last executing test programs:

37.769141578s ago: executing program 0 (id=678):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, &(0x7f00000007c0)="b20c", 0x2, 0x24000045, &(0x7f0000000800)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, 0x0, 0x0)
accept$alg(r1, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000a00)={0x2, 0x0, 0x0, 0x80000000000, 0x0, 0xfffffffffffff30a, 0x5}, &(0x7f0000000a40)={0x1e, 0x0, 0x4fe9, 0x0, 0xffffffff, 0x4, 0xfffffffffffffffe, 0xffffffffffffffef}, 0x0, 0x0, 0x0)

37.66123697s ago: executing program 0 (id=679):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x0, 0x0, 0x8, 0x0, "a0aad30a8b1350f2461250f9e5b2fc536fd0861c38349b6f6ad8c6f78a18d8576ba9bcd139acd078c1207e7b717cd1c8e723c17364efbae56931f838ecf65aba7e990fe8a4a01b3302b27fe7c991a9cb"}, 0x77)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000180), 0x12)
r1 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000c00)={0xe9, [[0xfffffffe, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x3], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffdfff, 0x1, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x5, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xffffff01, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1004, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]})
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x4000053, r1, 0xc2c2c000)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

37.397145507s ago: executing program 0 (id=681):
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000002000)='./bus\x00', 0x180c8, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/314, @ANYRESHEX], 0x1, 0x26f, &(0x7f0000000300)="$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")
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0)
ftruncate(0xffffffffffffffff, 0x3)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_CREATE(r0, &(0x7f00000000c0)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f00000006c0)=""/72, 0x48, 0x0, 0x0, 0x0, 0x3, 0x10000000}}, 0x120)
writev(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)="0e000000", 0x4}, {&(0x7f00000006c0), 0x1000000}], 0x2)

36.592001857s ago: executing program 0 (id=685):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000002c0)='./file0\x00', 0x12140c5, &(0x7f0000000100)={[{@fat=@quiet}, {@shortname_mixed}, {@fat=@nfs}, {@utf8no}, {@fat=@nfs}, {@utf8}, {@shortname_win95}, {@utf8}, {}, {@utf8}, {@numtail}, {@numtail}, {@numtail}]}, 0x0, 0x2c4, &(0x7f0000002880)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0)
mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x13481, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020)

36.130683418s ago: executing program 0 (id=688):
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
r1 = fsopen(&(0x7f0000000040)='devtmpfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
mmap(&(0x7f00005b7000/0x1000)=nil, 0x1000, 0x2000009, 0x1010, r2, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1d2)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x40)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
socket$can_j1939(0x1d, 0x2, 0x7)
writev(r3, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
write$sysctl(r4, &(0x7f0000000580)='1\x00', 0x2)
write$sysctl(r4, &(0x7f00000000c0)='2\x00', 0x2)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r0, 0x0, 0x0)
r6 = openat$cgroup_subtree(r5, &(0x7f0000000180), 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000080)={[{0x2b, 'rdma'}]}, 0x6)

35.605046191s ago: executing program 0 (id=691):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = eventfd(0x8000)
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r3, 0x1000007})
close_range(r0, 0xffffffffffffffff, 0x0)

35.421519655s ago: executing program 32 (id=691):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = eventfd(0x8000)
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r3, 0x1000007})
close_range(r0, 0xffffffffffffffff, 0x0)

25.078844531s ago: executing program 4 (id=738):
r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
r1 = fsopen(&(0x7f0000000040)='devtmpfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x40)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
socket$can_j1939(0x1d, 0x2, 0x7)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
write$sysctl(r3, 0x0, 0x0)
write$sysctl(r3, &(0x7f00000000c0)='2\x00', 0x2)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r0, 0x0, 0x0)
r5 = openat$cgroup_subtree(r4, &(0x7f0000000180), 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000080)={[{0x2b, 'rdma'}]}, 0x6)

24.102306335s ago: executing program 4 (id=747):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2})
r1 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000001c0)={@val={0x0, 0x805}, @void, @eth={@random="16a2a85969e6", @broadcast, @val={@void, {0x8100, 0x0, 0x0, 0x20}}, {@generic={0x8809, "b2fd"}}}}, 0x18)

23.51174944s ago: executing program 4 (id=750):
signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xbfb3)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0))
r1 = syz_open_pts(r0, 0x101000)
r2 = dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17)

22.364974838s ago: executing program 4 (id=756):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x181)
mount$bind(&(0x7f00000001c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x1141099, 0x0)
chroot(&(0x7f0000000240)='./file0/../file0\x00')
mount$bind(&(0x7f0000000280)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
mount(0x0, &(0x7f0000000840)='./file0\x00', &(0x7f0000000880)='sysfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900), 0x0, &(0x7f0000000940)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
stat(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000380))

22.208708842s ago: executing program 4 (id=758):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x0, 0x81, 0xffffffff})
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000c00), 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0xb, 0x0, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
futex(0x0, 0x10b, 0x4, 0x0, 0x0, 0x0)
futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
ioctl$SIOCGETSGCNT(r1, 0x89e1, &(0x7f0000000100)={@rand_addr=0x64010100, @multicast2})
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0)
close(r2)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

21.140526158s ago: executing program 4 (id=763):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{0x1, 0x7ff, 0x4b, 0x8009}, 'syz0\x00', 0x8})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000140), 0xfffffffffffffffe, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
read$watch_queue(r2, &(0x7f00000002c0)=""/152, 0x98)
dup3(r1, r0, 0x80000)

20.617444361s ago: executing program 33 (id=763):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{0x1, 0x7ff, 0x4b, 0x8009}, 'syz0\x00', 0x8})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000140), 0xfffffffffffffffe, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
read$watch_queue(r2, &(0x7f00000002c0)=""/152, 0x98)
dup3(r1, r0, 0x80000)

20.325089158s ago: executing program 2 (id=767):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, 0x0, 0x4800)
socket$alg(0x26, 0x5, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007800c00018008000140ac1414aa050007008400000006000440462000000c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x74040017}, 0x80)

19.969164667s ago: executing program 2 (id=769):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000100)='+p', 0x2)
syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x800801, &(0x7f000000ac40), 0x0, 0x559e, &(0x7f0000005680)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR")
sendmmsg$inet(r0, &(0x7f0000004180)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000000c0)="214c3ea1b8bde346048ae527c253", 0xe}, {&(0x7f0000000180)="9199a2794cb51bd4fa34fd3882fcd9d8bb445178d3312f79edd3e3d3805e478e1b12a1dc0b4c554cffd35082449c8ec862b97a5d35a14f36ec62c15a20f0ef45451cff7951a9ed6ec99ec3d9d7f21454680b4819377597e37ccf5d7e4e13cc03c492f84462865e797cbdfbeebfdef2e78a0455", 0x73}], 0x2}}], 0x1, 0x24000000)

17.659533294s ago: executing program 2 (id=776):
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000000)={0x0, 0x64737664, 0x1, @discrete={0xfffffffd, 0x401}})
r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000001300)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0)
setns(0xc9, 0x0)
r1 = socket(0x8, 0x5, 0x7fff)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000100)="900100"/64)
ioctl$sock_SIOCOUTQNSD(r1, 0x40106151, &(0x7f0000000000))

15.746910471s ago: executing program 3 (id=781):
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
r1 = fsopen(&(0x7f0000000040)='devtmpfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
mmap(&(0x7f00005b7000/0x1000)=nil, 0x1000, 0x2000009, 0x1010, r2, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1d2)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x40)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
socket$can_j1939(0x1d, 0x2, 0x7)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
write$sysctl(r4, 0x0, 0x0)
write$sysctl(r4, &(0x7f00000000c0)='2\x00', 0x2)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r0, 0x0, 0x0)
r6 = openat$cgroup_subtree(r5, &(0x7f0000000180), 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000080)={[{0x2b, 'rdma'}]}, 0x6)

15.625644604s ago: executing program 1 (id=782):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000063e000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000000)="f00fc7484d36f08266060266b9800000c00f326635000400000f308bc1de780066b9aa0200000f3266b9ab0900000f32f2f031b3e759dc2c", 0x38}], 0x1, 0x9f6a364b3fac2a63, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

12.362807045s ago: executing program 3 (id=784):
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
r1 = fsopen(&(0x7f0000000040)='devtmpfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
mmap(&(0x7f00005b7000/0x1000)=nil, 0x1000, 0x2000009, 0x1010, r2, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1d2)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x40)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
socket$can_j1939(0x1d, 0x2, 0x7)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
r4 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write$sysctl(r4, &(0x7f0000000580)='1\x00', 0x2)
write$sysctl(r4, &(0x7f00000000c0)='2\x00', 0x2)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r0, 0x0, 0x0)
r6 = openat$cgroup_subtree(r5, &(0x7f0000000180), 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000080)={[{0x2b, 'rdma'}]}, 0x6)

9.761034009s ago: executing program 2 (id=785):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0xb27, 0x4)
connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10)
sendto(r0, &(0x7f00000004c0)="50fbdf12a30d", 0x6, 0x4008044, 0x0, 0x0)
sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x4a, 0x0, 0x0)
poll(&(0x7f0000000040)=[{r0, 0x1040}, {}], 0x2, 0x9)

9.694179331s ago: executing program 1 (id=786):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000e80), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000ec0)='./file0\x00', &(0x7f0000000f00), 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
syz_fuse_handle_req(r0, &(0x7f0000002080)="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", 0x2000, &(0x7f0000004080)={&(0x7f0000004140)={0x50, 0x0, 0x8, {0x7, 0x28, 0x1, 0x1108c10, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10, 0xff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
removexattr(&(0x7f00000041c0)='./file0\x00', &(0x7f0000004200)=@known='system.posix_acl_default\x00')
close_range(r0, r0, 0x0)
removexattr(&(0x7f0000000840)='./file0/file1\x00', &(0x7f0000000880)=@known='system.posix_acl_access\x00')

9.286730731s ago: executing program 3 (id=787):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0x2)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000006c0)={'bridge_slave_1\x00'})
sendmsg$nl_route(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000801000010027bd700402d4df25000000009404881c16d0a94c11f2c4a02c76799c94e8b7b4161c5fb2208463637bb133b85f7645147103987852d328adf2c94765050481016ae881e572142e", @ANYBLOB="984e0600c16a010030001280110001006272696467655f736c617665"], 0x50}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000640)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000001900)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001940)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000001980)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000001a00), 0x651, 0x0)
recvmmsg(r4, 0x0, 0x0, 0x2, 0x0)
io_setup(0x8, &(0x7f0000001a80))
sched_setscheduler(0x0, 0x2, &(0x7f0000001b00)=0x6)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000001b40)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c)
setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000600), 0x400, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

9.233143092s ago: executing program 5 (id=788):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
ioctl(r0, 0x400452c8, &(0x7f0000000000)="000000000000000000000000000000000000000001")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/rfcomm0\x00', 0x802, 0x0)
ioctl$BLKPG(r1, 0x1269, &(0x7f0000000240)={0x3, 0x0, 0x98, &(0x7f0000000140)={0x9, 0x4, 0x11}})
write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x2f)

9.182449853s ago: executing program 1 (id=789):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x0, 0x81, 0xffffffff})
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000c00), 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
futex(0x0, 0x10b, 0x4, 0x0, 0x0, 0x0)
futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
ioctl$SIOCGETSGCNT(r1, 0x89e1, &(0x7f0000000100)={@rand_addr=0x64010100, @multicast2})
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0)
pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0)
close(r2)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

9.179149483s ago: executing program 2 (id=790):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, &(0x7f0000000c00)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)

8.242775917s ago: executing program 3 (id=791):
openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0xe0e02, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000003c0))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xa7)
openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = syz_usb_connect(0x0, 0x47, &(0x7f0000000880)=ANY=[@ANYBLOB="12010002ff0000405e04750700010102000109023500010100a0320904000005ff00000007058102000200070582020002000705830200020007058402000200070586"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

8.213895847s ago: executing program 1 (id=792):
r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
r1 = fsopen(&(0x7f0000000040)='devtmpfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x40)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
socket$can_j1939(0x1d, 0x2, 0x7)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
write$sysctl(r3, &(0x7f0000000580)='1\x00', 0x2)
write$sysctl(r3, 0x0, 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r0, 0x0, 0x0)
r5 = openat$cgroup_subtree(r4, &(0x7f0000000180), 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000080)={[{0x2b, 'rdma'}]}, 0x6)

7.721944179s ago: executing program 1 (id=793):
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
r1 = fsopen(&(0x7f0000000040)='devtmpfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
mmap(&(0x7f00005b7000/0x1000)=nil, 0x1000, 0x2000009, 0x1010, r2, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1d2)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x40)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
socket$can_j1939(0x1d, 0x2, 0x7)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
write$sysctl(r4, &(0x7f0000000580)='1\x00', 0x2)
write$sysctl(r4, 0x0, 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r0, 0x0, 0x0)
r6 = openat$cgroup_subtree(r5, &(0x7f0000000180), 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000080)={[{0x2b, 'rdma'}]}, 0x6)

5.469019225s ago: executing program 2 (id=794):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
r3 = socket$inet(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000180)='syzkaller0\x00', 0xb)
setsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000000)={@remote, @rand_addr=0x64010100, r2}, 0xc)

5.350757648s ago: executing program 5 (id=795):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x200000, &(0x7f0000002200)={[{@resgid={'resgid', 0x3d, 0xee00}}, {@mblk_io_submit}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nobarrier}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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")
setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000000500)=ANY=[], 0x835, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
creat(&(0x7f0000000240)='./file0/file0\x00', 0x20)
setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000080), &(0x7f0000001400)=ANY=[], 0x835, 0x2)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
pwritev2(r0, &(0x7f00000048c0)=[{&(0x7f0000002780)="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", 0x816}], 0x1, 0x5412, 0x0, 0x0)

4.709801544s ago: executing program 3 (id=796):
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
r1 = fsopen(&(0x7f0000000040)='devtmpfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
mmap(&(0x7f00005b7000/0x1000)=nil, 0x1000, 0x2000009, 0x1010, r2, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1d2)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x40)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
socket$can_j1939(0x1d, 0x2, 0x7)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
r4 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write$sysctl(r4, &(0x7f0000000580)='1\x00', 0x2)
write$sysctl(r4, &(0x7f00000000c0)='2\x00', 0x2)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r0, 0x0, 0x0)
r6 = openat$cgroup_subtree(r5, &(0x7f0000000180), 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000080)={[{0x2b, 'rdma'}]}, 0x6)

1.552863622s ago: executing program 5 (id=797):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x0, 0x81, 0xffffffff})
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000c00), 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
futex(0x0, 0x10b, 0x4, 0x0, 0x0, 0x0)
futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
ioctl$SIOCGETSGCNT(r1, 0x89e1, &(0x7f0000000100)={@rand_addr=0x64010100, @multicast2})
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0)
close(r2)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

1.175536352s ago: executing program 5 (id=798):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
recvfrom(r0, &(0x7f00000004c0)=""/175, 0xaf, 0xc0012000, 0x0, 0x0)
setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88)

1.007752185s ago: executing program 5 (id=799):
statx(0xffffffffffffff9c, &(0x7f0000004480)='./file0/file1\x00', 0x1000, 0x10, 0x0)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x400, &(0x7f0000000480), 0x2, 0x790, &(0x7f0000000a80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000001240)='./file1\x00', 0x80342, 0x168)
pwrite64(r0, &(0x7f0000001280)='2', 0xfdef, 0xfecc)
creat(&(0x7f00000012c0)='./file1\x00', 0x42)
r1 = openat(0xffffffffffffff9c, &(0x7f0000001340)='./file1\x00', 0x80342, 0x168)
write$UHID_INPUT(r1, 0x0, 0x0)

669.003053ms ago: executing program 5 (id=800):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0x2)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000006c0)={'bridge_slave_1\x00'})
sendmsg$nl_route(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000801000010027bd700402d4df25000000009404881c16d0a94c11f2c4a02c76799c94e8b7b4161c5fb2208463637bb133b85f7645147103987852d328adf2c94765050481016ae881e572142e", @ANYBLOB="984e0600c16a010030001280110001006272696467655f736c617665"], 0x50}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000640)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000001900)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001940)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000001980)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000001a00), 0x651, 0x0)
recvmmsg(r4, 0x0, 0x0, 0x2, 0x0)
io_setup(0x8, &(0x7f0000001a80))
sched_setscheduler(0x0, 0x2, &(0x7f0000001b00)=0x6)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000001b40)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c)
setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000600), 0x400, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

14.63163ms ago: executing program 3 (id=801):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x0, 0x81, 0xffffffff})
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000c00), 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
futex(0x0, 0x10b, 0x4, 0x0, 0x0, 0x0)
futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
ioctl$SIOCGETSGCNT(r1, 0x89e1, &(0x7f0000000100)={@rand_addr=0x64010100, @multicast2})
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0)
pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0)
close(r2)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

0s ago: executing program 1 (id=802):
r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
r1 = fsopen(&(0x7f0000000040)='devtmpfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x40)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
socket$can_j1939(0x1d, 0x2, 0x7)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
write$sysctl(r3, &(0x7f0000000580)='1\x00', 0x2)
write$sysctl(r3, 0x0, 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r0, 0x0, 0x0)
r5 = openat$cgroup_subtree(r4, &(0x7f0000000180), 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000080)={[{0x2b, 'rdma'}]}, 0x6)

kernel console output (not intermixed with test programs):

2] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  142.323183][ T5322] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  142.339776][ T5322] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00
[  142.358219][ T5322] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.572713][ T5324] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  142.641509][ T5322] qmi_wwan 5-1:1.0: cdc-wdm0: USB WDM device
[  142.652873][ T4261] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42
[  142.664987][ T4261] cdc_ncm 4-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048
[  142.675947][ T4261] cdc_ncm 4-1:1.0: setting rx_max = 2048
[  142.832816][    C0] net_ratelimit: 45 callbacks suppressed
[  142.963327][ T5324] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  143.033432][ T5324] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  143.158287][ T5322] qmi_wwan 5-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.4-1, WWAN/QMI device, 76:9a:59:de:a3:31
[  143.194212][ T5324] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  143.351297][ T5322] usb 5-1: USB disconnect, device number 3
[  143.462804][ T4261] cdc_ncm 4-1:1.0: setting tx_max = 88
[  143.468344][ T5324] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01
[  143.485312][ T4261] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM, 42:42:42:42:42:42
[  143.505118][ T4261] usb 4-1: USB disconnect, device number 4
[  143.513273][ T4261] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM
[  143.536662][ T5322] qmi_wwan 5-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.4-1, WWAN/QMI device
[  143.577616][ T5324] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  143.647854][ T5324] usb 1-1: Product: syz
[  143.652101][ T5324] usb 1-1: Manufacturer: syz
[  143.713337][ T5479] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  143.745083][ T5324] garmin_gps 1-1:1.0: Garmin GPS usb/tty converter detected
[  143.759417][   T26] audit: type=1807 audit(1792091767.517:3): action=appraise func=FIRMWARE_CHECK res=1
[  143.777678][ T5486] ima: policy update failed
[  143.791440][   T26] audit: type=1807 audit(1792091767.537:4): action=appraise UNKNOWN=fu res=0
[  143.806782][ T5324] usb 1-1: Garmin GPS usb/tty converter now attached to ttyUSB0
[  143.841598][   T26] audit: type=1802 audit(1792091767.537:5): pid=5486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.368" res=0 errno=0
[  143.928888][   T26] audit: type=1807 audit(1792091767.537:6): action=appraise func=POLICY_CHECK res=1
[  143.982405][ T5490] FAULT_INJECTION: forcing a failure.
[  143.982405][ T5490] name fail_futex, interval 1, probability 0, space 0, times 1
[  144.017072][   T26] audit: type=1802 audit(1792091767.547:7): pid=5486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.368" res=0 errno=0
[  144.041279][ T5491] loop1: detected capacity change from 0 to 1024
[  144.087540][ T5490] CPU: 1 PID: 5490 Comm: syz.3.370 Not tainted syzkaller #0
[  144.095000][ T5490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  144.095021][ T5490] Call Trace:
[  144.095031][ T5490]  <TASK>
[  144.095042][ T5490]  dump_stack_lvl+0x188/0x250
[  144.095074][ T5490]  ? __kasan_kmalloc+0xaf/0xe0
[  144.095103][ T5490]  ? show_regs_print_info+0x20/0x20
[  144.108991][ T5490]  ? load_image+0x410/0x410
[  144.109035][ T5490]  should_fail+0x383/0x4b0
[  144.109065][ T5490]  get_futex_key+0x1cf/0x12d0
[  144.127006][ T5490]  ? futex_wait_restart+0x250/0x250
[  144.127056][ T5490]  futex_lock_pi+0x239/0xbf0
[  144.151258][ T5490]  ? futex_requeue+0x1920/0x1920
[  144.156309][ T5490]  ? __lock_acquire+0x13b3/0x7d40
[  144.161413][ T5490]  ? verify_lock_unused+0x140/0x140
[  144.161449][ T5490]  ? verify_lock_unused+0x140/0x140
[  144.171901][ T5490]  do_futex+0xdda/0x12b0
[  144.176191][ T5490]  ? vfs_write+0xaa6/0xd70
[  144.180656][ T5490]  ? futex_exit_release+0x1c0/0x1c0
[  144.185904][ T5490]  ? __context_tracking_exit+0x4c/0x80
[  144.191414][ T5490]  __se_sys_futex+0x389/0x420
[  144.191446][ T5490]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  144.191478][ T5490]  ? __x64_sys_futex+0xf0/0xf0
[  144.202600][ T5490]  ? __x64_sys_futex+0x1d/0xf0
[  144.212159][ T5490]  do_syscall_64+0x4c/0xa0
[  144.216636][ T5490]  ? clear_bhb_loop+0x30/0x80
[  144.221361][ T5490]  ? clear_bhb_loop+0x30/0x80
[  144.226091][ T5490]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  144.232130][ T5490] RIP: 0033:0x7f3dbf4ed559
[  144.232155][ T5490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  144.232174][ T5490] RSP: 002b:00007f3dbd745028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  144.232201][ T5490] RAX: ffffffffffffffda RBX: 00007f3dbf774fa0 RCX: 00007f3dbf4ed559
[  144.232217][ T5490] RDX: 0000000000000002 RSI: 000000000000000d RDI: 0000000000000000
[  144.232229][ T5490] RBP: 00007f3dbf5848b0 R08: 0000000000000000 R09: 0000000000000002
[  144.256658][ T5490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  144.256679][ T5490] R13: 00007f3dbf775038 R14: 00007f3dbf774fa0 R15: 00007fff4f2945a8
[  144.256714][ T5490]  </TASK>
[  144.327533][ T5491] EXT4-fs (loop1): Ignoring removed bh option
[  144.335702][ T5491] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  144.354752][ T4264] usb 1-1: USB disconnect, device number 5
[  144.408776][ T4264] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0
[  144.439487][ T4264] garmin_gps 1-1:1.0: device disconnected
[  144.466896][ T5491] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,dioread_lock,dioread_nolock,resgid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,min_batch_time=0x0000000000000008,journal_ioprio=0x0000000000000005,stripe=0x0000000000000011,bh,init_itable,,errors=continue. Quota mode: none.
[  144.979662][ T5505] loop1: detected capacity change from 0 to 1024
[  145.067871][ T5507] FAULT_INJECTION: forcing a failure.
[  145.067871][ T5507] name failslab, interval 1, probability 0, space 0, times 0
[  145.110922][ T5507] CPU: 0 PID: 5507 Comm: syz.4.376 Not tainted syzkaller #0
[  145.118324][ T5507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  145.128430][ T5507] Call Trace:
[  145.131795][ T5507]  <TASK>
[  145.134793][ T5507]  dump_stack_lvl+0x188/0x250
[  145.139525][ T5507]  ? show_regs_print_info+0x20/0x20
[  145.144782][ T5507]  ? load_image+0x410/0x410
[  145.144939][ T5507]  ? __might_sleep+0xf0/0xf0
[  145.144966][ T5507]  ? __lock_acquire+0x7d40/0x7d40
[  145.144996][ T5507]  should_fail+0x383/0x4b0
[  145.154636][ T5507]  should_failslab+0x5/0x20
[  145.154665][ T5507]  slab_pre_alloc_hook+0x51/0xc0
[  145.154696][ T5507]  ? vm_area_dup+0x1e/0xb0
[  145.154719][ T5507]  kmem_cache_alloc+0x3d/0x280
[  145.164224][ T5507]  vm_area_dup+0x1e/0xb0
[  145.164254][ T5507]  __split_vma+0xb1/0x410
[  145.164279][ T5507]  ? split_vma+0x6b/0xd0
[  145.173769][ T5507]  mprotect_fixup+0x5bb/0x800
[  145.173813][ T5507]  ? change_protection+0x1940/0x1940
[  145.173838][ T5507]  ? vmacache_find+0x4f0/0x590
[  145.183052][ T5507]  ? vmacache_update+0xa0/0x100
[  145.183084][ T5507]  ? bpf_lsm_file_mprotect+0x5/0x10
[  145.183109][ T5507]  ? security_file_mprotect+0x7e/0xb0
[  145.191747][ T5507]  do_mprotect_pkey+0x658/0x910
[  145.200809][ T5507]  __x64_sys_mprotect+0x7c/0x90
[  145.210895][ T5507]  do_syscall_64+0x4c/0xa0
[  145.220989][ T5507]  ? clear_bhb_loop+0x30/0x80
[  145.231275][ T5507]  ? clear_bhb_loop+0x30/0x80
[  145.240596][ T5507]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  145.249975][ T5507] RIP: 0033:0x7f794a7d7559
[  145.260350][ T5507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  145.280003][ T5507] RSP: 002b:00007f7948a2f028 EFLAGS: 00000246 ORIG_RAX: 000000000000000a
[  145.280035][ T5507] RAX: ffffffffffffffda RBX: 00007f794aa5efa0 RCX: 00007f794a7d7559
[  145.280054][ T5507] RDX: 0000000000000001 RSI: 000000000000f000 RDI: 0000200000000000
[  145.280071][ T5507] RBP: 00007f794a86e8b0 R08: 0000000000000000 R09: 0000000000000000
[  145.296495][ T5507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  145.296517][ T5507] R13: 00007f794aa5f038 R14: 00007f794aa5efa0 R15: 00007ffe55b51d88
[  145.296551][ T5507]  </TASK>
[  145.357466][ T5510] FAULT_INJECTION: forcing a failure.
[  145.357466][ T5510] name failslab, interval 1, probability 0, space 0, times 0
[  145.376312][ T5510] CPU: 1 PID: 5510 Comm: syz.0.377 Not tainted syzkaller #0
[  145.383666][ T5510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  145.393754][ T5510] Call Trace:
[  145.397068][ T5510]  <TASK>
[  145.400009][ T5510]  dump_stack_lvl+0x188/0x250
[  145.404698][ T5510]  ? show_regs_print_info+0x20/0x20
[  145.409929][ T5510]  ? load_image+0x410/0x410
[  145.414445][ T5510]  ? __lock_acquire+0x7d40/0x7d40
[  145.419525][ T5510]  should_fail+0x383/0x4b0
[  145.423969][ T5510]  should_failslab+0x5/0x20
[  145.428531][ T5510]  slab_pre_alloc_hook+0x51/0xc0
[  145.433536][ T5510]  kmem_cache_alloc_trace+0x47/0x290
[  145.438873][ T5510]  ? htab_map_alloc+0x9a/0x1670
[  145.443768][ T5510]  htab_map_alloc+0x9a/0x1670
[  145.448500][ T5510]  ? __might_fault+0xb7/0x110
[  145.453220][ T5510]  ? __lock_acquire+0x7d40/0x7d40
[  145.458296][ T5510]  ? htab_map_alloc_check+0x3e0/0x4d0
[  145.463711][ T5510]  map_create+0x481/0x2330
[  145.468257][ T5510]  ? bpf_lsm_bpf+0x5/0x10
[  145.472632][ T5510]  __sys_bpf+0x30a/0x6f0
[  145.476932][ T5510]  ? bpf_link_show_fdinfo+0x380/0x380
[  145.482371][ T5510]  __x64_sys_bpf+0x78/0x90
[  145.486840][ T5510]  do_syscall_64+0x4c/0xa0
[  145.491301][ T5510]  ? clear_bhb_loop+0x30/0x80
[  145.496020][ T5510]  ? clear_bhb_loop+0x30/0x80
[  145.500743][ T5510]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  145.506694][ T5510] RIP: 0033:0x7ff8405ac559
[  145.511151][ T5510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  145.530785][ T5510] RSP: 002b:00007ff83e804028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  145.539228][ T5510] RAX: ffffffffffffffda RBX: 00007ff840833fa0 RCX: 00007ff8405ac559
[  145.547230][ T5510] RDX: 0000000000000050 RSI: 0000200000000200 RDI: 0000000000000000
[  145.555250][ T5510] RBP: 00007ff8406438b0 R08: 0000000000000000 R09: 0000000000000000
[  145.563250][ T5510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  145.571416][ T5510] R13: 00007ff840834038 R14: 00007ff840833fa0 R15: 00007fff305eb508
[  145.579440][ T5510]  </TASK>
[  145.988050][ T5528] loop2: detected capacity change from 0 to 512
[  146.028653][ T5529] netlink: 8 bytes leftover after parsing attributes in process `syz.4.383'.
[  146.145584][ T5531] loop0: detected capacity change from 0 to 1024
[  146.171864][ T5534] FAULT_INJECTION: forcing a failure.
[  146.171864][ T5534] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  146.204838][ T5534] CPU: 1 PID: 5534 Comm: syz.1.386 Not tainted syzkaller #0
[  146.212273][ T5534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  146.222374][ T5534] Call Trace:
[  146.222387][ T5534]  <TASK>
[  146.222397][ T5534]  dump_stack_lvl+0x188/0x250
[  146.222429][ T5534]  ? show_regs_print_info+0x20/0x20
[  146.222457][ T5534]  ? load_image+0x410/0x410
[  146.243561][ T5534]  ? __lock_acquire+0x7d40/0x7d40
[  146.248653][ T5534]  should_fail+0x383/0x4b0
[  146.253126][ T5534]  _copy_to_user+0x2e/0x130
[  146.257665][ T5534]  bpf_verifier_vlog+0x1b5/0x350
[  146.262640][ T5534]  btf_verifier_log+0x1f0/0x2b0
[  146.267538][ T5534]  ? __might_sleep+0xf0/0xf0
[  146.272156][ T5534]  ? bpf_btf_find_by_name_kind+0x7d0/0x7d0
[  146.278002][ T5534]  ? btf_parse_hdr+0x1dd/0x830
[  146.282823][ T5534]  btf_parse_hdr+0x5a3/0x830
[  146.287468][ T5534]  btf_new_fd+0x3fd/0x910
[  146.291829][ T5534]  __sys_bpf+0x58c/0x6f0
[  146.296108][ T5534]  ? bpf_link_show_fdinfo+0x380/0x380
[  146.301526][ T5534]  __x64_sys_bpf+0x78/0x90
[  146.305973][ T5534]  do_syscall_64+0x4c/0xa0
[  146.310446][ T5534]  ? clear_bhb_loop+0x30/0x80
[  146.315162][ T5534]  ? clear_bhb_loop+0x30/0x80
[  146.319863][ T5534]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  146.325785][ T5534] RIP: 0033:0x7fde51592559
[  146.330238][ T5534] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  146.349872][ T5534] RSP: 002b:00007fde4f7ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  146.358312][ T5534] RAX: ffffffffffffffda RBX: 00007fde51819fa0 RCX: 00007fde51592559
[  146.366315][ T5534] RDX: 0000000000000028 RSI: 0000200000000340 RDI: 0000000000000012
[  146.374311][ T5534] RBP: 00007fde516298b0 R08: 0000000000000000 R09: 0000000000000000
[  146.382303][ T5534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  146.390302][ T5534] R13: 00007fde5181a038 R14: 00007fde51819fa0 R15: 00007ffd4f85b808
[  146.398315][ T5534]  </TASK>
[  146.403852][ T5528] EXT4-fs (loop2): Test dummy encryption mode enabled
[  146.419323][ T5528] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  146.463355][ T5539] loop1: detected capacity change from 0 to 512
[  146.475088][ T5531] EXT4-fs (loop0): Ignoring removed bh option
[  146.481320][ T5531] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  146.506867][ T5528] EXT4-fs (loop2): 1 truncate cleaned up
[  146.541191][ T5528] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,nodioread_nolock,,errors=continue. Quota mode: none.
[  146.600143][ T5531] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,dioread_lock,dioread_nolock,resgid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,min_batch_time=0x0000000000000008,journal_ioprio=0x0000000000000005,stripe=0x0000000000000011,bh,init_itable,,errors=continue. Quota mode: none.
[  146.672014][ T5539] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  146.752495][ T5539] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  147.346803][ T5554] loop3: detected capacity change from 0 to 1024
[  147.415126][ T5554] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,max_dir_size_kb=0x0000000000000004,jqfmt=vfsv1,delalloc,dioread_lock,init_itable,errors=remount-ro,. Quota mode: none.
[  147.434722][ T5554] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  147.443053][ T4261] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[  147.461788][ T5554] EXT4-fs error (device loop3): ext4_map_blocks:741: inode #15: block 3: comm syz.3.393: lblock 3 mapped to illegal pblock 3 (length 3)
[  147.545949][ T5554] EXT4-fs (loop3): Remounting filesystem read-only
[  147.600774][ T5564] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #15: block 3: comm syz.3.393: lblock 3 mapped to illegal pblock 3 (length 1)
[  147.624430][ T5565] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #15: block 4: comm syz.3.393: lblock 4 mapped to illegal pblock 4 (length 2)
[  147.704374][ T5565] EXT4-fs (loop3): Remounting filesystem read-only
[  147.712088][ T5564] EXT4-fs (loop3): Remounting filesystem read-only
[  147.732744][ T5564] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #15: block 3: comm syz.3.393: lblock 3 mapped to illegal pblock 3 (length 1)
[  147.765303][ T5564] EXT4-fs (loop3): Remounting filesystem read-only
[  147.781303][ T5564] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #15: block 3: comm syz.3.393: lblock 3 mapped to illegal pblock 3 (length 1)
[  147.797543][ T5565] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #15: block 4: comm syz.3.393: lblock 4 mapped to illegal pblock 4 (length 2)
[  147.839790][ T5564] EXT4-fs (loop3): Remounting filesystem read-only
[  147.858744][ T4261] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid wMaxPacketSize 0
[  147.869700][ T4261] usb 3-1: config 0 interface 0 has no altsetting 0
[  147.876477][    C1] net_ratelimit: 67 callbacks suppressed
[  147.904286][ T5564] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #15: block 3: comm syz.3.393: lblock 3 mapped to illegal pblock 3 (length 1)
[  147.959925][ T5564] EXT4-fs (loop3): Remounting filesystem read-only
[  147.979207][ T5564] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #15: block 3: comm syz.3.393: lblock 3 mapped to illegal pblock 3 (length 1)
[  147.994592][ T5565] EXT4-fs (loop3): Remounting filesystem read-only
[  148.021807][ T5564] EXT4-fs (loop3): Remounting filesystem read-only
[  148.046331][ T5569] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  148.067656][ T5550] loop4: detected capacity change from 0 to 32768
[  148.074511][ T5564] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #15: block 3: comm syz.3.393: lblock 3 mapped to illegal pblock 3 (length 1)
[  148.123091][ T4261] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  148.150122][ T4261] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  148.158590][ T4261] usb 3-1: Product: syz
[  148.163603][ T4261] usb 3-1: Manufacturer: syz
[  148.168321][ T4261] usb 3-1: SerialNumber: syz
[  148.176074][ T4261] usb 3-1: config 0 descriptor??
[  148.281385][ T4261] usb 3-1: selecting invalid altsetting 0
[  148.297590][ T5564] EXT4-fs (loop3): Remounting filesystem read-only
[  148.309561][ T5550] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.391 (5550)
[  148.452062][ T5550] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  148.479380][ T5548] usb 3-1: selecting invalid altsetting 0
[  148.533327][ T5550] BTRFS info (device loop4): using free space tree
[  148.539951][ T5550] BTRFS info (device loop4): has skinny extents
[  148.547242][ T5548] usb 3-1: 0:0: usb_set_interface failed (-22)
[  148.573449][ T4261] usb 3-1: USB disconnect, device number 2
[  148.694379][ T4706] udevd[4706]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  148.902655][ T5591] loop0: detected capacity change from 0 to 2048
[  149.043470][ T5550] BTRFS info (device loop4): enabling ssd optimizations
[  149.095120][ T5591] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  149.159762][ T5591] UDF-fs: Scanning with blocksize 512 failed
[  149.254883][ T5591] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  149.900894][ T4785] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop4 scanned by udevd (4785)
[  149.979191][ T5622] netlink: 'syz.0.404': attribute type 4 has an invalid length.
[  150.028148][ T5622] netlink: 'syz.0.404': attribute type 17 has an invalid length.
[  150.206217][ T5629] loop3: detected capacity change from 0 to 164
[  150.274730][ T5629] rock: directory entry would overflow storage
[  150.280968][ T5629] rock: sig=0x4f50, size=4, remaining=3
[  150.322842][ T5629] iso9660: Corrupted directory entry in block 5 of inode 1792
