago: executing program 33 (id=328):
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='sysfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000480)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4, 0x80)
lseek(r0, 0xf, 0x1)

6.283125772s ago: executing program 5 (id=504):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0)
flock(r0, 0x1)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='fdinfo/4\x00')
pread64(r1, &(0x7f00000006c0)=""/17, 0x11, 0x1)

6.131960617s ago: executing program 5 (id=507):
syz_mount_image$ext4(&(0x7f0000000540)='ext3\x00', &(0x7f0000000580)='./file0\x00', 0x4000000, &(0x7f00000005c0)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@usrjquota}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f00000008c0)="$eJzs3MtvG8UfAPDvrp30/Ut+UB4tLQQKouKRNOnzwKUIJA4gIcGhiFNI0qrUbaAJEq0qKBzKEVXijjgi8RdwggsCTkhc4Y4qVaiXFiQko13vpsa107hx6rb+fKRNZrzjzHx3d+zZGTsBDKyx7EcSsTkifouIkUb2vwXGGr+uXTk389eVczNJ1Otv/Jnk5a5eOTdTFi2ft6mRqdeL/Lo29V54O2K6Vps7XeQnFk++N7Fw5uzzx09OH5s7Nndq6tChfXt3Dh+Y2t+TOLO4rm7/aH7HtlfeuvjazJGL7/z0TdbezcX+5jh6ZaxxdNt6qteV9dmWpnRS7WND6EolIrLTNZT3/5GoxIalfSPx8qd9bRywpur1er3d+3PhfB24hyXR7xYA/VG+0Wf3v+V2m4Yed4TLhyPeP9iI/1qxNfZUIy3KDLXc3/bSWEQcOf/3l9kWazQPAQDQ7LvDEfFcu/FfGg82lftfsYYyGhH/j4j7IuL+iNgaEQ9E5GUfioiHu6y/dYXkxvFPeumWAluhbPz3QrG2tTT++6eex18YrRS5LXn8Q8nR47W5PcUx2R1D67L85DJ1fP/Sr5932tc8/su2rP5yLNiQXqq2TNDNTi9OrzLsJZc/idhebYk/l0S5jJNExLaI2N7VX75+h3H8ma93dCp18/iX0YN1pvpXEU83zv/5aIm/lHRcn5w8eGBq/8T6qM3tmSivihv9/MuF1zvVv6r4eyA7/xtbr//cUvyjyfqIhTNnT+TrtQvd13Hh98863tPc6vU/nLyZp4eLxz6cXlw8PRkxnLx64+NT159b5svyWfy7d7WLP81f48oj8UhEZBfxzoh4NCIeK9r+eEQ8ERG7lon/xxeffLf7+JeZle+hLP7Zm53/aD7/3ScqJ374tvv4S9n535endhePrOT1b6UNXM2xAwAAgLtFmn8GPknHl9JpOj7e+Az/1tiY1uYXFp89Ov/BqdnGZ+VHYygtZ7pGmuZDJ4u54TI/1ZLfW8wbf1HZkOfHZ+Zrs/0OHgbcpg79P/NHpd+tA9ac72vB4NL/YXDp/zC49H8YXPo/DK52/f/jPrQDuP28/8Pg0v9hcOn/MLj0fxhIHb8bn67qK/8S93wi0u6fVY07pPF3U6K64n9mcYuJdW139fuVCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDf+DQAA//9X4u4v")
r0 = open(&(0x7f0000000d40)='./file1\x00', 0x125142, 0x0)
ftruncate(r0, 0x2007ffc)
r1 = open(&(0x7f0000000d80)='./file1\x00', 0x66842, 0x21)
pwritev2(r1, &(0x7f0000000dc0)=[{&(0x7f0000000e00)="85", 0x78c00}], 0x16, 0x5a00, 0x0, 0x3)

5.16827245s ago: executing program 5 (id=511):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="12000000070000000800000002"], 0x50)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000900)={r0, &(0x7f0000000940), &(0x7f0000000980)=@udp=r1, 0x1}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000009c0)={r0, &(0x7f0000000a00), 0x0}, 0x20)

4.728691955s ago: executing program 5 (id=512):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = syz_usb_connect(0x0, 0x2e, &(0x7f00000005c0)=ANY=[@ANYBLOB="32010002000000404406478000010102030109021c0001010080fa0904030000010100000a240100010a0002"], 0x0)
syz_open_dev$sndctrl(&(0x7f0000000600), 0x3, 0xf6b957206198b356)
syz_usb_disconnect(r1)
close_range(r0, 0xffffffffffffffff, 0x0)

3.105478033s ago: executing program 5 (id=530):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000406a05125000000000000109022400010000e80b0904000001030002000921fd7f000122e30109058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000340)=ANY=[@ANYBLOB="1201500200000040532b24004000010203010902690003012b4006080b020101032008090400000001012000092401008009"], 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xe, {[@local=@item_4={0x3, 0x2, 0x2, "00c15100"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})

2.961221883s ago: executing program 1 (id=534):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000)=0xb6, 0x4)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
recvfrom(r0, 0x0, 0x0, 0x32, 0x0, 0x0)
syz_emit_ethernet(0x2e, &(0x7f0000000380)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x40, 0x100, @void}}}}}}}, 0x0)

2.773254958s ago: executing program 3 (id=537):
r0 = syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000000300), 0x0, 0x50ed, &(0x7f00000051c0)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTsT3573JENYvrOR3E/wmHm5XUpgfKxQ6WkmPbbFHXpgfLxQ65pIemydDeHBhZX9S+H8stJPClbV54UhSOB0L+fnQLRxLCifimfb52ny6aeH7WMgvsJiPV1Cs6V4SkfS42q/HQuGGPc52Dw4AAHBPieE5z7Jjvc2QRtn52qAdVg/aYWTQDvVBO4wmO6Q79tseZnsLcXv7zMalPf//yHD5P74Vq7JFv+v/Q7z+P3+uYff6/9lYaCSF+VhopXcMaMVjZGH343iMRivvcWV9twAAAAB3tfi9QH2F5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP+zda4xc1X0A8LPP8T68XkiqEBolm6TGcROv1zaQqKXKmlI1IqVZNxRURRQbe00WL9ixTYlRiIxNRCMEpQ1S8qEIoyiq+QC1AhFJAeEixREqj4iqKIBAoTVEQaSUJCJNkEI1e++ZvXPuzsOPNV76+0neOTP/87zz8Jx775wLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPD/w8GvXPO3zeKP/va8Z1+4ePyKPWsvfvW68059MoSJmcc7snBH/423j//87nPv2fPA6jvuO3z+R3vzcnk8DFT/dOZ3boi1Hl4cwv0dIXSngRWDWaAnvz8Y63vfYAinhNlArcRkf1YibTh8vy+EfWE2UKvqe30hDBYCFz71yMM3VxO39YWwNIRQSdt4vpK10ZcGzujNAv1pYGt3FvjVW5la4LudWQCOWXwz1F70BybqMwzPXa7B66/nuHXs7ZUOrysmhhvn+9naee5UQW/6wMQxPW2l6pgXpbfHQe+2BfBuK23nWz1txS9S+TeUt2ZDldC5aXLzhqund8ZHOsPoaFejmubpeX7m9S9tPJL0gnkdxg4MH5fX4S1PLL27a/kFj9+3YunL+z+295Vj7eaPCpu0mJ5vlZC/5hbM8xiN+zxZAG+/0rekEV+6QgibP/97n2kWL83/h5vP/+PLOd521uWOtb45lM3N4yODMfHaUDY3BwAAgAVjIew13Tr60Cea1Vea/4+0d/w/HvLPJ/PZaA+GMD6T2LskhNNmHs8Cd8XmLlsSwgdnUhP1gbVJ4GAI751JLK9VlZRYFEuMJIGfDOWB8SRwKAYmksC3YuDWJHBDDBxIAhtj4GASODcGwlT9OH5/KB9H24G+GFifbcQD8SyEXwzF1pJt9VytKgAAgOMknx321N8tnOtwrBni9PJAX6sM8QzshhkqSQ3pDLY2rWpYQ3erGjpb1VAb9+7mwy/V3NGq5tJpGB31GW7/5d98NjRRmv+PNZ//V+boSEfp+H8I62b+xtydeWS6Fl8/UZcBAAAAOAYD//viN5vFS/P/8fbO/4/7RLoKmcNjcTfEliUhjNUHsmr/sBzIjnoP5AEAAABYCGrH42vHwqfy2+wU7XQ+Xc4/cYT544H/8Tnz9x58cH2z/pbm/xPtnf/fX3+bdeJQ7MXXloSwqBD4QexlNTBjJAZ+/Mn6QD7+Q3ED3BSryk9MqFV1UyyxPgbGksC+RiV+WCtxWn0gf7Jqje+tjWMqL1EIAAAAwAkXdwfE4/Lx/P8P/Wb1Nc3Kleb/64/s/P+ZeXDp9P7pgRBWdofQlf4w4LH+bGHAGBjsyBMP9Wd1daVVXd8fwjnVgaVVvZiv/9+drjH4VF9WVQyc9qH9r59RTXyzL4SVxcDTn7vzrGpiZxKoNf6XfSF8oDratPHvLMoa70kb//qiEN5fCNSqumxRCNXGetOqHqnk1zFIq/rnSgjvKgRqVZ1dCWFXAGCBiv+Vbio+uGPXtVs2TE9Pbp/HRNyH3xc2T01Pjm7cOr2p0qBPm5I+1y1jdH15TO1e+ea5fImii+5dN9hOuvY7wbFiW/l+/NKJg/n9+F2oZ2acq3vq7q5Jh/yRD5ebCIVvUo2G3DnPQ+4vVjL7JJbqj/l7w0BYdPWOye2jX9ywc+f2VdnfdrOvzv7Gw0zZtlqVbqv+ufrWxsuj4WpZiaPdVsuKlazceeW2lTt2Xbti6soNl09ePnnVqrNXj505tmbs42eurI5qLPvbYqjL5qo6Gepbd7Y5ruM41NO7C5WciE8NCQmJhZbYOrCs6f/Jpfn/tubz//ipEz/58/UZGh3/H46H+bPHZw/zr4+Bfe0e/x9udDS/dmLASBLYHQO7HeYHAADgnSFO8uPezLhX+qfLv/Nys3Kl+f/u9n7/f5zW/68tXX9+o2X+l8cSY43W/0+X+a+t/7+70fr/6TL/tfX/970N6/9fXQskm+QX1v8HAADeCU7c+v8tl/dPLxBQytByef/0AgGlDC2X8W/3AgFHvP7/8//5V/8dmijN/29tb/5v4X4AAAA4eXz5z675nWbx0vx/X3vz/xO//l9odP7/SKPARKOFAa3/BwAAwALVaP2/4Rv7L21WrjT/P9De/D+edtFZlzvW+uZQtqZdSNe0e22o9pMBAAAAWBg6w+hoT5t561ZGXXv0bT6TLwXaLF304p8cPrLz/w+2N/+v+13GLU8svbtr+QWPv3nfiqUv7//Y3ldmj/8DAAAA86fd/RIAAAAAAAAAAAAAAMDb78X/2LOmWbz0+/+wbubxRr//j9f9i78veHdd7lhr6/X/8vsXfvqeXTNLFj42FMKHi4Ete7acEvJr8y8rBh6+ZPl7qok9aYkHXzj3pWri0jTwqRWnvlFNnJME1sdFEt+bBuJVFd9YnATi8or/ngbi9jiQBnrzwFcXZ+PoSLfVTwezbdWRbqtnB0NYUgjUttX9g1kbHekAb0sCtQF+IQ3EAf55HuhMe3XPQNarGBiMRe8YyHoFAMBJK34L7Ambp6Ynx+JX+Hh7enf9bVS3ZNn15Wo72mz+uXxpsovuXTfYTror/S46e63xnlCpDmFV6etqMUvHzCiPTy0tNt27Gwy51WpvnQ3KpY500/U2HlFfNqLRjVunN/W0HPia1llWd7fMsqo02Slm6ZzZpG3U0kZf2hhRm9umjS7H+51hdLQryfUHMTgc6rR6RbT7e/3iOn+NXgXFPFcd3vurZvWV5v/D7c3/K8VxvZFfDGB3vLLe3y2xzD8AAADMr6+u/fU34r/P3vjo083ylub/I+3N/+MerPxQcLa342C8/v/eJSHMXFp/OAvcFZu7bEkIH5xJTcQS2QX1z48lxrLAXXGHyfJYYv1EfVWLYuBAEvjJUB44mAQOxUC+l2J/yHfl/P1QCGfNpNbVl9gWSwwngc/EwEgSGI2BsSSwOAbGk8Cri/PARBL4txgIU/Xb6t7F+bYCAAA4Evk8q6f+bkjneQe6W2XoaJWhv1WGzlYZKq0yNBpFvP/tmKEnOXmlo5CpJ621L6mllCFeDP+I+1XKEH5YnzMtWGo6nn9QO9+goz7DA5/oroQmSvP/sfbm//31t1nrh+L8f/b6f1ngB7F7X4unjo/EwI8/WR/IdwwcipPdm2pVTeQl8kn7TbHEeAyMJIFtMTCeBNavywP73lMfyGfatcb31hqfyksUAgAAAHDCxR0EcTdNnP/fseMrA83Kleb/4+3N/2N7A8XGboi1Hl4cwv0ds72pBVYMZoG4H2Mw/jz+fYMhnFLYwVErMdmflehNGg7f78t+od6bVvW9vuzHB/H+hU898vDN1cRtfSEsLex9qbXxfCVroy8NnNGbBfrTwNbuLBD3/NQC3+3MAnDMansF4wsqP9WlZnjucg1ef++Ua4KmwyvtA50j31y/uZovpR2u+T7VmiN72pruv+W4Kb09Dnq3LcR327B3W/GLVP4N5a3ZUCV0bprcvOHq6Z3xkeIvWUvm6Xku/kq1nfRxeB3uPvretlZJOzCWfHyMzV1u7tdhR6zulieW3t21/ILH71ux9OX9H9v7StvdaCD+UPiR6/518EeFzTvfKiF/zS24z5MJnycL8b+BEU9bCGHdq1+/qVm8NP+faG/+353czvh13Jg7loTwkcLGfSxu/j9ekn0OFgLZp+S7yoHskPt/DTX85AQAAIDjrba7o7a/YCq/zU4IT+fJ5fwTR5g/7q8YnzN/u/3u/+tLljaLl+b/65vP/xcl3XT83/F/5onj/3M62XdFL0of2H1Mu6JL1TEvHP+f08n+bnP8f06O/zv+PxfH/1tw/H9OJ/vTVvqWtM2XrhDCy3/00LPN4qX5/7b25v/W/5t70b7a+n/rG63/t63R+n+7rf8HAADMqwYLzaXzvNLqfaUM6ep9pQwtFwhsucSg9f+OeP2/l05//jehidL8f3d78//4chgotr5Q1v8bWdegqltjYJuFAQEAADgZNdpBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNvrgX/4n03N4o/+9rxnX7h4/Io9ay9+9brzTn0yhKmZxzuycEf/jbeP//zuc+/Z88DqO+47fP5HK3m5nvz2d+tyx1rfHAphX+GRwZh4bah6ZzZw4afv2dVdTTw2FMKHi4Ete7acUk18ayiEZcXAw5csf081sSct8eAL575UTVyaBj614tQ3qolz8kBH2t1/XJx1tyPt7s2LQ1hSCNS6e8Xi+qpqbfxpHuhM2/inwayNGBiMRb8xmLURA9OxxNSiEFZ2h9CVVvVoJauqK63qXypZVV1pVV+uhHBOCKE7reqF3qyq7nTkT/ZmVcXAaR/a//oZ1cS+3hBWFgNPf+7Os6qJLySBWuN/0RvCB6ovmbTxb/dkjfekjd/WE8L7Qwi9aYlfdmcletMSL3aH8K5CoNb457tD2BV4R4gfPnWfaDt2Xbtlw/T05PZ5TPTmbfWFzVPTk6Mbt05vqiR9aqSjkH7r+qMf+3Ovf2lj9faie9cNtpPuzsv1zHR5dU/d3TUne+9jv/qLlcw+H6X6Y/7eMBAWXb1jcvvoFzfs3Ll9Vfa33eyrs79deTTbVqsWyrZaVqxk5c4rt63csevaFVNXbrh88vLJq1advXrszLE1Yx8/c2V1VGPZ3+Mx1DtP/FBP7y5UciI+ACQkJBZaorPu023sZP8gL33Rn+1oT6jMfECXphXFLB0zozweg157lCM+mu8pLUe0qjRxKGVZ3TrLmtJkYjZLX5Zl5ntdaXJYrKlzZpPG+51hdLSr0XYYrr9b3Lw/O4bN+0y+6dpNAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwf+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwLAAAAAAgzN86jJ4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALgUAAD//wNUIwc=")
mount(0x0, &(0x7f0000005140)='./file0\x00', 0x0, 0x20, &(0x7f0000005200)='compress=zstd:15\x00')
r1 = openat(r0, &(0x7f0000000000)='./file0/file0\x00', 0x42, 0x1b6)
write$uinput_user_dev(r1, &(0x7f0000000340)={'syz1\x00', {0x2, 0x956e, 0x9, 0x6}, 0x47, [0x1, 0x1, 0x400009, 0x0, 0x101, 0x6, 0x7fff, 0x3, 0x3, 0x4, 0x79c5, 0xc, 0xa95d, 0x6, 0xfffffffa, 0xfffffffe, 0x0, 0x8000, 0x7f, 0x6, 0x7, 0x8, 0x80000000, 0xf, 0x5, 0x9, 0xc, 0x8, 0xb1c1, 0x8, 0x400, 0x0, 0x1, 0x7f, 0xd, 0x6e, 0x40, 0x9, 0x4, 0x6, 0x100, 0x4, 0x4, 0x3, 0x24006, 0xe, 0x102, 0x7, 0x4e, 0x4, 0x1000, 0xc3cb, 0x5, 0x77, 0x1ff, 0x8, 0xffff0000, 0x6, 0x8143, 0x4, 0x6, 0xfffffffb, 0x10001, 0x16e], [0x5, 0x1, 0x2, 0x7e, 0x8bfa, 0x8cb, 0x3, 0xc25, 0x4, 0x0, 0x8, 0xa, 0xf3, 0x3, 0x9, 0x2, 0xa, 0x7d87, 0x5, 0x7, 0x4, 0x200, 0xfffffffd, 0x100, 0x0, 0x9, 0x9042, 0x91cc, 0xa, 0x7, 0x400, 0x10000, 0x5, 0x6, 0x7, 0x8, 0xa, 0x310c, 0xf87, 0x2, 0x9, 0x5, 0xf00000, 0x8, 0x10, 0x0, 0x1ff, 0x9, 0x200, 0x5, 0x0, 0x4, 0x3, 0x0, 0x5, 0x28000000, 0xa, 0x6, 0x8, 0x3ff, 0x3a8, 0x6, 0x3b, 0x101], [0x94c, 0x80000001, 0x2, 0x12, 0x80, 0x7, 0x8, 0x8001, 0x5, 0x101, 0x1, 0x2, 0x6, 0x7, 0x3, 0x9, 0x3, 0x0, 0x1, 0xe17, 0x7, 0x2000004, 0x3, 0x8, 0x0, 0x3, 0xf5, 0x2, 0x856f, 0x355, 0x4, 0x86, 0x4, 0x3ff, 0x1, 0x8b20, 0x9, 0x5, 0x0, 0x1000, 0xfffff2c6, 0x10001, 0x1, 0x82ab, 0x6, 0x101, 0xf6a0, 0x4, 0xfffffff2, 0x6, 0x1004, 0x5096b07b, 0x323a, 0xd2, 0xa, 0x8000006, 0x7, 0x1, 0x20006, 0x0, 0xc279, 0x3, 0x50f, 0x1], [0x4, 0x4, 0x2, 0x3, 0x2, 0xc, 0x1, 0x9, 0x4, 0x9, 0x1, 0x1000002, 0x9, 0x7, 0x6, 0xc, 0x7, 0xfffffff9, 0x5, 0xfff, 0x7, 0x6, 0x6, 0x1, 0x9, 0x8, 0x0, 0x1c000000, 0x1, 0x9, 0x5, 0xf9b, 0x5, 0x5, 0xf226, 0x5, 0x8, 0x6, 0x3, 0x0, 0x1000, 0x3, 0x1, 0x4, 0x12, 0xf, 0x1000, 0x1, 0x9, 0x5, 0xfffffff6, 0x7ff, 0x6, 0x0, 0x5, 0x9, 0x1, 0xfffffff8, 0x4, 0x4, 0x3c5, 0x0, 0x2, 0x1bf]}, 0x45c)
fsync(r1)

