last executing test programs:

7m33.24491026s ago: executing program 2 (id=695):
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
syz_open_dev$usbmon(&(0x7f0000000280), 0x80000001, 0x28100)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0xd0)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r1, &(0x7f0000000080), 0x12)
connect$x25(r1, 0x0, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bond0\x00', 0x2000})
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00')
syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)=<r3=>0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000300)=<r4=>0x0)
r5 = dup(0xffffffffffffffff)
syz_ublk_setup_queues(r5, r4, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x40, 0x1000000, 0x33d, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x20, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6c, 0x6449, 0x0, 0xfffffffd, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7686, 0x40, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0)
openat$panthor(0xffffff9c, 0x0, 0x2, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
socket$packet(0x11, 0x0, 0x300)
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file1\x00', 0x200008, &(0x7f0000000080)=ANY=[@ANYRES8, @ANYRES32, @ANYRESOCT], 0x1, 0x394, &(0x7f0000000700)="$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")

7m32.889409749s ago: executing program 2 (id=704):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x60}, 0x1, 0x0, 0x0, 0x40080a5}, 0x20008040)

7m32.787804045s ago: executing program 2 (id=706):
r0 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980913, 0x0, '\x00', @p_u8=0x0}})

7m32.787620406s ago: executing program 2 (id=707):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0)
mkdir(&(0x7f00000003c0)='./file0/../file0\x00', 0x190)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x1000800, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x6000, 0x0)

7m32.70589548s ago: executing program 2 (id=708):
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
getxattr(0x0, &(0x7f0000000580)=@known='user.syz\x00', 0x0, 0x0)

7m32.357643701s ago: executing program 2 (id=713):
syz_usb_connect$sierra_net(0x5, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x5, 0x2, 0x40, 0xef, 0x0, 0x6}, {0x9, 0x5, 0xc, 0x2, 0x200, 0xff, 0x1, 0x4}, {0x9, 0x5, 0xc, 0x3, 0x3ff, 0x4a, 0xf, 0xff}}}}}}]}}, 0x0)

7m32.321109917s ago: executing program 32 (id=713):
syz_usb_connect$sierra_net(0x5, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x5, 0x2, 0x40, 0xef, 0x0, 0x6}, {0x9, 0x5, 0xc, 0x2, 0x200, 0xff, 0x1, 0x4}, {0x9, 0x5, 0xc, 0x3, 0x3ff, 0x4a, 0xf, 0xff}}}}}}]}}, 0x0)

7m27.244520162s ago: executing program 3 (id=759):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000))
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000180)={{&(0x7f0000416000/0x4000)=nil, 0x4000}})

7m27.167487288s ago: executing program 3 (id=760):
r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301)
ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000200)=ANY=[@ANYBLOB="edbe000001"])

7m27.167239078s ago: executing program 3 (id=761):
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
r1 = open(&(0x7f0000000280)='.\x00', 0x10000, 0x0)
fcntl$lock(r1, 0x410, &(0x7f0000000200)={0x1, 0x3, 0x1000000000000001, 0x9b})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
futimesat(r0, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
fcntl$lock(r2, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9})

7m26.047335421s ago: executing program 3 (id=766):
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000240), 0x1, 0x3d0, &(0x7f00000006c0)="$eJzs3M1uG0UcAPD/br5I+mEjcUCFgyUQBAFxHQhQhEThyscFeAArSUuF21SNkWjJoSBOnDggbhz6Ahx4gKpCSEi8Ai+AKlUozQFuQWvvOm4cp7Fix2r6+0mjndkdZ/bv3axm1rsTwGOrEhHnI2IiIhYjopSvT/MUN9spq3d/c2N5a3NjOYnt7U/+SSLJ1xV/K8mXJ/LCfBqRfhfxzM3edtev3/ii3misXsvL1eblq9X16zdevXS5fnH14uqV2pvnarWlxbdqrw8t1p+ef+ncxPvnz/z8V+nO0vT0bLa/J/Nt3XEMSyUqne9kt6VhNzZm0+PeAQAADiTN+/6Trf5/KSZaubZSVDfGunMAAADAUGy/my8BAACAYywx9gcAAIBjrngO4P7mxnKRxvg4wpG7915ElHfebd7qxD8ZT+R1pkb4fmslIq6+kJSyFCN6DxkAoNudrP9zdq/+XxpPd9WbiWj1h2aH3H5lV7m3/5PeHXKTD8j6f+9ExFZP/y8tqpQn8tKpVldxKrlwqbF6NiJOR8R8TM1k5do+bXzw7y8f99uWxf97cup0kbL2s+VOjfTu5MyDn1mpN+uHibnbvW8izkzuFX/S6f8mETF3iDYmvr71dr9tD49/tLZvRby45/Hfmbkn2X9+omrrfKgWZ0Wv/7799aN+7Y87/uz4z+0ffznpnq9pffA2bn/+57P9tnWPfwY5/6eTT1v5Ylz2Vb3ZvFaLmE4+7F2/uPPZolzUz+Kff27v///i+pfkc1qdzK8Bg/r+h99eOUj8WcraL8aCRyGLf2Wg4z945o3bf3zWr/2Hx58d//YcYPP5moNc/w66g4f57gAAAOBRkbbuayTpQiefpgsL7fsdT8Vc2lhbb758Ye3LKyvt+x/lmEqLO12lrvuhtfbP6J3y4q7yaxHxZET8WJptlReW1xor4w4eAAAAHhMn+oz/M38f2VMIAAAAwMiVx70DAAAAwMgZ/wMAAMCxdph5/WRkZI5rZtxXJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEfb/wEAAP//Wt22ag==")
open(&(0x7f00000002c0)='./bus\x00', 0x400143042, 0x2a)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x10, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0xffffffffffff8000, 0x3]})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84042, 0x6749b08a19a15bf7)
write$P9_RUNLINKAT(r1, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7)

7m25.790866693s ago: executing program 3 (id=767):
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002bbd7000000000001400000018000180391e02006e657464657673696d30000000000000050019"], 0x2f}, 0x1, 0x0, 0x0, 0x24000001}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff000000000a000000000000000400010008000a000008000005001e"], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x4000850)

7m25.396728247s ago: executing program 3 (id=770):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a14000000020a010100000000000000000000000920000000080a010100000000000000000a0000020900010073797a31"], 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x4000014)

7m25.238197031s ago: executing program 33 (id=770):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a14000000020a010100000000000000000000000920000000080a010100000000000000000a0000020900010073797a31"], 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x4000014)

6m16.635617852s ago: executing program 4 (id=1766):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0x34, 0x8, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)

6m16.585947672s ago: executing program 4 (id=1767):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0xd80}}, 0x2004c880)
accept4$tipc(r1, 0x0, 0x0, 0x800)

6m16.585680343s ago: executing program 4 (id=1768):
r0 = syz_open_dev$mtd(&(0x7f00000000c0), 0x0, 0x20900)
ioctl$MEMUNLOCK(r0, 0x40084d06, 0x0)

6m16.486896164s ago: executing program 4 (id=1770):
syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./file1\x00', 0x1c802, &(0x7f0000002740)=ANY=[@ANYBLOB="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"], 0x1, 0x5ee3, &(0x7f000000e480)="$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")
chdir(0x0)
mount(0x0, 0x0, &(0x7f0000000180)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b)
write(r0, &(0x7f0000000000)='10', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)

6m16.224553377s ago: executing program 4 (id=1777):
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001340)=0x9)
syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)

6m15.966055429s ago: executing program 4 (id=1786):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000440), r0)
sendmsg$FOU_CMD_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fedbdfc70300000008000b00", @ANYRES32=0x0, @ANYBLOB="050002000a000000060001004e240000140007"], 0x40}, 0x1, 0x0, 0x0, 0x4040041}, 0x810)

6m15.870802022s ago: executing program 34 (id=1786):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000440), r0)
sendmsg$FOU_CMD_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fedbdfc70300000008000b00", @ANYRES32=0x0, @ANYBLOB="050002000a000000060001004e240000140007"], 0x40}, 0x1, 0x0, 0x0, 0x4040041}, 0x810)

4m21.381261567s ago: executing program 1 (id=3835):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x200000005c831, 0xffffffffffffffff, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa004}, 0x4)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x800, 0x3)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff)

4m21.380917642s ago: executing program 1 (id=3836):
socket$inet6(0xa, 0x200000000003, 0x87)
syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x20, 0x2b, 0x0, @private2, @local, {[@hopopts={0x87}, @routing={0x2, 0x0, 0x1, 0x9}], {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0x4, 0x0, @val=0x80}}}}}}}}, 0x0)

4m21.32121945s ago: executing program 1 (id=3838):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0x3e57}, {0x6}]}, 0x10)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)='U\x00\x00\x00', 0x4}], 0x1}, 0x0)

4m21.320936998s ago: executing program 1 (id=3839):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1d000, 0x0)
pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='./file0/../file0/../file0\x00')

4m21.250546017s ago: executing program 1 (id=3841):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x2, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000000c0)=[{0x3, 0x0, [0x2da73876, 0x7ffc, 0x6, 0x800, 0xf, 0x6, 0x2, 0x2, 0x0, 0x1, 0x8, 0x10000, 0x4a66, 0x80000001, 0xff, 0xfffffffe]}, {0x20, 0x0, [0x800, 0x7, 0x9bb5, 0x5922, 0x8, 0xb9be, 0xd19, 0x5, 0x6, 0xe5b, 0x7, 0x81, 0x7, 0xe0d6, 0x6, 0x3]}], r1, 0x1, 0x1, 0xfff1}}, 0x20)

4m20.972318174s ago: executing program 1 (id=3843):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x3a, 0x5, 0x0, 0x8, 0x27, 0x2, 0x5, 0x1, 0x57, 0x48, 0xfffffffe, 0x2, 0x8008, 0xff, 0x9a, 0x45, [0x4]}})

4m20.908424702s ago: executing program 35 (id=3843):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x3a, 0x5, 0x0, 0x8, 0x27, 0x2, 0x5, 0x1, 0x57, 0x48, 0xfffffffe, 0x2, 0x8008, 0xff, 0x9a, 0x45, [0x4]}})

3m40.836127564s ago: executing program 5 (id=4444):
r0 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil)
mlockall(0x7)
shmat(r0, &(0x7f0000000000/0x3000)=nil, 0x4000)

3m40.77111113s ago: executing program 5 (id=4446):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000240)={[{@grpjquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$eJzs3c9rXNUeAPDvzDRpkua9/niPR9sHr4U+6HtKM/mBNFEXulIXBbHgRqHGZBprJpmQmdQmdJHqrgsXoiiIC/f+BW7syiKIa92LC6lojaCCMHLvzKT5NXXQNAO5nw/czrn33M73nAzfw51z750bQGadTv7JRQxGxBcRcbixunmH042XtbvXp5IlF/X6xe9z6X7JemvX1v87FBGrEdEXEc89FfFybnvc6vLK7GS5XFpsrhdrcwvF6vLKuStzkzOlmdL8yPj5iYnx4bHRiV3r6803X7154eNnej/6+Y07t9/69JOkWYPNuo392E2NrvfE0Q3bDkTE4w8iWBcUmv3p73ZD+FOSz+8fEXEmzf/DUUg/TSAL6vV6/bf6wXbVq3Vg38qnx8C5/FBENMr5/NBQ4xj+nzGQL1eqtYcvV5bmpxvHykeiJ3/5Srk03PyucCR6csn6SFq+tz66ZX0sIj0GfrvQn64PTVXK03s71AFbHNqS/z8VGvkPZISv/JBd8h+yS/5Ddsl/yC75D9kl/yG75D9kl/yH7JL/kF3yH7JL/kMmPXvhQrLUW/e/T19dXpqtXD03XarODs0tTQ1NVRYXhmYqlZn0np25P3q/cqWyMPJILF0r1krVWrG6vHJprrI0X7uU3td/qdSzJ70COnH01K2vchGx+mh/uiR6m3VyFfa3ej0X3b4HGeiOQrcHIKBrTP1BdvmOD+zwE72b9LWrWNj9tgB7I9/tBgBdc/aE83+QVeb/IbvM/0N2OcYHzP9D9pj/h+wabPP8r79teHbXcET8PSK+LPQcbD3rC9gP8t/mmsf/Zw//d3BrbW/ul/QUQW9EvPb+xXevTdZqiyPJ9h/Wt9fea24f7Ub7gU618rSVxwBAdq3dvT7VWvYy7ndPNi5C2B7/QHNusi89Rzmwltt0rUJul65dWL0REcd3ip9rPu+8ceZjYK2wLf6x5muu8RZpew+kz03fm/gnNsT/z4b4J//yXwWy4VYy/gzvlH/5NKdjPf82jz+Du3TtRPvxL78+/hXajH+nOozxygevf9M2/o2IkzvGb8XrS2NtjZ+07WyH8e+8+Py/2tXVP2y8z07xW5JSsTa3UKwur5xLf0dupjQ/Mn5+YmJ8eGx0opjOURdbM9XbPXb889v36/9Am/jt+v9Es03/77D/v/77sxdO3yf+/87s/PkfaxM/0R8RD3UY/8fRr19qV5fEn27T//x94ifbxjqMX33n6YMd7goA7IHq8srsZLlcWlRQUFBYL3R7ZAIetHtJ3+2WAAAAAAAAAAAAAJ3ai8uJu91HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID94PcAAAD//5j81ps=")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000003c0)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6(0xa, 0x2, 0x0)
mount(0x0, 0x0, 0x0, 0x66005, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x268, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x600, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360)
r4 = socket(0x10, 0x2, 0x0)
write(r4, &(0x7f0000000480)="1c0000001a009b8a140000003b00"/28, 0x1c)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{}]}, 0x82, 0x499, &(0x7f0000000840)="$eJzs3M1vVFUfAODfvf3gffmsigpItEqMjR8tLags3Gg0cYFRowvUVW0LIRRqaE0sIVCNwY2JIdG1ujTxL3DnxqgrExNXujckRNmAxsWYe+demE47dFqnM4V5nmSYc+acO+ecOffMPfccpgF0rcHsnyRia0T8GhE7qtHFGQarT9eunJ3468rZiSQqldf+SPJ8V6+cnSizlsdtKSJDaUT6YVIUstjs/JkT49PTU6eL+MjcyXdGZufPPHH85PixqWNTp8YOHTp4YPTpp8aebEk7s3Zd3XNuZu/uF9+4+NLEkYtv//B1Vt+tRXptO9akf+lLg1nD/6zk6tMejv//p+I2mm014aS3gxVhVXoiIuuuvmz8VyqV8zVpO+KFD1Y4fMs6Vw9YR9m1adMyrxfXxYVKQ8lNU4FbQRKdrgHQGeX1Prv/LR9tnH503OVnqzdAWbuvFY9qSm+kRZ6+uvvbVhqMiCMLf3+ePaIV6xAAACv4eOKzw/H4cvO/NO6pybe92EMZiIg7IuLOiLgrInZGxN0Red57I2JXM4XWbBDUbw0tnf+kl+qytHR3IZv/PVPsbS2e/5WzvxjoKWLb8vb3JUePT0/tLz6ToejblMVHb1LGt8///EmjtNr5X/bIyi/ngkU9LvXWLdBNjs+N55PSFrj8fsSe3vinUqnUtT+5/kEnEbE7Ivas7q23l4Hjj361t1Gmldu/5O1uaMGZUPky4pFq/y9EXftLydL9yf5tN/YnR/4X01P7R8qzYqkff7rwSqPym2//+sj6f/Pi879I+WK+CAy8VbtfOxsNdi63Nizjwm8fNbynWev535+8nn8flduu743PzZ0ejehPDufxRa+P3Ti2jJf5s/YP7ctSyvaXR6b5d1wU/X9fROwt9svuj4gHiro/GBEPRcS+hq2P+P65xmkbof8na/o/ifrzf9e56nPZ//OrDvSc+O6bRuU31/8H89BQ8Ur+/beCZiu49k8OAAAAbh1pvnKTpMPXw2k6PFz9j707Y3M6PTM799jRmXdPTVZXeAaiLy1XunbUrIeOJgvFO1bjY8VacZl+oFg3/rQn8vjwxMz0ZIfbDt1uS4Pxn/m9p9O1A9bdcvtoY8v8oA24/dSP/3Rx9PzL7awM0FZ+rw3da4Xxn7arHkD7uf5D91pu/J+vi9sLgNuT6z90L+MfupfxD92rbvz3xC+dqgnQRmv4Ob/Ahgm8OryaozZFK0uPdIN8CE0Emv97EOsdeHNjVKOJQKe/mQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFrj3wAAAP//dNXrDA==")

3m39.612153745s ago: executing program 5 (id=4450):
preadv(0xffffffffffffffff, 0x0, 0x0, 0x8000000000000000, 0x0)

3m39.331869403s ago: executing program 5 (id=4453):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {}, {@nomblk_io_submit}, {@data_err_ignore}, {@nomblk_io_submit}]}, 0xfe, 0x47c, &(0x7f0000000540)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1a42028, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x1000000, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]})

3m39.194111051s ago: executing program 5 (id=4458):
r0 = userfaultfd(0x1)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa09, 0x0)

3m38.048700189s ago: executing program 5 (id=4469):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000008c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)

3m37.706741758s ago: executing program 36 (id=4469):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000008c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)

3m8.297388577s ago: executing program 6 (id=4903):
getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000280)={'filter\x00', 0x0, 0x3, 0x80, [0x0, 0x2, 0x8, 0x4, 0x9, 0x7fffffff], 0x0, 0x0, &(0x7f0000000080)=""/128}, 0x0)
r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5)
r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x1c0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0xc}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r2, 0x58, &(0x7f00000002c0)}, 0x10)

3m8.219453067s ago: executing program 6 (id=4905):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @broadcast}}, 0x14)

3m8.170783698s ago: executing program 6 (id=4906):
socket$inet6(0xa, 0x2, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2)
r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x2a, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r4=>0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48)

