last executing test programs:

1m21.348446992s ago: executing program 2 (id=283):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000400)={@fallback=r1, r1, 0x2f}, 0x20)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, <r3=>0x0}, 0x0)
r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r3, 0x4)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@fallback=r1, r2, 0x2f, 0x2000, 0x4, @value=r4}, 0x20)

1m20.10959629s ago: executing program 2 (id=288):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x201c448, &(0x7f0000000080)=ANY=[@ANYBLOB='map=acorn,utf8,session=0x0000000000000004,session=0x0000000000000056,map=normal,session=0x000000000000003d,unhide,norock,block=0x0000000000000400,map=off,session=0x0000000000000001,uid=', @ANYRESDEC, @ANYBLOB=',gid=', @ANYRESDEC, @ANYRESOCT=0x0], 0x1, 0xa78, &(0x7f00000020c0)="$eJzs3c1vHGf9APDvbGzHdqs2bfNr+4vaZpIqrdsGZ23TRFEPNLHXyRa/INuRGgnUVI2DolgUNSC1EVJTCXGiokIICZAQ6pFTpXKgF5QTcOTEAQn6H6CKU4qAQTO7a+86+5K4azstn0+03pl5vs/bzOw88Xp3nuDzLMuy4rHF9XO/3snGcvc5PfPx+x+8mz/euR5DsSeeT34bMRwRacTAv4tzZXB6ZmlxvkdBVyIuRMSNiCQi9kbtuYORlrULkfwo7t1YvxHJL+LRNtmG77Bz9JTxP223zz8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALgrTc+UyxNJzFUXzr2cdlZMAd4lvVHcR8Ws38lHvapNIpL8EcPDjam+H92/kfxw/uNwPFZbe6w28/dwXLvn4X0vPDRQauTv0qAdcfWta1deXVtbfaO+vjdNB3tm2rvtzbpzQ1vLdqayUF1erM6fOlNJq8uL6cnjx8vHzs4up7PVqCyfX16pzKfTS5VTK4tL6dj0M+nEyZNTaWX8/OK5hTMz43OVxsYTX5osl4+nL41/rXJqaXlx4dhL48vTZ6tzc9WFM0VMnpzHnMhPxK9WV9KVyqn5NL10eW11qlcj86CJtilJa9Bkr5Imy5OTExOTI3H8+ZPPnyiXB+obJicaG8qbxC0Ru3/S0m+/vO3I3/T9+g2fQak+/sdcVGMhzsXLkbb9Nx0zsRSLMd8mLdkorzH+HzlW6Vpv8/jfGOUf3Ug+EMX4/0Rt7YlO43+Htvb+l2W1kreav/HvarwV1+JKvBprsRar8cZnLjGN37euf7o5/V9Zlm2h3DTv7cHmfdCHtp6JSixENZZjMaoxH6eKLWl9Sxon43gcj3K8EmdjNpYjjdmoxlxUYjnOx3KsRKU4o6ZjKSppxEosxlKkMRbT8UykMREnYySmIo1KjMf5WIxzsRBnYiZOFaVcisvFfp/q0sb1oInbCZrsEnTLYP7Zxv/sbvyfINutz1dw2LqsPv4PdQzIGktj0zvWKgAAAKCf/v+Pcd/+B//w14jBeLx4X362Olcp73azAAAAgD4qPq73WP40mEXE45G0+f2/tEuNAwAAAPoiKb5jl0TEaBysLdW+CbUnfAgAAAAAviCKv/8/kT+N5ksHI1m/E8qF3W4bAAAA0B+977HfMyIZjvo9LdOLteeL9Yj6fX5HZ6tzlfHpxbkXJuKp4i4DxTcNbiltT0QyWHz94Nk4VIs6NFp7Hm0tcTiPmhh/YSKejcP1jow9mT89OdYmcrIW+XQt8ukukVN5JAB80R2+dTz+NLvD8f/ZOFqLOHpgYCgiBg60GVnLGyPrwG50FABY13uOndaIt+v5msf/L2/8/j9YT24Z/x+MS//JN67GeLwWr8daXIyjxbcNik8ctNT79ffq7xmsfwyhHEd7vBvQiP3TiVIc7fF+wGjTRC9He7wjUIuNb0RMbe9BAIAddrjDONxp/C8iovHBwdr4f7Tp9/+49ff/9amFVn2lEADuCusz2Pd1IdvTvGW3+wgAtDJKAwAAAAAAAAAAAAAAAAAAAAAAAAAAQP/19bb/w1vM/rf6vH61LVn/5yNovzBS3weNLW/f0d545+pb134cEc1JpbwT29PmoqX9LbnUh3KyiNip47VzC7EvYst7NdolDUXEtjd+pB9VfFpfqL02St0uHue6pgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA5kETsabe9FLE3IsoRcWznW7V9ru92A3beV5pXkptxM96M+3avOQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX0z1+/+XovZ8T21TDJQijkTEhYjIdruN/XRztxvQJyNbzNd0///8mEeWxEDtsEcyOD2ztDifH/5i7ofSx+9/8O4jrdn33m49RWBp0+QS9Ro2x/7q3sbSA0Wu0ZnVq1e+8/q305nTUYqhOL0yOzczf2bpxY0sDycfRqRRezTk7c0f3zvyu/fa9PzDvKftba53ttg5M7fW+0i73N3r7eby2upkXtNK5eWV737r8ptNSQ/GoYgnxyLGWmv6Zv7oUNOhGOxWW/JJ8oPkvvhpXCiOf743kizJD9H9Rf9HLl1eWx1/7fW1ix3atC8ORsTFiOGebVrf1QeL60lbxVlXGsxrLRdB+Y/9PfrYXvMcF7USJzr04YHilBmt92GopQ+lDnWmnftQ7PCm/V5qLCTJ5hZN1Vs0FK0teiieanOks70RnffCU92PdHvJJ8lfkrPx5/h+0/wfpfz4H4nOr87WIorIpjOlY2SpFln0fLI54ZXNkX//2W21vu00NdypH7a8eEtN1//6serT9ShLul6Pmmqc6lBj+9fFpho3nxWljh0vRqT9m3LUrz4dM9Xaub8W1aGd/xfPRQwc6HZVvGW0fq7zFaU1/4vtk7f6+v95Mhb/iOvm/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO5+ScSedttLEUciYl9jPY3I7qDYvZ0SSqPJnTaxr66v//ic21/8LLVse6d3tuRm3Mze3q5GAQAAAAAAALDTTs98/P4H7+aP4u/xe25mWf3v+2nEQETsS34yEjNLi/M9ChqMuBARN/Ll4U5B/8xqWrfm+eLejfUbEdn9W+8SANDDfwMAAP//zlFyiw==")
ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000040)={0xd, r0, 'id1\x00'}) (async)
ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000040)={0xd, <r1=>r0, 'id1\x00'})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000200)={&(0x7f0000000100)=[0x0, <r2=>0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x3, 0x6, 0x8, 0x2})
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000ac0)='./bus\x00', 0x1010000, &(0x7f0000001040)=ANY=[@ANYBLOB='iocharset=cp864$utf8=1,uni_xlate=1,utf8=0,shortname=lower,uni_xlate=0,utf8=0,rodir,tz=UTC,uni_xlate=1,fmask=00000000000000000000153,codepage=932,utf8=0,iocharset=cp852,shortname=mixed,shortname=lower,iocharset=cp932,\x00', @ANYRESDEC, @ANYRES64=0x0, @ANYBLOB="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"], 0x4, 0x371, &(0x7f0000000180)="$eJzs3U1oI1UcAPB/OmnTXdD25gcI0ZugZXdvenEXaWGxl1WDHwcxuF2VpAotFtvDpvWgeBQ86smbgh48iEcRFPHmwasryKp40L0tuPgkmZkkTdKPXelK4feDJq/vvf97b2YeyWSYvLx4NloXp+PStWtXY3a2EtWzj5+N65WYjyxK2zFuZkIeAHA8XE8p/kq50bLZySGV2zAsAOAI9d7/X46IesznOW99s1/95N0fAI694vP/if3q7HEdIOL1IxkSAHDExq7/P7CreKb3Vy3/rQ7dFQAAHFdPPff8E+eWI56s12cjVt/ZaGw04tFB+blL8Wq0YyVOxVzciMhPFLoPld7j0vnlxVP1er0Tv85HIyKmisBGfqZwLuvF1+J0zMV8EV+cbaSUsqXPlxdP13siYrvT6z9WKxuN6ThZ9P/TyVgZnHiUjfSeIs4vL56pFw00Vsv4TsTO4EaF7vgXYi5+eKnfTErlHYzLi5dPl4MexG80anGxvxf2vAICAAAAAAAAAAAAAAAAAAAAAAC3ZKHeN99fPyd1n/OVchYWJpT31sfJ44v1gXby9YFSLUVKf775cOPdLHatDzS6Ps+GhQQBAAAAAAAAAAAAAAAAAACgb31zJprt9sra+uZWazjRWVvfnIqIbs5r33369YkYr3NAopp3UYvod1Evut1qNVNWVk5ZxHh41u28zPn4i/6Ih+vU+lsxcRi1vYva7Tvu/+WDQc59WdnyP4M6WUzewGxoGI+NtLx6Zz6km9lRW3cX23FmuKg23vuVlNJQztvD7Vx+YbzlqERUb/7AbbWmYu86qZv49uor95R7v/lVyj340NwzV97/6PdWs93tOXpHcGZt/UZqNStl5UP0XjSXeodgMDcqkScqwzOhul+DO7tzmtmPfzx773vfH24npOGcN7rzeaROlm/OZ6PhM3miO8yRohOD8OlyPk9NT5j8ByVu4Zje9eGXn6T082+H7mJgauxlo/KfX3gAAAAAAAAAAAAAAAAAAIAxQ98VL7503ckLpifVfrr41f5HLtzOMQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAURv8/v9QYmc7RnIOTFzY3Pq7Mx619H9vHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdP0bAAD//zsfYSM=")
syz_usb_connect$uac2(0x3, 0x82, 0x0, 0x0) (async)
syz_usb_connect$uac2(0x3, 0x82, 0x0, 0x0)
syz_emit_ethernet(0x3e, 0x0, 0x0)
fchdir(0xffffffffffffffff) (async)
fchdir(0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f00000000c0)={r2})

1m18.347059899s ago: executing program 2 (id=292):
socket(0x400000000010, 0x3, 0x0)
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x336, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x84, "", [{{0x9, 0x4, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x77, 0x2, 0x1, {0x22, 0x26}}, {{{0x9, 0x5, 0x81, 0x3, 0x4022f4442ddecb9d, 0x3, 0x3, 0x6}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000100)={0x20, 0x21, 0x26, {0x26, 0x1, "7d611870cced50a6dc9b9baae6e4fb07347310bcb53837f15d7c0201458010d302afc5df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040))
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f0000000680)={0x1, 0x1, 0xffff4f11, 0xfffd, 0xffffdfffffffffff, 0x20000000000000b, 0xfffffffffffffffd, 0x200, 0x4a, 0x2b, 0x80000005, 0x2})
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r3, 0xc06c4124, 0x0)
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r3, 0xc0984124, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3})

1m17.342934381s ago: executing program 0 (id=299):
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000180), 0x0, 0x2, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[], 0x0)
syz_emit_ethernet(0x90, &(0x7f00000006c0)=ANY=[@ANYBLOB="26bbbbbbbbbb0180c2000000080045f0008200000000002f9078000000e0e000c800b48065580000000010000800b9600cb6ba221204009e000086dd1f7d88c7dda93b8a35e3840b4f5181975121a660f858f536c3bf71080088be000000001000000088f7ffff08000000080022eb00000000200000000200000000000000000000005800000400"], 0x0)
r3 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_GET_FEATURES(r3, 0x8008af00, &(0x7f0000002a00))
socket(0x10, 0x2, 0x0)
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40240)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r4, 0x40045402, &(0x7f0000000040)=0x1)
read(r4, 0x0, 0x20)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x3, 0x0, 0x0, 0x0, 0x2}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f00000000c0)={0x3, 0x9dc5, 0x0, 0x0, 0xf})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2)
socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'das16m1\x00', [0x140, 0x0, 0x7, 0x2, 0x10000007, 0x7, 0x8002, 0x8000, 0x7, 0xc72d, 0x0, 0x7, 0x3, 0xa, 0x29, 0x72ef, 0x101, 0x6, 0x6, 0x9, 0x4, 0x6, 0xa2d8, 0x9, 0x1000, 0x8, 0x471, 0xffffff7f, 0x383, 0x8001, 0x4]})
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
r5 = syz_open_procfs(0x0, 0x0)
read$FUSE(r5, &(0x7f0000003480)={0x2020}, 0x2020)
ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000000)={'ipvlan1\x00', {0x2, 0x4e23, @multicast1}})
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1100000004000000040000000c00000000000000", @ANYRES32, @ANYRESOCT=r4, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0000000000ba17c1c400"/26], 0x50)
capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb})
prlimit64(0x0, 0x8, &(0x7f0000000040)={0x0, 0x100}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)

1m17.088985127s ago: executing program 0 (id=301):
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x10000005, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000003c0)={0xc0f0f000, 0x100, "9a0400000066e134d198b1abaa7da80f00000000000009dcb674000000130028", 0x0, 0x10e, 0x100000, 0x7, 0x4, 0x1, 0x20000, 0x0, [0x0, 0x0, 0x10, 0x2]})
getpid()
syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00')
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x4d, 0x2, 0x6, 0x701, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x4c}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4084)

1m16.821844473s ago: executing program 0 (id=303):
syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c"], 0x0)

1m16.725010945s ago: executing program 0 (id=304):
syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x2010880, &(0x7f0000007400)=ANY=[], 0x1, 0x6174, &(0x7f0000001280)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1004401, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
chdir(&(0x7f00000017c0)='./file0\x00')
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x8, 0x0) (fail_nth: 1)

1m15.342455056s ago: executing program 0 (id=308):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (rerun: 64)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r2=>0xffffffffffffffff})
recvmmsg(r2, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}, 0xf5ff}], 0xf00, 0x0, 0x0) (async)
keyctl$restrict_keyring(0xa, 0xfffffffffffffffc, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='dn\x00\x00\x00\x00\x00')
shutdown(r2, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0}) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r4=>0xffffffffffffffff}) (async)
r5 = getpid()
fcntl$setownex(r4, 0xf, &(0x7f0000000100)={0x2, r5})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d40)={0x30, r1, 0x300, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2f8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x7}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000804}, 0x0)
mmap(&(0x7f0000668000/0x3000)=nil, 0x3000, 0xf, 0x10, r0, 0xec27000) (async)
mbind(&(0x7f0000669000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x5) (async)
r7 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r8 = open$dir(&(0x7f0000000080)='./file0\x00', 0x2, 0x0) (async, rerun: 64)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) (rerun: 64)
ioctl$KVM_GET_API_VERSION(r9, 0xae00, 0x0) (async)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r8, 0x0) (async)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYRES16=r8], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
unshare(0x20000400)
r11 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r11, 0x40000000af01, 0x0)
write$char_usb(r7, &(0x7f0000000340)="1a52", 0x2)
r12 = syz_open_dev$sndpcmp(&(0x7f0000002440), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_STATUS64(r12, 0xc0984124, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r10, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000740)=[0x1], 0x0, 0x0, 0x1}}, 0x40)

