last executing test programs:

4m57.575673918s ago: executing program 1 (id=1720):
r0 = socket$inet(0x2, 0x2, 0x11)
bind$inet(r0, &(0x7f0000000600)={0x2, 0x2710, @loopback}, 0x10)
sendto$inet(r0, &(0x7f0000000900)='\r\nCall-Id: ', 0xb, 0x0, &(0x7f0000000a00)={0x2, 0x7532, @loopback}, 0x10)

4m57.436176792s ago: executing program 1 (id=1724):
capset(&(0x7f0000000e80)={0x20080522}, &(0x7f0000000ec0)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file2\x00', 0x40040, 0x6ab858183a7ef6ba)
ioctl$FIBMAP(r0, 0x1, 0x0)

4m57.265800966s ago: executing program 1 (id=1728):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x20004000)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x5000}, @IPSET_ATTR_LINENO={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x20004000)

4m57.159614429s ago: executing program 1 (id=1732):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000300)='./file0\x00', 0x16, &(0x7f0000001440)={[{@barrier}, {@subvolid}, {@acl}, {@noflushoncommit}, {@nodatasum}, {@autodefrag}, {@user_subvol_rm}, {@notreelog}]}, 0x15, 0x5102, &(0x7f000000a2c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8})

4m56.015342078s ago: executing program 1 (id=1750):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20082, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5)

4m55.56421999s ago: executing program 1 (id=1757):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad56b6c58206007e4af65430442b25b36f", 0x11)

4m55.17586304s ago: executing program 32 (id=1757):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad56b6c58206007e4af65430442b25b36f", 0x11)

4m49.259279272s ago: executing program 3 (id=1830):
r0 = syz_create_resource$futex(&(0x7f000001a4c0)=0x2)
futex(r0, 0x0, 0x2, 0x0, r0, 0x1)
futex(r0, 0x5, 0x7, 0x0, r0, 0x0)

4m49.108141856s ago: executing program 3 (id=1831):
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000340)={r1, r1, 0xd, 0x1, &(0x7f0000000400)="c2", 0xb, 0x1, 0xb57, 0x5df, 0x8b, 0x1, 0x9, 'syz1\x00'})

4m49.075613356s ago: executing program 3 (id=1832):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000640)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRESOCT, @ANYRES8=0x0, @ANYRES32=0x0, @ANYRES64, @ANYRESDEC=0x0], 0x1, 0x304, &(0x7f0000000bc0)="$eJzs3M9PE2kYwPGnPyhtCZTDZje7yYZ3dy/rZQLVs9IYSIxNJEiNPxKTAabadGxJp8HUGJGTV+PNf8AD4ciNRPkHuHjTixdvXEw8yME4ptMZSssUpLSUH99PQubhfd5nOm9byDMNL1u3Xz7KZy0tq5clGFUSEBHZFhmWoHgC7jHoxBHZ7blcGPj64e+bd+5eT6XTE9NKTaZmLiaVUkMjbx8/jbnT1vtlc/j+1pfk583fN//c+jHzMGepnKUKxbLS1WzxU1mfNQ01n7PymlJTpqFbhsoVLKNUyxdr+axZXFioKL0wPxhfKBmWpfRCReWNiioXVblUUaEHeq6gNE1Tg3HBQTIr09N6qs3iuQ5fDLqkVErpIRGJ7clkVnpyQQAAoKea+/+gqE72/6v/bpQHbq0Nuf3/esSv/7/0sXauhv4/KiK+/b/3+L79v364/n9vR3RK2XZbZUfq/3EyjET2DAXqYTVZSulx9+fXsXxvddQJ6P8BAAAAAAAAAAAAAAAAAAAAADgNtm07Ydt2wjt6X/0iEnU2ltS+9ykNiciVHlwyOugIrz/OgPrGvfCQiPliMbOYqR3dCRsiYjqvf0K+O+8HVzX2dh6pqmF5Zy659UuLmZCTSWUlJ6YYMiaJPmmut+3Ja+mJMVXTWN8n8d31SUnIb/71Sd/6iPz/3656TRLyfk6KYsq8u2HOq382ptTVG+mm+pgzDwAAAACAs0BTO3zv3zWtVb5Wv3N/Pdr0+UCofn896nt/Hpa/wr1dOwAAAAAA54VVeZLXTdMo7QSDItI4EpPmOZ0Mwl06s7fCX63y/paheyvdJ/AevCEVdQc7/rQEDvG0tAiC0k7VSHU1qin1z7LP2vcLvI+NWs2RqXF35HXLOd0J/nj15lvnTnh5LXrAStsPQvu/AfqO57cPAAAAgONUb/q9kfHeXhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOfQcfx3tF6vEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgpfgYAAP//2a0C7Q==")
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r0 = open(&(0x7f0000000140)='./file2\x00', 0x105480, 0x100)
preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x2200, 0x0, 0x0)

4m48.971544089s ago: executing program 3 (id=1833):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file0\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x5, 0x445a, &(0x7f0000004480)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20)

4m47.624379854s ago: executing program 3 (id=1838):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/split_huge_pages\x00', 0x1, 0x0)
write(r0, &(0x7f0000000600)='1,0x7f0000800000,0x-', 0x14)

4m47.517260277s ago: executing program 3 (id=1839):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x20)
syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "008008", 0x28, 0x3a, 0xff, @local, @local, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @remote, @mcast2={0xe}}}}}}}, 0x0)

4m46.967954651s ago: executing program 33 (id=1839):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x20)
syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "008008", 0x28, 0x3a, 0xff, @local, @local, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @remote, @mcast2={0xe}}}}}}}, 0x0)

3m48.539060273s ago: executing program 5 (id=2286):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x143102)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)="94", 0xf000}, {0x0}], 0x2)
preadv(r0, &(0x7f00000004c0)=[{&(0x7f00000007c0)=""/4080, 0xff0}], 0x1, 0x1, 0x9)

3m47.585765288s ago: executing program 5 (id=2288):
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000640)=@generic={&(0x7f00000005c0)='./file0\x00', r0}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100001, 0x9, 0x5, 0x41}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x20000402, r1}, 0x38)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r1, 0x0, &(0x7f0000000580)=""/31}, 0x20)

3m47.541568129s ago: executing program 5 (id=2289):
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000001080)='./proc\x00', &(0x7f00000010c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./proc/net/stat\x00', 0x0, 0x0)
r1 = openat(r0, &(0x7f0000001140)='rt_cache\x00', 0x0, 0x0)
read(r1, &(0x7f0000001180)=""/4096, 0x1000)
readv(r1, &(0x7f0000000040)=[{&(0x7f0000000000)=""/59, 0x3b}], 0x1)

3m47.392323103s ago: executing program 5 (id=2290):
syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f0000000480)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00, @ANYBLOB=',dmask=00000000000000000002544,uid=', @ANYRESHEX=0x0, @ANYBLOB=',iocharset=default,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c616c6c6f775f7574696d653d30303030303030303030303030303030303130363135312c756d61736b3d30303030303030303030303030303030303030303336302c6e616d65636173653d312c756d61736b3d30303030303030303030303030303030303030303136352c6572726f72733d636f6e74696e75652c75056964", @ANYRESHEX=0x0, @ANYBLOB=',discard,dmask=00000000000000000000007,utf8,\x00'], 0x1, 0x1535, &(0x7f00000005c0)="$eJzs3AucjdX6OPDnWWu9Y0jaTXIZ1lrPy04uiyTJJUkuSZIkSW4JSZIjCYkht6QhCcllSC5DSC4Tk8b9fr8kJEmTJCG5Jev/mZi/OnX+55xfnfz+Z57v57M/s55Z+1nvs+aZvfe739l802VojUY1qzYgIvhD8OKXBACIBYCBAHANAAQAUDaubFzGfHaJCX/sIOzP9VDyla6AXUnc/6yN+5+1cf+zNu5/1sb9z9q4/1kb9z9r4/4zlpVtnp7/Wr5l3Rtf/8/K+PX/v0h6ybFfrC15fVeAmH81hfv//z/8A7nc//9awb9yJ+5/1sb9z6pir3QB7H8BfvxnBdn+4Qz3P2vj/jOWlf3yWnAsXPnr0X/1DSL/yb+B+F4Xf8pXfp//cP+MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxthf4Iy/TAFA5vhK18UYY4wxxhhjjLE/j892pStgjDHGGGOMMcbYfx6CAAkKAoiBbBAL2SEHCICYzPlrIQ6ug9xwPeSBvJAP8kM8FICCoMGABYIQCkFhiMINUARuhKJQDIpDCXBQEkrBTVAaboYycAuUhVuhHNwG5aECVIRKcDtUhjugCtwJVeEuqAbVoQbUhLuhFtwDteFeqAP3QV24H+rBA1AfHoQG8BA0hIehETwCjeFRaAJNoRk0hxb/o/wXoAe8CD2hFyRAb+gDL0Ff6Af9YQAMhJdhELwCg+FVSIQhMBReg2HwOgyHN2AEjIRR8CaMhrdgDIyFcTAekmACTIS3YRK8A5NhCkyFaZAM02EGvAszYRbMhvdgDrwPc2EezIcFkAIfwEJYBKnwISyGjyANlsBSWAbLYQWshFWwGtbAWlgH62EDbIRNsBm2wFbYBtthB+yEj2EXfAK7YQ/shU9hH3z2b+af/rv8rggIKFCgQoUxGIOxGIs5MAfmxJyYC3NhBCMYh3GYG3NjHsyD+TAfxmM8FsSCaNAgIWEhLIRRjGIRLIJFsSgWx+Lo0GEpLIWl8WYsg2WwLJbFclgOy2MFrICVsBJWxspYBatgVayK1bAa1sAaeDfejb2xNtbGOlgH62LdzMtT2AAbYENsiI2wETbGxtgEm2AzbIYtsAW2xJbYClthG2yDbbEttsN22B7bYwfsgB2xI3bCTtgZO2MX7IJdsRt2S38hG+CL+CL2wmqiN/bBPtgXE7P1xwE4AF/GQfgKvoKvYiIOwaH4Gr6Gr+NwPIUjLozEUTgKK4u3cAyORRLjMQmTcCJOxEk4CSfjFJyC0zAZp+MMnIEzcRbOwvdwDr6P7+M8nIcLMAVTcCEuwlRMxcV4GtNwCS7FZbgcV+ByXIWrcRWuxXW4FjfgBtyEm3ALbsFtuA134A78GBUAfoJ7cA8m4j7ch/txPx7AA3gQD2I6puMhPISH8TAewSN4FI/iMTyOJ/A4nsSTeApP4xk8g+fwHJ7H5+K/avhxsTWJIDIooUSMiBGxIlbkEDlETpFT5BK5RERERJyIE7lFbpFH5BH5RD4RL+JFQVFQGGEEiTDjmUJERVQUEUVEUVFUFBfFhRNOlBKlRGlRWpQRZURZcasoJ24T5UUF0dpVEpVEZdHGVRF3iqqiqqgmqosaoqaoKWqJWqK2qC3qiDqirqgr6okHRH3RG/vjQyKjM43EEGwshmIT0VTIS89QLcVwbCVaizbiCTESR2A70dK1F0+LDmIMdhR/E2PxWdFZjMcu4nnRVXQT3cULoodo5XqKXmIy9hZ9xDTsK/qJ/mKAmInVxXs4J3sN8apIFEPEUPGaWICvi+HiKjFCjBSjxJtitHhLjBFjxTgxXiSJCWKieFtMEu+IyWKKmCqmiWQxXcwQ74qZYpaYLd4Tc8T7Yq6YJ+aLBSJFfCAWikUiVXwoFouPRJpYIpaKZWK5WCFWilVitVgj1op1Yr3YIDaKTWKz2CK2im1iu9ghdoqPxS7xidgt9oi94lOxT3wm9ovPxQHxhTgovhTp4itxSHwtDotvxBHxrTgqvhPHxHFxQnwvToofxClxWpwRZ8U58aM4L34SF4QXIFEKKaWSgYyR2WSszC5zyKtkThlkPv/LOHmdzC2vl3lkXplP5pfxsoAsKLU00kqSoSwkC8uovEEWkTfKorKYLC5LSCdLylLyJlla3izLyFtkWXmrLCdvk+VlBVlRVpK3y8ryDgmRi8eoJqvLGrKmvFsmwD2ytrxX1pH3ybryfllPPiDrywdlA/mQbCgflo3kI7KxfFQ2kU1lM9lctpCPyZbycdlKtpZt5BOyrXxStpNPyfbyadlB+ku/Is/KzvI52UU+L7vKbrK7/ElekF72lL0k9AbZR74k+8p+sr8cIAfKl+Ug+YocLF+ViXKIHCpfk8Pk63K4fEOOkCPlKPmmHC3fkmPkWDlOjpdJcoKcKN+Wk+Q7crKcIqfKaTJZTpf9L600W8p/mv/27+QP/vnom+RmuUVuldvkdrlD7pQfy11yl9wtd8u9cq/cJ/fJ/XK/PCAPyIPyoEyX6fKQPCQPy8PyiDwij8qj8pg8Ls/K7+VJ+YM8JU/L0/KsPCfPyfOXfgagUAkllVKBilHZVKzKrnKoq1ROdbXKpa5REXWtilPXqdzqepVH5VX5VH4Vrwqogkoro6wiFapCqrCKqhvw0i+MKq5KKKdKqlLqpn8nXxVRN6qiqtiv8jPrS/gH9bVQLVRL1VK1Uq1UG9VGtVVtVTvVTrVX7VUH1UF1VB1VJ9VJdVadVRfVRXVVXVV31V31UD1UT9VTJagE1Ue9pPqqfqq/GqAGqpdFxh4Gq8EqUSWqoWqoGqaGqeFquBqhRqhRapQarUarMWqMGqfGqSSVpCaqiWqSmqQmq8lqqpqqklWymqFmqJlqppqtZqs5ao6aq+aq+Wq+SlEpaqFaqFJVqlqsFqs0tUQtUcvUMrVCrVCr1Cq1Rq1R69Q6tUFtUGlqs9qstqqtarvarnaqnWqX2qV2q91qr9qr9ql9ar/arw6oA+qgOqjSVbo6pA6pw+qwOqKOqKPqqDqmjqkT6oQ6qU6qU+qUOqPOqHPqnDqvzqsL6kLGaV8gAhGoQAUxQUwQG8QGOYIcQc4gZ5AryBVEgkgQF8QFuYPrgzxB3iBfkD+IDwoEBQMdmMAG4lLTo8ENQZHgxqBoUCwoHpQIXFAyKBXcFJQObg7KBLcEZYNbg3LBbUH5oEJQMagU3B5UDu4IqgR3BlWDu4JqQfWgRlAzuDuoFdwT1A7uDeoE9wV1g/uDesEDQf3gwaBB8FDQMHg4aBQ8EjQOHg2aBE2DZkHzoMWfur73p/I+7nrqXjpB99Z99Eu6r+6n++sBeqB+WQ/Sr+jB+lWdqIfoofo1PUy/rofrN/QIPVKP0m/q0fotPUaP1eP0eJ2kJ+iJ+m09Sb+jJ+speqqeppP1dD1Dv6tn6ll6tn5Pz9Hv67l6np6vF+gU/YFeqBfpVP2hXqw/0ml6iV6ql+nleoVeqVfp1XqNXqvX6fV6g96oN+nNeoveqrfp7XqH3qk/1rv0J3q33qP36k/1Pv2Z3q8/1wf0F/qg/lKn66/0If21Pqy/0Uf0t/qo/k4f08d1Gf29Pql/0Kf0aX1Gn9Xn9I/6vP5JX9A+4+Q+4+XdKKNMjIkxsSbW5DA5TE6T0+QyuUzEREyciTO5TW6Tx+Qx+Uw+E2/iTUFT0GQgQ6aQKWSiJmqKmCKmqClqipvixhlnSplSprQpbcqYMqasKWvKmXKmvClvKpqK5nZzu7nD3GHuNHeau8xdprqpbmqamqaWqWVqm9qmjqlj6pq6pp6pZ+qb+qaBaWAamoamkWlkGpvGpolpYpqZZqaFaWFampamlWll2pg2pq1pa9qZdqa9aW86mA6mo+loOplOprPpbLqYLqar6Wq6m+6mh+lhepqeJsEkmD6mj+lr+pr+pr8ZaAaaQWaQGWwGm0STaIaaoWaYGWaGm+FmhBlpRmWcqJq3zBgz1owz402SSTITzUQzyUwyk81kM9VMNckm2cwwM8xMM9PMNrPNHDPHzDVzzXwz36SYFLPQLDSpJtUsNotNmkkzS81Ss9wsNyvNSrParDZrzVqzHtabjWaj2Ww2m61mq9lutpudZqfZZXaZ3Wa32Wv2mn1mn9lv9psD5oA5aA6adJNuDplD5rA5bI6YI+aoOWqOmWPmhDlhTpqT5pQ5Zc6YM+acyXvp9dKbWJvd5rBX2Zz2apvLXmP/Ps5n89t4W8AWtNrmsXl/FRtrbVFbzBa3JayzJW0pe9Nv4vK2gq1oK9nbbWV7h63ym7iWvcfWtvfaOvY+W9Pe/au4rr3f1rOP2PqIALapbWib20b2EdvYPmqb2Ka2mW1u29onbTv7lG1vn7Yd7DO/iRfaRXa1XWPX2nV2t91jz9iz9rD9xp6zP9qetpcdaF+2g+wrdrB91SbaIb+JR9k37Wj7lh1jx9pxdvxv4ql2mk220+0M+66daWf9Jk6xH9g5NtXOtfPsfLvg5zijplT7oV1sP7JpNoCldpldblfYlXbV/611md1gN9pNdpf9xG612+x2u8PuzDwRtnvsXvup3Wc/s4fs1/aA/cIetEdsuv3q5zhjf0fst/ao/c4es8ftCfu9PWl/UJnZGXv/3v5kL1hvgZCAJCkKKIayUSxlpxx0FeWkqykXXUMRupbi6DrKTddTHspL+Sg/xVMBKkiaDFkiCqkQFaYo3UCZ5RWnEuSoJJWim6g03Uxl6BYqS7dSObqNylMFqkiV6HaqTHdQFbqTqtJdVI2qUw2qSXdTLbqHatO9VIfuo7p0P9WjB6g+PUgN6CFqSA9TI3qEGtOj1ISaUjNqTi3oMWpJj1Mrak1t6AlqS09SO3qK2tPT1IGeoY70N+pEz1Jneo660PPUlbpRd3qBetCL1JN6UQL1pj70EvWlftSfBtBAepkG0Ss0mF6lRBpCQ+k1Gkav03B6g0bQSBpFb9JoeovG0FgaR+MpiSbQRHqbJtE7NJmm0FSaRsk0nWbQuzSTZtFseo/m0Ps0l+bRfFpAKfQBLaRFlEof0mL6iNJoCS2lZbScVtBKWkWraQ2tpXW0njbQRtpEm2kLbaVttJ120E76mHbRJ7Sb9tBe+pT20We0nz6nA/QFHaQvKZ2+okP0NR2mb+gIfet70Xd0jI7TCfqeTtIPdIpO0xk6S+foRzpPP9EF8gQhhiKUoQqDMCbMFsaG2cMc4VVhzvDqMFd4TRgJrw3jwuvC3OH1YZ4wb5gvzB/GhwXCgqEOTWhDCsOwUFg4jIY3hEXCG8OiYbGweFgidGHJsFR4U1g6vDksE94Slg1vDcuFt4XlwwrhI/dVCm8PK4d3hFXCO8Oq4V1htbB6WCOsGd4d1grvCWuH94Z1wvvCMuH9Yb3wgbB++GDYIHwobBg+HDYKHwkbh4+GTcKmYbOwedgifCxsGT4etgpbh23Cq8K24ZNhu/CpsH34dNghfObn+fsXZc4/8Zv5hLB32Cd8KXwp9P5eOT+6IJoS/SC6MLoomhr9MLo4+lE0LbokujS6LLo8uiK6Mroqujq6Jro2ui66ProhujG6Kep9zWzg0AknnXKBi3HZXKzL7nK4q1xOd7XL5a5xEXeti3PXudzuepfH5XX5XH4X7wq4gk4746wjF7pCrrCLuhtcEXejK+qKueKuhHOupCvlmrsWroVr6R53rVxr18Y94Z5wT7on3VPuKfe06+CecR3d31wn96zr7J5zz7nnXVfXzXV3L7gebkKui4/JBNfH9XF9XV/X3/V3A91AN8gNcoPdYJfoEt1QN9QNc8PccDfcjXAj3Cg3yo12o90YN8aNc+NckktyE91EN8lNcpPdZDfVTXXJLtnNcDPcTDfTVZ518Shz3Vw33813KS7FLXQZ54ypbrFb7NJcmlvqlrrlbrlb6Va61W61W+vWuvVuvdvoNrrNbrPb6ra67W672+l2ul1ul9vtr7m4qNvn9rv97oA74A66L126+8odcl+7w+4bd8R9646679wxd9ydcN+7k+4Hd8qddmfcWXfO/ejOu5/cBeddUmRCZGLk7cikyDuRyZEpkamRaZHkyPTIjMi7kZmRWZHZkfcicyLvR+ZG5kXmRxZEUiIfRBZGFkVSIx9GFkc+iqRFlkSWRpZFlkdWRLwvsDX0hXxhH/U3+CL+Rl/UF/PFfQnvfElfyt/kS1+sO837W305f5sv7yv4iv5R38Q39c18c9/CP+Zb+sd9K9/at/FP+Lb+Sd/OP+Xb+6d9B/+M7+j/5jv5Z31n/5zv4p/3XX03392/4Hv4F31P38sn+N6+j3/J9/X9fH8/wA/0L/tB/hU/2L/qE/0QP9S/5of51/1w/4Yf4Uf6UTFv+tGZb5FhvE/yE/xE/7af5N/xk/0UP9VP88l+up/h3/Uz/Sw/27/n5/j3/Vw/z8/3C3yK/8Av9It8qv/QL/Yf+TS/JPOisV/pV/nVfo1f69f59X6D3+g3+c1+i9/qt/ntfoff6T/2u/wnfrff4/f6T/0+/5nf7z/3B/wX/qD/0qf7r/wh/7U/7L/xR/y3/qj/zh/zx/0J/70/6X/wp/xpf8af9ef8j/68/8lf4H+zxhhjjDH2L5lweSh+PXPxcn7v38kRv7hzHwC4elv+9F/OZ5xRrs9zcdxPxMdmfH26V5eHMm/VqiUkJFy6b5qEoPA8gMy/BGX4+aMHl+Il0AaehPbQGkr/bv39RLdz9E/Wj94KkOMXORkFZcaX1/8cABN+s99+4rEnRi0sF56J+3+sPw+gaOHLOdnhcrwE2vx8faU1lPkH9edt+U/qz/5FEkCrX+TkhMvx5fpLwePwDLT/1T0ZY4wxxhhjjLGL+omKnTLff2Z+4vP33p/Hq8s52eBy/M/enzPGGGOMMcYYY+zKe7Zb96cea9++dad/f1Dlf5T1Lw8aw39qZR787sB7gMzvKAD4gwsCZAzkX7mLLX/JsRIvPXT+fmr5WR/A/45W/hmDK/zExBhjjDHGGPvTXT7p//X31ZUqiDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYy4L+iv9O7ErvkTHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGLvS/k8AAAD///P/+v8=")
creat(&(0x7f0000002840)='./bus\x00', 0x44)
mount(&(0x7f0000002880)=@loop={'/dev/loop', 0x0}, &(0x7f00000028c0)='./bus\x00', 0x0, 0x321001, 0x0)
r0 = open(&(0x7f0000002900)='./bus\x00', 0x64842, 0x47)
pwritev2(r0, &(0x7f0000002940)=[{&(0x7f0000002980)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3)
rename(&(0x7f00000029c0)='./file1\x00', &(0x7f0000002a00)='./file2\x00')

3m46.756327289s ago: executing program 5 (id=2294):
socket$xdp(0x2c, 0x3, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x50)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
socket$inet(0x2, 0x2, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
r2 = syz_open_dev$usbfs(0x0, 0x76, 0x101301)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0)
ioctl$USBDEVFS_FREE_STREAMS(r2, 0x802c550a, &(0x7f0000000000)=ANY=[])
ioctl$USBDEVFS_REAPURB(r2, 0x4004550c, &(0x7f00000002c0))
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, 0x0)
write$sndseq(r3, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c)

3m46.293261641s ago: executing program 5 (id=2299):
socket$nl_generic(0x10, 0x3, 0x10)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="08000200ac1414aa1400060006000000040000000300000006000000"], 0x34}}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x40080, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0)
write(r2, &(0x7f0000000700)='bind', 0x4)
getdents64(r2, 0x0, 0x0)
mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x12, r2, 0x80000000)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000540)=@IORING_OP_RENAMEAT={0x23, 0x50, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)='./file0/file0\x00', r2, 0x4, 0x1, {0x0, r3}})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000))
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x63)
syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000380065000000019078ac1e0001ac1414aa03039078000300034523000800650a5398060001e0000002e000000100000000d00000d2"], 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140002"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x2)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]})

3m45.54723059s ago: executing program 34 (id=2299):
socket$nl_generic(0x10, 0x3, 0x10)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="08000200ac1414aa1400060006000000040000000300000006000000"], 0x34}}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x40080, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0)
write(r2, &(0x7f0000000700)='bind', 0x4)
getdents64(r2, 0x0, 0x0)
mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x12, r2, 0x80000000)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000540)=@IORING_OP_RENAMEAT={0x23, 0x50, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)='./file0/file0\x00', r2, 0x4, 0x1, {0x0, r3}})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000))
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x63)
syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000380065000000019078ac1e0001ac1414aa03039078000300034523000800650a5398060001e0000002e000000100000000d00000d2"], 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140002"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x2)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]})

1m4.120306231s ago: executing program 6 (id=3387):
capset(0x0, &(0x7f0000000040)={0x83, 0xfffffffc, 0x0, 0x0, 0x0, 0x80})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088d0}, 0x48000)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1m3.761996011s ago: executing program 6 (id=3388):
ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x9b2cd000)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0xa, 0xfc, 0x0, 0x7, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in=@broadcast, @in=@rand_addr=0x64010100, 0x2c, 0x30}]}, 0x38}}, 0x40408c0)

