last executing test programs:

3m28.24436715s ago: executing program 0 (id=10):
syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042402024424"], 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400080000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="d4000000090601080000000000003100000000800008800c000780060004404e2000000c000780060004404e2400000c00078008000940000000051000078008001b400000000000000b98180007801400170076657468315f766972745f7769666900100007800c00028008000140e0000001100007800c0018400000000000000000100007800a001100ffffffffffff00003400078018000180140002e2fc010000000000000000000000000001060004400e1f000006001d4000060000060005404e220000"], 0xd4}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) (async)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="d4000000090601080000000000003100000000800008800c000780060004404e2000000c000780060004404e2400000c00078008000940000000051000078008001b400000000000000b98180007801400170076657468315f766972745f7769666900100007800c00028008000140e0000001100007800c0018400000000000000000100007800a001100ffffffffffff00003400078018000180140002e2fc010000000000000000000000000001060004400e1f000006001d4000060000060005404e220000"], 0xd4}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)
syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000000000)=ANY=[], 0x0)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) (async)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000007640c15da00000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085000000a0000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc1cf8d9cdff37140, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000007640c15da00000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085000000a0000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc1cf8d9cdff37140, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x0, 0x0, &(0x7f0000000a00), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x0, 0x0, &(0x7f0000000a00), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYRES16, @ANYBLOB="01002abd7000d164dc024c656e"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162756aa5e8d7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x40011) (async)
sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162756aa5e8d7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x40011)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, r8)

3m27.215860065s ago: executing program 0 (id=13):
r0 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00)
ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, 0x1000}) (async)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000040)={<r2=>0x0, 0x9b, "db5c87ba438be00df3efa5bcff73fa34b682d912e53094fb46b60ac3afdd16fd13af2322f9b4b92b5690ce6549d98cb0c2995a059c6724c5f586b458ee98f71ff8e80cdb0a4bc930e45389bc30f7726d22b66dcdb835f6005a1f17f4a33c55a14e328b902291c7df58eecb4ab5d78e9a0e488f96ed2b9def1afd1646de3c77c60618a4c99e7be303b37a3b5a10e7acd6c7e73ff189fa22ec7f1c0c"}, &(0x7f0000000100)=0xa3)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={r2, @in={{0x2, 0x4e22, @local}}, 0x4, 0x9, 0xfff, 0x5, 0x2, 0x4}, 0x9c) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'nicvf0\x00', <r3=>0x0})
getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f00000003c0)={'filter\x00', 0x0, 0x4, 0xc2, [0x9, 0x401, 0xd2d, 0x2, 0x9, 0x194], 0x7, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000002c0)=""/194}, &(0x7f0000000440)=0x78) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{0x1, <r4=>0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)}, 0x20) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000780)={'syztnl1\x00', &(0x7f0000000700)={'syztnl1\x00', <r5=>r3, 0x29, 0x40, 0x2, 0x9, 0x40, @private0, @mcast2, 0x20, 0x10, 0x5, 0x401}})
r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0), 0x4) (async)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000880)={{0x1, 0x1, 0x18, <r7=>r1, {0x9}}, './file0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xd, 0xf, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xce15}, [@exit, @generic={0x4, 0x2, 0x5, 0x9, 0x8}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @ldst={0x2, 0x1, 0x2, 0x2, 0x5, 0xffffffffffffffe0, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xc}]}, &(0x7f00000005c0)='GPL\x00', 0x400, 0xc4, &(0x7f0000000600)=""/196, 0x41000, 0x3b, '\x00', r5, @fallback=0xc, r6, 0x8, &(0x7f0000000800)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0xd, 0x4, 0x5e}, 0x10, 0x0, r7, 0x5, 0x0, &(0x7f00000008c0)=[{0x0, 0x1, 0x9, 0x3}, {0x5, 0x5, 0x8, 0x4}, {0x5, 0x3, 0x9, 0x3}, {0x3, 0x2, 0x3, 0x2}, {0x4, 0x3, 0x2, 0x5}], 0x10, 0x80000001}, 0x94)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000a40)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000a00)={<r8=>0xffffffffffffffff}, 0x13f, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r7, &(0x7f0000000a80)={0x4, 0x8, 0xfa00, {r8, 0x2}}, 0x10) (async)
setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000ac0)={0x5, 0x40, 0x8, 0x3, 0x3, 0x5, 0x8, 0x85, 0x2, 0x0, 0x3, 0x0, 0x3, 0xa}, 0xe) (async)
write$P9_RUNLINKAT(r7, &(0x7f0000000b00)={0x7, 0x4d, 0x1}, 0x7) (async)
r9 = openat$random(0xffffffffffffff9c, &(0x7f0000000b40), 0x40000, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r9, 0xc0096616, &(0x7f0000000b80)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async)
sendmsg$OSF_MSG_REMOVE(r7, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, 0x1, 0x5, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x800) (async)
r10 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2000, 0x0)
ioctl$SNAPSHOT_PLATFORM_SUPPORT(r10, 0x330f, 0x5) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f00)={0x18, 0xb, &(0x7f0000000d00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x86, 0x0, 0x0, 0x0, 0xb}, [@generic={0xc5, 0x4, 0x6, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000d80)='GPL\x00', 0x80, 0x4c, &(0x7f0000000dc0)=""/76, 0x41000, 0x13, '\x00', r3, 0x0, r7, 0x8, &(0x7f0000000e40)={0x6, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000e80)=[r4, r4, r7], &(0x7f0000000ec0)=[{0x3, 0x5, 0x7, 0x5}, {0x3, 0x1, 0x5, 0x2}, {0x2, 0x5, 0xb, 0xa}, {0x3, 0x2, 0xa}], 0x10, 0x3}, 0x94)
ioctl$sock_ifreq(r1, 0x7f, &(0x7f0000000fc0)={'dvmrp0\x00', @ifru_names='batadv_slave_0\x00'}) (async)
ioctl$DRM_IOCTL_AGP_ACQUIRE(r7, 0x6430)
fdatasync(0xffffffffffffffff) (async)
r11 = syz_init_net_socket$llc(0x1a, 0x0, 0x0)
pwrite64(r11, &(0x7f0000001000)="405387ddfe1c5a037958664718a5e5873843cbfbe7f299ae06ea25d0480ef110b9c435602677ed9319604e8c8c6ed881f0fb4b1dd3eaa86cc00642a7fd9008f428c9b395fa345a4d8bcf8d31d0988d65d6aed624bcd09c1d2c692b6829b1b967b8df196e0a61f35f56d10feb8dd0c559aa51b555adf08b7c", 0x78, 0x171) (async)
r12 = openat$cgroup_ro(r9, &(0x7f0000001080)='pids.events\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_VERSION(r12, 0xc0406400, &(0x7f0000001200)={0x3, 0x0, 0x1, 0x44, &(0x7f00000010c0)=""/68, 0x0, &(0x7f0000001140), 0x78, &(0x7f0000001180)=""/120}) (async)
close_range(0xffffffffffffffff, r4, 0x2)

3m25.224349208s ago: executing program 0 (id=18):
syz_mount_image$bcachefs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x801, &(0x7f0000005b00)={[], [{@seclabel}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x31, 0x65, 0x35, 0x33, 0x32, 0xa, 0x6c], 0x2d, [0x62, 0x33, 0x36, 0x39], 0x2d, [0x36, 0x37, 0x62, 0x39], 0x2d, [0x62, 0x39, 0x34, 0x32], 0x2d, [0x66, 0x31, 0x37, 0x66, 0x66, 0x65, 0x65, 0x64]}}}]}, 0x0, 0x59c2, &(0x7f0000005b40)="$eJzs3X+QHNV9IPDXM7Pa2V39WAkIMpjVIlBCILZW/Cpsp2Ill9gpIJRcpBzEyYYFrYhsSagkYUDgIHLggwJcOOVUgpM/iAtzh624qIKLkSkTfpzEGWyKi4+6wtTZd9h15yvCoQqgoyif92p3+s3O9kxvz87OCkl8PiVtT7/p+b7Xr9/09PfN7E4AAADgfeHA7TsPXXLSHzz352Nv3/KH3916axgoT5ZX4waD6fKGxkcNPnGYm8lh0ltZviC0GBe/cdM3fz589e99/+H+b7yzf+Opm378+8dd/fjnLtx339889daiR3/1alHcOJ7OnFpPXk9CqH7v4F9+af/zJ06UJSGEcjK4J4SlybKnliaZECPvhhA2pivlyvQ7H3n7nE0Ty1vv6p1WviQTpLPxzrGimo6z3YeuPyv85HfX3/bDFd/++569r+2Z2iSpNoynEBZf2fj4nhBCX/p/Qhxty+OD0+W6EEJ/w+MuKGjXaW22f3XO+snpckG6LBXEGUiXKzPr2cflxenJLPsL6purov2Z7XZFFmbWsyejucprZyxfmi6/ky7PnGX8cvyfhFISKvXmb0mmxsjEBvG4JSGZPJbV+nppart0/3umryeZ9VJmvdyT2a/JeOlAKyfJ9PK4XaY8no4rafmpoaGwhUtzyj+QLqvpE/WduB6yN2oGmm7U9ys0NuFgflMOi1LDOahVef3ApwdjIC0bSJY1PWa8hXjf/vV3rypvePpAXtcnDydp/KSj+Lt/sHThZ79153XL8+JfWUrjlzqK/9OLXnjj8ju//rXc+PfG+OWO4p/9RP/rFz1z+8rc/jkY+6eSiV9qK/7oq8/es+L4q/bmtv/+GL/aUfvX7nuhd9GhJ57Mbf9I7J++tuOXGuK/8rFP/Oyhlx57LTd+iPH70/g9s2r/hn3bv9w7dOiM3PhPxv4Z6Gz8vLn3/JeHhn4xnBf/xRh/UUfxH9xz30cfWHLXhbnHd13sn8GO4l98+uO3LTz02CnVvPj3d+uVE+D96bj0GuuOdL3TPHOuGvKFvx6u1K75Fqb/F3WzooyJehbPY3wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3p9OOOs/ffJ/fHrw9Uq63pveeKVUW8byBSEkfSGEnbtGd+zavO2a4c9de92ObaNbhkd3DY9t27XjxuFzf2t4x9j2LaM3Ttw78qFzao9bFpLaMjmlqe7x8fHx0uD0sljfvzp9709WXfC//zmEkRN+NFTJbf/q+7Y+cHyLnxnJ2vGPb73ukh+d93fpfg2m7RrMaVfIadf/ueyXD/zFwZ+fEcLIr83Urmdf+Z1/nNagyYKpOKlSb6g1qDfpb9mOeqvT9sT+qmzavGVspLh/yzn78a9veu3dTTd85Ze1/q3m7keb/du3dnxL6a/WX/z//urmWsGRetyL+jvuRWxf7L9q2t+L0/1anLNflZz9uv2HT770vZPufGtPGKm8uaK57qL96kkHQE/ygbbqjTX0J0unlVfT7eMRj49bvWvr9tU7b9z9oc1bR68Zu2as9JE15645f+S8889bPbnnq7u8/7H+X29z/w/PeFryhT3fiT/bG09F7Srqj4l2FfdHY4vynn/9l37pqx+575lLagVF4zxuXT+fpMv+ieO8JjSMt+a+arVfRf0QQhhu1Q9vvHVhOPG/br6t6DzUeGQaf2Yka8efX/kvf3fB3y7/7VrBYTnPNzaow/N8vdVT7Znsr2p6POa1f0ud929vKKf7NdCyXWuef6bn7gP//MV6+xYsCDeM7tq1Y03t58K0pQuTk1s2LVsa92vF5M9ySLsl1Idpi/E6oSfU2pc9f8bNs706kN43kCxruV9Z8b796+9eVd7w9IG8kZw8XKuxLyyqLZMP5my5JfPAcr3Breo/op5/SfvjY+iTf/vopx/9h3ObxsfZtZ9F+5Xk7Ne3X3rwq9/4yr/9h+7t1yd/54XBf/lvf7qqVnC0nFfqrU7bkzSeV84Ooej5tyK03o/c51+p9f4UPf+y9Uxt3zrecGZ9IJQ7er6e/UT/6xc9c/vK3OfrwXafrzdPWysXPF+PlPHz3j2/pg2UZO349+84bs9Tt6w7qVZQNK7rW7ca1+e0eL18d+rAT14v5uzXP17+8tC1w//mv3TvvPHN33rkih+Prv2zWsGRctyraf9Wc/q33uqYdzb274evvnbLxlr5kXv9my4L8p94Ktl54+7Pj27ZMrZjZ3v71e7raawn28udXm/Fs9uygv0qNe3X/N1op7/afb7F9m/suL+mP98GQtLR68LuHyxd+Nlv3XndYNOj0oquLKXxSx3F/+lFL7xx+Z1f/1pu/Htj/EpH8UdfffaeFcdftTc3/v1JGr/aUfy1+17oXXToiSdz44/E9vd1FP+Vj33iZw+99NhrufFDjD/QWf+/uff8l4eGfpEb/8UkrWfiGimER94+Z1NtPQk96fMttqNnWrtCdj3JrJcy6+XG9VJtrrVeQTlJppfH7dLyUxva0sqf5JTHq7Dq8trynbgesjdmLj/SlBrO/a3Ki65TAQCOdfH9/3gNGt//H0svlPJnGmDKXPOw5TlxYx42NZ+zYNr9y9P48fFxHnDow2FkYnnrcC3/n+08Z3w+ZOc5Yz1nnDY9RqfznEXz7ysz67FdtfnySkMemmrOayqhjfn35npmnn/P7H7x/PjwHU3NGm6Yt8oev550xqzV5x0y7a1MRMgbH9l5sfh5jqHFYd1kfcO1Dpvt52jicch+jibWc1LmxNnp52jmOj5is2cYH5NNLn5/o/n4hRn6d+r4tY6WPX7tHe8vplWOj8/3+7NH/7zh/L4f1mJecmE78d8v85JH+rxhLI/7UWlzPvHTOeXdmk+Mp4vYroMztOVwMJ8IHKti/h9fIyby/4kL8P+b2a7oOjR71Rjj5X5OqNy6PUV5R/Pn9Po7eh3fsG/7l3uHDp2Re53zZMHnfurn++3TivsLPvdT1I+rMuuF/ZgzQVOU72XrKer37OcyBsKijvr9wT33ffSBJXddmNvv62odW5yPfHXa2qKCfpcv5MR/7/KFpvg9LeK/X/KF+Z4/e8/ykfSDT/OVj/xxTvls85H+phv1/Zp01OUjPYe3XQDA0SPm//X3z9L8/79ntivKW8/MrMd4uXlrzvVJXt76R+nyhsz2A+lvVMz2uvni0x+/beGhx07JzVvubzcP/ffT1gYL89C55c25ecS67nxePDePqOdZc8sTc9tfzxPnlqfnxq/n6XPLo3P7p55Hz20eIDd+fR7gaM9zi+br+qbVFO9rd77u8ObR4/XT2bzn0emvz85XHn1pTvls8+iBphv1/ZokjwYAeG/F/D9exsX8/5nMdnN9nz03L8hct7e6Rm3nuj3790Dq8V88XHnlfOd98523zjKv/3f/q3Zn23n9fM9LvCd58YKi+O3nxfM9LzS/82Tv2fvL8uKukhcDABzbYv7fl67n5/9zy09y87d6fiI/bxm/MT/P+QjCTPHbf9/9mMzPC+N3733r1vFnO//V6fvWxfNfR03+Xwry/8Oi1a/6yP8BAI5tMf+Pv/YY//7ff0zXs3+3Xp6eE79Lv0d9FOTpCxqrivfJ05vjvxw6ydPne57tqJkHiOvtzQOkf4/DPEB3mAcAADi29ExmSs2/Z/+ZdJn9Pfu838u/PGf7dlUmf8c+hKt27Rgbu+K67RtHd41dse3ajWM7r7h+x+Zdu8a21bablje+M/2PrbaTN+bmLWni0BMqaX+03i6bty1J/x7Ckpy/h5DdPoY9efJG899DyFbbV/B3BKaOX3vtzTt+pRm2bzU+8o53Xvw/ydk+qh//q//07Cs27bxi87bNuzaPbtm8e2z6dhNZa/8svjczdsusvjcz86NJafbf39mddpSa2tGT9kfe97MnmXYsTVuyNO/7D3La/dx//osvnD7+y4dCGDmh/ME59V+ydvw/XDb2R7sO/Gj7RPtLM7a/vmXarqLvK81uH/ensuXanbvO2nTtdduy3yjZmTifUaqvz9N8Rvr0L0+fn8jNtjfklM92fqLcdOPI1Pb8BAAA08T3/+P1bHz/8CvpBVQsbz9Pn9vnvHPz9JHmPL2vxXbZ7yUrytOz28f9bTdPr84xT8/WX5Snt9q+VZ6el3fnxf/jnO1nq/1xMrfPeeSOkyvbm8/Jfp9B0TjJbj/bcZLkjZP6m9Qzj5Ns/UXjpNX2rcZJ3nHPi/+pnO3ztD8e5va5nNzxcG974+E3M+tF4yG7/WzHQ2mO541s/UXjodX2rcZD3vHNi39Jzvbtmj4+JgbG5LgYu+L6a3d8vmG7+f7+i7m3b36//6NT7bd/fn8/a/7bP7+fK5v/9ud/rmxPi12I98XPleW2/8W5zYS13/65fS6x6PtdOnXY5mvT1/Giz58Vfc5sfU75bOdxFzTdODKZx4X3Tsz/49s9Mf+/K112+22go/970ub3de7o/z35uf0ee9F1TNdez6fSr8P0ej79mXTsvp7v/ULrcq/nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI16K8srE8sDt+88dMlJf/Dcn4+9fcsffnfrrb9x0zd/Pnz1733/4f5vvLN/46mbfvz7x139+Ocu3Hff3zz11qJHf/VqYeDB2uLMdLUaQvJ6EkL1ewf/8kv7nz9xoiwJIZSTwT0hLE2WPbU0yUQYefe5EDbW2zn9zkfePmfTxPLWu3qnlS/JBMnuVxgo14Jn2hluKNwjjkLVdJztPnT9WeEnv7v+th+u+Pbf9+x9bc/UJkm1YTyFsPjKxsf3hBD60v8T4mhbHh+cLteFEPobHndBQbtOa7P9q3PWT06XC9LlQEGceP/KzHops112PerJLPsL6purvHZ0ul2RhZn17MlorvLaGcuXpsvvpMszZxm/HP8noZSESr35W5KpMRIajlsSksljWa2vl+rHNqT7n1lPMuulzHq5J7Nfk/WmAy1JkunlcbtMeTwdV9LyUxva2MqlOeUfSJfV9In6TlwP2Rs1A0036vs1Kbbr4AxtORxKDeegVuX1A58ejIG0bCBZ1vSY8RbiffvX372qvOHpA4M57UgeTtL4SUfxd/9g6cLPfuvO65bnxb+ylMYvdRT/pxe98Mbld379a7nx743xyx3FP/uJ/tcveub2lbn9czD2T09H8UdfffaeFcdftTe3/ffH+NWO4q/d90LvokNPPJnb/pHYP30dxX/lY5/42UMvPfZabvwQ4/d3FH/Dvu1f7h06dEZu/Cdj/wx0Nn7e3Hv+y0NDvxgODS/+jfFfjPEX5cT/nzPGf3DPfR99YMldF+Ye33WxfwY7av/Fpz9+28JDj52Sd+5M7u/WKyfA+9Nx6TXWHel6p3nmXDXkC389XKld8y1M/y/qZkUZE/Usnsf4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcm/7p5nM/c9nHP7W+koSQ5Gwz3kK8r7xg7drhDuodffXZe1Ycf9XexrLlHcQBAAAAisU8vFQvqYbl4fqkL5zccvs4R3ByXEsay5OmOYQYpzSrOM1zEd2OU+5SnEqX4vR0Kc6CLsXp7VKcakGcamgvTt+McUptt6e/S3EGuhRnYTZOX2dxFnWpPYu7FGdJl+IMzhin/XG4tEtxlnUpznFdinN8l+Kc0KU4v9alOCd2KU52Tnm243BRuuVJeXGSdG3PzHEqSbl+R6v59FjPKTPWUy5s70CtnmpRPdk5+9nW09fm/pyWeVxplvVU26zn1+dYT9JmPb85x3pKBfXEcXtDtn2xnrjW5vi/sUtxdofw3VIX4tzUpfbc3EmcnuY4X+xSe/6sS3FumWMcgHbF/H8q3xsMvZXfDv3pGSc7CxDz3RWTP5tf7/JOSDHeBzPlC4riZRP1TLwVs21fdgIhE29lprxnWrxKPR+ZIV61Md6qzJ2F+5udUMi078xMeW9RvOzEAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADMo3+6+dzPXPbxT60PSZj419J4C/G+8oK1a4c7qHf/+rtXlTc8faCxrLfSQSAAAACgUMzDe+ol1dBbWRN6kwXTtquGEMYXjY9X0/XyYG05tDism1gmw6XJ9f5kafPjxqceV0kft3rX1u2rd964+0Obt45eM3bN2LaPrDl3zfkj551/3upNm7eMjdR+htBbEC+EMDn9sPPG3Z8f3bJlbMfOWmG2/cvTxy1P15P0cUMfDiMTy1vT9i8rqK/UVN/83Sg+egAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw/9m1uxC5zjIAwN+ZmZ2ZbBu70h+nodkO+SlRiyZxK6mW7gHBQpuELgWZqa4l2ASLmyakSYl1bAO2NUERWgIhkptILLYWb/pji9g2BCI1GnBjkLZoL/RCabWSllyUlJHszpmdOZnZ2Qw1G+vzXJyf93u/7z3fuVh4zywAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAhTVZGxmvjI5VB6MQoi459Q6SsWw+jst91P3ai1t/VBg+vaI1Vsj1sRAAAADQU9KHDzQjxVDIZUM2XD11tyS0DISZvh8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPj/M1kbGa+MjlUviUKIuuTUO0jGsvk4LvdR9813n/78a8PDf2+NlfpYBwAAAOgt6cMzzUgxlMLSMBBd3ZaXfBtYlJqfzkvWWTzHvPS3g255S1N573fJu26O632yR976xnlnAAAAgP99Sf+fa0aGQiG3sGv/36uvT/KuTeVlG8fyuakAAADAf1nS/xeakVIo5EqNfn3u/f6SVF4yP/27fef5UVjeZX6v3/PXNc6z/04/NusoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBhTdZGxiujY9VsFELUJafeQTKWzcdxuY+6q18a/OdtRx5Z0hor5PpYCAAAAOgp6cNnWu9iKOQGw0C4ZKrvH77lwLNfefb5kRDCdJufz4ezudtW79ywffu21UneqmNHBn549O3vtuZNZayaPs7bBgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgA/NZG1kvDI6Vl0QhRA1owvacuodJGPZfByX+6j7xhe//NcnT77wVmus1NcOAAAAgF6SPnym9y+GUsiHfLhq6q611z8rk5ofXZjHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAObRfd9+4FsbJiY2bnPh4kJc5C+Ox3DR62K+/zIBAAAftmtDFOrnqTjfDw0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFwUJmsj45XRsWoxCiHqklPvIBnL5uO43Efd+MXjhYWnX3qlNVbqYx0AAACgt6QPn+n9i6EUBsJAuHLqrtM3gan+f+gCPiQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwUZmsjYxXRseqC6MQoi459Q6SsWw+jst91H1i1/4vHLrsB7e2xgq5PhYCAAAAekr68HwzUgyF3KdCIVzTuJ9onxBlG+fO3wVm5m1tmzY453m1tnnZOc/bndpZrrGb6XnFZL2h6XNzXvnceeWWeaXQLF9umxf2ts1a2OM5AwAAAMyjpP8vNCNDoZArtPS5P2vLH9LnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABdTNZGxiujY9UoCiHqklPvIBnL5uO43EfdB3738Uu//vM9O1pjpT7WAQAAAHpL+vCZ3r8YSmFx+FhYPNX3h6H2/CTvX5Uzhx7/999WhLDyqhPDua7r/+aNm19OH0LItCdlQrisUS/qUu+3f3j8/mX1M0+GsPLK7DXnW699ybj+XGXjuu1HT2yd5cUAAADAR0jS/w80I0OhkLu3a/+fdN7n1f9fdv+uX17RODY68tSMzFCj3uGFnet9adnTf1m+5h9vn+3/Z6v32f2bD13RVnA6khLF9dHNO9afuOFgJtn1dP1sar/Je/nqd956f9POx85M1y+GYiO+KNep/rnHlAVxfSKzr7r2g3219vq5Lu/7kd+/cvLXi/a8d7b+u9cONutfN8v+Z68/eMeje2/cf2R9e/0QQrlT/XfeuzV84k/3PJze/2Bq4enKmZb3P31MieL6sSWnDq45ULqpvX6Uqp+8/1+cfGLvTx/7/vNJ/eR/RVYs7VT/3GPqm1MU11/dffmuww/dvqi9fqbL/l++87XhLeXv/TG9/7s77r9T/fT+n7r+mbte3xA/mB4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4aJmsjYxXRseqmSiEqEtOvYNkLJuP43Ifdd+87fg7d+75yY9bY6XZpyzoowwAAADQ0ofP9P7FUAr5kA+DU33/c5WN67YfPbE1DE2PRo1zbmLLfds/vWnLjnvvnqcnBwAAAOYq6f9zzchQKOSWhYFG/z+6ecf6EzcczCT9fybp/zfdM7FxZWjmvbr78l2HH7p9UfM7QQhT/xZQPJv3uZm8W24+PnTqz99c3jFv9UzesSWnDq45ULopyQuteatC8/vEU9c/c9frG+IHm8/XmveZb2yZaHyeSNYdvOPRvTfuP7K+uY/GebCxbpI3kdlXXfvBvlqSl22ci419AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADnmqyNjFdGx6ohG0LUJafeQTKWzcdxuY+6a5f96uFLT7+wuDVWyPWxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwH/YgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwn79hUhVxXEAP3dmtx13dnVXg6xoXa0o7CEpiKiXiorQCKEnQ8LSfIiCIKKwh9bQSKzoJch6kaig2kIoyE0SLdbon/jSQwUF1kMg0kK5SA8Zs3PO7Mx1b7PctqD6fGA493fm3u/93XuP11kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5V+nqWz4xHdj48fccFt3z25H2nnrjtgwe3X/b4mz+Obr7p0339r52e3LJy6zc3L9t84P61E3tePvzr4Hu/H+8a/FhzWB3LWgjZySyE2odTLzw1+fl5jbkshFDNhsZCGM6WHh5ulGf6ZhPW/BZC2NLqszP+3VNXb22M23f3dcwvybWRv65Qr6Z+moY6++W/pRbX2bbpR68I3924YceXK955u3f8xNjsLlmtbT2FsHhT+/G9IYRF8dOQVtvydHAc14cQ+tuOu7ZLXxfPs/8rC+oL43hOHOtdctL3q3J1Jbdfvk56c2N/l/MVq85rr6I+yu7XzUCuzhYoNynqM80Px/H9ODbfm0Pzzq+mTxYqWehptf9ANrtGQttzy0I28yxrrbrSerYhXn+uznJ1JVdXe3PXNXPeuNCqWdY533CscWDnfLrinji/sv1dPYc7C+bPj2Mt/kM9neqQ32iqn7XRuq4Zqa+pP+nln1BpewfNNd968PFh1ONcPVt61jFn5pC+m9zwzKXVjR8dKVqB2b4s5mel8rd9MTxw91u7HllelL+pEvMrpfK/X3f057t2vfJSYf7zKb9aKv+qg/0n1328c1Xh/ZlK96enVP49xz95dsW5944X9r835ddK5d8wcbRvcPrgocL+16T7s6hU/rfX3/rDG1/tP1GYH1J+f6n8jRMPPdc3Mn15Yf6hdH/q5dbPL+PXfD0y8tNoUf6xlD9YKv/1sT3Xvbpk99rC57s+3Z+hUvm3X3Jgx8D0/ouK3p3Z3oX6nxPg/2lZ/I31dKzL/p35V62e3XxxtKf5m28gfgYX8kQ5jfMs/hvzAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/mAHDkgAAAAABP1/3Y5AAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeCoAAP//cbgxFQ==")