1m14.746311109s ago: executing program 2 (id=309):
syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x2010880, &(0x7f0000007400)=ANY=[], 0x1, 0x6174, &(0x7f0000001280)="$eJzs3b2PHGcdB/Dfvt6LiXNKEQULoYsTXkKIX4MxBEhSQEGTArmhQLYul8jCAWQb5EQWvugaCipqChASJUKUiII/IAUtHRUVlmwkkCsGzd3z+OY2u95zzrezd8/nI51nf/vM7D5z353bWc/MPgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAxHe/872znYi4/LN0x0rEp6IX0Y1YquvViFhaXcnz9yPiudhqjmcjYrAQUS+/9c/TEa9GxEfHI+7dv71W331uj/349h///rsfHHvrb38YnP7vn272Xps0361bv/zPn+/sb50BAACgNFVVVZ30Mf9E+nzfbbtTAMBM5Pf/Ksn3H/n6V/986y/z1B+1Wq1Wq2dQN1Xj3WkWEbHRXKbeZ3A4HgAOmY140HYXaJH8i9aPiGNtdwKYa522O8CBuHf/9lon5dtpvh+sbrfnc0F25b/ReXh9x6TpNKPnmMzq9bUZvXhmQn+WZtSHeZLz747mf3m7fZjmO+j8Z2VS/sPtS5+Kk/PvjeY/4ujk3x2bf6ly/v3Hyr8nfwAAAAAAmGP5//9XWj7+u7D/VdmTRx3/XZ1RHwAAAAAAAADgSdvv+H8PGf8PAAAA5lb9Wb32m+M79036Lrb6/kudiKdG5gcKky6WWW67HwAAAAAAAAAAAABQkv72ObyXOhGDiHhqebmqqvqnabR+XPtd/rArff2hZG3/kQcAgG0fHR+5lr8TsRgRl9J3/Q2Wl5eranFpuVqulhby/uxwYbFaanyuzdP6voXhHnaI+8OqfrDFxnJN0z4vT2sffbz6uYZVbw8de0IG6bc5obmlsAEg2X43uucd6Yipqqcn7XzALrb/o8f2z160/ToFAAAADl5VVVUnfZ33iXTMv9t2pwCAmcjv/6PHBQ6kjjjYx5/3emHn9z4X/VGr1Wp1cXVTNd6dZhERG81l6n0Gw/EDwCGzEQ/a7gItkn/R+hHxXNudAOZap+0OcCDu3b+91kn5dprvB2l893wuyK78Nzpby+Xlx02nGT3HZFavr83oxTMT+vPsjPowT3L+3dH8L2+3D9N8B53/rEzKv17PlRb607acf280/xFHJ//u2PxLlfPvP1b+PfkDAAAAAMAcy///v+L4b15lAAAAAAAAADh07t2/vZave83H/z8zZj7Xfx5NOf+O/IuU8++O5P/Fkfl6jdt339zJ/9/3b6/9/ua/Pp2ne81/IT9kJ72yOukV0UnP1Omn6T5XcMTmoDesn2nQ6fb66ZyfavBOXI1rsR5nds3bTb+Pnfazu9rrng52tZ/b1d7/WPv5Xe2D9L0D1VJuPxVr8eO4Fm9vtddtC1PWf3FKezWlPeffs/0XKeffb/zU+S+n9s7ItHb3w+7HtvvmdNzzvHH1s784c/CrM9Vm9B6uW1O9fidb6M+ZiF8/iIif3li/furWlZs3r5+NNDk2bNx7LtLkCcv5D7Z+Fnb+/r+w3Z7/7je317sfDh87/3mxGf2J+b/QuF2v70sz7lsbcv7D9JPzfzu1j9/+D3P+k7f/l1voDwAAAAAAAAAAAAAAADxKVVVbl4i+EREX0vU/bV2bCQDMxvE0ze//9f7A9xvtVaJWq9Vqtfro1E3VeK83i4j4a3OZep/h5+MeDACYZ/+LiH+03QlaI/+C5e/7q6cvtt0ZYKZuvP/BD69cu7Z+/UbbPQEAAAAAAAAAPqk8/udqY/znFyNiZWS+XeO/vhmr+x3/s59vPBxg9AkP9D3BZnfY6zaGG38+tsbnPjVp/O+T8ejxv/tTnm8wpX04pX1hSvvi2Ht30hp7oUdDzv/5xnjndf4nRoZfL2H819Ex70uQ8z/ZeD3X+X9hZL5m/tVv5y7/jb3OuBndXfmfvvneT07feP+DV66+d+Xd9XfXf3T+7Nkz5y9cuHjx4ul3rl5bP7P978H0eg7k/PPY184DLUvOP2cu/7Lk/D+XavmXJef/+VTLvyw5/7y/J/+y5PzzZx/5lyXn/1Kq5V+WnP+XUi3/suT8X061/MuS8/9yquVflpz/K6mWf1ly/qdSLf+y5PxPp3oP+ft6+CMk55+PcNn+y5Lzz2c2yL8sOf9zqZZ/WXL+51Mt/7Lk/F9NtfzLkvP/SqrlX5ac/4VUy78sOf+vplr+Zcn5X0y1/MuS8/9aquVflpz/11Mt/7Lk/F9LtfzLkvP/RqrlX5ac/zdTLf+y5Py/lWr5lyXn/3qq5V+Wne//d8MNN9zIN9r+ywQAAAAAAAAAAAAAjJrF6cRtryMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPB/duBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFvbuLkeus7wd+Zl/stUOIgRCc/A1sEhNCsmTXduIX/k0xAQINUAokFPqC7XrXZsFveO0SKJJNDSUSRkUVVdMLWkCojVpVWBUXtKI0F1Vfrkp7QW8qqkpIjaqAAhJSXyBbzZzneTwzOztn7R2vZ8/z+Uj2b3fmzJwzZ87M7nft7x4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADa3f7Guc80iqJo/mn9taUoXtD8eNPkltZlr7veWwgAAACs1k9bfz93U7pg/wpu1LbM373iH7++uLi4WLxv9HfHv7C4mK6YLIrxjUXRui669O/vb7QvE1woJhojbZ+PVKx+tOL6sYrrxyuu31Bx/caK6ycqrl+yA5bYVP48pnVn21sfbil3aXFzMd66bnuPW11obBwZiT/LaWm0brM4fqSYL44Vc8VMx/Llso3W8t+8vbmutxZxXSNt69rWPEJ++InDcRsaYR9v71jX5fuMvv+GYvJHP/zE4T868+ytvWblbui4v3I7776juZ2fCpeU29ooNqZ9ErdzpG07t/V4TkY7trPRul3z4+7tfG6F2zl6eTPXVPdzPlGMtD7+dms/jbX/WC/tp23hsv+6syiK85c3u3uZJesqRorNHZeMXH5+JsojsnkfzUPpxcXYFR2nt6/gOG3O2e2dx2n3ayI+/7eH240tsw3tT9P3P7lhyfN+pcdp1HzUy71Wuo/BQb9WhuUYjMfFt1sP+omex+D28Pg/cdfyx2DPY6fHMZged9sxeEfVMTiyYbS1zelJaLRuc/kY3NGx/GhrTY3WfOau/sfg9Jnjp6YXPvbx184fP3R07ujciV07dszs2r17796900fmj83NlH9f5d4efpuLkfQauCPsu/gaeHXXsu2H6uKXB/c6nOjzOtzSteygX4dj3Q+usTYvyKXHdPnaeLS50ycujhTLvMZaz889q38dpsfd9joca3sd9vya0uN1OLaC12FzmVP3rOx7lrG2P7224Vp9LdjSdgx2fz/SfQwO+vuRYTkGJ8Jx8a/3LP+1YFvY3iemrvT7kdElx2B6uOG9p3lJ+n5/Ym9r9Doub2teccOG4uzC3On7Hj905szpHUUYa+IlbcdK9/G6ue0xFUuO15ErPl73z7/iidt6XL4l7KuJ1zb/mlj2uWouc/99/Z+r1le33vuz49KdRRgDttb7s9dX8+b+TFmyz/5sLvOp6dV/L55yadv77/gy778x9z9fri/d1YXR8bHy9Tua9s54x/tx51M11nrvarTW/dz0yt6Px8OftX4/vrnP+/HWrmUH/X483v3g4vtxo+qnHavT/XxOhOPk2Ez/9+PmMlt3XukxOdb3/fjOMBth/78mJIWUi9qOneWO27SusbHx8LjG4ho6j9NdHcuPh2zWXNdTO6/uOL37zvK+RtOju2ytjtPJrmUHfZym96vljtNG1U/frk738zkRjoubd/U/TpvLPH3/6t87N8UP2947N1Qdg+OjG5rbPJ4OwvL9fnFTPAbvKw4XJ4tjxWzr2g2t46nRWtfUAys7BjeEP2v9Xrm1zzF4d9eygz4G09ex5Y69xtjSBz8A3c/nRDgunnyg/zHYXOZNewb7vevd4ZK0TNv3rt0/X1vuZ163de2ma/kzr+Z2/s2e/j+bbS5zbO+V5sz+++necMkNPfZT9+t3udfUbLE2+2lr2M5n9y6/n5rb01zmC/tWeDztL4ri3Eceav28N/z7yp+f/c7XO/7dpde/6Zz7yEM/uPHI317J9gOw/j1fjs3l17q2f5layb//AwAAAOtCzP0jYSbyPwAAANRGzP3xf4Un8j8AAADURsz9Y2EmmeT/rW96dv75c0Vq5i8G8fq0Gx4pl4sd15nw+eTiZc3LH/rq3I//8tzK1j1SFMVPHvmNnstvfSRuV2kybOelN3devvSG51a0/oOPXV6uvb/+pXD/8fGs9DDoVcGdKYrimzd9rrWeyfdfbM2nHznYmu8+/8SF5jLP7Ss/j7d/5iXl8l8M5d/9Rw513P6ZsB++F+bM23rvj3i7r118zbY97728vni7xh0vbD3sJz9Q3m/8PTmfv1AuH/fzctv/V5996mvN5R9/Ve/tPzfSe/ufCvf71TD/++Xl8u3PQfPzeLtPh+2P64u3u+8r3+q5/Zc+Uy5/6uFyuYNhxvXfHT7f/vCz8+376/HGoY7HVbylXC6uf+Y7v926Pt5fvP/u7Z84cLFjf3QfH0//c3k/013Lx8vjeqK/6Fp/837aj8+4/qd+62DHfq5a/6V3P/Py5v12r//eruVGu27f/Rub/uDTn+u5vrg9+//sVMfj2f+u8DoO63/yA+F4DNf/z6XPdaw3OviuzvefuPyXtpzreDzRW39Urv/S64+25n9M/vj3b3jBjS88/8rmviuKb7+nvL+q9R/9w5Md2//lW+5pPR/x+tjR717/cuL6T3906sTJhbPzs217tfW7c95ebs/GiU2bm9t7U3hv7f78wMkzH5w7PTkzOVMUk/X9FXpX7Sth/qAc56/09vc8Fp7P237vm5vv+qfPxsv/5dHy8otvK79uvTos9/lw+Zby+VtsrHL9T95+S+v13Xi6/Lyjxz4A27b/594VLRgef/f3BfF4P/XSD7b2Q/O61teN+Lpe5fZ/d7a8n2+E/boYfjPzHbdcXl/78vF3I1x8T/l6X/X+C29z8Xn94/B8v+N75f3H7YqP97vh+5hvbe18v4vHxzfOjXTff+u3eJwP7yfF+fL6uFTc3xefu6Xn5sXfQ1Kcv7X1+e+k+7n1ih7mchY+tjB9bP7E2cenz8wtnJle+NjHDxw/efbEmQOt3+V54ENVt7/8/rS59f40O7f7/mJmU1EUJ4uZNXjDujbb3/xoZdt/6rHDs3tm7pqdO3Lo7JEzj52aO3308MLC4bnZhbsOHTky99Gq28/PPrhj575de3ZOHZ2ffXDvvn279k3NnzjZ3Ixyoyrsnvnw1InTB1o3WXjw/n07Hnjg/pmp4ydn5x7cMzMzdbbq9q2vTVPNW//61Om5Y4fOzB+fm1qY//jcgzv27d69s/K3AR4/dWRhcvr02RPTZxfmTk+Xj2XyTOvi5te+qttTTwv/Vn4/261R/iK+4p337k6/n7Xpq59c9q7KRbp+geiz4XfR/MOLTu1dyecx94+HmWSS/wEAACAHMfdvCDOR/wEAAKA2Yu7fGGYi/wMAAEBtxNw/EWaSSf7X/9f/X1n/v7xe/z+v/v+pj5S90vXe/4/9ef3/PFzn/v+q16//r/9fv/7/yvvz63379f/1/1lq2Pr/MfdvKoos8z8AAADkIOb+zWEm8j8AAADURsz9N4SZyP8AAABQGzH3vyDMJJP8r/+/ov7/zqrCVf37/87/r/9frM/+f3xy9P+zccX9+/c+2vGp/n+g/6//r/+v/6//z6qNL3vN9er/x9x/Y5hJJvkfAAAAchBz/wvDTOR/AAAAqI2Y+28KM5H/AQAAoDZi7t8SZpJJ/tf/d/5//X/9/3XU/+8o0q7J+f/bNkb/f32o3/n/f6r/vy76/xP6/+ux/z8+2O0f7v5/5ebr/3NNDNv5/2Puf1GYSSb5HwAAAHIQc/+Lw0zkfwAAAKiNmPtfEmYi/wMAAEBtxNx/c5hJJvlf/1//f4X9/y/p/+v/D0H/v+PxrEn/v+/5/8uP9P+HS/36/87/X6yL/r/z/xfrsf8/4O0f7v7/oM//P/7m7tvr/9PLsPX/Y+5/aZhJJvkfAAAAchBz/y1hJvI/AAAA1EbM/S8LM5H/AQAAoDZi7t8aZpJJ/tf/1/93/n/9f/3/3uuv7v+X9P+Hi/5/f/r/FfT/9f/1/1fW/+/xza/+P70MW/8/5v5bw0wyyf8AAACQg5j7bwszkf8BAACgNmLu/39hJvI/AAAA1EbM/dvCTDLJ//r/+v/6/3n1/+/doP+v/19v+v/96f9X0P/X/9f/X+H5/5e6kv7/xqo7ozaGrf8fc//Lw0wyyf8AAACQg5j7XxFmIv8DAABAbcTc/8owE/kfAAAAaiPm/skwk0zyv/5/vfr/f/rXT76y0P/X/69Yf037//Ew0P/PnP5/f/r/FfT/9f/1/9ek/08+hq3/H3P/7WEmmeR/AAAAyEHM/XeEmcj/AAAAUBsx998ZZiL/AwAAQG3E3L89zCST/K//X6/+f6T/v4b9/y8+nO5H/7/k/P+96f+vDf3/HtpepPr/FfT/9f+z7//H7371/xmMYev/x9z/qjCTTPI/AAAA5CDm/rvCTOR/AAAAqI2Y+18dZiL/AwAAQG3E3H93mEkm+V//X/9f/9/5//X/e69f/3990v/vT/+/gv6//n/2/X/n/2ewhq3/H3P/a8JMMsn/AAAAkIOY++8JM5H/AQAAoDbi/98s/9+r/A8AAAB1FHP/VJhJJvlf/1//P6f+f0P/X/9f/7/29P/70/+voP+v/6//r//PQA1b/z/m/teGmWSS/wEAACAHMfffF2Yi/wMAAEBtxNw/HWYi/wMAAEBtxNw/E2aSSf7X/9f/z6n/7/z/+v/rof/f0P9fFf3//vT/K+j/6//Xrf9fFPr/XFfD1v+PuX9HmEkm+R8AAAByEHP/zjAT+R8AAABqI+b+XWEm8j8AAADURsz994eZZJL/9f/1//X/9f/1/3uv3/n/1yf9//70/yvo/+v/163/7/z/XGfD1v+Puf+BMJNM8j8AAADkIOb+3WEm8j8AAADURsz9e8JM5H8AAACojZj794aZZJL/9f9r0v//zb/vWLf+v/5/v/UPpv+/Sf8/TP3/4VLT/n/3y+Kq6f9X0P/X/9f/1/9noIat/x9z/74wk0zyPwAAAOQg5v7XhZl05P8Lf7LGmwUAAAAMUMz9/z/MxL//AwAAQG3E3P8zYSaZ5H/9/5r0/7vo/+v/91u/8//r/9dZTfv/A6P/XyHX/n94Q7ve/fnVut7br/+v/89S177/Hz9aWf8/5v4Hw0wyyf8AAACQg5j7fzbMRP4HAACA2oi5//VhJvI/AAAA1EbM/fvDTDLJ//r/+v/6//r/16b///qi2zD2/5sHj/5/vej/96f/XyHX/n9wvfvz63379f/1/1lq2M7/H3P/G8JMMsn/AAAAkIOY+x8KM5H/AQAAoDZi7n9jmIn8DwAAALURc/+bwkwyyf/6//r/+v/6/87/33v9+v/rk/5/f/r/FfT/9f/1//X/Gahh6//H3P/mMJNM8j8AAADkIOb+h8NM5H8AAACojZj73xJmIv8DAABAbcTc/9Ywk0zyv/6//r/+v/6//n/v9ev/r0/6//3p/1fQ/9f/797+1pu9/r/+P1dr2Pr/Mff/XJhJJvkfAAAAchBz/yNhJvI/AAAA1EbM/W8LM5H/AQAAoDZi7n97mEkm+V//X/9f/1//X/+/9/r1/9cn/f/+9P8r6P/r/zv/v/4/AzVs/f+Y+98RZpJJ/gcAAIAcxNz/82Em8j8AAADURsz97wwzkf8BAACgNmLu/4Uwk0zyv/6//r/+v/5/Fv3/5o30/7Og/9+f/n+FHv3/jfr/A+vPbxrIVl6/7a+i/6//z1LD1v+Puf9dYSaZ5H8AAADIQcz97w4zkf8BAACgNmLuf0+YifwPAAAAtRFz/6NhJpnkf/3/LPv/6SHr/5f0/zPo/zv/fzb0//vT/6/g/P/O/6//r//PQA1b/z/m/sfCTDLJ/wAAAJCDmPvfG2Yi/wMAAEBtxNz/i2Em8j8AAADURsz97wszyST/6/9n2f93/v816/+PdRwfOfX/J9qez3Rc6v/r/68B/f/+9P8r6P/r/w9z/z8czZuWub3+P8No2Pr/Mfe/P8wkk/wPAAAAOYi5/5fCTOR/AAAAqI2Y+385zET+BwAAgNqIuf9Xwkwyyf/6//r/+v/O/+/8/73Xr/+/Pun/96f/X0H/X/9/mPv/FfT/GUbD1v+Puf9Xw0wyyf8AAACQg5j7PxBmIv8DAABAbcTcfyDMRP4HAACA2oi5/2CYSSb5X/+/u/8fz6iq/6//r/+v/6//vx4Nrv//shuLQv9f/1//X/9f/1//n9UYtv5/zP2Hwkwyyf8AAACQg5j7fy3MRP4HAACA2oi5/3CYifwPAAAAtRFz/2yYSSb5X///Wp3/P16ST///J/r/+v+B/n9v+v9rw/n/+9P/r6D/r/+v/6//z0ANW/8/5v65MJNM8j8AAADUWPpxcMz9R8JM5H8AAACojZj7j4aZyP8AAABQGzH3fzDMJJP8r/9/rfr/zv/fa/v1/2P/f6xjef3/kv6//v8g6P/3p/9fQf9f/1//X/+fgRq2/n/M/fNhJpnkfwAAAMhBzP0fCjOR/wEAAKA2Yu7/cJiJ/A8AAAC1EXP/sTCTTPJ/ffr//1tus/5/x+30/6v7/42iOO/8//r/vdav/78+6f/3p/9fQf9f/1//X/+fgRq2/n/M/cfDTDLJ/wAAAJCDmPtPhJnI/wAAwP+xdx9Nct1VH8f78WNb0gpeAlXsWLGEFW+BLTuq2LChSCYHY3IwweRkggkm5xxNzjlnk3M0yYaqoTw650gz07otadoz9/7P57PgoEHjblmD4Oepb11gGLn77xu32P8AAAAwjNz994tbmuz/cfr//ET9/0r/v4Dn/+/9+fr/0/T/+v9tONDfX3phn3/O/v/Od7ninvp//b/+f5L+X/+v/2e/ufX/ufvvH7c02f8AAADQQe7+B8Qt9j8AAAAMI3f/A+MW+x8AAACGkbv/irilyf7X/+v/9f/6/z39/w36//Ps/++YH9f/z4vn/0/T/2+wnf7//1f6f/2//l//z6659f+5+x8UtzTZ/wAAANBB7v4Hxy32PwAAAAwjd/9D4hb7HwAAAIaRu/+hcUuT/a//1//r//X/nv+//vU9/3+Z9P/T9P8beP6//l//r/9nq+bW/+fuf1jc0mT/AwAAQAe5+x8et9j/AAAAMIzc/Y+IW+x/AAAAGEbu/kfGLU32v/5f/6//1//r/9e/vv5/ma5bnfkzQf9/kP5/gw39/2ql/59y3v38+l/ect7/Oej/9f8cNLf+P3f/o+KWJvsfAAAAOsjd/+i4xf4HAACAYeTuvzJusf8BAABgGLn7HxO3NNn/+n/9v/5f/6//X//6+v9l8vz/aYfv/+90+/vcq2//7/n/0zz/X/+v/2e/ufX/ufuvilua7H8AAADoIHf/Y+MW+x8AAACGkbv/cXGL/Q8AAADDyN3/+Lilyf7X/7fp/3drF/2//l//r/8fnf5/muf/b7D7x9yp+qH+X/+v/9f/czhz6/9z9z8hbmmy/wEAAKCD3P1PjFvsfwAAABhG7v4nxS32PwAAAAwjd/+T45Ym+1//36b/9/x//b/+X//fgv5/mv5/g1Ge/3+RXzXH3c8f1nG/f/2//p+D5tb/5+5/StzSZP8DAABAB7n7nxq32P8AAAAwjNz9T4tb7H8AAAAYRu7+q+OWJvtf/7+l/v+ygx/T/2+z/89X0P/r//X/+v9p+v9p+v8NRun/L9Jx9/NLf//6f/0/B82t/8/d//S4pcn+BwAAgA5y9z8jbrH/AQAAYBi5+58Zt9j/AAAAMIzc/c+KW5rsf/2/5/9fTP9/b8//1//r//X/M6X/n6b/30D/r//X/+v/2aq59f+5+6+JW5rsfwAAAOggd/+z4xb7HwAAAIaRu/85cYv9DwAAAMPI3f/cuKXJ/tf/6/+X8fx//b/+X/+v/z8/+v9p+v8N9P/6f/2//p+tmlH/f9ZnnVw9L25psv8BAACgg9z9z49b7H8AAAAYRu7+F8Qt9j8AAAAMI3f/C+OWJvtf/z+b/n835xur/z+1Wq30/6um/f+ps34/6+tS/6//PwL6/2n6/w30//p//b/+n62aUf+/++Pc/S+KW5rsfwAAAOggd/+L4xb7HwAAAIaRu/8lcYv9DwAAAMPI3f/SuGWo/X/inP+J/n82/f+usfp/z//f//Ux5/7/1p/k+f/6/xHo/6fp/zfQ/+v/9f/6f7Zqbv1/7v5rb/0z9Oozf53LL7v4XyMAAAAwL9fu/uvJ1cvilqG+/w8AAAC95e5/edxi/wMAAMBCXXPgI7n7XxG3NNn/+v/t9v+Xn/Ux/b/+f//Xx5z7/20//1//f5D+/2jo/6fp/zfQ/+v/9f/6f7Zqbv1/7v5Xxi1N9j8AAAB0kLv/urjF/gcAAIBh5O5/Vdxi/wMAAMAwcve/Om5psv/1/57/r//X/+v/17++/n+Z9P/T9P8b6P/1/8fb/58482/1/4zhAvr/nZ2dK2/z/j93/2vilib7HwAAADrI3f/auGXP/r9+/7ejAAAAgAXJ3X993OL7/wAAADCM3P2vi1ua7H/9f9P+P7/U9f+79P/6/3Wvr/9fJv3/NP3/Bvp//b/n/+v/2aq5Pf8/d//r45Ym+x8AAAA6yN3/hrjF/gcAAIBh5O5/Y9xi/wMAAMAwcve/KW5psv/1/037f8//1//r/4+6/79lpf8/Eovo/0+d+/Xn3v9fpf/X/09o1//f/a57fqj/1/9z0Nz6/9z9b45bmux/AAAA6CB3/1viFvsfAAAAhpG7/61xi/0PAAAAw8jd/7a46dIm+1//r//X/+v/9f/rX/+In/9/+Wq10v9vwSL6/wlz7/89/1//P6Vd/7+P/l//z0Fz6/9z9789bmmy/wEAAKCD3P3viFvsfwAAABhG7v53xi32PwAAAAwjd/+74pYm+1//r//X/194/3/zzs6O/n9B/f9Vi+j/Pf9/S/T/0/T/G+j/9f/6f/0/R+K4+v/c/e+OW5rsfwAAAOggd/974hb7HwAAAIaRu/+9cYv9DwAAAMPI3f++uKXJ/tf/6//1/57/f2J2/f/JPX+9Js//1/9vif5/2hz7/7P/DNH/6/+X/P4H6f+v0f+zTXN7/n/u/vfHLU32PwAAAHSQu/8Dcesf3dr/AAAAMIzc/R+MW+x/AAAAGEbu/g/FLU32v/5f/6//1/8P//x//X8r+v9pc+z/z6b/1/8v+f0P0v97/j9bNbf+P3f/h+OWJvsfAAAAOsjd/5G4xf4HAACAYeTu/2jcYv8DAADAMHL33xC3NNn/+n/9v/5f/6//P/17qP8fg/5/2tH0/6f0//r/6uf/L/5boP/X/2/6fMY0t/4/d//H4pYm+x8AAAA6yN3/8bjF/gcAAIBh5O7/RNxi/wMAAMAiXbrmY7n7Pxm3NNn/+n/9v/5f/6//X//6+v9l0v9P8/z/DfT/F9jP32HPj5b2/P/9//ul/9f/s31z6/9z938qbmmy/wEAAKCD3P2fjlvsfwAAABhG7v7PxC32PwAAAAwjd/9n45Ym+1//r//X/+v/9f/rX1//v0z6/2n6/w30/8f6/Pylv3/9v/6fg+bW/+fu/1zc0mT/AwAAQAe5+z8ft9j/AAAAMIzc/V+IW+x/AAAAGMbu7s+4rOH+1//r//X/+n/9//rX1/8vk/5/mv5/A/2//l//r/9nq+bW/39x97NOrr4UtzTZ/wAAANBB7v4vxy32PwAAAAwjd/9X4hb7HwAAAIaRu/+rcUuT/a//1/8vo//f2dm5Uv+v/9/76znT/9+o/6fo/6fp/zfQ/+v/9f/6f7Zqbv1/7v6vxS1N9j8AAAB0kLv/63GL/Q8AAADDyN3/jbjF/gcAAIBh5O7/ZtzSZP/r/2fQ/5/U/3v+v/5/5fn/+v8t0f9P0/9vMGL/f/L8f/nH3c8f1nG/f/2//p+D5tb/5+7/VtzSZP8DAABAB7n7vx232P8AAAAwjNz934lb7H8AAAAYRu7+78YtTfa//v/o+v9b/951ef7/qdX696//1//r//X/tzX9/zT9/wYj9v8X4Lj7+aW/f/2//p+D5tb/5+7/XtzSZP8DAABAB7n7vx+32P8AAAAwjNz9P4hb7H8AAAAYRu7+H8YtTfa//n8Gz/8fsP/3/P/1Xx/6/1n3/5fo/8eg/5+m/99A/6//1/9vqf/Pr2b9f3dz6/9z9/8obmmy/wEAAKCD3P0/jlvsfwAAABhG7v6fxC32PwAAAAwjd/+NcctZ+39d2z0K/b/+X/+v/9f/r399/f8y6f+nnW//f2J1uP4/6f/1//r/rv2/5/9z2tz6/9z9P41bfP8fAAAAFueyc3w8d//P4hb7HwAAAIaRu//ncYv9DwAAAMPI3f+LuOWmS47rLR0p/b/+X/+v/9f/r399/f8y6f+nef7/Bovv/3d2ds7z/4ets6V+/m76/zH6/9VK/8/hza3/z93/y7jF9/8BAABgGLn7fxW32P8AAAAwjNz9v45b7H8AAAAYRu7+38QtTfa//l//f8j+fzfN1P+fpv8/Tf+/nv7/aOj/p+n/N1h8/384x93PL/39j9b/e/4/2zC3/j93/2/jlib7HwAAADrI3f+7uMX+BwAAgGHk7v993GL/AwAAwDBy9/8hbmmy/4+t/4+/1fr/xff/nv+v/9f/6/9nRf8/Tf+/gf5f/6//1/+zVXPr/3P3/zFuabL/AQAAoIPc/X+KW+x/AAAAGEbu/j/HLfY/AAAADCN3/1/ilib73/P/9f/6f/2//n/96+v/l0n/P03/v179Run/9f/6f/0/WzW3/j93/1/jlib7HwAAADrI3f+3uMX+BwAAgGHk7r8pbrH/AQAAYBi5+/8etzTZ//p//b/+X/+v/1//+vr/ZdL/TzvO/v8et9v8sp7/f+z9f74F/b/+X//PVsyt/8/d/4+4pcn+BwAAgA5y9/8zbrH/AQAAYBi5+/8Vt9j/AAAAMIzc/f+OW5rs/w39/4n6ifr/Sfr/ve9f/7/+60P/r//X/9/29P/TPP9/A/2/5//r//X/bNXc+v/c/TfHLU32PwAAAHSQu/+WuMX+BwAAgGHk7v9P3GL/AwAAwDBy9/83bmmy/z3/X/+v/9f/6//Xv77+f5n0/9P0/xvo//X/+n/9P1s1t/4/d///AgAA//+XbGLE")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1004401, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
chdir(&(0x7f00000017c0)='./file0\x00')
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x8, 0x0)

