last executing test programs:

3m11.021962035s ago: executing program 3 (id=4):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442a, &(0x7f0000004480)="$eJzs3c9vVNUeAPBzb/seLQ94LY8FLzFxEkk0apqWlVoSSymUFioGhRg3w7QdoDrtkHZqXLCoOxJXJi6MC6KJu65IF27xT3DjEtckunBjQkKsmZk7be/tTDrWTivk80nonXt+z3znnjl3cTlxonJ7bik3t5QrLOTKMzeXTuc+KZeW54sh3icH3T/t6UScxP7gXDl34b3rp0P4Yfanx+vr6+uhqjs0NbTl9e+/3Z3ZemyIM3Wq7TZvba98GEI4sW1cVV0hhA++DyEKIZxN0kaTY28I4Vio512/+/mN3B6N5sGj4pn806l7a8OnJlfvr7V+71EIX5f+//qt+V9e6hr++dU96h4AAAAAAAAAAAAAAAAAgGfc+NUr194dHAoPo9C9Gm1/Xnc8ObZ6PnZ9z7zY1nifJKX/7vsGAAAAAAAAAAAAAAAAAACAf5LN5/9z0fEmz/+PJceRFvXX3+78GOmciXeujJ0fHEr2f4+25b+RJP16tiv0N9n3Pbv/+9lM/eb7v2/vZ7ca42v02xeieCB1HscDAyF8m2z8fjI6HJfKS5XXbpaXF2b3bBjPrHT867v3p6KTbOjfbvxHM+13fv///237NlXPb+zdV+y5lo5/V8ty330WtRX/c5l6+xF/di8d/+5aWu/WAiP1CaAa/y+6d47/WKb9TsX/WAghF1XHmkvNANU1TDW91XqFtHT8/1VLS02dyQfZ6vp/kon/+Uz7BzX/r2R/iGgqHf9/19J6UiU2r//+eOfr/0Km/YOIf3X8K37/25KO/6F6YneqSO2TbHf+H8+036n4X4uTcR6LUt+A1aie3ur/qyMtHf+ebfmb939xW+u/i5n6+3X/1+i3cf/XmP5fier3fzSXjn9vy3LtXv8TmXqdnv9Haus/disd/8O1tPTaua/2t934T2ba71T8a6uSnkb8N+eTPw7V07+x/mtLOv7/qSfGW0us1P7W1n/Rzuv/S5n2D2L9Vx3/StzZXp8X6fgfaVmuGv8f2/j9v5yp1/n4hzBorb9r6fgfbVmudv337Bz/qUy9Tsf/5U42DgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAMGE2OfSGKB1LncTwwEMK55PxkOBxNF2bz06XyzMdLIYwl6blwPLpVKk8XSvm5hfJsMV8olcozIZxP8k+EnmipVK7k5wt3Lmy01RvdLhYWK9PFQiWEMJ6kvxCONtqanqvMF+6EEC5u5P03Li/euV1YyM/OLb41ODg4GCY2xtAfFT+tFBcq9d7ruSFMbtTti7YMrpZ9aWMsR6KPysuLC4VSLf3yljql8kyhtKXOVJL3ZeiPKovLCzOFSjFfKt9q9HeQRpLj2MTV969eHtqWfyOqH0f3d1gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/EUPh9/8KoTQXT+LQwi5KHkRJf9SHjwqnsk/nbq3NnxqcvX+2uNmZQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiTHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzSP0oDQRQH4DdjoaXHsFp2O9sVRbRwRfAEegwPo0fxEt7BIkXaFCGQzELYP7BNUn1f82B+zLwH8wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACWe3zr3l/rJiLF1fYy4vfz7/84fy71+276/sUZZuR0nl66+4e6Kf+eRvltOVq1eZ9u1l8fMVF7P4M9Ge7TwbjP0Ny+zc3X972OlKuIaEt+k3KuqmVvAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOzYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCwAAAAAI87eOom8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4FcAAAD//0OnJ0Q=")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000d40))
rmdir(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

3m8.520947398s ago: executing program 3 (id=10):
syz_mount_image$udf(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x14444, &(0x7f0000000280)=ANY=[@ANYBLOB="696f636861727365743d6b6f69382d72752c766f6c756d653d3030303030303030303030300000000063686f723d30303030303030303030303030303030303030342c6e6f6164696e6963622c6769643d69676e6f72652c7569643d6967ee6f7200006769643dc7865530221d5cf1ffa33f314577d414dd0f02989f344aa1daf1517b816480770a92f1eaeab3d78957fc83df545faf189820845d1a3ae48728ee6ed8684b4f3acff28b7d51848813c91e8e6278a3cfa72eec120ebbc7baaaf78c062300000000000000", @ANYRESDEC, @ANYRESDEC], 0xfe, 0xc17, &(0x7f0000001180)="$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")
syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f0000000b40)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1802a53, 0x0, 0xfa, 0x0, &(0x7f00000000c0))
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x85a0d8, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000680), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}]})

3m6.32181613s ago: executing program 3 (id=15):
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000000040)='./file0\x00', 0xa1080a, &(0x7f0000000b80)=ANY=[@ANYBLOB='dmask=00000000000000000002621,utf8,umask=00000000000000000200000,namecase=1,discard,errors=remount-ro,umask=00000000000000000200004,umask=00000000000000000003377,namecase=1,utf8,iocharset=iso8859-4,allow_utime=00000000000000000000011,dmask=01777777777777777777770,errors=remount-ro,uid=', @ANYRES32=0x0, @ANYRES16, @ANYRESDEC, @ANYBLOB="a8cc8ef9f9253b216b1b0d18fac16bdd73a57826ac4b044ee988b7973d2250d39ebc1ecad595e5d7f9842d81192403ac80f2871fbf276d3aeb7f16ecb08a9161416f6512dbe50d75806bb46b66b14cc1e731effccd47569f9c206d778ae1220d73ee793b6ec3aa711dc84cc47dc497317105fdd4ccfec870ab06fd40c8ef081a1a7ba424a854bc50cd2cfedd", @ANYRES8=0x0, @ANYRES16=0x0, @ANYRES32=0x0, @ANYRES64, @ANYRES32, @ANYRESDEC], 0x21, 0x1508, &(0x7f0000001f80)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

3m4.659790954s ago: executing program 3 (id=18):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000001380)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="636865636b706f696e743d64697361626c652c6261636b67726f756e645f67633d73796e632c61636c2c616c6c6f635f6d6f64653d72657573652c696e6c696e655f78617474722c6e6f666c7573685f6d657267652c6d6f64653d6c66732c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c6167655f657874656e745f63616368652c646973636172642c6e6f696e6c696e655f64656e7472792c008bfb3c1e4b1b12ae77c937da8858"], 0x1, 0x5505, &(0x7f0000002480)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
pwritev2(r0, &(0x7f0000000100), 0x0, 0x5412, 0x4, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0)
r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
sendfile(r2, r1, 0x0, 0x80000000c)

3m3.890325891s ago: executing program 32 (id=18):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000001380)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="636865636b706f696e743d64697361626c652c6261636b67726f756e645f67633d73796e632c61636c2c616c6c6f635f6d6f64653d72657573652c696e6c696e655f78617474722c6e6f666c7573685f6d657267652c6d6f64653d6c66732c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c6167655f657874656e745f63616368652c646973636172642c6e6f696e6c696e655f64656e7472792c008bfb3c1e4b1b12ae77c937da8858"], 0x1, 0x5505, &(0x7f0000002480)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
pwritev2(r0, &(0x7f0000000100), 0x0, 0x5412, 0x4, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0)
r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
sendfile(r2, r1, 0x0, 0x80000000c)

2m54.124661609s ago: executing program 4 (id=39):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket(0xa, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0xc08, 0x3, 0x440, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {}, {}, {0xfffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4a0)
futimesat(0xffffffffffffffff, 0x0, &(0x7f0000000280)={{0x0, 0xea60}})
socket(0x10, 0x803, 0x0)

2m52.885506867s ago: executing program 4 (id=40):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_extract_tcp_res$synack(0x0, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xe, 0x0, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
pipe(&(0x7f0000000280)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x11000)
io_setup(0x3fc, &(0x7f0000000500)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000040)=[0x0])
r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
write$binfmt_elf64(r6, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46160c0eb6adbab83e000000000200060000000000d3000000000000004000000000000000ce010000000000002cf6ffff0600380001000b0009001000030000000100000400000000000000000e000000000000000180000000000000020000000000000009000000000000000100000000000000"], 0x78)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
listen(0xffffffffffffffff, 0x0)
times(0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x5, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
syz_io_uring_setup(0x5c2, 0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCADDRT(r7, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0xfffe, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e23, @rand_addr=0x64010102}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000})
syz_open_procfs(r0, &(0x7f0000000240)='clear_refs\x00')

2m51.689013757s ago: executing program 4 (id=41):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}})

2m51.413118978s ago: executing program 4 (id=42):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file1\x00', 0x804, &(0x7f0000000600)=ANY=[@ANYBLOB='shortname=win95,shortname=lower,utf8=1,uni_xlate=1,shortname=mixed,flush,time_offset=0x00000000000001a0,uni_xlate=1,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c636f6465706167653d3835352c636865636b3d7374726963742c757466383d302c73686f72746e616d653d6d697865642c696f636861727365743d6d616363656c7469632c73686f72746e616d653d6c6f7765722c726f6469722c00e5d3a4216dd4e113f2eb7462cb84d40206576f31a6f48c8c7880727e817f15d6c9c75abb251640ec31263017d362c211c16d2e5b79c7790e82c8f11af841899d581cbc935e61dc387c495b64143b0542dedeb888c8af5044a7030a50563a418f4beb3235cd45d3f239d52347326f1f808ad83c59fbcfd85f537f03f601dd2764a6efbb096229c62957974684262d8b5ef497a9eb9fcbb2757e0bc267f2e199f2c05bb7dbdcb3b7dd43e67190f239096b689d4daff037ff291949b3fb14577e3740ebb5"], 0x1, 0x28a, &(0x7f00000008c0)="$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")
sched_setscheduler(0x0, 0x2, 0x0)
open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x1)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./bus\x00', 0x0, 0x1c10, 0x0)
r0 = open(&(0x7f0000000400)='./bus\x00', 0xc40, 0x0)
ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000080)=0x3f)
open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc)

2m50.017765174s ago: executing program 4 (id=50):
openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x1)
r0 = open(&(0x7f0000000040)='./file2\x00', 0x0, 0xf3)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x4c06, 0x3)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
lseek(r1, 0x2, 0x2)
ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000840)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])

2m48.605528211s ago: executing program 1 (id=54):
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xca, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x8, 0x34, 0x8, 0x8, &(0x7f0000000640)}}, 0x10)
sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x40448a0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x340}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000500)='q', 0x1}, {&(0x7f0000000540)}, {&(0x7f0000000600)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19c3898aca95be", 0x8b}, {&(0x7f00000006c0)="138b9f8300af1d793c8e", 0xa}, {0x0}, {0x0}], 0x6}}], 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x0, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"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"})
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

2m47.609858721s ago: executing program 4 (id=56):
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x107000, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000080), 0x4a)
sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
close(r1)

2m46.958327006s ago: executing program 33 (id=56):
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x107000, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000080), 0x4a)
sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
close(r1)

2m46.928983221s ago: executing program 1 (id=59):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_IO(r0, 0x2285, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x0, 0x7}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time={0xffff}, {}, {}, @quote}], 0x38)
write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x20, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {0xfc}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {0xfd}, {}, @connect}], 0xc4)
write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xc4)
write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54)
write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4)
write$sndseq(r1, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @tick=0x8}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x8c)
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x54)
write$sndseq(r1, &(0x7f0000000f80)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xa8)
write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x8c)
write$sndseq(r1, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time={0x7f, 0x4}, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time={0x9, 0x308}, {}, {0xfd}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x8c)

2m46.622684016s ago: executing program 1 (id=60):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000050}, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
socket$inet6(0xa, 0x3, 0x7)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
sync()
sync()
sync()
sync()
sync()
sync()
sync()
sync()
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x27800000000, 0x0, 0x1, 0xffffffffffffffff, 0x1})
r2 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)

2m44.736405364s ago: executing program 1 (id=64):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000001c0)=0xcad0, 0x4)

2m44.422525361s ago: executing program 1 (id=66):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f00000059c0)=ANY=[@ANYBLOB="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"], 0x5, 0x5505, &(0x7f0000000340)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x41)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
fallocate(r0, 0x0, 0x800003d, 0x7ff)
lseek(r0, 0xcbb, 0x3)

2m42.666854078s ago: executing program 1 (id=70):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004180)=@newtaction={0x894, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x101, 0x1000, 0x800, 0x5ff, 0xfff, 0x7fff, 0x3a9a, 0xfff, 0xfffffffa, 0x6, 0x2, 0x8001, 0xdc, 0x1, 0x8, 0x4, 0x3, 0x5242, 0x0, 0x114e, 0x9, 0x6, 0x101, 0x3, 0xff, 0x7ff, 0xfffffffb, 0x80000000, 0x6177d997, 0xb63b8771, 0x1, 0xc, 0x1, 0x123a9273, 0x4, 0xff, 0x5, 0x100, 0x9, 0x5, 0x6, 0x4, 0x20, 0x4, 0x0, 0x9, 0x7ff, 0x3, 0x1, 0x7, 0x7, 0xd, 0xfffffffd, 0x7, 0x488, 0xc, 0xf74d, 0x8, 0x3d, 0x401, 0x5, 0x1, 0x7ff, 0x3, 0x9, 0xc, 0x3ff, 0x4139df5d, 0x1, 0xfffffff7, 0x1, 0x2, 0x1, 0x0, 0x8000, 0x0, 0x2, 0x100, 0x66, 0x3, 0x5, 0x2, 0x200, 0x9, 0x76, 0x4, 0xfffffff8, 0x4, 0x9, 0xfffffffe, 0x0, 0xf9, 0x9, 0x4ade, 0x2, 0x4000008, 0x4, 0xff, 0x0, 0x1, 0x800, 0x2bc, 0xffff, 0x7fff, 0x3b0a, 0x2, 0x0, 0x3, 0x200, 0x2, 0x9, 0x6, 0x9, 0x4, 0xc34d, 0x80000000, 0x50, 0x8, 0x3, 0xe, 0x6, 0x4, 0x4, 0x3, 0xe256, 0x80000000, 0xb, 0x7, 0x3, 0x5, 0x7, 0x5, 0x6, 0x6, 0x200, 0x7, 0xffffffff, 0x2, 0x5, 0xce3, 0x10c, 0x8000, 0x8, 0x6, 0x2, 0x7ff, 0x5, 0x6, 0xaa, 0x8, 0x1, 0x8, 0x4, 0x9, 0x3000, 0x3ff, 0x7, 0x40, 0x1, 0x4, 0x0, 0x8, 0x10000, 0x8, 0x7, 0x3, 0x4, 0x7fff, 0x6, 0x3, 0x7, 0x5, 0x2, 0x5, 0x9, 0x1, 0x0, 0x7, 0x5, 0x7, 0x0, 0x80000001, 0x9, 0x6, 0xfff, 0x5e, 0x7fff, 0x6, 0xa159, 0x4, 0x1, 0x7, 0x4, 0x2, 0x8, 0x80, 0xfffffffc, 0x9e, 0x61aa91f9, 0x7, 0x81, 0xffff21e7, 0x4, 0x6, 0x9, 0x5, 0x3, 0x4ea, 0xfffffffd, 0x6d1, 0x8, 0x5, 0x6, 0x3, 0x6, 0x8, 0xfffffffb, 0x8, 0x1, 0xffff, 0x6, 0xfa9, 0x8, 0x10000, 0x2, 0x5635, 0x3ff, 0x3, 0x200, 0xedc, 0x8, 0x7, 0xd, 0xea1, 0xbef, 0x9, 0x3, 0xffff0000, 0x4, 0x335e, 0x3, 0xffffffff, 0x210f993b, 0x5, 0x6, 0x7, 0x6, 0x9, 0x2e6, 0xb, 0x0, 0x6, 0xffffffff, 0x2947, 0x8, 0x2]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xd616, 0x0, 0x8, 0x2, 0x67, {0x5, 0x0, 0x7, 0x9, 0x101, 0xffffffff}, {0x9, 0x0, 0x6, 0x40, 0x3, 0x2}, 0xffffffff, 0x80000000, 0x100}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0xd, 0x8, 0x2, 0x5, 0x6, 0x7ff, 0x1, 0x9, 0x4ff, 0x7, 0x4, 0x4, 0x6, 0x0, 0x0, 0x3ff, 0x100, 0x4, 0x5e9, 0x8, 0x5, 0x9, 0x401, 0x2, 0x2000, 0x6, 0x0, 0x401, 0x4, 0x1, 0x7, 0x2, 0x4, 0x8, 0x9, 0x93e, 0x6, 0x9, 0x4, 0x8, 0x80000000, 0x9d86, 0x10, 0x8, 0x8, 0x80000000, 0x9, 0x2, 0x6, 0x5dc4, 0x2, 0x0, 0x1, 0xc4c, 0x6, 0x6, 0x1, 0x7, 0x3, 0x7ff, 0x3, 0x1, 0x6, 0x4, 0x7, 0x1, 0x80, 0x9, 0x4, 0x7, 0x5, 0x8, 0xfd, 0x7, 0xf68, 0x7, 0x9, 0x0, 0x8, 0x101, 0x4, 0x3e0, 0xcfb4, 0x0, 0x5, 0x38c, 0xa, 0xfffffff2, 0x29, 0x101, 0x2, 0xc24, 0x3, 0x5, 0x2, 0x0, 0x1, 0x9, 0x2d98, 0x18c9, 0x101, 0x788, 0x1, 0xb, 0x8, 0x2, 0x0, 0x0, 0x40, 0x8, 0x0, 0x0, 0x5, 0x9, 0x8, 0x81, 0x214, 0x6, 0x6, 0x3, 0x5, 0x7fffffff, 0x2, 0xb3, 0x9, 0x4, 0x1, 0x0, 0x2, 0x6, 0x73, 0xb, 0x6, 0xd43, 0x6, 0x3, 0x5909, 0x7, 0x7ff, 0xfffffff7, 0x5, 0x1, 0x2, 0x7, 0x3, 0x9e, 0x6, 0xc8, 0x401, 0x3, 0x79, 0x2, 0x800, 0x7, 0x4, 0x0, 0xd7f8, 0x6, 0x3, 0x7, 0x3, 0xd88, 0x4, 0x3, 0x29, 0x7, 0x8, 0x4, 0x3, 0x5, 0x5, 0x9, 0x7045, 0x0, 0x6, 0x10000, 0x4, 0x7, 0x10000, 0x3, 0x6, 0x3, 0x1, 0x23, 0xdfe, 0x3, 0x9, 0xd6, 0x1, 0x101, 0x4, 0x9, 0xffff, 0x1000, 0x3f9c, 0x8, 0x1, 0xb2, 0xe7, 0x8, 0x5, 0x6, 0xfff, 0x7fff, 0x6, 0x9, 0x47b6d07, 0x80, 0xfffffff2, 0xffffffff, 0x8, 0x0, 0x10000, 0x6, 0x5, 0x80000000, 0x8, 0x1ff, 0x1, 0x8c, 0x33, 0x6b09, 0x80000000, 0x0, 0x7, 0x8, 0x7ff, 0xb, 0x5, 0x80, 0xc, 0xb29, 0x0, 0x40, 0x80000001, 0x3, 0xffff, 0x101, 0x100, 0x0, 0x9, 0xfffffffa, 0xe2, 0x4, 0x10000, 0xffffffff, 0x22000000, 0x6, 0xbb, 0xa, 0x3, 0x2, 0xbb9, 0xf, 0xffffffff]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xffffffff}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x894}, 0x1, 0x0, 0x0, 0x44090}, 0x2400c810)
r1 = syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x82c0)
read$usbmon(r1, 0x0, 0x0)
r2 = syz_open_dev$usbfs(&(0x7f0000000340), 0xffffffffffffffff, 0x20b82)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r3 = creat(&(0x7f0000000140)='./bus\x00', 0xc)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0)
r4 = userfaultfd(0x80801)
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
write$cgroup_int(r3, &(0x7f0000000540), 0xfffffdd8)
madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r5)
r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount_setattr(r6, &(0x7f0000000000)='.\x00', 0x8000, &(0x7f0000001dc0)={0x81, 0x7, 0x0, {r6}}, 0x20)
openat$incfs(r6, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3)
ioctl$USBDEVFS_DROP_PRIVILEGES(r2, 0x4004551e, 0x0)
syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x44680)