3m23.122409577s ago: executing program 0 (id=22):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000007b1e001e0000000000007a000000", @ANYRES32=0x0, @ANYRES64=r0], 0x4c}}, 0x24)
bind$netlink(r0, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfc, 0x100000}, 0xc)
syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000240)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa1008a, &(0x7f00000003c0)=ANY=[], 0x21, 0x1517, &(0x7f00000019c0)="$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")
syz_open_dev$MSR(&(0x7f0000000180), 0x5, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)={0x3c, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x26, 0x11, 0x0, 0x1, [@generic="2fe5af660e49035a45f4bfb9f42cf4a0e9ad53bc2ae54f1c14b225a0c4824cdc01ea"]}]}, 0x3c}], 0x1}, 0x0)
r2 = socket(0x10, 0x80003, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='fusectl\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@uuid_null}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'dummy0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x20000080}, 0x4001)
sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0xfffffffffffffde7, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)

3m21.901857383s ago: executing program 0 (id=25):
syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', 0x800000, &(0x7f0000000600)=ANY=[], 0x2, 0x14fe, &(0x7f0000002180)="$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")
socket$netlink(0x10, 0x3, 0x4)
mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
umount2(&(0x7f0000000040)='./file0\x00', 0x1)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', 0x800000, &(0x7f0000000600)=ANY=[], 0x2, 0x14fe, &(0x7f0000002180)="$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") (async)
socket$netlink(0x10, 0x3, 0x4) (async)
mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) (async)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') (async)
umount2(&(0x7f0000000040)='./file0\x00', 0x1) (async)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)

3m20.557629187s ago: executing program 0 (id=28):
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
msync(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x5)
mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/exec\x00')
writev(r0, &(0x7f0000000700)=[{&(0x7f00000013c0)="174d6b206b", 0x5}], 0x1)
ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000000340)={&(0x7f00000001c0), &(0x7f00000002c0)=""/68, 0x44})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10)
setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
r3 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', <r5=>0x0})
chdir(&(0x7f0000000180)='./file0\x00')
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, r5, {}, {0xffe0, 0xa}, {0x1, 0xe}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_LIMIT={0x8, 0x2, 0x1}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x55}, 0xc010)
sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f00000af000/0x1000)=nil, 0x1000, 0x1000000, 0x2000000000032, r2, 0x0)

3m19.879946553s ago: executing program 32 (id=28):
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
msync(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x5)
mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/exec\x00')
writev(r0, &(0x7f0000000700)=[{&(0x7f00000013c0)="174d6b206b", 0x5}], 0x1)
ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000000340)={&(0x7f00000001c0), &(0x7f00000002c0)=""/68, 0x44})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10)
setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
r3 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', <r5=>0x0})
chdir(&(0x7f0000000180)='./file0\x00')
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, r5, {}, {0xffe0, 0xa}, {0x1, 0xe}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_LIMIT={0x8, 0x2, 0x1}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x55}, 0xc010)
sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f00000af000/0x1000)=nil, 0x1000, 0x1000000, 0x2000000000032, r2, 0x0)

48.441142689s ago: executing program 3 (id=453):
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, 0x0, 0x4000000)
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x8090)
sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x104)
syz_usb_connect(0x3, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000ac2d8c20520c61283701010203010902240001000000000904040905080100"], 0x0)
ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece)

46.073444051s ago: executing program 3 (id=465):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0)
epoll_create1(0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)

44.684823146s ago: executing program 3 (id=472):
socket$netlink(0x10, 0x3, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffc90}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0x1f400, 0x8, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

44.357931419s ago: executing program 3 (id=475):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f00000000c0)={[{@quota}, {@bsdgroups}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x46b, &(0x7f0000000580)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
read$FUSE(r0, &(0x7f0000003440)={0x2020}, 0x2020)

43.149496089s ago: executing program 3 (id=481):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0xff, 0x4a1, &(0x7f00000004c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0xa0000, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000980)={0xfffffffffffffffd, 0x101, 0x3, 0x7})

41.842039202s ago: executing program 3 (id=487):
rt_sigaction(0xf, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000300))

41.389961266s ago: executing program 33 (id=487):
rt_sigaction(0xf, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000300))

32.662098938s ago: executing program 1 (id=512):
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40000, &(0x7f0000000180)={0xa, 0x4e20, 0x8001, @loopback, 0x627bcafb}, 0x1c)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
socket(0x2, 0x1, 0x0)
ptrace(0x10, r0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r1}, 0x4)
ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28})

31.969408087s ago: executing program 1 (id=515):
syz_usb_connect$uac1(0x3, 0x9a, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x88, 0x3, 0x1, 0x1, 0x50, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0xa}, [@mixer_unit={0xa, 0x24, 0x4, 0x6, 0x0, "3a3430908c"}, @processing_unit={0x7, 0x24, 0x7, 0x3, 0x1, 0x2}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0xf45a1a985ac14400, 0x3, 0x2, 0x6}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x306, 0x3, 0x6, 0x2}, @mixer_unit={0x6, 0x24, 0x4, 0x4, 0x5, "84"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x3, 0x3, 0x4, {0x7, 0x25, 0x1, 0x82, 0x2, 0x6476}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xe, 0x7, 0x5, {0x7, 0x25, 0x1, 0x1, 0x8, 0xa}}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0})

28.453919735s ago: executing program 1 (id=524):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_MGMT(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000440)={0x34, r3, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x710}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x1}]}, 0x34}}, 0x4000044)

26.241598993s ago: executing program 1 (id=532):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d1)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes=1'])
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xa048c5, &(0x7f0000000140)={[{@utf8no}, {@shortname_winnt}, {@rodir}, {@fat=@discard}, {@utf8}, {@shortname_winnt}, {@fat=@discard}, {@shortname_win95}, {@fat=@dos1xfloppy}, {@utf8}, {@fat=@sys_immutable}, {@utf8}]}, 0x0, 0x28b, &(0x7f0000000a80)="$eJzs3c9qE1EUx/Ffk6Z/UtpkIYKCeNCNboY2PkGQFsSAUhtRF8LUTjRkTEomViJiu3PrcxSX7gT1Bbpx517cFEFw04UYaZKxSRux1sapzfcDZU7nzpm58y+cGcjN5q0XD0uFwCm4NcXGTDFpTVtSejtqG2pPY814RJ3WdHHi64czN27fuZrN5WbnzeayC5cyZjZ19s3jpy/PvatN3Hw19XpUG+m7m18yHzdObpza/L4Qrr0iubZYqdTcRd+zpWJQcsyu+54beFYsB161Zh3tBb+yvFw3t7w0mVyuekFgbrluJa9utYrVqnVz77vFsjmOY5NJDZr4H2fk1+fn3WxfOoMojPeaWa1m3XjPxvz6v+gUAAA4WqKq/x8UAysGVq501fd76/+YqP/7h/p/EGzX/8n2/duN+h8AAAAAAAAAAAAAAAAAAAAAgP/BVqORajQaqXAa/o1KGpMU/h91P9EfnP/B1vHFvTHJf76SX8m3pq32bEFF+fI0nZC+Na+HtlY8dyU3O21Nab31V9v5qyv5uEbD/FC6d/5MK9+68xNKdm4/o5RO9M7P9Mwf0YXzYX7Ck6OU3t9TRb6Wmtf1Tv6zGbPL13K78sebywEAAAAAcBw49tOe5/dmu2PhsCG72lszd94PKPWb9wO7nq+HdXo4uv0GAAAAAGCQBPUnJdf3vWpXENsz5zgE4e8fHMoKf3XoCA4tiEk6aHr8787yZ0kJHYWDcKjBp0etO2A/C0f5qQQAAACgH8KifyjqjgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMMD2O3hYuPxBxh7r2Fw8mr0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjoYfAQAA//8pFRpx")
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1333404, 0x0)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100)

25.902276518s ago: executing program 1 (id=535):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x4, 0x4, 0x4, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r1}, &(0x7f00000003c0), &(0x7f0000000780)=r0}, 0x20)

24.485895302s ago: executing program 1 (id=539):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200002, &(0x7f0000003180)={[{@nodioread_nolock}, {@delalloc}]}, 0x1, 0x574, &(0x7f0000001980)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1da38000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
eventfd2(0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x8000000000000001)
r3 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000580)={0x8, {"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", 0x1000}}, 0x1006)

23.00107639s ago: executing program 34 (id=539):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x200002, &(0x7f0000003180)={[{@nodioread_nolock}, {@delalloc}]}, 0x1, 0x574, &(0x7f0000001980)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1da38000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
eventfd2(0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x8000000000000001)
r3 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000580)={0x8, {"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", 0x1000}}, 0x1006)

13.286360782s ago: executing program 2 (id=557):
syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000094c0)='./file1\x00', 0x0, &(0x7f0000001940)=ANY=[], 0x1, 0xc25, &(0x7f0000002580)="$eJzs3V9oXNl9B/DfmStZY22aaLOJN2mz6UBKYpTa+F9sBZcgZxW1AccbIit0n6LRHzvDyiMjyY03bYPakhb6ErovpS9FNF1ayEPpQ7ePVZotJJRCCXlIHwqCJss+9EEPgdKWjcK9c0Ya2fJau15ZsvfzMePvnTu/OzrnntGdO6AzNwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAiM9+7tKp0+mgWwEAPExXJr506myKgYNuBwDw8Fz1+R8AAAAAAAAAAAAAAA67FEUcixSDr2ykqep+R/1yq33r9uTY+O6bHU2RohZFVV/e6qfPnD33qfMXRrr55tu/0z4cz01cvdR4duHGzcW5paW52cZkuzWzMDu352d40O3vNFztgMaNF27NXru21Dhz8uyOh28PvTbwxLGhixdOnB/p1k6OjY9P9NT09b/tn36Xe83wOBJFNCPFG0Ovp2ZE1OLB98V9Xjv77WjVieGqE5Nj41VH5lvN9nL5YKrlqlpEo2ej0e4+eghj8UBGI1bK5pcNHi67N3Gzudicnp9rfLG5uNxabi20U63T2rI/jajFSIpYjYj1XSb59kcRH40UL53aSNMRUXT3wyericH3b09tH/q4B2U7G/0Rq7VHYMwOsYEo4kqk+Nmrx2Om3Gf5Fh+P+EKZr0S8XOZnIlL5wjgX8VOTxR8bfVHEv0WKhbSRZqvjQfe4cvnLjc+3ry301HaPK4/8+8PDdMiPTfUoYro64m+kt3+yAwAAAAAAAAAAAAAAAMA77WgU8e1I8UfP/E41rziqeenvuzjynud/s3fO+NP3eZ6y9mRErNT2Nie3P08dTrXy3z50jD2pRxHfyPP//uCgGwMAAAAAAAAAAAAAAAAAAPCuVsTzkeIrJ46n1aiu/XskqmuKt9rXG1eb0/Odq8J2r/3bvWb65ubmZiN1cjTnVM6VnKs513Ku54xa3j7naM6pnCs5V3Ou5VzPGUXePudozqmcKzlXc67lXM8ZfXn7nKM5p3Ku5FzNuZZzPWcckmv3AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8TmpRxM8jxbe+tpEiRcRoxFR0cm3goFsHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJTqqYiTkWLt+Xp1f7UWcTUifr65udm9RcRGmQ/qoPsKAAAAAAAAAAAAAAAAAAAAh1Yq4mOR4qn/20iNiLg99NrAE8eGLl44cX6kiCJSWdJb/9zE1UuNZxdu3FycW1qam21MtlszC7Nze/1x9cut9q3bk2Pj+9KZ+zq6z+0/Wn924eaLi63rX13e9fHB+qXppeXF5szuD8fRqEVM9a4Zrho8OTZeNXq+1WxXm6baPRpYixjda2cAAAAAAAAAAAAAAAAAAAA4NAZTEZ+LFD/5z3OpO2+8rzPn/5c694qt2pd/b/u7AObvyK7e7w/Yy3Laa0OHq4n3jcmx8fGJntV9/XeXlm1KqYinI8UnXvpQNR8+xeCuc+PLuveWdTfO5bqhXynrVnZU1Ycnx8YbVxbaJy7Nzy/MNJeb0/NzjYmbzZn8xQEre+0GAAAAAAAAAAAAAAAAAAAA7GYwFfGjSPHff/vvqXvd+Tz/v69zr2f+/29UU+gr9bQzt1Rz+99bze3vLL/v4sjgR5+51/r9mP9ftimlIr4ZKc7+6EPV9fS78/+n7qgt6/4kUrz+zEdyXe1IWdfsdqfzjNda83Onytq/jBS/+ka3Nqra67n2qe3a02Xt0Ujx5xs7a7+aaz+wXXumrD0eKb73X7vXfnC79mxZ+5NI8Y9/0+jWDpa1v5trj23XnpxZmJ+9324tx/87keKvr/xW6vb5nuPf8/0PK3fklrvG/M2X36nxH+pZt5LH9Y/z+DfvM/7nI8V36h/JdZ19P50ff7L6f3v8PxEp/uNfd9Zey7Xv3649vdduHbRy/L8dKb77Fz/e6nMe//74+/+N7RHfOf6/3Lczt14lBzT+T/asG8rtmnnru+NdZ+nFr7/QnJ+fW7RgwYKFrYWDPjLxMJTv/38aKf7/WJG65zH5/f89nXvb53//843t9/+Ld+SWA3r/f3/Puov5rKW/L6K+fONm/9MR9aUXv36idaN5fe76XPvM6VOf/vT506dOn+8/0j25217a8757HJTj/4NI8cO/++HW55it87/K7uf/g3fklgMa/6d6+7TjvGbPu+JdqRz/v4oUT372x1ufN3eO/87z/+7n/+Mf25lbv38HNP4f6Fk3lNvVeov7AgAAAAAAAAAA4FEymIr4s0jx23/466k7h2gvf/83e0duOaC//zrWs272Ic1r2PNOBgA4RMrzvw9Gin/a/P7WXO6d53/xa93a3vO/ezkM1/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBHXYoifj9SDL6ykdYGyvsd9cut9q3bk2Pju292NEWKWhRVfXmrnz5z9tynzl8Y6eabb/9O+3A8N3H1UuPZhRs3F+eWluZmG5Pt1szC7Nyen+FBt7/TcLUDGjdeuDV77dpS48zJszsevj302sATx4YuXjhxfqRTO9CYHBsfn+ip6et/2z/9Luke649EEd+PFG8MvZ6+OxBRiwffF/d57ey3o1UnhqtOTI6NVx2ZbzXby+WDqZarahGNno1Gu/soj9t+jsUDGY1YKZtfNni47N7EzeZic3p+rvHF5uJya7m10E61TmvL/jSiFiMpYjUi1gfufrr+KOKbkeKlUxvpnwciiu5++OSViS+dOnv/9tT2oY97ULaz0R+xWnsExuwQG4gi/iFS/OzV4/G9gYi+6Nzi4xFfKPOViJfL/ExEKl8Y5yJ+usvriEdTXxRxLlIspI306kB5POgeVy5/ufH59rWFntruceWRf394mA75sakeRfygOuJvpH/xew0AAAAAAAAAAAAAAABwiBSxGim+cuJ4quYHb80pbrWvN642p+c70/q6c/+6c6Y3Nzc3G6mTozmncq7kXM25lnM9Z9Ty9jlHc07lXMm5mnMt53rOKPL2OUdzTuVcybmacy3nes7oy9vnHM05lXMl52rOtZzrOeOQzN0DAAAAAAAAAAAAAAAAAAAeL7Uoqqu4f+trG2lzoHN96ano5JrrgT72fhEAAP//gMd2Mw==")
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap$usbfs(&(0x7f0000008000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x1)

11.175866056s ago: executing program 2 (id=561):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f00000001c0), 0x3, 0x445, &(0x7f0000000800)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61)
r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ipv6_route\x00')
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000540)=""/30, 0x1e}], 0x1, 0x10000000, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
socket(0xa, 0x1, 0x0)
syncfs(r3)
sendfile(r3, r3, 0x0, 0xe3aa6ea)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x1fff8, 0x100000002})
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000049ffe840e5130100534e0000000109021b000100000000090400000101", @ANYRES32], 0x0)
r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$int_in(r4, 0x5452, &(0x7f00000001c0)=0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]})
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x1a, &(0x7f0000000c80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, {}, {}, [@generic={0x51, 0xa, 0x6, 0x2, 0xc}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xf}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='syzkaller\x00', 0x8, 0x30, &(0x7f0000000180)=""/48, 0x41100, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000004c0)=""/267, 0x10b}, {&(0x7f0000000f00)=""/4097, 0x1001}, {&(0x7f0000000840)=""/207, 0xcf}, {&(0x7f0000000340)=""/149, 0x95}, {&(0x7f0000000280)=""/173, 0xad}, {&(0x7f0000000b40)=""/30, 0x1e}, {0x0}, {&(0x7f0000000780)=""/175, 0xaf}, {&(0x7f00000009c0)=""/264, 0x108}, {&(0x7f0000000140)=""/16, 0x10}], 0xa}, 0x1008}], 0x1, 0x100, 0x0)

7.865242774s ago: executing program 2 (id=564):
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x4f832, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000482000/0x2000)=nil, 0x2000)
munmap(&(0x7f0000647000/0x1000)=nil, 0x1000)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x0, 0x80031, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f00006b4000/0x3000)=nil, 0x930, 0xf, 0x32, 0xffffffffffffffff, 0x0)

7.480441773s ago: executing program 2 (id=567):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty, 0xffffffff}, 0x1c)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xffffffff}, 0x1c)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000008095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffe01}, 0x94)
setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x2, 0x4)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

6.053070579s ago: executing program 2 (id=571):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, <r2=>0xffffffffffffffff})
ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f00000001c0)=@attr_other={0x0, 0xc, 0xc96, 0x0})

5.717057549s ago: executing program 2 (id=573):
bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@printk={@x}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef)

5.26965113s ago: executing program 5 (id=575):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000300)={0xd, {"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", 0x1000}}, 0x1006)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8000)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
msgsnd(0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd2ce3000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000)
r4 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00')
ioctl$FICLONERANGE(r6, 0x4020940d, &(0x7f0000000200)={{r6}, 0x800, 0x6, 0x10000})
setns(r6, 0x8000000)
r7 = openat$cgroup_ro(r5, 0x0, 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r4, 0xc1004110, &(0x7f0000000000)={0x0, [0x6, 0xffff133a, 0x3], [{0x0, 0x3ff, 0x0, 0x1}, {0x0, 0x35}, {0x0, 0x7}, {0xffffffff, 0xffffffff}, {0xfffffffc}, {}, {0x0, 0xfff}, {0xffffffff}, {}, {}, {}, {0x100}], 0x2})
write$tun(r7, 0x0, 0x0)

4.203912829s ago: executing program 5 (id=577):
r0 = socket$inet(0x2, 0x2, 0x1)
setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='veth1_virt_wifi\x00', 0x10)
sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f0000000100)=[{&(0x7f00000001c0)="08001efb3e6f0000", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x0)

3.043191758s ago: executing program 5 (id=578):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x1c, &(0x7f0000000080)={[{@nombcache}, {@dioread_lock}, {@nodiscard}, {@nomblk_io_submit}, {@noblock_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x44f, &(0x7f00000010c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x1001bfc)
pwrite64(r0, &(0x7f0000000000)='2', 0x1, 0xffff)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x3f00, 0x100000002})

2.728316794s ago: executing program 5 (id=579):
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x9]}, 0x8, 0x0)
statx(r0, &(0x7f0000000640)='\x00', 0x1000, 0x4, &(0x7f0000000680))

