last executing test programs:

2m57.406827334s ago: executing program 0 (id=1060):
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0xfffffffc}, 0x1c)
r1 = socket$inet6(0xa, 0x5, 0x0)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)

2m57.208355825s ago: executing program 0 (id=1064):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2200002, &(0x7f0000000440), 0x1, 0x572, &(0x7f00000006c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40)
r1 = openat(0xffffffffffffff9c, &(0x7f00000010c0)='./file1\x00', 0x101042, 0x0)
pwrite64(r1, &(0x7f0000001100)='E', 0x1, 0x4fed3)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000001140)={0x17c04, 0xffffffffffffffff, 0x4f003, 0x100000001, 0x3})
fallocate(r0, 0x0, 0x8e14, 0x8ffff)

2m56.849129772s ago: executing program 0 (id=1069):
mmap$IORING_OFF_SQ_RING(0x7ffff7ffe000, 0x8000002, 0x0, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = syz_clone(0x400, 0x0, 0xffffffb4, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace(0x8, r0)
r1 = syz_pidfd_open(r0, 0x0)
process_mrelease(r1, 0x700000000000000)

2m56.556578171s ago: executing program 0 (id=1071):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
syz_mount_image$f2fs(&(0x7f0000010580), &(0x7f00000105c0)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='active_logs=4,jqfmt=vfsv0,prjjquota=f2fs\x00,mode=adaptive,heap,norecovery,fsync_mode=posix,user_xattr,disable_roll_forward,\x00\x00\x00'], 0x1, 0x105c9, &(0x7f0000020bc0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000200)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000040)='./proc/thread-self/fail-nth\x00')

2m55.244159995s ago: executing program 0 (id=1083):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000bc0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000c00)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000000)=@newlink={0x74, 0x10, 0x437, 0x3, 0x3, {0x0, 0x0, 0x0, r2, 0x60e11}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x44, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_LOCAL={0x14, 0x6, @remote}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}, @IFLA_GRE_FLAGS={0x8, 0xd, 0xfffffffc}, @IFLA_GRE_OKEY={0x8, 0x5, 0x2}]}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010)
sendmmsg$inet(r0, &(0x7f0000000d40)=[{{&(0x7f0000000d80)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f0000000dc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @rand_addr=0x64010100}}}], 0x20}}], 0x1, 0x4000080)

2m52.396843056s ago: executing program 0 (id=1109):
socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x400000000010, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='.\x00', 0x121000, 0x0)
syz_usb_connect(0x2, 0xb3, &(0x7f00000006c0)=ANY=[@ANYBLOB="12010002ef0201405a22d4e1ada7f5d200010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001151605000924", @ANYRES32=r0], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0})

2m52.165583229s ago: executing program 32 (id=1109):
socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x400000000010, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='.\x00', 0x121000, 0x0)
syz_usb_connect(0x2, 0xb3, &(0x7f00000006c0)=ANY=[@ANYBLOB="12010002ef0201405a22d4e1ada7f5d200010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001151605000924", @ANYRES32=r0], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0})

2m50.585206301s ago: executing program 2 (id=1128):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbf, {0x0, 0x0, 0x0, r2, {0x5, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x2c, 0x1, 0x0, 0x0, {{0x2, 0x7, 0x2}, {{0x1, 0x0, 0x0, 0x1}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x5, 0x1, 0x1}, {0x8, 0x1, 0x7, 0x2, 0x5, 0x1, 0x2}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20045081}, 0x20004004)

2m50.325695197s ago: executing program 2 (id=1130):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r0, 0xc138fd03, &(0x7f0000000300)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000063")
write(r0, &(0x7f0000000438)="000000000000000000800000000000000000000000000000636163686500000000000000373a3020373a", 0x2a)
ioctl(r0, 0xc138fd09, &(0x7f0000000300)="0400000000000000000000007c010000380100000100"/42)

2m50.064112194s ago: executing program 2 (id=1132):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000004007b8af8ff00000000bfa2000000000000070200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000800000000000000faffffff8500000008"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x6fa6c04eee5c85fd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000880)={r1}, 0xc)

2m50.063917564s ago: executing program 2 (id=1133):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x103011, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0)

2m50.026298357s ago: executing program 2 (id=1134):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={<r3=>r2, @in={{0x2, 0xe20, @local}}}, &(0x7f0000000040)=0x84)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000100)={r3, 0x9, 0x9}, &(0x7f0000000b40)=0x8)

2m46.724130645s ago: executing program 2 (id=1149):
r0 = socket$kcm(0xa, 0x2, 0x88)
sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x20}, 0x8000)
sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="d7eab112", 0x4}], 0x1}, 0x8000)
r1 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000004740)={0x0, 0x0, &(0x7f00000044c0)=[{&(0x7f0000000980)="c8", 0x1}], 0x1}, 0x1)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="c8fec112", 0x4}], 0x1}, 0x0)

2m46.429482855s ago: executing program 33 (id=1149):
r0 = socket$kcm(0xa, 0x2, 0x88)
sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x20}, 0x8000)
sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="d7eab112", 0x4}], 0x1}, 0x8000)
r1 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000004740)={0x0, 0x0, &(0x7f00000044c0)=[{&(0x7f0000000980)="c8", 0x1}], 0x1}, 0x1)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="c8fec112", 0x4}], 0x1}, 0x0)

58.328961447s ago: executing program 5 (id=2033):
mkdirat(0xffffffffffffff9c, &(0x7f00000011c0)='./file0\x00', 0x181)
syz_mount_image$fuse(0x0, &(0x7f0000001200)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000001240)='./file0\x00', &(0x7f0000001280), 0x0, &(0x7f00000012c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
r0 = openat(0xffffffffffffff9c, &(0x7f0000001480)='./file0\x00', 0x0, 0x2)
getdents64(r0, 0x0, 0x0)
getdents64(r0, 0xfffffffffffffffe, 0x29)

58.124030278s ago: executing program 5 (id=2036):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10007, 0x0, 0x0, 0x0, 0x100}, [@printk={@llu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff09, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0xfef3, &(0x7f00000002c0)=ANY=[], 0x0)

57.90779245s ago: executing program 5 (id=2039):
r0 = open(&(0x7f0000000a80)='./file0\x00', 0x1e1142, 0xfb)
writev(r0, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="34b0ecd41287", 0x6}], 0x1)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000b40)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x80000)
sendfile(r2, r0, &(0x7f0000000bc0)=0x5, 0x3)

57.797912631s ago: executing program 5 (id=2040):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x1000800, &(0x7f0000000200)=ANY=[@ANYRES64=0x0], 0x2, 0x552f, &(0x7f0000005bc0)="$eJzs3L1vG2UYAPDHSdOmH5QIMbD1pAopkWqrTj8EW4FWfIhWUYGBCRzbsdzavih2nJCJgREx8J8gkJgY+RsYmNkQA4gNCeS7c2kKqVDixKT5/ST7uXvv9XPPa0UnPXeRAzixFpLffy3FxTgbEbMRcSEi2y5FxNx40q08vBQRlyJi5rFXqRh/NHA6Is5FxMVR8jxnqTj05ZXh5Ru/vPPbdz+cOXX+q29/nN6qgWl7OSK66/n2VjePaSuPD4rx2rCdxe71YRHzA92HxX6ax63mapZhqzaeV8vitVY+P13f7I/iWqdWH8VWey0bX+/lJ+wPW+M82Qce1Day/UZzNYvtfprF1k5e1/ZOfm3b6Q/yPI0i3ydZ+hgMxjEfb2438/WsP8xivTcoxvO8aaO5PYrDIhani3raaWR1rB7km/5/e7fd29xOhs2NfjvtJTcq1Vcq1Zvl6kbaaA6a18u1buPm9WSx1RlNKw+ate6tVpq2Os1KPe0uJYuter1crSaLt5ur7VovqVYr1ypXyzeWiq0ryZv3Pkg6jWRxFF9v9zYH7U4/WUs3kvwTS8ly5dqrS8nlavLe3ZVk5f6dO3dX3v/o9of3Xrv79hvFpH+UlSwuX11eLlevlperSydo/Z8VRU9w/XAgpWkXAHD8PK3/f3RZ1f8D+3NmrwN79v+jC9CB+v+N+xGH3/+H/n8ijlX/u8/+/2ktyv7WPx/Haf1waPT/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAn1k9zX7+VbSzk++eL8eeKoReK/VJEzETEn/9iNk7vyjlb5JnbY/7cEzV8X4osw+gcZ4rXuYi4Vbz+eP6wvwUAAAB4dn3z6aUv8m49f1uYdkEcpfymzcyFjyeUbz4i5hZ+nlC2mdHbixNKlv19n4rtCWXLbmDNTyhZfsvt1KSy/Sezu8L8Y6GUh5kjLQcAADgSuzuBo+1CAAAAOEqfT7sApqMU40eZ42fB2X/e//1A8OyuPQAAAOAYKk27AAAAAGDinnyOn/X/fv8PAAAAnm357/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8xc7d5C4NhHEAflv+BfyKxLj3Ku7gGB7BpUvDAbwEB3CBV3DnijPgziMYamhHBO0C02lrzPMkZeik/fGWwGJmkgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGBIX6v95tP7Vx/65pzqe32JiD978zwNAAAA0OVY7TfNm1V7/iT1P0tdL9J5ERFl58i9rmcxv8mcpZzq1/Ufr6+vfqvhc0STcP6MRToeR8TrdHx/PvS3AAAAAP+vw3a3bkfr7ctq6oIYUztpUz59kymviIhq9S1TWnnOe5kjaZ5+3w/xLkdcmtiKZaawdsrtIVfaXZq/+2XWbnnVFG1Tdt52KTLbswMAACOa3TTjjkIAAAAY09upCyC3+5bnivi5lHlZClzc3P/ob9IAAACAf1ExdQEAAADA4Jrx/0j7/9X2/wMAAIBptPv/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMKRjtd8ctrt135xT3U93atG3LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAf7M/LCYRAGITB3vV9k8k/WGlQMAMvVSB8/I2HAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4+d1f/k9MjTPJ3Gtj6XkkWTs1tk6NvXPj6A/j69cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDF/rykQAgEQRTMGf876fsfVhL0DCJEQMOjilo0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF/0u1/+T0yNM8ncaWPpeCRZu2psXTX2HjSOHoy3fwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDFzv37xk3FAQB/ts9XWkAcAd0QhEBigIVer6WlG2IARQz8CUhRei2hV360GWhVIW5hQ5m7IBgRQgKFrf9D51bKErYMNwSJGeSznXN+SBwQ2Zfk85Ge39fOye/7bCnK1885AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgNH53GifZppPHcXHs8c79lax/sq/PPFzfXMxaFkd1Jn08vFzdibrNJQIAAMCJNqruJGV9H0LYSjeWsj7uTOr/tPxMVvN//2wel/X8/rq/7MvaP2u//br94u5AnXyc7KTXV4eDCwfzah35TI+J5/7h5/mFifJnL8nkhsQfjF4Yp5PrGX376NF77Ul4po5sAYD/4nzZF0H591DW95tMDIBTo1UpvMv6P+k0mxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAHcaj8HQZRyGExdY0zjzZub9yWP9wfXOxbFcePFgPX0/PmZ0iDSFcXx0OLtQ6m/l25+69m8vD4eB2/cErIYSmRn+nmP7Nj2b4cAiNXB/BEQVxcbPnJZ/jETT4SwkAgBMpLVpW12+lG0vZsWghhL9+2Fv/v16Jw4z1//bHVx5Xx6rW//3aZjj/emu3Pu/duXvvzdVbyzcGNwafvnWx/3b/0tXLl6/2Js9Kep6YAAAA8P+0i1at/+OFg+v/5ypxmLH+/+K7/lfVsRL1/6Gmi35NZwIAAHC6Pf/qn39EhxyP2u3w5fLa2u1+vt3dv5hvG0j1XztTtGr9nyw0nRUAAABQh/Eo2rP+f60ShxnX/5/58aWfq+dMQghni/X/8yufDa/VN525Vse/Ezc9RwAAAJp1tmjV9f908v5/vPvKQxxCeOO1PC6+BnCm+j95/5ufqmNV3/+/VN8U51Lcza/HpO+G0Oo2nREAAAAn2VNFy4r939ONpU9+Ofdh2/v/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHX7OwAA//+zHzrj")
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x8, &(0x7f00000001c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]})
linkat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./file0/file2\x00', 0x0)

55.430636443s ago: executing program 5 (id=2054):
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000001d000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x4e, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0xb9, 0x10001, 0x9, 0x1}, 0x50)
close(r0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10002, 0x9, 0x1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r0, &(0x7f0000000180), &(0x7f0000000680)=""/141}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r0, &(0x7f0000000040)}, 0x20)

53.765234733s ago: executing program 5 (id=2066):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f0000000180)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x1, 0x8, 0x28, 0x67, 0x0, 0x0, 0x6, 0x0, @empty, @broadcast}, {{0x4e24, 0x4e21, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x8, 0x2, 0x0, 0x9}}}}}}}, 0x3a)

53.467716593s ago: executing program 34 (id=2066):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f0000000180)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x1, 0x8, 0x28, 0x67, 0x0, 0x0, 0x6, 0x0, @empty, @broadcast}, {{0x4e24, 0x4e21, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x8, 0x2, 0x0, 0x9}}}}}}}, 0x3a)

20.909027435s ago: executing program 4 (id=2286):
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
fchdir(r0)
close(r0)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'})

20.727093664s ago: executing program 4 (id=2288):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff)
write(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff)
rmdir(&(0x7f0000000180)='./config/usb_gadget/g1/functions/hid.usb0\x00')

20.322172955s ago: executing program 4 (id=2295):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@userxattr}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000580)=""/174, 0xff56)

19.548775034s ago: executing program 4 (id=2305):
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000001500)=ANY=[@ANYBLOB="73686f727461642c756e64656c6574652c73657373696f6e3d30303030000800003030303030303030303139302c6d6f64653d30303030303030303030303030303030303030303030352c726f6f746469723d30303030303030303030303030303030303030352c646d6f64653d30303030303030303030303030303030303030303030362c696f636861727365743d6370313235312c696f636861727365743d6b6f69382d722c6e6f7672732c0084f5b23d82aacbefd1de1daab7394a9b4696461da9ab46f2d71c895d8c", @ANYRESOCT], 0x9, 0xc41, &(0x7f0000001b80)="$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")
creat(&(0x7f0000000e80)='./bus\x00', 0x44)
mount(&(0x7f0000000ec0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000f40)='./bus\x00', 0x0, 0x321001, 0x0)
r0 = open(&(0x7f0000000f80)='./bus\x00', 0x64842, 0x5a)
pwritev2(r0, &(0x7f0000001080)=[{&(0x7f00000010c0)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3)
truncate(&(0x7f0000000040)='./file3\x00', 0x2)

18.51888674s ago: executing program 4 (id=2311):
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080), 0x4)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback, 0x80}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c)

17.716115212s ago: executing program 4 (id=2317):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x4e27, 0x4)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x7b, 0x4)
recvmsg(r0, &(0x7f00000007c0)={0x0, 0x7, 0x0}, 0x40012021)

17.497370504s ago: executing program 35 (id=2317):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x4e27, 0x4)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x7b, 0x4)
recvmsg(r0, &(0x7f00000007c0)={0x0, 0x7, 0x0}, 0x40012021)

4.882851951s ago: executing program 6 (id=2427):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1)
getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x3c}}, 0x40848c0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x4070bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x12e1b, 0x1a001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20044850}, 0x20004000)

4.505643129s ago: executing program 6 (id=2433):
socket$nl_route(0x10, 0x3, 0x0)
r0 = fanotify_init(0x10, 0x2)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00')
fanotify_mark(r0, 0x11, 0x8000013, r1, 0x0)
r2 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f00000000c0))
readv(r2, &(0x7f0000000140)=[{&(0x7f0000000180)=""/208, 0xd0}], 0x1)

4.291797311s ago: executing program 6 (id=2437):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000380)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10004000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

3.832291949s ago: executing program 6 (id=2441):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000080)={[{@quota}, {@noload}, {@init_itable}]}, 0x1, 0x4ec, &(0x7f0000000540)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000a40)='./file1\x00', 0x101042, 0x15)
pwrite64(r0, &(0x7f0000000a80)='2', 0xfdef, 0xc00)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file1\x00', 0x0, 0x20)
ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020660b, &(0x7f0000000b00)={0x0, 0xfffffffffffffffa, 0x5, 0x3})

3.340160539s ago: executing program 1 (id=2445):
setns(0xc9, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

3.024570841s ago: executing program 1 (id=2449):
setresgid(0xee00, 0xee01, 0x0)
r0 = getpid()
setresuid(0xee00, 0xee00, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
fstat(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
sendmmsg$unix(r1, &(0x7f000000ae80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=[@cred={{0x1c, 0x1, 0x2, {r0, 0x0, r2}}}], 0x20, 0x8801}}], 0x1, 0x0)

2.773830626s ago: executing program 1 (id=2454):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$fou(&(0x7f0000000140), r1)
getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x78, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8, 0x4408}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x100}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}, @IFLA_GRE_TTL={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x570e626}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

2.695486565s ago: executing program 6 (id=2457):
recvmmsg(0xffffffffffffffff, &(0x7f0000003340)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40000002, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
munlockall()
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8)

2.520248452s ago: executing program 8 (id=2460):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000ac1e0001000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff00000000010006010000000044000500000000000000000000000000000000cdbe0000003c00000002000000ac1414aa0000000000000000000000000600000004"], 0xfc}, 0x1, 0x0, 0x0, 0x4008001}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
r2 = socket(0xa, 0x3, 0xff)
sendmsg$inet6(r2, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x87, 0x3, @mcast2}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000540)="6797f04cdb6f2c8ff1c9aa15b0da67dc3bf442976fc916d4a50f5d1ae7453eddc232ca4c6ae6c56d", 0x28}], 0x1}, 0x30048b88)