1m3.36992819s ago: executing program 6 (id=3390):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001bc0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xd}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0xfffffffb}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200448a4}, 0x4890)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r3, 0x3e}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000700)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb6ad67d196186e061f7092e2fe1ef9a0d699e9d080edab4bfdf0700000000000033b67507b05c35577587287c161a312d2351cf0f9c19d2f0d2b52ace0218941304c45c9b529492322ecf2cf8c68a126cb82558982cdcd02dba2f605704bcafe6da433b11d59d071d79e32748a1317a1d68c1be05f1f584dde4be8c1262a925fbabe0af8c00a5181f9c85b647ed0e5f", 0xb5}, {&(0x7f00000002c0)="8caed476f6bcc737902ee6863118a0f660978f27dfa8e77e65d30f0c994994af1fb65ee49983e655d3f7be317d2380b0ed8e916769d5f1b8dc7a927e6401a10223ad90d5dc45614dec7e4c2f19d2b70807aaef8fc9e45c7a65583d15a94480840f4e4fc9ee8e3b7f8fd1aaf800d9176af51346ea81ee48fdc01f072780ff849a4fe9197b8926a16412b4da7b627e43d71ec1b367bbd9454ab97566775449de0c9e1b429acb005171cfd0b37d5e807f54ece988ae6a50773488ded126b8fc9559f66619d6002a53923e4e93bf09354a28cdd2c6a0653731e3ff0fac", 0xdb}, {&(0x7f0000000440)="99dcbf373748a116444c10801b7c8f48ff3cc4222eaa9a8ecd976fe5c2b153b8012daa0155cbb1", 0x27}, {&(0x7f00000007c0)="5dc2db6fa9b830b5bedc2a54b2d4091ce8c28ef121944d189544096016abb738c8d7cbee8455797c78611bc5b5633e30c7ee1093b90e3208ecb225f6d0d29465fa81ca56e738ef1e7c0480a7b780ec614330e809a1523dbfda40a01ee577449b2adcf3ac4a416128f9b100695ec34ba5c785caca8eaf21639695869be83d5597e7d5c5d74690449c0b1589212d14268d86d6e9df6605662594a579a01f6247f8789ee2753104a9ff6c977436258777b047c00743caeee11953c7ee9f75783afc3e3e6951ad94872aef0797363080994c6e7ff1645c", 0xd5}, {&(0x7f0000000b00)="7bddac51b6b38bbab189b84ebc6063c560070782f2b8071de259d62d9ab16f8dbe75fb1c4566ea50322ed6140982205dd2e4ab0049fa54e29f7f24e07ce90f9ab021368fc7fe35abd535cd4a238a650dba0f6cd8c2571340e71d4d1d1448a671abeafde582bbbc7458772667b08492d548ea72048e78720a32cddf42058dda263f3f3466228169a4aff6f0655a9a7127e166e270ed31b91702545835336ef729202b0217f1807fb1c8b7bc3b0ef109a66bb52eef969e0a1034716dc20598eee5debaefe008d548ddee490f627221d5b0a92e4cb4b0ad1068dc259e5cc7a564f03ed6e00dad19705620164bc1171ecdc3053ef0b3dcd13b62c9060f6bca43a1e654f0a543f4dda756efdee8ae70a21ab9c81707894462fecd1cd9826a4e26bf261005ce8c4cbc46b63e46f06cb4369aace3555cd0e11dac7a95ce3aec9d2bb03583606b81ea29615949c513c9591c0971e1a999d4713d2f3954d5a264bf5ab0ec856b562ddf062202210171140bb4bd1eaca8283c4fd36951fb83672effe7b5126e9458f1f5f3d41a0f51966295c5f8b1a358a0bb47847892d3dfd8e0ff68030fc5e975bc25ad99827736e1f27053a2ad9f28dc981c68439de1c94f6acdb9e661db21b1e7596b87af22a4af5a37f3a54a1a3630770885eb620e1b6c613283beee82990001df7faf28fcef2a63b863f7f9827105af3aa6e0fa698cce7119af4baa9332f91f1434d5f712afe153a7db193fed726a896b3d7fd8d00d46a96d7694103ea6fcc61656c5a7f317856219db27643e30a2544393aa55154d381869a4a773a21567d7240bf6940dfd18d6d703923f97966d3f87eedb8067b89597fe9ba1854f8efa5088fdf8e1c20c235fc4221f11f48ced48e5e724045bf72e0bc67b417b93a7c46ea239249c80d29770b1204488f71a95a2ec49d673993331124ba55fa9d2dae768b97c2f4dc8a02afb6a6475be1e32c2381338ee819fc554f53a16c54d989c0d5e53d9dc9b15083100ef608e2e4b4d253f5fcb75b97c01e6b4e8121ae58a4f9c52f872299b59fe81c7fba3ab9f54650aee339996b27d54245dd1af8d18248588f630b957a8b226c8dd622256b75fc2228fbe1e440a687f71e6eb96c0f8f9dd52725fb31a6d22e06fb8cb42263d3e8a5bac7326bfa1cd92744c077ecb663b1e3e4f6eb3eaca6b610e50373667acb192c943a8606ebf9a1c69e21a79e9e6303dd9611c2f44cb5e4f67063918556a9c56173fb387cb14bb4577728683493017c31839052c9e634a4c64e241602725d1f078a58b4eb4ba6bbabf349b6155c7e8629c80cb4da22039adfc8b2f551741526cae59a6e9b583236b04e9561b51fa2a755fa13e353b0f8210d95faaf73471f6c0d85d32bd2ad81e7c3631e7a473fcc2a43e1b3333e6840a12637c7ae1c3bd3d2a0ae3d67105fc7b31de802fffb37088c922309ccc1b0ee85e4795b1745d2c40001da45e7357397201909696498431d810a97bfa45ce67af18daa9da91e0db2e29545bf84b1628898f41a13c8930a9d73f8c3a2b234fbb90f8f52cafff774ed740ce78f64eae53563ad227ff83e0fbdeabb1de777e58806f7b7010bd33b8d7599ac6449f9b0814d8a5f9d47ccd289310981c2d96782ebe2c40a8914dade88760ba175ccdaf82b4b18365cd87e8d4c93b38c79db182e2c2b7839196382ea1ec5e55a1236ea6ce0ad8cf44fb27d0da66cf4dbc37569eca789046cbc90c752c458717be4589633a9607b11ca0dbec73c819ba2e7a965759aaabb6ede7512b2c6a1758462b6409a77fb83c25af21d98a96972593c46005bece9ca52d49e4a5bed2a24a0136698a4dbad33c5481ab76c2f5c84d5f717e3b0f6d41a4017ff62477cf7efe50084770ff4a6995ccc3bcf4766b2acb7c4dce21e66f270a573d45e829850fe12dbfd3c2d5cd10b556c7dc3c179cd45f36fe314ef760791f17354a563a40bd013a70fdbc89c000e0625ba67e2cb2b4ab0d26f8ba092af5485ec417a30a661e6b459054551afc50a08caf0f191323a69e098610b879ed15bfd39c03ee94865c047c6ffd20427ddf2066ac0f2215d12a38b7be53b2722c5a3fd67e137d3a76bce78c70be21b385bd07b8514c55a54408a051c37127c784e36b945d01021145b89160bac94b11c5656aeb8949a6f315cdb3d812780729e12cb5c85405381add02467e39ad1588e139a18f836535a0e84702ec406ca49ad0cbad9cff79e0e8b8b6a1ab912ea8142ee978d5e92469213a73bd19833c2df4095dcd1246a57fb2b49635af52bed31e62a1068a873cf859b24f3212ca8ceed0be2c574a073b3968579df1049571898769620ab5ad7ece881250677c35b5cb2438d9db8a3dec87595adc090705710fe393ba36ea9a4e484de1a6aba671b4a411aaf445cd3caf8768ea647416ffd4be0bd028e8e7d31fe4ea73310ee2f3ed55a1b1f84f3123dfc7f96e6cf17d575a5bc64ad25314524b3b114a0fd81522e8ede0dfc6659806fe35dd05fe20fc1f73f3dc780748381b46d5cc4c7d7f2e113cac0dc848f70023b7ea93526a6fd746b9461101b071b0f024df9eea2abf7ed4d8788e1928046a9bf8927b2700064776a4a63ba281e74e77ebeca80172e41c41e88853bfe4d75f261550d43892bae87d8ce3adad46827d33202f1549d929f90f587da1ba07cf4f6f2cfacbfbfc51687b55daa9a4fa81d8f67efe2e31a5fc6282d080f6c90d648aabd2f69e0710a06fc4a6b4158dcea59f463162f384265857d527587f0a9d11742f8377cd5cc3d46b79338a7221604a0ca978c7243c4a9a73484dcb1f85f0401e32295924a8746c7edfb07616a1925baad8a20c79ae197a1775116386bb9330172cf656a22fb654696a7702ea30805215a820125984a308a60cd7ede1f137dbe43c0ada5b2951f9ef2c317e29ece9aea31045ccbcbd8a222d2af82b736c4186efc36d5e565ad2b72f3cf68bfd4c20e156b7f19ed683c751c9b89e6b2b1e0d15454f7afc316193d39fe58dfa4db929d060a9cd0965a1ec6acc6185b6c4d9620fd6826c3b0d18905763a625e15fdb5c9652b5a5cde312fee991d520efaa7552978051d667b7e4d3508e902be4aee042e34eae15f43012c42924acf19bbe725be0ec44c6e41789b9d5ab15a845ba20102898b128dc291d8ed69ef76804489e79aa5248e3e11ec12e4f2fe4d2d535828fa5ee9d01b16c740ff1a234aad4afef7d1c989760fc6756b721808885f5f741f27dcb6674433848db5cc51d0e88adde764d8ec43089fcbdf9ba087bcbe3bd0ada1eae0421f44e8c3733eddd82d32f223b1bd283d73f3b28ae077a8886be7645bf56d93aff7ea96533e7d9182ad66bc3b1b9e854eccfa3d4a4c4713cac7ae3336746318b244649afe1c2e5db919ac395b02af31793615bd010c3b085a897b7754a12fffb610a2638d70e2c3b1eb3fa87e0c6324b4720f4e318455f367c5c912c5ca10e6b3e7f692ac9ef9277197fa493b8a20a63feea2dc3ccada7b08f9f4805f5d8140d74db2df0b2b3e404934a00c1ef6098c5acf3d8266ef751f3d212a9431f52a0d1471113c4bd90d20065c89f43e71951c0939fb87c157fb548e9c0627d951c63cafa53808dae0ef6a7e104ff945267ac4edd42a0fc1c46d6f9a780aa0e2983f7078c54c647576c025647eb68ad4af851d85e459dc2f8b6139e539874c17de6f3748f51ed55a3c67d8bec0d7a0976d782cf91a1ae60ba9d51511b1407eb16c7610866455447dc4ad148298e6b1b0e4b833b667f709aa9d0ee1759bb87ac44543a39e44f1fe5f33eeea9b11c03f9fc39d66d5ab765f8ef074b22c71cff1b69367d24e91da4bc35e2fdfea1a77a9f41a2f0896870e0fcfd69d51f716638cd63184bd76c648c192e990f2c675478aa15cc5a804882f4be47155909e5f2265c5842153d928f06d61000cc72e37c87fbdba0a47738fef6e6154c21fee513a9e12635c767b5c4b17da6392ba7e3a833bd5d826129ae11dc3a625a249fec9b2410bdeb18d52a075f2ed2bb3e3efdf01f23b87cccdae9aa15f4978751d42b7c6df7533895528acabaadb49aeabe720388f2de167d5471f6a8a576234e0281e34e6d86413df713caea8abd80ba60dac8f37d39a58c929263034e01e5c59c2be798463abd50a430b40ca7ce97ad70ea89ddc2c817d712791f78cded6dc674682761c250d574d5eb041d99dfc91f75f832e0b1d4518b6af48cf24881a61faa7885dbe1e6722d15d0b220c2bee24467ba34fce9f85730de38c7359dddde1fb7c31ec9c3bd14c7bc8a6ebacbcc735178bddf7a07228b8d5c5d87731f1b703648ce74a9e49ce90ce2f6a128c0d5a8c33a7d89a761833098c651e2887e2b4deabb462cad2895718fd605dc018fed465eb7e9ec5d147155b1c4c9032ece2624af1150a6343f76594d13ecfc6fd3856a88b69dcac05411a4f929f14347cf2c6ae3d37ed4801e0f41e077a8f28356b46cca30068178a1d433901b39b3c607d1937962e185d61d0030ad18e658ab5aba033b0d879395e33e8b96aee9cd77055de23501085e4a5aa9bc8c676467751b946af9b382e230d89ad3a506779a64d736311b3a8aff1ef778365af1af48d4cf9352ef4939e4a0ea2d69ae9395404dc992acf99e2241e1403d3390152e57ad28dbcb87d0d3c618c6fd93822174f066a9d318951895bcfae43ea0af777a0244a802196ed8f04914ea868d727453d79e2629abc735a1b6570a7ace08042bddfcb6173b7a5110bfd6c2f4f0f2d858f99a48a4475044aa1049b65687924353cfd93ecef296928dd7a20fdf1ad18612e3e2851fa6686dca47abe789d90bafeea3c1ed095812c77cb292dea0716a8f88842ce6b1d80bb7cb2b91358ded09bb2398e299c30fd2765300a98f99cd0b96c3fc4d43e20cd8668af58be91cd4dd2078a37a2ba048a0a705915129702610fd5e0c0ceb3fe36d7a96d050b71ad7cab9d062242257f191f6037e7d579c05c8ec55b396d5b459ee1a31d22adaa77d0ede48a1e71b60401ce327ff04a95815450935a7259a96a240eff73589699c72696e2591894673f28e8e4a766ecf35c90aa4046c4ac54f21c4e65dcb2bfa5db4a2422773995c086e1282699d9f4f61abad41cc617ad99537f23e70da8394d7bbac7c4612c567bcf5c00d2325176c41e4e3f0cbc6eff4ae053b650737bc3ef9ebfdc8283aa4b82de3e1e6f671a92f1822a05d917622ec3bf41459f329da27503047706b89131a2c1090f5a4293f038b3eb1d2be516708bd7221221d873f1fe9e7e0f89232d0d2ad6ac375314a499d8d16fecf64c073a795831c1f7c85af606a519eb8efe263c157091373fb0e7225eaaaf3036c9669f6b5d054727bda9b7e884a1daf44000d51d9ef6676aec7b568653e2cf7acbfa645fd95422542725aad66e47ca970aac3b9058f55c2d2280e233c4278e0088a69c0788f2d188e696de7058fbbbaecd83bde173e6bfdcafdb658640c473783743d2c09010c34c34bdedd83f2c0dc997a8956a41c07c60589a0812859dd206cadbc9880520e56c91e09550cf15b5ef20f6ff10e1ddd2cae1b2242cc6c60519fc660ce63f518839c4d7b23fd2027cb3a8d2c3a27b6462418c9eccf1742099f6906d2b8627c543b05eddf968a1e", 0xf9a}], 0x5}, 0x0)

1m2.907697462s ago: executing program 6 (id=3396):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = socket$packet(0x11, 0xa, 0x300)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800000, &(0x7f0000000380)=ANY=[], 0x1, 0x14fd, &(0x7f0000002a80)="$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")
creat(&(0x7f0000000580)='./bus\x00', 0x9e)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1084, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x8840, 0xa2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12)
write(r2, &(0x7f0000000100)='?', 0x1)
sendfile(r2, r1, 0x0, 0x3ffff)
mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x44, 0xfffffffe}]}, 0x10)
syz_emit_ethernet(0x66, &(0x7f0000000080)={@link_local, @random="86082b9827c1", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb3e02", 0x30, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "974367", 0x0, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local}}}}}}}, 0x0)

1m2.296483678s ago: executing program 6 (id=3398):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000000)={0x0, 0x23, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, 0x6, 0x1, 0x203, 0x0, 0x0, {0x2, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c030}, 0x20004080)

1m1.820337301s ago: executing program 6 (id=3401):
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
socket$xdp(0x2c, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000580)='./proc\x00', &(0x7f00000005c0)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x60, 0x0, 0x0)
write(r0, &(0x7f0000000740)='100', 0x3)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)

1m1.518669628s ago: executing program 35 (id=3401):
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
socket$xdp(0x2c, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000580)='./proc\x00', &(0x7f00000005c0)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x60, 0x0, 0x0)
write(r0, &(0x7f0000000740)='100', 0x3)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)

38.185405138s ago: executing program 7 (id=3463):
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

37.269782702s ago: executing program 7 (id=3468):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24040084)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xfff2}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004805d}, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x4, 0xa}, {}, {0xffe0, 0xffe0}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x8}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff2, 0x6}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x410c4}, 0x4000020)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0)

36.818038333s ago: executing program 7 (id=3470):
r0 = openat$fuse(0xffffff9c, &(0x7f0000000300), 0x2, 0x0)
read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0x2020)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000100)=0xcf5)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"})
ppoll(&(0x7f0000000180)=[{r1, 0x2000}], 0x1, 0x0, 0x0, 0x0)
r2 = syz_open_pts(r1, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$TCSETSW2(r3, 0x5437, 0x0)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r3, &(0x7f00000001c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x40400a0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r4)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="01", @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x24068810)

36.437780313s ago: executing program 7 (id=3473):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0), 0x1, 0x5a3, &(0x7f00000002c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x101042, 0x15)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a)
pipe2$9p(&(0x7f0000001900)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15)
r3 = dup(r2)
write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0), 0x14000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@aname={'aname', 0x3d, 'trans=fd,'}}], [], 0x6b}})
r4 = syz_open_procfs(0x0, &(0x7f0000005940)='mountinfo\x00')
read$FUSE(r4, &(0x7f00000003c0)={0x2020}, 0x2020)

35.78917079s ago: executing program 7 (id=3476):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000)

30.616385153s ago: executing program 7 (id=3489):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
select(0xff42, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x700}, 0x0, &(0x7f0000000100), &(0x7f0000000140)={0x77359400})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
ptrace$setregset(0x4205, r2, 0x3, 0x0)

30.034773008s ago: executing program 36 (id=3489):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
select(0xff42, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x700}, 0x0, &(0x7f0000000100), &(0x7f0000000140)={0x77359400})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
ptrace$setregset(0x4205, r2, 0x3, 0x0)

11.852328065s ago: executing program 4 (id=3543):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000000c0600000000000000000000070800070900020073797a3100"], 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x4048040)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x2982, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x20000023896)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000007c0)=0x7)
r3 = syz_open_dev$sndmidi(&(0x7f0000000800), 0x2, 0x143102)
writev(r3, &(0x7f0000000840)=[{&(0x7f0000000880)="94", 0xf000}, {0x0}], 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
write(0xffffffffffffffff, &(0x7f0000000ac0)='1\n', 0x2)
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000700)={0xf, 0x3e, 0x6, 0x3, 0x2, "a0e1c601283700"})

10.821322742s ago: executing program 4 (id=3545):
syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0)
read(r1, &(0x7f0000000100)=""/9, 0xfffffd87)

9.564303514s ago: executing program 4 (id=3546):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10)
r4 = inotify_init()
inotify_add_watch(r4, &(0x7f0000000200)='./file0\x00', 0xc00003a7)

8.491951812s ago: executing program 4 (id=3547):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket(0x2a, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
socket$inet_dccp(0x2, 0x6, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
close_range(r3, 0xffffffffffffffff, 0x200000000000000)

8.428973243s ago: executing program 2 (id=3548):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = io_uring_setup(0x168f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x39b})
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
syz_create_resource$binfmt(0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x7, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x2}, 0x94)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x1)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0)
open$dir(0x0, 0x4000, 0xc)
open(&(0x7f0000000680)='./file0\x00', 0x0, 0x84)
r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
read$watch_queue(r1, &(0x7f00000001c0)=""/178, 0xb2)
io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0)

7.746890371s ago: executing program 2 (id=3549):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
listen(r0, 0x5)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0xa, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0, 0x1, 0x0, 0x0, 0x41100, 0xd, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x7, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0x1], 0x0, 0x10, 0xcb6}, 0x94)
r1 = getpgid(0x0)
setpriority(0x1, r1, 0x5)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0xe, 0x7ffffffe}]})
connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x9)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = syz_usb_connect$rtl8150(0x5, 0x41, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
syz_usb_ep_write(r2, 0x81, 0x0, 0x0)

7.00428928s ago: executing program 2 (id=3551):
execve(&(0x7f0000000300)='./mnt\x00', &(0x7f0000000580)={[&(0x7f0000000540)='\x06*^(\xfa^!]\\-:\x00']}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000180)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x1008c10, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_USER(r0, 0x0, 0x4040)
chdir(&(0x7f0000000140)='./file0\x00')
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
pwrite64(r1, &(0x7f0000000000)="ff", 0x58200, 0xfb2200)
write$cgroup_pid(r1, &(0x7f0000000480), 0x12)

6.902192893s ago: executing program 8 (id=3490):
socket$nl_generic(0x10, 0x3, 0x10)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="08000200ac1414aa1400060006000000040000000300000006000000"], 0x34}}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x40080, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0)
write(r2, &(0x7f0000000700)='bind', 0x4)
getdents64(r2, 0x0, 0x0)
mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x12, r2, 0x80000000)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000540)=@IORING_OP_RENAMEAT={0x23, 0x50, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)='./file0/file0\x00', r2, 0x4, 0x1, {0x0, r3}})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000))
mkdirat(0xffffffffffffff9c, 0x0, 0x63)
syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000380065000000019078ac1e0001ac1414aa03039078000300034523000800650a5398060001e0000002e000000100000000d00000d2"], 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140002"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x2)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]})

6.824469764s ago: executing program 0 (id=3552):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6(0xa, 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f0000000680)='fdinfo\x00')
socket$inet_udp(0x2, 0x2, 0x0)
r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x804808, &(0x7f0000001600)=ANY=[@ANYRES32=r0, @ANYRES8=r0, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESHEX, @ANYRES32=r0, @ANYRES64, @ANYRESOCT=0x0, @ANYRESDEC, @ANYRES8=r0, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x2, 0x55e, &(0x7f0000001080)="$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")
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
socket(0x10, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={<r2=>0xffffffffffffffff}, 0x106, 0x3}}, 0x20)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r2, 0x10000}}, 0xa)
writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