2.622774637s ago: executing program 4 (id=580):
syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000140)='./file0\x00', 0xc451, &(0x7f0000000340)={[{@journal_dev={'journal_dev', 0x3d, 0x5}}, {@resgid}, {@journal_checksum}, {@usrquota}, {@bh}, {@dioread_nolock}, {@journal_checksum}]}, 0x0, 0x64f, &(0x7f0000000a40)="$eJzs3c1vG1sVAPAzYyfOR8FphYCyoBEItRI0adIWVQipzYZVVZWPHavQpFWp21RNEKRUIpHKBgmxYYHEigXlv4BKbFmxY8GGFapUPT118fpUvfpp7HHq2HHiOHXcOL+f5GZmrj33uvLxnbk+dyaAY2s6+yeNOB0RD5OIclNZMfLC6frzXn385Fb2SKJa/fFHSTz5TbLRvK8k/zuZv/izcn3LqUJ7vavrj+8tVirLj/L12bX7D2dX1x+fv3t/8c7yneUH89+dv3L50uUrcxcO9P6yFozky9ef/vyX5d/d+Olf//wmmfvbf28kcS3e5m3L3lfra0sHqjn7P5uOat3rbQVpxJUD7vtD8Um58TmpKWUfiKQ4yBaxH2lEXM1j5CtRjkK8C9Zy/PaHA20c0FfVJGp91HQVOH6S6Fh0dyz/kmg31tc2AYehcRzQOLff6Ty4XdrPQxLgkLxcqI/V1WN/JCIa8V+sjw3GWG1sYOJV0jzOUxtXO9jIXF1Wx7/+eeNp9ogO43BAf2xsNka5W/v/pBabU1E/B5h4lW6L/4X8KCDNfyf4UeuOuxw8n25ZF/9weDY2I+Kref8/Gl3Hf5rHbiP+f9Zj/T3G/4keqwMAAAAAAICh9nwhIr6zU/5fupX/M1poz/+ZjIhr76H+vX//S1/kC8l7qA5o8nIh4vs75v9u5fhOFfK1L9TyAUaS23cryxci4osRcS5GStn6XMt+mzOEz//+1J861d+c/5c9svobuYD5nl4UW3KJlhbXFg/6voGIl5sRX6vl/57Jt2zP/8n6/2Qr//dd2k0W3w+7rOPUt57d7FS2d/wD/VL9S8TZHfv/d4fbye7X55itHQ/MNo4K2n3913/4e6f6xT8MTtb/T+we/6Wk+Xo9q/vb/2hEXFwvVjuV93r8P5r8pNDYf+ZXi2trj+YiRpPr7dvn99dmGFaNeGjESxb/5765+/jf1vF/UxyOR8RGl3V++e3k/zqV6f9hcLL4X9q9/y9v7//3vzD/bOofneq/2VX/f6nWp5/Ltxj/g2bt1+PoNkAH0lwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOOLSiDgRSTqztZymMzMRkxHxpZhIKyura9++vfKLB0tRu/v3VIykjTv9luvrSeP+/1NN6/Mt6xcj4mRE/LEwXlufubVSWRr0mwcAAAAAAAAAAAAAAAAAAIAPxGRtzn+11Dr/P/P/wqBbB/RdMf8r3uH4Kfb8ymqpq6eN91wB0Ge9xz9wlG3uK/5H+toW4PB1jv/Xb6o1LZt/8I2+twk4HF33///u7nQfODp6PP/3cwEMAeN/cFx1OaY31u92AIOg/wcAAAAAgKFy8szz/yQRsfG98dojM5qXmbUHwy3do9x3AAwvObxwfBVXBt0CYFBM6AeSraVPWyf713TO/k/60yAAAAAAAAAAAAAAoM3Z053n/5sbAMNt1/n/e10cADjSdpn/v9PEHpcLgCHS+dYf5vXBsHOOD+zV25v/DwAAAAAAAAAAAAAfgLHH9xYrleVHq+tHb+FqT68qRMQAG7+xeLD9VEuDavxYdCp6259KRyJi0J+x97aQBVulslytRuz95MYlOAbY5r2/Okp9/moCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADqPg8AAP//rUoczw==")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000180)=""/73, 0xfffffdef, 0x55)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x40}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)

2.531968038s ago: executing program 5 (id=581):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val={'init_itable', 0x3d, 0x7ff}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x66}}, {@user_xattr}, {@nolazytime}, {@quota}]}, 0x3, 0x44b, &(0x7f0000000280)="$eJzs289rHFUcAPDv7Cb9XRNL/dG0arSKwR9Jk9bagxdFwYOCoId6jPlRYreNNBFMCBpF6lEK3sWj4F/gSS+ingSvepdCkVxaPa3M7kyy2e4m2XTTjd3PB6Z9b+Yt73135u28Ny8TQNcaTP9JIg5FxB8R0VfNri8wWP3v1srSxD8rSxNJlMtv/51Uyt1cWZrIi+afO5hneiIKnydxvEG9cwuLF8dLpakrWX5k/tIHI3MLi8/PXBq/MHVh6vLYuXNnTo++eHbshS3F0bPJ8TSumwMfz5449vq7196cOH/tvV++S/L46+Jok8GNDj5VLle+pKTNlXbK4Zp0stnJYNcoZn2nt9L/+6JY05P64rXPOto4YEeVy+Xyg80PL5eBe1gSnW4B0Bn5jT6d/+Zb09HAvrYPPzruxsvVCVAa961sqx7piUJWprdufttOgxFxfvnfr9MtWnkOsVMNAgDueT+k45/nGo3/ClH7XOi+bA2lPyLuj4gjEXE2Io5GxAMRlbIPRcTDLdZfv0hy+/incH1bgW1ROv57KVvbWj/+y0d/0V/Mcocr8fcm0zOlqVPZdzIUvXvT/OgGdfz46u9fNjtWO/5Lt7T+fCyYteN6z971n5kcnx+/k5hr3fg0YqCnUfzJ6kpAEhHHImJgm3XMPPPtiWbHNo9/A21YZyp/E/F09fwvR138uWTj9cmRfVGaOjWSXxW3+/W3q281q/+O4m+D9PwfaHj9r8bfn9Su1861XsfVP79oOqfZ7vW/J3ln3b6Pxufnr4xG7EneqDa6dv9YXbmxtfJp/EMnG/f/I7H2TRyPiPQifiQiHo2Ix7K2Px4RT0TEyQ3i//mVJ9/ffvw7K41/sqXzv5bYE/V7GieKF3/6fl2l/a3En57/M5XUULZnK79/W2nX9q5mAAAA+P8pRMShSArDq+lCYXi4+jf8R+NAoTQ7N//s9OyHlyer7wj0R28hf9LVV/M8dDSb1uf5sbr86ey58VfF/ZX88MRsabLTwUOXO9ik/6f+Kna6dcCO874WdC/9H7qX/g/dS/+H7tWg/+/vRDuAu6/R/f+TDrQDuPvq+r9lP+gi5v/QvfR/6F76P3Sluf2x6Uvy+7byIr1EVyTyW8XCYhR2Q3tWE9O7oxm7ONHi+erwDxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECb/BcAAP//kBnirg==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x105042, 0x189)
quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000701, 0xffffffffffffffff, 0x0)

1.233951797s ago: executing program 4 (id=582):
r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0)
close(r0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$TIOCOUTQ(r1, 0x80045440, 0x0)
r2 = io_uring_setup(0x5053, &(0x7f0000000140)={0x0, 0xfffffffc, 0x3681, 0x1, 0x23b, 0x0, r0})
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})

1.070718817s ago: executing program 5 (id=583):
socket$nl_generic(0x10, 0x3, 0x10)
fsmount(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0xc000, &(0x7f0000000380), 0x2, 0x24d, &(0x7f0000000440)="$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")
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x2)
getdents64(r0, 0x0, 0x22)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0xffffffff, 0x7, "ff000000000000000000000000000200"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000100)=0x3)

1.060457386s ago: executing program 4 (id=584):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
syz_create_resource$binfmt(0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = ioctl$KVM_GET_STATS_FD_cpu(r2, 0xaece)
preadv(r3, &(0x7f0000001540)=[{&(0x7f00000001c0)=""/35, 0x23}, {&(0x7f0000001680)=""/4110, 0xfffffdda}], 0x2, 0x0, 0x10)

741.8331ms ago: executing program 4 (id=585):
r0 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
sendmmsg$inet6(r0, &(0x7f0000007840)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0xee, @mcast1}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000440)="5e11a915e167a52db885f7dc870ee12d73c14548736ef309b46b8fb23cfcb6a92f949657c06ca852391d5c4f4d095ee2baa12e42db95b879a79abc32b2a8518bb6c071045fde67b67419da9f9bcf40a295ebd10e51450b53a12443bc96705e2103b53171136baec1534d692b3bcf7bb563145b9c90a009306fd0f9a101de289f9b1c6e28cc5ac7354196a71b3a504d7b15e326167d911902c2e27c0d04b7e8d73510f5deb6ce953c5273e531322ff580a2cc809d4381704089a7d722a2a358d3f1fa3ba19088fe6f849b4d27a176f5544a41c5cab0317a0dcd56056a1bad9bd94ef5cac7fc099d520a175b4bcdce000702452d5cd4fc8e9079e13d53623df6ee2575ea4ca3b2fb2c63eb4712b64ae2e375beda2987389b42c49fefeedf40f3b0c0e95e2fb13e87af73031b17f764f912c99717a50d34baa0e75b35b5c50da09da63c3ed919c92bd954eba7f98b60c8572664dada5dfa434194081915fe6fe92379145966972e77b8e9297bc522459c56c5266297bb863e754e25b789027e8152a0168501582f21f43e3c3ab9c4089a289a970c892f3a0d77796d347c6c97bfd1cf9da8ea8136de00ffe53894118dce2f064fe42b527ea36cd9fca298269e94f7d9631e48ede6ee185d09d8473921d750e9d0254c8729913c1d9e650a960cee556fcffc5b93a0968e20036f475cfb8c627346af3675fb361784b919a218bcdc50a51bb4defdb75b588d2e32343bf0f02fa3bf2ae60ab49a5e3e83751a6f6c7755671b673e23e5fadfffa68cac7bba7d82f15c52e817700da510b3bbe8a0a29c220c2b26036ffa13b4c9338ef3556a374a4ac7fdc6c10933fe9d6e663f142a9a2669cf79bb420327fcc68ce4a023df9c5ce4bf5dccd48a372b2478dcb8c2d9efcbea5b7e220463d87793aa75049260613cf3cf59609610a9c98ffb6eec62159350e80b9b6b6796f08190530dcf4cac3955bca0acf92f8d8a802442a2ce0570aed1e537c1f897013ff7b94227dd67a154f70c35ffaee9f7175ee857abd92562c1726c57f8f2a74f5fd3d3c5ba9f5be388033996e57aecaca358709d1174ff45d2c273692565040b37898b6aeb4bd10d3c7e1d26b8f75f6df7e5ff6550d4d793c3e129df60bb6e08241ef98bab179065c0c2962ce617709df2c8350510a7591793cb77bc234ff1b5c318bd6cff89b7a1aa9e673a87fa00fd8a8d950687f0304b585dbf3414a078bc3697e9e4801c89f70d10e443f801f3de46ec9cb67bc4e1168f5d4542ee0e0a5c3aaa2f3f90d31cbcecb96202018b57bf03c0d3c85f3b1233fe077831a97329c2eafdb436f4f94d2b6db9b5c2e6f966abd88589aa680b3e35cfb36915074327a74573aaa008c413a1c673f847cf7c7ed5778d1d70cc295ce9f3f50e913658dd0aeb559a23116fe1bf8b5b0a78e1272cb4c7d840074126361bb558a1e28066b1cbada23da8322201cd75d912589578e3a87710852d0211ea660516e23b6ea6de4e8555eed7ac8af6afe4adb24f2ce8e5004541bd5f9642237ebb3091938779b8062b13cba54c6da2e67a071227f3994a28cc48d1d60e184593f14fb91c1884b15c5518bbc73bc2e1217bfc1cea1a1e54131b741b5ffef088004c752b4c821be7eebd45922863f77f5e9981b9972b067f18014b5eeb283076b8def9e4890671856a73ccf462bcb5a5497d48cf76f86a7d5dc1876b1a750823e752d6892f7e29fd8da79f116e4b8beadb91b472c6e1dcce5ed26aec8658cb9e026cb0cf766ad4df574c0a3892745f8abd25e7c468f1cd6986d47a500810738574107367a6e448be1c35572b4dd78ed2707071f94ddbaff43b4bd1e5df773792af9e5a11d3502c7a23a03053ac0b6ab33f5d114be2e9579df5ad6dac9ab1d2ecb8225105ab41d33744d3180677fef1", 0x54c}], 0x1}}], 0x1, 0x0)

582.075996ms ago: executing program 4 (id=586):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7)
ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000000)={0x8, 0x3, 0x1, 0x2, 0xa, "00ff8c99c2c36525"})
write$UHID_INPUT(r1, &(0x7f0000002740)={0xc, {"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", 0x1000}}, 0x1006)

0s ago: executing program 4 (id=587):
syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000f40)='./file1\x00', 0xa00010, &(0x7f0000000440)=ANY=[@ANYBLOB='iocharset=iso8859-1,nostrict,iocharset=default,anchor=00000000000000000145,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c706172746974696f6e3d30303030303030303030303030303030303030322c756e64656c6574652c706172746974696f6e3d30303030303030303030303030303030303030312c756e686964652c001e066340c987db28915dbe6892bc3dce41ae76eaf528dc889820692d753009e30e567403a6c30e933de68a0a923eec1dccf226b58adb7d968bafe76628bceade8672fb893f87dc88", @ANYRES64, @ANYRESOCT=0x0, @ANYRES8], 0x1, 0xc5a, &(0x7f0000001040)="$eJzs3U9sHNd9B/DfGy3FldxWTOwqThoHm7ZIZcVy9S+mYhXOqqbZBpBlIRRzC8CVuFIXpkiCpBrZSAumlx56CFAUPeTEojUKpGhgNEXQI9O6QHLxocipJ6KFjaDogSkCBCgQMJjZt+KSIm3ZJCVK/nxs8js7897sezPrGZrgmxcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQMTvv3Th5Km0xYYDD6AxAMB9cWnsKydPb3X/BwAeWVe2+/9/AAAAAAAAAAAAAABgv0hRxOORYvbSapqoXnfVL3YGbt0eHxndutqhVNU8UJUvv+qnTp85+4Xnhs/18mJn+j3q77ZPxStjVy40Xpy5OTvXnp9vTzbGpzvXZibb97yHndbf7Hh1ABo3X701ef36fOP0s2c2bL499O7gY0eHzg8/feKpXtnxkdHRsfUi9f7ytQ/dkK7tRngcjCJORIpnvvuT1IqIInZ+LOr399xvdqjqxPGqE+Mjo1VHpjqt6YVy4+XegSgiGn2Vmr1jtPW5iNrAfe3D9poRi2XzywYfL7s3Ntuaa12dajcut+YWOgudmenLqdvasj+NKOJciliKiJXBu3c3EEXUIsW3j6ymq/mpH9Vx+Hw1MHj7dhR72Md7ULazMRCxVDwE52wfG4wiXo4UP3vrWFzL15nqWvO5iJfL/H7EG2W+EJHKD8bZiHe2+BzxcKpFEX9Rnv/zq2myuh70risXv9r48vT1mb6yvevKB7w/3HWleED3h0Ob8v7Y59emehTRqq74q+nD/7ADAAAAAAAAAAAAAAAAwG47FEV8MlK89B9/XI0rjmpc+pHzw38w9Kv9Y8affJ/9lGWfjYjF4t7G5B7MAwMvp8spPeCxxB9l9SjiT/L4v2++T1mnCQAAAAAAAAAAAAAAAAAAYC8V8eNI8fzbx9JS9M8p3pm+0bjSujrVnRW2N/dvb870tbW1tUbqZjPnRM7FnEs5l3Ou5Iwi18/ZzDmRczHnUs7lnCs540Cun7OZcyLnYs6lnMs5V3JGLdfP2cw5kXMx51LO5ZwrOWOfzN0LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAoKaKIX0SKb319NUWKiGbERHRzefBBtw4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA2mIr4XKRp/2LyzrhYRqfq361j57Ww0D5b58WgOl/lCNC/kbFVZa37zAbSfnRlIRfwoUgzW37xzwvP5H+i+uvMxiDe+sf7qU7VuHuhtHHp38LGjR84Pj37mye2W01YNOH6xM33rdmN8ZHR0rG91Lb/7x/vWDeX3LXan60TE/Guvv9qamvqbn0ZUC+25vObeF8qPwAev9TAupNpHpacWqoWo7YtmPJi+b1B/UBco9lR5/38nUvzu2//Zu+F37//1+JXuqzt3+Pj5n67f/5/fvKN7vP/XNtfL9//ynr7V/f/xvnXP559GBmoR9YWbswNHI+rzr71+onOzdaN9oz199uTJLw4Pf/HMyYGDEfXrnal239KuHC4AAAAAAAAAAAAAAACA+ycV8aVI0frRampExO1qvNbQ+eGnTzx1IA5U4602jNt+ZezKhcaLMzdn59rz8+3Jxvh059rMZPte365eDfcaHxndk868r0N73P5D9RdnZl+b69z4o4Uttx+uX7g6vzDXurb15jgURUSzf83xqsHjI6NVo6c6remq6uUtB9N/cAOpiP+KFNfONtJn87o8/n/zCP8N4/8XN+9oF8f/f+bw+vi/j/UVLd8zpSJ+Hil+5y+fjM9W7Twcdx2zXO7vIsXxc5/O5eJgWa7Xhu5zBbojA8uyP40U//SLjWV74yEfXy976gMd3IdAef6PRIrv/fl34jfzuo3Pf9j6/B/evKM9ev7DE33rDq8/r6A9N7/jrpPP/4lI8cLjb8ZvVWv+/z2f/9F79saxbuH153Ps0fn/9b51Q/l9f3u3Og8AAAAAAAAAAPAQG0hF/H2k+MFoLT2X193L3/9Nbt7RHv391yf61k1u+Pu/vVvY8UEFAAAAgH1iIBXx40hxY+HNO2OoN47/7hv/+Xvr4z9H0qat1e/5fq16bsBu/v6v31B+34mddxsAAAAAAAAAAAAAAAAAAAD2lZSKeC7Ppz5Rjeef3HY+9eVI8dL/PJPLpaNlud488EPV9/qlmekTF6amZuqx0Lo61W6Mzbautcu6T0SK1b/9dK77pWp+9d5889053tfnYp+LFKP/0CvbnYu9Nzf5E+tlT5VlPxYp/vsfN5bNU1PnuaOrsqfLsn8dKb72L72ya2vl1l7Zo+tlz5RlvxMpfvi1Rm+/h8v99p6P+on1ss9emyl2/6QAAAAAAAAAAAAAAAAAAADwkTOQivizSPG/N5fujOXP8/8P9L2svPGNvvn+N7ldzfM/VM3/v93yh5n/v3quwOJ27woAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI+mFEW8HilmL62m5cHydVf9Ymf61u3xkdGtqx1KVc0DVfnyq37q9JmzX3hu+Fwv37v+bvtkvDJ25ULjxZmbs3Pt+fn2ZGN8unNtZrJ9z3vYaf3NjlcHoHHz1VuT16/PN04/e2bD5ttD7w4+dnTo/PDTJ55ajIiy7PjI6OhYX5nawId+97ukbdYfjCL+KlI8892fpB8MRhSx82PxPp+dvXao6sTxqhPjI6NVR6Y6remFcuPl3oEoIhp9lZq9Y5TP216eix1pRpSfl6Js8PGye2OzrbnW1al243JrbqGz0JmZvpy6rS3704gizqWIpYhYGbx7dwNRxKuR4ttHVtO/DkYc6B2Hz18a+8rJ09u3o9jDPt6Dsp2NgYil4iE4Z/vYYBTxz5HiZ28di38bjKhF9ys+F/Fymd+PeCO65zuVH4yzEe9s8Tni4VSLIv6vPP/nV9Nbg+X1oHddufjVxpenr8/0le1dVx76+8P9tM+vTfUo4ofVFX81/bv/rgEAAAAAAAAAAAAAAAD2kSJ+I1I8//axVI0PvjOmuDN9o3GldXWqO6yvN/avN2Z6bW1trZG62cw5kXMx51LO5ZwrOaPI9XM2y6yvrU3k14s5l3Iu51zJGQdy/ZzNnBM5F3Mu5VzOuZIzarl+zmbOiZyLOZdyLudcyRn7ZOweAAAAAAAAAAAAAAAAAADwaCmqf1J86+uraW2wO7/0RHRz2Xygj7xfBgAA//8XrPrB")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0)
pwrite64(r0, &(0x7f0000000000)="9d", 0x1, 0x8fff)
write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[], 0x9000)

kernel console output (not intermixed with test programs):