2.427027992s ago: executing program 7 (id=2461):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000780)={'vcan0\x00', <r1=>0x0})
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r2, &(0x7f00000007c0)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0xfd}, 0x18)
sendmsg$can_j1939(r2, &(0x7f0000000800)={&(0x7f0000000840)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x34, &(0x7f0000000880)={&(0x7f00000008c0)="92", 0x1a000}}, 0xee)
sendmsg$can_j1939(r2, &(0x7f0000000000)={&(0x7f0000000940)={0x1d, 0x0, 0x0, {0x2, 0xff, 0x1}, 0xfd}, 0x18, &(0x7f0000000980)={0x0}, 0x1, 0x0, 0x0, 0x200480d1}, 0x80)

2.278741677s ago: executing program 1 (id=2462):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0)
write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)="0100000007000000000000", 0xb)

2.114838884s ago: executing program 1 (id=2463):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
r0 = gettid()
timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f00000000c0))
sigaltstack(&(0x7f0000000100)={&(0x7f0000000140)=""/4124, 0x80000001, 0x101c}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000001180)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000004, 0x3032, 0xffffffffffffffff, 0x0)

1.891243757s ago: executing program 6 (id=2467):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
read$char_usb(r1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000")
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000580)={0x20, 0xb, 0x1, '+'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1.656260771s ago: executing program 8 (id=2470):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f00000010c0)=ANY=[@ANYRESHEX=0x0, @ANYRESOCT=r0, @ANYRES8, @ANYBLOB="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"], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, 0x0, &(0x7f0000000280))

1.620702024s ago: executing program 8 (id=2471):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640), 0x802, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f00000007c0), 0x0, 0x81)
ioctl$HIDIOCSFEATURE(r1, 0xc0404806, 0x0)
write$UHID_SET_REPORT_REPLY(r0, 0x0, 0xc)

976.50738ms ago: executing program 7 (id=2475):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x88)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0x9360, 0x0)

912.067376ms ago: executing program 3 (id=2476):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r2=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r0, r2, 0x25, 0x4, @val=@netfilter={0x7, 0x0, 0x9}}, 0x20)
syz_emit_ethernet(0x36, &(0x7f0000000cc0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2d, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000d40), 0xe, 0x101)

700.402338ms ago: executing program 3 (id=2477):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000680)='GPL\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000740)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0)
close(0x4)

700.200438ms ago: executing program 7 (id=2478):
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xf)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r1, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

522.867926ms ago: executing program 3 (id=2479):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001140)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x3}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x1d, 0x5, 0x2002, 0x0, 0x3, 0x4, 0x1}}, {0x6, 0x2, [0x8]}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0)

348.044044ms ago: executing program 7 (id=2480):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
r1 = eventfd2(0x0, 0x1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000100)={0x0, r1})
read$eventfd(r1, &(0x7f0000000140), 0x8)
writev(r1, &(0x7f0000000180)=[{&(0x7f0000000200)="569534ab1bbe0e03", 0x8}], 0x1)

296.171399ms ago: executing program 3 (id=2481):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x2, 0x4}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000008200000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000a80)={r2, 0x0, 0x0}, 0x10)

280.837511ms ago: executing program 8 (id=2482):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x88}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

271.920762ms ago: executing program 1 (id=2483):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x21e000, 0x800}, 0x20)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

175.680992ms ago: executing program 3 (id=2484):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000100)='./dbg\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='./dbg\x00', &(0x7f0000000400)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dbg/ieee80211/phy1/netdev:wlan1/beacon_loss\x00', 0x2442, 0x1)
lseek(r0, 0x2, 0x2)

175.398602ms ago: executing program 7 (id=2485):
r0 = syz_open_dev$cec(&(0x7f0000000300), 0x0, 0x82002)
ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000340)=0xd0)
r1 = syz_open_dev$cec(&(0x7f0000000400), 0x0, 0x0)
ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000440)=0xd0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r2, 0xffffffffffffffff, 0x0)

124.378147ms ago: executing program 8 (id=2486):
fsopen(&(0x7f0000000a80)='minix\x00', 0x1)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000880)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x0)

75.974682ms ago: executing program 3 (id=2487):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = syz_open_dev$evdev(&(0x7f0000001900), 0x0, 0x40)
read$hidraw(r0, &(0x7f00000001c0)=""/285, 0x11d)
ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x14, 0x30, 0x1, 0x0, 0x10000000}, 0x14}}, 0x10)

47.158215ms ago: executing program 7 (id=2488):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1f, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffdbd}]})
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
clock_settime(0x0, &(0x7f0000000040)={0x77359400})
mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0)

0s ago: executing program 8 (id=2489):
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, 0x2})
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000100)={0x6, 0x9, 0x9, 0xffff, 0x5, "100056f200000100"})
ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x8001)
openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0)

kernel console output (not intermixed with test programs):