2m27.451238656s ago: executing program 34 (id=70):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004180)=@newtaction={0x894, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x101, 0x1000, 0x800, 0x5ff, 0xfff, 0x7fff, 0x3a9a, 0xfff, 0xfffffffa, 0x6, 0x2, 0x8001, 0xdc, 0x1, 0x8, 0x4, 0x3, 0x5242, 0x0, 0x114e, 0x9, 0x6, 0x101, 0x3, 0xff, 0x7ff, 0xfffffffb, 0x80000000, 0x6177d997, 0xb63b8771, 0x1, 0xc, 0x1, 0x123a9273, 0x4, 0xff, 0x5, 0x100, 0x9, 0x5, 0x6, 0x4, 0x20, 0x4, 0x0, 0x9, 0x7ff, 0x3, 0x1, 0x7, 0x7, 0xd, 0xfffffffd, 0x7, 0x488, 0xc, 0xf74d, 0x8, 0x3d, 0x401, 0x5, 0x1, 0x7ff, 0x3, 0x9, 0xc, 0x3ff, 0x4139df5d, 0x1, 0xfffffff7, 0x1, 0x2, 0x1, 0x0, 0x8000, 0x0, 0x2, 0x100, 0x66, 0x3, 0x5, 0x2, 0x200, 0x9, 0x76, 0x4, 0xfffffff8, 0x4, 0x9, 0xfffffffe, 0x0, 0xf9, 0x9, 0x4ade, 0x2, 0x4000008, 0x4, 0xff, 0x0, 0x1, 0x800, 0x2bc, 0xffff, 0x7fff, 0x3b0a, 0x2, 0x0, 0x3, 0x200, 0x2, 0x9, 0x6, 0x9, 0x4, 0xc34d, 0x80000000, 0x50, 0x8, 0x3, 0xe, 0x6, 0x4, 0x4, 0x3, 0xe256, 0x80000000, 0xb, 0x7, 0x3, 0x5, 0x7, 0x5, 0x6, 0x6, 0x200, 0x7, 0xffffffff, 0x2, 0x5, 0xce3, 0x10c, 0x8000, 0x8, 0x6, 0x2, 0x7ff, 0x5, 0x6, 0xaa, 0x8, 0x1, 0x8, 0x4, 0x9, 0x3000, 0x3ff, 0x7, 0x40, 0x1, 0x4, 0x0, 0x8, 0x10000, 0x8, 0x7, 0x3, 0x4, 0x7fff, 0x6, 0x3, 0x7, 0x5, 0x2, 0x5, 0x9, 0x1, 0x0, 0x7, 0x5, 0x7, 0x0, 0x80000001, 0x9, 0x6, 0xfff, 0x5e, 0x7fff, 0x6, 0xa159, 0x4, 0x1, 0x7, 0x4, 0x2, 0x8, 0x80, 0xfffffffc, 0x9e, 0x61aa91f9, 0x7, 0x81, 0xffff21e7, 0x4, 0x6, 0x9, 0x5, 0x3, 0x4ea, 0xfffffffd, 0x6d1, 0x8, 0x5, 0x6, 0x3, 0x6, 0x8, 0xfffffffb, 0x8, 0x1, 0xffff, 0x6, 0xfa9, 0x8, 0x10000, 0x2, 0x5635, 0x3ff, 0x3, 0x200, 0xedc, 0x8, 0x7, 0xd, 0xea1, 0xbef, 0x9, 0x3, 0xffff0000, 0x4, 0x335e, 0x3, 0xffffffff, 0x210f993b, 0x5, 0x6, 0x7, 0x6, 0x9, 0x2e6, 0xb, 0x0, 0x6, 0xffffffff, 0x2947, 0x8, 0x2]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xd616, 0x0, 0x8, 0x2, 0x67, {0x5, 0x0, 0x7, 0x9, 0x101, 0xffffffff}, {0x9, 0x0, 0x6, 0x40, 0x3, 0x2}, 0xffffffff, 0x80000000, 0x100}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0xd, 0x8, 0x2, 0x5, 0x6, 0x7ff, 0x1, 0x9, 0x4ff, 0x7, 0x4, 0x4, 0x6, 0x0, 0x0, 0x3ff, 0x100, 0x4, 0x5e9, 0x8, 0x5, 0x9, 0x401, 0x2, 0x2000, 0x6, 0x0, 0x401, 0x4, 0x1, 0x7, 0x2, 0x4, 0x8, 0x9, 0x93e, 0x6, 0x9, 0x4, 0x8, 0x80000000, 0x9d86, 0x10, 0x8, 0x8, 0x80000000, 0x9, 0x2, 0x6, 0x5dc4, 0x2, 0x0, 0x1, 0xc4c, 0x6, 0x6, 0x1, 0x7, 0x3, 0x7ff, 0x3, 0x1, 0x6, 0x4, 0x7, 0x1, 0x80, 0x9, 0x4, 0x7, 0x5, 0x8, 0xfd, 0x7, 0xf68, 0x7, 0x9, 0x0, 0x8, 0x101, 0x4, 0x3e0, 0xcfb4, 0x0, 0x5, 0x38c, 0xa, 0xfffffff2, 0x29, 0x101, 0x2, 0xc24, 0x3, 0x5, 0x2, 0x0, 0x1, 0x9, 0x2d98, 0x18c9, 0x101, 0x788, 0x1, 0xb, 0x8, 0x2, 0x0, 0x0, 0x40, 0x8, 0x0, 0x0, 0x5, 0x9, 0x8, 0x81, 0x214, 0x6, 0x6, 0x3, 0x5, 0x7fffffff, 0x2, 0xb3, 0x9, 0x4, 0x1, 0x0, 0x2, 0x6, 0x73, 0xb, 0x6, 0xd43, 0x6, 0x3, 0x5909, 0x7, 0x7ff, 0xfffffff7, 0x5, 0x1, 0x2, 0x7, 0x3, 0x9e, 0x6, 0xc8, 0x401, 0x3, 0x79, 0x2, 0x800, 0x7, 0x4, 0x0, 0xd7f8, 0x6, 0x3, 0x7, 0x3, 0xd88, 0x4, 0x3, 0x29, 0x7, 0x8, 0x4, 0x3, 0x5, 0x5, 0x9, 0x7045, 0x0, 0x6, 0x10000, 0x4, 0x7, 0x10000, 0x3, 0x6, 0x3, 0x1, 0x23, 0xdfe, 0x3, 0x9, 0xd6, 0x1, 0x101, 0x4, 0x9, 0xffff, 0x1000, 0x3f9c, 0x8, 0x1, 0xb2, 0xe7, 0x8, 0x5, 0x6, 0xfff, 0x7fff, 0x6, 0x9, 0x47b6d07, 0x80, 0xfffffff2, 0xffffffff, 0x8, 0x0, 0x10000, 0x6, 0x5, 0x80000000, 0x8, 0x1ff, 0x1, 0x8c, 0x33, 0x6b09, 0x80000000, 0x0, 0x7, 0x8, 0x7ff, 0xb, 0x5, 0x80, 0xc, 0xb29, 0x0, 0x40, 0x80000001, 0x3, 0xffff, 0x101, 0x100, 0x0, 0x9, 0xfffffffa, 0xe2, 0x4, 0x10000, 0xffffffff, 0x22000000, 0x6, 0xbb, 0xa, 0x3, 0x2, 0xbb9, 0xf, 0xffffffff]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xffffffff}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x894}, 0x1, 0x0, 0x0, 0x44090}, 0x2400c810)
r1 = syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x82c0)
read$usbmon(r1, 0x0, 0x0)
r2 = syz_open_dev$usbfs(&(0x7f0000000340), 0xffffffffffffffff, 0x20b82)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r3 = creat(&(0x7f0000000140)='./bus\x00', 0xc)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0)
r4 = userfaultfd(0x80801)
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
write$cgroup_int(r3, &(0x7f0000000540), 0xfffffdd8)
madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r5)
r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount_setattr(r6, &(0x7f0000000000)='.\x00', 0x8000, &(0x7f0000001dc0)={0x81, 0x7, 0x0, {r6}}, 0x20)
openat$incfs(r6, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3)
ioctl$USBDEVFS_DROP_PRIVILEGES(r2, 0x4004551e, 0x0)
syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x44680)

43.89558329s ago: executing program 0 (id=330):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000780)=0x1, 0x4)

43.20191613s ago: executing program 0 (id=331):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x2, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f0000000000)='./bus\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
openat(0xffffffffffffffff, 0x0, 0x200000, 0x40)
pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
sendfile(r1, r1, 0x0, 0xe3aa6ea)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x6c7e, 0x100000002, 0x1000000000000000, 0x4})
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000140)=0x7f)
fgetxattr(0xffffffffffffffff, &(0x7f0000000080)=@known='system.sockprotoname\x00', 0x0, 0x6)
syz_usb_connect(0x3, 0x10e, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006a249f08ec1888323a3f010203010902fc0001870000000904e67e350e010000062404", @ANYRESHEX], 0x0)

39.840731698s ago: executing program 0 (id=340):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x101002, 0x0)
sendfile(r0, r1, 0x0, 0x20fffe82)
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140))

38.322237912s ago: executing program 7 (id=345):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x8}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000080)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd29, 0x25dfdbfb, {0xa, 0x80, 0x80, 0x3}, [@RTA_DPORT={0x6, 0x1d, 0x4e21}, @RTA_NH_ID={0x5, 0x1e, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040814}, 0x40000)

38.107835244s ago: executing program 7 (id=346):
unshare(0x2040400)
r0 = syz_io_uring_setup(0x953, &(0x7f0000000b40)={0x0, 0xecca, 0x0, 0xfffffffd}, &(0x7f0000000280)=<r1=>0x0, &(0x7f0000000040))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
io_uring_enter(r0, 0x6, 0x464f, 0x0, 0x0, 0x0)

38.064751133s ago: executing program 0 (id=347):
syz_open_dev$usbmon(&(0x7f0000000140), 0x3c, 0x4000)

37.754671588s ago: executing program 7 (id=350):
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
sendmsg$inet6(r0, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x4e20, 0x2, @mcast1, 0x9}, 0x1c, &(0x7f0000000200)=[{&(0x7f00000001c0)="8000e8be", 0x4}, {&(0x7f0000000340)="cb779a9952", 0x5}], 0x2}, 0x404c840)

37.518804596s ago: executing program 7 (id=351):
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'syztnl1\x00', 0x0})
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @ptr, @struct={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, 0x0, 0x3e}, 0x20)
connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e24, 0x81, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1e}}, 0x7}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x80, 0x20000008b}, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0000}]})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x33, &(0x7f0000000000)=0xfffffffe, 0x56)
bind$inet6(r5, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c)
connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c)
setsockopt$inet6_opts(r5, 0x29, 0x3b, &(0x7f0000000700)=ANY=[], 0x8)
close_range(r4, 0xffffffffffffffff, 0x0)

37.484252563s ago: executing program 0 (id=352):
select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0xffffffffffbffffc, 0x7cee, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"], 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r0 = socket(0x2, 0x3, 0x1)
connect$unix(r0, &(0x7f0000000000), 0x10)
write(r0, &(0x7f0000000140)="33e8fb9dfa5a94cfa943e7662f41f28418d35c45", 0x14)

36.961570698s ago: executing program 0 (id=354):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000240)="67400f07c40249af4b8bb9800000c00f3235010000000f300f20a366450f769e00000100440f20c03588001d00440f22c0460f01c9c4827d24c366bafc0cf0ff07ef87f345a57a43e16806a4", 0x4c}], 0x1, 0x7c, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close(r5)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e488a8637286dd"], 0xb2)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv6_newrule={0x40, 0x20, 0x1, 0x70bd23, 0x0, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FRA_SRC={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x2}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0xfffffff8}]}, 0x40}, 0x1, 0x0, 0x0, 0x24048844}, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0)
write$tun(r6, &(0x7f0000002680)={@void, @val={0x1, 0x83, 0x8, 0xe057, 0x19, 0x9}, @ipv6=@icmpv6={0x6, 0x6, "004dda", 0xfb8, 0x3a, 0x1, @private2, @loopback, {[@fragment={0x2, 0x0, 0x0, 0x0, 0x0, 0xf, 0x66}, @fragment={0x1d, 0x0, 0x0, 0x1, 0x0, 0x3, 0x67}, @srh={0x1d, 0x0, 0x4, 0x0, 0x5, 0x18, 0x1}], @dest_unreach={0x1, 0x0, 0x0, 0x6a, '\x00', {0x4, 0x6, "41035e", 0x8, 0x0, 0x1, @local, @private2={0xfc, 0x2, '\x00', 0x1}, [@srh={0x33, 0x0, 0x4, 0x0, 0x5, 0x0, 0x2}, @routing={0x2b, 0x0, 0x1, 0x3c}, @hopopts={0x8}], "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"}}}}}, 0xfea)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0x9, 0x7, 0x6, 0x7fffffff, 0x7, 0xf, 0xe5, 0x7, 0xfffffffffffffc00, 0x80000001, 0x3, 0x8, 0x0, 0x5, 0x9, 0x84], 0xeeef0000, 0x28010})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_int(r8, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r8, &(0x7f0000000300)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, &(0x7f0000000340)=[@mss={0x2, 0x4}, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r8, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0)

35.564270794s ago: executing program 7 (id=358):
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x326}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000200)="449d060721b9e6bb51f2f6f20504", 0x0, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)

35.066066554s ago: executing program 7 (id=363):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@fwd={0x2}]}, {0x0, [0x5f, 0x2e, 0x2e]}}, 0x0, 0x29}, 0x28)
r3 = fsopen(0x0, 0x0)
r4 = fsmount(r3, 0x1, 0x0)
fchdir(r4)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4090)
ptrace$cont(0x21, r0, 0x9, 0x5)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x8}, @func_proto]}}, 0x0, 0x32}, 0x28)

21.735819224s ago: executing program 35 (id=354):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000240)="67400f07c40249af4b8bb9800000c00f3235010000000f300f20a366450f769e00000100440f20c03588001d00440f22c0460f01c9c4827d24c366bafc0cf0ff07ef87f345a57a43e16806a4", 0x4c}], 0x1, 0x7c, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close(r5)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e488a8637286dd"], 0xb2)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv6_newrule={0x40, 0x20, 0x1, 0x70bd23, 0x0, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FRA_SRC={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x2}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0xfffffff8}]}, 0x40}, 0x1, 0x0, 0x0, 0x24048844}, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0)
write$tun(r6, &(0x7f0000002680)={@void, @val={0x1, 0x83, 0x8, 0xe057, 0x19, 0x9}, @ipv6=@icmpv6={0x6, 0x6, "004dda", 0xfb8, 0x3a, 0x1, @private2, @loopback, {[@fragment={0x2, 0x0, 0x0, 0x0, 0x0, 0xf, 0x66}, @fragment={0x1d, 0x0, 0x0, 0x1, 0x0, 0x3, 0x67}, @srh={0x1d, 0x0, 0x4, 0x0, 0x5, 0x18, 0x1}], @dest_unreach={0x1, 0x0, 0x0, 0x6a, '\x00', {0x4, 0x6, "41035e", 0x8, 0x0, 0x1, @local, @private2={0xfc, 0x2, '\x00', 0x1}, [@srh={0x33, 0x0, 0x4, 0x0, 0x5, 0x0, 0x2}, @routing={0x2b, 0x0, 0x1, 0x3c}, @hopopts={0x8}], "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"}}}}}, 0xfea)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0x9, 0x7, 0x6, 0x7fffffff, 0x7, 0xf, 0xe5, 0x7, 0xfffffffffffffc00, 0x80000001, 0x3, 0x8, 0x0, 0x5, 0x9, 0x84], 0xeeef0000, 0x28010})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_int(r8, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r8, &(0x7f0000000300)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, &(0x7f0000000340)=[@mss={0x2, 0x4}, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r8, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0)

19.458236482s ago: executing program 36 (id=363):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@fwd={0x2}]}, {0x0, [0x5f, 0x2e, 0x2e]}}, 0x0, 0x29}, 0x28)
r3 = fsopen(0x0, 0x0)
r4 = fsmount(r3, 0x1, 0x0)
fchdir(r4)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4090)
ptrace$cont(0x21, r0, 0x9, 0x5)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x8}, @func_proto]}}, 0x0, 0x32}, 0x28)

13.356122345s ago: executing program 5 (id=415):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x800000, &(0x7f0000000100)={[{@bh}, {@delalloc}, {@oldalloc}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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")
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdir(&(0x7f0000000080)='./bus\x00', 0x3)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x40000, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, 0x0)
madvise(&(0x7f000014b000/0xc00000)=nil, 0xc00000, 0x15)

12.036624648s ago: executing program 5 (id=417):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'veth0_to_batadv\x00', {0x1}, 0x2a})
r3 = socket$inet6(0xa, 0x3, 0x8000000003c)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)

10.77893156s ago: executing program 5 (id=420):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000440)={'filter\x00', 0xb001, 0x4, 0x3e0, 0x130, 0x0, 0x220, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0xff]}}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x101, 0x8, 0xd590}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x10}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)

10.544857571s ago: executing program 5 (id=421):
r0 = socket(0xa, 0x3, 0xff)
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x80000000, 0x4)
recvmmsg(r0, &(0x7f00000016c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=""/139, 0x8b}, 0x7}], 0x1, 0x40000102, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c89000c2c0120010000000000000000000000000001fe8000000000000000000000000000aaff"], 0x0)

9.325537767s ago: executing program 5 (id=422):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000080)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd29, 0x25dfdbfb, {0xa, 0x80, 0x80, 0x3}, [@RTA_DPORT={0x6, 0x1d, 0x4e21}, @RTA_NH_ID={0x5, 0x1e, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040814}, 0x40000)

8.916784027s ago: executing program 5 (id=423):
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
unshare(0x62000000)
r0 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000100)={'mangle\x00', 0x0, [0x9, 0x6, 0x8, 0x209, 0x2]}, &(0x7f0000000180)=0x54)

5.985792083s ago: executing program 6 (id=426):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x48)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x4, 0x3fa, &(0x7f00000004c0)="$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")
r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r4, 0x4, 0x6000)
io_setup(0x202, &(0x7f0000000200)=<r5=>0x0)
io_submit(r5, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x4000, 0xa00}])

4.804297912s ago: executing program 6 (id=428):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = socket$inet6(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd27, 0x25dfdbfd, {0x2, 0x0, 0x90, 0xcb, r3}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010102}, @IFA_FLAGS={0x8, 0x8, 0x100}, @IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_RT_PRIORITY={0x8, 0x9, 0x4}, @IFA_ADDRESS={0x8, 0x1, @remote}, @IFA_RT_PRIORITY={0x8, 0x9, 0x103}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0)
sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)

4.695593564s ago: executing program 2 (id=429):
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0)
ppoll(&(0x7f0000000180)=[{r0, 0x2809}], 0x1, 0x0, 0x0, 0xee)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x0, 0xfffffffc, 0x900, 0x48, 0x0, "7a58beca3900000000000000000000000200"})