/Google Compute Engine, BIOS Google 08/18/2025
[  218.322690][ T5870] Call Trace:
[  218.322699][ T5870]  <TASK>
[  218.322707][ T5870]  dump_stack_lvl+0x189/0x250
[  218.322741][ T5870]  ? __pfx_dump_stack_lvl+0x10/0x10
[  218.322766][ T5870]  ? __pfx_queue_work_on+0x10/0x10
[  218.322784][ T5870]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  218.322807][ T5870]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  218.322846][ T5870]  f2fs_handle_critical_error+0x37c/0x540
[  218.322878][ T5870]  f2fs_write_end_io+0x886/0xb60
[  218.322925][ T5870]  __submit_merged_bio+0x27a/0x6a0
[  218.322955][ T5870]  __submit_merged_write_cond+0x255/0x530
[  218.322998][ T5870]  f2fs_write_data_pages+0x261d/0x3000
[  218.323072][ T5870]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  218.323151][ T5870]  ? __mod_zone_page_state+0xd7/0x140
[  218.323189][ T5870]  ? folios_put_refs+0x58b/0x670
[  218.323234][ T5870]  ? __lock_acquire+0xab9/0xd20
[  218.323274][ T5870]  ? do_raw_spin_lock+0x121/0x290
[  218.323314][ T5870]  ? do_raw_spin_unlock+0x122/0x240
[  218.323339][ T5870]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  218.323364][ T5870]  do_writepages+0x32e/0x550
[  218.323401][ T5870]  ? do_raw_spin_unlock+0x122/0x240
[  218.323431][ T5870]  filemap_fdatawrite+0x199/0x240
[  218.323453][ T5870]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  218.323538][ T5870]  ? do_raw_spin_unlock+0x122/0x240
[  218.323568][ T5870]  f2fs_sync_dirty_inodes+0x31f/0x830
[  218.323639][ T5870]  f2fs_write_checkpoint+0x93e/0x2440
[  218.323666][ T5870]  ? __lock_acquire+0xab9/0xd20
[  218.323732][ T5870]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  218.323830][ T5870]  kill_f2fs_super+0x2cc/0x6d0
[  218.323873][ T5870]  ? __pfx_kill_f2fs_super+0x10/0x10
[  218.323919][ T5870]  ? shrinker_free+0x2ce/0x3e0
[  218.323946][ T5870]  deactivate_locked_super+0xbc/0x130
[  218.323975][ T5870]  cleanup_mnt+0x425/0x4c0
[  218.324000][ T5870]  ? lockdep_hardirqs_on+0x9c/0x150
[  218.324032][ T5870]  task_work_run+0x1d4/0x260
[  218.324058][ T5870]  ? __pfx_task_work_run+0x10/0x10
[  218.324075][ T5870]  ? __x64_sys_umount+0x122/0x160
[  218.324098][ T5870]  ? exit_to_user_mode_loop+0x40/0x130
[  218.324125][ T5870]  exit_to_user_mode_loop+0xe9/0x130
[  218.324148][ T5870]  do_syscall_64+0x2bd/0xfa0
[  218.324168][ T5870]  ? lockdep_hardirqs_on+0x9c/0x150
[  218.324187][ T5870]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  218.324204][ T5870]  ? clear_bhb_loop+0x60/0xb0
[  218.324225][ T5870]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  218.324242][ T5870] RIP: 0033:0x7f8e1c3901f7
[  218.324258][ T5870] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  218.324272][ T5870] RSP: 002b:00007fff25e2b308 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  218.324290][ T5870] RAX: 0000000000000000 RBX: 00007f8e1c411d7d RCX: 00007f8e1c3901f7
[  218.324301][ T5870] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff25e2b3c0
[  218.324311][ T5870] RBP: 00007fff25e2b3c0 R08: 0000000000000000 R09: 0000000000000000
[  218.324321][ T5870] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff25e2c450
[  218.324332][ T5870] R13: 00007f8e1c411d7d R14: 000000000003538c R15: 00007fff25e2c490
[  218.324371][ T5870]  </TASK>
[  218.706343][ T7918] loop3: detected capacity change from 0 to 4096
[  218.812908][ T5870] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  219.184259][ T7915] loop5: detected capacity change from 0 to 32768
[  219.207113][ T7918] ntfs3(loop3): ino=b, Correct links count -> 1.
[  219.454231][ T7915] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.330 (7915)
[  219.582666][ T7918] ntfs3(loop3): ino=18, mi_enum_attr
[  219.647354][ T7918] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  219.886109][ T7915] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  219.944126][ T7915] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm
[  220.348404][ T7915] BTRFS info (device loop5): enabling ssd optimizations
[  220.394037][ T7915] BTRFS info (device loop5): enabling free space tree
[  220.544046][   T24] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  220.553849][ T6132] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  220.704510][   T24] usb 5-1: Using ep0 maxpacket: 8
[  220.735553][   T24] usb 5-1: config 0 has an invalid interface number: 148 but max is 0
[  220.763936][   T24] usb 5-1: config 0 has no interface number 0
[  220.814866][   T24] usb 5-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.36
[  220.844595][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  220.852657][   T24] usb 5-1: Product: syz
[  220.883931][   T24] usb 5-1: Manufacturer: syz
[  220.888605][   T24] usb 5-1: SerialNumber: syz
[  220.917041][   T24] usb 5-1: config 0 descriptor??
[  220.949371][   T24] kobil_sct 5-1:0.148: required endpoints missing
[  221.133506][   T10] usb 5-1: USB disconnect, device number 7
[  221.315742][ T7952] loop2: detected capacity change from 0 to 32768
[  221.345549][ T7952] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  221.445071][ T7952] XFS (loop2): Ending clean mount
[  221.786247][ T7971] tipc: Started in network mode
[  221.821081][ T7973] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4)
[  221.828432][ T7973] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  221.852883][ T7979] FAULT_INJECTION: forcing a failure.
[  221.852883][ T7979] name failslab, interval 1, probability 0, space 0, times 0
[  221.869631][ T7971] tipc: Node identity e6516b0c1ea6, cluster identity 4711
[  221.886484][ T7979] CPU: 1 UID: 0 PID: 7979 Comm: syz.5.342 Not tainted syzkaller #0 PREEMPT(full) 
[  221.886513][ T7979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  221.886526][ T7979] Call Trace:
[  221.886535][ T7979]  <TASK>
[  221.886544][ T7979]  dump_stack_lvl+0x189/0x250
[  221.886573][ T7979]  ? __pfx____ratelimit+0x10/0x10
[  221.886598][ T7979]  ? __pfx_dump_stack_lvl+0x10/0x10
[  221.886621][ T7979]  ? __pfx__printk+0x10/0x10
[  221.886655][ T7979]  ? __pfx___might_resched+0x10/0x10
[  221.886684][ T7979]  ? fs_reclaim_acquire+0x7d/0x100
[  221.886723][ T7979]  should_fail_ex+0x414/0x560
[  221.886755][ T7979]  should_failslab+0xa8/0x100
[  221.886783][ T7979]  kmem_cache_alloc_noprof+0x74/0x6e0
[  221.886806][ T7979]  ? alloc_empty_file+0x55/0x1d0
[  221.886842][ T7979]  alloc_empty_file+0x55/0x1d0
[  221.886872][ T7979]  alloc_file_pseudo+0x13d/0x210
[  221.886905][ T7979]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  221.886935][ T7979]  ? shmem_get_inode+0xbc5/0xe90
[  221.886970][ T7979]  __shmem_file_setup+0x284/0x300
[  221.886996][ T7979]  __se_sys_memfd_create+0x308/0x780
[  221.887032][ T7979]  do_syscall_64+0xfa/0xfa0
[  221.887054][ T7979]  ? lockdep_hardirqs_on+0x9c/0x150
[  221.887079][ T7979]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  221.887100][ T7979]  ? clear_bhb_loop+0x60/0xb0
[  221.887125][ T7979]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  221.887145][ T7979] RIP: 0033:0x7fd62cf8eec9
[  221.887162][ T7979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  221.887181][ T7979] RSP: 002b:00007fd62de50e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[  221.887203][ T7979] RAX: ffffffffffffffda RBX: 0000000000005915 RCX: 00007fd62cf8eec9
[  221.887217][ T7979] RDX: 00007fd62de50ef0 RSI: 0000000000000000 RDI: 00007fd62d012960
[  221.887231][ T7979] RBP: 0000200000000380 R08: 00007fd62de50bb7 R09: 00007fd62de50e40
[  221.887245][ T7979] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000100
[  221.887258][ T7979] R13: 00007fd62de50ef0 R14: 00007fd62de50eb0 R15: 0000200000000240
[  221.887293][ T7979]  </TASK>
[  221.908313][ T7973] vhci_hcd vhci_hcd.0: Device attached
[  221.911458][ T7981] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  221.996247][ T7973] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  222.116659][ T7971] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  222.171337][ T7981] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  222.181742][ T7981] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  222.192004][ T7981] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  222.214132][   T10] vhci_hcd: vhci_device speed not set
[  222.275627][   T10] usb 35-1: new full-speed USB device number 2 using vhci_hcd
[  222.317237][ T5870] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  222.359085][ T7986] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(19)
[  222.365753][ T7986] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  222.395017][ T7973] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  222.403569][ T7986] vhci_hcd vhci_hcd.0: Device attached
[  222.416262][ T7973] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  222.442992][ T7987] vhci_hcd: connection closed
[  222.447843][ T3528] vhci_hcd: stop threads
[  222.475466][ T3528] vhci_hcd: release socket
[  222.489110][ T7975] vhci_hcd: connection reset by peer
[  222.503955][ T3528] vhci_hcd: disconnect device
[  222.519304][ T3528] vhci_hcd: stop threads
[  222.546565][ T3528] vhci_hcd: release socket
[  222.553485][ T3528] vhci_hcd: disconnect device
[  222.634382][   T43] usb 4-1: new low-speed USB device number 16 using dummy_hcd
[  222.803990][   T43] usb 4-1: device descriptor read/64, error -71
[  222.818461][ T7965] loop3: detected capacity change from 0 to 32768
[  222.876400][ T7992] loop2: detected capacity change from 0 to 64
[  222.886677][ T6282]  loop3: p9 p11 p16
[  222.958450][ T7965]  loop3: p9 p11 p16
[  223.054000][   T43] usb 4-1: new low-speed USB device number 17 using dummy_hcd
[  223.231757][   T43] usb 4-1: device descriptor read/64, error -71
[  223.273004][ T6018] tipc: Node number set to 4176964364
[  223.378204][   T43] usb usb4-port1: attempt power cycle
[  223.458277][ T7988] loop5: detected capacity change from 0 to 40427
[  223.509961][ T7988] F2FS-fs (loop5): Image doesn't support compression
[  223.550168][ T7988] F2FS-fs (loop5): build fault injection rate: 690
[  223.603266][ T7988] F2FS-fs (loop5): invalid crc value
[  223.744423][   T43] usb 4-1: new low-speed USB device number 18 using dummy_hcd
[  223.814652][   T43] usb 4-1: device descriptor read/8, error -71
[  223.850482][ T7988] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  223.866240][ T7988] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  223.892059][   T30] audit: type=1800 audit(1759141407.141:82): pid=7988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.343" name="file1" dev="loop5" ino=10 res=0 errno=0
[  223.984906][   T30] audit: type=1804 audit(1759141407.141:83): pid=7988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.343" name="/newroot/57/bus/file1" dev="loop5" ino=10 res=1 errno=0
[  224.028187][ T6132] syz-executor: attempt to access beyond end of device
[  224.028187][ T6132] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  224.070944][ T6132] CPU: 0 UID: 0 PID: 6132 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  224.070975][ T6132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  224.070988][ T6132] Call Trace:
[  224.070996][ T6132]  <TASK>
[  224.071006][ T6132]  dump_stack_lvl+0x189/0x250
[  224.071040][ T6132]  ? __pfx_dump_stack_lvl+0x10/0x10
[  224.071065][ T6132]  ? __pfx_queue_work_on+0x10/0x10
[  224.071084][ T6132]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  224.071108][ T6132]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  224.071145][ T6132]  f2fs_handle_critical_error+0x37c/0x540
[  224.071176][ T6132]  f2fs_write_end_io+0x886/0xb60
[  224.071221][ T6132]  __submit_merged_bio+0x27a/0x6a0
[  224.071260][ T6132]  __submit_merged_write_cond+0x255/0x530
[  224.071302][ T6132]  f2fs_write_data_pages+0x261d/0x3000
[  224.071364][ T6132]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  224.071436][ T6132]  ? __mod_zone_page_state+0xd7/0x140
[  224.071471][ T6132]  ? folios_put_refs+0x58b/0x670
[  224.071516][ T6132]  ? __lock_acquire+0xab9/0xd20
[  224.071555][ T6132]  ? do_raw_spin_lock+0x121/0x290
[  224.071592][ T6132]  ? do_raw_spin_unlock+0x122/0x240
[  224.071617][ T6132]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  224.071643][ T6132]  do_writepages+0x32e/0x550
[  224.071676][ T6132]  ? do_raw_spin_unlock+0x122/0x240
[  224.071705][ T6132]  filemap_fdatawrite+0x199/0x240
[  224.071727][ T6132]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  224.071801][ T6132]  ? do_raw_spin_unlock+0x122/0x240
[  224.071831][ T6132]  f2fs_sync_dirty_inodes+0x31f/0x830
[  224.071874][ T6132]  f2fs_write_checkpoint+0x93e/0x2440
[  224.071900][ T6132]  ? __lock_acquire+0xab9/0xd20
[  224.071960][ T6132]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  224.072048][ T6132]  kill_f2fs_super+0x2cc/0x6d0
[  224.072081][ T6132]  ? __pfx_kill_f2fs_super+0x10/0x10
[  224.072127][ T6132]  ? shrinker_free+0x2ce/0x3e0
[  224.072160][ T6132]  deactivate_locked_super+0xbc/0x130
[  224.072195][ T6132]  cleanup_mnt+0x425/0x4c0
[  224.072226][ T6132]  ? lockdep_hardirqs_on+0x9c/0x150
[  224.072260][ T6132]  task_work_run+0x1d4/0x260
[  224.072287][ T6132]  ? __pfx_task_work_run+0x10/0x10
[  224.072310][ T6132]  ? __x64_sys_umount+0x122/0x160
[  224.072336][ T6132]  ? exit_to_user_mode_loop+0x40/0x130
[  224.072369][ T6132]  exit_to_user_mode_loop+0xe9/0x130
[  224.072397][ T6132]  do_syscall_64+0x2bd/0xfa0
[  224.072421][ T6132]  ? lockdep_hardirqs_on+0x9c/0x150
[  224.072445][ T6132]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  224.072465][ T6132]  ? clear_bhb_loop+0x60/0xb0
[  224.072490][ T6132]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  224.072511][ T6132] RIP: 0033:0x7fd62cf901f7
[  224.072530][ T6132] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  224.072548][ T6132] RSP: 002b:00007fff0f5f25d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  224.072571][ T6132] RAX: 0000000000000000 RBX: 00007fd62d011d7d RCX: 00007fd62cf901f7
[  224.072585][ T6132] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff0f5f2690
[  224.072598][ T6132] RBP: 00007fff0f5f2690 R08: 0000000000000000 R09: 0000000000000000
[  224.072611][ T6132] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff0f5f3720
[  224.072625][ T6132] R13: 00007fd62d011d7d R14: 0000000000036a7c R15: 00007fff0f5f3760
[  224.072661][ T6132]  </TASK>
[  224.072669][ T6132] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  224.103441][   T43] usb 4-1: new low-speed USB device number 19 using dummy_hcd
[  224.486372][ T7971] tipc: Disabling bearer <eth:syzkaller0>
[  224.552905][ T8000] loop4: detected capacity change from 0 to 32768
[  224.609573][ T8000] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.347 (8000)
[  224.626940][ T8010] loop2: detected capacity change from 0 to 16
[  224.637830][ T8010] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  224.665387][   T43] usb 4-1: device not accepting address 19, error -71
[  224.690496][ T8000] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  224.706041][   T43] usb usb4-port1: unable to enumerate USB device
[  224.762564][ T8000] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  225.073036][ T8000] BTRFS info (device loop4): enabling ssd optimizations
[  225.084418][ T8000] BTRFS info (device loop4): enabling free space tree
[  225.274703][ T5880] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  225.317445][ T8031] netlink: 'syz.3.351': attribute type 3 has an invalid length.
[  225.341950][ T8031] netlink: 666 bytes leftover after parsing attributes in process `syz.3.351'.
[  225.556870][ T8038] FAULT_INJECTION: forcing a failure.
[  225.556870][ T8038] name failslab, interval 1, probability 0, space 0, times 0
[  225.603094][ T8038] CPU: 1 UID: 0 PID: 8038 Comm: syz.3.354 Not tainted syzkaller #0 PREEMPT(full) 
[  225.603125][ T8038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  225.603137][ T8038] Call Trace:
[  225.603146][ T8038]  <TASK>
[  225.603155][ T8038]  dump_stack_lvl+0x189/0x250
[  225.603184][ T8038]  ? __pfx____ratelimit+0x10/0x10
[  225.603209][ T8038]  ? __pfx_dump_stack_lvl+0x10/0x10
[  225.603233][ T8038]  ? __pfx__printk+0x10/0x10
[  225.603266][ T8038]  ? __pfx___might_resched+0x10/0x10
[  225.603302][ T8038]  should_fail_ex+0x414/0x560
[  225.603341][ T8038]  should_failslab+0xa8/0x100
[  225.603370][ T8038]  kmem_cache_alloc_noprof+0x74/0x6e0
[  225.603393][ T8038]  ? security_file_alloc+0x34/0x330
[  225.603419][ T8038]  security_file_alloc+0x34/0x330
[  225.603442][ T8038]  init_file+0x93/0x2f0
[  225.603473][ T8038]  alloc_empty_file+0x6e/0x1d0
[  225.603505][ T8038]  alloc_file_pseudo+0x13d/0x210
[  225.603537][ T8038]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  225.603567][ T8038]  ? shmem_get_inode+0xbc5/0xe90
[  225.603603][ T8038]  __shmem_file_setup+0x284/0x300
[  225.603630][ T8038]  __se_sys_memfd_create+0x308/0x780
[  225.603664][ T8038]  do_syscall_64+0xfa/0xfa0
[  225.603688][ T8038]  ? lockdep_hardirqs_on+0x9c/0x150
[  225.603713][ T8038]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.603733][ T8038]  ? clear_bhb_loop+0x60/0xb0
[  225.603765][ T8038]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.603785][ T8038] RIP: 0033:0x7fa94318eec9
[  225.603804][ T8038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  225.603821][ T8038] RSP: 002b:00007fa944077e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[  225.603842][ T8038] RAX: ffffffffffffffda RBX: 0000000000005915 RCX: 00007fa94318eec9
[  225.603863][ T8038] RDX: 00007fa944077ef0 RSI: 0000000000000000 RDI: 00007fa943212960
[  225.603875][ T8038] RBP: 0000200000000380 R08: 00007fa944077bb7 R09: 00007fa944077e40
[  225.603889][ T8038] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000100
[  225.603902][ T8038] R13: 00007fa944077ef0 R14: 00007fa944077eb0 R15: 0000200000000240
[  225.603934][ T8038]  </TASK>
[  226.243280][ T8036] loop5: detected capacity change from 0 to 40427
[  226.365993][ T8036] F2FS-fs (loop5): invalid crc value
[  226.673353][ T8036] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  226.744095][ T8036] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  226.791450][ T8036] syz.5.349: attempt to access beyond end of device
[  226.791450][ T8036] loop5: rw=2049, sector=77824, nr_sectors = 136 limit=40427
[  227.028769][ T6132] syz-executor: attempt to access beyond end of device
[  227.028769][ T6132] loop5: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  227.088016][ T6132] CPU: 1 UID: 0 PID: 6132 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  227.088045][ T6132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  227.088058][ T6132] Call Trace:
[  227.088067][ T6132]  <TASK>
[  227.088076][ T6132]  dump_stack_lvl+0x189/0x250
[  227.088110][ T6132]  ? __pfx_dump_stack_lvl+0x10/0x10
[  227.088134][ T6132]  ? __pfx_queue_work_on+0x10/0x10
[  227.088152][ T6132]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  227.088177][ T6132]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  227.088224][ T6132]  f2fs_handle_critical_error+0x37c/0x540
[  227.088258][ T6132]  f2fs_write_end_io+0x886/0xb60
[  227.088308][ T6132]  __submit_merged_bio+0x27a/0x6a0
[  227.088340][ T6132]  __submit_merged_write_cond+0x255/0x530
[  227.088384][ T6132]  f2fs_write_data_pages+0x261d/0x3000
[  227.088408][ T6132]  ? unwind_next_frame+0xa5/0x2390
[  227.088472][ T6132]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  227.088555][ T6132]  ? __mod_zone_page_state+0xd7/0x140
[  227.088594][ T6132]  ? folios_put_refs+0x58b/0x670
[  227.088639][ T6132]  ? __pfx_folios_put_refs+0x10/0x10
[  227.088665][ T6132]  ? rcu_is_watching+0x15/0xb0
[  227.088695][ T6132]  ? __lock_acquire+0xab9/0xd20
[  227.088743][ T6132]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  227.088767][ T6132]  do_writepages+0x32e/0x550
[  227.088800][ T6132]  ? do_raw_spin_unlock+0x122/0x240
[  227.088829][ T6132]  filemap_fdatawrite+0x199/0x240
[  227.088850][ T6132]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  227.088931][ T6132]  ? do_raw_spin_unlock+0x122/0x240
[  227.088961][ T6132]  f2fs_sync_dirty_inodes+0x31f/0x830
[  227.089008][ T6132]  f2fs_write_checkpoint+0x93e/0x2440
[  227.089034][ T6132]  ? __lock_acquire+0xab9/0xd20
[  227.089100][ T6132]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  227.089211][ T6132]  kill_f2fs_super+0x2cc/0x6d0
[  227.089248][ T6132]  ? __pfx_kill_f2fs_super+0x10/0x10
[  227.089300][ T6132]  ? shrinker_free+0x2ce/0x3e0
[  227.089334][ T6132]  deactivate_locked_super+0xbc/0x130
[  227.089371][ T6132]  cleanup_mnt+0x425/0x4c0
[  227.089402][ T6132]  ? lockdep_hardirqs_on+0x9c/0x150
[  227.089432][ T6132]  task_work_run+0x1d4/0x260
[  227.089463][ T6132]  ? __pfx_task_work_run+0x10/0x10
[  227.089487][ T6132]  ? __x64_sys_umount+0x122/0x160
[  227.089520][ T6132]  ? exit_to_user_mode_loop+0x40/0x130
[  227.089554][ T6132]  exit_to_user_mode_loop+0xe9/0x130
[  227.089582][ T6132]  do_syscall_64+0x2bd/0xfa0
[  227.089607][ T6132]  ? lockdep_hardirqs_on+0x9c/0x150
[  227.089630][ T6132]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  227.089651][ T6132]  ? clear_bhb_loop+0x60/0xb0
[  227.089678][ T6132]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  227.089698][ T6132] RIP: 0033:0x7fd62cf901f7
[  227.089717][ T6132] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  227.089735][ T6132] RSP: 002b:00007fff0f5f25d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  227.089757][ T6132] RAX: 0000000000000000 RBX: 00007fd62d011d7d RCX: 00007fd62cf901f7
[  227.089772][ T6132] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff0f5f2690
[  227.089784][ T6132] RBP: 00007fff0f5f2690 R08: 0000000000000000 R09: 0000000000000000
[  227.089796][ T6132] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff0f5f3720
[  227.089810][ T6132] R13: 00007fd62d011d7d R14: 0000000000037619 R15: 00007fff0f5f3760
[  227.089851][ T6132]  </TASK>
[  227.418452][ T6132] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  227.425541][ T6132] CPU: 1 UID: 0 PID: 6132 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  227.425575][ T6132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  227.425588][ T6132] Call Trace:
[  227.425597][ T6132]  <TASK>
[  227.425607][ T6132]  dump_stack_lvl+0x189/0x250
[  227.425640][ T6132]  ? __pfx_dump_stack_lvl+0x10/0x10
[  227.425665][ T6132]  ? __pfx_queue_work_on+0x10/0x10
[  227.425683][ T6132]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  227.425707][ T6132]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  227.425743][ T6132]  f2fs_handle_critical_error+0x37c/0x540
[  227.425773][ T6132]  f2fs_write_end_io+0x886/0xb60
[  227.425818][ T6132]  __submit_merged_bio+0x27a/0x6a0
[  227.425847][ T6132]  __submit_merged_write_cond+0x255/0x530
[  227.425889][ T6132]  f2fs_write_data_pages+0x261d/0x3000
[  227.425912][ T6132]  ? unwind_next_frame+0xa5/0x2390
[  227.425968][ T6132]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  227.426037][ T6132]  ? __mod_zone_page_state+0xd7/0x140
[  227.426068][ T6132]  ? folios_put_refs+0x58b/0x670
[  227.426109][ T6132]  ? __pfx_folios_put_refs+0x10/0x10
[  227.426137][ T6132]  ? rcu_is_watching+0x15/0xb0
[  227.426177][ T6132]  ? __lock_acquire+0xab9/0xd20
[  227.426225][ T6132]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  227.426250][ T6132]  do_writepages+0x32e/0x550
[  227.426283][ T6132]  ? do_raw_spin_unlock+0x122/0x240
[  227.426313][ T6132]  filemap_fdatawrite+0x199/0x240
[  227.426335][ T6132]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  227.426408][ T6132]  ? do_raw_spin_unlock+0x122/0x240
[  227.426437][ T6132]  f2fs_sync_dirty_inodes+0x31f/0x830
[  227.426480][ T6132]  f2fs_write_checkpoint+0x93e/0x2440
[  227.426506][ T6132]  ? __lock_acquire+0xab9/0xd20
[  227.426563][ T6132]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  227.426649][ T6132]  kill_f2fs_super+0x2cc/0x6d0
[  227.426682][ T6132]  ? __pfx_kill_f2fs_super+0x10/0x10
[  227.426728][ T6132]  ? shrinker_free+0x2ce/0x3e0
[  227.426760][ T6132]  deactivate_locked_super+0xbc/0x130
[  227.426796][ T6132]  cleanup_mnt+0x425/0x4c0
[  227.426826][ T6132]  ? lockdep_hardirqs_on+0x9c/0x150
[  227.426854][ T6132]  task_work_run+0x1d4/0x260
[  227.426883][ T6132]  ? __pfx_task_work_run+0x10/0x10
[  227.426905][ T6132]  ? __x64_sys_umount+0x122/0x160