ire dquot type 0
[  241.691834][ T9190] EXT4-fs error (device loop6): ext4_free_blocks:6231: comm syz.6.1579: Freeing blocks not in datazone - block = 0, count = 4096
[  241.709162][ T9190] EXT4-fs error (device loop6): ext4_read_inode_bitmap:140: comm syz.6.1579: Invalid inode bitmap blk 0 in block_group 0
[  241.774059][ T9190] EXT4-fs error (device loop6) in ext4_free_inode:362: Corrupt filesystem
[  241.783536][    T9] EXT4-fs error (device loop6): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1)
[  241.817097][ T9190] EXT4-fs (loop6): 1 orphan inode deleted
[  241.822890][ T9190] EXT4-fs (loop6): mounted filesystem without journal. Opts: €�; acl,auto_da_alloc,grpquota,max_batch_time=0x00000000000009fe,inlinecrypt,dioread_nolock,,errors=continue. Quota mode: writeback.
[  241.858018][    T9] Quota error (device loop6): remove_tree: Can't read quota data block 1
[  241.916688][    T9] EXT4-fs error (device loop6): ext4_release_dquot:6272: comm kworker/u4:0: Failed to release dquot type 0
[  242.068675][ T4587] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000020: -71
[  242.101006][ T4587] smsc95xx: probe of 5-1:0.67 failed with error -71
[  242.171424][ T4587] usb 5-1: USB disconnect, device number 10
[  242.848847][ T9223] loop6: detected capacity change from 0 to 8192
[  242.951761][ T9223] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal
[  242.966650][ T9223] REISERFS (device loop6): using ordered data mode
[  242.974090][ T9223] reiserfs: using flush barriers
[  242.982281][ T9223] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  243.001264][ T9223] REISERFS (device loop6): checking transaction log (loop6)
[  243.076905][ T9223] REISERFS (device loop6): Using tea hash to sort names
[  243.084259][ T9223] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage.
[  243.477919][ T9247] device gretap1 entered promiscuous mode
[  243.525606][ T9242] loop5: detected capacity change from 0 to 4096
[  243.604026][   T26] audit: type=1800 audit(1793920001.450:31): pid=9252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1601" name="addr_adrfam" dev="configfs" ino=49944 res=0 errno=0
[  243.938717][ T9264] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  244.100855][ T9264] overlayfs: failed to look up (tracing) for ino (-66)
[  244.148019][ T9273] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  245.008217][ T9275] loop5: detected capacity change from 0 to 131072
[  245.166681][ T9275] F2FS-fs (loop5): Wrong CP boundary, start(512) end(1536) blocks(0)
[  245.174813][ T9275] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  245.184300][ T9275] F2FS-fs (loop5): invalid crc value
[  245.278058][ T9275] F2FS-fs (loop5): Found nat_bits in checkpoint
[  245.384061][ T9275] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  245.391311][ T9275] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  245.626627][    C1] net_ratelimit: 82 callbacks suppressed
[  245.769944][ T9297] sock: sock_timestamping_bind_phc: sock not bind to device
[  245.923268][ T9299] netlink: 15478 bytes leftover after parsing attributes in process `syz.3.1620'.
[  246.316611][   T21] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  246.586704][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  246.687022][   T21] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  246.703735][   T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  246.754079][   T21] usb 2-1: config 0 descriptor??
[  246.808411][   T21] cp210x 2-1:0.0: cp210x converter detected
[  246.860091][ T9315] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  247.110805][ T9315] overlayfs: failed to look up (tracing) for ino (-66)
[  247.236971][   T21] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32
[  247.513319][   T21] usb 2-1: cp210x converter now attached to ttyUSB0
[  247.690144][ T9324] loop5: detected capacity change from 0 to 256
[  247.721535][ T1327] usb 2-1: USB disconnect, device number 18
[  247.797817][ T1327] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  247.831072][ T9324] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  247.853455][ T9324] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  247.888308][ T1327] cp210x 2-1:0.0: device disconnected
[  247.895216][ T9324] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  248.316191][ T9340] loop4: detected capacity change from 0 to 16
[  248.353830][ T9337] loop6: detected capacity change from 0 to 4096
[  248.428387][ T9337] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512)
[  248.451433][ T9340] erofs: (device loop4): mounted with root inode @ nid 36.
[  248.533123][ T9337] ntfs3: loop6: Mark volume as dirty due to NTFS errors
[  248.571386][ T9337] ntfs3: loop6: Inode r=b is not in use!
[  248.606767][ T9337] ntfs3: loop6: Failed to load $Extend.
[  249.164639][ T9352] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  249.291515][ T4592] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  249.302129][ T9352] overlayfs: failed to look up (tracing) for ino (-66)
[  249.727436][ T4592] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  249.758064][ T4592] usb 5-1: config 0 has no interfaces?
[  249.763637][ T4592] usb 5-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00
[  249.808681][ T4592] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  249.836380][ T4592] usb 5-1: config 0 descriptor??
[  250.209728][ T7238] usb 5-1: USB disconnect, device number 11
[  250.826648][    C1] net_ratelimit: 66 callbacks suppressed
[  250.888403][ T9416] loop4: detected capacity change from 0 to 512
[  251.210515][ T9426] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1675'.
[  251.883099][ T9454] loop1: detected capacity change from 0 to 512
[  252.008796][ T9454] EXT4-fs error (device loop1): ext4_orphan_get:1410: inode #15: comm syz.1.1687: iget: bad i_size value: 38620345925642
[  252.050169][ T9454] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.1687: couldn't read orphan inode 15 (err -117)
[  252.212670][ T9454] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  252.380180][   T26] audit: type=1804 audit(1793920010.230:32): pid=9454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1687" name="/newroot/367/file0/file1" dev="loop1" ino=18 res=1 errno=0
[  252.544932][  T156] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm kworker/u4:3: bg 0: block 5: invalid block bitmap
[  252.641257][  T156] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 131587 with max blocks 1 with error 28
[  252.717749][  T156] EXT4-fs (loop1): This should not happen!! Data will be lost
[  252.717749][  T156] 
[  252.762191][  T156] EXT4-fs (loop1): Total free blocks count 0
[  252.792234][  T156] EXT4-fs (loop1): Free/Dirty block details
[  252.806585][  T156] EXT4-fs (loop1): free_blocks=0
[  252.821352][ T9478] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1697'.
[  252.830893][  T156] EXT4-fs (loop1): dirty_blocks=1
[  252.835964][  T156] EXT4-fs (loop1): Block reservation details
[  252.856786][  T156] EXT4-fs (loop1): i_reserved_data_blocks=1
[  253.066933][   T21] Bluetooth: hci2: command 0x2016 tx timeout
[  253.735330][ T9498] md/raid:md1: not clean -- starting background reconstruction
[  253.780520][ T9498] md/raid:md1: not enough configured devices (2, minimum 4)
[  253.831268][ T9498] md: pers->run() failed ...
[  254.313844][ T9494] loop6: detected capacity change from 0 to 40427
[  254.453093][ T9494] F2FS-fs (loop6): invalid crc value
[  254.502305][ T9494] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  254.538871][ T9521] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  254.560805][ T9525] ecryptfs_parse_options: eCryptfs: unrecognized option [eccipher=aes]
[  254.596705][ T1327] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  254.788980][ T9494] F2FS-fs (loop6): Start checkpoint disabled!
[  254.832348][ T9494] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e7
[  254.840376][ T1327] usb 6-1: Using ep0 maxpacket: 16
[  254.956900][ T1327] usb 6-1: config 0 has an invalid interface number: 105 but max is 0
[  254.965147][ T1327] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  254.965173][ T1327] usb 6-1: config 0 has no interface number 0
[  255.206940][ T1327] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  255.223454][ T9536] loop4: detected capacity change from 0 to 256
[  255.253102][ T1327] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  255.287703][ T1327] usb 6-1: Product: syz
[  255.291935][ T1327] usb 6-1: Manufacturer: syz
[  255.377710][ T1327] usb 6-1: SerialNumber: syz
[  255.430612][ T1327] usb 6-1: config 0 descriptor??
[  255.479582][ T1327] usb 6-1: Found UVC 0.00 device syz (046d:08f3)
[  255.485989][ T1327] usb 6-1: No valid video chain found.
[  255.549455][ T1425] ieee802154 phy0 wpan0: encryption failed: -22
[  255.556043][ T1425] ieee802154 phy1 wpan1: encryption failed: -22
[  255.763247][ T8615] usb 6-1: USB disconnect, device number 2
[  256.106564][    C1] net_ratelimit: 63 callbacks suppressed
[  256.136739][ T4269] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  256.574534][   T26] audit: type=1804 audit(1793920014.420:33): pid=9574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.1725" name="/newroot/96/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=25966 res=1 errno=0
[  256.598518][ T4269] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  256.619039][ T4269] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64
[  256.647136][ T4269] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  256.683903][ T4269] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[  256.712256][ T4269] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  256.719008][ T9577] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1726'.
[  256.839903][ T9581] overlayfs: failed to clone upperpath
[  257.039169][ T9592] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1731'.
[  257.267138][ T4269] cxacru 2-1:1.0: send of cm 0x91 failed (-71)
[  257.274709][ T4269] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71
[  257.284968][ T4269] ATM dev 0: usbatm_atm_init: atm_start failed: -71!
[  257.291999][ T4592] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  257.310881][ T4269] cxacru: probe of 2-1:1.0 failed with error -71
[  257.392896][ T4269] usb 2-1: USB disconnect, device number 19
[  257.770494][ T4592] usb 5-1: unable to get BOS descriptor or descriptor too short
[  257.881762][ T4592] usb 5-1: config 2 has an invalid interface number: 69 but max is 0
[  257.918936][ T4592] usb 5-1: config 2 has no interface number 0
[  257.925094][ T4592] usb 5-1: config 2 interface 69 has no altsetting 0
[  258.114904][ T9634] FAULT_INJECTION: forcing a failure.
[  258.114904][ T9634] name failslab, interval 1, probability 0, space 0, times 0
[  258.163053][ T4592] usb 5-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice=73.9f
[  258.172537][ T9634] CPU: 0 PID: 9634 Comm: syz.5.1746 Not tainted syzkaller #0
[  258.179943][ T9634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  258.179962][ T9634] Call Trace:
[  258.179971][ T9634]  <TASK>
[  258.179982][ T9634]  dump_stack_lvl+0x188/0x250
[  258.193373][ T9634]  ? show_regs_print_info+0x20/0x20
[  258.200993][ T9634]  ? load_image+0x410/0x410
[  258.201022][ T9634]  ? __might_sleep+0xf0/0xf0
[  258.201047][ T9634]  ? __lock_acquire+0x7d40/0x7d40
[  258.210756][ T9634]  should_fail+0x383/0x4b0
[  258.210790][ T9634]  should_failslab+0x5/0x20
[  258.220423][ T9634]  slab_pre_alloc_hook+0x51/0xc0
[  258.220452][ T9634]  ? lease_alloc+0x26/0x320
[  258.229399][ T9634]  kmem_cache_alloc+0x3d/0x280
[  258.229428][ T9634]  lease_alloc+0x26/0x320
[  258.238893][ T9634]  fcntl_setlease+0x112/0x310
[  258.238923][ T9634]  ? vfs_setlease+0x100/0x100
[  258.248057][ T9634]  ? vfs_write+0xaa6/0xd70
[  258.248080][ T9634]  ? lockdep_hardirqs_on+0x94/0x140
[  258.248151][ T9634]  do_fcntl+0x11a/0x1400
[  258.257460][ T9634]  ? __context_tracking_exit+0x4c/0x80
[  258.257488][ T9634]  ? rcu_lock_release+0x20/0x20
[  258.267119][ T9634]  ? __lock_acquire+0x7d40/0x7d40
[  258.267152][ T9634]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  258.276874][ T9634]  ? tomoyo_file_fcntl+0x77/0x210
[  258.276903][ T9634]  ? lock_chain_count+0x20/0x20
[  258.286830][ T9634]  ? bpf_lsm_file_fcntl+0x5/0x10
[  258.286864][ T9634]  ? security_file_fcntl+0x7c/0xa0
[  258.297911][ T9634]  __se_sys_fcntl+0xcc/0x190
[  258.297944][ T9634]  do_syscall_64+0x4c/0xa0
[  258.307751][ T9634]  ? clear_bhb_loop+0x30/0x80
[  258.307776][ T9634]  ? clear_bhb_loop+0x30/0x80
[  258.307803][ T9634]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  258.317515][ T9634] RIP: 0033:0x7fc0298d3b19
[  258.317541][ T9634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  258.317562][ T9634] RSP: 002b:00007fc027b2a028 EFLAGS: 00000246
[  258.326665][ T9634]  ORIG_RAX: 0000000000000048
[  258.326677][ T9634] RAX: ffffffffffffffda RBX: 00007fc029b59fa0 RCX: 00007fc0298d3b19
[  258.326695][ T9634] RDX: 0000000000000000 RSI: 0000000000000400 RDI: 0000000000000003
[  258.337370][ T9634] RBP: 00007fc02996bb70 R08: 0000000000000000 R09: 0000000000000000
[  258.337388][ T9634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  258.337402][ T9634] R13: 00007fc029b5a038 R14: 00007fc029b59fa0 R15: 00007ffe934e46d8
[  258.337436][ T9634]  </TASK>
[  258.429937][ T4592] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  258.448473][ T4592] usb 5-1: Product: syz
[  258.452774][ T4592] usb 5-1: Manufacturer: syz
[  258.452795][ T4592] usb 5-1: SerialNumber: syz
[  258.982064][ T4592] snd_usb_podhd 5-1:2.69: Line 6 POD HD300 found
[  259.198225][ T4592] snd_usb_podhd 5-1:2.69: cannot get proper max packet size
[  259.212414][ T9659] loop6: detected capacity change from 0 to 128
[  259.226953][ T4592] snd_usb_podhd 5-1:2.69: Line 6 POD HD300 now disconnected
[  259.260641][ T4592] snd_usb_podhd: probe of 5-1:2.69 failed with error -22
[  259.449826][ T7239] usb 5-1: USB disconnect, device number 12
[  259.471676][ T9659] attempt to access beyond end of device
[  259.471676][ T9659] loop6: rw=2049, want=160, limit=128
[  259.529105][ T9659] attempt to access beyond end of device
[  259.529105][ T9659] loop6: rw=34817, want=129, limit=128
[  259.556814][ T9659] attempt to access beyond end of device
[  259.556814][ T9659] loop6: rw=34817, want=160, limit=128
[  259.966607][ T9668] loop1: detected capacity change from 0 to 2048
[  260.113117][ T9669] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  260.331322][ T9668] NILFS (loop1): nilfs_sufile_do_free: segment 9 is already clean
[  260.424708][ T9673] loop4: detected capacity change from 0 to 8192
[  261.159471][    C0] net_ratelimit: 62 callbacks suppressed
[  261.195685][ T9690] jffs2: notice: (9690) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  261.378718][ T9693] loop5: detected capacity change from 0 to 64
[  261.517226][ T9693] Bad inode number on dev loop5: 2 is out of range
[  261.557290][ T9693] Bad inode number on dev loop5: 2 is out of range
[  261.573581][ T9693] attempt to access beyond end of device
[  261.573581][ T9693] loop5: rw=0, want=1026, limit=64
[  261.607705][ T9693] Buffer I/O error on dev loop5, logical block 512, async page read
[  261.633956][ T9693] attempt to access beyond end of device
[  261.633956][ T9693] loop5: rw=0, want=113154, limit=64
[  261.671990][ T9693] Buffer I/O error on dev loop5, logical block 56576, async page read
[  261.796201][ T9672] loop6: detected capacity change from 0 to 40427
[  261.867681][ T9672] F2FS-fs (loop6): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[  261.933747][ T9672] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  261.983356][ T9672] F2FS-fs (loop6): invalid crc value
[  262.005600][ T9672] F2FS-fs (loop6): Found nat_bits in checkpoint
[  262.035714][ T9710] loop4: detected capacity change from 0 to 128
[  262.244519][ T9672] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  262.254455][ T9672] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4
[  263.050823][ T9734] siw: device registration error -23
[  263.226845][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  263.310164][ T9740] loop5: detected capacity change from 0 to 1024
[  263.372014][ T9740] EXT4-fs (loop5): Ignoring removed mblk_io_submit option
[  263.416239][ T9744] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  263.431195][ T9740] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled
[  263.564016][ T9740] EXT4-fs error (device loop5): ext4_ext_check_inode:501: inode #11: comm syz.5.1790: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  263.677337][ T9740] EXT4-fs error (device loop5): ext4_orphan_get:1415: comm syz.5.1790: couldn't read orphan inode 11 (err -117)
[  263.722305][ T9751] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  263.759220][ T9740] EXT4-fs (loop5): mounted filesystem without journal. Opts: sysvgroups,noload,mblk_io_submit,jqfmt=vfsv0,discard,usrjquota=,grpquota,quota,,errors=continue. Quota mode: writeback.
[  263.765962][ T9751] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  263.831495][ T9740] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:476: comm syz.5.1790: Invalid block bitmap block 0 in block_group 0
[  263.890650][ T9740] Quota error (device loop5): write_blk: dquota write failed
[  263.916599][ T9740] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  263.930085][ T9706] loop1: detected capacity change from 0 to 65536
[  263.948024][ T9740] EXT4-fs error (device loop5): ext4_acquire_dquot:6236: comm syz.5.1790: Failed to acquire dquot type 0
[  264.068654][ T9757] loop6: detected capacity change from 0 to 128
[  264.076153][ T9740] EXT4-fs error (device loop5): ext4_read_inode_bitmap:140: comm syz.5.1790: Invalid inode bitmap blk 137438953472 in block_group 0
[  264.128630][ T9706] XFS (loop1): Mounting V5 Filesystem
[  264.168169][ T9757] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem
[  264.270951][ T3067] EXT4-fs error (device loop5): __ext4_get_inode_loc:4334: comm kworker/u4:5: Invalid inode table block 8589934593 in block_group 0
[  264.288686][ T9757] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  264.302778][ T9706] XFS (loop1): Ending clean mount
[  264.333389][ T9706] XFS (loop1): Quotacheck needed: Please wait.
[  264.366717][ T9757] ext2 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  264.501445][ T5924] XFS (loop1): Metadata corruption detected at xfs_dinode_verify+0x2bf/0xd50, inode 0x25 dinode
[  264.577237][ T5924] XFS (loop1): Unmount and run xfs_repair
[  264.603471][ T5924] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  264.633701][ T5924] 00000000: 49 4e a1 ff 03 01 00 00 00 00 00 00 00 00 00 00  IN..............
[  264.673249][ T5924] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  264.710616][ T5924] 00000020: 34 f7 58 68 7a bb 44 4d 34 f7 58 68 7a bb 44 4d  4.Xhz.DM4.Xhz.DM
[  264.744035][ T5924] 00000030: 34 f7 58 68 7a bb 44 4d 00 00 00 00 00 00 00 27  4.Xhz.DM.......'
[  264.801501][ T5924] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  264.844153][ T5924] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 0c 44 49 b4  .............DI.
[  264.921866][ T5924] 00000060: ff ff ff ff f1 fd ce d1 00 00 00 00 00 00 00 02  ................
[  264.994936][ T5924] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08  ................
[  265.105770][ T9706] XFS (loop1): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[  265.217532][ T4189] XFS (loop1): Unmounting Filesystem
[  265.406834][ T7239] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  265.682439][ T7239] usb 7-1: Using ep0 maxpacket: 16
[  265.812134][ T1327] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  265.826873][ T7239] usb 7-1: config 0 has an invalid interface number: 2 but max is 0
[  265.827029][ T1327] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  265.845502][ T7239] usb 7-1: config 0 has no interface number 0
[  265.871840][ T7239] usb 7-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  265.897203][ T7145] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  265.904719][ T7239] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  265.955870][ T9778] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  265.984732][ T7239] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  266.012143][ T7239] usb 7-1: config 0 descriptor??
[  266.426736][ T4320] net_ratelimit: 59 callbacks suppressed
[  266.470590][ T7239] mcp2221 0003:04D8:00DD.0015: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input2
[  266.583601][   T26] audit: type=1800 audit(1793920024.430:34): pid=9793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1807" name="iso_qlen" dev="configfs" ino=51160 res=0 errno=0
[  266.666739][ T1327] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  266.736072][ T9776] udc-core: couldn't find an available UDC or it's busy
[  266.746897][ T1327] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  266.754509][ T9776] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  266.886624][ T7145] usb 2-1: new full-speed USB device number 20 using dummy_hcd
[  266.974824][ T7239] usb 7-1: USB disconnect, device number 6
[  267.266786][ T7145] usb 2-1: unable to get BOS descriptor or descriptor too short
[  267.407084][ T7145] usb 2-1: unable to read config index 0 descriptor/start: -71
[  267.417072][ T7145] usb 2-1: can't read configurations, error -71