4.42081186s ago: executing program 6 (id=430):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
ptrace$ARCH_GET_GS(0x1e, r0, &(0x7f0000000100), 0x1004)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfbffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
socket$unix(0x1, 0x2, 0x0)
r3 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$read(0x1d, r3, 0x0, 0x0)
keyctl$KEYCTL_MOVE(0x1e, r3, 0xfffffffffffffffe, r3, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./bus\x00', 0x800802, &(0x7f0000000100)={[{@dmask={'dmask', 0x3d, 0x7}}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@errors_continue}, {@umask={'umask', 0x3d, 0x2}}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@fmask={'fmask', 0x3d, 0x5}}, {@namecase}, {@sys_tz}, {@fmask={'fmask', 0x3d, 0x7}}, {@discard}]}, 0x1, 0x152e, &(0x7f0000000380)="$eJzs3AuYjtX6MPD7Xms9Y0zS2ySHYa11P7xJLJMkOSTJIUmSJMkpIWmSLQmJIaekSRJyHJLDEJLDxKRxPp8PCUnSJElITsn6LuFTu/p2+7/3f/uuPffvup7Lut/13OtZ73s/7/uu5zEz33YaVL1hjSr1iQj+JXjhn2QAiAWA/gBwDQAEAFAmvkz8+f6cEpP/tYOwf6+H0670DNiVxPXP3rj+2RvXP3vj+mdvXP/sjeufvXH9szeuP2PZ2capBa7lLftufP//v1/dP+3h7///IlklR3+5uuT1nQFi/moK1z974/r/1wr+yk5c/+yN659dxV7pCbD/D/D7PzvI8ac9XP/sjevPWHZ2pe8/X+kNItn7NbjS5x9jjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMsezhlL9MAcCl9pWeF2OMMcYYY4wxxv59fI4rPQPGGGOMMcYYY4z970MQIEFBADGQA2IhJ8SBAICrITdcAxG4FuLhOsgD10NeyAf5oQAkQEEoBBoMWCAIoTAUgSjcAEXhRigGN0FxKAEOSkIi3Ayl4BYoDbdCGbgNysLtUA7KQwWoCHdAJbgTKsNdUAXuhqpQDapDDbgHasK9UAvug9pwP9SBB6AuPAj14CGoDw9DA3gEGsKj0Ageg8bQBJpCM2j+P8p/EbrBS9AdekAy9IRe8DL0hj7QF/pBf3gFBsCrMBBegxR4HQbBGzAY3oQh8BYMhWEwHN6GETASRsFoGANjIRXGwXh4BybAuzARJsFkmAJpMBWmwXswHWbATHgfZsEHMBvmwFyYB+nwIcyHBZABH8FC+BgyYREshiWwFJbBclgBK2EVrIY1sBbWwXrYABthE2yGLbAVtsF2+AR2wKewE3bBbvgM9sDn/2T+yb/L74yAgAIFKlQYgzEYi7EYh3GYC3NhbsyNEYxgPMZjHsyDeTEv5sf8mIAJWAgLoUGDhISFsTBGMYpFsSgWw2JYHIujQ4eJmIil8BYsjaWxDJbBslgWy2F5LI8VsSJWwkpYGStjFayCVbEqVsfqeA/egz2xFtbC2lgb62CdS7ensD7WxwbYABtiQ2yEjbAxNsam2BSbY3NsgS2wJbbE1tga22AbbIttMQmTsB22w/bYHjtgB+yIHbETdsLO2AW7ZL2YA/AlfAl7YFXRE3thL+yNKTn6Yj/sh6/gAHwVX8XXMAVfx0H4Br6Bb+IQPIFDcRgOx+FYSYzEUTgaSYzFVEzF8TgeJ+AEnIiTcBJOwTScitNwGk7HGTgD38dZ+AF+gHNwDs7DdEzH+bgAMzADF+JJzMRFuBiX4FJchktxBa7EFbga1+BqXIfrcANuwE24CbfgFtyG2/ATVAD4Ke7CXZiCe3AP7sW9uA/34X7cj1mYhQfwAB7Eg3gID+FhPIxH8Cgew6N4HI/jCTyJp/AUnsEzeBafT/i6wSc3rUoBcZ4SSsSIGBErYkWciBO5RC6RW+QWERER8SJe5BF5RF6RV+QX+UWCSBCFRCFhhBEkwhgAEFERFUVFUVFMFBPFRXHhhBOJIlGUEqVEaVFalBG3ibLidlFOlBetXEVRUVQSrV1lcZeoIqqIqqKaqC5qiBqipqgpaolaoraoLeqIOqKueFDUEz2xLz4szlemoXgdG4lB2Fg0EfLiJ1gLMQRbilaitXhSDMOh2Fa0cEniGdFOjML24m9iND4nOoqx2Em8IDqLLqKreFF0Ey1dd9FDTMSeopeYgr1FH9FX9BPTsZp4H2flrC5eEynidTFIvCHm4ZtiiHhLDBXDxHDxthghRopRYrQYI8aKVDFOjBfviAniXTFRTBKTxRSRJqaKaeI9MV3MEDPF+2KW+EDMFnPEXDFPpIsPxXyxQGSIj8RC8bHIFIvEYrFELBXLxHKxQqwUq8RqsUasFevEerFBbBSbxGaxRWwV28R28YnYIT4VO8UusVt8JvaIz8Ve8YXYJ74U+8VXIkt8LQ6Ib8RB8a04JL4Th8X34og4Ko6JH8Rx8aM4IU6KU+K0OCN+EmfFz+Kc8AIkSiGlVDKQMTKHjJU5ZZy8SuaSwcVX91oZL6+TeeT1Mq/MJ/PLAjJBFpSFpJZGWkkylIVlERmVN8ii8kZZTN4ki8sS0smSMlHeLEvJW2RpeassI2+TZeXtspwsLyvIivIOWUneKSFy4RhVZTVZXdaQ98hkuFfWkvfJ2vJ+WUc+IOvKB2U9+ZCsLx+WDeQjsqF8VDaSj8nGsolsKpvJ5vJx2UI+IVvKVrK1fFK2kU/JtvJpmSSfke2kv3iKPCc7yudlJ/mC7Cy7yK7yZ3lOetld9pDQE2Qv+bLsLfvIvrKf7C9fkQPkq3KgfE2myNflIPmGHCzflEPkW3KoHCaHy7flCDlSjpKj5Rg5VqbKcXK8fEdOkO/KiXKSnCynyDQ5Vfa9ONJMKf9h/jt/kD/wl6NvkBvlJrlZbpFb5Ta5XX4id8gdcqfcKXfL3XKP3CP3yr1yn9wn98v9MktmyQPygDwoD8pD8pA8LA/LI/KoPC1/kMflj/KEPClPytPyjDwjz158DUChEkoqpQIVo3KoWJVTxamrVC51tcqtrlERda2KV9epPOp6lVflU/lVAZWgCqpCSiujrCIVqsKqiIqqG/DiCaOKqxLKqZIqUd38z+SroupGVUzd9Jv8S/NL/pP5NVfNVQvVQrVULVVr1Vq1UW1UW9VWJakk1U61U+1Ve9VBdVAdVUfVSXVS50+Irqqr6qa6qe6qu0pWyaqXeln1Vn1UX9VP9VevqAFqgBqoBqoUlaIGqUFqsBqshqghaqgaqoar4WqEGqFGqVFqjBqjUlWqGq/GqwlqgpqoJqrJarJKU2lqmpqmpqvpaqaaqWapWWq2mq3mqrkqXaWr+Wq+ylAZaqFaqDLVIrVILVFL1DK1TK1QK9QqtUqtUWvUOrVOZaqNaqParDarrWqr2q62qx1qh9qpdqrdarfao/aovWqv2qf2qf1qv8pSWSr2YhEOqUPqsDqsjqgj6pg6po6r4+qEOqFOqVPqjDqjzqqz6pw6d37ZF4hABCpQQUwQE8QGsUFcEBfkCnIFuYPcQSSIBPFBfJAnuD7IG+QL8gcFgoSgYFAo0IEJbCAuHi8a3BAUDW4MigU3BcWDEoELSgaJwc1BqeCWoHRwa1AmuC0oG9welAvKBxWCisEdQaXgzqBycFdQJbg7qBpUC6oHNYJ7gprBvUGt4L6gdnB/UCd4IKgbPBjUCx4K6gcPBw2CR4KGwaNBo+CxoHHQJGgaNAua/4XxL52Y/3h870/ke8J11z10su6pe+mXdW/dR/fV/XR//YoeoF/VA/VrOkW/rgfpN/Rg/aYeot/SQ/UwPVy/rUfokXqUHq3H6LE6VY/T4/U7eoJ+V0/Uk/RkPUWn6al6mn5PT9cz9Ez9vp6lP9Cz9Rw9V8/T6fpDPV8v0Bn6I71Qf6wz9SK9WC/RS/UyvVyv0Cv1Kr1ar9Fr9Tq9Xm/QG/UmvVlv0Vv1Nr1df6J36E/1Tr1L79af6T36c71Xf6H36S/1fv2VztJf6wP6G31Qf6sP6e/0Yf29PqKP6mP6B31c/6hP6JP6lD6tz+if9FkNcE7784v781/vRhllYkyMiTWxJs7EmVwml8ltcpuIiZh4E2/ymDwmr8lr8pv8JsEkmEKmkDmPDJnCprCJmqgpaoqaYqaYKW6KG2ecSTSJppQpZUqb0qaMKWPKmrKmnClnKpgK5g5zh7nT3GnuMneZu83dppqpZmqYGqamqWlqmVqmtqlt6pg6pq6pa+qZeqa+qW8amAamoWloGplGprFpbJqapqa5aW5amBampWlpWpvWpo1pY9qatibJJJl2pp1pb9qbDqaD6Wg6mk6mk+lsOpuupqvpZrqZ7qa7STbJppfpZXqb3qav6Wv6m/5mgBlgBpqBJsWkmEFmkBlsBpshZogZaoaZ4ecXqmakGWVGmzFmrEk1qWa8GW8mmAlmoploJpvJJs2kmWlmmpluppuZZqaZZWaZ2Wa2mWvmmnSTbuab+SbDZJiFZqHJNJlmsVlslpqlZrlZblaalWa1WW3Wwlqz3qw3G81Gs9lsNlvNVrPdbDc7zA6z0+w0u81us8fsMXvNXrPP7DP7zX6TZbLMAXPAHDQHzSFzyBw2h80Rc8QcM8fMcXPcnDAnzClzypwx+S5+X3oTa3PaOHuVzWWvtrntNfbv4/y2gE2wBW0hq21em+83sbHWFrM32eK2hHW2pE20N/8uLmfL2wq2or3DVrJ32sq/i2vae20te5+tbe+3New9v4nr2AdsXfuorYcIYJvYBraZbWgftY3sY7axbWKb2ma2jX3KtrVP2yT7jG1nn/1dPN8usCvtKrvarrE77S57yp62B+239oz9yXa3PWx/+4odYF+1A+1rNsW+/rt4uH3bjrAj7Sg72o6xY38XT7ZTbJqdaqfZ9+x0O+N3cbr90M6yGXa2nWPn2nm/xOfnlGE/sgvtxzbTBrDYLrFL7TK73K74v3NdYtfZ9XaD3WE/tZvtFrvVbrPbLy2E7S67235m99jP7QH7jd1nv7T77SGbZb/+JT7//A7Z7+xh+709Yo/aY/YHe9z+qH7JHdkbwP5kf7A/23PWWyAkIEmKAoqhHBRLOSmOrqJcdDXlpmsoQtdSPF1Heeh6ykv5KD8VoAQqSIVIkyFLRCEVpiIUpRvo0vSKUwlyVJIS6WYqRbdQabqVytBtVJZup3JUnipQRbqDKtGdVJnuoip0N1WlalSdatA9VJPupVp0H9Wm+6kOPUB16UGqRw9RfXqYGtAj1JAepUb0GDWmJtSUmlFzepxa0BPUklpRa3qS2tBT1JaepiR6htrRs9Se/kYd6DnqSM9TJ3qBOlMX6kovUjd6ibpTD0qmntSLXqbe1If6Uj/qT6/QAHqVBtJrlEKv0yB6gwbTmzSE3qKhNIyG09s0gkbSKBpNY2gspdI4Gk/v0AR6lybSJJpMUyiNptI0eo+m0wyaSe/TLPqAZtMcmkvzKJ0+pPm0gDLoI1pIH1MmLaLFtISW0jJaTitoJa2i1bSG1tI6Wk8baCNtos20hbbSNtpOn9AO+pR20i7aTZ/RHvqc9tIXtI++pP30FWXR13SAvqGD9C0dou98D/qejtBROkY/0HH6kU7QSTpFp+kM/URn6Wc6R54gxFCEMlRhEMaEOcLYMGcYF14V5gqvDnOH14SR8NowPrwuzBNeH+YN84X5wwJhQlgwLBTq0IQ2pDAMC4dFwmh4Q1g0vDEsFmJYPCwRurBkmBjeHJYKbwlLh7eGZcLbwrLh7WG5sHz46P0VwzvCSuGdYeXwrrBKeHdYNawWVg9rhPeENcN7w1rhfWHt8P6wdPhAWDd8MKwXPhTWDx8OG4SPhA3DR8NG4WNh47BJ2DRsFjYPHw9bhE+ELcNWYevwybBN+FTYNnw6TAqfCduFz/7S/8CCP+9PDnuGvcKXw5dD7++Tc6PzounRD6PzowuiGdGPogujH0czo4uii6NLokujy6LLoyuiK6Oroquja6Jro+ui66Mbot7XyAEOnXDSKRe4GJfDxbqcLs5d5XK5q11ud42LuGtdvLvO5XHXu7wun8vvCrgEV9AVctoZZx250BV2RVzU3eCKuhtdMXeTK+5KOOdKukTXzDV3zV0L94Rr6Vq51u5J96R7yj3lnnZPu2dcO/esa+/+5jq451xH97x73r3gOrsurqt70XVz43JfeE8mu16ul+vteru+rq/r7/q7AW6AG+gGuhSX4ga5QW6wG+yGuCFuqBvqhrvhboQb4Ua5UW6MG+NSXaob78a7CW6Cm+gmuslusktzaW6am+amu+mu0owLR5ntZru5bq5Ld+luvju/ZsxwC91Cl+ky3WK32C11S91yt9ytdCvdarfarXVr3Xq33m10G91mt9ltdVvddrfd7XA73E5/zYVB3R631+11+9w+t9995bLc1+6A+8YddN+6Q+47d9h97464o+6Y+8Eddz+6E+6kO+VOuzPuJ3fW/ezOOe9SI+Mi4yPvRCZE3o1MjEyKTI5MiaRFpkamRd6LTI/MiMyMvB+ZFfkgMjsyJzI3Mi+SHvkwMj+yIJIR+SiyMPJxJDOyKLI4siSyNLIs4n3BzaEv7Iv4qL/BF/U3+mL+Jl/cl/DOl/SJ/mZfyt/iS/tbfRl/my/rb/flfHlfwT/mG/smvqlv5pv7x30L/4Rv6Vv51v5J38Y/5dv6p32Sf8a388/69v5vvoN/znf0z/tO/gXf2XfxXf2Lvpt/yXf3PXyy7+l7+Zd9b9/H9/X9fH//ih/gX/UD/Wu/XAgP8m/4wf5NP8S/5Yf6YX54zNt+xKVLZBjrU/04P96/4yf4d/1EP8lP9lN8mp/qp/n3/HQ/w8/07/tZ/gM/28/xc/08n+4/9PP9Ap/hP/IL/cc+0y+6dFPZL/cr/Eq/yq/2a/xav86v9xv8Rr/Jb/Zb/Fa/zW/3n/gd/lO/0+/yu/1nfo//3O/1X/h9/ku/33/ls/zX/oD/xh/03/pD/jt/2H/vj/ij/pj/wR/3P/oT/qQ/5U/7M/4nf9b/7M/x76wxxhhjjP0l4y43xW97Ltw17fkHOeJXO/cCgKu3FMj6df/5FeXavBfafURCmwgAPNOj08OXtqpVk5OTL+6bKSEoMgfg0v8EnRcDl+NF0BqegiRoBaX+cP59RJcz9A/Gj94GEPernFi4HF8e/wsATP6D8R9/cvj8suGp+P/H+HMAihW5nJMTLseLoPUv91daQek/mX++Fr+ef+zvx8/5ZSpAy1/l5ILL8eX5J8IT8Cwk/WZPxhhjjDHGGGPsgj6iQodL15+XfuLzj67PE9TlnBxwOf5H1+eMMcYYY4wxxhi78p7r0vXpx5OSWnX45xuV/0dZf7nRCP63RubGHza8B7j0iAKAf3FAgPMN+Z98Fpv+I8dKufjW+fuupad9AFe+lGn/pnGu8AcTY4wxxhhj7N/u8qL/t4+rKzUhxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGMsG/pP/FmyK/0cGWOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMsSvt/wQAAP//tuf5PQ==")
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
fallocate(r4, 0x0, 0x48, 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x90)
openat$ptp0(0xffffffffffffff9c, 0x0, 0x2401, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0)

3.294058176s ago: executing program 2 (id=431):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000080)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd29, 0x25dfdbfb, {0xa, 0x80, 0x80, 0x3}, [@RTA_DPORT={0x6, 0x1d, 0x4e21}, @RTA_NH_ID={0x5, 0x1e, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040814}, 0x40000)

3.143776418s ago: executing program 2 (id=432):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x1000000}, 0xfffffedf, 0x10, &(0x7f0000000040), 0xeafcf7e0, 0x0, 0xffffffffffffffff, 0xd}, 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r0, 0x4)
sendmsg$inet(r2, &(0x7f0000001f80)={0x0, 0x0, 0x0}, 0x850)

2.966589623s ago: executing program 2 (id=433):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$inet6(0xa, 0x2, 0x0)
socket(0x25, 0x4, 0xfffffffe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x1000}, 0x1c)
sendmmsg$inet6(r3, 0x0, 0x0, 0x8800)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x604ab000)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40)
socket$inet(0x2, 0x1, 0xfffffffc)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc)

1.885894292s ago: executing program 2 (id=434):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket(0xa, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0xc08, 0x3, 0x210, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x270)
futimesat(0xffffffffffffffff, 0x0, &(0x7f0000000280)={{0x0, 0xea60}})
socket(0x10, 0x803, 0x0)

1.694362168s ago: executing program 6 (id=435):
r0 = epoll_create(0x7)
r1 = epoll_create1(0x0)
r2 = epoll_create(0x7)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180))
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)={0x60000000})
close(r2)

947.317559ms ago: executing program 6 (id=436):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
prctl$PR_SET_TSC(0x1a, 0x1)
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1)
sendto$inet6(r3, 0x0, 0x0, 0x240cc0d5, &(0x7f0000000080)={0xa, 0x4c20, 0x0, @dev={0xfe, 0x80, '\x00', 0x18}, 0x101}, 0x1c)
connect$inet6(r3, 0x0, 0x0)
sendto$inet6(r3, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000", 0x1a, 0x8000, 0x0, 0x0)
recvmmsg(r3, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x109000, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x400, &(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="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", @ANYRES8=r1], 0x1, 0x194, &(0x7f0000000640)="$eJzsmD9P+kAYx7/X8if88ktw1UUTScDB0hY1MjgwO2ii0bhJpBK0iIEOwGZ8Ec6+AmfiwvvQQZ0cxM3Joebawx4oYuI/jM9neO57dw/Hc0+Tb5OCIIg/y831w9VZMhHj+j8SiIr1WzXIUaT8Vvxx5qK0cn6i31+22svZ/vMYANd9//+HALRzKhwxd93eXyfEuA6lq8Py/iYYNKG3oWBDaAsMW0LvSbrC8zVtt2Rb2k7FLnCh82DwYPKQ6a+vc8RQkOpj0n6t0dzP27ZV/UIxrH+dnIIlqT75eXV7owf9gwEFhtAZMKwJvYhotzd+S6T7T4SC89Vvvv/vFuPxITlhjEqpJD5BMHBxFwNGo56fEoE/uacMScmfQpJ/pJ3yYbrWaM6WyvmiVbQOTDOzoM/p+ryZ9ozIj2/4X8zzp3/S+eEBuREWQT3vOFXDj89zsx6FUzVfc9yI538KUtN+1UysyXjvgzE2xYeUChwPrJYgCIIgCIIgCIIgCIIgCOIjTIJ5X0F7yL5YMle97KcAAAD//5Z1cak=")
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80000, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1e0000000800000001000000fdffffff90000200", @ANYRES32, @ANYBLOB="01000080000000000000000000000000000000005282ea23e80a927631641ae2c4e2bf40bb38662afe732655848fa42e30f17187ff23fdb7d49e2908f4ff00b75c1826891a178283602cebcd41e892abad50fb548afe3e961b590758240118a9a8bf34633a8242108121d3", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="0200000005000000020000000700"/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800044f0400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r9=>0x0})
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, r9, 0x25, 0x0, @void}, 0x10)

822.025869ms ago: executing program 2 (id=437):
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x1e, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000})
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)

0s ago: executing program 6 (id=438):
bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000087}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)

kernel console output (not intermixed with test programs):