[  150.512874][ T5323] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[  151.122881][ T5323] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  151.181466][ T5323] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.189726][ T5323] usb 1-1: Product: syz
[  151.194121][ T5323] usb 1-1: Manufacturer: syz
[  151.198848][ T5323] usb 1-1: SerialNumber: syz
[  151.304129][ T5323] usb 1-1: config 0 descriptor??
[  151.345725][ T5323] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  151.356759][ T5642] loop3: detected capacity change from 0 to 512
[  151.514718][ T5642] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback.
[  151.600377][ T5642] ext4 filesystem being mounted at /87/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  151.678256][ T5642] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback.
[  151.692503][ T5649] loop4: detected capacity change from 0 to 2048
[  151.768929][ T5649] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found!
[  151.844835][ T5649] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  151.987314][ T5657] netlink: 'syz.2.417': attribute type 4 has an invalid length.
[  152.024187][ T5657] netlink: 'syz.2.417': attribute type 17 has an invalid length.
[  152.045523][ T5658] Bluetooth: hci5: Frame reassembly failed (-84)
[  152.057557][ T4607] Bluetooth: hci5: Frame reassembly failed (-84)
[  152.171356][ T5664] loop2: detected capacity change from 0 to 256
[  152.248181][ T5664] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  152.297805][   T26] audit: type=1800 audit(1792091776.057:8): pid=5664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.419" name="file1" dev="loop2" ino=1048644 res=0 errno=0
[  152.366386][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  152.380478][ T5664] exFAT-fs (loop2): Filesystem has been set read-only
[  152.387779][ T5664] exFAT-fs (loop2): error, failed to bmap (inode : ffff88805c010e60 iblock : 8, err : -5)
[  152.404354][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  152.411502][ T5664] exFAT-fs (loop2): error, failed to bmap (inode : ffff88805c010e60 iblock : 8, err : -5)
[  152.429088][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  152.436784][ T5664] exFAT-fs (loop2): error, failed to bmap (inode : ffff88805c010e60 iblock : 9, err : -5)
[  152.454414][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  152.460608][ T5664] exFAT-fs (loop2): error, failed to bmap (inode : ffff88805c010e60 iblock : 10, err : -5)
[  152.476676][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  152.484098][ T5664] exFAT-fs (loop2): error, failed to bmap (inode : ffff88805c010e60 iblock : 11, err : -5)
[  152.498909][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  152.506471][ T5664] exFAT-fs (loop2): error, failed to bmap (inode : ffff88805c010e60 iblock : 12, err : -5)
[  152.521513][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  152.528867][ T5664] exFAT-fs (loop2): error, failed to bmap (inode : ffff88805c010e60 iblock : 13, err : -5)
[  152.546760][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  152.554174][ T5664] exFAT-fs (loop2): error, failed to bmap (inode : ffff88805c010e60 iblock : 14, err : -5)
[  152.570381][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  152.577795][ T5664] exFAT-fs (loop2): error, failed to bmap (inode : ffff88805c010e60 iblock : 15, err : -5)
[  152.594137][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  152.600977][ T5664] exFAT-fs (loop2): error, failed to bmap (inode : ffff88805c010e60 iblock : 16, err : -5)
[  152.622849][ T5323] gspca_stk1135: reg_w 0xd err -71
[  152.626997][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  152.634192][ T5323] gspca_stk1135: serial bus timeout: status=0x00
[  152.647861][ T5323] gspca_stk1135: Sensor write failed
[  152.653724][ T5323] gspca_stk1135: serial bus timeout: status=0x00
[  152.660432][ T5323] gspca_stk1135: Sensor write failed
[  152.666881][ T5323] gspca_stk1135: serial bus timeout: status=0x00
[  152.673953][ T5323] gspca_stk1135: Sensor read failed
[  152.679335][ T5323] gspca_stk1135: serial bus timeout: status=0x00
[  152.686261][ T5323] gspca_stk1135: Sensor read failed
[  152.692493][ T5323] gspca_stk1135: Detected sensor type unknown (0x0)
[  152.696504][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  152.708470][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  152.724921][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  152.731731][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  152.753778][ T5323] gspca_stk1135: serial bus timeout: status=0x00
[  152.769591][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  152.788711][ T5323] gspca_stk1135: Sensor read failed
[  152.790037][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  152.810889][ T5323] gspca_stk1135: serial bus timeout: status=0x00
[  152.820474][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  152.830829][ T5323] gspca_stk1135: Sensor read failed
[  152.842207][ T5323] gspca_stk1135: serial bus timeout: status=0x00
[  152.859154][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  152.868821][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  152.879496][ T5323] gspca_stk1135: Sensor write failed
[  152.887609][ T5323] gspca_stk1135: serial bus timeout: status=0x00
[  152.894230][ T5323] gspca_stk1135: Sensor write failed
[  152.901257][ T5323] stk1135: probe of 1-1:0.0 failed with error -71
[  152.914866][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  152.930167][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  152.938590][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  152.951508][ T5323] usb 1-1: USB disconnect, device number 6
[  152.958448][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  152.967953][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  152.977784][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  152.988034][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  153.000193][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  153.000634][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  153.027166][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  153.039443][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  153.046594][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  153.071102][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  153.088646][    C0] net_ratelimit: 44 callbacks suppressed
[  153.108680][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  153.152014][ T5673] loop4: detected capacity change from 0 to 512
[  153.152431][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  153.177127][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  153.189611][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  153.197250][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  153.204777][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  153.222706][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  153.228806][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  153.262633][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  153.271908][ T5673] EXT4-fs (loop4): inline encryption not supported
[  153.290740][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  153.302731][ T5673] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  153.331407][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  153.331447][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  153.381507][ T5673] EXT4-fs (loop4): 1 truncate cleaned up
[  153.398190][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  153.404683][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  153.410939][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  153.417015][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  153.423216][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  153.429242][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  153.435400][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  153.441444][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  153.447661][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  153.453932][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  153.460222][ T5673] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,nolazytime,discard,max_batch_time=0x0000000000000200,inlinecrypt,noblock_validity,,errors=continue. Quota mode: none.
[  153.479476][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  153.485849][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  153.492019][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  153.498196][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  153.505941][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  153.512006][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  153.518232][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  153.524330][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  153.530465][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  153.539861][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  153.546316][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  153.552654][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  153.558793][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  153.566310][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  153.572465][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  153.578830][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  153.585058][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  153.595486][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  153.601701][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  153.622355][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  153.630782][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  153.637285][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  153.643415][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  153.649550][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  153.655786][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  153.662750][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  153.668820][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  153.675503][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  153.681548][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  153.689189][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  153.695421][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  153.701613][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  153.708578][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  153.715682][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  153.721812][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  153.721848][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  153.721873][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  153.721897][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  153.734949][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  153.746226][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  153.758175][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  153.769028][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  153.779358][ T5664] exFAT-fs (loop2): error, broken FAT chain.
[  153.787351][   T26] audit: type=1800 audit(1792091777.547:9): pid=5664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.419" name="file1" dev="loop2" ino=1048644 res=0 errno=0
[  153.902728][ T4264] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  154.112736][ T5616] Bluetooth: hci5: command 0x1003 tx timeout
[  154.119115][ T4194] Bluetooth: hci5: sending frame failed (-49)
[  154.261300][ T5692] netlink: 'syz.1.429': attribute type 4 has an invalid length.
[  154.271177][ T5692] netlink: 'syz.1.429': attribute type 17 has an invalid length.
[  154.279955][ T5616] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  154.313016][ T4264] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  154.321691][ T4264] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  154.368079][ T4264] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  154.377915][ T4264] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  154.395696][ T4264] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  154.532751][ T5616] usb 5-1: Using ep0 maxpacket: 16
[  154.552997][ T4264] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  154.562207][ T4264] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  154.570412][ T4264] usb 1-1: Product: syz
[  154.574765][ T4264] usb 1-1: Manufacturer: syz
[  154.624223][ T4264] cdc_wdm 1-1:1.0: skipping garbage
[  154.629463][ T4264] cdc_wdm 1-1:1.0: skipping garbage
[  154.644802][ T4264] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[  154.650822][ T4264] cdc_wdm 1-1:1.0: Unknown control protocol
[  154.752764][ T4174] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  154.812976][ T5616] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  154.828657][ T5616] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.837362][ T5616] usb 5-1: Product: syz
[  154.841668][ T5616] usb 5-1: Manufacturer: syz
[  154.851532][ T5616] usb 5-1: SerialNumber: syz
[  154.858627][ T5616] usb 5-1: config 0 descriptor??
[  154.901406][ T5620] usb 1-1: USB disconnect, device number 7
[  154.911443][ T5616] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  154.923009][    C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  154.930551][    C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  154.936694][    C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  155.112994][ T4174] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  155.125595][ T4174] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  155.212982][ T4174] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  155.222057][ T4174] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  155.236678][ T4174] usb 2-1: SerialNumber: syz
[  155.504528][ T5701] loop0: detected capacity change from 0 to 1024
[  155.526300][ T4174] usb 2-1: 0:2 : does not exist
[  155.547485][ T4174] usb 2-1: USB disconnect, device number 2
[  155.585231][ T5701] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  155.648456][ T5701] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,min_batch_time=0x0000000000000001,usrjquota=,,errors=continue. Quota mode: none.
[  155.699175][ T5701] EXT4-fs (loop0): shut down requested (1)
[  155.794899][ T5596] udevd[5596]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  156.023109][ T5616] ssu100: probe of 5-1:0.0 failed with error -71
[  156.049371][ T5616] usb 5-1: USB disconnect, device number 4
[  156.192713][ T4174] Bluetooth: hci5: command 0x1001 tx timeout
[  156.201629][ T4194] Bluetooth: hci5: sending frame failed (-49)
[  156.401027][ T5714] loop1: detected capacity change from 0 to 256
[  156.886844][ T5714] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  157.057792][ T5707] loop0: detected capacity change from 0 to 32768
[  157.107254][   T26] audit: type=1800 audit(1792091780.867:10): pid=5714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.437" name="file1" dev="loop1" ino=1048645 res=0 errno=0
[  157.145585][ T5719] netlink: 'syz.2.440': attribute type 4 has an invalid length.
[  157.176588][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  157.184122][ T5707] XFS (loop0): Mounting V5 Filesystem
[  157.200658][ T5714] exFAT-fs (loop1): Filesystem has been set read-only
[  157.208182][ T5714] exFAT-fs (loop1): error, failed to bmap (inode : ffff88805ed51b60 iblock : 8, err : -5)
[  157.222418][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  157.228606][ T5714] exFAT-fs (loop1): error, failed to bmap (inode : ffff88805ed51b60 iblock : 8, err : -5)
[  157.238849][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  157.251976][ T5714] exFAT-fs (loop1): error, failed to bmap (inode : ffff88805ed51b60 iblock : 9, err : -5)
[  157.345829][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  157.362771][ T5707] XFS (loop0): Ending clean mount
[  157.382733][ T5714] exFAT-fs (loop1): error, failed to bmap (inode : ffff88805ed51b60 iblock : 10, err : -5)
[  157.420970][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  157.429074][ T5714] exFAT-fs (loop1): error, failed to bmap (inode : ffff88805ed51b60 iblock : 11, err : -5)
[  157.447112][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  157.457054][ T5714] exFAT-fs (loop1): error, failed to bmap (inode : ffff88805ed51b60 iblock : 12, err : -5)
[  157.472142][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  157.482235][ T5714] exFAT-fs (loop1): error, failed to bmap (inode : ffff88805ed51b60 iblock : 13, err : -5)
[  157.501356][ T5732] loop4: detected capacity change from 0 to 4096
[  157.529938][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  157.572148][ T5714] exFAT-fs (loop1): error, failed to bmap (inode : ffff88805ed51b60 iblock : 14, err : -5)
[  157.593024][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  157.599067][ T5714] exFAT-fs (loop1): error, failed to bmap (inode : ffff88805ed51b60 iblock : 15, err : -5)
[  157.682800][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  157.688967][ T5714] exFAT-fs (loop1): error, failed to bmap (inode : ffff88805ed51b60 iblock : 16, err : -5)
[  157.700832][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  157.712480][ T4187] XFS (loop0): Unmounting Filesystem
[  157.755257][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  157.825162][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  157.831232][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  157.863287][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  157.877411][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  157.884659][ T5734] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  157.893206][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  157.902274][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  157.930938][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  157.946836][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  157.962119][   T26] audit: type=1800 audit(1792091781.717:11): pid=5732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.442" name="file1" dev="loop4" ino=15 res=0 errno=0