2.594976882s ago: executing program 0 (id=539):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
setns(0xc9, 0x0)
r0 = socket(0x8, 0x2, 0x0)
bind(r0, &(0x7f0000000180)=@generic={0x8, "ffff00002000"}, 0xc)

2.480896949s ago: executing program 0 (id=540):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xa, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000007a0af0ff0000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffbfa300000000000007030000f0ffffffb704000000000000850000000200000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000640)=r3, 0x4)
sendmsg$unix(r2, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0)

2.350167194s ago: executing program 0 (id=541):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10)
socket$inet6(0xa, 0x2, 0x0)
pselect6(0x32, &(0x7f00000001c0)={0x0, 0x0, 0xffff, 0x2, 0x0, 0x0, 0x0, 0x400}, 0x0, &(0x7f0000000200)={0x1f, 0x3, 0x0, 0x10000000000, 0x1000000002, 0x0, 0x0, 0x6}, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000000040), 0x4000000000000e4, 0x0)

2.346470935s ago: executing program 6 (id=542):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0xe503, 0x0)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc000, 0x103)
syz_fuse_handle_req(r0, &(0x7f0000004100)="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", 0x2000, &(0x7f0000006d80)={&(0x7f0000000240)={0x50, 0x0, 0x4, {0x7, 0x2d, 0xa75, 0x5d010640, 0xe0b, 0x7ff, 0x3, 0x7, 0x0, 0x0, 0x741d859d8bbba6ec, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f0000002100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}})

1.999985154s ago: executing program 6 (id=543):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x19, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000fbffffff18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb70300000800fc00b7040000000000008500000033000000b7080000000000007b8af8ff00000000b7080000030000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)

1.99941173s ago: executing program 1 (id=544):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x2)
syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
syz_emit_ethernet(0x56, &(0x7f0000002500)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x4, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xf5ffffff}]}}}}}}}}, 0x0)

1.835826441s ago: executing program 3 (id=545):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000100), 0x8)
listen(r0, 0x1)
poll(&(0x7f0000000300)=[{r0, 0xc0}], 0x1, 0x7)

1.78749838s ago: executing program 6 (id=546):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0)
write(r0, &(0x7f0000000100)="e4b0cdc868d3b59ccef153f3249ab03593a5b7c511caa28278f6daf41db0", 0x1e)
read$FUSE(r0, &(0x7f0000002440)={0x2020}, 0x2020)

1.716731874s ago: executing program 1 (id=547):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000980), 0x101900, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000009c0)={0x4, "7bb9595931028deda525e19bdeffafde2500f6d15c9e31df9454310ad7c18e65", <r1=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000a00)={"25628c1975c606000900", r1, <r2=>0xffffffffffffffff})
ppoll(&(0x7f0000000a40)=[{r1, 0x1c}, {r2, 0x4084}], 0x2, 0x0, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x200000000000000)

1.589380138s ago: executing program 6 (id=548):
r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x804808, &(0x7f0000001600)=ANY=[@ANYRES32=r0, @ANYRES8=r0, @ANYRES16=r0, @ANYRES8=r1, @ANYRES32=r0, @ANYRES64, @ANYRESOCT=0x0, @ANYRESDEC, @ANYRES8=r0, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedeb1d9bcee970ffa8930646fb8e2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94ca00000000c11acdffc890dc6ef75d668954cb9f57fa7f41862200bc47cb4822f1490000"], 0x2, 0x55e, &(0x7f0000001080)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
open_by_handle_at(r2, &(0x7f00000002c0)=@shmem={0xc, 0x1, {0x20}}, 0x201)

1.537398232s ago: executing program 3 (id=549):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syz_tun\x00', <r2=>0x0})
bind$packet(r0, &(0x7f00000003c0)={0x11, 0x1c, r2, 0x1, 0x0, 0x6, @remote}, 0x14)
bind$packet(r0, &(0x7f0000000400)={0x11, 0x1c, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, 0x14)

1.440610778s ago: executing program 1 (id=550):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000740)='./file1\x00', 0x0, &(0x7f0000000780), 0x1, 0x50f, &(0x7f00000007c0)="$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")
r0 = creat(&(0x7f0000000d00)='./file1\x00', 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000d40)='./file2\x00', 0xa0c42, 0x100)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000e40)={0xc, r0, 0x2, 0x0, 0x0, 0xfffffffffe000001})

1.285933064s ago: executing program 0 (id=551):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000001180)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @loopback}, "00186371ae9b1c03"}}}}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x33000000}, 0x48)

1.265372834s ago: executing program 3 (id=552):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'dummy0\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000900)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000faffffff2f0000000c00018008000100", @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x24040)

1.218437831s ago: executing program 5 (id=553):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0], 0x1, 0x553b, &(0x7f0000000740)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000005d00)='./file1\x00', 0x42, 0x80)
writev(r0, &(0x7f0000006d80)=[{&(0x7f0000006c00)='p', 0x1}], 0x1)
r1 = open(&(0x7f0000006440)='./file1\x00', 0x64842, 0x86)
pwritev2(r1, &(0x7f0000006480)=[{&(0x7f00000064c0)="85", 0x7800}], 0x1, 0x7800, 0x0, 0x3)

1.175716516s ago: executing program 6 (id=554):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000036000/0x2000)=nil, &(0x7f0000594000/0x4000)=nil, &(0x7f0000f36000/0x2000)=nil, &(0x7f0000918000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000c12000/0x2000)=nil, &(0x7f000003f000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x30}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f0000000400000060b8b31722bf000000000000", @ANYRES32, @ANYBLOB="102bce7000"], 0x50)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

1.017125608s ago: executing program 1 (id=555):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26)
dup3(r0, r1, 0x80000)
getsockname(r0, 0x0, 0x0)

1.015545805s ago: executing program 3 (id=556):
syz_mount_image$nilfs2(&(0x7f0000000380), &(0x7f0000000a40)='./file0\x00', 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB='\x00'], 0xf, 0xa02, &(0x7f0000001ec0)="$eJzs3U9sXEcdAOB5a68d16mzhgKmoYmBAqmgTrCtKrmkMZRrpN7KsQppiHBTlHBpVakpUsUNRap67IGqh1wQFeLSA1JEVUQvQZQ7CoVKVVGgFQipoNYo9sx6d+zH/rG99vp9n/Tz+L2ZfTPPu943fp6dCUBl1Va/Li7OFCG89PqLj/zkD698twghHG2WaLSUW9uqhxCKtsevuxUzPv7w2XObpUWYX/2atsPZ283HToYQrobZcCM0wsL7j829ubT08vWbj16efuH02zt0+gAAUCln3/jH7x94761vTP/nF0fOhPHm/tQ/b8TtydjvPxH793n/v2hJi5btZCwrNxIj//thJCs3mtUzWlJfPTtOvaTcWIf6Rlr2bXaeALAfrN/XK2pzbdu12tzc2nX/jlvjY8XcpYvLT1zZpYYCANvmXw+HEM4IIYQQokqxcmi3eyAAQNXl44U3uJqPLNia5tEOdFf/7aXa5o+HbTDo17/6h6v+V5/3jsP22a+vpnRe6fcojWPIxxGOZI/r9fe/lh1ntMd2lo0rHJbxhmXtzH+ue1VZ+3t9HndLWfvz8bB7VVn783G6e1VZ+8cH3I5+lbX/wIDb0a+y9k80v9uvV7jtcd/q1/V3iyNZfuv1M39PH5b3eACg3UfG/wkhhBCVi+d2uwMCAOw5+fw4K1HKz+fjyfPzeXjy/HxeoDx/vEP+gQ75AMBGC7+68PNrxfr/+bc6Hi6Nu7grppM9ticfrdFr/Vsd97TV+odl3BIA1fbUTxe/89aZpZG1+X/Xr2WfZPP/prl6r8XtNO7yYLbdnPt3tr2eWkm5gztxUgDA/5Wuv2Xz/94dt2dCvXji4vL5E3F7Kqa/G6+P39n/zQG3GwDoX7fz/8+E9vn/Dzb312ut/YJD6/uL1n5BI9s/X7J/IW5Px/T74xOr++fOPbX8ve0+eQCoqDe+dfC1D357Kazd/1///3e6/59u4zfiWLsPYoHUT0j3Bzbc/z/WXs9UWbkT7eUOlZU72V6ukZWrx8jn3cjHB05kj0vjFNK4h9TfSeMap8vak02QMZaVG41xd9aeqaw9G873RHt78nloUv2NbH8+7iGVmw4AsNGVp5/5wePLy+cv+8Y3vqngN8+FEDbL2u13JmCnHf/Rkz88fuXpZx68+OTjF85fOH9pYXH+1KmHFucXHzq+el//eOvdfQBgP1jv9O92SwAAAAAAAAAAAAAAgDKD+KTxbp8jANDu7w+HEM6ILEb2QBuEECk+2gNtEGKfxcpKvuIvAMBg9bre/lY1jxbn80/rHqT04IN/nL4Tqdjtpfb+kvWL2U6Dfv2rf7jqf/X57a2/ub5I1+9/tfYDzPZX761fnjzZWv+9o13Wn5//sf7q/3NW/9dCd/Wv/Cyrv8+pcd/J6r+ry/o3nP/J/ur/S6z/nrh97Mvd1t/+/Kf1dtJyOBPZ+UyW1P/Xevv5p7X9ej7/Az2cdIt34/kDQBXVdrsBOyT1ElI/OvVDWtfnCy3r7IWsfLf9/1p2nHy9vn6l46Z+0BfjdurupHUD8/UOe21/Wp9wKjtu0WW/tuz1Myz/VSpr/3Y9jzutrP35epB7VVn7xwbcjn6VtT//vdyrytrf559VA1fW/okBt2NYHY5p2fUwXX+mYl7abmTbk5s8F/u1bwEAw+7bp2/ef+3rozfy9fnTdT39GTgZ/6a+npXL+wsTWd+xyMp/KaY/jukrMf1NTN/Jjrez/20DgGp6z+f/hBBCiMpF1T//5/4CVVb113/Vz7/a7/6e/07S6yO/j5+Mdsivt+SPbJI/1uHx41l+/nwd6JB/T3bclSjlf6ZD/mc75H+uQ/5Mh/xDHfLv7ZB/uEP+FzrkH+mQf7RDPgDD6fMx9f4OANWRj/tz/QeA/S9NrOP6DwDV8amYll3/7+uQDwAMn0/H1PUdACqk2Hymx63O2wMMjzS/dPo9j8uBhPtj+pWYfjWmab2UPpdfAfaA//7713+7VqzP93c4y+92Pvmi1v7Ju3z9nwe6bE/++b1e57NvdFnPTtU/vcX6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABis2urXxcWZIoSXXn/xkX+e+tO7RQjhaLNEo6Xc2la9ZXu27TghvFaspR9/+Oy51vSTmBZhPhShaO4PZ283a5oMIVwNs+FGaISF9x+be3Np6eXrNx+9PP3C6bd38EcAAAAA+97/AgAA//87+jkE")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80, 0x0)
r1 = open(&(0x7f000000e700)='./file1\x00', 0x145142, 0x0)
ftruncate(r1, 0x2007ffb)
ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000040)={{&(0x7f0000000280)=[{0x3, 0x0, 0x9, {0xfffffffffffffff7, 0x2}, 0x58, 0xffffffffffffc}], 0x1, 0x40, 0xd, 0xde}, {0x0, 0x0, 0x10, 0x20c, 0xfffffffffffffff7}, {0x0, 0x0, 0x8, 0x4, 0x3}, {0x0, 0x0, 0x28, 0x9, 0xffffffffffffff2d}, {&(0x7f00000003c0)=[0x9], 0x1, 0x8, 0x98f, 0x8}})

919.425759ms ago: executing program 6 (id=557):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000000340), 0x492492492492846, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
ppoll(&(0x7f0000000380)=[{r1, 0x38}], 0x1, 0x0, 0x0, 0x0)
connect$unix(r0, &(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e)

164.362053ms ago: executing program 0 (id=558):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x4, 0x0, 0x4a}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48841}, 0x20000010)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20080041}, 0x20008090)

55.929047ms ago: executing program 0 (id=559):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2508007a0000000000030700000008000300", @ANYRES32=r2, @ANYBLOB="1400060064756d6d7930000000000000000000001400040076657468315f746f5f626f016400000005005300010000000800050004"], 0x54}}, 0x0)

1.227869ms ago: executing program 3 (id=560):
r0 = memfd_create(&(0x7f0000000800)='\xff\x00l\x1e\xa0</\x00\x8eO4._\x14zC\x8a\xe8\xe0u\xe0\xff\xf1\xb2\xfd\xf6nz\x05-]\xc2Vk\xaeky\xd3\x83\xe2\xc7\xd3\xe6M^\x98ox\x14\t\xe9Q1\x1dK\x9a\x045\xd37\xb22\xfdD(\xd2\xdd \xa0\xff\x0f\x00\x00\x00\x00\x00\x00v\n\xd8?]k\x14N\x18\xf4\xc2j\xed6g\xfd\xd2\xd4\xe3\x1f\xa6 \xa0\x8d\xb5\x9aE<2`]<\x8cR\xd69\x0fO\xbf\xc3\xbd\xb0\x96\x90\x91k\x86\x1a\x10\xd2\xf5\x8b\xfc\x83P\xf4\xd0[\x12\xf5+\x1aS\x02/Yx\xf2jJb\x97\x9c/\x1f5i\xc6\x861\x9a\xff\xc3\xe7\xbfU\xd5\xac\xccB=\x8f\xfd\x84\xeepQ\x93nn\x0f\xc6\xa9?\xad\x8b~\xd66hv\xd3$\x13s\xa0\xbfi\xfaFS\xa9=Xe\xf8tI\x15\x882\x8b\x8e-X\xb8\xf2\x9du\x15S^\xec\xce\xfa\x87$S\x9f\xe7Ed\n\x84\\ u\xd2\x16\xc1\xa5\xa0\xaa\xe8.i\xc8\x0e\vt\xe2\xf1lA\x93\xdd\xce\x8f$\x06v\xbe\xe7\x95nN\xc5\xaa\x1ev\xc6P\x9c\\G&y\x8bYA\xc3}\xd9\x86[\xb2\xf3\x0f\x90%\xcb\x81\xe8\xea\xbcs\x95\xe9\x8eXH\x19m\xdfOY\xf1E9-\xc8\xe7\x13^+(\x034\x82\xafiOO\x14\x8f^\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00#\xb9F,e\xfa\xd7\xa2\xeb\xb1\xc9\xbe#\x92\xf3\x19\xe6\x83(\xfe\xf8i\xb9\xc1\xa0w\xea\xbf\xe5\x8d\xe9\x14\x130\xc3\xa5|/_\t\x98\xc3\xa7\x95!\xdf*\a\xd7\xfcv|\xb3Zc\xcf~\xf6\xe2\xa86Q\x9a$\x80\x85\x8b\t\xbf\xe6(\x12\xe0\xe1e\x81x]a\x145\xa7\xd2\n\x11h\xb9\xf5g\xc4%&\xbaRy\x8f\x85Q\xb9W\xe5\x06\xe2\xb3ryk}\x86\xc6\x04\x03i\x10\xa8\xc4\xcd`\xb8\xcfT))\xb7\x15\b%\xc8uC(C\x01\x1by\xbf \x10\xe8k\xea\x80\xd0P|\x11\xe5\xb9\x1d^\x92j\xb0\xa7\x1d', 0x7)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa, 0x4d091, r0, 0x4000000)
fcntl$addseals(r0, 0x409, 0x2)
r1 = openat$udambuf(0xffffff9c, &(0x7f0000000000), 0x2)
ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000340)={r0, 0x0, 0x2000, 0x1000})

0s ago: executing program 1 (id=561):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000086d0423c600000000000109022400010000a00209040004020300840009210000400122180009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000380), 0x0, 0x0)
ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000000)={0xfffffffe, 0x2, 0xffbfffff, 0xb8b, 0x48d6ca3c, 0x203fb})

kernel console output (not intermixed with test programs):