5.951992227s ago: executing program 8 (id=3553):
r0 = syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x28100c8, &(0x7f0000006500)=ANY=[@ANYBLOB="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"], 0xfe, 0x61b0, &(0x7f0000006780)="$eJzs3c1vHGcdB/DfvvolNLV6qEqEkJuWl1KaxEkJgQJtD3Dg0gPKFSVy3SoiBZQElFYWceULB078BSAkjghxRBz4A3rgyo0TJyLZSKCeGDT288TjyW7Xqe2dtefzkZyZ3z6z3mfynX3zvDwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMT3v/eDlU5E3Ph5umEp4jPRi+hGLJT1ckQsLC/l5fsR8VzsNMezETGYiyjvv/PP0xGvRsRHZyO2ttdXy5svH7Af3/3j33/3wzNv/e0Pg4v//dO93mvjlrt//1f/+fODw60zAAAAtE1RFEUnfc0/l77fd5vuFAAwFfn9v0jy7ae+/vU/3/rLLPVHrVar1eop1FXFaA+qRURsVO9TfmawOx4ATpiN+LjpLtAg+bdaPyLONN0JYKZ1mu4Ax2Jre321k/LtVN8Plnfb87Eg+/Lf6Dw6v2PcdJL6MSbT2r42oxfPjOnPwpT6MEty/t16/jd224dpuePOf1rG5T/cPfWpdXL+vXr+Nacn/+7I/Nsq599/ovx78gcAAAAAgBmW//6/1PD+37nDr8qBfNL+3+Up9QEAAAAAAAAAjtphx/97xPh/AAAAMLPK7+ql35zdu23ctdjK2693Ip6qLQ+0TDpZZrHpfgAAAAAAAAAAAABAm/R3j+G93okYRMRTi4tFUZQ/VfX6SR32/idd29cf2qzpF3kAANj10dnaufydiPmIuJ6u9TdYXFwsivmFxWKxWJjLn2eHc/PFQuV7bZ6Wt80ND/CBuD8syl82X7lf1aTvy5Pa67+vfKxh0TtAx47IIP1vjmluKGwASHbfjba8I50yRfH0uA8fsI/n/ym0FEtNb1fMvqY3UwAAAOD4FUVRdNLlvM+lff7dpjsFAExFfv+v7xc4VN0d0x5xNL9ffdz1/F5kM9EftVqtVh9RXVWM9qBaRMRG9T7lZwbD8QPACbMRHzfdBRok/1brR8RzTXcCmGmdpjvAsdjaXl/tpHw71feDNL57PhZkX/4bnZ375fuPmk5SP8ZkWtvXZvTimTH9eXZKfZglOf9uPf8bu+3DtNxx5z8t4/If7pwy1z45/149/5rTk393ZP5tlfPvP1H+PfkDAAAAAMAMy3//X7L/N68yAAAAAAAAAJw4W9vrq/m817z//3MjlnP+5+mU8+88af4LaV7+J1rOv1vL/8u15XqV+Ydv7j3//729vvr7e//6bJ4eNP+5PNNJW1YnbRGd9EidfpoeZu0etznoDctHGnS6vX465qcYvBO34nasxaV9y3bT/8de+8q+9rKng33tl/e19x9rv7KvfZCuO1As5PYLsRo/idvx9k572TY3Yf3nJ7QXE9pz/j2v/62U8+9Xfsr8F1N7pzYtPfyw+9jzvjod9Thv3Pr8Ly8d/+pMtLlzSfvHlet3fuq9id1XnDPD+NndtTsX7t+8d+/OSqTJvlsvR5ocsZz/YOdnbu/1/4Xd9vy6X32+Pvxw+MT5z4rN6D/atqvK/F+ozJfr+9KU+9aEnP8w/eT8307to5//Jzn/3tj8X26gPwAAAAAAAAAAAAAAAPBJiqLYOUX0jYi4ms7/aercTABguvL7f5Hk29Vq9czUD2K2+qNWq09wXVWM9nq1iIi/Vu9Tfmb4xahfBgDMsv9FxD+a7gSNkX+L5ev9ldMXm+4MMFV33//gRzdv3167c7fpngAAAAAAAAAAn1Ye/3O5Mv7zixGxVFtu3/ivb8byYcf/7OeZRwOMHvFA32Nsdoe9bmW48edjZ3zuC+PG/z4fj4//ncfE7VXXY4zBhPbhhPa5Ce2jRzPeS2vkiR4VOf/nK+Odl/mfqw2/3obxX+tj3rdBzv98ZXsu8/9Sbblq/sVvZy7/jYMuuBndfflfvPfeTy/eff+DV269d/PdtXfXfnxlZeXSlatXr127dvGdW7fXLu3+ezy9ngE5/zz2teNA2yXnnzOXf7vk/L+Qavm3S87/i6mWf7vk/PPnPfm3S84/f/eRf7vk/F9KtfzbJef/lVTLv122ttfnyvxfTrX82yU//7+aavm3S87/lVTLv11y/hdSLf92yflfTPUB8nd5+FMk55/3cHn+t0vOfyXV8m+XnP/lVMu/XXL+V1It/3bJ+b+aavm3S87/a6mWf7vk/K+mWv7tkvP/eqrl3y45/2upln+75Py/kWr5t0vO/5upln+75PxfS7X82yXn/61Uy79dcv7fTrX82yXn/51Uy79dcv6vp1r+7bJ3/X8zZsyYyTNNvzIBAAAAAAAAAAAAAHXTOJy46XUEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/7MDBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzdW4xcd30H8DN789ohxEAITmpgk5gQkiW7thNfaNOYcG2AUiCh0Au2612bBd/w2iVQJJsGSiSMiiqqpg9tAaE2UlVhVTzQitI8VL08lfaBvlRUlZAaVQEFVKS2omw1c/7//87Mzs7Mesfr2fP/fCT7tztzZs6ZM2dm97v2dw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADS7/Q3zn6kVRVH/0/hre1G8oP7x1qntjcted723EAAAAFiv/2v8/fxN6YJDfdyoaZm/e8U/fm1paWmpeN/o745/YWkpXTFVFONbiqJxXXTl399fa14meKKYrI00fT7SY/WjPa4f63H9eI/rJ3pcv6XH9ZM9rl+xA1bYWv48pnFnuxofbi93aXFzMd64bleHWz1R2zIyEn+W01Br3GZp/HixUJws5ovZluXLZWuN5b9xe31dby3iukaa1rWzfoT84BPH4jbUwj7e1bKu5fuMvvf6YuqHP/jEsT8+/9ytnWbP3dByf+V23n1HfTs/FS4pt7VWbEn7JG7nSNN27uzwnIy2bGetcbv6x+3b+Xyf2zm6vJkbqv05nyxGGh9/q7Gfxpp/rJf2085w2X/fWRTFpeXNbl9mxbqKkWJbyyUjy8/PZHlE1u+jfii9uBhb03F6ex/HaX3O7Wo9TttfE/H5vz3cbmyVbWh+mr73yYkVz/taj9Oo/qhXe620H4ODfq0MyzEYj4tvNR70kx2PwV3h8X/irtWPwY7HTodjMD3upmPwjl7H4MjEaGOb05NQa9xm+Rjc3bL8aGNNtcZ89q7ux+DM+VNnZxY/9vHXLpw6emL+xPzpvbt3z+7dt+/AgQMzxxdOzs+Wf1/l3h5+24qR9Bq4I+y7+Bp4dduyzYfq0pcG9zqc7PI63N627KBfh2PtD662MS/Ilcd0+dp4tL7TJy+PFKu8xhrPzz3rfx2mx930Ohxreh12/JrS4XU41sfrsL7M2Xv6+55lrOlPp224Vl8Ltjcdg+3fj7Qfg4P+fmRYjsHJcFz86z2rfy3YGbb3yem1fj8yuuIYTA83vPfUL0nf708eaIxOx+Vt9StumCguLM6fu+/xo+fPn9tdhLEhXtJ0rLQfr9uaHlOx4ngdWfPxemjhFU/e1uHy7WFfTb62/tfkqs9VfZn77+v+XDW+unXeny2X7inCGLCN3p+dvprX92fKkl32Z32ZT82s/3vxlEub3n/HV3n/jbn/J+X60l09MTo+Vr5+R9PeGW95P259qsYa7121xrqfn+nv/Xg8/Nno9+Obu7wf72hbdtDvx+PtDy6+H9d6/bRjfdqfz8lwnJyc7f5+XF9mx561HpNjXd+P7wyzFvb/a0JSSLmo6dhZ7bhN6xobGw+PayyuofU43duy/HjIZvV1Pb3n6o7Tu+8s72s0PbplG3WcTrUtO+jjNL1frXac1nr99O3qtD+fk+G4uHlv9+O0vswz96//vXNr/LDpvXOi1zE4PjpR3+bxdBCW7/dLW+MxeF9xrDhTnCzmGtdONI6nWmNd0w/0dwxOhD8b/V65o8sxeHfbsoM+BtPXsdWOvdrYygc/AO3P52Q4Lp56oPsxWF/mjfsH+73r3eGStEzT967tP19b7Wdet7Xtpmv5M6/6dv7N/u4/m60vc/LAWnNm9/10b7jkhg77qf31u9praq7YmP20I2zncwdW30/17akv84WDfR5Ph4qiuPiRhxs/7w3/vvLnF779tZZ/d+n0bzoXP/Lw9288/rdr2X4ANr+flGNb+bWu6V+m+vn3fwAAAGBTiLl/JMxE/gcAAIDKiLk//q/wRP4HAACAyoi5fyzMJJP8v+ONzy385GKRmvlLQbw+7YZHyuVix3U2fD61tKx++cNfmf/RX17sb90jRVH8+JHf6Lj8jkfidpWmwnZeeVPr5StveLGv9R95bHm55v76F8P9x8fT72HQqYI7WxTFN276XGM9U++/3JjPPHKkMd996ckn6ss8f7D8PN7+2ZeUy/9BKP8eOn605fbPhv3w3TBn39Z5f8TbffXya3buf+/y+uLtane8sPGwn/pAeb/x9+R8/oly+bifV9v+v/rs01+tL//4qzpv/8WRztv/dLjfr4T5Py8vl29+Duqfx9t9Omx/XF+83X1f/mbH7b/ymXL5s28ulzsSZlz/3eHzXW9+bqF5fz1eO9ryuIq3lMvF9c9++7cb18f7i/ffvv2Thy+37I/24+OZfy7vZ6Zt+Xh5XE/0F23rr99P8/EZ1//0bx1p2c+91n/l3c++vH6/7eu/t2250bbbt//Gpj/89Oc6ri9uz6E/O9vyeA69K7yOw/qf+kA4HsP1/3vlcy3rjY68q/X9Jy7/xe0XWx5P9NYfluu/8tCJxvyPqR/9/g0vuPGFl15Z33dF8a33lPfXa/0n/uhMy/Z/6ZZ7Gs9HvD529NvXv5q4/nMfnT59ZvHCwlzTXm387py3l9uzZXLrtvr23hTeW9s/P3zm/Afnz03NTs0WxVR1f4XeVftymN8vx6W13v6ex8LzedvvfWPbXf/02Xj5vzxaXn75beXXrVeH5T4fLt9ePn9LtXWu/6nbb2m8vmvPlJ+39NgHYOeu/zzQ14Lh8bd/XxCP97Mv/WBjP9Sva3zdiK/rdW7/d+bK+/l62K9L4Tcz33HL8vqal4+/G+Hye8rX+7r3X3ibi8/rn4Tn+x3fLe8/bld8vN8J38d8c0fr+108Pr5+caT9/hu/xeNSeD8pLpXXx6Xi/r78/C0dNy/+HpLi0q2Nz38n3c+ta3qYq1n82OLMyYXTFx6fOT+/eH5m8WMfP3zqzIXT5w83fpfn4Q/1uv3y+9O2xvvT3Py++4vZrUVRnClmN+AN69psf/2j/rb/7GPH5vbP3jU3f/zohePnHzs7f+7EscXFY/Nzi3cdPX58/qO9br8w9+DuPQf37t8zfWJh7sEDBw/uPTi9cPpMfTPKjeph3+yHp0+fO9y4yeKD9x/c/cAD989OnzozN//g/tnZ6Qu9bt/42jRdv/WvT5+bP3n0/MKp+enFhY/PP7j74L59e3r+NsBTZ48vTs2cu3B65sLi/LmZ8rFMnW9cXP/a1+v2VNPiv5Xfz7arlb+Ir3jnvfvS72et+8onV72rcpG2XyD6XPhdNP/worMH+vk85v7xMJNM8j8AAADkIOb+iTAT+R8AAAAqI+b+LWEm8j8AAABURsz9k2EmmeR//X/9//76/+X1+v959f/PfqTslW72/n/sz+v/5+E69//XvX79f/3/6vX/++/Pb/bt1//X/2elYev/x9y/tSiyzP8AAACQg5j7t4WZyP8AAABQGTH33xBmIv8DAABAZcTc/4Iwk0zyv/5/X/3/Pb0KV9Xv/zv/v/5/sTn7//HJ0f/Pxpr79+99tOVT/f9A/1//X/9f/1//n3UbX/Wa69X/j7n/xjCTTPI/AAAA5CDm/heGmcj/AAAAUBkx998UZiL/AwAAQGXE3L89zCST/K//7/z/+v/6/5Xu/6/3/P9NG6P/vzk4/393+v89XHX/f1L/fzP2/8cHu/3D3f/vufn6/1wTw3b+/5j7XxRmkkn+BwAAgBzE3P/iMBP5HwAAACoj5v6XhJnI/wAAAFAZMfffHGaSSf7X/9f/1//X/9f/77z+3uf/Lz/S/x8u+v/d6f/34Pz/efX/B7z9w93/H/T5/8ff1H57/X86Gbb+f8z9Lw0zyST/AwAAQA5i7r8lzET+BwAAgMqIuf9lYSbyPwAAAFRGzP07wkwyyf/6//r/+v/6//r/ndffu/9f0v8fLvr/3en/96D/r/+v/99f/7/DN7/6/3QybP3/mPtvDTPJJP8DAABADmLuvy3MRP4HAACAyoi5/6fCTOR/AAAAqIyY+3eGmWSS//X/9f/1//Pq/987of+v/19t+v/d6f/3oP+v/6//3+f5/1daS/9/S687ozKGrf8fc//Lw0wyyf8AAACQg5j7XxFmIv8DAABAZcTc/8owE/kfAAAAKiPm/qkwk0zyv/5/tfr/f/rXT72y0P/X/++x/kH0/2vh0iHq/8fDYOj7/w/p/19T+v/d6f/3oP+v/6//vyH9f/IxbP3/mPtvDzPJJP8DAABADmLuvyPMRP4HAACAyoi5/84wE/kfAAAAKiPm/l1hJpnkf/3/avX/I/1//f9u63f+f+f/rzL9/w6aXqT6/z3o/+v/Z9//j9/96v8zGMPW/4+5/1VhJpnkfwAAAMhBzP13hZnI/wAAAFAZMfe/OsxE/gcAAIDKiLn/7jCTTPK//r/+v/6//r/+f+f16/9vTvr/3a21/z+h/6//r/+fWf9/fef/3xo+1v8nGrb+f8z9rwkzyST/AwAAQA5i7r8nzET+BwAAgMqI/3+z/H+v8j8AAABUUcz902EmmeR//X/9/1z6//Fnffr/+v/6/9Wm/9+d8//3oP+v/6//v67+v/P/027Y+v8x9782zCST/A8AAAA5iLn/vjAT+R8AAAAqI+b+mTAT+R8AAAAqI+b+2TCTTPK//r/+fy79f+f/1//X/8+D/n93+v896P/r/1et/18U+v9cV8PW/4+5f3eYSSb5HwAAAHIQc/+eMBP5HwAAACoj5v69YSbyPwAAAFRGzP33h5lkkv/1//X/9f/1//X/O69f/39z0v/vTv+/B/1//f+q9f+d/5/rbNj6/zH3PxBmkkn+BwAAgE0nxveePx1bFnP/vpY7kP8BAACgSmLu3x9mEvJ/p//XDQAAAGwuMfcfCDPJ5N//9f8r0v//zb9vWbf+v/5/t/UPpv+/Vf8/TP3/4VLR/n/7y+Kq6f/3oP+v/6//r//PQA1b/z/m/oNhJpnkfwAAAMhBzP2vCzOR/wEAAKAyYu7/6TAT+R8AAAAqI+b+nwkzyST/6/9XpP/fRv9f/7/b+p3/X/+/yira/x+YSvX/R/T/9f+Ha/v1//X/Wena9//jR/31/2PufzDMJJP8DwAAADmIuf9nw0zkfwAAAKiMmPsfCjOR/wEAAKAyYu4/FGaSSf7X/9f/1//X/782/f+HinbD2P+vHzz6/9Wi/99dpfr/zv+v/z9k21+J/v+k/j+DNWzn/4+5//VhJpnkfwAAAMhBzP0Ph5nI/wAAAFAZMfe/IcxE/gcAAIDKiLn/jWEmmeR//X/9/03Q/5+I1+n/b6b+v/P/t9P/3xj6/93p//eg/6//n3v/3/n/GbBh6//H3P+mMJNM8j8AAADkIOb+N4eZyP8AAABQGTH3vyXMRP4HAACAyoi5/61hJpnkf/1//f9N0P93/n/9f/1//f++6f93p//fg/6//r/+v/4/AzVs/f+Y+38uzCST/A8AAAA5iLn/kTAT+R8AAAAqI+b+t4WZyP8AAABQGTH3vz3MJJP8r/+/ifv/Y/r/+v/6//r/vdebG/3/7vT/e9D/1//X/9f/Z6CGrf8fc/87wkwyyf8AAACQg5j7fz7MRP4HAACAyoi5/51hJvI/AAAAVEbM/b8QZpJJ/tf/38T9/0qe/3/pYvPtKtb/ry+m/3+9+v/1G+n/Z0H/vzv9/x469P+36P/r/+v/6/9z1Yat/x9z/7vCTDLJ/wAAAJCDmPvfHWYi/wMAAEBlxNz/njAT+R8AAAAqI+b+R8NMMsn/+v9Z9v/TQx6+/r/z/+v/O/+//v/6VLf/v+a76kj/vwfn/9f/1//X/2eghq3/H3P/Y2EmmeR/AAAAyEHM/e8NM5H/AQAAoDJi7v/FMBP5HwAAACoj5v73hZlkkv/1/7Ps/w/x+f+r1v8fazk+cur/TzY9n+m41P/X/98A1e3/D4b+fw/6//r/w9z/D0fz1lVur//PMBq2/n/M/e8PM8kk/wMAAEAOYu7/pTAT+R8AAAAqI+b+Xw4zkf8BAACgMmLu/5Uwk0zyv/6//r/+v/P/O/9/5/Xr/29O+v/d6f/3oP+v/z/M/f8e9P8ZRsPW/4+5/1fDTFYNft//rz4eJgAAADBEYu7/QJhJJv/+DwAAADmIuf9wmIn8DwAAAJURc/+RMJNM8r/+f3v/P55RVf9f/1//X/9f/38zGlz//2U3FoX+f2X6/5N9boD+v/6//r/+PwM1bP3/mPuPhplkkv8BAAAgBzH3/1qYifwPAAAAlRFz/7EwE/kfAAAAKiPm/rkwk0zy/3Xs/48PZ//f+f+vtv//Y/1//f9A/78z/f+NscnP/z8RP9D/d/7/TvT/h3v79f/1/1lp2Pr/MffPh5lkkv8BAACgwtKPg2PuPx5mIv8DAABAZcTcfyLMRP4HAACAyoi5/4NhJpnkf+f/1/93/v/r0f8fa1le/7+k/6//PwibvP/v/P/6//r/m3j79f/1/1lp2Pr/MfcvhJlkkv8BAAAgBzH3fyjMRP4HAACAyoi5/8NhJvI/AAAAVEbM/SfDTDLJ//r/+v+59/9rRXHJ+f/1/zutX/9/c9L/707/vwf9f/1//X/9fwZq2Pr/MfefCjPJJP8DAABADmLuPx1mIv//P3v30RzZXfVxvB8/4wls4CV4zYolrMxLYMuOKtYUyeRgDzmDyTmYbHLOYHLOOZuco4mGKlHWnHNmpG7dqxndUd/7/38+m2NNjeiWRzb8UH3rAgAAQDNy9987brH/AQAAoBm5++8Tt3Sy//X/+v/e+//VVp7/v/f36//P0f/r/6ew1t+f2Pz7DorCD+z/73Tna+6h/9f/6/8H6f/1//p/9ptb/5+7/75xSyf7HwAAAHqQu/9+cYv9DwAAAM3I3X//uMX+BwAAgGbk7r8mbulk/+v/9f/6f/3/nv7/Jv2//n/ZPP9/mP5/hP5f/6//1/8zqbn1/7n7HxC3dLL/AQAAoAe5+x8Yt9j/AAAA0Izc/Q+KW+x/AAAAaEbu/gfHLZ3sf/2//l//v5T+/6Tn/+/7evT/+v9N9P/D9P8j9P/6f/2//p9Jza3/z93/kLilk/0PAAAAPcjd/9C4xf4HAACAZuTuf1jcYv8DAABAM3L3Pzxu6WT/6//1//r/pfT/x/T8f/2//n/hblid/3eC/n+d/n/ESP+/Wun/hxy6n9/85S3n/R9A/6//Z93c+v/c/Y+IW+66Wp281C8SAAAAmJXc/Y+MWzr5+T8AAAD0IHf/tXGL/Q8AAADNyN1/XdzSyf7X/+v/9f/6f/3/5tfX/y+T5/8PO3r/f8c73Oue/fb/zTz/f2fT/3LZfj9/VNt+/9P3/7d9Z+j/Wba59f+5+8/GLZ3sfwAAAOhB7v5HxS32PwAAADQjd/+j4xb7HwAAAJqRu/8xcUsn+1//31r///97Pu+C/n+3dtH/6//1//r/1un/h3n+/4jdf82dqQ+b7f8PsO1+funv3/P/9f+sm1v/n7v/sXFLJ/sfAAAAepC7/3Fxi/0PAAAAzcjd//i4xf4HAACAZuTuf0Lc0sn+1/+31v/v/TzP/9f/b3p9/b/+v2X6/2H6/xGtPP//Er9rtt3PH9W237/+X//Purn1/7n7nxi3dLL/AQAAoAe5+58Ut9j/AAAA0Izc/U+OW+x/AAAAaEbu/qfELZ3sf/2//n8Z/X++gv5f/3/5+/+0t/+/7S/0/3N3O/3/KP3/iFb6/0u07X5+6e9f/6//Z93c+v/c/U+NWzrZ/wAAANCD3P1Pi1vsfwAAAGhG7v6nxy32PwAAADQjd/8z4pZO9r/+X/+/jP7f8//1/57/r/8/HP3/MP3/CP2//l//r/9nUnPr/3P3Xx+3dLL/AQAAoAe5+58Zt9j/AAAA0Izc/c+KW+x/AAAAaEbu/mfHLZ3sf/2//l//r//X/29+ff3/Mun/h+n/R+j/9f/6f/0/k5pR/3/BZ51ePSdu6WT/AwAAQA9y9z83brH/AQAAoBm5+58Xt9j/AAAA0Izc/c+PWzrZ//r/2fT/uzlfW/3/mdVqpf9fddr/n7ngz7O+L/X/+v9joP8fpv8fof/X/+v/9f9Makb9/+7HuftfELd0sv8BAACgB7n7Xxi32P8AAADQjNz9L4pb7H8AAABoRu7+F8ctnex//f9s+v9dbfX/nv+///ujp/7f8//X6f+Ph/5/mP5/hP5f/6//1/8zqbn1/7n7XxI3nbzykr9EAAAAYGZy9780bunk5/8AAADQg9z9L4tb7H8AAABYqOvXfiV3/8vjlk72v/5/2v7/5AW/pv/X/+///tD/6//1/5ef/n+Y/n+E/l//r//X/zOpufX/uftfEbd0sv8BAACgB7n7b4hb7H8AAABoRu7+V8Yt9j8AAAA0I3f/q+KWTva//t/z//X/+n/9/+bX1/8vk/5/mP5/hP5f/7/d/v/U+b/U/9OGi+j/d3Z2rr3s/X/u/lfHLZ3sfwAAAGjSvp+V5u5/Tdxi/wMAAEAzcve/Nm6x/wEAAKAZuftfF7d0sv/1/532//mtvqz+/7rVSv+v/9f/6/+H6f+H6f9H6P/1/57/r/9nUnN7/n/u/tfHLZ3sfwAAAOhB7v4b4xb7HwAAAJqRu/8NcYv9DwAAAM3I3f/GuKWT/a//77T/9/x//b/+/7j7/1tX+v9jsYj+/8zBrz/3/v+s/l//P6C7/v9ud9nzof5f/8+6ufX/ufvfFLd0sv8BAACgB7n73xy32P8AAADQjNz9b4lb7H8AAABoRu7+t8ZNJzrZ//p//b/+X/+v/9/8+sf8/P+Tq9VK/z+BRfT/A+be/0/z/P/9/5Sfp//X/y/5/ev/9f+sm1v/n7v/bXFLJ/sfAAAAepC7/+1xi/0PAAAAzcjd/464xf4HAACAZuTuf2fc0sn+1//r//X/+v/m+/+zi+j/Pf9/Ivr/YfPo/w+m/9f/L/n96//1/xzetvr/3P3vils62f8AAADQg9z9745b7H8AAABoRu7+98Qt9j8AAAA0I3f/e+OWTva//l//fzH9f75P/X9b/f+p2fX/p/f853Xy/H/9/0T0/8P0/yP0//p//f/1+n+mNLfn/+fuf1/c0sn+BwAAgB7k7n9/3Pq/bu1/AAAAaEbu/g/ELfY/AAAANCN3/wfjlk72v/5f/+/5//r/5p//r//viv5/mP5/hP5f/6//9/x/JjW3/j93/4filk72PwAAAPQgd/+H4xb7HwAAAJqRu/8jcYv9DwAAAM3I3X9T3NLJ/tf/6//1//p//f+5P0P9fxv0/8OOp/8/o//X/1c//3/xT4H+X/8/9vm0aW79f+7+j8Ytnex/AAAA6EHu/o/FLfY/AAAANCN3/8fjFvsfAAAAFunEhl/L3f+JuKWT/a//1//r//X/+v/Nr6//X6at9P/5TaH/9/z/0E//f9Wej5b2/P/9//2l/9f/M7259f+5+z8Zt3Sy/wEAAKAHufs/FbfY/wAAANCM3P2fjlvsfwAAAGhG7v7PxC2d7H/9v/7/CP3/Wf2//l//r/+fG8//H6b/H6H/3+rz85f+/vX/+n/Wza3/z93/2bilk/0PAAAAPcjd/7m4xf4HAACAZuTu/3zcYv8DAABAM3Z3f8ZlHe5//b/+3/P/9f/6/82vr/9fJv3/MP3/CP2//l//r/9nUnPr/7+w+1mnV1+MWzrZ/wAAANCD3P1filvsfwAAAGhG7v4vxy32PwAAADQjd/9X4pZO9r/+X/+/jP5/Z2fnWv2//n/v13O+/79Z/0/R/w/T/4/Q/+v/9f/6fyY1t/4/d/9X45ZO9j8AAAD0IHf/1+IW+x8AAACakbv/63GL/Q8AAADNyN3/jbilk/2v/59B/39a/+/5//r/lef/6/8nov8fpv8f0WL/f/rwX/62+/mj2vb71//r/1k3t/4/d/8345ZO9j8AAAD0IHf/t+IW+x8AAACakbv/23GL/Q8AAADNyN3/nbilk/2v/z++/v+2v3e9PP//zGrz+9f/6//1//r/y03/P0z/P6LF/v8ibLufX/r71//r/1k3t/4/d/9345a9w+/Ki/sqAQAAgDnJ3f+9uKWTn/8DAABAD3L3fz9usf8BAACgGbn7fxC3dLL/9f8zeP5/g/2/5/9v/v7Q/8+6/79C/98G/f8w/f8I/b/+X/8/Uf+f3836/97Nrf/P3f/DuKWT/Q8AAAA9yN3/o7jF/gcAAIBm5O7/cdxi/wMAAEAzcvffHLdcsP83td2t0P/r//X/+n/9/+bX1/8vk/5/2GH7/1Oro/X/Sf+v/9f/99r/e/4/58yt/8/d/5O4xc//AQAAYHGuPODXc/f/NG6x/wEAAKAZuft/FrfY/wAAANCM3P0/j1tuuWJbb+lY6f/1//p//b/+f/Pr6/+XSf8/zPP/R+j/p+jnr9b/t9H/r1b6f45ubv1/7v5fxC1+/g8AAADNyN3/y7jF/gcAAIBm5O7/Vdxi/wMAAEAzcvf/Om7pZP/r//X/R+z/d9NM/f85+v9z9P+b6f+Ph/5/mP5/hP7f8//1/57/z6Tm1v/n7v9N3NLJ/gcAAIAe5O7/bdxi/wMAAEAzcvf/Lm6x/wEAAKAZuft/H7d0sv8n7f9vjAr7MP1//K3W/y++//f8f/2//l//Pyv6/2H6/xH6f/2//l//z6Tm1v/n7v9D3NLJ/gcAAIAe5O7/Y9xi/wMAAEAzcvf/KW6x/wEAAKAZufv/HLd0sv89/1//r//X/+v/N7++/n+Z9P/D9P+b1R+U/l//r//X/zOpufX/ufv/Erd0sv8BAACgB7n7/xq32P8AAADQjNz9t8Qt9j8AAAA0I3f/3+KWTva//l//r//X/+v/N7++/n+ZZtX/n9D/X/i5d7/9+Mt6/v/W+/98C/p//b/+n0nMrf/P3f/3uKWT/Q8AAAA9yN3/j7jF/gcAAIBm5O7/Z9xi/wMAAEAzcvf/K27pZP+P9P+n6jfq/wfp//e+f/3/5u8P/b/+X/9/+c2q//f8/8U8/7/o/z3/X/+v/2dSc+v/c/f/O27pZP8DAABAD3L33xq32P8AAADQjNz9/4lb7H8AAABoRu7+/8Ytnex/z/9fUv9/tf5f/6//1//r/0fo/4fp/0fo//X/F/H+r9r3sf5f/8+6ufX/ufv/FwAA////ckMF")
r1 = fsopen(&(0x7f000002c100)='cifs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f000002c240)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
syz_mount_image$msdos(&(0x7f000002c280), &(0x7f000002c2c0)='.\x02\x00', 0x200000a, &(0x7f000002c300)=ANY=[], 0xff, 0x11f5, &(0x7f000002c340)="$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")
write$UHID_INPUT(r2, &(0x7f000002d540)={0x8, {"7f9654d636ab18b7938a2804505c72e9994ca22404fc203334cc21ed3d6a776fd12d13f9602b2980f983c31a5d1e431db778099ce3af3fb20e1ee1f4fdb77cbb36154982a93c19825d6fd273ab1eb5bcd47adad50de8a6791486e482e29ecc94284921f33b941cfc1000c9781d9a828c5ec7a2c77b4e624a5aa0e9e39782bad733edae1ba47e1c6116e4170e6587dd6210a57abe91f1f80c4e31139d8b73fe35ac1f99ea82dd6aa9c9aa67de88ae3e141020e1a876bbc449d2d843aa7e6d90b948b7e28770e6ac71010c63f17e90fd20806a9f8d9f418ee3af74aac64b04a27c4f5e3626ca2da546c79d24acadd11e8d272a22fc54078fd5e64475993668980a9f95aff964dee674356af492b8377a759d8ccf1accb9a18ef7ad16f438dde69cd020d71552b0810688c882a26a22b23f4b35471b08b379193db1cd7934a4049ff1b00d9795cda6e73951641d5e2365c24facd5afd09ed1d096d758b4fef66fe1aa22395d67b7e1db623d4a60a7dc93893d6c4a91df79535a855868c5dc0033d5c428cd25b85c5deb6e81068553bc84cead4d1eba8aa57e2b354a6899e44acbd3834491219b3e231cd55d82f161774a689efe197cc193ac0124c67738a0a1d5f16a6768c2c2ba7386c8c94ca08c55117f344f5a2bca0d09e79ea3fc49491f2c7adc513c2779c1bf62b1a8643d23e9e8b2ae41d4a59f1b82b82e092b36eb851b8456da871b4057aec325a9d4cccafde61f2abc85e3cabeabb856f6ffbfe23d69219ec8fae6beb54abe7870dbae823d49806a967a1c7f252999804f106745f20403bb3347b59321dc69765567abcbd89de04d89622170005df5871ed0fb72345a11da074060d7d4ee2e437f71a45723fb6b02de56067e54f54c52d10f7874a13cbfb3bd65ce54f9d6719ea210e0cf79e4e2157736ec07ac5915682ab81bced665c1e72fab8d8cfe509de0f21fe374b957b379fd5918061e21c2e96985cc1354b2de859b0f1a463ab04683b1253eda671c2353b5c208aca652f5419ffc4949a7fa909b95653f42d97390c400b4a1c308b11e73e9a06d3b164d3361e75584d70e6bc61d570a7e0c7da330f643194c1893fcd6489fac605eead61b53dff18caf526ecccc9bbd9146bc3c3bb67677695e6fddaab081786e9084014e60f5c03ae5a9087726b05e17402cd2fbb80d773b8a41470b1f901a8c2b2d57450181f4fc5bc53c7cb3dc032b84567492607cb08832eca9f79da9210d197863e5db5a74a9823dc0cc8bd9f3a9b6ff5a7d15d4747a9b26e088f4fad96d81cd1214226b1c4585d418d593220fcbb9ad949266cc48163e3498b46ebcdf7b2b5ecfe67539a61ed9e39b02d5b35ac0d0e7fa830034ca2da8a7ddf04bcf2cee939994369feb77023e0e3de04b21db7a640a92c17748245005cd75a7deba4ff0e4c104a9db2d9a98ec8edb3562050a3bac5f322290e3d8b6fb21770ac436d4cb12b97fc8f76d7bb9eeed85663eb0626f1ad1719ee4b07f7de29f4fa3dbdfb2bfc0898beabafbeca9f13050e6b2f6c432e423cd5cb6b8fa56fe32c3e50104e44462c0a5c69de6a7ac5ae3d9f07ceed64dbffa42e4663838bfcde92f0fcb895f3b93c59b0e48c09890dfc36436db56b708f6e7cbbd2a6305f573cee099dbcd263cb96d9fb69cbc3cb06d8f5e3789698a17e71d22b4665ff5447fcc17a31bb136c8bb4b984573bcaf1cb650198c1266e6ddfd42d44f9de02cb9d915c5334c550fac3fcee56790aeb09d81e7690a32d8b0cc477b23f15257820de227be1ffaec2f63f3266b8f5dd78947dcee355fe59bfb100e5244425532bb1d115acd211b8c16b0ec0aae00fca5d4511a05c3ff027a1cac56210a10d81c01b90e156cc7b33de0fac82509516d398166096013e068db935483c93ba95da39b5ae4087d84479a4c4809f28f93790dc279637bd6f3dc441d315cf6bd7b0e3d92070a45baf4445ce063fd12690eb002f5ca068a256bc54100c99a02a346beca39072163c4b297d117f1ed9fef42e3dbc11d36a0a0db52e84461c6fbb4aad62cd6c8dc9ae6a3390a5e8773ac599e67436220c8d541a9039762bffaa7f490e31dddbc362fb4ff686cda905f3b02a1db76d4d570d970434921ca8a4765af6d5c8b881e1f4ffa7e2d9ef5f5511b94f88474674ec790bb5186c73446a227bf1ffd19b605733abd1bd41e421aeaf2ed4617088c7ceef85451225056435993e89e4bccd2c2e4b39af99feef11fea645eeb5cf9f77b1e19a72d3efb613100969b84302789714bca65bcbc96762b4012a5700c62aed706433b9f142b7302442b6a9958b0e28e8b1cfa9eeb4ac0d71f497b23babf9f0221dcb658d9f4db5d45bee30d2ad7c97d6a562e014a7701c15325ec5d42ab732b37714a77a95c03fb15bbfba6fade32bf50f985a1df362ca7216c09000000d931acb58a63920f581e8243dfc0d6a0033009f8e50c3263d3f58596b63d507cadbc809a6690561f74d0772bf92d04e06c47a350724b106f5e83f7e71c4b2a983bf5ad7d8684e7b8b5dc1273d0fa5879b8e61bde33d602bc8ff0913b6d32dcac366d568dc7cf82bbfc405cbe418a2644c26592b32ca1a632fc95123efb784cfb6953a94ebeccd24fba389a0e56b09d10c145a2dd38a1196e5e55576b25f85cb96f6560802a4a58b7a6857e8454faa2c880bf32d464562b2bdc5f0df22b663f2c01fc944f1cfd1908f617f8295a5440bb79ae178ea46a95baeea48322105146ac3ed2de7d3796ddddcc848a8ecf4a00dd055733b4f59211f5a40deea44e74b3bc57953b26ed61e6fd67889edfe8d0902385e37666aacec072735630ecc441c3cc6b09bb2f63aa4e332c6df728dc74078a83ce20454dfd616d116270666ddc09c5fea2e8442bc43455d0257fac92f3780061178f9420bf8e463f29896c12383dbb9a81bc5c87376e647c8a7986cb514fb9696d9c0a8d303c5c4b5b7c5f601c01fa19323e02f675c371bc44fbc1ac5704d41a89a2a4ccec6ac8440c532f07da25aa2dce6a5d2ebe694eb4017d178b221213bfe2a01d9cfe689bd190776bca6c032f446eb8862587a7826e35f3f691763212eee6af2e49bbeb0a27e07c5714b74e373798c7bebce265f7ebef3a1ea64078cf1e8a9d433af32c53090c972ffedbadafb50b9a6e540abd84f8e938583ea725954be3b236c5d8aca7d486d21902a2902f25a7c02dbe83c39bd0b81513f9ef198c49d560e930ae224ff47f92e4851e1f7ab5bb406a6569261e6b0c67e60bfb60fcf29241ff237151310ecd19f8b2cfe764c1df1a2de9d840eca47aa169ba9a415901204ec31ccdfd76e908029ae34fb12dc286758c64fd6d42bc82b14e07e421f4b42b180cd6ef40cac8062928b4a420a4577f24295f54de9048ac9d34307bf93e463cea4967cf4880166f68ed1eb965db2e4fb9f5f0b1c695d621e427ccb9a3188073ee6fde729c6698346efa1c0ba643c1efd20858965511da750060d551c44c435a5f1603fae7357e0bc78e92aad3d88790ec2aa1a42d6fe7e0ffc57f3599e406db63be7dd32692df32ce33dee0a2becdb02d6e435e09de3d356497543db23f53da25643f9c585e275297800d8beed47f0e622f86fc25d2e87036fdceebfe7257cb6de0c02412d1c0758a3c84cc08408918c9118f46f635a87477e8b825423d94ada35bf0b5444aa7d3de4bb7eec7ae5129fcc2cba651cc972f5500fc5161149d29f452962afb102a01ae76825cb4477460be0b85d75058595c27e9b7fae3492ec3925c671bee5f4ca534d5a294f783d6cc073c992139b61d21fd98297b04c0578dafd5f7ebcaf8d4d9185aea3d76e813421f4573b38c25093c015a65e44fb297f0f6ac2d02c4237b37a3bfca2406c5c95ae5812816bacad59ba7c6f72d7c644ff25b592ed1e89b276e05866c01a4ced7fc6dd9f190c20d420d7c8a1fe908833a24c5e5bd7a95a2a6fbf147fc4b29a179718166dd0fbae2fc6b8c8aac6194fa6baf0d3edc36b2316c56c441ba53e3e7aaaf0a1405566ff584f73a637b74dde9bcb4d41da2be6c9df5d533fbac54f5fb52a8a793757cfe19aa90048c6d07e3474136ae1be2455b0d0d02eb4b5961ba883209355c0dd2af4aad98e7b971e358a7d9b55fe17cd6095f257355d9b99e5ea52848f17b35a80792d9ed0fef6fe3eef9a324902409969823be20bbe0e8dba9c747cd1a14d3642d877b86271f3f0c322a142c4ff635b37d542c3265b5fe8589a732bb1a55010b930dd0196cd43ac3634c01b4a44c517197d03a3d89c67f7c09aab409e84c0af466bfbd0c96d240101a2542c66b4b4b8ef65b41b0079995c52cc9720d2c1d7c128c6f17a65cc798c1986cfbd8888460c54438edc4f91f3580391c8b57d9aee209a59a116c1c44775437e9c30e6d87e82ce84e28532b19441e32ab9aea22177bac9daad25a6c88395e9348d6780de630cddb266c411011175bdb6255a36535180818447d43ffba3758d311539fe9f6811fa470bf3767b4c2d4cdf37854c7ee28730bb1d39d5d0dfffcdbf339c7dd36914022a0e75bca5b622f521420b73249ef47f03c1fb03ecf7557882afcaa7cf454a68ad237d4ce860bd6b1531c1cafe2cfb76bc4188271ef6bdfb304ee0e6932463a1909f03d6e8a27b5f137d6b342841d613863dfdf37d5ec3a98d667810fb6f82d67620bdefed8b3ff98420a6c7ee577c3ba68b95a20403608a7ba6526ec9e8662c6e15ab09b1a9019d4958af04cb2e4890ee6b1077fcaa5cc0817f388461b230fe631e75f18ab392a5ca5de4a024ca16dd05fcfdf92114e43a5c4a169d462ff0dba57deeaf5eaafd892f8ccbd72ac56471162e1416bca39859b4184ba0d1b3f7ec05db4ef4cf0142867fa9be328a0be8aa74c716aad9411008607980861f4f72e9bfa60195e2f939d3f6a44a6cec07dd376d1bccaa126686f313d5f7918ecd1215026982c82ed1922ef70e36e8ed59b2d5ceab3b4aad7e53049062dd5ba0e87f7005c3f4d2b788245cdc2f35ef2572bea5ea92dfad406ade6d5ad18be8eeb4c652e5277b244645c68c0c0f5a68d42e00d59b75941917b2cdf31fdf809f2078ca97fd5beba65b34e0621138ea0e94feb87166b2dac2232ebca575e5c0a4d565d9992f733bbfbe68a63d99ee93398604065d5517c33ed0e067bdb643e73102f16137afd7d4bf21e8065ea028c392a6dcefbe642dc3fb03a239d9c8b17023eacc8e19fea11c34a10644af1b786fc0f4504038c2ee59c1b353f3d7b9313df025b4b5874ca76ec164a3fe35bf390d266f53dcda6a8e190e63a56ffdf4f7c5c02aa22d376db06d4d2b96be5b331f897d1ecfd25c13a1c194c265dd95a5724a6435bc8138224d9db28b689b9cea5132cd19601dbc4a43e70c71e27e8fd0689d09484974e8a4605f8553735fffaf5654a087e323ca14e02b681b9bbe592bd6b719ae2e86bdf918b27c79d52dd334d1aa7ebc1bff76e97572faad092010a1022f7d33089049107a89c364ae7dd022d119e8f6ab795fd71d76a90e8202339401ff9e9918ea8c8e12f7b0ba10d9ebde5d1bc5988f2d07b34579d8c282628204f2978d8b0cf95dc41f3775a4053f833267c64b42336d7c850f2918ef0dd6d62e43fcc173254eb34748efd4754609ce25afd648ee5a8fc5c64346603f8258592d67b9613e8f7ac0def0958f13436581d729e0b3e062738eb06b2116abe837529690a614fc5d3f53b4d4602e5706000", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x110)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
dup(r3)
syz_mount_image$btrfs(&(0x7f000002e5c0), &(0x7f000002e600)='./file0\x00', 0x0, &(0x7f000002e640), 0x1, 0x50d4, &(0x7f000002e680)="$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")
fallocate(r0, 0x1, 0x5, 0xff)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x2040, 0x6c)