[  227.426931][ T6132]  ? exit_to_user_mode_loop+0x40/0x130
[  227.426964][ T6132]  exit_to_user_mode_loop+0xe9/0x130
[  227.426992][ T6132]  do_syscall_64+0x2bd/0xfa0
[  227.427015][ T6132]  ? lockdep_hardirqs_on+0x9c/0x150
[  227.427039][ T6132]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  227.427060][ T6132]  ? clear_bhb_loop+0x60/0xb0
[  227.427085][ T6132]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  227.427105][ T6132] RIP: 0033:0x7fd62cf901f7
[  227.427124][ T6132] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  227.427141][ T6132] RSP: 002b:00007fff0f5f25d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  227.427163][ T6132] RAX: 0000000000000000 RBX: 00007fd62d011d7d RCX: 00007fd62cf901f7
[  227.427183][ T6132] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff0f5f2690
[  227.427195][ T6132] RBP: 00007fff0f5f2690 R08: 0000000000000000 R09: 0000000000000000
[  227.427208][ T6132] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff0f5f3720
[  227.427221][ T6132] R13: 00007fd62d011d7d R14: 0000000000037619 R15: 00007fff0f5f3760
[  227.427257][ T6132]  </TASK>
[  227.427265][ T6132] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  227.615128][   T10] vhci_hcd: vhci_device speed not set
[  227.832235][ T8047] loop3: detected capacity change from 0 to 32768
[  227.948681][ T8065] loop4: detected capacity change from 0 to 1024
[  228.299469][ T8065] hfsplus: unable to load nls mapping "i"
[  228.348926][ T8047] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,checksum_err_retry_nr=12,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,degraded=yes,nojournal_transaction_names
[  228.348959][ T8047]   allowing incompatible features above 0.0: (unknown version)
[  228.348973][ T8047]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  228.554709][ T8047] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[  228.562962][ T8047] bcachefs (loop3): initializing new filesystem
[  228.649122][ T8047] bcachefs (loop3): going read-write
[  228.757743][ T8047] bcachefs (loop3): marking superblocks
[  228.807782][ T8047] bcachefs (loop3): initializing freespace
[  228.817836][ T8047] bcachefs (loop3): done initializing freespace
[  228.861137][ T8047] bcachefs (loop3): reading snapshots table
[  228.881498][ T8047] bcachefs (loop3): reading snapshots done
[  228.935473][ T8062] loop2: detected capacity change from 0 to 40427
[  228.984246][ T8047] bcachefs (loop3): done starting filesystem
[  229.006579][ T8062] F2FS-fs (loop2): Image doesn't support compression
[  229.013329][ T8062] F2FS-fs (loop2): build fault injection rate: 690
[  229.149278][ T8062] F2FS-fs (loop2): invalid crc value
[  229.210769][ T5878] bcachefs (loop3): shutting down
[  229.218001][ T5878] bcachefs (loop3): going read-only
[  229.223285][ T5878] bcachefs (loop3): finished waiting for writes to stop
[  229.260296][ T5878] bcachefs (loop3): flushing journal and stopping allocators, journal seq 3
[  229.282207][ T8092] loop5: detected capacity change from 0 to 64
[  229.424874][ T5878] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 3
[  229.466972][ T5878] bcachefs (loop3): clean shutdown complete, journal seq 4
[  229.514957][ T5878] bcachefs (loop3): marking filesystem clean
[  229.569546][ T8062] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  229.598126][ T8062] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  229.650034][ T5878] bcachefs (loop3): shutdown complete
[  229.658030][   T30] audit: type=1800 audit(1759141412.911:84): pid=8062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.359" name="file1" dev="loop2" ino=10 res=0 errno=0
[  229.734092][   T30] audit: type=1804 audit(1759141412.911:85): pid=8062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.359" name="/newroot/76/bus/file1" dev="loop2" ino=10 res=1 errno=0
[  229.795028][ T5870] syz-executor: attempt to access beyond end of device
[  229.795028][ T5870] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  229.843800][ T5870] CPU: 1 UID: 0 PID: 5870 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  229.843830][ T5870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  229.843843][ T5870] Call Trace:
[  229.843851][ T5870]  <TASK>
[  229.843865][ T5870]  dump_stack_lvl+0x189/0x250
[  229.843896][ T5870]  ? __pfx_dump_stack_lvl+0x10/0x10
[  229.843921][ T5870]  ? __pfx_queue_work_on+0x10/0x10
[  229.843937][ T5870]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  229.843962][ T5870]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  229.843999][ T5870]  f2fs_handle_critical_error+0x37c/0x540
[  229.844028][ T5870]  f2fs_write_end_io+0x886/0xb60
[  229.844070][ T5870]  __submit_merged_bio+0x27a/0x6a0
[  229.844099][ T5870]  __submit_merged_write_cond+0x255/0x530
[  229.844141][ T5870]  f2fs_write_data_pages+0x261d/0x3000
[  229.844204][ T5870]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  229.844283][ T5870]  ? stack_trace_save+0x9c/0xe0
[  229.844305][ T5870]  ? __pfx_stack_trace_save+0x10/0x10
[  229.844347][ T5870]  ? __lock_acquire+0xab9/0xd20
[  229.844386][ T5870]  ? do_raw_spin_lock+0x121/0x290
[  229.844423][ T5870]  ? do_raw_spin_unlock+0x122/0x240
[  229.844447][ T5870]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  229.844473][ T5870]  do_writepages+0x32e/0x550
[  229.844507][ T5870]  ? do_raw_spin_unlock+0x122/0x240
[  229.844536][ T5870]  filemap_fdatawrite+0x199/0x240
[  229.844559][ T5870]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  229.844632][ T5870]  ? do_raw_spin_unlock+0x122/0x240
[  229.844662][ T5870]  f2fs_sync_dirty_inodes+0x31f/0x830
[  229.844714][ T5870]  f2fs_write_checkpoint+0x93e/0x2440
[  229.844739][ T5870]  ? __lock_acquire+0xab9/0xd20
[  229.844798][ T5870]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  229.844888][ T5870]  kill_f2fs_super+0x2cc/0x6d0
[  229.844921][ T5870]  ? __pfx_kill_f2fs_super+0x10/0x10
[  229.844967][ T5870]  ? shrinker_free+0x2ce/0x3e0
[  229.845000][ T5870]  deactivate_locked_super+0xbc/0x130
[  229.845036][ T5870]  cleanup_mnt+0x425/0x4c0
[  229.845066][ T5870]  ? lockdep_hardirqs_on+0x9c/0x150
[  229.845094][ T5870]  task_work_run+0x1d4/0x260
[  229.845123][ T5870]  ? __pfx_task_work_run+0x10/0x10
[  229.845146][ T5870]  ? __x64_sys_umount+0x122/0x160
[  229.845173][ T5870]  ? exit_to_user_mode_loop+0x40/0x130
[  229.845204][ T5870]  exit_to_user_mode_loop+0xe9/0x130
[  229.845233][ T5870]  do_syscall_64+0x2bd/0xfa0
[  229.845257][ T5870]  ? lockdep_hardirqs_on+0x9c/0x150
[  229.845281][ T5870]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  229.845301][ T5870]  ? clear_bhb_loop+0x60/0xb0
[  229.845327][ T5870]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  229.845347][ T5870] RIP: 0033:0x7f8e1c3901f7
[  229.845366][ T5870] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  229.845384][ T5870] RSP: 002b:00007fff25e2b308 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  229.845406][ T5870] RAX: 0000000000000000 RBX: 00007f8e1c411d7d RCX: 00007f8e1c3901f7
[  229.845420][ T5870] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff25e2b3c0
[  229.845433][ T5870] RBP: 00007fff25e2b3c0 R08: 0000000000000000 R09: 0000000000000000
[  229.845445][ T5870] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff25e2c450
[  229.845459][ T5870] R13: 00007f8e1c411d7d R14: 000000000003810a R15: 00007fff25e2c490
[  229.845496][ T5870]  </TASK>
[  230.195761][ T8064] loop4: detected capacity change from 0 to 32768
[  230.220296][ T5870] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  230.290514][ T8064] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  230.408865][ T8064] XFS (loop4): Ending clean mount
[  230.473434][ T8114] FAULT_INJECTION: forcing a failure.
[  230.473434][ T8114] name failslab, interval 1, probability 0, space 0, times 0
[  230.474194][   T30] audit: type=1800 audit(1759141413.721:86): pid=8064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.361" name="file1" dev="loop4" ino=4422 res=0 errno=0
[  230.486247][ T8114] CPU: 1 UID: 0 PID: 8114 Comm: syz.1.366 Not tainted syzkaller #0 PREEMPT(full) 
[  230.486279][ T8114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  230.486295][ T8114] Call Trace:
[  230.486308][ T8114]  <TASK>
[  230.486316][ T8114]  dump_stack_lvl+0x189/0x250
[  230.486353][ T8114]  ? __pfx____ratelimit+0x10/0x10
[  230.486381][ T8114]  ? __pfx_dump_stack_lvl+0x10/0x10
[  230.486406][ T8114]  ? __pfx__printk+0x10/0x10
[  230.486445][ T8114]  ? __pfx___might_resched+0x10/0x10
[  230.486477][ T8114]  ? fs_reclaim_acquire+0x7d/0x100
[  230.486513][ T8114]  should_fail_ex+0x414/0x560
[  230.486549][ T8114]  should_failslab+0xa8/0x100
[  230.486595][ T8114]  kmem_cache_alloc_noprof+0x74/0x6e0
[  230.486620][ T8114]  ? vm_area_alloc+0x24/0x140
[  230.486656][ T8114]  vm_area_alloc+0x24/0x140
[  230.486685][ T8114]  mmap_region+0xdcd/0x2110
[  230.486724][ T8114]  ? mas_prev_slot+0xb31/0xbb0
[  230.486763][ T8114]  ? __pfx_mmap_region+0x10/0x10
[  230.486798][ T8114]  ? unmapped_area_topdown+0x561/0x580
[  230.486914][ T8114]  ? mm_get_unmapped_area_vmflags+0xb3/0xe0
[  230.486955][ T8114]  ? bpf_lsm_mmap_addr+0x9/0x20
[  230.486987][ T8114]  ? security_mmap_addr+0x71/0x270
[  230.487020][ T8114]  do_mmap+0xc45/0x10d0
[  230.487060][ T8114]  ? __pfx_do_mmap+0x10/0x10
[  230.487078][ T8114]  ? down_write_killable+0x178/0x230
[  230.487115][ T8114]  ? __pfx_down_write_killable+0x10/0x10
[  230.487148][ T8114]  ? apparmor_mmap_file+0xc4/0xe0
[  230.487178][ T8114]  vm_mmap_pgoff+0x2a6/0x4d0
[  230.487224][ T8114]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  230.487255][ T8114]  ? __se_sys_memfd_create+0x676/0x780
[  230.487288][ T8114]  ? kfree+0x19a/0x6d0
[  230.487314][ T8114]  ? ksys_mmap_pgoff+0xf4/0x760
[  230.487336][ T8114]  ? __x64_sys_mmap+0x7f/0x140
[  230.487374][ T8114]  do_syscall_64+0xfa/0xfa0
[  230.487400][ T8114]  ? lockdep_hardirqs_on+0x9c/0x150
[  230.487426][ T8114]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  230.487450][ T8114]  ? clear_bhb_loop+0x60/0xb0
[  230.487478][ T8114]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  230.487500][ T8114] RIP: 0033:0x7fbbaa58ef03
[  230.487522][ T8114] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7
[  230.487542][ T8114] RSP: 002b:00007fbbab372e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  230.487573][ T8114] RAX: ffffffffffffffda RBX: 0000000000005913 RCX: 00007fbbaa58ef03
[  230.487589][ T8114] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000
[  230.487602][ T8114] RBP: 0000200000000382 R08: 00000000ffffffff R09: 0000000000000000
[  230.487618][ T8114] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000004
[  230.487630][ T8114] R13: 00007fbbab372ef0 R14: 00007fbbab372eb0 R15: 0000200000000240
[  230.487671][ T8114]  </TASK>
[  230.799690][ T8064] netlink: 560 bytes leftover after parsing attributes in process `syz.4.361'.
[  230.841870][ T5880] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  232.041268][ T5877] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  232.896413][ T8138] loop4: detected capacity change from 0 to 164
[  233.180263][ T8136] loop5: detected capacity change from 0 to 4096
[  234.183287][ T8151] loop4: detected capacity change from 0 to 64
[  234.333521][ T8149] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  234.341483][ T8149] cramfs: wrong magic
[  234.555104][ T8156] FAULT_INJECTION: forcing a failure.
[  234.555104][ T8156] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  234.604011][ T8156] CPU: 1 UID: 0 PID: 8156 Comm: syz.5.378 Not tainted syzkaller #0 PREEMPT(full) 
[  234.604041][ T8156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  234.604054][ T8156] Call Trace:
[  234.604062][ T8156]  <TASK>
[  234.604071][ T8156]  dump_stack_lvl+0x189/0x250
[  234.604099][ T8156]  ? __pfx____ratelimit+0x10/0x10
[  234.604123][ T8156]  ? __pfx_dump_stack_lvl+0x10/0x10
[  234.604145][ T8156]  ? __pfx__printk+0x10/0x10
[  234.604174][ T8156]  ? fs_reclaim_acquire+0x7d/0x100
[  234.604210][ T8156]  should_fail_ex+0x414/0x560
[  234.604241][ T8156]  prepare_alloc_pages+0x213/0x610
[  234.604276][ T8156]  __alloc_frozen_pages_noprof+0x123/0x370
[  234.604309][ T8156]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  234.604348][ T8156]  ? policy_nodemask+0x27c/0x720
[  234.604382][ T8156]  alloc_pages_mpol+0x232/0x4a0
[  234.604415][ T8156]  alloc_pages_noprof+0xa9/0x190
[  234.604444][ T8156]  pte_alloc_one+0x23/0x310
[  234.604462][ T8156]  ? __pte_alloc+0x1d/0x1a0
[  234.604502][ T8156]  __pte_alloc+0x25/0x1a0
[  234.604534][ T8156]  __handle_mm_fault+0x4985/0x5400
[  234.604571][ T8156]  ? lock_vma_under_rcu+0x1a3/0x450
[  234.604595][ T8156]  ? __pfx___handle_mm_fault+0x10/0x10
[  234.604633][ T8156]  ? lock_vma_under_rcu+0x3d2/0x450
[  234.604661][ T8156]  ? __pfx_lock_vma_under_rcu+0x10/0x10
[  234.604692][ T8156]  handle_mm_fault+0x40a/0x8e0
[  234.604726][ T8156]  do_user_addr_fault+0xa7c/0x1380
[  234.604765][ T8156]  ? rcu_is_watching+0x15/0xb0
[  234.604785][ T8156]  ? trace_page_fault_user+0x84/0x1e0
[  234.604817][ T8156]  exc_page_fault+0x82/0x100
[  234.604845][ T8156]  asm_exc_page_fault+0x26/0x30
[  234.604864][ T8156] RIP: 0033:0x7fd62ce50ca6
[  234.604893][ T8156] Code: f0 72 6e 48 63 cd 48 01 c1 49 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01
[  234.604911][ T8156] RSP: 002b:00007fd62de504a0 EFLAGS: 00010246
[  234.604930][ T8156] RAX: 0000000000000001 RBX: 00007fd62de50540 RCX: 0000000000000101
[  234.604944][ T8156] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00007fd62de505e0
[  234.604957][ T8156] RBP: 0000000000000102 R08: 00007fd622c00000 R09: 0000000000000000
[  234.604970][ T8156] R10: 0000000000000000 R11: 00007fd62de50550 R12: 0000000000000001
[  234.604982][ T8156] R13: 00007fd62d02db80 R14: 0000000000000000 R15: 00007fd62de505e0
[  234.605027][ T8156]  </TASK>
[  234.605321][ T8156] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  234.870639][ T8143] loop3: detected capacity change from 0 to 32768
[  234.916134][ T8143] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.363 (8143)
[  234.983554][ T8143] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  235.052584][ T8143] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  235.094452][ T8147] loop2: detected capacity change from 0 to 40427
[  235.113301][ T8147] F2FS-fs (loop2): Image doesn't support compression
[  235.132326][ T8147] F2FS-fs (loop2): build fault injection rate: 690
[  235.156776][ T8147] F2FS-fs (loop2): invalid crc value
[  235.416513][ T8143] BTRFS info (device loop3): enabling ssd optimizations
[  235.439734][ T8143] BTRFS info (device loop3): enabling free space tree
[  235.533031][ T8147] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  235.568935][ T5878] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  235.607583][ T8147] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  235.683659][   T30] audit: type=1800 audit(1759141418.931:87): pid=8147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.375" name="file1" dev="loop2" ino=10 res=0 errno=0
[  235.767389][   T30] audit: type=1804 audit(1759141418.931:88): pid=8147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.375" name="/newroot/79/bus/file1" dev="loop2" ino=10 res=1 errno=0
[  235.796830][ T5870] syz-executor: attempt to access beyond end of device
[  235.796830][ T5870] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  235.827981][ T5870] CPU: 1 UID: 0 PID: 5870 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  235.828010][ T5870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  235.828023][ T5870] Call Trace:
[  235.828031][ T5870]  <TASK>
[  235.828039][ T5870]  dump_stack_lvl+0x189/0x250
[  235.828072][ T5870]  ? __pfx_dump_stack_lvl+0x10/0x10
[  235.828095][ T5870]  ? __pfx_queue_work_on+0x10/0x10
[  235.828112][ T5870]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  235.828135][ T5870]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  235.828169][ T5870]  f2fs_handle_critical_error+0x37c/0x540
[  235.828196][ T5870]  f2fs_write_end_io+0x886/0xb60
[  235.828235][ T5870]  __submit_merged_bio+0x27a/0x6a0
[  235.828264][ T5870]  __submit_merged_write_cond+0x255/0x530
[  235.828303][ T5870]  f2fs_write_data_pages+0x261d/0x3000
[  235.828360][ T5870]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  235.828432][ T5870]  ? __mod_zone_page_state+0xd7/0x140
[  235.828466][ T5870]  ? folios_put_refs+0x58b/0x670
[  235.828509][ T5870]  ? __lock_acquire+0xab9/0xd20
[  235.828547][ T5870]  ? do_raw_spin_lock+0x121/0x290
[  235.828584][ T5870]  ? do_raw_spin_unlock+0x122/0x240
[  235.828616][ T5870]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  235.828640][ T5870]  do_writepages+0x32e/0x550
[  235.828672][ T5870]  ? do_raw_spin_unlock+0x122/0x240
[  235.828700][ T5870]  filemap_fdatawrite+0x199/0x240
[  235.828721][ T5870]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  235.828789][ T5870]  ? do_raw_spin_unlock+0x122/0x240
[  235.828817][ T5870]  f2fs_sync_dirty_inodes+0x31f/0x830
[  235.828860][ T5870]  f2fs_write_checkpoint+0x93e/0x2440
[  235.828887][ T5870]  ? __lock_acquire+0xab9/0xd20
[  235.828949][ T5870]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  235.829037][ T5870]  kill_f2fs_super+0x2cc/0x6d0
[  235.829070][ T5870]  ? __pfx_kill_f2fs_super+0x10/0x10
[  235.829111][ T5870]  ? shrinker_free+0x2ce/0x3e0
[  235.829142][ T5870]  deactivate_locked_super+0xbc/0x130
[  235.829178][ T5870]  cleanup_mnt+0x425/0x4c0
[  235.829207][ T5870]  ? lockdep_hardirqs_on+0x9c/0x150
[  235.829234][ T5870]  task_work_run+0x1d4/0x260
[  235.829263][ T5870]  ? __pfx_task_work_run+0x10/0x10
[  235.829284][ T5870]  ? __x64_sys_umount+0x122/0x160
[  235.829310][ T5870]  ? exit_to_user_mode_loop+0x40/0x130
[  235.829341][ T5870]  exit_to_user_mode_loop+0xe9/0x130
[  235.829369][ T5870]  do_syscall_64+0x2bd/0xfa0
[  235.829401][ T5870]  ? lockdep_hardirqs_on+0x9c/0x150
[  235.829425][ T5870]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  235.829446][ T5870]  ? clear_bhb_loop+0x60/0xb0
[  235.829471][ T5870]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  235.829491][ T5870] RIP: 0033:0x7f8e1c3901f7
[  235.829512][ T5870] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  235.829529][ T5870] RSP: 002b:00007fff25e2b308 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  235.829551][ T5870] RAX: 0000000000000000 RBX: 00007f8e1c411d7d RCX: 00007f8e1c3901f7
[  235.829565][ T5870] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff25e2b3c0
[  235.829578][ T5870] RBP: 00007fff25e2b3c0 R08: 0000000000000000 R09: 0000000000000000
[  235.829591][ T5870] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff25e2c450
[  235.829604][ T5870] R13: 00007f8e1c411d7d R14: 0000000000039890 R15: 00007fff25e2c490
[  235.829640][ T5870]  </TASK>
[  236.223276][ T5870] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  236.412099][ T8156] loop5: detected capacity change from 0 to 32768
[  236.476940][ T8156] bcachefs (/dev/loop5): error validating superblock: Invalid superblock section members_v2: device 0: too many buckets (got 11592116732032, max 2147483583)
[  236.476940][ T8156] members_v2 (size 152):
[  236.476940][ T8156] Device:                        0
[  236.476940][ T8156]   Label:                       (none)
[  236.476940][ T8156]   UUID:                        7af6772b-00de-4159-84cd-1faead05aceb
[  236.476940][ T8156]   Size:                        0
[  236.476940][ T8156]   read errors:                 0
[  236.476940][ T8156]   write errors:                0
[  236.476940][ T8156]   checksum errors:             0
[  236.476940][ T8156]   seqread iops:                0
[  236.476940][ T8156]   seqwrite iops:               0
[  236.476940][ T8156]   randread iops:               0
[  236.476940][ T8156]   randwrite iops:              0
[  236.476940][ T8156]   Bucket size:                 0
[  236.476940][ T8156]   First bucket:                0
[  236.476940][ T8156]   Buckets:                     11592116732032
[  236.476940][ T8156]   Last mount:                  1714681267
[  236.476940][ T8156]   Last superblock write:       42
[  236.476940][ T8156]   State:                       rw
[  236.476940][ T8156]   Data allowed:                journal,btree,user
[  236.476940][ T8156]   Has data:                    journal,btree,user
[  236.476940][ T8156]   Btree allocated bitmap blocksize:256
[  236.476940][ T8156]   Btree allocated bitmap:      000000000000000000000100001000001001100000000000
[  236.477142][ T8156] bcachefs: bch2_fs_get_tree() error: invalid_sb_members
[  237.128561][ T8185] loop3: detected capacity change from 0 to 32768
[  237.254345][   T10] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  237.417383][ T5882] Bluetooth: hci0: command 0x0405 tx timeout
[  237.433988][   T10] usb 6-1: Using ep0 maxpacket: 16
[  237.450994][   T10] usb 6-1: config 0 has an invalid interface number: 41 but max is 0
[  237.463983][   T10] usb 6-1: config 0 has no interface number 0
[  237.494102][   T10] usb 6-1: config 0 interface 41 has no altsetting 0
[  237.507732][   T10] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  237.524335][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  237.532398][   T10] usb 6-1: Product: syz
[  237.537152][   T10] usb 6-1: Manufacturer: syz
[  237.542252][   T10] usb 6-1: SerialNumber: syz
[  237.550279][   T10] usb 6-1: config 0 descriptor??
[  237.563268][   T10] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -22
[  237.581173][ T8185] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,checksum_err_retry_nr=12,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,degraded=yes,nojournal_transaction_names
[  237.581199][ T8185]   allowing incompatible features above 0.0: (unknown version)
[  237.581208][ T8185]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  237.674408][ T8185] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[  237.693089][ T8185] bcachefs (loop3): initializing new filesystem
[  237.722715][ T8185] bcachefs (loop3): going read-write
[  237.734634][ T8206] loop4: detected capacity change from 0 to 4096
[  237.978631][ T8185] bcachefs (loop3): marking superblocks
[  238.012267][ T8185] bcachefs (loop3): initializing freespace
[  238.051761][ T8206] ntfs3(loop4): ino=b, Correct links count -> 1.
[  238.061088][ T8207] warning: `syz.5.384' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  238.093767][ T8185] bcachefs (loop3): done initializing freespace
[  238.108590][ T8206] ntfs3(loop4): ino=18, mi_enum_attr
[  238.123363][ T8206] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  238.136418][ T8185] bcachefs (loop3): reading snapshots table
[  238.162508][ T8185] bcachefs (loop3): reading snapshots done
[  238.330317][ T8185] bcachefs (loop3): done starting filesystem
[  238.441414][ T8185] bcachefs (loop3): going read-only
[  238.446340][ T8216] sctp: [Deprecated]: syz.2.381 (pid 8216) Use of int in max_burst socket option.
[  238.446340][ T8216] Use struct sctp_assoc_value instead
[  238.468076][ T8185] bcachefs (loop3): finished waiting for writes to stop
[  238.523520][ T8185] bcachefs (loop3): flushing journal and stopping allocators, journal seq 2
[  238.702397][ T8185] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 2
[  238.735354][ T8185] bcachefs (loop3): clean shutdown complete, journal seq 3
[  238.744758][ T8185] bcachefs (loop3): marking filesystem clean
[  238.767105][ T8224] bcachefs (loop3): going read-write
[  238.867467][ T5878] bcachefs (loop3): shutting down
[  238.886566][ T5878] bcachefs (loop3): going read-only
[  238.909025][ T5878] bcachefs (loop3): finished waiting for writes to stop
[  238.934805][ T5878] bcachefs (loop3): flushing journal and stopping allocators, journal seq 3
[  238.958495][ T5878] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 3
[  238.989665][ T5878] bcachefs (loop3): clean shutdown complete, journal seq 4
[  239.019074][ T5878] bcachefs (loop3): marking filesystem clean
[  239.127170][ T5878] bcachefs (loop3): shutdown complete
[  239.490255][ T8220] loop4: detected capacity change from 0 to 32768
[  239.582158][ T8220] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  239.710066][ T8220] XFS (loop4): Ending clean mount
[  239.714482][ T8241] loop2: detected capacity change from 0 to 64