1m13.121413705s ago: executing program 0 (id=317):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="cc010000", @ANYRES16=r1, @ANYRESDEC=r0, @ANYRES32=r2, @ANYRESHEX=r1], 0x1cc}, 0x1, 0x0, 0x0, 0x40000}, 0x800)

1m12.230520615s ago: executing program 32 (id=317):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="cc010000", @ANYRES16=r1, @ANYRESDEC=r0, @ANYRES32=r2, @ANYRESHEX=r1], 0x1cc}, 0x1, 0x0, 0x0, 0x40000}, 0x800)

1m12.200131555s ago: executing program 2 (id=319):
socket(0x400000000010, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r5 = socket$inet6(0xa, 0x80003, 0x6) (fail_nth: 1)
connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0)

1m8.790369042s ago: executing program 2 (id=323):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x3c, 0x3, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008010}, 0x48000)

1m8.381522591s ago: executing program 33 (id=323):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x3c, 0x3, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008010}, 0x48000)

10.403559588s ago: executing program 1 (id=504):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)

9.046243749s ago: executing program 1 (id=507):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", <r2=>0xffffffffffffffff})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", <r3=>0xffffffffffffffff})
mprotect(&(0x7f0000729000/0x3000)=nil, 0x3000, 0x2000005)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r3})

7.859005525s ago: executing program 1 (id=511):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{}]}, 0x82, 0x499, &(0x7f0000000840)="$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")
rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0)
sendfile(r0, r0, 0x0, 0xe3aa6ea)

6.832665748s ago: executing program 1 (id=516):
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x0, 0x10}, {}, {0xa, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x200000c2)

5.625493045s ago: executing program 1 (id=519):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
unshare(0x6020400)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0xffffffff, 0x80, 0x0, 0x3, 0x10007e, 0x20000006, 0x50, 0x6, 0x10000, 0x80005, 0x2, 0x8, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x26, 0xd, 0x1, 0x6, 0x7, 0xe661, 0x4, 0x7, 0x10001, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x800080ee, 0xa, 0x17, 0x1, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x6, 0x5, 0x1, 0x40], [0x10000007, 0x9, 0x80000130, 0x8004, 0x5, 0xfffffff3, 0x2, 0xc8, 0xf9, 0x9, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x1, 0x0, 0x5, 0x42f, 0xe, 0x312, 0x78, 0x1, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x4400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x101, 0x1, 0x4, 0xffff80f1, 0x1, 0x206, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93694, 0x43, 0x9], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x40000009, 0x5, 0x7fff, 0x0, 0x5, 0xc303, 0x4, 0x6, 0x5, 0x5, 0x8, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x8001, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x8001, 0xd, 0x800003, 0x200, 0x400080, 0xffffffff, 0x4, 0x2950bfaf, 0x2, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0x1000ac8, 0xc1, 0x2, 0x1000003, 0x7ff, 0x129, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x21c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x24], [0x9, 0x40bb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x200, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000001, 0x7, 0x4, 0xc8, 0xfffffffe, 0xfffff000, 0x4010080, 0x3, 0x7e, 0x100, 0xff, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d69b, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x928, 0xb1e, 0xc7, 0x200, 0xffff2441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x5b, 0x100)

5.579037756s ago: executing program 3 (id=520):
syz_mount_image$udf(&(0x7f0000000f40), &(0x7f0000000f80)='./file1\x00', 0x4, &(0x7f0000000d80)=ANY=[@ANYBLOB='mode=00000000000000000000202,umask=00000000000000000000002,dmode=00000000000000000100002,gid=forget,longad,shortad,novrs,iocharset=cp437,uid=forget,umask=00000000000000000000006,dmode=00000000000000000000010,gid=', @ANYRESDEC=0x0, @ANYBLOB="010000006e6963622c73657373696f6e08003030303030303030303030303030303030ff352c0042dd34b1ae350766d52755a53b0afb5f0b36cb1cea3ecdfc57799a5766a35937fae57b3f5fa1bfbe0253f1a140cfdadf4a599ad247c0ff6e5fd2eb04c8043ba1974e096acbc1585151b94ec4141e825b988b632e94f92b459f91307b0e488e2d165fa974bcab91213a1d2bd46ec1e446983b9c663800"/169], 0x1, 0xc58, &(0x7f00000000c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x145042, 0x52)
mmap$IORING_OFF_SQ_RING(0x0, 0x4000, 0x100000b, 0x2013, r0, 0x0)

4.91906231s ago: executing program 3 (id=523):
inotify_add_watch(0xffffffffffffffff, 0x0, 0x400)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x6, 0x29, 0x80, 0xf, 0xffffffff, 0x91b1}, [@TCA_NETEM_RATE={0x14, 0x6, {0x4, 0x7, 0x7fffffff, 0xfffffffe}}]}}}]}, 0x60}}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x2)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c)
sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0)

4.585571278s ago: executing program 3 (id=525):
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="3101000009005e08cb06030000e8160000010902240001000064000904340102d486100009058acf"], 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x10, 0x2000000, 0x7}]})

4.201127107s ago: executing program 5 (id=527):
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000140)={0xa, 0x4e20, 0x2, @loopback, 0x49}, 0x1c, 0x0}, 0x4084810)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c"], 0x50)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2000800)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0})
pwritev(r0, &(0x7f0000000600)=[{&(0x7f0000000240)="02000000", 0x3}], 0x10000000000000a3, 0x0, 0x0)

3.990736881s ago: executing program 5 (id=529):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x200010, &(0x7f00000000c0)={[{@block_validity}, {}, {@nombcache}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@nodioread_nolock}, {@grpjquota}]}, 0xfc, 0x57b, &(0x7f0000000800)="$eJzs3d1rW+UfAPDvSZu9/37rYAz1Qgq7cDKXrq0vE4TNS9HhQO9naLMymi6jScdaB9su3I03MgQRB+If4L2Xw3/Av2KggyGj6IUXVk56smV56Uua2cx8PnC25znnpN/z5DnPk+/JSUgAQ2s8/ScX8XJEfJVEHG7aNhrZxvH1/VYf35hJlyTW1j75PYkkW9fYP8n+P5hVXoqIn7+IOJlrj1tdXpkvlsulxaw+UVu4OlFdXjl1eaE4V5orXZmanj7z1vTUu++83WPL2oO+fuHPbz++/8GZL4+vfvPjwyN3kzgXh7JtTe1IegyYutVcGY/x7I/l41zLjpM7CDKIdvKksXtGsnGej3QOOBwj2agH/vtuRsQaMJxGTAAwrBp5QOPavvl6fiN/Nz32Rfbo/fULoPb2j66/NxL76tdGB1aTZ66M0uvdsT7ET2P89Nu9u+kSLe+ntLrZh3gADbduR8Tp0dH2+S/J5r/ene70JmyL1hhbff0Bdu5+mv+80Sn/yT3Jf6JD/nOww9jtxebjP/ewD2G6SvO/9zrmv0+mrrGRrPa/es6XTy5dLpdOR8T/I+JE5Pem9Y3u55xZfdA1V27O/9Iljd/IBbPjeDi699nHzBZrxZ20udmj2xGvPM1/k2ib//fVc93W/k+fjwtbjHGsdO/Vbts2b3+z/mfAaz9EvNax/5/e0Uo2vj85UT8fJhpnRbs/7hz7pVv87bW//9L+P7Bx+8eS5vu11e3H+H7fX6Vu23o9//ckn9bLe7J114u12uJkxJ7ko/b1U08f26g39k/bf+L4xvNfp/N/f0R8tsX23zl6p+uug9D/s9vq/2cK+bY1HQoPPvz8u27xt9b/b9ZLJ7I1W5n/tnJcvZ3NAAAAAAAAMLhyEXEoklzhSTmXKxTWP99xNA7kypVq7eSlytKV2ah/V3Ys8rnGne7DTZ+HmMw+D9uoT7XUpyPiSER8PbK/Xi/MVMqzu914AAAAAAAAAAAAAAAAAAAAGBAHu3z/P/XryG4fHfDc+clvGF6bjv9+/NITMJC8/sPwMv5heBn/MLyMfxhexj8ML+MfhpfxD8PL+AcAAAAAAAAAAAAAAAAAAAAAAAAAAIC+unD+fLqsrT6+MZPWZ68tL81Xrp2aLVXnCwtLM4WZyuLVwlylMlcuFWYqC5v9vXKlcnVyKpauT9RK1dpEdXnl4kJl6Urt4uWF4lzpYin/r7QKAAAAAAAAAAAAAAAAAAAAXizV5ZX5YrlcWlToWjgbA3EYPReSzXr5bHYy9BRidPcbqPAcCrs8MQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAk38CAAD//2iMNWI=")
bpf$MAP_CREATE(0x0, 0x0, 0x48)
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000140)=ANY=[], 0x835, 0x0)
rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00')

3.817094045s ago: executing program 4 (id=530):
syz_mount_image$hfsplus(&(0x7f00000003c0), &(0x7f0000000100)='./file1\x00', 0x201048c, &(0x7f0000000000)=ANY=[], 0xfd, 0x655, &(0x7f0000000400)="$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")
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc31fe084736598c)
unshare(0x62020600)
openat$yama_ptrace_scope(0xffffffffffffff9c, 0x0, 0x2, 0x0)
truncate(&(0x7f0000000000)='./file0/file0\x00', 0x1)

3.248792698s ago: executing program 5 (id=531):
unshare(0x22020600)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c3, &(0x7f0000000900)="$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")
timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)=<r0=>0x0)
timer_settime(0x0, 0x1, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
timer_gettime(r0, &(0x7f0000000080))
r1 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='.\x00', 0x0, 0x160)
open_by_handle_at(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='K\x00\x00\x00r'], 0x70001)
r2 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='.\x00', 0x0, 0x160)
open_by_handle_at(r2, &(0x7f0000000080)=ANY=[], 0x531500)

3.026856443s ago: executing program 4 (id=532):
r0 = socket$inet(0x2, 0x1, 0x0)
semtimedop(0x0, 0x0, 0x0, 0x0)
pipe2(0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x3f8, 0x450, 0x2c0, 0xffffffff, 0x3a8, 0x2c0, 0x450, 0x450, 0xffffffff, 0x450, 0x450, 0x5, 0x0, {[{{@uncond, 0x0, 0x130, 0x168, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x801, {0x0, @broadcast, @multicast2, @port=0x1, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@multicast2, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'veth1_vlan\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @port=0x4e21}}}, {{@ip={@private=0xa010100, @rand_addr, 0x0, 0x0, 'nicvf0\x00', 'nr0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x458)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10)
connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000540)={'wlan1\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x1}})
setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
r7 = accept$alg(r6, 0x0, 0x0)
recvmsg(r7, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x40000122)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, 0x0, 0x4000)
socket$key(0xf, 0x3, 0x2)
socket$nl_xfrm(0x10, 0x3, 0x6)

2.649739591s ago: executing program 1 (id=533):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0)
socket$netlink(0x10, 0x3, 0x0)
unshare(0x6020400)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0xffffffff, 0x80, 0x0, 0x3, 0x10007e, 0x20000006, 0x50, 0x6, 0x10000, 0x80005, 0x2, 0x8, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x26, 0xd, 0x1, 0x6, 0x7, 0xe661, 0x4, 0x7, 0x10001, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x800080ee, 0xa, 0x17, 0x1, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x6, 0x5, 0x1, 0x40], [0x10000007, 0x9, 0x80000130, 0x8004, 0x5, 0xfffffff3, 0x2, 0xc8, 0xf9, 0x9, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x1, 0x0, 0x5, 0x42f, 0xe, 0x312, 0x78, 0x1, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x4400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x101, 0x1, 0x4, 0xffff80f1, 0x1, 0x206, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93694, 0x43, 0x9], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x40000009, 0x5, 0x7fff, 0x0, 0x5, 0xc303, 0x4, 0x6, 0x5, 0x5, 0x8, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x8001, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x8001, 0xd, 0x800003, 0x200, 0x400080, 0xffffffff, 0x4, 0x2950bfaf, 0x2, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0x1000ac8, 0xc1, 0x2, 0x1000003, 0x7ff, 0x129, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x21c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x24], [0x9, 0x40bb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x200, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000001, 0x7, 0x4, 0xc8, 0xfffffffe, 0xfffff000, 0x4010080, 0x3, 0x7e, 0x100, 0xff, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d69b, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x928, 0xb1e, 0xc7, 0x200, 0xffff2441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

2.649460391s ago: executing program 5 (id=534):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0xfcfd, 0x25dfdbfb, {0x2}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006a0005062cbd7000fcdbdf25020000000000000008000500", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x880)

2.419811317s ago: executing program 5 (id=535):
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x2000014, &(0x7f0000000480)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT=0x0, @ANYRESDEC, @ANYRESDEC, @ANYRESDEC, @ANYBLOB="0ea1a3ed758749a35b0cf19e7301710a8a7c5e7fe9b7c49589266bd5045f15f1817fcc4ea04eeac3f0df37b8beaeafc22a5a08a1a70024", @ANYBLOB="97b61e88553572fd2efdef5bcdc603f5cf17a49bf1d8457078ace3df30c7c941b1103b86953f4b1b43816a58622af5d511ff04c37a8893dc5ea494888e218c88326783f69ee710da511f74fe812d33a93825fb7eb8eca7196d483f5689286f28bf447eca9c6676aad40948ce1a2154e82ce6ecb85f76965d75d05e46"], 0xfe, 0x2ce, &(0x7f00000008c0)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0)

1.758982661s ago: executing program 3 (id=536):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x19, {0x0, "f4"}}, @nested_vmlaunch={0x12f, 0x18}], 0x61})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
r5 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
syz_kvm_assert_syzos_uexit$x86(r3, r5, 0xe2e20001)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
syz_kvm_assert_syzos_uexit$x86(r3, r5, 0xffffffffffffffff)

1.668896383s ago: executing program 4 (id=537):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x54, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x23, 0x33, @action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1}, {0x4ec}, @device_a, @device_a, @initial, {0x4, 0xa}}, @channel_switch={0x0, 0x4, {{0x25, 0x3, {0x1, 0xb4, 0x58}}, @void, @void}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x2, 0xc]}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1671}]]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x4)

1.479026107s ago: executing program 4 (id=538):
fchmodat(0xffffffffffffff9c, 0x0, 0x17f)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet6_icmp(0xa, 0x2, 0x3a)
bind$inet6(r3, &(0x7f0000000240)={0xa, 0x802, 0x1000, @empty}, 0x1c)

1.274979282s ago: executing program 5 (id=539):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x43, 0x65)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
chdir(0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r1, &(0x7f00000005c0)='\"', 0x1, 0x4fed0)
sendfile(r1, r1, 0x0, 0xe3aa6ea)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59)
ioctl$EXT4_IOC_MIGRATE(r2, 0x6609)

367.090772ms ago: executing program 3 (id=540):
gettid()
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = timerfd_create(0x0, 0x0)
timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0)

281.697234ms ago: executing program 4 (id=541):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x60, 0x8}, {0x0, 0x0, 0x6, 0x3ff}, {0x0, 0x0, 0x0, 0xffffffff}, {0x6, 0x4, 0x4, 0x40}]})
ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1)

39.021059ms ago: executing program 3 (id=542):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0xa, '\x00\x00\b\x00'}, @main=@item_4={0x3, 0x0, 0xb, "bb3507e0"}, @global=@item_4={0x3, 0x1, 0x3, "c82a8a52"}]}}, 0x0}, 0x0)

0s ago: executing program 4 (id=543):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x80)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000640)={r0, r2, 0x25, 0x2, @void}, 0x10)
syz_emit_ethernet(0x22, &(0x7f0000000040)=ANY=[], 0x0)

kernel console output (not intermixed with test programs):