5.905605839s ago: executing program 2 (id=3554):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x77, 0x41341)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f00000001c0)={0x0, 0x4, "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"})

5.758318592s ago: executing program 0 (id=3555):
socket$inet6(0xa, 0x80002, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x40080, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socketpair$tipc(0x1e, 0x2, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x63)
readlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)="65486d795fe26defdeed7dda726561645f74b9ff9be37786fe66e431205f2e760c696621b3880f26257e64e4cd633e0792", 0x31)

4.844361955s ago: executing program 2 (id=3556):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0x9, 0x9, 0x2, 0x200, 0x101, 0x39, 0x10b7, 0xb3}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @multicast})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b922, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0x7, 0xf}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', <r7=>0x0})
sendto$packet(r6, &(0x7f0000000680)="05031400d3fc1c0000004788031c", 0xe, 0x4, &(0x7f00000006c0)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14)

4.771809047s ago: executing program 0 (id=3557):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01)
ioctl$EVIOCSFF(r4, 0x40304580, 0x0)

3.822625442s ago: executing program 0 (id=3558):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000fefffaff0000000003000000850000004100000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f805ffffb702000008000006b703000003000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000000c00078008000640"], 0x5c}}, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x31, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040)
r2 = socket$netlink(0x10, 0x3, 0xc)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2.916376615s ago: executing program 8 (id=3559):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0)

2.287354141s ago: executing program 0 (id=3560):
ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f0000000240)={{}, "6615aa80ab4f1018d03939dc1f4913d0b36393a7be890b8c8099d2d6295faaa576da3ac725bbe24e2506810811945b36a8a17c0e7dfebe3be6ddeb3ad05f7c4840260edb7cca0b7a830bc2b416a8c190a79261cb10f5bb9ecac876ca938296132b5b983dbdacd8a7820690867dabb04f8478961b1f0a6b0674a49afe5b4cf32e5db4d5dd5ae1f7bba29cd1842c565bcabe22ee32e6d04e5b75ff1c993090ab50c99fc1378ef4b40c089ef1afb858135ede6ec48a2176c4f439cff10b011be3b4fba9d22929033987633eb65063b09882717439bff29ca760cecc0f00a2f1ef3a601dbde81814b176520158a6d1c7be176595fd5b8a8fe98743d5322ccb4d08d7d78145d0123f02c534476546068177aaf8ca4d843fc15e357f030f005f5a9e1a3a80116522babc1531479e706ab2e07281f14530cfa96bc74198b83c2c3e0d38cf431afc7da39d5b26135c4a6436001009abe66caa01db2f69ac06fe6cb2ff32b026c6575a5031c00fb6a4b6494143642d7b74a241b553ec53694f5f48f5f15b286fdb64c65e3923d309200082788f8c3082808625c1c097cb16ec1743bb5ee8c2402e1bda1414539696fea6557887ebc60e54549283364fe9aa238e86531f8186323b6b89ceffc219139133e93cfe933e7dfb337591815908880ccce1b8dccfcf18cbb657b6d0467cc26d3079ebb8a9ce1b88ecec2240d2eba7aaf1dd9b5089225d850adeab8d53da7b938bbd71e381441ab433e105f87c3a27d65c4cc0c6635923923a9d8bf716bc3e0a393bab0005380d184f4e4bcd2ee8288ba0d852b8d5ed1d4fcf7962c630a18b92e06cb777246362e3b58bae372bb8b51c64250f5f6725b42b91bcba1aab68a28826478083b29544cd85e165dcb159e28ccd16f3e7ba3e6843995e230478f3d47160f4a32b99fca47d586285991f00bf43f15ffec1d0b23f5efd51313c43a38ecb03bf054c057b240b3f1095b3de1b0c609229eb8bb2465e4c11016b2ab8557a30a03a36a2a3f91d4d5a76f5d47466b411ec7fdd6b5c48145b55146d4c24f6da0c38233c829bf2bd4bb286a5114546995c9dc0243c8249905317e0a12f4970dd576349f1fa2ef8e7e8a780a39fc723cb8794a6a126de2a1644de371b8d5bbaf0783a0de54338d892e284d645ebc6e3cc3fad2a2be56023f6f53164ffc11f3041cf5d6897691e6beb79d95f63ea0905d4b85d2d758f4fa5a933f6f58d746c731efc22e59cb9583273386b531af099af77a3e880e69abe32a7a9ef3f9d7b0ef9f852f77ff66668ab84981242c9eb4511ac119e9f01dbfbdd17a1fbfcffe1c0335d09a727600fca7b99ac08ff2c61a5efaa8c38b5bf37fc2c427b668f4156c294bfc2aad46c4fb92eba008dc754587e21a4d978962c92cb13d58214b8af19a87d87b493650f699cdec89a8117d505173be2f250f4812545db21d925c69bf9a8dc453fb116481002909ee4e69a17f018f3946bddb669728160335272757f65b9dab4ff71d1a534645c2549b96fb97496e4c6bc5af2eab51250a448393ba68c688851fcb899e2d5b37cabe2e253a5d2adc7da32adf8b8208c7cf0f55785edb7c585996076ce10f6d3695add14fbed09ae93497b48e3ac00137bc4add6f64b31add8b9b1df9381ebd3cb4bf6f83b0ccb643784992b4938cc5485fb53127508f98dd0a38c7e5616263f5ec0cc2caa332b9a754fc22fb787c8347fa72a69c31ad8c94878d1d4b83871cc41f9c75ccb6cf3b0a5218cd99ebb268e2272545fb1cbcd4b539305ce1cc2c68f6f902de49952cf1a67c078149226df1cdc3cc6ecb25318a8a606e6b2554087a169e760eabb797914b43dd7699ca2fb5660dcafe551c5cf46922435a614590c6b9fae8ec9684af4cc6eeca17e4e3c017d78b77b5e27bbdd6a70f0ffe0977585a7cf9b56cfdf4decd301e5efbdddd5651e43d0c2c38383ef428a1f3d7c9ef2e61973649875fa25b4da910c2d0617f4ef21eaae38142f8849c49f0c84882e27e4d9a55e49841ce11115791767db0a79e20fc9c17c5bf7fd2cfba506e101c2b357373fffd5b3756012ff628800b9f4e665cbe991b6c2b91e9f9eb87172a7cc71e0faa8b7127e83b3b38741eb6052ba53f6a373eae906f9477beca9f7180ccf0423d212bb8596289d11dff76432a4d0f8bea4a6108c2ae47b12027771689f74a1f15bb68944c51813f90853333e9b718c3db3e3e54df02c113c0ed477e7abd5ec5b2910616a773aaa43f1ea6c9ccbd3a7241f4021c2467881f37154237f068db8d9df46123893332cd3184d6341f362bcbb61c8a9c01d6ad8f5c91841960505edd8f5bc28b75dda749be2d7f5fcf4e51174474cc6d60ef560de8f8e907dffac4c584c473468a7cda41f2d8b5c667673e339347eee98842ba9499a6675cf00bedf2d5ebaaca3d000caaaf4d6d7b4dabae340d32834575aa02c269798c2fecfcaeab9cf26c6a6b2afc3cd33e833ba5654cd845cbf558e08c9b5608c41f2caf4d3a626c2ee6ae22512c5abb270422262459c58a9cd66cdfb9f222be28284e389bbf6381c64733d365d0f15885139a01f273dd67002e1f208dff1dd41802407f7d4e2597eadaa41195c1fc2e12f60508567fc7a7e9c64c01c4308f59684ef3bb98e993694b06e055c99479b5a32cc37112d6dd5b51c0cfeebe64cd4791f33169634e95e254929937c97e4eca906f0aa33a7014339d16c0e0822aaba2e060c9c114df27c13f5da8f3e58e92d4d7b2f0ecc3cadc9d103c2928f63ab0f8f1e8a3cfdecf88b09d0d5be77d2177c4b7f5533add623fe702f7d6f2753ef0c3413135452cda0fcb437c0a951805406b7a3c6c916c3ba0ca47e5edbd53bf9876c406cbce97d38a629ba08d9aaeadacad9a3a8cdd56db5b5ef846ac5da223fc151b95244e5169cd397a8a319425bb1218d6b823ed76f20c221ad1b35f654fdaecdfac4e16c9107387e27155f76bb93781e2de176c24acb86cd6997b13b61d80b6bd9476d20898ace8d3a21fbe9b954e7edfbb7940bb14c3ddca53c99e9d7ac4912cb9a6cacb31ec88b3e60d217fedf5428ad5ecf8823719d420a9619bf8dd4f2c021ed9c7f1f032a549b3ce448b2669ba59ba3d86fb87112bd34b72108c04c5a8170fb369c85158d0fe33b56c6bb36c45cf35f7e9ebaa85a54b291f22850c8e0958c155b399aae18bb99e6da4a9beed2e32a10083a6341e8487b0ece9eb25ee3944721c575621c0653d8e606a97a5a2712c9a6e32fccb76d2518538d04543474314f73a98cb49a14709b283ac6a4cc3397286d2dfec8566ffbcbfffeb96e8148ba506a5109c229f0e8e854cde5b922319601b51b353a1563f7d4b61e282b1c20ba11f8d64969718d75384cbdc4010c8a7caefcaab3bce2349cf3071c9a0be5376a71de404f02e968a24fe273f6f8ec359b4c6cba93e98a8ecb6c3168b208dc21d54cb455a36b7df04bed4cb076df50b521217172037b9a82c6b95c582751a8fc2094d65c6609ee05c32c3914bb4f5ba68d4da80d640a5acaa91be2263c1390afe39009f6b28819cda37d460d8a0d3d72e6853648033adee8ea28a7effdf5551dd9f0c621552de054dd230b4d2788dfac5fc456ee01222bed0a166b75695589ea469d05a4d02857c03dfad6ca601cd17ff38683207fafb30b43ed0b4f8eb6b10146ab7dc0fa9fc40ba7bb75517e0e7538ec81198015c3cecd6e47c42a09de418f7103bd9e986ee03f1d00ae610903f6f6c362dfcd43ff1e6012e0fe27df03c25d44cff2e1c04f907add3f0d4a774b2d72a2ecafb5b06fc50a16bd84d8c7f4a7ba2f602ed94b9a2108b6e1cca7244681fa4fb7c377a06ef14b5ae39e87114eebbb8f698f91fc8e4927bce8b445127c3995f8d728e10db347caaa00c522eb67996e7227ba55c082d3e5090aeefa251c67b85c425f921a24265bd83a97069b5efffd93d421b66806643283270cf0a26390fab87dc836d9c73f9e889544130d73e3611d5afbf37317b03ad1456c31319f19e6dea61ba45f7982ab73ceedff1a28fd660b09e2bcbb2ec86ea529c856eb7d88952b56b3b7233c870d87b68a1404ddf20a800e478fe232ca21a6544d6ea46406535818e7ec6a50db0658708db3b53d772745360b6b82de138efc3a1bc4cbac375986b1fcf1a916bf8b45dd3dc7b9f994e8c30c3eb877d960aef36a8b6992e9253dbbe57b631361fd19dd6dfff4d340663b0c478d0de112fc6783a7a062881ed9676a8b13424edec2e51bc3044f51f7b3a307d61777e4f71ce9198d73bc1bd89d34bbdee24e3e4a119e523a72a002013d3d05119803fd9815714824ea0ee5eb14211f0446253102892becdf7f34414a5fb08f8ed92e40c7cd03cac2a9ff63691970afc5675ffdcde15956b46ca944c14ffd76e89dcd2c78462629b9db770c579ae4ec4252e5f69916b3964c18c54b419a6285f27809e4049165309204b19ce48951ced7fc48b20d20d43811cab6c32d4e4cf05ebcb715c21019002e3bedcf86bc6baec9578a1b36ea567c088aa97a7dad7e050472f7906d226747bb2fbbd52e328069dc8c547c45a7cff5b7949548d4799641798314d2f4a11b198bce08f7c936299eeb15d10cff730e4781ce80664b7c1e375c6cd392de58a025280e7c9b7f6a5590b68bc8e7a90232a79e663bb0c393cd94e9b72ee86053c87f1ee197e684fc8cf5c8893971eee36f55e6acfc5dd0a7a38baf9642b37b294513a12591b07be05787b870e7e28892780390e59567fcd78c97691b28e2d0b3eb6344ae92c5ac7aac40d67ab8f152d41f60c0c077d60c552db80ef8baec5bcc9adaa33cba28dc3b52df4d2951d024a219fa75a612248045a7abcaca6f606248f21aa543fb56dd132cf30b021c30976e84e8ed2e5615cdecc874908512b9e3a48f80445e75260312d9d5b8bc9534187aa91ed1d03398c738b38fb06c6e8746674d24422539f94e27d1af2865ee64adfaf98ca63e83456ff17c60a95698b01f8e6f4962469a2d9ea503cf344d15ea52699e7d62efc77530672d62cf6f03a14857f59d3307f925d6004eb2104ccb90e67930357f13b4d74dc009d482d56a4b6e566716f549351b3738112f9ff1e4217661450918f07689641ee72e9f3055defe72ac05774c016e0431926a7ab75973f46f0625d6e5b19403ea7fbed8d9775007c41c444bcfa562eb2e7532fe332abc7587b87a5ad77e05888dcbe1b87c69199e276ddca4750a7b3ef0f46d132ac73d42bb9ea6864e88bda5db891490d92f9577be973ec4653baeb0b1d90bc7757cacd0973bdb9909aab7c16598cb4dc2a19ac57dab3c22836c172218078a8bf91e7ca81ba05eeef9e966489b182f6be07bb174c7fb28c8940d0902db9f45b73471ce9a760b78d40cc117da1caa07412cde830db9b15aac1ec5f5a8b1d109ee24eb4949174dad32c850cd9e6d42c736241ebf310293bc03880b7e0e775ef4e954e16abe7d9de9e576b0809755706d9b7384c27916866e17948cf5f3baaf9eba6718fee030194a6bb2fdc401d1c67c22a8a0bac6bcef24076dcc359190df4748114a6634761903f0482c76098eba24c841e6a6e6ba9b599fec88f9e5e0158352a05ef1ab162bfec139dc0653cb875d883b0c98f02d1fe35419133537521b5f8f48cb8269971e58fe3b3b4804dd69e7038161d7786a71de18533287f21445e6f49e93c53ddf7820e234a8ec5cc9c4d154fb5980c59a3545a1ea4fc67a758e24328811131ff9afe8561eaadaf6cb502fcbcaee557229f64fd74a33c52ab3f163"})
mount(0x0, 0x0, &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000920)='./sys/bus/usb/devices/usb1/bConfigurationValue\x00', 0x2, 0x15d)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount(0x0, 0x0, &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota')
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28)
quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, 0x0)
write(r0, &(0x7f0000000960)='1', 0x1)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/stat\x00', 0x0, 0x0)

2.204809073s ago: executing program 4 (id=3561):
socket$nl_generic(0x10, 0x3, 0x10)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="08000200ac1414aa1400060006000000040000000300000006000000"], 0x34}}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x40080, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0)
write(r2, &(0x7f0000000700)='bind', 0x4)
getdents64(r2, 0x0, 0x0)
mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x12, r2, 0x80000000)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000540)=@IORING_OP_RENAMEAT={0x23, 0x50, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)='./file0/file0\x00', r2, 0x4, 0x1, {0x0, r3}})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000))
mkdirat(0xffffffffffffff9c, 0x0, 0x63)
syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000380065000000019078ac1e0001ac1414aa03039078000300034523000800650a5398060001e0000002e000000100000000d00000d2"], 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140002"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x2)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]})

2.202601143s ago: executing program 2 (id=3562):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$packet(0x11, 0x2, 0x300)
r0 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, r0)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00')
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x2000c12, &(0x7f0000002580)={[{@map_off}, {@utf8}, {@hide}, {@overriderock}, {@unhide}, {@block={'block', 0x3d, 0x200}}, {@session={'session', 0x3d, 0x32}}, {@overriderock}, {@check_relaxed}, {@uid}, {@check_relaxed}, {@map_off}, {@mode={'mode', 0x3d, 0x3}}, {@overriderock}, {@uid}, {}, {@session={'session', 0x3d, 0x9}}], [{@smackfsfloor={'smackfsfloor', 0x3d, '}'}}, {@flag='dirsync'}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '(\xae}!*@'}}]}, 0x4, 0xa0e, &(0x7f00000001c0)="$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")
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfff)
ppoll(&(0x7f0000000000)=[{r3, 0x3004}], 0x1, 0x0, 0x0, 0x0)
setns(r2, 0x24020000)
umount2(&(0x7f0000000040)='.\x00', 0x2)

2.080436557s ago: executing program 0 (id=3563):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x90002, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2, 0x0, 0x0, 0x0, 0x4}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000140)={{0x9000, 0x41000, 0x8, 0x9, 0x9, 0x40, 0x40, 0x9, 0x0, 0x2e, 0x10}, {0x2000, 0x100000, 0xc, 0x95, 0x2, 0x4, 0x7d, 0x80, 0x58, 0x1, 0x3}, {0x50000, 0xeeee8000, 0x9, 0x8, 0x3, 0x7, 0xfe, 0xff, 0x1, 0xab, 0x5, 0x81}, {0xffff1000, 0x26000, 0x3, 0x6, 0x4, 0x42, 0x9, 0x2, 0x26, 0x7, 0xf5, 0xff}, {0x2ffd, 0x9000, 0xb, 0x3, 0x3, 0x7, 0xab, 0x7b, 0x7, 0x83, 0xf5, 0x83}, {0x70000, 0x1000, 0x0, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x6, 0xf, 0x1, 0xff}, {0x40000, 0x2, 0xc, 0x3, 0x6, 0x2, 0x5, 0x2, 0x1, 0x82, 0xff}, {0xe000, 0x84efa2808ad4a1f5, 0xc, 0x5, 0xd, 0x3, 0x4, 0x18, 0x2, 0x3, 0x7, 0x9}, {0xeeef0000, 0x30}, {0xeeef0000, 0x86}, 0x80040035, 0x0, 0x8000000, 0x42004, 0xb, 0x800, 0x3000, [0xd, 0x9, 0x5e, 0x102]})
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x8000)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000010700)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000010740)={0x2c, &(0x7f0000010780)=ANY=[@ANYBLOB="00dc6b"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000107c0)={0x24, 0x0, &(0x7f0000010800)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0)
fsopen(&(0x7f0000010940)='iso9660\x00', 0x1)
syz_usb_control_io$hid(r0, &(0x7f0000010840)={0x24, 0x0, &(0x7f0000010880)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f00000108c0)={0x2c, 0x0, &(0x7f0000010900)={0x0, 0x3, 0x2c, @string={0x2c, 0x3, "78168a50f400010000a6a51d67b255037f4356ff9b53b9e8a63ac9da4e95ab6f1fa5a505644164f8dd7e"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000108117980800000000000109022400010000000009040000020308000009210000010122290a09058103"], 0x0)
syz_open_dev$evdev(&(0x7f0000000040), 0xe, 0xc100)

797.76458ms ago: executing program 8 (id=3564):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10)
setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4)
setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c)
sendmmsg(r1, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000240)='\x00', 0xffe2}], 0x1}}], 0x1, 0x400c011)

0s ago: executing program 4 (id=3565):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0)
write(r0, &(0x7f0000000340)='/dev/zram0,6', 0xb3)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
recvmsg(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)=""/4077, 0xfed}, {&(0x7f0000001440)=""/4065, 0xfe1}, {&(0x7f0000002440)=""/4129, 0x1021}, {&(0x7f0000003480)=""/108, 0x6c}], 0x4}, 0x20)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003500)={0x6, 0x9, &(0x7f00000035c0)=ANY=[@ANYBLOB="18010000756c6c2500000000002020207b1af8ff00000000bfa10000000000000701000002feffffb702000008000000b70300000000000085000000c700000095"], &(0x7f0000003640)='GPL\x00'}, 0x94)
write(r2, &(0x7f0000000100)="31f36614d30a93dbc813b165758c41c155c2c038ac94f8dc3ef1371adba884bf5114fa4c4dab00a1892d871b6fad85fc9d6a05bbf8ce44a55eac9205bc16b45f937df4d0146def3ec3e1fb76260038e9b21d86", 0x53)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f0000000040)={@desc={0x1, 0x0, @desc3}})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/rescan\x00', 0x1, 0x0)
write(r3, 0x0, 0x0)

kernel console output (not intermixed with test programs):