[  239.731231][ T8220] XFS (loop4): Quotacheck needed: Please wait.
[  239.843160][ T8220] XFS (loop4): Quotacheck: Done.
[  240.036855][   T43] usb 6-1: USB disconnect, device number 18
[  240.213996][   T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  240.406070][   T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84
[  240.443932][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  240.485574][   T10] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  240.501535][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  240.520291][   T10] usb 5-1: config 0 descriptor??
[  240.640823][ T8247] batadv0: entered promiscuous mode
[  240.729861][ T8244] loop5: detected capacity change from 0 to 32768
[  240.738073][   T10] ath6kl: Failed to submit usb control message: -71
[  240.745073][   T10] ath6kl: unable to send the bmi data to the device: -71
[  240.764601][   T10] ath6kl: Unable to send get target info: -71
[  240.789134][   T10] ath6kl: Failed to init ath6kl core: -71
[  240.810799][   T10] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71
[  240.833171][   T10] usb 5-1: USB disconnect, device number 8
[  240.860231][ T8244] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  241.000663][ T8244] XFS (loop5): Ending clean mount
[  241.010525][ T8244] XFS (loop5): Quotacheck needed: Please wait.
[  241.047450][ T8244] XFS (loop5): Quotacheck: Done.
[  241.082303][ T6132] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  241.392298][ T5880] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  243.141574][ T8271] loop3: detected capacity change from 0 to 32768
[  243.238260][ T8282] loop4: detected capacity change from 0 to 2048
[  243.294056][ T8270] loop5: detected capacity change from 0 to 32768
[  243.328412][ T8282] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  243.412266][ T8282] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  243.469765][ T8270] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  243.553063][   T30] audit: type=1800 audit(1759141426.801:89): pid=8270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.396" name="file0" dev="loop5" ino=17058 res=0 errno=0
[  244.495448][ T8271] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io
[  244.495479][ T8271]   allowing incompatible features above 0.0: (unknown version)
[  244.495492][ T8271]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  244.496897][ T8278] Process accounting resumed
[  244.606577][ T8271] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[  244.623779][ T8271] bcachefs (loop3): recovering from clean shutdown, journal seq 10
[  244.631183][ T8305] loop2: detected capacity change from 0 to 64
[  244.653532][ T8271] bcachefs (loop3): Version upgrade required:
[  244.653532][ T8271] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  244.653532][ T8271] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[  244.653532][ T8271]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  244.668327][ T6132] ocfs2: Unmounting device (7,5) on (node local)
[  244.795596][ T8271] bcachefs (loop3): dropping and reconstructing all alloc info
[  244.875434][ T8271] syz.3.390: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1
[  244.924868][ T8271] CPU: 0 UID: 0 PID: 8271 Comm: syz.3.390 Not tainted syzkaller #0 PREEMPT(full) 
[  244.924898][ T8271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  244.924926][ T8271] Call Trace:
[  244.924935][ T8271]  <TASK>
[  244.924945][ T8271]  dump_stack_lvl+0x189/0x250
[  244.924979][ T8271]  ? __pfx_dump_stack_lvl+0x10/0x10
[  244.925004][ T8271]  ? __pfx__printk+0x10/0x10
[  244.925033][ T8271]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  244.925058][ T8271]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  244.925083][ T8271]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  244.925110][ T8271]  warn_alloc+0x214/0x310
[  244.925144][ T8271]  ? __pfx_warn_alloc+0x10/0x10
[  244.925180][ T8271]  ? __get_vm_area_node+0x28f/0x300
[  244.925202][ T8271]  ? bch2_fs_journal_start+0x2b9/0x12c0
[  244.925232][ T8271]  __vmalloc_node_range_noprof+0x690/0x12d0
[  244.925299][ T8271]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  244.925323][ T8271]  ? bch2_fs_journal_start+0x2b9/0x12c0
[  244.925352][ T8271]  ? rcu_is_watching+0x15/0xb0
[  244.925371][ T8271]  ? bch2_fs_journal_start+0x2b9/0x12c0
[  244.925396][ T8271]  __kvmalloc_node_noprof+0x674/0x910
[  244.925422][ T8271]  ? bch2_fs_journal_start+0x2b9/0x12c0
[  244.925457][ T8271]  bch2_fs_journal_start+0x2b9/0x12c0
[  244.925497][ T8271]  ? bch2_journal_log_msg+0xd9/0x120
[  244.925526][ T8271]  ? __pfx_bch2_fs_journal_start+0x10/0x10
[  244.925551][ T8271]  ? __pfx_bch2_journal_log_msg+0x10/0x10
[  244.925585][ T8271]  ? bch2_reconstruct_alloc+0x32b/0x360
[  244.925625][ T8271]  bch2_fs_recovery+0x2298/0x3a50
[  244.925675][ T8271]  ? __pfx_bch2_fs_recovery+0x10/0x10
[  244.925715][ T8271]  ? __lock_acquire+0xab9/0xd20
[  244.925754][ T8271]  ? __mutex_trylock_common+0x153/0x260
[  244.925782][ T8271]  ? __lock_acquire+0xab9/0xd20
[  244.925822][ T8271]  ? __lock_acquire+0xab9/0xd20
[  244.925879][ T8271]  ? bch2_fs_start+0xa0f/0xda0
[  244.925915][ T8271]  ? up_write+0x1c4/0x420
[  244.925933][ T8271]  ? bch2_fs_start+0x5e7/0xda0
[  244.925969][ T8271]  bch2_fs_start+0xaaf/0xda0
[  244.926004][ T8271]  ? bch2_fs_start+0x5e7/0xda0
[  244.926038][ T8271]  ? __pfx_bch2_fs_start+0x10/0x10
[  244.926093][ T8271]  ? sget+0x267/0x620
[  244.926120][ T8271]  bch2_fs_get_tree+0xb39/0x1520
[  244.926182][ T8271]  ? __pfx_bch2_fs_get_tree+0x10/0x10
[  244.926244][ T8271]  ? __pfx_vfs_parse_comma_sep+0x10/0x10
[  244.926302][ T8271]  vfs_get_tree+0x92/0x2b0
[  244.926329][ T8271]  do_new_mount+0x302/0x9e0
[  244.926353][ T8271]  ? apparmor_capable+0x137/0x1b0
[  244.926391][ T8271]  ? __pfx_do_new_mount+0x10/0x10
[  244.926416][ T8271]  ? ns_capable+0x8a/0xf0
[  244.926450][ T8271]  ? kmem_cache_free+0x19b/0x690
[  244.926487][ T8271]  __se_sys_mount+0x313/0x410
[  244.926519][ T8271]  ? __pfx___se_sys_mount+0x10/0x10
[  244.926550][ T8271]  ? do_syscall_64+0xbe/0xfa0
[  244.926574][ T8271]  ? __x64_sys_mount+0x20/0xc0
[  244.926602][ T8271]  do_syscall_64+0xfa/0xfa0
[  244.926626][ T8271]  ? lockdep_hardirqs_on+0x9c/0x150
[  244.926651][ T8271]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  244.926673][ T8271]  ? clear_bhb_loop+0x60/0xb0
[  244.926698][ T8271]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  244.926719][ T8271] RIP: 0033:0x7fa94319066a
[  244.926738][ T8271] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  244.926756][ T8271] RSP: 002b:00007fa944077e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  244.926779][ T8271] RAX: ffffffffffffffda RBX: 00007fa944077ef0 RCX: 00007fa94319066a
[  244.926794][ T8271] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 00007fa944077eb0
[  244.926809][ T8271] RBP: 0000200000000040 R08: 00007fa944077ef0 R09: 0000000000810000
[  244.926824][ T8271] R10: 0000000000810000 R11: 0000000000000246 R12: 0000200000000000
[  244.926838][ T8271] R13: 00007fa944077eb0 R14: 0000000000005928 R15: 0000200000000280
[  244.926872][ T8271]  </TASK>
[  245.316466][ T8271] Mem-Info:
[  245.319639][ T8271] active_anon:14895 inactive_anon:0 isolated_anon:0
[  245.319639][ T8271]  active_file:13130 inactive_file:40077 isolated_file:0
[  245.319639][ T8271]  unevictable:768 dirty:222 writeback:0
[  245.319639][ T8271]  slab_reclaimable:11349 slab_unreclaimable:99492
[  245.319639][ T8271]  mapped:31333 shmem:9590 pagetables:1400
[  245.319639][ T8271]  sec_pagetables:0 bounce:0
[  245.319639][ T8271]  kernel_misc_reclaimable:0
[  245.319639][ T8271]  free:1283764 free_pcp:28821 free_cma:0
[  245.365797][ T8271] Node 0 active_anon:61580kB inactive_anon:0kB active_file:52512kB inactive_file:160104kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:127232kB dirty:888kB writeback:0kB shmem:38724kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13280kB pagetables:5464kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  245.400296][ T8271] Node 1 active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  245.430665][ T8271] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  245.460762][ T8271] lowmem_reserve[]: 0 2491 2491 2491 2491
[  245.466619][ T8271] Node 0 DMA32 free:1224856kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:65180kB inactive_anon:0kB active_file:52512kB inactive_file:160104kB unevictable:1536kB writepending:888kB zspages:0kB present:3129332kB managed:2551128kB mlocked:0kB bounce:0kB free_pcp:95672kB local_pcp:66064kB free_cma:0kB
[  245.502753][ T8271] lowmem_reserve[]: 0 0 0 0 0
[  245.507620][ T8271] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  245.537771][ T8271] lowmem_reserve[]: 0 0 0 0 0
[  245.542550][ T8271] Node 1 Normal free:3894840kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:14260kB local_pcp:5932kB free_cma:0kB
[  245.581780][ T8271] lowmem_reserve[]: 0 0 0 0 0
[  245.586661][ T8271] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  245.599616][ T8271] Node 0 DMA32: 276*4kB (UM) 825*8kB (UM) 795*16kB (UME) 1245*32kB (UME) 195*64kB (UME) 47*128kB (UME) 145*256kB (UM) 50*512kB (UM) 42*1024kB (UM) 0*2048kB 254*4096kB (M) = 1224872kB
[  245.618025][ T8271] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  245.629741][ T8271] Node 1 Normal: 194*4kB (UME) 34*8kB (UE) 40*16kB (UME) 127*32kB (UME) 35*64kB (UME) 6*128kB (UME) 4*256kB (UM) 2*512kB (M) 1*1024kB (M) 2*2048kB (UE) 947*4096kB (M) = 3894840kB
[  245.647883][ T8271] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  245.657561][ T8271] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  245.666942][ T8271] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  245.678609][ T8271] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  245.688029][ T8271] 63350 total pagecache pages
[  245.692739][ T8271] 0 pages in swap cache
[  245.696959][ T8271] Free swap  = 124996kB
[  245.701157][ T8271] Total swap = 124996kB
[  245.734082][ T8271] 2097051 pages RAM
[  245.738233][ T8271] 0 pages HighMem/MovableOnly
[  245.742928][ T8271] 427499 pages reserved
[  245.754397][ T8271] 0 pages cma reserved
[  245.804285][ T8271] bcachefs (loop3): error reallocating journal fifo (32768 open entries)
[  245.823595][ T8271] bcachefs (loop3): error in recovery: ENOMEM_journal_pin_fifo
[  245.823615][ T8271]   emergency read only at seq 0
[  245.849297][ T8271] bcachefs (loop3): bch2_fs_start(): error starting filesystem ENOMEM_journal_pin_fifo
[  245.869577][ T8271] bcachefs (loop3): shutting down
[  245.914170][ T8271] bcachefs (loop3): shutdown complete
[  246.147999][ T8303] loop4: detected capacity change from 0 to 40427
[  246.167000][ T8319] trusted_key: syz.1.409 sent an empty control message without MSG_MORE.
[  246.206384][ T8303] F2FS-fs (loop4): Image doesn't support compression
[  246.233616][ T8303] F2FS-fs (loop4): build fault injection rate: 690
[  246.341237][ T8303] F2FS-fs (loop4): invalid crc value
[  246.373300][ T8321] loop2: detected capacity change from 0 to 512
[  246.417402][ T8321] EXT4-fs: Ignoring removed bh option
[  246.435139][ T6043] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  246.465466][ T8321] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  246.515254][ T8321] EXT4-fs (loop2): 1 truncate cleaned up
[  246.592382][ T8321] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  246.816901][ T6043] usb 2-1: Using ep0 maxpacket: 8
[  246.834998][ T6043] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[  246.845770][ T6043] usb 2-1: config 179 has no interface number 0
[  246.852111][ T6043] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  246.893493][ T8303] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  246.923277][ T6043] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  246.935174][ T6043] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  246.998381][ T8303] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  247.019464][ T5870] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  247.039728][ T6043] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  247.091929][   T30] audit: type=1800 audit(1759141430.321:90): pid=8303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.404" name="file1" dev="loop4" ino=10 res=0 errno=0
[  247.121231][ T6043] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  247.130685][ T5880] syz-executor: attempt to access beyond end of device
[  247.130685][ T5880] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  247.174446][ T6043] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.221636][ T5880] CPU: 0 UID: 0 PID: 5880 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  247.221664][ T5880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  247.221678][ T5880] Call Trace:
[  247.221686][ T5880]  <TASK>
[  247.221695][ T5880]  dump_stack_lvl+0x189/0x250
[  247.221728][ T5880]  ? __pfx_dump_stack_lvl+0x10/0x10
[  247.221751][ T5880]  ? __pfx_queue_work_on+0x10/0x10
[  247.221769][ T5880]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  247.221793][ T5880]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  247.221828][ T5880]  f2fs_handle_critical_error+0x37c/0x540
[  247.221857][ T5880]  f2fs_write_end_io+0x886/0xb60
[  247.221901][ T5880]  __submit_merged_bio+0x27a/0x6a0
[  247.221927][ T5880]  __submit_merged_write_cond+0x255/0x530
[  247.221969][ T5880]  f2fs_write_data_pages+0x261d/0x3000
[  247.222029][ T5880]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  247.222067][ T5880]  ? kernel_text_address+0xa5/0xe0
[  247.222129][ T5880]  ? irq_work_queue+0xbc/0x140
[  247.222158][ T5880]  ? bpf_send_signal_common+0x3b4/0x540
[  247.222213][ T5880]  ? __lock_acquire+0xab9/0xd20
[  247.222252][ T5880]  ? do_raw_spin_lock+0x121/0x290
[  247.222287][ T5880]  ? do_raw_spin_unlock+0x122/0x240
[  247.222310][ T5880]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  247.222334][ T5880]  do_writepages+0x32e/0x550
[  247.222368][ T5880]  ? do_raw_spin_unlock+0x122/0x240
[  247.222396][ T5880]  filemap_fdatawrite+0x199/0x240
[  247.222419][ T5880]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  247.222491][ T5880]  ? do_raw_spin_unlock+0x122/0x240
[  247.222520][ T5880]  f2fs_sync_dirty_inodes+0x31f/0x830
[  247.222564][ T5880]  f2fs_write_checkpoint+0x93e/0x2440
[  247.222589][ T5880]  ? __lock_acquire+0xab9/0xd20
[  247.222646][ T5880]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  247.222729][ T5880]  kill_f2fs_super+0x2cc/0x6d0
[  247.222762][ T5880]  ? __pfx_kill_f2fs_super+0x10/0x10
[  247.222809][ T5880]  ? shrinker_free+0x2ce/0x3e0
[  247.222841][ T5880]  deactivate_locked_super+0xbc/0x130
[  247.222877][ T5880]  cleanup_mnt+0x425/0x4c0
[  247.222907][ T5880]  ? lockdep_hardirqs_on+0x9c/0x150
[  247.222935][ T5880]  task_work_run+0x1d4/0x260
[  247.222963][ T5880]  ? __pfx_task_work_run+0x10/0x10
[  247.222987][ T5880]  ? __x64_sys_umount+0x122/0x160
[  247.223013][ T5880]  ? exit_to_user_mode_loop+0x40/0x130
[  247.223052][ T5880]  exit_to_user_mode_loop+0xe9/0x130
[  247.223089][ T5880]  do_syscall_64+0x2bd/0xfa0
[  247.223112][ T5880]  ? lockdep_hardirqs_on+0x9c/0x150
[  247.223136][ T5880]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  247.223157][ T5880]  ? clear_bhb_loop+0x60/0xb0
[  247.223199][ T5880]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  247.223219][ T5880] RIP: 0033:0x7f76fab901f7
[  247.223238][ T5880] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  247.223264][ T5880] RSP: 002b:00007fff7384b3a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  247.223286][ T5880] RAX: 0000000000000000 RBX: 00007f76fac11d7d RCX: 00007f76fab901f7
[  247.223301][ T5880] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff7384b460
[  247.223313][ T5880] RBP: 00007fff7384b460 R08: 0000000000000000 R09: 0000000000000000
[  247.223326][ T5880] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff7384c4f0
[  247.223339][ T5880] R13: 00007f76fac11d7d R14: 000000000003c500 R15: 00007fff7384c530
[  247.223374][ T5880]  </TASK>
[  247.223383][ T5880] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  247.240437][   T30] audit: type=1804 audit(1759141430.321:91): pid=8303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.404" name="/newroot/80/bus/file1" dev="loop4" ino=10 res=1 errno=0
[  247.257071][ T8319] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  249.225225][ T8330] tty tty24: ldisc open failed (-12), clearing slot 23
[  249.232870][ T8271] bcachefs: bch2_fs_get_tree() error: ENOMEM_journal_pin_fifo
[  249.276572][ T8331] loop5: detected capacity change from 0 to 32768
[  249.304121][ T8331] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.412 (8331)
[  249.375867][ T8331] BTRFS info (device loop5): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  249.430484][ T8331] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  249.673717][ T8331] BTRFS info (device loop5): enabling ssd optimizations
[  249.703262][ T8331] BTRFS info (device loop5): enabling free space tree
[  249.824502][ T6043] usb 2-1: USB disconnect, device number 11
[  249.830536][    C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  249.830597][    C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  250.073503][ T6132] BTRFS info (device loop5): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  251.043017][ T8361] loop3: detected capacity change from 0 to 32768
[  251.074528][ T8361] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.415 (8361)
[  251.334610][ T8361] BTRFS info (device loop3 state S): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  251.351315][ T8361] BTRFS info (device loop3 state S): using crc32c (crc32c-lib) checksum algorithm
[  251.370942][ T8361] BTRFS warning (device loop3 state S): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  251.528611][ T7765] BTRFS warning (device loop3 state S): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0xf6479a7e level 0, ignored
[  251.623045][ T7768] BTRFS warning (device loop3 state S): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xbeadaddc level 0, ignored
[  251.681185][ T8398] netlink: 60 bytes leftover after parsing attributes in process `syz.4.423'.
[  251.681185][ T7768] BTRFS warning (device loop3 state S): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0x32c165c1 level 0, ignored
[  251.709102][ T8398] netlink: 60 bytes leftover after parsing attributes in process `syz.4.423'.
[  251.737687][ T7725] BTRFS warning (device loop3 state S): checksum verify failed on logical 5328896 mirror 1 wanted 0x51ec978b found 0x0bc7de37 level 0, ignored
[  251.766287][ T8361] BTRFS error (device loop3 state S): chunk 5242880 has missing dev extent, have 0 expect 1
[  251.778884][ T8361] BTRFS error (device loop3 state S): failed to verify dev extents against chunks: -117
[  251.872186][ T8361] BTRFS error (device loop3 state S): open_ctree failed: -117
[  251.963165][ T8401] netlink: 'syz.4.424': attribute type 10 has an invalid length.
[  252.074607][ T8401] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  252.390577][ T8381] loop5: detected capacity change from 0 to 32768
[  252.756687][ T8381] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow
[  252.756713][ T8381]   allowing incompatible features above 0.0: (unknown version)
[  252.756726][ T8381]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  252.933677][ T8381] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0
[  252.955351][ T8381] bcachefs (loop5): initializing new filesystem
[  252.992108][ T8381] bcachefs (loop5): going read-write
[  253.025503][ T8381] bcachefs (loop5): marking superblocks
[  253.052810][ T8381] bcachefs (loop5): initializing freespace
[  253.066819][ T8381] bcachefs (loop5): done initializing freespace
[  253.078642][ T8381] bcachefs (loop5): reading snapshots table
[  253.085093][ T8381] bcachefs (loop5): reading snapshots done
[  253.095074][ T8405] loop3: detected capacity change from 0 to 32768
[  253.119395][ T8381] bcachefs (loop5):  loop5: Superblock write was silently dropped! (seq 0 expected 42)
[  253.134826][ T6043] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  253.144281][ T8381] bcachefs (loop5): done starting filesystem
[  253.297506][ T6043] usb 3-1: device descriptor read/64, error -71
[  253.338425][ T8405] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io
[  253.338458][ T8405]   allowing incompatible features above 0.0: (unknown version)
[  253.338473][ T8405]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  253.434033][ T5924] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  253.475693][ T8405] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[  253.485801][ T8405] bcachefs (loop3): recovering from clean shutdown, journal seq 10
[  253.494826][ T8405] bcachefs (loop3): Version upgrade required:
[  253.494826][ T8405] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  253.494826][ T8405] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[  253.494826][ T8405]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  253.572687][ T6043] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  253.575445][ T8405] bcachefs (loop3): dropping and reconstructing all alloc info
[  253.601876][ T8405] bcachefs (loop3): accounting_read... done
[  253.611254][ T8405] bcachefs (loop3): alloc_read... done
[  253.618336][   T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  253.626010][ T8405] bcachefs (loop3): snapshots_read... done
[  253.633623][ T8405] bcachefs (loop3): check_allocations... done
[  253.657060][ T5924] usb 6-1: Using ep0 maxpacket: 32
[  253.660208][ T8405] bcachefs (loop3): going read-write
[  253.667473][ T5924] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  253.670335][ T8405] bcachefs (loop3): insufficient writeable journal devices available: have 0, need 1
[  253.670335][ T8405] rw journal devs:
[  253.697722][ T5924] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 17958, setting to 1024
[  253.703424][ T8405] bcachefs (loop3): done starting filesystem
[  253.709944][ T5924] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  253.715659][ T1173] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  253.746120][ T6043] usb 3-1: device descriptor read/64, error -71
[  253.760294][ T5924] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.26
[  253.772144][ T5924] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  253.780947][ T5924] usb 6-1: Product: syz
[  253.786662][ T5924] usb 6-1: Manufacturer: syz
[  253.792987][   T10] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  253.803029][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  253.813840][ T5924] usb 6-1: SerialNumber: syz
[  253.821457][ T8405] bcachefs (loop3): /file1 offset 0: write error: btree update error: insufficient_journal_devices
[  253.825216][ T8381] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  253.846161][   T10] usb 5-1: config 0 descriptor??
[  253.854296][ T6043] usb usb3-port1: attempt power cycle
[  253.866348][ T1173] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  253.880075][ T1173] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  253.895642][ T5924] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input10
[  253.896134][ T1173] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  253.923120][ T5878] bcachefs (loop3): shutting down
[  253.931160][ T5878] bcachefs (loop3): going read-only
[  253.941949][ T5878] bcachefs (loop3): finished waiting for writes to stop
[  253.950025][ T1173] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  253.963468][    C1] appletouch 6-1:1.0: atp_complete: usb_submit_urb failed with result -1
[  253.974218][ T5878] bcachefs (loop3): flushing journal and stopping allocators, journal seq 10
[  253.983295][ T5878] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 10
[  253.997573][ T5878] bcachefs (loop3): unclean shutdown complete, journal seq 10
[  254.008494][ T5878] bcachefs (loop3): done going read-only, filesystem not clean
[  254.019286][ T1173] usb 2-1: config 0 descriptor??
[  254.069923][   T10] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  254.109693][ T5878] bcachefs (loop3): shutdown complete
[  254.152631][ T5924] usb 6-1: USB disconnect, device number 19
[  254.158731][    C0] appletouch 6-1:1.0: atp_complete: usb_submit_urb failed with result -19