3m7.58539923s ago: executing program 6 (id=4919):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x5, 0x559a, &(0x7f0000005680)="$eJzs3X2QVWUdB/Bzd1lYZGI3BMGBFShfQEIhpVRS7kBBuDJtkjU2GQtioaAwzBI1ii04WLgam1kz5QxCiwjDUmszGmXlygyQk9PWjIPIgjLThjG9SMXEFjU2e+99Lveey+5eyVxfPh9m99zn/s7znOeeOX/c72WfcyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACIoujgjtr/rB1ZV75+06hFt199cPSq0RNWVDWdHHWg+rzdl/absWjovuntdw6b0bH6SPX65tsu6IyiRKpfItN/3vSPX/+FufPmlIcBaz+Z3lZWdnfIdNfD6Ub/vCe7+uX/zI+iqCw2QGlmu7s0p52IHyBaXjhgj8pmbVsycEGyduvmp+ouX7J1XOFLp0t5X0+gr2Suq45T11Iy9bsktke2nXPpJfIu0XT/+AX3prwIAOB1mVST2mTfjmbe4mbb9fF6rJ2MtRtj7fAOoTG3cSbS4/bvbp5j4vU+mmcyHRUGdDvPWD1z/rPtmnj/WDsWNV7HPPN3zUSa8u7muSxW76t5AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALyVvFa3Ys34z714sOyX549bvfLk4WvLL3zoq/8uWXrzS68dqlnzl7ah+6a33zlsRsfqI9Xrm2+7oDOKKlP9EunuiWknXr1kYvWcUeuf+N7ETc+OP16aGTds++XsHO0PD66siKIFOZWOMOzRwVFUk19INaPvFhZuTT2YHQoAAAC8k5yb+l2SbafjYFleO5FKk4nUvyAdFstmbVsycEGyduvmp+ouX7J13JmPV9PNeMnTjpdtV576SeQE4xB/4+OdqoddlxeM07P4iPE8P+X5l1+oGHHtT5+pOu+mlde/NPKax9tmfnP48UX7K+8YtGrc2CsK8n9lz/k/nDn5HwAAgP+F/B8fp2e95f/PzK+75Y5HvnJszD2HVw66+8H9G4eVH7nplsn7/jj8hosvvqz2xoL8PybvkAX5P8w45P+S6MzyPwAAALyV/b/zf7JgnJ71lv/bhzff/MB7Di2sbOt4evtlK/b0X3j1RUMOPHTR3In3XjdozPkNBfl/UnH5v1/utMOTz4UJL66IoknFn1QAAAAgT/h/91MfLYS8nv7kIJ7XW+dtGd3y6swvTxj78KH6P1Vtnvj5jUMe37lh5jd2PXf3/RPbzi7I/8ni8n/Zm/NyAQAAgCI0HTpnxNBPJ38e3X/01vnf/+yuR+9b+sWrLtnbOWvC2l9UP72jviD/1xSX/wf0zcsBAAAATuPE+GsW/mPnkd9e1/yJ+5qO/v5Lq0p/NaNp9/62hqZ/bh81e/XkgvxfW1z+Pyuzzax8SHfaE/4K4VsVUVTe9WBZurA3apyWLQAAAABvkJDT75ryfMm9A6edu2Xub06Me+KFPZ/aN3vxhnPWTGp69n2tiz9y4WMF+X9Zz/f/D3c6COv/8+7/V7D+P6eQvuvfVDcGAAAA4N2ocD1/uD1++psLuvv+/WLX///w6xv+mqiqf/ID8342q/P9zT/Z2zr1wZNVf5hz/OGW5MgnL32xIP/XF5f/S3O3b+T3/wEAAMAZeLt9/9+NBeP0rLf7/7c980j1o1d+6GtXza2buuN3H77iz68Mn9qwPXpl+UfbFx342K5fF+T/xuLyf9gOyn15reH83FMRRSO6HmTuJrgtTHdxrNBSllNIn/hYj7mhR6bQMiCnkLIs1uODFVE0tutBfazw3lBojBWODc4UNsYKbaGQuR6yhR/ECq3hSvvO4Mx044Ufh0JmgUVLWEExKLskItbj79316Cqctkd79uAAAADvKiE8Z7JsWX4zikfZlkRvO5zV2w4lve1Q2tsO/WI7xHfs7vmoNr8Qnv/Rt294ecBdD2yom7Jl04KqhrPX/euxyZNuX7Z2Z93SziF/W7euIP9vLC7/h1PRP73pbv1/FNb/Z77XMLv+vzYUKmOFllCoid8xoCYcIx12G8IxKmsyPY6NyBYAAADgHS18LlDax/MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/7J373FW1nXiwL8zzIUZhplRMS+RISaKwTCMKYaZID/TnwQOq6WFJgSDjgxCXEzQTUTd1VzB2+ZtE0jdtIwoNbVUeGnekspLsKl5SfHSK41lS5Js133NnPM9nPOcOc5BQBn3/f5jzvecz/f6nMuc7/M85/sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/N2z85GVfeHmfj/xg3cKBi1eP+krfI4cMn3DMNTceu/jhb0/e777f//8+aw575sydR60955XRi245de+3QmjuKFeSKl5y6F/XNQwePabvotuvGbz0kYF/qUjXm46HXu1/StN3zoutru0dwh0lIZQlA4NrUoHy9P2aWF/fmhB2CJsCmRIt1akSyYbDA1UhLAmbApmq7qoKoSYrcOwT9624uD1xRVUIe4cQKpNtPFuZaqMqGRhQkQpUJwPTy1KBv76TkgncWZoKwBaLb4bMi355c26G+s7LFXj9lW+1jn2wksPrERP1hfO9MXIbdypLRfKB5i162vKqY5vIe3us9G7rBu+2vO18iact+4tU+hvKO5tClaF0csuUiXPaZsdHSkNDQ49CNW2j5/np9WdN2px0t3kdxg7Ub5XX4aoLe49d/OhRw2+tG35Dn0ELN25pNwtt3m2tMqRfc93meYxG+DzpBm+/vG9J/XzpCiHsf9v42798wcs3L7h87K4HPbHTsDc+u/vdLT+75YTxxx++fsVXf//jvPl//bvP/+PLOd6W5uSOrb5dm5qbx0dqYmJdbWpuDgAAAN1Gd9hr+srq/5722X3HDX185OrqW2+659SL7/v8tT9r3a/t4bE77fj8vvN+lDf/71fc8f94yL8me7QrQxjRkTi3LoRdOx5PBW6O3flqXQh7dqSacwMjE4GVIezWkRiYqSpRomcs0S8ReLU2HRiRCDwYA82JwI0xcEkicF4MLE8EJsXAykTgsBgIrbnj2K82PY6iA1UxMCG1EZfHsxD+XBtbS2yrZzJVAQAAbCXp2WF57t2scx22NEOcXi6v6ipDPAO7YIbKRA3JGWxmWlWwhrKuaijtqobMuOe/+/Dzai7pqua80zBKcjNcWXXLpT8aNumNu2e8tOG0Iz7x2quP1S/96afXXfPGU9Mr79/j8ofz5v+N7z7/r+ykIyV5x/9DGNfxN+YuTUfaMvEJzTkZAAAAgC3w1sADvvydsq/NfeH3jwz75K+vfez1lQ9/dO8zb1v7/Bk/+NZ3au4fnTf/H1Hc+f9xn0iPrMxhVdwNMbUuhMbcQKrag/MDqaPevdIBAAAA6A4yx+Mzx8Jb07epU7ST8+n8/M2bmT8e+B/Raf7131p2/Y6feGT2Q7W3zXhqw+NfWTl64bEz3xh05dmP7HvoQU+N/Gze/L+5uPP/q3NvU514MPbi8roQemYFHoq9bA906BcDLxyaG0iP/8G4AS6KVaVPTMhUdVEsMSEGGhOBJYVKPJYpsWtuIP1kZRo/NzOO1nSJrAAAAAC87+LugHhcPp7/v2LBXZf9x41/umzVgUtnnzz98de+V1H5zknL7zyxzwX39li008hJefP/CZt3/n/HPDjv9P62XiEMKQuhR/KHAauqUwsDxkBNSTpxT3Wqrh7JqhZUh3Bw+8CSVb2YXv+/LLnG4JNVqapiYNf+N60f0J64oSqEIdmBNeOXHtCemJMIZBr/YlUIH28fbbLxn/RMNV6ebPyqniHskRXIVDWpZwjtjVUkq7q/Mn0dg2RVyytD2CkrkKlqWGUIcwMA3VX8Xzo5+8FZc+dNndjW1jJzGybiTvyqMKW1raVh0vS2yZUF+jQ50eecdYzOyR9TsZe++V16jaLVx0ytKyad+aFgY3Zb6R35eWcOpu/HL0PlHeNsKs+5u39yyPvuld9EyPoqVWjIpdt4yNXZlWx6EvPqj/krQq/Qc86slpkNZ0ycPXvm0NTfYrM3pf7G40ypbTU0ua2qO+tbES+PgstlJbzXbTUgu5Ihs6fNGDJr7rzBrdMmntxycstpwz7VNKxp6P5NjUPaB5X+28VIB3RWc2Kk7ywtclhbcaS7l2VV8n58aEhISHS3xE2Xj39m0UcXV3538UmXPHH++WefcvrOt1057ft9p48fdOXnlkz9et78f8a7z//jp0784E+vz1Do+H99PMyfenzTYf4JMbCk2OP/9YWO5mdODOiXCMyPgfkO8wMAAPDhEHdHxr2Zcad07SvfOP1/Tjii9NA/HP2LpqGDdrnw1qkDbnx94+kf23vekmvLKvKv/ze/uN//b6X1/zNL1x9VaJn/gbFEY6H1/5PL/GfW/59faP3/5DL/mfX/l3wA6//PyQQSm+TP1v8HAAA+DN6/9f+7XN4/eYGAvAxdLu+fvEBAXoYul/Ev9gIBm73+/89/XrbDx47YrW/ZF56YuNedB/7mpGkP7vKjUVev+3RT/TfPWPPzZXnz/0uKm/9buB8AAAC2Hyfs+6UBC14a8vVzpj/ww8Ezdn7purOfH3HPL4/75MYxfddVr+v76bz5/5Li5v/v//p/odD5//0KBZoLLQxo/T8AAAC6qULr//3t42d987p+O24Y1O/M29+6emrJ8L2fO/XXbRc9NOrwj435xyWTrs2b/y8vbv4fT7sozckde/N2bWpNu5Bc025dbeYnAwAAANA9lIaGhvIi8+YsjDryvbf5dHop0HdLZ9vtE6vWnHvvdX8fcvP5C9Ydf3rtQUf+oeyQOydf99KCU/boX/Pc2rz5/8ri5v85v8tYdWHvsYsfPWr427fWDb+hz6CFGzcd/wcAAAC2nWL3SwAAAAAAAAAAAAAAAB+8Y1b95Kz/+uWY4+4cNu/qR3d+/OT//PqsM1on/aLtiHUHPLv0hk/tk/f7/zCuo1yh3//H6/7F3xf0yckdW+16/b/0/WNHL5vbsWThqtoQ9soOTF0wdYeQvjb/PtmBFScO3KU9sSBZ4u7nDnu5PXFSMnDk4B03tCc+kwhMiIsk7pYMxKsqbuidCMTlFZ9MBuL2WJ4MVKQDF/ZOjaMkua3+UJPaViXJbfV0TQh1WYHMtrqjJtVGSXKAVyQCmQF+LRmIAxybDpQme7WsV6pXMVATiy7uleoVAADbrfgtsDxMaW1raYxf4ePt7mW5t1HOkmXn5FdbUmTzv0svTbb6mKl1xaR7JL+LbrrWeHmobB/C0Lyvq9lZSjpGuXVq6WLT9Skw5K5WeystUC5pczddReERVaVG1DBpetvk8i4Hvn/XWZrKuswyNG+yk52ltGOTFlFLEX0pYkRFbpsiuhzvl4aGhh6JXMNjsD7k6OoVUezv9bPX+Sv0KsjOs3zUQQOOW/bcgRMWPXnQtKnhI5e9M2Li5FmHXPHiU0vnjxw0oUfe/L++uPl/Zfa4NqQvBjA/Xlnv4LoQJhQ5IgAAAPjwO+W05y674P5LX32hecDL04dcuuK3c6+aV1Z783mHP3336W+OX3jSlsYHDHtj6Kl3/ebcjU2jHrqy99X3X7PTkXU//H/Vvea+tWLQmy/cvVfe/L9fcfP/uAcrfSg4tbdjZbz+/7l1IXRcWr8+Fbg5DverdSHs2ZFqjiVSF9Q/KpZoTAVujjtMBsYSE5pzq+oZA8sTgVdr04GVicCDMZDeS3FTSO/KubQ2hAM6UuNyS8yIJeoTgaNjoF8i0BADjYlA7xgYkQi83jsdaE4EHo2B0Jq7rW7tnd5WAAAAmyM9zyrPvRuS87zlZV1lKOkqQ3VXGUq7ylDZVYZCo4j3fxwzlCdOXinJylSerLUqUUtehngx/M3uV16G8FhuzmTBvKbj+QeZ8w1KcjNccWbF9Dc/33/R8UPGrB/ftPhzc38a/uHtOW9d8OYvz6977pqNJXnz/8bi5v/Vubep1h+M8/9N1/9LBR6K3bs8njreLwZeODQ3kN4x8GCc7F6Uqao5XSI9ab8olhgRA/0SgRkxMCIRmDAuHViyS24gPdPONH5upvHWdImsAAAAALzv4g6CuJsmzv+fXTv+iWnjf3vQZX1nLzx/+VFffvrXx736i3t73v3d/osebitZuzpv/j+iuPl/bK9XdmPnxd6s7R3CHSWbepMJDK5JBeJ+jJr48/i+NSHskLWDI1OipTpVoiLRcHigKvUL9YpkVXdVpdYYiPePfeK+FRe3J66oCmHvrL0vmTaerUy1UZUMDKhIBaqTgellqUDc85MJ3FmaCsAWy+wVjC+o9KkuGfWdlyvw+vuwXBM0Oby8faCd5OvsN1fbSmXygfQ+1YzNe9ryqmObyHt7rPRu647vtnrvtuwvUulvKO9sClWG0sktUybOaZsdH8n+JWuebfQ8Z/9KtZj0Vngdzn/vve1aZbIDjYmPj8bOy3X+OiyJ1a26sPfYxY8eNfzWuuE39Bm0cGPR3Sgg/lB45rCr6rM377ZWGdKvuW73edLs86Q7/hvo52kLIYy7d+xFjYfcuHDSiP7X73xH7fDLvzT4lkMbnx1XM2eXw8e89sV5efP/5uLm/2WJ2w4b48acVRfCvlkbd1Xc/KPqUp+DWYHUp+RO+YHUIfeXagt+cgIAAMDWltndkdlf0Jq+TZ0Qnpwn5+dv3sz8cX/FiE7zF9vv/lecsnL0hAN/23f8XoccvM9Zdy04er+/Tbz+tT9Wj5z0wPd+tfr6vPn/hHef//dMdNPxf8f/2UYc/+/U9r4rumfygflbtCs6rzq2Ccf/O7W9v9sc/++U4/+O/3fG8f8uOP7fqe39acv7ljTDl64Qwr9f/vm/vX3Pbv02LC393pQH5vU//rLvL1r2k52f+efH/mn69H33/FXe/H9GcfN/6/91vmhfZv2/CYXW/5tRaP2/+db/AwAAtqkCC80l53l5q/flZUiu3peXocsFArtcYtD6f5u9/t+L/3Lpgr2mjv3GiWc9dnDvR+tHrRkz6O8nvbrnmuuevHLoIyf8/dt58//5xc3/48uhV3br3WX9v37jClR1SQzMsDAgAAAA26NCOwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4YJ31xynnjVjw+J+ap39l/fLx32nd8fGHprzefMQPRy87es0pu5xyb581hz1z5s6j1p7zyuhFt5y691shtHaUK0kVLzn0r+saBo8e03fR7dcMXvrIwL9UpustT99+NCd3bPXt2hCWZD1SExPratvvbAocO3rZ3LL2xKraEPbKDkxdMHWH9sSNtSHskx1YceLAXdoTC5Il7n7usJfbEyclA0cO3nFDe+Iz6UBJsrv/1jvV3ZJkdy/uHUJdViDT3VN751aVaeOIdKA02cZ3a1JtxEBNLHpVTaqNGGiLJVp7hjCkLIQeyaoeqUxV1SNZ1U8rU1X1SFZ1dmUIB4cQypJVPV+RqqosOfLHKlJVxcCu/W9aP6A9sbQihCHZgTXjlx7QnpiZCGQaP6YihI+3v2SSjd9anmq8PNn4v5aHsEcIoSJZ4s2yVImKZIkXy0LYKSuwaSOWhTA38OEQP30mZz84a+68qRPb2lpmbsNERbqtqjClta2lYdL0tsmViT4VUpKVfuec9z72360/a1L77epjptYVky5Llyvv6HJTec7d/bf33sd+VWdXsun5yKs/5q8IvULPObNaZjacMXH27JlDU3+Lzd6U+tsjHU1tq6HdZVsNyK5kyOxpM4bMmjtvcOu0iSe3nNxy2rBPNQ1rGrp/U+OQ9kGl/26NkS59/0e6e1lWJe/H+19CQqK7JUpzPt0at/fP8bwv+ps6Wh4qOz6g86YV2VlKOka5NQY98j2O+L18TelyREPzJg55WZq6zrJ/3mRiU5aqVJaOr3V5k8Psmko7Nmm8XxoaGnoU2g71uXezN+8bW7B5n05vumLTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwv+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwLAAAAAAgzN86jJ4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAD//+GI8JI=")
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000000)={0x5, 0x0, 0x4000000000000004, 0x2, 0xfffffffffffffffb, 0x7, 0xfffffffffffffffa, 0x2002}, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78})

3m6.663654782s ago: executing program 6 (id=4937):
r0 = socket$inet(0x2, 0x3, 0x1)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x10, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000100)='<\v', 0x2}], 0x1, &(0x7f0000000040)=ANY=[], 0x7}, 0x20008a10)

3m5.719829735s ago: executing program 6 (id=4953):
syz_mount_image$nilfs2(&(0x7f0000000380), &(0x7f0000000a40)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00'], 0xf, 0xa02, &(0x7f0000001ec0)="$eJzs3U9sXEcdAOB5a68d16mzhgKmoYmBAqmgTrCtKrmkMZRrpN7KsQppiHBTlHBpVakpUsUNRap67IGqh1wQFeLSA1JEVUQvQZQ7CoVKVVGgFQipoNYo9sx6d+zH/rG99vp9n/Tz+L2ZfTPPu943fp6dCUBl1Va/Li7OFCG89PqLj/zkD698twghHG2WaLSUW9uqhxCKtsevuxUzPv7w2XObpUWYX/2atsPZ283HToYQrobZcCM0wsL7j829ubT08vWbj16efuH02zt0+gAAUCln3/jH7x94761vTP/nF0fOhPHm/tQ/b8TtydjvPxH793n/v2hJi5btZCwrNxIj//thJCs3mtUzWlJfPTtOvaTcWIf6Rlr2bXaeALAfrN/XK2pzbdu12tzc2nX/jlvjY8XcpYvLT1zZpYYCANvmXw+HEM4IIYQQokqxcmi3eyAAQNXl44U3uJqPLNia5tEOdFf/7aXa5o+HbTDo17/6h6v+V5/3jsP22a+vpnRe6fcojWPIxxGOZI/r9fe/lh1ntMd2lo0rHJbxhmXtzH+ue1VZ+3t9HndLWfvz8bB7VVn783G6e1VZ+8cH3I5+lbX/wIDb0a+y9k80v9uvV7jtcd/q1/V3iyNZfuv1M39PH5b3eACg3UfG/wkhhBCVi+d2uwMCAOw5+fw4K1HKz+fjyfPzeXjy/HxeoDx/vEP+gQ75AMBGC7+68PNrxfr/+bc6Hi6Nu7grppM9ticfrdFr/Vsd97TV+odl3BIA1fbUTxe/89aZpZG1+X/Xr2WfZPP/prl6r8XtNO7yYLbdnPt3tr2eWkm5gztxUgDA/5Wuv2Xz/94dt2dCvXji4vL5E3F7Kqa/G6+P39n/zQG3GwDoX7fz/8+E9vn/Dzb312ut/YJD6/uL1n5BI9s/X7J/IW5Px/T74xOr++fOPbX8ve0+eQCoqDe+dfC1D357Kazd/1///3e6/59u4zfiWLsPYoHUT0j3Bzbc/z/WXs9UWbkT7eUOlZU72V6ukZWrx8jn3cjHB05kj0vjFNK4h9TfSeMap8vak02QMZaVG41xd9aeqaw9G873RHt78nloUv2NbH8+7iGVmw4AsNGVp5/5wePLy+cv+8Y3vqngN8+FEDbL2u13JmCnHf/Rkz88fuXpZx68+OTjF85fOH9pYXH+1KmHFucXHzq+el//eOvdfQBgP1jv9O92SwAAAAAAAAAAAAAAgDKD+KTxbp8jANDu7w+HEM6ILEb2QBuEECk+2gNtEGKfxcpKvuIvAMBg9bre/lY1jxbn80/rHqT04IN/nL4Tqdjtpfb+kvWL2U6Dfv2rf7jqf/X57a2/ub5I1+9/tfYDzPZX761fnjzZWv+9o13Wn5//sf7q/3NW/9dCd/Wv/Cyrv8+pcd/J6r+ry/o3nP/J/ur/S6z/nrh97Mvd1t/+/Kf1dtJyOBPZ+UyW1P/Xevv5p7X9ej7/Az2cdIt34/kDQBXVdrsBOyT1ElI/OvVDWtfnCy3r7IWsfLf9/1p2nHy9vn6l46Z+0BfjdurupHUD8/UOe21/Wp9wKjtu0WW/tuz1Myz/VSpr/3Y9jzutrP35epB7VVn7xwbcjn6VtT//vdyrytrf559VA1fW/okBt2NYHY5p2fUwXX+mYl7abmTbk5s8F/u1bwEAw+7bp2/ef+3rozfy9fnTdT39GTgZ/6a+npXL+wsTWd+xyMp/KaY/jukrMf1NTN/Jjrez/20DgGp6z+f/hBBCiMpF1T//5/4CVVb113/Vz7/a7/6e/07S6yO/j5+Mdsivt+SPbJI/1uHx41l+/nwd6JB/T3bclSjlf6ZD/mc75H+uQ/5Mh/xDHfLv7ZB/uEP+FzrkH+mQf7RDPgDD6fMx9f4OANWRj/tz/QeA/S9NrOP6DwDV8amYll3/7+uQDwAMn0/H1PUdACqk2Hymx63O2wMMjzS/dPo9j8uBhPtj+pWYfjWmab2UPpdfAfaA//7713+7VqzP93c4y+92Pvmi1v7Ju3z9nwe6bE/++b1e57NvdFnPTtU/vcX6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABis2urXxcWZIoSXXn/xkX+e+tO7RQjhaLNEo6Xc2la9ZXu27TghvFaspR9/+Oy51vSTmBZhPhShaO4PZ283a5oMIVwNs+FGaISF9x+be3Np6eXrNx+9PP3C6bd38EcAAAAA+97/AgAA//87+jkE")
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a5a438, &(0x7f0000005580)=ANY=[], 0xd, 0x0, &(0x7f0000000000))
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x20000, 0x0, 0x0, 0x0, &(0x7f0000000100))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000640)={{0x0, 0x0, 0x40, 0xd, 0xe2}, {0x0, 0x0, 0x10, 0x20c, 0xfffffffffffffff8}, {0x0, 0x0, 0x8, 0x1, 0x2}, {0x0, 0x0, 0x28, 0x0, 0xffffffffffffff2d}, {&(0x7f00000003c0)=[0x9], 0x1, 0x8, 0x98f, 0xffff}})

3m5.401616233s ago: executing program 37 (id=4953):
syz_mount_image$nilfs2(&(0x7f0000000380), &(0x7f0000000a40)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00'], 0xf, 0xa02, &(0x7f0000001ec0)="$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")
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a5a438, &(0x7f0000005580)=ANY=[], 0xd, 0x0, &(0x7f0000000000))
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x20000, 0x0, 0x0, 0x0, &(0x7f0000000100))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000640)={{0x0, 0x0, 0x40, 0xd, 0xe2}, {0x0, 0x0, 0x10, 0x20c, 0xfffffffffffffff8}, {0x0, 0x0, 0x8, 0x1, 0x2}, {0x0, 0x0, 0x28, 0x0, 0xffffffffffffff2d}, {&(0x7f00000003c0)=[0x9], 0x1, 0x8, 0x98f, 0xffff}})

3.249152928s ago: executing program 8 (id=8080):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x3, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x1, 0x2}, {}, {0x0, 0x2}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x5}}]}, {0x0, [0x2e]}}, &(0x7f0000000000)=""/9, 0x57, 0x9, 0x1}, 0x20)

3.095476403s ago: executing program 8 (id=8083):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e20, 0x2, @empty, 0x400}}, 0x0, 0x81}, &(0x7f00000000c0)=0x90)