0 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  182.959675][ T6824] RSP: 002b:00007fe663c48028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  182.968132][ T6824] RAX: ffffffffffffffda RBX: 00007fe663026180 RCX: 00007fe662d9de59
[  182.976143][ T6824] RDX: 0000200000000040 RSI: 00000000c0f85403 RDI: 0000000000000008
[  182.984497][ T6824] RBP: 00007fe663c48090 R08: 0000000000000000 R09: 0000000000000000
[  182.992672][ T6824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  183.000761][ T6824] R13: 00007fe663026218 R14: 00007fe663026180 R15: 00007ffe96cadb78
[  183.008797][ T6824]  </TASK>
[  183.013590][ T6824] ERROR: Out of memory at tomoyo_realpath_from_path.
[  183.189136][ T5811] usb 4-1: USB disconnect, device number 3
[  183.724547][ T5811] appletouch 4-1:0.85: input: appletouch disconnected
[  184.714288][ T6844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.225'.
[  184.893031][ T6846] loop1: detected capacity change from 0 to 1024
[  184.932470][    T8] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  185.199467][ T6846] FAULT_INJECTION: forcing a failure.
[  185.199467][ T6846] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  185.213550][ T6846] CPU: 0 PID: 6846 Comm: syz.1.225 Not tainted syzkaller #0
[  185.221378][ T6846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  185.233728][ T6846] Call Trace:
[  185.237225][ T6846]  <TASK>
[  185.240383][ T6846]  dump_stack_lvl+0x18c/0x250
[  185.245211][ T6846]  ? show_regs_print_info+0x20/0x20
[  185.250660][ T6846]  ? load_image+0x420/0x420
[  185.255558][ T6846]  ? __might_fault+0xaa/0x120
[  185.260359][ T6846]  ? __lock_acquire+0x7d80/0x7d80
[  185.265438][ T6846]  should_fail_ex+0x394/0x4c0
[  185.270165][ T6846]  _copy_from_user+0x2f/0xe0
[  185.275237][ T6846]  ___sys_sendmsg+0x1c7/0x360
[  185.279969][ T6846]  ? get_pid_task+0x20/0x1e0
[  185.285422][ T6846]  ? __sys_sendmsg+0x2b0/0x2b0
[  185.290527][ T6846]  ? __lock_acquire+0x7d80/0x7d80
[  185.295915][ T6846]  __se_sys_sendmsg+0x1d0/0x2c0
[  185.301004][ T6846]  ? __x64_sys_sendmsg+0x80/0x80
[  185.306089][ T6846]  ? lockdep_hardirqs_on+0x98/0x150
[  185.311623][ T6846]  do_syscall_64+0x55/0xb0
[  185.317426][ T6846]  ? clear_bhb_loop+0x40/0x90
[  185.322549][ T6846]  ? clear_bhb_loop+0x40/0x90
[  185.327755][ T6846]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  185.334090][ T6846] RIP: 0033:0x7f727c59de59
[  185.339955][ T6846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  185.362527][ T6846] RSP: 002b:00007f727d3fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  185.372081][ T6846] RAX: ffffffffffffffda RBX: 00007f727c826090 RCX: 00007f727c59de59
[  185.381242][ T6846] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 000000000000000b
[  185.390089][ T6846] RBP: 00007f727d3fe090 R08: 0000000000000000 R09: 0000000000000000
[  185.399698][ T6846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  185.410046][ T6846] R13: 00007f727c826128 R14: 00007f727c826090 R15: 00007fffa3346fe8
[  185.420623][ T6846]  </TASK>
[  185.781356][    T8] usb 1-1: device descriptor read/64, error -71
[  186.051150][    T8] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  186.201189][    T8] usb 1-1: device descriptor read/64, error -71
[  186.326290][    T8] usb usb1-port1: attempt power cycle
[  186.356773][ T6837] loop3: detected capacity change from 0 to 32768
[  186.375978][ T6849] loop2: detected capacity change from 0 to 32768
[  186.455805][ T6837] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  186.541476][ T6849] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  186.603099][ T6837] XFS (loop3): Ending clean mount
[  186.670311][ T6855] loop1: detected capacity change from 0 to 32768
[  186.718984][ T6855] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  186.735189][ T6849] XFS (loop2): Ending clean mount
[  186.741285][    T8] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  186.820770][    T8] usb 1-1: device descriptor read/8, error -71
[  186.836894][ T6849] XFS (loop2): Quotacheck needed: Please wait.
[  186.908069][ T5779] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  186.917274][ T6855] XFS (loop1): Ending clean mount
[  187.018059][ T6849] XFS (loop2): Quotacheck: Done.
[  187.141228][    T8] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  187.210300][    T8] usb 1-1: device descriptor read/8, error -71
[  187.212596][ T5771] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  187.331621][    T8] usb usb1-port1: unable to enumerate USB device
[  187.579777][ T6888] syz.3.230 uses obsolete (PF_INET,SOCK_PACKET)
[  187.731632][ T5777] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  188.012756][   T28] audit: type=1326 audit(1783315657.805:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6884 comm="syz.1.231" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f727c59de59 code=0x7ffc0000
[  188.430534][   T28] audit: type=1326 audit(1783315657.805:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6884 comm="syz.1.231" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f727c59de59 code=0x7ffc0000
[  188.481501][   T28] audit: type=1326 audit(1783315657.805:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6884 comm="syz.1.231" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f727c59de59 code=0x7ffc0000
[  188.566432][   T28] audit: type=1326 audit(1783315657.805:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6884 comm="syz.1.231" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f727c59de59 code=0x7ffc0000
[  188.617698][   T28] audit: type=1326 audit(1783315657.805:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6884 comm="syz.1.231" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f727c59de59 code=0x7ffc0000
[  188.855155][   T28] audit: type=1326 audit(1783315657.805:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6884 comm="syz.1.231" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f727c59de59 code=0x7ffc0000
[  188.891271][   T28] audit: type=1326 audit(1783315657.815:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6884 comm="syz.1.231" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f727c59de59 code=0x7ffc0000
[  188.916424][   T28] audit: type=1326 audit(1783315657.815:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6884 comm="syz.1.231" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f727c59de59 code=0x7ffc0000
[  188.947081][   T28] audit: type=1326 audit(1783315657.815:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6884 comm="syz.1.231" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f727c59de59 code=0x7ffc0000
[  188.983028][   T28] audit: type=1326 audit(1783315657.815:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6884 comm="syz.1.231" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f727c59de59 code=0x7ffc0000
[  189.014190][ T5831] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  189.035091][ T6900] mmap: syz.2.232 (6900) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  189.090496][ T6900] binder: 6897:6900 ioctl c0306201 200000000080 returned -14
[  189.158875][ T6902] loop3: detected capacity change from 0 to 2048
[  189.214626][ T5831] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  189.225680][ T5831] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3
[  189.249407][ T5831] usb 1-1: config 0 interface 0 has no altsetting 0
[  189.270909][ T5831] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[  189.280597][ T6903] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  189.337933][ T5831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  189.378161][ T5831] usb 1-1: config 0 descriptor??
[  189.386198][ T6902] syz.3.235: attempt to access beyond end of device
[  189.386198][ T6902] loop3: rw=0, sector=18441677524128759844, nr_sectors = 2 limit=2048
[  189.494760][ T6902] NILFS error (device loop3): nilfs_readdir: bad page in #2
[  189.528925][ T6902] Remounting filesystem read-only
[  190.567422][ T6900] loop2: detected capacity change from 0 to 32768
[  190.581735][ T6910] loop3: detected capacity change from 0 to 2048
[  190.618435][ T6900] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.232 (6900)
[  190.640216][ T6913] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  190.727448][ T6900] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  190.758807][ T6900] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  190.795672][ T6900] BTRFS info (device loop2): using free space tree
[  190.982333][ T6900] BTRFS info (device loop2): enabling ssd optimizations
[  191.008409][ T6900] BTRFS info (device loop2): auto enabling async discard
[  191.079100][ T6900] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  191.392656][ T5831] Bluetooth: Can't get version to change to load ram patch err
[  191.400619][ T5831] Bluetooth: Loading patch file failed
[  191.463149][ T5831] ath3k: probe of 1-1:0.0 failed with error -71
[  191.504609][ T5831] usb 1-1: USB disconnect, device number 10
[  191.819471][ T6912] loop1: detected capacity change from 0 to 40427
[  191.931234][ T6912] F2FS-fs (loop1): invalid crc value
[  191.970212][ T6912] F2FS-fs (loop1): Found nat_bits in checkpoint
[  192.129189][ T6912] F2FS-fs (loop1): Start checkpoint disabled!
[  192.188364][ T6912] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  192.602123][ T6934] loop0: detected capacity change from 0 to 32768
[  192.678393][ T6934] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  192.690519][ T5877] kworker/u4:10: attempt to access beyond end of device
[  192.690519][ T5877] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  192.730354][ T5877] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  192.744218][ T5877] kworker/u4:10: attempt to access beyond end of device
[  192.744218][ T5877] loop1: rw=2049, sector=41000, nr_sectors = 8 limit=40427
[  192.817433][ T6934] XFS (loop0): Ending clean mount
[  192.839572][ T5877] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  193.125379][ T5775] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  193.291650][ T5831] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  193.501306][ T5831] usb 4-1: Using ep0 maxpacket: 32
[  193.610690][ T5831] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  193.789938][ T5831] usb 4-1: config 0 has no interface number 0
[  193.921755][ T5831] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[  193.967876][ T5831] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.996626][ T5831] usb 4-1: Product: syz
[  194.015399][ T5831] usb 4-1: Manufacturer: syz
[  194.035632][ T5831] usb 4-1: SerialNumber: syz
[  194.111534][ T5831] usb 4-1: config 0 descriptor??
[  194.153798][ T5831] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  194.223218][ T5831] usb 4-1: selecting invalid altsetting 1
[  194.390922][ T5831] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  194.444325][ T5831] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  194.595435][ T6969] FAULT_INJECTION: forcing a failure.
[  194.595435][ T6969] name failslab, interval 1, probability 0, space 0, times 0
[  194.609268][ T6969] CPU: 1 PID: 6969 Comm: syz.0.247 Not tainted syzkaller #0
[  194.616886][ T6969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  194.627131][ T6969] Call Trace:
[  194.630775][ T6969]  <TASK>
[  194.633953][ T6969]  dump_stack_lvl+0x18c/0x250
[  194.638860][ T6969]  ? show_regs_print_info+0x20/0x20
[  194.645696][ T6969]  ? load_image+0x420/0x420
[  194.650267][ T6969]  ? __might_sleep+0xe0/0xe0
[  194.654990][ T6969]  ? __lock_acquire+0x7d80/0x7d80
[  194.660089][ T6969]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[  194.666054][ T6969]  should_fail_ex+0x394/0x4c0
[  194.671162][ T6969]  should_failslab+0x9/0x20
[  194.675805][ T6969]  slab_pre_alloc_hook+0x59/0x300
[  194.680882][ T6969]  ? __se_sys_memfd_create+0x25a/0x660
[  194.686472][ T6969]  ? __se_sys_memfd_create+0x25a/0x660
[  194.692424][ T6969]  __kmem_cache_alloc_node+0x53/0x250
[  194.698174][ T6969]  ? __se_sys_memfd_create+0x25a/0x660
[  194.704057][ T6969]  __kmalloc+0xa7/0x240
[  194.708443][ T6969]  __se_sys_memfd_create+0x25a/0x660
[  194.713951][ T6969]  do_syscall_64+0x55/0xb0
[  194.718625][ T6969]  ? clear_bhb_loop+0x40/0x90
[  194.724773][ T6969]  ? clear_bhb_loop+0x40/0x90
[  194.729597][ T6969]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  194.735648][ T6969] RIP: 0033:0x7fe662d9de59
[  194.740113][ T6969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  194.761431][ T6969] RSP: 002b:00007fe663c47e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[  194.770418][ T6969] RAX: ffffffffffffffda RBX: 0000000000009e28 RCX: 00007fe662d9de59
[  194.778443][ T6969] RDX: 00007fe663c47ee0 RSI: 0000000000000000 RDI: 00007fe662e3404f
[  194.786828][ T6969] RBP: 000020000000a040 R08: 00000000ffffffff R09: 0000000000000000
[  194.794866][ T6969] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000009ec0
[  194.803150][ T6969] R13: 00007fe663c47ee0 R14: 00007fe663c47ea0 R15: 0000200000000140
[  194.812001][ T6969]  </TASK>
[  194.835394][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  195.280482][ T5831] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  195.291904][ T5831] usb 4-1: media controller created
[  195.311870][ T1217] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  195.322277][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  195.327885][ T5831] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  195.497301][ T5831] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-32
[  195.521539][ T5831] zl10353_read_register: readreg error (reg=127, ret==-32)
[  195.543243][ T5831] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  195.561649][ T1217] usb 3-1: device descriptor read/64, error -71
[  195.681699][ T5831] usb 4-1: USB disconnect, device number 4
[  195.824347][ T6978] loop0: detected capacity change from 0 to 128
[  195.851230][ T1217] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  196.125901][ T6978] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  196.138208][ T6978] hpfs: filesystem error: improperly stopped
[  196.144709][ T6978] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  196.152854][ T6978] hpfs: You really don't want any checks? You are crazy...
[  196.160666][ T6978] hpfs: Code page index out of array
[  196.166242][ T6978] hpfs: code page support is disabled
[  196.184267][ T6978] hpfs: hpfs_map_4sectors(): unaligned read
[  196.192675][ T6978] hpfs: hpfs_map_4sectors(): unaligned read
[  196.198889][ T6978] hpfs: filesystem error: unable to find root dir
[  197.192971][ T1217] usb 3-1: device descriptor read/64, error -71
[  197.341453][ T1217] usb usb3-port1: attempt power cycle
[  197.469234][   T28] kauditd_printk_skb: 63 callbacks suppressed
[  197.469250][   T28] audit: type=1326 audit(1783315667.465:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6984 comm="syz.3.252" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f753c19de59 code=0x0
[  197.649643][ T6988] binder: 6984:6988 ioctl c0306201 200000000080 returned -14
[  198.162678][ T6991] FAULT_INJECTION: forcing a failure.
[  198.162678][ T6991] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  198.176886][ T6991] CPU: 0 PID: 6991 Comm: syz.0.254 Not tainted syzkaller #0
[  198.184570][ T6991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  198.196337][ T6991] Call Trace:
[  198.199986][ T6991]  <TASK>
[  198.202932][ T6991]  dump_stack_lvl+0x18c/0x250
[  198.208075][ T6991]  ? asm_sysvec_call_function_single+0x1a/0x20
[  198.215368][ T6991]  ? show_regs_print_info+0x20/0x20
[  198.220615][ T6991]  ? load_image+0x420/0x420
[  198.225269][ T6991]  should_fail_ex+0x394/0x4c0
[  198.230164][ T6991]  _copy_from_user+0x2f/0xe0
[  198.234869][ T6991]  __sys_bpf+0x23e/0x890
[  198.239237][ T6991]  ? bpf_link_show_fdinfo+0x390/0x390
[  198.244777][ T6991]  ? lock_chain_count+0x20/0x20
[  198.249739][ T6991]  __x64_sys_bpf+0x7c/0x90
[  198.254379][ T6991]  do_syscall_64+0x55/0xb0
[  198.258802][ T6991]  ? clear_bhb_loop+0x40/0x90
[  198.263682][ T6991]  ? clear_bhb_loop+0x40/0x90
[  198.268794][ T6991]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  198.274787][ T6991] RIP: 0033:0x7fe662d9de59
[  198.279237][ T6991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  198.299332][ T6991] RSP: 002b:00007fe663c69028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  198.308198][ T6991] RAX: ffffffffffffffda RBX: 00007fe663026090 RCX: 00007fe662d9de59
[  198.316297][ T6991] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005
[  198.324575][ T6991] RBP: 00007fe663c69090 R08: 0000000000000000 R09: 0000000000000000
[  198.332657][ T6991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  198.340837][ T6991] R13: 00007fe663026128 R14: 00007fe663026090 R15: 00007ffe96cadb78
[  198.350071][ T6991]  </TASK>
[  199.071362][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  199.385626][ T6994] loop1: detected capacity change from 0 to 256
[  199.901498][ T6986] loop2: detected capacity change from 0 to 32768
[  199.982559][ T5861] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  200.253000][ T6988] loop3: detected capacity change from 0 to 32768
[  200.274903][ T6988] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.252 (6988)
[  200.379714][ T6988] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  200.431199][ T6988] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  200.459318][ T6988] BTRFS info (device loop3): using free space tree
[  200.486085][ T6988] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR
[  200.521473][ T6988] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR
[  200.551989][ T6988] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR
[  200.598711][ T6988] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR
[  200.648676][ T6988] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR
[  200.671962][ T6988] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR
[  200.733346][ T6988] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR
[  200.752753][ T6988] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[  200.794931][ T6988] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[  200.861926][ T6988] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR
[  200.921942][ T6988] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[  200.963423][ T6988] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  201.001508][ T6988] BTRFS error (device loop3): open_ctree failed: -12
[  201.372794][ T6994] sctp: [Deprecated]: syz.1.255 (pid 6994) Use of int in max_burst socket option deprecated.
[  201.372794][ T6994] Use struct sctp_assoc_value instead
[  201.411015][ T5861] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by udevd (5861)
[  201.821777][ T7026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  201.852527][ T7026] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  201.960988][ T7003] loop2: detected capacity change from 0 to 32768
[  201.977135][ T7026] loop3: detected capacity change from 0 to 1024
[  202.020553][ T7026] hfsplus: unable to parse mount options
[  202.029068][ T7009] loop0: detected capacity change from 0 to 32768
[  202.060941][ T7003] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  202.081382][ T1217] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  202.107262][ T7009] 
[  202.107262][ T7009]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  202.107262][ T7009] 
[  202.159765][   T28] audit: type=1800 audit(1783315672.155:88): pid=7008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.256" name="file1" dev="loop0" ino=4 res=0 errno=0
[  202.264740][ T7003] XFS (loop2): Ending clean mount
[  202.319578][ T1217] usb 4-1: too many configurations: 9, using maximum allowed: 8
[  202.340584][ T7008] 
[  202.340584][ T7008]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  202.340584][ T7008] 
[  202.370177][ T1217] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  202.401589][ T7008] 
[  202.401589][ T7008]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  202.401589][ T7008] 
[  202.413927][ T1217] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  202.441533][ T7042] loop1: detected capacity change from 0 to 1024
[  202.449135][ T7042] EXT4-fs: inline encryption not supported
[  202.476566][ T7008] 
[  202.476566][ T7008]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  202.476566][ T7008] 
[  202.487638][ T1217] usb 4-1: config 0 interface 0 has no altsetting 0
[  202.498973][ T7042] EXT4-fs: Ignoring removed bh option
[  202.509884][ T1217] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  202.542954][ T7008] 
[  202.542954][ T7008]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  202.542954][ T7008] 
[  202.576053][ T1217] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  202.582557][ T7042] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  202.623911][  T114] ERROR: (device loop0): dbFree: error in block map
[  202.623911][  T114] 
[  202.635821][ T1217] usb 4-1: config 0 interface 0 has no altsetting 0
[  202.675173][ T1217] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  202.688638][ T7008] 
[  202.688638][ T7008]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  202.688638][ T7008] 
[  202.720717][ T1217] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  202.747485][ T5777] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  202.761553][ T1217] usb 4-1: config 0 interface 0 has no altsetting 0
[  202.792469][ T5775] 
[  202.792469][ T5775]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  202.792469][ T5775] 
[  202.806012][ T5775] 
[  202.806012][ T5775]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  202.806012][ T5775] 
[  202.817540][ T1217] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  202.830630][ T7042] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  202.831920][ T1217] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  202.859053][ T1217] usb 4-1: config 0 interface 0 has no altsetting 0
[  202.891343][ T1217] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  202.961270][ T1217] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  203.055267][ T1217] usb 4-1: config 0 interface 0 has no altsetting 0
[  203.098352][ T1217] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  203.111414][ T1217] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  203.123557][ T1217] usb 4-1: config 0 interface 0 has no altsetting 0
[  203.150607][ T1217] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  203.244422][ T1217] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  203.291514][ T1217] usb 4-1: config 0 interface 0 has no altsetting 0
[  203.324409][ T1217] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  203.339896][ T1217] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  203.365292][ T1217] usb 4-1: config 0 interface 0 has no altsetting 0
[  203.420287][ T1217] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  203.447240][ T1217] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  203.472526][ T1217] usb 4-1: Product: syz
[  203.478448][ T1217] usb 4-1: Manufacturer: syz
[  203.487003][ T1217] usb 4-1: SerialNumber: syz
[  203.512275][ T1217] usb 4-1: config 0 descriptor??
[  203.629318][ T1217] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0
[  203.901269][   T10] IPVS: starting estimator thread 0...
[  203.929539][ T7042] IPVS: sed: FWM 3 0x00000003 - no destination available
[  204.001283][ T7050] IPVS: using max 16 ests per chain, 38400 per kthread
[  204.291684][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.431770][ T7026] loop3: detected capacity change from 0 to 32768
[  204.640549][ T5861] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  205.041252][   T28] audit: type=1326 audit(1783315675.045:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7057 comm="syz.1.267" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f727c59de59 code=0x0
[  205.208558][ T7059] binder: 7057:7059 ioctl c0306201 200000000080 returned -14