[  254.201525][ T5924] appletouch 6-1:1.0: input: appletouch disconnected
[  254.234029][ T6043] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  254.281180][   T10] [drm:udl_init] *ERROR* Selecting channel failed
[  254.294001][ T6043] usb 3-1: device descriptor read/8, error -71
[  254.341282][   T10] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2
[  254.354476][   T10] [drm] Initialized udl on minor 2
[  254.365719][   T10] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  254.390416][   T10] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  254.413725][ T5950] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  254.428916][   T10] usb 5-1: USB disconnect, device number 9
[  254.460873][ T5950] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  254.573477][ T6043] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  254.596326][ T6043] usb 3-1: device descriptor read/8, error -71
[  254.714228][ T6043] usb usb3-port1: unable to enumerate USB device
[  254.726180][ T8454] loop3: detected capacity change from 0 to 4096
[  254.745378][ T6132] bcachefs (loop5): shutting down
[  254.752176][ T6132] bcachefs (loop5): going read-only
[  254.758274][ T6132] bcachefs (loop5): finished waiting for writes to stop
[  254.769806][ T6132] bcachefs (loop5): flushing journal and stopping allocators, journal seq 4
[  254.801033][ T6132] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 4
[  254.839511][ T8454] ntfs3(loop3): ino=b, Correct links count -> 1.
[  254.858065][ T6132] bcachefs (loop5): clean shutdown complete, journal seq 5
[  254.877461][ T6132] bcachefs (loop5): marking filesystem clean
[  254.884554][ T8454] ntfs3(loop3): ino=18, mi_enum_attr
[  254.895277][ T8454] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  255.157226][ T8456] netlink: 24 bytes leftover after parsing attributes in process `syz.4.436'.
[  255.169131][ T6132] bcachefs (loop5): shutdown complete
[  255.843309][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  255.897441][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  256.649679][ T6018] usb 4-1: new full-speed USB device number 20 using dummy_hcd
[  257.094275][ T6018] usb 4-1: config 1 has an invalid interface number: 105 but max is 0
[  257.102640][ T6018] usb 4-1: config 1 has no interface number 0
[  257.114397][ T6018] usb 4-1: config 1 interface 105 has no altsetting 0
[  257.132781][ T6018] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  257.164067][ T6018] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  257.181585][ T1173] uclogic 0003:256C:006D.0005: failed retrieving string descriptor #100: -71
[  257.197550][ T6018] usb 4-1: Product: syz
[  257.201883][ T6018] usb 4-1: Manufacturer: syz
[  257.207204][ T1173] uclogic 0003:256C:006D.0005: failed retrieving pen parameters: -71
[  257.218965][ T6018] usb 4-1: SerialNumber: syz
[  257.226323][ T1173] uclogic 0003:256C:006D.0005: failed probing pen v1 parameters: -71
[  257.236399][ T1173] uclogic 0003:256C:006D.0005: failed probing parameters: -71
[  257.252521][ T1173] uclogic 0003:256C:006D.0005: probe with driver uclogic failed with error -71
[  257.271432][ T1173] usb 2-1: USB disconnect, device number 12
[  257.430787][ T8478] loop4: detected capacity change from 0 to 1024
[  257.443594][ T8478] EXT4-fs: Ignoring removed oldalloc option
[  257.522890][ T8478] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  257.552170][ T8478] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  258.711105][ T6018] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -32
[  259.005474][ T6018] aqc111 4-1:1.105: probe with driver aqc111 failed with error -32
[  259.927176][ T5880] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  259.991338][ T6018] usb 4-1: USB disconnect, device number 20
[  260.200460][ T8497] loop4: detected capacity change from 0 to 128
[  260.237898][ T8497] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  260.285691][ T8497] ext4 filesystem being mounted at /93/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  260.372569][ T8501] loop3: detected capacity change from 0 to 512
[  260.450460][ T8501] EXT4-fs error (device loop3): ext4_iget_extra_inode:5075: inode #15: comm syz.3.451: corrupted in-inode xattr: invalid ea_ino
[  260.465421][ T8501] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.451: couldn't read orphan inode 15 (err -117)
[  260.483589][ T8501] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  260.554658][ T5878] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  261.526261][ T5880] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  261.677300][ T6018] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  261.883962][ T6018] usb 4-1: Using ep0 maxpacket: 32
[  261.909832][ T6018] usb 4-1: config 0 has an invalid interface number: 4 but max is 0
[  261.938300][ T6018] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  261.983569][ T8523] netlink: 16 bytes leftover after parsing attributes in process `syz.2.459'.
[  262.007999][ T6018] usb 4-1: config 0 has no interface number 0
[  262.040487][ T6018] usb 4-1: config 0 interface 4 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[  262.089431][ T8523] bridge0: port 1(bridge_slave_0) entered disabled state
[  262.112831][ T6018] usb 4-1: config 0 interface 4 has no altsetting 0
[  262.137566][ T6018] usb 4-1: New USB device found, idVendor=0c52, idProduct=2861, bcdDevice= 1.37
[  262.184563][ T6018] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  262.224009][ T6018] usb 4-1: Product: syz
[  262.228245][ T6018] usb 4-1: Manufacturer: syz
[  262.232871][ T6018] usb 4-1: SerialNumber: syz
[  262.315192][ T6018] usb 4-1: config 0 descriptor??
[  262.380541][ T6018] usb-storage 4-1:0.4: USB Mass Storage device detected
[  262.417587][ T8529] loop2: detected capacity change from 0 to 164
[  262.728987][ T6018] ftdi_sio 4-1:0.4: FTDI USB Serial Device converter detected
[  262.783367][ T6018] usb 4-1: Detected SIO
[  262.862575][ T6018] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  262.987044][ T6018] usb 4-1: USB disconnect, device number 21
[  263.040428][ T6018] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  263.070214][ T8536] loop2: detected capacity change from 0 to 128
[  263.109985][ T6018] ftdi_sio 4-1:0.4: device disconnected
[  263.195327][ T8536] EXT4-fs (loop2): Test dummy encryption mode enabled
[  263.258184][ T8536] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  263.454152][ T8536] ext4 filesystem being mounted at /100/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  263.472753][ T8536] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni"
[  263.535557][ T8536] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx"
[  264.146487][ T8550] loop5: detected capacity change from 0 to 8
[  264.245982][ T8550] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  264.280254][ T8550] cramfs: bad data blocksize 4294934200
[  264.308024][ T8550] cramfs: bad data blocksize 4294934200
[  264.308071][ T6282] udevd[6282]: incorrect cramfs checksum on /dev/loop5
[  264.342580][   T30] audit: type=1800 audit(1759141447.581:92): pid=8550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.435" name="file1" dev="loop5" ino=33092 res=0 errno=0
[  264.402978][ T6282] udevd[6282]: incorrect cramfs checksum on /dev/loop5
[  264.496425][ T5870] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  264.823164][ T8567] loop4: detected capacity change from 0 to 128
[  264.856176][ T8564] loop5: detected capacity change from 0 to 1024
[  264.916814][ T8567] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  265.034767][ T8572] netlink: 8 bytes leftover after parsing attributes in process `'.
[  265.312357][ T8567] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  265.636737][ T8571] loop3: detected capacity change from 0 to 512
[  265.702288][ T8571] EXT4-fs: Ignoring removed oldalloc option
[  265.785860][ T8564] hfsplus: inconsistency in B*Tree (9,1,255,1,0)
[  265.792700][ T8564] hfsplus: xattr searching failed
[  265.804428][ T8571] EXT4-fs (loop3): 1 truncate cleaned up
[  265.811905][ T8571] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  265.867098][ T8580] loop2: detected capacity change from 0 to 16
[  265.892630][ T8580] erofs (device loop2): mounted with root inode @ nid 36.
[  265.974023][   T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  266.018799][ T7768] hfsplus: b-tree write err: -5, ino 4
[  266.042154][ T5878] EXT4-fs error (device loop3): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0
[  266.169138][ T5878] EXT4-fs (loop3): Remounting filesystem read-only
[  266.177361][   T10] usb 5-1: Using ep0 maxpacket: 8
[  266.211958][   T10] usb 5-1: config 11 has an invalid interface number: 95 but max is 0
[  266.273901][   T10] usb 5-1: config 11 has no interface number 0
[  266.301620][   T10] usb 5-1: config 11 interface 95 altsetting 64 endpoint 0x82 has invalid wMaxPacketSize 0
[  266.360210][   T10] usb 5-1: config 11 interface 95 has no altsetting 0
[  266.941675][ T8590] loop5: detected capacity change from 0 to 1024
[  266.980727][ T8590] hfsplus: xattr searching failed
[  267.005966][ T8590] hfsplus: xattr searching failed
[  267.012671][   T30] audit: type=1800 audit(1759141450.261:93): pid=8590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.482" name="file1" dev="loop5" ino=2 res=0 errno=0
[  267.045852][   T10] usb 5-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d
[  267.056998][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  267.075594][   T10] usb 5-1: Product: syz
[  267.091618][   T10] usb 5-1: Manufacturer: syz
[  267.096529][   T10] usb 5-1: SerialNumber: syz
[  267.108802][ T8592] loop2: detected capacity change from 0 to 128
[  267.276281][ T5878] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  267.557576][ T7768] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  267.630313][ T8604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.488'.
[  267.694723][ T7768] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  267.744052][ T5924] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  267.787831][ T7768] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  267.914073][ T5924] usb 3-1: Using ep0 maxpacket: 16
[  267.930045][ T7768] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  267.934957][ T5924] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  267.960195][ T8608] loop5: detected capacity change from 0 to 512
[  267.966776][ T5924] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  268.012647][ T5924] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  268.023129][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  268.031995][ T5924] usb 3-1: Product: syz
[  268.037476][ T5924] usb 3-1: Manufacturer: syz
[  268.042577][ T5924] usb 3-1: SerialNumber: syz
[  268.084380][ T8608] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  268.106778][ T8608] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  268.252992][ T8608] Quota error (device loop5): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8
[  268.293559][ T8608] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  268.309443][ T7768] bridge_slave_1: left allmulticast mode
[  268.312292][ T8608] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.490: Failed to acquire dquot type 0
[  268.335156][ T7768] bridge_slave_1: left promiscuous mode
[  268.341225][ T7768] bridge0: port 2(bridge_slave_1) entered disabled state
[  268.357808][ T7768] bridge_slave_0: left allmulticast mode
[  268.374446][ T7768] bridge_slave_0: left promiscuous mode
[  268.380567][ T7768] bridge0: port 1(bridge_slave_0) entered disabled state
[  268.415825][ T6132] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  268.498179][ T5924] usb 3-1: cannot find UAC_HEADER
[  268.516649][   T10] usbtouchscreen 5-1:11.95: probe with driver usbtouchscreen failed with error -8
[  270.306346][   T10] usb 5-1: USB disconnect, device number 10
[  270.309247][ T5880] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  270.347214][ T8617] loop5: detected capacity change from 0 to 736
[  270.408664][ T5924] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22
[  270.474558][ T5924] usb 3-1: USB disconnect, device number 12
[  270.720431][ T5877] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  270.723131][ T5877] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  270.734637][ T5877] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  270.736538][ T6078] udevd[6078]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  270.742767][ T5877] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  270.746874][ T5877] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  271.223409][ T8631] loop2: detected capacity change from 0 to 128
[  271.274118][   T30] audit: type=1800 audit(1759141454.521:94): pid=8631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.498" name="file1" dev="loop2" ino=1048628 res=0 errno=0
[  273.061514][ T5877] Bluetooth: hci3: command tx timeout
[  273.414707][ T7768] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  273.446027][ T7768] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  273.466236][ T7768] bond0 (unregistering): Released all slaves
[  273.494504][ T5924] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  273.654013][ T5924] usb 2-1: Using ep0 maxpacket: 16
[  273.666137][ T5924] usb 2-1: config 0 has an invalid interface number: 29 but max is 0
[  273.684025][ T5924] usb 2-1: config 0 has no interface number 0
[  273.723401][ T7768] tipc: Left network mode
[  273.729446][ T5924] usb 2-1: New USB device found, idVendor=050d, idProduct=2102, bcdDevice=70.d0
[  273.754095][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  273.763514][ T5924] usb 2-1: Product: syz
[  273.793971][ T5924] usb 2-1: Manufacturer: syz
[  273.799014][ T5924] usb 2-1: SerialNumber: syz
[  273.812989][ T8643] loop4: detected capacity change from 0 to 1024
[  273.827902][ T5924] usb 2-1: config 0 descriptor??
[  273.857862][ T8643] EXT4-fs: Ignoring removed oldalloc option
[  273.893368][ T8643] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  273.920208][ T8643] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  274.039748][ T8651] loop2: detected capacity change from 0 to 164
[  274.115869][ T8651] rock: directory entry would overflow storage
[  274.123983][ T8651] rock: sig=0x4543, size=28, remaining=18
[  274.803087][ T3470] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: comm kworker/u8:7: lblock 0 mapped to illegal pblock 0 (length 6)
[  274.863347][ T7768] hsr_slave_0: left promiscuous mode
[  274.892961][ T7768] hsr_slave_1: left promiscuous mode
[  274.899630][ T3470] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117
[  274.924311][ T3470] EXT4-fs (loop4): This should not happen!! Data will be lost
[  274.924311][ T3470] 
[  274.939715][ T7768] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  274.941209][   T50] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  274.947834][ T7768] batman_adv: batadv0: Removing interface: batadv_slave_0
[  274.992423][ T7768] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  275.005543][   T50] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 112 with error 28
[  275.018353][ T7768] batman_adv: batadv0: Removing interface: batadv_slave_1
[  275.031483][   T50] EXT4-fs (loop4): This should not happen!! Data will be lost
[  275.031483][   T50] 
[  275.201161][ T5877] Bluetooth: hci3: command tx timeout
[  275.209384][   T50] EXT4-fs (loop4): Total free blocks count 0
[  275.223969][   T50] EXT4-fs (loop4): Free/Dirty block details
[  275.230646][   T50] EXT4-fs (loop4): free_blocks=4293918720
[  275.251582][   T50] EXT4-fs (loop4): dirty_blocks=5744
[  275.519930][   T50] EXT4-fs (loop4): Block reservation details
[  275.621820][ T8678] loop2: detected capacity change from 0 to 164
[  275.742653][ T8678] iso9660: Corrupted directory entry in block 2 of inode 1920
[  276.180950][ T8680] loop2: detected capacity change from 0 to 256
[  276.208608][ T8680] exfat: Deprecated parameter 'utf8'
[  276.217071][ T7768] veth1_macvtap: left promiscuous mode
[  276.222707][ T7768] veth0_macvtap: left promiscuous mode
[  276.229427][ T7768] veth1_vlan: left promiscuous mode
[  276.235189][ T7768] veth0_vlan: left promiscuous mode
[  276.263257][ T8680] exfat: Deprecated parameter 'namecase'
[  276.283492][   T24] usb 2-1: USB disconnect, device number 13
[  276.314980][ T8680] exfat: Deprecated parameter 'utf8'
[  276.371586][ T8680] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d)
[  276.425897][ T8680] exFAT-fs (loop2): start_clu is invalid cluster(0x0)
[  276.472492][ T8688] loop5: detected capacity change from 0 to 512
[  276.489808][ T8688] EXT4-fs: Ignoring removed oldalloc option
[  276.550907][ T8688] EXT4-fs (loop5): 1 truncate cleaned up
[  276.590977][ T8688] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  276.798079][ T5877] Bluetooth: hci4: unexpected event for opcode 0x200a
[  277.257477][ T5877] Bluetooth: hci3: command tx timeout
[  277.271232][ T6132] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  277.823735][ T5924] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  278.065855][ T8705] loop5: detected capacity change from 0 to 2048
[  278.074046][ T5924] usb 2-1: Using ep0 maxpacket: 8
[  278.082338][ T5924] usb 2-1: unable to get BOS descriptor or descriptor too short
[  278.108243][ T8705] EXT4-fs: Ignoring removed nobh option
[  278.115072][ T8708] loop4: detected capacity change from 0 to 1024
[  278.127316][ T5924] usb 2-1: config 1 has an invalid interface number: 6 but max is 2
[  278.140069][ T5924] usb 2-1: config 1 has an invalid interface descriptor of length 4, skipping
[  278.170002][ T5924] usb 2-1: config 1 has 4 interfaces, different from the descriptor's value: 3
[  278.206218][ T5877] Bluetooth: hci1: unexpected event for opcode 0x200d
[  278.212343][ T5924] usb 2-1: config 1 has no interface number 3
[  278.222138][ T8705] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  278.242304][ T8705] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  278.256162][ T5924] usb 2-1: too many endpoints for config 1 interface 6 altsetting 0: 58, using maximum allowed: 30
[  278.268860][ T5924] usb 2-1: config 1 interface 6 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 58
[  278.288791][ T5924] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  278.301089][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  278.314089][ T5924] usb 2-1: Product: syz
[  278.318738][ T5924] usb 2-1: Manufacturer: syz
[  278.328037][ T5924] usb 2-1: SerialNumber: syz
[  278.396369][ T8715] loop2: detected capacity change from 0 to 512
[  278.444615][ T8715] EXT4-fs (loop2): Test dummy encryption mode enabled
[  278.461829][ T8715] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  278.549734][ T8715] EXT4-fs error (device loop2): ext4_iget_extra_inode:5075: inode #17: comm syz.2.519: corrupted in-inode xattr: invalid ea_ino
[  278.581536][ T8715] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.519: couldn't read orphan inode 17 (err -117)
[  278.600698][ T8715] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  278.609709][ T5924] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  278.630105][   T50] hfsplus: b-tree write err: -5, ino 4
[  278.671348][ T5870] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  278.732440][ T5924] usb 2-1: USB disconnect, device number 14
[  278.786994][ T6132] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  278.878727][ T6282] udevd[6282]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  279.886181][ T5877] Bluetooth: hci3: command tx timeout
[  281.039022][ T8735] loop2: detected capacity change from 0 to 2048
[  281.097444][ T8735] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  281.325514][ T7768] team0 (unregistering): Port device team_slave_1 removed
[  281.469890][ T7768] team0 (unregistering): Port device team_slave_0 removed
[  281.515188][ T8727] warn_alloc: 1 callbacks suppressed
[  281.515210][ T8727] syz.5.522: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  281.541482][ T8727] CPU: 0 UID: 0 PID: 8727 Comm: syz.5.522 Not tainted syzkaller #0 PREEMPT(full) 
[  281.541517][ T8727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  281.541534][ T8727] Call Trace:
[  281.541545][ T8727]  <TASK>
[  281.541556][ T8727]  dump_stack_lvl+0x189/0x250
[  281.541592][ T8727]  ? __pfx_dump_stack_lvl+0x10/0x10
[  281.541612][ T8727]  ? __pfx__printk+0x10/0x10
[  281.541636][ T8727]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  281.541656][ T8727]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  281.541677][ T8727]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  281.541698][ T8727]  warn_alloc+0x214/0x310
[  281.541726][ T8727]  ? __pfx_warn_alloc+0x10/0x10
[  281.541756][ T8727]  ? __get_vm_area_node+0x28f/0x300
[  281.541775][ T8727]  ? packet_set_ring+0x6f3/0x2120
[  281.541797][ T8727]  __vmalloc_node_range_noprof+0x690/0x12d0
[  281.541855][ T8727]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  281.541877][ T8727]  ? alloc_pages_mpol+0x3cd/0x4a0
[  281.541902][ T8727]  ? packet_set_ring+0x6f3/0x2120
[  281.541918][ T8727]  vzalloc_noprof+0xb2/0xf0
[  281.541937][ T8727]  ? packet_set_ring+0x6f3/0x2120
[  281.541955][ T8727]  packet_set_ring+0x6f3/0x2120
[  281.541995][ T8727]  ? __pfx_packet_set_ring+0x10/0x10
[  281.542030][ T8727]  ? _copy_from_user+0x94/0xb0
[  281.542053][ T8727]  packet_setsockopt+0xc5a/0x12c0
[  281.542073][ T8727]  ? __pfx_packet_setsockopt+0x10/0x10
[  281.542091][ T8727]  ? do_mprotect_pkey+0xaf8/0xcd0
[  281.542127][ T8727]  ? aa_sk_perm+0x81e/0x950
[  281.542153][ T8727]  ? __pfx_aa_sk_perm+0x10/0x10
[  281.542175][ T8727]  ? aa_sock_opt_perm+0xff/0x1b0
[  281.542200][ T8727]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  281.542222][ T8727]  ? __pfx_packet_setsockopt+0x10/0x10
[  281.542241][ T8727]  do_sock_setsockopt+0x17c/0x1b0
[  281.542268][ T8727]  __x64_sys_setsockopt+0x13f/0x1b0
[  281.542295][ T8727]  do_syscall_64+0xfa/0xfa0
[  281.542315][ T8727]  ? lockdep_hardirqs_on+0x9c/0x150
[  281.542336][ T8727]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  281.542353][ T8727]  ? clear_bhb_loop+0x60/0xb0
[  281.542375][ T8727]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  281.542392][ T8727] RIP: 0033:0x7fd62cf8eec9
[  281.542408][ T8727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  281.542423][ T8727] RSP: 002b:00007fd62de51038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  281.542442][ T8727] RAX: ffffffffffffffda RBX: 00007fd62d1e5fa0 RCX: 00007fd62cf8eec9
[  281.542455][ T8727] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000003
[  281.542465][ T8727] RBP: 00007fd62d011f91 R08: 0000000000000010 R09: 0000000000000000
[  281.542476][ T8727] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000
[  281.542486][ T8727] R13: 00007fd62d1e6038 R14: 00007fd62d1e5fa0 R15: 00007fff0f5f3348
[  281.542516][ T8727]  </TASK>
[  281.542524][ T8727] Mem-Info:
[  281.836192][ T8727] active_anon:29124 inactive_anon:0 isolated_anon:0
[  281.836192][ T8727]  active_file:17226 inactive_file:40003 isolated_file:0
[  281.836192][ T8727]  unevictable:768 dirty:188 writeback:0
[  281.836192][ T8727]  slab_reclaimable:11707 slab_unreclaimable:94974
[  281.836192][ T8727]  mapped:33476 shmem:23568 pagetables:1498
[  281.836192][ T8727]  sec_pagetables:0 bounce:0
[  281.836192][ T8727]  kernel_misc_reclaimable:0
[  281.836192][ T8727]  free:1257625 free_pcp:26711 free_cma:0
[  281.887239][ T8727] Node 0 active_anon:116496kB inactive_anon:0kB active_file:68896kB inactive_file:159808kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:133904kB dirty:752kB writeback:0kB shmem:92736kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13048kB pagetables:5856kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  281.927864][ T8727] Node 1 active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  281.958968][ T8727] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  281.995300][ T8727] lowmem_reserve[]: 0 2491 2491 2491 2491
[  282.001236][ T8727] Node 0 DMA32 free:1120228kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:116532kB inactive_anon:0kB active_file:68896kB inactive_file:159812kB unevictable:1536kB writepending:756kB zspages:0kB present:3129332kB managed:2551128kB mlocked:0kB bounce:0kB free_pcp:92988kB local_pcp:46564kB free_cma:0kB