[  268.661049][ T9832] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  268.823686][ T9838] No such timeout policy "syz1"
[  269.627035][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  270.139419][ T9873] loop1: detected capacity change from 0 to 8192
[  270.862341][ T9888] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  271.466900][    C0] net_ratelimit: 67 callbacks suppressed
[  271.493562][ T9884] loop1: detected capacity change from 0 to 32768
[  271.597949][ T9884] XFS (loop1): Mounting V5 Filesystem
[  271.676117][ T9884] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50.
[  271.760543][ T9884] XFS (loop1): Tail block (0x10) overwrite detected. Updated to 0x30
[  271.788754][ T9915] "syz.4.1851" (9915) uses obsolete ecb(arc4) skcipher
[  271.886973][ T9884] XFS (loop1): Ending clean mount
[  272.232644][ T4587] XFS (loop1): Metadata CRC error detected at xfs_refcountbt_read_verify+0x3a/0xd0, xfs_refcountbt block 0x28 
[  272.273050][ T4587] XFS (loop1): Unmount and run xfs_repair
[  272.307421][ T4587] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  272.334322][ T4587] 00000000: 52 ff ff ff 7f 00 00 00 ff ff ff ff ff ff ff ff  R...............
[  272.368481][ T4587] 00000010: 00 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00  .......(........
[  272.401247][ T4587] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  272.444606][ T4587] 00000030: 00 00 00 00 bd e7 de 5d 00 00 00 00 00 00 00 00  .......]........
[  272.469408][ T4587] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  272.485843][ T4587] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  272.508934][ T4587] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  272.529736][ T4587] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  272.592391][ T9884] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x28 len 8 error 74
[  272.655013][ T9884] XFS (loop1): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1540/0x1b30 (fs/xfs/libxfs/xfs_defer.c:504).  Shutting down filesystem.
[  272.725549][ T9884] XFS (loop1): Please unmount the filesystem and rectify the problem(s)
[  272.760323][ T9933] loop4: detected capacity change from 0 to 128
[  272.785481][   T26] audit: type=1800 audit(1793920030.630:35): pid=9884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1840" name="file1" dev="overlay" ino=4422 res=0 errno=0
[  272.901967][ T9884] syz.1.1840 (9884) used greatest stack depth: 16208 bytes left
[  273.089455][ T9939] jffs2: notice: (9939) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  273.117635][ T9933] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nolazytime,errors=remount-ro,grpjquota=,acl,. Quota mode: none.
[  273.159032][ T9942] FAULT_INJECTION: forcing a failure.
[  273.159032][ T9942] name failslab, interval 1, probability 0, space 0, times 0
[  273.172554][ T9942] CPU: 0 PID: 9942 Comm: syz.6.1861 Not tainted syzkaller #0
[  273.179979][ T9942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  273.183676][ T9933] ext4 filesystem being mounted at /364/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  273.190071][ T9942] Call Trace:
[  273.225361][ T9942]  <TASK>
[  273.228334][ T9942]  dump_stack_lvl+0x188/0x250
[  273.233055][ T9942]  ? show_regs_print_info+0x20/0x20
[  273.238291][ T9942]  ? load_image+0x410/0x410
[  273.242850][ T9942]  should_fail+0x383/0x4b0
[  273.247311][ T9942]  should_failslab+0x5/0x20
[  273.251852][ T9942]  slab_pre_alloc_hook+0x51/0xc0
[  273.256837][ T9942]  kmem_cache_alloc_node_trace+0x4a/0x2f0
[  273.262599][ T9942]  ? iolatency_pd_alloc+0x9b/0x170
[  273.267755][ T9942]  ? _raw_spin_lock_irqsave+0x100/0x100
[  273.273344][ T9942]  iolatency_pd_alloc+0x9b/0x170
[  273.278321][ T9942]  ? rcu_lock_release+0x20/0x20
[  273.283205][ T9942]  blkcg_activate_policy+0x23c/0x9c0
[  273.288551][ T9942]  blk_iolatency_init+0x256/0x470
[  273.293621][ T9942]  blkcg_init_queue+0x39b/0x430
[  273.298525][ T9942]  blk_alloc_queue+0x427/0x580
[  273.303333][ T9942]  __blk_alloc_disk+0x15/0x60
[  273.308055][ T9942]  dm_create+0x57f/0xf90
[  273.312341][ T9942]  dev_create+0x12e/0x2c0
[  273.316717][ T9942]  ? list_devices+0x8a0/0x8a0
[  273.316746][ T9942]  ? __might_fault+0xb3/0x110
[  273.316774][ T9942]  ? _copy_from_user+0x111/0x170
[  273.316802][ T9942]  dm_ctl_ioctl+0x947/0xd00
[  273.316830][ T9942]  ? list_devices+0x8a0/0x8a0
[  273.327003][ T9942]  ? dm_poll+0x120/0x120
[  273.327077][ T9942]  ? bpf_lsm_file_ioctl+0x5/0x10
[  273.337016][ T9942]  ? security_file_ioctl+0x7c/0xa0
[  273.337050][ T9942]  ? dm_poll+0x120/0x120
[  273.346017][ T9942]  __se_sys_ioctl+0xfa/0x170
[  273.356082][ T9942]  do_syscall_64+0x4c/0xa0
[  273.364922][ T9942]  ? clear_bhb_loop+0x30/0x80
[  273.374028][ T9942]  ? clear_bhb_loop+0x30/0x80
[  273.378748][ T9942]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  273.378778][ T9942] RIP: 0033:0x7f89b13b7b19
[  273.378800][ T9942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  273.378820][ T9942] RSP: 002b:00007f89af60e028 EFLAGS: 00000246
[  273.389146][ T9942]  ORIG_RAX: 0000000000000010
[  273.414839][ T9942] RAX: ffffffffffffffda RBX: 00007f89b163dfa0 RCX: 00007f89b13b7b19
[  273.427533][ T9942] RDX: 0000200000000700 RSI: 00000000c138fd03 RDI: 0000000000000004
[  273.435543][ T9942] RBP: 00007f89b144fb70 R08: 0000000000000000 R09: 0000000000000000
[  273.443540][ T9942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  273.451548][ T9942] R13: 00007f89b163e038 R14: 00007f89b163dfa0 R15: 00007ffe534ae1f8
[  273.451586][ T9942]  </TASK>
[  273.528320][ T9933] Invalid argument reading file caps for ./file0
[  273.611342][ T4189] XFS (loop1): Unmounting Filesystem
[  273.633468][  T155] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  273.777898][ T9948] overlayfs: failed to clone upperpath
[  273.986217][  T155] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  274.232988][  T155] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  274.397481][  T155] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  274.510074][ T9955] device-mapper: table: 248:4: start=1 not aligned to h/w logical block size 4096 of ram11
[  274.520416][ T9955] device-mapper: core: Cannot calculate initial queue limits
[  274.527913][ T9955] device-mapper: ioctl: unable to set up device queue for new table.
[  275.126426][ T9971] loop4: detected capacity change from 0 to 32768
[  275.306967][ T9971] XFS (loop4): Mounting V5 Filesystem
[  275.665541][ T9971] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50.
[  275.694550][ T9971] XFS (loop4): Tail block (0x10) overwrite detected. Updated to 0x30
[  275.756051][ T9971] XFS (loop4): Ending clean mount
[  275.952383][   T26] audit: type=1800 audit(1793920033.800:36): pid=10000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1875" name="addr_adrfam" dev="configfs" ino=52545 res=0 errno=0
[  276.037278][ T9998] overlayfs: conflicting lowerdir path
[  276.074522][ T9991] loop5: detected capacity change from 0 to 4096
[  276.234833][ T4196] XFS (loop4): Unmounting Filesystem
[  276.243395][ T9993] rxe_eth0 speed is unknown, defaulting to 1000
[  276.389942][ T9991] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  276.666783][    C1] net_ratelimit: 51 callbacks suppressed
[  276.718055][  T155] team0: Port device xfrm0 removed
[  276.808484][ T9993] bond0 speed is unknown, defaulting to 1000
[  277.306661][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  277.924951][ T9993] chnl_net:caif_netlink_parms(): no params data found
[  277.946732][ T4270] Bluetooth: hci0: command 0x0409 tx timeout
[  278.228194][T10086] loop5: detected capacity change from 0 to 2048
[  278.757400][T10106] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  279.030893][ T9993] bridge0: port 1(bridge_slave_0) entered blocking state
[  279.056685][ T9993] bridge0: port 1(bridge_slave_0) entered disabled state
[  279.110820][ T9993] device bridge_slave_0 entered promiscuous mode
[  279.144919][ T9993] bridge0: port 2(bridge_slave_1) entered blocking state
[  279.176355][ T9993] bridge0: port 2(bridge_slave_1) entered disabled state
[  279.191509][ T9993] device bridge_slave_1 entered promiscuous mode
[  279.386690][  T155] device hsr_slave_0 left promiscuous mode
[  279.403919][  T155] device hsr_slave_1 left promiscuous mode
[  279.696794][  T155] device veth1_macvtap left promiscuous mode
[  279.702920][  T155] device veth0_macvtap left promiscuous mode
[  279.743271][  T155] device veth1_vlan left promiscuous mode
[  279.785110][  T155] device veth0_vlan left promiscuous mode
[  280.026742][ T4270] Bluetooth: hci0: command 0x041b tx timeout
[  281.158621][T10152] loop4: detected capacity change from 0 to 32768
[  281.317530][T10152] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  281.344420][   T26] audit: type=1800 audit(1793920039.190:37): pid=10152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1902" name="file1" dev="loop4" ino=17058 res=0 errno=0
[  281.547375][ T4196] ocfs2: Unmounting device (7,4) on (node local)
[  281.717885][T10057] net_ratelimit: 74 callbacks suppressed
[  282.025758][  T155] bond0 (unregistering): Released all slaves
[  282.106572][ T4270] Bluetooth: hci0: command 0x040f tx timeout
[  282.180800][T10146] tipc: Started in network mode
[  282.186812][T10146] tipc: Node identity ac1414aa, cluster identity 4711
[  282.210724][T10146] tipc: New replicast peer: 100.1.1.1
[  282.232633][T10146] tipc: Enabled bearer <udp:syz2>, priority 10
[  282.279121][T10171] loop4: detected capacity change from 0 to 1024
[  282.372465][ T9993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  282.463961][ T9993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  282.698499][T10180] netlink: 'syz.3.1913': attribute type 15 has an invalid length.
[  282.725530][   T26] audit: type=1800 audit(1793920040.570:38): pid=10171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1909" name="file1" dev="loop4" ino=20 res=0 errno=0
[  282.786059][ T9993] team0: Port device team_slave_0 added
[  282.854888][ T9993] team0: Port device team_slave_1 added
[  283.124180][ T9993] batman_adv: batadv0: Adding interface: batadv_slave_0
[  283.189540][ T9993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  283.311761][ T9993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  283.394820][ T4270] tipc: Node number set to 2886997162
[  283.418759][ T9993] batman_adv: batadv0: Adding interface: batadv_slave_1
[  283.425794][ T9993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  283.603765][T10219] 9pnet: Insufficient options for proto=fd
[  283.620166][ T9993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  284.006058][ T9993] device hsr_slave_0 entered promiscuous mode
[  284.057834][ T9993] device hsr_slave_1 entered promiscuous mode
[  284.089493][ T9993] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  284.110024][ T9993] Cannot create hsr debugfs directory
[  284.186591][ T4270] Bluetooth: hci0: command 0x0419 tx timeout
[  284.484202][T10247] loop5: detected capacity change from 0 to 4096
[  284.585668][T10247] ntfs3: loop5: Failed to load $Extend.
[  285.362152][ T7475] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22.
[  285.386699][ T7475] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  286.067531][ T9993] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  286.108092][ T9993] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  286.138209][ T9993] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  286.173090][ T9993] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  286.376909][ T9993] 8021q: adding VLAN 0 to HW filter on device bond0
[  286.411219][T10048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  286.432462][T10048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  286.449672][ T9993] 8021q: adding VLAN 0 to HW filter on device team0
[  286.471147][T10057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  286.502016][T10057] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  286.521819][T10057] bridge0: port 1(bridge_slave_0) entered blocking state
[  286.529000][T10057] bridge0: port 1(bridge_slave_0) entered forwarding state
[  286.550098][T10057] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  286.569708][T10057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  286.584909][T10057] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  286.593638][T10057] bridge0: port 2(bridge_slave_1) entered blocking state
[  286.600784][T10057] bridge0: port 2(bridge_slave_1) entered forwarding state
[  286.640296][T10048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  286.657675][T10048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  286.682329][T10038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  286.705278][T10038] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  286.727755][T10038] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  286.746588][    C1] net_ratelimit: 47 callbacks suppressed
[  286.763878][T10038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  286.780776][T10038] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  286.805995][T10038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  286.826381][T10038] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  286.839565][T10038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  286.857501][T10038] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  286.884875][ T9993] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  287.056206][T10057] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  287.064455][T10057] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  287.093544][ T9993] 8021q: adding VLAN 0 to HW filter on device batadv0
[  287.171125][T10057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  287.202375][T10057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  287.267813][T10057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  287.287319][T10057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  287.312537][ T9993] device veth0_vlan entered promiscuous mode
[  287.334489][T10057] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  287.360472][T10057] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  287.378659][ T9993] device veth1_vlan entered promiscuous mode
[  287.434452][T10042] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  287.451648][T10042] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  287.463571][T10042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  287.475007][T10042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  287.492187][ T9993] device veth0_macvtap entered promiscuous mode
[  287.525455][ T9993] device veth1_macvtap entered promiscuous mode
[  287.561801][ T9993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  287.585706][ T9993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.601485][ T9993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  287.613049][ T9993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.631025][ T9993] batman_adv: batadv0: Interface activated: batadv_slave_0
[  287.642480][T10057] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  287.655910][T10057] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  287.672167][T10057] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  287.684371][T10057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  287.704100][ T9993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  287.723061][ T9993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.734031][ T9993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  287.750280][ T9993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.763076][ T9993] batman_adv: batadv0: Interface activated: batadv_slave_1
[  287.777918][T10057] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  287.794076][T10057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  287.810935][ T9993] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  287.820184][ T9993] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  287.829838][ T9993] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  287.838851][ T9993] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  287.968054][T10048] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  287.976011][T10048] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  288.002145][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  288.051937][  T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  288.063477][  T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  288.080868][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  288.226253][T10320] loop6: detected capacity change from 0 to 2048
[  288.352575][T10320] EXT4-fs (loop6): mounted filesystem without journal. Opts: nobarrier,noinit_itable,i_version,init_itable,,errors=continue. Quota mode: none.
[  288.402322][T10320] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  288.451349][ T8615] usb 5-1: new low-speed USB device number 13 using dummy_hcd
[  288.553442][T10320] overlayfs: failed to set xattr on upper
[  288.606591][T10320] overlayfs: ...falling back to index=off,metacopy=off.
[  288.613705][T10320] overlayfs: NFS export requires "index=on", falling back to nfs_export=off.
[  288.866888][ T8615] usb 5-1: unable to get BOS descriptor or descriptor too short
[  288.976948][ T8615] usb 5-1: config 142 has an invalid interface number: 251 but max is 0
[  288.994878][ T8615] usb 5-1: config 142 has no interface number 0
[  289.034513][ T8615] usb 5-1: config 142 interface 251 altsetting 11 has an invalid endpoint with address 0x9F, skipping
[  289.097402][ T8615] usb 5-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt
[  289.152697][ T8615] usb 5-1: config 142 interface 251 has no altsetting 0
[  289.387772][ T8615] usb 5-1: string descriptor 0 read error: -22
[  289.394101][ T8615] usb 5-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=91.80
[  289.443474][ T8615] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  289.537008][T10323] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  289.548568][T10323] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  289.598386][ T8615] cypress_m8 5-1:142.251: HID->COM RS232 Adapter converter detected
[  289.620768][ T8615] cyphidcom ttyUSB0: required endpoint is missing
[  290.367719][T10407] FAULT_INJECTION: forcing a failure.
[  290.367719][T10407] name failslab, interval 1, probability 0, space 0, times 0
[  290.481627][T10407] CPU: 1 PID: 10407 Comm: syz.1.1960 Not tainted syzkaller #0
[  290.489163][T10407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  290.499281][T10407] Call Trace:
[  290.502598][T10407]  <TASK>
[  290.505559][T10407]  dump_stack_lvl+0x188/0x250
[  290.510283][T10407]  ? show_regs_print_info+0x20/0x20
[  290.515536][T10407]  ? load_image+0x410/0x410
[  290.520082][T10407]  ? __might_sleep+0xf0/0xf0
[  290.524710][T10407]  ? __lock_acquire+0x7d40/0x7d40
[  290.529789][T10407]  should_fail+0x383/0x4b0
[  290.534249][T10407]  should_failslab+0x5/0x20
[  290.538788][T10407]  slab_pre_alloc_hook+0x51/0xc0
[  290.543770][T10407]  kmem_cache_alloc_node+0x47/0x2c0
[  290.549025][T10407]  ? __alloc_skb+0xf4/0x750
[  290.553572][T10407]  __alloc_skb+0xf4/0x750
[  290.557964][T10407]  __ip6_append_data+0x26b7/0x38f0
[  290.563140][T10407]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  290.569172][T10407]  ? ip6_setup_cork+0x11e0/0x11e0
[  290.574271][T10407]  ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0
[  290.580315][T10407]  ip6_append_data+0x1d4/0x310
[  290.585124][T10407]  ? ip_skb_dst_mtu+0x860/0x860
[  290.590012][T10407]  ? ip_skb_dst_mtu+0x860/0x860
[  290.594910][T10407]  udpv6_sendmsg+0xc9a/0x2520
[  290.599638][T10407]  ? aa_sk_perm+0x910/0x910
[  290.604171][T10407]  ? udp_v6_early_demux+0xe10/0xe10
[  290.604267][T10407]  ? aa_sk_perm+0x7dc/0x910
[  290.613973][T10407]  ? aa_af_perm+0x340/0x340
[  290.618508][T10407]  ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0
[  290.624953][T10407]  ? sock_rps_record_flow+0x17/0x3b0
[  290.630263][T10407]  ? inet_send_prepare+0x57/0x250
[  290.630290][T10407]  ? inet6_sendmsg+0x5b/0xd0
[  290.630327][T10407]  ? inet6_compat_ioctl+0x3c0/0x3c0
[  290.630358][T10407]  ____sys_sendmsg+0x5be/0x8f0
[  290.630389][T10407]  ? __sys_sendmsg_sock+0x30/0x30
[  290.630421][T10407]  ? import_iovec+0x6f/0xa0
[  290.630461][T10407]  ___sys_sendmsg+0x236/0x2e0
[  290.640083][T10407]  ? __sys_sendmsg+0x290/0x290
[  290.640198][T10407]  ? __might_fault+0xb3/0x110
[  290.650077][T10407]  __sys_sendmmsg+0x2ba/0x500
[  290.650110][T10407]  ? __ia32_sys_sendmsg+0x80/0x80
[  290.659681][T10407]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  290.659716][T10407]  ? lock_chain_count+0x20/0x20
[  290.669182][T10407]  __x64_sys_sendmmsg+0x9c/0xb0
[  290.669215][T10407]  do_syscall_64+0x4c/0xa0
[  290.678561][T10407]  ? clear_bhb_loop+0x30/0x80
[  290.678585][T10407]  ? clear_bhb_loop+0x30/0x80
[  290.678610][T10407]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  290.689615][T10407] RIP: 0033:0x7fc65a9a7b19
[  290.689641][T10407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  290.708482][T10407] RSP: 002b:00007fc658bfe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  290.708512][T10407] RAX: ffffffffffffffda RBX: 00007fc65ac2dfa0 RCX: 00007fc65a9a7b19
[  290.708530][T10407] RDX: 0000000000000003 RSI: 0000200000000740 RDI: 0000000000000004
[  290.708546][T10407] RBP: 00007fc65aa3fb70 R08: 0000000000000000 R09: 0000000000000000