2.925131113s ago: executing program 8 (id=8086):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={0x0, 0xfffff362, 0x20}, &(0x7f0000000140)=0xc)

2.009990498s ago: executing program 8 (id=8112):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040))
r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000080)={0x1, 0x0, 0xff7f5f11, 0xfffd, 0xfffffffffffffffb, 0x8001, 0xfffffffffffffffa, 0x1fe, 0x4a, 0x28, 0x4, 0x2})
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r2, 0xc0984124, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})

1.220845035s ago: executing program 7 (id=8123):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x11, 0x0, 0x0)

1.220548381s ago: executing program 7 (id=8124):
r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000005600)='./file0\x00', 0x4492, &(0x7f0000002400)={[{@ssd}, {@nossd}, {@nodiscard}, {@noacl}, {@nobarrier}, {@compress_algo={'compress', 0x3d, 'no'}}]}, 0x0, 0x559e, &(0x7f0000005680)="$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")
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000002440)={{}, 0x0, 0x4, @inherit={0x48, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x20000000000000, {0x0, 0x1ff, 0x8000000000, 0x7fffffff, 0x13}}}, @devid})

1.090739755s ago: executing program 8 (id=8125):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4004, &(0x7f00000002c0)={[{@noblock_validity}, {@usrjquota, 0x22}, {@oldalloc}, {@noload}, {@data_err_ignore}, {@grpjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@jqfmt_vfsv1}]}, 0xff, 0x464, &(0x7f00000004c0)="$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")
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
r1 = fspick(r0, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0)

569.812388ms ago: executing program 0 (id=8126):
socketpair$tipc(0x1e, 0x5, 0x0, 0x0)
recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x2)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x20000023896)
syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0), 0x1, 0x5a3, &(0x7f00000002c0)="$eJzs3T1sG3UbAPDnznHTj7xv+krvK72gDhUgFamqk/QDClO7IipV6oDEApHjRlWcuIodaKJIpHuF6IAAdSkbDIwgBgbEwsjKwseMVNEIpKYDGDk+p2nqFCfEMcS/n3TJ/3939vP8fX7OvtOdHEDfOtr4k0Y8EREXk4jhdcsGIlt4tLneyvJi8f7yYjGJev3Sz0kkEXFvebHYWj/J/h+KiKWI+H9EfJWPOJ6uPeW+VqM6vzA1Xi6XZrP+SG366kh1fuHElenxydJkaebU8y+cOXv6zNjJsfXp3q+v7+W3NtYb3998+8Y3L92++fEnR5aK744ncS6GsmXrx7GTmq9JPs5tmH+6G8F6KOl1AmxLLqvzRin9L4Yjl1V9O/X1O4fBXUkP6KL6YER9zbom0AcSRQ99qvU9oHH825p28/vHnfPNA5BG3JXlxeJb0Yo/0Dw3EftXj00O/pI8dGTSON48vJuJsictXY+I0YGBR9//Sfb+277RnUiQrvryfHNDPbr907X9T7TZ/wy1zp3+Ra3930q2/1tpEz+3yf7vYocxfnv1xw82jX99MJ5sGz9Zi5+0iZ9GxOsdxr/1yudnN1tW/zDiWLSP35I8/vzwyOUr5dJo82/bGF8cO/Li5uOPOLhJ/OY52/2riawf/74sp7TD8X/29adPLT0m/rNPP377t3v9D0TEOx3G/8+9j17ebNmd68ndxreArW7/JPJxu8P4z507+l3WdNYQAAAAAAAAAAB2ULp6LVuSFtbaaVooNO/h/W8cTMuVau345crczETzmrfDkU9bV1oNN/tJoz+WXY/b6p/c0D+VywLmDqz2C8VKeaLHYwcAAAAAAAAAAAAAAAAAAIC/i0Mb7v//Nbd6///Gn6sG9qrNf/Ib2OvUP/Svh+s/6VkewO7z+Q99q67+oX+pf+hf6h/6l/qH/tW2/g/sfh7A7vP5D/1L/QMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChMdXvLy8WG/2Jgfm5qcobJyZK1anC9FyxUKzMXi1MViqT5VKhWJn+s+dLKpWrozEzd22kVqrWRqrzC69NV+ZmWr8pWsp3fUQAAAAAAAAAAAAAAAAAAADwzzO0OiVpISLf7KdpoRDxr4g4nERy+Uq5NBoR/46Ib3P5wUZ/rNdJAwAAAAAAAAAAAAAAAAAAwB5TnV+YGi+XS7PdawxkoTp71A+1ruYzsJWVI2JpZ9NoPOOWH5XPXsDubqY+aeQ6fB/2faOHOyUAAAAAAAAAAAAAAAAAAOhTD2767fQRv3c3IQAAAAAAAAAAAAAAAAAAAOhL6U9JRDSmY8PPDG1cui9Zya3+j4g3b11679p4rTY71ph/d21+7f1s/sle5A90qlWnaUQ06hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4oDq/MDVeLpdmt9kY7GCdXo8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDv+CAAA//9bQM66")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x101042, 0x15)
pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
capset(0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x200700, &(0x7f0000000280)={[{@data_err_ignore}, {@prjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@min_batch_time={'min_batch_time', 0x3d, 0x6}}, {@inode_readahead_blks}, {@nodelalloc}, {@debug}]}, 0x1, 0x499, &(0x7f0000000940)="$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")

569.632205ms ago: executing program 7 (id=8127):
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002)
write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37)
ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000080)=0x7)

420.44634ms ago: executing program 0 (id=8128):
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
syz_open_dev$usbfs(0x0, 0xf, 0x240000)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x5)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4}, {0x0, [0x5f, 0x4f]}}, 0x0, 0x1c, 0x0, 0xa}, 0x28)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000000206010800000000000000000100000814000780080012400000000505001500090000000500010006000000050005000a00000005000400000000000900020073797a300000000010000300686173683a69702c6d616300"], 0x5c}, 0x1, 0x0, 0x0, 0xc0d1}, 0x8800)

338.7238ms ago: executing program 0 (id=8129):
r0 = socket$inet(0x2, 0x3, 0x2f)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='xfrm0\x00', 0x10)
sendto$inet(r0, 0x0, 0x0, 0x24008000, &(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
sendto$inet(r0, &(0x7f0000000280)="b684339b", 0x4, 0x4482c, &(0x7f0000000f00)={0x2, 0x4e21, @multicast1}, 0x10)

337.374922ms ago: executing program 8 (id=8130):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x6, 0x7fc00002}]})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8, 0x23})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000140))

260.314617ms ago: executing program 7 (id=8131):
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xe4}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x300}}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0)

160.264005ms ago: executing program 0 (id=8132):
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0xd80, 0x0)
ioctl$RNDZAPENTCNT(r0, 0x5204, 0x0)

159.940708ms ago: executing program 7 (id=8133):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0)
ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f00000000c0)={0x600, 0x32200})

76.835306ms ago: executing program 0 (id=8134):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x20}}}}]}]}, 0x8c}}, 0x0)

292.946µs ago: executing program 0 (id=8135):
r0 = syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}, {@resuid}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@bsdgroups}, {@mb_optimize_scan}]}, 0x2, 0x44a, &(0x7f0000000400)="$eJzs281vFOUfAPDvzLbl9+OtFfEFRK0SY+NLSwsqBy8aTTxgNNEDHuu2EMJCDa2JECLVGLyYGBI9G48m/gXevBj1ZOJV74aEKBfQU83MzsDuslsobHcr+/kkA8+z82yf57vPPDPPzLMbwMAaz/5JIrZGxG8RMVrPNhcYr/939fLZ6t+Xz1aTWFl5688kL3fl8tlqWbR835YiM5FGpJ8kRSXNFk+fOT5bq82fKvJTSyfem1o8febZYydmj84fnT85c/Dggf3TLzw/81xX4sziurL7w4U9u15758Lr1cMX3v3p26y9W4v9jXF0y3gW+F8rudZ9T3S7sj7b1pBOhvrYENakEhFZdw3n4380KnG980bj1Y/72jhgXWXXpk2ddy+vAHexJPrdAqA/ygt9dv9bbj2aemwIl16q3wBlcV8ttvqeoUiLMsMt97fdNB4Rh5f/+SrbYp2eQwAANPqs+uWheKbd/C+N+xvKbS/WUMYi4p6I2BER90bEzoi4LyIv+0BEPLjG+luXhm6c/6QXbyuwW5TN/14s1raa53/l7C/GKkVuWx7/cHLkWG1+X/GZTMTwpiw/vUod37/y6+ed9jXO/7Itq7+cCxbtuDjU8oBubnZpNp+UdsGljyJ2D7WLP7m2EpBExK6I2L22P729TBx76ps9nQrdPP5VdGGdaeXriCfr/b8cLfGXktXXJ6f+F7X5fVPlUXGjn385/2an+u8o/i7I+n9z8/HfWmQsaVyvXVx7Hed//7TjPc3tHv8jydv5+WikeO2D2aWlU9MRI8mhPN/0+sz195b5snwW/8Te9uN/R/GeLP6HIiI7iB+OiEci4tGi7Y9FxOMRsXeV+H98ufO+jdD/c23Pf9eO/5b+X3uicvyH7zrVf2v9fyBPTRSv5Oe/m7jVBt7JZwcAAAD/FWn+HfgknbyWTtPJyfp3+HfG5rS2sLj09JGF90/O1b8rPxbDafmka7Theeh0slz8xXp+pnhWXO7fXzw3/qLy/zw/WV2ozfU5dhh0WzqM/8wflX63Dlh37dbRZkb60BCg51rHf9qcPfdGLxsD9JTfa8Pgusn4T3vVDqD3XP9hcLUb/+da8tYC4O7k+g+Dy/iHwWX8w+Ay/mEg3cnv+iUGORHphmiGxDol+n1mAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6I5/AwAA///K8u7c")
fremovexattr(r0, &(0x7f0000000100)=@random={'user.', 'noauto_da_alloc'})

0s ago: executing program 7 (id=8136):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002300)="57fc", &(0x7f0000002380), 0x3, r0}, 0x38)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x80002, r0}, 0x38)

kernel console output (not intermixed with test programs):

