last executing test programs:

16m41.65488216s ago: executing program 32 (id=48):
r0 = io_uring_setup(0x4e5d, &(0x7f0000000300)={0x0, 0xfffffffc, 0x1, 0x0, 0xfffffffd})
r1 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x44dc, 0x800, 0x3, 0x1e7, 0x0, r0}, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r0, 0x0, 0x0, 0x0, 0x2})
io_uring_enter(r1, 0x627, 0x4c1, 0x9, 0x0, 0x18)

16m22.494169979s ago: executing program 33 (id=68):
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c6", 0x1}], 0x1, 0x0, 0x0, 0x20048054}}], 0x1, 0x8800)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x8000, 0x0, 0x0)
sendmmsg$inet(r0, &(0x7f00000016c0)=[{{0x0, 0x0, 0x0}}], 0x5f, 0x4850)

16m13.890284408s ago: executing program 34 (id=142):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58)
r1 = accept4$alg(r0, 0x0, 0x0, 0x80000)
r2 = dup(r1)
sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4008084)

15m16.4635504s ago: executing program 35 (id=344):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000001c0)={[{@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@inlinecrypt}, {@errors_remount}]}, 0x6, 0x5fc, &(0x7f0000001000)="$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")
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0)
r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)
syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r0)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

13m4.236350965s ago: executing program 36 (id=895):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02})
r1 = socket$netlink(0x10, 0x3, 0x0)
preadv(r0, &(0x7f0000000140)=[{&(0x7f0000001080)=""/12, 0xc}], 0x1, 0x7, 0x6)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})

12m49.225465556s ago: executing program 37 (id=957):
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x1, 0x0, 0x10, 0xc9, {{0x15, 0x4, 0x2, 0x1, 0x54, 0x68, 0x0, 0x2, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x17, 0x8, [@private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @loopback, @rand_addr=0x64010102]}, @lsrr={0x83, 0xf, 0xfc, [@loopback, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x17, 0xa, [@empty, @rand_addr=0x64010101, @broadcast, @remote, @remote]}]}}}}})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}})
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044851}, 0x0)

11m19.328164121s ago: executing program 3 (id=1283):
r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000001800)={'#! ', './file1/../file0', [], 0xa, "521299a432289bea0aa53f5db534de379d0418026c1f265a707f7b50"}, 0x30)
write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300"}})

11m18.609944903s ago: executing program 3 (id=1285):
syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x800)
r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0x80000011})
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)={0x1})

11m17.829718163s ago: executing program 3 (id=1288):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x1}}}}}}, 0x0)