[  157.972965][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  158.000110][   T26] audit: type=1800 audit(1792091781.747:12): pid=5732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.442" name="file1" dev="loop4" ino=15 res=0 errno=0
[  158.020747][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  158.029964][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  158.082980][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  158.092629][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  158.099047][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  158.131135][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  158.138883][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  158.176685][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  158.196015][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  158.202077][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  158.231996][ T5730] loop2: detected capacity change from 0 to 32768
[  158.242172][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  158.250758][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  158.260272][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  158.269171][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  158.275351][    C1] net_ratelimit: 60 callbacks suppressed
[  158.282634][ T5617] Bluetooth: hci5: command 0x1009 tx timeout
[  158.286272][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  158.305318][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  158.321821][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  158.359940][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  158.366125][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  158.373472][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  158.379527][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  158.412157][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  158.445857][ T5730] XFS (loop2): Mounting V5 Filesystem
[  158.457493][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  158.493262][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  158.499340][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  158.580556][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  158.591131][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  158.633584][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  158.639733][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  158.639759][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  158.673123][ T5730] XFS (loop2): Ending clean mount
[  158.708142][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  158.742821][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  158.748883][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  158.793807][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  158.800019][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  158.843011][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  158.849078][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  158.899911][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  158.918392][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  158.936062][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  158.945385][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  158.962919][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  158.972211][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  158.991515][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  159.012637][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  159.025128][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  159.033554][ T4188] XFS (loop2): Unmounting Filesystem
[  159.051035][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  159.092914][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  159.098980][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  159.138685][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  159.202423][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  159.225495][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  159.246997][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  159.264832][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  159.282466][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  159.301598][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  159.319596][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  159.337421][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  159.354883][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  159.372236][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  159.388796][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  159.415164][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  159.431952][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  159.438504][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  159.445046][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  159.451192][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  159.462724][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  159.468976][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  159.480392][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  159.486898][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  159.500203][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  159.506792][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  159.521212][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  159.527795][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  159.534380][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  159.540563][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  159.549469][ T5714] exFAT-fs (loop1): error, broken FAT chain.
[  159.559559][   T26] audit: type=1800 audit(1792091783.317:13): pid=5714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.437" name="file1" dev="loop1" ino=1048645 res=0 errno=0
[  159.759635][ T5757] loop4: detected capacity change from 0 to 32768
[  159.826789][ T5765] loop0: detected capacity change from 0 to 16
[  159.843335][ T5767] netlink: 'syz.2.451': attribute type 4 has an invalid length.
[  159.901067][ T5765] erofs: (device loop0): mounted with root inode @ nid 36.
[  159.918403][ T5765] attempt to access beyond end of device
[  159.918403][ T5765] loop0: rw=524288, want=12304, limit=16
[  159.930554][ T5765] attempt to access beyond end of device
[  159.930554][ T5765] loop0: rw=524288, want=1072, limit=16
[  159.941921][ T5765] attempt to access beyond end of device
[  159.941921][ T5765] loop0: rw=0, want=12304, limit=16
[  159.953371][   T26] audit: type=1800 audit(1792091783.717:14): pid=5765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.450" name="file2" dev="loop0" ino=89 res=0 errno=0
[  160.000180][ T5765] erofs: (device loop0): z_erofs_get_extent_decompressedlen: unknown type 3 @ lcn 2626 of nid 89
[  160.046824][ T5757] XFS (loop4): Mounting V5 Filesystem
[  160.139181][ T5781] capability: warning: `syz.0.454' uses 32-bit capabilities (legacy support in use)
[  160.167071][ T5757] XFS (loop4): Ending clean mount
[  160.195846][ T5781] program syz.0.454 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  160.499337][ T4186] XFS (loop4): Unmounting Filesystem
[  160.841966][ T5785] loop0: detected capacity change from 0 to 32768
[  160.892811][ T4264] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  160.903879][ T5775] loop1: detected capacity change from 0 to 40427
[  160.967985][ T5775] F2FS-fs (loop1): invalid crc value
[  161.034056][ T5775] F2FS-fs (loop1): Found nat_bits in checkpoint
[  161.248456][ T5775] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0
[  161.301608][ T5775] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  161.332935][ T4264] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  161.354329][ T4264] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  161.487870][ T5775] attempt to access beyond end of device
[  161.487870][ T5775] loop1: rw=2049, want=45136, limit=40427
[  161.614093][ T4264] usb 3-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40
[  161.644119][ T4264] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.683361][ T4264] usb 3-1: Product: syz
[  161.699311][ T4264] usb 3-1: Manufacturer: syz
[  161.715590][ T4264] usb 3-1: SerialNumber: syz
[  161.786260][ T5806] netlink: 'syz.0.464': attribute type 4 has an invalid length.
[  161.814518][ T5806] netlink: 'syz.0.464': attribute type 17 has an invalid length.
[  161.840017][ T5796] loop4: detected capacity change from 0 to 32768
[  161.935164][ T5796] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  161.963885][ T5796] BTRFS info (device loop4): disabling tree log
[  161.990131][ T5796] BTRFS info (device loop4): using free space tree
[  161.997048][ T5796] BTRFS info (device loop4): has skinny extents
[  162.143521][ T4264] usb 3-1: 0:1 : does not exist
[  162.154368][ T4264] usb 3-1: unit 2 not found!
[  162.180046][ T5796] BTRFS info (device loop4): enabling ssd optimizations
[  162.240936][ T4264] usb 3-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x600, type = 0
[  162.406403][ T5831] loop3: detected capacity change from 0 to 256
[  162.419759][ T4264] usb 3-1: USB disconnect, device number 3
[  162.491108][ T5831] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  162.550256][ T5831] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  162.627214][ T5831] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0x84a6b859, utbl_chksum : 0xe619d30d)
[  162.665845][ T5837] loop0: detected capacity change from 0 to 512
[  162.732922][ T5837] EXT4-fs (loop0): Ignoring removed oldalloc option
[  162.759073][ T5841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.463'.
[  162.776845][ T5839] netlink: 'syz.2.469': attribute type 4 has an invalid length.
[  162.786284][ T5837] EXT4-fs (loop0): Unrecognized mount option "uid=00000000000000000000" or missing value
[  162.817246][ T4785] udevd[4785]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  163.392672][    C0] net_ratelimit: 58 callbacks suppressed
[  164.016566][ T5855] netlink: 'syz.3.475': attribute type 4 has an invalid length.
[  164.025617][ T5855] netlink: 'syz.3.475': attribute type 17 has an invalid length.
[  164.456019][ T5872] netlink: 24 bytes leftover after parsing attributes in process `syz.4.481'.
[  164.612319][ T5876] netlink: 'syz.1.483': attribute type 4 has an invalid length.
[  164.639601][ T5876] netlink: 'syz.1.483': attribute type 17 has an invalid length.
[  164.655353][ T5876] netlink: 'syz.1.483': attribute type 27 has an invalid length.
[  164.733104][ T5878] netlink: 56 bytes leftover after parsing attributes in process `syz.4.484'.
[  164.755789][ T5878] netlink: 8 bytes leftover after parsing attributes in process `syz.4.484'.
[  164.842090][ T5883] netlink: 'syz.0.486': attribute type 4 has an invalid length.
[  164.863680][ T5883] netlink: 'syz.0.486': attribute type 17 has an invalid length.
[  166.310618][ T5907] netlink: 'syz.1.495': attribute type 4 has an invalid length.
[  166.337852][ T5907] netlink: 'syz.1.495': attribute type 17 has an invalid length.
[  166.671268][ T4201] Bluetooth: Wrong link type (-22)
[  166.677556][ T5323] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  166.882653][ T5322] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  166.890515][ T4264] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  167.052799][ T5323] usb 5-1: Using ep0 maxpacket: 16
[  167.173000][ T4264] usb 4-1: Using ep0 maxpacket: 8
[  167.178232][ T5322] usb 3-1: Using ep0 maxpacket: 16
[  167.203237][ T5323] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 253, changing to 11
[  167.222601][ T5323] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0
[  167.242594][ T5323] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  167.273437][ T5323] usb 5-1: config 0 interface 0 has no altsetting 0
[  167.288774][ T5323] usb 5-1: New USB device found, idVendor=0c16, idProduct=0002, bcdDevice= 0.00
[  167.310283][ T5323] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.319445][ T5322] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  167.330666][ T4264] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  167.346413][ T4264] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  167.357706][ T5322] usb 3-1: config 0 interface 0 has no altsetting 0
[  167.370056][ T5322] usb 3-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00
[  167.390097][ T5323] usb 5-1: config 0 descriptor??
[  167.399885][ T4264] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  167.411814][ T5322] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.421169][ T5944] loop1: detected capacity change from 0 to 4096
[  167.427794][ T4264] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  167.466975][ T5322] usb 3-1: config 0 descriptor??
[  167.480566][ T4264] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  167.503630][ T4264] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  167.515821][ T4264] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.755734][ T5323] usbhid 5-1:0.0: can't add hid device: -71
[  167.764849][ T5323] usbhid: probe of 5-1:0.0 failed with error -71
[  167.803191][ T4264] usb 4-1: usb_control_msg returned -32
[  167.809132][ T4264] usbtmc 4-1:16.0: can't read capabilities
[  167.816952][ T5323] usb 5-1: USB disconnect, device number 5
[  168.010134][ T5322] uclogic 0003:5543:0064.0002: unknown main item tag 0x0
[  168.020460][ T5958] validate_nla: 3 callbacks suppressed
[  168.020477][ T5958] netlink: 'syz.1.509': attribute type 4 has an invalid length.
[  168.039961][ T5322] uclogic 0003:5543:0064.0002: unknown main item tag 0x0
[  168.055426][ T5322] uclogic 0003:5543:0064.0002: unknown main item tag 0x0
[  168.067106][ T5322] uclogic 0003:5543:0064.0002: unknown main item tag 0x0
[  168.083767][ T5322] uclogic 0003:5543:0064.0002: unknown main item tag 0x0
[  168.092101][ T5958] netlink: 'syz.1.509': attribute type 17 has an invalid length.
[  168.105282][ T5322] uclogic 0003:5543:0064.0002: No inputs registered, leaving
[  168.130864][ T5958] netlink: 'syz.1.509': attribute type 27 has an invalid length.
[  168.188179][ T5322] uclogic 0003:5543:0064.0002: hiddev1,hidraw0: USB HID v0.01 Device [HID 5543:0064] on usb-dummy_hcd.2-1/input0
[  168.294976][ T5963] usbtmc 4-1:16.0: usb_control_msg returned -32
[  168.348955][ T5970] netlink: 'syz.4.510': attribute type 4 has an invalid length.
[  168.363017][ T5970] netlink: 'syz.4.510': attribute type 17 has an invalid length.
[  168.482800][ T5322] usb 4-1: USB disconnect, device number 5
[  168.762656][    C0] net_ratelimit: 55 callbacks suppressed
[  169.297143][ T5998] netlink: 'syz.3.521': attribute type 4 has an invalid length.
[  169.309390][ T6000] loop4: detected capacity change from 0 to 128
[  169.316761][ T5998] netlink: 60 bytes leftover after parsing attributes in process `syz.3.521'.
[  169.352028][ T6000] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  169.388722][ T6000] ext4 filesystem being mounted at /92/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  169.493571][ T6004] netlink: 'syz.3.523': attribute type 4 has an invalid length.
[  169.535421][ T6004] netlink: 'syz.3.523': attribute type 17 has an invalid length.
[  170.435577][ T4264] usb 3-1: USB disconnect, device number 4
[  170.552508][ T6007] loop1: detected capacity change from 0 to 32768
[  170.834488][ T5322] usb 4-1: new full-speed USB device number 6 using dummy_hcd
[  170.893677][ T6007] XFS (loop1): Mounting V5 Filesystem
[  171.052500][ T6007] XFS (loop1): Ending clean mount
[  171.226267][ T4185] XFS (loop1): Unmounting Filesystem
[  171.463250][ T5322] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  171.472407][ T5322] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.494632][ T6046] netlink: 'syz.4.536': attribute type 4 has an invalid length.
[  171.518967][ T6046] netlink: 'syz.4.536': attribute type 17 has an invalid length.
[  171.534105][ T5322] usb 4-1: Product: syz
[  171.538466][ T5322] usb 4-1: Manufacturer: syz
[  171.538488][ T5322] usb 4-1: SerialNumber: syz
[  171.595754][ T5322] usb 4-1: config 0 descriptor??
[  171.874035][ T5322] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  171.895673][ T6064] netlink: 60 bytes leftover after parsing attributes in process `syz.1.533'.
[  172.112648][ T5037] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  172.212771][ T5620] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  172.482939][ T5037] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  172.500409][ T5037] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  172.593137][ T5620] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  172.612976][ T5620] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  172.636284][ T5620] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  172.652710][ T5037] usb 3-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00
[  172.672135][ T5620] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  172.691331][ T5037] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  172.701176][ T5620] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.717020][ T5037] usb 3-1: Product: syz
[  172.721567][ T5037] usb 3-1: Manufacturer: syz
[  172.776334][ T5620] usb 2-1: config 0 descriptor??
[  172.845457][ T5037] mos7840 3-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected
[  172.888367][ T6078] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  172.969054][ T6071] loop0: detected capacity change from 0 to 131072
[  173.075336][ T6071] F2FS-fs (loop0): invalid crc value
[  173.102087][ T6071] F2FS-fs (loop0): Found nat_bits in checkpoint
[  173.170605][ T6071] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2
[  173.284867][ T5620] plantronics 0003:047F:FFFF.0003: unknown main item tag 0xd
[  173.317201][ T5620] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving
[  173.334674][ T5620] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  173.434568][ T6071] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  173.516312][ T5322] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71
[  173.590722][ T5322] usb 4-1: USB disconnect, device number 6
[  173.651212][ T4262] usb 2-1: USB disconnect, device number 3
[  173.846026][    C0] net_ratelimit: 58 callbacks suppressed
[  173.931986][ T6092] fido_id[6092]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory
[  174.265512][ T6106] validate_nla: 1 callbacks suppressed
[  174.265527][ T6106] netlink: 'syz.1.554': attribute type 4 has an invalid length.
[  174.306657][ T6106] netlink: 60 bytes leftover after parsing attributes in process `syz.1.554'.
[  174.396957][ T5037] mos7840: probe of ttyUSB0 failed with error -71
[  174.454050][ T5037] usb 3-1: USB disconnect, device number 5
[  174.502320][ T5037] mos7840 3-1:1.0: device disconnected
[  174.877215][ T6116] netlink: 'syz.0.550': attribute type 4 has an invalid length.
[  174.892700][ T6116] netlink: 'syz.0.550': attribute type 17 has an invalid length.
[  174.986219][ T6121] loop2: detected capacity change from 0 to 1024
[  175.110107][ T6121] EXT4-fs (loop2): Ignoring removed bh option
[  175.120025][ T6121] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  175.262760][ T5037] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  175.293852][ T6121] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,dioread_lock,dioread_nolock,resgid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,min_batch_time=0x0000000000000008,journal_ioprio=0x0000000000000005,stripe=0x0000000000000011,bh,init_itable,,errors=continue. Quota mode: none.
[  175.642805][ T5037] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  175.654429][ T5037] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00
[  175.663653][ T5037] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.863430][ T6134] loop0: detected capacity change from 0 to 32768
[  175.937730][ T5037] qmi_wwan 4-1:1.0: cdc-wdm0: USB WDM device
[  176.092893][ T6134] XFS (loop0): Mounting V5 Filesystem
[  176.151605][ T6151] netlink: 'syz.2.566': attribute type 4 has an invalid length.
[  176.165343][ T6151] netlink: 'syz.2.566': attribute type 17 has an invalid length.
[  176.215091][ T5037] qmi_wwan 4-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.3-1, WWAN/QMI device, 7a:7b:c5:14:9f:4f
[  176.357927][ T6134] XFS (loop0): Ending clean mount
[  176.417144][ T6162] netlink: 'syz.2.571': attribute type 4 has an invalid length.
[  176.431957][ T6162] netlink: 'syz.2.571': attribute type 17 has an invalid length.
[  176.554996][ T4187] XFS (loop0): Unmounting Filesystem
[  176.566091][ T5322] usb 4-1: USB disconnect, device number 7
[  176.587843][ T5322] qmi_wwan 4-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.3-1, WWAN/QMI device
[  178.179284][ T6185] loop3: detected capacity change from 0 to 1024
[  178.289427][ T6185] EXT4-fs (loop3): Ignoring removed bh option
[  178.327285][ T6185] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  178.456483][ T6200] FAULT_INJECTION: forcing a failure.
[  178.456483][ T6200] name failslab, interval 1, probability 0, space 0, times 0
[  178.476071][ T6185] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,dioread_lock,dioread_nolock,resgid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,min_batch_time=0x0000000000000008,journal_ioprio=0x0000000000000005,stripe=0x0000000000000011,bh,init_itable,,errors=continue. Quota mode: none.
[  178.509883][ T6200] CPU: 0 PID: 6200 Comm: syz.4.580 Not tainted syzkaller #0
[  178.517247][ T6200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  178.517277][ T6200] Call Trace:
[  178.517287][ T6200]  <TASK>
[  178.517298][ T6200]  dump_stack_lvl+0x188/0x250
[  178.517329][ T6200]  ? show_regs_print_info+0x20/0x20
[  178.530702][ T6200]  ? load_image+0x410/0x410
[  178.538345][ T6200]  ? __might_sleep+0xf0/0xf0
[  178.538373][ T6200]  ? __lock_acquire+0x7d40/0x7d40
[  178.548135][ T6200]  should_fail+0x383/0x4b0
[  178.548171][ T6200]  should_failslab+0x5/0x20
[  178.548192][ T6200]  slab_pre_alloc_hook+0x51/0xc0
[  178.548217][ T6200]  kmem_cache_alloc_trace+0x47/0x290
[  178.548237][ T6200]  ? __se_sys_io_uring_setup+0x363/0x2900
[  178.548265][ T6200]  __se_sys_io_uring_setup+0x363/0x2900
[  178.548298][ T6200]  ? __context_tracking_exit+0x4c/0x80
[  178.548325][ T6200]  ? __x64_sys_io_uring_setup+0x60/0x60
[  178.548368][ T6200]  ? lockdep_hardirqs_on+0x94/0x140
[  178.548398][ T6200]  do_syscall_64+0x4c/0xa0
[  178.548420][ T6200]  ? clear_bhb_loop+0x30/0x80
[  178.548443][ T6200]  ? clear_bhb_loop+0x30/0x80
[  178.548469][ T6200]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  178.548496][ T6200] RIP: 0033:0x7f794a7d7559
[  178.548517][ T6200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  178.548554][ T6200] RSP: 002b:00007f7948a2efb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
[  178.548586][ T6200] RAX: ffffffffffffffda RBX: 0000200000000540 RCX: 00007f794a7d7559
[  178.548603][ T6200] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000007221
[  178.548619][ T6200] RBP: 00007f794a86e8b0 R08: 0000000000000000 R09: 0000000000000000
[  178.548633][ T6200] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  178.548655][ T6200] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe55b51d88
[  178.548686][ T6200]  </TASK>
[  178.743754][ T6204] device syzkaller1 entered promiscuous mode
[  178.822347][ T6196] netlink: 'syz.2.581': attribute type 4 has an invalid length.
[  178.844213][ T6196] netlink: 'syz.2.581': attribute type 17 has an invalid length.
[  178.984184][ T6215] netlink: 'syz.4.583': attribute type 4 has an invalid length.
[  179.242611][    C1] net_ratelimit: 52 callbacks suppressed
[  179.314510][ T6225] loop4: detected capacity change from 0 to 128
[  179.488614][ T6225] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  180.202788][ T6225] hpfs: filesystem error: improperly stopped
[  180.230979][ T6225] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  180.263170][ T6225] hpfs: You really don't want any checks? You are crazy...
[  180.291276][ T6225] hpfs: Code page index out of array
[  180.324411][ T6225] hpfs: code page support is disabled
[  180.330806][ T6225] hpfs: hpfs_map_4sectors(): unaligned read
[  180.383502][ T6225] hpfs: hpfs_map_4sectors(): unaligned read
[  180.410552][ T6225] hpfs: filesystem error: unable to find root dir
[  180.724142][ T6253] validate_nla: 1 callbacks suppressed
[  180.724161][ T6253] netlink: 'syz.2.596': attribute type 4 has an invalid length.
[  180.752756][ T5322] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  180.766071][ T6258] loop4: detected capacity change from 0 to 256
[  180.803416][ T6253] netlink: 'syz.2.596': attribute type 17 has an invalid length.
[  180.823664][ T6259] netlink: 'syz.0.598': attribute type 4 has an invalid length.
[  180.831384][ T6259] netlink: 'syz.0.598': attribute type 17 has an invalid length.
[  181.022666][ T5322] usb 2-1: Using ep0 maxpacket: 32
[  181.051453][ T6269] loop2: detected capacity change from 0 to 1024
[  181.113210][ T4264] usb 4-1: new low-speed USB device number 8 using dummy_hcd
[  181.177575][ T6269] EXT4-fs (loop2): Ignoring removed bh option
[  181.199943][ T6269] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  181.291191][ T6269] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,dioread_lock,dioread_nolock,resgid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,min_batch_time=0x0000000000000008,journal_ioprio=0x0000000000000005,stripe=0x0000000000000011,bh,init_itable,,errors=continue. Quota mode: none.
[  181.383596][ T5322] usb 2-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[  181.420455][ T5322] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.499396][ T5322] usb 2-1: Product: syz
[  181.543625][ T4264] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  181.561210][ T5322] usb 2-1: Manufacturer: syz
[  181.594550][ T5322] usb 2-1: SerialNumber: syz
[  181.602046][ T4264] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  181.744945][ T5322] usb 2-1: config 0 descriptor??
[  181.762012][ T4264] usb 4-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00
[  181.880996][ T4264] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.898006][ T5322] gspca_main: gspca_topro-2.14.0 probing 06a2:0003
[  182.071837][ T4264] usb 4-1: config 0 descriptor??
[  183.058879][ T4264] hid-generic 0003:0C70:F0B6.0004: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.3-1/input0
[  183.173469][ T4264] usb 4-1: USB disconnect, device number 8
[  183.184823][ T6296] fido_id[6296]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory
[  183.382903][ T5322] gspca_topro: reg_r err -71
[  183.387604][ T5322] gspca_topro: Sensor soi763a
[  183.436184][ T5322] usb 2-1: USB disconnect, device number 4
[  183.583805][ T6311] loop2: detected capacity change from 0 to 256
[  183.653907][ T6311] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  184.522623][    C1] net_ratelimit: 56 callbacks suppressed
[  184.611804][ T6322] FAULT_INJECTION: forcing a failure.
[  184.611804][ T6322] name failslab, interval 1, probability 0, space 0, times 0
[  184.631491][ T6322] CPU: 1 PID: 6322 Comm: syz.0.617 Not tainted syzkaller #0
[  184.638849][ T6322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  184.648946][ T6322] Call Trace:
[  184.652259][ T6322]  <TASK>
[  184.655220][ T6322]  dump_stack_lvl+0x188/0x250
[  184.659944][ T6322]  ? show_regs_print_info+0x20/0x20
[  184.665184][ T6322]  ? load_image+0x410/0x410
[  184.669735][ T6322]  ? __lock_acquire+0x7d40/0x7d40
[  184.674815][ T6322]  should_fail+0x383/0x4b0
[  184.679315][ T6322]  should_failslab+0x5/0x20
[  184.683858][ T6322]  slab_pre_alloc_hook+0x51/0xc0
[  184.688841][ T6322]  kmem_cache_alloc_trace+0x47/0x290
[  184.694162][ T6322]  ? legacy_init_fs_context+0x4d/0xb0
[  184.699704][ T6322]  ? __raw_spin_lock_init+0x41/0x100
[  184.705038][ T6322]  legacy_init_fs_context+0x4d/0xb0
[  184.710282][ T6322]  alloc_fs_context+0x628/0x7d0
[  184.715183][ T6322]  do_new_mount+0x10d/0xa40
[  184.719742][ T6322]  __se_sys_mount+0x2e3/0x3d0
[  184.724468][ T6322]  ? __x64_sys_mount+0xc0/0xc0
[  184.729307][ T6322]  ? lockdep_hardirqs_on+0x94/0x140
[  184.734554][ T6322]  ? __x64_sys_mount+0x1c/0xc0
[  184.739370][ T6322]  do_syscall_64+0x4c/0xa0
[  184.743884][ T6322]  ? clear_bhb_loop+0x30/0x80
[  184.748608][ T6322]  ? clear_bhb_loop+0x30/0x80
[  184.753336][ T6322]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  184.759417][ T6322] RIP: 0033:0x7ff8405ac559
[  184.763875][ T6322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  184.783696][ T6322] RSP: 002b:00007ff83e804028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  184.792178][ T6322] RAX: ffffffffffffffda RBX: 00007ff840833fa0 RCX: 00007ff8405ac559
[  184.800182][ T6322] RDX: 0000200000000840 RSI: 0000200000000800 RDI: 0000000000000000
[  184.800200][ T6322] RBP: 00007ff8406438b0 R08: 0000200000002980 R09: 0000000000000000
[  184.800220][ T6322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  184.800234][ T6322] R13: 00007ff840834038 R14: 00007ff840833fa0 R15: 00007fff305eb508
[  184.800268][ T6322]  </TASK>
[  184.849049][ T6328] loop1: detected capacity change from 0 to 512
[  184.887634][ T6328] EXT4-fs (loop1): Ignoring removed mblk_io_submit option
[  184.968480][ T6328] EXT4-fs error (device loop1): ext4_iget_extra_inode:4573: inode #15: comm syz.1.618: corrupted in-inode xattr
[  185.044023][ T6328] EXT4-fs (loop1): Remounting filesystem read-only
[  185.089768][ T6328] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.618: couldn't read orphan inode 15 (err -117)
[  185.109585][ T6328] EXT4-fs (loop1): Remounting filesystem read-only
[  185.117716][ T6328] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_dev=0x0000000000000006,inode_readahead_blks=0x0000000008000000,errors=remount-ro,noload,user_xattr,mblk_io_submit,noinit_itable,noblock_validity,max_dir_size_kb=0x0000000000000009,init_itable=0x0000000000000fff,. Quota mode: none.
[  185.188168][ T6328] EXT4-fs error (device loop1): ext4_append:79: inode #2: comm syz.1.618: Logical block already allocated
[  185.220007][ T6328] EXT4-fs (loop1): Remounting filesystem read-only
[  185.766020][ T6350] loop4: detected capacity change from 0 to 2048
[  185.784530][ T6353] loop3: detected capacity change from 0 to 512
[  185.864579][ T6350] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  185.892761][ T6353] EXT4-fs (loop3): Ignoring removed oldalloc option
[  185.900534][ T6350] ext4 filesystem being mounted at /126/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  185.966769][ T6350] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.625: bg 0: block 345: padding at end of block bitmap is not set
[  186.022716][ T4264] usb 1-1: new full-speed USB device number 8 using dummy_hcd
[  186.041530][ T6353] EXT4-fs (loop3): mounted filesystem without journal. Opts: oldalloc,grpquota,noinit_itable,,errors=continue. Quota mode: writeback.
[  186.064848][ T6353] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  186.080089][ T6350] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2 with error 117
[  186.131166][ T6350] EXT4-fs (loop4): This should not happen!! Data will be lost
[  186.131166][ T6350] 
[  186.176304][ T5347] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2 with max blocks 14 with error 28
[  186.222024][ T5347] EXT4-fs (loop4): This should not happen!! Data will be lost
[  186.222024][ T5347] 
[  186.281488][ T5347] EXT4-fs (loop4): Total free blocks count 0
[  186.298075][ T6359] loop1: detected capacity change from 0 to 32768
[  186.313202][ T6359] (syz.1.626,6359,1):ocfs2_parse_options:1447 ERROR: Unrecognized mount option "01777777777777777777777" or missing value
[  186.332295][ T5347] EXT4-fs (loop4): Free/Dirty block details
[  186.340628][ T6359] (syz.1.626,6359,1):ocfs2_fill_super:1177 ERROR: status = -22
[  186.353102][ T5347] EXT4-fs (loop4): free_blocks=0
[  186.361221][ T5347] EXT4-fs (loop4): dirty_blocks=32
[  186.393006][ T5347] EXT4-fs (loop4): Block reservation details
[  186.420060][ T5347] EXT4-fs (loop4): i_reserved_data_blocks=2
[  186.553143][ T4264] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  186.578658][ T4264] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.633098][ T4264] usb 1-1: Product: syz
[  186.647527][ T4264] usb 1-1: Manufacturer: syz
[  186.672706][ T4264] usb 1-1: SerialNumber: syz
[  186.722054][ T6373] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  186.852189][ T4264] usb 1-1: config 0 descriptor??
[  187.354902][ T4264] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  187.792992][ T4302] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  188.293234][ T4302] usb 5-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice=24.00
[  188.314169][ T4264] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -32
[  188.382839][ T4302] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  188.485394][ T4264] usb 1-1: USB disconnect, device number 8
[  188.605683][ T4302] usb 5-1: Product: syz
[  188.660074][ T4302] usb 5-1: Manufacturer: syz
[  188.865723][ T6394] loop3: detected capacity change from 0 to 32768
[  188.892647][ T6394] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.640 (6394)
[  188.947034][ T6394] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  188.981164][ T6394] BTRFS info (device loop3): setting nodatasum
[  189.012710][ T6394] BTRFS info (device loop3): force zlib compression, level 3
[  189.020537][ T6394] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8)
[  189.062799][ T5037] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  189.101096][ T6394] BTRFS info (device loop3): use lzo compression, level 0
[  189.117466][ T6394] BTRFS info (device loop3): turning on flush-on-commit
[  189.133200][ T6394] BTRFS info (device loop3): use zlib compression, level 3
[  189.150719][ T6394] BTRFS info (device loop3): max_inline at 7
[  189.162820][ T6394] BTRFS info (device loop3): using free space tree
[  189.185130][ T6394] BTRFS info (device loop3): has skinny extents
[  189.229608][ T6394] BTRFS info (device loop3): enabling ssd optimizations
[  189.284138][ T4302] logitech-djreceiver 0003:046D:C52B.0005: hiddev0,hidraw0: USB HID v1.11 Device [syz syz] on usb-dummy_hcd.4-1/input0
[  189.343720][   T26] audit: type=1800 audit(1792091813.107:15): pid=6394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.640" name="file1" dev="loop3" ino=260 res=0 errno=0
[  189.393029][ T4302] logitech-djreceiver 0003:046D:C52B.0005: logi_dj_recv_send_report: unable to find dj report
[  189.447548][ T4302] logitech-djreceiver 0003:046D:C52B.0005: logi_dj_recv_switch_to_dj_mode error:-19
[  189.457727][ T5037] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  189.468033][ T5037] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  189.481093][ T5037] usb 2-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0x7F, skipping
[  189.614737][ T4302] usb 5-1: USB disconnect, device number 6
[  189.632948][    C1] net_ratelimit: 46 callbacks suppressed
[  189.672898][ T5037] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  189.681993][ T5037] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  189.770042][ T5037] usb 2-1: Product: syz
[  189.784409][ T5037] usb 2-1: Manufacturer: syz
[  189.794538][ T5037] usb 2-1: SerialNumber: syz
[  189.840111][ T6428] fido_id[6428]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  190.077450][ T6432] FAULT_INJECTION: forcing a failure.
[  190.077450][ T6432] name failslab, interval 1, probability 0, space 0, times 0
[  190.160203][ T6432] CPU: 0 PID: 6432 Comm: syz.0.646 Not tainted syzkaller #0
[  190.167559][ T6432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  190.177658][ T6432] Call Trace:
[  190.180978][ T6432]  <TASK>
[  190.183941][ T6432]  dump_stack_lvl+0x188/0x250
[  190.188666][ T6432]  ? show_regs_print_info+0x20/0x20
[  190.193912][ T6432]  ? load_image+0x410/0x410
[  190.198470][ T6432]  ? __might_sleep+0xf0/0xf0
[  190.203274][ T6432]  ? __lock_acquire+0x7d40/0x7d40
[  190.208359][ T6432]  should_fail+0x383/0x4b0
[  190.212826][ T6432]  should_failslab+0x5/0x20
[  190.217372][ T6432]  slab_pre_alloc_hook+0x51/0xc0
[  190.222355][ T6432]  kmem_cache_alloc_trace+0x47/0x290
[  190.227780][ T6432]  ? vidtv_psi_short_event_desc_init+0xe8/0x6b0
[  190.234066][ T6432]  vidtv_psi_short_event_desc_init+0xe8/0x6b0
[  190.240302][ T6432]  vidtv_psi_desc_clone+0x25a/0x9b0
[  190.245571][ T6432]  ? vidtv_psi_sdt_service_init+0x196/0x270
[  190.251512][ T6432]  vidtv_channel_si_init+0x88f/0x15c0
[  190.256960][ T6432]  vidtv_mux_init+0x4ff/0x1950
[  190.261779][ T6432]  ? __mutex_lock_common+0x435/0x2400