e76-9a50-61ac97e9b59d
[  103.330525][ T5640] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.672562][ T6130] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  103.688820][ T6130] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  103.690469][ T6130] bond0 (unregistering): Released all slaves
[  103.848633][ T6236] rnbd_client L610: Mapping device /dev/ram0 on session s0, (access_mode: rw, nr_poll_queues: 0)
[  103.976091][ T2259] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  104.126798][ T2259] usb 4-1: New USB device found: idVendor=06a3, idProduct=0cd0, bcdDevice=0.4b
[  104.131933][ T2259] usb 4-1: config 0 has an invalid interface number: 16 but max is 0
[  104.131961][ T2259] usb 4-1: config 0 has no interface number 0
[  104.132002][ T2259] usb 4-1: config 0 interface 16 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  104.132026][ T2259] usb 4-1: config 0 interface 16 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  104.132048][ T2259] usb 4-1: config 0 interface 16 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  104.132072][ T2259] usb 4-1: config 0 interface 16 has no altsetting 0
[  104.132104][ T2259] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.214318][ T2259] usb 4-1: config 0 descriptor??
[  104.247323][ T1021] rtrs_client L1784: <s0>: Resolving route failed, err: -ENODEV
[  104.414339][ T6236] rtrs_client L2656: <s0>: init_conns() failed: err=-ENODEV path=<invalid address family>@ip:127.0.0.1 [:0]
[  104.718176][ T2259] input: HID 06a3:0cd0 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.16/0003:06A3:0CD0.0001/input/input6
[  104.740422][ T5768] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  104.854464][ T5643] Bluetooth: hci1: command tx timeout
[  104.895712][ T5768] usb 1-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  104.915542][ T5768] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.930301][ T6211] rxe_eth0 speed is unknown, defaulting to 1000
[  104.957109][ T5768] usb 1-1: config 0 descriptor??
[  104.976678][ T2259] saitek 0003:06A3:0CD0.0001: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 06a3:0cd0] on usb-dummy_hcd.3-1/input16
[  105.100195][   T32] usb 4-1: USB disconnect, device number 2
[  105.189768][ T5768] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  105.377966][ T6274] jffs2: notice: (6274) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  105.401748][ T6267] fido_id[6267]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory
[  105.435883][ T5298] 8021q: adding VLAN 0 to HW filter on device eth1
[  105.553528][ T5768] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 1
[  105.553554][ T5768] [drm] Initialized udl on minor 1
[  106.026685][ T6289] loop4: detected capacity change from 0 to 1024
[  106.105171][ T6289] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  106.347660][ T5639] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.729779][ T6313] capability: warning: `syz.1.148' uses 32-bit capabilities (legacy support in use)
[  106.924297][ T5643] Bluetooth: hci1: command tx timeout
[  106.984552][ T6321] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  107.069220][ T6130] hsr_slave_0: left promiscuous mode
[  107.083238][ T6130] hsr_slave_1: left promiscuous mode
[  107.101924][ T6130] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  107.101963][ T6130] batman_adv: batadv0: Removing interface: batadv_slave_0
[  107.116446][ T6130] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  107.116490][ T6130] batman_adv: batadv0: Removing interface: batadv_slave_1
[  107.192677][ T6130] veth1_macvtap: left promiscuous mode
[  107.192804][ T6130] veth0_macvtap: left promiscuous mode
[  107.193095][ T6130] veth1_vlan: left promiscuous mode
[  107.199256][ T6130] veth0_vlan: left promiscuous mode
[  107.696705][ T6340] IPVS: rr: UDP 127.0.0.1:20000 - no destination available
[  107.700525][   T64] IPVS: starting estimator thread 0...
[  107.786005][ T6341] IPVS: using max 35 ests per chain, 84000 per kthread
[  108.052224][ T6130] team0 (unregistering): Port device team_slave_1 removed
[  108.105019][ T6130] team0 (unregistering): Port device team_slave_0 removed
[  108.554300][ T5298] 8021q: adding VLAN 0 to HW filter on device eth2
[  108.555071][   T32] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[  108.717629][   T32] usb 5-1: New USB device found: idVendor=056a, idProduct=5012, bcdDevice=0.00
[  108.721724][   T32] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  108.721752][   T32] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  108.721782][   T32] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.746719][   T32] usb 5-1: config 0 descriptor??
[  109.004295][ T5643] Bluetooth: hci1: command tx timeout
[  109.006191][ T6211] bridge0: port 1(bridge_slave_0) entered blocking state
[  109.019392][ T6211] bridge0: port 1(bridge_slave_0) entered disabled state
[  109.019582][ T6211] bridge_slave_0: entered allmulticast mode
[  109.021593][ T6211] bridge_slave_0: entered promiscuous mode
[  109.046640][ T6211] bridge0: port 2(bridge_slave_1) entered blocking state
[  109.048443][ T6211] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.048627][ T6211] bridge_slave_1: entered allmulticast mode
[  109.053889][ T6211] bridge_slave_1: entered promiscuous mode
[  109.084333][ T4965] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  109.199452][ T6346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  109.200081][ T6346] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  109.228903][ T6211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  109.242436][ T6211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  109.254884][ T4965] usb 2-1: New USB device found: idVendor=0711, idProduct=0900, bcdDevice=1.00
[  109.257651][ T4965] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  109.257676][ T4965] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  109.263023][ T4965] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.263048][ T4965] usb 2-1: Product: syz
[  109.263062][ T4965] usb 2-1: Manufacturer: syz
[  109.263077][ T4965] usb 2-1: SerialNumber: syz
[  109.319175][   T32] wacom 0003:056A:5012.0002: unknown main item tag 0x0
[  109.319213][   T32] wacom 0003:056A:5012.0002: unknown main item tag 0x0
[  109.319240][   T32] wacom 0003:056A:5012.0002: unknown main item tag 0x0
[  109.319266][   T32] wacom 0003:056A:5012.0002: unknown main item tag 0x0
[  109.319290][   T32] wacom 0003:056A:5012.0002: unknown main item tag 0x0
[  109.319315][   T32] wacom 0003:056A:5012.0002: unknown main item tag 0x0
[  109.319339][   T32] wacom 0003:056A:5012.0002: unknown main item tag 0x0
[  109.319363][   T32] wacom 0003:056A:5012.0002: unknown main item tag 0x0
[  109.319387][   T32] wacom 0003:056A:5012.0002: unknown main item tag 0x0
[  109.319411][   T32] wacom 0003:056A:5012.0002: unknown main item tag 0x0
[  109.320005][   T32] wacom 0003:056A:5012.0002: ignoring exceeding usage max
[  109.421552][   T32] wacom 0003:056A:5012.0002: Unknown device_type for 'HID 056a:5012'. Ignoring.
[  109.443879][   T32] usb 5-1: USB disconnect, device number 2
[  109.477388][ T6211] team0: Port device team_slave_0 added
[  109.504236][ T6211] team0: Port device team_slave_1 added
[  109.637678][ T4965] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900
[  110.051377][ T6211] batman_adv: batadv0: Adding interface: batadv_slave_0
[  110.051395][ T6211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  110.051442][ T6211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  110.053916][ T6211] batman_adv: batadv0: Adding interface: batadv_slave_1
[  110.053929][ T6211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  110.053970][ T6211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  110.111568][ T5754] usb 2-1: USB disconnect, device number 3
[  110.159426][ T5754] usblp0: removed
[  110.171838][ T5298] 8021q: adding VLAN 0 to HW filter on device eth3
[  110.383712][ T6211] hsr_slave_0: entered promiscuous mode
[  110.386657][ T6211] hsr_slave_1: entered promiscuous mode
[  110.388634][ T6211] debugfs: 'hsr0' already exists in 'hsr'
[  110.388649][ T6211] Cannot create hsr debugfs directory
[  110.444441][ T6376] loop4: detected capacity change from 0 to 1764
[  110.531017][ T6378] misc userio: Begin command sent, but we're already running
[  110.605053][ T5768] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92
[  110.622007][ T5768] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[  110.645122][ T5768] usb 1-1: USB disconnect, device number 3
[  110.940290][ T6385] loop0: detected capacity change from 0 to 2048
[  111.028169][ T6385]  loop0: p3 < > p4 < >
[  111.028186][ T6385] loop0: partition table partially beyond EOD, truncated
[  111.028355][ T6385] loop0: p3 start 4284289 is beyond EOD, truncated
[  111.094222][ T5643] Bluetooth: hci1: command tx timeout
[  111.159909][ T6385] sctp: [Deprecated]: syz.0.164 (pid 6385) Use of struct sctp_assoc_value in delayed_ack socket option.
[  111.159909][ T6385] Use struct sctp_sack_info instead
[  111.211259][ T6388] smpboot: CPU 1 is now offline
[  112.210856][ T6409] loop0: detected capacity change from 0 to 131072
[  112.279357][ T6409] F2FS-fs (loop0): invalid crc value
[  112.328475][ T6409] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  112.345302][ T6409] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  112.381051][ T6392] smpboot: Booting Node 0 Processor 1 APIC 0x1
[  112.428461][ T6211] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  112.493065][ T6211] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  112.493590][ T6211] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  112.540769][ T6211] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  112.561522][ T6211] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  112.611926][ T6211] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  112.612772][ T6211] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  112.654809][ T6211] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  112.838967][ T5298] 8021q: adding VLAN 0 to HW filter on device eth4
[  112.929726][ T6433] loop3: detected capacity change from 0 to 256
[  113.097453][ T6433] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  113.245663][ T2259] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  113.253124][ T6211] 8021q: adding VLAN 0 to HW filter on device bond0
[  113.300533][ T6211] 8021q: adding VLAN 0 to HW filter on device team0
[  113.323153][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  113.323258][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  113.357664][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[  113.357772][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[  113.394973][ T2259] usb 5-1: Using ep0 maxpacket: 16
[  113.403465][ T2259] usb 5-1: New USB device found: idVendor=0458, idProduct=501b, bcdDevice=0.00
[  113.419751][ T2259] usb 5-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30
[  113.419798][ T2259] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  113.419823][ T2259] usb 5-1: config 0 interface 0 has no altsetting 0
[  113.419856][ T2259] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.465490][ T2259] usb 5-1: config 0 descriptor??
[  113.908108][ T2259] kye 0003:0458:501B.0003: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[  113.945801][ T2259] kye 0003:0458:501B.0003: hidraw0: USB HID v0.01 Device [HID 0458:501b] on usb-dummy_hcd.4-1/input0
[  113.945835][ T2259] kye 0003:0458:501B.0003: tablet-enabling feature report not found
[  113.945848][ T2259] kye 0003:0458:501B.0003: tablet enabling failed
[  114.089771][ T2259] usb 5-1: USB disconnect, device number 3
[  114.159694][ T6461] fido_id[6461]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  114.561230][ T6483] loop3: detected capacity change from 0 to 64
[  114.632615][ T6211] 8021q: adding VLAN 0 to HW filter on device batadv0
[  114.654383][ T2259] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  114.732750][ T6486] loop1: detected capacity change from 0 to 64
[  114.806690][ T2259] usb 1-1: Using ep0 maxpacket: 8
[  114.808156][ T2259] usb 1-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  114.819598][ T2259] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  114.819641][ T2259] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  114.819658][ T2259] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  114.819677][ T2259] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  114.819695][ T2259] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  114.819728][ T2259] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.997537][ T6488] batman_adv: batadv0: Adding interface: gretap1
[  114.997556][ T6488] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  114.997585][ T6488] batman_adv: batadv0: Interface activated: gretap1
[  115.112703][ T2259] usb 1-1: usb_control_msg returned -32
[  115.112752][ T2259] usbtmc 1-1:16.0: can't read capabilities
[  115.402500][ T5639] svc: failed to register nfsdv3 RPC service (errno 5).
[  115.402523][ T5639] failed to unregister udp with rpcbind
[  115.540118][ T6510] usbtmc 1-1:16.0: usb_control_msg returned -32
[  115.547112][   T32] usb 1-1: USB disconnect, device number 4
[  115.633419][ T6211] veth0_vlan: entered promiscuous mode
[  115.666680][ T6211] veth1_vlan: entered promiscuous mode
[  115.757350][ T6211] veth0_macvtap: entered promiscuous mode
[  115.778878][ T6211] veth1_macvtap: entered promiscuous mode
[  115.818770][ T6512] loop4: detected capacity change from 0 to 32768
[  115.843778][ T6211] batman_adv: batadv0: Interface activated: batadv_slave_0
[  115.873236][ T6512] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  115.949042][ T6525] loop1: detected capacity change from 0 to 256
[  115.969111][ T6211] batman_adv: batadv0: Interface activated: batadv_slave_1
[  116.037243][ T6512] XFS (loop4): Ending clean mount
[  116.058705][ T6512] XFS (loop4): Quotacheck needed: Please wait.
[  116.095819][ T6130] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  116.145197][   T44] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  116.149539][   T53] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_cntbt block 0x8 
[  116.149596][   T53] XFS (loop4): Unmount and run xfs_repair
[  116.149607][   T53] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  116.149623][   T53] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[  116.149636][   T53] 00000010: 00 00 00 00 01 04 00 08 00 00 00 01 00 00 00 80  ................
[  116.149649][   T53] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[  116.149662][   T53] 00000030: 00 00 00 00 b0 b0 1a b8 00 00 00 0d 00 00 00 13  ................
[  116.149675][   T53] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00  ...H............
[  116.149687][   T53] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  116.149698][   T53] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  116.149709][   T53] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  116.149960][   T53] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x2ae/0x4a0" at daddr 0x8 len 4 error 74
[  116.150093][   T53] loop4: lost filesystem error report for type 5 error -117
[  116.187824][ T6512] XFS (loop4): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[  116.212285][ T6512] loop4: lost filesystem error report for type 5 error -117
[  116.316734][   T53] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  116.317003][   T53] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  116.410463][ T6533] loop1: detected capacity change from 0 to 256
[  116.436018][   T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.436050][   T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.519559][ T5646] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_cntbt block 0x8 
[  116.519609][ T5646] XFS (loop4): Unmount and run xfs_repair
[  116.519620][ T5646] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  116.519634][ T5646] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[  116.519646][ T5646] 00000010: 00 00 00 00 01 04 00 08 00 00 00 01 00 00 00 80  ................
[  116.519659][ T5646] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[  116.519671][ T5646] 00000030: 00 00 00 00 b0 b0 1a b8 00 00 00 0d 00 00 00 13  ................
[  116.519682][ T5646] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00  ...H............
[  116.519693][ T5646] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  116.519703][ T5646] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  116.519714][ T5646] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  116.519727][ T5646] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x2ae/0x4a0" at daddr 0x8 len 4 error 74
[  116.558311][ T5639] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  116.607189][   T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.607210][   T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.662895][ T5646] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x47f/0x820 (fs/xfs/xfs_trans_buf.c:280).  Shutting down filesystem.
[  116.662942][ T5646] XFS (loop4): Please unmount the filesystem and rectify the problem(s)
[  116.662957][ T5646] loop4: lost filesystem error report for type 5 error -108
[  116.662995][ T5646] loop4: lost filesystem error report for type 5 error -117
[  117.002197][ T6545] loop4: detected capacity change from 0 to 256
[  117.021120][ T6545] exfat: Deprecated parameter 'utf8'
[  117.083602][ T6545] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d)
[  117.237753][ T6555] loop1: detected capacity change from 0 to 164
[  117.641749][ T6564] loop1: detected capacity change from 0 to 4096
[  117.712024][ T6568] sctp: [Deprecated]: syz.0.217 (pid 6568) Use of int in max_burst socket option deprecated.
[  117.712024][ T6568] Use struct sctp_assoc_value instead
[  117.745032][ T6553] loop5: detected capacity change from 0 to 32768
[  117.768786][ T6564] ntfs3(loop1): Failed to load $Extend (-22).
[  117.768812][ T6564] ntfs3(loop1): Failed to initialize $Extend.
[  117.786966][ T6553] (syz.5.210,6553,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  117.806619][ T5768] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  117.808933][ T6553] (syz.5.210,6553,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  117.879975][ T6553] JBD2: Ignoring recovery information on journal
[  117.940773][ T6553] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  117.969172][ T5768] usb 5-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.00
[  117.978479][ T5768] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.978505][ T5768] usb 5-1: Product: syz
[  117.978519][ T5768] usb 5-1: Manufacturer: syz
[  117.978532][ T5768] usb 5-1: SerialNumber: syz
[  118.278515][ T6580] team_slave_1: Caught tx_queue_len zero misconfig
[  118.303574][ T5768] rtl8150 5-1:1.0: couldn't reset the device
[  118.304029][ T5768] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5
[  118.319983][ T5768] usb 5-1: USB disconnect, device number 4
[  118.499260][ T6211] ocfs2: Unmounting device (7,5) on (node local)
[  118.746575][ T6578] loop3: detected capacity change from 0 to 32768
[  118.767769][ T5768] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  118.842969][ T6578] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  118.927768][ T5768] usb 5-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.00
[  118.950085][ T5768] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.950112][ T5768] usb 5-1: Product: syz
[  118.950126][ T5768] usb 5-1: Manufacturer: syz
[  118.950140][ T5768] usb 5-1: SerialNumber: syz
[  118.971010][ T6578] XFS (loop3): Ending clean mount
[  119.098829][ T5645] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  119.200206][ T6603] netlink: 'syz.5.229': attribute type 4 has an invalid length.
[  119.550239][ T6614] FAULT_INJECTION: forcing a failure.
[  119.550239][ T6614] name failslab, interval 1, probability 0, space 0, times 0
[  119.550298][ T6614] CPU: 0 UID: 0 PID: 6614 Comm: syz.0.233 Not tainted syzkaller #0 PREEMPT(full) 
[  119.550328][ T6614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  119.550341][ T6614] Call Trace:
[  119.550349][ T6614]  <TASK>
[  119.550358][ T6614]  dump_stack_lvl+0xe8/0x150
[  119.550400][ T6614]  should_fail_ex+0x3eb/0x540
[  119.550436][ T6614]  should_failslab+0xa8/0x100
[  119.550460][ T6614]  __kmalloc_cache_noprof+0x9e/0x600
[  119.550488][ T6614]  ? __kmalloc_cache_noprof+0x31c/0x600
[  119.550512][ T6614]  ? nfs_alloc_fhandle+0x4a/0xa0
[  119.550532][ T6614]  ? nfs_alloc_fhandle+0x4a/0xa0
[  119.550565][ T6614]  nfs_alloc_fhandle+0x4a/0xa0
[  119.550587][ T6614]  nfs_init_fs_context+0x68/0x1260
[  119.550609][ T6614]  ? mutex_init_lockdep+0xdf/0x110
[  119.550641][ T6614]  alloc_fs_context+0x99e/0xd00
[  119.550669][ T6614]  __se_sys_fsopen+0x118/0x370
[  119.550692][ T6614]  do_syscall_64+0x166/0x520
[  119.550712][ T6614]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.550732][ T6614]  ? clear_bhb_loop+0x70/0xc0
[  119.550757][ T6614]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.550777][ T6614] RIP: 0033:0x7f25c899fb19
[  119.550813][ T6614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  119.550830][ T6614] RSP: 002b:00007f25c9824028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae
[  119.550855][ T6614] RAX: ffffffffffffffda RBX: 00007f25c8c25fa0 RCX: 00007f25c899fb19
[  119.550869][ T6614] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100
[  119.550882][ T6614] RBP: 00007f25c8a37b70 R08: 0000000000000000 R09: 0000000000000000
[  119.550895][ T6614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  119.550907][ T6614] R13: 00007f25c8c26038 R14: 00007f25c8c25fa0 R15: 00007ffcc2acd928
[  119.550939][ T6614]  </TASK>
[  119.776661][ T6620] evm: overlay not supported