[  290.708563][T10407] R10: 000000000001c000 R11: 0000000000000246 R12: 0000000000000000
[  290.751583][T10407] R13: 00007fc65ac2e038 R14: 00007fc65ac2dfa0 R15: 00007ffc438c2958
[  290.767572][T10407]  </TASK>
[  291.356579][ T4270] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  291.497221][T10435] loop5: detected capacity change from 0 to 512
[  291.574893][T10435] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option
[  291.606584][ T4270] usb 2-1: Using ep0 maxpacket: 16
[  291.643134][T10435] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  291.719878][T10435] EXT4-fs (loop5): 1 truncate cleaned up
[  291.726971][ T4270] usb 2-1: config 0 has an invalid interface number: 34 but max is 0
[  291.728301][T10435] EXT4-fs (loop5): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none.
[  291.735136][ T4270] usb 2-1: config 0 has no interface number 0
[  291.788285][T10435] EXT4-fs (loop5): shut down requested (1)
[  291.867590][    C0] net_ratelimit: 95 callbacks suppressed
[  291.896385][ T4270] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  291.959600][ T4270] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  291.977605][ T4271] usb 5-1: USB disconnect, device number 13
[  291.985975][ T4271] cypress_m8 5-1:142.251: device disconnected
[  292.026668][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  292.116933][ T4270] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  292.131943][ T4270] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  292.161687][ T4270] usb 2-1: Product: syz
[  292.165941][ T4270] usb 2-1: Manufacturer: syz
[  292.191289][ T4270] usb 2-1: SerialNumber: syz
[  292.233094][ T4270] usb 2-1: config 0 descriptor??
[  292.267183][T10422] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  292.274336][T10422] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  292.520861][T10422] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  292.535311][T10422] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  292.546642][ T7144] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  292.796594][ T7144] usb 6-1: Using ep0 maxpacket: 32
[  292.806809][ T4270] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  292.916771][ T7144] usb 6-1: config 0 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 95, changing to 10
[  292.941549][ T7144] usb 6-1: config 0 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  292.977947][ T7144] usb 6-1: config 0 interface 0 has no altsetting 0
[  292.984700][ T7144] usb 6-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00
[  293.021948][ T7144] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  293.052633][ T7144] usb 6-1: config 0 descriptor??
[  293.365142][T10480] netlink: 'syz.3.1986': attribute type 19 has an invalid length.
[  293.373763][T10480] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1986'.
[  293.396797][ T7144] usbhid 6-1:0.0: can't add hid device: -71
[  293.405388][ T7144] usbhid: probe of 6-1:0.0 failed with error -71
[  293.429880][ T7144] usb 6-1: USB disconnect, device number 3
[  293.453210][T10480] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  293.463105][T10480] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  293.472209][T10480] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  293.480974][T10480] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  293.518238][T10480] netlink: 'syz.3.1986': attribute type 19 has an invalid length.
[  293.526288][T10480] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1986'.
[  293.696830][ T4270] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  293.722044][ T4270] asix: probe of 2-1:0.34 failed with error -71
[  293.759354][ T4270] usb 2-1: USB disconnect, device number 22
[  294.248225][T10507] 9pnet: p9_fd_create_unix (10507): problem connecting socket: ./file0: -5
[  294.409230][T10484] loop6: detected capacity change from 0 to 32768
[  294.486690][   T26] audit: type=1800 audit(1793920052.340:39): pid=10484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1988" name="file1" dev="loop6" ino=4 res=0 errno=0
[  294.628344][   T26] audit: type=1800 audit(1793920052.470:40): pid=10517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1988" name="file1" dev="loop6" ino=4 res=0 errno=0
[  294.811888][T10524] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_team, syncid = 0, id = 0
[  295.409070][T10545] loop1: detected capacity change from 0 to 512
[  295.612180][T10545] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  295.662109][T10545] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  295.774391][T10545] capability: warning: `syz.1.2014' uses 32-bit capabilities (legacy support in use)
[  296.114929][T10568] loop1: detected capacity change from 0 to 2048
[  296.137251][T10570] loop4: detected capacity change from 0 to 16
[  296.198168][T10570] erofs: (device loop4): mounted with root inode @ nid 36.
[  296.233243][T10570] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 589823 of nid 36
[  296.244085][T10570] erofs: (device loop4): z_erofs_readahead: readahead error at page 143 @ nid 36
[  296.253372][T10570] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 585727 of nid 36
[  296.263533][T10570] erofs: (device loop4): z_erofs_readahead: readahead error at page 142 @ nid 36
[  296.272832][T10570] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 581631 of nid 36
[  296.282963][T10570] erofs: (device loop4): z_erofs_readahead: readahead error at page 141 @ nid 36
[  296.292192][T10570] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 577535 of nid 36
[  296.302338][T10570] erofs: (device loop4): z_erofs_readahead: readahead error at page 140 @ nid 36
[  296.312180][T10570] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 573439 of nid 36
[  296.322337][T10570] erofs: (device loop4): z_erofs_readahead: readahead error at page 139 @ nid 36
[  296.322376][T10570] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 569343 of nid 36
[  296.322397][T10570] erofs: (device loop4): z_erofs_readahead: readahead error at page 138 @ nid 36
[  296.322418][T10570] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 565247 of nid 36
[  296.322440][T10570] erofs: (device loop4): z_erofs_readahead: readahead error at page 137 @ nid 36
[  296.322461][T10570] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 561151 of nid 36
[  296.357467][T10568] NILFS (loop1): invalid segment: Magic number mismatch
[  296.361164][T10570] erofs: (device loop4): z_erofs_readahead: readahead error at page 136 @ nid 36
[  296.398148][T10570] erofs: (device loop4): z_erofs_readahead: readahead error at page 111 @ nid 36
[  296.407584][T10570] erofs: (device loop4): z_erofs_readahead: readahead error at page 110 @ nid 36
[  296.417816][T10570] erofs: (device loop4): z_erofs_readahead: readahead error at page 109 @ nid 36
[  296.427314][T10570] erofs: (device loop4): z_erofs_readahead: readahead error at page 108 @ nid 36
[  296.436542][T10570] erofs: (device loop4): z_erofs_readahead: readahead error at page 107 @ nid 36
[  296.445732][T10570] erofs: (device loop4): z_erofs_readahead: readahead error at page 106 @ nid 36
[  296.456048][T10570] attempt to access beyond end of device
[  296.456048][T10570] loop4: rw=524288, want=13478624064, limit=16
[  296.467895][T10570] attempt to access beyond end of device
[  296.467895][T10570] loop4: rw=524288, want=13478624072, limit=16
[  296.478594][T10568] NILFS (loop1): trying rollback from an earlier position
[  296.480074][T10570] attempt to access beyond end of device
[  296.480074][T10570] loop4: rw=524288, want=14550774184, limit=16
[  296.498653][T10570] attempt to access beyond end of device
[  296.498653][T10570] loop4: rw=524288, want=14550774192, limit=16
[  296.510582][T10570] attempt to access beyond end of device
[  296.510582][T10570] loop4: rw=524288, want=13716630408, limit=16
[  296.523066][T10570] attempt to access beyond end of device
[  296.523066][T10570] loop4: rw=524288, want=13716630416, limit=16
[  296.534899][T10570] attempt to access beyond end of device
[  296.534899][T10570] loop4: rw=524288, want=790416, limit=16
[  296.546321][T10570] attempt to access beyond end of device
[  296.546321][T10570] loop4: rw=524288, want=790424, limit=16
[  296.546452][T10570] attempt to access beyond end of device
[  296.546452][T10570] loop4: rw=524288, want=104, limit=16
[  296.568745][T10570] attempt to access beyond end of device
[  296.568745][T10570] loop4: rw=524288, want=112, limit=16
[  296.654537][T10568] NILFS (loop1): recovery complete
[  296.674248][T10574] loop6: detected capacity change from 0 to 1024
[  296.698617][T10575] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  296.836103][T10574] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  296.987049][    C0] net_ratelimit: 80 callbacks suppressed
[  297.487571][T10587] sctp: [Deprecated]: syz.6.2029 (pid 10587) Use of int in max_burst socket option deprecated.
[  297.487571][T10587] Use struct sctp_assoc_value instead
[  298.594150][   T26] audit: type=1326 audit(1793920056.440:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10618 comm="syz.6.2042" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89b13b7b19 code=0x7ffc0000
[  298.711136][T10598] loop1: detected capacity change from 0 to 32768
[  298.714869][   T26] audit: type=1326 audit(1793920056.490:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10618 comm="syz.6.2042" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89b13b7b19 code=0x7ffc0000
[  298.749708][   T26] audit: type=1326 audit(1793920056.490:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10618 comm="syz.6.2042" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f89b13b7b19 code=0x7ffc0000
[  298.774685][   T26] audit: type=1326 audit(1793920056.490:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10618 comm="syz.6.2042" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89b13b7b19 code=0x7ffc0000
[  298.809426][   T26] audit: type=1326 audit(1793920056.490:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10618 comm="syz.6.2042" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89b13b7b19 code=0x7ffc0000
[  298.950917][   T26] audit: type=1326 audit(1793920056.490:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10618 comm="syz.6.2042" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89b13b7b19 code=0x7ffc0000
[  298.997651][T10598] (syz.1.2032,10598,1):ocfs2_parse_options:1447 ERROR: Unrecognized mount option "" or missing value
[  299.046810][T10598] (syz.1.2032,10598,1):ocfs2_fill_super:1177 ERROR: status = -22
[  299.099318][   T26] audit: type=1326 audit(1793920056.490:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10618 comm="syz.6.2042" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89b13b7b19 code=0x7ffc0000
[  299.194667][   T26] audit: type=1326 audit(1793920056.490:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10618 comm="syz.6.2042" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89b13b7b19 code=0x7ffc0000
[  299.614455][T10628] loop1: detected capacity change from 0 to 8192
[  299.652220][T10613] loop5: detected capacity change from 0 to 40427
[  299.715052][T10613] F2FS-fs (loop5): invalid crc value
[  299.732903][T10628] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  299.802130][T10613] F2FS-fs (loop5): Found nat_bits in checkpoint
[  300.017196][T10613] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  300.886004][T10632] loop6: detected capacity change from 0 to 32768
[  301.044817][T10656] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2057'.
[  301.147635][T10632] XFS (loop6): Mounting V5 Filesystem
[  301.184221][T10632] XFS (loop6): Ending clean mount
[  301.260479][  T155] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  301.413696][T10671] loop1: detected capacity change from 0 to 256
[  301.443823][  T155] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  301.459618][ T7616] XFS (loop6): Unmounting Filesystem
[  301.688252][  T155] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  302.064450][  T155] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  302.235875][T10684] loop1: detected capacity change from 0 to 1024
[  302.302002][T10050] net_ratelimit: 63 callbacks suppressed
[  302.445726][T10684] EXT4-fs (loop1): inline encryption not supported
[  302.552466][T10684] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,jqfmt=vfsv1,abort,debug_want_extra_isize=0x0000000000000008,lazytime,errors=remount-ro,stripe=0x0000000000000007,inlinecrypt,auto_da_alloc,. Quota mode: none.
[  302.812333][T10684] EXT4-fs error (device loop1): ext4_remount:6062: comm syz.1.2065: Abort forced by user
[  302.908285][T10701] device-mapper: table: 248:0: mirror: Too few mirror arguments
[  302.947861][T10701] device-mapper: ioctl: error adding target to table
[  302.961107][T10684] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: none.
[  303.346760][T10718] loop1: detected capacity change from 0 to 8
[  303.470898][T10718] squashfs image failed sanity check
[  303.495100][T10707] rxe_eth0 speed is unknown, defaulting to 1000
[  304.044641][T10707] bond0 speed is unknown, defaulting to 1000
[  304.682322][T10757] netlink: 'syz.4.2086': attribute type 1 has an invalid length.
[  304.682365][T10757] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  304.682526][T10757] IPv6: NLM_F_CREATE should be set when creating new route
[  305.118291][T10768] loop6: detected capacity change from 0 to 512
[  305.167700][T10771] netlink: 'syz.1.2092': attribute type 1 has an invalid length.
[  305.198576][T10768] EXT4-fs (loop6): invalid journal inode
[  305.205661][T10768] EXT4-fs (loop6): can't get journal size
[  305.227784][ T7145] Bluetooth: hci1: command 0x0409 tx timeout
[  305.276238][T10768] EXT4-fs (loop6): 1 truncate cleaned up
[  305.308673][T10768] EXT4-fs (loop6): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none.
[  305.435698][T10707] chnl_net:caif_netlink_parms(): no params data found
[  305.450230][T10779] FAULT_INJECTION: forcing a failure.
[  305.450230][T10779] name failslab, interval 1, probability 0, space 0, times 0
[  305.520456][T10779] CPU: 1 PID: 10779 Comm: syz.4.2094 Not tainted syzkaller #0
[  305.527981][T10779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  305.538156][T10779] Call Trace:
[  305.541464][T10779]  <TASK>
[  305.544413][T10779]  dump_stack_lvl+0x188/0x250
[  305.549124][T10779]  ? show_regs_print_info+0x20/0x20
[  305.549154][T10779]  ? load_image+0x410/0x410
[  305.558877][T10779]  ? __might_sleep+0xf0/0xf0
[  305.558906][T10779]  ? __lock_acquire+0x7d40/0x7d40
[  305.568540][T10779]  should_fail+0x383/0x4b0
[  305.572989][T10779]  should_failslab+0x5/0x20
[  305.577542][T10779]  slab_pre_alloc_hook+0x51/0xc0
[  305.577569][T10779]  ? __mpol_dup+0x76/0x320
[  305.586940][T10779]  kmem_cache_alloc+0x3d/0x280
[  305.586970][T10779]  __mpol_dup+0x76/0x320
[  305.596005][T10779]  ? vma_dup_policy+0xa0/0xa0
[  305.600705][T10779]  ? mpol_set_shared_policy+0xb5/0xe90
[  305.600732][T10779]  ? rcu_is_watching+0x11/0xa0
[  305.600755][T10779]  ? kmem_cache_alloc+0x189/0x280
[  305.600781][T10779]  mpol_set_shared_policy+0xca/0xe90
[  305.600803][T10779]  ? vmacache_find+0x238/0x590
[  305.600835][T10779]  mbind_range+0x829/0x9b0
[  305.600873][T10779]  __se_sys_mbind+0x51c/0x770
[  305.600902][T10779]  ? __x64_sys_mbind+0xf0/0xf0
[  305.611917][T10779]  ? lock_chain_count+0x20/0x20
[  305.622272][T10779]  ? __x64_sys_mbind+0x1d/0xf0
[  305.631447][T10779]  do_syscall_64+0x4c/0xa0
[  305.640888][T10779]  ? clear_bhb_loop+0x30/0x80
[  305.650527][T10779]  ? clear_bhb_loop+0x30/0x80
[  305.659625][T10779]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  305.664424][    C0] vkms_vblank_simulate: vblank timer overrun
[  305.670209][T10779] RIP: 0033:0x7f1495a0bb19
[  305.680609][T10779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  305.700232][T10779] RSP: 002b:00007f1493c62028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
[  305.700260][T10779] RAX: ffffffffffffffda RBX: 00007f1495c91fa0 RCX: 00007f1495a0bb19
[  305.700278][T10779] RDX: 0000000000000005 RSI: 0000000000600000 RDI: 0000200000000000
[  305.716698][T10779] RBP: 00007f1495aa3b70 R08: 0000000000000008 R09: 0000000000000000
[  305.716717][T10779] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000
[  305.716732][T10779] R13: 00007f1495c92038 R14: 00007f1495c91fa0 R15: 00007ffc5e8482f8
[  305.716765][T10779]  </TASK>
[  305.847173][  T155] device hsr_slave_0 left promiscuous mode
[  305.868509][  T155] device hsr_slave_1 left promiscuous mode
[  305.892666][  T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  305.932986][  T155] batman_adv: batadv0: Removing interface: batadv_slave_0
[  305.972802][  T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  306.018661][  T155] batman_adv: batadv0: Removing interface: batadv_slave_1
[  306.059871][  T155] device bridge_slave_1 left promiscuous mode
[  306.086778][  T155] bridge0: port 2(bridge_slave_1) entered disabled state
[  306.096392][  T155] device bridge_slave_0 left promiscuous mode
[  306.113042][  T155] bridge0: port 1(bridge_slave_0) entered disabled state
[  306.171992][  T155] device veth1_macvtap left promiscuous mode
[  306.178313][  T155] device veth0_macvtap left promiscuous mode
[  306.184534][  T155] device veth1_vlan left promiscuous mode
[  306.192605][  T155] device veth0_vlan left promiscuous mode
[  306.832816][  T155] team0 (unregistering): Port device team_slave_1 removed
[  306.865986][  T155] team0 (unregistering): Port device team_slave_0 removed
[  306.903771][  T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  306.928960][  T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  307.126934][  T155] bond0 (unregistering): Released all slaves
[  307.175027][T10792] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2098'.
[  307.316811][ T7239] Bluetooth: hci1: command 0x041b tx timeout
[  307.483392][T10707] bridge0: port 1(bridge_slave_0) entered blocking state
[  307.490739][T10707] bridge0: port 1(bridge_slave_0) entered disabled state
[  307.499690][T10707] device bridge_slave_0 entered promiscuous mode
[  307.525223][T10707] bridge0: port 2(bridge_slave_1) entered blocking state
[  307.568668][T10707] bridge0: port 2(bridge_slave_1) entered disabled state
[  307.592399][T10822] loop4: detected capacity change from 0 to 4096
[  307.610356][T10822] EXT4-fs (loop4): Ignoring removed nobh option
[  307.617166][T10822] EXT4-fs (loop4): Test dummy encryption mode enabled
[  307.624294][T10822] EXT4-fs (loop4): Ignoring removed bh option
[  307.636649][T10806] ceph: No mds server is up or the cluster is laggy
[  307.648863][T10707] device bridge_slave_1 entered promiscuous mode
[  307.656703][ T4271] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  307.668984][T10822] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,nobh,nodioread_nolock,test_dummy_encryption,lazytime,nojournal_checksum,minixdf,bh,,errors=continue. Quota mode: writeback.
[  307.916833][ T4271] usb 2-1: Using ep0 maxpacket: 16
[  308.012976][T10707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  308.026642][T10038] net_ratelimit: 56 callbacks suppressed
[  308.048743][T10707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  308.117076][T10822] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  308.206989][ T4271] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  308.228246][ T4271] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  308.244911][T10707] team0: Port device team_slave_0 added
[  308.262953][ T4271] usb 2-1: Product: syz
[  308.289762][ T4271] usb 2-1: Manufacturer: syz
[  308.314532][ T4271] usb 2-1: SerialNumber: syz
[  308.326718][T10707] team0: Port device team_slave_1 added
[  308.584855][T10707] batman_adv: batadv0: Adding interface: batadv_slave_0
[  308.594252][T10812] udc-core: couldn't find an available UDC or it's busy
[  308.617560][T10812] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  308.650800][ T4271] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  308.661754][T10707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  308.767623][ T4271] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  308.809129][T10707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  308.828353][ T4271] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  308.868164][ T4271] usb 2-1: media controller created
[  308.896781][T10707] batman_adv: batadv0: Adding interface: batadv_slave_1
[  308.906288][T10707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  308.989074][T10707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  309.131016][ T4271] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  309.365567][T10707] device hsr_slave_0 entered promiscuous mode
[  309.381065][ T4271] zl10353_read_register: readreg error (reg=127, ret==-71)
[  309.396816][ T7239] Bluetooth: hci1: command 0x040f tx timeout
[  309.409611][T10707] device hsr_slave_1 entered promiscuous mode
[  309.420145][T10855] loop6: detected capacity change from 0 to 256
[  309.437457][T10707] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  309.445053][T10707] Cannot create hsr debugfs directory
[  309.779039][T10862] loop1: detected capacity change from 0 to 512
[  310.024331][ T4271] dvb_usb_gl861: probe of 2-1:157.0 failed with error -5
[  310.071900][ T4271] usb 2-1: USB disconnect, device number 23
[  310.437947][T10878] loop1: detected capacity change from 0 to 512