[  190.267205][ T6432]  vidtv_start_feed+0x368/0x590
[  190.272108][ T6432]  ? vidtv_i2c_func+0x10/0x10
[  190.276827][ T6432]  ? vidtv_stop_feed+0x250/0x250
[  190.281809][ T6432]  ? _raw_spin_lock_irq+0xb7/0xf0
[  190.286877][ T6432]  ? _raw_spin_lock_irqsave+0x100/0x100
[  190.292481][ T6432]  ? _raw_spin_unlock_irq+0x1f/0x40
[  190.297727][ T6432]  dmx_section_feed_start_filtering+0x4f3/0x680
[  190.304021][ T6432]  dvb_dmxdev_filter_start+0xc62/0x1060
[  190.309617][ T6432]  ? dvb_dmxdev_filter_set+0x2cc/0x580
[  190.315128][ T6432]  dvb_demux_do_ioctl+0x463/0x530
[  190.320193][ T6432]  dvb_usercopy+0x191/0x2b0
[  190.324758][ T6432]  ? dvb_dmxdev_buffer_read+0x4a0/0x4a0
[  190.330376][ T6432]  ? dvb_generic_ioctl+0xb0/0xb0
[  190.335414][ T6432]  ? dvb_demux_poll+0x210/0x210
[  190.340311][ T6432]  dvb_demux_ioctl+0x25/0x30
[  190.344977][ T6432]  __se_sys_ioctl+0xfa/0x170
[  190.349617][ T6432]  do_syscall_64+0x4c/0xa0
[  190.354092][ T6432]  ? clear_bhb_loop+0x30/0x80
[  190.358809][ T6432]  ? clear_bhb_loop+0x30/0x80
[  190.363525][ T6432]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  190.363558][ T6432] RIP: 0033:0x7ff8405ac559
[  190.363582][ T6432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  190.363600][ T6432] RSP: 002b:00007ff83e804028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  190.363622][ T6432] RAX: ffffffffffffffda RBX: 00007ff840833fa0 RCX: 00007ff8405ac559
[  190.374534][ T6432] RDX: 00002000000005c0 RSI: 00000000403c6f2b RDI: 0000000000000004
[  190.374556][ T6432] RBP: 00007ff8406438b0 R08: 0000000000000000 R09: 0000000000000000
[  190.374571][ T6432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  190.374585][ T6432] R13: 00007ff840834038 R14: 00007ff840833fa0 R15: 00007fff305eb508
[  190.374621][ T6432]  </TASK>
[  190.855284][ T6453] loop2: detected capacity change from 0 to 512
[  191.016084][ T5620] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  191.072828][ T4174] Bluetooth: hci1: command 0x0406 tx timeout
[  191.073000][ T4273] Bluetooth: hci3: command 0x0406 tx timeout
[  191.079125][ T4174] Bluetooth: hci4: command 0x0406 tx timeout
[  191.104932][ T4273] Bluetooth: hci2: command 0x0406 tx timeout
[  191.130183][ T6460] loop2: detected capacity change from 0 to 128
[  191.137436][ T5037] cdc_ncm 2-1:1.0: bind() failure
[  191.170003][ T5037] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[  191.177180][ T5037] cdc_ncm 2-1:1.1: bind() failure
[  191.268194][ T6460] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  191.293266][ T5620] usb 5-1: Using ep0 maxpacket: 32
[  191.330372][ T5037] usb 2-1: USB disconnect, device number 5
[  191.370690][ T6460] ext4 filesystem being mounted at /130/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  191.371141][ T6469] loop3: detected capacity change from 0 to 4096
[  191.430151][ T6469] EXT4-fs (loop3): Ignoring removed mblk_io_submit option
[  191.437823][ T5620] usb 5-1: config 0 has an invalid interface number: 153 but max is 0
[  191.470232][ T6469] EXT4-fs (loop3): Test dummy encryption mode enabled
[  191.477592][ T6460] syz.2.656 (pid 6460) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  191.488477][ T5620] usb 5-1: config 0 has no interface number 0
[  191.498377][ T5620] usb 5-1: config 0 interface 153 has no altsetting 0
[  191.506076][ T6469] EXT4-fs (loop3): Ignoring removed orlov option
[  191.522236][ T6469] EXT4-fs (loop3): mounted filesystem without journal. Opts: mblk_io_submit,nouid32,nodioread_nolock,test_dummy_encryption,lazytime,stripe=0x0000000000000000,minixdf,orlov,nobarrier,,errors=continue. Quota mode: writeback.
[  191.575093][ T6469] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  191.682839][ T5620] usb 5-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=6c.d5
[  191.694414][ T5620] usb 5-1: New USB device strings: Mfr=208, Product=45, SerialNumber=3
[  191.708773][ T5620] usb 5-1: Product: syz
[  191.715758][ T5620] usb 5-1: Manufacturer: syz
[  191.720498][ T5620] usb 5-1: SerialNumber: syz
[  191.737746][ T5620] usb 5-1: config 0 descriptor??
[  191.743474][ T6460] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-avx2)"
[  192.045571][ T5620] hub 5-1:0.153: bad descriptor, ignoring hub
[  192.066421][ T5620] hub: probe of 5-1:0.153 failed with error -5
[  192.072958][ T4174] usb 1-1: new full-speed USB device number 9 using dummy_hcd
[  192.094344][ T5620] sierra 5-1:0.153: Sierra USB modem converter detected
[  192.173988][ T5620] usb 5-1: USB disconnect, device number 7
[  192.180579][ T5620] sierra 5-1:0.153: device disconnected
[  192.462908][ T4174] usb 1-1: not running at top speed; connect to a high speed hub
[  192.530607][ T6481] loop2: detected capacity change from 0 to 32768
[  192.560572][ T6480] loop3: detected capacity change from 0 to 32768
[  192.572865][ T4174] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  192.594038][ T4174] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00
[  192.624289][ T6480] (syz.3.662,6480,0):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options
[  192.652647][ T4174] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.680006][ T6480] (syz.3.662,6480,0):ocfs2_fill_super:1177 ERROR: status = -22
[  192.754535][ T4174] cyberjack 1-1:1.0: Reiner SCT Cyberjack USB card reader converter detected
[  192.807296][ T4174] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  193.063253][ T5620] usb 1-1: USB disconnect, device number 9
[  193.100535][ T5620] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  193.111764][ T5620] cyberjack 1-1:1.0: device disconnected
[  193.223725][ T4273] usb 5-1: new full-speed USB device number 8 using dummy_hcd
[  193.406599][ T6486] loop1: detected capacity change from 0 to 32768
[  193.512429][ T6486] XFS (loop1): Mounting V5 Filesystem
[  193.563915][ T4273] usb 5-1: not running at top speed; connect to a high speed hub
[  193.629823][ T6486] XFS (loop1): Ending clean mount
[  193.678122][   T26] audit: type=1800 audit(1792091817.437:16): pid=6486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.665" name="file1" dev="loop1" ino=6150 res=0 errno=0
[  193.764236][   T26] audit: type=1800 audit(1792091817.527:17): pid=6521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.665" name="file1" dev="loop1" ino=6150 res=0 errno=0
[  193.866620][ T4273] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00
[  193.891959][ T4273] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.937559][ T4273] usb 5-1: Product: syz
[  193.941773][ T4273] usb 5-1: Manufacturer: syz
[  193.964675][ T4273] usb 5-1: SerialNumber: syz
[  194.045071][ T4273] keyspan 5-1:1.0: Keyspan 4 port adapter converter detected
[  194.097834][ T4273] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0
[  194.122057][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  194.128455][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  194.142855][ T4185] XFS (loop1): Unmounting Filesystem
[  194.160751][ T4273] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1
[  194.212754][ T5620] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  194.233468][ T4273] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2
[  194.256770][    C0] usb 5-1: malformed indat packet
[  194.272734][    C0] usb 5-1: malformed indat packet
[  194.281082][ T4273] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3
[  194.292711][    C0] usb 5-1: malformed indat packet
[  194.312812][    C0] usb 5-1: malformed indat packet
[  194.332771][    C0] usb 5-1: malformed indat packet
[  194.349993][ T6516] loop2: detected capacity change from 0 to 32768
[  194.356691][    C0] usb 5-1: malformed indat packet
[  194.372720][    C0] usb 5-1: malformed indat packet
[  194.404972][    C0] usb 5-1: malformed indat packet
[  194.424159][ T6516] (syz.2.674,6516,0):ocfs2_parse_options:1447 ERROR: Unrecognized mount option "da	‹=writeback" or missing value
[  194.448272][ T6516] (syz.2.674,6516,0):ocfs2_fill_super:1177 ERROR: status = -22
[  194.460058][ T6531] loop0: detected capacity change from 0 to 512
[  194.641617][ T6531] FAT-fs (loop0): Invalid FSINFO signature: 0x41613352, 0x61417272 (sector = 1)
[  194.651388][ T5620] usb 4-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config
[  194.673908][ T4273] usb 5-1: USB disconnect, device number 8
[  194.719822][ T4273] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0
[  194.753036][    C1] net_ratelimit: 64 callbacks suppressed
[  194.774001][ T5037] hid (null): global environment stack underflow
[  194.798490][ T5037] hid (null): global environment stack underflow
[  194.827917][ T4273] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1
[  194.863126][ T5620] usb 4-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e
[  194.876812][ T5620] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  194.899782][ T4273] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2
[  194.913987][ T5037] hid-generic 0000:0000:0000.0006: global environment stack underflow
[  194.932930][ T5620] usb 4-1: Product: syz
[  194.955034][ T5620] usb 4-1: Manufacturer: syz
[  194.962779][ T5037] hid-generic 0000:0000:0000.0006: item 0 2 1 11 parsing failed
[  194.972864][ T5620] usb 4-1: SerialNumber: syz
[  194.989732][ T5037] hid-generic: probe of 0000:0000:0000.0006 failed with error -22
[  195.008429][ T4273] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3
[  195.039462][ T4273] keyspan 5-1:1.0: device disconnected
[  195.058893][ T5620] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state.
[  195.075864][ T5620] dvb-usb: bulk message failed: -22 (3/0)
[  195.130479][ T5620] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  195.183316][ T5620] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0)
[  195.231459][ T5620] usb 4-1: media controller created
[  195.262207][ T6540] loop0: detected capacity change from 0 to 128
[  195.271645][ T6524] dibusb: i2c wr: len=61 is too big!
[  195.271645][ T6524] 
[  195.303503][ T6541] IPv6: ADDRCONF(NETDEV_CHANGE): sl0: link becomes ready
[  195.482732][ T5620] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  195.594029][ T4187] FAT-fs (loop0): error, corrupted directory (invalid entries)
[  195.613412][ T4187] FAT-fs (loop0): error, corrupted directory (invalid entries)
[  195.762892][ T5620] DVB: Unable to find symbol mt352_attach()
[  195.768856][ T5620] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0'
[  195.822834][ T5620] dvb-usb: bulk message failed: -22 (3/0)
[  195.854979][ T5620] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected.
[  195.942799][ T5616] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  195.950716][ T5037] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  195.959603][ T5620] usb 4-1: USB disconnect, device number 9
[  196.208448][ T5616] usb 2-1: Using ep0 maxpacket: 32
[  196.253318][ T5620] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected.
[  196.353129][ T5037] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  196.364194][ T5616] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  196.399062][ T5037] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  196.413169][ T5616] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  196.426398][ T5037] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  196.436507][ T5616] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  196.449326][ T5616] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  196.458981][ T5037] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  196.483468][ T5616] usb 2-1: config 0 descriptor??
[  196.501218][ T5037] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  196.516923][ T5037] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  196.545138][ T5616] hub 2-1:0.0: USB hub found
[  196.774413][ T5616] hub 2-1:0.0: 1 port detected
[  196.779290][ T5620] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  196.885628][ T6577] rxe_eth0 speed is unknown, defaulting to 1000
[  196.992796][ T4301] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  197.040307][ T6577] geneve1 speed is unknown, defaulting to 1000
[  197.072943][ T5620] usb 4-1: Using ep0 maxpacket: 16
[  197.209276][ T5620] usb 4-1: config index 0 descriptor too short (expected 51443, got 18)
[  197.370466][ T6577] chnl_net:caif_netlink_parms(): no params data found
[  197.422945][ T4301] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  197.434027][ T5620] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  197.453079][ T5620] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  197.461210][ T5620] usb 4-1: Product: syz
[  197.465553][ T4301] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  197.478668][ T5620] usb 4-1: Manufacturer: syz
[  197.483866][ T5616] hub 2-1:0.0: activate --> -90
[  197.490105][ T4301] usb 3-1: config 0 interface 0 has no altsetting 0
[  197.496816][ T5620] usb 4-1: SerialNumber: syz
[  197.502599][ T4301] usb 3-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00
[  197.502633][ T4301] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.529346][ T5620] r8152-cfgselector 4-1: config 0 descriptor??
[  197.554036][ T4301] usb 3-1: config 0 descriptor??
[  197.682208][ T5037] [drm] Initialized gud 1.0.0 20200422 for 5-1:1.0 on minor 2
[  197.715801][ T6577] bridge0: port 1(bridge_slave_0) entered blocking state
[  197.723505][ T6577] bridge0: port 1(bridge_slave_0) entered disabled state
[  197.732220][ T6577] device bridge_slave_0 entered promiscuous mode
[  197.741550][ T6577] bridge0: port 2(bridge_slave_1) entered blocking state
[  197.748818][ T6577] bridge0: port 2(bridge_slave_1) entered disabled state
[  197.757385][ T6577] device bridge_slave_1 entered promiscuous mode
[  197.818283][ T6577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  197.841007][ T6577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  197.934387][ T5037] gud 5-1:1.0: [drm] Cannot find any crtc or sizes
[  197.979395][ T6443] usb 2-1: USB disconnect, device number 6
[  197.989099][ T5037] usb 5-1: USB disconnect, device number 9
[  197.995305][ T5620] r8152-cfgselector 4-1: Unknown version 0x0000
[  198.002519][ T5620] r8152-cfgselector 4-1: bad CDC descriptors
[  198.022217][ T6577] team0: Port device team_slave_0 added
[  198.041422][ T6577] team0: Port device team_slave_1 added
[  198.047371][ T5620] r8152-cfgselector 4-1: Unknown version 0x0000
[  198.074122][ T5620] r8152-cfgselector 4-1: USB disconnect, device number 10
[  198.093179][ T4301] input: HID 5543:0064 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:5543:0064.0007/input/input8
[  198.236704][ T4301] uclogic 0003:5543:0064.0007: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 5543:0064] on usb-dummy_hcd.2-1/input0
[  198.270799][ T6577] batman_adv: batadv0: Adding interface: batadv_slave_0
[  198.290308][ T6577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  198.416572][ T6577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  198.466352][ T6577] batman_adv: batadv0: Adding interface: batadv_slave_1
[  198.483235][ T6577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  198.518147][ T6577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  198.693110][ T6577] device hsr_slave_0 entered promiscuous mode
[  198.709796][ T6577] device hsr_slave_1 entered promiscuous mode
[  198.737660][ T6577] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  198.757698][ T6577] Cannot create hsr debugfs directory
[  198.832869][ T6443] Bluetooth: hci2: command 0x0409 tx timeout
[  198.872462][ T5037] usb 3-1: USB disconnect, device number 6
[  198.972727][ T4273] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  199.212708][ T4273] usb 4-1: Using ep0 maxpacket: 32
[  199.493018][ T4273] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  199.519420][ T4273] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.557184][ T4273] usb 4-1: Product: syz
[  199.572689][ T4273] usb 4-1: Manufacturer: syz
[  199.577373][ T4273] usb 4-1: SerialNumber: syz
[  199.625959][ T4273] usb 4-1: config 0 descriptor??
[  199.688584][ T4273] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  199.792595][    C0] net_ratelimit: 73 callbacks suppressed
[  199.830030][ T6577] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  199.849799][ T6577] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  199.873761][ T6577] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  199.973083][ T6577] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  200.024621][ T4301] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[  200.198155][ T6577] 8021q: adding VLAN 0 to HW filter on device bond0
[  200.236507][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  200.256135][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  200.295961][ T6577] 8021q: adding VLAN 0 to HW filter on device team0
[  200.318471][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  200.340181][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  200.352269][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[  200.359426][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[  200.378334][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  200.406530][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  200.426255][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  200.441819][ T1263] bridge0: port 2(bridge_slave_1) entered blocking state
[  200.448993][ T1263] bridge0: port 2(bridge_slave_1) entered forwarding state
[  200.458145][ T4301] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  200.477276][ T4301] usb 3-1: config 0 interface 0 has no altsetting 0
[  200.533741][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  200.561483][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  200.578371][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  200.599386][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  200.645907][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  200.668245][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  200.677964][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  200.687375][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  200.696380][ T4301] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  200.706036][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  200.721595][ T6577] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  200.728083][ T4301] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  200.750790][ T6577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  200.768872][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  200.779046][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  200.810942][ T4301] usb 3-1: Product: syz