11m16.41836255s ago: executing program 3 (id=1294):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x1400c, &(0x7f0000000080), 0x3, 0x47a, &(0x7f00000006c0)="$eJzs3M1vG0UbAPBn13H65k1pTClfLR+BgqgQJE1boAcOgEDiUCQkOMDRSkJVmhbUBIlWkUg5lBNCSNwRR/4FTnBBiBMSV7ijShXqhZaT0dq7sZ3YTpPaccG/n+T2mf3IzOPd2czu2AlgZE1n/yQReyPit4iYahTbN5hu/Hfj+ur8zeur80nUam/9mdS3++v66nyxabHfZGshkjjUod7li5fOVpeWFi/k5dmVcx/OLl+89OyZc9XTi6cXzx87efLE8bkXnj/2XF/ynIw0j15/98s3Tn3elv+GPPpkutfKJ2u1Plc3XHe1xGNDbAfbU8qPV7ne/6ei1HL0puK1T9cLnwypgcDA1Gq12mT31Ws14D8sifayLg+jovhFX9z/droPfmlgo4/hu/Zy4wYoy/tG/mqsGVt/YlDecH/bT9MR8c7a319nrxjMcwgAgDbfZ+OfZ7LRzup8NvZojj/SuK9lu3353FAlIu6OiP0RcU+cjwMRcW9Efdv7I+KBbdbfMklSH2ZuHv+kV3ec3C3Ixn8v5nNb7eO/YvQXlVK9dLFRiHLy3pmlxaP5e3Ikynuy8lyPOn549dcvuq1rHf9lr6z+YiyYt+Pq2J72fRaqK9WdZ9zu2uWIg2Od8k/WZwKSiHgwIg52+gHp1nWcefrbh7qt2zr/Hvow0VT7JuKpxvFfiw35F5Le85Oz/4ulxaOzxVmx2c+/XHmzW/23lX8fZMf//x3P//X8K0nrfO3yNiuoRFz5/bOu9zTT5TzYxvm/Vl2pjidv1+PxfNnH1ZWVC3MR48mpotrm8mPNfYtysX2W/5HDnfv//mi+E4ciIjuJH46IRyLi0fzYPRYRj0fE4R5vwU+vPPH+xmUTRf53wPFf2Nbxbwbj0b4k7bBNFpTO/vhdW6WVZpjnf7P39e9EPTqSL7mV69/mVnQObvf9AwAAgH+DNCL2RpLOrMdpOjPT+Az/gcbUd+aj8wuN7whUopwWT7qmWp6HzuW39Y3y5YhofLSgWH880vpz469KE/XyzPwHSwtDzRyY7NL/M3+Uht06YOB8YQtGl/4Po6tn/y/vXjuA3bep//fs83sG2hZgd3X4/T8xjHYAu6/T+N/f+4HRsKH/m/aDEeL5P4wu/R9Gl/4PI2l5Irb+knzPoPhJO9x9q2Aq4nZbOJwgyndEMwYWRDrwKsYHe2ptHUzEjnZPhtnmfgVtl4l9u31dAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6Jd/AgAA///miM2S")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
getdents64(r0, &(0x7f0000000400)=""/4096, 0x1000)

11m15.274768842s ago: executing program 3 (id=1299):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x1}, 'syz1\x00'})
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xe)
ioctl$UI_DEV_CREATE(r0, 0x5501)

11m13.847588301s ago: executing program 3 (id=1303):
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @loopback, 0x3681}, 0x1c)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x7, @local, 0x7}}, 0x0, 0x0, 0x3a, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8)

11m11.40258296s ago: executing program 38 (id=1303):
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @loopback, 0x3681}, 0x1c)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x7, @local, 0x7}}, 0x0, 0x0, 0x3a, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8)

4m6.7426164s ago: executing program 9 (id=3212):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendto$inet(r0, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0)