[  310.750183][T10707] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  310.797721][T10707] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  310.941288][T10707] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  311.008717][T10707] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  311.306471][T10871] loop6: detected capacity change from 0 to 32768
[  311.407740][T10871] ocfs2: Slot 0 on device (7,6) was already allocated to this node!
[  311.440668][T10871] JBD2: Ignoring recovery information on journal
[  311.454858][T10707] 8021q: adding VLAN 0 to HW filter on device bond0
[  311.476940][ T4592] Bluetooth: hci1: command 0x0419 tx timeout
[  311.522570][T10048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  311.573580][T10048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  311.622398][T10707] 8021q: adding VLAN 0 to HW filter on device team0
[  311.666664][ T7145] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  311.724528][T10871] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  311.733986][T10057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  311.789510][T10057] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  311.866414][T10057] bridge0: port 1(bridge_slave_0) entered blocking state
[  311.873589][T10057] bridge0: port 1(bridge_slave_0) entered forwarding state
[  311.926577][ T7145] usb 5-1: Using ep0 maxpacket: 16
[  311.951516][T10915] (syz.6.2118,10915,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214
[  311.972785][T10057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  312.017590][T10918] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  312.046087][T10057] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  312.054614][ T7145] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  312.065802][ T7145] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  312.079009][T10057] bridge0: port 2(bridge_slave_1) entered blocking state
[  312.086093][T10057] bridge0: port 2(bridge_slave_1) entered forwarding state
[  312.121322][ T7145] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  312.159016][ T7145] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  312.179482][T10057] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  312.217804][T10057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  312.244717][ T7145] usb 5-1: config 0 descriptor??
[  312.262945][T10925] device bridge_slave_1 entered promiscuous mode
[  312.284049][ T7616] ocfs2: Unmounting device (7,6) on (node local)
[  312.298487][T10044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  312.497931][T10048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  312.539670][T10048] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  312.578673][T10048] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  312.636903][T10048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  312.677507][T10048] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  312.740371][ T7145] HID 045e:07da: Invalid code 65791 type 1
[  312.787958][T10057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  312.819861][ T7145] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0016/input/input34
[  312.833314][T10057] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  312.865455][T10057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  312.889681][T10935] loop1: detected capacity change from 0 to 4096
[  312.908437][ T7145] microsoft 0003:045E:07DA.0016: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  312.923405][T10057] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  312.941388][T10707] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  312.992656][T10935] EXT4-fs (loop1): Ignoring removed nobh option
[  313.012432][T10935] EXT4-fs (loop1): Test dummy encryption mode enabled
[  313.052714][T10935] EXT4-fs (loop1): Ignoring removed bh option
[  313.066642][T10940] net_ratelimit: 48 callbacks suppressed
[  313.066658][T10940] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check.
[  313.106690][ T7239] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  313.116186][T10935] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,nobh,nodioread_nolock,test_dummy_encryption,lazytime,nojournal_checksum,minixdf,bh,,errors=continue. Quota mode: writeback.
[  313.507045][ T7239] usb 7-1: config 0 has too many interfaces: 253, using maximum allowed: 32
[  313.518217][ T7239] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 253
[  313.531124][T10057] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  313.565348][T10057] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  313.594632][T10707] 8021q: adding VLAN 0 to HW filter on device batadv0
[  313.605563][ T7238] usb 5-1: USB disconnect, device number 14
[  313.759691][ T7239] usb 7-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac
[  313.788205][ T7239] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  313.831591][ T7239] usb 7-1: Product: syz
[  313.854327][ T7239] usb 7-1: Manufacturer: syz
[  313.875020][ T7239] usb 7-1: SerialNumber: syz
[  313.908689][ T7239] usb 7-1: config 0 descriptor??
[  313.946902][ T4270] Bluetooth: hci3: command 0x0406 tx timeout
[  313.979585][ T7239] gspca_main: sunplus-2.14.0 probing 055f:c630
[  314.288850][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  314.309269][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  314.391031][T10042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  314.400696][T10042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  314.434684][T10707] device veth0_vlan entered promiscuous mode
[  314.452905][T10042] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  314.473301][T10042] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  314.524120][T10707] device veth1_vlan entered promiscuous mode
[  314.572568][T10982] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2142'.
[  314.636823][ T7239] gspca_sunplus: reg_r err -71
[  314.641723][ T7239] sunplus: probe of 7-1:0.0 failed with error -71
[  314.691236][ T7239] usb 7-1: USB disconnect, device number 7
[  314.732468][T10057] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  314.751317][T10057] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  314.798302][T10057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  314.835091][T10057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  314.861466][T10707] device veth0_macvtap entered promiscuous mode
[  314.896948][T10057] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  314.922732][T10707] device veth1_macvtap entered promiscuous mode
[  315.053538][T10707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  315.084824][T10707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  315.107842][T10707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  315.161983][T10707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  315.205722][T10707] batman_adv: batadv0: Interface activated: batadv_slave_0
[  315.236011][T10044] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  315.283092][T10044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  315.325374][T10707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  315.353313][T10707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  315.395988][T10707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  315.419964][T10707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  315.461311][T10707] batman_adv: batadv0: Interface activated: batadv_slave_1
[  315.518849][T10057] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  315.537515][T10057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  315.553043][T10707] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  315.573633][T10999] fuse: Bad value for 'fd'
[  315.582588][T10707] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  315.620527][T10707] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  315.665256][T10707] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  315.957124][T11011] loop1: detected capacity change from 0 to 512
[  316.010803][  T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  316.033311][  T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  316.073739][T10057] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  316.170658][T10057] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  316.214874][T10057] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  316.259687][T10057] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  316.637294][T11030] loop7: detected capacity change from 0 to 4096
[  316.700396][T11030] EXT4-fs (loop7): Ignoring removed nobh option
[  316.736303][T11030] EXT4-fs (loop7): Test dummy encryption mode enabled
[  316.776735][T11030] EXT4-fs (loop7): Ignoring removed bh option
[  316.849410][T11030] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpid,nobh,nodioread_nolock,test_dummy_encryption,lazytime,nojournal_checksum,minixdf,bh,,errors=continue. Quota mode: writeback.
[  316.994151][ T1425] ieee802154 phy0 wpan0: encryption failed: -22
[  317.000519][ T1425] ieee802154 phy1 wpan1: encryption failed: -22
[  317.795211][T11026] loop4: detected capacity change from 0 to 40427
[  317.831183][T11026] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  317.855592][T11026] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  317.902772][T11026] F2FS-fs (loop4): invalid crc value
[  317.962332][T11026] F2FS-fs (loop4): Found nat_bits in checkpoint
[  318.116564][    C0] net_ratelimit: 76 callbacks suppressed
[  318.202847][T11053] loop6: detected capacity change from 0 to 32768
[  318.218265][T11026] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  318.235421][T11026] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  318.297187][T11076] netlink: 'syz.3.2168': attribute type 1 has an invalid length.
[  318.323400][T11076] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2168'.
[  318.343952][T11053] JBD2: Ignoring recovery information on journal
[  318.567795][T11053] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  318.767297][T11092] loop7: detected capacity change from 0 to 256
[  318.932877][T11092] FAT-fs (loop7): Directory bread(block 64) failed
[  318.971565][T11092] FAT-fs (loop7): Directory bread(block 65) failed
[  318.979492][T10048] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  318.999248][T11092] FAT-fs (loop7): Directory bread(block 66) failed
[  319.000354][T10048] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  319.041693][T11092] FAT-fs (loop7): Directory bread(block 67) failed
[  319.069142][T11092] FAT-fs (loop7): Directory bread(block 68) failed
[  319.075889][T11092] FAT-fs (loop7): Directory bread(block 69) failed
[  319.176866][   T26] kauditd_printk_skb: 20 callbacks suppressed
[  319.176883][   T26] audit: type=1326 audit(1793920077.020:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11102 comm="syz.3.2176" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a46f59b19 code=0x7ffc0000
[  319.209673][T11092] FAT-fs (loop7): Directory bread(block 70) failed
[  319.216313][T11092] FAT-fs (loop7): Directory bread(block 71) failed
[  319.279858][T11092] FAT-fs (loop7): Directory bread(block 72) failed
[  319.296438][   T26] audit: type=1326 audit(1793920077.030:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11102 comm="syz.3.2176" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a46f59b19 code=0x7ffc0000
[  319.341003][T11092] FAT-fs (loop7): Directory bread(block 73) failed
[  319.384992][T11108] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2178'.
[  319.406306][   T26] audit: type=1326 audit(1793920077.030:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11102 comm="syz.3.2176" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a46f59b19 code=0x7ffc0000
[  319.516048][ T7616] ocfs2: Unmounting device (7,6) on (node local)
[  319.522155][   T26] audit: type=1326 audit(1793920077.080:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11102 comm="syz.3.2176" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f0a46f59b19 code=0x7ffc0000
[  319.655593][   T26] audit: type=1326 audit(1793920077.080:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11102 comm="syz.3.2176" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a46f59b19 code=0x7ffc0000
[  319.819976][   T26] audit: type=1326 audit(1793920077.080:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11102 comm="syz.3.2176" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a46f59b19 code=0x7ffc0000
[  319.926024][   T26] audit: type=1326 audit(1793920077.080:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11102 comm="syz.3.2176" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a46f59b19 code=0x7ffc0000
[  320.004221][   T26] audit: type=1326 audit(1793920077.080:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11102 comm="syz.3.2176" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a46f59b19 code=0x7ffc0000
[  320.052048][T11123] block device autoloading is deprecated and will be removed.
[  320.106062][T11123] md: invalid raid superblock magic on ram12
[  320.106088][T11123] md: ram12 does not have a valid v0.0 superblock, not importing!
[  320.122439][   T26] audit: type=1326 audit(1793920077.080:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11102 comm="syz.3.2176" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0a46f59b19 code=0x7ffc0000
[  320.190346][T11123] md: md_import_device returned -22
[  320.204197][   T26] audit: type=1326 audit(1793920077.080:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11102 comm="syz.3.2176" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a46f59b19 code=0x7ffc0000
[  320.235404][T11125] md: invalid raid superblock magic on ram13
[  320.255339][T11125] md: ram13 does not have a valid v0.0 superblock, not importing!
[  320.302596][T11125] md: md_import_device returned -22
[  320.471148][T11136] loop6: detected capacity change from 0 to 1024
[  320.587702][T11136] EXT4-fs (loop6): Ignoring removed bh option
[  320.651636][T11136] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,jqfmt=vfsv1,abort,debug_want_extra_isize=0x0000000000000008,lazytime,errors=remount-ro,stripe=0x0000000000000007,bh,auto_da_alloc,. Quota mode: none.
[  320.865639][T10048] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  321.219963][T11128] loop1: detected capacity change from 0 to 32768
[  321.781204][T11138] loop4: detected capacity change from 0 to 32768
[  321.839937][T11138] (syz.4.2185,11138,1):ocfs2_parse_options:1447 ERROR: Unrecognized mount option "" or missing value
[  321.933480][T11138] (syz.4.2185,11138,0):ocfs2_fill_super:1177 ERROR: status = -22
[  322.506784][T11160] ceph: No mds server is up or the cluster is laggy
[  323.030231][T11203] bridge0: port 2(bridge_slave_1) entered disabled state
[  323.039711][T11203] bridge0: port 1(bridge_slave_0) entered disabled state
[  323.066423][T11203] bridge0: port 2(bridge_slave_1) entered blocking state
[  323.074296][T11203] bridge0: port 2(bridge_slave_1) entered forwarding state
[  323.085845][T11203] bridge0: port 1(bridge_slave_0) entered blocking state
[  323.093029][T11203] bridge0: port 1(bridge_slave_0) entered forwarding state
[  323.146558][    C0] net_ratelimit: 59 callbacks suppressed
[  323.195171][T11203] team0: Port device bridge0 added
[  323.479690][T11212] loop1: detected capacity change from 0 to 256
[  323.624549][T11212] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xdd63664a, utbl_chksum : 0xe619d30d)
[  323.813970][T11198] loop4: detected capacity change from 0 to 32768
[  324.088514][T11198] XFS (loop4): Mounting V5 Filesystem
[  324.289570][T11198] XFS (loop4): Ending clean mount
[  324.321999][   T26] kauditd_printk_skb: 12 callbacks suppressed
[  324.322014][   T26] audit: type=1326 audit(1793920082.170:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11238 comm="syz.6.2209" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f89b13b7b19 code=0x0
[  324.322031][T11198] XFS (loop4): Quotacheck needed: Please wait.
[  324.576732][T11198] XFS (loop4): Quotacheck: Done.
[  324.774098][ T4196] XFS (loop4): Unmounting Filesystem
[  325.509863][T11272] bridge0: port 3(syz_tun) entered blocking state
[  325.519494][T11272] bridge0: port 3(syz_tun) entered disabled state
[  325.542386][T11272] device syz_tun entered promiscuous mode
[  325.568635][T11272] bridge0: port 3(syz_tun) entered blocking state
[  325.575191][T11272] bridge0: port 3(syz_tun) entered forwarding state
[  325.851844][T11293] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2228'.
[  326.406925][   T21] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  326.668905][T11287] loop1: detected capacity change from 0 to 32768
[  326.776966][   T21] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  326.826183][   T21] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  326.855342][   T21] usb 7-1: New USB device found, idVendor=0a5c, idProduct=21e1, bcdDevice= 1.00
[  326.866689][   T21] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  326.885302][T11287] XFS (loop1): Mounting V5 Filesystem
[  326.953016][ T4205] Bluetooth: hci5: urb ffff888071748d00 submission failed (90)
[  326.990775][T11287] XFS (loop1): Ending clean mount
[  327.186334][T11287] XFS (loop1): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair.
[  327.216234][ T7239] usb 7-1: USB disconnect, device number 8
[  327.365409][ T9993] XFS (loop1): Unmounting Filesystem
[  327.430246][    C1] vkms_vblank_simulate: vblank timer overrun
[  327.456954][T11331] 9pnet: p9_errstr2errno: server reported unknown error e_1
[  328.065257][T11349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2239'.
[  328.186603][    C1] net_ratelimit: 76 callbacks suppressed
[  328.498385][T11358] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  328.534980][T11335] loop4: detected capacity change from 0 to 32768
[  328.617504][T11335] JBD2: Ignoring recovery information on journal
[  328.769609][T11335] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  328.807657][T11346] loop6: detected capacity change from 0 to 32768
[  328.908249][T11346] XFS (loop6): Mounting V5 Filesystem
[  329.039655][ T4196] ocfs2: Unmounting device (7,4) on (node local)
[  329.086627][   T21] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  329.131343][T11346] XFS (loop6): Ending clean mount
[  329.293837][ T7616] XFS (loop6): Unmounting Filesystem
[  329.329578][   T21] usb 2-1: Using ep0 maxpacket: 32
[  329.484775][T11393] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  329.657027][   T21] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  329.666166][   T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  329.705831][   T21] usb 2-1: Product: syz
[  329.720250][   T21] usb 2-1: Manufacturer: syz
[  329.736918][   T21] usb 2-1: SerialNumber: syz
[  329.760163][   T21] usb 2-1: config 0 descriptor??
[  329.819276][   T21] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  329.875416][   T21] dvb-usb: bulk message failed: -22 (4/0)
[  329.901462][   T21] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  329.931043][   T21] dvb-usb: bulk message failed: -22 (5/0)
[  329.946174][   T21] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  330.013968][   T21] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  330.026395][T11364] ttusb2: i2c wr len=58 too high
[  330.084060][   T21] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  330.135103][   T21] usb 2-1: media controller created
[  330.334384][   T21] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  330.354339][T11427] loop7: detected capacity change from 0 to 64
[  330.456140][   T21] usb 2-1: selecting invalid altsetting 3
[  330.486958][   T21] ttusb2: set interface to alts=3 failed
[  330.715403][   T21] DVB: Unable to find symbol tda10086_attach()
[  330.725671][T11436] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2257'.
[  330.739397][   T21] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  330.784920][T11441] device ip6erspan0 entered promiscuous mode
[  330.811882][   T21] dvb-usb: bulk message failed: -22 (4/0)
[  330.823867][   T21] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  330.852083][   T21] dvb-usb: bulk message failed: -22 (5/0)
[  330.869800][   T21] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  330.902611][   T21] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  330.954731][   T21] usb 2-1: USB disconnect, device number 24
[  331.117338][T11450] netlink: 'syz.3.2263': attribute type 1 has an invalid length.
[  331.172674][   T21] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  331.187993][T11450] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.2263'.
[  331.307917][ T7144] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  331.681446][ T7144] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  331.709375][ T7144] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  331.754255][ T7144] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  331.792569][ T7144] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  331.833302][ T7144] usb 5-1: config 0 descriptor??
[  331.861544][T11464] loop1: detected capacity change from 0 to 2048
[  331.917432][T11464] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  332.259582][T11471] loop7: detected capacity change from 0 to 256
[  332.358772][T11473] loop1: detected capacity change from 0 to 512
[  332.422348][T11471] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  332.461736][T11473] EXT4-fs error (device loop1): ext4_orphan_get:1410: inode #15: comm syz.1.2271: inode has both inline data and extents flags