 T6555]  xfs_file_dio_write_aligned+0x3b8/0x490
[  133.511259][ T6555]  ? __pfx_xfs_file_dio_write_aligned+0x10/0x10
[  133.511287][ T6555]  ? splice_from_pipe_next+0x61c/0x670
[  133.511322][ T6555]  xfs_file_write_iter+0x7dd/0x920
[  133.511356][ T6555]  iter_file_splice_write+0x9a1/0x10f0
[  133.511415][ T6555]  ? __pfx_iter_file_splice_write+0x10/0x10
[  133.511467][ T6555]  ? __pfx_iter_file_splice_write+0x10/0x10
[  133.511498][ T6555]  direct_splice_actor+0x101/0x160
[  133.511533][ T6555]  splice_direct_to_actor+0x53a/0xc70
[  133.511577][ T6555]  ? __pfx_direct_splice_actor+0x10/0x10
[  133.511616][ T6555]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  133.511659][ T6555]  do_splice_direct+0x195/0x290
[  133.511692][ T6555]  ? __pfx_do_splice_direct+0x10/0x10
[  133.511723][ T6555]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  133.511762][ T6555]  ? rw_verify_area+0x255/0x4d0
[  133.511787][ T6555]  do_sendfile+0x535/0x7d0
[  133.511813][ T6555]  ? lockdep_hardirqs_on+0x7a/0x110
[  133.511846][ T6555]  ? __pfx_do_sendfile+0x10/0x10
[  133.511880][ T6555]  ? __se_sys_futex+0x3a8/0x450
[  133.511907][ T6555]  __se_sys_sendfile64+0x144/0x1a0
[  133.511936][ T6555]  ? __pfx___se_sys_sendfile64+0x10/0x10
[  133.511976][ T6555]  do_syscall_64+0x14d/0xf80
[  133.512000][ T6555]  ? trace_irq_disable+0x3b/0x150
[  133.512032][ T6555]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.512054][ T6555]  ? clear_bhb_loop+0x40/0x90
[  133.512080][ T6555]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.512101][ T6555] RIP: 0033:0x7f026899c799
[  133.512122][ T6555] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  133.512138][ T6555] RSP: 002b:00007f0269810028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  133.512161][ T6555] RAX: ffffffffffffffda RBX: 00007f0268c15fa0 RCX: 00007f026899c799
[  133.512176][ T6555] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005
[  133.512188][ T6555] RBP: 00007f0268a32c99 R08: 0000000000000000 R09: 0000000000000000
[  133.512200][ T6555] R10: 0000000020fffe82 R11: 0000000000000246 R12: 0000000000000000
[  133.512213][ T6555] R13: 00007f0268c16038 R14: 00007f0268c15fa0 R15: 00007ffdf8d3d268
[  133.512248][ T6555]  </TASK>
[  133.520577][ T6555] XFS (loop6): Corruption detected. Unmount and run xfs_repair
[  134.022341][  T809] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  134.054987][ T6585] XFS (loop6): Internal error ltbno + ltlen > bno at line 2104 of file fs/xfs/libxfs/xfs_alloc.c.  Caller xfs_free_ag_extent+0x1124/0x17d0
[  134.070054][ T6585] CPU: 0 UID: 0 PID: 6585 Comm: syz.6.94 Not tainted syzkaller #0 PREEMPT(full) 
[  134.070082][ T6585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  134.070095][ T6585] Call Trace:
[  134.070103][ T6585]  <TASK>
[  134.070112][ T6585]  dump_stack_lvl+0xe8/0x150
[  134.070150][ T6585]  xfs_corruption_error+0x122/0x170
[  134.070181][ T6585]  ? xfs_free_ag_extent+0x1124/0x17d0
[  134.070218][ T6585]  xfs_free_ag_extent+0x12e0/0x17d0
[  134.070247][ T6585]  ? xfs_free_ag_extent+0x1124/0x17d0
[  134.070296][ T6585]  ? __pfx_xfs_free_ag_extent+0x10/0x10
[  134.070330][ T6585]  ? kasan_save_track+0x4f/0x80
[  134.070359][ T6585]  ? kasan_save_track+0x3e/0x80
[  134.070408][ T6585]  ? __kasan_slab_alloc+0x6c/0x80
[  134.070437][ T6585]  __xfs_free_extent+0x36e/0x4f0
[  134.070477][ T6585]  ? __pfx___xfs_free_extent+0x10/0x10
[  134.070533][ T6585]  xfs_extent_free_finish_item+0x292/0x640
[  134.070575][ T6585]  ? __pfx_xfs_extent_free_finish_item+0x10/0x10
[  134.070604][ T6585]  ? xfs_extent_free_create_done+0x60/0x1b0
[  134.070633][ T6585]  ? rcu_is_watching+0x15/0xb0
[  134.070655][ T6585]  ? __pfx_xfs_extent_free_finish_item+0x10/0x10
[  134.070679][ T6585]  xfs_defer_finish_one+0x5d7/0xd80
[  134.070717][ T6585]  ? __pfx_xfs_defer_finish_one+0x10/0x10
[  134.070748][ T6585]  xfs_defer_finish_noroll+0x940/0x13b0
[  134.070776][ T6585]  ? xfs_defer_finish+0x1c/0x180
[  134.070801][ T6585]  ? __pfx_xfs_defer_finish_noroll+0x10/0x10
[  134.070821][ T6585]  ? xlog_ticket_alloc+0x3f/0x400
[  134.070854][ T6585]  xfs_defer_finish+0x1c/0x180
[  134.070878][ T6585]  xfs_bunmapi_range+0xc4/0x140
[  134.070906][ T6585]  xfs_itruncate_extents_flags+0x2fc/0xa00
[  134.070935][ T6585]  ? __pfx_xfs_itruncate_extents_flags+0x10/0x10
[  134.070961][ T6585]  ? xfs_trans_log_inode+0x12c/0x1a0
[  134.070989][ T6585]  xfs_setattr_size+0x980/0xf30
[  134.071009][ T6585]  ? xfs_break_leased_layouts+0x6c/0x3c0
[  134.071037][ T6585]  ? __pfx_xfs_setattr_size+0x10/0x10
[  134.071054][ T6585]  ? setattr_prepare+0x232/0xb30
[  134.071075][ T6585]  ? rcu_needs_cpu+0x20/0xb0
[  134.071096][ T6585]  ? xfs_vn_setattr_size+0x15c/0x180
[  134.071119][ T6585]  xfs_vn_setattr+0x261/0x310
[  134.071143][ T6585]  ? __pfx_xfs_vn_setattr+0x10/0x10
[  134.071165][ T6585]  ? try_break_deleg+0x5b/0x180
[  134.071181][ T6585]  ? __pfx_xfs_vn_setattr+0x10/0x10
[  134.071201][ T6585]  notify_change+0xc1a/0xf40
[  134.071230][ T6585]  do_truncate+0x1c2/0x250
[  134.071251][ T6585]  ? __pfx_do_truncate+0x10/0x10
[  134.071268][ T6585]  ? apparmor_file_truncate+0x39f/0x470
[  134.071310][ T6585]  path_openat+0x2f89/0x3860
[  134.071343][ T6585]  ? __pfx_stack_trace_save+0x10/0x10
[  134.071370][ T6585]  ? stack_depot_save_flags+0x33/0x810
[  134.071399][ T6585]  ? __pfx_path_openat+0x10/0x10
[  134.071415][ T6585]  ? __x64_sys_open+0x11e/0x150
[  134.071438][ T6585]  ? do_syscall_64+0x14d/0xf80
[  134.071460][ T6585]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.071501][ T6585]  ? __lock_acquire+0x6b5/0x2cf0
[  134.071539][ T6585]  do_file_open+0x23e/0x4a0
[  134.071564][ T6585]  ? __pfx_do_file_open+0x10/0x10
[  134.071608][ T6585]  ? _raw_spin_unlock+0x28/0x50
[  134.071626][ T6585]  ? alloc_fd+0x64b/0x6c0
[  134.071660][ T6585]  do_sys_openat2+0x113/0x200
[  134.071690][ T6585]  ? __pfx_do_sys_openat2+0x10/0x10
[  134.071713][ T6585]  ? kfree+0x4d/0x650
[  134.071747][ T6585]  ? __pfx_kcov_ioctl+0x10/0x10
[  134.071774][ T6585]  __x64_sys_open+0x11e/0x150
[  134.071806][ T6585]  do_syscall_64+0x14d/0xf80
[  134.071829][ T6585]  ? trace_irq_disable+0x3b/0x150
[  134.071853][ T6585]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.071874][ T6585]  ? clear_bhb_loop+0x40/0x90
[  134.071900][ T6585]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.071920][ T6585] RIP: 0033:0x7f026899c799
[  134.071941][ T6585] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  134.071958][ T6585] RSP: 002b:00007f02697ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[  134.071980][ T6585] RAX: ffffffffffffffda RBX: 00007f0268c16090 RCX: 00007f026899c799
[  134.071996][ T6585] RDX: 1df2a23c5997fa4b RSI: 00000000000a0242 RDI: 0000200000000580
[  134.072011][ T6585] RBP: 00007f0268a32c99 R08: 0000000000000000 R09: 0000000000000000
[  134.072024][ T6585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  134.072036][ T6585] R13: 00007f0268c16128 R14: 00007f0268c16090 R15: 00007ffdf8d3d268
[  134.072072][ T6585]  </TASK>
[  134.072113][ T6585] XFS (loop6): Corruption detected. Unmount and run xfs_repair
[  134.539572][ T6585] XFS (loop6): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0xd02/0x13b0 (fs/xfs/libxfs/xfs_defer.c:721).  Shutting down filesystem.
[  134.607681][  T809] usb 1-1: Using ep0 maxpacket: 32
[  134.619848][ T6585] XFS (loop6): Please unmount the filesystem and rectify the problem(s)
[  134.634042][  T809] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  134.663806][  T809] usb 1-1: config 0 has no interface number 0
[  134.688998][  T809] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  134.716928][ T6276] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  134.736062][  T809] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  134.777867][  T809] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[  134.815023][  T809] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.839102][ T6584] chnl_net:caif_netlink_parms(): no params data found
[  134.910164][  T809] usb 1-1: config 0 descriptor??
[  135.230176][ T6584] bridge0: port 1(bridge_slave_0) entered blocking state
[  135.237802][ T6584] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.245202][ T6584] bridge_slave_0: entered allmulticast mode
[  135.254110][ T6584] bridge_slave_0: entered promiscuous mode
[  135.263666][ T6584] bridge0: port 2(bridge_slave_1) entered blocking state
[  135.271358][ T6584] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.278826][ T6584] bridge_slave_1: entered allmulticast mode
[  135.287524][ T6584] bridge_slave_1: entered promiscuous mode
[  135.357624][ T5861] Bluetooth: hci5: command tx timeout
[  135.488621][ T6591] loop2: detected capacity change from 0 to 32768
[  135.504876][ T6584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  135.547877][    C0] raw-gadget.0 gadget.0: ignoring, device is not running
[  135.555702][    C0] raw-gadget.0 gadget.0: ignoring, device is not running
[  135.576981][  T809] usbhid 1-1:0.1: can't add hid device: -32
[  135.584030][  T809] usbhid 1-1:0.1: probe with driver usbhid failed with error -32
[  135.603060][ T6591] JBD2: Ignoring recovery information on journal
[  135.620554][ T6584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  135.736801][  T809] usb 1-1: USB disconnect, device number 2
[  135.800337][ T6584] team0: Port device team_slave_0 added
[  135.817215][ T6591] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  135.829778][ T6584] team0: Port device team_slave_1 added
[  136.088222][ T6584] batman_adv: batadv0: Adding interface: batadv_slave_0
[  136.136736][ T6584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  136.166338][ T5851] ocfs2: Unmounting device (7,2) on (node local)
[  136.195912][ T6584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  136.228006][ T6584] batman_adv: batadv0: Adding interface: batadv_slave_1
[  136.262082][ T6584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  136.377212][ T6584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  136.644592][ T6584] hsr_slave_0: entered promiscuous mode
[  136.681666][ T6584] hsr_slave_1: entered promiscuous mode
[  136.706285][ T6584] debugfs: 'hsr0' already exists in 'hsr'
[  136.729382][ T6584] Cannot create hsr debugfs directory
[  136.937546][ T6604] loop6: detected capacity change from 0 to 40427
[  136.994591][ T6604] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[  137.008883][ T6626] loop2: detected capacity change from 0 to 128
[  137.028879][ T6604] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  137.045372][ T6626] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  137.123676][ T6626] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  137.397988][ T6604] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  137.437526][ T5861] Bluetooth: hci5: command tx timeout
[  137.458446][ T6604] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  137.491828][ T6604] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  137.603034][ T6633] xt_CT: No such helper "pptp"
[  137.956787][ T6644] loop5: detected capacity change from 0 to 512
[  137.999958][ T6644] EXT4-fs: Ignoring removed oldalloc option
[  138.049232][ T6644] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  138.098884][ T6644] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.106: iget: bad i_size value: 38620345925642
[  138.127770][ T6644] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  138.128639][ T6644] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.106: couldn't read orphan inode 15 (err -117)
[  138.137933][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  138.137972][    C0] EXT4-fs (loop5): initial error at time 1773798900: ext4_orphan_get:1391: inode 15
[  138.138009][    C0] EXT4-fs (loop5): last error at time 1773798900: ext4_orphan_get:1391: inode 15
[  138.238329][ T6644] loop5: lost filesystem error report for type 5 error -117
[  138.240914][ T6644] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  138.443088][ T6651] netlink: 27 bytes leftover after parsing attributes in process `syz.2.104'.
[  139.532475][ T5861] Bluetooth: hci5: command tx timeout
[  139.967965][ T6584] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  139.999668][  T201] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm kworker/u8:6: bg 0: block 5: invalid block bitmap
[  140.014102][ T6584] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  140.122965][ T6662] loop2: detected capacity change from 0 to 512
[  140.194823][ T6584] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  140.407149][  T201] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 324 with error 28
[  140.749884][ T6662] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  140.763153][ T6662] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  141.009376][  T201] EXT4-fs (loop5): This should not happen!! Data will be lost
[  141.009376][  T201] 
[  141.040622][ T6584] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  141.048198][ T6659] netlink: 24 bytes leftover after parsing attributes in process `syz.0.109'.
[  141.061885][  T201] EXT4-fs (loop5): Total free blocks count 0
[  141.091902][  T201] EXT4-fs (loop5): Free/Dirty block details
[  141.117284][  T201] EXT4-fs (loop5): free_blocks=0
[  141.158148][  T201] EXT4-fs (loop5): dirty_blocks=324
[  141.201050][  T201] EXT4-fs (loop5): Block reservation details
[  141.242911][  T201] EXT4-fs (loop5): i_reserved_data_blocks=324
[  141.499425][ T6045] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.617525][ T5861] Bluetooth: hci5: command tx timeout
[  141.948384][ T6584] 8021q: adding VLAN 0 to HW filter on device bond0
[  142.029696][ T5851] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.124100][ T6584] 8021q: adding VLAN 0 to HW filter on device team0
[  142.196400][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
[  142.203678][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[  142.268227][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[  142.275485][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[  142.438200][   T43] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  142.513431][ T6688] loop2: detected capacity change from 0 to 128
[  142.520767][ T6584] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  142.570895][ T6688] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  142.620826][ T6688] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  142.639241][   T43] usb 1-1: Using ep0 maxpacket: 8
[  142.663045][   T43] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  142.682101][ T6667] loop6: detected capacity change from 0 to 40427
[  142.690635][   T43] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  142.721350][ T6667] F2FS-fs (loop6): build fault injection rate: 174
[  142.745023][   T43] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[  142.769326][ T6667] F2FS-fs (loop6): build fault injection type: 0x3bfe8c
[  142.792805][ T6667] F2FS-fs (loop6): invalid crc value
[  142.801301][   T43] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[  142.852751][   T43] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  142.881326][   T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.992922][   T43] hub 1-1:1.0: bad descriptor, ignoring hub
[  143.031280][   T43] hub 1-1:1.0: probe with driver hub failed with error -5
[  143.116599][   T43] cdc_wdm 1-1:1.0: skipping garbage
[  143.145339][   T43] cdc_wdm 1-1:1.0: skipping garbage
[  143.166588][ T6679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  143.223304][ T6667] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  143.234242][ T6679] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  143.293016][   T43] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[  143.302770][ T6667] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  143.316591][   T43] cdc_wdm 1-1:1.0: Unknown control protocol
[  143.427959][ T6667] F2FS-fs (loop6): inject inconsistent footer in f2fs_sanity_check_node_footer of __get_node_folio+0x8b5/0xe90
[  143.454307][   T43] usb 1-1: USB disconnect, device number 3
[  143.470035][ T6584] 8021q: adding VLAN 0 to HW filter on device batadv0
[  143.475931][ T6667] F2FS-fs (loop6): inconsistent node block, node_type:3, nid:20, node_footer[nid:20,ino:17,ofs:3,cpver:0,blkaddr:0]
[  143.539796][ T6681] loop5: detected capacity change from 0 to 32768
[  143.596476][ T6681] JBD2: Ignoring recovery information on journal
[  143.720047][ T6276] syz-executor: attempt to access beyond end of device
[  143.720047][ T6276] loop6: rw=2049, sector=45096, nr_sectors = 24 limit=40427
[  143.808951][ T6276] CPU: 1 UID: 0 PID: 6276 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  143.808979][ T6276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  143.808991][ T6276] Call Trace:
[  143.808999][ T6276]  <TASK>
[  143.809008][ T6276]  dump_stack_lvl+0xe8/0x150
[  143.809044][ T6276]  f2fs_handle_critical_error+0x37c/0x540
[  143.809079][ T6276]  f2fs_write_end_io+0x1274/0x1740
[  143.809131][ T6276]  __submit_merged_bio+0x256/0x700
[  143.809166][ T6276]  __submit_merged_write_cond+0x3c9/0x4e0
[  143.809202][ T6276]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  143.809255][ T6276]  f2fs_write_data_pages+0x287e/0x34f0
[  143.809324][ T6276]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  143.809352][ T6276]  ? do_raw_spin_lock+0x12b/0x2f0
[  143.809434][ T6276]  ? __lock_acquire+0x6b5/0x2cf0
[  143.809486][ T6276]  ? __lock_acquire+0x6b5/0x2cf0
[  143.809530][ T6276]  ? do_raw_spin_lock+0x12b/0x2f0
[  143.809568][ T6276]  ? do_raw_spin_unlock+0xf5/0x210
[  143.809595][ T6276]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  143.809625][ T6276]  do_writepages+0x32e/0x550
[  143.809662][ T6276]  ? do_raw_spin_unlock+0xf5/0x210
[  143.809693][ T6276]  filemap_fdatawrite+0x1e9/0x2f0
[  143.809722][ T6276]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  143.809793][ T6276]  ? do_raw_spin_unlock+0xf5/0x210
[  143.809823][ T6276]  f2fs_sync_dirty_inodes+0x30e/0x860
[  143.809871][ T6276]  f2fs_write_checkpoint+0x9df/0x26a0
[  143.809927][ T6276]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  143.810005][ T6276]  kill_f2fs_super+0x314/0x720
[  143.810045][ T6276]  ? __pfx_kill_f2fs_super+0x10/0x10
[  143.810090][ T6276]  ? lockdep_hardirqs_on+0x7a/0x110
[  143.810129][ T6276]  deactivate_locked_super+0xbc/0x130
[  143.810162][ T6276]  cleanup_mnt+0x437/0x4d0
[  143.810181][ T6276]  ? _raw_spin_unlock_irq+0x23/0x50
[  143.810206][ T6276]  task_work_run+0x1d9/0x270
[  143.810234][ T6276]  ? __pfx_task_work_run+0x10/0x10
[  143.810272][ T6276]  exit_to_user_mode_loop+0xed/0x480
[  143.810306][ T6276]  ? rcu_is_watching+0x15/0xb0
[  143.810332][ T6276]  do_syscall_64+0x32d/0xf80
[  143.810356][ T6276]  ? trace_irq_disable+0x3b/0x150
[  143.810381][ T6276]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.810401][ T6276]  ? clear_bhb_loop+0x40/0x90
[  143.810427][ T6276]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  143.810446][ T6276] RIP: 0033:0x7f026899d9d7
[  143.810467][ T6276] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  143.810482][ T6276] RSP: 002b:00007ffdf8d3c4d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  143.810503][ T6276] RAX: 0000000000000000 RBX: 00007f0268a32050 RCX: 00007f026899d9d7
[  143.810524][ T6276] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdf8d3c590
[  143.810536][ T6276] RBP: 00007ffdf8d3c590 R08: 00007ffdf8d3d590 R09: 00000000ffffffff
[  143.810549][ T6276] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdf8d3d620
[  143.810561][ T6276] R13: 00007f0268a32050 R14: 000000000002308e R15: 00007ffdf8d3d660
[  143.810593][ T6276]  </TASK>
[  143.811324][ T6276] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  143.970080][ T6681] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  144.209585][   T43] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  144.225264][ T6712] xt_CT: No such helper "pptp"
[  144.341331][ T6276] CPU: 0 UID: 0 PID: 6276 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  144.341360][ T6276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  144.341372][ T6276] Call Trace:
[  144.341380][ T6276]  <TASK>
[  144.341389][ T6276]  dump_stack_lvl+0xe8/0x150
[  144.341427][ T6276]  f2fs_handle_critical_error+0x37c/0x540
[  144.341464][ T6276]  f2fs_write_end_io+0x1274/0x1740
[  144.341522][ T6276]  __submit_merged_bio+0x256/0x700
[  144.341559][ T6276]  __submit_merged_write_cond+0x3c9/0x4e0
[  144.341598][ T6276]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  144.341655][ T6276]  f2fs_write_data_pages+0x287e/0x34f0
[  144.341732][ T6276]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  144.341761][ T6276]  ? do_raw_spin_lock+0x12b/0x2f0
[  144.341858][ T6276]  ? __lock_acquire+0x6b5/0x2cf0
[  144.341908][ T6276]  ? __lock_acquire+0x6b5/0x2cf0
[  144.341945][ T6276]  ? do_raw_spin_lock+0x12b/0x2f0
[  144.341992][ T6276]  ? do_raw_spin_unlock+0xf5/0x210
[  144.342019][ T6276]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  144.342051][ T6276]  do_writepages+0x32e/0x550
[  144.342090][ T6276]  ? do_raw_spin_unlock+0xf5/0x210
[  144.342122][ T6276]  filemap_fdatawrite+0x1e9/0x2f0
[  144.342151][ T6276]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  144.342245][ T6276]  ? do_raw_spin_unlock+0xf5/0x210
[  144.342278][ T6276]  f2fs_sync_dirty_inodes+0x30e/0x860
[  144.342328][ T6276]  f2fs_write_checkpoint+0x9df/0x26a0
[  144.342392][ T6276]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  144.342479][ T6276]  kill_f2fs_super+0x314/0x720
[  144.342519][ T6276]  ? __pfx_kill_f2fs_super+0x10/0x10
[  144.342566][ T6276]  ? lockdep_hardirqs_on+0x7a/0x110
[  144.342609][ T6276]  deactivate_locked_super+0xbc/0x130
[  144.342643][ T6276]  cleanup_mnt+0x437/0x4d0
[  144.342663][ T6276]  ? _raw_spin_unlock_irq+0x23/0x50
[  144.342691][ T6276]  task_work_run+0x1d9/0x270
[  144.342722][ T6276]  ? __pfx_task_work_run+0x10/0x10
[  144.342762][ T6276]  exit_to_user_mode_loop+0xed/0x480
[  144.342789][ T6276]  ? rcu_is_watching+0x15/0xb0
[  144.342817][ T6276]  do_syscall_64+0x32d/0xf80
[  144.342840][ T6276]  ? trace_irq_disable+0x3b/0x150
[  144.342863][ T6276]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.342884][ T6276]  ? clear_bhb_loop+0x40/0x90
[  144.342911][ T6276]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.342931][ T6276] RIP: 0033:0x7f026899d9d7
[  144.342951][ T6276] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  144.342967][ T6276] RSP: 002b:00007ffdf8d3c4d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  144.342994][ T6276] RAX: 0000000000000000 RBX: 00007f0268a32050 RCX: 00007f026899d9d7
[  144.343008][ T6276] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdf8d3c590
[  144.343020][ T6276] RBP: 00007ffdf8d3c590 R08: 00007ffdf8d3d590 R09: 00000000ffffffff
[  144.343033][ T6276] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdf8d3d620
[  144.343046][ T6276] R13: 00007f0268a32050 R14: 000000000002308e R15: 00007ffdf8d3d660
[  144.343084][ T6276]  </TASK>
[  144.344217][ T6276] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  144.542363][   T43] usb 1-1: Using ep0 maxpacket: 16
[  144.551643][   T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64
[  144.844086][ T6276] CPU: 0 UID: 0 PID: 6276 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  144.844114][ T6276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  144.844127][ T6276] Call Trace:
[  144.844135][ T6276]  <TASK>
[  144.844148][ T6276]  dump_stack_lvl+0xe8/0x150
[  144.844186][ T6276]  f2fs_handle_critical_error+0x37c/0x540
[  144.844223][ T6276]  f2fs_write_end_io+0x1274/0x1740
[  144.844281][ T6276]  __submit_merged_bio+0x256/0x700
[  144.844317][ T6276]  __submit_merged_write_cond+0x3c9/0x4e0
[  144.844356][ T6276]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  144.844413][ T6276]  f2fs_write_data_pages+0x287e/0x34f0
[  144.844489][ T6276]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  144.844525][ T6276]  ? do_raw_spin_lock+0x12b/0x2f0
[  144.844618][ T6276]  ? __lock_acquire+0x6b5/0x2cf0
[  144.844668][ T6276]  ? __lock_acquire+0x6b5/0x2cf0
[  144.844705][ T6276]  ? do_raw_spin_lock+0x12b/0x2f0
[  144.844745][ T6276]  ? do_raw_spin_unlock+0xf5/0x210
[  144.844772][ T6276]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  144.844804][ T6276]  do_writepages+0x32e/0x550
[  144.844843][ T6276]  ? do_raw_spin_unlock+0xf5/0x210
[  144.844875][ T6276]  filemap_fdatawrite+0x1e9/0x2f0
[  144.844905][ T6276]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  144.844988][ T6276]  ? do_raw_spin_unlock+0xf5/0x210
[  144.845020][ T6276]  f2fs_sync_dirty_inodes+0x30e/0x860
[  144.845071][ T6276]  f2fs_write_checkpoint+0x9df/0x26a0
[  144.845134][ T6276]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  144.845222][ T6276]  kill_f2fs_super+0x314/0x720
[  144.845262][ T6276]  ? __pfx_kill_f2fs_super+0x10/0x10
[  144.845310][ T6276]  ? lockdep_hardirqs_on+0x7a/0x110
[  144.845353][ T6276]  deactivate_locked_super+0xbc/0x130
[  144.845386][ T6276]  cleanup_mnt+0x437/0x4d0
[  144.845406][ T6276]  ? _raw_spin_unlock_irq+0x23/0x50
[  144.845433][ T6276]  task_work_run+0x1d9/0x270
[  144.845464][ T6276]  ? __pfx_task_work_run+0x10/0x10
[  144.845508][ T6276]  exit_to_user_mode_loop+0xed/0x480
[  144.845541][ T6276]  ? rcu_is_watching+0x15/0xb0
[  144.845567][ T6276]  do_syscall_64+0x32d/0xf80
[  144.845590][ T6276]  ? trace_irq_disable+0x3b/0x150
[  144.845613][ T6276]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.845633][ T6276]  ? clear_bhb_loop+0x40/0x90
[  144.845658][ T6276]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.845678][ T6276] RIP: 0033:0x7f026899d9d7
[  144.845697][ T6276] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  144.845712][ T6276] RSP: 002b:00007ffdf8d3c4d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  144.845733][ T6276] RAX: 0000000000000000 RBX: 00007f0268a32050 RCX: 00007f026899d9d7
[  144.845746][ T6276] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdf8d3c590
[  144.845758][ T6276] RBP: 00007ffdf8d3c590 R08: 00007ffdf8d3d590 R09: 00000000ffffffff
[  144.845770][ T6276] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdf8d3d620