4m5.329344684s ago: executing program 9 (id=3217):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000840)='./bus\x00', 0x10, &(0x7f0000000540), 0x1, 0x7cc, &(0x7f00000022c0)="$eJzs3ctrW1caAPDvyvJjnGTsgYFJZmUYmDGEyOOMJ5mBLlK6KIUGAu26iZEVk1q2giWH2BjSUArdFNrQRaHdZJ226a7bPrbtv9BuSikJaeuEJnRRXK4esRxLjpzYchP/fnCtc+7D53z3ce6R7kEKYM8aSf9kIg5FxNtJxFB9fhIRvdVUNuJEbb27K8v5dEpidfWln5LqOndWlvPRtE0MDsa+euZgRHzxRsThzMZyy4tLM5PFYmG+nh+rzJ4fKy8uHTk3OzldmC7MHRufmDh6/L/H+7cv1l++Xtp/853n//XxiV9f/9v1t75M4kTsry9rjmO7jMRIbZ9Eb7oL13luuwvbZcluV4BHkl6aPbWrPA7FUDb6Ot82u5MVAwB2zKWIWAUA9pjE/R8A9pjG5wB3Vpbz6bR6aXc/j+i2W89GxEAt/sbzzdqSbP2Z3UD1OejgnWTd844kIoa3ofyRiPjg01c+TKfYoeeQAK28djkizgyPNNr/tfYn2TBmoabzARn/biQ2GRww8kBe+wfd81na//nfWv9v7frL3O//RIv+T3+La/dRjMT6EScbr//MjW0opq20//dM79rYtrtN8dcN99RzB6p9vt7k7LliIW3b/hwRo9Hbn+bHNylj9PZvt9fNaIq4uf/385VXr6Xlp69ra2RuZB9ocqcmK5OPG3fDrcsRf8+2ij+5f/yTNv3fUx2W8cL/33y/3bI0/jTexrQ+/p0fVbZ6NeKf0Tr+hmSz8YnHxqqnw1jjpGjhk+/eG2xXfvPxT6e0/Np7gQPbH2wL6fEf3Dz+4aR5vGZ562V8dXXo83bL2sff0Pr870terqYbl9LFyUplfjyiL3lx4/yja9s28o310/hH/9H6+t/s/E/fE57pMP7szR8/emj8jRkb4q8b6LCwLUrjn9rS8d964vrdmZ525Xd2/CfSRM9ofU4n7d9m9eprWueRdxwAAAAAAAAAAAAAAAAAAAAAAAAAbEEmIvZHksndT2cyuVxUf8P7rzGYKZbKlcNnSwtzU1H9rezh6M00vupyqOn7UMfr34ffyB99IP+fiPhLRLzb/6dqPpcvFad2O3gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqNvX5vf/Uz/0117v7WoNAYAdMfDQNW4XulIRAKBrHn7/j4j+na8HANA9Hd3/AYCnivs/AOw97v8AsPcMRGR3uw4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA81U6dPJlOq/dWlvNpfurC4sJM6cKRqUJ5Jje7kM/lS/Pnc9Ol0nSxkMuXZps2/abV/yuWSucnYm7h4lilUK6MlReXTs+WFuYqp8/NTk4XThd6uxYZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHSuvLg0M1ksFubriWuDEevndCnRU69QVwt9IhOrQ7U99Uepz84nvj/y7cHN1rmy4TSWeOzEbrZKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE+O3wMAAP//mc0dAw==")
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = ioctl$KVM_GET_STATS_FD_cpu(r2, 0xaece)
read$FUSE(r3, 0x0, 0x0)

4m3.899991681s ago: executing program 9 (id=3221):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4000000}}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000040)=0x7ff, 0x4)
sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x20001)
close(r1)

4m2.435317371s ago: executing program 9 (id=3224):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x2014050, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00')

4m1.795648025s ago: executing program 9 (id=3228):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000600)={0xaa, 0x138})
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x3})
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000})

4m1.010946419s ago: executing program 9 (id=3231):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000180)=0x80000001, 0x4)
setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x8d}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0)

3m59.398103837s ago: executing program 39 (id=3231):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000180)=0x80000001, 0x4)
setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x8d}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0)

2m34.681962543s ago: executing program 8 (id=3571):
r0 = socket(0x2b, 0x1, 0x0)
r1 = syz_io_uring_setup(0x110, &(0x7f0000000480)={0x0, 0xfad6, 0x400, 0x2, 0x5}, &(0x7f0000000240)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000000)={0xfeffffff, r0, 0x23, {0x8003b4, 0x6}, 0xe}, 0x1)

2m33.80792832s ago: executing program 8 (id=3575):
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)

2m31.949865749s ago: executing program 8 (id=3582):
r0 = userfaultfd(0x1)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2})
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1})
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)

2m31.092887957s ago: executing program 8 (id=3587):
syz_mount_image$iso9660(&(0x7f0000000780), &(0x7f0000000000)='./file0\x00', 0x21488b, &(0x7f0000000300)=ANY=[], 0x1, 0x66b, &(0x7f0000001f80)="$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")
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
syz_fuse_handle_req(r0, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x1, 0xffffffff82a007ca, 0x4, 0x7, 0x3ff, 0x803, 0x0, 0x0, 0x2, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f0000007b40)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0x28, {0x8, 0xffffffff, 0x0, {0x5, 0x0, 0x7, 0x8, 0xa, 0xffffffffffffff0c, 0x9, 0x35741060, 0x10009, 0x8000, 0x9ea, 0xffffffffffffffff, 0xee01, 0x3d, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x300)