eftover after parsing attributes in process `syz.0.6270'.
[  459.890327][T20941] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6276'.
[  460.046447][T20951] FAULT_INJECTION: forcing a failure.
[  460.046447][T20951] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  460.055877][T20951] CPU: 0 UID: 0 PID: 20951 Comm: syz.8.6281 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  460.055922][T20951] Tainted: [L]=SOFTLOCKUP
[  460.055928][T20951] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  460.055938][T20951] Call Trace:
[  460.055945][T20951]  <TASK>
[  460.055952][T20951]  dump_stack_lvl+0xe8/0x150
[  460.055978][T20951]  should_fail_ex+0x410/0x560
[  460.056005][T20951]  _copy_to_user+0x31/0xb0
[  460.056024][T20951]  put_itimerspec64+0x179/0x1e0
[  460.056042][T20951]  ? __pfx_put_itimerspec64+0x10/0x10
[  460.056081][T20951]  ? _raw_spin_unlock_irq+0x23/0x50
[  460.056098][T20951]  ? _raw_spin_unlock_irq+0x2e/0x50
[  460.056110][T20951]  ? do_timer_settime+0x497/0x4c0
[  460.056131][T20951]  __x64_sys_timer_settime+0x1f4/0x270
[  460.056153][T20951]  ? __pfx___x64_sys_timer_settime+0x10/0x10
[  460.056187][T20951]  do_syscall_64+0x166/0x520
[  460.056202][T20951]  ? trace_irq_disable+0x3b/0x140
[  460.056216][T20951]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  460.056234][T20951]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  460.056248][T20951] RIP: 0033:0x7f4d9e79e1d9
[  460.056262][T20951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  460.056274][T20951] RSP: 002b:00007f4d9f624028 EFLAGS: 00000246 ORIG_RAX: 00000000000000df
[  460.056316][T20951] RAX: ffffffffffffffda RBX: 00007f4d9ea25fa0 RCX: 00007f4d9e79e1d9
[  460.056327][T20951] RDX: 0000200000000040 RSI: 0000000000000001 RDI: 0000000000000001
[  460.056336][T20951] RBP: 00007f4d9e835888 R08: 0000000000000000 R09: 0000000000000000
[  460.056345][T20951] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000
[  460.056354][T20951] R13: 00007f4d9ea26038 R14: 00007f4d9ea25fa0 R15: 00007fff335a45c8
[  460.056377][T20951]  </TASK>
[  461.100969][T20999] vivid-001: disconnect
[  461.104573][T20999] vivid-001: reconnect
[  461.398690][T21015] program syz.8.6311 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  461.878569][T21025] FAULT_INJECTION: forcing a failure.
[  461.878569][T21025] name failslab, interval 1, probability 0, space 0, times 0
[  461.886501][T21025] CPU: 1 UID: 0 PID: 21025 Comm: syz.8.6315 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  461.886547][T21025] Tainted: [L]=SOFTLOCKUP
[  461.886554][T21025] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  461.886562][T21025] Call Trace:
[  461.886569][T21025]  <TASK>
[  461.886575][T21025]  dump_stack_lvl+0xe8/0x150
[  461.886600][T21025]  should_fail_ex+0x410/0x560
[  461.886626][T21025]  should_failslab+0xa8/0x100
[  461.886645][T21025]  __kmalloc_cache_noprof+0xa3/0x600
[  461.886662][T21025]  ? mpi_alloc+0x52/0x140
[  461.886675][T21025]  ? mpi_alloc+0x52/0x140
[  461.886694][T21025]  mpi_alloc+0x52/0x140
[  461.886710][T21025]  rsa_enc+0x94/0x480
[  461.886727][T21025]  ? __virt_addr_valid+0x137/0x390
[  461.886746][T21025]  ? __pfx_rsa_enc+0x10/0x10
[  461.886758][T21025]  ? __virt_addr_valid+0x137/0x390
[  461.886775][T21025]  ? __virt_addr_valid+0x2e8/0x390
[  461.886793][T21025]  ? sg_init_one+0xf5/0x1c0
[  461.886815][T21025]  rsassa_pkcs1_verify+0x52b/0xbb0
[  461.886843][T21025]  ? __pfx_rsassa_pkcs1_verify+0x10/0x10
[  461.886875][T21025]  ? rsassa_pkcs1_set_pub_key+0x13d/0x1a0
[  461.886896][T21025]  public_key_verify_signature+0x79b/0x9e0
[  461.886926][T21025]  ? __pfx_public_key_verify_signature+0x10/0x10
[  461.886957][T21025]  ? asymmetric_key_generate_id+0x60/0x170
[  461.886975][T21025]  ? asymmetric_key_id_same+0x67/0xe0
[  461.886998][T21025]  x509_check_for_self_signed+0x326/0x430
[  461.887015][T21025]  x509_cert_parse+0x622/0x7a0
[  461.887039][T21025]  x509_key_preparse+0x64/0x6d0
[  461.887052][T21025]  ? down_read+0x2be/0x330
[  461.887073][T21025]  asymmetric_key_preparse+0xb9/0x1b0
[  461.887094][T21025]  __key_create_or_update+0x3a9/0xa80
[  461.887117][T21025]  ? __pfx___key_create_or_update+0x10/0x10
[  461.887136][T21025]  ? lookup_user_key+0xb68/0x1150
[  461.887160][T21025]  ? __pfx_lookup_user_key_possessed+0x10/0x10
[  461.887175][T21025]  ? __pfx_keyring_search_iterator+0x10/0x10
[  461.887197][T21025]  key_create_or_update+0x42/0x60
[  461.887223][T21025]  __se_sys_add_key+0x349/0x420
[  461.887244][T21025]  ? __pfx___se_sys_add_key+0x10/0x10
[  461.887301][T21025]  ? __x64_sys_add_key+0x20/0xc0
[  461.887321][T21025]  do_syscall_64+0x166/0x520
[  461.887337][T21025]  ? trace_irq_disable+0x3b/0x140
[  461.887351][T21025]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  461.887369][T21025]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  461.887382][T21025] RIP: 0033:0x7f4d9e79e1d9
[  461.887396][T21025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  461.887407][T21025] RSP: 002b:00007f4d9f624028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[  461.887423][T21025] RAX: ffffffffffffffda RBX: 00007f4d9ea25fa0 RCX: 00007f4d9e79e1d9
[  461.887434][T21025] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000
[  461.887444][T21025] RBP: 00007f4d9e835888 R08: 0000000009c9b7a2 R09: 0000000000000000
[  461.887453][T21025] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000
[  461.887462][T21025] R13: 00007f4d9ea26038 R14: 00007f4d9ea25fa0 R15: 00007fff335a45c8
[  461.887484][T21025]  </TASK>
[  462.116337][ T5594] Bluetooth: hci1: unexpected event for opcode 0x1004
[  462.140980][T21034] netlink: 'syz.8.6319': attribute type 1 has an invalid length.
[  462.141872][T21034] netlink: 'syz.8.6319': attribute type 2 has an invalid length.
[  462.263284][   T33] audit: type=1326 audit(2000000010.590:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21039 comm="syz.8.6322" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4d9e79e1d9 code=0x0
[  463.129404][T21056] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6329'.
[  463.171462][T21059] loop8: detected capacity change from 0 to 512
[  463.172496][T21059] EXT4-fs: Ignoring removed orlov option
[  463.172529][T21059] EXT4-fs: Ignoring removed mblk_io_submit option
[  463.175735][T21059] EXT4-fs (loop8): orphan cleanup on readonly fs
[  463.175750][T21059] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -13
[  463.179933][T21059] EXT4-fs error (device loop8): ext4_clear_blocks:876: inode #13: comm syz.8.6330: attempt to clear invalid blocks 2 len 1
[  463.179956][T21059] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  463.185174][T21059] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  463.188893][T21059] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.6330: invalid indirect mapped block 1819239214 (level 0)
[  463.188918][T21059] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  463.189171][T21059] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.6330: invalid indirect mapped block 1819239214 (level 1)
[  463.189192][T21059] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  463.192689][    C0] EXT4-fs (loop8): error count since last fsck: 4
[  463.192706][    C0] EXT4-fs (loop8): initial error at time 2000000011: ext4_clear_blocks:876: inode 13
[  463.192727][    C0] EXT4-fs (loop8): last error at time 2000000011: ext4_free_branches:1023: inode 13
[  463.195095][T21059] EXT4-fs (loop8): 1 truncate cleaned up
[  463.196511][T21059] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  463.267010][T17759] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  464.015317][T21096] netlink: 40 bytes leftover after parsing attributes in process `syz.8.6345'.
[  464.875208][T21120] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6355'.
[  465.609456][T21157] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6372'.
[  465.614088][T21157] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6372'.
[  466.025902][T21167] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  466.046334][T21167] /dev/nullb0: Can't open blockdev
[  466.653520][T21184] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  466.785751][T21189] overlayfs: missing 'workdir'
[  466.994887][T21195] batadv_slave_0: entered promiscuous mode
[  466.997858][T21195] batadv_slave_0: left promiscuous mode
[  467.293110][T21197] loop7: detected capacity change from 0 to 40427
[  467.297678][T21197] F2FS-fs (loop7): Small segment_count (9 < 1 * 24)
[  467.300721][T21197] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  467.342933][T21197] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  467.357634][T21197] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  467.360331][T21197] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  467.407969][T16539] syz-executor: attempt to access beyond end of device
[  467.407969][T16539] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  467.423465][T16539] CPU: 1 UID: 0 PID: 16539 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  467.423509][T16539] Tainted: [L]=SOFTLOCKUP
[  467.423516][T16539] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  467.423545][T16539] Call Trace:
[  467.423553][T16539]  <TASK>
[  467.423559][T16539]  dump_stack_lvl+0xe8/0x150
[  467.423583][T16539]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  467.423603][T16539]  f2fs_write_end_bio+0x1211/0x16e0
[  467.423625][T16539]  ? blkg_put+0x22/0x240
[  467.423651][T16539]  __submit_merged_bio+0x258/0x6a0
[  467.423666][T16539]  ? rcu_is_watching+0x16/0xb0
[  467.423685][T16539]  __submit_merged_write_cond+0x3c9/0x4e0
[  467.423707][T16539]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  467.423738][T16539]  f2fs_write_data_pages+0x2a27/0x36f0
[  467.423779][T16539]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  467.423794][T16539]  ? is_bpf_text_address+0x26/0x2b0
[  467.423818][T16539]  ? arch_stack_walk+0xfb/0x150
[  467.423852][T16539]  ? add_lock_to_list+0xc7/0x100
[  467.423869][T16539]  ? lockdep_unlock+0x5c/0xd0
[  467.423886][T16539]  ? __lock_acquire+0x14b9/0x2e50
[  467.423916][T16539]  ? do_raw_spin_lock+0x12b/0x2f0
[  467.423940][T16539]  ? do_raw_spin_unlock+0x4d/0x200
[  467.423957][T16539]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  467.423975][T16539]  do_writepages+0x338/0x560
[  467.423995][T16539]  ? do_raw_spin_unlock+0x4d/0x200
[  467.424014][T16539]  filemap_fdatawrite+0x1e9/0x2f0
[  467.424030][T16539]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  467.424073][T16539]  ? do_raw_spin_unlock+0x4d/0x200
[  467.424093][T16539]  f2fs_sync_dirty_inodes+0x30e/0x830
[  467.424127][T16539]  f2fs_write_checkpoint+0xa3d/0x2710
[  467.424144][T16539]  ? __lock_acquire+0x6df/0x2e50
[  467.424205][T16539]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  467.424259][T16539]  kill_f2fs_super+0x2dd/0x700
[  467.424284][T16539]  ? __pfx_kill_f2fs_super+0x10/0x10
[  467.424308][T16539]  ? call_rcu+0x64d/0x8b0
[  467.424323][T16539]  ? lockdep_hardirqs_on+0x7b/0x110
[  467.424349][T16539]  deactivate_locked_super+0xbc/0x110
[  467.424369][T16539]  cleanup_mnt+0x3d3/0x460
[  467.424386][T16539]  task_work_run+0x1d9/0x270
[  467.424403][T16539]  ? __pfx_task_work_run+0x10/0x10
[  467.424423][T16539]  exit_to_user_mode_loop+0x204/0x770
[  467.424437][T16539]  ? rcu_is_watching+0x16/0xb0
[  467.424455][T16539]  do_syscall_64+0x328/0x520
[  467.424469][T16539]  ? trace_irq_disable+0x3b/0x140
[  467.424482][T16539]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  467.424499][T16539]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  467.424512][T16539] RIP: 0033:0x7f80a379f417
[  467.424527][T16539] Code: a2 c7 05 dc 62 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  467.424538][T16539] RSP: 002b:00007ffd8343ced8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  467.424584][T16539] RAX: 0000000000000000 RBX: 00007f80a3834ccb RCX: 00007f80a379f417
[  467.424594][T16539] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd8343cf90
[  467.424602][T16539] RBP: 00007ffd8343cf90 R08: 00007ffd8343df90 R09: 00000000ffffffff
[  467.424610][T16539] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd8343e020
[  467.424619][T16539] R13: 00007f80a3834ccb R14: 0000000000072338 R15: 00007ffd8343e060
[  467.424641][T16539]  </TASK>
[  467.432345][T16539] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  467.472332][T13303] usb 9-1: new full-speed USB device number 16 using dummy_hcd
[  467.662743][T13303] usb 9-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[  467.667584][T13303] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  467.671837][T13303] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  467.676356][T13303] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  467.680393][T13303] usb 9-1: config 0 descriptor??
[  467.682824][T21201] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  467.897579][T13303] usbhid 9-1:0.0: can't add hid device: -71
[  467.900095][T13303] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[  467.904690][T13303] usb 9-1: USB disconnect, device number 16
[  468.010735][T21215] jffs2: notice: (21215) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  468.090652][T21222] syz_tun: entered allmulticast mode
[  468.094886][T21222] syz_tun: left allmulticast mode
[  468.152260][T21226] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6403'.
[  468.155247][T21226] openvswitch: netlink: Message has 1 unknown bytes.
[  468.411353][T21242] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6411'.
[  468.998921][T21271] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6425'.
[  470.140711][T21300] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6438'.
[  470.243906][T21312] ipvlan3: entered promiscuous mode
[  470.244943][T21312] team0: Device ipvlan3 failed to register rx_handler
[  470.345583][T21321] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  470.402014][T21325] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6450'.
[  470.521917][T18189] usb 9-1: new high-speed USB device number 17 using dummy_hcd
[  470.682977][T18189] usb 9-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00
[  470.687377][T18189] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  471.228998][T21334] FAULT_INJECTION: forcing a failure.
[  471.228998][T21334] name fail_futex, interval 1, probability 0, space 0, times 1
[  471.235911][T21334] CPU: 0 UID: 0 PID: 21334 Comm: syz.7.6454 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  471.235942][T21334] Tainted: [L]=SOFTLOCKUP
[  471.235946][T21334] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  471.235952][T21334] Call Trace:
[  471.235956][T21334]  <TASK>
[  471.235960][T21334]  dump_stack_lvl+0xe8/0x150
[  471.235994][T21334]  should_fail_ex+0x410/0x560
[  471.236009][T21334]  get_futex_key+0x8e2/0x1580
[  471.236024][T21334]  ? __pfx_get_futex_key+0x10/0x10
[  471.236033][T21334]  ? __pfx___mutex_trylock_common+0x10/0x10
[  471.236046][T21334]  futex_wake+0x119/0x5f0
[  471.236060][T21334]  ? __pfx_futex_wake+0x10/0x10
[  471.236073][T21334]  ? mm_exit_exec_release+0x20/0x290
[  471.236086][T21334]  do_futex+0x458/0x4e0
[  471.236097][T21334]  ? __pfx_do_futex+0x10/0x10
[  471.236108][T21334]  ? __might_fault+0xaf/0x130
[  471.236142][T21334]  mm_exit_exec_release+0x10d/0x290
[  471.236154][T21334]  exit_mm+0x4d/0x2d0
[  471.236163][T21334]  do_exit+0x6cd/0x2360
[  471.236174][T21334]  ? __pfx_do_exit+0x10/0x10
[  471.236182][T21334]  ? do_raw_spin_lock+0x12b/0x2f0
[  471.236197][T21334]  do_group_exit+0x22d/0x2f0
[  471.236204][T21334]  ? _raw_spin_unlock_irq+0x23/0x50
[  471.236214][T21334]  get_signal+0x121b/0x12c0
[  471.236233][T21334]  arch_do_signal_or_restart+0xbb/0x860
[  471.236247][T21334]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  471.236259][T21334]  ? ksys_write+0x242/0x270
[  471.236274][T21334]  exit_to_user_mode_loop+0x10e/0x770
[  471.236283][T21334]  ? rcu_is_watching+0x16/0xb0
[  471.236294][T21334]  do_syscall_64+0x328/0x520
[  471.236304][T21334]  ? trace_irq_disable+0x3b/0x140
[  471.236312][T21334]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  471.236322][T21334]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  471.236329][T21334] RIP: 0033:0x7f80a379e1d9
[  471.236339][T21334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  471.236346][T21334] RSP: 002b:00007f80a19f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  471.236356][T21334] RAX: fffffffffffffe00 RBX: 00007f80a3a25fa8 RCX: 00007f80a379e1d9
[  471.236362][T21334] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f80a3a25fa8
[  471.236372][T21334] RBP: 00007f80a3a25fa0 R08: 0000000000000000 R09: 0000000000000000
[  471.236376][T21334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  471.236381][T21334] R13: 00007f80a3a26038 R14: 00007ffd8343db80 R15: 00007ffd8343dc68
[  471.236393][T21334]  </TASK>
[  471.353246][T18189] usb 9-1: NFC: NXP PN500 firmware ver 0.0 now attached
[  471.510421][    C0] usb 9-1: NFC: Urb failure (status -71)
[  471.521393][T18189] usb 9-1: NFC: Error on setting MAX_RETRIES config
[  471.524855][T18189] pn533_usb 9-1:1.0: probe with driver pn533_usb failed with error -71
[  471.530500][T18189] usb 9-1: USB disconnect, device number 17
[  471.578380][T21351] tmpfs: Group quota block hardlimit too large.
[  472.069738][T21370] loop8: detected capacity change from 0 to 2048
[  472.265759][T21376] loop8: detected capacity change from 0 to 8192
[  472.410690][T21386] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6479'.
[  472.890212][T21398] netlink: 'syz.0.6484': attribute type 153 has an invalid length.
[  472.890284][T21398] netlink: 5316 bytes leftover after parsing attributes in process `syz.0.6484'.
[  473.333734][T21414] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6492'.
[  473.404284][T21419] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6494'.
[  474.564644][T21457] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6511'.
[  474.606866][T21461] fuse: fd is not a fuse device
[  474.619657][T21463] bonding: no command found in bonding_masters - use +ifname or -ifname
[  474.651274][T21467] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6517'.
[  474.901840][T13292] usb 9-1: new high-speed USB device number 18 using dummy_hcd
[  475.062348][T21489] loop7: detected capacity change from 0 to 4096
[  475.062751][T13292] usb 9-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[  475.067805][T13292] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  475.067826][T13292] usb 9-1: Product: syz
[  475.067836][T13292] usb 9-1: Manufacturer: syz
[  475.067846][T13292] usb 9-1: SerialNumber: syz
[  475.089374][T21489] ntfs3(loop7): ino=3, Correct links count -> 2.
[  475.089790][T13292] usb 9-1: config 0 descriptor??
[  475.095794][T13292] hub 9-1:0.0: bad descriptor, ignoring hub
[  475.095862][T13292] hub 9-1:0.0: probe with driver hub failed with error -5
[  475.110997][T21489] ntfs3(loop7): MFT: r=0, expect seq=1 instead of 0!
[  475.114176][T21489] ntfs3(loop7): Mark volume as dirty due to NTFS errors
[  475.117452][T21489] ntfs3(loop7): Failed to load $MFT (-22).
[  475.245429][T21493] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6527'.
[  475.245589][T21493] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6527'.
[  475.299791][T13292] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware
[  475.395000][T13292] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  475.395129][T13292] dib0700: firmware download failed at 7 with -22
[  475.418287][T13292] usb 9-1: USB disconnect, device number 18
[  475.444938][T21498] FAULT_INJECTION: forcing a failure.
[  475.444938][T21498] name failslab, interval 1, probability 0, space 0, times 0
[  475.450307][T21498] CPU: 1 UID: 0 PID: 21498 Comm: syz.7.6529 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  475.450353][T21498] Tainted: [L]=SOFTLOCKUP
[  475.450360][T21498] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  475.450371][T21498] Call Trace:
[  475.450378][T21498]  <TASK>
[  475.450386][T21498]  dump_stack_lvl+0xe8/0x150
[  475.450416][T21498]  should_fail_ex+0x410/0x560
[  475.450445][T21498]  should_failslab+0xa8/0x100
[  475.450467][T21498]  __kvmalloc_node_noprof+0x176/0x820
[  475.450487][T21498]  ? __rhashtable_init_noprof+0x545/0xaf0
[  475.450502][T21498]  ? __rhashtable_init_noprof+0x545/0xaf0
[  475.450521][T21498]  __rhashtable_init_noprof+0x545/0xaf0
[  475.450539][T21498]  nf_flow_table_init+0x186/0x2a0
[  475.450565][T21498]  nf_tables_newflowtable+0x15e7/0x25b0
[  475.450598][T21498]  ? __pfx_nf_tables_newflowtable+0x10/0x10
[  475.450620][T21498]  ? lock_acquire+0x115/0x350
[  475.450644][T21498]  ? __nla_parse+0x40/0x60
[  475.450664][T21498]  nfnetlink_rcv+0x1288/0x28c0
[  475.450712][T21498]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  475.450728][T21498]  ? __lock_acquire+0x6df/0x2e50
[  475.450775][T21498]  ? lock_acquire+0x115/0x350
[  475.450796][T21498]  ? netlink_deliver_tap+0x2e/0x1b0
[  475.450817][T21498]  ? netlink_deliver_tap+0x2e/0x1b0
[  475.450854][T21498]  netlink_unicast+0x7bd/0x940
[  475.450880][T21498]  netlink_sendmsg+0x813/0xb40
[  475.450905][T21498]  ? __pfx_netlink_sendmsg+0x10/0x10
[  475.450929][T21498]  ? apparmor_socket_sendmsg+0x98/0x360
[  475.450954][T21498]  ? __pfx_netlink_sendmsg+0x10/0x10
[  475.450974][T21498]  sock_sendmsg_nosec+0x13a/0x180
[  475.451000][T21498]  ____sys_sendmsg+0x54e/0x850
[  475.451022][T21498]  ? __pfx_____sys_sendmsg+0x10/0x10
[  475.451046][T21498]  ? import_iovec+0x73/0xa0
[  475.451094][T21498]  ___sys_sendmsg+0x2a5/0x360
[  475.451112][T21498]  ? __lock_acquire+0x6df/0x2e50
[  475.451131][T21498]  ? __pfx____sys_sendmsg+0x10/0x10
[  475.451150][T21498]  ? futex_wait+0x2a2/0x390
[  475.451186][T21498]  ? __fget_files+0x2a/0x420
[  475.451204][T21498]  ? __fget_files+0x3a2/0x420
[  475.451223][T21498]  __x64_sys_sendmsg+0x1b1/0x290
[  475.451239][T21498]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  475.451268][T21498]  do_syscall_64+0x166/0x520
[  475.451284][T21498]  ? trace_irq_disable+0x3b/0x140
[  475.451299][T21498]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  475.451318][T21498]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  475.451354][T21498] RIP: 0033:0x7f80a379e1d9
[  475.451370][T21498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  475.451383][T21498] RSP: 002b:00007f80a19f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  475.451401][T21498] RAX: ffffffffffffffda RBX: 00007f80a3a25fa0 RCX: 00007f80a379e1d9
[  475.451412][T21498] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004
[  475.451423][T21498] RBP: 00007f80a3835888 R08: 0000000000000000 R09: 0000000000000000
[  475.451433][T21498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  475.451441][T21498] R13: 00007f80a3a26038 R14: 00007f80a3a25fa0 R15: 00007ffd8343dc68
[  475.451466][T21498]  </TASK>
[  475.461951][T21498] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6529'.
[  476.216295][ T5594] Bluetooth: hci1: status 0x29
[  476.227190][ T5594] Bluetooth: hci1: unexpected event for opcode 0x0c03
[  476.891285][T21563] loop8: detected capacity change from 0 to 128
[  476.892649][T21563] FAT-fs (loop8): bogus number of reserved sectors
[  476.892662][T21563] FAT-fs (loop8): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  476.892672][T21563] FAT-fs (loop8): Can't find a valid FAT filesystem
[  477.412236][T13302] usb 9-1: new high-speed USB device number 19 using dummy_hcd
[  477.480893][T21579] loop7: detected capacity change from 0 to 32768
[  477.509324][T21579] ERROR: (device loop7): diNewExt: no free extents
[  477.509324][T21579] 
[  477.527855][T21579] ERROR: (device loop7): remounting filesystem as read-only
[  477.527937][T21579] ialloc: diAlloc returned -5!
[  477.584117][T13302] usb 9-1: unable to get BOS descriptor or descriptor too short
[  477.584190][T13302] usb 9-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  477.594714][T13302] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  477.594764][T13302] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  477.594842][T13302] usb 9-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[  477.594891][T13302] usb 9-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[  477.595001][T13302] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  477.595215][T13302] usb 9-1: config 1 interface 1 has no altsetting 0