[  205.341773][ T7052] loop0: detected capacity change from 0 to 32768
[  205.454742][ T5861] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  205.513280][   T10] usb 4-1: USB disconnect, device number 5
[  205.530681][   T10] yurex 4-1:0.0: USB YUREX #0 now disconnected
[  206.185630][ T7061] loop3: detected capacity change from 0 to 32768
[  206.226959][ T7061] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  206.227016][ T7052] loop0: detected capacity change from 0 to 8192
[  206.296153][ T7052] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  206.352610][ T7052] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[  206.364598][ T7052] REISERFS (device loop0): using ordered data mode
[  206.373049][ T7052] reiserfs: using flush barriers
[  206.382233][ T7052] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  206.401631][ T7052] REISERFS (device loop0): checking transaction log (loop0)
[  206.413394][ T7061] XFS (loop3): Ending clean mount
[  206.441307][ T7052] REISERFS (device loop0): Using r5 hash to sort names
[  206.460788][ T7052] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  206.620537][ T5779] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  207.039428][ T7059] loop1: detected capacity change from 0 to 32768
[  207.088821][ T7059] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  207.136407][ T7059] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  207.154754][ T5785] Bluetooth: hci0: command 0x0406 tx timeout
[  207.161648][ T5786] Bluetooth: hci1: command 0x0406 tx timeout
[  207.167789][ T5786] Bluetooth: hci2: command 0x0406 tx timeout
[  207.175298][ T5786] Bluetooth: hci3: command 0x0406 tx timeout
[  207.180979][ T7059] BTRFS info (device loop1): using free space tree
[  207.450822][ T7097] loop2: detected capacity change from 0 to 1024
[  207.467329][ T7098] loop0: detected capacity change from 0 to 256
[  207.499431][ T7059] BTRFS info (device loop1): enabling ssd optimizations
[  207.513322][ T7097] FAULT_INJECTION: forcing a failure.
[  207.513322][ T7097] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  207.519564][ T7059] BTRFS info (device loop1): auto enabling async discard
[  207.551740][ T7097] CPU: 0 PID: 7097 Comm: syz.2.276 Not tainted syzkaller #0
[  207.559729][ T7097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  207.570140][ T7097] Call Trace:
[  207.573534][ T7097]  <TASK>
[  207.576490][ T7097]  dump_stack_lvl+0x18c/0x250
[  207.581208][ T7097]  ? show_regs_print_info+0x20/0x20
[  207.586693][ T7097]  ? load_image+0x420/0x420
[  207.591411][ T7097]  ? __might_fault+0xaa/0x120
[  207.596168][ T7097]  ? __lock_acquire+0x7d80/0x7d80
[  207.601560][ T7097]  should_fail_ex+0x394/0x4c0
[  207.606262][ T7097]  _copy_from_user+0x2f/0xe0
[  207.610957][ T7097]  __sys_bpf+0x23e/0x890
[  207.615331][ T7097]  ? bpf_link_show_fdinfo+0x390/0x390
[  207.620739][ T7097]  ? lock_chain_count+0x20/0x20
[  207.625614][ T7097]  __x64_sys_bpf+0x7c/0x90
[  207.630331][ T7097]  do_syscall_64+0x55/0xb0
[  207.634767][ T7097]  ? clear_bhb_loop+0x40/0x90
[  207.639557][ T7097]  ? clear_bhb_loop+0x40/0x90
[  207.644439][ T7097]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  207.650384][ T7097] RIP: 0033:0x7fca0979de59
[  207.655079][ T7097] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  207.675933][ T7097] RSP: 002b:00007fca0a70b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  207.684483][ T7097] RAX: ffffffffffffffda RBX: 00007fca09a25fa0 RCX: 00007fca0979de59
[  207.692952][ T7097] RDX: 000000000000000c RSI: 0000200000000040 RDI: 000000000000000a
[  207.701037][ T7097] RBP: 00007fca0a70b090 R08: 0000000000000000 R09: 0000000000000000
[  207.709297][ T7097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  207.717401][ T7097] R13: 00007fca09a26038 R14: 00007fca09a25fa0 R15: 00007ffd7a9a7fb8
[  207.725695][ T7097]  </TASK>
[  207.760995][ T7059] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  207.824859][ T7102] loop3: detected capacity change from 0 to 1024
[  208.079619][ T7105] loop2: detected capacity change from 0 to 1024
[  208.129304][ T7105] EXT4-fs: inline encryption not supported
[  208.151093][ T7105] EXT4-fs: inline encryption not supported
[  208.157399][ T7105] EXT4-fs: Ignoring removed bh option
[  208.197908][ T7105] EXT4-fs: Mount option(s) incompatible with ext3
[  208.816067][ T5776] IPVS: starting estimator thread 0...
[  208.969048][ T7108] IPVS: using max 31 ests per chain, 74400 per kthread
[  208.990171][ T7105] IPVS: sed: FWM 3 0x00000003 - no destination available
[  209.036085][ T7105] loop2: detected capacity change from 0 to 1024
[  209.043710][ T7105] hfsplus: unable to parse mount options
[  209.117118][ T5861] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  210.037802][ T7112] loop1: detected capacity change from 0 to 32768
[  210.107007][ T7111] loop3: detected capacity change from 0 to 32768
[  210.209544][ T5844] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  210.248914][ T7112] FAULT_INJECTION: forcing a failure.
[  210.248914][ T7112] name failslab, interval 1, probability 0, space 0, times 0
[  210.312067][ T7112] CPU: 1 PID: 7112 Comm: syz.1.278 Not tainted syzkaller #0
[  210.319980][ T7112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  210.330758][ T7112] Call Trace:
[  210.334180][ T7112]  <TASK>
[  210.337163][ T7112]  dump_stack_lvl+0x18c/0x250
[  210.342010][ T7112]  ? show_regs_print_info+0x20/0x20
[  210.347270][ T7112]  ? load_image+0x420/0x420
[  210.351844][ T7112]  ? __might_sleep+0xe0/0xe0
[  210.357035][ T7112]  ? __lock_acquire+0x7d80/0x7d80
[  210.362225][ T7112]  should_fail_ex+0x394/0x4c0
[  210.367086][ T7112]  should_failslab+0x9/0x20
[  210.371660][ T7112]  slab_pre_alloc_hook+0x59/0x300
[  210.377017][ T7112]  kmem_cache_alloc+0x5a/0x2c0
[  210.381838][ T7112]  ? getname_flags+0xbb/0x500
[  210.388276][ T7112]  getname_flags+0xbb/0x500
[  210.393878][ T7112]  do_sys_openat2+0xda/0x1d0
[  210.399401][ T7112]  ? do_sys_open+0xe0/0xe0
[  210.405057][ T7112]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  210.411506][ T7112]  ? lock_chain_count+0x20/0x20
[  210.417082][ T7112]  __x64_sys_open+0x11f/0x140
[  210.422066][ T7112]  do_syscall_64+0x55/0xb0
[  210.426955][ T7112]  ? clear_bhb_loop+0x40/0x90
[  210.432137][ T7112]  ? clear_bhb_loop+0x40/0x90
[  210.437586][ T7112]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  210.444657][ T7112] RIP: 0033:0x7f727c59de59
[  210.450269][ T7112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  210.470438][ T7112] RSP: 002b:00007f727d41f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[  210.479194][ T7112] RAX: ffffffffffffffda RBX: 00007f727c825fa0 RCX: 00007f727c59de59
[  210.488090][ T7112] RDX: 0000000000000020 RSI: 000000000014927e RDI: 00002000000001c0
[  210.496544][ T7112] RBP: 00007f727d41f090 R08: 0000000000000000 R09: 0000000000000000
[  210.504714][ T7112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  210.512801][ T7112] R13: 00007f727c826038 R14: 00007f727c825fa0 R15: 00007fffa3346fe8
[  210.521374][ T7112]  </TASK>
[  210.607456][ T7114] loop2: detected capacity change from 0 to 32768
[  211.125295][ T7116] loop0: detected capacity change from 0 to 4096
[  211.168405][ T7116] ntfs3: Unknown parameter ''
[  211.389880][ T7111] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  211.435526][ T7111] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  211.514573][ T7111] REISERFS (device loop3): using ordered data mode
[  211.569086][ T7111] reiserfs: using flush barriers
[  211.604191][ T7111] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  211.667637][ T7111] REISERFS (device loop3): checking transaction log (loop3)
[  211.719553][ T7111] REISERFS (device loop3): Using r5 hash to sort names
[  211.767913][ T7111] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  212.379041][ T7137] FAULT_INJECTION: forcing a failure.
[  212.379041][ T7137] name failslab, interval 1, probability 0, space 0, times 0
[  212.402375][ T7137] CPU: 0 PID: 7137 Comm: syz.3.287 Not tainted syzkaller #0
[  212.410444][ T7137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  212.421080][ T7137] Call Trace:
[  212.424746][ T7137]  <TASK>
[  212.427713][ T7137]  dump_stack_lvl+0x18c/0x250
[  212.432452][ T7137]  ? show_regs_print_info+0x20/0x20
[  212.437717][ T7137]  ? load_image+0x420/0x420
[  212.442276][ T7137]  ? __might_sleep+0xe0/0xe0
[  212.447006][ T7137]  ? __lock_acquire+0x7d80/0x7d80
[  212.452704][ T7137]  should_fail_ex+0x394/0x4c0
[  212.458155][ T7137]  should_failslab+0x9/0x20
[  212.462892][ T7137]  slab_pre_alloc_hook+0x59/0x300
[  212.468436][ T7137]  ? tomoyo_realpath_from_path+0xe6/0x5c0
[  212.474479][ T7137]  ? tomoyo_realpath_from_path+0xe6/0x5c0
[  212.480621][ T7137]  __kmem_cache_alloc_node+0x53/0x250
[  212.486071][ T7137]  ? tomoyo_realpath_from_path+0xe6/0x5c0
[  212.491964][ T7137]  __kmalloc+0xa7/0x240
[  212.496390][ T7137]  tomoyo_realpath_from_path+0xe6/0x5c0
[  212.502017][ T7137]  ? tomoyo_domain+0xd6/0x120
[  212.506865][ T7137]  tomoyo_path_number_perm+0x248/0x5e0
[  212.512397][ T7137]  ? tomoyo_path_number_perm+0x217/0x5e0
[  212.518425][ T7137]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  212.523957][ T7137]  ? ksys_write+0x1d2/0x260
[  212.528557][ T7137]  ? __fget_files+0x28/0x460
[  212.533305][ T7137]  security_file_ioctl+0x70/0xa0
[  212.538404][ T7137]  __se_sys_ioctl+0x48/0x170
[  212.543160][ T7137]  do_syscall_64+0x55/0xb0
[  212.544428][ T7125] set_capacity_and_notify: 2 callbacks suppressed
[  212.544442][ T7125] loop1: detected capacity change from 0 to 32768
[  212.548673][ T7137]  ? clear_bhb_loop+0x40/0x90
[  212.548718][ T7137]  ? clear_bhb_loop+0x40/0x90
[  212.548742][ T7137]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  212.548775][ T7137] RIP: 0033:0x7f753c19de59
[  212.581742][ T7137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  212.597681][ T7139] loop2: detected capacity change from 0 to 1764
[  212.602242][ T7137] RSP: 002b:00007f753cfc1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  212.602270][ T7137] RAX: ffffffffffffffda RBX: 00007f753c426090 RCX: 00007f753c19de59
[  212.602285][ T7137] RDX: 0000200000000840 RSI: 00000000c06c4124 RDI: 0000000000000005
[  212.602300][ T7137] RBP: 00007f753cfc1090 R08: 0000000000000000 R09: 0000000000000000
[  212.602313][ T7137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  212.602327][ T7137] R13: 00007f753c426128 R14: 00007f753c426090 R15: 00007ffe264e2bb8
[  212.602359][ T7137]  </TASK>
[  212.604839][ T7137] ERROR: Out of memory at tomoyo_realpath_from_path.
[  212.679969][ T7125] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  212.699110][ T5844] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  212.727350][ T7139] loop2: detected capacity change from 0 to 256
[  212.738305][ T5844] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  212.739529][ T7125] XFS (loop1): Ending clean mount
[  212.762039][ T5844] Buffer I/O error on dev loop2, logical block 0, async page read
[  212.859478][ T7139] FAT-fs (loop2): Directory bread(block 64) failed
[  212.904779][ T7139] FAT-fs (loop2): Directory bread(block 65) failed
[  212.930358][ T7139] FAT-fs (loop2): Directory bread(block 66) failed
[  212.967099][ T7139] FAT-fs (loop2): Directory bread(block 67) failed
[  213.006756][ T7139] FAT-fs (loop2): Directory bread(block 68) failed
[  213.048620][ T7139] FAT-fs (loop2): Directory bread(block 69) failed
[  213.085972][ T7139] FAT-fs (loop2): Directory bread(block 70) failed
[  213.134971][ T7139] FAT-fs (loop2): Directory bread(block 71) failed
[  213.213039][ T7139] FAT-fs (loop2): Directory bread(block 72) failed
[  213.249120][ T7150] loop0: detected capacity change from 0 to 32768
[  213.268054][ T5771] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  213.281208][ T7139] FAT-fs (loop2): Directory bread(block 73) failed
[  213.343815][ T7150] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  213.445037][ T7150] XFS (loop0): Ending clean mount
[  213.493320][ T7160] loop3: detected capacity change from 0 to 256
[  213.785354][ T5775] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  214.680382][ T7169] netlink: 'syz.0.291': attribute type 1 has an invalid length.
[  214.696417][ T7169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.291'.
[  214.771778][ T1217] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  214.982948][ T1217] usb 3-1: Using ep0 maxpacket: 16
[  215.000151][ T1217] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[  215.026077][ T1217] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50077, setting to 1024
[  215.053962][ T1217] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  215.101763][ T1217] usb 3-1: New USB device found, idVendor=056a, idProduct=0336, bcdDevice= 0.00
[  215.140014][ T1217] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  215.174819][ T1217] usb 3-1: config 0 descriptor??
[  215.843266][ T1217] wacom 0003:056A:0336.0002: unknown main item tag 0x6
[  215.850338][ T1217] wacom 0003:056A:0336.0002: unknown main item tag 0x7
[  215.858660][ T1217] wacom 0003:056A:0336.0002: unknown main item tag 0x0
[  215.867716][ T1217] wacom 0003:056A:0336.0002: unknown main item tag 0x1
[  215.869768][ T7160] sctp: [Deprecated]: syz.3.290 (pid 7160) Use of int in max_burst socket option deprecated.
[  215.869768][ T7160] Use struct sctp_assoc_value instead
[  215.875432][ T1217] wacom 0003:056A:0336.0002: unknown main item tag 0xd
[  215.891848][ T1217] wacom 0003:056A:0336.0002: hidraw0: USB HID v0.77 Device [HID 056a:0336] on usb-dummy_hcd.2-1/input0
[  215.987730][ T7197] FAULT_INJECTION: forcing a failure.
[  215.987730][ T7197] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  216.056266][ T7197] CPU: 1 PID: 7197 Comm: syz.1.302 Not tainted syzkaller #0
[  216.065429][ T7197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  216.076742][ T7197] Call Trace:
[  216.080293][ T7197]  <TASK>
[  216.083356][ T7197]  dump_stack_lvl+0x18c/0x250
[  216.088240][ T7197]  ? show_regs_print_info+0x20/0x20
[  216.093604][ T7197]  ? load_image+0x420/0x420
[  216.098471][ T7197]  ? __might_fault+0xaa/0x120
[  216.103911][ T7197]  ? __lock_acquire+0x7d80/0x7d80
[  216.109270][ T7197]  should_fail_ex+0x394/0x4c0
[  216.114889][ T7197]  _copy_from_user+0x2f/0xe0
[  216.120685][ T7197]  __sys_connect+0x171/0x470
[  216.126232][ T7197]  ? __sys_connect_file+0x170/0x170
[  216.131751][ T7197]  __x64_sys_connect+0x7a/0x90
[  216.136952][ T7197]  do_syscall_64+0x55/0xb0
[  216.141790][ T7197]  ? clear_bhb_loop+0x40/0x90
[  216.146606][ T7197]  ? clear_bhb_loop+0x40/0x90
[  216.151348][ T7197]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  216.158175][ T7197] RIP: 0033:0x7f727c59de59
[  216.162726][ T7197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  216.184254][ T7197] RSP: 002b:00007f727d3dd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  216.193502][ T7197] RAX: ffffffffffffffda RBX: 00007f727c826180 RCX: 00007f727c59de59
[  216.201506][ T7197] RDX: 000000000000006e RSI: 0000200000000400 RDI: 0000000000000007
[  216.209782][ T7197] RBP: 00007f727d3dd090 R08: 0000000000000000 R09: 0000000000000000
[  216.217939][ T7197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  216.226196][ T7197] R13: 00007f727c826218 R14: 00007f727c826180 R15: 00007fffa3346fe8
[  216.234329][ T7197]  </TASK>
[  216.715422][ T7195] loop0: detected capacity change from 0 to 32768
[  216.774727][ T7195] FAULT_INJECTION: forcing a failure.
[  216.774727][ T7195] name failslab, interval 1, probability 0, space 0, times 0
[  216.803031][ T7195] CPU: 1 PID: 7195 Comm: syz.0.304 Not tainted syzkaller #0
[  216.810509][ T7195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  216.820624][ T7195] Call Trace:
[  216.823977][ T7195]  <TASK>
[  216.827040][ T7195]  dump_stack_lvl+0x18c/0x250
[  216.831965][ T7195]  ? show_regs_print_info+0x20/0x20
[  216.837251][ T7195]  ? load_image+0x420/0x420
[  216.841939][ T7195]  ? __might_sleep+0xe0/0xe0
[  216.846574][ T7195]  ? __lock_acquire+0x7d80/0x7d80
[  216.852015][ T7195]  should_fail_ex+0x394/0x4c0
[  216.857324][ T7195]  should_failslab+0x9/0x20
[  216.862052][ T7195]  slab_pre_alloc_hook+0x59/0x300
[  216.867314][ T7195]  kmem_cache_alloc+0x5a/0x2c0
[  216.872282][ T7195]  ? getname_flags+0xbb/0x500
[  216.877006][ T7195]  getname_flags+0xbb/0x500
[  216.881623][ T7195]  user_path_at_empty+0x2c/0x60
[  216.886609][ T7195]  __se_sys_mount+0x2a8/0x3d0
[  216.891461][ T7195]  ? __x64_sys_mount+0xc0/0xc0
[  216.896351][ T7195]  ? lockdep_hardirqs_on+0x98/0x150
[  216.901577][ T7195]  ? __x64_sys_mount+0x20/0xc0
[  216.906381][ T7195]  do_syscall_64+0x55/0xb0
[  216.911546][ T7195]  ? clear_bhb_loop+0x40/0x90
[  216.916403][ T7195]  ? clear_bhb_loop+0x40/0x90
[  216.921279][ T7195]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  216.927288][ T7195] RIP: 0033:0x7fe662d9de59
[  216.931760][ T7195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  216.952172][ T7195] RSP: 002b:00007fe663c8a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  216.960656][ T7195] RAX: ffffffffffffffda RBX: 00007fe663025fa0 RCX: 00007fe662d9de59
[  216.969260][ T7195] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000000
[  216.977357][ T7195] RBP: 00007fe663c8a090 R08: 0000000000000000 R09: 0000000000000000
[  216.985543][ T7195] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001
[  216.994705][ T7195] R13: 00007fe663026038 R14: 00007fe663025fa0 R15: 00007ffe96cadb78
[  217.003067][ T7195]  </TASK>
[  217.160465][ T5775] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt
[  217.160465][ T5775] 
[  217.193940][ T5775] ERROR: (device loop0): remounting filesystem as read-only
[  217.203228][ T5775] xtLookup: xtSearch returned -5
[  217.208686][ T5775] free_index: error reading directory table
[  217.241806][ T7204] loop3: detected capacity change from 0 to 1024
[  217.242552][ T5775] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt
[  217.242552][ T5775] 
[  217.257663][ T7204] EXT4-fs: inline encryption not supported
[  217.266738][ T5775] xtLookup: xtSearch returned -5
[  217.275397][ T5775] free_index: error reading directory table
[  217.285849][ T5775] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt
[  217.285849][ T5775] 
[  217.291327][ T7204] EXT4-fs: inline encryption not supported
[  217.299032][ T5775] xtLookup: xtSearch returned -5
[  217.312613][ T5775] free_index: error reading directory table
[  217.318828][ T5775] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt
[  217.318828][ T5775] 
[  217.336230][ T5775] xtLookup: xtSearch returned -5
[  217.343008][ T7204] EXT4-fs: Ignoring removed bh option
[  217.353144][ T5775] free_index: error reading directory table
[  217.360177][ T5775] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt
[  217.360177][ T5775] 
[  217.371207][ T7204] EXT4-fs: Mount option(s) incompatible with ext3
[  217.373875][ T5775] xtLookup: xtSearch returned -5
[  217.386661][ T5775] free_index: error reading directory table
[  217.399219][ T5775] non-latin1 character 0x2e66 found in JFS file name
[  217.416694][ T5775] mount with iocharset=utf8 to access
[  217.509078][ T5776] usb 3-1: USB disconnect, device number 6
[  217.836013][ T5813] IPVS: starting estimator thread 0...
[  217.971273][ T7205] IPVS: sed: FWM 3 0x00000003 - no destination available
[  218.211836][ T7206] IPVS: using max 32 ests per chain, 76800 per kthread
[  218.226477][ T7204] loop3: detected capacity change from 0 to 1024
[  218.233737][ T7204] hfsplus: unable to parse mount options
[  218.327009][ T6160] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  218.784023][   T48] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.035060][ T7218] loop1: detected capacity change from 0 to 128
[  219.046739][ T7218] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  219.079366][ T7216] FAT-fs (loop1): error, parent dir link count too low (2)
[  219.086985][ T7216] FAT-fs (loop1): Filesystem has been set read-only
[  219.241940][ T5771] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  219.361965][   T48] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.390150][ T7208] loop2: detected capacity change from 0 to 32768
[  219.459657][ T7221] loop3: detected capacity change from 0 to 512
[  219.512461][ T7221] EXT4-fs: Ignoring removed i_version option
[  219.557206][ T7221] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  219.582987][   T48] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.615738][ T7221] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  219.721514][ T7221] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  219.786615][ T7221] EXT4-fs (loop3): 1 truncate cleaned up
[  219.828045][ T7221] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  219.853302][ T5777] ERROR: (device loop2): xtSearch: XT_GETPAGE: xtree page corrupt
[  219.853302][ T5777] 
[  219.854172][   T48] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.917860][ T5777] ERROR: (device loop2): remounting filesystem as read-only
[  219.931320][ T5777] xtLookup: xtSearch returned -5
[  219.936333][ T5777] free_index: error reading directory table
[  219.968126][ T5777] ERROR: (device loop2): xtSearch: XT_GETPAGE: xtree page corrupt
[  219.968126][ T5777] 
[  219.998697][ T5777] xtLookup: xtSearch returned -5
[  220.015278][ T5777] free_index: error reading directory table
[  220.031266][ T5777] ERROR: (device loop2): xtSearch: XT_GETPAGE: xtree page corrupt
[  220.031266][ T5777] 
[  220.056854][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  220.066365][ T5777] xtLookup: xtSearch returned -5
[  220.066389][ T5777] free_index: error reading directory table
[  220.066402][ T5777] ERROR: (device loop2): xtSearch: XT_GETPAGE: xtree page corrupt
[  220.066402][ T5777] 
[  220.066438][ T5777] xtLookup: xtSearch returned -5
[  220.066449][ T5777] free_index: error reading directory table
[  220.066459][ T5777] ERROR: (device loop2): xtSearch: XT_GETPAGE: xtree page corrupt
[  220.066459][ T5777] 
[  220.066489][ T5777] xtLookup: xtSearch returned -5
[  220.066499][ T5777] free_index: error reading directory table
[  220.152257][ T5777] non-latin1 character 0x2e66 found in JFS file name
[  220.159046][ T5777] mount with iocharset=utf8 to access
[  220.563696][ T7223] loop1: detected capacity change from 0 to 32768
[  220.683305][ T7223] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  220.861409][ T7223] XFS (loop1): Ending clean mount
[  221.127637][ T5771] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  221.699943][ T5083] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  221.714187][ T5083] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  221.725090][ T5083] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  221.752698][ T5083] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  221.779766][ T5083] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  221.792973][ T5083] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  221.968250][ T7231] loop3: detected capacity change from 0 to 32768
[  222.017679][ T7231] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  222.056149][ T7254] loop1: detected capacity change from 0 to 1024
[  222.072640][ T7254] EXT4-fs: inline encryption not supported
[  222.078849][ T7254] EXT4-fs: inline encryption not supported
[  222.111589][ T7231] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  222.173973][ T7254] EXT4-fs: Ignoring removed bh option
[  222.209516][ T7254] EXT4-fs: Mount option(s) incompatible with ext3
[  222.574929][ T7231] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 1ms
[  222.924573][ T5813] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  222.954796][ T5813] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  223.022774][ T5813] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 67ms
[  223.063147][ T5813] gfs2: fsid=syz:syz.0: jid=0: Done
[  223.075372][ T7254] IPVS: sed: FWM 3 0x00000003 - no destination available