[  144.845782][ T6276] R13: 00007f0268a32050 R14: 000000000002308e R15: 00007ffdf8d3d660
[  144.845819][ T6276]  </TASK>
[  144.900001][   T43] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  145.000488][ T6276] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  145.307531][   T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 36816, setting to 1024
[  145.329135][   T43] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024
[  145.348725][   T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12161, setting to 1024
[  145.382205][   T43] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024
[  145.400081][ T6045] ocfs2: Unmounting device (7,5) on (node local)
[  145.407965][   T43] usb 1-1: string descriptor 0 read error: -71
[  145.414337][   T43] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[  145.463082][ T6584] veth0_vlan: entered promiscuous mode
[  145.485011][   T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.528839][ T6584] veth1_vlan: entered promiscuous mode
[  145.743589][   T43] usb 1-1: config 0 descriptor??
[  145.756640][ T6584] veth0_macvtap: entered promiscuous mode
[  145.760472][   T43] usb 1-1: can't set config #0, error -71
[  146.039070][ T6731] netlink: 27 bytes leftover after parsing attributes in process `syz.0.117'.
[  146.440576][   T43] usb 1-1: USB disconnect, device number 4
[  146.535884][ T6584] veth1_macvtap: entered promiscuous mode
[  146.646654][ T6584] batman_adv: batadv0: Interface activated: batadv_slave_0
[  146.733180][ T6584] batman_adv: batadv0: Interface activated: batadv_slave_1
[  146.875093][   T35] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  147.534775][   T35] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  147.690994][   T35] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  147.766820][   T35] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  148.124727][  T201] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  148.183937][  T201] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  148.359617][ T6754] loop2: detected capacity change from 0 to 512
[  148.594832][ T6754] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  148.608043][ T6754] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  149.261564][ T6561] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  150.040378][ T6561] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  150.135977][ T5851] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.189187][ T6746] loop0: detected capacity change from 0 to 32768
[  150.234629][ T6746] JBD2: Ignoring recovery information on journal
[  150.457987][ T6746] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  151.001521][ T5850] ocfs2: Unmounting device (7,0) on (node local)
[  151.097016][ T6780] loop6: detected capacity change from 0 to 128
[  151.159138][ T6780] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  151.226489][ T6780] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  151.325733][ T6772] netlink: 24 bytes leftover after parsing attributes in process `syz.2.121'.
[  151.643199][ T6789] loop6: detected capacity change from 0 to 2048
[  151.715150][ T6789] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  151.776149][ T6789] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  155.123977][ T6840] loop6: detected capacity change from 0 to 512
[  155.308027][ T6840] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  155.352847][ T6848] loop7: detected capacity change from 0 to 128
[  155.395875][ T6848] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  155.441905][ T6826] loop2: detected capacity change from 0 to 32768
[  155.461027][ T6840] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  155.507883][ T6848] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  155.535865][ T6826] JBD2: Ignoring recovery information on journal
[  155.608865][ T6826] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  156.074572][ T5851] ocfs2: Unmounting device (7,2) on (node local)
[  157.771584][ T6847] loop0: detected capacity change from 0 to 40427
[  157.821435][ T6847] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  157.898012][ T6847] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  158.165131][ T6871] netlink: 24 bytes leftover after parsing attributes in process `syz.2.140'.
[  158.370734][ T6858] loop5: detected capacity change from 0 to 32768
[  158.517191][ T6858] XFS (loop5): DAX unsupported by block device. Turning off DAX.
[  158.611630][ T6858] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  158.652255][ T6847] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  158.886850][ T6858] XFS (loop5): Ending clean mount
[  158.938072][ T6858] XFS (loop5): Quotacheck needed: Please wait.
[  159.269921][ T6858] XFS (loop5): Quotacheck: Done.
[  159.405249][ T6045] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  160.044703][ T6902] xt_CT: No such helper "pptp"
[  160.297144][ T6907] loop2: detected capacity change from 0 to 128
[  160.368215][ T6907] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  160.449652][ T6907] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  162.102174][ T6939] xt_hashlimit: size too large, truncated to 1048576
[  162.186319][ T6920] loop0: detected capacity change from 0 to 40427
[  162.294445][ T6920] F2FS-fs (loop0): build fault injection rate: 174
[  162.338896][ T6920] F2FS-fs (loop0): build fault injection type: 0x3bfe8c
[  162.396999][ T6920] F2FS-fs (loop0): invalid crc value
[  163.642807][ T6920] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  163.669839][ T6920] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  163.970120][ T6963] loop5: detected capacity change from 0 to 40427
[  163.993771][ T6963] F2FS-fs (loop5): invalid crc value
[  164.082650][ T6963] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  164.094860][ T6963] F2FS-fs (loop5): Start checkpoint disabled!
[  164.104871][ T6963] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0
[  164.117674][ T6963] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  164.133405][ T6963] F2FS-fs (loop5): Stopped filesystem due to reason: 0
[  164.267831][ T5850] syz-executor: attempt to access beyond end of device
[  164.267831][ T5850] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  164.348287][ T5850] CPU: 0 UID: 0 PID: 5850 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  164.348315][ T5850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  164.348327][ T5850] Call Trace:
[  164.348334][ T5850]  <TASK>
[  164.348343][ T5850]  dump_stack_lvl+0xe8/0x150
[  164.348386][ T5850]  f2fs_handle_critical_error+0x37c/0x540
[  164.348420][ T5850]  f2fs_write_end_io+0x1274/0x1740
[  164.348472][ T5850]  __submit_merged_bio+0x256/0x700
[  164.348505][ T5850]  __submit_merged_write_cond+0x3c9/0x4e0
[  164.348540][ T5850]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  164.348591][ T5850]  f2fs_write_data_pages+0x287e/0x34f0
[  164.348657][ T5850]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  164.348701][ T5850]  ? __pfx_css_rstat_updated+0x10/0x10
[  164.348763][ T5850]  ? mod_memcg_lruvec_state+0x208/0x220
[  164.348793][ T5850]  ? __lock_acquire+0x6b5/0x2cf0
[  164.348839][ T5850]  ? __lock_acquire+0x6b5/0x2cf0
[  164.348876][ T5850]  ? do_raw_spin_lock+0x12b/0x2f0
[  164.348915][ T5850]  ? do_raw_spin_unlock+0xf5/0x210
[  164.348941][ T5850]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  164.348972][ T5850]  do_writepages+0x32e/0x550
[  164.349008][ T5850]  ? do_raw_spin_unlock+0xf5/0x210
[  164.349039][ T5850]  filemap_fdatawrite+0x1e9/0x2f0
[  164.349068][ T5850]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  164.349154][ T5850]  ? do_raw_spin_unlock+0xf5/0x210
[  164.349185][ T5850]  f2fs_sync_dirty_inodes+0x30e/0x860
[  164.349233][ T5850]  f2fs_write_checkpoint+0x9df/0x26a0
[  164.349289][ T5850]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  164.349373][ T5850]  kill_f2fs_super+0x314/0x720
[  164.349411][ T5850]  ? __pfx_kill_f2fs_super+0x10/0x10
[  164.349456][ T5850]  ? lockdep_hardirqs_on+0x7a/0x110
[  164.349495][ T5850]  deactivate_locked_super+0xbc/0x130
[  164.349527][ T5850]  cleanup_mnt+0x437/0x4d0
[  164.349547][ T5850]  ? _raw_spin_unlock_irq+0x23/0x50
[  164.349573][ T5850]  task_work_run+0x1d9/0x270
[  164.349603][ T5850]  ? __pfx_task_work_run+0x10/0x10
[  164.349641][ T5850]  exit_to_user_mode_loop+0xed/0x480
[  164.349668][ T5850]  ? rcu_is_watching+0x15/0xb0
[  164.349694][ T5850]  do_syscall_64+0x32d/0xf80
[  164.349721][ T5850]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.349742][ T5850]  ? clear_bhb_loop+0x40/0x90
[  164.349767][ T5850]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.349787][ T5850] RIP: 0033:0x7f433d79d9d7
[  164.349807][ T5850] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  164.349823][ T5850] RSP: 002b:00007ffecff32768 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  164.349844][ T5850] RAX: 0000000000000000 RBX: 00007f433d832050 RCX: 00007f433d79d9d7
[  164.349857][ T5850] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffecff32820
[  164.349869][ T5850] RBP: 00007ffecff32820 R08: 00007ffecff33820 R09: 00000000ffffffff
[  164.349882][ T5850] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffecff338b0
[  164.349894][ T5850] R13: 00007f433d832050 R14: 0000000000028119 R15: 00007ffecff338f0
[  164.349927][ T5850]  </TASK>
[  164.356711][ T5850] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  164.697885][ T5850] CPU: 1 UID: 0 PID: 5850 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  164.697914][ T5850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  164.697926][ T5850] Call Trace:
[  164.697934][ T5850]  <TASK>
[  164.697943][ T5850]  dump_stack_lvl+0xe8/0x150
[  164.697980][ T5850]  f2fs_handle_critical_error+0x37c/0x540
[  164.698015][ T5850]  f2fs_write_end_io+0x1274/0x1740
[  164.698069][ T5850]  __submit_merged_bio+0x256/0x700
[  164.698104][ T5850]  __submit_merged_write_cond+0x3c9/0x4e0
[  164.698139][ T5850]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  164.698191][ T5850]  f2fs_write_data_pages+0x287e/0x34f0
[  164.698261][ T5850]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  164.698306][ T5850]  ? __pfx_css_rstat_updated+0x10/0x10
[  164.698368][ T5850]  ? mod_memcg_lruvec_state+0x208/0x220
[  164.698398][ T5850]  ? __lock_acquire+0x6b5/0x2cf0
[  164.698446][ T5850]  ? __lock_acquire+0x6b5/0x2cf0
[  164.698481][ T5850]  ? do_raw_spin_lock+0x12b/0x2f0
[  164.698518][ T5850]  ? do_raw_spin_unlock+0xf5/0x210
[  164.698545][ T5850]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  164.698576][ T5850]  do_writepages+0x32e/0x550
[  164.698612][ T5850]  ? do_raw_spin_unlock+0xf5/0x210
[  164.698643][ T5850]  filemap_fdatawrite+0x1e9/0x2f0
[  164.698673][ T5850]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  164.698748][ T5850]  ? do_raw_spin_unlock+0xf5/0x210
[  164.698778][ T5850]  f2fs_sync_dirty_inodes+0x30e/0x860
[  164.698832][ T5850]  f2fs_write_checkpoint+0x9df/0x26a0
[  164.698888][ T5850]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  164.698967][ T5850]  kill_f2fs_super+0x314/0x720
[  164.699005][ T5850]  ? __pfx_kill_f2fs_super+0x10/0x10
[  164.699055][ T5850]  ? lockdep_hardirqs_on+0x7a/0x110
[  164.699095][ T5850]  deactivate_locked_super+0xbc/0x130
[  164.699127][ T5850]  cleanup_mnt+0x437/0x4d0
[  164.699146][ T5850]  ? _raw_spin_unlock_irq+0x23/0x50
[  164.699172][ T5850]  task_work_run+0x1d9/0x270
[  164.699201][ T5850]  ? __pfx_task_work_run+0x10/0x10
[  164.699239][ T5850]  exit_to_user_mode_loop+0xed/0x480
[  164.699266][ T5850]  ? rcu_is_watching+0x15/0xb0
[  164.699292][ T5850]  do_syscall_64+0x32d/0xf80
[  164.699316][ T5850]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.699337][ T5850]  ? clear_bhb_loop+0x40/0x90
[  164.699362][ T5850]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.699383][ T5850] RIP: 0033:0x7f433d79d9d7
[  164.699402][ T5850] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  164.699418][ T5850] RSP: 002b:00007ffecff32768 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  164.699439][ T5850] RAX: 0000000000000000 RBX: 00007f433d832050 RCX: 00007f433d79d9d7
[  164.699452][ T5850] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffecff32820
[  164.699464][ T5850] RBP: 00007ffecff32820 R08: 00007ffecff33820 R09: 00000000ffffffff
[  164.699476][ T5850] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffecff338b0
[  164.699488][ T5850] R13: 00007f433d832050 R14: 0000000000028119 R15: 00007ffecff338f0
[  164.699521][ T5850]  </TASK>
[  164.702238][ T5850] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  165.037093][ T6276] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.265924][ T6973] loop5: detected capacity change from 0 to 128
[  165.311257][ T6973] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  165.381630][ T6973] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  166.914231][ T6988] xt_CT: No such helper "pptp"
[  167.093100][ T6980] loop5: detected capacity change from 0 to 32768
[  167.220855][ T6980] JBD2: Ignoring recovery information on journal
[  167.445819][ T6980] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  167.765308][ T6992] loop7: detected capacity change from 0 to 32768
[  167.827075][ T6992] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  167.926369][ T6045] ocfs2: Unmounting device (7,5) on (node local)
[  167.999024][ T6992] XFS (loop7): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  168.072204][ T6995] loop0: detected capacity change from 0 to 32768
[  168.208698][ T6992] XFS (loop7): Starting recovery (logdev: internal)
[  168.710304][ T6992] XFS (loop7): Ending recovery (logdev: internal)
[  169.006055][ T6992] XFS (loop7): Metadata corruption detected at xfs_btree_lookup_get_block+0x3d6/0x510, xfs_bnobt block 0x8
[  169.007661][   T29] audit: type=1800 audit(1773798931.547:11): pid=6992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.165" name="file1" dev="loop7" ino=4422 res=0 errno=0
[  169.032049][ T6992] XFS (loop7): Unmount and run xfs_repair
[  169.210691][ T6584] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  169.231933][ T6584] XFS (loop7): Uncorrected metadata errors detected; please run xfs_repair.
[  171.594873][ T7037] loop0: detected capacity change from 0 to 256
[  171.608273][ T7037] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  172.269207][ T7018] loop6: detected capacity change from 0 to 40427
[  172.313918][ T7018] F2FS-fs (loop6): invalid crc value
[  172.407601][    T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  172.587504][    T9] usb 1-1: Using ep0 maxpacket: 16
[  172.596608][ T7026] loop7: detected capacity change from 0 to 40427
[  172.616255][    T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  172.660625][ T7026] F2FS-fs (loop7): invalid crc value
[  172.668914][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  172.725388][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  172.756102][    T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  172.812263][    T9] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  172.818374][ T7018] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  172.887893][    T9] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  172.898811][ T7018] F2FS-fs (loop6): Start checkpoint disabled!
[  172.915024][    T9] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  172.947227][    T9] usb 1-1: Manufacturer: syz
[  172.972831][ T7018] F2FS-fs (loop6): f2fs_disable_checkpoint() finish, err:0
[  172.996444][    T9] usb 1-1: config 0 descriptor??
[  173.112545][ T7026] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  173.146348][ T7026] F2FS-fs (loop7): Start checkpoint disabled!
[  173.174461][ T7026] F2FS-fs (loop7): f2fs_disable_checkpoint() finish, err:0
[  173.222505][ T7026] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6
[  173.298623][    T9] rc_core: IR keymap rc-hauppauge not found
[  173.898866][ T7052] xt_CT: No such helper "pptp"
[  174.022076][    T9] Registered IR keymap rc-empty
[  174.033603][    T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  174.057553][    T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  174.101965][    T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  174.166305][    T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input5
[  174.190498][ T6010] kworker/u8:9: attempt to access beyond end of device
[  174.190498][ T6010] loop7: rw=1, sector=77824, nr_sectors = 1280 limit=40427
[  174.250474][ T6010] kworker/u8:9: attempt to access beyond end of device
[  174.250474][ T6010] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  174.276233][    T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  174.284035][ T6010] CPU: 0 UID: 0 PID: 6010 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full) 
[  174.284066][ T6010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  174.284080][ T6010] Workqueue: writeback wb_workfn (flush-7:7)
[  174.284112][ T6010] Call Trace:
[  174.284120][ T6010]  <TASK>
[  174.284128][ T6010]  dump_stack_lvl+0xe8/0x150
[  174.284162][ T6010]  f2fs_handle_critical_error+0x37c/0x540
[  174.284197][ T6010]  f2fs_write_end_io+0x1274/0x1740
[  174.284253][ T6010]  __submit_merged_bio+0x256/0x700
[  174.284288][ T6010]  __submit_merged_write_cond+0x3c9/0x4e0
[  174.284325][ T6010]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  174.284380][ T6010]  f2fs_write_data_pages+0x287e/0x34f0
[  174.284453][ T6010]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  174.284498][ T6010]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  174.284560][ T6010]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  174.284614][ T6010]  ? __lock_acquire+0x6b5/0x2cf0
[  174.284668][ T6010]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  174.284701][ T6010]  do_writepages+0x32e/0x550
[  174.284735][ T6010]  ? reacquire_held_locks+0x104/0x190
[  174.284757][ T6010]  ? writeback_sb_inodes+0x477/0x1a20
[  174.284798][ T6010]  __writeback_single_inode+0x133/0x11a0
[  174.284835][ T6010]  ? do_raw_spin_unlock+0xf5/0x210
[  174.284867][ T6010]  writeback_sb_inodes+0x992/0x1a20
[  174.284904][ T6010]  ? tick_program_event+0x8f/0x120
[  174.284955][ T6010]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  174.284980][ T6010]  ? do_raw_spin_lock+0x12b/0x2f0
[  174.285054][ T6010]  ? rcu_is_watching+0x15/0xb0
[  174.285088][ T6010]  wb_writeback+0x456/0xb70
[  174.285119][ T6010]  ? queue_io+0x211/0x4a0
[  174.285157][ T6010]  ? __pfx_wb_writeback+0x10/0x10
[  174.285180][ T6010]  ? do_raw_spin_lock+0x12b/0x2f0
[  174.285228][ T6010]  wb_workfn+0x414/0xf50
[  174.285253][ T6010]  ? look_up_lock_class+0x57/0x110
[  174.285297][ T6010]  ? __pfx_wb_workfn+0x10/0x10
[  174.285323][ T6010]  ? do_raw_spin_lock+0x12b/0x2f0
[  174.285353][ T6010]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  174.285408][ T6010]  ? process_one_work+0x8bb/0x1780
[  174.285438][ T6010]  process_one_work+0x9ab/0x1780
[  174.285497][ T6010]  ? __pfx_process_one_work+0x10/0x10
[  174.285531][ T6010]  ? do_raw_spin_lock+0x12b/0x2f0
[  174.285578][ T6010]  worker_thread+0xba8/0x11e0
[  174.285611][ T6010]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  174.285636][ T6010]  ? __kthread_parkme+0x7a/0x1f0
[  174.285659][ T6010]  ? __kthread_parkme+0x19c/0x1f0
[  174.285690][ T6010]  kthread+0x388/0x470
[  174.285715][ T6010]  ? __pfx_worker_thread+0x10/0x10
[  174.285734][ T6010]  ? __pfx_kthread+0x10/0x10
[  174.285761][ T6010]  ret_from_fork+0x51e/0xb90
[  174.285794][ T6010]  ? __pfx_ret_from_fork+0x10/0x10
[  174.285830][ T6010]  ? __switch_to+0xc7d/0x1450
[  174.285863][ T6010]  ? __pfx_kthread+0x10/0x10
[  174.285889][ T6010]  ret_from_fork_asm+0x1a/0x30
[  174.285932][ T6010]  </TASK>
[  174.366915][ T6010] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  174.414646][    T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  174.667798][    T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  174.701057][    T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  174.737813][    T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  174.819137][    T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  174.857561][    T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  174.897542][    T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  174.938563][    T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  174.987556][    T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  175.079452][    T9] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  175.706479][    T9] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  175.735855][    T9] usb 1-1: USB disconnect, device number 5
[  176.022532][ T7067] xt_hashlimit: size too large, truncated to 1048576
[  176.120122][ T7056] loop5: detected capacity change from 0 to 32768
[  176.166571][ T7056] JBD2: Ignoring recovery information on journal
[  176.375428][ T7056] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  176.624582][ T7063] loop6: detected capacity change from 0 to 32768
[  176.674858][ T7063] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  176.686145][ T6045] ocfs2: Unmounting device (7,5) on (node local)
[  176.869852][ T7063] XFS (loop6): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  176.998200][ T7063] XFS (loop6): Starting recovery (logdev: internal)
[  177.297530][ T7063] XFS (loop6): Ending recovery (logdev: internal)
[  177.391405][ T7089] netlink: 24 bytes leftover after parsing attributes in process `syz.0.185'.
[  177.974453][ T7072] loop2: detected capacity change from 0 to 40427
[  178.035348][ T7072] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  178.061690][ T7072] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  178.103324][ T7093] XFS (loop6): Metadata corruption detected at xfs_inobt_verify+0x9e/0x1f0, xfs_finobt block 0x8 
[  178.175555][ T7093] XFS (loop6): Unmount and run xfs_repair
[  178.182341][ T7093] XFS (loop6): First 128 bytes of corrupted metadata buffer:
[  178.191514][ T7093] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  178.201057][ T7093] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[  178.222563][ T7093] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  178.258677][ T7093] 00000030: 00 00 00 00 c8 fc 31 e4 00 00 04 4e 00 00 00 02  ......1....N....
[  178.290444][ T7093] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00  ...`............
[  178.326303][ T7093] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  178.367189][ T7093] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  178.434319][ T7093] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  178.455628][ T7093] XFS (loop6): metadata I/O error in "xfs_btree_read_buf_block+0x2b0/0x490" at daddr 0x8 len 8 error 117
[  179.158528][   T29] audit: type=1800 audit(1773798941.687:12): pid=7091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.179" name="file1" dev="loop6" ino=4422 res=0 errno=0
[  179.386363][ T7072] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  179.408173][ T7072] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  179.425540][ T7072] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  179.592594][ T6276] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  179.670618][ T6276] XFS (loop6): Uncorrected metadata errors detected; please run xfs_repair.
[  180.053284][ T7109] xt_CT: No such helper "pptp"
[  180.123299][ T7111] loop7: detected capacity change from 0 to 40427
[  180.133766][ T7111] F2FS-fs (loop7): invalid crc value
[  180.330221][ T7111] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  180.342203][ T7111] F2FS-fs (loop7): Start checkpoint disabled!
[  180.349815][ T7111] F2FS-fs (loop7): f2fs_disable_checkpoint() finish, err:0
[  180.358586][ T7111] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6
[  180.376689][ T7111] F2FS-fs (loop7): Stopped filesystem due to reason: 0
[  180.688679][ T5932] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  181.280946][ T5932] usb 6-1: Using ep0 maxpacket: 16
[  181.306311][ T5932] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  181.339834][ T5932] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  181.373955][ T5932] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  181.409972][ T5932] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  181.450212][ T5932] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  181.483477][ T7123] loop2: detected capacity change from 0 to 512
[  181.507822][ T5932] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  181.540575][ T5932] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  181.576796][ T5932] usb 6-1: Manufacturer: syz
[  181.582232][ T7123] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.191: bad orphan inode 15
[  181.615668][ T5932] usb 6-1: config 0 descriptor??
[  181.622991][ T7123] loop2: lost filesystem error report for type 5 error -117
[  181.624591][ T7123] ext4_test_bit(bit=14, block=18) = 1
[  181.632043][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  181.632062][    C0] EXT4-fs (loop2): initial error at time 1773798944: ext4_orphan_get:1417
[  181.632086][    C0] EXT4-fs (loop2): last error at time 1773798944: ext4_orphan_get:1417
[  181.663020][ T7123] is_bad_inode(inode)=0
[  181.667250][ T7123] NEXT_ORPHAN(inode)=1023
[  181.674684][ T7123] max_ino=32
[  181.679174][ T7123] i_nlink=0
[  181.683233][ T7123] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2970: inode #15: comm syz.2.191: corrupted xattr block 19: invalid header
[  181.696969][ T7123] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  181.714944][ T7123] EXT4-fs warning (device loop2): ext4_evict_inode:275: xattr delete (err -117)
[  181.780224][ T7123] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none.
[  181.820795][ T7123] ext4 filesystem being mounted at /46/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff)
[  182.059902][ T5851] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0009-000000000000.
[  182.247892][ T5932] rc_core: IR keymap rc-hauppauge not found
[  182.272942][ T5932] Registered IR keymap rc-empty