2m29.755573154s ago: executing program 8 (id=3592):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00')
syz_usb_connect(0x0, 0x3f, &(0x7f0000000240)=ANY=[@ANYBLOB="11010000733336088dee1adb2361000000010902"], 0x0)
mount$nfs(0x0, &(0x7f0000000640)='.\x00', &(0x7f0000000680), 0x0, 0x0)

2m28.702606508s ago: executing program 8 (id=3596):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001bc0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {0x0, 0xfff1}, {0xc, 0x4}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xca}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x4a}]}}]}, 0x44}}, 0x0)

2m26.808634974s ago: executing program 40 (id=3596):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001bc0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {0x0, 0xfff1}, {0xc, 0x4}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xca}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x4a}]}}]}, 0x44}}, 0x0)

1m57.623620476s ago: executing program 5 (id=3711):
r0 = landlock_create_ruleset(&(0x7f0000000080)={0x220, 0x0, 0x1}, 0x18, 0x0)
landlock_restrict_self(r0, 0x0)
unshare(0x22020600)
unshare(0x26020480)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000000dc0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

1m56.655479585s ago: executing program 5 (id=3716):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000200), 0x1, 0x0)
preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000340)=""/90, 0x5a}], 0x1, 0x0, 0xd)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x54}, 0x28)

1m55.929510614s ago: executing program 5 (id=3719):
r0 = socket(0x10, 0x2, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl1\x00', <r3=>r2, 0x4, 0xfb, 0x53, 0x3, 0x58, @local, @mcast2={0xff, 0x5}, 0x8, 0x40, 0xe3e1, 0xd01}})
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'ip6_vti0\x00', r3, 0x29, 0x3, 0x2, 0x13a0000, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, @private1, 0x7800, 0x8000, 0x101, 0x7fff}})

1m55.101926809s ago: executing program 5 (id=3723):
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x20d036, 0x0, 0x0, 0x0, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', r0, 0x0, 0x41)
move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x220)

1m54.329583354s ago: executing program 5 (id=3726):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x7fffffff}, 0x28)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000380), 0x1000a)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_buf(r1, 0x6, 0xd, &(0x7f0000000140)="a7", 0x1)

1m53.748194589s ago: executing program 5 (id=3730):
r0 = socket(0x8000000010, 0x2, 0x0)
getpid()
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000001c00357428bd7000fcdbdf2502000000", @ANYRES32=r2, @ANYBLOB="1000a206080001000000000008000f0005"], 0x2c}, 0x1, 0x0, 0x0, 0x20040001}, 0x200080c0)
write(r0, &(0x7f00000002c0)="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", 0xfc)

1m51.794228582s ago: executing program 41 (id=3730):
r0 = socket(0x8000000010, 0x2, 0x0)
getpid()
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000001c00357428bd7000fcdbdf2502000000", @ANYRES32=r2, @ANYBLOB="1000a206080001000000000008000f0005"], 0x2c}, 0x1, 0x0, 0x0, 0x20040001}, 0x200080c0)
write(r0, &(0x7f00000002c0)="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", 0xfc)

1m8.785432927s ago: executing program 4 (id=3881):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x78, 0x4)
bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00', 0x4}, 0x1c)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000040)=0x78, 0x4)
bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00', 0x4}, 0x1c)

1m7.782631349s ago: executing program 4 (id=3886):
r0 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x400000}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xf, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0xfd}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x3}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x2010, 0x10, 0x10, 0x10, 0x32, 0xe, 0x10, 0x10, 0x1, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f00000003c0)={0x14, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