syzkaller
syzkaller login: [  119.817783][ T5768] rtl8150 5-1:1.0: couldn't reset the device
[  119.818139][ T5768] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5
[  119.872982][ T5768] usb 5-1: USB disconnect, device number 5
[  119.903086][ T6623] syzkaller1: entered promiscuous mode
[  119.903109][ T6623] syzkaller1: entered allmulticast mode
[  120.048257][ T6630] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  120.155237][ T6626] loop1: detected capacity change from 0 to 32768
[  120.157623][ T6626] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.237 (6626)
[  120.201039][ T6626] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  120.201073][ T6626] BTRFS info (device loop1): using blake2b checksum algorithm
[  120.271553][ T6639] loop0: detected capacity change from 0 to 256
[  120.278427][ T6639] FAT-fs (loop0): Directory bread(block 1285) failed
[  120.278458][ T6639] FAT-fs (loop0): Directory bread(block 1286) failed
[  120.278478][ T6639] FAT-fs (loop0): Directory bread(block 1287) failed
[  120.278719][ T6639] FAT-fs (loop0): Directory bread(block 1288) failed
[  120.358806][ T6639] FAT-fs (loop0): Directory bread(block 1285) failed
[  120.358841][ T6639] FAT-fs (loop0): Directory bread(block 1286) failed
[  120.358863][ T6639] FAT-fs (loop0): Directory bread(block 1287) failed
[  120.358885][ T6639] FAT-fs (loop0): Directory bread(block 1288) failed
[  120.359119][ T6639] FAT-fs (loop0): FAT read failed (blocknr 1281)
[  120.360094][ T6639] FAT-fs (loop0): Directory bread(block 1285) failed
[  120.413372][ T6652] netlink: 276 bytes leftover after parsing attributes in process `syz.5.244'.
[  120.413841][ T6626] BTRFS info (device loop1): enabling ssd optimizations
[  120.413861][ T6626] BTRFS info (device loop1): turning on async discard
[  120.413876][ T6626] BTRFS info (device loop1): enabling free space tree
[  120.413891][ T6626] BTRFS info (device loop1): use zlib compression, level 3
[  120.528073][   T33] audit: type=1800 audit(1793656208.714:5): pid=6626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.237" name="file1" dev="loop1" ino=260 res=0 errno=-22
[  120.702298][ T6662] loop5: detected capacity change from 0 to 1024
[  120.804146][ T6662] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  120.980234][ T6662] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[  121.010908][ T6662] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28
[  121.010942][ T6662] EXT4-fs (loop5): This should not happen!! Data will be lost
[  121.010942][ T6662] 
[  121.010968][ T6662] EXT4-fs (loop5): Total free blocks count 0
[  121.010982][ T6662] EXT4-fs (loop5): Free/Dirty block details
[  121.011016][ T6662] EXT4-fs (loop5): free_blocks=20480
[  121.011048][ T6662] EXT4-fs (loop5): dirty_blocks=64
[  121.011061][ T6662] EXT4-fs (loop5): Block reservation details
[  121.011073][ T6662] EXT4-fs (loop5): i_reserved_data_blocks=4
[  121.112445][ T5640] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  121.268958][ T6211] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.512000][ T6685] loop0: detected capacity change from 0 to 512
[  121.517011][ T6685] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  121.517030][ T6685] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  121.539911][ T6685] EXT4-fs error (device loop0): ext4_orphan_get:1430: comm syz.0.255: bad orphan inode 131083
[  121.539940][ T6685] loop0: lost filesystem error report for type 5 error -117
[  121.592021][ T6685] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  121.694189][ T1019] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[  121.770243][ T5642] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.864848][ T1019] usb 6-1: New USB device found: idVendor=0506, idProduct=4601, bcdDevice=1.00
[  121.873066][ T1019] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  121.873098][ T1019] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  121.873134][ T1019] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.980382][ T6691] rxe_eth0 speed is unknown, defaulting to 1000
[  122.435205][ T6696] loop0: detected capacity change from 0 to 32768
[  122.496875][ T6696] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  122.727663][ T5642] ocfs2: Unmounting device (7,0) on (node local)
[  122.874319][ T5646] usb 2-1: new low-speed USB device number 4 using dummy_hcd
[  122.963969][ T1019] pegasus 6-1:1.0: probe with driver pegasus failed with error -71
[  122.992486][ T1019] usb 6-1: USB disconnect, device number 2
[  123.041199][ T5646] usb 2-1: New USB device found: idVendor=1b1c, idProduct=1c1f, bcdDevice=0.00
[  123.056203][ T5646] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  123.056237][ T5646] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64, setting to 8
[  123.056262][ T5646] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  123.056303][ T5646] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  123.066746][ T5646] usb 2-1: config 0 descriptor??
[  123.095457][ T6703] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  123.352631][ T6701] loop4: detected capacity change from 0 to 32768
[  123.390209][ T6701] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.260 (6701)
[  123.512870][ T6701] BTRFS info (device loop4): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b
[  123.512904][ T6701] BTRFS info (device loop4): using xxhash64 checksum algorithm
[  123.543360][ T5646] hid_parser_main: 458 callbacks suppressed
[  123.543384][ T5646] corsair-psu 0003:1B1C:1C1F.0004: unknown main item tag 0x3
[  123.543591][ T5646] corsair-psu 0003:1B1C:1C1F.0004: unknown main item tag 0x0
[  123.543617][ T5646] corsair-psu 0003:1B1C:1C1F.0004: unknown main item tag 0x0
[  123.543641][ T5646] corsair-psu 0003:1B1C:1C1F.0004: unknown main item tag 0x0
[  123.543667][ T5646] corsair-psu 0003:1B1C:1C1F.0004: unknown main item tag 0x0
[  123.543693][ T5646] corsair-psu 0003:1B1C:1C1F.0004: unknown main item tag 0x0
[  123.543719][ T5646] corsair-psu 0003:1B1C:1C1F.0004: unknown main item tag 0x0
[  123.543745][ T5646] corsair-psu 0003:1B1C:1C1F.0004: unknown main item tag 0x0
[  123.543771][ T5646] corsair-psu 0003:1B1C:1C1F.0004: unknown main item tag 0x0
[  123.644443][ T5646] corsair-psu 0003:1B1C:1C1F.0004: hidraw0: USB HID v0.04 Device [HID 1b1c:1c1f] on usb-dummy_hcd.1-1/input0
[  123.707281][ T6701] BTRFS info (device loop4): enabling ssd optimizations
[  123.707311][ T6701] BTRFS info (device loop4): turning on async discard
[  123.707327][ T6701] BTRFS info (device loop4): enabling free space tree
[  123.740143][ T5646] corsair-psu 0003:1B1C:1C1F.0004: unable to initialize device (-38)
[  123.761935][ T5646] corsair-psu 0003:1B1C:1C1F.0004: probe with driver corsair-psu failed with error -38
[  123.781281][ T5646] usb 2-1: USB disconnect, device number 4
[  123.937128][ T6726] fido_id[6726]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  124.147613][ T6737] netlink: 24 bytes leftover after parsing attributes in process `syz.3.267'.
[  124.296451][ T5639] BTRFS info (device loop4): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b
[  125.121074][ T6765] ALSA: mixer_oss: invalid OSS volume '7'
[  125.121092][ T6765] ALSA: mixer_oss: invalid OSS volume '1'
[  125.716430][ T6779] loop1: detected capacity change from 0 to 32768
[  125.739136][ T6779] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  125.739165][ T6779] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  125.805094][ T6779] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 1ms
[  125.875123][ T5768] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  125.875143][ T5768] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  125.924383][ T6801] loop4: detected capacity change from 0 to 512
[  126.316295][ T5768] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 441ms
[  126.352004][ T5768] gfs2: fsid=syz:syz.0: jid=0: Done
[  126.353042][ T6779] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  126.906305][ T6829] loop4: detected capacity change from 0 to 512
[  126.951157][ T6829] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended
[  126.993040][ T6829] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  126.993156][ T6829] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  127.019374][ T6830] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input12
[  127.212493][ T6815] loop0: detected capacity change from 0 to 32768
[  127.234030][ T6815] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.288 (6815)
[  127.258767][ T6815] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  127.258800][ T6815] BTRFS info (device loop0): using sha256 checksum algorithm
[  127.298764][ T5639] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.409874][ T6815] BTRFS info (device loop0): rebuilding free space tree
[  127.417326][ T6855] loop5: detected capacity change from 0 to 128
[  127.451967][ T6860] loop4: detected capacity change from 0 to 1024
[  127.452821][ T6860] EXT4-fs: Ignoring removed oldalloc option
[  127.452862][ T6860] EXT4-fs: Ignoring removed orlov option
[  127.522175][ T6815] BTRFS info (device loop0): disabling free space tree
[  127.522244][ T6815] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  127.522265][ T6815] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  127.562349][ T6860] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  127.585467][ T6815] BTRFS info (device loop0): checking UUID tree
[  127.619174][ T6815] BTRFS info (device loop0): enabling ssd optimizations
[  127.619200][ T6815] BTRFS info (device loop0): using spread ssd allocation scheme
[  127.619214][ T6815] BTRFS info (device loop0): turning off barriers
[  127.619229][ T6815] BTRFS info (device loop0): force clearing of disk cache
[  127.619246][ T6815] BTRFS info (device loop0): use lzo compression, level 1
[  128.048809][ T5639] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.306869][ T5642] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  128.395195][ T6884] loop5: detected capacity change from 0 to 512
[  128.431317][ T6871] loop3: detected capacity change from 0 to 32768
[  128.433169][ T6871] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.297 (6871)
[  128.486576][ T6871] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  128.486609][ T6871] BTRFS info (device loop3): using crc32c checksum algorithm
[  128.543960][ T6884] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  128.560368][ T6884] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  128.719676][ T6871] BTRFS info (device loop3): enabling ssd optimizations
[  128.719702][ T6871] BTRFS info (device loop3): turning on flush-on-commit
[  128.719719][ T6871] BTRFS info (device loop3): enabling free space tree
[  128.719741][ T6871] BTRFS info (device loop3): enabling auto defrag
[  128.719758][ T6871] BTRFS info (device loop3): use lzo compression, level 1
[  128.719776][ T6871] BTRFS info (device loop3): max_inline set to 4096
[  128.822765][ T6871] BTRFS critical (device loop3 state EH): emergency shutdown
[  128.837280][ T6211] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.898298][ T5645] BTRFS info (device loop3 state EH): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  129.156782][ T6920] loop4: detected capacity change from 0 to 64
[  129.189747][   T33] audit: type=1400 audit(1793656217.364:6): apparmor="STATUS" operation="profile_replace" info="not policy admin" error=-13 profile="unconfined" pid=6917 comm="syz.5.304"
[  129.596941][ T6938] loop5: detected capacity change from 0 to 16
[  129.807802][ T6938] erofs (device loop5): mounted with root inode @ nid 36.
[  129.912819][ T6952] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  130.018109][ T6954] loop4: detected capacity change from 0 to 128
[  130.293865][ T6959] FAULT_INJECTION: forcing a failure.
[  130.293865][ T6959] name failslab, interval 1, probability 0, space 0, times 0
[  130.293897][ T6959] CPU: 0 UID: 0 PID: 6959 Comm: syz.1.319 Not tainted syzkaller #0 PREEMPT(full) 
[  130.293921][ T6959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  130.293934][ T6959] Call Trace:
[  130.293955][ T6959]  <TASK>
[  130.293964][ T6959]  dump_stack_lvl+0xe8/0x150
[  130.294007][ T6959]  should_fail_ex+0x3eb/0x540
[  130.294041][ T6959]  should_failslab+0xa8/0x100
[  130.294063][ T6959]  ? __proc_create+0x55d/0xad0
[  130.294091][ T6959]  kmem_cache_alloc_noprof+0x9c/0x600
[  130.294119][ T6959]  ? __proc_create+0x55d/0xad0
[  130.294153][ T6959]  __proc_create+0x55d/0xad0
[  130.294185][ T6959]  ? proc_create_net_single+0x123/0x190
[  130.294212][ T6959]  ? __pfx___proc_create+0x10/0x10
[  130.294236][ T6959]  ? __pfx_snmp6_seq_show+0x10/0x10
[  130.294260][ T6959]  ? __pfx_proc_create_net_single+0x10/0x10
[  130.294288][ T6959]  ? __pfx_proc_create_net_data+0x10/0x10
[  130.294313][ T6959]  ? ndisc_net_init+0x2b7/0x3f0
[  130.294336][ T6959]  proc_mkdir+0x3e/0x110
[  130.294364][ T6959]  ipv6_proc_init_net+0xba/0x160
[  130.294389][ T6959]  ops_init+0x35d/0x5d0
[  130.294426][ T6959]  setup_net+0x118/0x350
[  130.294455][ T6959]  ? __pfx_setup_net+0x10/0x10
[  130.294482][ T6959]  ? down_read_killable+0x1b6/0x3b0
[  130.294508][ T6959]  ? __ns_common_init+0x384/0x590
[  130.294533][ T6959]  copy_net_ns+0x536/0x770
[  130.294564][ T6959]  create_new_namespaces+0x3f0/0x6b0
[  130.294597][ T6959]  ? security_capable+0x7e/0x2c0
[  130.294624][ T6959]  unshare_nsproxy_namespaces+0x144/0x190
[  130.294666][ T6959]  ksys_unshare+0x532/0x890
[  130.294689][ T6959]  ? __pfx_ksys_unshare+0x10/0x10
[  130.294711][ T6959]  ? rcu_is_watching+0x16/0xb0
[  130.294756][ T6959]  __x64_sys_unshare+0x38/0x50
[  130.294775][ T6959]  do_syscall_64+0x166/0x520
[  130.294796][ T6959]  ? trace_irq_disable+0x3b/0x140
[  130.294825][ T6959]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.294846][ T6959]  ? clear_bhb_loop+0x70/0xc0
[  130.294873][ T6959]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.294894][ T6959] RIP: 0033:0x7f511d39fb19
[  130.294914][ T6959] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  130.294932][ T6959] RSP: 002b:00007f511e264028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  130.294955][ T6959] RAX: ffffffffffffffda RBX: 00007f511d625fa0 RCX: 00007f511d39fb19
[  130.294970][ T6959] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000
[  130.294983][ T6959] RBP: 00007f511d437b70 R08: 0000000000000000 R09: 0000000000000000
[  130.294996][ T6959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  130.295009][ T6959] R13: 00007f511d626038 R14: 00007f511d625fa0 R15: 00007ffef2de0138
[  130.295045][ T6959]  </TASK>
[  130.717067][ T6971] loop0: detected capacity change from 0 to 1024
[  130.718846][ T6971] hfsplus: Unknown parameter 'fscontext'
[  130.976019][ T6981] netlink: 4 bytes leftover after parsing attributes in process `syz.3.329'.
[  131.099766][ T1021] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.171374][ T6981] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  131.291257][ T6981] batman_adv: batadv0: Removing interface: batadv_slave_1
[  131.365533][ T6979] loop1: detected capacity change from 0 to 32768
[  131.511192][ T1021] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.599537][ T4953] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  131.613338][ T4953] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  131.622645][ T4953] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  131.632376][ T4953] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  131.633017][ T4953] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  131.649288][ T1320] ieee802154 phy0 wpan0: encryption failed: -22
[  131.649766][ T1320] ieee802154 phy1 wpan1: encryption failed: -22
[  131.863057][ T1021] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.897885][ T6974] loop5: detected capacity change from 0 to 32768
[  131.912028][ T6974] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.324 (6974)
[  131.944525][ T6974] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  131.944560][ T6974] BTRFS info (device loop5): using sha256 checksum algorithm
[  132.051564][ T6974] BTRFS info (device loop5): enabling ssd optimizations
[  132.051596][ T6974] BTRFS info (device loop5): disabling tree log
[  132.051614][ T6974] BTRFS info (device loop5): turning on async discard
[  132.051631][ T6974] BTRFS info (device loop5): enabling free space tree
[  132.055199][ T1021] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.253782][ T6211] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  132.575364][ T1021] bridge_slave_1: left allmulticast mode
[  132.575388][ T1021] bridge_slave_1: left promiscuous mode
[  132.575679][ T1021] bridge0: port 2(bridge_slave_1) entered disabled state
[  132.619403][ T1021] bridge_slave_0: left allmulticast mode
[  132.619429][ T1021] bridge_slave_0: left promiscuous mode
[  132.619776][ T1021] bridge0: port 1(bridge_slave_0) entered disabled state
[  132.755085][ T1021] batman_adv: batadv0: Interface deactivated: gretap1
[  132.933694][ T7036] FAULT_INJECTION: forcing a failure.
[  132.933694][ T7036] name failslab, interval 1, probability 0, space 0, times 0
[  132.933731][ T7036] CPU: 1 UID: 0 PID: 7036 Comm: syz.1.341 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  132.933778][ T7036] Tainted: [L]=SOFTLOCKUP
[  132.933785][ T7036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  132.933796][ T7036] Call Trace:
[  132.933805][ T7036]  <TASK>
[  132.933813][ T7036]  dump_stack_lvl+0xe8/0x150
[  132.933858][ T7036]  should_fail_ex+0x3eb/0x540
[  132.933891][ T7036]  should_failslab+0xa8/0x100
[  132.933915][ T7036]  kmem_cache_alloc_lru_noprof+0xa2/0x5f0
[  132.933943][ T7036]  ? __d_alloc+0x37/0x820
[  132.933968][ T7036]  ? __d_alloc+0x37/0x820
[  132.934002][ T7036]  __d_alloc+0x37/0x820
[  132.934029][ T7036]  ? pcpu_alloc+0x10/0x310
[  132.934052][ T7036]  d_alloc_pseudo+0x21/0xc0
[  132.934086][ T7036]  alloc_path_pseudo+0x107/0x220
[  132.934114][ T7036]  ? __pfx_alloc_path_pseudo+0x10/0x10
[  132.934140][ T7036]  ? do_raw_spin_lock+0x12b/0x2f0
[  132.934168][ T7036]  alloc_file_pseudo+0xa8/0x1e0
[  132.934197][ T7036]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  132.934223][ T7036]  ? _raw_spin_unlock+0x28/0x50
[  132.934260][ T7036]  sock_alloc_file+0xb8/0x2e0
[  132.934281][ T7036]  ? __sys_socket+0x12b/0x1b0
[  132.934307][ T7036]  __sys_socket+0x13f/0x1b0
[  132.934335][ T7036]  __x64_sys_socket+0x7a/0x90
[  132.934361][ T7036]  do_syscall_64+0x166/0x520
[  132.934382][ T7036]  ? trace_irq_disable+0x3b/0x140
[  132.934410][ T7036]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.934431][ T7036]  ? clear_bhb_loop+0x70/0xc0
[  132.934456][ T7036]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.934476][ T7036] RIP: 0033:0x7f511d39fb19
[  132.934496][ T7036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  132.934513][ T7036] RSP: 002b:00007f511e264028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  132.934540][ T7036] RAX: ffffffffffffffda RBX: 00007f511d625fa0 RCX: 00007f511d39fb19
[  132.934556][ T7036] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000002d
[  132.934568][ T7036] RBP: 00007f511d437b70 R08: 0000000000000000 R09: 0000000000000000
[  132.934580][ T7036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  132.934593][ T7036] R13: 00007f511d626038 R14: 00007f511d625fa0 R15: 00007ffef2de0138
[  132.934630][ T7036]  </TASK>
[  133.218192][ T7048] loop1: detected capacity change from 0 to 256
[  133.221212][ T7048] exfat: Unknown parameter '00000000000000000000ÿÿÿÿLµb[¢D×1©XiJ$«öQ89­ÖÁÕh'