[  332.490252][T11473] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.2271: couldn't read orphan inode 15 (err -117)
[  332.534972][T11473] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback.
[  332.556951][ T7144] usb 5-1: string descriptor 0 read error: -22
[  332.816422][ T7144] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0017/input/input35
[  332.951208][ T7144] uclogic 0003:256C:006D.0017: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.4-1/input0
[  333.053813][ T7239] usb 5-1: USB disconnect, device number 15
[  333.161860][T11493] fido_id[11493]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory
[  333.226596][    C1] net_ratelimit: 55 callbacks suppressed
[  333.260018][ T4592] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  333.677098][ T4592] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 1.00
[  333.701124][ T4592] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  333.747902][ T4592] usb 2-1: config 0 descriptor??
[  333.790699][T11498] 9pnet: p9_fd_create_tcp (11498): problem connecting socket to 127.0.0.1
[  334.285779][ T4592] wacom 0003:056A:0331.0018: hidraw0: USB HID v1.10 Device [HID 056a:0331] on usb-dummy_hcd.1-1/input0
[  334.342572][T11511] loop4: detected capacity change from 0 to 512
[  334.424515][T11511] EXT4-fs error (device loop4): ext4_orphan_get:1410: inode #15: comm syz.4.2280: iget: bad i_size value: 38620345925642
[  334.447072][T11511] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.2280: couldn't read orphan inode 15 (err -117)
[  334.466597][T11511] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  334.520505][T11511] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.2280: bg 0: block 5: invalid block bitmap
[  334.816142][ T4592] usb 2-1: USB disconnect, device number 25
[  335.038178][T11505] loop7: detected capacity change from 0 to 40427
[  335.074720][T11505] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[  335.131475][T11505] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  335.186755][T11505] F2FS-fs (loop7): invalid crc value
[  335.242961][T11505] F2FS-fs (loop7): Found nat_bits in checkpoint
[  335.445857][T11505] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  335.454219][T11505] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  335.763838][T11569] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  335.932270][T10042] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  335.952368][T10042] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  335.965561][T11582] loop1: detected capacity change from 0 to 64
[  336.209277][   T26] audit: type=1326 audit(1793920094.060:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11591 comm="syz.3.2303" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a46f59b19 code=0x7ffc0000
[  336.309777][   T26] audit: type=1326 audit(1793920094.060:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11591 comm="syz.3.2303" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a46f59b19 code=0x7ffc0000
[  336.430947][   T26] audit: type=1326 audit(1793920094.060:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11591 comm="syz.3.2303" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a46f59b19 code=0x7ffc0000
[  336.542346][   T26] audit: type=1326 audit(1793920094.060:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11591 comm="syz.3.2303" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f0a46f59b19 code=0x7ffc0000
[  336.572672][T11597] loop4: detected capacity change from 0 to 2048
[  336.648163][   T26] audit: type=1326 audit(1793920094.060:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11591 comm="syz.3.2303" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a46f59b19 code=0x7ffc0000
[  336.721216][T11597] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  336.800138][   T26] audit: type=1326 audit(1793920094.060:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11591 comm="syz.3.2303" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a46f59b19 code=0x7ffc0000
[  336.947069][   T26] audit: type=1326 audit(1793920094.060:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11591 comm="syz.3.2303" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a46f59b19 code=0x7ffc0000
[  337.117637][   T26] audit: type=1326 audit(1793920094.060:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11591 comm="syz.3.2303" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a46f59b19 code=0x7ffc0000
[  337.192705][   T26] audit: type=1326 audit(1793920094.060:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11591 comm="syz.3.2303" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f0a46f59b19 code=0x7ffc0000
[  337.216946][    C0] vkms_vblank_simulate: vblank timer overrun
[  337.272108][   T26] audit: type=1326 audit(1793920094.060:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11591 comm="syz.3.2303" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a46f59b19 code=0x7ffc0000
[  337.495148][ T4196] UDF-fs: error (device loop4): udf_read_inode: (ino 1345) failed !bh
[  337.531497][ T4196] UDF-fs: error (device loop4): udf_read_inode: (ino 1345) failed !bh
[  338.426542][    C1] net_ratelimit: 73 callbacks suppressed
[  338.774783][T11623] loop1: detected capacity change from 0 to 40427
[  338.821839][T11623] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  338.853713][T11623] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  338.885701][T11623] F2FS-fs (loop1): invalid crc value
[  338.955719][T11623] F2FS-fs (loop1): Found nat_bits in checkpoint
[  339.091315][T11671] loop6: detected capacity change from 0 to 512
[  339.195001][T11672] rxe_eth0 speed is unknown, defaulting to 1000
[  339.199736][T11671] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  339.247253][T11623] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  339.254457][T11623] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  339.262309][T11671] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (35405!=33349)
[  339.278699][T11671] EXT4-fs (loop6): orphan cleanup on readonly fs
[  339.306823][T11671] EXT4-fs (loop6): 1 truncate cleaned up
[  339.334252][T11671] EXT4-fs (loop6): mounted filesystem without journal. Opts: barrier,stripe=0x0000000000003334,debug_want_extra_isize=0x0000000000000068,jqfmt=vfsv1,noinit_itable,quota,jqfmt=vfsold,,errors=continue. Quota mode: writeback.
[  339.411565][T11672] bond0 speed is unknown, defaulting to 1000
[  339.929217][T10048] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  339.946766][T10048] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  340.010428][T11672] chnl_net:caif_netlink_parms(): no params data found
[  340.143180][T11698] loop6: detected capacity change from 0 to 256
[  340.431743][    C0] vkms_vblank_simulate: vblank timer overrun
[  340.749350][T11672] bridge0: port 1(bridge_slave_0) entered blocking state
[  340.789797][T11672] bridge0: port 1(bridge_slave_0) entered disabled state
[  340.836046][T11672] device bridge_slave_0 entered promiscuous mode
[  340.879326][T11672] bridge0: port 2(bridge_slave_1) entered blocking state
[  340.895052][T11672] bridge0: port 2(bridge_slave_1) entered disabled state
[  340.913709][T11672] device bridge_slave_1 entered promiscuous mode
[  341.091870][T11672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  341.123356][T11672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  341.226637][ T7238] Bluetooth: hci4: command 0x0409 tx timeout
[  341.292812][T11672] team0: Port device team_slave_0 added
[  341.314870][T11672] team0: Port device team_slave_1 added
[  341.472496][T11672] batman_adv: batadv0: Adding interface: batadv_slave_0
[  341.513143][T11672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  341.539100][    C0] vkms_vblank_simulate: vblank timer overrun
[  341.566632][T11672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  341.588741][T11672] batman_adv: batadv0: Adding interface: batadv_slave_1
[  341.595734][T11672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  341.621761][    C0] vkms_vblank_simulate: vblank timer overrun
[  341.683893][T11672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  342.024229][T11672] device hsr_slave_0 entered promiscuous mode
[  342.075477][T11672] device hsr_slave_1 entered promiscuous mode
[  342.115110][T11672] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  342.132945][T11672] Cannot create hsr debugfs directory
[  342.575421][T11766] netlink: 'syz.6.2342': attribute type 3 has an invalid length.
[  342.829625][T11773] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=557445556 (35676515584 ns) > initial count (26783918592 ns). Using initial count to start timer.
[  343.172130][T11786] loop6: detected capacity change from 0 to 4096
[  343.313141][T11794] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  343.316994][ T8717] Bluetooth: hci4: command 0x041b tx timeout
[  343.556644][    C0] net_ratelimit: 60 callbacks suppressed
[  343.651316][T11787] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2346'.
[  343.813156][T11802] loop7: detected capacity change from 0 to 128
[  343.890370][T11802] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  343.929355][T11802] ext4 filesystem being mounted at /30/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  343.968664][T11672] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  344.055503][T11672] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  344.066232][T11802] syz.7.2349 (pid 11802) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  344.086281][T11672] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  344.128345][T11672] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  344.344136][T11816] netlink: 'syz.3.2353': attribute type 3 has an invalid length.
[  344.450006][T11822] loop6: detected capacity change from 0 to 256
[  344.560635][T11822] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d)
[  344.696724][T11672] 8021q: adding VLAN 0 to HW filter on device bond0
[  344.789014][T10050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  344.821916][T10050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  344.873749][T11672] 8021q: adding VLAN 0 to HW filter on device team0
[  344.909861][T10050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  344.937695][T10050] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  345.020067][T10050] bridge0: port 1(bridge_slave_0) entered blocking state
[  345.027255][T10050] bridge0: port 1(bridge_slave_0) entered forwarding state
[  345.086345][T10050] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  345.111667][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  345.131841][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  345.171549][  T155] bridge0: port 2(bridge_slave_1) entered blocking state
[  345.178734][  T155] bridge0: port 2(bridge_slave_1) entered forwarding state
[  345.232728][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  345.272754][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  345.387258][ T8717] Bluetooth: hci4: command 0x040f tx timeout
[  345.401666][T10057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  345.440305][T10057] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  345.461452][T10057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  345.482223][T10057] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  345.516241][ T4204] block nbd1: Receive control failed (result -107)
[  345.542895][T10057] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  345.575742][T10057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  345.610441][T10057] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  345.620916][T10057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  345.629932][T10057] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  345.643354][T11672] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  345.655759][T11869] block nbd1: shutting down sockets
[  346.069087][T11890] page:ffffea0004200000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000
[  346.107595][T11890] flags: 0x17ff00000001000(reserved|node=0|zone=2|lastcpupid=0x7ff)
[  346.115663][T11890] raw: 017ff00000001000 ffffea0004200008 ffffea0004200008 0000000000000000
[  346.115855][T11890] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[  346.115874][T11890] page dumped because: unmovable page
[  346.115887][T11890] page_owner info is not present (never set?)
[  346.203709][T10042] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  346.226913][T10042] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  346.240509][T11672] 8021q: adding VLAN 0 to HW filter on device batadv0
[  346.258586][T11897] page:ffffea0001c50000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x71400
[  346.337740][T11897] head:ffffea0001c50000 order:2 compound_mapcount:0 compound_pincount:0
[  346.384293][T11897] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  346.416686][T11897] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888017841c80
[  346.456725][T11897] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[  346.496602][T11897] page dumped because: unmovable page
[  346.526628][T11897] page_owner tracks the page as allocated
[  346.546717][T11897] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 11777, ts 343543805020, free_ts 338412216040
[  346.622765][T11897]  get_page_from_freelist+0x24f6/0x2670
[  346.638066][T11897]  __alloc_pages+0x1ee/0x480
[  346.652638][T11897]  new_slab+0xc0/0x4b0
[  346.675143][T11897]  ___slab_alloc+0x807/0xdd0
[  346.683572][T11897]  __kmalloc_node_track_caller+0x13d/0x3a0
[  346.704598][T11897]  pskb_expand_head+0x128/0x1100
[  346.729069][T11897]  bpf_clone_redirect+0x1c2/0x460
[  346.745494][T11897]  0xffffffffa0030d45
[  346.754846][T11897]  bpf_test_run+0x2a8/0x800
[  346.774111][T11897]  bpf_prog_test_run_skb+0x9fb/0x1190
[  346.801401][T11897]  bpf_prog_test_run+0x31c/0x390
[  346.813649][T11897]  __sys_bpf+0x5a5/0x6f0
[  346.853951][T11897]  __x64_sys_bpf+0x78/0x90
[  346.893022][T11897]  do_syscall_64+0x4c/0xa0
[  346.909745][T11897]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  346.923304][T11897] page last free stack trace:
[  346.932265][T11897]  free_unref_page_prepare+0x637/0x6c0
[  346.943556][T11897]  free_unref_page+0x8f/0x2a0
[  346.951171][T11897]  __vunmap+0x8e0/0xa80
[  346.955520][T11897]  kcov_close+0x27/0x50
[  346.965182][T11897]  __fput+0x212/0x8c0
[  346.972070][T11897]  task_work_run+0x125/0x1a0
[  346.981754][T11897]  do_exit+0x635/0x2100
[  346.986071][T11897]  do_group_exit+0x12c/0x2f0
[  347.019284][T11897]  __x64_sys_exit_group+0x3b/0x40
[  347.033510][T10042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  347.042717][T11897]  do_syscall_64+0x4c/0xa0
[  347.048260][T11897]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  347.067064][T10042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  347.118175][T10042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  347.131392][T10042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  347.153143][T11672] device veth0_vlan entered promiscuous mode
[  347.175303][T10042] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  347.184976][T10042] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  347.205155][T11672] device veth1_vlan entered promiscuous mode
[  347.357922][T10050] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  347.383831][T10050] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  347.392857][T10050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  347.423428][T10050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  347.448042][T11672] device veth0_macvtap entered promiscuous mode
[  347.466668][ T7144] Bluetooth: hci4: command 0x0419 tx timeout
[  347.483194][T11672] device veth1_macvtap entered promiscuous mode
[  347.570899][T11672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  347.594450][T11672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  347.605590][T11672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  347.605612][T11672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  347.605639][T11672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  347.642039][T11672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  347.695039][T11672] batman_adv: batadv0: Interface activated: batadv_slave_0
[  347.731898][T10050] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  347.748188][T10050] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  347.767964][T10050] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  347.803009][T10050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  347.827935][T11672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  347.843692][T11672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  347.862855][T11672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  347.884147][T11672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  347.896212][T11672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  347.913793][T11672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  347.928031][T11672] batman_adv: batadv0: Interface activated: batadv_slave_1
[  347.937904][T10042] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  347.948345][T10042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  347.960798][T11672] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  347.972117][T11672] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  347.981340][T11672] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  347.996847][T11672] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  348.206930][T10050] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  348.225271][T10050] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  348.260771][T10057] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  348.353953][T10042] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  348.370906][T10042] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  348.417882][T10057] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  348.624866][T11970] bridge_slave_1: default FDB implementation only supports local addresses
[  348.668300][T11971] overlayfs: failed to clone lowerpath
[  348.698492][T11971] overlayfs: failed to clone lowerpath
[  348.782585][T11967] loop7: detected capacity change from 0 to 8192
[  348.851226][T11967] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  348.907070][    C1] net_ratelimit: 90 callbacks suppressed
[  349.520362][T12005] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2409'.
[  349.540708][T12005] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2409'.
[  349.559221][T12005] netlink: 'syz.3.2409': attribute type 11 has an invalid length.
[  349.573529][T12005] netlink: 'syz.3.2409': attribute type 12 has an invalid length.
[  349.595490][T12005] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2409'.
[  349.619445][T12005] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2409'.
[  349.646561][T12005] netlink: 'syz.3.2409': attribute type 11 has an invalid length.
[  349.654427][T12005] netlink: 'syz.3.2409': attribute type 12 has an invalid length.
[  349.703791][   T26] kauditd_printk_skb: 299 callbacks suppressed
[  349.703806][   T26] audit: type=1326 audit(1793920107.550:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12009 comm="syz.8.2411" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f236644fb19 code=0x7ffc0000
[  349.827779][   T26] audit: type=1326 audit(1793920107.590:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12009 comm="syz.8.2411" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f236644fb19 code=0x7ffc0000
[  349.907803][   T26] audit: type=1326 audit(1793920107.600:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12009 comm="syz.8.2411" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f236644fb19 code=0x7ffc0000
[  349.992814][   T26] audit: type=1326 audit(1793920107.600:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12009 comm="syz.8.2411" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f236644fb19 code=0x7ffc0000
[  350.051085][   T26] audit: type=1326 audit(1793920107.600:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12009 comm="syz.8.2411" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f236644fb19 code=0x7ffc0000
[  350.077985][   T26] audit: type=1326 audit(1793920107.600:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12009 comm="syz.8.2411" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f236644fb19 code=0x7ffc0000
[  350.146145][   T26] audit: type=1326 audit(1793920107.600:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12009 comm="syz.8.2411" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f236644fb19 code=0x7ffc0000
[  350.247028][   T26] audit: type=1326 audit(1793920107.600:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12009 comm="syz.8.2411" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f236644fb19 code=0x7ffc0000
[  350.362958][   T26] audit: type=1326 audit(1793920107.600:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12009 comm="syz.8.2411" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f236644fb19 code=0x7ffc0000
[  350.466046][   T26] audit: type=1326 audit(1793920107.600:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12009 comm="syz.8.2411" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f236644fb19 code=0x7ffc0000