1m4.038303173s ago: executing program 4 (id=3901):
rt_sigprocmask(0x2, &(0x7f00000000c0)={[0xffffffffffffffff]}, 0x0, 0x8)
timer_create(0xfffffffd, 0x0, &(0x7f0000001280))
timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
syz_read_part_table(0x407c, &(0x7f0000008140)="$eJzs079KemEYB/BHh98ParHoAt4tAqnjnySnqGhoMAenxgoLQQzSwqWlu+mSuoCuw8AM5FSDFgTx+UzPOd/3efku7+rL00FEFHbuBr1x5BQjYjKd9osRhYioz5JC/ujwutc/v+j237aK+ZiFlb74//A4G/4tfufmWsRpioiV0fPG0Xfa8Uf83zqb/5xMfXzfyzk5bKX2cStljUa1U6mmd7VUyz7fyLJsLvmhGktZL3Wuxum+ezvs3QzS7natnNqXo1TZK6dKs1n/xWYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDKDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8rZPo3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG4FAAD//xQHINw=")

1m1.95222771s ago: executing program 4 (id=3911):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}, {@nolazytime}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]})
unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0)

1m0.166046355s ago: executing program 4 (id=3915):
unshare(0x22020600)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000880)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="3e980214", 0x4}], 0x1)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x13, r0, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x3, 0x0, &(0x7f0000000000))

59.548377979s ago: executing program 4 (id=3917):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0xc0041}, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r1, @in6={{0xa, 0x4e23, 0x9, @empty, 0x2800}}, 0xf, 0x0, 0x20000, 0x3, 0x32, 0x0, 0x9}, 0x9c)

57.489866327s ago: executing program 42 (id=3917):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0xc0041}, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r1, @in6={{0xa, 0x4e23, 0x9, @empty, 0x2800}}, 0xf, 0x0, 0x20000, 0x3, 0x32, 0x0, 0x9}, 0x9c)

9.530500522s ago: executing program 7 (id=4097):
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x800, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x0, 0x6}, {0xd, 0xd}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_LIMIT={0x8, 0x2, 0x4}, @TCA_CODEL_ECN={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}, 0x1, 0x0, 0x0, 0x20008801}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0)

7.997384924s ago: executing program 6 (id=4103):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)

7.78788892s ago: executing program 7 (id=4106):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@volatile}], [], 0x2c})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83)
fsync(r0)

7.02942438s ago: executing program 7 (id=4110):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000a80)={[{@max_batch_time={'max_batch_time', 0x3d, 0x3ff}}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@nombcache}, {@quota}, {@init_itable}, {@errors_remount}]}, 0x5, 0x569, &(0x7f0000000b00)="$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")
lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file1\x00', &(0x7f0000000840), &(0x7f0000000940)=ANY=[], 0x361, 0x1)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000200)={0x3, 'pimreg1\x00', {0x4}, 0x1})
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)="0d000000246804003199aee6fdb9291b3091ec1a2d41d2270a00d8ec030f5919f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3257bf35844", 0xe1}], 0x1)
setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000280)='./file1\x00', &(0x7f00000000c0), &(0x7f00000001c0)=ANY=[], 0xfe37, 0x0)

6.197623921s ago: executing program 1 (id=4114):
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2)
r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2)
ftruncate(r1, 0xffff)
fcntl$addseals(r1, 0x409, 0x7)
r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x0, 0x0, 0x4000})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x12, r2, 0x0)