[  182.293431][ T5932] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  182.347551][ T5932] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  182.402226][ T5932] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  182.460258][ T5932] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input6
[  182.519256][ T5932] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  182.540316][ T7136] loop6: detected capacity change from 0 to 1024
[  182.568353][ T5932] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  182.583841][ T7136] EXT4-fs: Ignoring removed oldalloc option
[  182.602011][ T7136] EXT4-fs: Ignoring removed bh option
[  182.608675][ T5932] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  182.625288][ T7140] loop2: detected capacity change from 0 to 128
[  182.648399][ T5932] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  182.678964][ T7136] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  182.729078][ T5932] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  182.750153][ T7140] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  182.756566][ T7145] loop7: detected capacity change from 0 to 512
[  182.769816][ T5932] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  182.788811][ T5932] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  182.815571][   T29] audit: type=1800 audit(1773798945.357:13): pid=7136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.197" name="file1" dev="loop6" ino=15 res=0 errno=0
[  182.846099][ T5932] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  182.875917][ T7140] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  182.888496][ T5932] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  182.908556][   T29] audit: type=1804 audit(1773798945.397:14): pid=7136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.197" name="/newroot/16/file1/file1" dev="loop6" ino=15 res=1 errno=0
[  182.961863][ T5932] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  183.003017][ T5932] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  183.048071][ T6276] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  183.072110][ T5932] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  183.112728][ T7145] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  183.126060][ T7145] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  183.171708][   T29] audit: type=1800 audit(1773798945.717:15): pid=7148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.198" name="file1" dev="loop2" ino=12 res=0 errno=0
[  183.175433][ T5932] usb 6-1: USB disconnect, device number 2
[  183.432081][ T5851] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  185.159237][ T7158] loop5: detected capacity change from 0 to 32768
[  185.237829][ T7158] XFS (loop5): DAX unsupported by block device. Turning off DAX.
[  185.257305][ T7158] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  185.356739][ T7158] XFS (loop5): Ending clean mount
[  185.473563][ T7158] XFS (loop5): Quotacheck needed: Please wait.
[  185.591919][ T7158] XFS (loop5): Quotacheck: Done.
[  185.903249][ T6045] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  185.992662][ T7168] loop0: detected capacity change from 0 to 32768
[  186.048618][ T7168] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  186.275052][ T7168] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  186.383503][ T7179] loop6: detected capacity change from 0 to 40427
[  186.406749][ T7168] XFS (loop0): Starting recovery (logdev: internal)
[  186.428862][ T7179] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[  186.470976][ T7179] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  186.513083][ T7168] XFS (loop0): Ending recovery (logdev: internal)
[  186.645660][ T7168] XFS (loop0): Metadata corruption detected at xfs_btree_lookup_get_block+0x3d6/0x510, xfs_bnobt block 0x8
[  186.646472][   T29] audit: type=1800 audit(1773798949.187:16): pid=7168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.205" name="file1" dev="loop0" ino=4422 res=0 errno=0
[  186.828941][ T7168] XFS (loop0): Unmount and run xfs_repair
[  186.991482][ T5850] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  187.003734][ T7179] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  187.042692][ T7179] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  187.074645][ T7179] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  187.074817][ T5850] XFS (loop0): Uncorrected metadata errors detected; please run xfs_repair.
[  187.244217][ T7200] xt_CT: No such helper "pptp"
[  187.841471][ T7207] loop0: detected capacity change from 0 to 512
[  187.895188][ T7207] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.210: bad orphan inode 15
[  187.930725][ T7207] loop0: lost filesystem error report for type 5 error -117
[  187.934196][ T7207] ext4_test_bit(bit=14, block=18) = 1
[  187.941678][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  187.941706][    C0] EXT4-fs (loop0): initial error at time 1773798950: ext4_orphan_get:1417
[  187.941734][    C0] EXT4-fs (loop0): last error at time 1773798950: ext4_orphan_get:1417
[  187.975964][ T7207] is_bad_inode(inode)=0
[  187.980453][ T7207] NEXT_ORPHAN(inode)=1023
[  187.984849][ T7207] max_ino=32
[  187.988113][ T7207] i_nlink=0
[  188.012777][ T7207] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2970: inode #15: comm syz.0.210: corrupted xattr block 19: invalid header
[  188.086784][ T7207] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  188.087300][ T7207] EXT4-fs warning (device loop0): ext4_evict_inode:275: xattr delete (err -117)
[  188.161267][ T7207] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none.
[  188.202040][ T7207] ext4 filesystem being mounted at /51/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff)
[  188.328909][ T5850] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0009-000000000000.
[  188.351601][ T6584] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  188.385044][ T7215] loop6: detected capacity change from 0 to 1024
[  188.403038][ T7215] EXT4-fs: Ignoring removed oldalloc option
[  188.437678][ T7215] EXT4-fs: Ignoring removed bh option
[  188.514447][ T7215] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  188.737732][   T29] audit: type=1800 audit(1773798951.277:17): pid=7215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.209" name="file1" dev="loop6" ino=15 res=0 errno=0
[  188.835621][   T29] audit: type=1804 audit(1773798951.277:18): pid=7215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.209" name="/newroot/21/file1/file1" dev="loop6" ino=15 res=1 errno=0
[  189.052642][ T7225] random: crng reseeded on system resumption
[  189.063649][ T5903] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  189.099107][ T6276] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  189.897519][ T5903] usb 1-1: Using ep0 maxpacket: 16
[  189.910986][ T5903] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  189.946789][ T5903] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  189.958845][ T5903] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  189.970678][ T5903] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  189.980848][ T5903] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  190.017242][ T5903] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  190.038794][ T5903] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  190.076664][ T5903] usb 1-1: Manufacturer: syz
[  190.111109][ T5903] usb 1-1: config 0 descriptor??
[  190.390960][ T7228] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  190.467983][ T5903] rc_core: IR keymap rc-hauppauge not found
[  190.482464][ T5903] Registered IR keymap rc-empty
[  190.501649][ T5903] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  190.549690][ T5903] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  190.598724][ T5903] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  190.661168][ T5903] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input7
[  190.706183][ T5903] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  190.752911][ T5903] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  190.798090][ T5903] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  190.841152][ T5903] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  190.877728][ T5903] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  190.909168][ T5903] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  190.951258][ T5903] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  191.007602][ T5903] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  191.047933][ T5903] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  191.077869][ T5903] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  191.131473][ T5903] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  191.156958][ T5903] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  191.189706][ T5903] usb 1-1: USB disconnect, device number 6
[  191.425761][ T7241] loop7: detected capacity change from 0 to 40427
[  191.446603][ T7241] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[  191.466281][ T7241] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  191.696624][ T7255] loop0: detected capacity change from 0 to 512
[  191.778567][ T7241] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  191.815218][ T7241] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  191.815716][ T7255] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.223: bad orphan inode 15
[  191.838554][ T7241] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  191.913809][ T7255] loop0: lost filesystem error report for type 5 error -117
[  191.914240][ T7255] ext4_test_bit(bit=14, block=18) = 1
[  191.921765][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  191.921794][    C0] EXT4-fs (loop0): initial error at time 1773798954: ext4_orphan_get:1417
[  191.921816][    C0] EXT4-fs (loop0): last error at time 1773798954: ext4_orphan_get:1417
[  191.988487][ T7255] is_bad_inode(inode)=0
[  191.992867][ T7255] NEXT_ORPHAN(inode)=1023
[  192.011889][ T7255] max_ino=32
[  192.016809][ T7255] i_nlink=0
[  192.031619][ T7255] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2970: inode #15: comm syz.0.223: corrupted xattr block 19: invalid header
[  192.047525][ T7255] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  192.052541][ T7255] EXT4-fs warning (device loop0): ext4_evict_inode:275: xattr delete (err -117)
[  192.073743][ T7248] loop2: detected capacity change from 0 to 40427
[  192.110451][ T7248] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  192.135638][ T7255] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none.
[  192.158542][ T7248] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  192.188134][ T7255] ext4 filesystem being mounted at /53/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff)
[  192.316531][ T5850] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0009-000000000000.
[  192.446440][ T7248] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  192.488618][ T7248] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  192.577572][ T7248] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  192.593667][ T7250] loop5: detected capacity change from 0 to 40427
[  192.667027][ T7250] F2FS-fs (loop5): build fault injection rate: 174
[  192.720882][ T7250] F2FS-fs (loop5): build fault injection type: 0x3bfe8c
[  192.780379][ T7250] F2FS-fs (loop5): invalid crc value
[  193.116387][ T7250] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  193.132358][ T7269] xt_CT: No such helper "pptp"
[  193.155441][ T7250] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  193.303226][ T6045] F2FS-fs (loop5): inject inconsistent footer in f2fs_sanity_check_node_footer of __get_node_folio+0x8b5/0xe90
[  193.352329][ T6045] F2FS-fs (loop5): inconsistent node block, node_type:3, nid:11, node_footer[nid:11,ino:3,ofs:2041,cpver:0,blkaddr:0]
[  193.402550][ T6045] syz-executor: attempt to access beyond end of device
[  193.402550][ T6045] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  193.452177][ T6045] CPU: 1 UID: 0 PID: 6045 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  193.452206][ T6045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  193.452219][ T6045] Call Trace:
[  193.452227][ T6045]  <TASK>
[  193.452236][ T6045]  dump_stack_lvl+0xe8/0x150
[  193.452273][ T6045]  f2fs_handle_critical_error+0x37c/0x540
[  193.452309][ T6045]  f2fs_write_end_io+0x1274/0x1740
[  193.452364][ T6045]  __submit_merged_bio+0x256/0x700
[  193.452400][ T6045]  __submit_merged_write_cond+0x3c9/0x4e0
[  193.452437][ T6045]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  193.452491][ T6045]  f2fs_write_data_pages+0x287e/0x34f0
[  193.452561][ T6045]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  193.452607][ T6045]  ? __pfx_css_rstat_updated+0x10/0x10
[  193.452677][ T6045]  ? mod_memcg_lruvec_state+0x208/0x220
[  193.452709][ T6045]  ? __lock_acquire+0x6b5/0x2cf0
[  193.452757][ T6045]  ? __lock_acquire+0x6b5/0x2cf0
[  193.452792][ T6045]  ? do_raw_spin_lock+0x12b/0x2f0
[  193.452831][ T6045]  ? do_raw_spin_unlock+0xf5/0x210
[  193.452857][ T6045]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  193.452889][ T6045]  do_writepages+0x32e/0x550
[  193.452927][ T6045]  ? do_raw_spin_unlock+0xf5/0x210
[  193.452959][ T6045]  filemap_fdatawrite+0x1e9/0x2f0
[  193.452988][ T6045]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  193.453065][ T6045]  ? do_raw_spin_unlock+0xf5/0x210
[  193.453095][ T6045]  f2fs_sync_dirty_inodes+0x30e/0x860
[  193.453145][ T6045]  f2fs_write_checkpoint+0x9df/0x26a0
[  193.453203][ T6045]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  193.453284][ T6045]  kill_f2fs_super+0x314/0x720
[  193.453323][ T6045]  ? __pfx_kill_f2fs_super+0x10/0x10
[  193.453369][ T6045]  ? lockdep_hardirqs_on+0x7a/0x110
[  193.453408][ T6045]  deactivate_locked_super+0xbc/0x130
[  193.453442][ T6045]  cleanup_mnt+0x437/0x4d0
[  193.453462][ T6045]  ? _raw_spin_unlock_irq+0x23/0x50
[  193.453488][ T6045]  task_work_run+0x1d9/0x270
[  193.453523][ T6045]  ? __pfx_task_work_run+0x10/0x10
[  193.453562][ T6045]  exit_to_user_mode_loop+0xed/0x480
[  193.453590][ T6045]  ? rcu_is_watching+0x15/0xb0
[  193.453618][ T6045]  do_syscall_64+0x32d/0xf80
[  193.453648][ T6045]  ? trace_irq_disable+0x3b/0x150
[  193.453672][ T6045]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  193.453693][ T6045]  ? clear_bhb_loop+0x40/0x90
[  193.453719][ T6045]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  193.453740][ T6045] RIP: 0033:0x7f185139d9d7
[  193.453760][ T6045] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  193.453777][ T6045] RSP: 002b:00007ffcee3de8f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  193.453799][ T6045] RAX: 0000000000000000 RBX: 00007f1851432050 RCX: 00007f185139d9d7
[  193.453813][ T6045] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcee3de9b0
[  193.453825][ T6045] RBP: 00007ffcee3de9b0 R08: 00007ffcee3df9b0 R09: 00000000ffffffff
[  193.453839][ T6045] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcee3dfa40
[  193.453851][ T6045] R13: 00007f1851432050 R14: 000000000002f2aa R15: 00007ffcee3dfa80
[  193.453886][ T6045]  </TASK>
[  193.787516][ T6045] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  193.973418][ T7276] loop2: detected capacity change from 0 to 1024
[  194.046270][ T7276] EXT4-fs: Ignoring removed oldalloc option
[  194.074274][ T7276] EXT4-fs: Ignoring removed bh option
[  194.173739][ T7276] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  194.250256][ T1315] ieee802154 phy0 wpan0: encryption failed: -22
[  194.256713][ T1315] ieee802154 phy1 wpan1: encryption failed: -22
[  194.336021][   T29] audit: type=1800 audit(1773798956.877:19): pid=7276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.226" name="file1" dev="loop2" ino=15 res=0 errno=0
[  194.394801][   T29] audit: type=1804 audit(1773798956.917:20): pid=7280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.226" name="/newroot/56/file1/file1" dev="loop2" ino=15 res=1 errno=0
[  194.634696][ T7274] loop7: detected capacity change from 0 to 32768
[  194.671758][ T5851] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.629398][ T7285] syz.7.224: attempt to access beyond end of device
[  195.629398][ T7285] loop7: rw=8388609, sector=4680032, nr_sectors = 8 limit=32768
[  195.769685][ T7285] metapage_write_end_io: I/O error
[  195.817544][ T7285] ERROR: (device loop7): release_metapage: metapage_write_one() failed
[  195.817544][ T7285] 
[  195.860923][ T7285] ERROR: (device loop7): remounting filesystem as read-only
[  195.891770][  T119] blkno = 8ed2c, nblocks = 1
[  195.903636][ T7285] blkno = 8ed2c, nblocks = 1
[  195.913172][  T119] ERROR: (device loop7): dbUpdatePMap: blocks are outside the map
[  195.913172][  T119] 
[  195.934265][ T7285] ERROR: (device loop7): dbUpdatePMap: blocks are outside the map
[  195.934265][ T7285] 
[  196.023367][ T7285] Bad maxslot:44 in dtpage (expected 128)
[  196.023367][ T7285] 
[  196.051349][ T7285] ERROR: (device loop7): dtSearch: DT_GETPAGE: dtree page corrupt
[  196.051349][ T7285] 
[  196.063018][ T7285] jfs_mkdir: dtSearch returned -5
[  196.656223][ T7297] loop0: detected capacity change from 0 to 256
[  196.665572][ T7297] exfat: Deprecated parameter 'namecase'
[  196.694500][ T7297] exFAT-fs (loop0): failed to load alloc-bitmap
[  196.701193][ T7297] exFAT-fs (loop0): failed to recognize exfat type
[  196.765505][ T6584] syz-executor: attempt to access beyond end of device
[  196.765505][ T6584] loop7: rw=8388609, sector=4680032, nr_sectors = 8 limit=32768
[  196.828771][ T6584] metapage_write_end_io: I/O error
[  196.845499][ T6584] JFS: metapage_get_blocks failed
[  196.865022][ T6584] JFS: metapage_get_blocks failed
[  196.881877][ T6584] JFS: metapage_get_blocks failed
[  196.898605][ T6584] JFS: metapage_get_blocks failed
[  197.487522][ T6517] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  197.657455][ T6517] usb 1-1: Using ep0 maxpacket: 16
[  197.674700][ T6517] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  197.714274][ T6517] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  197.735652][ T6517] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  197.756867][ T6517] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  197.796400][ T6517] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  197.839593][ T6517] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  197.856665][ T6517] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  197.889389][ T6517] usb 1-1: Manufacturer: syz
[  197.903998][ T6517] usb 1-1: config 0 descriptor??
[  197.960017][ T7311] loop7: detected capacity change from 0 to 512
[  198.009927][ T7311] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.235: bad orphan inode 15
[  198.037594][ T7311] loop7: lost filesystem error report for type 5 error -117
[  198.042132][ T7311] ext4_test_bit(bit=14, block=18) = 1
[  198.049636][    C1] EXT4-fs (loop7): error count since last fsck: 1
[  198.049663][    C1] EXT4-fs (loop7): initial error at time 1773798960: ext4_orphan_get:1417
[  198.049692][    C1] EXT4-fs (loop7): last error at time 1773798960: ext4_orphan_get:1417
[  198.123979][ T7311] is_bad_inode(inode)=0
[  198.135768][ T7311] NEXT_ORPHAN(inode)=1023
[  198.142054][ T7311] max_ino=32
[  198.156035][ T7311] i_nlink=0
[  198.161368][ T7311] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2970: inode #15: comm syz.7.235: corrupted xattr block 19: invalid header
[  198.187511][ T7311] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  198.187963][ T7311] EXT4-fs warning (device loop7): ext4_evict_inode:275: xattr delete (err -117)
[  198.221998][ T7311] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none.
[  198.250284][ T6517] rc_core: IR keymap rc-hauppauge not found
[  198.256308][ T6517] Registered IR keymap rc-empty
[  198.267655][ T6517] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  198.275558][ T7311] ext4 filesystem being mounted at /28/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff)
[  198.318458][ T6517] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  198.350307][ T6517] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  198.384945][ T6584] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0009-000000000000.
[  198.402861][ T6517] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input8
[  198.461866][ T6517] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  198.512603][ T6517] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  198.558597][ T6517] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  198.565570][ T7306] loop6: detected capacity change from 0 to 40427
[  198.599027][ T6517] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  198.599557][ T7306] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[  198.635383][ T7306] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  198.648810][ T6517] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  198.699302][ T6517] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  198.759147][ T6517] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  198.812815][ T6517] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  198.847590][ T6517] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  198.887794][ T6517] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  198.918370][ T7312] loop2: detected capacity change from 0 to 32768
[  198.929825][ T6517] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  198.947494][ T6517] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  198.985784][ T6517] usb 1-1: USB disconnect, device number 7
[  199.061449][ T7306] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  199.129278][ T7312] JBD2: Ignoring recovery information on journal
[  199.139343][ T7306] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  199.170908][ T7306] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  200.081486][ T7312] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  200.837304][ T7335] loop5: detected capacity change from 0 to 1024
[  200.881358][ T7335] EXT4-fs: Ignoring removed oldalloc option
[  201.014732][ T7335] EXT4-fs: Ignoring removed bh option
[  201.186045][ T5851] ocfs2: Unmounting device (7,2) on (node local)
[  201.523756][ T7318] loop7: detected capacity change from 0 to 40427
[  201.533439][ T7318] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[  201.543430][ T7318] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  201.551946][ T7318] F2FS-fs (loop7): Unable to read 2th superblock
[  201.609337][ T7335] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  201.736306][   T29] audit: type=1804 audit(1773798964.277:21): pid=7335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.240" name="/newroot/34/file1/file1" dev="loop5" ino=15 res=1 errno=0
[  201.821732][ T6045] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.949430][ T7349] loop0: detected capacity change from 0 to 512
[  203.439433][ T7349] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.247: bad orphan inode 15
[  203.494519][ T7349] loop0: lost filesystem error report for type 5 error -117
[  203.497417][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  203.511324][    C0] EXT4-fs (loop0): initial error at time 1773798966: ext4_orphan_get:1417
[  203.519904][    C0] EXT4-fs (loop0): last error at time 1773798966: ext4_orphan_get:1417
[  203.863119][ T7349] ext4_test_bit(bit=14, block=18) = 1
[  204.466279][ T7349] is_bad_inode(inode)=0
[  204.507087][ T7349] NEXT_ORPHAN(inode)=1023
[  204.613869][ T7349] max_ino=32
[  204.617205][ T7349] i_nlink=0
[  205.017148][ T7349] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2970: inode #15: comm syz.0.247: corrupted xattr block 19: invalid header
[  205.138594][ T7349] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  205.162930][ T7349] EXT4-fs warning (device loop0): ext4_evict_inode:275: xattr delete (err -117)
[  205.183968][ T7349] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none.
[  205.279589][ T7349] ext4 filesystem being mounted at /61/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff)
[  205.442950][ T7354] loop6: detected capacity change from 0 to 32768
[  206.138584][ T7358] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 449: padding at end of block bitmap is not set
[  206.160329][ T7373] syz.6.242: attempt to access beyond end of device
[  206.160329][ T7373] loop6: rw=8388609, sector=4680032, nr_sectors = 8 limit=32768
[  206.252071][ T7373] metapage_write_end_io: I/O error
[  206.257664][ T7373] ERROR: (device loop6): release_metapage: metapage_write_one() failed
[  206.257664][ T7373] 
[  206.271982][ T7373] ERROR: (device loop6): remounting filesystem as read-only
[  206.288632][  T118] blkno = 8ed2c, nblocks = 1
[  206.294993][  T118] ERROR: (device loop6): dbUpdatePMap: blocks are outside the map
[  206.294993][  T118] 
[  206.325624][ T7373] blkno = 8ed2c, nblocks = 1
[  206.339691][ T7373] ERROR: (device loop6): dbUpdatePMap: blocks are outside the map
[  206.339691][ T7373] 
[  206.370151][ T7373] Bad maxslot:44 in dtpage (expected 128)
[  206.370151][ T7373] 
[  206.378844][ T7373] ERROR: (device loop6): dtSearch: DT_GETPAGE: dtree page corrupt
[  206.378844][ T7373] 
[  206.391300][ T7373] jfs_mkdir: dtSearch returned -5
[  206.409570][ T5850] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0009-000000000000.
[  206.441926][ T6276] syz-executor: attempt to access beyond end of device
[  206.441926][ T6276] loop6: rw=8388609, sector=4680032, nr_sectors = 8 limit=32768
[  206.476142][ T6276] metapage_write_end_io: I/O error
[  206.530640][ T6276] JFS: metapage_get_blocks failed
[  206.545712][ T7375] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  206.566315][ T6276] JFS: metapage_get_blocks failed
[  206.599421][ T6276] JFS: metapage_get_blocks failed
[  206.619677][ T6276] JFS: metapage_get_blocks failed
[  208.579647][ T7381] loop0: detected capacity change from 0 to 40427
[  208.600982][ T7381] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  208.621008][ T7381] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  208.860119][ T7394] loop6: detected capacity change from 0 to 40427