[  223.092223][ T7231] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  223.111478][ T7254] loop1: detected capacity change from 0 to 1024
[  223.118859][ T7254] hfsplus: unable to parse mount options
[  223.182094][ T5844] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  223.720579][ T7231] gfs2: fsid=syz:syz.0: found 1 quota changes
[  223.875922][ T5778] Bluetooth: hci1: command tx timeout
[  223.907955][ T5779] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error
[  223.907955][ T5779]   inode = 11 2339
[  223.907955][ T5779]   function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 421
[  223.941692][ T5779] gfs2: fsid=syz:syz.0: G:  s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1
[  223.971242][ T5779] gfs2: fsid=syz:syz.0:  H: s:EX f:H e:0 p:5779 [syz-executor] gfs2_quota_sync+0x411/0x5a0
[  224.031671][ T5779] gfs2: fsid=syz:syz.0:  I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0
[  224.047042][ T5779] gfs2: fsid=syz:syz.0: about to withdraw this file system
[  224.102597][ T5779] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
[  224.123349][ T5779] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0
[  224.167775][ T5779] gfs2: fsid=syz:syz.0: File system withdrawn
[  224.174864][ T5779] CPU: 0 PID: 5779 Comm: syz-executor Not tainted syzkaller #0
[  224.182566][ T5779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  224.192941][ T5779] Call Trace:
[  224.196528][ T5779]  <TASK>
[  224.199583][ T5779]  dump_stack_lvl+0x18c/0x250
[  224.204426][ T5779]  ? show_regs_print_info+0x20/0x20
[  224.209804][ T5779]  ? load_image+0x420/0x420
[  224.214374][ T5779]  ? kobject_uevent_env+0x368/0x890
[  224.219740][ T5779]  gfs2_withdraw+0xe16/0x1400
[  224.224512][ T5779]  ? gfs2_lm+0x240/0x240
[  224.228844][ T5779]  ? gfs2_consist_inode_i+0xf5/0x110
[  224.234290][ T5779]  gfs2_inode_refresh+0xb3c/0x11a0
[  224.239484][ T5779]  ? gfs2_inode_metasync+0xf0/0xf0
[  224.244751][ T5779]  ? gfs2_glock_nq+0xe2e/0x1440
[  224.249743][ T5779]  gfs2_instantiate+0x162/0x220
[  224.254645][ T5779]  gfs2_glock_wait+0x1d4/0x2a0
[  224.259585][ T5779]  do_sync+0x4b8/0xd90
[  224.263710][ T5779]  ? gfs2_quota_sync+0x411/0x5a0
[  224.268707][ T5779]  ? bh_get+0x760/0x760
[  224.272909][ T5779]  ? gfs2_quota_sync+0x318/0x5a0
[  224.277903][ T5779]  ? gfs2_quota_sync+0x411/0x5a0
[  224.282977][ T5779]  ? do_raw_spin_unlock+0x121/0x230
[  224.288490][ T5779]  ? do_raw_spin_unlock+0x121/0x230
[  224.294176][ T5779]  gfs2_quota_sync+0x411/0x5a0
[  224.299431][ T5779]  gfs2_sync_fs+0x4c/0xb0
[  224.303957][ T5779]  sync_filesystem+0xea/0x220
[  224.308833][ T5779]  generic_shutdown_super+0x6f/0x2b0
[  224.314656][ T5779]  kill_block_super+0x44/0x90
[  224.319641][ T5779]  deactivate_locked_super+0x97/0x100
[  224.325182][ T5779]  cleanup_mnt+0x3d7/0x460
[  224.329991][ T5779]  task_work_run+0x1d4/0x260
[  224.335015][ T5779]  ? task_work_cancel+0x220/0x220
[  224.340072][ T5779]  ? exit_to_user_mode_loop+0x3b/0x110
[  224.345697][ T5779]  exit_to_user_mode_loop+0xe6/0x110
[  224.351303][ T5779]  exit_to_user_mode_prepare+0xee/0x180
[  224.357765][ T5779]  syscall_exit_to_user_mode+0x1a/0x50
[  224.363549][ T5779]  do_syscall_64+0x61/0xb0
[  224.368108][ T5779]  ? clear_bhb_loop+0x40/0x90
[  224.372811][ T5779]  ? clear_bhb_loop+0x40/0x90
[  224.377513][ T5779]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  224.383627][ T5779] RIP: 0033:0x7f753c19f097
[  224.388530][ T5779] Code: a2 c7 05 5c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  224.408733][ T5779] RSP: 002b:00007ffe264e1e28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  224.417547][ T5779] RAX: 0000000000000000 RBX: 00007f753c2332ca RCX: 00007f753c19f097
[  224.425998][ T5779] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe264e1ee0
[  224.434007][ T5779] RBP: 00007ffe264e1ee0 R08: 00007ffe264e2ee0 R09: 00000000ffffffff
[  224.442033][ T5779] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe264e2f70
[  224.450465][ T5779] R13: 00007f753c2332ca R14: 0000000000035d2a R15: 00007ffe264e2fb0
[  224.458644][ T5779]  </TASK>
[  224.802166][ T7248] chnl_net:caif_netlink_parms(): no params data found
[  224.924414][   T48] hsr_slave_0: left promiscuous mode
[  224.971164][   T48] hsr_slave_1: left promiscuous mode
[  225.014307][   T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  225.038316][   T48] batman_adv: batadv0: Removing interface: batadv_slave_0
[  225.059057][   T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  225.071097][   T48] batman_adv: batadv0: Removing interface: batadv_slave_1
[  225.112061][ T5083] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  225.130022][ T5083] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  225.142500][ T5083] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  225.161472][ T5083] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  225.169528][ T5083] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  225.178499][ T5083] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  225.187065][   T48] veth1_macvtap: left promiscuous mode
[  225.193724][   T48] veth0_macvtap: left promiscuous mode
[  225.200035][   T48] veth1_vlan: left promiscuous mode
[  225.206216][   T48] veth0_vlan: left promiscuous mode
[  225.365999][ T7291] openvswitch: netlink: IP tunnel dst address not specified
[  225.658549][ T7284] loop1: detected capacity change from 0 to 32768
[  225.754587][ T7284] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  225.847709][ T7284] XFS (loop1): Ending clean mount
[  225.954671][ T5778] Bluetooth: hci1: command tx timeout
[  225.994382][ T5771] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  226.416816][   T48] team0 (unregistering): Port device team_slave_1 removed
[  226.478191][   T48] team0 (unregistering): Port device team_slave_0 removed
[  226.538763][   T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  226.600288][   T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  227.035966][   T48] bond0 (unregistering): Released all slaves
[  227.321180][ T5778] Bluetooth: hci3: command tx timeout
[  227.413718][ T7312] loop1: detected capacity change from 0 to 1024
[  227.429158][ T7312] EXT4-fs: inline encryption not supported
[  227.437223][ T7312] EXT4-fs: inline encryption not supported
[  227.444490][ T7312] EXT4-fs: Ignoring removed bh option
[  227.476024][ T7312] EXT4-fs: Mount option(s) incompatible with ext3
[  227.515006][ T7248] bridge0: port 1(bridge_slave_0) entered blocking state
[  227.523748][ T7248] bridge0: port 1(bridge_slave_0) entered disabled state
[  227.531327][ T7248] bridge_slave_0: entered allmulticast mode
[  227.552989][ T7248] bridge_slave_0: entered promiscuous mode
[  227.758471][ T7248] bridge0: port 2(bridge_slave_1) entered blocking state
[  227.889126][ T7248] bridge0: port 2(bridge_slave_1) entered disabled state
[  227.972581][ T7248] bridge_slave_1: entered allmulticast mode
[  228.008291][ T7248] bridge_slave_1: entered promiscuous mode
[  228.033083][ T5778] Bluetooth: hci1: command tx timeout
[  228.313212][ T7320] loop3: detected capacity change from 0 to 64
[  228.346593][ T7248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  228.356508][ T7320] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
[  228.393620][ T7248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  228.698196][ T7248] team0: Port device team_slave_0 added
[  228.724650][ T7248] team0: Port device team_slave_1 added
[  229.099377][ T7248] batman_adv: batadv0: Adding interface: batadv_slave_0
[  229.132423][ T7248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  229.215772][ T7248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  229.402613][ T5778] Bluetooth: hci3: command tx timeout
[  229.410249][ T7248] batman_adv: batadv0: Adding interface: batadv_slave_1
[  229.557695][ T7248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  229.891106][ T7248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  230.111345][ T5778] Bluetooth: hci1: command tx timeout
[  230.118684][ T7286] chnl_net:caif_netlink_parms(): no params data found
[  230.274885][ T7248] hsr_slave_0: entered promiscuous mode
[  230.289451][ T7248] hsr_slave_1: entered promiscuous mode
[  230.304879][ T7248] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  230.314233][ T7248] Cannot create hsr debugfs directory
[  230.645485][   T48] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.723139][ T7286] bridge0: port 1(bridge_slave_0) entered blocking state
[  230.740970][ T7286] bridge0: port 1(bridge_slave_0) entered disabled state
[  230.769229][ T7343] loop1: detected capacity change from 0 to 32768
[  230.781308][ T7286] bridge_slave_0: entered allmulticast mode
[  230.790158][ T7286] bridge_slave_0: entered promiscuous mode
[  230.830705][ T7286] bridge0: port 2(bridge_slave_1) entered blocking state
[  230.850853][ T7286] bridge0: port 2(bridge_slave_1) entered disabled state
[  230.868393][ T7286] bridge_slave_1: entered allmulticast mode
[  230.875765][ T7343] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  230.924974][ T7286] bridge_slave_1: entered promiscuous mode
[  230.991312][ T7343] XFS (loop1): Ending clean mount
[  231.019446][   T48] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.273755][   T48] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.345108][ T5771] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  231.363975][ T7346] loop3: detected capacity change from 0 to 32768
[  231.389394][ T7286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  231.403292][ T7286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  231.471360][ T5778] Bluetooth: hci3: command tx timeout
[  231.471878][ T7346] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  231.543029][   T48] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.700974][ T7346] XFS (loop3): Ending clean mount
[  231.890280][ T5779] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  231.905906][ T7286] team0: Port device team_slave_0 added
[  232.027273][ T7286] team0: Port device team_slave_1 added
[  232.199778][ T7286] batman_adv: batadv0: Adding interface: batadv_slave_0
[  232.214318][ T7286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  232.276119][ T7286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  232.389501][ T7383] loop1: detected capacity change from 0 to 1024
[  232.400224][ T7383] EXT4-fs: inline encryption not supported
[  232.410901][ T7383] EXT4-fs: inline encryption not supported
[  232.448087][ T7286] batman_adv: batadv0: Adding interface: batadv_slave_1
[  232.478052][ T7383] EXT4-fs: Ignoring removed bh option
[  232.486147][ T7286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  232.525056][ T7383] EXT4-fs: Mount option(s) incompatible with ext3
[  232.539333][ T7286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  232.588597][ T5861] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  233.487842][ T7286] hsr_slave_0: entered promiscuous mode
[  233.504941][ T7286] hsr_slave_1: entered promiscuous mode
[  233.542093][ T7286] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  233.587127][ T7286] Cannot create hsr debugfs directory
[  233.607695][ T5778] Bluetooth: hci3: command tx timeout
[  233.706186][ T7248] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  233.760591][ T7248] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  234.578416][ T7248] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  234.590451][ T7248] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  234.727597][ T7404] FAULT_INJECTION: forcing a failure.
[  234.727597][ T7404] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  234.757177][ T7404] CPU: 0 PID: 7404 Comm: syz.3.344 Not tainted syzkaller #0
[  234.764906][ T7404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  234.775103][ T7404] Call Trace:
[  234.778418][ T7404]  <TASK>
[  234.781396][ T7404]  dump_stack_lvl+0x18c/0x250
[  234.786424][ T7404]  ? show_regs_print_info+0x20/0x20
[  234.792388][ T7404]  ? load_image+0x420/0x420
[  234.797407][ T7404]  ? __might_fault+0xaa/0x120
[  234.802507][ T7404]  ? __lock_acquire+0x7d80/0x7d80
[  234.807682][ T7404]  should_fail_ex+0x394/0x4c0
[  234.812608][ T7404]  _copy_from_user+0x2f/0xe0
[  234.817791][ T7404]  ___sys_sendmsg+0x1c7/0x360
[  234.822992][ T7404]  ? get_pid_task+0x20/0x1e0
[  234.828193][ T7404]  ? __sys_sendmsg+0x2b0/0x2b0
[  234.833331][ T7404]  ? __lock_acquire+0x7d80/0x7d80
[  234.838710][ T7404]  __se_sys_sendmsg+0x1d0/0x2c0
[  234.845391][ T7404]  ? __x64_sys_sendmsg+0x80/0x80
[  234.851153][ T7404]  ? lockdep_hardirqs_on+0x98/0x150
[  234.857899][ T7404]  do_syscall_64+0x55/0xb0
[  234.864151][ T7404]  ? clear_bhb_loop+0x40/0x90
[  234.869353][ T7404]  ? clear_bhb_loop+0x40/0x90
[  234.874774][ T7404]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  234.881589][ T7404] RIP: 0033:0x7f753c19de59
[  234.886601][ T7404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  234.907042][ T7404] RSP: 002b:00007f753cfe2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  234.916637][ T7404] RAX: ffffffffffffffda RBX: 00007f753c425fa0 RCX: 00007f753c19de59
[  234.924846][ T7404] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003
[  234.933121][ T7404] RBP: 00007f753cfe2090 R08: 0000000000000000 R09: 0000000000000000
[  234.941528][ T7404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  234.950225][ T7404] R13: 00007f753c426038 R14: 00007f753c425fa0 R15: 00007ffe264e2bb8
[  234.958497][ T7404]  </TASK>
[  235.447390][ T7393] loop1: detected capacity change from 0 to 32768
[  235.512686][ T7393] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  235.569494][ T7393] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  235.703877][ T7393] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms
[  235.720617][ T5811] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  235.727941][ T5811] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  235.835214][ T5811] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 107ms
[  235.853788][ T5811] gfs2: fsid=syz:syz.0: jid=0: Done
[  235.859558][ T7393] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  236.088040][ T7286] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  236.126857][ T7286] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  236.167528][ T7410] loop3: detected capacity change from 0 to 32768
[  236.229311][ T7410] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  236.268146][ T7248] 8021q: adding VLAN 0 to HW filter on device bond0
[  236.289842][ T7286] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  236.333474][ T7286] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  236.430881][ T7410] XFS (loop3): Ending clean mount
[  236.469266][ T7393] gfs2: fsid=syz:syz.0: found 1 quota changes
[  236.602426][ T5771] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error
[  236.602426][ T5771]   inode = 11 2339
[  236.602426][ T5771]   function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 421
[  236.628771][ T5771] gfs2: fsid=syz:syz.0: G:  s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1
[  236.640449][ T5771] gfs2: fsid=syz:syz.0:  H: s:EX f:H e:0 p:5771 [syz-executor] gfs2_quota_sync+0x411/0x5a0
[  236.662055][ T5771] gfs2: fsid=syz:syz.0:  I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0
[  236.680468][ T5771] gfs2: fsid=syz:syz.0: about to withdraw this file system
[  236.722667][ T7248] 8021q: adding VLAN 0 to HW filter on device team0
[  236.737480][ T5771] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
[  236.751872][ T5779] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  236.771663][ T5771] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0
[  236.780851][ T5771] gfs2: fsid=syz:syz.0: File system withdrawn
[  236.799847][ T5771] CPU: 1 PID: 5771 Comm: syz-executor Not tainted syzkaller #0
[  236.807490][ T5771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  236.818387][ T5771] Call Trace:
[  236.821806][ T5771]  <TASK>
[  236.824867][ T5771]  dump_stack_lvl+0x18c/0x250
[  236.829618][ T5771]  ? show_regs_print_info+0x20/0x20
[  236.834997][ T5771]  ? load_image+0x420/0x420
[  236.839560][ T5771]  ? kobject_uevent_env+0x368/0x890
[  236.844825][ T5771]  gfs2_withdraw+0xe16/0x1400
[  236.849760][ T5771]  ? gfs2_lm+0x240/0x240
[  236.854073][ T5771]  ? preempt_schedule+0xc0/0xd0
[  236.859083][ T5771]  ? gfs2_consist_inode_i+0xf5/0x110
[  236.864616][ T5771]  gfs2_inode_refresh+0xb3c/0x11a0
[  236.870054][ T5771]  ? gfs2_inode_metasync+0xf0/0xf0
[  236.875308][ T5771]  ? gfs2_glock_nq+0xe2e/0x1440
[  236.880276][ T5771]  gfs2_instantiate+0x162/0x220
[  236.885143][ T5771]  gfs2_glock_wait+0x1d4/0x2a0
[  236.889927][ T5771]  do_sync+0x4b8/0xd90
[  236.894364][ T5771]  ? gfs2_quota_sync+0x411/0x5a0
[  236.899324][ T5771]  ? bh_get+0x760/0x760
[  236.903498][ T5771]  ? gfs2_quota_sync+0x318/0x5a0
[  236.908549][ T5771]  ? gfs2_quota_sync+0x411/0x5a0
[  236.913611][ T5771]  ? do_raw_spin_unlock+0x121/0x230
[  236.918917][ T5771]  ? do_raw_spin_unlock+0x121/0x230
[  236.924139][ T5771]  gfs2_quota_sync+0x411/0x5a0
[  236.928937][ T5771]  gfs2_sync_fs+0x4c/0xb0
[  236.933281][ T5771]  sync_filesystem+0xea/0x220
[  236.938088][ T5771]  generic_shutdown_super+0x6f/0x2b0
[  236.943655][ T5771]  kill_block_super+0x44/0x90
[  236.948501][ T5771]  deactivate_locked_super+0x97/0x100
[  236.954160][ T5771]  cleanup_mnt+0x3d7/0x460
[  236.958604][ T5771]  task_work_run+0x1d4/0x260
[  236.963229][ T5771]  ? task_work_cancel+0x220/0x220
[  236.968283][ T5771]  ? exit_to_user_mode_loop+0x3b/0x110
[  236.973861][ T5771]  exit_to_user_mode_loop+0xe6/0x110
[  236.979179][ T5771]  exit_to_user_mode_prepare+0xee/0x180
[  236.984775][ T5771]  syscall_exit_to_user_mode+0x1a/0x50
[  236.990265][ T5771]  do_syscall_64+0x61/0xb0
[  236.994899][ T5771]  ? clear_bhb_loop+0x40/0x90
[  236.999677][ T5771]  ? clear_bhb_loop+0x40/0x90
[  237.004458][ T5771]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  237.010548][ T5771] RIP: 0033:0x7f727c59f097
[  237.015068][ T5771] Code: a2 c7 05 5c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  237.034806][ T5771] RSP: 002b:00007fffa3346258 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  237.043345][ T5771] RAX: 0000000000000000 RBX: 00007f727c6332ca RCX: 00007f727c59f097
[  237.051428][ T5771] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffa3346310
[  237.059502][ T5771] RBP: 00007fffa3346310 R08: 00007fffa3347310 R09: 00000000ffffffff
[  237.067598][ T5771] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffa33473a0
[  237.075673][ T5771] R13: 00007f727c6332ca R14: 00000000000390d0 R15: 00007fffa33473e0
[  237.083772][ T5771]  </TASK>
[  237.095916][   T48] hsr_slave_0: left promiscuous mode
[  237.169259][   T48] hsr_slave_1: left promiscuous mode
[  237.192141][   T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  237.199640][   T48] batman_adv: batadv0: Removing interface: batadv_slave_0
[  237.259909][   T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  237.298616][   T48] batman_adv: batadv0: Removing interface: batadv_slave_1
[  237.324783][   T48] bridge_slave_1: left allmulticast mode
[  237.330984][   T48] bridge_slave_1: left promiscuous mode
[  237.360348][   T48] bridge0: port 2(bridge_slave_1) entered disabled state
[  237.403617][   T48] bridge_slave_0: left allmulticast mode
[  237.409520][   T48] bridge_slave_0: left promiscuous mode
[  237.450403][   T48] bridge0: port 1(bridge_slave_0) entered disabled state
[  237.598071][   T48] veth1_macvtap: left promiscuous mode
[  237.604169][   T48] veth0_macvtap: left promiscuous mode
[  237.622540][   T48] veth1_vlan: left promiscuous mode
[  237.641905][   T48] veth0_vlan: left promiscuous mode
[  237.717568][ T7443] loop3: detected capacity change from 0 to 1024
[  237.734561][ T7443] EXT4-fs: inline encryption not supported
[  237.740654][ T7443] EXT4-fs: inline encryption not supported
[  237.801644][ T7443] EXT4-fs: Ignoring removed bh option
[  237.821225][ T7443] EXT4-fs: Mount option(s) incompatible with ext3
[  238.165424][   T48] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface
[  238.174312][   T48] veth0_to_bond (unregistering): left promiscuous mode
[  238.183953][   T48] veth0_to_bond (unregistering): left allmulticast mode
[  238.209469][   T48] bond1 (unregistering): Released all slaves
[  239.390407][ T7451] loop3: detected capacity change from 0 to 32768
[  239.422660][ T7451] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  239.522811][ T7451] XFS (loop3): Ending clean mount
[  239.549666][   T48] team0 (unregistering): Port device team_slave_1 removed
[  239.634748][   T48] team0 (unregistering): Port device team_slave_0 removed
[  239.731999][   T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  239.735083][ T5779] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  239.876221][   T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  240.412110][   T48] bond0 (unregistering): Released all slaves
[  240.548568][ T1075] bridge0: port 1(bridge_slave_0) entered blocking state
[  240.556695][ T1075] bridge0: port 1(bridge_slave_0) entered forwarding state
[  240.627576][ T1075] bridge0: port 2(bridge_slave_1) entered blocking state
[  240.635168][ T1075] bridge0: port 2(bridge_slave_1) entered forwarding state
[  240.804911][ T7286] 8021q: adding VLAN 0 to HW filter on device bond0
[  240.893857][ T7286] 8021q: adding VLAN 0 to HW filter on device team0
[  240.947548][ T7107] bridge0: port 1(bridge_slave_0) entered blocking state
[  240.955138][ T7107] bridge0: port 1(bridge_slave_0) entered forwarding state
[  240.993257][ T7107] bridge0: port 2(bridge_slave_1) entered blocking state
[  241.000624][ T7107] bridge0: port 2(bridge_slave_1) entered forwarding state
[  241.174643][   T48] IPVS: stop unused estimator thread 0...
[  241.400083][ T7248] 8021q: adding VLAN 0 to HW filter on device batadv0
[  241.559765][ T7286] 8021q: adding VLAN 0 to HW filter on device batadv0
[  241.997758][ T7248] veth0_vlan: entered promiscuous mode
[  242.017231][ T7248] veth1_vlan: entered promiscuous mode
[  242.078581][ T7248] veth0_macvtap: entered promiscuous mode
[  242.100945][ T7248] veth1_macvtap: entered promiscuous mode
[  242.140726][ T7248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  242.151866][ T7248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.164541][ T7248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  242.175408][ T7248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.187654][ T7248] batman_adv: batadv0: Interface activated: batadv_slave_0
[  242.199703][ T7248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  242.210603][ T7248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.221594][ T7248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  242.232414][ T7248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.244145][ T7248] batman_adv: batadv0: Interface activated: batadv_slave_1
[  242.265936][ T7248] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  242.279129][ T7248] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  242.288992][ T7248] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  242.299802][ T7248] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  242.428660][ T7286] veth0_vlan: entered promiscuous mode
[  242.457805][ T7286] veth1_vlan: entered promiscuous mode
[  242.507605][ T3427] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  242.534487][ T3427] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  242.622700][ T7286] veth0_macvtap: entered promiscuous mode
[  242.641406][ T3427] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  242.657451][ T3427] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  242.667073][ T7286] veth1_macvtap: entered promiscuous mode