[  133.538707][ T1021] batman_adv: batadv0: Removing interface: gretap1
[  133.726251][ T5643] Bluetooth: hci0: command tx timeout
[  133.794042][ T1021] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  133.998402][ T1021] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  134.000382][ T1021] bond0 (unregistering): Released all slaves
[  134.090628][ T7064] nvme nvme0: rdma connection establishment failed (-512)
[  134.147992][ T7067] loop3: detected capacity change from 0 to 32768
[  134.150131][ T7028] FAULT_INJECTION: forcing a failure.
[  134.150131][ T7028] name failslab, interval 1, probability 0, space 0, times 0
[  134.150160][ T7028] CPU: 1 UID: 0 PID: 7028 Comm: syz.5.337 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  134.150185][ T7028] Tainted: [L]=SOFTLOCKUP
[  134.150192][ T7028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  134.150202][ T7028] Call Trace:
[  134.150209][ T7028]  <TASK>
[  134.150217][ T7028]  dump_stack_lvl+0xe8/0x150
[  134.150252][ T7028]  should_fail_ex+0x3eb/0x540
[  134.150282][ T7028]  should_failslab+0xa8/0x100
[  134.150301][ T7028]  ? __proc_create+0x55d/0xad0
[  134.150325][ T7028]  kmem_cache_alloc_noprof+0x9c/0x600
[  134.150350][ T7028]  ? __proc_create+0x55d/0xad0
[  134.150381][ T7028]  __proc_create+0x55d/0xad0
[  134.150406][ T7028]  ? __pfx_call_netdevice_register_net_notifiers+0x10/0x10
[  134.150435][ T7028]  ? __pfx___proc_create+0x10/0x10
[  134.150461][ T7028]  ? rcu_is_watching+0x16/0xb0
[  134.150488][ T7028]  ? __pfx_psched_show+0x10/0x10
[  134.150517][ T7028]  proc_create_single_data+0xa5/0x1b0
[  134.150549][ T7028]  psched_net_init+0x50/0x70
[  134.150576][ T7028]  ops_init+0x35d/0x5d0
[  134.150610][ T7028]  setup_net+0x118/0x350
[  134.150638][ T7028]  ? __pfx_setup_net+0x10/0x10
[  134.150661][ T7028]  ? down_read_killable+0x1b6/0x3b0
[  134.150686][ T7028]  ? __ns_common_init+0x384/0x590
[  134.150711][ T7028]  copy_net_ns+0x536/0x770
[  134.150742][ T7028]  create_new_namespaces+0x3f0/0x6b0
[  134.150783][ T7028]  ? security_capable+0x7e/0x2c0
[  134.150810][ T7028]  unshare_nsproxy_namespaces+0x144/0x190
[  134.150843][ T7028]  ksys_unshare+0x532/0x890
[  134.150866][ T7028]  ? __pfx_ksys_unshare+0x10/0x10
[  134.150888][ T7028]  ? rcu_is_watching+0x16/0xb0
[  134.150931][ T7028]  __x64_sys_unshare+0x38/0x50
[  134.150950][ T7028]  do_syscall_64+0x166/0x520
[  134.150970][ T7028]  ? trace_irq_disable+0x3b/0x140
[  134.150998][ T7028]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.151018][ T7028]  ? clear_bhb_loop+0x70/0xc0
[  134.151043][ T7028]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.151062][ T7028] RIP: 0033:0x7f67e219fb19
[  134.151082][ T7028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  134.151098][ T7028] RSP: 002b:00007f67e2f91028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  134.151119][ T7028] RAX: ffffffffffffffda RBX: 00007f67e2425fa0 RCX: 00007f67e219fb19
[  134.151134][ T7028] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000
[  134.151147][ T7028] RBP: 00007f67e2237b70 R08: 0000000000000000 R09: 0000000000000000
[  134.151159][ T7028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  134.151170][ T7028] R13: 00007f67e2426038 R14: 00007f67e2425fa0 R15: 00007fff77ec5498
[  134.151202][ T7028]  </TASK>
[  134.223859][ T7067] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  134.223877][ T7067] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  134.267654][ T7067] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  134.271027][ T1019] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  134.271042][ T1019] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  134.347524][ T7064] nvme nvme0: rdma connection establishment failed (-512)
[  134.367143][ T1019] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 96ms
[  134.367322][ T1019] gfs2: fsid=syz:syz.0: jid=0: Done
[  134.367366][ T7067] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  134.614982][ T7064] nvme nvme0: rdma connection establishment failed (-512)
[  134.802426][ T5298] 8021q: adding VLAN 0 to HW filter on device eth5
[  134.817148][ T7079] loop0: detected capacity change from 0 to 512
[  134.857554][ T7079] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  134.857573][ T7079] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  134.918776][ T7079] EXT4-fs (loop0): 1 truncate cleaned up
[  134.933629][ T7079] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  135.233415][ T7092] rnbd_client L610: Mapping device /dev/ram0 on session s0, (access_mode: rw, nr_poll_queues: 0)
[  135.257611][ T5642] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.320854][ T7091] FAULT_INJECTION: forcing a failure.
[  135.320854][ T7091] name failslab, interval 1, probability 0, space 0, times 0
[  135.320887][ T7091] CPU: 1 UID: 0 PID: 7091 Comm: syz.1.353 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  135.320915][ T7091] Tainted: [L]=SOFTLOCKUP
[  135.320922][ T7091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  135.320934][ T7091] Call Trace:
[  135.320942][ T7091]  <TASK>
[  135.320951][ T7091]  dump_stack_lvl+0xe8/0x150
[  135.320994][ T7091]  should_fail_ex+0x3eb/0x540
[  135.321027][ T7091]  should_failslab+0xa8/0x100
[  135.321053][ T7091]  __kmalloc_node_track_caller_noprof+0xf6/0x720
[  135.321085][ T7091]  ? copy_array+0x63/0xf0
[  135.321110][ T7091]  ? copy_array+0x63/0xf0
[  135.321138][ T7091]  ? copy_array+0x63/0xf0
[  135.321166][ T7091]  krealloc_node_align_noprof+0x19a/0x390
[  135.321203][ T7091]  copy_array+0x63/0xf0
[  135.321232][ T7091]  bpf_copy_verifier_state+0xad/0x1300
[  135.321261][ T7091]  ? push_stack+0x7e/0x380
[  135.321289][ T7091]  ? push_stack+0x7e/0x380
[  135.321325][ T7091]  push_stack+0x1b9/0x380
[  135.321358][ T7091]  do_check_insn+0x6681/0xb800
[  135.321403][ T7091]  ? __pfx_do_check_insn+0x10/0x10
[  135.321427][ T7091]  ? krealloc_node_align_noprof+0x235/0x390
[  135.321461][ T7091]  ? bpf_push_jmp_history+0x4d3/0xb00
[  135.321503][ T7091]  do_check_common+0x557a/0x7590
[  135.321580][ T7091]  ? __pfx_do_check_common+0x10/0x10
[  135.321624][ T7091]  ? mark_fastcall_patterns+0x10e1/0x1140
[  135.321667][ T7091]  do_check_main+0x95/0x1f0
[  135.321693][ T7091]  bpf_check+0x3033/0x34e0
[  135.321726][ T7091]  ? ktime_get_with_offset+0x93/0x2d0
[  135.321755][ T7091]  ? ktime_get_with_offset+0x93/0x2d0
[  135.321782][ T7091]  ? __pfx_bpf_check+0x10/0x10
[  135.321806][ T7091]  ? bpf_obj_name_cpy+0x194/0x1e0
[  135.321836][ T7091]  bpf_prog_load+0x14da/0x1c60
[  135.321870][ T7091]  ? __pfx_bpf_prog_load+0x10/0x10
[  135.321907][ T7091]  ? __might_fault+0xaf/0x130
[  135.321935][ T7091]  __sys_bpf+0xdeb/0xe70
[  135.321964][ T7091]  ? __pfx___sys_bpf+0x10/0x10
[  135.321988][ T7091]  ? do_futex+0x3e7/0x4e0
[  135.322040][ T7091]  ? rcu_is_watching+0x16/0xb0
[  135.322077][ T7091]  __x64_sys_bpf+0xba/0xd0
[  135.322114][ T7091]  do_syscall_64+0x166/0x520
[  135.322135][ T7091]  ? trace_irq_disable+0x3b/0x140
[  135.322162][ T7091]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.322183][ T7091]  ? clear_bhb_loop+0x70/0xc0
[  135.322208][ T7091]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.322228][ T7091] RIP: 0033:0x7f511d39fb19
[  135.322247][ T7091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  135.322265][ T7091] RSP: 002b:00007f511e264028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  135.322286][ T7091] RAX: ffffffffffffffda RBX: 00007f511d625fa0 RCX: 00007f511d39fb19
[  135.322301][ T7091] RDX: 0000000000000048 RSI: 0000200000000c80 RDI: 0000000000000005
[  135.322314][ T7091] RBP: 00007f511d437b70 R08: 0000000000000000 R09: 0000000000000000
[  135.322327][ T7091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  135.322338][ T7091] R13: 00007f511d626038 R14: 00007f511d625fa0 R15: 00007ffef2de0138
[  135.322371][ T7091]  </TASK>
[  135.420327][   T53] rtrs_client L1784: <s0>: Resolving route failed, err: -ENODEV
[  135.501499][ T6987] rxe_eth0 speed is unknown, defaulting to 1000
[  135.728873][ T7092] rtrs_client L2656: <s0>: init_conns() failed: err=-ENODEV path=<invalid address family>@ip:127.0.0.1 [:0]
[  135.805350][ T5643] Bluetooth: hci0: command tx timeout
[  135.866936][ T7105] loop1: detected capacity change from 0 to 1024
[  135.867850][ T7105] EXT4-fs: Ignoring removed mblk_io_submit option
[  135.867875][ T7105] EXT4-fs: Ignoring removed oldalloc option
[  135.975892][ T7105] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  135.976007][ T7105] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  136.095532][ T7105] EXT4-fs error (device loop1): ext4_map_blocks:951: inode #15: block 3: comm syz.1.357: lblock 3 mapped to illegal pblock 3 (length 3)
[  136.130471][ T7117] nbd: must specify at least one socket
[  136.147213][ T7105] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  136.147246][ T7105] EXT4-fs (loop1): This should not happen!! Data will be lost
[  136.147246][ T7105] 
[  136.170258][ T7120] EXT4-fs error (device loop1): ext4_map_blocks:951: inode #15: block 7: comm syz.1.357: lblock 7 mapped to illegal pblock 7 (length 9)
[  136.173218][ T7120] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 9 with error 117
[  136.173271][ T7120] EXT4-fs (loop1): This should not happen!! Data will be lost
[  136.173271][ T7120] 
[  136.310053][ T7125] loop3: detected capacity change from 0 to 2048
[  136.361995][ T5640] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  136.404164][ T7125] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  136.500153][ T7130] FAULT_INJECTION: forcing a failure.
[  136.500153][ T7130] name failslab, interval 1, probability 0, space 0, times 0
[  136.500186][ T7130] CPU: 0 UID: 0 PID: 7130 Comm: syz.5.361 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  136.500215][ T7130] Tainted: [L]=SOFTLOCKUP
[  136.500223][ T7130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  136.500238][ T7130] Call Trace:
[  136.500246][ T7130]  <TASK>
[  136.500254][ T7130]  dump_stack_lvl+0xe8/0x150
[  136.500294][ T7130]  should_fail_ex+0x3eb/0x540
[  136.500327][ T7130]  should_failslab+0xa8/0x100
[  136.500351][ T7130]  __kmalloc_cache_noprof+0x9e/0x600
[  136.500378][ T7130]  ? __kasan_kmalloc+0x93/0xb0
[  136.500408][ T7130]  ? __v4l2_subdev_state_alloc+0x5a/0x3d0
[  136.500432][ T7130]  ? __v4l2_subdev_state_alloc+0x5a/0x3d0
[  136.500463][ T7130]  __v4l2_subdev_state_alloc+0x5a/0x3d0
[  136.500492][ T7130]  subdev_open+0xad/0x430
[  136.500519][ T7130]  v4l2_open+0x1bc/0x3a0
[  136.500546][ T7130]  chrdev_open+0x4d9/0x600
[  136.500571][ T7130]  ? __pfx_chrdev_open+0x10/0x10
[  136.500592][ T7130]  ? fsnotify_open_perm_and_set_mode+0x135/0x6b0
[  136.500614][ T7130]  ? devcgroup_check_permission+0x31/0x8f0
[  136.500647][ T7130]  ? __pfx_chrdev_open+0x10/0x10
[  136.500668][ T7130]  do_dentry_open+0x80e/0x1360
[  136.500704][ T7130]  vfs_open_consume+0x4a/0x350
[  136.500727][ T7130]  ? path_openat+0x16e1/0x20f0
[  136.500748][ T7130]  path_openat+0x16fc/0x20f0
[  136.500784][ T7130]  do_file_open+0x23e/0x4a0
[  136.500808][ T7130]  ? __pfx_do_file_open+0x10/0x10
[  136.500848][ T7130]  ? _raw_spin_unlock+0x28/0x50
[  136.500877][ T7130]  ? alloc_fd+0x6af/0x760
[  136.500916][ T7130]  do_sys_openat2+0x115/0x200
[  136.500945][ T7130]  ? __pfx_do_sys_openat2+0x10/0x10
[  136.500975][ T7130]  ? do_user_addr_fault+0xd3f/0x1480
[  136.501004][ T7130]  __x64_sys_openat+0x138/0x170
[  136.501032][ T7130]  do_syscall_64+0x166/0x520
[  136.501052][ T7130]  ? trace_irq_disable+0x3b/0x140
[  136.501087][ T7130]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  136.501106][ T7130]  ? clear_bhb_loop+0x70/0xc0
[  136.501130][ T7130]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  136.501151][ T7130] RIP: 0033:0x7f67e216034e
[  136.501170][ T7130] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  136.501187][ T7130] RSP: 002b:00007f67e2f90b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  136.501209][ T7130] RAX: ffffffffffffffda RBX: 00007f67e2f916c0 RCX: 00007f67e216034e
[  136.501225][ T7130] RDX: 0000000000000000 RSI: 00007f67e2f90c00 RDI: ffffffffffffff9c
[  136.501237][ T7130] RBP: 00007f67e2f90c00 R08: 0000000000000000 R09: 0000000000000000
[  136.501250][ T7130] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  136.501264][ T7130] R13: 00007f67e2426038 R14: 00007f67e2425fa0 R15: 00007fff77ec5498
[  136.501297][ T7130]  </TASK>
[  136.855832][ T5645] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.886361][ T5769] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  136.943764][ T5298] 8021q: adding VLAN 0 to HW filter on device eth6
[  137.036835][ T5769] usb 1-1: Using ep0 maxpacket: 8
[  137.039159][ T5769] usb 1-1: New USB device found: idVendor=046d, idProduct=c623, bcdDevice=0.00
[  137.042089][ T5769] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  137.042119][ T5769] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[  137.042141][ T5769] usb 1-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  137.042165][ T5769] usb 1-1: config 0 interface 0 has no altsetting 0
[  137.042197][ T5769] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.070762][ T5769] usb 1-1: config 0 descriptor??
[  137.445447][ T1021] hsr_slave_0: left promiscuous mode
[  137.446279][ T1021] hsr_slave_1: left promiscuous mode
[  137.447288][ T1021] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  137.447307][ T1021] batman_adv: batadv0: Removing interface: batadv_slave_0
[  137.449420][ T1021] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  137.449439][ T1021] batman_adv: batadv0: Removing interface: batadv_slave_1
[  137.502964][ T1021] veth1_macvtap: left promiscuous mode
[  137.503043][ T1021] veth0_macvtap: left promiscuous mode
[  137.503230][ T1021] veth1_vlan: left promiscuous mode
[  137.503390][ T1021] veth0_vlan: left promiscuous mode
[  137.552175][ T5769] input: HID 046d:c623 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:046D:C623.0005/input/input13
[  137.767973][ T5769] logitech 0003:046D:C623.0005: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 046d:c623] on usb-dummy_hcd.0-1/input0
[  137.782064][ T5769] usb 1-1: USB disconnect, device number 5
[  137.884205][ T5643] Bluetooth: hci0: command tx timeout
[  138.116879][ T7158] fido_id[7158]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory
[  138.367506][ T7161] loop3: detected capacity change from 0 to 32768
[  138.369287][ T7161] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.370 (7161)
[  138.393139][ T7161] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  138.393168][ T7161] BTRFS info (device loop3): using sha256 checksum algorithm
[  138.512320][ T7161] BTRFS info (device loop3): enabling ssd optimizations
[  138.512348][ T7161] BTRFS info (device loop3): turning on async discard
[  138.512364][ T7161] BTRFS info (device loop3): enabling free space tree
[  138.542344][ T7145] loop5: detected capacity change from 0 to 32768
[  138.613264][ T7145] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  138.651745][ T5645] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  138.676104][ T1021] team0 (unregistering): Port device team_slave_1 removed
[  138.765690][ T7145] XFS (loop5): Ending clean mount
[  138.808661][ T7145] XFS (loop5): Quotacheck needed: Please wait.
[  138.813376][ T1021] team0 (unregistering): Port device team_slave_0 removed
[  139.089294][ T7145] XFS (loop5): Quotacheck: Done.
[  139.277125][ T7206] FAULT_INJECTION: forcing a failure.
[  139.277125][ T7206] name failslab, interval 1, probability 0, space 0, times 0
[  139.277155][ T7206] CPU: 0 UID: 0 PID: 7206 Comm: syz.3.377 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  139.277179][ T7206] Tainted: [L]=SOFTLOCKUP
[  139.277186][ T7206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  139.277196][ T7206] Call Trace:
[  139.277203][ T7206]  <TASK>
[  139.277211][ T7206]  dump_stack_lvl+0xe8/0x150
[  139.277244][ T7206]  should_fail_ex+0x3eb/0x540
[  139.277274][ T7206]  should_failslab+0xa8/0x100
[  139.277296][ T7206]  kmem_cache_alloc_lru_noprof+0xa2/0x5f0
[  139.277324][ T7206]  ? __d_alloc+0x37/0x820
[  139.277361][ T7206]  ? __d_alloc+0x37/0x820
[  139.277393][ T7206]  __d_alloc+0x37/0x820
[  139.277424][ T7206]  d_alloc_pseudo+0x21/0xc0
[  139.277454][ T7206]  alloc_path_pseudo+0x107/0x220
[  139.277483][ T7206]  ? __pfx_alloc_path_pseudo+0x10/0x10
[  139.277510][ T7206]  ? do_raw_spin_lock+0x12b/0x2f0
[  139.277538][ T7206]  alloc_file_pseudo+0xa8/0x1e0
[  139.277572][ T7206]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  139.277600][ T7206]  ? _raw_spin_unlock+0x28/0x50
[  139.277637][ T7206]  sock_alloc_file+0xb8/0x2e0
[  139.277658][ T7206]  ? __sys_socket+0x12b/0x1b0
[  139.277693][ T7206]  __sys_socket+0x13f/0x1b0
[  139.277722][ T7206]  __x64_sys_socket+0x7a/0x90
[  139.277744][ T7206]  do_syscall_64+0x166/0x520
[  139.277764][ T7206]  ? trace_irq_disable+0x3b/0x140
[  139.277790][ T7206]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  139.277811][ T7206]  ? clear_bhb_loop+0x70/0xc0
[  139.277836][ T7206]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  139.277855][ T7206] RIP: 0033:0x7f7b1699fb19
[  139.277876][ T7206] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  139.277893][ T7206] RSP: 002b:00007f7b178d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  139.277914][ T7206] RAX: ffffffffffffffda RBX: 00007f7b16c25fa0 RCX: 00007f7b1699fb19
[  139.277930][ T7206] RDX: 0000000000000002 RSI: 0000000000000002 RDI: 000000000000001d
[  139.277942][ T7206] RBP: 00007f7b16a37b70 R08: 0000000000000000 R09: 0000000000000000
[  139.277956][ T7206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  139.277968][ T7206] R13: 00007f7b16c26038 R14: 00007f7b16c25fa0 R15: 00007ffc228f6948
[  139.277999][ T7206]  </TASK>
[  139.641808][ T5298] 8021q: adding VLAN 0 to HW filter on device eth7
[  139.641888][ T6211] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  139.975568][ T5643] Bluetooth: hci0: command tx timeout
[  140.147153][ T7226] capability: warning: `syz.0.383' uses deprecated v2 capabilities in a way that may be insecure
[  140.170754][ T1021] IPVS: stop unused estimator thread 0...
[  140.319562][ T7236] tun0: tun_chr_ioctl cmd 1074025675
[  140.319586][ T7236] tun0: persist enabled
[  140.357536][ T7227] tun0: tun_chr_ioctl cmd 1074025675
[  140.357559][ T7227] tun0: persist disabled
[  140.465378][ T6987] bridge0: port 1(bridge_slave_0) entered blocking state
[  140.465946][ T6987] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.466103][ T6987] bridge_slave_0: entered allmulticast mode
[  140.472795][ T6987] bridge_slave_0: entered promiscuous mode
[  140.483223][ T6987] bridge0: port 2(bridge_slave_1) entered blocking state
[  140.483403][ T6987] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.483534][ T6987] bridge_slave_1: entered allmulticast mode
[  140.486937][ T6987] bridge_slave_1: entered promiscuous mode
[  140.503468][ T7244] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input14
[  140.700993][ T6987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  140.720371][ T6987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  140.811100][ T6987] team0: Port device team_slave_0 added
[  140.897082][ T6987] team0: Port device team_slave_1 added
[  141.033167][ T6987] batman_adv: batadv0: Adding interface: batadv_slave_0
[  141.033200][ T6987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  141.033224][ T6987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  141.040500][ T6987] batman_adv: batadv0: Adding interface: batadv_slave_1