[  477.639669][T21581] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6565'.
[  477.688635][T13302] usb 9-1: string descriptor 0 read error: -22
[  477.688772][T13302] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  477.769145][T21586] ip_tables: iptables: counters copy to user failed while replacing table
[  477.919357][T21599] FAULT_INJECTION: forcing a failure.
[  477.919357][T21599] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  477.924753][T21599] CPU: 0 UID: 0 PID: 21599 Comm: syz.7.6574 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  477.924785][T21599] Tainted: [L]=SOFTLOCKUP
[  477.924790][T21599] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  477.924795][T21599] Call Trace:
[  477.924800][T21599]  <TASK>
[  477.924804][T21599]  dump_stack_lvl+0xe8/0x150
[  477.924843][T21599]  should_fail_ex+0x410/0x560
[  477.924860][T21599]  _copy_from_user+0x2d/0xb0
[  477.924872][T21599]  do_fcntl+0x91d/0x1a30
[  477.924883][T21599]  ? lock_acquire+0x115/0x350
[  477.924892][T21599]  ? __pfx_do_fcntl+0x10/0x10
[  477.924902][T21599]  ? __fget_files+0x2a/0x420
[  477.924913][T21599]  ? __fget_files+0x2a/0x420
[  477.924926][T21599]  ? bpf_lsm_file_fcntl+0x9/0x20
[  477.924940][T21599]  __se_sys_fcntl+0xc8/0x150
[  477.924953][T21599]  do_syscall_64+0x166/0x520
[  477.924963][T21599]  ? trace_irq_disable+0x3b/0x140
[  477.924971][T21599]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  477.924980][T21599]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  477.924988][T21599] RIP: 0033:0x7f80a379e1d9
[  477.924997][T21599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  477.925004][T21599] RSP: 002b:00007f80a19f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048
[  477.925044][T21599] RAX: ffffffffffffffda RBX: 00007f80a3a25fa0 RCX: 00007f80a379e1d9
[  477.925054][T21599] RDX: 0000000000000000 RSI: 0000000000000026 RDI: 0000000000000003
[  477.925063][T21599] RBP: 00007f80a3835888 R08: 0000000000000000 R09: 0000000000000000
[  477.925070][T21599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  477.925077][T21599] R13: 00007f80a3a26038 R14: 00007f80a3a25fa0 R15: 00007ffd8343dc68
[  477.925090][T21599]  </TASK>
[  478.159043][   T33] audit: type=1107 audit(2000000026.480:833): pid=21609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  478.202901][T21614] kernel profiling enabled (shift: 63)
[  478.202946][T21614] profiling shift: 63 too large
[  478.280919][T21617] 9pnet_fd: p9_fd_create_unix (21617): problem connecting socket: ./proc: -111
[  478.304457][T13302] usb 9-1: 2:0: cannot get min/max values for control 2 (id 2)
[  478.354595][T13302] usb 9-1: USB disconnect, device number 19
[  478.473795][T21630] netlink: 'syz.0.6589': attribute type 1 has an invalid length.
[  478.996591][   T33] audit: type=1326 audit(2000000027.320:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21646 comm="syz.8.6596" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d9e79e1d9 code=0x7ffc0000
[  478.996806][   T33] audit: type=1326 audit(2000000027.320:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21646 comm="syz.8.6596" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d9e79e1d9 code=0x7ffc0000
[  478.997434][   T33] audit: type=1326 audit(2000000027.320:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21646 comm="syz.8.6596" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d9e79e1d9 code=0x7ffc0000
[  478.997465][   T33] audit: type=1326 audit(2000000027.320:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21646 comm="syz.8.6596" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d9e79e1d9 code=0x7ffc0000
[  478.997596][   T33] audit: type=1326 audit(2000000027.320:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21646 comm="syz.8.6596" exe="/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f4d9e79e1d9 code=0x7ffc0000
[  479.026891][   T33] audit: type=1326 audit(2000000027.340:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21646 comm="syz.8.6596" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d9e79e1d9 code=0x7ffc0000
[  479.028565][   T33] audit: type=1326 audit(2000000027.350:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21646 comm="syz.8.6596" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d9e79e1d9 code=0x7ffc0000
[  479.040124][   T33] audit: type=1326 audit(2000000027.360:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21646 comm="syz.8.6596" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d9e79e1d9 code=0x7ffc0000
[  479.040991][   T33] audit: type=1326 audit(2000000027.360:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21646 comm="syz.8.6596" exe="/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f4d9e79e1d9 code=0x7ffc0000
[  480.668876][T21725] loop7: detected capacity change from 0 to 22
[  480.669651][T21725] MTD: Attempt to mount non-MTD device "/dev/loop7"
[  480.682256][T21725] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  481.434639][T21731] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  481.434744][T21731] overlayfs: overlapping lowerdir path
[  481.872644][T13292] usb 9-1: new high-speed USB device number 20 using dummy_hcd
[  482.025632][T13292] usb 9-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00
[  482.027542][T13292] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  482.285325][T13292] net1080 9-1:1.0 usb0: register 'net1080' at usb-dummy_hcd.8-1, NetChip TurboCONNECT, 06:e1:fb:b4:d8:19
[  482.745785][T13292] usb 9-1: USB disconnect, device number 20
[  482.750838][T13292] net1080 9-1:1.0 usb0: unregister 'net1080' usb-dummy_hcd.8-1, NetChip TurboCONNECT
[  482.893053][T21778] netlink: 2028 bytes leftover after parsing attributes in process `syz.0.6650'.
[  482.917186][T21778] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6650'.
[  483.321420][T21790] FAULT_INJECTION: forcing a failure.
[  483.321420][T21790] name failslab, interval 1, probability 0, space 0, times 0
[  483.329661][T21790] CPU: 1 UID: 0 PID: 21790 Comm: syz.8.6653 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  483.329710][T21790] Tainted: [L]=SOFTLOCKUP
[  483.329716][T21790] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  483.329726][T21790] Call Trace:
[  483.329735][T21790]  <TASK>
[  483.329742][T21790]  dump_stack_lvl+0xe8/0x150
[  483.329772][T21790]  should_fail_ex+0x410/0x560
[  483.329801][T21790]  should_failslab+0xa8/0x100
[  483.329824][T21790]  __kmalloc_noprof+0xfe/0x720
[  483.329838][T21790]  ? __init_waitqueue_head+0xa8/0x150
[  483.329858][T21790]  ? __netlink_kernel_create+0x1e5/0x720
[  483.329877][T21790]  ? __netlink_kernel_create+0x1e5/0x720
[  483.329894][T21790]  ? __netlink_create+0x167/0x260
[  483.329914][T21790]  __netlink_kernel_create+0x1e5/0x720
[  483.329964][T21790]  ? __pfx___netlink_kernel_create+0x10/0x10
[  483.329987][T21790]  ? genl_pernet_init+0xa5/0x170
[  483.330007][T21790]  genl_pernet_init+0xb7/0x170
[  483.330021][T21790]  ? __pfx_genl_pernet_init+0x10/0x10
[  483.330035][T21790]  ? __pfx_genl_rcv+0x10/0x10
[  483.330047][T21790]  ? __pfx_genl_bind+0x10/0x10
[  483.330059][T21790]  ? __pfx_genl_unbind+0x10/0x10
[  483.330072][T21790]  ? __pfx_genl_release+0x10/0x10
[  483.330094][T21790]  ops_init+0x35d/0x5d0
[  483.330117][T21790]  setup_net+0x118/0x350
[  483.330133][T21790]  ? __pfx_setup_net+0x10/0x10
[  483.330147][T21790]  ? down_read_killable+0x1bb/0x3b0
[  483.330165][T21790]  ? __ns_common_init+0x2fc/0x4a0
[  483.330188][T21790]  copy_net_ns+0x53b/0x780
[  483.330205][T21790]  create_new_namespaces+0x3f0/0x6b0
[  483.330225][T21790]  ? security_capable+0x7e/0x2c0
[  483.330246][T21790]  unshare_nsproxy_namespaces+0x149/0x190
[  483.330269][T21790]  ksys_unshare+0x5a7/0x950
[  483.330294][T21790]  ? __pfx_ksys_unshare+0x10/0x10
[  483.330313][T21790]  ? rcu_is_watching+0x16/0xb0
[  483.330340][T21790]  __x64_sys_unshare+0x38/0x50
[  483.330358][T21790]  do_syscall_64+0x166/0x520
[  483.330374][T21790]  ? trace_irq_disable+0x3b/0x140
[  483.330388][T21790]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  483.330406][T21790]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  483.330420][T21790] RIP: 0033:0x7f4d9e79e1d9
[  483.330435][T21790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  483.330448][T21790] RSP: 002b:00007f4d9f624028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  483.330465][T21790] RAX: ffffffffffffffda RBX: 00007f4d9ea25fa0 RCX: 00007f4d9e79e1d9
[  483.330476][T21790] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000004c000680
[  483.330485][T21790] RBP: 00007f4d9e835888 R08: 0000000000000000 R09: 0000000000000000
[  483.330494][T21790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  483.330502][T21790] R13: 00007f4d9ea26038 R14: 00007f4d9ea25fa0 R15: 00007fff335a45c8
[  483.330531][T21790]  </TASK>
[  484.691340][T21823] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6667'.
[  485.072342][   T33] kauditd_printk_skb: 5 callbacks suppressed
[  485.072427][   T33] audit: type=1326 audit(2000000033.400:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21832 comm="syz.8.6672" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d9e79e1d9 code=0x7ffc0000
[  485.072939][   T33] audit: type=1326 audit(2000000033.400:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21832 comm="syz.8.6672" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d9e79e1d9 code=0x7ffc0000
[  485.095372][   T33] audit: type=1326 audit(2000000033.420:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21832 comm="syz.8.6672" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d9e79e1d9 code=0x7ffc0000
[  485.095443][   T33] audit: type=1326 audit(2000000033.420:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21832 comm="syz.8.6672" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d9e79e1d9 code=0x7ffc0000
[  485.095934][   T33] audit: type=1326 audit(2000000033.420:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21832 comm="syz.8.6672" exe="/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f4d9e79e1d9 code=0x7ffc0000
[  485.095952][   T33] audit: type=1326 audit(2000000033.420:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21832 comm="syz.8.6672" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d9e79e1d9 code=0x7ffc0000
[  485.095966][   T33] audit: type=1326 audit(2000000033.420:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21832 comm="syz.8.6672" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d9e79e1d9 code=0x7ffc0000
[  485.107249][   T33] audit: type=1326 audit(2000000033.430:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21832 comm="syz.8.6672" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4d9e79e1d9 code=0x7ffc0000
[  485.107300][   T33] audit: type=1326 audit(2000000033.430:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21832 comm="syz.8.6672" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f4d9e79e1d9 code=0x7ffc0000
[  485.391621][T21837] loop8: detected capacity change from 0 to 32768
[  485.478617][T21837] dmapctl: leaf value 127 too large at index 344
[  485.478666][T21837] ERROR: (device loop8): dbFindCtl: Corrupt dmapctl page
[  485.478666][T21837] 
[  485.478976][T21837] ERROR: (device loop8): remounting filesystem as read-only
[  485.617884][T21849] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6679'.
[  485.620853][T21849] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6679'.
[  485.625641][T21849] netlink: 'syz.8.6679': attribute type 14 has an invalid length.
[  485.629020][T21849] netlink: 'syz.8.6679': attribute type 13 has an invalid length.
[  487.245062][T21890] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  487.259145][T21890] bond1 (unregistering): Released all slaves
[  487.694795][T21910] [syz.0.] <== rxrpc_preparse_xdr_yfs_rxgk() = -EKEYREJECTED [403c!=40, 4,4000]
[  487.775457][T21912] file system registered
[  487.987643][ T5594] Bluetooth: hci1: unexpected event for opcode 0x2019
[  488.062158][T21930] FAULT_INJECTION: forcing a failure.
[  488.062158][T21930] name failslab, interval 1, probability 0, space 0, times 0
[  488.062215][T21930] CPU: 0 UID: 0 PID: 21930 Comm: syz.8.6714 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  488.062243][T21930] Tainted: [L]=SOFTLOCKUP
[  488.062248][T21930] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  488.062255][T21930] Call Trace:
[  488.062259][T21930]  <TASK>
[  488.062264][T21930]  dump_stack_lvl+0xe8/0x150
[  488.062279][T21930]  should_fail_ex+0x410/0x560
[  488.062295][T21930]  should_failslab+0xa8/0x100
[  488.062307][T21930]  __kmalloc_node_track_caller_noprof+0xfb/0x720
[  488.062316][T21930]  ? snd_pcm_hw_rule_add+0x196/0x800
[  488.062327][T21930]  ? snd_pcm_hw_rule_add+0x196/0x800
[  488.062337][T21930]  ? kfree+0x4d/0x650
[  488.062348][T21930]  ? snd_pcm_hw_rule_add+0x196/0x800
[  488.062358][T21930]  krealloc_node_align_noprof+0x19a/0x390
[  488.062370][T21930]  snd_pcm_hw_rule_add+0x196/0x800
[  488.062380][T21930]  ? __pfx_snd_pcm_hw_rule_muldivk+0x10/0x10
[  488.062392][T21930]  ? __pfx_snd_pcm_hw_rule_format+0x10/0x10
[  488.062403][T21930]  ? __pfx_snd_pcm_hw_rule_add+0x10/0x10
[  488.062414][T21930]  ? snd_pcm_attach_substream+0x845/0xb10
[  488.062425][T21930]  snd_pcm_open_substream+0xebf/0x24f0
[  488.062439][T21930]  ? __pfx_snd_pcm_open_substream+0x10/0x10
[  488.062448][T21930]  ? __kmalloc_cache_noprof+0x14d/0x600
[  488.062455][T21930]  ? snd_pcm_oss_open+0xa37/0x1c00
[  488.062465][T21930]  ? snd_pcm_oss_open+0xa37/0x1c00
[  488.062478][T21930]  snd_pcm_oss_open+0xf42/0x1c00
[  488.062496][T21930]  ? __pfx_snd_pcm_oss_open+0x10/0x10
[  488.062506][T21930]  ? tomoyo_check_open_permission+0x38e/0x470
[  488.062520][T21930]  ? do_raw_spin_lock+0x12b/0x2f0
[  488.062534][T21930]  ? __pfx_default_wake_function+0x10/0x10
[  488.062549][T21930]  chrdev_open+0x4d9/0x600
[  488.062558][T21930]  ? __pfx_chrdev_open+0x10/0x10
[  488.062567][T21930]  ? fsnotify_open_perm_and_set_mode+0x135/0x6b0
[  488.062577][T21930]  ? __pfx_chrdev_open+0x10/0x10
[  488.062585][T21930]  do_dentry_open+0x816/0x1380
[  488.062598][T21930]  vfs_open+0x3b/0x340
[  488.062605][T21930]  ? path_openat+0x1428/0x1d60
[  488.062614][T21930]  path_openat+0x1443/0x1d60
[  488.062628][T21930]  do_file_open+0x23e/0x4a0
[  488.062637][T21930]  ? __pfx_do_file_open+0x10/0x10
[  488.062653][T21930]  ? _raw_spin_unlock+0x28/0x50
[  488.062660][T21930]  ? alloc_fd+0x651/0x6c0
[  488.062674][T21930]  do_sys_openat2+0x115/0x200
[  488.062683][T21930]  ? __se_sys_futex+0x3a8/0x450
[  488.062693][T21930]  ? __pfx_do_sys_openat2+0x10/0x10
[  488.062703][T21930]  ? __pfx___se_sys_futex+0x10/0x10
[  488.062718][T21930]  ? __pfx_ksys_write+0x10/0x10
[  488.062730][T21930]  __x64_sys_openat+0x138/0x170
[  488.062743][T21930]  do_syscall_64+0x166/0x520
[  488.062756][T21930]  ? trace_irq_disable+0x3b/0x140
[  488.062768][T21930]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  488.062784][T21930]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  488.062797][T21930] RIP: 0033:0x7f4d9e79e1d9
[  488.062811][T21930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  488.062821][T21930] RSP: 002b:00007f4d9f624028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  488.062836][T21930] RAX: ffffffffffffffda RBX: 00007f4d9ea25fa0 RCX: 00007f4d9e79e1d9
[  488.062846][T21930] RDX: 0000000000000200 RSI: 0000200000000100 RDI: ffffffffffffff9c
[  488.062855][T21930] RBP: 00007f4d9e835888 R08: 0000000000000000 R09: 0000000000000000
[  488.062895][T21930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  488.062904][T21930] R13: 00007f4d9ea26038 R14: 00007f4d9ea25fa0 R15: 00007fff335a45c8
[  488.062924][T21930]  </TASK>
[  488.220341][T21936] loop8: detected capacity change from 0 to 512
[  488.220832][T21936] ext4: Unknown parameter 'appraise_type'
[  488.231441][T21936] mtrr: base(0x1a7000) is not aligned on a size(0x0000) boundary
[  488.543363][T21954] sctp: [Deprecated]: syz.8.6726 (pid 21954) Use of int in max_burst socket option deprecated.
[  488.543363][T21954] Use struct sctp_assoc_value instead
[  488.613827][T21962] ip6t_ah: unknown flags 4E
[  488.740623][T21966] loop7: detected capacity change from 0 to 4096
[  488.798751][T21966] ntfs3: Cannot use different iocharset when remounting!
[  489.193997][T21986] loop8: detected capacity change from 0 to 512
[  489.240613][T21990] fuse: fd is not a fuse device
[  490.147801][T22025] sit0: entered promiscuous mode
[  490.149767][T22025] netlink: 'syz.0.6760': attribute type 1 has an invalid length.
[  490.153260][T22025] netlink: 1 bytes leftover after parsing attributes in process `syz.0.6760'.
[  490.474917][T22049] lo speed is unknown, defaulting to 1000
[  490.621496][ T5594] Bluetooth: hci2: command tx timeout
[  490.636141][T22049] IPVS: You probably need to specify IP address on multicast interface.
[  490.636250][T22049] IPVS: Error connecting to the multicast addr
[  490.661714][T18189] usb 9-1: new high-speed USB device number 21 using dummy_hcd
[  490.811486][T18189] usb 9-1: Using ep0 maxpacket: 32
[  490.812092][T18189] usb 9-1: New USB device found, idVendor=0421, idProduct=04d8, bcdDevice=6a.33
[  490.820158][T18189] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  490.824672][T18189] usb 9-1: config 0 descriptor??
[  490.828101][T18189] rndis_host 9-1:0.0: rndis: master #0/ffff888107291000 slave #1/0000000000000000
[  490.829217][T18189] cdc_acm 9-1:0.0: Zero length descriptor references
[  490.829228][T18189] cdc_acm 9-1:0.0: probe with driver cdc_acm failed with error -22
[  491.028638][T13302] usb 9-1: USB disconnect, device number 21
[  491.430035][T22063] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6777'.
[  491.430097][T22063] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6777'.
[  491.674029][T22077] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6784'.
[  491.993725][T22097] lo speed is unknown, defaulting to 1000
[  492.009876][T22099] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6795'.
[  492.052026][ T5594] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  492.052131][ T5594] Bluetooth: hci1: Injecting HCI hardware error event
[  492.075669][ T4994] Bluetooth: hci1: hardware error 0x00
[  492.085320][T18176] usb 9-1: new low-speed USB device number 22 using dummy_hcd
[  492.250173][T18176] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  492.257202][T18176] usb 9-1: config 0 has an invalid interface number: 55 but max is 0
[  492.257256][T18176] usb 9-1: config 0 has no interface number 0
[  492.257314][T18176] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  492.257327][T18176] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[  492.257341][T18176] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  492.257353][T18176] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  492.257366][T18176] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  492.257376][T18176] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  492.257398][T18176] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  492.284055][T18176] usb 9-1: config 0 descriptor??
[  492.302321][T22091] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[  492.315033][T18176] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  492.509865][T22091] ldusb 9-1:0.55: Couldn't submit interrupt_in_urb -90
[  492.515500][T18189] usb 9-1: USB disconnect, device number 22
[  492.524047][T18189] ldusb 9-1:0.55: LD USB Device #0 now disconnected
[  493.220585][T22130] netlink: 60 bytes leftover after parsing attributes in process `syz.8.6810'.
[  493.299573][T22134] EXT4-fs warning (device sda1): ext4_group_extend:1869: need to use ext2online to resize further
[  493.565686][T22148] cramfs: checking physical address 0x0000000169840000 for linear cramfs image
[  493.565866][T22148] mtd0: Can't lookup blockdev
[  494.131623][ T4994] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  494.509847][T22191] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6838'.
[  494.745030][T22198] loop8: detected capacity change from 0 to 512
[  494.753048][T22198] FAT-fs (loop8): Directory bread(block 2080) failed
[  494.753103][T22198] FAT-fs (loop8): Directory bread(block 2081) failed
[  494.763151][T22198] FAT-fs (loop8): Directory bread(block 2082) failed
[  494.763387][T22198] FAT-fs (loop8): Directory bread(block 2083) failed
[  494.763404][T22198] FAT-fs (loop8): Directory bread(block 2084) failed
[  494.763417][T22198] FAT-fs (loop8): Directory bread(block 2085) failed
[  494.763431][T22198] FAT-fs (loop8): Directory bread(block 2086) failed
[  494.763444][T22198] FAT-fs (loop8): Directory bread(block 2087) failed
[  494.775347][T22198] gfs2: path_lookup on c::: returned error -2
[  494.991917][T22212] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6848'.
[  495.196024][   T33] audit: type=1800 audit(2000000299.515:857): pid=22224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.6851" name=08 dev="sda1" ino=1945 res=0 errno=0
[  495.651609][ T4994] Bluetooth: hci0: command 0x0419 tx timeout
[  495.658005][ T5594] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  496.292903][T22274] loop7: detected capacity change from 0 to 1024
[  496.306482][T22274] EXT4-fs (loop7): stripe (4) is not aligned with cluster size (4096), stripe is disabled
[  496.341719][T22274] EXT4-fs error (device loop7): ext4_map_blocks:790: inode #3: block 2: comm syz.7.6877: lblock 2 mapped to illegal pblock 2 (length 1)
[  496.341789][T22274] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  496.346506][T22274] Quota error (device loop7): qtree_write_dquot: dquota write failed
[  496.350725][    C0] EXT4-fs (loop7): error count since last fsck: 1
[  496.350776][    C0] EXT4-fs (loop7): initial error at time 2000000300: ext4_map_blocks:790: inode 3: block 2
[  496.350883][    C0] EXT4-fs (loop7): last error at time 2000000300: ext4_map_blocks:790: inode 3: block 2
[  496.382758][T22274] EXT4-fs error (device loop7): ext4_map_blocks:790: inode #3: block 48: comm syz.7.6877: lblock 0 mapped to illegal pblock 48 (length 1)
[  496.388351][T22274] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  496.388599][T22274] Quota error (device loop7): v2_write_file_info: Can't write info structure
[  496.410719][T22274] EXT4-fs error (device loop7): ext4_acquire_dquot:7069: comm syz.7.6877: Failed to acquire dquot type 0
[  496.410818][T22274] loop7: lost filesystem error report for type 5 error -117
[  496.415635][T22274] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6517: Corrupt filesystem
[  496.415672][T22274] loop7: lost filesystem error report for type 5 error -117
[  496.422053][T22274] EXT4-fs error (device loop7): ext4_evict_inode:269: inode #11: comm syz.7.6877: mark_inode_dirty error
[  496.422094][T22274] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  496.428892][T22274] EXT4-fs warning (device loop7): ext4_evict_inode:272: couldn't mark inode dirty (err -117)
[  496.428980][T22274] EXT4-fs (loop7): 1 orphan inode deleted
[  496.429765][T22274] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  496.443673][ T1113] EXT4-fs error (device loop7): ext4_map_blocks:790: inode #3: block 1: comm kworker/u9:9: lblock 1 mapped to illegal pblock 1 (length 1)
[  496.444054][ T1113] Quota error (device loop7): remove_tree: Can't read quota data block 1
[  496.444071][ T1113] EXT4-fs error (device loop7): ext4_release_dquot:7105: comm kworker/u9:9: Failed to release dquot type 0
[  496.455585][T22274] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  496.462078][T22274] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended
[  496.464232][T22274] EXT4-fs error (device loop7): ext4_map_blocks:790: inode #3: block 48: comm syz.7.6877: lblock 0 mapped to illegal pblock 48 (length 1)
[  496.464522][T22274] Quota error (device loop7): v2_read_header: Failed header read: expected=8 got=-117
[  496.464556][T22274] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  496.491489][T16539] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  497.102148][T22287] loop8: detected capacity change from 0 to 2048
[  497.137865][T22288] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  497.146183][T22287] NILFS error (device loop8): nilfs_lookup: deleted inode referenced: 12
[  497.159973][T22287] Remounting filesystem read-only
[  499.161227][T22333] ip_tables: iptables: counters copy to user failed while replacing table
[  499.397897][T22347] loop8: detected capacity change from 0 to 16
[  499.401798][T22347] MTD: Attempt to mount non-MTD device "/dev/loop8"