[  208.882011][ T7394] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[  208.912456][ T7394] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  208.926995][ T7381] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  208.955267][ T7381] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  208.978724][ T7381] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  209.202499][ T7394] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  209.255876][ T7394] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  209.272345][ T7394] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  210.698852][ T7421] loop5: detected capacity change from 0 to 512
[  210.775969][ T7421] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.265: bad orphan inode 15
[  210.801943][ T7421] loop5: lost filesystem error report for type 5 error -117
[  210.804049][ T7421] ext4_test_bit(bit=14, block=18) = 1
[  210.811475][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  210.811497][    C0] EXT4-fs (loop5): initial error at time 1773798973: ext4_orphan_get:1417
[  210.811526][    C0] EXT4-fs (loop5): last error at time 1773798973: ext4_orphan_get:1417
[  210.842688][ T7421] is_bad_inode(inode)=0
[  210.846904][ T7421] NEXT_ORPHAN(inode)=1023
[  210.853185][ T7421] max_ino=32
[  210.856432][ T7421] i_nlink=0
[  210.863381][ T7421] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2970: inode #15: comm syz.5.265: corrupted xattr block 19: invalid header
[  210.901095][ T7421] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  210.901602][ T7421] EXT4-fs warning (device loop5): ext4_evict_inode:275: xattr delete (err -117)
[  210.967206][ T7421] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none.
[  211.019334][ T7421] ext4 filesystem being mounted at /39/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff)
[  211.151826][ T6045] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0009-000000000000.
[  211.495422][ T7434] loop0: detected capacity change from 0 to 2048
[  211.549657][ T7434] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  211.561961][ T7411] loop2: detected capacity change from 0 to 32768
[  211.602091][ T7434] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  211.672611][ T7411] XFS (loop2): DAX unsupported by block device. Turning off DAX.
[  211.702709][ T7411] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  211.781661][ T7434] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  211.810308][ T7434] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[  212.265620][ T7434] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  212.524986][ T7411] XFS (loop2): Ending clean mount
[  212.591021][ T7411] XFS (loop2): Quotacheck needed: Please wait.
[  212.629280][ T7448] syz.7.268 (7448) used greatest stack depth: 14568 bytes left
[  212.941146][ T7411] XFS (loop2): Quotacheck: Done.
[  213.067243][ T5851] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  214.060129][ T7435] loop6: detected capacity change from 0 to 32768
[  214.070080][  T808] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  214.125335][ T7435] syz.6.264: attempt to access beyond end of device
[  214.125335][ T7435] loop6: rw=8388609, sector=4680032, nr_sectors = 8 limit=32768
[  214.162791][ T7435] metapage_write_end_io: I/O error
[  214.180581][ T7435] ERROR: (device loop6): release_metapage: metapage_write_one() failed
[  214.180581][ T7435] 
[  214.216264][ T7435] ERROR: (device loop6): remounting filesystem as read-only
[  214.239352][  T118] blkno = 8ed2c, nblocks = 1
[  214.244217][  T118] ERROR: (device loop6): dbUpdatePMap: blocks are outside the map
[  214.244217][  T118] 
[  214.255253][ T7435] blkno = 8ed2c, nblocks = 1
[  214.267464][  T808] usb 1-1: Using ep0 maxpacket: 32
[  214.277529][ T7435] ERROR: (device loop6): dbUpdatePMap: blocks are outside the map
[  214.277529][ T7435] 
[  214.302222][  T808] usb 1-1: config 2 has an invalid interface number: 88 but max is 0
[  214.336850][ T7435] Bad maxslot:44 in dtpage (expected 128)
[  214.336850][ T7435] 
[  214.341234][  T808] usb 1-1: config 2 has no interface number 0
[  214.376475][  T808] usb 1-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256
[  214.379235][ T7435] ERROR: (device loop6): dtSearch: DT_GETPAGE: dtree page corrupt
[  214.379235][ T7435] 
[  214.418690][  T808] usb 1-1: config 2 interface 88 has no altsetting 0
[  214.422608][ T7435] jfs_mkdir: dtSearch returned -5
[  214.515967][ T6276] syz-executor: attempt to access beyond end of device
[  214.515967][ T6276] loop6: rw=8388609, sector=4680032, nr_sectors = 8 limit=32768
[  214.567499][ T6276] metapage_write_end_io: I/O error
[  214.585948][ T6276] JFS: metapage_get_blocks failed
[  214.605053][ T6276] JFS: metapage_get_blocks failed
[  214.626119][ T6276] JFS: metapage_get_blocks failed
[  214.643228][ T6276] JFS: metapage_get_blocks failed
[  214.664001][  T808] usb 1-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e
[  214.687474][  T808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  214.707459][  T808] usb 1-1: Product: syz
[  214.711714][  T808] usb 1-1: Manufacturer: syz
[  214.716347][  T808] usb 1-1: SerialNumber: syz
[  214.824745][ T7467] loop5: detected capacity change from 0 to 512
[  214.982391][ T7467] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  214.996849][ T7467] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  215.381627][ T7457] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  215.707771][ T7457] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  216.556964][ T6045] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  216.650216][ T7459] loop7: detected capacity change from 0 to 40427
[  216.672393][ T7459] f2fs: Bad value for 'resuid'
[  216.690109][ T7459] f2fs: Bad value for 'resuid'
[  216.760949][ T7477] loop6: detected capacity change from 0 to 512
[  216.787036][ T7477] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.277: bad orphan inode 15
[  216.812739][ T7477] loop6: lost filesystem error report for type 5 error -117
[  216.814695][ T7477] ext4_test_bit(bit=14, block=18) = 1
[  216.822192][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  216.822220][    C0] EXT4-fs (loop6): initial error at time 1773798979: ext4_orphan_get:1417
[  216.822249][    C0] EXT4-fs (loop6): last error at time 1773798979: ext4_orphan_get:1417
[  216.921669][ T7477] is_bad_inode(inode)=0
[  216.946101][ T7477] NEXT_ORPHAN(inode)=1023
[  216.963374][ T7477] max_ino=32
[  216.983840][ T7477] i_nlink=0
[  217.022111][ T7477] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2970: inode #15: comm syz.6.277: corrupted xattr block 19: invalid header
[  217.052507][ T7477] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  217.053063][ T7477] EXT4-fs warning (device loop6): ext4_evict_inode:275: xattr delete (err -117)
[  217.083314][ T7477] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none.
[  217.667670][ T7477] ext4 filesystem being mounted at /28/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff)
[  217.709807][  T808] asix 1-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  217.801171][  T808] asix 1-1:2.88: probe with driver asix failed with error -71
[  217.803481][ T7485] loop7: detected capacity change from 0 to 2048
[  217.851713][ T6276] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0009-000000000000.
[  217.867306][  T808] usb 1-1: USB disconnect, device number 8
[  217.905647][ T7485] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  217.955051][ T7485] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  218.034814][ T7485] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  218.071043][ T7485] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[  218.115395][ T7485] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  221.565485][ T7523] loop0: detected capacity change from 0 to 512
[  221.621173][ T7523] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.291: bad orphan inode 15
[  221.637550][ T7523] loop0: lost filesystem error report for type 5 error -117
[  221.647405][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  221.661250][    C1] EXT4-fs (loop0): initial error at time 1773798984: ext4_orphan_get:1417
[  221.669847][    C1] EXT4-fs (loop0): last error at time 1773798984: ext4_orphan_get:1417
[  221.692713][ T7523] ext4_test_bit(bit=14, block=18) = 1
[  221.722731][ T7523] is_bad_inode(inode)=0
[  221.737462][ T7523] NEXT_ORPHAN(inode)=1023
[  221.748507][ T7527] loop6: detected capacity change from 0 to 2048
[  221.756690][ T7523] max_ino=32
[  221.760168][ T7523] i_nlink=0
[  221.770754][ T7523] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2970: inode #15: comm syz.0.291: corrupted xattr block 19: invalid header
[  221.795485][ T7527] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  221.817909][ T7523] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  221.818444][ T7523] EXT4-fs warning (device loop0): ext4_evict_inode:275: xattr delete (err -117)
[  221.846119][ T7527] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  221.902536][ T7523] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none.
[  221.941153][ T7527] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  221.983250][ T7523] ext4 filesystem being mounted at /68/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff)
[  221.994274][ T7527] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[  221.994344][ T7527] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  223.183332][ T5850] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0009-000000000000.
[  223.727962][ T7556] loop6: detected capacity change from 0 to 256
[  223.755739][ T7556] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  223.769925][ T7551] xt_CT: No such helper "pptp"
[  226.314949][ T7577] loop6: detected capacity change from 0 to 2048
[  226.474392][ T7577] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  226.490505][ T7577] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  227.142666][ T7577] overlayfs: missing 'lowerdir'
[  227.229709][ T7583] loop2: detected capacity change from 0 to 512
[  227.249899][   T43] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  227.308985][ T7583] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.309: bad orphan inode 15
[  227.364112][ T7583] loop2: lost filesystem error report for type 5 error -117
[  227.364565][ T7583] ext4_test_bit(bit=14, block=18) = 1
[  227.372016][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  227.372042][    C0] EXT4-fs (loop2): initial error at time 1773798989: ext4_orphan_get:1417
[  227.372073][    C0] EXT4-fs (loop2): last error at time 1773798989: ext4_orphan_get:1417
[  227.418471][   T43] usb 1-1: Using ep0 maxpacket: 16
[  227.426030][   T43] usb 1-1: config 0 has an invalid interface number: 251 but max is 0
[  227.434464][   T43] usb 1-1: config 0 has no interface number 0
[  227.440755][   T43] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  227.450923][   T43] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  227.465313][   T43] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  227.474883][   T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  227.485827][ T7583] is_bad_inode(inode)=0
[  227.491756][ T7583] NEXT_ORPHAN(inode)=1023
[  227.496257][   T43] usb 1-1: Product: syz
[  227.500623][ T7583] max_ino=32
[  227.504334][   T43] usb 1-1: Manufacturer: syz
[  227.511850][ T7583] i_nlink=0
[  227.515705][ T7583] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2970: inode #15: comm syz.2.309: corrupted xattr block 19: invalid header
[  227.537458][   T43] usb 1-1: SerialNumber: syz
[  227.548595][ T7583] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  227.549064][ T7583] EXT4-fs warning (device loop2): ext4_evict_inode:275: xattr delete (err -117)
[  227.578453][ T7583] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none.
[  227.599898][   T43] usb 1-1: config 0 descriptor??
[  227.608464][ T7576] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  227.624432][ T7583] ext4 filesystem being mounted at /70/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff)
[  227.635704][ T7576] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  228.893738][ T7593] loop6: detected capacity change from 0 to 40427
[  229.055955][ T7576] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  229.080779][ T7576] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  229.142267][ T7579] loop7: detected capacity change from 0 to 32768
[  229.170802][ T7579] XFS (loop7): DAX unsupported by block device. Turning off DAX.
[  229.189881][ T7579] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  229.217112][ T7593] F2FS-fs (loop6): invalid crc value
[  229.299904][ T7579] XFS (loop7): Ending clean mount
[  229.311781][ T7593] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  229.324614][ T7593] F2FS-fs (loop6): Start checkpoint disabled!
[  229.337966][ T7593] F2FS-fs (loop6): f2fs_disable_checkpoint() finish, err:0
[  229.345933][ T7593] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[  229.387639][ T7579] XFS (loop7): Quotacheck needed: Please wait.
[  229.396453][ T5851] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0009-000000000000.
[  229.415372][ T7606] syz.6.311: attempt to access beyond end of device
[  229.415372][ T7606] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  229.432562][ T7606] syz.6.311: attempt to access beyond end of device
[  229.432562][ T7606] loop6: rw=2049, sector=45136, nr_sectors = 32 limit=40427
[  229.447263][ T7606] syz.6.311: attempt to access beyond end of device
[  229.447263][ T7606] loop6: rw=2049, sector=45200, nr_sectors = 24 limit=40427
[  229.461652][ T7606] syz.6.311: attempt to access beyond end of device
[  229.461652][ T7606] loop6: rw=2049, sector=45248, nr_sectors = 24 limit=40427
[  229.475932][ T7606] syz.6.311: attempt to access beyond end of device
[  229.475932][ T7606] loop6: rw=2049, sector=45280, nr_sectors = 16 limit=40427
[  229.490514][ T7607] syz.6.311: attempt to access beyond end of device
[  229.490514][ T7607] loop6: rw=2049, sector=45320, nr_sectors = 8 limit=40427
[  229.504399][ T7607] F2FS-fs (loop6): Stopped filesystem due to reason: 0
[  229.504403][ T7606] syz.6.311: attempt to access beyond end of device
[  229.504403][ T7606] loop6: rw=2049, sector=45328, nr_sectors = 8 limit=40427
[  229.655472][ T7608] loop5: detected capacity change from 0 to 256
[  229.818722][ T7608] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xf3da6b1f, utbl_chksum : 0xe619d30d)
[  229.870819][   T43] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  229.933509][   T43] asix 1-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  229.965164][ T7579] XFS (loop7): Quotacheck: Done.
[  230.155357][   T43] asix 1-1:0.251: probe with driver asix failed with error -71
[  230.168481][   T43] usb 1-1: USB disconnect, device number 9
[  230.213184][ T6584] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  230.510049][ T7611] xt_CT: No such helper "pptp"
[  233.697645][ T7647] netlink: 27 bytes leftover after parsing attributes in process `syz.5.321'.
[  234.514081][ T7652] random: crng reseeded on system resumption
[  236.132339][ T7657] loop5: detected capacity change from 0 to 32768
[  236.198926][ T7657] XFS (loop5): DAX unsupported by block device. Turning off DAX.
[  236.248160][ T7659] loop6: detected capacity change from 0 to 32768
[  236.253861][ T7657] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  236.294863][ T7659] JBD2: Ignoring recovery information on journal
[  236.342246][ T7659] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  236.493008][ T7657] XFS (loop5): Ending clean mount
[  236.594993][ T7657] XFS (loop5): Quotacheck needed: Please wait.
[  236.828403][ T7657] XFS (loop5): Quotacheck: Done.
[  236.887116][ T6276] ocfs2: Unmounting device (7,6) on (node local)
[  237.088012][ T6045] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  237.099271][ T7679] loop7: detected capacity change from 0 to 512
[  237.144300][ T7679] EXT4-fs: Ignoring removed orlov option
[  237.174342][ T7679] EXT4-fs: Ignoring removed mblk_io_submit option
[  237.257276][ T7679] EXT4-fs error (device loop7): ext4_iget_extra_inode:5028: inode #15: comm syz.7.333: corrupted in-inode xattr: e_value size too large
[  237.281361][ T5861] Bluetooth: hci0: command 0x0406 tx timeout
[  237.325768][ T7679] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  237.326330][ T7679] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.333: couldn't read orphan inode 15 (err -117)
[  237.335631][    C0] EXT4-fs (loop7): error count since last fsck: 1
[  237.335655][    C0] EXT4-fs (loop7): initial error at time 1773798999: ext4_iget_extra_inode:5028: inode 15
[  237.335703][    C0] EXT4-fs (loop7): last error at time 1773798999: ext4_iget_extra_inode:5028: inode 15
[  237.457641][ T6517] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  237.502673][ T7679] loop7: lost filesystem error report for type 5 error -117
[  237.523729][ T7679] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  237.573511][ T7684] loop6: detected capacity change from 0 to 256
[  237.679525][ T6517] usb 1-1: Using ep0 maxpacket: 8
[  237.806568][ T6517] usb 1-1: config 135 has an invalid interface number: 230 but max is 0
[  237.851736][ T6517] usb 1-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config
[  237.872796][ T7684] FAT-fs (loop6): Directory bread(block 64) failed
[  237.879505][ T7684] FAT-fs (loop6): Directory bread(block 65) failed
[  237.942195][ T7686] Zero length message leads to an empty skb
[  238.005983][ T7684] FAT-fs (loop6): Directory bread(block 66) failed
[  238.279920][ T7684] FAT-fs (loop6): Directory bread(block 67) failed
[  238.324080][ T7684] FAT-fs (loop6): Directory bread(block 68) failed
[  238.378963][ T7684] FAT-fs (loop6): Directory bread(block 69) failed
[  238.425639][ T7684] FAT-fs (loop6): Directory bread(block 70) failed
[  238.459802][ T7684] FAT-fs (loop6): Directory bread(block 71) failed
[  238.502346][ T6517] usb 1-1: config 135 has no interface number 0
[  238.505974][ T7684] FAT-fs (loop6): Directory bread(block 72) failed
[  238.509349][ T6517] usb 1-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30
[  238.526195][ T6584] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  238.528839][ T6517] usb 1-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53
[  238.552315][ T7684] FAT-fs (loop6): Directory bread(block 73) failed
[  238.585803][ T6517] usb 1-1: config 135 interface 230 has no altsetting 0
[  238.619115][ T6517] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[  238.648143][ T6517] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  238.682156][ T6517] usb 1-1: Product: syz
[  238.692861][ T6517] usb 1-1: Manufacturer: syz
[  238.698511][ T6517] usb 1-1: SerialNumber: syz
[  238.731380][ T6517] uvcvideo 1-1:135.230: Found UVC 0.00 device syz (18ec:3288)
[  238.763196][ T6517] uvcvideo 1-1:135.230: No valid video chain found.
[  239.148401][  T808] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  239.359355][  T808] usb 8-1: Using ep0 maxpacket: 16
[  239.737423][  T808] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  239.907485][  T808] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  239.930484][  T808] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  239.957416][  T808] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  239.974786][  T808] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  240.014475][  T808] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  240.049599][  T808] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  240.089016][  T808] usb 8-1: Manufacturer: syz
[  240.095308][ T6517] usb 1-1: USB disconnect, device number 10
[  240.137128][  T808] usb 8-1: config 0 descriptor??
[  240.210618][ T7702] tipc: Started in network mode
[  240.215814][ T7702] tipc: Node identity 4a4311a20339, cluster identity 4711
[  240.239391][ T7702] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  240.262293][ T7702] syzkaller0: entered promiscuous mode
[  240.277441][ T7702] syzkaller0: entered allmulticast mode
[  240.394825][ T7702] tipc: Resetting bearer <eth:syzkaller0>
[  240.440798][ T7701] tipc: Resetting bearer <eth:syzkaller0>
[  240.512642][  T808] rc_core: IR keymap rc-hauppauge not found
[  240.530839][  T808] Registered IR keymap rc-empty
[  240.544406][ T7701] tipc: Disabling bearer <eth:syzkaller0>
[  240.546556][  T808] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  240.607535][  T808] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  240.684375][  T808] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0
[  240.719207][  T808] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input9
[  240.782516][  T808] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  240.827869][  T808] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  240.845099][ T7698] loop5: detected capacity change from 0 to 40427
[  240.857580][  T808] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  240.871042][ T7698] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  240.899036][  T808] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  240.918340][ T7698] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  240.947848][  T808] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  240.987614][  T808] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  241.028919][  T808] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  241.077763][  T808] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  241.118237][  T808] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  241.159521][  T808] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  241.194987][ T7698] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  241.211798][  T808] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  241.239701][  T808] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  241.247257][ T7698] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  241.265937][ T7698] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  241.297310][  T808] usb 8-1: USB disconnect, device number 2
[  241.732404][ T7721] netlink: 'syz.7.345': attribute type 30 has an invalid length.
[  241.791371][ T7708] loop2: detected capacity change from 0 to 32768
[  241.911946][ T7708] JBD2: Ignoring recovery information on journal
[  242.007695][ T7708] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  242.281758][ T5851] ocfs2: Unmounting device (7,2) on (node local)
[  242.290241][ T7727] loop6: detected capacity change from 0 to 1024
[  242.318330][ T7727] ext4: Unknown parameter 'hash'
[  242.513820][ T7733] loop2: detected capacity change from 0 to 512
[  242.797966][ T5932] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  242.810496][ T7733] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  242.883739][ T7733] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  243.029871][ T5932] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  243.103748][ T5932] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  243.163057][ T5932] usb 6-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00
[  243.221557][ T5932] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  243.305648][ T5932] usb 6-1: config 0 descriptor??
[  243.411195][ T5851] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  243.852934][ T7757] netlink: 'syz.2.356': attribute type 30 has an invalid length.
[  244.151982][ T5932] holtek_kbd 0003:04D9:A055.0001: item fetching failed at offset 5/7
[  244.252348][ T5932] holtek_kbd 0003:04D9:A055.0001: probe with driver holtek_kbd failed with error -22
[  244.297556][ T7755] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  244.359008][ T5932] usb 6-1: USB disconnect, device number 3
[  245.009065][ T7768] loop2: detected capacity change from 0 to 8192
[  246.544021][ T7788] loop2: detected capacity change from 0 to 256
[  246.557422][ T7788] exfat: Deprecated parameter 'namecase'
[  246.679540][ T7788] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x18d51376, utbl_chksum : 0xe619d30d)
[  248.933701][ T7784] loop5: detected capacity change from 0 to 40427
[  248.964691][ T7784] F2FS-fs (loop5): invalid crc value
[  249.221755][ T7784] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  249.259022][ T7784] F2FS-fs (loop5): Start checkpoint disabled!
[  249.287513][ T7784] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0
[  250.048556][ T7805] loop6: detected capacity change from 0 to 40427
[  250.117963][ T7811] loop5: detected capacity change from 0 to 1024
[  250.125352][ T7811] EXT4-fs: Ignoring removed bh option
[  250.130891][ T7811] EXT4-fs: Ignoring removed oldalloc option
[  250.136827][ T7811] EXT4-fs: Ignoring removed nomblk_io_submit option
[  250.216377][ T7811] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003]
[  250.224702][ T7811] System zones: 0-1, 3-36
[  250.231993][ T7805] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[  250.249093][ T7811] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  250.365021][ T7805] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  250.850515][ T7805] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  250.902668][ T7805] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  250.945729][ T7805] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  251.550019][ T6045] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  252.437473][   T43] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  252.657434][   T43] usb 7-1: Using ep0 maxpacket: 16
[  252.679752][   T43] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  252.702501][   T43] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  252.725825][   T43] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  252.745640][   T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  252.757406][   T43] usb 7-1: Product: syz
[  252.765933][   T43] usb 7-1: Manufacturer: syz
[  252.797443][   T43] usb 7-1: SerialNumber: syz
[  252.934269][   T43] usb 7-1: 0:2 : does not exist
[  253.243003][   T43] usb 7-1: 5:0: failed to get current value for ch 0 (-22)
[  253.361977][ T7829] random: crng reseeded on system resumption