[  282.038071][ T8727] lowmem_reserve[]: 0 0 0 0 0
[  282.043438][ T8727] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  282.077098][ T8727] lowmem_reserve[]: 0 0 0 0 0
[  282.082239][ T8727] Node 1 Normal free:3894840kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:14296kB local_pcp:8332kB free_cma:0kB
[  282.116134][ T8727] lowmem_reserve[]: 0 0 0 0 0
[  282.121333][ T8727] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  282.136580][ T8727] Node 0 DMA32: 3*4kB (UME) 1*8kB (U) 1*16kB (E) 2*32kB (UM) 2*64kB (ME) 58*128kB (UME) 34*256kB (UM) 112*512kB (UME) 80*1024kB (UM) 9*2048kB (UM) 231*4096kB (UM) = 1120228kB
[  282.156876][ T8727] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  282.170409][ T8727] Node 1 Normal: 194*4kB (UME) 34*8kB (UE) 40*16kB (UME) 127*32kB (UME) 35*64kB (UME) 6*128kB (UME) 4*256kB (UM) 2*512kB (M) 1*1024kB (M) 2*2048kB (UE) 947*4096kB (M) = 3894840kB
[  282.189236][ T8727] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  282.198970][ T8727] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  282.208642][ T8727] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  282.218508][ T8727] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  282.228608][ T8727] 80772 total pagecache pages
[  282.234683][ T8727] 0 pages in swap cache
[  282.238968][ T8727] Free swap  = 124996kB
[  282.243168][ T8727] Total swap = 124996kB
[  282.255390][ T8727] 2097051 pages RAM
[  282.259272][ T8727] 0 pages HighMem/MovableOnly
[  282.265385][ T8727] 427499 pages reserved
[  282.269619][ T8727] 0 pages cma reserved
[  282.732154][ T8743] loop5: detected capacity change from 0 to 1024
[  282.784725][ T8743] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  282.821412][ T8743] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  283.160515][ T8623] chnl_net:caif_netlink_parms(): no params data found
[  283.417972][ T6132] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  283.522611][ T8757] devtmpfs: Unknown parameter ''
[  284.277909][ T8623] bridge0: port 1(bridge_slave_0) entered blocking state
[  284.307512][ T8623] bridge0: port 1(bridge_slave_0) entered disabled state
[  284.346816][ T8766] loop5: detected capacity change from 0 to 128
[  284.354191][ T8623] bridge_slave_0: entered allmulticast mode
[  284.362265][ T8623] bridge_slave_0: entered promiscuous mode
[  284.435770][   T30] audit: type=1800 audit(1759141467.681:95): pid=8766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.534" name="file2" dev="loop5" ino=1048645 res=0 errno=0
[  284.508300][ T8766] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006)
[  284.551368][ T8766] FAT-fs (loop5): Filesystem has been set read-only
[  284.678286][ T8623] bridge0: port 2(bridge_slave_1) entered blocking state
[  284.692818][ T8623] bridge0: port 2(bridge_slave_1) entered disabled state
[  284.710781][ T8775] loop2: detected capacity change from 0 to 512
[  284.714300][ T8623] bridge_slave_1: entered allmulticast mode
[  284.743776][ T8775] EXT4-fs (loop2): blocks per group (95) and clusters per group (32768) inconsistent
[  284.750682][ T8623] bridge_slave_1: entered promiscuous mode
[  284.815422][ T6282] udevd[6282]: incorrect jbd checksum on /dev/loop2
[  285.005269][ T8623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  285.273701][ T8623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  286.394749][ T8788] input: syz0 as /devices/virtual/input/input12
[  286.404423][ T8789] loop2: detected capacity change from 0 to 1024
[  286.531874][ T8789] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  287.473795][ T8794] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  287.492608][ T8794] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  287.506144][ T8794] EXT4-fs (loop2): This should not happen!! Data will be lost
[  287.506144][ T8794] 
[  287.516269][ T8794] EXT4-fs (loop2): Total free blocks count 0
[  287.522646][ T8794] EXT4-fs (loop2): Free/Dirty block details
[  287.529192][ T8794] EXT4-fs (loop2): free_blocks=68451041280
[  287.535433][ T8794] EXT4-fs (loop2): dirty_blocks=6560
[  287.540870][ T8794] EXT4-fs (loop2): Block reservation details
[  287.547263][ T8794] EXT4-fs (loop2): i_reserved_data_blocks=5
[  287.589528][ T8796] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 8 with error 28
[  289.749888][ T8623] team0: Port device team_slave_0 added
[  289.763292][ T8800] loop4: detected capacity change from 0 to 1024
[  289.768498][ T8623] team0: Port device team_slave_1 added
[  289.805716][ T8800] EXT4-fs: Ignoring removed bh option
[  289.832676][ T8800] EXT4-fs: Ignoring removed nobh option
[  289.866242][ T8800] EXT4-fs: Ignoring removed bh option
[  289.903535][ T8800] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  290.197145][ T7768] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  290.256953][ T5884] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  290.327622][ T7768] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  290.327734][ T5884] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  290.352103][ T5884] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  290.369480][ T5884] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  290.378200][ T5884] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  290.437275][ T8623] batman_adv: batadv0: Adding interface: batadv_slave_0
[  290.444948][ T8623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  290.477346][ T8623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  290.529960][ T7768] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  290.558098][ T7768] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  290.605578][ T8623] batman_adv: batadv0: Adding interface: batadv_slave_1
[  290.613544][ T8623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  290.665181][ T8623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  290.683273][ T5880] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  290.839393][ T7768] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  290.874332][ T7768] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  290.920297][ T8623] hsr_slave_0: entered promiscuous mode
[  290.945590][ T8623] hsr_slave_1: entered promiscuous mode
[  290.969215][ T8623] debugfs: 'hsr0' already exists in 'hsr'
[  290.984250][ T8623] Cannot create hsr debugfs directory
[  291.038519][ T8815] loop5: detected capacity change from 0 to 128
[  291.105642][ T8815] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  291.152233][ T8815] ext4 filesystem being mounted at /91/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  291.286232][ T7768] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  291.326464][ T7768] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  292.069401][ T5924] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  292.102565][ T6132] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  292.246443][ T5924] usb 5-1: Using ep0 maxpacket: 16
[  292.272570][ T5924] usb 5-1: config 0 has an invalid interface number: 93 but max is 0
[  292.286761][ T5924] usb 5-1: config 0 has no interface number 0
[  292.371921][ T5924] usb 5-1: New USB device found, idVendor=0bda, idProduct=ffef, bcdDevice=ff.8b
[  292.410854][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  292.443035][ T5924] usb 5-1: Product: syz
[  292.456113][ T5877] Bluetooth: hci2: command tx timeout
[  292.457968][ T5924] usb 5-1: Manufacturer: syz
[  292.934146][ T5924] usb 5-1: SerialNumber: syz
[  293.056421][ T5924] usb 5-1: config 0 descriptor??
[  293.360896][ T8844] loop5: detected capacity change from 0 to 1024
[  293.418950][ T8844] hfsplus: xattr searching failed
[  293.528056][ T7768] bridge_slave_1: left allmulticast mode
[  293.533788][ T7768] bridge_slave_1: left promiscuous mode
[  293.546232][ T7768] bridge0: port 2(bridge_slave_1) entered disabled state
[  293.615634][ T7768] bridge_slave_0: left allmulticast mode
[  293.629199][ T8848] loop5: detected capacity change from 0 to 1024
[  293.636393][ T7768] bridge_slave_0: left promiscuous mode
[  293.644857][ T7768] bridge0: port 1(bridge_slave_0) entered disabled state
[  293.655436][ T8848] EXT4-fs: Ignoring removed mblk_io_submit option
[  293.663230][ T8848] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  293.703548][ T8848] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  293.874898][ T6132] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  293.991546][ T5870] EXT4-fs: 39 callbacks suppressed
[  293.991565][ T5870] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  294.534034][ T5877] Bluetooth: hci2: command tx timeout
[  294.854172][    T9] usb 5-1: USB disconnect, device number 11
[  295.004020][ T8856] loop2: detected capacity change from 0 to 128
[  295.004283][ T8858] loop4: detected capacity change from 0 to 2048
[  295.066079][ T8856] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  295.073274][ T8858] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  295.109688][ T8856] ext4 filesystem being mounted at /130/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  296.019434][ T5870] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  296.306285][ T8870] loop2: detected capacity change from 0 to 2048
[  296.621943][ T5877] Bluetooth: hci2: command tx timeout
[  297.965693][ T8870] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  298.220554][ T8877] loop2: detected capacity change from 0 to 512
[  298.294267][ T8877] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  298.350100][ T8877] EXT4-fs (loop2): 1 truncate cleaned up
[  298.384056][ T8877] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  298.694260][ T5877] Bluetooth: hci2: command tx timeout
[  299.195021][ T7768] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  299.208861][ T7768] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  299.220572][ T7768] bond0 (unregistering): Released all slaves
[  299.424115][   T43] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  299.494010][ T6018] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  299.601252][ T8808] chnl_net:caif_netlink_parms(): no params data found
[  299.629094][   T43] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[  299.654298][   T43] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  299.690158][ T8623] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  299.694556][   T43] usb 3-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53
[  299.718494][ T6018] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30
[  299.745198][ T6018] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  299.755480][   T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  299.792794][ T6018] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196
[  299.807999][   T43] usb 3-1: config 0 descriptor??
[  299.869593][ T6018] usb 6-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00
[  299.900900][ T6018] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  299.925714][ T8623] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  299.950026][ T6018] usb 6-1: config 0 descriptor??
[  299.968497][ T8623] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  300.054163][   T43] usb 3-1: string descriptor 0 read error: -71
[  300.132009][   T43] usb 3-1: USB disconnect, device number 13
[  300.958817][ T8893] loop4: detected capacity change from 0 to 256
[  300.969095][ T8893] vfat: Bad value for 'uid'
[  300.974252][ T8893] vfat: Bad value for 'uid'
[  301.054629][ T8623] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  301.179515][ T6018] holtek_kbd 0003:04D9:A055.0006: unbalanced delimiter at end of report description
[  301.249121][ T6018] holtek_kbd 0003:04D9:A055.0006: probe with driver holtek_kbd failed with error -22
[  301.314429][ T6018] usb 6-1: USB disconnect, device number 20
[  301.399662][ T5870] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  301.415672][ T7768] hsr_slave_0: left promiscuous mode
[  301.444410][ T7768] hsr_slave_1: left promiscuous mode
[  301.451263][ T7768] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  301.512053][ T7768] batman_adv: batadv0: Removing interface: batadv_slave_0
[  301.568084][ T7768] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  301.599752][ T7768] batman_adv: batadv0: Removing interface: batadv_slave_1
[  301.729148][ T7768] veth1_macvtap: left promiscuous mode
[  301.774076][ T7768] veth0_macvtap: left promiscuous mode
[  301.791389][ T7768] veth1_vlan: left promiscuous mode
[  301.824780][ T7768] veth0_vlan: left promiscuous mode
[  302.057001][ T6043] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  302.258484][ T6043] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  302.273932][ T6043] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  302.289565][ T6043] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  302.330110][ T6043] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  302.345258][ T6043] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  302.379105][ T6043] usb 5-1: config 0 descriptor??
[  302.584946][ T8923] fuse: root generation should be zero
[  302.842216][ T6043] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  303.140392][ T6043] usb 5-1: USB disconnect, device number 12
[  303.185568][ T8924] fido_id[8924]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory
[  303.614481][ T8930] loop5: detected capacity change from 0 to 4096
[  303.692754][ T8930] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  303.928450][ T6132] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  306.072421][ T8948] loop4: detected capacity change from 0 to 1024
[  306.175579][ T8948] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  306.177396][ T8955] loop5: detected capacity change from 0 to 512
[  306.197081][ T8948] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  306.214822][ T8955] EXT4-fs: Ignoring removed nomblk_io_submit option
[  306.230529][ T8955] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  306.254812][   T30] audit: type=1804 audit(1759141489.501:96): pid=8948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.576" name="/newroot/122/file1/file1" dev="loop4" ino=15 res=1 errno=0
[  306.258921][ T8948] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  306.307655][ T8955] EXT4-fs (loop5): 1 truncate cleaned up
[  306.327321][ T8955] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  306.351898][ T8948] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28
[  306.373022][ T8948] EXT4-fs (loop4): This should not happen!! Data will be lost
[  306.373022][ T8948] 
[  306.384437][ T8948] EXT4-fs (loop4): Total free blocks count 0
[  306.390821][ T8948] EXT4-fs (loop4): Free/Dirty block details
[  306.397908][ T8948] EXT4-fs (loop4): free_blocks=4293918736
[  306.424174][ T8948] EXT4-fs (loop4): dirty_blocks=16
[  306.439630][ T8948] EXT4-fs (loop4): Block reservation details
[  306.474313][ T8948] EXT4-fs (loop4): i_reserved_data_blocks=1
[  306.544859][ T6132] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  306.616037][ T5880] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  306.784152][ T8961] loop4: detected capacity change from 0 to 1024
[  306.799978][ T8961] EXT4-fs: Ignoring removed bh option
[  306.806937][ T8963] loop5: detected capacity change from 0 to 512
[  306.816818][ T8961] EXT4-fs: Mount option(s) incompatible with ext3
[  306.842312][ T7768] team0 (unregistering): Port device team_slave_1 removed
[  306.907741][ T7768] team0 (unregistering): Port device team_slave_0 removed
[  306.916250][ T8963] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  307.476850][ T8963] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  307.956657][ T8963] EXT4-fs (loop5): 1 truncate cleaned up
[  307.999520][ T8963] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  308.087487][   T30] audit: type=1800 audit(1759141491.341:97): pid=8963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.581" name="file2" dev="loop5" ino=16 res=0 errno=0
[  308.304240][ T6132] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  308.687551][ T8974] loop5: detected capacity change from 0 to 128
[  308.778898][ T8974] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  308.955271][ T8974] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  309.335320][ T8981] loop4: detected capacity change from 0 to 2048
[  309.671443][ T8981] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  309.743485][ T8981] ------------[ cut here ]------------
[  309.749495][ T8981] WARNING: fs/udf/truncate.c:224 at udf_truncate_extents+0xd4c/0xec0, CPU#1: syz.4.587/8981
[  309.760015][ T8981] Modules linked in:
[  309.764516][ T8981] CPU: 1 UID: 0 PID: 8981 Comm: syz.4.587 Not tainted syzkaller #0 PREEMPT(full) 
[  309.774034][ T8981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  309.785210][ T8981] RIP: 0010:udf_truncate_extents+0xd4c/0xec0
[  309.791260][ T8981] Code: 5d 84 0f 48 3b 84 24 80 01 00 00 75 77 44 89 e0 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 1b a2 44 08 cc e8 95 78 82 fe 90 <0f> 0b 90 eb 88 44 89 e9 80 e1 07 38 c1 0f 8c e4 f3 ff ff 4c 89 ef
[  309.811488][ T8981] RSP: 0018:ffffc90003a3f940 EFLAGS: 00010283
[  309.817909][ T8981] RAX: ffffffff833de28b RBX: 1ffff1100be58266 RCX: 0000000000080000
[  309.825995][ T8981] RDX: ffffc9000cbad000 RSI: 0000000000000be9 RDI: 0000000000000bea
[  309.834283][ T8981] RBP: ffffc90003a3fb08 R08: ffff8880306d1e40 R09: 0000000000000002
[  309.842279][ T8981] R10: 0000000000000001 R11: 0000000000000002 R12: 0000000000000000
[  309.850505][ T8981] R13: 0000000000000000 R14: 000000000000000a R15: 000000000000000a
[  309.858656][ T8981] FS:  00007f76fbac86c0(0000) GS:ffff888125afc000(0000) knlGS:0000000000000000
[  309.868512][ T8981] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  309.876093][ T8981] CR2: 000000110c2d90c3 CR3: 000000003416e000 CR4: 00000000003526f0
[  309.885570][ T8981] Call Trace:
[  309.888902][ T8981]  <TASK>
[  309.893082][ T8981]  ? __pfx_udf_truncate_extents+0x10/0x10
[  309.899897][ T8981]  ? do_raw_spin_unlock+0x122/0x240
[  309.901353][   T30] audit: type=1800 audit(1759141492.991:98): pid=8981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.587" name="file1" dev="loop4" ino=1346 res=0 errno=0
[  309.905232][ T8981]  udf_write_failed+0x185/0x1c0
[  309.905308][ T8981]  udf_direct_IO+0x1c6/0x200
[  309.905345][ T8981]  generic_file_direct_write+0x1db/0x3e0
[  309.942085][ T8981]  ? file_update_time+0x416/0x490
[  309.947608][ T8981]  __generic_file_write_iter+0x11d/0x230
[  309.953525][ T8981]  ? udf_file_write_iter+0x2c4/0x6c0
[  309.959652][ T8981]  udf_file_write_iter+0x2d5/0x6c0
[  309.964898][ T8981]  vfs_write+0x5c9/0xb30
[  309.969490][ T8981]  ? __pfx_udf_file_write_iter+0x10/0x10
[  309.976626][ T8981]  ? __pfx_vfs_write+0x10/0x10
[  309.981468][ T8981]  ? __fget_files+0x2a/0x420
[  309.986688][ T8981]  __x64_sys_pwrite64+0x193/0x220
[  309.991765][ T8981]  ? __pfx___x64_sys_pwrite64+0x10/0x10
[  309.998155][ T8981]  ? do_syscall_64+0xbe/0xfa0
[  310.003190][ T8981]  do_syscall_64+0xfa/0xfa0
[  310.007826][ T8981]  ? lockdep_hardirqs_on+0x9c/0x150
[  310.013196][ T8981]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  310.019601][ T8981]  ? clear_bhb_loop+0x60/0xb0
[  310.024551][ T8981]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  310.030495][ T8981] RIP: 0033:0x7f76fab8eec9
[  310.035115][ T8981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  310.055280][ T8981] RSP: 002b:00007f76fbac8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012
[  310.064060][ T8981] RAX: ffffffffffffffda RBX: 00007f76fade5fa0 RCX: 00007f76fab8eec9
[  310.072349][ T8981] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000004
[  310.080522][ T8981] RBP: 00007f76fac11f91 R08: 0000000000000000 R09: 0000000000000000
[  310.089109][ T8981] R10: 0000000000008fff R11: 0000000000000246 R12: 0000000000000000
[  310.097611][ T8981] R13: 00007f76fade6038 R14: 00007f76fade5fa0 R15: 00007fff7384c118
[  310.105906][ T8981]  </TASK>
[  310.108969][ T8981] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  310.116285][ T8981] CPU: 1 UID: 0 PID: 8981 Comm: syz.4.587 Not tainted syzkaller #0 PREEMPT(full) 
[  310.125563][ T8981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  310.136008][ T8981] Call Trace:
[  310.139420][ T8981]  <TASK>
[  310.142510][ T8981]  dump_stack_lvl+0x99/0x250
[  310.147162][ T8981]  ? __asan_memcpy+0x40/0x70
[  310.151805][ T8981]  ? __pfx_dump_stack_lvl+0x10/0x10
[  310.157134][ T8981]  ? __pfx__printk+0x10/0x10
[  310.161935][ T8981]  vpanic+0x237/0x6d0
[  310.165957][ T8981]  ? __pfx_vpanic+0x10/0x10
[  310.170505][ T8981]  ? is_bpf_text_address+0x292/0x2b0
[  310.175999][ T8981]  ? is_bpf_text_address+0x26/0x2b0
[  310.181230][ T8981]  panic+0xb9/0xc0
[  310.184966][ T8981]  ? __pfx_panic+0x10/0x10
[  310.189586][ T8981]  __warn+0x334/0x4c0
[  310.193595][ T8981]  ? udf_truncate_extents+0xd4c/0xec0
[  310.198992][ T8981]  ? udf_truncate_extents+0xd4c/0xec0
[  310.204392][ T8981]  report_bug+0x2be/0x4f0
[  310.208739][ T8981]  ? udf_truncate_extents+0xd4c/0xec0
[  310.214140][ T8981]  ? udf_truncate_extents+0xd4c/0xec0
[  310.219624][ T8981]  ? udf_truncate_extents+0xd4e/0xec0
[  310.225009][ T8981]  handle_bug+0x84/0x160
[  310.229273][ T8981]  exc_invalid_op+0x1a/0x50
[  310.233886][ T8981]  asm_exc_invalid_op+0x1a/0x20
[  310.238924][ T8981] RIP: 0010:udf_truncate_extents+0xd4c/0xec0
[  310.245481][ T8981] Code: 5d 84 0f 48 3b 84 24 80 01 00 00 75 77 44 89 e0 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 1b a2 44 08 cc e8 95 78 82 fe 90 <0f> 0b 90 eb 88 44 89 e9 80 e1 07 38 c1 0f 8c e4 f3 ff ff 4c 89 ef
[  310.265206][ T8981] RSP: 0018:ffffc90003a3f940 EFLAGS: 00010283
[  310.271301][ T8981] RAX: ffffffff833de28b RBX: 1ffff1100be58266 RCX: 0000000000080000
[  310.279287][ T8981] RDX: ffffc9000cbad000 RSI: 0000000000000be9 RDI: 0000000000000bea
[  310.287275][ T8981] RBP: ffffc90003a3fb08 R08: ffff8880306d1e40 R09: 0000000000000002
[  310.295354][ T8981] R10: 0000000000000001 R11: 0000000000000002 R12: 0000000000000000
[  310.303697][ T8981] R13: 0000000000000000 R14: 000000000000000a R15: 000000000000000a
[  310.311704][ T8981]  ? udf_truncate_extents+0xd4b/0xec0
[  310.317152][ T8981]  ? __pfx_udf_truncate_extents+0x10/0x10
[  310.323132][ T8981]  ? do_raw_spin_unlock+0x122/0x240
[  310.328439][ T8981]  udf_write_failed+0x185/0x1c0
[  310.333662][ T8981]  udf_direct_IO+0x1c6/0x200
[  310.338320][ T8981]  generic_file_direct_write+0x1db/0x3e0
[  310.344003][ T8981]  ? file_update_time+0x416/0x490
[  310.349287][ T8981]  __generic_file_write_iter+0x11d/0x230
[  310.355120][ T8981]  ? udf_file_write_iter+0x2c4/0x6c0
[  310.360567][ T8981]  udf_file_write_iter+0x2d5/0x6c0
[  310.365736][ T8981]  vfs_write+0x5c9/0xb30
[  310.370183][ T8981]  ? __pfx_udf_file_write_iter+0x10/0x10
[  310.375856][ T8981]  ? __pfx_vfs_write+0x10/0x10
[  310.380836][ T8981]  ? __fget_files+0x2a/0x420
[  310.385463][ T8981]  __x64_sys_pwrite64+0x193/0x220
[  310.390607][ T8981]  ? __pfx___x64_sys_pwrite64+0x10/0x10
[  310.396369][ T8981]  ? do_syscall_64+0xbe/0xfa0
[  310.401439][ T8981]  do_syscall_64+0xfa/0xfa0
[  310.406245][ T8981]  ? lockdep_hardirqs_on+0x9c/0x150
[  310.411496][ T8981]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  310.418117][ T8981]  ? clear_bhb_loop+0x60/0xb0
[  310.422832][ T8981]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  310.428851][ T8981] RIP: 0033:0x7f76fab8eec9
[  310.433385][ T8981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  310.453980][ T8981] RSP: 002b:00007f76fbac8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012
[  310.462428][ T8981] RAX: ffffffffffffffda RBX: 00007f76fade5fa0 RCX: 00007f76fab8eec9
[  310.470419][ T8981] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000004
[  310.478407][ T8981] RBP: 00007f76fac11f91 R08: 0000000000000000 R09: 0000000000000000
[  310.486405][ T8981] R10: 0000000000008fff R11: 0000000000000246 R12: 0000000000000000
[  310.494663][ T8981] R13: 00007f76fade6038 R14: 00007f76fade5fa0 R15: 00007fff7384c118
[  310.502677][ T8981]  </TASK>
[  310.506066][ T8981] Kernel Offset: disabled
[  310.510416][ T8981] Rebooting in 86400 seconds..