[  200.821732][ T6628] loop1: detected capacity change from 0 to 512
[  200.826071][ T4301] usb 3-1: Manufacturer: syz
[  200.851330][ T4301] usb 3-1: SerialNumber: syz
[  200.870122][ T4301] usb 3-1: config 0 descriptor??
[  200.881057][ T6628] EXT4-fs (loop1): Test dummy encryption mode enabled
[  200.912951][ T5620] Bluetooth: hci2: command 0x041b tx timeout
[  200.920486][ T6628] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  200.944005][ T6628] EXT4-fs error (device loop1): ext4_orphan_get:1436: comm syz.1.705: bad orphan inode 131083
[  200.957011][ T4301] usb 3-1: selecting invalid altsetting 0
[  200.993160][ T4273] gspca_ov534_9: reg_w failed -71
[  201.007260][ T6628] EXT4-fs (loop1): mounted filesystem without journal. Opts: stripe=0x000000000000003d,test_dummy_encryption=v1,mb_optimize_scan=0x0000000000000000,,errors=continue. Quota mode: none.
[  201.129186][ T6608] usb 3-1: selecting invalid altsetting 0
[  201.186800][ T6608] usb 3-1: 0:0: usb_set_interface failed (-22)
[  201.226041][ T6608] usb 3-1: selecting invalid altsetting 0
[  201.262830][ T6608] usb 3-1: 0:0: usb_set_interface failed (-22)
[  201.286528][ T4301] usb 3-1: USB disconnect, device number 7
[  201.380943][ T6577] 8021q: adding VLAN 0 to HW filter on device batadv0
[  201.400854][ T4273] gspca_ov534_9: Unknown sensor 0000
[  201.400916][ T4273] ov534_9: probe of 4-1:0.0 failed with error -22
[  201.453434][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  201.464266][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  201.489403][ T4273] usb 4-1: USB disconnect, device number 11
[  202.431471][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  202.441691][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  202.522688][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  202.531737][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  202.543191][ T6577] device veth0_vlan entered promiscuous mode
[  202.551025][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  202.561137][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  202.575291][ T6640] loop4: detected capacity change from 0 to 32768
[  202.584692][ T6577] device veth1_vlan entered promiscuous mode
[  202.663636][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  202.689616][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  202.735590][ T6640] XFS (loop4): Mounting V5 Filesystem
[  202.753602][ T6577] device veth0_macvtap entered promiscuous mode
[  202.771223][ T6577] device veth1_macvtap entered promiscuous mode
[  202.808694][ T6577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  202.839854][ T6577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  202.866630][ T6640] XFS (loop4): Ending clean mount
[  202.883426][ T6577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  202.894134][ T6577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  202.904890][ T6577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  202.918131][ T6577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  202.928516][ T6577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  202.939175][ T6577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  202.951020][ T6577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  202.961651][ T6577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  202.974120][ T6577] batman_adv: batadv0: Interface activated: batadv_slave_0
[  202.985841][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  203.002783][ T5037] Bluetooth: hci2: command 0x040f tx timeout
[  203.012960][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  203.022073][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  203.031233][ T4468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  203.054604][ T6577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  203.077208][ T6577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.096728][ T6577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  203.113083][   T26] audit: type=1326 audit(1792091826.867:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6683 comm="syz.3.718" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3dbf4ed559 code=0x0
[  203.133905][ T6577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.182084][ T6577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  203.222644][ T6577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.274122][ T6577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  203.301603][ T6577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.323332][ T6577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  203.346153][ T6577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.384327][ T6577] batman_adv: batadv0: Interface activated: batadv_slave_1
[  203.412095][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  203.432176][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  203.461690][ T4186] XFS (loop4): Unmounting Filesystem
[  203.473552][ T6577] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  203.489455][ T6577] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  203.500722][ T6577] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  203.513049][ T6577] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  203.787026][ T1263] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  203.808092][ T1263] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  203.879422][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  203.928124][ T6696] FAULT_INJECTION: forcing a failure.
[  203.928124][ T6696] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  204.012394][ T6696] CPU: 1 PID: 6696 Comm: syz.1.724 Not tainted syzkaller #0
[  204.019741][ T6696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  204.029827][ T6696] Call Trace:
[  204.033125][ T6696]  <TASK>
[  204.036080][ T6696]  dump_stack_lvl+0x188/0x250
[  204.040779][ T6696]  ? show_regs_print_info+0x20/0x20
[  204.045995][ T6696]  ? load_image+0x410/0x410
[  204.050509][ T6696]  ? __lock_acquire+0x7d40/0x7d40
[  204.055547][ T6696]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  204.061497][ T6696]  should_fail+0x383/0x4b0
[  204.066065][ T6696]  prepare_alloc_pages+0x1e3/0x5b0
[  204.071205][ T6696]  __alloc_pages+0x11b/0x480
[  204.075830][ T6696]  ? zone_statistics+0x170/0x170
[  204.080787][ T6696]  ? __might_sleep+0xf0/0xf0
[  204.085421][ T6696]  alloc_migration_target+0x40a/0x7a0
[  204.090829][ T6696]  migrate_pages+0xa0d/0x34a0
[  204.095530][ T6696]  ? migrate_pages+0x34a0/0x34a0
[  204.100475][ T6696]  ? next_demotion_node+0x190/0x190
[  204.105683][ T6696]  ? walk_page_range+0x4a0/0x550
[  204.110675][ T6696]  ? remove_migration_ptes+0x130/0x130
[  204.116142][ T6696]  ? page_mapped_in_vma+0x520/0x520
[  204.121377][ T6696]  do_migrate_pages+0x623/0x860
[  204.126261][ T6696]  ? change_prot_numa+0x70/0x70
[  204.131120][ T6696]  ? get_task_mm+0xad/0xd0
[  204.135559][ T6696]  ? cap_capable+0x194/0x220
[  204.140180][ T6696]  ? __bpf_trace_rcu_stall_warning+0x10/0x10
[  204.146202][ T6696]  ? security_capable+0x90/0xb0
[  204.151090][ T6696]  __se_sys_migrate_pages+0x4e4/0x5e0
[  204.156486][ T6696]  ? __x64_sys_migrate_pages+0xa0/0xa0
[  204.161968][ T6696]  ? lockdep_hardirqs_on+0x94/0x140
[  204.167187][ T6696]  do_syscall_64+0x4c/0xa0
[  204.171618][ T6696]  ? clear_bhb_loop+0x30/0x80
[  204.176321][ T6696]  ? clear_bhb_loop+0x30/0x80
[  204.181008][ T6696]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  204.186942][ T6696] RIP: 0033:0x7fde51592559
[  204.191371][ T6696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  204.211248][ T6696] RSP: 002b:00007fde4f7ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000100
[  204.219698][ T6696] RAX: ffffffffffffffda RBX: 00007fde51819fa0 RCX: 00007fde51592559
[  204.227729][ T6696] RDX: 0000200000000040 RSI: 0000000000000003 RDI: 0000000000000000
[  204.235778][ T6696] RBP: 00007fde516298b0 R08: 0000000000000000 R09: 0000000000000000
[  204.235796][ T6696] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000
[  204.235812][ T6696] R13: 00007fde5181a038 R14: 00007fde51819fa0 R15: 00007ffd4f85b808
[  204.235847][ T6696]  </TASK>
[  204.302048][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  204.319363][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  204.328656][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  204.659220][ T6715] loop4: detected capacity change from 0 to 512
[  204.702355][ T6714] loop1: detected capacity change from 0 to 128
[  204.742460][ T6715] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  204.776428][ T6715] System zones: 1-12
[  204.795973][ T6715] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.730: missing EA_INODE flag
[  204.903313][ T6715] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.730: error while reading EA inode 12 err=-117
[  204.924646][ T6714] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  204.935833][ T6715] EXT4-fs (loop4): 1 orphan inode deleted
[  204.986290][ T6715] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[  205.292979][    C0] net_ratelimit: 108 callbacks suppressed
[  205.348204][ T6714] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  205.617802][ T5037] Bluetooth: hci2: command 0x0419 tx timeout
[  205.630928][ T6714] ext2 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  206.916104][ T6743] loop5: detected capacity change from 0 to 512
[  206.985839][ T6743] EXT4-fs (loop5): Ignoring removed mblk_io_submit option
[  207.062318][ T6743] EXT4-fs error (device loop5): ext4_iget_extra_inode:4573: inode #15: comm syz.5.740: corrupted in-inode xattr
[  207.085663][ T6750] netlink: 'syz.2.741': attribute type 2 has an invalid length.
[  207.097316][ T6743] EXT4-fs (loop5): Remounting filesystem read-only
[  207.104033][ T6743] EXT4-fs error (device loop5): ext4_orphan_get:1415: comm syz.5.740: couldn't read orphan inode 15 (err -117)
[  207.117352][ T6743] EXT4-fs (loop5): Remounting filesystem read-only
[  207.123963][ T6743] EXT4-fs (loop5): mounted filesystem without journal. Opts: journal_dev=0x0000000000000006,inode_readahead_blks=0x0000000008000000,errors=remount-ro,noload,user_xattr,mblk_io_submit,noinit_itable,noblock_validity,max_dir_size_kb=0x0000000000000009,init_itable=0x0000000000000fff,. Quota mode: none.
[  208.088797][ T5620] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  208.106200][ T6779] loop3: detected capacity change from 0 to 256
[  208.160454][ T5620] hid-generic 0000:0000:0000.0008: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  208.534813][ T6784] fido_id[6784]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  208.969452][ T6804] loop2: detected capacity change from 0 to 256
[  209.017653][ T6806] loop3: detected capacity change from 0 to 512
[  209.077093][ T6804] FAT-fs (loop2): Directory bread(block 64) failed
[  209.088849][ T6804] FAT-fs (loop2): Directory bread(block 65) failed
[  209.117466][ T6790] loop5: detected capacity change from 0 to 8192
[  209.148331][ T6806] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  209.163443][ T6804] FAT-fs (loop2): Directory bread(block 66) failed
[  209.170058][ T6804] FAT-fs (loop2): Directory bread(block 67) failed
[  209.176804][ T6804] FAT-fs (loop2): Directory bread(block 68) failed
[  209.183514][ T6804] FAT-fs (loop2): Directory bread(block 69) failed
[  209.190294][ T6804] FAT-fs (loop2): Directory bread(block 70) failed
[  209.197023][ T6804] FAT-fs (loop2): Directory bread(block 71) failed
[  209.205484][ T6804] FAT-fs (loop2): Directory bread(block 72) failed
[  209.212364][ T6804] FAT-fs (loop2): Directory bread(block 73) failed
[  209.229450][ T6806] System zones: 1-12
[  209.236962][ T6806] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.754: missing EA_INODE flag
[  209.250846][ T6806] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.754: error while reading EA inode 12 err=-117
[  209.390769][ T6806] EXT4-fs (loop3): 1 orphan inode deleted
[  209.435592][ T6806] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[  209.587372][ T6806] fscrypt: key with description 'fscrypt:e8dab99234bb312e' has invalid payload
[  209.616592][ T6776] loop1: detected capacity change from 0 to 32768
[  209.646704][ T6806] fscrypt: key with description 'fscrypt:e8dab99234bb312e' has invalid payload
[  210.065011][   T26] audit: type=1800 audit(1792091833.827:19): pid=6776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.748" name="file1" dev="loop1" ino=4 res=0 errno=0
[  210.513830][    C0] net_ratelimit: 88 callbacks suppressed
[  210.780202][  T144] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.878166][ T6814] loop5: detected capacity change from 0 to 40427
[  210.938597][ T6814] F2FS-fs (loop5): Corrupted extension count (327717 + 1 > 64)
[  210.978864][ T6814] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[  211.031710][ T6814] F2FS-fs (loop5): build fault injection attr: rate: 771, type: 0x1ffff
[  211.067143][  T144] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  211.104473][ T6814] F2FS-fs (loop5): invalid crc value
[  211.174251][ T6814] F2FS-fs (loop5): Found nat_bits in checkpoint
[  211.563495][  T144] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  211.689700][ T6814] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0
[  211.703908][ T6814] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  211.746641][   T26] audit: type=1804 audit(1792091835.507:20): pid=6848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.768" name="/newroot/159/config/usb_gadget/g1/functions/midi.usb0/id" dev="configfs" ino=43960 res=1 errno=0
[  211.806958][  T144] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  211.851081][   T26] audit: type=1800 audit(1792091835.587:21): pid=6848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.768" name="id" dev="configfs" ino=43960 res=0 errno=0
[  211.853003][ T5316] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  212.162684][ T5316] usb 4-1: Using ep0 maxpacket: 16
[  212.264867][ T6577] attempt to access beyond end of device
[  212.264867][ T6577] loop5: rw=2049, want=45104, limit=40427
[  212.284190][ T5316] usb 4-1: config 0 has an invalid interface number: 105 but max is 0
[  212.310836][ T6852] rxe_eth0 speed is unknown, defaulting to 1000
[  212.348351][ T5316] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  212.399306][ T5316] usb 4-1: config 0 has no interface number 0
[  212.583135][ T5316] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  212.612702][ T5316] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  212.620768][ T5316] usb 4-1: Product: syz
[  212.983041][ T6851] loop2: detected capacity change from 0 to 32768
[  213.046925][ T6851] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.769 (6851)
[  213.396088][ T5316] usb 4-1: Manufacturer: syz
[  213.400749][ T5316] usb 4-1: SerialNumber: syz
[  213.418345][ T5316] usb 4-1: config 0 descriptor??
[  213.463083][ T6851] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  213.553252][ T6851] BTRFS info (device loop2): using free space tree
[  213.563349][ T6851] BTRFS info (device loop2): has skinny extents
[  213.694027][ T6852] geneve1 speed is unknown, defaulting to 1000
[  213.703213][ T5316] usb 4-1: Found UVC 0.00 device syz (046d:08f3)
[  213.709887][ T5316] usb 4-1: No valid video chain found.
[  213.789257][ T5316] usb 4-1: USB disconnect, device number 12
[  213.870065][ T6851] BTRFS info (device loop2): enabling ssd optimizations
[  214.032600][ T4273] Bluetooth: hci0: command 0x0409 tx timeout
[  214.233363][ T6902] loop5: detected capacity change from 0 to 4096
[  214.407295][ T6907] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  214.497685][ T6902] FAULT_INJECTION: forcing a failure.
[  214.497685][ T6902] name failslab, interval 1, probability 0, space 0, times 0
[  214.692978][ T6902] CPU: 1 PID: 6902 Comm: syz.5.772 Not tainted syzkaller #0
[  214.700441][ T6902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  214.710543][ T6902] Call Trace:
[  214.710611][ T6902]  <TASK>
[  214.710621][ T6902]  dump_stack_lvl+0x188/0x250
[  214.710652][ T6902]  ? show_regs_print_info+0x20/0x20
[  214.710676][ T6902]  ? load_image+0x410/0x410
[  214.710702][ T6902]  ? __might_sleep+0xf0/0xf0
[  214.710726][ T6902]  ? __lock_acquire+0x7d40/0x7d40
[  214.710756][ T6902]  should_fail+0x383/0x4b0
[  214.710785][ T6902]  should_failslab+0x5/0x20
[  214.750204][ T6902]  slab_pre_alloc_hook+0x51/0xc0
[  214.755210][ T6902]  ? nilfs_btree_alloc_path+0x48/0x5b0
[  214.760724][ T6902]  kmem_cache_alloc+0x3d/0x280
[  214.765536][ T6902]  nilfs_btree_alloc_path+0x48/0x5b0
[  214.770871][ T6902]  nilfs_btree_lookup+0x1e/0x70
[  214.775819][ T6902]  nilfs_bmap_lookup_at_level+0xf1/0x390
[  214.781514][ T6902]  ? nilfs_bmap_get_dat+0xa0/0xa0
[  214.786588][ T6902]  ? down_read+0x1aa/0x2e0
[  214.791057][ T6902]  nilfs_ioctl_do_get_bdescs+0xea/0x1b0
[  214.796652][ T6902]  nilfs_ioctl_wrap_copy+0x35e/0x6a0
[  214.801986][ T6902]  ? nilfs_ioctl_wrap_copy+0x6a0/0x6a0
[  214.802019][ T6902]  ? nilfs_compat_ioctl+0x190/0x190
[  214.812714][ T6902]  ? __might_fault+0xb3/0x110
[  214.817463][ T6902]  ? _copy_from_user+0x111/0x170
[  214.822443][ T6902]  nilfs_ioctl+0xd43/0x21b0
[  214.827000][ T6902]  ? nilfs_ioctl_prepare_clean_segments+0x830/0x830
[  214.833668][ T6902]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  214.839688][ T6902]  ? lock_chain_count+0x20/0x20
[  214.844566][ T6902]  ? do_vfs_ioctl+0x1d5e/0x1f40
[  214.849442][ T6902]  ? __ia32_compat_sys_ioctl+0x910/0x910
[  214.855097][ T6902]  ? rcu_lock_release+0x5/0x20
[  214.859905][ T6902]  ? __lock_acquire+0x7d40/0x7d40
[  214.864967][ T6902]  ? tomoyo_path_number_perm+0x5f7/0x6b0
[  214.870640][ T6902]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  214.876252][ T6902]  ? bpf_lsm_file_ioctl+0x5/0x10
[  214.881232][ T6902]  ? security_file_ioctl+0x7c/0xa0
[  214.886369][ T6902]  ? nilfs_ioctl_prepare_clean_segments+0x830/0x830
[  214.893010][ T6902]  __se_sys_ioctl+0xfa/0x170
[  214.897651][ T6902]  do_syscall_64+0x4c/0xa0
[  214.902112][ T6902]  ? clear_bhb_loop+0x30/0x80