[  242.733804][ T7286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  242.745024][ T7286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.757276][ T7286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  242.769747][ T7286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.780252][ T7286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  242.792572][ T7286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.808000][ T7286] batman_adv: batadv0: Interface activated: batadv_slave_0
[  242.843646][ T7286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  242.866354][ T7286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.898839][ T7286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  242.943118][ T7286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.975017][ T7286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  242.976963][   T28] audit: type=1326 audit(1783315712.975:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7505 comm="syz.4.318" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f508299de59 code=0x7ffc0000
[  243.001060][ T7286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  243.042267][   T28] audit: type=1326 audit(1783315712.975:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7505 comm="syz.4.318" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f508299de59 code=0x7ffc0000
[  243.070034][ T7286] batman_adv: batadv0: Interface activated: batadv_slave_1
[  243.110156][ T7286] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  243.139511][ T7286] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  243.151863][   T28] audit: type=1326 audit(1783315712.975:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7505 comm="syz.4.318" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f508299de59 code=0x7ffc0000
[  243.193029][ T7286] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  243.231316][ T7286] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  243.257828][   T28] audit: type=1326 audit(1783315713.025:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7505 comm="syz.4.318" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7f508299de59 code=0x7ffc0000
[  243.895143][   T28] audit: type=1326 audit(1783315713.025:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7505 comm="syz.4.318" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f508299de59 code=0x7ffc0000
[  244.123518][   T28] audit: type=1326 audit(1783315713.025:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7505 comm="syz.4.318" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f508299de59 code=0x7ffc0000
[  244.184741][   T28] audit: type=1326 audit(1783315713.025:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7505 comm="syz.4.318" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f508299de59 code=0x7ffc0000
[  244.243000][ T1075] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  244.251101][   T28] audit: type=1326 audit(1783315713.025:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7505 comm="syz.4.318" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f508299de59 code=0x7ffc0000
[  244.251153][   T28] audit: type=1326 audit(1783315713.025:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7505 comm="syz.4.318" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f508299de59 code=0x7ffc0000
[  244.251195][   T28] audit: type=1326 audit(1783315713.025:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7505 comm="syz.4.318" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f508299de59 code=0x7ffc0000
[  244.427230][ T1075] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  244.759875][   T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  244.834322][   T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  245.058116][ T7509] loop1: detected capacity change from 0 to 32768
[  245.131941][ T5776] usb 4-1: new low-speed USB device number 6 using dummy_hcd
[  245.140710][ T5861] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  245.322940][ T5776] usb 4-1: too many configurations: 224, using maximum allowed: 8
[  245.359411][ T5776] usb 4-1: unable to read config index 0 descriptor/start: -61
[  245.392930][ T5776] usb 4-1: can't read configurations, error -61
[  245.457710][ T7528] netlink: 4436 bytes leftover after parsing attributes in process `syz.5.324'.
[  245.567980][ T7531] loop4: detected capacity change from 0 to 64
[  245.583635][ T5776] usb 4-1: new low-speed USB device number 7 using dummy_hcd
[  245.628812][ T7531] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
[  245.748446][ T7531] FAULT_INJECTION: forcing a failure.
[  245.748446][ T7531] name failslab, interval 1, probability 0, space 0, times 0
[  245.770812][ T7531] CPU: 1 PID: 7531 Comm: syz.4.354 Not tainted syzkaller #0
[  245.778624][ T7531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  245.788747][ T7531] Call Trace:
[  245.792059][ T7531]  <TASK>
[  245.795199][ T7531]  dump_stack_lvl+0x18c/0x250
[  245.800175][ T7531]  ? show_regs_print_info+0x20/0x20
[  245.805393][ T7531]  ? load_image+0x420/0x420
[  245.810044][ T7531]  ? __might_sleep+0xe0/0xe0
[  245.814742][ T7531]  ? __lock_acquire+0x7d80/0x7d80
[  245.819788][ T7531]  should_fail_ex+0x394/0x4c0
[  245.824493][ T7531]  should_failslab+0x9/0x20
[  245.829014][ T7531]  slab_pre_alloc_hook+0x59/0x300
[  245.834273][ T7531]  kmem_cache_alloc+0x5a/0x2c0
[  245.839104][ T7531]  ? getname_flags+0xbb/0x500
[  245.843830][ T7531]  getname_flags+0xbb/0x500
[  245.848850][ T7531]  do_sys_openat2+0xda/0x1d0
[  245.854185][ T7531]  ? do_sys_open+0xe0/0xe0
[  245.858907][ T7531]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  245.865180][ T7531]  ? lock_chain_count+0x20/0x20
[  245.870065][ T7531]  __x64_sys_creat+0x90/0xb0
[  245.874943][ T7531]  do_syscall_64+0x55/0xb0
[  245.879818][ T7531]  ? clear_bhb_loop+0x40/0x90
[  245.884544][ T7531]  ? clear_bhb_loop+0x40/0x90
[  245.889327][ T7531]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  245.895241][ T7531] RIP: 0033:0x7f508299de59
[  245.899802][ T7531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  245.919779][ T7531] RSP: 002b:00007f508382d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
[  245.928356][ T7531] RAX: ffffffffffffffda RBX: 00007f5082c25fa0 RCX: 00007f508299de59
[  245.936860][ T7531] RDX: 0000000000000000 RSI: 00000000000000a5 RDI: 0000200000000000
[  245.944841][ T7531] RBP: 00007f508382d090 R08: 0000000000000000 R09: 0000000000000000
[  245.953262][ T7531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  245.961538][ T7531] R13: 00007f5082c26038 R14: 00007f5082c25fa0 R15: 00007ffcc5476408
[  245.970251][ T7531]  </TASK>
[  246.021663][ T5776] usb 4-1: too many configurations: 224, using maximum allowed: 8
[  246.037472][ T5776] usb 4-1: unable to read config index 0 descriptor/start: -61
[  246.058486][ T5776] usb 4-1: can't read configurations, error -61
[  246.083421][ T5776] usb usb4-port1: attempt power cycle
[  246.120120][ T7509] loop1: detected capacity change from 0 to 8192
[  246.180086][ T7509] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  247.209922][ T5776] usb 4-1: new low-speed USB device number 8 using dummy_hcd
[  247.210222][ T7509] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[  247.228008][ T7509] REISERFS (device loop1): using ordered data mode
[  247.280911][ T7509] reiserfs: using flush barriers
[  247.299426][ T5776] usb 4-1: too many configurations: 224, using maximum allowed: 8
[  247.316523][ T7509] REISERFS warning (device loop1): journal-1256 journal_init: unable to get memory for journal structure
[  247.356515][ T5776] usb 4-1: unable to read config index 0 descriptor/start: -61
[  247.364474][ T5776] usb 4-1: can't read configurations, error -61
[  247.571218][ T5776] usb 4-1: new low-speed USB device number 9 using dummy_hcd
[  247.629229][ T5776] usb 4-1: too many configurations: 224, using maximum allowed: 8
[  247.666752][ T5776] usb 4-1: unable to read config index 0 descriptor/start: -61
[  247.687910][ T5776] usb 4-1: can't read configurations, error -61
[  247.702030][ T5776] usb usb4-port1: unable to enumerate USB device
[  249.713738][ T7548] loop4: detected capacity change from 0 to 32768
[  249.801641][ T7558] loop1: detected capacity change from 0 to 32768
[  249.815461][ T7548] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  249.931715][ T7558] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  249.991278][ T7548] XFS (loop4): Ending clean mount
[  250.186626][ T7558] XFS (loop1): Ending clean mount
[  250.446764][ T5771] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  250.469509][ T7248] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  251.099121][ T7603] loop3: detected capacity change from 0 to 32768
[  251.201369][ T5861] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  251.368726][ T7606] loop5: detected capacity change from 0 to 32768
[  251.473087][ T7606] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  251.604045][ T7606] XFS (loop5): Ending clean mount
[  251.681958][ T7603] loop3: detected capacity change from 0 to 8192
[  251.706826][ T7603] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  251.744075][ T7603] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  251.755447][ T7603] REISERFS (device loop3): using ordered data mode
[  251.763675][ T7603] reiserfs: using flush barriers
[  251.829108][ T7603] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  251.964103][ T7603] REISERFS (device loop3): checking transaction log (loop3)
[  252.005527][ T7603] REISERFS (device loop3): Using r5 hash to sort names
[  252.046999][ T7603] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  252.127205][ T7286] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  252.690716][ T7642] loop1: detected capacity change from 0 to 2048
[  252.759374][ T7642] UDF-fs: warning (device loop1): udf_fill_super: No partition found (2)
[  254.423237][ T7675] input: syz0 as /devices/virtual/input/input9
[  256.179028][ T7667] loop4: detected capacity change from 0 to 32768
[  256.190628][ T7655] loop5: detected capacity change from 0 to 32768
[  256.260755][ T7655] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  256.276987][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  256.278310][ T7655] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  256.283803][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  256.328146][ T7667] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  256.395090][ T7700] loop1: detected capacity change from 0 to 1024
[  256.407762][ T7655] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms
[  256.452750][ T1217] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  256.479743][ T1217] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  256.495138][ T7667] XFS (loop4): Ending clean mount
[  256.534779][   T28] kauditd_printk_skb: 36 callbacks suppressed
[  256.534799][   T28] audit: type=1800 audit(1783315726.545:136): pid=7700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.386" name="file1" dev="loop1" ino=20 res=0 errno=0
[  256.587250][ T7700] syz.1.386: attempt to access beyond end of device
[  256.587250][ T7700] loop1: rw=0, sector=393284, nr_sectors = 2 limit=1024
[  256.724191][ T1217] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 244ms
[  256.771387][ T1217] gfs2: fsid=syz:syz.0: jid=0: Done
[  256.811199][ T7655] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  256.870949][ T7655] gfs2: fsid=syz:syz.0: can't create logd thread: -4
[  256.940877][ T7248] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  257.817982][ T7730] loop3: detected capacity change from 0 to 2048
[  257.900218][ T7730] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  258.256945][ T7742] loop1: detected capacity change from 0 to 2048
[  258.290781][ T7742] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  258.373148][   T28] audit: type=1800 audit(1783315728.385:137): pid=7742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.395" name="file1" dev="loop1" ino=1415 res=0 errno=0
[  258.378096][ T7747] loop4: detected capacity change from 0 to 512
[  258.469549][ T7747] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  258.524901][ T7747] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  258.551679][ T7749] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  258.620492][ T7747] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended
[  258.730780][ T7747] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  258.799120][ T7747] System zones: 0-2, 18-18, 34-35
[  258.867638][ T7747] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  258.892221][ T7766] loop3: detected capacity change from 0 to 128
[  258.966729][ T7747] fscrypt (loop4, inode 12): Error -61 getting encryption context
[  258.981863][ T7766] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  259.042235][ T7766] ext4 filesystem being mounted at /119/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  259.146892][ T5779] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  259.244341][ T7248] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  259.416203][ T7777] loop3: detected capacity change from 0 to 512
[  259.575365][ T7777] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  259.575634][ T7783] input: syz0 as /devices/virtual/input/input10
[  259.615765][ T7777] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  259.790933][ T7791] loop5: detected capacity change from 0 to 256
[  259.838256][ T7791] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  259.892368][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  259.923392][ T7791] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512
[  259.945815][ T7791] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found
[  259.975756][ T7791] UDF-fs: Scanning with blocksize 512 failed
[  260.032810][ T7791] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  260.087574][ T7791] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  260.245738][ T7800] loop4: detected capacity change from 0 to 16
[  260.311359][ T7800] erofs: (device loop4): mounted with root inode @ nid 36.
[  261.670183][ T7836] set_capacity_and_notify: 1 callbacks suppressed
[  261.670200][ T7836] loop3: detected capacity change from 0 to 2048
[  263.021166][   T28] audit: type=1800 audit(1783315732.995:138): pid=7836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.421" name="file1" dev="loop3" ino=838 res=0 errno=0
[  263.362170][ T5831] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  263.431116][ T5776] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  263.582366][ T5831] usb 6-1: Using ep0 maxpacket: 16
[  263.607175][ T5831] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  263.640456][ T5776] usb 5-1: Using ep0 maxpacket: 32
[  263.647319][ T5831] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  263.665544][ T5776] usb 5-1: unable to get BOS descriptor or descriptor too short
[  263.692733][ T5831] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  263.707024][ T5776] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  263.731099][ T5776] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  263.740505][ T5776] usb 5-1: config 1 has no interface number 0
[  263.747431][ T5831] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  263.767109][ T5831] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  263.779539][ T5776] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[  263.792316][ T5776] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  263.802416][ T5831] usb 6-1: config 0 descriptor??
[  263.811337][ T5776] usb 5-1: Product: syz
[  263.815692][ T5776] usb 5-1: Manufacturer: syz
[  263.821111][ T5776] usb 5-1: SerialNumber: syz
[  263.848073][ T7866] xt_limit: Overflow, try lower: 8/2147483648
[  264.267621][ T7845] loop5: detected capacity change from 0 to 512
[  264.268590][ T5776] snd-usb-audio: probe of 5-1:1.1 failed with error -22
[  264.340232][ T7845] EXT4-fs error (device loop5): ext4_do_update_inode:5255: inode #15: comm syz.5.424: corrupted inode contents
[  264.368673][ T7845] EXT4-fs (loop5): Remounting filesystem read-only
[  264.440770][ T7845] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -5)
[  264.497273][ T7845] EXT4-fs (loop5): 1 orphan inode deleted
[  264.534242][ T7879] loop3: detected capacity change from 0 to 256
[  264.536204][ T7845] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  264.572717][ T7879] exfat: Unknown parameter '„}Îò±’C•Nÿá æ£Xñ²ž'
[  264.629498][ T5831] microsoft 0003:045E:07DA.0003: unknown main item tag 0x3
[  264.691147][ T5831] microsoft 0003:045E:07DA.0003: unknown main item tag 0x3
[  264.698828][ T5831] microsoft 0003:045E:07DA.0003: unknown main item tag 0x3
[  264.701981][ T6160] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  264.774978][ T5831] microsoft 0003:045E:07DA.0003: unknown main item tag 0x3
[  264.797857][ T5831] microsoft 0003:045E:07DA.0003: unknown main item tag 0x3
[  264.834094][ T5831] microsoft 0003:045E:07DA.0003: unknown main item tag 0x3
[  264.855366][ T5776] snd-usb-audio: probe of 5-1:1.2 failed with error -22
[  264.863574][ T5831] microsoft 0003:045E:07DA.0003: unknown main item tag 0x3
[  264.894294][ T5831] microsoft 0003:045E:07DA.0003: unknown main item tag 0x3
[  264.898340][ T7886] loop1: detected capacity change from 0 to 512
[  264.916745][ T5776] usb 5-1: USB disconnect, device number 2
[  264.940493][ T5831] microsoft 0003:045E:07DA.0003: unknown main item tag 0x3
[  264.970896][ T5831] microsoft 0003:045E:07DA.0003: unbalanced collection at end of report description
[  265.002601][ T5831] microsoft 0003:045E:07DA.0003: parse failed
[  265.012264][ T5773] udevd[5773]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  265.023998][ T5831] microsoft: probe of 0003:045E:07DA.0003 failed with error -22
[  265.092789][ T7886] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  265.173997][ T5831] usb 6-1: USB disconnect, device number 2
[  265.228446][ T7886] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  265.486014][ T7286] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  265.872131][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  266.638965][ T7907] loop5: detected capacity change from 0 to 512
[  266.843906][ T7907] EXT4-fs error (device loop5): ext4_orphan_get:1404: inode #15: comm syz.5.438: inode has both inline data and extents flags
[  266.941193][ T7907] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.438: couldn't read orphan inode 15 (err -117)
[  267.005503][ T7907] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  267.114305][ T7919] loop3: detected capacity change from 0 to 512
[  267.195262][ T7919] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  267.222166][ T7919] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it
[  267.262431][ T7286] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  267.289948][ T7919] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.441: Corrupt directory, running e2fsck is recommended
[  267.403197][ T7919] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  267.441508][ T7919] EXT4-fs error (device loop3): ext4_iget_extra_inode:4739: inode #15: comm syz.3.441: corrupted in-inode xattr: e_name out of bounds
[  267.498000][ T7919] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.441: couldn't read orphan inode 15 (err -117)
[  267.550949][ T7919] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  267.624427][ T7919] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  267.661122][ T7919] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it
[  267.706749][ T7919] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.441: Corrupt directory, running e2fsck is recommended
[  267.762326][ T7938] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  267.792256][ T7938] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it
[  267.831873][ T7938] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.441: Corrupt directory, running e2fsck is recommended
[  268.045381][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.276707][ T7953] loop3: detected capacity change from 0 to 256
[  268.310093][ T7953] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  268.372213][ T7953] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  268.450396][ T7953] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x38bc65dc, utbl_chksum : 0xe619d30d)
[  268.746646][ T7967] loop4: detected capacity change from 0 to 164
[  269.235138][ T7980] loop4: detected capacity change from 0 to 2048
[  269.298286][ T7980] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found!
[  269.329320][ T7983] loop3: detected capacity change from 0 to 16
[  269.372256][ T7983] erofs: (device loop3): mounted with root inode @ nid 36.
[  269.426352][ T7980] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  269.761207][ T1217] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  269.797655][ T7993] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  269.963525][ T1217] usb 6-1: config 220 has an invalid interface number: 76 but max is 2
[  269.981216][ T1217] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  269.997554][ T1217] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  270.030361][ T1217] usb 6-1: config 220 has no interface number 2
[  270.056654][ T1217] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  270.111530][ T1217] usb 6-1: config 220 interface 0 has no altsetting 0
[  270.119616][ T1217] usb 6-1: config 220 interface 76 has no altsetting 0
[  270.181792][ T1217] usb 6-1: config 220 interface 1 has no altsetting 0
[  270.204998][ T1217] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  270.268114][ T1217] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  270.338712][ T1217] usb 6-1: Product: syz
[  270.358763][ T1217] usb 6-1: Manufacturer: syz
[  270.374462][ T1217] usb 6-1: SerialNumber: syz
[  270.918136][ T1217] usb 6-1: selecting invalid altsetting 0
[  270.938580][ T1217] usb 6-1: Found UVC 7.01 device syz (8086:0b07)
[  270.973117][ T1217] usb 6-1: No valid video chain found.
[  270.989928][ T1217] usb 6-1: selecting invalid altsetting 0
[  271.009886][ T1217] usbtest: probe of 6-1:220.1 failed with error -22
[  271.020378][ T1217] usb 6-1: USB disconnect, device number 3
[  271.276550][ T8009] loop3: detected capacity change from 0 to 1024
[  271.843744][ T8024] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  272.067274][ T8021] loop5: detected capacity change from 0 to 4096
[  272.170183][ T8021] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  272.342947][ T1217] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  272.371480][ T8021] EXT4-fs error (device loop5): ext4_do_update_inode:5255: inode #15: comm syz.5.466: corrupted inode contents
[  272.468493][ T8021] EXT4-fs error (device loop5): ext4_dirty_inode:6143: inode #15: comm syz.5.466: mark_inode_dirty error
[  272.523205][ T8021] EXT4-fs error (device loop5): ext4_do_update_inode:5255: inode #15: comm syz.5.466: corrupted inode contents
[  272.562334][ T8021] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #15: comm syz.5.466: mark_inode_dirty error
[  272.580313][ T1217] usb 5-1: config 220 has an invalid interface number: 76 but max is 2
[  272.589557][ T1217] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  272.591719][ T8021] EXT4-fs error (device loop5): ext4_do_update_inode:5255: inode #15: comm syz.5.466: corrupted inode contents
[  272.653640][ T1217] usb 5-1: config 220 has no interface number 2
[  272.659968][ T8021] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #15: comm syz.5.466: mark_inode_dirty error
[  272.660156][ T1217] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  272.696062][ T8039] loop3: detected capacity change from 0 to 2048
[  272.731403][ T8039] UDF-fs: bad mount option "unrict" or missing value
[  272.735925][ T8021] EXT4-fs error (device loop5): ext4_do_update_inode:5255: inode #15: comm syz.5.466: corrupted inode contents
[  272.789285][ T1217] usb 5-1: config 220 interface 0 has no altsetting 0
[  272.819663][ T1217] usb 5-1: config 220 interface 76 has no altsetting 0