_robust_list+0x110/0x110
[  714.448533][T14511]  ? lock_chain_count+0x20/0x20
[  714.453408][T14511]  __x64_sys_madvise+0xa6/0xc0
[  714.458214][T14511]  do_syscall_64+0x55/0xb0
[  714.462631][T14511]  ? clear_bhb_loop+0x40/0x90
[  714.467333][T14511]  ? clear_bhb_loop+0x40/0x90
[  714.472027][T14511]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  714.477960][T14511] RIP: 0033:0x7f139ff9e1d9
[  714.482399][T14511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  714.502041][T14511] RSP: 002b:00007f139e1f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c
[  714.510509][T14511] RAX: ffffffffffffffda RBX: 00007f13a0225fa0 RCX: 00007f139ff9e1d9
[  714.518524][T14511] RDX: 0000000000000015 RSI: 0000000000600000 RDI: 0000200000000000
[  714.526530][T14511] RBP: 00007f13a0035888 R08: 0000000000000000 R09: 0000000000000000
[  714.534527][T14511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  714.542529][T14511] R13: 00007f13a0226038 R14: 00007f13a0225fa0 R15: 00007ffd1b38e7f8
[  714.550549][T14511]  </TASK>
[  714.686135][T14524] loop6: detected capacity change from 0 to 1024
[  714.711934][T14524] EXT4-fs: Ignoring removed bh option
[  714.779879][T14524] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  715.168903][T13451] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  715.278808][T14549] FAULT_INJECTION: forcing a failure.
[  715.278808][T14549] name failslab, interval 1, probability 0, space 0, times 0
[  715.300402][T14549] CPU: 0 PID: 14549 Comm: syz.6.2580 Not tainted syzkaller #0
[  715.307935][T14549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  715.318005][T14549] Call Trace:
[  715.321309][T14549]  <TASK>
[  715.324231][T14549]  dump_stack_lvl+0x18c/0x250
[  715.328904][T14549]  ? show_regs_print_info+0x20/0x20
[  715.334107][T14549]  ? load_image+0x420/0x420
[  715.338639][T14549]  ? __might_sleep+0xe0/0xe0
[  715.343236][T14549]  ? __lock_acquire+0x7eb0/0x7eb0
[  715.348265][T14549]  should_fail_ex+0x394/0x4c0
[  715.352947][T14549]  should_failslab+0x9/0x20
[  715.357456][T14549]  slab_pre_alloc_hook+0x59/0x300
[  715.362497][T14549]  ? kvmalloc_node+0x70/0x180
[  715.367179][T14549]  ? kvmalloc_node+0x70/0x180
[  715.371854][T14549]  __kmem_cache_alloc_node+0x53/0x250
[  715.377230][T14549]  ? lockdep_softirqs_off+0x440/0x440
[  715.382599][T14549]  ? kvmalloc_node+0x70/0x180
[  715.387300][T14549]  __kmalloc_node+0xa6/0x240
[  715.391893][T14549]  kvmalloc_node+0x70/0x180
[  715.396408][T14549]  rhashtable_init+0x529/0xa60
[  715.401187][T14549]  ipc_init_ids+0x7b/0x1f0
[  715.405605][T14549]  copy_ipcs+0x45d/0x500
[  715.409850][T14549]  create_new_namespaces+0x212/0x700
[  715.415153][T14549]  unshare_nsproxy_namespaces+0x11a/0x160
[  715.420883][T14549]  ksys_unshare+0x4fa/0x8f0
[  715.425400][T14549]  ? sighand_ctor+0x50/0x50
[  715.429913][T14549]  ? lock_chain_count+0x20/0x20
[  715.434770][T14549]  ? syscall_enter_from_user_mode+0x25/0x80
[  715.440671][T14549]  __x64_sys_unshare+0x38/0x40
[  715.445524][T14549]  do_syscall_64+0x55/0xb0
[  715.449933][T14549]  ? clear_bhb_loop+0x40/0x90
[  715.454607][T14549]  ? clear_bhb_loop+0x40/0x90
[  715.459278][T14549]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  715.465177][T14549] RIP: 0033:0x7f9984f9e1d9
[  715.469588][T14549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  715.489193][T14549] RSP: 002b:00007f9985f54028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  715.497609][T14549] RAX: ffffffffffffffda RBX: 00007f9985225fa0 RCX: 00007f9984f9e1d9
[  715.505574][T14549] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000a040080
[  715.513539][T14549] RBP: 00007f9985035888 R08: 0000000000000000 R09: 0000000000000000
[  715.521504][T14549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  715.529493][T14549] R13: 00007f9985226038 R14: 00007f9985225fa0 R15: 00007ffce1fc97e8
[  715.537495][T14549]  </TASK>
[  715.563403][T14550] CacheFiles: No cache directory specified
[  715.679374][T14552] overlayfs: failed to resolve './file1': -2
[  715.900401][T14556] netlink: 7 bytes leftover after parsing attributes in process `syz.6.2583'.
[  716.122531][T14567] CacheFiles: No cache directory specified
[  716.267524][T14569] overlayfs: failed to resolve './file1': -2
[  716.780336][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  717.664311][T14591] overlayfs: failed to resolve './file1': -2
[  717.711548][T14593] FAULT_INJECTION: forcing a failure.
[  717.711548][T14593] name failslab, interval 1, probability 0, space 0, times 0
[  717.752564][T14593] CPU: 0 PID: 14593 Comm: syz.4.2596 Not tainted syzkaller #0
[  717.760112][T14593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  717.770197][T14593] Call Trace:
[  717.773500][T14593]  <TASK>
[  717.776468][T14593]  dump_stack_lvl+0x18c/0x250
[  717.781184][T14593]  ? show_regs_print_info+0x20/0x20
[  717.786416][T14593]  ? load_image+0x420/0x420
[  717.790962][T14593]  ? __might_sleep+0xe0/0xe0
[  717.795587][T14593]  ? __lock_acquire+0x7eb0/0x7eb0
[  717.800654][T14593]  should_fail_ex+0x394/0x4c0
[  717.805373][T14593]  should_failslab+0x9/0x20
[  717.809910][T14593]  slab_pre_alloc_hook+0x59/0x300
[  717.814965][T14593]  ? snd_pcm_hw_refine+0x98b/0x1730
[  717.820196][T14593]  ? snd_pcm_hw_refine+0x98b/0x1730
[  717.825423][T14593]  __kmem_cache_alloc_node+0x53/0x250
[  717.830819][T14593]  ? snd_pcm_hw_refine+0x98b/0x1730
[  717.836029][T14593]  __kmalloc+0xa7/0x240
[  717.840210][T14593]  snd_pcm_hw_refine+0x98b/0x1730
[  717.845244][T14593]  ? kasan_set_track+0x4e/0x70
[  717.850014][T14593]  ? vfs_write+0x299/0x9a0
[  717.854436][T14593]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  717.860517][T14593]  ? snd_pcm_info_user+0xc0/0xc0
[  717.865501][T14593]  ? snd_pcm_oss_change_params_locked+0xaae/0x3be0
[  717.872020][T14593]  ? snd_interval_refine+0x5f8/0xa30
[  717.877320][T14593]  snd_pcm_oss_change_params_locked+0xcc7/0x3be0
[  717.883685][T14593]  ? __mutex_lock+0x30d/0xc80
[  717.888372][T14593]  ? snd_pcm_oss_read2+0x3d0/0x3d0
[  717.893493][T14593]  ? aa_file_perm+0x3e3/0xee0
[  717.898265][T14593]  ? futex_wait_queue+0x138/0x1b0
[  717.903300][T14593]  ? mutex_lock_nested+0x20/0x20
[  717.908246][T14593]  ? futex_setup_timer+0xc0/0xc0
[  717.913196][T14593]  ? aa_path_link+0xf80/0xf80
[  717.917884][T14593]  snd_pcm_oss_write+0x281/0xb20
[  717.922843][T14593]  ? snd_pcm_oss_read+0x8a0/0x8a0
[  717.927874][T14593]  vfs_write+0x299/0x9a0
[  717.932130][T14593]  ? file_end_write+0x250/0x250
[  717.936989][T14593]  ? __fget_files+0x28/0x460
[  717.941677][T14593]  ? __fget_files+0x3fc/0x460
[  717.946372][T14593]  ? __fdget_pos+0x1d8/0x330
[  717.950969][T14593]  ? ksys_write+0x74/0x260
[  717.955395][T14593]  ksys_write+0x151/0x260
[  717.959736][T14593]  ? __ia32_sys_read+0x90/0x90
[  717.964511][T14593]  ? lockdep_hardirqs_on+0x98/0x150
[  717.969722][T14593]  do_syscall_64+0x55/0xb0
[  717.974145][T14593]  ? clear_bhb_loop+0x40/0x90
[  717.978824][T14593]  ? clear_bhb_loop+0x40/0x90
[  717.983504][T14593]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  717.989403][T14593] RIP: 0033:0x7f139ff9e1d9
[  717.993820][T14593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  718.013435][T14593] RSP: 002b:00007f139e1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  718.021857][T14593] RAX: ffffffffffffffda RBX: 00007f13a0225fa0 RCX: 00007f139ff9e1d9
[  718.029828][T14593] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000004
[  718.037802][T14593] RBP: 00007f13a0035888 R08: 0000000000000000 R09: 0000000000000000
[  718.045774][T14593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  718.053745][T14593] R13: 00007f13a0226038 R14: 00007f13a0225fa0 R15: 00007ffd1b38e7f8
[  718.061737][T14593]  </TASK>
[  718.488617][T14604] input: syz0 as /devices/virtual/input/input10
[  718.684939][T14610] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2601'.
[  718.863153][T14616] overlayfs: failed to resolve './file1': -2
[  719.080268][T11649] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  719.283789][T11649] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  719.300171][T11649] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  719.309889][T11649] usb 5-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00
[  719.331150][T11649] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  719.355912][T11649] spcp8x5 5-1:1.0: SPCP8x5 converter detected
[  719.380666][T11649] usb 5-1: SPCP8x5 converter now attached to ttyUSB0
[  719.999831][T14643] SPCP8x5 ttyUSB0: failed to set control lines: -71
[  720.000301][ T5809] usb 5-1: USB disconnect, device number 6
[  720.012493][T14643] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -19)
[  720.071908][ T5809] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0
[  720.089345][ T5809] spcp8x5 5-1:1.0: device disconnected
[  720.342889][T14652] CacheFiles: No cache directory specified
[  720.468282][T14654] overlayfs: failed to resolve './file1': -2
[  721.299441][T14661] CacheFiles: No cache directory specified
[  721.395214][T14664] overlayfs: failed to resolve './file1': -2
[  721.972636][T14665] loop4: detected capacity change from 0 to 1024
[  722.407218][T14665] hfsplus: invalid extended attribute record
[  722.463692][T14677] loop6: detected capacity change from 0 to 8192
[  722.528092][T14677] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  722.550270][T14677] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal
[  722.576448][T10028] hfsplus: b-tree write err: -5, ino 8
[  722.625874][T14686] overlayfs: failed to resolve './file1': -2
[  722.641978][T14677] REISERFS (device loop6): using ordered data mode
[  722.659006][T14677] reiserfs: using flush barriers
[  722.694879][T14677] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  722.734477][T14677] REISERFS (device loop6): checking transaction log (loop6)
[  723.025278][T14677] REISERFS (device loop6): Using tea hash to sort names
[  723.044942][T14677] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage.
[  724.149477][T14700] overlayfs: failed to resolve './file1': -2
[  724.442404][T14688] loop4: detected capacity change from 0 to 40427
[  724.822531][T14688] F2FS-fs (loop4): invalid crc value
[  724.895321][T14707] FAULT_INJECTION: forcing a failure.
[  724.895321][T14707] name failslab, interval 1, probability 0, space 0, times 0
[  724.908974][T14707] CPU: 1 PID: 14707 Comm: syz.6.2636 Not tainted syzkaller #0
[  724.915440][T14688] F2FS-fs (loop4): Found nat_bits in checkpoint
[  724.916447][T14707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  724.932780][T14707] Call Trace:
[  724.936086][T14707]  <TASK>
[  724.939035][T14707]  dump_stack_lvl+0x18c/0x250
[  724.943756][T14707]  ? show_regs_print_info+0x20/0x20
[  724.948986][T14707]  ? load_image+0x420/0x420
[  724.953529][T14707]  ? __might_sleep+0xe0/0xe0
[  724.958159][T14707]  ? __lock_acquire+0x7eb0/0x7eb0
[  724.963211][T14707]  should_fail_ex+0x394/0x4c0
[  724.967910][T14707]  should_failslab+0x9/0x20
[  724.972425][T14707]  slab_pre_alloc_hook+0x59/0x300
[  724.977446][T14707]  ? xfrm_sysctl_init+0xc7/0x290
[  724.982384][T14707]  ? xfrm_sysctl_init+0xc7/0x290
[  724.987320][T14707]  __kmem_cache_alloc_node+0x53/0x250
[  724.992706][T14707]  ? xfrm_sysctl_init+0xc7/0x290
[  724.997641][T14707]  __kmalloc_node_track_caller+0xa4/0x230
[  725.003371][T14707]  kmemdup+0x2b/0x70
[  725.007273][T14707]  xfrm_sysctl_init+0xc7/0x290
[  725.012035][T14707]  xfrm_net_init+0xa42/0xe80
[  725.016633][T14707]  ops_init+0x391/0x640
[  725.020800][T14707]  setup_net+0x3b6/0xa20
[  725.025050][T14707]  ? copy_net_ns+0x530/0x530
[  725.029647][T14707]  ? copy_net_ns+0x347/0x530
[  725.034236][T14707]  ? down_read_killable+0x1d0/0x340
[  725.039454][T14707]  copy_net_ns+0x361/0x530
[  725.043876][T14707]  create_new_namespaces+0x3ce/0x700
[  725.049170][T14707]  unshare_nsproxy_namespaces+0x11a/0x160
[  725.054892][T14707]  ksys_unshare+0x4fa/0x8f0
[  725.059401][T14707]  ? sighand_ctor+0x50/0x50
[  725.063901][T14707]  ? lock_chain_count+0x20/0x20
[  725.068756][T14707]  ? syscall_enter_from_user_mode+0x25/0x80
[  725.074656][T14707]  __x64_sys_unshare+0x38/0x40
[  725.079418][T14707]  do_syscall_64+0x55/0xb0
[  725.083833][T14707]  ? clear_bhb_loop+0x40/0x90
[  725.088507][T14707]  ? clear_bhb_loop+0x40/0x90
[  725.093183][T14707]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  725.099081][T14707] RIP: 0033:0x7f9984f9e1d9
[  725.103497][T14707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  725.123104][T14707] RSP: 002b:00007f9985f54028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  725.131516][T14707] RAX: ffffffffffffffda RBX: 00007f9985225fa0 RCX: 00007f9984f9e1d9
[  725.139489][T14707] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[  725.147480][T14707] RBP: 00007f9985035888 R08: 0000000000000000 R09: 0000000000000000
[  725.155446][T14707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  725.163412][T14707] R13: 00007f9985226038 R14: 00007f9985225fa0 R15: 00007ffce1fc97e8
[  725.171395][T14707]  </TASK>
[  725.259014][T14707] loop6: detected capacity change from 0 to 8
[  725.345461][T14688] F2FS-fs (loop4): Start checkpoint disabled!
[  725.422797][T13940] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  725.423609][T14688] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  725.712668][T14716] CacheFiles: No cache directory specified
[  725.796967][T14718] overlayfs: failed to resolve './file1': -2
[  726.593450][T14725] 9pnet_fd: Insufficient options for proto=fd
[  726.691588][T10051] kworker/u4:21: attempt to access beyond end of device
[  726.691588][T10051] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  726.721879][T10051] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  727.110279][T11900] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  727.303347][T11900] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  727.329161][T11900] usb 7-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00
[  727.358421][T11900] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  728.043061][T11900] wacom 0003:056A:033B.0004: Unknown device_type for 'HID 056a:033b'. Assuming pen.
[  728.096360][T11900] wacom 0003:056A:033B.0004: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.6-1/input0
[  728.343582][T11900] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/0003:056A:033B.0004/input/input11
[  728.525331][T11900] usb 7-1: USB disconnect, device number 2
[  728.557552][T14751] fido_id[14751]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/0003:056A:033B.0004/report_descriptor': No such file or directory
[  728.638197][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead
[  728.701032][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead
[  728.732137][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x4627 instead
[  728.781689][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x7e46 instead
[  728.820300][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead
[  728.840920][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead
[  728.856622][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead
[  728.869203][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead
[  728.885038][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead
[  728.909705][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead
[  728.924194][T14754] jffs2: Further such events for this erase block will not be printed
[  728.933986][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead
[  728.948464][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead
[  728.964984][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x4627 instead
[  728.975769][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x7e46 instead
[  728.996042][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead
[  729.030335][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead
[  729.050543][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead
[  729.055329][T14762] FAULT_INJECTION: forcing a failure.
[  729.055329][T14762] name failslab, interval 1, probability 0, space 0, times 0
[  729.064992][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead
[  729.088258][T14762] CPU: 0 PID: 14762 Comm: syz.4.2656 Not tainted syzkaller #0
[  729.095750][T14762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  729.105812][T14762] Call Trace:
[  729.109092][T14762]  <TASK>
[  729.112019][T14762]  dump_stack_lvl+0x18c/0x250
[  729.116700][T14762]  ? show_regs_print_info+0x20/0x20
[  729.121896][T14762]  ? load_image+0x420/0x420
[  729.126407][T14762]  ? __might_sleep+0xe0/0xe0
[  729.131008][T14762]  ? __lock_acquire+0x7eb0/0x7eb0
[  729.136046][T14762]  should_fail_ex+0x394/0x4c0
[  729.140738][T14762]  should_failslab+0x9/0x20
[  729.145252][T14762]  slab_pre_alloc_hook+0x59/0x300
[  729.150277][T14762]  ? snd_seq_prioq_new+0x47/0x90
[  729.155223][T14762]  __kmem_cache_alloc_node+0x53/0x250
[  729.160602][T14762]  ? snd_seq_prioq_new+0x47/0x90
[  729.165541][T14762]  kmalloc_trace+0x2a/0xe0
[  729.169960][T14762]  snd_seq_prioq_new+0x47/0x90
[  729.174723][T14762]  snd_seq_queue_alloc+0x13b/0x740
[  729.179843][T14762]  snd_seq_ioctl_create_queue+0x7f/0x3b0
[  729.185478][T14762]  snd_seq_ioctl+0x28e/0x450
[  729.190076][T14762]  ? snd_seq_poll+0x1d0/0x1d0
[  729.194780][T14762]  ? bpf_lsm_file_ioctl+0x9/0x10
[  729.199751][T14762]  ? security_file_ioctl+0x80/0xa0
[  729.204868][T14762]  ? snd_seq_poll+0x1d0/0x1d0
[  729.209544][T14762]  __se_sys_ioctl+0xfd/0x170
[  729.214138][T14762]  do_syscall_64+0x55/0xb0
[  729.218550][T14762]  ? clear_bhb_loop+0x40/0x90
[  729.223223][T14762]  ? clear_bhb_loop+0x40/0x90
[  729.227899][T14762]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  729.233829][T14762] RIP: 0033:0x7f139ff9e1d9
[  729.238244][T14762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  729.257864][T14762] RSP: 002b:00007f139e1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  729.266283][T14762] RAX: ffffffffffffffda RBX: 00007f13a0225fa0 RCX: 00007f139ff9e1d9
[  729.274251][T14762] RDX: 0000200000000300 RSI: 00000000c08c5332 RDI: 0000000000000003
[  729.282225][T14762] RBP: 00007f13a0035888 R08: 0000000000000000 R09: 0000000000000000
[  729.290195][T14762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  729.298158][T14762] R13: 00007f13a0226038 R14: 00007f13a0225fa0 R15: 00007ffd1b38e7f8
[  729.306141][T14762]  </TASK>
[  729.310599][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead
[  729.323382][ T5773] Bluetooth: hci1: command 0x0406 tx timeout
[  729.329757][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead
[  729.345477][T14754] jffs2: Further such events for this erase block will not be printed
[  729.354124][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead
[  729.364880][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead
[  729.375483][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x4627 instead
[  729.393330][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x7e46 instead
[  729.426148][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead
[  729.461306][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead
[  729.472412][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x4627 instead
[  729.483080][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x7e46 instead
[  729.493654][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead
[  729.504372][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead
[  729.514901][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x4627 instead
[  729.517280][T14770] loop4: detected capacity change from 0 to 16
[  729.525600][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x7e46 instead
[  729.525656][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead
[  729.525674][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead
[  729.558259][T14770] erofs: (device loop4): mounted with root inode @ nid 36.
[  729.571133][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x4627 instead
[  729.581899][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x7e46 instead
[  729.592948][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead
[  729.604503][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead
[  729.615284][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x4627 instead
[  729.626038][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x7e46 instead
[  729.642709][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead
[  729.654652][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead
[  729.673791][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x4627 instead
[  729.713726][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x7e46 instead
[  729.727401][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead
[  729.740674][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead
[  729.754218][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x4627 instead
[  729.768290][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x7e46 instead
[  729.779071][T14773] syzkaller0: entered promiscuous mode
[  729.781866][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead
[  729.790356][T14773] syzkaller0: entered allmulticast mode
[  729.800521][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead
[  729.800544][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x4627 instead
[  729.800563][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x7e46 instead
[  729.811051][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead
[  729.830549][T14775] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[  729.836467][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead
[  729.861986][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x4627 instead
[  729.872564][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x7e46 instead
[  729.888622][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead
[  729.899107][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead
[  729.909548][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x4627 instead
[  729.930345][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x7e46 instead
[  729.940941][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead
[  729.951821][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead
[  729.968537][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x4627 instead
[  729.979438][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x7e46 instead
[  729.996279][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead
[  730.006932][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead
[  730.023172][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x4627 instead
[  730.034194][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x7e46 instead
[  730.058660][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead
[  730.069198][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead
[  730.110028][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x4627 instead
[  730.139016][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x7e46 instead
[  730.164634][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead
[  730.178621][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead
[  730.193996][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x4627 instead
[  730.206543][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x7e46 instead
[  730.225135][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead
[  730.238034][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead
[  730.252146][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x4627 instead
[  730.274964][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x7e46 instead
[  730.295992][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead
[  730.311035][T14780] loop4: detected capacity change from 0 to 512
[  730.317429][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead
[  730.331475][T14780] EXT4-fs: Ignoring removed bh option
[  730.356090][T14780] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  730.363439][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x4627 instead
[  730.390737][T14780] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it
[  730.408492][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x7e46 instead
[  730.413691][T14780] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.2662: Corrupt directory, running e2fsck is recommended
[  730.459927][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead
[  730.472764][T14780] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117
[  730.481507][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead
[  730.492291][T14780] EXT4-fs error (device loop4): ext4_iget_extra_inode:4752: inode #15: comm syz.4.2662: corrupted in-inode xattr: e_name out of bounds
[  730.508107][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x4627 instead
[  730.516252][T14780] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.2662: couldn't read orphan inode 15 (err -117)
[  730.518710][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x7e46 instead
[  730.540161][T14780] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  730.570514][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead
[  730.578039][T14780] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  730.590159][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead
[  730.599515][T14780] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it
[  730.617117][T14780] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.2662: Corrupt directory, running e2fsck is recommended
[  730.620493][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x4627 instead
[  730.634832][T14780] CacheFiles: Lookup cache failed with error -117
[  730.649189][T14780] CacheFiles: Failed to register: -117
[  730.655105][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x7e46 instead
[  730.666535][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead
[  730.687389][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead
[  730.698642][T14780] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  730.728966][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x4627 instead
[  730.739516][T14780] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it
[  730.759903][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x7e46 instead
[  730.771007][T14780] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.2662: Corrupt directory, running e2fsck is recommended
[  730.784528][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead
[  730.799875][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead
[  730.811993][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x4627 instead
[  730.830239][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x7e46 instead
[  730.850005][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead
[  730.871895][T11615] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  730.881342][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead
[  730.940489][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x4627 instead
[  730.983288][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x7e46 instead
[  730.994417][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead
[  731.005723][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead
[  731.016473][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x4627 instead
[  731.039282][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x7e46 instead
[  731.050301][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead
[  731.062230][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead
[  731.077690][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x4627 instead
[  731.091482][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x7e46 instead
[  731.102260][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead
[  731.112939][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead
[  731.127664][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x4627 instead
[  731.138515][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x7e46 instead
[  731.150383][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead
[  731.161310][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead
[  731.172107][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x4627 instead
[  731.188476][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x7e46 instead
[  731.193077][T14793] bridge0: port 1(bridge_slave_0) entered disabled state
[  731.219285][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead
[  731.238750][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead
[  731.269930][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x4627 instead
[  731.280891][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x7e46 instead
[  731.297503][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead
[  731.307994][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead
[  731.330171][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x4627 instead
[  731.350560][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x7e46 instead
[  731.364163][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead
[  731.381363][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead
[  731.395280][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x4627 instead
[  731.407318][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x7e46 instead
[  731.421992][T14797] FAULT_INJECTION: forcing a failure.
[  731.421992][T14797] name failslab, interval 1, probability 0, space 0, times 0
[  731.434968][T14797] CPU: 0 PID: 14797 Comm: syz.4.2668 Not tainted syzkaller #0
[  731.435647][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead
[  731.442430][T14797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  731.442446][T14797] Call Trace:
[  731.442454][T14797]  <TASK>
[  731.442463][T14797]  dump_stack_lvl+0x18c/0x250
[  731.442489][T14797]  ? show_regs_print_info+0x20/0x20
[  731.442509][T14797]  ? load_image+0x420/0x420
[  731.442544][T14797]  ? __might_sleep+0xe0/0xe0
[  731.442569][T14797]  ? __lock_acquire+0x7eb0/0x7eb0
[  731.442595][T14797]  should_fail_ex+0x394/0x4c0
[  731.459626][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead
[  731.463004][T14797]  should_failslab+0x9/0x20
[  731.463042][T14797]  slab_pre_alloc_hook+0x59/0x300
[  731.463067][T14797]  kmem_cache_alloc+0x5a/0x2c0
[  731.467056][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x4627 instead
[  731.469286][T14797]  ? __kernfs_new_node+0xe5/0x7f0
[  731.479697][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x7e46 instead
[  731.483636][T14797]  __kernfs_new_node+0xe5/0x7f0
[  731.483673][T14797]  ? kernfs_new_node+0x260/0x260
[  731.483709][T14797]  ? up_write+0x1be/0x410
[  731.483733][T14797]  kernfs_new_node+0x14c/0x260
[  731.483775][T14797]  __kernfs_create_file+0x4b/0x2e0
[  731.490042][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead
[  731.493356][T14797]  sysfs_add_file_mode_ns+0x237/0x2f0
[  731.493390][T14797]  sysfs_merge_group+0x184/0x320
[  731.493414][T14797]  ? sysfs_remove_groups+0xa0/0xa0
[  731.493438][T14797]  ? device_add_class_symlinks+0x240/0x240
[  731.493469][T14797]  dpm_sysfs_add+0xd2/0x270
[  731.493499][T14797]  device_add+0x55c/0xc40
[  731.493527][T14797]  iommufd_test+0x121d/0x2a20
[  731.493562][T14797]  ? iommufd_selftest_destroy+0xf0/0xf0
[  731.493588][T14797]  ? __lock_acquire+0x7eb0/0x7eb0
[  731.493613][T14797]  ? __lock_acquire+0x7eb0/0x7eb0
[  731.493638][T14797]  ? __might_fault+0xaa/0x120
[  731.493661][T14797]  ? __might_fault+0xaa/0x120
[  731.493689][T14797]  iommufd_fops_ioctl+0x48b/0x540
[  731.493716][T14797]  ? iommufd_ctx_put+0x40/0x40
[  731.652086][T14797]  ? __fget_files+0x28/0x460
[  731.656707][T14797]  ? bpf_lsm_file_ioctl+0x9/0x10
[  731.661648][T14797]  ? security_file_ioctl+0x80/0xa0
[  731.666791][T14797]  ? iommufd_ctx_put+0x40/0x40
[  731.671559][T14797]  __se_sys_ioctl+0xfd/0x170
[  731.676153][T14797]  do_syscall_64+0x55/0xb0
[  731.680566][T14797]  ? clear_bhb_loop+0x40/0x90
[  731.685239][T14797]  ? clear_bhb_loop+0x40/0x90
[  731.689915][T14797]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  731.695842][T14797] RIP: 0033:0x7f139ff9e1d9
[  731.700259][T14797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  731.719867][T14797] RSP: 002b:00007f139e1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  731.728284][T14797] RAX: ffffffffffffffda RBX: 00007f13a0225fa0 RCX: 00007f139ff9e1d9
[  731.736259][T14797] RDX: 0000200000000200 RSI: 0000000000003ba0 RDI: 0000000000000003
[  731.744228][T14797] RBP: 00007f13a0035888 R08: 0000000000000000 R09: 0000000000000000
[  731.752200][T14797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  731.760169][T14797] R13: 00007f13a0226038 R14: 00007f13a0225fa0 R15: 00007ffd1b38e7f8
[  731.768166][T14797]  </TASK>
[  731.783469][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead
[  731.795898][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x4627 instead
[  731.807238][T14754] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x7e46 instead
[  731.818175][T14754] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes
[  731.827856][T14754] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32
[  731.972400][T14804] CacheFiles: No cache directory specified
[  732.062778][T14806] overlayfs: failed to resolve './file1': -2
[  734.569423][T14858] loop6: detected capacity change from 0 to 1024
[  734.625016][T14858] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  734.656664][T14847] bridge0: port 2(bridge_slave_1) entered disabled state
[  734.664153][T14847] bridge0: port 1(bridge_slave_0) entered disabled state
[  734.717929][T14858] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  735.076480][T13451] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  735.176805][T14847] bridge_slave_0: left allmulticast mode
[  735.184120][T14847] bridge_slave_0: left promiscuous mode
[  735.195438][T14847] bridge0: port 1(bridge_slave_0) entered disabled state
[  735.220435][ T5807] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  735.254612][T14847] bridge_slave_1: left allmulticast mode
[  735.260777][T14847] bridge_slave_1: left promiscuous mode
[  735.266696][T14847] bridge0: port 2(bridge_slave_1) entered disabled state
[  735.287374][T14847] bond1: (slave veth0_to_bond): Releasing active interface
[  735.294784][T14847] bond1: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  735.335672][T14847] bond0: (slave bond_slave_0): Releasing backup interface
[  735.375316][T14847] bond0: (slave bond_slave_1): Releasing backup interface
[  735.410172][ T5807] usb 5-1: Using ep0 maxpacket: 16
[  735.417267][ T5807] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  735.432556][ T5807] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0
[  735.468406][ T5807] usb 5-1: config 0 interface 0 has no altsetting 0
[  735.476691][T14847] team0: Port device team_slave_0 removed
[  735.483155][ T5807] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  735.493572][ T5807] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  735.535423][ T5807] usb 5-1: config 0 descriptor??
[  735.568283][T14847] team0: Port device team_slave_1 removed
[  735.586641][T14847] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  735.618132][T14847] batman_adv: batadv0: Removing interface: batadv_slave_0
[  735.657082][T14847] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  735.696643][T14847] batman_adv: batadv0: Removing interface: batadv_slave_1
[  735.969929][ T5807] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0
[  735.990638][ T5807] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0
[  735.997734][ T5807] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0
[  736.007490][ T5807] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0
[  736.014969][ T5807] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0
[  736.023199][ T5807] mcp2221 0003:04D8:00DD.0005: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0
[  736.198031][ T5807] usb 5-1: USB disconnect, device number 7
[  736.292845][T14847] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  736.304731][T14874] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  736.309411][T14847] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  736.315056][T14874] udc usbip-vudc.0: failed to start g1: -19
[  736.330220][T14847] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  736.334234][T14874] UDC core: g1: couldn't find an available UDC or it's busy
[  736.339100][T14847] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  736.494779][T14847] bond1: (slave veth3): Releasing active interface
[  736.997915][T14891] loop4: detected capacity change from 0 to 256
[  737.007705][T14891] exfat: Deprecated parameter 'namecase'
[  737.022690][T14891] exfat: Deprecated parameter 'namecase'
[  737.035974][T14891] exfat: Deprecated parameter 'namecase'
[  737.058275][T14891] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  737.106149][T14893] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2700'.
[  737.136416][T14889] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2700'.
[  737.156708][T14892] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2700'.
[  737.257466][T14895] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  737.257599][T14878] loop6: detected capacity change from 0 to 40427
[  737.297761][T14878] F2FS-fs (loop6): invalid crc value
[  737.327416][T14878] F2FS-fs (loop6): Found nat_bits in checkpoint
[  737.335297][T14895] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  737.473654][T14878] F2FS-fs (loop6): Start checkpoint disabled!
[  737.514193][T14878] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[  737.735356][T10051] kworker/u4:21: attempt to access beyond end of device
[  737.735356][T10051] loop6: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  737.763159][T10051] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  737.774809][T10051] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  737.784275][T10051] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  738.236337][   T28] audit: type=1326 audit(1791837761.106:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14917 comm="syz.6.2709" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9984f9e1d9 code=0x0
[  739.581002][T14963] kvm_intel: kvm [14962]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x7407
[  739.650570][T14963] kvm: kvm [14962]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0xec02
[  739.692639][T14963] kvm: kvm [14962]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0xf029
[  739.930648][T14977] loop4: detected capacity change from 0 to 164
[  740.514212][T14991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2738'.
[  740.664644][T14998] loop4: detected capacity change from 0 to 128
[  740.831848][T15003] loop4: detected capacity change from 0 to 512
[  740.847560][T15003] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  740.879825][T15003] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz.4.2744: invalid indirect mapped block 32768 (level 2)
[  740.910560][T15003] EXT4-fs (loop4): 1 orphan inode deleted
[  740.916553][T15003] EXT4-fs (loop4): 1 truncate cleaned up
[  740.923884][T15003] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  740.962456][T11615] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  741.138842][T15012] CacheFiles: No cache directory specified
[  741.346175][T15014] overlayfs: failed to resolve './file1': -2
[  742.030558][T15020] CacheFiles: No cache directory specified
[  742.125147][T15022] overlayfs: failed to resolve './file1': -2
[  743.059530][T15036] serio: Serial port ptm0
[  743.087842][T15039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2755'.
[  743.541302][T15060] CacheFiles: No cache directory specified
[  743.621471][T15062] overlayfs: failed to resolve './file1': -2
[  746.321204][ T5807] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  746.435489][T15091] CacheFiles: No cache directory specified
[  746.513157][T15093] overlayfs: failed to resolve './file1': -2
[  746.522492][ T5807] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  747.188769][ T5807] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  747.198641][ T5807] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  747.211638][ T5807] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  747.220866][ T5807] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  747.259223][ T5807] usb 7-1: config 0 descriptor??
[  747.517646][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  747.525142][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  747.695533][ T5807] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving
[  747.773082][ T5807] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[  747.863861][T15107] CacheFiles: No cache directory specified
[  747.958178][T15109] overlayfs: failed to resolve './file1': -2
[  749.146874][T15121] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2785'.
[  749.166345][T15121] unsupported nlmsg_type 40
[  749.176938][    C0] plantronics 0003:047F:FFFF.0006: usb_submit_urb(ctrl) failed: -1
[  749.307318][T15124] CacheFiles: No cache directory specified
[  749.385354][T15126] overlayfs: failed to resolve './file1': -2
[  750.398004][T15138] overlayfs: failed to resolve './file1': -2
[  750.572320][T11649] usb 7-1: USB disconnect, device number 3
[  751.049324][T15153] overlayfs: failed to resolve './file1': -2
[  751.369832][T15165] overlayfs: failed to resolve './file1': -2
[  751.647979][T15175] overlayfs: failed to resolve './file1': -2
[  751.908549][T15181] overlayfs: failed to resolve './file1': -2
[  752.683077][T15201] overlayfs: failed to resolve './file1': -2
[  753.085546][T15207] overlayfs: failed to clone upperpath
[  753.095991][T15207] overlayfs: failed to clone upperpath
[  756.597937][T15261] overlayfs: failed to clone upperpath
[  757.027167][T15283] CacheFiles: No cache directory specified
[  757.138314][T15285] overlayfs: failed to resolve './file1': -2
[  758.067967][T15300] ip_tables: iptables: counters copy to user failed while replacing table
[  758.101459][T15300] ip_tables: iptables: counters copy to user failed while replacing table
[  758.681318][T15321] overlayfs: failed to resolve './file1': -2
[  758.926626][T15339] loop4: detected capacity change from 0 to 128
[  759.080266][T15339] loop4: detected capacity change from 128 to 1
[  759.104025][T15339] syz.4.2857: attempt to access beyond end of device
[  759.104025][T15339] loop4: rw=2049, sector=2, nr_sectors = 1 limit=1
[  759.159075][T15339] Buffer I/O error on dev loop4, logical block 2, lost sync page write
[  759.180439][T15339] syz.4.2857: attempt to access beyond end of device
[  759.180439][T15339] loop4: rw=0, sector=2, nr_sectors = 1 limit=1
[  759.198288][T15339] FAT-fs (loop4): Directory bread(block 2) failed
[  759.220478][T15339] syz.4.2857: attempt to access beyond end of device
[  759.220478][T15339] loop4: rw=2049, sector=3, nr_sectors = 1 limit=1
[  759.248629][T15339] Buffer I/O error on dev loop4, logical block 3, lost sync page write
[  759.556435][T15355] FAULT_INJECTION: forcing a failure.
[  759.556435][T15355] name failslab, interval 1, probability 0, space 0, times 0
[  759.598350][T15355] CPU: 1 PID: 15355 Comm: syz.4.2862 Not tainted syzkaller #0
[  759.605879][T15355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  759.615965][T15355] Call Trace:
[  759.619257][T15355]  <TASK>
[  759.622196][T15355]  dump_stack_lvl+0x18c/0x250
[  759.626893][T15355]  ? show_regs_print_info+0x20/0x20
[  759.632100][T15355]  ? load_image+0x420/0x420
[  759.636620][T15355]  ? __might_sleep+0xe0/0xe0
[  759.641219][T15355]  ? __lock_acquire+0x7eb0/0x7eb0
[  759.646253][T15355]  should_fail_ex+0x394/0x4c0
[  759.650942][T15355]  should_failslab+0x9/0x20
[  759.655459][T15355]  slab_pre_alloc_hook+0x59/0x300
[  759.660492][T15355]  ? lockdep_softirqs_off+0x440/0x440
[  759.665872][T15355]  ? nvmet_fc_alloc_ls_iodlist+0x38e/0x8d0
[  759.671693][T15355]  __kmem_cache_alloc_node+0x53/0x250
[  759.677090][T15355]  ? _raw_spin_unlock+0x40/0x40
[  759.681954][T15355]  ? nvmet_fc_alloc_ls_iodlist+0x38e/0x8d0
[  759.687760][T15355]  kmalloc_trace+0x2a/0xe0
[  759.692187][T15355]  nvmet_fc_alloc_ls_iodlist+0x38e/0x8d0
[  759.697835][T15355]  nvmet_fc_register_targetport+0x765/0x9d0
[  759.703740][T15355]  fcloop_create_target_port+0x136/0x490
[  759.709374][T15355]  ? kernfs_fop_write_iter+0x1dc/0x520
[  759.714838][T15355]  ? fcloop_delete_remote_port+0x370/0x370
[  759.720671][T15355]  ? sysfs_kf_write+0x187/0x2a0
[  759.725525][T15355]  ? sysfs_kf_read+0x360/0x360
[  759.730291][T15355]  kernfs_fop_write_iter+0x3a4/0x520
[  759.735587][T15355]  vfs_write+0x474/0x9a0
[  759.739850][T15355]  ? file_end_write+0x250/0x250
[  759.744710][T15355]  ? __fget_files+0x3fc/0x460
[  759.749425][T15355]  ? __fdget_pos+0x2a3/0x330
[  759.754018][T15355]  ? ksys_write+0x74/0x260
[  759.758448][T15355]  ksys_write+0x151/0x260
[  759.762792][T15355]  ? __ia32_sys_read+0x90/0x90
[  759.767566][T15355]  ? lockdep_hardirqs_on+0x98/0x150
[  759.772776][T15355]  do_syscall_64+0x55/0xb0
[  759.777192][T15355]  ? clear_bhb_loop+0x40/0x90
[  759.781871][T15355]  ? clear_bhb_loop+0x40/0x90
[  759.786549][T15355]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  759.792451][T15355] RIP: 0033:0x7f139ff9e1d9
[  759.796868][T15355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  759.816477][T15355] RSP: 002b:00007f139e1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  759.824898][T15355] RAX: ffffffffffffffda RBX: 00007f13a0225fa0 RCX: 00007f139ff9e1d9
[  759.832873][T15355] RDX: 000000000000002f RSI: 0000200000000400 RDI: 0000000000000004
[  759.840862][T15355] RBP: 00007f13a0035888 R08: 0000000000000000 R09: 0000000000000000
[  759.848857][T15355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  759.856840][T15355] R13: 00007f13a0226038 R14: 00007f13a0225fa0 R15: 00007ffd1b38e7f8
[  759.864840][T15355]  </TASK>
[  760.025513][T15360] overlayfs: failed to resolve './file1': -2
[  760.670273][T15390] CacheFiles: No cache directory specified
[  760.759219][T15392] overlayfs: failed to resolve './file1': -2
[  761.575350][T15400] CacheFiles: No cache directory specified
[  761.683178][T15402] overlayfs: failed to resolve './file1': -2
[  762.591326][T15408] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  762.616799][T15408] udc usbip-vudc.0: failed to start g1: -19
[  762.632458][T15408] UDC core: g1: couldn't find an available UDC or it's busy
[  763.228047][T15439] overlayfs: failed to clone upperpath
[  763.453172][T15412] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  763.625069][T15453] overlayfs: failed to resolve './file1': -2
[  763.845873][T15462] CacheFiles: No cache directory specified
[  763.942302][T15464] overlayfs: failed to resolve './file1': -2
[  764.944038][T15482] overlayfs: failed to clone upperpath
[  765.036253][T15485] loop4: detected capacity change from 0 to 512
[  765.137085][T15485] EXT4-fs error (device loop4): ext4_orphan_get:1408: inode #15: comm syz.4.2894: inode has both inline data and extents flags
[  765.176938][T15485] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.2894: couldn't read orphan inode 15 (err -117)
[  765.244296][T15485] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  765.342792][T15492] overlayfs: failed to resolve './file1': -2
[  765.453103][T15500] overlayfs: failed to resolve './file1': -2
[  765.610866][T11615] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  766.265197][T15540] CacheFiles: No cache directory specified
[  766.351819][T15542] overlayfs: failed to resolve './file1': -2
[  768.120658][T11649] usb 5-1: new full-speed USB device number 8 using dummy_hcd
[  768.213171][T15580] loop6: detected capacity change from 0 to 16
[  768.246286][T15580] erofs: (device loop6): z_erofs_parse_cfgs: algorithm 1 isn't enabled on this kernel
[  768.345994][T11649] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[  768.370952][T11649] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  768.397899][T11649] usb 5-1: Product: syz
[  768.407656][T11649] usb 5-1: Manufacturer: syz
[  768.428097][T11649] usb 5-1: SerialNumber: syz
[  768.440036][T15584] FAULT_INJECTION: forcing a failure.
[  768.440036][T15584] name failslab, interval 1, probability 0, space 0, times 0
[  768.463290][T15584] CPU: 1 PID: 15584 Comm: syz.6.2924 Not tainted syzkaller #0
[  768.470807][T15584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  768.480889][T15584] Call Trace:
[  768.484175][T15584]  <TASK>
[  768.487098][T15584]  dump_stack_lvl+0x18c/0x250
[  768.491769][T15584]  ? show_regs_print_info+0x20/0x20
[  768.496954][T15584]  ? load_image+0x420/0x420
[  768.501455][T15584]  ? __might_sleep+0xe0/0xe0
[  768.506042][T15584]  ? __lock_acquire+0x7eb0/0x7eb0
[  768.511062][T15584]  should_fail_ex+0x394/0x4c0
[  768.515740][T15584]  should_failslab+0x9/0x20
[  768.520253][T15584]  slab_pre_alloc_hook+0x59/0x300
[  768.525289][T15584]  ? lockdep_softirqs_off+0x440/0x440
[  768.530655][T15584]  ? nvmet_fc_alloc_ls_iodlist+0x38e/0x8d0
[  768.536462][T15584]  __kmem_cache_alloc_node+0x53/0x250
[  768.541829][T15584]  ? _raw_spin_unlock+0x40/0x40
[  768.546684][T15584]  ? nvmet_fc_alloc_ls_iodlist+0x38e/0x8d0
[  768.552479][T15584]  kmalloc_trace+0x2a/0xe0
[  768.556901][T15584]  nvmet_fc_alloc_ls_iodlist+0x38e/0x8d0
[  768.562540][T15584]  nvmet_fc_register_targetport+0x765/0x9d0
[  768.568432][T15584]  fcloop_create_target_port+0x136/0x490
[  768.574058][T15584]  ? kernfs_fop_write_iter+0x1dc/0x520
[  768.579507][T15584]  ? fcloop_delete_remote_port+0x370/0x370
[  768.585312][T15584]  ? sysfs_kf_write+0x187/0x2a0
[  768.590163][T15584]  ? sysfs_kf_read+0x360/0x360
[  768.594930][T15584]  kernfs_fop_write_iter+0x3a4/0x520
[  768.600236][T15584]  vfs_write+0x474/0x9a0
[  768.604500][T15584]  ? file_end_write+0x250/0x250
[  768.609346][T15584]  ? __fget_files+0x3fc/0x460
[  768.614023][T15584]  ? __fdget_pos+0x2a3/0x330
[  768.618602][T15584]  ? ksys_write+0x74/0x260
[  768.623015][T15584]  ksys_write+0x151/0x260
[  768.627356][T15584]  ? __ia32_sys_read+0x90/0x90
[  768.632127][T15584]  ? lockdep_hardirqs_on+0x98/0x150
[  768.637324][T15584]  do_syscall_64+0x55/0xb0
[  768.641736][T15584]  ? clear_bhb_loop+0x40/0x90
[  768.646406][T15584]  ? clear_bhb_loop+0x40/0x90
[  768.651095][T15584]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  768.656992][T15584] RIP: 0033:0x7f9984f9e1d9
[  768.661401][T15584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  768.681009][T15584] RSP: 002b:00007f9985f54028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  768.689420][T15584] RAX: ffffffffffffffda RBX: 00007f9985225fa0 RCX: 00007f9984f9e1d9
[  768.697389][T15584] RDX: 000000000000002f RSI: 0000200000000400 RDI: 0000000000000004
[  768.705372][T15584] RBP: 00007f9985035888 R08: 0000000000000000 R09: 0000000000000000
[  768.713352][T15584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  768.721420][T15584] R13: 00007f9985226038 R14: 00007f9985225fa0 R15: 00007ffce1fc97e8
[  768.729396][T15584]  </TASK>
[  768.980555][T11649] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202
[  769.518342][T15602] VFS: Mount too revealing
[  770.229493][T15612] overlayfs: failed to resolve './file1': -2
[  770.567002][T15619] overlayfs: failed to clone upperpath
[  770.870675][ T5811] usb 5-1: USB disconnect, device number 8
[  770.907980][ T5811] usblp0: removed
[  771.411632][T15632] loop4: detected capacity change from 0 to 32768
[  771.438753][T15632] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  771.490276][T15632] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  771.509969][T15632] BTRFS info (device loop4): setting nodatasum
[  771.520033][T15632] BTRFS info (device loop4): force zlib compression, level 3
[  771.540438][T15632] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8)
[  771.570222][T15632] BTRFS info (device loop4): use lzo compression, level 0
[  771.588112][T15632] BTRFS info (device loop4): turning on flush-on-commit
[  771.597360][T15632] BTRFS info (device loop4): enabling auto defrag
[  771.620445][T15632] BTRFS info (device loop4): max_inline at 4096
[  771.638764][T15632] BTRFS info (device loop4): using free space tree
[  771.733735][T15632] BTRFS info (device loop4): enabling ssd optimizations
[  772.355909][T11615] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  772.381037][T15656] overlayfs: failed to resolve './file1': -2
[  772.411707][T15655] FAULT_INJECTION: forcing a failure.
[  772.411707][T15655] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  772.480966][T15655] CPU: 0 PID: 15655 Comm: syz.6.2942 Not tainted syzkaller #0
[  772.488492][T15655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  772.498564][T15655] Call Trace:
[  772.501844][T15655]  <TASK>
[  772.504768][T15655]  dump_stack_lvl+0x18c/0x250
[  772.509464][T15655]  ? show_regs_print_info+0x20/0x20
[  772.514660][T15655]  ? load_image+0x420/0x420
[  772.519165][T15655]  ? __might_fault+0xaa/0x120
[  772.523836][T15655]  ? __lock_acquire+0x7eb0/0x7eb0
[  772.528853][T15655]  ? __virt_addr_valid+0x10c/0x380
[  772.533984][T15655]  should_fail_ex+0x394/0x4c0
[  772.538659][T15655]  _copy_to_user+0x2f/0xa0
[  772.543090][T15655]  tomoyo_flush+0x170/0x5b0
[  772.547637][T15655]  tomoyo_read_domain+0x42b/0xd80
[  772.552685][T15655]  tomoyo_read_control+0x2c6/0x4d0
[  772.557795][T15655]  ? tomoyo_read_control+0x109/0x4d0
[  772.563096][T15655]  ? tomoyo_realpath_nofollow+0x110/0x110
[  772.568812][T15655]  vfs_read+0x298/0x990
[  772.572966][T15655]  ? kernel_read+0x1e0/0x1e0
[  772.577549][T15655]  ? __fget_files+0x28/0x460
[  772.582134][T15655]  ? __fget_files+0x3fc/0x460
[  772.586803][T15655]  ? __fdget_pos+0x2a3/0x330
[  772.591407][T15655]  ? ksys_read+0x74/0x260
[  772.595755][T15655]  ksys_read+0x151/0x260
[  772.600012][T15655]  ? vfs_write+0x9a0/0x9a0
[  772.604422][T15655]  ? lockdep_hardirqs_on+0x98/0x150
[  772.609622][T15655]  do_syscall_64+0x55/0xb0
[  772.614039][T15655]  ? clear_bhb_loop+0x40/0x90
[  772.618716][T15655]  ? clear_bhb_loop+0x40/0x90
[  772.623379][T15655]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  772.629266][T15655] RIP: 0033:0x7f9984f9e1d9
[  772.633671][T15655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  772.653295][T15655] RSP: 002b:00007f9985f54028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  772.661702][T15655] RAX: ffffffffffffffda RBX: 00007f9985225fa0 RCX: 00007f9984f9e1d9
[  772.669663][T15655] RDX: 0000000000002020 RSI: 0000200000001300 RDI: 0000000000000003
[  772.677635][T15655] RBP: 00007f9985035888 R08: 0000000000000000 R09: 0000000000000000
[  772.685620][T15655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  772.693607][T15655] R13: 00007f9985226038 R14: 00007f9985225fa0 R15: 00007ffce1fc97e8
[  772.701581][T15655]  </TASK>
[  773.067884][T15665] netlink: 'syz.6.2948': attribute type 4 has an invalid length.
[  773.298426][T15672] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2951'.
[  773.630656][T11900] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  773.663861][T15688] overlayfs: failed to resolve './file1': -2
[  773.823807][T11900] usb 7-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00
[  773.833527][T11900] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  773.846231][T11900] usb 7-1: Product: syz
[  773.846915][T15694] overlayfs: failed to resolve './file1': -2
[  773.863832][T11900] usb 7-1: Manufacturer: syz
[  774.464541][T11900] scsi host1: uas
[  774.486898][    C0] usb 7-1: stat urb: no pending cmd for uas-tag 0
[  774.752259][T15725] CacheFiles: No cache directory specified
[  774.861670][T15727] overlayfs: failed to resolve './file1': -2
[  774.919152][    C0] usb 7-1: cmd cmplt err -71
[  774.927108][T11900] usb 7-1: USB disconnect, device number 4
[  775.063997][T11900] scsi 1:0:0:0: tag#4 uas_zap_pending 0 uas-tag 1 inflight: CMD 
[  775.072660][T11900] scsi 1:0:0:0: tag#4 CDB: Inquiry 12 00 00 00 24 00
[  775.627153][T15729] overlayfs: failed to resolve './file1': -2
[  775.866695][T15746] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  775.879081][T15746] batman_adv: batadv0: Adding interface: gretap2
[  775.895473][T15746] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  775.927960][T15746] batman_adv: batadv0: Interface activated: gretap2
[  776.725512][T15770] overlayfs: failed to resolve './file1': -2
[  776.848614][T15775] overlayfs: failed to clone upperpath
[  777.335336][T15794] CacheFiles: No cache directory specified
[  777.403226][T15799] overlayfs: failed to resolve './file1': -2
[  777.573598][T15802] FAULT_INJECTION: forcing a failure.
[  777.573598][T15802] name failslab, interval 1, probability 0, space 0, times 0
[  777.613305][T15802] CPU: 1 PID: 15802 Comm: syz.4.2994 Not tainted syzkaller #0
[  777.620836][T15802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  777.630924][T15802] Call Trace:
[  777.634234][T15802]  <TASK>
[  777.637183][T15802]  dump_stack_lvl+0x18c/0x250
[  777.641876][T15802]  ? show_regs_print_info+0x20/0x20
[  777.647102][T15802]  ? load_image+0x420/0x420
[  777.651649][T15802]  ? __might_sleep+0xe0/0xe0
[  777.656285][T15802]  ? __lock_acquire+0x7eb0/0x7eb0
[  777.661354][T15802]  should_fail_ex+0x394/0x4c0
[  777.666107][T15802]  should_failslab+0x9/0x20
[  777.670647][T15802]  slab_pre_alloc_hook+0x59/0x300
[  777.675704][T15802]  ? lookup_one_len+0x1a1/0x2e0
[  777.680592][T15802]  kmem_cache_alloc_lru+0x4d/0x2b0
[  777.685740][T15802]  ? new_inode_pseudo+0x82/0x1d0
[  777.690715][T15802]  new_inode_pseudo+0x82/0x1d0
[  777.695518][T15802]  new_inode+0x22/0x1d0
[  777.699702][T15802]  ? start_creating+0x1f5/0x310
[  777.704582][T15802]  debugfs_create_dir+0xf0/0x4b0
[  777.709535][T15802]  blk_mq_debugfs_register_sched+0x109/0x2b0
[  777.715521][T15802]  blk_mq_init_sched+0x3bc/0x780
[  777.720476][T15802]  ? blk_mq_sched_try_insert_merge+0x160/0x160
[  777.726639][T15802]  ? __kmem_cache_free+0xba/0x1f0
[  777.731678][T15802]  ? kobject_put+0x421/0x450
[  777.736281][T15802]  elevator_switch+0x1ee/0x5b0
[  777.741065][T15802]  elv_iosched_store+0x3b9/0x4b0
[  777.746007][T15802]  ? kernfs_fop_write_iter+0x1dc/0x520
[  777.751467][T15802]  ? elevator_disable+0x4f0/0x4f0
[  777.756504][T15802]  queue_attr_store+0x9e/0xd0
[  777.761188][T15802]  ? sysfs_kf_read+0x360/0x360
[  777.765949][T15802]  kernfs_fop_write_iter+0x3a4/0x520
[  777.771259][T15802]  vfs_write+0x474/0x9a0
[  777.775518][T15802]  ? file_end_write+0x250/0x250
[  777.780379][T15802]  ? __fget_files+0x3fc/0x460
[  777.785078][T15802]  ? __fdget_pos+0x2a3/0x330
[  777.789669][T15802]  ? ksys_write+0x74/0x260
[  777.794097][T15802]  ksys_write+0x151/0x260
[  777.798434][T15802]  ? __ia32_sys_read+0x90/0x90
[  777.803210][T15802]  ? lockdep_hardirqs_on+0x98/0x150
[  777.808412][T15802]  do_syscall_64+0x55/0xb0
[  777.812827][T15802]  ? clear_bhb_loop+0x40/0x90
[  777.817505][T15802]  ? clear_bhb_loop+0x40/0x90
[  777.822184][T15802]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  777.828085][T15802] RIP: 0033:0x7f139ff9e1d9
[  777.832505][T15802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  777.852115][T15802] RSP: 002b:00007f139e1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  777.860537][T15802] RAX: ffffffffffffffda RBX: 00007f13a0225fa0 RCX: 00007f139ff9e1d9
[  777.868512][T15802] RDX: 0000000000000005 RSI: 00002000000001c0 RDI: 0000000000000003
[  777.876484][T15802] RBP: 00007f13a0035888 R08: 0000000000000000 R09: 0000000000000000
[  777.884458][T15802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  777.892427][T15802] R13: 00007f13a0226038 R14: 00007f13a0225fa0 R15: 00007ffd1b38e7f8
[  777.900418][T15802]  </TASK>
[  777.947898][T15802] debugfs: out of free dentries, can not create directory 'sched'
[  778.364620][T15830] overlayfs: failed to resolve './file1': -2
[  778.986588][T15848] loop6: detected capacity change from 0 to 2048
[  779.016636][T15848] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  779.093255][T15848] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found
[  779.122277][T15848] UDF-fs: Scanning with blocksize 512 failed