[  499.822574][T22357] loop7: detected capacity change from 0 to 512
[  500.252271][T22362] FAULT_INJECTION: forcing a failure.
[  500.252271][T22362] name failslab, interval 1, probability 0, space 0, times 0
[  500.259185][T22362] CPU: 0 UID: 0 PID: 22362 Comm: syz.7.6915 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  500.259220][T22362] Tainted: [L]=SOFTLOCKUP
[  500.259225][T22362] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  500.259231][T22362] Call Trace:
[  500.259236][T22362]  <TASK>
[  500.259241][T22362]  dump_stack_lvl+0xe8/0x150
[  500.259262][T22362]  should_fail_ex+0x410/0x560
[  500.259280][T22362]  should_failslab+0xa8/0x100
[  500.259293][T22362]  __kmalloc_cache_noprof+0xa3/0x600
[  500.259303][T22362]  ? input_allocate_device+0x4e/0x2a0
[  500.259314][T22362]  ? input_allocate_device+0x4e/0x2a0
[  500.259328][T22362]  input_allocate_device+0x4e/0x2a0
[  500.259339][T22362]  uinput_ioctl_handler+0x187/0x15a0
[  500.259352][T22362]  ? __pfx_uinput_ioctl_handler+0x10/0x10
[  500.259364][T22362]  ? __fget_files+0x2a/0x420
[  500.259376][T22362]  ? __fget_files+0x3a2/0x420
[  500.259407][T22362]  ? bpf_lsm_file_ioctl+0x9/0x20
[  500.259439][T22362]  ? __pfx_uinput_ioctl+0x10/0x10
[  500.259448][T22362]  __se_sys_ioctl+0xfc/0x170
[  500.259460][T22362]  do_syscall_64+0x166/0x520
[  500.259472][T22362]  ? trace_irq_disable+0x3b/0x140
[  500.259483][T22362]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  500.259493][T22362]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  500.259518][T22362] RIP: 0033:0x7f80a379e1d9
[  500.259528][T22362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  500.259536][T22362] RSP: 002b:00007f80a19f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  500.259547][T22362] RAX: ffffffffffffffda RBX: 00007f80a3a25fa0 RCX: 00007f80a379e1d9
[  500.259553][T22362] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003
[  500.259558][T22362] RBP: 00007f80a3835888 R08: 0000000000000000 R09: 0000000000000000
[  500.259562][T22362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  500.259567][T22362] R13: 00007f80a3a26038 R14: 00007f80a3a25fa0 R15: 00007ffd8343dc68
[  500.259579][T22362]  </TASK>
[  500.407088][T22374] netlink: 92 bytes leftover after parsing attributes in process `syz.7.6920'.
[  500.621618][T22394] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6929'.
[  500.943037][ T1377] ieee802154 phy0 wpan0: encryption failed: -22
[  500.945835][ T1377] ieee802154 phy1 wpan1: encryption failed: -22
[  501.282908][T22437] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6950'.
[  501.282971][T22437] netlink: 'syz.8.6950': attribute type 8 has an invalid length.
[  501.283137][T22437] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6950'.
[  501.335623][T22442] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6950'.
[  501.335739][T22442] netlink: 'syz.8.6950': attribute type 8 has an invalid length.
[  501.335782][T22442] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6950'.
[  501.534760][T22453] loop8: detected capacity change from 0 to 64
[  502.162534][T18189] usb 9-1: new full-speed USB device number 23 using dummy_hcd
[  502.172609][T22489] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  502.322298][T18189] usb 9-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[  502.329806][T18189] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  502.333574][T18189] usb 9-1: Product: syz
[  502.335704][T18189] usb 9-1: Manufacturer: syz
[  502.337823][T18189] usb 9-1: SerialNumber: syz
[  502.342369][T18189] usb 9-1: config 0 descriptor??
[  502.458154][T22499] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6978'.
[  502.553079][T18189] usb 9-1: ignoring: probably an ADSL modem
[  502.686241][T22513] loop7: detected capacity change from 0 to 4096
[  502.729111][T22520] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  502.744305][T22513] NILFS error (device loop7): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  502.787551][T18189] cxacru 9-1:0.0: usbatm_usb_probe: bind failed: -19!
[  502.802300][T18189] usb 9-1: USB disconnect, device number 23
[  502.816673][T22513] NILFS (loop7): mounting fs with errors
[  502.824524][T22522] tipc: Resetting bearer <eth:syz_tun>
[  502.827693][T22522] tipc: Resetting bearer <eth:batadv_slave_1>
[  502.854873][T22513] NILFS error (device loop7): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  502.859064][T22513] NILFS error (device loop7): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  502.860198][T18176] lo speed is unknown, defaulting to 1000
[  502.866679][T22513] NILFS error (device loop7): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  502.880387][   T33] audit: type=1800 audit(2000000308.206:858): pid=22513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.6985" name="file1" dev="loop7" ino=15 res=0 errno=0
[  502.895150][T22513] NILFS error (device loop7): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  503.008668][T22530] loop7: detected capacity change from 0 to 4096
[  503.027831][T22530] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  503.071105][T16539] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  503.378383][T22541] 9pnet_virtio: no channels available for device syz
[  503.394176][T22541] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6996'.
[  503.515917][T22550] batadv_slave_0: entered promiscuous mode
[  503.524575][T22550] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7001'.
[  503.529256][T22550] hsr_slave_0: left promiscuous mode
[  503.537252][T22550] hsr_slave_1: left promiscuous mode
[  503.634187][T22549] batadv_slave_0: left promiscuous mode
[  504.040235][T18189] usb 9-1: new high-speed USB device number 24 using dummy_hcd
[  504.200132][T18189] usb 9-1: Using ep0 maxpacket: 32
[  504.202934][T18189] usb 9-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[  504.207719][T18189] usb 9-1: config 0 has an invalid interface number: 131 but max is 0
[  504.215134][T18189] usb 9-1: config 0 has no interface number 0
[  504.215211][T18189] usb 9-1: too many endpoints for config 0 interface 131 altsetting 181: 207, using maximum allowed: 30
[  504.215258][T18189] usb 9-1: config 0 interface 131 altsetting 181 has 0 endpoint descriptors, different from the interface descriptor's value: 207
[  504.215297][T18189] usb 9-1: config 0 interface 131 has no altsetting 0
[  504.233061][T18189] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  504.236073][T18189] usb 9-1: Product: syz
[  504.237869][T18189] usb 9-1: Manufacturer: syz
[  504.239568][T18189] usb 9-1: SerialNumber: syz
[  504.254527][T18189] usb 9-1: config 0 descriptor??
[  504.673346][T18189] gspca_main: gspca_topro-2.14.0 probing 06a2:0003
[  504.678784][T18189] gspca_topro: reg_w err -71
[  504.712233][T18189] gspca_topro: Sensor soi763a
[  504.726718][T18189] usb 9-1: USB disconnect, device number 24
[  504.894484][T22607] netlink: 19 bytes leftover after parsing attributes in process `syz.7.7028'.
[  504.938345][T22610] netlink: 'syz.7.7029': attribute type 9 has an invalid length.
[  505.545466][T22632] Non-string source
[  505.667971][T22639] jffs2: notice: (22639) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  505.889177][T22653] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0001 with DS=0x3
[  506.115156][T22671] batman_adv: batadv0: Adding interface: dummy0
[  506.115317][T22671] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  506.115359][T22671] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  506.143517][T22671] macvtap1: mtu less than device minimum
[  506.159072][T22671] Set syz0 is full, maxelem 0 reached
[  506.165731][T22675] loop8: detected capacity change from 0 to 1024
[  506.169451][T22675] EXT4-fs: Ignoring removed bh option
[  506.217817][T22675] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  506.294705][T17759] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  508.626674][T13303] Process accounting resumed
[  509.461853][T22765] erspan0: left promiscuous mode
[  509.464332][T22765] netlink: 'syz.7.7096': attribute type 1 has an invalid length.
[  509.480703][T22767] __nla_validate_parse: 1 callbacks suppressed
[  509.480950][T22767] netlink: 8628 bytes leftover after parsing attributes in process `syz.8.7097'.
[  509.535989][T22772] cgroup: release_agent respecified
[  509.555264][T22773] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  509.773437][T22785] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7106'.
[  510.444649][T22798] loop8: detected capacity change from 0 to 256
[  510.445430][T22798] exfat: Deprecated parameter 'namecase'
[  510.445460][T22798] exfat: Deprecated parameter 'namecase'
[  510.445503][T22798] exfat: Deprecated parameter 'namecase'
[  510.458400][T22798] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  510.524549][T22801] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  510.569100][T22803] netlink: 32 bytes leftover after parsing attributes in process `syz.8.7112'.
[  510.632031][T22808] loop8: detected capacity change from 0 to 256
[  510.930913][T13303] usb 9-1: new high-speed USB device number 25 using dummy_hcd
[  510.993068][T22841] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7130'.
[  511.080398][T13303] usb 9-1: Using ep0 maxpacket: 8
[  511.082276][T13303] usb 9-1: New USB device found, idVendor=17cc, idProduct=041d, bcdDevice= 0.40
[  511.083550][T13303] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  511.083565][T13303] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  511.089860][T13303] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  511.089879][T13303] usb 9-1: Product: syz
[  511.089888][T13303] usb 9-1: Manufacturer: syz
[  511.089897][T13303] usb 9-1: SerialNumber: syz
[  511.367565][T13303] usb 9-1: unit 3 not found!
[  511.379669][T22851] loop7: detected capacity change from 0 to 32768
[  511.395753][T22851] ERROR: (device loop7): diRead: i_ino != di_number
[  511.395753][T22851] 
[  511.399603][T22851] ERROR: (device loop7): remounting filesystem as read-only
[  511.491373][T13303] usb 9-1: selecting invalid altsetting 1
[  511.491430][T13303] snd-usb-caiaq 9-1:1.1: can't set alt interface.
[  511.491781][T13303] usb 9-1: unable to init card! (ret=-5)
[  511.492092][T13303] snd-usb-caiaq 9-1:1.1: probe with driver snd-usb-caiaq failed with error -5
[  511.497162][T13303] usb 9-1: USB disconnect, device number 25
[  511.557744][T22799] udevd[22799]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  511.818585][T22875] netlink: 'syz.0.7146': attribute type 64 has an invalid length.
[  512.398736][T18176] libceph: connect (1)0.0.0.0:6789 error -22
[  512.398849][T18176] libceph: mon0 (1)0.0.0.0:6789 connect error
[  512.500621][T22925] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  512.658719][T18176] libceph: connect (1)0.0.0.0:6789 error -22
[  512.658846][T18176] libceph: mon0 (1)0.0.0.0:6789 connect error
[  513.158806][T22928] loop7: detected capacity change from 0 to 256
[  513.164541][T13303] libceph: connect (1)0.0.0.0:6789 error -22
[  513.169814][T13303] libceph: mon0 (1)0.0.0.0:6789 connect error
[  513.221614][T22920] ceph: No mds server is up or the cluster is laggy
[  513.269826][T22930] loop7: detected capacity change from 0 to 1024
[  513.342069][T22936] loop8: detected capacity change from 0 to 512
[  513.390747][T22936] EXT4-fs error (device loop8): ext4_validate_block_bitmap:445: comm syz.8.7172: bg 0: block 184: padding at end of block bitmap is not set
[  513.397315][T22936] loop8: lost filesystem error report for type 5 error -117
[  513.397866][T22936] EXT4-fs (loop8): Remounting filesystem read-only
[  513.401157][    C1] EXT4-fs (loop8): error count since last fsck: 1
[  513.401172][    C1] EXT4-fs (loop8): initial error at time 2000000318: ext4_validate_block_bitmap:445
[  513.401191][    C1] EXT4-fs (loop8): last error at time 2000000318: ext4_validate_block_bitmap:445
[  513.414758][T22941] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7173'.
[  513.414777][T22941] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7173'.
[  513.414787][T22941] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7173'.
[  513.425499][T22936] EXT4-fs (loop8): 1 truncate cleaned up
[  513.428869][T22936] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  513.434868][T22936] ext4 filesystem being mounted at /654/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  513.440576][   T28] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  513.440613][   T28] Quota error (device loop8): write_blk: dquota write failed
[  513.440643][   T28] Quota error (device loop8): remove_free_dqentry: Can't write block (5) with free entries
[  513.440668][   T28] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  513.440693][   T28] Quota error (device loop8): write_blk: dquota write failed
[  513.440716][   T28] Quota error (device loop8): free_dqentry: Can't move quota data block (5) to free list
[  513.440768][   T28] EXT4-fs (loop8): Quota write (off=8, len=24) cancelled because transaction is not started
[  513.440793][   T28] Quota error (device loop8): v2_write_file_info: Can't write info structure
[  513.440860][   T28] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  513.479346][T17759] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  513.617049][T22943] loop7: detected capacity change from 0 to 32768
[  513.650956][T22943] ERROR: (device loop7): diAllocAG: numfree > numinos
[  513.650956][T22943] 
[  513.651024][T22943] ERROR: (device loop7): remounting filesystem as read-only
[  513.651066][T22943] ialloc: diAlloc returned -5!
[  513.808782][T22949] input: syz0 as /devices/virtual/input/input32
[  514.271756][T18189] usb 9-1: new high-speed USB device number 26 using dummy_hcd
[  514.289310][T22984] netlink: 'syz.7.7194': attribute type 1 has an invalid length.
[  514.289360][T22984] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7194'.
[  514.440838][T18189] usb 9-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  514.441891][T18189] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  514.445709][T18189] usb 9-1: config 0 descriptor??
[  514.616387][ T5594] Bluetooth: hci0: unexpected event for opcode 0x0c5b
[  514.652761][T18189] udl 9-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  514.775104][T22993] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7199'.
[  514.875316][T18189] [drm] Initialized udl 0.0.1 for 9-1:0.0 on minor 2
[  514.875382][T18189] [drm] Initialized udl on minor 2
[  515.068222][T18189] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0
[  515.068617][T18189] udl 9-1:0.0: [drm] Cannot find any crtc or sizes
[  515.314136][T13292] usb 9-1: USB disconnect, device number 26
[  515.322665][T23004] loop7: detected capacity change from 0 to 512
[  515.331119][T23004] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended
[  515.331403][T18189] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  515.331783][T18189] udl 9-1:0.0: [drm] Cannot find any crtc or sizes
[  515.400847][T23004] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4223: comm syz.7.7204: Allocating blocks 41-42 which overlap fs metadata
[  515.407514][T23004] loop7: lost filesystem error report for type 5 error -117
[  515.409887][T23004] EXT4-fs (loop7): Remounting filesystem read-only
[  515.413038][    C1] EXT4-fs (loop7): error count since last fsck: 1
[  515.413055][    C1] EXT4-fs (loop7): initial error at time 2000000320: ext4_mb_mark_diskspace_used:4223
[  515.413072][    C1] EXT4-fs (loop7): last error at time 2000000320: ext4_mb_mark_diskspace_used:4223
[  515.436643][T23004] Quota error (device loop7): write_blk: dquota write failed
[  515.439765][T23004] Quota error (device loop7): find_free_dqentry: Can't write quota data block 5
[  515.443138][T23004] Quota error (device loop7): write_blk: dquota write failed
[  515.445698][T23004] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota
[  515.448992][T23004] EXT4-fs (loop7): 1 truncate cleaned up
[  515.452854][T23004] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  515.476780][T16539] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  515.689426][T23032] ip_tables: iptables: counters copy to user failed while replacing table
[  515.893873][T23049] loop8: detected capacity change from 0 to 4096
[  515.907869][T23049] EXT4-fs (loop8): Test dummy encryption mode enabled
[  515.907923][T23049] EXT4-fs (loop8): unsupported descriptor size 255
[  516.112187][T23061] tmpfs: Bad value for 'mpol'
[  516.224832][T23069] loop8: detected capacity change from 0 to 1024
[  516.762150][T23100] loop7: detected capacity change from 0 to 8192
[  516.785634][T23100] FAT-fs (loop7): error, corrupted directory (invalid entries)
[  516.785675][T23100] FAT-fs (loop7): Filesystem has been set read-only
[  516.812028][T23109] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7251'.
[  516.815720][T23109] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7251'.
[  517.146216][T23130] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7261'.
[  517.164680][T23129] loop8: detected capacity change from 0 to 512
[  517.175733][T23129] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended
[  517.183099][T23129] EXT4-fs (loop8): warning: checktime reached, running e2fsck is recommended
[  517.187327][T23129] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002]
[  517.190988][T23129] System zones: 0-2, 18-18, 34-34
[  517.195889][T23129] EXT4-fs error (device loop8): ext4_orphan_get:1403: comm syz.8.7260: inode #15: comm syz.8.7260: iget: illegal inode #
[  517.201819][T23129] loop8: lost filesystem error report for type 5 error -117
[  517.202298][T23129] EXT4-fs error (device loop8): ext4_orphan_get:1408: comm syz.8.7260: couldn't read orphan inode 15 (err -117)
[  517.210110][    C1] EXT4-fs (loop8): error count since last fsck: 1
[  517.210156][    C1] EXT4-fs (loop8): initial error at time 2000000322: ext4_orphan_get:1403
[  517.210250][    C1] EXT4-fs (loop8): last error at time 2000000322: ext4_orphan_get:1403
[  517.216814][T23129] loop8: lost filesystem error report for type 5 error -117
[  517.256740][T23129] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  517.311976][T17759] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  517.424044][T23150] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  517.483483][T23155] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  517.492665][T23158] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  517.729530][T23155] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[  517.729621][T23155] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  518.008950][T23186] loop8: detected capacity change from 0 to 512
[  518.025517][T23186] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  518.025615][T23186] ext4 filesystem being mounted at /691/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  518.036800][T23186] EXT4-fs warning (device loop8): verify_group_input:137: Cannot add at group 25 (only 1 groups)
[  518.068081][T17759] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  518.994514][T23219] overlayfs: failed to clone upperpath
[  519.707332][T23249] ip_tables: iptables: counters copy to user failed while replacing table
[  520.350173][T13292] usb 9-1: new high-speed USB device number 27 using dummy_hcd
[  520.511494][T13292] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  520.515708][T13292] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  520.519199][T13292] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  520.522537][T13292] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66
[  520.525541][T13292] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  520.531097][T13292] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  520.533996][T13292] usb 9-1: Product: syz
[  520.535477][T13292] usb 9-1: Manufacturer: syz
[  520.541762][T13292] cdc_wdm 9-1:1.0: skipping garbage
[  520.543717][T13292] cdc_wdm 9-1:1.0: skipping garbage
[  520.547074][T13292] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device
[  520.549264][T13292] cdc_wdm 9-1:1.0: Unknown control protocol
[  520.755849][    C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[  520.755940][    C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[  520.756154][    C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[  520.756167][    C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[  520.756406][    C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[  520.756416][    C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[  520.756654][    C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[  520.756664][    C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[  520.756884][    C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[  520.756896][    C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[  520.757114][    C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[  520.757125][    C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[  520.757340][    C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[  520.757351][    C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[  520.757567][    C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[  520.757579][    C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[  520.757861][    C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[  520.757872][    C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[  520.758107][    C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[  520.758118][    C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[  520.759947][T13303] usb 9-1: USB disconnect, device number 27
[  520.760162][    C1] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  520.875277][T23255] openvswitch: netlink: VXLAN extension 1 has unexpected len 8 expected 4
[  520.911347][T23257] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7320'.
[  522.047995][T23292] netlink: 'syz.8.7337': attribute type 1 has an invalid length.
[  522.409328][T23317] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7348'.
[  522.413518][T23317] ip6tnl1: entered allmulticast mode
[  522.448567][T23319] Cannot find del_set index 4 as target
[  522.455891][T23319] netlink: 'syz.0.7349': attribute type 1 has an invalid length.
[  522.508758][T23323] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[  522.508809][T23323] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[  522.508846][T23323] overlayfs: missing 'lowerdir'
[  522.823687][T23343] xt_TCPMSS: Only works on TCP SYN packets
[  522.995771][T23353] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7366'.
[  523.069248][T23360] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  524.245240][T23400] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  524.342940][T23404] usb usb7: check_ctrlrecip: process 23404 (syz.7.7387) requesting ep 01 but needs 81
[  524.509675][T23423] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7396'.
[  524.564881][T23428] loop7: detected capacity change from 0 to 2048
[  524.589449][T23428] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  524.758728][T23442] netlink: 186032 bytes leftover after parsing attributes in process `syz.8.7405'.
[  524.761934][T23442] openvswitch: netlink: ufid size 26372 bytes exceeds the range (1, 16)
[  524.764708][T23442] openvswitch: netlink: Message has 512 unknown bytes.
[  524.772979][T23444] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7406'.
[  524.782338][T23444] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7406'.
[  524.860423][T23454] loop8: detected capacity change from 0 to 8
[  524.886155][T23448] ptrace attach of "/syz-executor exec"[23450] was attempted by "/syz-executor exec"[23448]
[  524.927684][T23458] netlink: 344 bytes leftover after parsing attributes in process `syz.0.7412'.
[  525.141071][T23470] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7418'.
[  525.168146][T23466] loop7: detected capacity change from 0 to 40427
[  525.173859][T23466] F2FS-fs (loop7): invalid crc value
[  525.209062][T23466] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  525.232698][T23466] F2FS-fs (loop7): f2fs_disable_checkpoint starts, unusable: 0
[  525.235476][T23466] F2FS-fs (loop7): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  525.239030][T23466] F2FS-fs (loop7): Start checkpoint disabled!
[  525.264715][T23466] F2FS-fs (loop7): f2fs_disable_checkpoint finishes, err:0