[  272.820647][ T8021] EXT4-fs error (device loop5): ext4_truncate:4301: inode #15: comm syz.5.466: mark_inode_dirty error
[  272.841886][ T5844] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  272.858567][ T1217] usb 5-1: config 220 interface 1 has no altsetting 0
[  272.903294][ T1217] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  272.914069][ T8021] EXT4-fs error (device loop5) in ext4_setattr:5682: Corrupt filesystem
[  272.927531][ T8036] EXT4-fs error (device loop5): ext4_do_update_inode:5255: inode #15: comm syz.5.466: corrupted inode contents
[  272.966908][ T1217] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  273.001133][ T1217] usb 5-1: Product: syz
[  273.011440][ T1217] usb 5-1: Manufacturer: syz
[  273.016154][ T1217] usb 5-1: SerialNumber: syz
[  273.180242][ T7286] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  273.468824][ T1217] usb 5-1: Found UVC 7.01 device syz (8086:0b07)
[  273.481085][ T1217] usb 5-1: No valid video chain found.
[  273.486859][ T1217] usb 5-1: selecting invalid altsetting 0
[  273.519385][ T1217] usb 5-1: selecting invalid altsetting 0
[  273.547463][ T1217] usbtest: probe of 5-1:220.1 failed with error -22
[  273.594404][ T8049] dvmrp8: left allmulticast mode
[  274.160566][ T1217] usb 5-1: USB disconnect, device number 3
[  274.526055][ T8055] loop1: detected capacity change from 0 to 1024
[  274.543446][ T8050] netlink: 52 bytes leftover after parsing attributes in process `syz.3.471'.
[  274.877403][ T8055] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  275.802724][ T8055] EXT4-fs error (device loop1): ext4_update_inline_data:357: inode #15: comm syz.1.473: missing inline data xattr
[  275.986305][ T8082] loop4: detected capacity change from 0 to 512
[  276.000859][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  276.019434][ T8083] loop3: detected capacity change from 0 to 2048
[  276.084488][ T8082] EXT4-fs error (device loop4): __ext4_fill_super:5517: inode #2: comm syz.4.477: inode has both inline data and extents flags
[  276.091723][ T8083] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  276.161171][ T8082] EXT4-fs (loop4): get root inode failed
[  276.167048][ T8082] EXT4-fs (loop4): mount failed
[  276.191111][ T1217] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  276.322998][ T8089] loop1: detected capacity change from 0 to 8
[  276.404331][ T1217] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  276.423281][ T1217] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255
[  276.475015][ T8089] SQUASHFS error: zlib decompression failed, data probably corrupt
[  276.511504][ T1217] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  276.530841][ T8089] SQUASHFS error: Failed to read block 0x9b: -5
[  276.537788][ T8089] SQUASHFS error: Unable to read metadata cache entry [99]
[  276.545567][ T8089] SQUASHFS error: Unable to read inode 0x127
[  276.551198][ T1217] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  277.059724][ T8095] loop3: detected capacity change from 0 to 1024
[  277.175377][ T8095] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002]
[  277.225082][ T8095] System zones: 0-1, 3-8
[  277.252567][ T8095] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  277.261191][ T1217] usb 6-1: Product: syz
[  277.269110][ T1217] usb 6-1: Manufacturer: syz
[  277.274052][ T1217] usb 6-1: SerialNumber: syz
[  277.296470][ T8095] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  277.311405][ T1217] usb 6-1: config 0 descriptor??
[  277.317339][ T8079] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  277.331753][ T8079] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  277.387350][   T28] audit: type=1800 audit(1783315747.395:139): pid=8095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.480" name="file1" dev="loop3" ino=15 res=0 errno=0
[  277.408386][ T8105] loop4: detected capacity change from 0 to 512
[  277.424525][ T8105] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[  277.434856][ T8095] EXT4-fs error (device loop3): ext4_free_blocks:6694: comm syz.3.480: Freeing blocks not in datazone - block = 0, count = 16
[  277.467520][ T8095] EXT4-fs (loop3): Remounting filesystem read-only
[  277.519426][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  277.596016][ T8079] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  277.603981][ T5831] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  277.640456][ T8079] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  277.814893][ T5831] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[  277.825314][ T5831] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  277.848920][ T5831] usb 2-1: config 220 has no interface number 2
[  277.867504][ T5831] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  277.944089][ T1217] Error reading MAC address
[  277.981431][ T1217] usb 6-1: USB disconnect, device number 4
[  278.101150][ T5831] usb 2-1: config 220 interface 0 has no altsetting 0
[  278.115973][ T5831] usb 2-1: config 220 interface 76 has no altsetting 0
[  278.123461][ T5831] usb 2-1: config 220 interface 1 has no altsetting 0
[  278.134085][ T5831] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  278.149849][ T5831] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  278.158390][ T5831] usb 2-1: Product: syz
[  278.685180][ T5831] usb 2-1: Manufacturer: syz
[  278.690075][ T5831] usb 2-1: SerialNumber: syz
[  279.337872][ T5831] usb 2-1: selecting invalid altsetting 0
[  279.352232][ T5831] usb 2-1: Found UVC 7.01 device syz (8086:0b07)
[  279.387259][ T5831] usb 2-1: No valid video chain found.
[  279.420041][ T5831] usb 2-1: selecting invalid altsetting 0
[  279.431366][ T5831] usbtest: probe of 2-1:220.1 failed with error -22
[  279.457989][ T5831] usb 2-1: USB disconnect, device number 9
[  279.700053][ T8140] loop3: detected capacity change from 0 to 256
[  279.724667][ T8140] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  279.774374][    T8] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  279.782443][   T28] audit: type=1800 audit(1783315749.785:140): pid=8140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.493" name="file1" dev="loop3" ino=1048617 res=0 errno=0
[  279.782508][   T28] audit: type=1800 audit(1783315749.785:141): pid=8140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.493" name="file1" dev="loop3" ino=1048617 res=0 errno=0
[  280.045973][    T8] usb 5-1: Using ep0 maxpacket: 32
[  280.073143][    T8] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  280.091162][    T8] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  280.117992][    T8] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  280.146895][    T8] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  280.163144][    T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  280.177302][    T8] usb 5-1: Product: syz
[  280.185525][    T8] usb 5-1: Manufacturer: syz
[  280.220533][    T8] usb 5-1: SerialNumber: syz
[  280.242031][    T8] cdc_ncm 5-1:1.0: skipping garbage
[  280.247676][    T8] cdc_ncm 5-1:1.0: skipping garbage
[  280.262989][    T8] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found
[  280.280763][    T8] cdc_ncm 5-1:1.0: bind() failure
[  280.665633][ T5832] usb 5-1: USB disconnect, device number 4
[  280.691220][   T28] audit: type=1800 audit(1783315750.695:142): pid=8143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.493" name="file1" dev="loop3" ino=1048617 res=0 errno=0
[  281.439108][ T8143] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008)
[  281.492796][ T8143] FAT-fs (loop3): Filesystem has been set read-only
[  281.499905][ T8143] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008)
[  281.572555][ T8163] loop1: detected capacity change from 0 to 256
[  281.734331][   T28] audit: type=1800 audit(1783315751.735:143): pid=8163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.499" name="file1" dev="loop1" ino=1048618 res=0 errno=0
[  282.001514][    T8] usb 6-1: new full-speed USB device number 5 using dummy_hcd
[  282.201701][    T8] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  282.210406][    T8] usb 6-1: config 0 has no interface number 0
[  282.266876][    T8] usb 6-1: config 0 interface 1 altsetting 149 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  282.348946][    T8] usb 6-1: config 0 interface 1 altsetting 149 endpoint 0x81 has invalid wMaxPacketSize 0
[  282.410055][    T8] usb 6-1: config 0 interface 1 altsetting 149 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  282.457735][    T8] usb 6-1: config 0 interface 1 has no altsetting 0
[  282.475815][    T8] usb 6-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00
[  282.537115][    T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  282.635730][    T8] usb 6-1: config 0 descriptor??
[  283.359374][    T8] chicony 0003:04F2:1236.0004: unknown main item tag 0x0
[  283.404513][    T8] chicony 0003:04F2:1236.0004: unknown main item tag 0x0
[  283.446813][    T8] chicony 0003:04F2:1236.0004: unknown main item tag 0x0
[  283.489665][    T8] chicony 0003:04F2:1236.0004: unknown main item tag 0x0
[  283.528758][    T8] chicony 0003:04F2:1236.0004: unknown main item tag 0x0
[  283.571159][    T8] chicony 0003:04F2:1236.0004: unknown main item tag 0x0
[  283.578764][    T8] chicony 0003:04F2:1236.0004: unknown main item tag 0x0
[  283.608216][    T8] chicony 0003:04F2:1236.0004: unknown main item tag 0x0
[  283.639480][    T8] chicony 0003:04F2:1236.0004: unknown main item tag 0x0
[  283.671477][    T8] chicony 0003:04F2:1236.0004: unknown main item tag 0x0
[  283.705437][    T8] chicony 0003:04F2:1236.0004: unknown main item tag 0x0
[  283.751647][    T8] chicony 0003:04F2:1236.0004: unknown main item tag 0x0
[  283.790181][    T8] chicony 0003:04F2:1236.0004: unknown main item tag 0x0
[  283.806212][    T8] chicony 0003:04F2:1236.0004: unknown main item tag 0x0
[  283.883575][    T8] chicony 0003:04F2:1236.0004: unknown main item tag 0x0
[  283.953942][    T8] chicony 0003:04F2:1236.0004: unknown main item tag 0x0
[  284.108908][    T8] chicony 0003:04F2:1236.0004: unknown main item tag 0x0
[  284.255335][    T8] chicony 0003:04F2:1236.0004: unknown main item tag 0x0
[  284.391183][    T8] chicony 0003:04F2:1236.0004: unknown main item tag 0x0
[  284.428995][    T8] chicony 0003:04F2:1236.0004: unknown main item tag 0x0
[  284.471381][    T8] chicony 0003:04F2:1236.0004: unknown main item tag 0x0
[  284.538678][    T8] chicony 0003:04F2:1236.0004: unknown main item tag 0x0
[  284.591072][    T8] chicony 0003:04F2:1236.0004: unknown main item tag 0x0
[  284.626293][    T8] chicony 0003:04F2:1236.0004: unknown main item tag 0x0
[  284.665134][    T8] chicony 0003:04F2:1236.0004: unknown main item tag 0x0
[  284.721616][    T8] chicony 0003:04F2:1236.0004: unknown main item tag 0x0
[  284.734877][ T8214] loop4: detected capacity change from 0 to 256
[  284.739140][    T8] chicony 0003:04F2:1236.0004: unknown main item tag 0x0
[  284.749328][    T8] chicony 0003:04F2:1236.0004: unknown main item tag 0x0
[  284.769708][    T8] chicony 0003:04F2:1236.0004: unknown main item tag 0x0
[  284.800461][    T8] chicony 0003:04F2:1236.0004: unknown main item tag 0x0
[  284.803329][ T8217] loop1: detected capacity change from 0 to 512
[  284.820767][    T8] chicony 0003:04F2:1236.0004: unknown main item tag 0x0
[  284.822952][ T8218] loop5: detected capacity change from 0 to 1024
[  284.872027][    T8] chicony 0003:04F2:1236.0004: unknown main item tag 0x0
[  284.889312][    T8] chicony 0003:04F2:1236.0004: unknown main item tag 0x0
[  284.917586][ T8217] EXT4-fs (loop1): 1 truncate cleaned up
[  284.931147][    T8] chicony 0003:04F2:1236.0004: unknown main item tag 0x0
[  284.962649][ T8217] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  284.976474][    T8] chicony 0003:04F2:1236.0004: unknown main item tag 0x0
[  284.998418][    T8] chicony 0003:04F2:1236.0004: unknown main item tag 0x0
[  285.007047][ T8218] hfsplus: keylen 65060 too large
[  285.014603][    T8] chicony 0003:04F2:1236.0004: unknown main item tag 0x0
[  285.037200][ T8218] hfsplus: xattr searching failed
[  285.045536][    T8] chicony 0003:04F2:1236.0004: unknown main item tag 0x0
[  285.086203][ T8223] hfsplus: keylen 65060 too large
[  285.086703][   T28] audit: type=1800 audit(1783315755.095:144): pid=8218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.512" name="file1" dev="loop5" ino=20 res=0 errno=0
[  285.093987][    T8] chicony 0003:04F2:1236.0004: unknown main item tag 0x0
[  285.130438][   T28] audit: type=1800 audit(1783315755.135:145): pid=8224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.511" name="file1" dev="loop1" ino=13 res=0 errno=0
[  285.131294][ T8223] hfsplus: xattr searching failed
[  285.205165][ T8217] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.511: bg 0: block 465: padding at end of block bitmap is not set
[  285.207417][    T8] chicony 0003:04F2:1236.0004: unknown main item tag 0x0
[  285.249020][ T8217] EXT4-fs (loop1): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 2 with error 28
[  285.276211][    T8] chicony 0003:04F2:1236.0004: unknown main item tag 0x0
[  285.297371][ T8217] EXT4-fs (loop1): This should not happen!! Data will be lost
[  285.297371][ T8217] 
[  285.309269][    T8] chicony 0003:04F2:1236.0004: unknown main item tag 0x0
[  285.325076][ T8227] loop4: detected capacity change from 0 to 128
[  285.349138][ T8217] EXT4-fs (loop1): Total free blocks count 0
[  285.359794][    T8] chicony 0003:04F2:1236.0004: hidraw0: USB HID v0.01 Device [HID 04f2:1236] on usb-dummy_hcd.5-1/input1
[  285.375801][ T8217] EXT4-fs (loop1): Free/Dirty block details
[  285.385170][ T8227] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  285.407091][ T8217] EXT4-fs (loop1): free_blocks=0
[  285.444617][    T8] usb 6-1: USB disconnect, device number 5
[  285.458230][ T8217] EXT4-fs (loop1): dirty_blocks=2
[  285.482281][ T8217] EXT4-fs (loop1): Block reservation details
[  285.488436][ T8217] EXT4-fs (loop1): i_reserved_data_blocks=2
[  285.639412][ T8230] fido_id[8230]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  285.748825][ T8232] loop5: detected capacity change from 0 to 4096
[  285.763507][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  285.780503][ T8232] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  286.093094][ T8237] loop4: detected capacity change from 0 to 1024
[  286.128087][ T8237] EXT4-fs: inline encryption not supported
[  286.348045][ T8237] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  286.864919][ T7286] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  287.218538][ T7248] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  287.242418][ T8252] loop3: detected capacity change from 0 to 2048
[  287.291721][ T8252] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  287.409325][   T28] audit: type=1800 audit(1783315757.415:146): pid=8252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.520" name="file2" dev="loop3" ino=1347 res=0 errno=0
[  287.820289][ T8273] loop5: detected capacity change from 0 to 1024
[  287.899149][ T8273] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback.
[  287.939373][ T8273] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  287.999935][   T28] audit: type=1804 audit(1783315758.005:147): pid=8273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.524" name="/newroot/30/file1/file1" dev="loop5" ino=15 res=1 errno=0
[  288.070103][ T7286] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  288.452053][    T8] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[  288.542530][ T8292] netlink: 8 bytes leftover after parsing attributes in process `syz.4.528'.
[  288.555618][ T8294] loop5: detected capacity change from 0 to 1024
[  288.580783][ T8294] EXT4-fs: Ignoring removed orlov option
[  288.634277][ T8294] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  288.701396][    T8] usb 4-1: config 0 has an invalid interface number: 52 but max is 0
[  288.751806][    T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  288.821108][    T8] usb 4-1: config 0 has no interface number 0
[  288.861286][    T8] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10
[  288.908613][ T8305] loop4: detected capacity change from 0 to 1024
[  288.910805][    T8] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0
[  288.974558][    T8] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  288.975866][ T8304] EXT4-fs error (device loop5): ext4_free_inode:356: comm syz.5.529: bit already cleared for inode 15
[  289.030088][    T8] usb 4-1: config 0 interface 52 has no altsetting 0
[  289.047386][    T8] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00
[  289.058049][    T8] usb 4-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0
[  289.084441][ T8308] hfsplus: inconsistency in B*Tree (128,1,255,1,0)
[  289.086250][    T8] usb 4-1: Manufacturer: syz
[  289.097308][ T8304] EXT4-fs error (device loop5) in ext4_free_inode:363: Corrupt filesystem
[  289.111213][ T8308] hfsplus: xattr searching failed
[  289.124000][ T8308] syz.4.530: attempt to access beyond end of device
[  289.124000][ T8308] loop4: rw=0, sector=917504, nr_sectors = 2 limit=1024
[  289.125812][    T8] usb 4-1: config 0 descriptor??
[  289.154860][ T8308] Buffer I/O error on dev loop4, logical block 458752, async page read
[  289.165407][ T8308] hfsplus: unable to mark blocks free: error -5
[  289.175391][ T8308] hfsplus: can't free extent
[  289.225818][    T8] hub 4-1:0.52: bad descriptor, ignoring hub
[  289.246432][    T8] hub: probe of 4-1:0.52 failed with error -5
[  289.268330][ T7286] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  289.508314][    T8] usb 4-1: Can not set alternate setting to 1, error: -71
[  289.585473][    T8] synaptics_usb: probe of 4-1:0.52 failed with error -71
[  289.723742][    T8] usb 4-1: USB disconnect, device number 10
[  290.710028][ T8328] set_capacity_and_notify: 1 callbacks suppressed
[  290.710045][ T8328] loop5: detected capacity change from 0 to 128
[  290.803345][ T8328] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  290.974842][ T8328] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  291.403174][ T8344] loop5: detected capacity change from 0 to 128
[  291.792636][ T8344] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  292.052536][ T8344] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  292.544785][ T8351] BUG: unable to handle page fault for address: ffffffffffffffec
[  292.553061][ T8351] #PF: supervisor read access in kernel mode
[  292.559268][ T8351] #PF: error_code(0x0000) - not-present page
[  292.565549][ T8351] PGD cf35067 P4D cf35067 PUD cf37067 PMD 0 
[  292.571706][ T8351] Oops: 0000 [#1] PREEMPT SMP KASAN
[  292.576935][ T8351] CPU: 1 PID: 8351 Comm: syz.5.539 Not tainted syzkaller #0
[  292.584632][ T8351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  292.595874][ T8351] RIP: 0010:ext4_free_ext_path+0x42/0x100
[  292.601745][ T8351] Code: 85 db 0f 84 a4 00 00 00 49 bf 00 00 00 00 00 fc ff df 48 8d 7b 08 48 89 f8 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 9d 00 00 00 <0f> b7 43 08 c1 e0 04 48 8d 04 40 48 89 04 24 31 ed 48 8d 43 28 4c
[  292.621575][ T8351] RSP: 0018:ffffc90004a0f5e0 EFLAGS: 00010246
[  292.627685][ T8351] RAX: 0000000000000000 RBX: ffffffffffffffe4 RCX: 0000000000080000
[  292.635954][ T8351] RDX: ffffc9001849a000 RSI: 000000000000918f RDI: ffffffffffffffec
[  292.644152][ T8351] RBP: ffffc90004a0f700 R08: ffff88807710c81f R09: 1ffff1100ee21903
[  292.652249][ T8351] R10: dffffc0000000000 R11: ffffed100ee21904 R12: ffff88807710c8b0
[  292.660274][ T8351] R13: ffffffffffffffe4 R14: dffffc0000000000 R15: dffffc0000000000
[  292.668563][ T8351] FS:  00007f98e29296c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  292.677825][ T8351] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  292.684902][ T8351] CR2: ffffffffffffffec CR3: 00000000678af000 CR4: 00000000003506e0
[  292.693007][ T8351] Call Trace:
[  292.696305][ T8351]  <TASK>
[  292.699435][ T8351]  finish_range+0x230/0x340
[  292.703996][ T8351]  ? update_tind_extent_range+0x3e0/0x3e0
[  292.709745][ T8351]  ? finish_range+0x230/0x340
[  292.714555][ T8351]  ? __ext4_sb_bread_gfp+0x14c/0x210
[  292.720048][ T8351]  update_ind_extent_range+0x2cd/0x510
[  292.725724][ T8351]  update_dind_extent_range+0x123/0x1e0
[  292.731569][ T8351]  ext4_ext_migrate+0xb55/0x1060
[  292.736721][ T8351]  ? mb_regenerate_buddy+0x510/0x510
[  292.742033][ T8351]  ? down_read_killable+0x340/0x340
[  292.747420][ T8351]  ? sb_start_write+0x110/0x1c0
[  292.752391][ T8351]  ? mnt_want_write_file+0x16a/0x200
[  292.757884][ T8351]  ext4_ioctl+0x1ede/0x3b70
[  292.762412][ T8351]  ? ext4_fileattr_set+0x16e0/0x16e0
[  292.767709][ T8351]  ? mark_lock+0x94/0x320
[  292.772158][ T8351]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  292.778180][ T8351]  ? do_vfs_ioctl+0x156c/0x1cc0
[  292.783240][ T8351]  ? __ia32_compat_sys_ioctl+0x8a0/0x8a0
[  292.788896][ T8351]  ? tomoyo_path_number_perm+0x217/0x5e0
[  292.794546][ T8351]  ? __lock_acquire+0x7d80/0x7d80
[  292.799598][ T8351]  ? slab_free_freelist_hook+0x130/0x1a0
[  292.805247][ T8351]  ? tomoyo_path_number_perm+0x4b7/0x5e0
[  292.810980][ T8351]  ? __kmem_cache_free+0xba/0x1f0
[  292.816121][ T8351]  ? tomoyo_path_number_perm+0x56b/0x5e0
[  292.821903][ T8351]  ? tomoyo_path_number_perm+0x217/0x5e0
[  292.827730][ T8351]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  292.833232][ T8351]  ? __fget_files+0x28/0x460
[  292.837958][ T8351]  ? bpf_lsm_file_ioctl+0x9/0x10
[  292.842944][ T8351]  ? security_file_ioctl+0x80/0xa0
[  292.848162][ T8351]  ? ext4_fileattr_set+0x16e0/0x16e0
[  292.853461][ T8351]  __se_sys_ioctl+0xfd/0x170
[  292.858158][ T8351]  do_syscall_64+0x55/0xb0
[  292.862614][ T8351]  ? clear_bhb_loop+0x40/0x90
[  292.868711][ T8351]  ? clear_bhb_loop+0x40/0x90
[  292.873420][ T8351]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  292.879426][ T8351] RIP: 0033:0x7f98e199de59
[  292.884027][ T8351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  292.903755][ T8351] RSP: 002b:00007f98e2929028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  292.912483][ T8351] RAX: ffffffffffffffda RBX: 00007f98e1c26090 RCX: 00007f98e199de59
[  292.920768][ T8351] RDX: 0000000000000000 RSI: 0000000000006609 RDI: 0000000000000006
[  292.928960][ T8351] RBP: 00007f98e1a33e6f R08: 0000000000000000 R09: 0000000000000000
[  292.936947][ T8351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  292.945124][ T8351] R13: 00007f98e1c26128 R14: 00007f98e1c26090 R15: 00007fffba6fc548
[  292.953380][ T8351]  </TASK>
[  292.956671][ T8351] Modules linked in:
[  292.960663][ T8351] CR2: ffffffffffffffec
[  292.964929][ T8351] ---[ end trace 0000000000000000 ]---
[  292.971261][ T8351] RIP: 0010:ext4_free_ext_path+0x42/0x100
[  292.977377][ T8351] Code: 85 db 0f 84 a4 00 00 00 49 bf 00 00 00 00 00 fc ff df 48 8d 7b 08 48 89 f8 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 9d 00 00 00 <0f> b7 43 08 c1 e0 04 48 8d 04 40 48 89 04 24 31 ed 48 8d 43 28 4c
[  292.997536][ T8351] RSP: 0018:ffffc90004a0f5e0 EFLAGS: 00010246
[  293.003804][ T8351] RAX: 0000000000000000 RBX: ffffffffffffffe4 RCX: 0000000000080000
[  293.014045][ T8351] RDX: ffffc9001849a000 RSI: 000000000000918f RDI: ffffffffffffffec
[  293.023188][ T8351] RBP: ffffc90004a0f700 R08: ffff88807710c81f R09: 1ffff1100ee21903
[  293.031549][ T8351] R10: dffffc0000000000 R11: ffffed100ee21904 R12: ffff88807710c8b0
[  293.039731][ T8351] R13: ffffffffffffffe4 R14: dffffc0000000000 R15: dffffc0000000000
[  293.047986][ T8351] FS:  00007f98e29296c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  293.057192][ T8351] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  293.063888][ T8351] CR2: ffffffffffffffec CR3: 00000000678af000 CR4: 00000000003506e0
[  293.072065][ T8351] Kernel panic - not syncing: Fatal exception
[  293.078532][ T8351] Kernel Offset: disabled
[  293.083048][ T8351] Rebooting in 86400 seconds..