[  214.906857][ T6902]  ? clear_bhb_loop+0x30/0x80
[  214.911937][ T6902]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  214.917990][ T6902] RIP: 0033:0x7fae670af559
[  214.922539][ T6902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  214.942217][ T6902] RSP: 002b:00007fae65307028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  214.950668][ T6902] RAX: ffffffffffffffda RBX: 00007fae67336fa0 RCX: 00007fae670af559
[  214.958662][ T6902] RDX: 0000200000001400 RSI: 00000000c0186e87 RDI: 0000000000000005
[  214.966657][ T6902] RBP: 00007fae671468b0 R08: 0000000000000000 R09: 0000000000000000
[  214.974735][ T6902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  214.982722][ T6902] R13: 00007fae67337038 R14: 00007fae67336fa0 R15: 00007ffe38d3e8c8
[  214.990731][ T6902]  </TASK>
[  215.020324][ T6920] loop1: detected capacity change from 0 to 512
[  215.125998][   T23] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  215.144815][   T23] hid-generic 0000:0000:0000.0009: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  215.253851][ T6925] loop3: detected capacity change from 0 to 4096
[  215.298938][ T6925] EXT4-fs (loop3): Test dummy encryption mode enabled
[  215.307827][ T6925] EXT4-fs (loop3): Ignoring removed orlov option
[  215.443159][ T6920] EXT4-fs error (device loop1): ext4_orphan_get:1410: inode #15: comm syz.1.778: inode has both inline data and extents flags
[  215.476237][ T6925] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,bsddf,nodioread_nolock,test_dummy_encryption,lazytime,nodelalloc,minixdf,orlov,,errors=continue. Quota mode: writeback.
[  215.495585][ T6920] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.778: couldn't read orphan inode 15 (err -117)
[  215.513965][ T6920] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrjquota=,,errors=continue. Quota mode: writeback.
[  215.552706][    C0] net_ratelimit: 68 callbacks suppressed
[  215.552896][   T23] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  215.916390][ T6920] loop_set_status: loop1 () has still dirty pages (nrpages=3)
[  215.977878][ T6852] chnl_net:caif_netlink_parms(): no params data found
[  216.002878][   T23] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  216.056126][   T23] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64
[  216.116598][   T23] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  216.147088][   T23] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[  216.156870][   T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  219.149182][ T6911] Bluetooth: hci0: command 0x041b tx timeout
[  219.192957][   T23] cxacru 3-1:1.0: send of cm 0x91 failed (-71)
[  219.213360][   T23] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71
[  219.222761][   T23] ATM dev 0: usbatm_atm_init: atm_start failed: -71!
[  219.253683][   T23] cxacru: probe of 3-1:1.0 failed with error -71
[  219.313659][   T23] usb 3-1: USB disconnect, device number 8
[  221.242635][    C1] net_ratelimit: 52 callbacks suppressed
[  221.271064][   T23] Bluetooth: hci0: command 0x040f tx timeout
[  222.712937][ T6852] bridge0: port 1(bridge_slave_0) entered blocking state
[  222.732286][ T6852] bridge0: port 1(bridge_slave_0) entered disabled state
[  222.786860][ T6852] device bridge_slave_0 entered promiscuous mode
[  222.797539][ T6852] bridge0: port 2(bridge_slave_1) entered blocking state
[  222.804844][ T6852] bridge0: port 2(bridge_slave_1) entered disabled state
[  222.832784][ T6911] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  222.979248][ T6852] device bridge_slave_1 entered promiscuous mode
[  223.256514][ T6911] usb 3-1: Using ep0 maxpacket: 32
[  223.281930][ T6852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  223.307193][ T6852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  223.397921][ T6911] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  223.418056][ T6911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  223.474363][ T6911] usb 3-1: config 0 descriptor??
[  223.519977][ T6911] gspca_main: sunplus-2.14.0 probing 041e:400b
[  223.583362][ T6852] team0: Port device team_slave_0 added
[  223.676319][ T6852] team0: Port device team_slave_1 added
[  223.852782][ T6442] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  223.882599][ T5617] Bluetooth: hci0: command 0x0419 tx timeout
[  223.977701][  T144] device hsr_slave_0 left promiscuous mode
[  224.024616][  T144] device hsr_slave_1 left promiscuous mode
[  224.080730][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  224.144126][  T144] batman_adv: batadv0: Removing interface: batadv_slave_0
[  224.222876][ T6442] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  224.310865][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  224.384634][  T144] batman_adv: batadv0: Removing interface: batadv_slave_1
[  224.471967][  T144] device bridge_slave_1 left promiscuous mode
[  224.538971][  T144] bridge0: port 2(bridge_slave_1) entered disabled state
[  224.921184][  T144] device bridge_slave_0 left promiscuous mode
[  224.983740][  T144] bridge0: port 1(bridge_slave_0) entered disabled state
[  225.063164][ T6911] gspca_sunplus: reg_w_riv err -71
[  225.069706][ T6911] sunplus: probe of 3-1:0.0 failed with error -71
[  225.199408][ T6911] usb 3-1: USB disconnect, device number 9
[  226.507385][  T144] device veth1_macvtap left promiscuous mode
[  226.514386][    C1] net_ratelimit: 44 callbacks suppressed
[  226.779324][  T144] device veth0_macvtap left promiscuous mode
[  226.859351][  T144] device veth1_vlan left promiscuous mode
[  226.942843][ T6442] usb 4-1: string descriptor 0 read error: -71
[  226.949281][ T6442] usb 4-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00
[  226.997006][ T6442] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  227.011689][  T144] device veth0_vlan left promiscuous mode
[  227.033198][ T6442] usb 4-1: can't set config #1, error -71
[  227.051716][ T7005] loop5: detected capacity change from 0 to 1024
[  227.064419][ T6442] usb 4-1: USB disconnect, device number 13
[  227.140326][ T7005] EXT4-fs (loop5): Ignoring removed mblk_io_submit option
[  227.336079][ T7005] EXT4-fs (loop5): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,mblk_io_submit,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nobarrier,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback.
[  230.767188][ T7026] loop5: detected capacity change from 0 to 2048
[  230.897904][ T7026] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  230.937182][  T144] team0 (unregistering): Port device team_slave_1 removed
[  230.976972][  T144] team0 (unregistering): Port device team_slave_0 removed
[  231.036880][  T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  231.105546][  T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  231.404383][  T144] bond0 (unregistering): Released all slaves
[  231.487533][ T6852] batman_adv: batadv0: Adding interface: batadv_slave_0
[  231.498466][ T6852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  231.535000][ T6852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  231.606784][ T5316] geneve1 speed is unknown, defaulting to 1000
[  231.615281][ T6852] batman_adv: batadv0: Adding interface: batadv_slave_1
[  231.632651][    C1] net_ratelimit: 61 callbacks suppressed
[  231.645475][ T6852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  231.699448][ T5316] ==================================================================
[  231.707573][ T5316] BUG: KASAN: use-after-free in siw_query_port+0x359/0x450
[  231.715404][ T5316] Read of size 4 at addr ffff88805fc380d8 by task kworker/0:8/5316
[  231.715429][ T5316] 
[  231.715436][ T5316] CPU: 0 PID: 5316 Comm: kworker/0:8 Not tainted syzkaller #0
[  231.715457][ T5316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  231.715472][ T5316] Workqueue: infiniband ib_cache_event_task
[  231.725740][ T5316] 
[  231.725749][ T5316] Call Trace:
[  231.743383][ T5316]  <TASK>
[  231.743396][ T5316]  dump_stack_lvl+0x188/0x250
[  231.743428][ T5316]  ? show_regs_print_info+0x20/0x20
[  231.751661][ T5316]  ? _printk+0xda/0x130
[  231.751692][ T5316]  ? load_image+0x410/0x410
[  231.757971][ T5316]  ? _raw_spin_lock_irqsave+0xbc/0x100
[  231.767882][ T5316]  print_address_description+0x60/0x2d0
[  231.776568][ T5316]  ? siw_query_port+0x359/0x450
[  231.776593][ T5316]  kasan_report+0xdf/0x130
[  231.776619][ T5316]  ? siw_query_port+0x359/0x450
[  231.787671][ T5316]  siw_query_port+0x359/0x450
[  231.787703][ T5316]  ib_cache_update+0x1bd/0x9c0
[  231.787737][ T5316]  ? ib_cache_setup_one+0x5c0/0x5c0
[  231.797028][ T5316]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  231.806589][ T5316]  ? __lock_acquire+0x7d40/0x7d40
[  231.806617][ T5316]  ? read_lock_is_recursive+0x10/0x10
[  231.816605][ T5316]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  231.816635][ T5316]  ? _raw_spin_unlock+0x40/0x40
[  231.827686][ T5316]  ib_cache_event_task+0xcf/0x1c0
[  231.838975][ T5316]  process_one_work+0x867/0xff0
[  231.848900][ T5316]  ? worker_detach_from_pool+0x240/0x240
[  231.859459][ T5316]  ? lockdep_hardirqs_off+0x70/0x100
[  231.864791][ T5316]  ? _raw_spin_lock_irq+0xb7/0xf0
[  231.864821][ T5316]  ? _raw_spin_lock_irqsave+0x100/0x100
[  231.864849][ T5316]  ? wq_worker_running+0x97/0x170
[  231.875435][ T5316]  worker_thread+0xad7/0x12a0
[  231.875491][ T5316]  kthread+0x42e/0x520
[  231.885198][ T5316]  ? rcu_lock_release+0x20/0x20
[  231.885222][ T5316]  ? kthread_blkcg+0xd0/0xd0
[  231.885246][ T5316]  ret_from_fork+0x1f/0x30
[  231.894452][ T5316]  </TASK>
[  231.894463][ T5316] 
[  231.894469][ T5316] Allocated by task 4186:
[  231.894501][ T5316]  __kasan_kmalloc+0xaf/0xe0
[  231.903516][ T5316]  kvmalloc_node+0x84/0x130
[  231.903538][ T5316]  alloc_netdev_mqs+0x84/0xc40
[  231.903561][ T5316]  rtnl_create_link+0x2fd/0xa90
[  231.909060][ T5316]  rtnl_newlink+0x12b6/0x1920
[  231.918089][ T5316]  rtnetlink_rcv_msg+0x7f1/0xf10
[  231.927375][ T5316]  netlink_rcv_skb+0x1e9/0x430
[  231.936922][ T5316]  netlink_unicast+0x78f/0x940
[  231.936948][ T5316]  netlink_sendmsg+0x8ba/0xbe0
[  231.936965][ T5316]  __sys_sendto+0x46d/0x620
[  231.946719][ T5316]  __x64_sys_sendto+0xda/0xf0
[  231.946742][ T5316]  do_syscall_64+0x4c/0xa0
[  231.946764][ T5316]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  231.956324][ T5316] 
[  231.956331][ T5316] Freed by task 144:
[  231.956342][ T5316]  kasan_set_track+0x4b/0x70
[  231.956365][ T5316]  kasan_set_free_info+0x1f/0x40
[  231.965561][ T5316]  ____kasan_slab_free+0xd5/0x110
[  231.965584][ T5316]  slab_free_freelist_hook+0xec/0x170
[  231.976014][ T5316]  kfree+0xef/0x2a0
[  231.976034][ T5316]  device_release+0x92/0x1c0
[  231.976056][ T5316]  kobject_put+0x217/0x450
[  231.982337][ T5316]  netdev_run_todo+0x942/0xac0
[  231.992081][ T5316]  default_device_exit_batch+0x369/0x3c0
[  232.002523][ T5316]  cleanup_net+0x78e/0xba0
[  232.002555][ T5316]  process_one_work+0x867/0xff0
[  232.002580][ T5316]  worker_thread+0xad7/0x12a0
[  232.002602][ T5316]  kthread+0x42e/0x520
[  232.011031][ T5316]  ret_from_fork+0x1f/0x30
[  232.020247][ T5316] 
[  232.020256][ T5316] The buggy address belongs to the object at ffff88805fc38000
[  232.020256][ T5316]  which belongs to the cache kmalloc-cg-4k of size 4096
[  232.030360][ T5316] The buggy address is located 216 bytes inside of
[  232.030360][ T5316]  4096-byte region [ffff88805fc38000, ffff88805fc39000)
[  232.040081][ T5316] The buggy address belongs to the page:
[  232.040121][ T5316] page:ffffea00017f0e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5fc38
[  232.048596][ T5316] head:ffffea00017f0e00 order:3 compound_mapcount:0 compound_pincount:0
[  232.065254][ T5316] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  232.065297][ T5316] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff88801784c280
[  232.065317][ T5316] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000
[  232.084316][ T5316] page dumped because: kasan: bad access detected
[  232.084340][ T5316] page_owner tracks the page as allocated
[  232.084348][ T5316] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4186, ts 67788576071, free_ts 24692043728
[  232.102838][ T5316]  get_page_from_freelist+0x24f6/0x2670
[  232.102871][ T5316]  __alloc_pages+0x1ee/0x480
[  232.119462][ T5316]  new_slab+0xc0/0x4b0
[  232.119484][ T5316]  ___slab_alloc+0x807/0xdd0
[  232.119502][ T5316]  __kmalloc_node+0x142/0x3a0
[  232.134542][ T5316]  kvmalloc_node+0x84/0x130
[  232.134565][ T5316]  alloc_netdev_mqs+0x84/0xc40
[  232.161152][ T5316]  rtnl_create_link+0x2fd/0xa90
[  232.161180][ T5316]  rtnl_newlink+0x12b6/0x1920
[  232.161199][ T5316]  rtnetlink_rcv_msg+0x7f1/0xf10
[  232.161221][ T5316]  netlink_rcv_skb+0x1e9/0x430
[  232.171456][ T5316]  netlink_unicast+0x78f/0x940
[  232.180121][ T5316]  netlink_sendmsg+0x8ba/0xbe0
[  232.180142][ T5316]  __sys_sendto+0x46d/0x620
[  232.189348][ T5316]  __x64_sys_sendto+0xda/0xf0
[  232.198996][ T5316]  do_syscall_64+0x4c/0xa0
[  232.208640][ T5316] page last free stack trace:
[  232.208649][ T5316]  free_unref_page_prepare+0x637/0x6c0
[  232.218182][ T5316]  free_unref_page+0x8f/0x2a0
[  232.227461][ T5316]  free_contig_range+0x96/0xf0
[  232.236568][ T5316]  destroy_args+0xef/0xa00
[  232.236593][ T5316]  debug_vm_pgtable+0x321/0x380
[  232.236614][ T5316]  do_one_initcall+0x272/0x730
[  232.246753][ T5316]  do_initcall_level+0x13d/0x1f0
[  232.246777][ T5316]  do_initcalls+0x4b/0x90
[  232.246796][ T5316]  kernel_init_freeable+0x3d5/0x560
[  232.256253][ T5316]  kernel_init+0x19/0x1b0
[  232.256274][ T5316]  ret_from_fork+0x1f/0x30
[  232.256296][ T5316] 
[  232.256301][ T5316] Memory state around the buggy address:
[  232.265574][ T5316]  ffff88805fc37f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  232.265591][ T5316]  ffff88805fc38000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  232.265606][ T5316] >ffff88805fc38080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  232.275331][ T5316]                                                     ^
[  232.275346][ T5316]  ffff88805fc38100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  232.275360][ T5316]  ffff88805fc38180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  232.275372][ T5316] ==================================================================
[  232.275381][ T5316] Disabling lock debugging due to kernel taint
[  232.510732][ T6852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  232.535608][ T5316] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  232.542856][ T5316] CPU: 0 PID: 5316 Comm: kworker/0:8 Tainted: G    B             syzkaller #0
[  232.548984][ T4172] nf_conntrack: normal packet for ffff888079dda300
[  232.551740][ T5316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  232.551757][ T5316] Workqueue: infiniband ib_cache_event_task
[  232.551783][ T5316] Call Trace:
[  232.577545][ T5316]  <TASK>
[  232.580479][ T5316]  dump_stack_lvl+0x188/0x250
[  232.585164][ T5316]  ? show_regs_print_info+0x20/0x20
[  232.590625][ T5316]  ? load_image+0x410/0x410
[  232.595176][ T5316]  panic+0x2f8/0x850
[  232.599385][ T5316]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  232.599974][ T7040] kcov: kcov_start: t = ffff888026020000, size = 524288, area = ffffc900128a8000
[  232.605677][ T5316]  ? bpf_jit_dump+0xd0/0xd0
[  232.619352][ T5316]  ? _raw_spin_unlock_irqrestore+0x10d/0x120
[  232.625395][ T5316]  ? _raw_spin_unlock+0x40/0x40
[  232.630590][ T5316]  ? siw_query_port+0x359/0x450
[  232.635492][ T5316]  check_panic_on_warn+0x80/0xa0
[  232.640483][ T5316]  ? siw_query_port+0x359/0x450
[  232.645381][ T5316]  end_report+0x6d/0xf0
[  232.649582][ T5316]  kasan_report+0x102/0x130
[  232.654137][ T5316]  ? siw_query_port+0x359/0x450
[  232.659033][ T5316]  siw_query_port+0x359/0x450
[  232.663766][ T5316]  ib_cache_update+0x1bd/0x9c0
[  232.668670][ T5316]  ? ib_cache_setup_one+0x5c0/0x5c0
[  232.672760][    C1] wireguard: wg0: Sending keepalive packet to peer 25 ([::1]:20002/0%0)
[  232.673913][ T5316]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  232.682403][    C1] wireguard: wg0: Sending keepalive packet to peer 1 ([::1]:20002/0%0)
[  232.688264][ T5316]  ? __lock_acquire+0x7d40/0x7d40
[  232.688295][ T5316]  ? read_lock_is_recursive+0x10/0x10
[  232.688319][ T5316]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  232.696787][    C1] wireguard: wg0: Sending keepalive packet to peer 13 ([::1]:20002/0%0)
[  232.701630][ T5316]  ? _raw_spin_unlock+0x40/0x40
[  232.707184][    C1] wireguard: wg0: Sending keepalive packet to peer 19 ([::1]:20002/0%0)
[  232.713095][ T5316]  ib_cache_event_task+0xcf/0x1c0
[  232.713128][ T5316]  process_one_work+0x867/0xff0
[  232.722080][    C1] tcp_in_window: START
[  232.726338][ T5316]  ? worker_detach_from_pool+0x240/0x240
[  232.726368][ T5316]  ? lockdep_hardirqs_off+0x70/0x100
[  232.734755][    C1] tcp_in_window: 
[  232.739735][ T5316]  ? _raw_spin_lock_irq+0xb7/0xf0
[  232.744653][    C1] seq=939704124 ack=939704125+(0) sack=939704125+(0) win=0 end=939704124
[  232.748675][ T5316]  ? _raw_spin_lock_irqsave+0x100/0x100
[  232.754357][    C1] tcp_in_window: sender end=939704125 maxend=939704125 maxwin=512 scale=0 receiver end=939638589 maxend=939704125 maxwin=65495 scale=7
[  232.759608][ T5316]  ? wq_worker_running+0x97/0x170
[  232.763307][    C1] tcp_in_window: 
[  232.768304][ T5316]  worker_thread+0xad7/0x12a0
[  232.776766][    C1] seq=939704124 ack=939704125+(0) sack=939704125+(0) win=0 end=939704124
[  232.782469][ T5316]  kthread+0x42e/0x520
[  232.796320][    C1] tcp_in_window: sender end=939704125 maxend=939704125 maxwin=512 scale=0 receiver end=939638589 maxend=939704125 maxwin=65495 scale=7
[  232.801284][ T5316]  ? rcu_lock_release+0x20/0x20
[  232.804946][    C1] tcp_in_window: I=1 II=1 III=0 IV=1
[  232.809623][ T5316]  ? kthread_blkcg+0xd0/0xd0
[  232.818112][    C1] tcp_in_window: res=0 sender end=939704125 maxend=939704125 maxwin=512 receiver end=939638589 maxend=939704125 maxwin=65495
[  232.822115][ T5316]  ret_from_fork+0x1f/0x30
[  232.835965][    C1] nf_conntrack: nf_conntrack_in: Can't track with proto module
[  232.840764][ T5316]  </TASK>
[  232.850704][ T5620] nf_conntrack: new packet for ffff888078ce8f00
[  232.864290][ T5316] Kernel Offset: disabled
[  232.889852][ T5316] Rebooting in 86400 seconds..