[  525.267686][T23466] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6
[  525.828242][T23491] loop8: detected capacity change from 0 to 64
[  525.859325][T23491] syz.8.7425: attempt to access beyond end of device
[  525.859325][T23491] loop8: rw=8388608, sector=1024, nr_sectors = 2 limit=64
[  525.859390][T23491] Buffer I/O error on dev loop8, logical block 512, async page read
[  525.885572][T23491] syz.8.7425: attempt to access beyond end of device
[  525.885572][T23491] loop8: rw=8388608, sector=113152, nr_sectors = 2 limit=64
[  525.885636][T23491] Buffer I/O error on dev loop8, logical block 56576, async page read
[  526.106148][T23506] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  526.203044][T23512] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7434'.
[  526.203097][T23512] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7434'.
[  526.213666][T23512] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7434'.
[  526.213765][T23512] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7434'.
[  526.503254][T13295] usb 9-1: new high-speed USB device number 28 using dummy_hcd
[  526.558976][T23535] syz_tun: entered allmulticast mode
[  526.563627][T23535] pimreg: entered allmulticast mode
[  526.567166][T23534] syz_tun: left allmulticast mode
[  526.660708][T13295] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  526.665119][T13295] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  526.665177][T13295] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  526.665205][T13295] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  526.678434][T13295] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  526.678472][T13295] usb 9-1: Product: syz
[  526.678515][T13295] usb 9-1: Manufacturer: syz
[  526.678539][T13295] usb 9-1: SerialNumber: syz
[  526.683563][T23549] netlink: 136 bytes leftover after parsing attributes in process `syz.0.7452'.
[  526.762581][T23555] netlink: 68 bytes leftover after parsing attributes in process `syz.7.7454'.
[  526.898615][T13295] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 28 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  527.075943][T23563] loop7: detected capacity change from 0 to 32768
[  527.090330][T23563] BTRFS info: device /dev/loop7 (7:7) using temp-fsid 195c6d54-5cd3-4269-a4b1-178572620814
[  527.090425][T23563] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.7458 (23563)
[  527.107794][T23563] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  527.107867][T23563] BTRFS info (device loop7): using sha256 checksum algorithm
[  527.135793][T13295] usb 9-1: USB disconnect, device number 28
[  527.140886][T13295] usblp0: removed
[  527.189544][T23563] BTRFS info (device loop7): enabling ssd optimizations
[  527.189600][T23563] BTRFS info (device loop7): turning on async discard
[  527.189629][T23563] BTRFS info (device loop7): enabling free space tree
[  527.259253][T23581] tmpfs: Bad value for 'size'
[  527.296781][T16539] BTRFS info (device loop7): last unmount of filesystem 195c6d54-5cd3-4269-a4b1-178572620814
[  527.913003][T23611] loop8: detected capacity change from 0 to 4096
[  527.934877][T23611] ntfs3(loop8): Different NTFS sector size (2048) and media sector size (512).
[  527.954752][T23611] ntfs3(loop8): Mark volume as dirty due to NTFS errors
[  527.960637][T23611] ntfs3(loop8): Failed to load $Extend (-2).
[  527.960687][T23611] ntfs3(loop8): Failed to initialize $Extend.
[  529.315681][T23666] loop7: detected capacity change from 0 to 1024
[  529.316691][T23666] EXT4-fs: Ignoring removed nomblk_io_submit option
[  529.379360][T23666] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  529.523445][T23676] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7499'.
[  529.618929][T23678] FAULT_INJECTION: forcing a failure.
[  529.618929][T23678] name failslab, interval 1, probability 0, space 0, times 0
[  529.624209][T23678] CPU: 1 UID: 0 PID: 23678 Comm: syz.8.7500 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  529.624257][T23678] Tainted: [L]=SOFTLOCKUP
[  529.624263][T23678] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  529.624269][T23678] Call Trace:
[  529.624274][T23678]  <TASK>
[  529.624279][T23678]  dump_stack_lvl+0xe8/0x150
[  529.624299][T23678]  should_fail_ex+0x410/0x560
[  529.624322][T23678]  should_failslab+0xa8/0x100
[  529.624335][T23678]  __kmalloc_noprof+0xfe/0x720
[  529.624345][T23678]  ? multiq_init+0x149/0x2b0
[  529.624357][T23678]  ? multiq_init+0x149/0x2b0
[  529.624366][T23678]  ? __pfx_tcf_chain_head_change_dflt+0x10/0x10
[  529.624378][T23678]  multiq_init+0x149/0x2b0
[  529.624388][T23678]  ? __pfx_multiq_init+0x10/0x10
[  529.624398][T23678]  qdisc_create+0x7b5/0xf00
[  529.624408][T23678]  ? lockdep_rtnl_is_held+0x26/0x40
[  529.624424][T23678]  tc_modify_qdisc+0x17af/0x2390
[  529.624444][T23678]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  529.624455][T23678]  ? __dev_queue_xmit+0x29b/0x3820
[  529.624487][T23678]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  529.624495][T23678]  rtnetlink_rcv_msg+0x7b9/0xc00
[  529.624505][T23678]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  529.624514][T23678]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  529.624521][T23678]  ? ref_tracker_free+0x689/0x830
[  529.624531][T23678]  ? __pfx_ref_tracker_free+0x10/0x10
[  529.624543][T23678]  netlink_rcv_skb+0x226/0x4a0
[  529.624554][T23678]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  529.624563][T23678]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  529.624578][T23678]  ? netlink_deliver_tap+0x2e/0x1b0
[  529.624588][T23678]  ? netlink_deliver_tap+0x2e/0x1b0
[  529.624607][T23678]  netlink_unicast+0x7bd/0x940
[  529.624629][T23678]  netlink_sendmsg+0x813/0xb40
[  529.624654][T23678]  ? __pfx_netlink_sendmsg+0x10/0x10
[  529.624678][T23678]  ? apparmor_socket_sendmsg+0x98/0x360
[  529.624699][T23678]  ? __pfx_netlink_sendmsg+0x10/0x10
[  529.624710][T23678]  sock_sendmsg_nosec+0x13a/0x180
[  529.624723][T23678]  ____sys_sendmsg+0x54e/0x850
[  529.624735][T23678]  ? __pfx_____sys_sendmsg+0x10/0x10
[  529.624748][T23678]  ? import_iovec+0x73/0xa0
[  529.624759][T23678]  ___sys_sendmsg+0x2a5/0x360
[  529.624767][T23678]  ? __lock_acquire+0x6df/0x2e50
[  529.624778][T23678]  ? __pfx____sys_sendmsg+0x10/0x10
[  529.624789][T23678]  ? futex_wait+0x2a2/0x390
[  529.624811][T23678]  ? __fget_files+0x2a/0x420
[  529.624823][T23678]  ? __fget_files+0x3a2/0x420
[  529.624836][T23678]  __x64_sys_sendmsg+0x1b1/0x290
[  529.624848][T23678]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  529.624866][T23678]  do_syscall_64+0x166/0x520
[  529.624876][T23678]  ? trace_irq_disable+0x3b/0x140
[  529.624884][T23678]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  529.624894][T23678]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  529.624902][T23678] RIP: 0033:0x7f4d9e79e1d9
[  529.624911][T23678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  529.624919][T23678] RSP: 002b:00007f4d9f624028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  529.624929][T23678] RAX: ffffffffffffffda RBX: 00007f4d9ea25fa0 RCX: 00007f4d9e79e1d9
[  529.624935][T23678] RDX: 000000000004c804 RSI: 0000200000000140 RDI: 0000000000000004
[  529.624940][T23678] RBP: 00007f4d9e835888 R08: 0000000000000000 R09: 0000000000000000
[  529.624945][T23678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  529.624952][T23678] R13: 00007f4d9ea26038 R14: 00007f4d9ea25fa0 R15: 00007fff335a45c8
[  529.624964][T23678]  </TASK>
[  529.661027][T16539] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  530.002047][T23697] lo speed is unknown, defaulting to 1000
[  530.133979][T23697] netlink: 128 bytes leftover after parsing attributes in process `syz.8.7507'.
[  530.317263][T23703] xt_hashlimit: size too large, truncated to 1048576
[  530.860203][T18176] usb 9-1: new high-speed USB device number 29 using dummy_hcd
[  531.011938][T18176] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  531.017159][T18176] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  531.021757][T18176] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  531.026171][T18176] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66
[  531.030521][T18176] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  531.038789][T18176] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  531.044547][T18176] usb 9-1: Product: syz
[  531.046838][T18176] usb 9-1: Manufacturer: syz
[  531.064712][T18176] cdc_wdm 9-1:1.0: probe with driver cdc_wdm failed with error -22
[  531.274249][T18176] usb 9-1: USB disconnect, device number 29
[  531.283117][T23737] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7522'.
[  531.283183][T23737] netlink: 43 bytes leftover after parsing attributes in process `syz.0.7522'.
[  531.283457][T23737] netlink: 'syz.0.7522': attribute type 5 has an invalid length.
[  531.283468][T23737] netlink: 43 bytes leftover after parsing attributes in process `syz.0.7522'.
[  531.389886][T23745] netlink: 'syz.0.7526': attribute type 1 has an invalid length.
[  531.493418][T23751] sctp: [Deprecated]: syz.0.7529 (pid 23751) Use of int in max_burst socket option deprecated.
[  531.493418][T23751] Use struct sctp_assoc_value instead
[  531.565337][T23755] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  531.596512][   T33] audit: type=1326 audit(2000000336.916:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23756 comm="syz.0.7532" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac6d9e1d9 code=0x7ffc0000
[  531.596674][   T33] audit: type=1326 audit(2000000336.916:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23756 comm="syz.0.7532" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac6d9e1d9 code=0x7ffc0000
[  531.612065][   T33] audit: type=1326 audit(2000000336.926:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23756 comm="syz.0.7532" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac6d9e1d9 code=0x7ffc0000
[  531.612091][   T33] audit: type=1326 audit(2000000336.926:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23756 comm="syz.0.7532" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac6d9e1d9 code=0x7ffc0000
[  531.612461][   T33] audit: type=1326 audit(2000000336.926:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23756 comm="syz.0.7532" exe="/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f3ac6d9e1d9 code=0x7ffc0000
[  531.612598][   T33] audit: type=1326 audit(2000000336.926:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23756 comm="syz.0.7532" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac6d9e1d9 code=0x7ffc0000
[  531.612695][   T33] audit: type=1326 audit(2000000336.926:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23756 comm="syz.0.7532" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac6d9e1d9 code=0x7ffc0000
[  531.613317][   T33] audit: type=1326 audit(2000000336.926:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23756 comm="syz.0.7532" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac6d9e1d9 code=0x7ffc0000
[  531.613335][   T33] audit: type=1326 audit(2000000336.926:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23756 comm="syz.0.7532" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac6d9e1d9 code=0x7ffc0000
[  531.613349][   T33] audit: type=1326 audit(2000000336.926:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23756 comm="syz.0.7532" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3ac6d9e1d9 code=0x7ffc0000
[  531.957820][T23773] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7540'.
[  532.046563][T23781] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7544'.
[  532.049969][T23781] netlink: 'syz.0.7544': attribute type 2 has an invalid length.
[  532.053388][T23781] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7544'.
[  533.032883][T23804] No source specified
[  533.185946][T23822] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes.
[  533.303548][T23824] loop8: detected capacity change from 0 to 32768
[  533.308168][T23824] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.7565 (23824)
[  533.342534][T23824] BTRFS info (device loop8): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  533.345874][T23824] BTRFS info (device loop8): using sha256 checksum algorithm
[  533.384002][T23824] BTRFS info (device loop8): turning off barriers
[  533.384047][T23824] BTRFS info (device loop8): enabling free space tree
[  533.501783][T17759] BTRFS info (device loop8): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  534.337064][T23858] lo speed is unknown, defaulting to 1000
[  534.535949][T23868] loop7: detected capacity change from 0 to 1024
[  534.565965][T23868] hfsplus: invalid attributes max_key_len 0
[  534.566127][T23868] hfsplus: failed to load attributes file
[  534.966345][T23889] lo speed is unknown, defaulting to 1000
[  535.085088][T23898] tmpfs: Bad value for 'mpol'
[  535.190808][T23904] loop8: detected capacity change from 0 to 4096
[  535.213973][T23912] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  535.247759][T23914] loop7: detected capacity change from 0 to 1024
[  535.256359][T23914] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a043c01c, mo2=0002]
[  535.256445][T23914] System zones: 0-1, 3-12
[  535.257265][T23914] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  535.278893][T23904] NILFS (loop8): nilfs_sufile_do_free: segment 9 is already clean
[  535.285973][T16539] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  535.985579][T23958] loop7: detected capacity change from 0 to 8192
[  535.993940][T23958] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  536.230500][T23977] loop7: detected capacity change from 0 to 16
[  536.263024][T23977] erofs (device loop7): mounted with root inode @ nid 36.
[  536.288474][T23977] syz.7.7623: attempt to access beyond end of device
[  536.288474][T23977] loop7: rw=8912896, sector=68719476744, nr_sectors = 32 limit=16
[  536.301542][T23977] syz.7.7623: attempt to access beyond end of device
[  536.301542][T23977] loop7: rw=8388608, sector=68719476744, nr_sectors = 8 limit=16
[  536.316704][T23977] syz.7.7623: attempt to access beyond end of device
[  536.316704][T23977] loop7: rw=8388608, sector=68719476744, nr_sectors = 8 limit=16
[  536.320218][T13292] usb 9-1: new high-speed USB device number 30 using dummy_hcd
[  536.336533][T23977] syz.7.7623: attempt to access beyond end of device
[  536.336533][T23977] loop7: rw=8388608, sector=68719476744, nr_sectors = 8 limit=16
[  536.342117][T23977] syz.7.7623: attempt to access beyond end of device
[  536.342117][T23977] loop7: rw=8388608, sector=68719476744, nr_sectors = 8 limit=16
[  536.347659][T23977] syz.7.7623: attempt to access beyond end of device
[  536.347659][T23977] loop7: rw=8388608, sector=68719476744, nr_sectors = 8 limit=16
[  536.361846][T23976] syz.7.7623: attempt to access beyond end of device
[  536.361846][T23976] loop7: rw=8388608, sector=68719476744, nr_sectors = 8 limit=16
[  536.368775][T23976] syz.7.7623: attempt to access beyond end of device
[  536.368775][T23976] loop7: rw=8388608, sector=68719476744, nr_sectors = 8 limit=16
[  536.374323][T23977] syz.7.7623: attempt to access beyond end of device
[  536.374323][T23977] loop7: rw=8388608, sector=68719476744, nr_sectors = 8 limit=16
[  536.385943][T23977] syz.7.7623: attempt to access beyond end of device
[  536.385943][T23977] loop7: rw=8388608, sector=68719476744, nr_sectors = 8 limit=16
[  536.460828][T13292] usb 9-1: Using ep0 maxpacket: 32
[  536.463020][T13292] usb 9-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  536.466244][T13292] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  536.466263][T13292] usb 9-1: Product: syz
[  536.466272][T13292] usb 9-1: Manufacturer: syz
[  536.466282][T13292] usb 9-1: SerialNumber: syz
[  536.479002][T13292] usb 9-1: config 0 descriptor??
[  536.482654][T13292] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  536.482771][T13292] dvb-usb: bulk message failed: -22 (4/0)
[  536.482780][T13292] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  536.482839][T13292] dvb-usb: bulk message failed: -22 (5/0)
[  536.482847][T13292] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  536.492466][T13292] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  536.493157][T13292] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  536.493195][T13292] usb 9-1: media controller created
[  536.603187][T13292] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  536.646804][T13292] usb 9-1: selecting invalid altsetting 3
[  536.648546][T13292] ttusb2: set interface to alts=3 failed
[  536.680676][T13292] DVB: Unable to find symbol tda10086_attach()
[  536.680734][T13292] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  536.683288][T13292] dvb-usb: bulk message failed: -22 (4/0)
[  536.683304][T13292] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  536.683384][T13292] dvb-usb: bulk message failed: -22 (5/0)
[  536.683393][T13292] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  536.683438][T13292] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  536.715645][T23995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7632'.
[  537.475769][T24034] tipc: New replicast peer: 2001:0000:0000:0000:0000:0000:0000:0000
[  537.902168][   T33] kauditd_printk_skb: 45 callbacks suppressed
[  537.902242][   T33] audit: type=1326 audit(2000000343.226:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24066 comm="syz.0.7666" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3ac6d9e1d9 code=0x0
[  538.425294][T24070] loop7: detected capacity change from 0 to 128
[  538.428975][T24070] affs: Invalid blocksize (512, 1024, 2048, 4096 allowed)
[  538.690376][ T5594] Bluetooth: hci0: command 0x0419 tx timeout
[  538.690743][T23962] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  538.700587][ T5045] usb 9-1: USB disconnect, device number 30
[  538.735726][ T5045] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  538.740976][T24082] netlink: 92 bytes leftover after parsing attributes in process `syz.7.7673'.
[  538.741042][T24082] netlink: 92 bytes leftover after parsing attributes in process `syz.7.7673'.
[  539.039385][T24092] smpboot: CPU 1 is now offline
[  539.084358][T24098] netlink: 'syz.0.7680': attribute type 4 has an invalid length.
[  539.599798][T24095] smpboot: Booting Node 1 Processor 1 APIC 0x1
[  539.669141][T24115] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7688'.
[  539.669157][T24115] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7688'.
[  539.669164][T24115] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7688'.
[  539.784810][T24121] loop8: detected capacity change from 0 to 256
[  539.944225][ T5045] hid_parser_main: 30 callbacks suppressed
[  539.944329][ T5045] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0
[  539.948635][ T5045] hid-generic 0000:0000:0000.0016: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  541.124586][T24186] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7719'.
[  541.124647][T24186] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7719'.
[  541.176723][T24188] Bluetooth: ISO socket layer initialized
[  541.239625][T24188] loop8: detected capacity change from 0 to 2048
[  541.265703][T24188] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  541.404133][T24196] netlink: 36 bytes leftover after parsing attributes in process `syz.8.7724'.
[  541.529913][T24205] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7728'.
[  541.594033][T24211] loop8: detected capacity change from 0 to 8
[  541.606750][T24211] SQUASHFS error: lzo decompression failed, data probably corrupt
[  541.606806][T24211] SQUASHFS error: Failed to read block 0x91: -5
[  541.637838][T24211] SQUASHFS error: Unable to read metadata cache entry [8f]
[  541.641155][T24211] SQUASHFS error: Unable to read inode 0x11f
[  541.918802][T24230] block nbd7: shutting down sockets
[  541.959453][T24235] Set syz0 is full, maxelem 0 reached
[  541.965197][T24235] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7741'.
[  542.061973][T24246] netlink: 'syz.8.7745': attribute type 83 has an invalid length.
[  542.297293][T24281] qrtr: Invalid version 164
[  542.727178][T24296] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  542.764893][T24298] netlink: 'syz.8.7770': attribute type 2 has an invalid length.
[  543.228811][   T33] audit: type=1326 audit(2000000348.526:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24309 comm="syz.0.7775" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac6d9e1d9 code=0x7ffc0000
[  543.236800][   T33] audit: type=1326 audit(2000000348.526:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24309 comm="syz.0.7775" exe="/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3ac6d9e1d9 code=0x7ffc0000
[  543.251610][   T33] audit: type=1326 audit(2000000348.526:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24309 comm="syz.0.7775" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac6d9e1d9 code=0x7ffc0000
[  543.251747][   T33] audit: type=1326 audit(2000000348.536:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24309 comm="syz.0.7775" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3ac6d9e1d9 code=0x7ffc0000
[  543.251894][   T33] audit: type=1326 audit(2000000348.536:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24309 comm="syz.0.7775" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac6d9e1d9 code=0x7ffc0000
[  543.252116][   T33] audit: type=1326 audit(2000000348.536:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24309 comm="syz.0.7775" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac6d9e1d9 code=0x7ffc0000
[  543.973686][ T4994] Bluetooth: hci0: command 0x0419 tx timeout
[  544.500236][T13292] usb 9-1: new high-speed USB device number 31 using dummy_hcd
[  544.596877][T24361] netlink: 280 bytes leftover after parsing attributes in process `syz.0.7797'.
[  544.651913][T13292] usb 9-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  544.652159][T24365] gre2: entered promiscuous mode
[  544.661083][T13292] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  544.661132][T13292] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  544.661169][T13292] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  544.676163][T13292] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  544.676212][T13292] usb 9-1: Product: syz
[  544.676268][T13292] usb 9-1: Manufacturer: syz
[  544.676301][T13292] usb 9-1: SerialNumber: syz
[  544.699160][T13292] usb 9-1: config 0 descriptor??
[  544.703058][T24338] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[  544.706386][T24338] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[  544.718873][T13292] usb 9-1: ucan: probing device on interface #0
[  545.129545][T13292] usb 9-1: ucan: failed to retrieve device info
[  545.129599][T13292] usb 9-1: ucan: probe failed; try to update the device firmware
[  545.155693][T13292] usb 9-1: USB disconnect, device number 31
[  545.439353][T24395] FAULT_INJECTION: forcing a failure.
[  545.439353][T24395] name fail_futex, interval 1, probability 0, space 0, times 0
[  545.447525][T24395] CPU: 0 UID: 0 PID: 24395 Comm: syz.7.7812 Tainted: G S           L      syzkaller #0 PREEMPT(full) 
[  545.447572][T24395] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP
[  545.447579][T24395] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  545.447587][T24395] Call Trace:
[  545.447595][T24395]  <TASK>
[  545.447602][T24395]  dump_stack_lvl+0xe8/0x150
[  545.447628][T24395]  should_fail_ex+0x410/0x560
[  545.447655][T24395]  get_futex_key+0x1b4/0x1580
[  545.447679][T24395]  ? __pfx_get_futex_key+0x10/0x10
[  545.447723][T24395]  futex_wake+0x119/0x5f0
[  545.447747][T24395]  ? call_rcu+0x665/0x8b0
[  545.447764][T24395]  ? __pfx_futex_wake+0x10/0x10
[  545.447784][T24395]  ? keyctl_session_to_parent+0xb5/0xa30
[  545.447804][T24395]  ? keyctl_session_to_parent+0x454/0xa30
[  545.447823][T24395]  ? keyctl_session_to_parent+0xb5/0xa30
[  545.447850][T24395]  do_futex+0x458/0x4e0
[  545.447871][T24395]  ? __pfx_do_futex+0x10/0x10
[  545.447893][T24395]  __se_sys_futex+0x3a8/0x450
[  545.447914][T24395]  ? __pfx___se_sys_futex+0x10/0x10
[  545.447931][T24395]  ? rcu_is_watching+0x16/0xb0
[  545.447957][T24395]  ? __x64_sys_futex+0x21/0xf0
[  545.447976][T24395]  do_syscall_64+0x166/0x520
[  545.448020][T24395]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  545.448039][T24395]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  545.448053][T24395] RIP: 0033:0x7f80a379e1d9