[  141.040515][ T6987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  141.040538][ T6987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  141.180565][ T6987] hsr_slave_0: entered promiscuous mode
[  141.181669][ T6987] hsr_slave_1: entered promiscuous mode
[  141.182379][ T6987] debugfs: 'hsr0' already exists in 'hsr'
[  141.182411][ T6987] Cannot create hsr debugfs directory
[  141.212551][ T7264] ip_tables: iptables: counters copy to user failed while replacing table
[  141.281643][ T7262] loop5: detected capacity change from 0 to 4096
[  141.286600][ T7262] EXT4-fs: Ignoring removed mblk_io_submit option
[  141.286678][ T7262] EXT4-fs: Ignoring removed orlov option
[  141.352903][ T7262] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  141.502194][ T5298] 8021q: adding VLAN 0 to HW filter on device eth8
[  141.743999][ T6211] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.980632][ T6987] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  142.015682][ T6987] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  142.017270][ T6987] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  142.056476][ T6987] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  142.057307][ T6987] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  142.088162][ T6987] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  142.089005][ T6987] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  142.115470][ T6987] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  142.164178][ T5769] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  142.313276][ T6987] 8021q: adding VLAN 0 to HW filter on device bond0
[  142.320949][ T5769] usb 6-1: Using ep0 maxpacket: 16
[  142.323303][ T5769] usb 6-1: New USB device found: idVendor=04d8, idProduct=00dd, bcdDevice=0.00
[  142.339754][ T5769] usb 6-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  142.339788][ T5769] usb 6-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0
[  142.339810][ T5769] usb 6-1: config 0 interface 0 has no altsetting 0
[  142.339844][ T5769] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.342583][ T5769] usb 6-1: config 0 descriptor??
[  142.432988][ T6987] 8021q: adding VLAN 0 to HW filter on device team0
[  142.459024][   T44] bridge0: port 1(bridge_slave_0) entered blocking state
[  142.459136][   T44] bridge0: port 1(bridge_slave_0) entered forwarding state
[  142.497369][   T44] bridge0: port 2(bridge_slave_1) entered blocking state
[  142.497479][   T44] bridge0: port 2(bridge_slave_1) entered forwarding state
[  142.814759][ T5769] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0
[  142.814797][ T5769] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0
[  142.814823][ T5769] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0
[  142.814849][ T5769] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0
[  142.814875][ T5769] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0
[  142.815921][ T5769] mcp2221 0003:04D8:00DD.0006: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0
[  143.041964][   T32] usb 6-1: USB disconnect, device number 3
[  143.434366][ T5646] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  143.584593][ T5646] usb 2-1: Using ep0 maxpacket: 8
[  143.586646][ T5646] usb 2-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  143.587635][ T5646] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  143.587657][ T5646] usb 2-1: config 0 has no interface number 0
[  143.587695][ T5646] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  143.587732][ T5646] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.592389][ T5646] usb 2-1: config 0 descriptor??
[  143.608650][ T5646] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  143.670813][ T6987] 8021q: adding VLAN 0 to HW filter on device batadv0
[  143.950002][ T7348] netlink: 8 bytes leftover after parsing attributes in process `syz.5.417'.
[  144.037072][ T7354] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  144.053537][ T2259] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  144.185621][ T6987] veth0_vlan: entered promiscuous mode
[  144.210936][ T2259] usb 4-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00
[  144.212037][ T2259] usb 4-1: config 1 has an invalid interface number: 3 but max is 0
[  144.212061][ T2259] usb 4-1: config 1 has no interface number 0
[  144.234144][ T6987] veth1_vlan: entered promiscuous mode
[  144.249882][ T2259] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.249908][ T2259] usb 4-1: Product: syz
[  144.249922][ T2259] usb 4-1: Manufacturer: syz
[  144.249935][ T2259] usb 4-1: SerialNumber: syz
[  144.283811][ T2259] usb 4-1: 3:0 : does not exist
[  144.283833][ T2259] usb 4-1: 3:0 : does not exist
[  144.370547][ T6987] veth0_macvtap: entered promiscuous mode
[  144.397955][ T6987] veth1_macvtap: entered promiscuous mode
[  144.493172][ T6987] batman_adv: batadv0: Interface activated: batadv_slave_0
[  144.516959][ T2259] usb 4-1: USB disconnect, device number 3
[  144.523486][ T6987] batman_adv: batadv0: Interface activated: batadv_slave_1
[  144.596094][ T1021] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  144.618937][   T86] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  144.619467][   T86] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  144.695103][   T44] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  144.819441][ T6130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  144.819462][ T6130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  144.870378][ T6130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  144.870400][ T6130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  144.934802][ T5769] usb 2-1: USB disconnect, device number 5
[  145.098616][ T7371] loop6: detected capacity change from 0 to 256
[  145.174039][ T7373] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  145.226461][ T7373] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type
[  145.227040][ T7373] overlayfs: failed to look up (tracing) for ino (-66)
[  145.428345][ T7379] FAULT_INJECTION: forcing a failure.
[  145.428345][ T7379] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  145.428384][ T7379] CPU: 1 UID: 0 PID: 7379 Comm: syz.3.427 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  145.428414][ T7379] Tainted: [L]=SOFTLOCKUP
[  145.428422][ T7379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  145.428434][ T7379] Call Trace:
[  145.428442][ T7379]  <TASK>
[  145.428451][ T7379]  dump_stack_lvl+0xe8/0x150
[  145.428491][ T7379]  should_fail_ex+0x3eb/0x540
[  145.428528][ T7379]  prepare_alloc_pages+0x21e/0x5f0
[  145.428565][ T7379]  __alloc_frozen_pages_noprof+0x189/0x450
[  145.428605][ T7379]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  145.428633][ T7379]  ? __alloc_frozen_pages_noprof+0x274/0x450
[  145.428669][ T7379]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  145.428709][ T7379]  __alloc_pages_noprof+0x10/0x100
[  145.428740][ T7379]  alloc_pages_bulk_noprof+0x6df/0x8f0
[  145.428773][ T7379]  ? alloc_pages_mpol+0x256/0x390
[  145.428802][ T7379]  ? alloc_pages_noprof+0x140/0x2b0
[  145.428829][ T7379]  __kasan_populate_vmalloc+0xb7/0x1c0
[  145.428866][ T7379]  alloc_vmap_area+0xd10/0x1410
[  145.428907][ T7379]  ? __pfx_alloc_vmap_area+0x10/0x10
[  145.428940][ T7379]  ? __get_vm_area_node+0x195/0x330
[  145.428961][ T7379]  ? __get_vm_area_node+0x195/0x330
[  145.428990][ T7379]  __get_vm_area_node+0x24a/0x330
[  145.429021][ T7379]  __vmalloc_node_range_noprof+0x36e/0x16f0
[  145.429047][ T7379]  ? dvb_dvr_open+0x1cc/0x5c0
[  145.429083][ T7379]  ? rcu_is_watching+0x16/0xb0
[  145.429116][ T7379]  ? trace_contention_end+0x3d/0x140
[  145.429152][ T7379]  ? __mutex_lock+0x305/0x15a0
[  145.429187][ T7379]  ? dvb_dvr_open+0x8f/0x5c0
[  145.429217][ T7379]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  145.429241][ T7379]  ? lock_acquire+0x115/0x350
[  145.429273][ T7379]  ? dvb_dvr_open+0x1cc/0x5c0
[  145.429297][ T7379]  vmalloc_noprof+0xb2/0xe0
[  145.429321][ T7379]  ? dvb_dvr_open+0x1cc/0x5c0
[  145.429347][ T7379]  dvb_dvr_open+0x1cc/0x5c0
[  145.429373][ T7379]  ? __pfx_dvb_dvr_open+0x10/0x10
[  145.429398][ T7379]  dvb_device_open+0x24f/0x340
[  145.429426][ T7379]  chrdev_open+0x4d9/0x600
[  145.429451][ T7379]  ? __pfx_chrdev_open+0x10/0x10
[  145.429473][ T7379]  ? fsnotify_open_perm_and_set_mode+0x135/0x6b0
[  145.429495][ T7379]  ? devcgroup_check_permission+0x31/0x8f0
[  145.429530][ T7379]  ? __pfx_chrdev_open+0x10/0x10
[  145.429552][ T7379]  do_dentry_open+0x80e/0x1360
[  145.429590][ T7379]  vfs_open_consume+0x4a/0x350
[  145.429613][ T7379]  ? path_openat+0x16e1/0x20f0
[  145.429636][ T7379]  path_openat+0x16fc/0x20f0
[  145.429678][ T7379]  do_file_open+0x23e/0x4a0
[  145.429702][ T7379]  ? __pfx_do_file_open+0x10/0x10
[  145.429746][ T7379]  ? _raw_spin_unlock+0x28/0x50
[  145.429775][ T7379]  ? alloc_fd+0x6af/0x760
[  145.429816][ T7379]  do_sys_openat2+0x115/0x200
[  145.429845][ T7379]  ? __pfx_do_sys_openat2+0x10/0x10
[  145.429879][ T7379]  ? do_user_addr_fault+0xd3f/0x1480
[  145.429911][ T7379]  __x64_sys_openat+0x138/0x170
[  145.429951][ T7379]  do_syscall_64+0x166/0x520
[  145.429972][ T7379]  ? trace_irq_disable+0x3b/0x140
[  145.430001][ T7379]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.430022][ T7379]  ? clear_bhb_loop+0x70/0xc0
[  145.430049][ T7379]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.430069][ T7379] RIP: 0033:0x7f7b1696034e
[  145.430090][ T7379] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  145.430107][ T7379] RSP: 002b:00007f7b178d0b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  145.430130][ T7379] RAX: ffffffffffffffda RBX: 00007f7b178d16c0 RCX: 00007f7b1696034e
[  145.430146][ T7379] RDX: 0000000000020000 RSI: 00007f7b178d0c00 RDI: ffffffffffffff9c
[  145.430161][ T7379] RBP: 00007f7b178d0c00 R08: 0000000000000000 R09: 0000000000000000
[  145.430175][ T7379] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  145.430189][ T7379] R13: 00007f7b16c26038 R14: 00007f7b16c25fa0 R15: 00007ffc228f6948
[  145.430226][ T7379]  </TASK>
[  145.446025][ T7379] syz.3.427: vmalloc error: size 1925120, align 0x1, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1
[  145.446264][ T7379] CPU: 1 UID: 0 PID: 7379 Comm: syz.3.427 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  145.446292][ T7379] Tainted: [L]=SOFTLOCKUP
[  145.446299][ T7379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  145.446312][ T7379] Call Trace:
[  145.446320][ T7379]  <TASK>
[  145.446327][ T7379]  dump_stack_lvl+0xe8/0x150
[  145.446365][ T7379]  warn_alloc+0x24d/0x270
[  145.446392][ T7379]  ? kasan_quarantine_put+0xbb/0x1f0
[  145.446425][ T7379]  ? __pfx_warn_alloc+0x10/0x10
[  145.446451][ T7379]  ? __get_vm_area_node+0x263/0x330
[  145.446478][ T7379]  ? __get_vm_area_node+0x263/0x330
[  145.446508][ T7379]  __vmalloc_node_range_noprof+0x396/0x16f0
[  145.446539][ T7379]  ? rcu_is_watching+0x16/0xb0
[  145.446568][ T7379]  ? trace_contention_end+0x3d/0x140
[  145.446601][ T7379]  ? __mutex_lock+0x305/0x15a0
[  145.446635][ T7379]  ? dvb_dvr_open+0x8f/0x5c0
[  145.446663][ T7379]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  145.446685][ T7379]  ? lock_acquire+0x115/0x350
[  145.446717][ T7379]  ? dvb_dvr_open+0x1cc/0x5c0
[  145.446739][ T7379]  vmalloc_noprof+0xb2/0xe0
[  145.446763][ T7379]  ? dvb_dvr_open+0x1cc/0x5c0
[  145.446788][ T7379]  dvb_dvr_open+0x1cc/0x5c0
[  145.446812][ T7379]  ? __pfx_dvb_dvr_open+0x10/0x10
[  145.446836][ T7379]  dvb_device_open+0x24f/0x340
[  145.446862][ T7379]  chrdev_open+0x4d9/0x600
[  145.446890][ T7379]  ? __pfx_chrdev_open+0x10/0x10
[  145.446911][ T7379]  ? fsnotify_open_perm_and_set_mode+0x135/0x6b0
[  145.446939][ T7379]  ? devcgroup_check_permission+0x31/0x8f0
[  145.446971][ T7379]  ? __pfx_chrdev_open+0x10/0x10
[  145.446993][ T7379]  do_dentry_open+0x80e/0x1360
[  145.447029][ T7379]  vfs_open_consume+0x4a/0x350
[  145.447050][ T7379]  ? path_openat+0x16e1/0x20f0
[  145.447072][ T7379]  path_openat+0x16fc/0x20f0
[  145.447112][ T7379]  do_file_open+0x23e/0x4a0
[  145.447137][ T7379]  ? __pfx_do_file_open+0x10/0x10
[  145.447181][ T7379]  ? _raw_spin_unlock+0x28/0x50
[  145.447208][ T7379]  ? alloc_fd+0x6af/0x760
[  145.447246][ T7379]  do_sys_openat2+0x115/0x200
[  145.447274][ T7379]  ? __pfx_do_sys_openat2+0x10/0x10
[  145.447305][ T7379]  ? do_user_addr_fault+0xd3f/0x1480
[  145.447334][ T7379]  __x64_sys_openat+0x138/0x170
[  145.447364][ T7379]  do_syscall_64+0x166/0x520
[  145.447382][ T7379]  ? trace_irq_disable+0x3b/0x140
[  145.447407][ T7379]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.447426][ T7379]  ? clear_bhb_loop+0x70/0xc0
[  145.447450][ T7379]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.447470][ T7379] RIP: 0033:0x7f7b1696034e
[  145.447488][ T7379] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  145.447505][ T7379] RSP: 002b:00007f7b178d0b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  145.447524][ T7379] RAX: ffffffffffffffda RBX: 00007f7b178d16c0 RCX: 00007f7b1696034e
[  145.447538][ T7379] RDX: 0000000000020000 RSI: 00007f7b178d0c00 RDI: ffffffffffffff9c
[  145.447594][ T7379] RBP: 00007f7b178d0c00 R08: 0000000000000000 R09: 0000000000000000
[  145.447607][ T7379] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  145.447619][ T7379] R13: 00007f7b16c26038 R14: 00007f7b16c25fa0 R15: 00007ffc228f6948
[  145.447654][ T7379]  </TASK>
[  145.452611][ T7379] Mem-Info:
[  145.452625][ T7379] active_anon:8111 inactive_anon:5 isolated_anon:0
[  145.452625][ T7379]  active_file:154 inactive_file:55064 isolated_file:0
[  145.452625][ T7379]  unevictable:0 dirty:700 writeback:0
[  145.452625][ T7379]  slab_reclaimable:11627 slab_unreclaimable:97745
[  145.452625][ T7379]  mapped:30284 shmem:545 pagetables:1368
[  145.452625][ T7379]  sec_pagetables:0 bounce:0
[  145.452625][ T7379]  kernel_misc_reclaimable:0
[  145.452625][ T7379]  free:1307794 free_pcp:6968 free_cma:0
[  145.452687][ T7379] Node 0 active_anon:32444kB inactive_anon:20kB active_file:616kB inactive_file:220056kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:121136kB dirty:2800kB writeback:0kB shmem:2180kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12668kB pagetables:5312kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  145.452745][ T7379] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  145.452797][ T7379] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  145.452855][ T7379] lowmem_reserve[]: 0 2463 2464 2464 2464
[  145.452914][ T7379] Node 0 DMA32 free:1272040kB boost:0kB min:33920kB low:42400kB high:50880kB reserved_highatomic:0kB free_highatomic:0kB active_anon:32444kB inactive_anon:20kB active_file:616kB inactive_file:220056kB unevictable:0kB writepending:2800kB zspages:0kB present:3129332kB managed:2522672kB mlocked:0kB bounce:0kB free_pcp:27864kB local_pcp:15936kB free_cma:0kB
[  145.452981][ T7379] lowmem_reserve[]: 0 0 1 1 1
[  145.453015][ T7379] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[  145.453071][ T7379] lowmem_reserve[]: 0 0 0 0 0
[  145.453105][ T7379] Node 1 Normal free:3943776kB boost:0kB min:55960kB low:69948kB high:83936kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  145.453165][ T7379] lowmem_reserve[]: 0 0 0 0 0
[  145.453197][ T7379] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  145.453346][ T7379] Node 0 DMA32: 1230*4kB (ME) 498*8kB (UM) 650*16kB (UME) 547*32kB (UME) 272*64kB (UM) 142*128kB (UM) 64*256kB (UME) 29*512kB (UM) 11*1024kB (UME) 7*2048kB (UM) 279*4096kB (M) = 1272008kB
[  145.453501][ T7379] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  145.453598][ T7379] Node 1 Normal: 2*4kB (M) 1*8kB (M) 5*16kB (UM) 6*32kB (UM) 7*64kB (UM) 5*128kB (UM) 2*256kB (M) 3*512kB (UM) 2*1024kB (UM) 3*2048kB (UM) 960*4096kB (UM) = 3943776kB
[  145.453750][ T7379] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  145.453766][ T7379] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[  145.453782][ T7379] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  145.453798][ T7379] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  145.453813][ T7379] 55677 total pagecache pages
[  145.453824][ T7379] 4 pages in swap cache
[  145.453831][ T7379] Free swap  = 124980kB
[  145.453838][ T7379] Total swap = 124996kB
[  145.453846][ T7379] 2097051 pages RAM
[  145.453853][ T7379] 0 pages HighMem/MovableOnly
[  145.453860][ T7379] 434420 pages reserved
[  145.453867][ T7379] 0 pages cma reserved
[  145.810727][ T7388] loop5: detected capacity change from 0 to 512
[  145.828934][ T7388] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  145.828952][ T7388] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  145.845782][ T7388] EXT4-fs error (device loop5): ext4_iget_extra_inode:6027: inode #17: comm syz.5.431: corrupted in-inode xattr: e_name out of bounds
[  145.845815][ T7388] loop5: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117
[  145.848693][ T7388] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.431: couldn't read orphan inode 17 (err -117)
[  145.848724][ T7388] loop5: lost filesystem error report for type 5 error -117
[  145.870020][ T7388] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  146.158364][ T6211] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.937830][ T7408] loop0: detected capacity change from 0 to 16
[  147.003771][ T7408] erofs (device loop0): invalid ishare xattr prefix id 0
[  147.283910][ T7416] loop0: detected capacity change from 0 to 8
[  147.396084][ T7416] FAULT_INJECTION: forcing a failure.
[  147.396084][ T7416] name failslab, interval 1, probability 0, space 0, times 0
[  147.396121][ T7416] CPU: 1 UID: 0 PID: 7416 Comm: syz.0.442 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  147.396157][ T7416] Tainted: [L]=SOFTLOCKUP
[  147.396164][ T7416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  147.396180][ T7416] Call Trace:
[  147.396188][ T7416]  <TASK>
[  147.396197][ T7416]  dump_stack_lvl+0xe8/0x150
[  147.396234][ T7416]  should_fail_ex+0x3eb/0x540
[  147.396269][ T7416]  should_failslab+0xa8/0x100
[  147.396293][ T7416]  __kmalloc_noprof+0xf9/0x710
[  147.396321][ T7416]  ? __raw_spin_lock_init+0x45/0x100
[  147.396341][ T7416]  ? squashfs_cache_init+0x2f4/0x690
[  147.396368][ T7416]  ? squashfs_cache_init+0x2f4/0x690
[  147.396402][ T7416]  ? __init_waitqueue_head+0xa8/0x150
[  147.396427][ T7416]  squashfs_cache_init+0x2f4/0x690
[  147.396469][ T7416]  squashfs_fill_super+0xe62/0x2300
[  147.396510][ T7416]  get_tree_bdev_flags+0x436/0x500
[  147.396551][ T7416]  ? __pfx_squashfs_fill_super+0x10/0x10
[  147.396584][ T7416]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[  147.396628][ T7416]  vfs_get_tree+0x92/0x2a0
[  147.396651][ T7416]  do_new_mount+0x325/0xb00
[  147.396684][ T7416]  ? __pfx_do_new_mount+0x10/0x10
[  147.396714][ T7416]  ? ns_capable+0x84/0xe0
[  147.396761][ T7416]  ? path_mount+0x647/0x1050
[  147.396792][ T7416]  ? user_path_at+0xd4/0x160
[  147.396825][ T7416]  __se_sys_mount+0x31d/0x420
[  147.396859][ T7416]  ? __pfx___se_sys_mount+0x10/0x10
[  147.396894][ T7416]  ? __x64_sys_mount+0x20/0xc0
[  147.396925][ T7416]  do_syscall_64+0x166/0x520
[  147.396945][ T7416]  ? trace_irq_disable+0x3b/0x140
[  147.396973][ T7416]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.396994][ T7416]  ? clear_bhb_loop+0x70/0xc0
[  147.397021][ T7416]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.397041][ T7416] RIP: 0033:0x7f25c89a0d8a