[  351.096083][T12074] netlink: 428 bytes leftover after parsing attributes in process `syz.3.2425'.
[  351.143633][T12076] input: syz1 as /devices/virtual/input/input39
[  351.154451][T12074] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2425'.
[  351.303437][T12085] jffs2: notice: (12085) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  351.409522][T12091] netlink: 'syz.7.2430': attribute type 2 has an invalid length.
[  351.484529][ T4587] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  351.530483][ T4587] hid-generic 0000:0000:0000.0019: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  351.935881][T12114] bridge0: port 1(vlan2) entered blocking state
[  352.040174][T12114] bridge0: port 1(vlan2) entered disabled state
[  352.097247][T12114] device vlan2 entered promiscuous mode
[  352.102871][T12114] device vlan0 entered promiscuous mode
[  352.305923][T12126] loop6: detected capacity change from 0 to 512
[  352.469716][T12126] EXT4-fs (loop6): mounted filesystem without journal. Opts: quota,noload,init_itable,,errors=continue. Quota mode: writeback.
[  352.598118][T12140] binder: 12139:12140 ioctl c0306201 2000000003c0 returned -14
[  352.608132][T12126] ext4 filesystem being mounted at /245/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  352.692379][T12126] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  352.741598][T12143] sch_tbf: burst 7 is lower than device bridge0 mtu (1514) !
[  352.760411][T12126] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28
[  352.804061][T12150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2446'.
[  352.851295][T12126] EXT4-fs (loop6): This should not happen!! Data will be lost
[  352.851295][T12126] 
[  352.897869][T12150] sch_tbf: peakrate 78 is lower than or equals to rate 3850 !
[  352.989813][T12126] EXT4-fs (loop6): Total free blocks count 0
[  353.018001][T12126] EXT4-fs (loop6): Free/Dirty block details
[  353.080189][T12126] EXT4-fs (loop6): free_blocks=65280
[  353.117022][T12126] EXT4-fs (loop6): dirty_blocks=33
[  353.158399][T12126] EXT4-fs (loop6): Block reservation details
[  353.164568][T12126] EXT4-fs (loop6): i_reserved_data_blocks=33
[  353.309100][T12172] netlink: 'syz.1.2454': attribute type 1 has an invalid length.
[  353.408505][T12172] 8021q: adding VLAN 0 to HW filter on device bond1
[  353.489326][T12178] bond1: (slave erspan1): making interface the new active one
[  353.507900][T12178] bond1: (slave erspan1): Enslaving as an active interface with an up link
[  353.524365][T10057] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  353.543731][T12175] netlink: 'syz.3.2456': attribute type 4 has an invalid length.
[  353.801839][T12195] gadgetfs: bound to dummy_udc driver
[  354.106555][    C1] net_ratelimit: 81 callbacks suppressed
[  354.433432][ T7145] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  354.483081][ T8717] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0
[  354.545631][ T8717] hid-generic 0000:0000:0000.001A: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  354.556253][T12226] jffs2: notice: (12226) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  354.708109][   T26] kauditd_printk_skb: 2664 callbacks suppressed
[  354.708123][   T26] audit: type=1326 audit(1793920112.560:3075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12203 comm="syz.1.2463" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc65a96834e code=0x7ffc0000
[  354.718076][   T26] audit: type=1326 audit(1793920112.560:3076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12203 comm="syz.1.2463" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc65a948e99 code=0x7ffc0000
[  354.837677][ T7145] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  354.860043][   T26] audit: type=1326 audit(1793920112.560:3077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12203 comm="syz.1.2463" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc65a9a1897 code=0x7ffc0000
[  354.870650][ T7145] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  354.903343][    C1] vcan0: j1939_tp_rxtimer: 0xffff888060883000: rx timeout, send abort
[  354.910020][   T26] audit: type=1326 audit(1793920112.560:3078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12203 comm="syz.1.2463" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc65a96834e code=0x7ffc0000
[  354.936293][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888060883000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[  354.946479][    C0] hrtimer: interrupt took 148228 ns
[  354.962319][   T26] audit: type=1326 audit(1793920112.620:3080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12203 comm="syz.1.2463" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc65a96834e code=0x7ffc0000
[  354.996810][ T7145] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[  355.005920][ T7145] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  355.046776][ T7145] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  355.066554][   T26] audit: type=1326 audit(1793920112.560:3079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12203 comm="syz.1.2463" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc65a948e99 code=0x7ffc0000
[  355.127718][   T26] audit: type=1326 audit(1793920112.620:3081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12203 comm="syz.1.2463" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc65a9a1897 code=0x7ffc0000
[  355.170286][   T26] audit: type=1326 audit(1793920112.620:3082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12203 comm="syz.1.2463" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc65a948e99 code=0x7ffc0000
[  355.204607][   T26] audit: type=1326 audit(1793920112.620:3083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12203 comm="syz.1.2463" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc65a9a1897 code=0x7ffc0000
[  355.229586][ T7145] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  355.238746][ T7145] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  355.246861][ T7145] usb 7-1: Product: syz
[  355.251077][ T7145] usb 7-1: Manufacturer: syz
[  355.273734][   T26] audit: type=1326 audit(1793920112.620:3084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12203 comm="syz.1.2463" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc65a948e99 code=0x7ffc0000
[  355.318124][ T7145] cdc_wdm 7-1:1.0: skipping garbage
[  355.323442][ T7145] cdc_wdm 7-1:1.0: skipping garbage
[  355.380432][ T7145] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[  355.386434][ T7145] cdc_wdm 7-1:1.0: Unknown control protocol
[  356.021077][ T7145] usb 7-1: USB disconnect, device number 9
[  461.026441][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  461.033458][    C1] rcu: 	0-...!: (1 GPs behind) idle=aef/1/0x4000000000000000 softirq=35818/35819 fqs=5 
[  461.046004][    C1] 	(detected by 1, t=10502 jiffies, g=56449, q=212)
[  461.052641][    C1] Sending NMI from CPU 1 to CPUs 0:
[  461.057902][    C0] NMI backtrace for cpu 0
[  461.057915][    C0] CPU: 0 PID: 14 Comm: ksoftirqd/0 Not tainted syzkaller #0
[  461.057941][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  461.057952][    C0] RIP: 0010:mark_lock+0x56/0x320
[  461.057975][    C0] Code: 03 42 0f b6 04 28 84 c0 0f 85 74 02 00 00 41 0f b6 47 02 24 03 3c 01 bd 09 00 00 00 83 dd 00 41 bc 01 00 00 00 89 e9 41 d3 e4 <4d> 8d 7e 20 4c 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 22 02
[  461.057990][    C0] RSP: 0018:ffffc900000078e0 EFLAGS: 00000002
[  461.058006][    C0] RAX: 0000000000000000 RBX: ffff88813fea9dc0 RCX: 0000000000000004
[  461.058017][    C0] RDX: 0000000000000004 RSI: ffff88813feaa928 RDI: ffff88813fea9dc0
[  461.058030][    C0] RBP: 0000000000000004 R08: dffffc0000000000 R09: 1ffffffff2208e62
[  461.058042][    C0] R10: dffffc0000000000 R11: fffffbfff2208e63 R12: 0000000000000010
[  461.058055][    C0] R13: dffffc0000000000 R14: ffff88813feaa928 R15: ffff88813feaa948
[  461.058069][    C0] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  461.058085][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  461.058097][    C0] CR2: 0000555558d444e8 CR3: 00000000205c6000 CR4: 00000000003526f0
[  461.058114][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  461.058124][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  461.058148][    C0] Call Trace:
[  461.058156][    C0]  <IRQ>
[  461.058198][    C0]  __lock_acquire+0xd77/0x7d40
[  461.058236][    C0]  ? verify_lock_unused+0x140/0x140
[  461.058256][    C0]  ? mark_lock+0x94/0x320
[  461.058277][    C0]  ? verify_lock_unused+0x140/0x140
[  461.058299][    C0]  lock_acquire+0x19f/0x400
[  461.058317][    C0]  ? advance_sched+0x49/0x920
[  461.058339][    C0]  ? read_lock_is_recursive+0x10/0x10
[  461.058359][    C0]  ? __rwlock_init+0x140/0x140
[  461.058378][    C0]  ? taprio_free_sched_cb+0x190/0x190
[  461.058396][    C0]  _raw_spin_lock+0x2a/0x40
[  461.058413][    C0]  ? advance_sched+0x49/0x920
[  461.058428][    C0]  advance_sched+0x49/0x920
[  461.058444][    C0]  ? _raw_spin_unlock+0x40/0x40
[  461.058462][    C0]  ? taprio_free_sched_cb+0x190/0x190
[  461.058480][    C0]  __hrtimer_run_queues+0x4ea/0xb60
[  461.058500][    C0]  ? ktime_get_update_offsets_now+0x95/0x3e0
[  461.058525][    C0]  ? hrtimer_interrupt+0x8b0/0x8b0
[  461.058546][    C0]  ? ktime_get_update_offsets_now+0x3ce/0x3e0
[  461.058566][    C0]  hrtimer_interrupt+0x397/0x8b0
[  461.058594][    C0]  __sysvec_apic_timer_interrupt+0x137/0x4a0
[  461.058613][    C0]  sysvec_apic_timer_interrupt+0x9b/0xc0
[  461.058633][    C0]  </IRQ>
[  461.058638][    C0]  <TASK>
[  461.058643][    C0]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  461.058663][    C0] RIP: 0010:vprintk_store+0xf13/0x11b0
[  461.058681][    C0] Code: e8 a2 fd 18 00 fb 45 31 ff eb 15 e8 97 fd 18 00 e8 62 5b 69 08 4d 85 e4 74 ab e8 88 fd 18 00 fb 48 b8 00 00 00 00 00 fc ff df <66> 41 c7 44 06 24 f8 f8 41 c6 44 06 26 f8 41 c6 44 06 20 f8 66 41
[  461.058695][    C0] RSP: 0018:ffffc90000d368c0 EFLAGS: 00000246
[  461.058709][    C0] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffff88813fea9dc0
[  461.058721][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
[  461.058732][    C0] RBP: ffffc90000d36ad0 R08: ffffffff91047197 R09: 1ffffffff2208e32
[  461.058746][    C0] R10: dffffc0000000000 R11: fffffbfff2208e33 R12: 0000000000000200
[  461.058759][    C0] R13: 0000000000000000 R14: 1ffff920001a6d24 R15: 000000000000008c
[  461.058782][    C0]  ? printk_parse_prefix+0x310/0x310
[  461.058798][    C0]  ? vprintk_emit+0xa7/0x150
[  461.058813][    C0]  ? console_trylock+0x70/0x70
[  461.058828][    C0]  ? vprintk_emit+0xa7/0x150
[  461.058843][    C0]  ? console_trylock+0x70/0x70
[  461.058859][    C0]  ? ret_from_fork+0x1f/0x30
[  461.058882][    C0]  ? vprintk_emit+0x150/0x150
[  461.058904][    C0]  vprintk_emit+0x85/0x150
[  461.058921][    C0]  _printk+0xda/0x130
[  461.058943][    C0]  ? load_image+0x410/0x410
[  461.058967][    C0]  __dynamic_pr_debug+0x196/0x240
[  461.058988][    C0]  ? __dynamic_pr_debug+0x196/0x240
[  461.059007][    C0]  ? collect_syscall+0x6a0/0x6a0
[  461.059027][    C0]  ? __local_bh_enable_ip+0xd7/0x1c0
[  461.059051][    C0]  nf_conntrack_tcp_packet+0x5947/0x60a0
[  461.059077][    C0]  ? __nf_conntrack_find_get+0x146/0x650
[  461.059103][    C0]  ? nf_conntrack_tcp_set_closing+0x460/0x460
[  461.059119][    C0]  ? __nf_conntrack_find_get+0x581/0x650
[  461.059141][    C0]  ? nf_conntrack_find_get+0x640/0x640
[  461.059160][    C0]  ? __siphash_unaligned+0x286/0x3d0
[  461.059188][    C0]  nf_conntrack_in+0xbd6/0x17b0
[  461.059216][    C0]  ? nf_ct_pernet+0x240/0x240
[  461.059232][    C0]  ? console_unlock+0x10bb/0x10f0
[  461.059248][    C0]  ? verify_lock_unused+0x140/0x140
[  461.059268][    C0]  ? vprintk_store+0xf13/0x11b0
[  461.059288][    C0]  ? __down_trylock_console_sem+0x19f/0x1f0
[  461.059304][    C0]  ? vprintk_emit+0xa7/0x150
[  461.059320][    C0]  ? printk_parse_prefix+0x310/0x310
[  461.059335][    C0]  ? vprintk_emit+0xa7/0x150
[  461.059354][    C0]  ? ipv4_conntrack_defrag+0x284/0x590
[  461.059372][    C0]  ? rcu_lock_release+0x20/0x20
[  461.059388][    C0]  nf_hook_slow_list+0x272/0x5b0
[  461.059413][    C0]  ? nf_hook_slow+0x200/0x200
[  461.059436][    C0]  ip_sublist_rcv+0xc01/0xd10
[  461.059468][    C0]  ? consume_skb+0xc8/0x100
[  461.059484][    C0]  ? packet_rcv+0x157/0x1260
[  461.059504][    C0]  ? ip_list_rcv+0x440/0x440
[  461.059520][    C0]  ? packet_sock_destruct+0x160/0x160
[  461.059537][    C0]  ? __netif_receive_skb_core+0x2f97/0x3670
[  461.059557][    C0]  ? ip_rcv_core+0xb30/0xb30
[  461.059573][    C0]  ? memset+0x1e/0x40
[  461.059588][    C0]  ? ip_rcv_core+0x72c/0xb30
[  461.059608][    C0]  ip_list_rcv+0x3e9/0x440
[  461.059629][    C0]  ? ip_rcv_finish+0x270/0x270
[  461.059648][    C0]  ? ip_rcv_finish+0x270/0x270
[  461.059667][    C0]  __netif_receive_skb_list_core+0x57e/0x770
[  461.059691][    C0]  ? __netif_receive_skb+0x290/0x290
[  461.059711][    C0]  netif_receive_skb_list_internal+0x898/0xbd0
[  461.059736][    C0]  ? __lock_acquire+0x7d40/0x7d40
[  461.059776][    C0]  ? netif_receive_skb_list+0x3e0/0x3e0
[  461.059796][    C0]  ? virtqueue_add_inbuf+0xf0/0xf0
[  461.059816][    C0]  ? __phys_addr+0xb6/0x170
[  461.059831][    C0]  ? virtqueue_kick_prepare+0x2da/0x450
[  461.059851][    C0]  napi_complete_done+0x37e/0x850
[  461.059873][    C0]  ? __napi_schedule_irqoff+0x230/0x230
[  461.059896][    C0]  ? virtqueue_enable_cb_prepare+0x226/0x550
[  461.059916][    C0]  virtnet_poll+0x9b7/0xfb0
[  461.059937][    C0]  ? refill_work+0x220/0x220
[  461.059952][    C0]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  461.059974][    C0]  ? lock_chain_count+0x20/0x20
[  461.059992][    C0]  ? xfrm_dev_resume+0x520/0x520
[  461.060012][    C0]  __napi_poll+0xbb/0x430
[  461.060030][    C0]  net_rx_action+0x522/0xa80
[  461.060049][    C0]  ? net_tx_action+0x880/0x880
[  461.060065][    C0]  ? net_tx_action+0x81d/0x880
[  461.060083][    C0]  ? process_backlog+0x770/0x770
[  461.060099][    C0]  ? rcu_softirq_qs+0x75/0x290
[  461.060115][    C0]  ? rcu_get_gp_kthreads_prio+0x10/0x10
[  461.060133][    C0]  ? handle_softirqs+0x209/0x830
[  461.060152][    C0]  handle_softirqs+0x336/0x830
[  461.060175][    C0]  ? run_ksoftirqd+0xa4/0x100
[  461.060194][    C0]  ? do_softirq+0x210/0x210
[  461.060210][    C0]  ? run_ksoftirqd+0x81/0x100
[  461.060226][    C0]  ? ksoftirqd_should_run+0x20/0x20
[  461.060242][    C0]  ? lockdep_hardirqs_off+0x70/0x100
[  461.060261][    C0]  ? ksoftirqd_should_run+0x20/0x20
[  461.060278][    C0]  run_ksoftirqd+0xa4/0x100
[  461.060295][    C0]  ? ksoftirqd_should_run+0x20/0x20
[  461.060327][    C0]  smpboot_thread_fn+0x520/0x990
[  461.060352][    C0]  kthread+0x42e/0x520
[  461.060367][    C0]  ? cpu_report_death+0x180/0x180
[  461.060386][    C0]  ? kthread_blkcg+0xd0/0xd0
[  461.060402][    C0]  ret_from_fork+0x1f/0x30
[  461.060426][    C0]  </TASK>
[  461.060897][    C1] rcu: rcu_preempt kthread starved for 10492 jiffies! g56449 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
[  461.815551][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  461.825547][    C1] rcu: RCU grace-period kthread stack dump:
[  461.831458][    C1] task:rcu_preempt     state:R  running task     stack:27408 pid:   15 ppid:     2 flags:0x00004000
[  461.842263][    C1] Call Trace:
[  461.845559][    C1]  <TASK>
[  461.848518][    C1]  __schedule+0x11c3/0x4350
[  461.853059][    C1]  ? _raw_spin_lock_irqsave+0x8b/0x100
[  461.858555][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[  461.863787][    C1]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  461.869709][    C1]  ? _raw_spin_unlock+0x40/0x40
[  461.874595][    C1]  ? rcu_is_watching+0x11/0xa0
[  461.879397][    C1]  ? release_firmware_map_entry+0x190/0x190
[  461.885337][    C1]  schedule+0x11b/0x1e0
[  461.889530][    C1]  schedule_timeout+0x184/0x2d0
[  461.894408][    C1]  ? console_conditional_schedule+0x40/0x40
[  461.900352][    C1]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  461.906291][    C1]  ? update_process_times+0x200/0x200
[  461.911697][    C1]  ? prepare_to_swait_event+0x33d/0x360
[  461.917283][    C1]  rcu_gp_fqs_loop+0x2be/0x11f0
[  461.922175][    C1]  ? dyntick_save_progress_counter+0x230/0x230
[  461.928361][    C1]  ? rcu_gp_init+0x10f0/0x10f0
[  461.933164][    C1]  ? _raw_spin_unlock_irq+0x1f/0x40
[  461.938405][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[  461.943628][    C1]  rcu_gp_kthread+0x9a/0x370
[  461.948252][    C1]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[  461.953393][    C1]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  461.959501][    C1]  ? __kthread_parkme+0x14e/0x1b0
[  461.964560][    C1]  kthread+0x42e/0x520
[  461.968650][    C1]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[  461.973783][    C1]  ? kthread_blkcg+0xd0/0xd0
[  461.978518][    C1]  ret_from_fork+0x1f/0x30
[  461.982979][    C1]  </TASK>
[  461.986050][    C1] rcu: Stack dump where RCU GP kthread last ran:
[  461.992391][    C1] NMI backtrace for cpu 1
[  461.996741][    C1] CPU: 1 PID: 21 Comm: kworker/1:0 Not tainted syzkaller #0
[  462.004058][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  462.014147][    C1] Workqueue: events bpf_prog_free_deferred
[  462.020004][    C1] Call Trace:
[  462.023312][    C1]  <IRQ>
[  462.026181][    C1]  dump_stack_lvl+0x188/0x250
[  462.030902][    C1]  ? show_regs_print_info+0x20/0x20
[  462.036134][    C1]  ? load_image+0x410/0x410
[  462.040704][    C1]  nmi_cpu_backtrace+0x3a2/0x3d0
[  462.045804][    C1]  ? nmi_trigger_cpumask_backtrace+0x280/0x280
[  462.051999][    C1]  ? _printk+0xda/0x130
[  462.056206][    C1]  ? cpu_online+0x1d/0x30
[  462.060568][    C1]  ? load_image+0x410/0x410
[  462.065097][    C1]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  462.071190][    C1]  nmi_trigger_cpumask_backtrace+0x163/0x280
[  462.077204][    C1]  rcu_check_gp_kthread_starvation+0x1cd/0x250
[  462.083394][    C1]  print_other_cpu_stall+0x1110/0x1270
[  462.088899][    C1]  ? print_cpu_stall+0x5f0/0x5f0
[  462.093861][    C1]  ? timekeeping_advance+0x82c/0xb20
[  462.099178][    C1]  ? __lock_acquire+0x7d40/0x7d40
[  462.104235][    C1]  rcu_sched_clock_irq+0x845/0x1120
[  462.109467][    C1]  ? rcutree_dead_cpu+0x20/0x20
[  462.114345][    C1]  ? hrtimer_run_queues+0x162/0x400
[  462.119578][    C1]  ? account_process_tick+0x22a/0x3a0
[  462.124983][    C1]  update_process_times+0x193/0x200
[  462.130213][    C1]  tick_sched_timer+0x37d/0x560
[  462.135089][    C1]  ? tick_setup_sched_timer+0x2b0/0x2b0
[  462.140667][    C1]  __hrtimer_run_queues+0x4b0/0xb60
[  462.145894][    C1]  ? ktime_get_update_offsets_now+0x95/0x3e0
[  462.151919][    C1]  ? hrtimer_interrupt+0x8b0/0x8b0
[  462.157056][    C1]  ? ktime_get_update_offsets_now+0x3ce/0x3e0
[  462.163163][    C1]  hrtimer_interrupt+0x397/0x8b0
[  462.168234][    C1]  __sysvec_apic_timer_interrupt+0x137/0x4a0
[  462.174239][    C1]  sysvec_apic_timer_interrupt+0x9b/0xc0
[  462.179901][    C1]  </IRQ>
[  462.182851][    C1]  <TASK>
[  462.185807][    C1]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  462.191836][    C1] RIP: 0010:smp_call_function_many_cond+0xba3/0xd80
[  462.198456][    C1] Code: 0f b6 44 05 00 84 c0 0f 85 9a 00 00 00 41 8b 1e 89 de 83 e6 01 31 ff e8 eb 79 0b 00 83 e3 01 75 07 e8 81 76 0b 00 eb 42 f3 90 <48> b8 00 00 00 00 00 fc ff df 41 0f b6 44 05 00 84 c0 75 10 41 f7
[  462.218132][    C1] RSP: 0018:ffffc90000db7860 EFLAGS: 00000293
[  462.224231][    C1] RAX: ffffffff816db735 RBX: 0000000000000001 RCX: ffff88813fe69dc0
[  462.232229][    C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  462.240231][    C1] RBP: ffffc90000db79a0 R08: ffffffff910470cf R09: 1ffffffff2208e19
[  462.248226][    C1] R10: dffffc0000000000 R11: fffffbfff2208e1a R12: ffff8880b8f3b3c0
[  462.256235][    C1] R13: 1ffff110171c8509 R14: ffff8880b8e42848 R15: 0000000000000000
[  462.264237][    C1]  ? smp_call_function_many_cond+0xbc5/0xd80
[  462.270262][    C1]  ? flush_tlb_all+0x20/0x20
[  462.274901][    C1]  ? smp_call_function_many+0x30/0x30
[  462.280301][    C1]  ? __lock_acquire+0x7d40/0x7d40
[  462.285365][    C1]  ? do_raw_spin_lock+0x128/0x2f0
[  462.290415][    C1]  ? __rwlock_init+0x140/0x140
[  462.295212][    C1]  ? flush_tlb_all+0x20/0x20
[  462.299822][    C1]  on_each_cpu_cond_mask+0x3b/0x80
[  462.304968][    C1]  __purge_vmap_area_lazy+0x21e/0x1940
[  462.310453][    C1]  ? cpumask_next+0xb3/0xd0
[  462.314981][    C1]  ? purge_fragmented_blocks_allcpus+0x93c/0x9c0
[  462.321357][    C1]  ? mutex_lock_io_nested+0x60/0x60
[  462.326595][    C1]  ? purge_fragmented_blocks_allcpus+0x9c0/0x9c0
[  462.332963][    C1]  _vm_unmap_aliases+0x40b/0x4a0
[  462.337950][    C1]  __vunmap+0x72f/0xa80
[  462.342146][    C1]  bpf_jit_free+0x92/0x180
[  462.346587][    C1]  process_one_work+0x867/0xff0
[  462.351479][    C1]  ? worker_detach_from_pool+0x240/0x240
[  462.357135][    C1]  ? lockdep_hardirqs_off+0x70/0x100
[  462.362451][    C1]  ? _raw_spin_lock_irq+0xb7/0xf0
[  462.367498][    C1]  ? _raw_spin_lock_irqsave+0x100/0x100
[  462.373085][    C1]  ? wq_worker_running+0x97/0x170
[  462.378132][    C1]  worker_thread+0xad7/0x12a0
[  462.382871][    C1]  kthread+0x42e/0x520
[  462.386975][    C1]  ? rcu_lock_release+0x20/0x20
[  462.391852][    C1]  ? kthread_blkcg+0xd0/0xd0
[  462.396475][    C1]  ret_from_fork+0x1f/0x30
[  462.400940][    C1]  </TASK>