[  779.149570][T15848] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  779.824736][T15867] overlayfs: failed to resolve './file1': -2
[  779.877761][T15866] CacheFiles: No cache directory specified
[  779.985078][T15866] overlayfs: failed to resolve './file1': -2
[  780.105161][T15879] loop6: detected capacity change from 0 to 128
[  780.111621][T15880] overlayfs: failed to resolve './file1': -2
[  780.164392][T15883] loop4: detected capacity change from 0 to 512
[  780.171434][T15883] EXT4-fs: Ignoring removed oldalloc option
[  780.190616][T15879] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  780.256189][T15883] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  780.267863][T15879] ext4 filesystem being mounted at /130/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  780.402849][T15879] FAULT_INJECTION: forcing a failure.
[  780.402849][T15879] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  780.470417][T15879] CPU: 0 PID: 15879 Comm: syz.6.3017 Not tainted syzkaller #0
[  780.477952][T15879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  780.488038][T15879] Call Trace:
[  780.491339][T15879]  <TASK>
[  780.494297][T15879]  dump_stack_lvl+0x18c/0x250
[  780.499009][T15879]  ? show_regs_print_info+0x20/0x20
[  780.504235][T15879]  ? load_image+0x420/0x420
[  780.508778][T15879]  ? __lock_acquire+0x7eb0/0x7eb0
[  780.513846][T15879]  should_fail_ex+0x394/0x4c0
[  780.518567][T15879]  prepare_alloc_pages+0x1e1/0x5b0
[  780.523717][T15879]  __alloc_pages+0x134/0x460
[  780.528325][T15879]  ? zone_statistics+0x170/0x170
[  780.533280][T15879]  ? __rb_allocate_pages+0x197/0x6b0
[  780.538578][T15879]  ? rcu_is_watching+0x15/0xb0
[  780.543357][T15879]  ? __rb_allocate_pages+0x197/0x6b0
[  780.548657][T15879]  ? __kmalloc_node+0xe4/0x240
[  780.553453][T15879]  __rb_allocate_pages+0x2d8/0x6b0
[  780.558583][T15879]  ? __init_waitqueue_head+0xa8/0x140
[  780.563969][T15879]  rb_allocate_cpu_buffer+0x64b/0xa10
[  780.569374][T15879]  ? rb_wake_up_waiters+0x1b0/0x1b0
[  780.574582][T15879]  ? __ring_buffer_alloc+0x1d6/0x550
[  780.579874][T15879]  ? __ring_buffer_alloc+0x1d6/0x550
[  780.585163][T15879]  ? __kmalloc+0xe5/0x240
[  780.589504][T15879]  __ring_buffer_alloc+0x283/0x550
[  780.594624][T15879]  allocate_trace_buffers+0x70/0x290
[  780.599914][T15879]  ? __raw_spin_lock_init+0x45/0x100
[  780.605205][T15879]  trace_array_create_systems+0x311/0xc70
[  780.610930][T15879]  instance_mkdir+0xd1/0x130
[  780.615523][T15879]  tracefs_syscall_mkdir+0x128/0x1a0
[  780.620825][T15879]  vfs_mkdir+0x2a5/0x470
[  780.625081][T15879]  do_mkdirat+0x1dc/0x450
[  780.629412][T15879]  ? vfs_mkdir+0x470/0x470
[  780.633841][T15879]  __x64_sys_mkdirat+0x89/0xa0
[  780.638609][T15879]  do_syscall_64+0x55/0xb0
[  780.643030][T15879]  ? clear_bhb_loop+0x40/0x90
[  780.647709][T15879]  ? clear_bhb_loop+0x40/0x90
[  780.652387][T15879]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  780.658287][T15879] RIP: 0033:0x7f9984f9e1d9
[  780.662707][T15879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  780.682317][T15879] RSP: 002b:00007f9985f54028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  780.690745][T15879] RAX: ffffffffffffffda RBX: 00007f9985225fa0 RCX: 00007f9984f9e1d9
[  780.698725][T15879] RDX: 00000000000001ff RSI: 0000200000000140 RDI: ffffffffffffff9c
[  780.706703][T15879] RBP: 00007f9985035888 R08: 0000000000000000 R09: 0000000000000000
[  780.714679][T15879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  780.722649][T15879] R13: 00007f9985226038 R14: 00007f9985225fa0 R15: 00007ffce1fc97e8
[  780.730639][T15879]  </TASK>
[  780.853562][T13451] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  781.087502][T11615] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  781.220604][T15897] CacheFiles: No cache directory specified
[  781.333276][T15897] overlayfs: failed to resolve './file1': -2
[  781.439209][T15907] CacheFiles: No cache directory specified
[  781.515822][T15911] overlayfs: failed to resolve './file1': -2
[  781.672490][T15917] overlayfs: failed to resolve './file1': -2
[  782.412992][T15935] overlayfs: failed to resolve './file1': -2
[  782.787256][T15940] CacheFiles: No cache directory specified
[  782.849377][T15940] overlayfs: failed to resolve './file1': -2
[  782.949681][T15943] loop4: detected capacity change from 0 to 512
[  782.958344][T15943] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  783.679492][T15962] overlayfs: failed to resolve './file1': -2
[  783.725275][T15967] CacheFiles: No cache directory specified
[  783.769323][T15967] overlayfs: failed to resolve './file1': -2
[  783.882495][T15970] overlayfs: failed to resolve './file1': -2
[  784.187982][T15983] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  784.374393][T15996] overlayfs: failed to resolve './file1': -2
[  784.618733][T16008] overlayfs: failed to resolve './file1': -2
[  784.986717][T16023] CacheFiles: No cache directory specified
[  785.041975][T16023] overlayfs: failed to resolve './file1': -2
[  785.182680][T16034] CacheFiles: No cache directory specified
[  785.271258][T16036] overlayfs: failed to resolve './file1': -2
[  786.417762][T16061] netlink: 'syz.2.3080': attribute type 1 has an invalid length.
[  786.486441][T16061] bond2: entered promiscuous mode
[  786.500897][T16061] 8021q: adding VLAN 0 to HW filter on device bond2
[  786.593938][T16065] bridge2: entered promiscuous mode
[  786.603252][T16065] bond2: (slave bridge2): making interface the new active one
[  786.612212][T16065] bond2: (slave bridge2): Enslaving as an active interface with an up link
[  787.207344][T16083] overlayfs: failed to resolve './file1': -2
[  787.501858][T16095] loop4: detected capacity change from 0 to 1024
[  787.553387][T16095] hfsplus: invalid btree flag
[  787.581963][T16095] hfsplus: failed to load attributes file
[  787.639855][T16103] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  787.842443][T16109] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  788.048512][T16119] CacheFiles: No cache directory specified
[  788.125163][T16123] overlayfs: failed to resolve './file1': -2
[  789.863560][T16156] overlayfs: failed to resolve './file1': -2
[  790.137843][T16155] loop6: detected capacity change from 0 to 32768
[  790.207479][T16155] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  790.334815][T16178] overlayfs: failed to resolve './file1': -2
[  790.406343][T16155] XFS (loop6): Ending clean mount
[  790.596379][T13451] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  790.608225][T16187] overlayfs: failed to resolve './file1': -2
[  791.252041][T16202] overlayfs: failed to resolve './file1': -2
[  791.589299][T16220] CacheFiles: No cache directory specified
[  791.639698][T16220] overlayfs: failed to resolve './file1': -2
[  792.346890][T16223] loop4: detected capacity change from 0 to 40427
[  792.399233][T16223] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  792.419656][T16223] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  792.464921][T16223] F2FS-fs (loop4): invalid crc value
[  792.529884][T16223] F2FS-fs (loop4): Found nat_bits in checkpoint
[  792.753606][T16223] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  792.778199][T16223] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  793.138229][T16243] overlayfs: failed to resolve './file1': -2
[  793.146608][T16227] loop6: detected capacity change from 0 to 32768
[  793.195889][T16252] overlayfs: failed to resolve './file1': -2
[  793.266582][T11615] syz-executor: attempt to access beyond end of device
[  793.266582][T11615] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  793.374439][T11615] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  794.300994][T16273] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3148'.
[  794.422044][T16283] CacheFiles: No cache directory specified
[  794.524665][T16283] overlayfs: failed to resolve './file1': -2
[  794.676336][T16290] CacheFiles: No cache directory specified
[  794.830671][T16290] overlayfs: failed to resolve './file1': -2
[  795.007326][T16299] overlayfs: failed to resolve './file1': -2
[  795.664149][   T51] Bluetooth: hci3: command 0x0406 tx timeout
[  795.758331][T16314] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  796.376196][T16329] CacheFiles: No cache directory specified
[  796.449288][T16329] overlayfs: failed to resolve './file1': -2
[  796.611484][T16333] CacheFiles: No cache directory specified
[  796.678943][T16337] overlayfs: failed to resolve './file1': -2
[  797.131993][T16349] overlayfs: failed to clone upperpath
[  797.153654][T16349] overlayfs: failed to clone upperpath
[  797.175846][T16347] netlink: 'syz.6.3166': attribute type 1 has an invalid length.
[  797.637384][T16360] overlayfs: failed to resolve './file1': -2
[  797.901334][T16368] overlayfs: failed to resolve './file1': -2
[  797.973635][T16364] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3172'.
[  798.431062][T16376] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  798.830814][T16394] overlayfs: failed to resolve './file1': -2
[  799.077851][T16399] overlayfs: failed to resolve './file1': -2
[  799.499605][T16418] overlayfs: failed to resolve './file1': -2
[  799.546076][T16408] mount: server 127. not responding, timed out
[  799.671999][T16426] CacheFiles: No cache directory specified
[  799.746857][T16429] overlayfs: failed to resolve './file1': -2
[  800.465272][T16453] loop4: detected capacity change from 0 to 128
[  800.898883][T16460] overlayfs: failed to resolve './file1': -2
[  801.832474][T16487] overlayfs: failed to resolve './file1': -2
[  802.483285][T16501] overlayfs: failed to resolve './file1': -2
[  803.782396][T16515] loop4: detected capacity change from 0 to 512
[  803.792585][T16515] EXT4-fs: Ignoring removed bh option
[  803.847349][T16515] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  803.870577][T16515] EXT4-fs error (device loop4): ext4_iget_extra_inode:4752: inode #15: comm syz.4.3221: corrupted in-inode xattr: e_value size too large
[  803.948509][T16515] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.3221: couldn't read orphan inode 15 (err -117)
[  804.018399][T16515] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  804.209494][T11615] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  804.333235][T16519] loop4: detected capacity change from 0 to 256
[  804.542370][T16519] FAT-fs (loop4): Directory bread(block 64) failed
[  804.548967][T16519] FAT-fs (loop4): Directory bread(block 65) failed
[  804.581107][T16519] FAT-fs (loop4): Directory bread(block 66) failed
[  804.587645][T16519] FAT-fs (loop4): Directory bread(block 67) failed
[  804.640498][T16519] FAT-fs (loop4): Directory bread(block 68) failed
[  804.647085][T16519] FAT-fs (loop4): Directory bread(block 69) failed
[  804.658941][T16519] FAT-fs (loop4): Directory bread(block 70) failed
[  804.689189][T16519] FAT-fs (loop4): Directory bread(block 71) failed
[  804.710481][T16519] FAT-fs (loop4): Directory bread(block 72) failed
[  804.727254][T16519] FAT-fs (loop4): Directory bread(block 73) failed
[  805.128400][T16530] overlayfs: failed to resolve './file1': -2
[  806.995501][T16557] CacheFiles: No cache directory specified
[  807.068244][T16564] overlayfs: failed to resolve './file1': -2
[  807.112024][T16562] kvm: Disabled LAPIC found during irq injection
[  807.454435][T16573] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3241'.
[  807.478220][T16573] netlink: 'syz.6.3241': attribute type 5 has an invalid length.
[  807.494798][T16573] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3241'.
[  807.504461][T16573] netlink: 'syz.6.3241': attribute type 5 has an invalid length.
[  808.950340][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  808.956711][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  808.967846][T16597] overlayfs: failed to resolve './file1': -2
[  809.391911][T16604] Bluetooth: hci0: invalid length 0, exp 2 for type 7
[  809.735942][T16616] overlayfs: statfs failed on './file0'
[  810.198564][T16632] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  810.215710][T16622] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  810.236190][T16632] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  810.589044][T16645] CacheFiles: No cache directory specified
[  810.655023][T16645] overlayfs: failed to resolve './file1': -2
[  811.336066][T16678] serial 00:03: in use; can't configure
[  811.918520][T16700] overlayfs: failed to resolve './file1': -2
[  812.000198][    T8] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  812.227580][    T8] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  812.273802][    T8] usb 7-1: config 0 has no interfaces?
[  812.279504][    T8] usb 7-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  812.349064][    T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  812.378552][    T8] usb 7-1: config 0 descriptor??
[  812.815683][    T8] usb 7-1: USB disconnect, device number 5
[  813.019573][T16731] CacheFiles: No cache directory specified
[  813.079366][T16731] overlayfs: failed to resolve './file1': -2
[  813.656141][T16749] overlayfs: failed to resolve './file1': -2
[  813.971404][T16757] 0: reclassify loop, rule prio 0, protocol 03
[  814.087861][T16759] overlayfs: failed to resolve './file1': -2
[  814.378624][T16772] fuse: root generation should be zero
[  814.472010][T16784] CacheFiles: No cache directory specified
[  814.536596][T16786] overlayfs: failed to resolve './file1': -2
[  814.572401][ T5773] Bluetooth: hci1: unexpected event 0x04 length: 11 > 10
[  815.165721][T16801] overlayfs: failed to resolve './file1': -2
[  815.430631][   T28] audit: type=1326 audit(1791837838.306:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16805 comm="syz.2.3307" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9b66d9e1d9 code=0x0
[  815.569501][T16810] loop4: detected capacity change from 0 to 512
[  815.578100][T16810] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  815.604842][T16810] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002]
[  815.615144][T16810] System zones: 1-12
[  815.625576][T16810] EXT4-fs error (device loop4): ext4_orphan_get:1434: comm syz.4.3308: bad orphan inode 131072
[  815.653797][T16810] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  815.729073][T16810] tipc: Started in network mode
[  815.746045][T16810] tipc: Node identity 4, cluster identity 4711
[  815.767572][T16810] tipc: Node number set to 4
[  815.814516][T11615] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  816.620371][ T5773] Bluetooth: hci1: command 0x0406 tx timeout
[  816.897035][T16834] CacheFiles: No cache directory specified
[  817.026442][T16834] overlayfs: failed to resolve './file1': -2
[  817.886441][T16859] overlayfs: failed to clone upperpath
[  818.700564][ T5773] Bluetooth: hci1: command 0x0406 tx timeout
[  820.890610][ T5773] Bluetooth: hci1: command 0x0406 tx timeout
[  822.510824][T16922] syzkaller0: entered promiscuous mode
[  822.525822][T16922] syzkaller0: entered allmulticast mode
[  822.677263][T16927] loop6: detected capacity change from 0 to 512
[  822.705824][T16927] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  822.817261][T16927] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002]
[  822.869824][T16927] System zones: 1-12
[  822.996518][T16927] EXT4-fs error (device loop6): ext4_orphan_get:1434: comm syz.6.3343: bad orphan inode 131072
[  823.020009][T16927] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  823.875767][T16938] loop4: detected capacity change from 0 to 512
[  823.893397][T16938] EXT4-fs: Ignoring removed i_version option
[  823.911834][T13451] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  823.935838][T16938] EXT4-fs: Ignoring removed oldalloc option
[  823.961906][T16938] EXT4-fs (loop4): Test dummy encryption mode enabled
[  823.987237][T16938] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  824.199330][T11615] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  824.373744][T16948] loop4: detected capacity change from 0 to 16
[  824.420473][T16948] erofs: (device loop4): mounted with root inode @ nid 36.
[  824.806046][T16965] overlayfs: failed to clone upperpath
[  824.912758][T16968] loop4: detected capacity change from 0 to 1024
[  824.953226][T16968] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  825.082013][T16968] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  825.262876][T16981] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[  825.312681][T16982] overlayfs: failed to resolve './file1': -2
[  825.329682][T16981] EXT4-fs error (device loop4) in ext4_setattr:5695: error 28
[  825.464827][T16986] loop6: detected capacity change from 0 to 1024
[  825.482782][T16986] EXT4-fs: Ignoring removed mblk_io_submit option
[  825.605791][T16986] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  825.769391][T11615] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  825.822073][T16986] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  826.270921][T13451] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  828.548065][T17013] overlayfs: failed to resolve './file1': -2
[  829.476920][T17021] loop4: detected capacity change from 0 to 128
[  829.598496][T17021] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  829.649466][T17021] ext4 filesystem being mounted at /340/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  829.695224][T17021] syz.4.3371 (pid 17021) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  830.119458][T17021] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-avx2)"
[  830.170189][ T5832] usb 7-1: new full-speed USB device number 6 using dummy_hcd
[  830.189095][T17035] overlayfs: failed to create directory ./bus/work (errno: 28); mounting read-only
[  830.655638][T11615] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  830.905085][ T5832] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  830.921967][ T5832] usb 7-1: too many endpoints for config 0 interface 0 altsetting 8: 130, using maximum allowed: 30
[  830.965150][ T5832] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  830.999740][ T5832] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  831.011082][ T5832] usb 7-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 130
[  831.040649][ T5832] usb 7-1: config 0 interface 0 has no altsetting 0
[  831.047466][ T5832] usb 7-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00
[  831.069228][ T5832] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  831.092434][ T5832] usb 7-1: config 0 descriptor??
[  831.099337][T17032] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  831.154192][T17046] bond2: (slave bridge2): Releasing backup interface
[  831.283645][T17057] overlayfs: failed to resolve './file1': -2
[  831.290961][T17053] loop4: detected capacity change from 0 to 2048
[  831.333832][T17053] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  831.373592][T17053] ext4 filesystem being mounted at /342/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  831.486062][T13375] udevd[13375]: incorrect ext4 checksum on /dev/loop4
[  831.519393][ T5832] logitech 0003:046D:C298.0007: unknown main item tag 0x2
[  831.527489][ T5832] logitech 0003:046D:C298.0007: unknown main item tag 0x0
[  831.535135][ T5832] logitech 0003:046D:C298.0007: unknown main item tag 0x0
[  831.547968][ T5832] input: HID 046d:c298 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:046D:C298.0007/input/input14
[  831.625874][T13940] udevd[13940]: incorrect ext4 checksum on /dev/loop4
[  831.647260][T11649] logitech 0003:046D:C298.0007: implement() called with too large value 1 (n: 0)! (kworker/1:0)
[  831.749339][ T5832] logitech 0003:046D:C298.0007: input,hidraw0: USB HID v0.00 Keyboard [HID 046d:c298] on usb-dummy_hcd.6-1/input0
[  831.784708][ T5832] logitech 0003:046D:C298.0007: implement() called with too large value 245 (n: 0)! (kworker/1:6)
[  831.818465][ T5832] logitech 0003:046D:C298.0007: implement() called with too large value 248 (n: 0)! (kworker/1:6)
[  831.829291][ T5832] logitech 0003:046D:C298.0007: implement() called with too large value 3 (n: 0)! (kworker/1:6)
[  831.840317][ T5832] logitech 0003:046D:C298.0007: implement() called with too large value 129 (n: 0)! (kworker/1:6)
[  831.850952][ T5832] logitech 0003:046D:C298.0007: implement() called with too large value 11 (n: 0)! (kworker/1:6)
[  831.920194][ T5832] logitech 0003:046D:C298.0007: Force feedback support for Logitech Gaming Wheels
[  831.950367][ T5832] usb 7-1: USB disconnect, device number 6
[  832.192710][T11615] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  832.479309][T17069] loop4: detected capacity change from 0 to 2048
[  832.542732][T17069] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  833.270772][T17081] syzkaller0: entered promiscuous mode
[  833.276305][T17081] syzkaller0: entered allmulticast mode
[  833.783193][T17092] overlayfs: failed to resolve './file1': -2
[  833.802668][T17096] loop6: detected capacity change from 0 to 256
[  833.873333][T17096] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010321, chksum : 0x3a8a43f6, utbl_chksum : 0xe619d30d)
[  834.894964][T10055] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  834.970051][T17109] syzkaller0: entered promiscuous mode
[  834.986150][T17109] syzkaller0: entered allmulticast mode
[  835.074054][T10055] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  835.365013][T10055] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  835.547793][T10055] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  836.817096][   T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  836.840336][   T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  837.024446][T17120] syz.2.3397 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0
[  837.034406][T17120] CPU: 0 PID: 17120 Comm: syz.2.3397 Not tainted syzkaller #0
[  837.041871][T17120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  837.051927][T17120] Call Trace:
[  837.055194][T17120]  <TASK>
[  837.058109][T17120]  dump_stack_lvl+0x18c/0x250
[  837.062778][T17120]  ? show_regs_print_info+0x20/0x20
[  837.067960][T17120]  ? load_image+0x420/0x420
[  837.072450][T17120]  ? ___ratelimit+0x478/0x610
[  837.077118][T17120]  ? radix_tree_cpu_dead+0x160/0x160
[  837.082390][T17120]  dump_header+0xd8/0x820
[  837.086729][T17120]  oom_kill_process+0x390/0x580
[  837.091577][T17120]  out_of_memory+0xe0e/0x1200
[  837.096243][T17120]  ? mem_cgroup_out_of_memory+0xc1/0x390
[  837.101866][T17120]  ? mutex_lock_nested+0x20/0x20
[  837.106790][T17120]  ? unregister_oom_notifier+0x20/0x20
[  837.112240][T17120]  mem_cgroup_out_of_memory+0x2c2/0x390
[  837.117773][T17120]  ? try_charge_memcg+0xc91/0x17c0
[  837.122870][T17120]  ? drain_local_stock+0x630/0x630
[  837.127972][T17120]  ? do_raw_spin_unlock+0x121/0x230
[  837.133163][T17120]  try_charge_memcg+0xca1/0x17c0
[  837.138095][T17120]  ? folio_prep_large_rmappable+0x9e/0x1b0
[  837.143892][T17120]  ? folio_flags+0x120/0x120
[  837.148471][T17120]  ? shmem_alloc_folio+0x1f4/0x2a0
[  837.153594][T17120]  ? percpu_ref_tryget+0x15/0x180
[  837.158604][T17120]  ? get_mem_cgroup_from_mm+0x38/0x290
[  837.164052][T17120]  charge_memcg+0x11b/0x3b0
[  837.168545][T17120]  ? __mem_cgroup_charge+0x80/0x80
[  837.173641][T17120]  ? get_mem_cgroup_from_mm+0x38/0x290
[  837.179096][T17120]  ? get_mem_cgroup_from_mm+0x38/0x290
[  837.184539][T17120]  ? get_mem_cgroup_from_mm+0x1b2/0x290
[  837.190074][T17120]  __mem_cgroup_charge+0x25/0x80
[  837.195021][T17120]  shmem_add_to_page_cache+0x8d3/0x1b80
[  837.200561][T17120]  ? xas_load+0x12b/0x140
[  837.204904][T17120]  ? shmem_alloc_folio+0x2a0/0x2a0
[  837.210009][T17120]  shmem_get_folio_gfp+0x1037/0x2b40
[  837.215310][T17120]  shmem_write_begin+0xf2/0x430
[  837.220157][T17120]  generic_perform_write+0x2fe/0x5c0
[  837.225526][T17120]  ? generic_file_direct_write+0x3e0/0x3e0
[  837.231315][T17120]  ? down_write+0x16e/0x200
[  837.235810][T17120]  ? file_update_time+0x98/0x1a0
[  837.240734][T17120]  shmem_file_write_iter+0xfb/0x120
[  837.245926][T17120]  __kernel_write_iter+0x29f/0x6d0
[  837.251029][T17120]  ? vfs_read+0x990/0x990
[  837.255359][T17120]  ? get_dump_page+0x156/0x200
[  837.260126][T17120]  ? __asan_memset+0x22/0x40
[  837.264726][T17120]  ? iov_iter_bvec+0xd4/0x1b0
[  837.269396][T17120]  dump_user_range+0x418/0x840
[  837.274152][T17120]  ? dump_skip+0x40/0x40
[  837.278391][T17120]  ? dump_emit+0x78/0xe0
[  837.282630][T17120]  ? dump_emit+0xa6/0xe0
[  837.286852][T17120]  ? elf_core_dump+0x2dbb/0x37c0
[  837.291781][T17120]  elf_core_dump+0x320e/0x37c0
[  837.296549][T17120]  ? load_elf_binary+0x2850/0x2850
[  837.301664][T17120]  ? verify_lock_unused+0x140/0x140
[  837.306850][T17120]  ? __lock_acquire+0x7eb0/0x7eb0
[  837.311861][T17120]  ? mas_next_slot+0x94c/0x980
[  837.316636][T17120]  ? rcu_read_lock_any_held+0xb4/0x140
[  837.322083][T17120]  ? 0xffffffffff600000
[  837.326234][T17120]  do_coredump+0x1791/0x24a0
[  837.330823][T17120]  ? nfs_stat_to_errno+0x170/0x170
[  837.335929][T17120]  ? lock_chain_count+0x20/0x20
[  837.340768][T17120]  ? _raw_spin_unlock_irq+0x23/0x50
[  837.345971][T17120]  ? lockdep_hardirqs_on+0x98/0x150
[  837.351156][T17120]  get_signal+0x10da/0x1390
[  837.355658][T17120]  arch_do_signal_or_restart+0xc2/0x7b0
[  837.361294][T17120]  ? get_sigframe_size+0x20/0x20
[  837.366220][T17120]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  837.372206][T17120]  ? exit_to_user_mode_loop+0x3b/0x110
[  837.377671][T17120]  exit_to_user_mode_loop+0x70/0x110
[  837.382952][T17120]  exit_to_user_mode_prepare+0xee/0x180
[  837.388511][T17120]  irqentry_exit_to_user_mode+0x9/0x30
[  837.393962][T17120]  exc_page_fault+0x8c/0x100
[  837.398568][T17120]  asm_exc_page_fault+0x26/0x30
[  837.403409][T17120] RIP: 0033:0x7f9b66d9e1e1
[  837.407810][T17120] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 <c3> 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f
[  837.427414][T17120] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217
[  837.433474][T17120] RAX: 0000000000000000 RBX: 00007f9b67026090 RCX: 00007f9b66d9e1d9
[  837.441447][T17120] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000
[  837.449431][T17120] RBP: 00007f9b66e35888 R08: 0000000000000000 R09: 0000000000000000
[  837.457416][T17120] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  837.465383][T17120] R13: 00007f9b67026128 R14: 00007f9b67026090 R15: 00007ffd04e3a1c8
[  837.473361][T17120]  </TASK>
[  837.476744][T17120] memory: usage 307200kB, limit 307200kB, failcnt 29610
[  837.483704][T17120] memory+swap: usage 431944kB, limit 9007199254740988kB, failcnt 0
[  837.491631][T17120] kmem: usage 3644kB, limit 9007199254740988kB, failcnt 0
[  837.498730][T17120] Memory cgroup stats for /syz2:
[  837.499038][T17120] cache 310112256
[  837.507617][T17120] rss 724992
[  837.510912][T17120] rss_huge 0
[  837.514104][T17120] shmem 242573312
[  837.517737][T17120] mapped_file 116518912
[  837.521938][T17120] dirty 126976
[  837.525291][T17120] writeback 0
[  837.528556][T17120] workingset_refault_anon 0
[  837.533100][T17120] workingset_refault_file 0
[  837.537584][T17120] swap 127737856
[  837.541153][T17120] pgpgin 1458389
[  837.544688][T17120] pgpgout 1382500
[  837.548316][T17120] pgfault 721242
[  837.551892][T17120] pgmajfault 4
[  837.555246][T17120] inactive_anon 53415936
[  837.559465][T17120] active_anon 189775872
[  837.563636][T17120] inactive_file 0
[  837.567268][T17120] active_file 126976
[  837.571325][T17120] unevictable 67411968
[  837.575379][T17120] hierarchical_memory_limit 314572800
[  837.580753][T17120] hierarchical_memsw_limit 9223372036854771712
[  837.586886][T17120] total_cache 310112256
[  837.591073][T17120] total_rss 724992
[  837.594775][T17120] total_rss_huge 0
[  837.598470][T17120] total_shmem 242573312
[  837.602625][T17120] total_mapped_file 116518912
[  837.607282][T17120] total_dirty 126976
[  837.611193][T17120] total_writeback 0
[  837.615005][T17120] total_workingset_refault_anon 0
[  837.620005][T17120] total_workingset_refault_file 0
[  837.625028][T17120] total_swap 127737856
[  837.629074][T17120] total_pgpgin 1458389
[  837.633159][T17120] total_pgpgout 1382500
[  837.637292][T17120] total_pgfault 721242
[  837.641365][T17120] total_pgmajfault 4
[  837.645236][T17120] total_inactive_anon 53415936
[  837.649974][T17120] total_active_anon 189775872
[  837.654697][T17120] total_inactive_file 0
[  837.658830][T17120] total_active_file 126976
[  837.663239][T17120] total_unevictable 67411968
[  837.667826][T17120] anon_cost 0
[  837.671129][T17120] file_cost 0
[  837.674531][T17120] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.3307,pid=16807,uid=0
[  837.690187][T17120] Memory cgroup out of memory: Killed process 16807 (syz.2.3307) total-vm:202608kB, anon-rss:1416kB, file-rss:20708kB, shmem-rss:102016kB, UID:0 pgtables:312kB oom_score_adj:0
[  837.823289][   T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  837.832685][   T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  837.840379][   T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  837.888445][   T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  838.474400][T17123] Invalid argument reading file caps for ./file0
[  838.667044][T17118] chnl_net:caif_netlink_parms(): no params data found
[  839.253708][T17118] bridge0: port 1(bridge_slave_0) entered blocking state
[  839.261521][T17118] bridge0: port 1(bridge_slave_0) entered disabled state
[  839.268797][T17118] bridge_slave_0: entered allmulticast mode
[  839.277559][T17118] bridge_slave_0: entered promiscuous mode
[  839.286622][T17118] bridge0: port 2(bridge_slave_1) entered blocking state
[  839.294692][T17118] bridge0: port 2(bridge_slave_1) entered disabled state
[  839.302249][T17118] bridge_slave_1: entered allmulticast mode
[  839.309658][T17118] bridge_slave_1: entered promiscuous mode
[  839.662854][T17118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  839.908714][T17118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  840.034698][   T51] Bluetooth: hci3: command tx timeout
[  840.847673][T17118] team0: Port device team_slave_0 added