[  545.448066][T24395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  545.448078][T24395] RSP: 002b:00007f80a19f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  545.448095][T24395] RAX: ffffffffffffffda RBX: 00007f80a3a25fa8 RCX: 00007f80a379e1d9
[  545.448105][T24395] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f80a3a25fac
[  545.448113][T24395] RBP: 00007f80a3a25fa0 R08: 3fffffffffffffff R09: 0000000000000000
[  545.448123][T24395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  545.448132][T24395] R13: 00007f80a3a26038 R14: 00007ffd8343db80 R15: 00007ffd8343dc68
[  545.448154][T24395]  </TASK>
[  545.587641][   T33] audit: type=1326 audit(2000000350.906:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24397 comm="syz.7.7813" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f80a379e1d9 code=0x0
[  545.666890][   T33] audit: type=1326 audit(2000000350.986:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24399 comm="syz.7.7814" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f80a379e1d9 code=0x0
[  545.983776][T24414] loop8: detected capacity change from 0 to 2048
[  546.056145][T24414] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  546.073369][T24414] EXT4-fs (loop8): stripe (227) is not aligned with cluster size (16), stripe is disabled
[  546.077479][T24414] EXT4-fs error (device loop8): __ext4_remount:6872: comm syz.8.7820: Abort forced by user
[  546.082906][T24414] EXT4-fs (loop8): Remounting filesystem read-only
[  546.082942][T24414] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000.
[  546.115479][T17759] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  546.130659][T24421] overlayfs: failed to clone upperpath
[  546.408513][T24435] bond11: option tlb_dynamic_lb: invalid value (8)
[  546.417555][T24435] bond11 (unregistering): Released all slaves
[  546.581100][T24445] loop8: detected capacity change from 0 to 2048
[  546.588759][T24445] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  546.608624][T24448] loop7: detected capacity change from 0 to 256
[  546.611242][T24448] exfat: Deprecated parameter 'namecase'
[  546.611266][T24448] exfat: Deprecated parameter 'utf8'
[  546.617472][T24448] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d)
[  547.149075][   T33] audit: type=1804 audit(2000000352.466:923): pid=24467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.7843" name="/newroot/850/file0" dev="tmpfs" ino=4448 res=1 errno=0
[  547.813493][T24501] loop8: detected capacity change from 0 to 16
[  547.814644][T24501] erofs (device loop8): mounted with root inode @ nid 36.
[  547.817273][T24501] erofs (device loop8): invalid de[0].nameoff 87 @ nid 36
[  547.863031][T24506] loop8: detected capacity change from 0 to 1024
[  547.962914][T24511] comedi comedi3: dt2817: I/O base address or length out of range
[  548.747785][T24563] loop8: detected capacity change from 0 to 512
[  548.768462][T24563] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  548.768576][T24563] ext4 filesystem being mounted at /872/sys supports timestamps until 2038-01-19 (0x7fffffff)
[  548.810988][T17759] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  548.976187][T24576] loop8: detected capacity change from 0 to 512
[  549.139118][T24588] loop8: detected capacity change from 0 to 256
[  549.144135][T24588] exfat: Deprecated parameter 'utf8'
[  549.144172][T24588] exfat: Deprecated parameter 'utf8'
[  549.144235][T24588] exfat: Deprecated parameter 'utf8'
[  549.159828][T24588] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xc70f51ff, utbl_chksum : 0xe619d30d)
[  549.289504][T24596] loop8: detected capacity change from 0 to 1024
[  549.293513][T24596] EXT4-fs (loop8): blocks per group (32769) and clusters per group (8192) inconsistent
[  549.374259][T24601] netlink: 'syz.7.7904': attribute type 2 has an invalid length.
[  549.374320][T24601] netlink: 'syz.7.7904': attribute type 7 has an invalid length.
[  549.381766][T24601] U: entered promiscuous mode
[  549.418152][T24604] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993
[  549.610313][    T9] usb 9-1: new full-speed USB device number 32 using dummy_hcd
[  549.762057][    T9] usb 9-1: not running at top speed; connect to a high speed hub
[  549.762112][    T9] usb 9-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  549.763078][    T9] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  549.763088][    T9] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2
[  549.763109][    T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  549.775883][    T9] uvcvideo 9-1:1.0: Found UVC 1.00 device <unnamed> (046d:0825)
[  549.775954][    T9] uvcvideo 9-1:1.0: No streaming interface found for terminal 32770.
[  549.775969][    T9] uvcvideo 9-1:1.0: Entity type for entity Input 1 was not initialized!
[  549.986633][T18176] usb 9-1: USB disconnect, device number 32
[  550.079749][T24617] loop7: detected capacity change from 0 to 32768
[  550.101094][T24617] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  550.186779][T16539] ocfs2: Unmounting device (7,7) on (node local)
[  550.395038][T24652] netlink: 'syz.7.7927': attribute type 46 has an invalid length.
[  550.395087][T24652] netlink: 'syz.7.7927': attribute type 28 has an invalid length.
[  550.886549][T24697] batman_adv: batadv0: Adding interface: macvtap1
[  550.890769][T24697] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  550.890788][T24697] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active
[  551.067796][   T33] audit: type=1326 audit(2000000356.386:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24714 comm="syz.8.7958" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d9e79e1d9 code=0x7ffc0000
[  551.067879][   T33] audit: type=1326 audit(2000000356.386:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24714 comm="syz.8.7958" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d9e79e1d9 code=0x7ffc0000
[  551.085671][   T33] audit: type=1326 audit(2000000356.406:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24714 comm="syz.8.7958" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d9e79e1d9 code=0x7ffc0000
[  551.085752][   T33] audit: type=1326 audit(2000000356.406:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24714 comm="syz.8.7958" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d9e79e1d9 code=0x7ffc0000
[  551.085780][   T33] audit: type=1326 audit(2000000356.406:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24714 comm="syz.8.7958" exe="/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f4d9e79e1d9 code=0x7ffc0000
[  551.112477][   T33] audit: type=1326 audit(2000000356.406:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24714 comm="syz.8.7958" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d9e79e1d9 code=0x7ffc0000
[  551.112562][   T33] audit: type=1326 audit(2000000356.436:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24714 comm="syz.8.7958" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d9e79e1d9 code=0x7ffc0000
[  551.130275][   T33] audit: type=1326 audit(2000000356.446:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24714 comm="syz.8.7958" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4d9e79e1d9 code=0x7ffc0000
[  551.131693][   T33] audit: type=1326 audit(2000000356.456:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24714 comm="syz.8.7958" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f4d9e79e1d9 code=0x7ffc0000
[  551.533932][T24727] smpboot: CPU 1 is now offline
[  552.999666][T24766] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  553.191394][T24776] IPVS: Scheduler module ip_vs_mh  not found
[  553.825383][T24783] loop7: detected capacity change from 0 to 256
[  553.869938][T24783] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d)
[  553.963375][T24787] loop8: detected capacity change from 0 to 512
[  554.016797][T24787] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  554.024527][T24787] ext4 filesystem being mounted at /910/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  554.086127][T17759] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  554.229275][T24805] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7999'.
[  554.385143][T24812] openvswitch: netlink: Duplicate or invalid key (type 0).
[  554.438147][T24818] netlink: 4595 bytes leftover after parsing attributes in process `syz.8.8005'.
[  554.465080][T24818] netlink: 4595 bytes leftover after parsing attributes in process `syz.8.8005'.
[  554.541149][T24824] FAULT_INJECTION: forcing a failure.
[  554.541149][T24824] name failslab, interval 1, probability 0, space 0, times 0
[  554.569331][T24824] CPU: 0 UID: 0 PID: 24824 Comm: syz.7.8008 Tainted: G S           L      syzkaller #0 PREEMPT(full) 
[  554.569365][T24824] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP
[  554.569370][T24824] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  554.569376][T24824] Call Trace:
[  554.569379][T24824]  <TASK>
[  554.569384][T24824]  dump_stack_lvl+0xe8/0x150
[  554.569402][T24824]  should_fail_ex+0x410/0x560
[  554.569418][T24824]  should_failslab+0xa8/0x100
[  554.569428][T24824]  ? security_inode_alloc+0x39/0x310
[  554.569439][T24824]  kmem_cache_alloc_noprof+0xa1/0x600
[  554.569453][T24824]  ? security_inode_alloc+0x39/0x310
[  554.569464][T24824]  security_inode_alloc+0x39/0x310
[  554.569473][T24824]  inode_init_always_gfp+0x97e/0xd30
[  554.569486][T24824]  ? __pfx_sock_alloc_inode+0x10/0x10
[  554.569497][T24824]  alloc_inode+0x82/0x1b0
[  554.569507][T24824]  sock_create_lite+0x8b/0x510
[  554.569520][T24824]  __netlink_kernel_create+0xc8/0x720
[  554.569531][T24824]  ? __kasan_kmalloc+0x93/0xb0
[  554.569540][T24824]  ? __pfx___netlink_kernel_create+0x10/0x10
[  554.569549][T24824]  ? __kmalloc_cache_noprof+0x14d/0x600
[  554.569556][T24824]  ? uevent_net_init+0xdb/0x2d0
[  554.569566][T24824]  ? uevent_net_init+0xdb/0x2d0
[  554.569579][T24824]  uevent_net_init+0xf9/0x2d0
[  554.569590][T24824]  ? audit_net_init+0xee/0x200
[  554.569601][T24824]  ? __pfx_uevent_net_init+0x10/0x10
[  554.569611][T24824]  ? __pfx_uevent_net_rcv+0x10/0x10
[  554.569622][T24824]  ? __kmalloc_noprof+0x38c/0x720
[  554.569629][T24824]  ? __kmalloc_noprof+0x1ab/0x720
[  554.569653][T24824]  ? ops_init+0x7b/0x5d0
[  554.569664][T24824]  ops_init+0x35d/0x5d0
[  554.569676][T24824]  setup_net+0x118/0x350
[  554.569685][T24824]  ? __pfx_setup_net+0x10/0x10
[  554.569692][T24824]  ? down_read_killable+0x1bb/0x3b0
[  554.569703][T24824]  ? __ns_common_init+0x2fc/0x4a0
[  554.569716][T24824]  copy_net_ns+0x53b/0x780
[  554.569725][T24824]  create_new_namespaces+0x3f0/0x6b0
[  554.569736][T24824]  ? security_capable+0x7e/0x2c0
[  554.569746][T24824]  unshare_nsproxy_namespaces+0x149/0x190
[  554.569758][T24824]  ksys_unshare+0x5a7/0x950
[  554.569773][T24824]  ? __pfx_ksys_unshare+0x10/0x10
[  554.569785][T24824]  ? rcu_is_watching+0x16/0xb0
[  554.569798][T24824]  __x64_sys_unshare+0x38/0x50
[  554.569808][T24824]  do_syscall_64+0x166/0x520
[  554.569817][T24824]  ? trace_irq_disable+0x3b/0x140
[  554.569825][T24824]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  554.569834][T24824]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  554.569842][T24824] RIP: 0033:0x7f80a379e1d9
[  554.569882][T24824] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  554.569889][T24824] RSP: 002b:00007f80a19f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  554.569900][T24824] RAX: ffffffffffffffda RBX: 00007f80a3a25fa0 RCX: 00007f80a379e1d9
[  554.569906][T24824] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000004c000680
[  554.569912][T24824] RBP: 00007f80a3835888 R08: 0000000000000000 R09: 0000000000000000
[  554.569917][T24824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  554.569922][T24824] R13: 00007f80a3a26038 R14: 00007f80a3a25fa0 R15: 00007ffd8343dc68
[  554.569935][T24824]  </TASK>
[  554.575542][T24824] kobject_uevent: unable to create netlink socket!
[  554.760530][T24829] xt_hashlimit: size too large, truncated to 1048576
[  555.177669][T24843] netlink: 16 bytes leftover after parsing attributes in process `syz.8.8016'.
[  555.177709][T24843] netlink: 16 bytes leftover after parsing attributes in process `syz.8.8016'.
[  555.177742][T24843] netlink: 24 bytes leftover after parsing attributes in process `syz.8.8016'.
[  555.561674][T24853] loop8: detected capacity change from 0 to 4096
[  555.587420][T24853] ntfs3(loop8): Mark volume as dirty due to NTFS errors
[  555.604520][T24853] ntfs3(loop8): Failed to load $Extend (-22).
[  555.608483][T24853] ntfs3(loop8): Failed to initialize $Extend.
[  556.127104][T24870] loop8: detected capacity change from 0 to 8
[  556.287668][T24880] loop8: detected capacity change from 0 to 1024
[  556.318951][T24880] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  556.382849][T17759] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  556.516577][T24892] team0: Port device bond0 removed
[  556.518870][T24892] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  556.548680][T24892] xfrm0: left allmulticast mode
[  556.552113][T24892] team0: Device xfrm0 is of different type
[  556.576179][T24892] tipc: Enabling of bearer <eth:team0> rejected, max 3 bearers permitted
[  557.000891][T24912] loop8: detected capacity change from 0 to 32768
[  557.014269][T24912] XFS (loop8): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  557.038860][T24912] XFS (loop8): Ending clean mount
[  557.077140][T17759] XFS (loop8): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  557.256467][   T33] audit: type=1326 audit(2000000362.576:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24921 comm="syz.0.8044" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac6d9e1d9 code=0x7ffc0000
[  557.256538][   T33] audit: type=1326 audit(2000000362.576:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24921 comm="syz.0.8044" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac6d9e1d9 code=0x7ffc0000
[  557.256600][   T33] audit: type=1326 audit(2000000362.576:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24921 comm="syz.0.8044" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac6d9e1d9 code=0x7ffc0000
[  557.286733][   T33] audit: type=1326 audit(2000000362.606:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24921 comm="syz.0.8044" exe="/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f3ac6d9e1d9 code=0x7ffc0000
[  557.286833][   T33] audit: type=1326 audit(2000000362.606:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24921 comm="syz.0.8044" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac6d9e1d9 code=0x7ffc0000
[  557.286889][   T33] audit: type=1326 audit(2000000362.606:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24921 comm="syz.0.8044" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac6d9e1d9 code=0x7ffc0000
[  557.321047][   T33] audit: type=1326 audit(2000000362.646:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24921 comm="syz.0.8044" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac6d9e1d9 code=0x7ffc0000
[  557.359416][   T33] audit: type=1326 audit(2000000362.676:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24921 comm="syz.0.8044" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3ac6d9e1d9 code=0x7ffc0000
[  557.359475][   T33] audit: type=1326 audit(2000000362.676:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24921 comm="syz.0.8044" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f3ac6d9e1d9 code=0x7ffc0000
[  557.764920][T24932] loop8: detected capacity change from 0 to 256
[  557.876716][T24936] input: syz1 as /devices/virtual/input/input34
[  557.984994][T24942] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8052'.
[  557.988698][T24942] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8052'.
[  557.992730][T24942] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8052'.
[  558.049636][T24946] loop8: detected capacity change from 0 to 512
[  558.082214][T24946] EXT4-fs error (device loop8): ext4_validate_block_bitmap:436: comm syz.8.8054: bg 0: block 13: invalid block bitmap
[  558.093092][T24946] loop8: lost filesystem error report for type 5 error -117
[  558.093587][T24946] EXT4-fs (loop8): Remounting filesystem read-only
[  558.098890][T24946] EXT4-fs (loop8): 2 truncates cleaned up
[  558.101076][    C0] EXT4-fs (loop8): error count since last fsck: 1
[  558.101086][    C0] EXT4-fs (loop8): initial error at time 2000000363: ext4_validate_block_bitmap:436
[  558.101095][    C0] EXT4-fs (loop8): last error at time 2000000363: ext4_validate_block_bitmap:436
[  558.111741][T24946] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  558.144277][T17759] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  559.204766][T24987] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8072'.
[  559.256081][T24989] netlink: 'syz.7.8073': attribute type 2 has an invalid length.
[  559.303886][T24991] netlink: 7 bytes leftover after parsing attributes in process `syz.7.8074'.
[  559.993892][T25012] cgroup: Bad value for 'name'
[  560.416940][T25044] overlayfs: failed to clone upperpath
[  560.423452][T25043] loop7: detected capacity change from 0 to 1024
[  560.940520][T25071] loop7: detected capacity change from 0 to 16
[  560.948204][T25071] erofs (device loop7): mounted with root inode @ nid 36.
[  561.027384][T10749] erofs (device loop7): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000
[  561.075500][T25071] erofs (device loop7): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 4096
[  561.087236][T25071] erofs (device loop7): read error -117 @ 0 of nid 89
[  561.132636][   T33] audit: type=1800 audit(2000000366.456:942): pid=25071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.8113" name="file2" dev="loop7" ino=89 res=0 errno=0
[  561.827187][T25095] loop8: detected capacity change from 0 to 512
[  561.836080][T25095] EXT4-fs error (device loop8): ext4_get_journal_inode:5927: comm syz.8.8125: inode #196608: comm syz.8.8125: iget: illegal inode #
[  561.840598][T25095] loop8: lost filesystem error report for type 5 error -117
[  561.840973][T25095] EXT4-fs (loop8): Remounting filesystem read-only
[  561.841006][T25095] EXT4-fs (loop8): no journal found
[  561.841035][T25095] EXT4-fs (loop8): can't get journal size
[  561.850035][    C0] EXT4-fs (loop8): error count since last fsck: 1
[  561.850045][    C0] EXT4-fs (loop8): initial error at time 2000000367: ext4_get_journal_inode:5927
[  561.850055][    C0] EXT4-fs (loop8): last error at time 2000000367: ext4_get_journal_inode:5927
[  561.864554][T25095] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended
[  561.868031][T25095] EXT4-fs (loop8): Errors on filesystem, clearing orphan list.
[  561.872220][T25095] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  562.052708][T25093] loop7: detected capacity change from 0 to 32768
[  562.062827][T25093] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.8124 (25093)
[  562.093026][T25093] BTRFS info (device loop7): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  562.093149][T25093] BTRFS info (device loop7): using sha256 checksum algorithm
[  562.213609][T25093] BTRFS info (device loop7): turning off barriers
[  562.213652][T25093] BTRFS info (device loop7): enabling free space tree
[  562.314575][T16539] BTRFS info (device loop7): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  562.375636][ T1377] ieee802154 phy0 wpan0: encryption failed: -22
[  562.379589][ T1377] ieee802154 phy1 wpan1: encryption failed: -22
[  562.476195][T25095] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000.
[  562.537966][T17759] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  562.646819][T25123] netlink: 'syz.7.8131': attribute type 4 has an invalid length.
[  562.918655][T25134] BUG: using smp_processor_id() in preemptible [00000000] code: syz.7.8136/25134
[  562.918695][T25134] caller is bpf_mem_cache_free_rcu+0x48/0xc0
[  562.918752][T25134] CPU: 0 UID: 0 PID: 25134 Comm: syz.7.8136 Tainted: G S           L      syzkaller #0 PREEMPT(full) 
[  562.918782][T25134] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP
[  562.918787][T25134] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  562.918792][T25134] Call Trace:
[  562.918796][T25134]  <TASK>
[  562.918801][T25134]  dump_stack_lvl+0xe8/0x150
[  562.918815][T25134]  check_preemption_disabled+0xcd/0xd0
[  562.918826][T25134]  bpf_mem_cache_free_rcu+0x48/0xc0
[  562.918837][T25134]  rhtab_delete_elem+0x183b/0x1b00
[  562.918848][T25134]  ? rhtab_delete_elem+0x15a/0x1b00
[  562.918857][T25134]  ? check_and_init_map_value+0x57/0x410
[  562.918869][T25134]  __rhtab_map_lookup_and_delete_batch+0x935/0xcb0
[  562.918883][T25134]  ? __pfx_rhtab_map_lookup_and_delete_batch+0x10/0x10
[  562.918895][T25134]  bpf_map_do_batch+0x445/0x630
[  562.918906][T25134]  __sys_bpf+0x906/0xd90
[  562.918917][T25134]  ? do_raw_spin_lock+0x70/0x2f0
[  562.918927][T25134]  ? __pfx___sys_bpf+0x10/0x10
[  562.918937][T25134]  ? do_futex+0x458/0x4e0
[  562.918954][T25134]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  562.918963][T25134]  ? rcu_is_watching+0x16/0xb0
[  562.918973][T25134]  __x64_sys_bpf+0xba/0xd0
[  562.918982][T25134]  do_syscall_64+0x166/0x520
[  562.918990][T25134]  ? trace_irq_disable+0x3b/0x140
[  562.918997][T25134]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  562.919006][T25134]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  562.919013][T25134] RIP: 0033:0x7f80a379e1d9
[  562.919022][T25134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  562.919029][T25134] RSP: 002b:00007f80a19f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  562.919038][T25134] RAX: ffffffffffffffda RBX: 00007f80a3a25fa0 RCX: 00007f80a379e1d9
[  562.919044][T25134] RDX: 0000000000000038 RSI: 00002000000000c0 RDI: 0000000000000019
[  562.919049][T25134] RBP: 00007f80a3835888 R08: 0000000000000000 R09: 0000000000000000
[  562.919054][T25134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  562.919059][T25134] R13: 00007f80a3a26038 R14: 00007f80a3a25fa0 R15: 00007ffd8343dc68
[  562.919070][T25134]  </TASK>
[  562.919141][T25134] BUG: using smp_processor_id() in preemptible [00000000] code: syz.7.8136/25134
[  562.919165][T25134] caller is bpf_mem_cache_free_rcu+0x48/0xc0
[  562.919194][T25134] CPU: 0 UID: 0 PID: 25134 Comm: syz.7.8136 Tainted: G S           L      syzkaller #0 PREEMPT(full) 
[  562.919224][T25134] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP
[  562.919230][T25134] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  562.919236][T25134] Call Trace:
[  562.919240][T25134]  <TASK>
[  562.919245][T25134]  dump_stack_lvl+0xe8/0x150
[  562.919263][T25134]  check_preemption_disabled+0xcd/0xd0
[  562.919280][T25134]  bpf_mem_cache_free_rcu+0x48/0xc0
[  562.919295][T25134]  rhtab_delete_elem+0x183b/0x1b00
[  562.919312][T25134]  ? rhtab_delete_elem+0x15a/0x1b00
[  562.919324][T25134]  ? check_and_init_map_value+0x57/0x410
[  562.919337][T25134]  __rhtab_map_lookup_and_delete_batch+0x935/0xcb0
[  562.919361][T25134]  ? __pfx_rhtab_map_lookup_and_delete_batch+0x10/0x10
[  562.919381][T25134]  bpf_map_do_batch+0x445/0x630
[  562.919399][T25134]  __sys_bpf+0x906/0xd90
[  562.919416][T25134]  ? do_raw_spin_lock+0x70/0x2f0
[  562.919428][T25134]  ? __pfx___sys_bpf+0x10/0x10
[  562.919438][T25134]  ? do_futex+0x458/0x4e0
[  562.919454][T25134]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  562.919463][T25134]  ? rcu_is_watching+0x16/0xb0
[  562.919473][T25134]  __x64_sys_bpf+0xba/0xd0
[  562.919482][T25134]  do_syscall_64+0x166/0x520
[  562.919490][T25134]  ? trace_irq_disable+0x3b/0x140
[  562.919497][T25134]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  562.919506][T25134]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  562.919513][T25134] RIP: 0033:0x7f80a379e1d9
[  562.919540][T25134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  562.919546][T25134] RSP: 002b:00007f80a19f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  562.919555][T25134] RAX: ffffffffffffffda RBX: 00007f80a3a25fa0 RCX: 00007f80a379e1d9
[  562.919561][T25134] RDX: 0000000000000038 RSI: 00002000000000c0 RDI: 0000000000000019
[  562.919566][T25134] RBP: 00007f80a3835888 R08: 0000000000000000 R09: 0000000000000000
[  562.919571][T25134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  562.919581][T25134] R13: 00007f80a3a26038 R14: 00007f80a3a25fa0 R15: 00007ffd8343dc68
[  562.919593][T25134]  </TASK>