[  147.397061][ T7416] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  147.397079][ T7416] RSP: 002b:00007f25c9823e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  147.397101][ T7416] RAX: ffffffffffffffda RBX: 00007f25c9823ee0 RCX: 00007f25c89a0d8a
[  147.397117][ T7416] RDX: 0000200000000b00 RSI: 0000200000000b40 RDI: 00007f25c9823ea0
[  147.397132][ T7416] RBP: 0000200000000b00 R08: 00007f25c9823ee0 R09: 0000000001000800
[  147.397147][ T7416] R10: 0000000001000800 R11: 0000000000000246 R12: 0000200000000b40
[  147.397161][ T7416] R13: 00007f25c9823ea0 R14: 00000000000001e8 R15: 0000200000000b80
[  147.397194][ T7416]  </TASK>
[  147.403317][ T7416] SQUASHFS error: Failed to allocate metadata cache entry
[  147.914321][ T7423] loop3: detected capacity change from 0 to 164
[  148.009843][ T7412] loop6: detected capacity change from 0 to 131072
[  148.023825][ T7412] F2FS-fs (loop6): Wrong secs_per_zone / total_sections (512, 24)
[  148.023849][ T7412] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock
[  148.023877][ T7412] F2FS-fs (loop6): Test dummy encryption mode enabled
[  148.042621][ T7412] F2FS-fs (loop6): invalid crc value
[  148.125064][   T32] usb 2-1: new full-speed USB device number 6 using dummy_hcd
[  148.129551][ T7412] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix.
[  148.130490][ T7412] loop6: lost filesystem error report for type 5 error -117
[  148.136896][ T7412] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  148.142026][ T7412] F2FS-fs (loop6): f2fs_disable_checkpoint starts, unusable: 0
[  148.142049][ T7412] F2FS-fs (loop6): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  148.142225][ T7412] F2FS-fs (loop6): Start checkpoint disabled!
[  148.192149][ T7412] F2FS-fs (loop6): f2fs_disable_checkpoint finishes, err:0
[  148.225714][ T7412] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0
[  148.225743][ T7412] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[  148.250078][ T7434] loop3: detected capacity change from 0 to 1024
[  148.296594][   T32] usb 2-1: New USB device found: idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  148.298507][   T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.342450][ T7434] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  148.381792][   T32] usb 2-1: config 0 descriptor??
[  148.396019][   T32] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  148.514175][ T7439] smpboot: CPU 1 is now offline
[  148.591739][ T7441] smpboot: Booting Node 0 Processor 1 APIC 0x1
[  148.634271][   T32] gp8psk: usb in 128 operation failed.
[  148.842282][ T5645] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  148.876400][   T32] gp8psk: usb in 146 operation failed.
[  148.876418][   T32] gp8psk: failed to get FW version
[  148.878929][   T32] gp8psk: FPGA Version = 0
[  149.080220][   T32] gp8psk: usb in 138 operation failed.
[  149.080259][   T32] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  149.080303][   T32] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  149.099590][   T32] usb 2-1: USB disconnect, device number 6
[  149.254442][ T5769] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[  149.430548][ T5769] usb 4-1: New USB device found: idVendor=056a, idProduct=5012, bcdDevice=0.00
[  149.451793][ T5769] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  149.451827][ T5769] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  149.451864][ T5769] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.481466][ T5769] usb 4-1: config 0 descriptor??
[  149.794414][ T7464] FAULT_INJECTION: forcing a failure.
[  149.794414][ T7464] name failslab, interval 1, probability 0, space 0, times 0
[  149.794470][ T7464] CPU: 0 UID: 0 PID: 7464 Comm: syz.1.461 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  149.794499][ T7464] Tainted: [L]=SOFTLOCKUP
[  149.794506][ T7464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  149.794518][ T7464] Call Trace:
[  149.794526][ T7464]  <TASK>
[  149.794535][ T7464]  dump_stack_lvl+0xe8/0x150
[  149.794573][ T7464]  should_fail_ex+0x3eb/0x540
[  149.794610][ T7464]  should_failslab+0xa8/0x100
[  149.794631][ T7464]  ? security_file_alloc+0x34/0x310
[  149.794661][ T7464]  kmem_cache_alloc_noprof+0x9c/0x600
[  149.794687][ T7464]  ? rcu_is_watching+0x16/0xb0
[  149.794719][ T7464]  ? security_file_alloc+0x34/0x310
[  149.794754][ T7464]  security_file_alloc+0x34/0x310
[  149.794785][ T7464]  init_file+0x90/0x2b0
[  149.794814][ T7464]  alloc_empty_file+0x74/0x1d0
[  149.794841][ T7464]  alloc_file_pseudo+0x110/0x1e0
[  149.794870][ T7464]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  149.794897][ T7464]  ? _raw_spin_unlock+0x28/0x50
[  149.794934][ T7464]  sock_alloc_file+0xb8/0x2e0
[  149.794955][ T7464]  ? __sys_socket+0x12b/0x1b0
[  149.794982][ T7464]  __sys_socket+0x13f/0x1b0
[  149.795012][ T7464]  __x64_sys_socket+0x7a/0x90
[  149.795039][ T7464]  do_syscall_64+0x166/0x520
[  149.795059][ T7464]  ? trace_irq_disable+0x3b/0x140
[  149.795088][ T7464]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  149.795109][ T7464]  ? clear_bhb_loop+0x70/0xc0
[  149.795142][ T7464]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  149.795163][ T7464] RIP: 0033:0x7f511d39fb19
[  149.795182][ T7464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  149.795201][ T7464] RSP: 002b:00007f511e263fc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  149.795224][ T7464] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f511d39fb19
[  149.795239][ T7464] RDX: 0000000000000002 RSI: 0000000000000005 RDI: 000000000000001f
[  149.795251][ T7464] RBP: 00007f511d437b70 R08: 0000000000000000 R09: 0000000000000000
[  149.795265][ T7464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  149.795277][ T7464] R13: 00007f511d626038 R14: 00007f511d625fa0 R15: 00007ffef2de0138
[  149.795311][ T7464]  </TASK>
[  149.927496][ T7453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  149.927959][ T7453] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  150.016847][ T7458] loop0: detected capacity change from 0 to 32768
[  150.103114][ T5769] wacom 0003:056A:5012.0007: unknown main item tag 0x0
[  150.103151][ T5769] wacom 0003:056A:5012.0007: unknown main item tag 0x0
[  150.103175][ T5769] wacom 0003:056A:5012.0007: unknown main item tag 0x0
[  150.103211][ T5769] wacom 0003:056A:5012.0007: unknown main item tag 0x0
[  150.103235][ T5769] wacom 0003:056A:5012.0007: unknown main item tag 0x0
[  150.103260][ T5769] wacom 0003:056A:5012.0007: unknown main item tag 0x0
[  150.103286][ T5769] wacom 0003:056A:5012.0007: unknown main item tag 0x0
[  150.103311][ T5769] wacom 0003:056A:5012.0007: unknown main item tag 0x0
[  150.103336][ T5769] wacom 0003:056A:5012.0007: unknown main item tag 0x0
[  150.103359][ T5769] wacom 0003:056A:5012.0007: unknown main item tag 0x0
[  150.103899][ T5769] wacom 0003:056A:5012.0007: ignoring exceeding usage max
[  150.188435][ T7458] XFS (loop0): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  150.215345][ T5769] wacom 0003:056A:5012.0007: Unknown device_type for 'HID 056a:5012'. Ignoring.
[  150.240304][ T5769] usb 4-1: USB disconnect, device number 4
[  150.313440][ T7458] XFS (loop0): Ending clean mount
[  150.564039][ T5642] XFS (loop0): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  151.029831][ T7498] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  151.256181][ T7504] loop1: detected capacity change from 0 to 512
[  151.358203][ T7504] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  151.431660][ T7500] loop0: detected capacity change from 0 to 32768
[  151.455221][ T7500] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  151.455241][ T7500] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  151.481189][ T7509] loop3: detected capacity change from 0 to 512
[  151.488870][ T1019] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  151.502957][ T7509] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  151.502975][ T7509] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  151.528448][ T7500] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  151.530805][ T5769] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  151.530820][ T5769] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  151.577548][ T7509] EXT4-fs (loop3): 1 truncate cleaned up
[  151.583472][ T7504] EXT4-fs (loop1): 1 truncate cleaned up
[  151.593083][ T7504] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  151.604498][ T7509] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  151.635162][ T1019] usb 7-1: New USB device found: idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  151.635203][ T1019] usb 7-1: too many configurations: 9, using maximum allowed: 8
[  151.636344][ T1019] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  151.636392][ T1019] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  151.636418][ T1019] usb 7-1: config 0 interface 0 has no altsetting 0
[  151.637431][ T1019] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  151.637473][ T1019] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  151.637497][ T1019] usb 7-1: config 0 interface 0 has no altsetting 0
[  151.640937][ T1019] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  151.640994][ T1019] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  151.641019][ T1019] usb 7-1: config 0 interface 0 has no altsetting 0
[  151.643520][ T1019] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  151.643565][ T1019] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  151.643592][ T1019] usb 7-1: config 0 interface 0 has no altsetting 0
[  151.664844][ T7509] EXT4-fs error (device loop3): ext4_find_dest_de:2052: inode #2: block 13: comm syz.3.476: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  151.673321][   T33] audit: type=1800 audit(1793656239.854:7): pid=7504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.475" name="file1" dev="loop1" ino=15 res=0 errno=-22
[  151.683311][ T1019] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  151.683365][ T1019] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  151.683390][ T1019] usb 7-1: config 0 interface 0 has no altsetting 0
[  151.755857][ T1019] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  151.755916][ T1019] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  151.755942][ T1019] usb 7-1: config 0 interface 0 has no altsetting 0
[  151.780895][ T7509] EXT4-fs (loop3): Remounting filesystem read-only
[  151.823744][ T1019] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  151.823795][ T1019] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  151.823820][ T1019] usb 7-1: config 0 interface 0 has no altsetting 0
[  151.866463][ T5769] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 335ms
[  151.868397][ T1019] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  151.868447][ T1019] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  151.868483][ T1019] usb 7-1: config 0 interface 0 has no altsetting 0
[  151.882115][ T5769] gfs2: fsid=syz:syz.0: jid=0: Done
[  151.882161][ T7500] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  151.949905][ T1019] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  151.949932][ T1019] usb 7-1: Product: syz
[  151.949947][ T1019] usb 7-1: Manufacturer: syz
[  151.949961][ T1019] usb 7-1: SerialNumber: syz
[  151.952800][ T1019] usb 7-1: config 0 descriptor??
[  151.989469][ T1019] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0
[  152.049048][   T33] audit: type=1800 audit(1793656240.234:8): pid=7515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.475" name="file1" dev="loop1" ino=15 res=0 errno=-22
[  152.138699][ T5645] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.340517][ T5640] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.567576][ T7527] loop1: detected capacity change from 0 to 256
[  152.687595][   T11] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  152.850186][   T11] usb 6-1: New USB device found: idVendor=08ca, idProduct=0110, bcdDevice=1.00
[  152.851631][   T11] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  152.857150][   T11] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.857175][   T11] usb 6-1: Product: syz
[  152.857189][   T11] usb 6-1: Manufacturer: syz
[  152.857203][   T11] usb 6-1: SerialNumber: syz
[  152.890763][   T11] gspca_main: mr97310a-2.14.0 probing 08ca:0110
[  153.234179][ T1019] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[  153.385587][ T1019] usb 1-1: New USB device found: idVendor=056a, idProduct=5012, bcdDevice=0.00
[  153.388432][ T1019] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  153.388465][ T1019] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  153.388524][ T1019] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.448458][ T1019] usb 1-1: config 0 descriptor??
[  153.642997][   T11] gspca_mr97310a: reg read [21] error -71
[  153.643099][   T11] mr97310a 6-1:1.0: probe with driver mr97310a failed with error -71
[  153.690989][   T11] usb 6-1: USB disconnect, device number 4
[  153.882595][ T7537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  153.884795][ T7537] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  153.936401][ T1019] wacom 0003:056A:5012.0008: ignoring exceeding usage max
[  153.960610][ T1019] wacom 0003:056A:5012.0008: Unknown device_type for 'HID 056a:5012'. Ignoring.
[  154.075103][ T2259] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  154.139194][ T1019] usb 1-1: USB disconnect, device number 6
[  154.207109][    C1] usb 7-1: yurex_control_callback - control failed: -2
[  154.233547][ T2259] usb 2-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00
[  154.248064][ T2259] usb 2-1: config 1 has an invalid interface number: 3 but max is 0
[  154.248091][ T2259] usb 2-1: config 1 has no interface number 0
[  154.251253][ T2259] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.251277][ T2259] usb 2-1: Product: syz
[  154.251291][ T2259] usb 2-1: Manufacturer: syz
[  154.251305][ T2259] usb 2-1: SerialNumber: syz
[  154.275311][ T5768] usb 7-1: USB disconnect, device number 2
[  154.280405][ T2259] usb 2-1: 3:0 : does not exist
[  154.280426][ T2259] usb 2-1: 3:0 : does not exist
[  154.287054][ T5768] yurex 7-1:0.0: USB YUREX #0 now disconnected
[  154.297685][   T11] usb 4-1: new low-speed USB device number 5 using dummy_hcd
[  154.446540][   T11] usb 4-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  154.447772][   T11] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  154.447796][   T11] usb 4-1: config 0 has no interface number 0
[  154.447854][   T11] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  154.447881][   T11] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  154.447921][   T11] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.457830][   T11] usb 4-1: config 0 descriptor??
[  154.458964][ T7566] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22
[  154.521378][   T11] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  154.560464][   T11] usb 2-1: USB disconnect, device number 7
[  154.753853][ T5768] usb 4-1: USB disconnect, device number 5
[  154.753962][    C0] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19
[  155.139929][ T7599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.495'.
[  155.303336][ T7604] FAULT_INJECTION: forcing a failure.
[  155.303336][ T7604] name failslab, interval 1, probability 0, space 0, times 0
[  155.303371][ T7604] CPU: 0 UID: 0 PID: 7604 Comm: syz.5.497 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  155.303400][ T7604] Tainted: [L]=SOFTLOCKUP
[  155.303408][ T7604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  155.303420][ T7604] Call Trace:
[  155.303428][ T7604]  <TASK>
[  155.303436][ T7604]  dump_stack_lvl+0xe8/0x150
[  155.303476][ T7604]  should_fail_ex+0x3eb/0x540
[  155.303509][ T7604]  should_failslab+0xa8/0x100
[  155.303533][ T7604]  __kmalloc_cache_noprof+0x9e/0x600
[  155.303559][ T7604]  ? __pfx_sprintf+0x10/0x10
[  155.303588][ T7604]  ? snd_timer_instance_new+0x51/0x260
[  155.303612][ T7604]  ? snd_timer_instance_new+0x51/0x260
[  155.303643][ T7604]  snd_timer_instance_new+0x51/0x260
[  155.303667][ T7604]  snd_seq_timer_open+0x23e/0x620
[  155.303694][ T7604]  ? __pfx_snd_seq_timer_open+0x10/0x10
[  155.303730][ T7604]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  155.303763][ T7604]  snd_seq_queue_alloc+0x3ba/0x740
[  155.303798][ T7604]  snd_seq_ioctl_create_queue+0x7f/0x3c0
[  155.303827][ T7604]  snd_seq_oss_open+0x657/0xf80
[  155.303858][ T7604]  ? __pfx_snd_seq_oss_open+0x10/0x10
[  155.303893][ T7604]  ? __mutex_trylock_common+0x15f/0x270
[  155.303925][ T7604]  ? __pfx___mutex_trylock_common+0x10/0x10
[  155.303968][ T7604]  ? rcu_is_watching+0x16/0xb0
[  155.303996][ T7604]  ? trace_contention_end+0x3d/0x140
[  155.304041][ T7604]  ? __pfx___mutex_lock+0x10/0x10
[  155.304070][ T7604]  ? __pfx_snd_seq_oss_event_input+0x10/0x10
[  155.304095][ T7604]  ? __pfx_free_devinfo+0x10/0x10
[  155.304117][ T7604]  ? do_raw_spin_unlock+0xf5/0x200
[  155.304144][ T7604]  ? soundcore_open+0x2da/0x490
[  155.304172][ T7604]  odev_open+0x67/0xa0
[  155.304196][ T7604]  chrdev_open+0x4d9/0x600
[  155.304229][ T7604]  ? __pfx_chrdev_open+0x10/0x10
[  155.304250][ T7604]  ? fsnotify_open_perm_and_set_mode+0x135/0x6b0
[  155.304272][ T7604]  ? devcgroup_check_permission+0x31/0x8f0
[  155.304305][ T7604]  ? __pfx_chrdev_open+0x10/0x10
[  155.304327][ T7604]  do_dentry_open+0x80e/0x1360
[  155.304364][ T7604]  vfs_open_consume+0x4a/0x350
[  155.304387][ T7604]  ? path_openat+0x16e1/0x20f0
[  155.304409][ T7604]  path_openat+0x16fc/0x20f0
[  155.304450][ T7604]  do_file_open+0x23e/0x4a0
[  155.304476][ T7604]  ? __pfx_do_file_open+0x10/0x10
[  155.304515][ T7604]  ? _raw_spin_unlock+0x28/0x50
[  155.304543][ T7604]  ? alloc_fd+0x6af/0x760
[  155.304583][ T7604]  do_sys_openat2+0x115/0x200
[  155.304609][ T7604]  ? __se_sys_futex+0x3a8/0x450
[  155.304633][ T7604]  ? __pfx_do_sys_openat2+0x10/0x10
[  155.304663][ T7604]  ? rcu_is_watching+0x16/0xb0
[  155.304698][ T7604]  __x64_sys_openat+0x138/0x170
[  155.304728][ T7604]  do_syscall_64+0x166/0x520
[  155.304749][ T7604]  ? trace_irq_disable+0x3b/0x140
[  155.304776][ T7604]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.304798][ T7604]  ? clear_bhb_loop+0x70/0xc0
[  155.304824][ T7604]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.304844][ T7604] RIP: 0033:0x7f67e219fb19
[  155.304864][ T7604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  155.304882][ T7604] RSP: 002b:00007f67e2f91028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  155.304904][ T7604] RAX: ffffffffffffffda RBX: 00007f67e2425fa0 RCX: 00007f67e219fb19
[  155.304919][ T7604] RDX: 0000000000080d02 RSI: 00002000000011c0 RDI: ffffffffffffff9c
[  155.304935][ T7604] RBP: 00007f67e2237b70 R08: 0000000000000000 R09: 0000000000000000
[  155.304949][ T7604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  155.304962][ T7604] R13: 00007f67e2426038 R14: 00007f67e2425fa0 R15: 00007fff77ec5498
[  155.304998][ T7604]  </TASK>
[  155.789403][   T32] kernel write not supported for file /tomoyo/query (pid: 32 comm: kworker/1:1)
[  155.997732][ T7599] loop0: detected capacity change from 0 to 32768
[  156.049044][ T7599] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  156.126356][ T7599] XFS (loop0): Ending clean mount
[  156.142330][ T7599] XFS (loop0): Quotacheck needed: Please wait.
[  156.279723][ T7599] XFS (loop0): Quotacheck: Done.