[  840.952056][T17118] team0: Port device team_slave_1 added
[  841.068355][T17118] batman_adv: batadv0: Adding interface: batadv_slave_0
[  841.092194][T17118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  841.164605][T17118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  841.395447][T17118] batman_adv: batadv0: Adding interface: batadv_slave_1
[  841.413178][T17118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  841.472738][T17118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  841.608425][T17187] gadgetfs: bound to dummy_udc driver
[  841.694162][T17118] hsr_slave_0: entered promiscuous mode
[  841.744236][T17118] hsr_slave_1: entered promiscuous mode
[  841.775790][T17118] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  841.801778][T17118] Cannot create hsr debugfs directory
[  841.930444][T11900] usb 1-1: new full-speed USB device number 7 using dummy_hcd
[  841.939899][    C0] gadgetfs: connected
[  841.948567][T11900] gadgetfs: disconnected
[  842.060328][   T51] Bluetooth: hci3: command tx timeout
[  842.089756][T17197] overlayfs: failed to resolve './file1': -2
[  842.203765][T10055] hsr_slave_0: left promiscuous mode
[  842.288417][T10055] hsr_slave_1: left promiscuous mode
[  842.311709][T10055] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  842.320143][T10055] batman_adv: batadv0: Removing interface: batadv_slave_0
[  842.343848][T10055] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  842.351606][T10055] batman_adv: batadv0: Removing interface: batadv_slave_1
[  842.360190][T10055] bridge_slave_1: left allmulticast mode
[  842.380108][T10055] bridge_slave_1: left promiscuous mode
[  842.388114][T10055] bridge0: port 2(bridge_slave_1) entered disabled state
[  842.404397][T10055] bridge_slave_0: left allmulticast mode
[  842.420146][T10055] bridge_slave_0: left promiscuous mode
[  842.426093][T10055] bridge0: port 1(bridge_slave_0) entered disabled state
[  842.625939][T10055] veth1_macvtap: left promiscuous mode
[  842.632821][T10055] veth0_macvtap: left promiscuous mode
[  842.638495][T10055] veth1_vlan: left promiscuous mode
[  842.660543][T10055] veth0_vlan: left promiscuous mode
[  842.789826][   T28] audit: type=1804 audit(1791837865.654:162): pid=17207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.3422" name="/newroot/359/file0" dev="fuse" ino=1 res=1 errno=0
[  842.860380][   T28] audit: type=1804 audit(1791837865.654:163): pid=17207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3422" name="/newroot/359/file0" dev="fuse" ino=1 res=1 errno=0
[  844.140600][   T51] Bluetooth: hci3: command tx timeout
[  844.510601][T11649] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  844.700230][T11649] usb 5-1: Using ep0 maxpacket: 32
[  844.723185][T11649] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  844.744616][T11649] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  844.753857][T11649] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  844.765923][T11649] usb 5-1: Product: syz
[  844.770449][T11649] usb 5-1: Manufacturer: syz
[  844.775162][T11649] usb 5-1: SerialNumber: syz
[  844.792235][T11649] usb 5-1: config 0 descriptor??
[  844.797871][T17225] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  844.811081][T11649] hub 5-1:0.0: bad descriptor, ignoring hub
[  844.817011][T11649] hub: probe of 5-1:0.0 failed with error -5
[  845.296449][T10055] team0 (unregistering): Port device team_slave_1 removed
[  845.459162][T10055] team0 (unregistering): Port device team_slave_0 removed
[  845.574125][T10055] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  845.632309][ T5809] usb 5-1: USB disconnect, device number 9
[  845.713180][T10055] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  846.039972][T17233] overlayfs: failed to resolve './file1': -2
[  846.230339][   T51] Bluetooth: hci3: command tx timeout
[  846.315080][T10055] bond0 (unregistering): Released all slaves
[  846.389256][T17215] netlink: 'syz.0.3421': attribute type 4 has an invalid length.
[  846.579231][T17239] loop4: detected capacity change from 0 to 1024
[  846.656336][T17239] EXT4-fs: Ignoring removed orlov option
[  846.748404][T17239] EXT4-fs error (device loop4): ext4_ext_check_inode:532: inode #2: comm syz.4.3428: pblk 0 bad header/extent: invalid magic - magic f300, entries 1, max 4(0), depth 0(0)
[  846.809899][T17239] EXT4-fs (loop4): get root inode failed
[  846.822000][T17239] EXT4-fs (loop4): mount failed
[  846.988695][T17118] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  846.999641][T17239] FAULT_INJECTION: forcing a failure.
[  846.999641][T17239] name failslab, interval 1, probability 0, space 0, times 0
[  847.012362][T17239] CPU: 1 PID: 17239 Comm: syz.4.3428 Not tainted syzkaller #0
[  847.019809][T17239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  847.029854][T17239] Call Trace:
[  847.033124][T17239]  <TASK>
[  847.036043][T17239]  dump_stack_lvl+0x18c/0x250
[  847.040714][T17239]  ? show_regs_print_info+0x20/0x20
[  847.045898][T17239]  ? load_image+0x420/0x420
[  847.050394][T17239]  ? __might_sleep+0xe0/0xe0
[  847.054972][T17239]  ? __lock_acquire+0x7eb0/0x7eb0
[  847.060001][T17239]  should_fail_ex+0x394/0x4c0
[  847.064692][T17239]  should_failslab+0x9/0x20
[  847.069188][T17239]  slab_pre_alloc_hook+0x59/0x300
[  847.074199][T17239]  kmem_cache_alloc+0x5a/0x2c0
[  847.078967][T17239]  ? new_userfaultfd+0x83/0x310
[  847.083851][T17239]  new_userfaultfd+0x83/0x310
[  847.088529][T17239]  ? __x64_sys_userfaultfd+0x60/0xa0
[  847.093805][T17239]  __x64_sys_userfaultfd+0x81/0xa0
[  847.098910][T17239]  do_syscall_64+0x55/0xb0
[  847.103328][T17239]  ? clear_bhb_loop+0x40/0x90
[  847.107998][T17239]  ? clear_bhb_loop+0x40/0x90
[  847.112679][T17239]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  847.118566][T17239] RIP: 0033:0x7f139ff9e1d9
[  847.122970][T17239] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  847.142582][T17239] RSP: 002b:00007f139e1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000143
[  847.150984][T17239] RAX: ffffffffffffffda RBX: 00007f13a0225fa0 RCX: 00007f139ff9e1d9
[  847.158944][T17239] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001
[  847.166904][T17239] RBP: 00007f13a0035888 R08: 0000000000000000 R09: 0000000000000000
[  847.174865][T17239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  847.182828][T17239] R13: 00007f13a0226038 R14: 00007f13a0225fa0 R15: 00007ffd1b38e7f8
[  847.190812][T17239]  </TASK>
[  847.222031][T17118] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  847.279220][T17118] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  847.309225][T17118] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  848.145191][T17118] 8021q: adding VLAN 0 to HW filter on device bond0
[  848.173557][T17261] loop4: detected capacity change from 0 to 512
[  848.250659][T17261] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  848.718674][T17118] 8021q: adding VLAN 0 to HW filter on device team0
[  848.782325][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  848.789495][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  848.841922][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  848.849134][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  849.216662][T11615] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  849.260572][   T28] audit: type=1326 audit(1791837872.124:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17281 comm="syz.0.3438" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb7f519e1d9 code=0x0
[  849.362289][   T28] audit: type=1326 audit(1791837872.234:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17281 comm="syz.0.3438" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb7f519e1d9 code=0x0
[  849.712823][T17118] 8021q: adding VLAN 0 to HW filter on device batadv0
[  849.784609][T17294] 0x000000000000-0x000000020000 : ""
[  849.865452][T17294] ftl_cs: FTL header not found.
[  850.550618][T17304] syzkaller0: entered promiscuous mode
[  850.564401][T17304] syzkaller0: entered allmulticast mode
[  851.042503][T17118] veth0_vlan: entered promiscuous mode
[  851.084318][T17118] veth1_vlan: entered promiscuous mode
[  851.205663][T17118] veth0_macvtap: entered promiscuous mode
[  851.238531][T17118] veth1_macvtap: entered promiscuous mode
[  851.312039][T17118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  851.360151][T17118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  851.383049][T17118] batman_adv: batadv0: Interface activated: batadv_slave_0
[  851.418130][T17118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  851.459481][T17118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  851.481318][T17118] batman_adv: batadv0: Interface activated: batadv_slave_1
[  851.504719][T17118] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  851.539160][T17118] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  851.560139][T17118] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  851.568873][T17118] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  851.596642][T17333] overlayfs: failed to resolve './file1': -2
[  851.857445][T10043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  851.915905][T10043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  851.928238][T17343] overlayfs: failed to resolve './file1': -2
[  852.030478][T10060] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  852.069708][T10060] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  852.182101][T17329] loop4: detected capacity change from 0 to 32768
[  852.209078][T17329] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.3446 (17329)
[  853.944856][T17329] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  854.946285][T17329] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  855.945419][T17329] BTRFS info (device loop4): setting nodatasum
[  855.960501][T17329] BTRFS info (device loop4): force zlib compression, level 3
[  855.968206][T17329] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8)
[  857.001947][T17329] BTRFS info (device loop4): use lzo compression, level 0
[  857.009164][T17329] BTRFS info (device loop4): turning on flush-on-commit
[  857.084809][T17329] BTRFS info (device loop4): enabling auto defrag
[  857.133916][T17329] BTRFS info (device loop4): max_inline at 4096
[  857.195339][T17329] BTRFS info (device loop4): using free space tree
[  857.250480][T17329] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR
[  857.253718][T17329] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR
[  857.300455][T17329] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR
[  857.366398][T17329] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR
[  857.387868][T17329] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR
[  857.436408][T17329] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR
[  857.488483][T17329] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR
[  857.531028][T17329] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[  857.715776][T17329] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[  857.759301][T17329] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR
[  857.774186][T17384] trusted_key: encrypted_key: insufficient parameters specified
[  857.870881][T17329] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[  857.871677][T17329] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[  857.914026][T17329] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  857.968164][T17399] overlayfs: failed to resolve './file1': -2
[  857.998665][T17329] BTRFS error (device loop4): open_ctree failed: -12
[  858.129004][T13375] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by udevd (13375)
[  858.423765][T17411] syzkaller0: entered promiscuous mode
[  858.440363][T17411] syzkaller0: entered allmulticast mode
[  858.530235][T17414] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3463'.
[  859.202858][T17428] overlayfs: failed to resolve './file1': -2
[  859.289381][T17432] syzkaller0: entered promiscuous mode
[  859.298781][T17432] syzkaller0: entered allmulticast mode
[  859.534712][T17446] overlayfs: failed to resolve './file1': -2
[  859.918755][T17458] loop4: detected capacity change from 0 to 1024
[  860.159593][T17464] loop7: detected capacity change from 0 to 1024
[  860.265279][T17464] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  860.291849][T10041] hfsplus: b-tree write err: -5, ino 3
[  860.325541][T17464] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  860.448562][T17464] EXT4-fs error (device loop7): ext4_map_blocks:720: inode #15: block 3: comm syz.7.3473: lblock 3 mapped to illegal pblock 3 (length 3)
[  860.523994][T17464] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  860.570874][T17464] EXT4-fs (loop7): This should not happen!! Data will be lost
[  860.570874][T17464] 
[  860.730447][T17118] EXT4-fs error (device loop7): ext4_readdir:263: inode #2: block 16: comm syz-executor: path /6/file1: bad entry in directory: rec_len is smaller than minimal - offset=876, inode=0, rec_len=0, size=1024 fake=0
[  860.809188][T17118] EXT4-fs error (device loop7): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /6/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0
[  860.867871][T17118] EXT4-fs error (device loop7): ext4_empty_dir:3179: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0
[  860.936703][T17118] EXT4-fs error (device loop7): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /6/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0
[  860.985306][T17118] EXT4-fs error (device loop7): ext4_empty_dir:3179: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0
[  861.026535][T17118] EXT4-fs error (device loop7): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /6/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0
[  861.073986][T17118] EXT4-fs error (device loop7): ext4_empty_dir:3179: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0
[  861.118862][T17118] EXT4-fs error (device loop7): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /6/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0
[  861.192320][T17118] EXT4-fs error (device loop7): ext4_empty_dir:3179: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0
[  861.617332][T17493] overlayfs: failed to resolve './file1': -2
[  862.660716][T17504] CacheFiles: No cache directory specified
[  862.803082][T17506] overlayfs: failed to resolve './file1': -2
[  863.695031][T17514] overlayfs: failed to resolve './file1': -2
[  865.507038][T10060] EXT4-fs error: 195 callbacks suppressed
[  865.507054][T10060] EXT4-fs error (device loop7): ext4_map_blocks:720: inode #15: block 8: comm kworker/u4:25: lblock 8 mapped to illegal pblock 8 (length 8)
[  865.600350][T10060] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  865.629138][T10060] EXT4-fs (loop7): This should not happen!! Data will be lost
[  865.629138][T10060] 
[  865.647575][T17539] overlayfs: failed to resolve './file1': -2
[  865.699544][T17118] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  865.797876][T10053] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  866.111963][T10053] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  866.294418][T10053] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  866.454696][T10053] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  866.664185][T17552] overlayfs: failed to resolve './file1': -2
[  868.644033][ T5773] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  868.668661][ T5773] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  868.679106][ T5773] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  868.689429][ T5773] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  868.830618][ T5773] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  868.838692][ T5773] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  870.390630][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  870.396986][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  871.005409][T17576] chnl_net:caif_netlink_parms(): no params data found
[  871.021112][ T5773] Bluetooth: hci3: command tx timeout
[  872.547185][T17576] bridge0: port 1(bridge_slave_0) entered blocking state
[  872.569398][T17576] bridge0: port 1(bridge_slave_0) entered disabled state
[  872.590659][T17576] bridge_slave_0: entered allmulticast mode
[  872.610579][T17576] bridge_slave_0: entered promiscuous mode
[  872.618598][T17576] bridge0: port 2(bridge_slave_1) entered blocking state
[  872.650980][T17576] bridge0: port 2(bridge_slave_1) entered disabled state
[  872.658199][T17576] bridge_slave_1: entered allmulticast mode
[  872.691462][T17576] bridge_slave_1: entered promiscuous mode
[  872.793033][T10053] hsr_slave_0: left promiscuous mode
[  872.848113][T10053] hsr_slave_1: left promiscuous mode
[  872.957488][T10053] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  872.994415][T10053] batman_adv: batadv0: Removing interface: batadv_slave_0
[  873.112454][ T5773] Bluetooth: hci3: command tx timeout
[  873.169041][T10053] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  873.183642][T10053] batman_adv: batadv0: Removing interface: batadv_slave_1
[  873.205047][T10053] bridge_slave_1: left allmulticast mode
[  873.220276][T10053] bridge_slave_1: left promiscuous mode
[  873.246040][T10053] bridge0: port 2(bridge_slave_1) entered disabled state
[  873.282738][T10053] bridge_slave_0: left allmulticast mode
[  873.288440][T10053] bridge_slave_0: left promiscuous mode
[  873.294796][T17649] overlayfs: failed to resolve './file1': -2
[  873.301456][T10053] bridge0: port 1(bridge_slave_0) entered disabled state
[  874.186030][T10053] veth1_macvtap: left promiscuous mode
[  874.191769][T10053] veth0_macvtap: left promiscuous mode
[  874.198021][T10053] veth1_vlan: left promiscuous mode
[  874.206749][T10053] veth0_vlan: left promiscuous mode
[  875.181052][ T5773] Bluetooth: hci3: command tx timeout
[  876.924791][T10053] team0 (unregistering): Port device team_slave_1 removed
[  876.998525][T10053] team0 (unregistering): Port device team_slave_0 removed
[  877.058844][T10053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  877.147848][T10053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  877.262888][ T5773] Bluetooth: hci3: command tx timeout
[  877.786045][T10053] bond0 (unregistering): Released all slaves
[  877.891670][T17576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  877.910362][T17659] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3510'.
[  877.922299][T17687] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3520'.
[  878.144139][T17576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  878.242968][T17576] team0: Port device team_slave_0 added
[  878.254451][T17576] team0: Port device team_slave_1 added
[  878.372581][T17576] batman_adv: batadv0: Adding interface: batadv_slave_0
[  878.381854][T17699] overlayfs: failed to resolve './file1': -2
[  878.407663][T17576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  878.494497][T17576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  878.544678][T17576] batman_adv: batadv0: Adding interface: batadv_slave_1
[  878.560385][T17576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  879.460441][T17576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  879.741586][T17576] hsr_slave_0: entered promiscuous mode
[  879.756559][T17576] hsr_slave_1: entered promiscuous mode
[  881.341847][T17576] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  881.413341][T17576] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  881.457108][T17576] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  881.515895][T17576] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  881.849606][T17743] overlayfs: failed to resolve './file1': -2
[  881.946847][T17576] 8021q: adding VLAN 0 to HW filter on device bond0
[  882.012983][T17576] 8021q: adding VLAN 0 to HW filter on device team0
[  882.053918][T10043] bridge0: port 1(bridge_slave_0) entered blocking state
[  882.061100][T10043] bridge0: port 1(bridge_slave_0) entered forwarding state
[  882.093040][T17754] netlink: 'syz.2.3534': attribute type 1 has an invalid length.
[  882.125283][T17754] 8021q: adding VLAN 0 to HW filter on device bond3
[  882.149612][T10043] bridge0: port 2(bridge_slave_1) entered blocking state
[  882.156848][T10043] bridge0: port 2(bridge_slave_1) entered forwarding state
[  882.228903][T17756] bond3: (slave gretap1): making interface the new active one
[  882.262647][T17756] bond3: (slave gretap1): Enslaving as an active interface with an up link
[  882.385694][T17576] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  884.713984][T17793] overlayfs: failed to resolve './file1': -2
[  885.577964][T17576] 8021q: adding VLAN 0 to HW filter on device batadv0
[  888.448243][T17576] veth0_vlan: entered promiscuous mode
[  888.512696][T17576] veth1_vlan: entered promiscuous mode
[  888.627265][T17576] veth0_macvtap: entered promiscuous mode
[  888.652328][T17576] veth1_macvtap: entered promiscuous mode
[  888.746526][T17576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  888.789915][T17576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  888.824065][T17576] batman_adv: batadv0: Interface activated: batadv_slave_0
[  888.900637][T17576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  888.936204][T17576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  888.972116][T17576] batman_adv: batadv0: Interface activated: batadv_slave_1
[  888.998316][T17576] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  889.020409][T17576] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  889.040177][T17576] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  889.059973][T17576] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  889.247013][T10028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  889.265442][T10028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  889.361772][T10047] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  889.412089][T10047] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  889.763395][T17860] CacheFiles: No cache directory specified
[  889.793423][T17860] overlayfs: failed to resolve './file1': -2
[  892.826143][T17863] loop8: detected capacity change from 0 to 32768
[  893.408515][T17863] jfs_strtoUCS: char2uni returned -22.
[  893.459247][T17863] charset = cp1250, char = 0x98
[  894.875641][T17916] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3559'.
[  895.769793][T17921] CacheFiles: No cache directory specified
[  895.846179][T17922] overlayfs: failed to resolve './file1': -2
[  896.596722][T17932] block2mtd: erasesize must be a divisor of device size
[  896.604840][T17932] ------------[ cut here ]------------
[  896.611343][T17932] WARNING: CPU: 1 PID: 17932 at block/bdev.c:643 blkdev_flush_mapping+0xac/0x290
[  896.622105][T17932] Modules linked in:
[  896.626047][T17932] CPU: 1 PID: 17932 Comm: syz.4.3565 Not tainted syzkaller #0
[  896.634627][T17932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  896.645183][T17932] RIP: 0010:blkdev_flush_mapping+0xac/0x290
[  896.651501][T17932] Code: 42 80 3c 28 00 74 08 4c 89 f7 e8 7f 92 cb fd 49 8b 3e 48 ba ff ff ff ff ff ff ff 7f 31 f6 e8 eb 14 a1 fd eb 11 e8 34 b1 72 fd <0f> 0b 48 85 db 75 9f e8 28 b1 72 fd 48 89 1c 24 4c 8d b3 80 00 00
[  896.671344][T17932] RSP: 0018:ffffc9000338f970 EFLAGS: 00010287
[  896.677460][T17932] RAX: ffffffff8414df7c RBX: ffff888020c9de00 RCX: 0000000000080000
[  896.685970][T17932] RDX: ffffc90018439000 RSI: 00000000000110e7 RDI: 00000000000110e8
[  896.694294][T17932] RBP: 0000000000000002 R08: ffff888020c9de3b R09: 1ffff11004193bc7
[  896.702542][T17932] R10: dffffc0000000000 R11: ffffed1004193bc8 R12: dffffc0000000000
[  896.710594][T17932] R13: dffffc0000000000 R14: ffff888020c9df34 R15: ffff888020c9de38
[  896.718602][T17932] FS:  00007f139e1f66c0(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000
[  896.727930][T17932] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  896.734645][T17932] CR2: 000000110c32fc23 CR3: 00000000245b8000 CR4: 00000000003506e0
[  896.742716][T17932] Call Trace:
[  896.746023][T17932]  <TASK>
[  896.748977][T17932]  ? blkdev_put+0x492/0x7a0
[  896.753570][T17932]  blkdev_put+0x49a/0x7a0
[  896.758457][T17932]  block2mtd_setup2+0x98f/0xe30
[  896.763498][T17932]  ? block2mtd_setup+0xd0/0xd0
[  896.768331][T17932]  ? mutex_lock_nested+0x20/0x20
[  896.773351][T17932]  ? __virt_addr_valid+0x10c/0x380
[  896.778506][T17932]  ? kernfs_fop_write_iter+0x1dc/0x520
[  896.784100][T17932]  block2mtd_setup+0x27/0xd0
[  896.788892][T17932]  param_attr_store+0x20e/0x300
[  896.793845][T17932]  ? param_attr_show+0x170/0x170
[  896.798818][T17932]  ? sysfs_kf_read+0x360/0x360
[  896.803658][T17932]  module_attr_store+0x5f/0x80
[  896.808463][T17932]  kernfs_fop_write_iter+0x3a4/0x520
[  896.813827][T17932]  vfs_write+0x474/0x9a0
[  896.818120][T17932]  ? file_end_write+0x250/0x250
[  896.823071][T17932]  ? __fget_files+0x3fc/0x460
[  896.827797][T17932]  ? __fdget_pos+0x2a3/0x330
[  896.832502][T17932]  ? ksys_write+0x74/0x260
[  896.836963][T17932]  ksys_write+0x151/0x260
[  896.841385][T17932]  ? __ia32_sys_read+0x90/0x90
[  896.846185][T17932]  ? lockdep_hardirqs_on+0x98/0x150
[  896.851464][T17932]  do_syscall_64+0x55/0xb0
[  896.855914][T17932]  ? clear_bhb_loop+0x40/0x90
[  896.861068][T17932]  ? clear_bhb_loop+0x40/0x90
[  896.865784][T17932]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  896.871859][T17932] RIP: 0033:0x7f139ff9e1d9
[  896.876306][T17932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  896.896167][T17932] RSP: 002b:00007f139e1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  896.904688][T17932] RAX: ffffffffffffffda RBX: 00007f13a0225fa0 RCX: 00007f139ff9e1d9
[  896.912746][T17932] RDX: 00000000000000b3 RSI: 0000200000000340 RDI: 0000000000000003
[  896.920785][T17932] RBP: 00007f13a0035888 R08: 0000000000000000 R09: 0000000000000000
[  896.928783][T17932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  896.936836][T17932] R13: 00007f13a0226038 R14: 00007f13a0225fa0 R15: 00007ffd1b38e7f8
[  896.944913][T17932]  </TASK>
[  896.947965][T17932] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  896.955265][T17932] CPU: 1 PID: 17932 Comm: syz.4.3565 Not tainted syzkaller #0
[  896.962740][T17932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  896.972810][T17932] Call Trace:
[  896.976103][T17932]  <TASK>
[  896.979050][T17932]  dump_stack_lvl+0x18c/0x250
[  896.983752][T17932]  ? show_regs_print_info+0x20/0x20
[  896.988969][T17932]  ? load_image+0x420/0x420
[  896.993518][T17932]  panic+0x2ca/0x720
[  896.997449][T17932]  ? bpf_jit_dump+0xd0/0xd0
[  897.001993][T17932]  __warn+0x2e0/0x470
[  897.006005][T17932]  ? blkdev_flush_mapping+0xac/0x290
[  897.011322][T17932]  ? blkdev_flush_mapping+0xac/0x290
[  897.016642][T17932]  report_bug+0x2be/0x4f0
[  897.021002][T17932]  ? blkdev_flush_mapping+0xac/0x290
[  897.026315][T17932]  ? blkdev_flush_mapping+0xac/0x290
[  897.031630][T17932]  ? blkdev_flush_mapping+0xae/0x290
[  897.036969][T17932]  handle_bug+0xcf/0x120
[  897.041224][T17932]  exc_invalid_op+0x1a/0x50
[  897.045727][T17932]  asm_exc_invalid_op+0x1a/0x20
[  897.050580][T17932] RIP: 0010:blkdev_flush_mapping+0xac/0x290
[  897.056473][T17932] Code: 42 80 3c 28 00 74 08 4c 89 f7 e8 7f 92 cb fd 49 8b 3e 48 ba ff ff ff ff ff ff ff 7f 31 f6 e8 eb 14 a1 fd eb 11 e8 34 b1 72 fd <0f> 0b 48 85 db 75 9f e8 28 b1 72 fd 48 89 1c 24 4c 8d b3 80 00 00
[  897.076076][T17932] RSP: 0018:ffffc9000338f970 EFLAGS: 00010287
[  897.082142][T17932] RAX: ffffffff8414df7c RBX: ffff888020c9de00 RCX: 0000000000080000
[  897.090110][T17932] RDX: ffffc90018439000 RSI: 00000000000110e7 RDI: 00000000000110e8
[  897.098082][T17932] RBP: 0000000000000002 R08: ffff888020c9de3b R09: 1ffff11004193bc7
[  897.106051][T17932] R10: dffffc0000000000 R11: ffffed1004193bc8 R12: dffffc0000000000
[  897.114022][T17932] R13: dffffc0000000000 R14: ffff888020c9df34 R15: ffff888020c9de38
[  897.121996][T17932]  ? blkdev_flush_mapping+0xac/0x290
[  897.127285][T17932]  ? blkdev_put+0x492/0x7a0
[  897.131785][T17932]  blkdev_put+0x49a/0x7a0
[  897.136114][T17932]  block2mtd_setup2+0x98f/0xe30
[  897.140969][T17932]  ? block2mtd_setup+0xd0/0xd0
[  897.145749][T17932]  ? mutex_lock_nested+0x20/0x20
[  897.150687][T17932]  ? __virt_addr_valid+0x10c/0x380
[  897.155804][T17932]  ? kernfs_fop_write_iter+0x1dc/0x520
[  897.161268][T17932]  block2mtd_setup+0x27/0xd0
[  897.165942][T17932]  param_attr_store+0x20e/0x300
[  897.170792][T17932]  ? param_attr_show+0x170/0x170
[  897.175725][T17932]  ? sysfs_kf_read+0x360/0x360
[  897.180486][T17932]  module_attr_store+0x5f/0x80
[  897.185246][T17932]  kernfs_fop_write_iter+0x3a4/0x520
[  897.190530][T17932]  vfs_write+0x474/0x9a0
[  897.194782][T17932]  ? file_end_write+0x250/0x250
[  897.199659][T17932]  ? __fget_files+0x3fc/0x460
[  897.204354][T17932]  ? __fdget_pos+0x2a3/0x330
[  897.208958][T17932]  ? ksys_write+0x74/0x260
[  897.213395][T17932]  ksys_write+0x151/0x260
[  897.217740][T17932]  ? __ia32_sys_read+0x90/0x90
[  897.222518][T17932]  ? lockdep_hardirqs_on+0x98/0x150
[  897.227727][T17932]  do_syscall_64+0x55/0xb0
[  897.232141][T17932]  ? clear_bhb_loop+0x40/0x90
[  897.236822][T17932]  ? clear_bhb_loop+0x40/0x90
[  897.241542][T17932]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  897.247452][T17932] RIP: 0033:0x7f139ff9e1d9
[  897.251872][T17932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  897.271513][T17932] RSP: 002b:00007f139e1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  897.279930][T17932] RAX: ffffffffffffffda RBX: 00007f13a0225fa0 RCX: 00007f139ff9e1d9
[  897.287931][T17932] RDX: 00000000000000b3 RSI: 0000200000000340 RDI: 0000000000000003
[  897.295901][T17932] RBP: 00007f13a0035888 R08: 0000000000000000 R09: 0000000000000000
[  897.303873][T17932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  897.311843][T17932] R13: 00007f13a0226038 R14: 00007f13a0225fa0 R15: 00007ffd1b38e7f8
[  897.319829][T17932]  </TASK>
[  897.323087][T17932] Kernel Offset: disabled
[  897.327513][T17932] Rebooting in 86400 seconds..