[  254.141793][ T7833] loop6: detected capacity change from 0 to 512
[  254.155756][ T7833] EXT4-fs: Ignoring removed mblk_io_submit option
[  254.162800][   T43] usb 7-1: USB disconnect, device number 2
[  254.190918][ T7833] EXT4-fs: Ignoring removed mblk_io_submit option
[  254.245723][ T7833] EXT4-fs (loop6): Test dummy encryption mode enabled
[  254.315539][ T7833] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  254.391967][ T7833] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  254.533245][ T7833] EXT4-fs (loop6): 1 truncate cleaned up
[  254.591078][ T7833] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  254.870624][ T7833] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx"
[  255.440627][ T6276] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  255.912571][ T1315] ieee802154 phy0 wpan0: encryption failed: -22
[  255.919646][ T1315] ieee802154 phy1 wpan1: encryption failed: -22
[  256.133368][ T7851] loop5: detected capacity change from 0 to 512
[  256.782684][ T7859] loop2: detected capacity change from 0 to 1024
[  256.790237][ T7859] EXT4-fs: Ignoring removed bh option
[  256.795668][ T7859] EXT4-fs: Ignoring removed oldalloc option
[  256.801756][ T7859] EXT4-fs: Ignoring removed nomblk_io_submit option
[  256.880097][ T7859] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003]
[  256.888773][ T7859] System zones: 0-1, 3-36
[  256.896537][ T7859] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  257.771069][ T7869] loop5: detected capacity change from 0 to 128
[  257.921545][ T5861] Bluetooth: hci5: command 0x0406 tx timeout
[  258.025024][ T7870] syz.5.389: attempt to access beyond end of device
[  258.025024][ T7870] loop5: rw=2049, sector=154, nr_sectors = 2 limit=128
[  258.136892][ T5851] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  258.154195][ T7869] syz.5.389: attempt to access beyond end of device
[  258.154195][ T7869] loop5: rw=8390657, sector=154, nr_sectors = 2 limit=128
[  258.229200][ T7869] Buffer I/O error on dev loop5, logical block 77, lost async page write
[  258.383899][ T7875] netlink: 40 bytes leftover after parsing attributes in process `syz.6.392'.
[  258.662553][ T5861] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  258.675110][ T5861] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  258.684129][ T5861] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  258.698902][ T5861] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  258.730586][ T5861] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  259.653690][ T7894] loop5: detected capacity change from 0 to 512
[  259.725168][ T7894] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  260.682094][ T6045] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  260.809348][ T5861] Bluetooth: hci6: command tx timeout
[  261.169790][   T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  261.184075][   T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  261.192998][   T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  261.204585][   T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  261.262893][   T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  262.529564][ T7914] loop5: detected capacity change from 0 to 1024
[  262.536943][ T7914] EXT4-fs: Ignoring removed bh option
[  262.542433][ T7914] EXT4-fs: Ignoring removed oldalloc option
[  262.548450][ T7914] EXT4-fs: Ignoring removed nomblk_io_submit option
[  262.576712][ T7914] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003]
[  262.585076][ T7914] System zones: 0-1, 3-36
[  262.593065][ T7914] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  262.881966][ T5861] Bluetooth: hci6: command tx timeout
[  263.758508][ T5861] Bluetooth: hci5: command tx timeout
[  264.407159][ T7880] chnl_net:caif_netlink_parms(): no params data found
[  264.819939][ T6045] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  264.872107][ T6561] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  264.958666][ T5861] Bluetooth: hci6: command tx timeout
[  265.270185][ T6561] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  265.985285][ T5861] Bluetooth: hci5: command tx timeout
[  266.285955][ T6561] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  266.590121][ T6561] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  267.067471][ T5861] Bluetooth: hci6: command tx timeout
[  267.339252][ T7880] bridge0: port 1(bridge_slave_0) entered blocking state
[  267.357512][ T7957] loop5: detected capacity change from 0 to 1024
[  267.364974][ T7957] EXT4-fs: Ignoring removed bh option
[  267.370667][ T7957] EXT4-fs: Ignoring removed oldalloc option
[  267.376652][ T7957] EXT4-fs: Ignoring removed nomblk_io_submit option
[  267.406340][ T7957] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003]
[  267.416162][ T7957] System zones: 0-1, 3-36
[  267.430206][ T7957] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  267.460001][ T7880] bridge0: port 1(bridge_slave_0) entered disabled state
[  267.467554][ T7880] bridge_slave_0: entered allmulticast mode
[  267.476173][ T7880] bridge_slave_0: entered promiscuous mode
[  267.506278][ T7880] bridge0: port 2(bridge_slave_1) entered blocking state
[  267.514167][ T7880] bridge0: port 2(bridge_slave_1) entered disabled state
[  267.523559][ T7880] bridge_slave_1: entered allmulticast mode
[  267.533339][ T7880] bridge_slave_1: entered promiscuous mode
[  267.706143][ T7880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  267.879506][ T7880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  267.955267][ T6045] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.036015][ T7901] chnl_net:caif_netlink_parms(): no params data found
[  268.079975][ T5861] Bluetooth: hci5: command tx timeout
[  268.881987][ T7970] netlink: 27 bytes leftover after parsing attributes in process `syz.2.418'.
[  269.036836][ T7880] team0: Port device team_slave_0 added
[  269.242040][ T7880] team0: Port device team_slave_1 added
[  269.379832][ T6561] bridge_slave_1: left allmulticast mode
[  269.400402][ T6561] bridge_slave_1: left promiscuous mode
[  269.430287][ T6561] bridge0: port 2(bridge_slave_1) entered disabled state
[  269.503243][ T6561] bridge_slave_0: left allmulticast mode
[  269.511993][ T6561] bridge_slave_0: left promiscuous mode
[  269.519796][ T6561] bridge0: port 1(bridge_slave_0) entered disabled state
[  269.679991][ T7982] loop2: detected capacity change from 0 to 256
[  269.693051][ T7982] exfat: Deprecated parameter 'utf8'
[  269.699125][ T7982] exfat: Deprecated parameter 'namecase'
[  269.705152][ T7982] exfat: Deprecated parameter 'namecase'
[  269.810349][ T7982] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  269.991593][   T29] audit: type=1326 audit(1773799032.517:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7974 comm="syz.2.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f293479c799 code=0x7ffc0000
[  270.511343][ T5861] Bluetooth: hci5: command tx timeout
[  270.538252][   T29] audit: type=1326 audit(1773799032.517:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7974 comm="syz.2.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f293479c799 code=0x7ffc0000
[  270.561636][   T29] audit: type=1326 audit(1773799032.517:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7974 comm="syz.2.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7f293479c799 code=0x7ffc0000
[  270.651309][   T29] audit: type=1326 audit(1773799032.527:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7974 comm="syz.2.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f293479c799 code=0x7ffc0000
[  270.924172][   T29] audit: type=1326 audit(1773799032.527:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7974 comm="syz.2.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f293479c799 code=0x7ffc0000
[  270.953088][ T7984] netlink: 'syz.5.422': attribute type 30 has an invalid length.
[  270.995404][   T29] audit: type=1326 audit(1773799032.527:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7974 comm="syz.2.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f293479c799 code=0x7ffc0000
[  271.075476][   T29] audit: type=1326 audit(1773799032.527:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7974 comm="syz.2.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f293479c799 code=0x7ffc0000
[  271.217923][   T29] audit: type=1326 audit(1773799032.527:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7974 comm="syz.2.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f293479c799 code=0x7ffc0000
[  272.892077][ T6561] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  272.910531][ T6561] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  272.921930][ T6561] bond0 (unregistering): Released all slaves
[  273.804553][ T7901] bridge0: port 1(bridge_slave_0) entered blocking state
[  273.827875][ T7901] bridge0: port 1(bridge_slave_0) entered disabled state
[  273.859295][ T7901] bridge_slave_0: entered allmulticast mode
[  273.881706][ T7901] bridge_slave_0: entered promiscuous mode
[  273.902326][ T7880] batman_adv: batadv0: Adding interface: batadv_slave_0
[  273.917693][ T7880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  273.980603][ T7880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  274.038094][ T7901] bridge0: port 2(bridge_slave_1) entered blocking state
[  274.047848][ T7901] bridge0: port 2(bridge_slave_1) entered disabled state
[  274.059172][ T7901] bridge_slave_1: entered allmulticast mode
[  274.068449][ T7901] bridge_slave_1: entered promiscuous mode
[  274.080270][ T7880] batman_adv: batadv0: Adding interface: batadv_slave_1
[  274.166187][ T7880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  274.205823][ T7880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  275.014790][ T8014] loop2: detected capacity change from 0 to 2048
[  275.055485][ T8014] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  275.089595][ T8014] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  275.280972][ T5851] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  275.291887][ T8023] netlink: 27 bytes leftover after parsing attributes in process `syz.6.428'.
[  275.440838][ T7901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  275.552693][ T7880] hsr_slave_0: entered promiscuous mode
[  275.563514][ T7880] hsr_slave_1: entered promiscuous mode
[  275.571570][ T7880] debugfs: 'hsr0' already exists in 'hsr'
[  275.577761][ T7880] Cannot create hsr debugfs directory
[  275.593091][ T7901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  275.667264][ T6561] hsr_slave_0: left promiscuous mode
[  275.674137][ T6561] hsr_slave_1: left promiscuous mode
[  275.682090][ T6561] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  275.690173][ T6561] batman_adv: batadv0: Removing interface: batadv_slave_0
[  275.699416][ T6561] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  275.707017][ T6561] batman_adv: batadv0: Removing interface: batadv_slave_1
[  275.725714][ T6561] veth1_macvtap: left promiscuous mode
[  275.732373][ T6561] veth0_macvtap: left promiscuous mode
[  275.738662][ T6561] veth1_vlan: left promiscuous mode
[  275.744189][ T6561] veth0_vlan: left promiscuous mode
[  276.714951][ T8034] netlink: 'syz.2.431': attribute type 30 has an invalid length.
[  277.047936][ T6561] team0 (unregistering): Port device team_slave_1 removed
[  277.328144][ T6561] team0 (unregistering): Port device team_slave_0 removed
[  279.997908][   T30] INFO: task syz.1.70:6382 blocked for more than 143 seconds.
[  280.032643][   T30]       Not tainted syzkaller #0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  280.047451][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  280.071085][   T30] task:syz.1.70        state:D stack:24328 pid:6382  tgid:6357  ppid:5862   task_flags:0x400140 flags:0x00080002
[  280.088568][   T30] Call Trace:
[  280.092068][   T30]  <TASK>
[  280.095244][   T30]  __schedule+0x1665/0x5590
[  280.100438][   T30]  ? mod_memcg_lruvec_state+0x1fc/0x220
[  280.106249][   T30]  ? blk_mq_flush_plug_list+0x443/0x570
[  280.112106][   T30]  ? __pfx_blk_mq_flush_plug_list+0x10/0x10
[  280.170234][   T30]  ? __blk_flush_plug+0x416/0x4d0
[  280.197240][   T30]  ? __pfx___schedule+0x10/0x10
[  280.220576][   T30]  ? schedule+0x90/0x360
[  280.236093][   T30]  schedule+0x164/0x360
[  280.255672][   T30]  schedule_preempt_disabled+0x13/0x30
[  280.273652][   T30]  rwsem_down_read_slowpath+0x6d9/0x940
[  280.296543][   T30]  ? rwsem_down_read_slowpath+0x596/0x940
[  280.302495][   T30]  ? __pfx_rwsem_down_read_slowpath+0x10/0x10
[  280.310304][   T30]  down_read+0x99/0x2e0
[  280.316037][   T30]  ? madvise_vma_behavior+0x1943/0x4460
[  280.327978][   T30]  madvise_vma_behavior+0x1950/0x4460
[  280.333461][   T30]  ? do_raw_spin_lock+0x12b/0x2f0
[  280.341002][   T30]  ? __pfx_madvise_vma_behavior+0x10/0x10
[  280.348318][   T30]  ? do_raw_spin_lock+0x12b/0x2f0
[  280.355705][   T30]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  280.361268][   T30]  ? debug_object_assert_init+0x209/0x370
[  280.367069][   T30]  ? rcu_is_watching+0x15/0xb0
[  280.371953][   T30]  ? trace_hrtimer_start+0x82/0x230
[  280.377215][   T30]  ? __lock_acquire+0x6b5/0x2cf0
[  280.382312][   T30]  ? finish_task_switch+0x4da/0xbe0
[  280.387610][   T30]  ? rcu_is_watching+0x15/0xb0
[  280.392415][   T30]  ? trace_sched_exit_tp+0x3a/0x150
[  280.398460][   T30]  ? mtree_range_walk+0x6f9/0x8b0
[  280.403580][   T30]  ? mt_find+0x186/0x630
[  280.407946][   T30]  ? mt_find+0x481/0x630
[  280.412241][   T30]  ? mas_prev_slot+0xb7b/0xbf0
[  280.417052][   T30]  ? mt_find+0x186/0x630
[  280.422962][   T30]  ? __pfx_mt_find+0x10/0x10
[  280.428615][   T30]  ? find_vma_prev+0x123/0x1b0
[  280.433484][   T30]  ? find_vma+0xed/0x160
[  280.437890][   T30]  ? __futex_wait+0x371/0x420
[  280.442648][   T30]  madvise_walk_vmas+0x573/0xae0
[  280.449161][   T30]  ? __pfx_madvise_walk_vmas+0x10/0x10
[  280.454802][   T30]  ? blk_start_plug+0x6e/0x1b0
[  280.459772][   T30]  madvise_do_behavior+0x386/0x540
[  280.465009][   T30]  ? __pfx_madvise_do_behavior+0x10/0x10
[  280.471175][   T30]  ? down_read+0x270/0x2e0
[  280.475680][   T30]  ? madvise_lock+0x146/0x2e0
[  280.482607][   T30]  do_madvise+0x1fa/0x2e0
[  280.486991][   T30]  ? __pfx_do_madvise+0x10/0x10
[  280.491955][   T30]  ? __se_sys_futex+0x3a8/0x450
[  280.496856][   T30]  ? rcu_is_watching+0x15/0xb0
[  280.504415][   T30]  __x64_sys_madvise+0xa6/0xc0
[  280.509319][   T30]  do_syscall_64+0x14d/0xf80
[  280.513952][   T30]  ? trace_irq_disable+0x3b/0x150
[  280.519140][   T30]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  280.529140][   T30]  ? clear_bhb_loop+0x40/0x90
[  280.533911][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  280.541803][   T30] RIP: 0033:0x7fd3e2d9c799
[  280.546292][   T30] RSP: 002b:00007fd3e3c51028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c
[  280.554823][   T30] RAX: ffffffffffffffda RBX: 00007fd3e3016360 RCX: 00007fd3e2d9c799
[  280.564804][   T30] RDX: 0000000000000003 RSI: 0000000000600000 RDI: 0000200000000000
[  280.572911][   T30] RBP: 00007fd3e2e32c99 R08: 0000000000000000 R09: 0000000000000000
[  280.581573][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  280.589680][   T30] R13: 00007fd3e30163f8 R14: 00007fd3e3016360 R15: 00007ffc47c2fe28
[  280.597800][   T30]  </TASK>
[  280.644493][   T30] 
[  280.644493][   T30] Showing all locks held in the system:
[  280.785889][   T30] 1 lock held by khungtaskd/30:
[  280.790913][   T30]  #0: ffffffff8e75d6a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  280.801730][   T30] 2 locks held by kworker/1:1/43:
[  280.806843][   T30]  #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x894/0x1780
[  280.817438][   T30]  #1: ffffc90000b37c40 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1780
[  280.828850][   T30] 4 locks held by kworker/u8:5/78:
[  280.835191][   T30]  #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x894/0x1780
[  280.849402][   T30]  #1: ffffc900024afc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1780
[  280.859936][   T30]  #2: ffffffff8fbd5d80 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  280.869150][   T30]  #3: ffffffff8e7638e8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770
[  280.884233][   T30] 3 locks held by kworker/1:2/808:
[  280.889461][   T30]  #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x894/0x1780
[  280.901332][   T30]  #1: ffffc90004b57c40 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1780
[  280.911928][   T30]  #2: ffffffff8fbd5d80 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0xa5/0xfe0
[  280.922597][   T30] 2 locks held by dhcpcd/5507:
[  280.927529][   T30]  #0: ffff88802a4516e8 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0
[  280.941115][   T30]  #1: ffffffff8fbd5d80 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200
[  280.950072][   T30] 2 locks held by getty/5599:
[  280.954774][   T30]  #0: ffff888036d310a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  280.964622][   T30]  #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0
[  280.974967][   T30] 1 lock held by syz.1.70/6382:
[  280.980110][   T30]  #0: ffff888036ef3538 (&mm->mmap_lock){++++}-{4:4}, at: madvise_vma_behavior+0x1950/0x4460
[  280.990564][   T30] 4 locks held by kworker/u8:13/6561:
[  280.995972][   T30]  #0: ffff88801c2b6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x894/0x1780
[  281.006432][   T30]  #1: ffffc9000521fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1780
[  281.016473][   T30]  #2: ffffffff8fbc6d68 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800
[  281.025935][   T30]  #3: ffffffff8fbd5d80 (rtnl_mutex){+.+.}-{4:4}, at: wg_destruct+0x25/0x310
[  281.039672][   T30] 2 locks held by syz-executor/7880:
[  281.045015][   T30]  #0: ffffffff90144598 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[  281.055598][   T30]  #1: ffffffff8fbd5d80 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0
[  281.065624][   T30] 1 lock held by syz-executor/7901:
[  281.070974][   T30]  #0: ffffffff8fbd5d80 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0
[  281.080172][   T30] 2 locks held by syz.5.423/7988:
[  281.085227][   T30]  #0: ffffffff8fbc6d68 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730
[  281.094736][   T30]  #1: ffffffff8fbd5d80 (rtnl_mutex){+.+.}-{4:4}, at: cfg80211_pernet_exit+0x19/0x120
[  281.104707][   T30] 1 lock held by syz.2.437/8054:
[  281.109783][   T30]  #0: ffffffff8fbd5d80 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  281.118854][   T30] 5 locks held by syz.6.438/8059:
[  281.123913][   T30]  #0: ffff888056524ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0
[  281.133931][   T30]  #1: ffff8880565240b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0
[  281.145895][   T30]  #2: ffffffff8fd62100 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260
[  281.157039][   T30]  #3: ffff888078aa62f0 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x7b/0x5c0
[  281.167198][   T30]  #4: ffffffff8e7638e8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770
[  281.179099][   T30] 
[  281.182757][   T30] =============================================
[  281.182757][   T30] 
[  281.191813][   T30] NMI backtrace for cpu 1
[  281.191830][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  281.191851][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  281.191863][   T30] Call Trace:
[  281.191871][   T30]  <TASK>
[  281.191879][   T30]  dump_stack_lvl+0xe8/0x150
[  281.191910][   T30]  nmi_cpu_backtrace+0x274/0x2d0
[  281.191937][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  281.191968][   T30]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  281.192010][   T30]  sys_info+0x135/0x170
[  281.192036][   T30]  watchdog+0x1002/0x1060
[  281.192068][   T30]  ? watchdog+0x1da/0x1060
[  281.192098][   T30]  kthread+0x388/0x470
[  281.192121][   T30]  ? __pfx_watchdog+0x10/0x10
[  281.192143][   T30]  ? __pfx_kthread+0x10/0x10
[  281.192167][   T30]  ret_from_fork+0x51e/0xb90
[  281.192199][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[  281.192225][   T30]  ? __switch_to+0xc7d/0x1450
[  281.192255][   T30]  ? __pfx_kthread+0x10/0x10
[  281.192279][   T30]  ret_from_fork_asm+0x1a/0x30
[  281.192317][   T30]  </TASK>
[  281.192325][   T30] Sending NMI from CPU 1 to CPUs 0:
[  281.304728][    C0] NMI backtrace for cpu 0
[  281.304746][    C0] CPU: 0 UID: 0 PID: 1 Comm: init Not tainted syzkaller #0 PREEMPT(full) 
[  281.304766][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  281.304778][    C0] RIP: 0010:mark_lock+0x3c/0x190
[  281.304799][    C0] Code: 00 03 00 83 f9 01 bb 09 00 00 00 83 db 00 83 fa 08 0f 45 da bd 01 00 00 00 89 d9 d3 e5 25 ff 1f 00 00 48 0f a3 05 b4 92 83 12 <73> 10 48 69 c0 c8 00 00 00 48 8d 88 30 83 c7 93 eb 42 83 3d 7b 22
[  281.304814][    C0] RSP: 0018:ffffc900000674a0 EFLAGS: 00000003
[  281.304830][    C0] RAX: 0000000000000007 RBX: 0000000000000009 RCX: 0000000000000009
[  281.304840][    C0] RDX: 0000000000000008 RSI: ffff88801dae66d0 RDI: ffff88801dae5b80
[  281.304852][    C0] RBP: 0000000000000200 R08: ffffffff81774bb5 R09: ffffffff8e75d6a0
[  281.304865][    C0] R10: ffffc900000677b8 R11: ffffffff81b1db20 R12: ffffffffffffff05
[  281.304878][    C0] R13: ffff88801dae66d0 R14: ffff88801dae5b80 R15: ffff88801dae66d0
[  281.304891][    C0] FS:  00007f8ed8958c80(0000) GS:ffff888125435000(0000) knlGS:0000000000000000
[  281.304906][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  281.304918][    C0] CR2: 0000200000032000 CR3: 0000000030cd6000 CR4: 00000000003526f0
[  281.304933][    C0] Call Trace:
[  281.304939][    C0]  <TASK>
[  281.304949][    C0]  __lock_acquire+0x6b5/0x2cf0
[  281.304980][    C0]  ? is_bpf_text_address+0x292/0x2b0
[  281.305077][    C0]  ? unwind_next_frame+0xa5/0x23c0
[  281.305103][    C0]  lock_acquire+0xf0/0x2e0
[  281.305129][    C0]  ? unwind_next_frame+0xa5/0x23c0
[  281.305148][    C0]  ? unwind_next_frame+0xa5/0x23c0
[  281.305164][    C0]  ? __se_sys_fcntl+0xc8/0x150
[  281.305179][    C0]  ? unwind_next_frame+0xa5/0x23c0
[  281.305195][    C0]  unwind_next_frame+0xc2/0x23c0
[  281.305212][    C0]  ? unwind_next_frame+0xa5/0x23c0
[  281.305231][    C0]  ? unwind_next_frame+0xa5/0x23c0
[  281.305247][    C0]  ? do_fcntl+0x956/0x1a20
[  281.305262][    C0]  ? __se_sys_fcntl+0xc8/0x150
[  281.305278][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  281.305300][    C0]  arch_stack_walk+0x11b/0x150
[  281.305320][    C0]  ? __se_sys_fcntl+0xc8/0x150
[  281.305336][    C0]  stack_trace_save+0xa9/0x100
[  281.305357][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  281.305385][    C0]  kasan_save_track+0x3e/0x80
[  281.305410][    C0]  ? kasan_save_track+0x3e/0x80
[  281.305433][    C0]  ? kasan_save_free_info+0x46/0x50
[  281.305455][    C0]  ? __kasan_slab_free+0x5c/0x80
[  281.305469][    C0]  ? kmem_cache_free+0x189/0x640
[  281.305485][    C0]  ? fcntl_setlk+0xc1d/0x10c0
[  281.305509][    C0]  ? do_fcntl+0x956/0x1a20
[  281.305524][    C0]  ? __se_sys_fcntl+0xc8/0x150
[  281.305562][    C0]  kasan_save_free_info+0x46/0x50
[  281.305592][    C0]  __kasan_slab_free+0x5c/0x80
[  281.305608][    C0]  kmem_cache_free+0x189/0x640
[  281.305624][    C0]  ? fcntl_setlk+0xc1d/0x10c0
[  281.305651][    C0]  fcntl_setlk+0xc1d/0x10c0
[  281.305684][    C0]  ? __pfx_fcntl_setlk+0x10/0x10
[  281.305717][    C0]  do_fcntl+0x956/0x1a20
[  281.305736][    C0]  ? __pfx_do_fcntl+0x10/0x10
[  281.305758][    C0]  ? __x64_sys_pread64+0x1b4/0x230
[  281.305778][    C0]  ? bpf_lsm_file_fcntl+0x9/0x20
[  281.305798][    C0]  __se_sys_fcntl+0xc8/0x150
[  281.305814][    C0]  do_syscall_64+0x14d/0xf80
[  281.305835][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  281.305852][    C0]  ? clear_bhb_loop+0x40/0x90
[  281.305878][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  281.305895][    C0] RIP: 0033:0x7f8ed8b16add
[  281.305911][    C0] Code: 24 08 48 89 54 24 e0 48 89 44 24 c0 48 8d 44 24 d0 c7 44 24 b8 10 00 00 00 48 89 44 24 c8 83 fe 09 74 1a b8 48 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 23 c3 66 2e 0f 1f 84 00 00 00 00 00 48 8d 54
[  281.305926][    C0] RSP: 002b:00007ffdf25e86b8 EFLAGS: 00000293 ORIG_RAX: 0000000000000048
[  281.305945][    C0] RAX: ffffffffffffffda RBX: 0000564f023841b0 RCX: 00007f8ed8b16add
[  281.305958][    C0] RDX: 00007ffdf25e86c0 RSI: 0000000000000007 RDI: 0000000000000003
[  281.305968][    C0] RBP: 00007ffdf25e8738 R08: 0000000000000000 R09: 0000000000000000
[  281.305979][    C0] R10: 0000000000000180 R11: 0000000000000293 R12: 0000000000000000
[  281.305989][    C0] R13: ffffffffffffff88 R14: 0000000000000002 R15: 0000564ee7c27d98
[  281.306009][    C0]  </TASK>
[  281.766015][ T7901] team0: Port device team_slave_0 added
[  281.790033][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  281.796960][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  281.806111][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  281.816201][   T30] Call Trace:
[  281.819633][   T30]  <TASK>
[  281.822597][   T30]  vpanic+0x56c/0xa60
[  281.826630][   T30]  ? __pfx___schedule+0x10/0x10
[  281.831512][   T30]  ? __pfx_vpanic+0x10/0x10
[  281.836059][   T30]  ? nmi_trigger_cpumask_backtrace+0x1f4/0x300
[  281.842261][   T30]  panic+0xc5/0xd0
[  281.846029][   T30]  ? __pfx_panic+0x10/0x10
[  281.850492][   T30]  ? preempt_schedule_thunk+0x16/0x30
[  281.855915][   T30]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  281.862119][   T30]  watchdog+0x105b/0x1060
[  281.866500][   T30]  ? watchdog+0x1da/0x1060
[  281.870959][   T30]  kthread+0x388/0x470
[  281.875083][   T30]  ? __pfx_watchdog+0x10/0x10
[  281.879798][   T30]  ? __pfx_kthread+0x10/0x10
[  281.884421][   T30]  ret_from_fork+0x51e/0xb90
[  281.889040][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[  281.894179][   T30]  ? __switch_to+0xc7d/0x1450
[  281.898880][   T30]  ? __pfx_kthread+0x10/0x10
[  281.903499][   T30]  ret_from_fork_asm+0x1a/0x30
[  281.908299][   T30]  </TASK>
[  281.912191][   T30] Kernel Offset: disabled
[  281.916540][   T30] Rebooting in 86400 seconds..