[  156.293685][ T7599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.495'.
[  156.332275][ T5642] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  158.158765][ T7650] FAULT_INJECTION: forcing a failure.
[  158.158765][ T7650] name failslab, interval 1, probability 0, space 0, times 0
[  158.158800][ T7650] CPU: 0 UID: 0 PID: 7650 Comm: syz.0.502 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  158.158829][ T7650] Tainted: [L]=SOFTLOCKUP
[  158.158837][ T7650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  158.158848][ T7650] Call Trace:
[  158.158857][ T7650]  <TASK>
[  158.158865][ T7650]  dump_stack_lvl+0xe8/0x150
[  158.158905][ T7650]  should_fail_ex+0x3eb/0x540
[  158.158938][ T7650]  should_failslab+0xa8/0x100
[  158.158960][ T7650]  ? __kernfs_new_node+0xe6/0x980
[  158.158985][ T7650]  kmem_cache_alloc_noprof+0x9c/0x600
[  158.159012][ T7650]  ? __kernfs_new_node+0xe6/0x980
[  158.159043][ T7650]  __kernfs_new_node+0xe6/0x980
[  158.159066][ T7650]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.159098][ T7650]  ? __pfx___kernfs_new_node+0x10/0x10
[  158.159124][ T7650]  ? kernfs_root+0x1c/0x230
[  158.159152][ T7650]  ? kernfs_root+0x1c/0x230
[  158.159175][ T7650]  ? kernfs_root+0x1c/0x230
[  158.159194][ T7650]  ? kernfs_root+0x1c/0x230
[  158.159220][ T7650]  kernfs_new_node+0xea/0x140
[  158.159250][ T7650]  __kernfs_create_file+0x4b/0x2e0
[  158.159281][ T7650]  sysfs_add_file_mode_ns+0x237/0x300
[  158.159316][ T7650]  internal_create_group+0x679/0x1180
[  158.159355][ T7650]  ? __pfx_internal_create_group+0x10/0x10
[  158.159380][ T7650]  ? up_write+0x19d/0x4a0
[  158.159398][ T7650]  ? kernfs_activate_one+0x22d/0x340
[  158.159423][ T7650]  sysfs_create_groups+0x59/0x120
[  158.159448][ T7650]  device_add_attrs+0xde/0x600
[  158.159478][ T7650]  ? __pfx_device_add_attrs+0x10/0x10
[  158.159516][ T7650]  ? device_add_class_symlinks+0x21f/0x240
[  158.159545][ T7650]  device_add+0x488/0xb80
[  158.159574][ T7650]  rfkill_register+0x170/0x9b0
[  158.159598][ T7650]  nfc_register_device+0x13d/0x370
[  158.159627][ T7650]  nci_register_device+0x8a2/0xa00
[  158.159660][ T7650]  ? __pfx_nci_register_device+0x10/0x10
[  158.159683][ T7650]  ? __raw_spin_lock_init+0x45/0x100
[  158.159704][ T7650]  ? __raw_spin_lock_init+0x45/0x100
[  158.159726][ T7650]  ? __init_waitqueue_head+0xa8/0x150
[  158.159748][ T7650]  virtual_ncidev_open+0x129/0x1a0
[  158.159769][ T7650]  ? __pfx_virtual_ncidev_open+0x10/0x10
[  158.159788][ T7650]  misc_open+0x2d5/0x350
[  158.159816][ T7650]  chrdev_open+0x4d9/0x600
[  158.159842][ T7650]  ? __pfx_chrdev_open+0x10/0x10
[  158.159863][ T7650]  ? fsnotify_open_perm_and_set_mode+0x135/0x6b0
[  158.159885][ T7650]  ? devcgroup_check_permission+0x31/0x8f0
[  158.159917][ T7650]  ? __pfx_chrdev_open+0x10/0x10
[  158.159939][ T7650]  do_dentry_open+0x80e/0x1360
[  158.159974][ T7650]  vfs_open_consume+0x4a/0x350
[  158.159995][ T7650]  ? path_openat+0x16e1/0x20f0
[  158.160016][ T7650]  path_openat+0x16fc/0x20f0
[  158.160053][ T7650]  do_file_open+0x23e/0x4a0
[  158.160078][ T7650]  ? __pfx_do_file_open+0x10/0x10
[  158.160121][ T7650]  ? _raw_spin_unlock+0x28/0x50
[  158.160149][ T7650]  ? alloc_fd+0x6af/0x760
[  158.160189][ T7650]  do_sys_openat2+0x115/0x200
[  158.160213][ T7650]  ? __se_sys_futex+0x3a8/0x450
[  158.160235][ T7650]  ? __pfx_do_sys_openat2+0x10/0x10
[  158.160266][ T7650]  ? rcu_is_watching+0x16/0xb0
[  158.160300][ T7650]  __x64_sys_openat+0x138/0x170
[  158.160331][ T7650]  do_syscall_64+0x166/0x520
[  158.160350][ T7650]  ? trace_irq_disable+0x3b/0x140
[  158.160376][ T7650]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.160397][ T7650]  ? clear_bhb_loop+0x70/0xc0
[  158.160423][ T7650]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.160443][ T7650] RIP: 0033:0x7f25c899fb19
[  158.160463][ T7650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  158.160482][ T7650] RSP: 002b:00007f25c9824028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  158.160513][ T7650] RAX: ffffffffffffffda RBX: 00007f25c8c25fa0 RCX: 00007f25c899fb19
[  158.160529][ T7650] RDX: 0000000000000002 RSI: 0000200000000340 RDI: ffffffffffffff9c
[  158.160543][ T7650] RBP: 00007f25c8a37b70 R08: 0000000000000000 R09: 0000000000000000
[  158.160556][ T7650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  158.160569][ T7650] R13: 00007f25c8c26038 R14: 00007f25c8c25fa0 R15: 00007ffcc2acd928
[  158.160605][ T7650]  </TASK>
[  158.368956][ T1019] usb 7-1: new full-speed USB device number 3 using dummy_hcd
[  158.396229][ T7656] loop5: detected capacity change from 0 to 512
[  158.411756][ T7656] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  158.493911][ T7656] EXT4-fs (loop5): 1 truncate cleaned up
[  158.545962][ T7656] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  158.566245][ T1019] usb 7-1: New USB device found: idVendor=056a, idProduct=5012, bcdDevice=0.00
[  158.568838][ T1019] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  158.568868][ T1019] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  158.568903][ T1019] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.593371][ T1019] usb 7-1: config 0 descriptor??
[  158.615547][   T33] audit: type=1800 audit(1793656246.794:9): pid=7656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.507" name="file1" dev="loop5" ino=15 res=0 errno=-22
[  158.703098][   T33] audit: type=1800 audit(1793656246.884:10): pid=7656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.507" name="file1" dev="loop5" ino=15 res=0 errno=-22
[  158.930685][ T7667] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  158.930722][ T7667] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  158.930783][ T7667] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  159.050880][ T7668] nvme nvme0: rdma_resolve_addr failed (-99).
[  159.107274][ T7645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  159.107852][ T7645] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  159.168303][ T1019] hid_parser_main: 846 callbacks suppressed
[  159.168327][ T1019] wacom 0003:056A:5012.0009: unknown main item tag 0x0
[  159.170926][ T1019] wacom 0003:056A:5012.0009: unknown main item tag 0x0
[  159.170970][ T1019] wacom 0003:056A:5012.0009: unknown main item tag 0x0
[  159.170995][ T1019] wacom 0003:056A:5012.0009: unknown main item tag 0x0
[  159.171028][ T1019] wacom 0003:056A:5012.0009: unknown main item tag 0x0
[  159.171054][ T1019] wacom 0003:056A:5012.0009: unknown main item tag 0x0
[  159.171080][ T1019] wacom 0003:056A:5012.0009: unknown main item tag 0x0
[  159.171106][ T1019] wacom 0003:056A:5012.0009: unknown main item tag 0x0
[  159.171131][ T1019] wacom 0003:056A:5012.0009: unknown main item tag 0x0
[  159.171158][ T1019] wacom 0003:056A:5012.0009: unknown main item tag 0x0
[  159.172906][ T1019] wacom 0003:056A:5012.0009: ignoring exceeding usage max
[  159.252008][ T1019] wacom 0003:056A:5012.0009: Unknown device_type for 'HID 056a:5012'. Ignoring.
[  159.300014][ T6211] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.450151][ T1019] usb 7-1: USB disconnect, device number 3
[  159.468005][ T7666] loop0: detected capacity change from 0 to 32768
[  159.567863][ T7666] JBD2: Ignoring recovery information on journal
[  159.692238][ T7666] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  159.923529][ T5642] ocfs2: Unmounting device (7,0) on (node local)
[  159.974617][ T1019] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  160.106947][ T7687] loop3: detected capacity change from 0 to 2048
[  160.136782][ T1019] usb 6-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00
[  160.138410][ T1019] usb 6-1: config 1 has an invalid interface number: 3 but max is 0
[  160.138435][ T1019] usb 6-1: config 1 has no interface number 0
[  160.145991][ T1019] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.146016][ T1019] usb 6-1: Product: syz
[  160.146030][ T1019] usb 6-1: Manufacturer: syz
[  160.146044][ T1019] usb 6-1: SerialNumber: syz
[  160.161244][ T7687] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  160.195839][ T1019] usb 6-1: 3:0 : does not exist
[  160.195862][ T1019] usb 6-1: 3:0 : does not exist
[  160.441065][ T1019] usb 6-1: USB disconnect, device number 5
[  160.464586][ T7696] loop6: detected capacity change from 0 to 512
[  160.612651][ T5655] udevd[5655]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  160.724341][ T7706] FAULT_INJECTION: forcing a failure.
[  160.724341][ T7706] name failslab, interval 1, probability 0, space 0, times 0
[  160.724375][ T7706] CPU: 1 UID: 0 PID: 7706 Comm: syz.3.524 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  160.724403][ T7706] Tainted: [L]=SOFTLOCKUP
[  160.724411][ T7706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  160.724423][ T7706] Call Trace:
[  160.724431][ T7706]  <TASK>
[  160.724440][ T7706]  dump_stack_lvl+0xe8/0x150
[  160.724478][ T7706]  should_fail_ex+0x3eb/0x540
[  160.724510][ T7706]  should_failslab+0xa8/0x100
[  160.724532][ T7706]  ? copy_pid_ns+0x23c/0x900
[  160.724562][ T7706]  kmem_cache_alloc_noprof+0x9c/0x600
[  160.724586][ T7706]  ? __pfx_inc_ucount+0x10/0x10
[  160.724610][ T7706]  ? copy_pid_ns+0x23c/0x900
[  160.724646][ T7706]  copy_pid_ns+0x23c/0x900
[  160.724681][ T7706]  ? __pfx_copy_pid_ns+0x10/0x10
[  160.724708][ T7706]  ? rcu_is_watching+0x16/0xb0
[  160.724742][ T7706]  ? __pfx_copy_mnt_ns+0x10/0x10
[  160.724769][ T7706]  ? kmem_cache_alloc_noprof+0x31a/0x600
[  160.724797][ T7706]  ? copy_ipcs+0x2ad/0x6c0
[  160.724825][ T7706]  ? copy_utsname+0x184/0x620
[  160.724853][ T7706]  create_new_namespaces+0x2ad/0x6b0
[  160.724886][ T7706]  ? security_capable+0x7e/0x2c0
[  160.724923][ T7706]  unshare_nsproxy_namespaces+0x144/0x190
[  160.724958][ T7706]  ksys_unshare+0x532/0x890
[  160.724980][ T7706]  ? __pfx_ksys_unshare+0x10/0x10
[  160.725003][ T7706]  ? rcu_is_watching+0x16/0xb0
[  160.725045][ T7706]  __x64_sys_unshare+0x38/0x50
[  160.725064][ T7706]  do_syscall_64+0x166/0x520
[  160.725085][ T7706]  ? trace_irq_disable+0x3b/0x140
[  160.725113][ T7706]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  160.725134][ T7706]  ? clear_bhb_loop+0x70/0xc0
[  160.725159][ T7706]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  160.725180][ T7706] RIP: 0033:0x7f7b1699fb19
[  160.725200][ T7706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  160.725218][ T7706] RSP: 002b:00007f7b178d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  160.725240][ T7706] RAX: ffffffffffffffda RBX: 00007f7b16c25fa0 RCX: 00007f7b1699fb19
[  160.725256][ T7706] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000400
[  160.725269][ T7706] RBP: 00007f7b16a37b70 R08: 0000000000000000 R09: 0000000000000000
[  160.725282][ T7706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  160.725294][ T7706] R13: 00007f7b16c26038 R14: 00007f7b16c25fa0 R15: 00007ffc228f6948
[  160.725331][ T7706]  </TASK>
[  160.727274][ T7709] loop0: detected capacity change from 0 to 1024
[  160.844918][ T7709] hfsplus: catalog record size mismatch (type 3, got 26, expected 10)
[  160.845031][ T7709] hfsplus: failed to load root directory
[  161.380600][ T7719] loop3: detected capacity change from 0 to 1024
[  161.430433][ T7719] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  161.548519][   T32] usb 6-1: new full-speed USB device number 6 using dummy_hcd
[  161.598032][ T7727] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000
[  161.598064][ T7727] flags: 0x17ff00000002000(reserved|node=0|zone=2|lastcpupid=0x7ff)
[  161.598101][ T7727] raw: 017ff00000002000 ffffea0004200008 ffffea0004200008 0000000000000000
[  161.598119][ T7727] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[  161.598131][ T7727] page dumped because: unmovable page
[  161.598159][ T7727] page_owner info is not present (never set?)
[  161.624598][ T5645] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.704929][   T32] usb 6-1: New USB device found: idVendor=056a, idProduct=5012, bcdDevice=0.00
[  161.706000][   T32] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  161.706029][   T32] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  161.706064][   T32] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.709633][   T32] usb 6-1: config 0 descriptor??
[  161.952636][ T7739] netlink: 24 bytes leftover after parsing attributes in process `syz.6.538'.
[  162.067567][ T7735] loop3: detected capacity change from 0 to 32768
[  162.070106][ T7735] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.537 (7735)
[  162.099558][ T7735] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  162.099593][ T7735] BTRFS info (device loop3): using crc32c checksum algorithm
[  162.135257][ T7717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  162.138822][ T7717] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  162.191110][   T32] wacom 0003:056A:5012.000A: ignoring exceeding usage max
[  162.220512][ T7735] BTRFS info (device loop3): enabling ssd optimizations
[  162.220541][ T7735] BTRFS info (device loop3): turning on async discard
[  162.220557][ T7735] BTRFS info (device loop3): enabling free space tree
[  162.266894][   T32] wacom 0003:056A:5012.000A: Unknown device_type for 'HID 056a:5012'. Ignoring.
[  162.293169][ T7735] BTRFS info (device loop3 state M): use zstd compression, level 15
[  162.434736][ T2259] usb 6-1: USB disconnect, device number 6
[  162.560053][ T5645] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  162.926985][ T7776] loop6: detected capacity change from 0 to 164
[  162.997330][ T7776] isofs: Unable to find the "." directory for NFS.
[  163.036134][ T7780] loop1: detected capacity change from 0 to 512
[  163.106991][ T7780] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  163.107104][ T7780] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  163.435903][ T7795] loop3: detected capacity change from 0 to 2048
[  163.457025][ T7795] NILFS (loop3): invalid segment: Magic number mismatch
[  163.457051][ T7795] NILFS (loop3): trying rollback from an earlier position
[  163.496158][ T7795] NILFS (loop3): recovery complete
[  163.499473][ T7798] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  163.682473][   T33] audit: type=1800 audit(1793656251.864:11): pid=7795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.556" name="file1" dev="loop3" ino=12 res=0 errno=-22
[  163.731887][ T7801] NILFS (loop3): nilfs_dat_move: invalid vblocknr = 9, [0, 0)
[  163.731920][ T7801] NILFS error (device loop3): nilfs_bmap_assign: broken bmap (inode number=3)
[  163.754696][ T7801] Remounting filesystem read-only
[  163.754758][ T7801] NILFS (loop3): error -5 cleaning segments
[  163.918977][ T7791] loop5: detected capacity change from 0 to 40427
[  163.927887][ T7791] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  163.927911][ T7791] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  164.210667][ T5640] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.247656][ T7801] NILFS (loop3): error -30 cleaning segments
[  164.293053][ T7808] netlink: 'syz.0.559': attribute type 11 has an invalid length.
[  164.373967][ T5645] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer
[  164.419737][ T7791] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  164.437091][ T5645] VFS: Busy inodes after unmount of loop3 (nilfs2)
[  164.437353][ T5645] ------------[ cut here ]------------
[  164.437362][ T5645] kernel BUG at fs/super.c:733!
[  164.437391][ T5645] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
[  164.460389][ T5645] CPU: 0 UID: 0 PID: 5645 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  164.471419][ T5645] Tainted: [L]=SOFTLOCKUP
[  164.475736][ T5645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  164.485867][ T5645] RIP: 0010:generic_shutdown_super+0x2ca/0x2d0
[  164.492029][ T5645] Code: 03 42 80 3c 28 00 74 08 4c 89 f7 e8 40 bb eb ff 49 8b 16 48 81 c3 c0 06 00 00 48 c7 c7 20 4f 40 8c 48 89 de e8 b7 cb d2 fe 90 <0f> 0b 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  164.511639][ T5645] RSP: 0018:ffffc900040efd10 EFLAGS: 00010246
[  164.517729][ T5645] RAX: 0000000000000030 RBX: ffff88803528c6c0 RCX: ad1a77ef303df100
[  164.525693][ T5645] RDX: 0000000000000000 RSI: 8000000000000000 RDI: 0000000000000000
[  164.533757][ T5645] RBP: 1ffff11006a518fa R08: ffffc900040efa87 R09: 1ffff9200081df50
[  164.541827][ T5645] R10: dffffc0000000000 R11: fffff5200081df51 R12: 0000000000000000
[  164.549834][ T5645] R13: dffffc0000000000 R14: ffffffff907288a0 R15: ffff88803528c7d0
[  164.557984][ T5645] FS:  00005555644a0500(0000) GS:ffff8881233ff000(0000) knlGS:0000000000000000
[  164.566908][ T5645] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  164.573487][ T5645] CR2: 00007f5e99bee7d4 CR3: 00000000639ec000 CR4: 00000000003526f0
[  164.581458][ T5645] Call Trace:
[  164.584736][ T5645]  <TASK>
[  164.587671][ T5645]  kill_block_super+0x44/0xa0
[  164.592356][ T5645]  deactivate_locked_super+0xbe/0x110
[  164.597728][ T5645]  cleanup_mnt+0x204/0x2a0
[  164.602141][ T5645]  task_work_run+0x1d9/0x260
[  164.606829][ T5645]  ? __pfx_task_work_run+0x10/0x10
[  164.611953][ T5645]  exit_to_user_mode_loop+0x204/0x770
[  164.617336][ T5645]  ? rcu_is_watching+0x16/0xb0
[  164.622110][ T5645]  do_syscall_64+0x328/0x520
[  164.626700][ T5645]  ? trace_irq_disable+0x3b/0x140
[  164.631723][ T5645]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.637792][ T5645]  ? clear_bhb_loop+0x70/0xc0
[  164.642466][ T5645]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.648349][ T5645] RIP: 0033:0x7f7b169a0d57
[  164.652783][ T5645] Code: a2 c7 05 9c a9 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  164.672384][ T5645] RSP: 002b:00007ffc228f5bb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  164.680788][ T5645] RAX: 0000000000000000 RBX: 00007f7b16a36fb3 RCX: 00007f7b169a0d57
[  164.690993][ T5645] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc228f5c70
[  164.700096][ T5645] RBP: 00007ffc228f5c70 R08: 00007ffc228f6c70 R09: 00000000ffffffff
[  164.708074][ T5645] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc228f6d00
[  164.716048][ T5645] R13: 00007f7b16a36fb3 R14: 0000000000028165 R15: 00007ffc228f6d40
[  164.724033][ T5645]  </TASK>
[  164.727042][ T5645] Modules linked in:
[  164.733167][ T5645] ---[ end trace 0000000000000000 ]---
[  164.750061][ T5645] RIP: 0010:generic_shutdown_super+0x2ca/0x2d0
[  164.750102][ T5645] Code: 03 42 80 3c 28 00 74 08 4c 89 f7 e8 40 bb eb ff 49 8b 16 48 81 c3 c0 06 00 00 48 c7 c7 20 4f 40 8c 48 89 de e8 b7 cb d2 fe 90 <0f> 0b 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  164.750120][ T5645] RSP: 0018:ffffc900040efd10 EFLAGS: 00010246
[  164.750138][ T5645] RAX: 0000000000000030 RBX: ffff88803528c6c0 RCX: ad1a77ef303df100
[  164.750152][ T5645] RDX: 0000000000000000 RSI: 8000000000000000 RDI: 0000000000000000
[  164.750165][ T5645] RBP: 1ffff11006a518fa R08: ffffc900040efa87 R09: 1ffff9200081df50
[  164.750180][ T5645] R10: dffffc0000000000 R11: fffff5200081df51 R12: 0000000000000000
[  164.750193][ T5645] R13: dffffc0000000000 R14: ffffffff907288a0 R15: ffff88803528c7d0
[  164.750208][ T5645] FS:  00005555644a0500(0000) GS:ffff8881234ff000(0000) knlGS:0000000000000000
[  164.750225][ T5645] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  164.750239][ T5645] CR2: 00007f21d79f72f8 CR3: 00000000639ec000 CR4: 00000000003526f0
[  164.750259][ T5645] Kernel panic - not syncing: Fatal exception
[  164.851685][ T5645] Kernel Offset: disabled
[  164.856005][ T5645] Rebooting in 86400 seconds..