5.762802451s ago: executing program 7 (id=4115):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$eJzs3U9oHGUbAPBnZrNN/+T70g++Dz6lh6JChdJN0j9aPbVXsVDoQfCiYbMNJZtsySbahIDpvYg9iEov9aYHj4oHD+LFo1cvimeh2KDQ9KArm51N03S3bmI2W7O/H0z2fWdm93nfmX3e7AwzTAB962j9TxrxVERcTCKGNywbiGzh0cZ6qytLxfsrS8UkarVLvySRRMS9laVic/0kez0UEcsR8f+I+CYfcTxd/8h9zUJ1YXFqvFwuzWb1kbnpqyPVhcUTV6bHJ0uTpZlTL7505uzpM2MnxzY2935tYy2/tb7e+PHmuze+e+X2zU8/O7JcfH88iXMxlC3b2I+d1Ngm+Ti3af7pbgTroaTXDWBbclme11PpfzEcuSzrW6ltHBwGd6V5QBfVBiNq6zYUgT6QSHroU83fAfXj3+a0m78/7pxvHIDU466uLBXfiWb8gca5idi/dmxy8NfkoSOT+vHm4d1sKHvS8vWIGB0YePT7n2Tfv+0b3YkG0lVfn2/sqEf3f7o+/kSL8Weoee70b2qOf6vZ+LfaIn6uzfh3scMYv7/+00dt418fjKdbxk/W4yct4qcR8WaH8W+99uXZdstqH0cci9bxm5LHnx8euXylXBpt/G0Z46tjR15u3/+Ig23iN87Z7l9ryMb+78valHbY/y++/fyZ5cfEf/7Zx+//Vtv/QES812H8/9z75NV2y+5cT+7WfwVsdf8nkY/bHcZ/4dzRH7Kis4YAAAAAAAAAALCD0rVr2ZK0sF5O00KhcQ/vf+NgWq5U545frszPTDSueTsc+bR5pdVwo57U62PZ9bjN+slN9VO5LGDuwFq9UKyUJ3rcdwAAAAAAAAAAAAAAAAAAAHhSHNp0//9vubX7/zc/rhrYq9o/8hvY6+Q/9K+H8z/pWTuA3ef/P/StmvyH/iX/oX/Jf+hf8h/6l/yH/iX/oX/JfwAAAAAAAAAAAAAAAAAAAAAAAAAA6IqLFy7Up9r9laVivT4xsDA/VXnrxESpOlWYni8WipXZq4XJSmWyXCoUK9N/9XlJpXJ1NGbmr43MlapzI9WFxTemK/MzzWeKlvJd7xEAAAAAAAAAAAAAAAAAAAD88wytTUlaiMg36mlaKET8KyIOJ5FcvlIujUbEvyPi+1x+sF4f63WjAQAAAAAAAAAAAAAAAAAAYI+pLixOjZfLpdnuFQayUF0M0XlhYCsrR8Tyzjaj/olbflc+24A93nR7o5B7Mr6HT36hh4MSAAAAAAAAAAAAAAAAAAD0qQc3/Xb6jj+62yAAAAAAAAAAAAAAAAAAAADoS+nPSUTUp2PDzw1tXrovWc2tvUbE27cufXBtfG5udqw+/+76/LkPs/kne9F+oFPNPE0jop7HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAPVhcWp8XK5NLvNwmAH6/S6jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADb8WcAAAD//y4WzlE=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x40)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xc00)
sendfile(r1, r1, 0x0, 0xaf)

5.728554492s ago: executing program 0 (id=4116):
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x80000, 0x8d)
write$qrtrtun(r0, &(0x7f0000000600)="58af1d54bb50", 0x6)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x5], 0x0, 0x0, 0x1}}, 0x40)

5.492124094s ago: executing program 1 (id=4117):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa0835c, &(0x7f0000000340)={[{@nojournal_checksum}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@dioread_nolock}, {@usrjquota}, {@oldalloc}, {@sysvgroups}]}, 0x2, 0x44a, &(0x7f0000000880)="$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")
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x40000070, 0x0, 0x80000006}]})

5.360208638s ago: executing program 2 (id=4118):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r1 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r1, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e)
r2 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r2, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x52)
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c0000001400010125bd7000fddbdf25010e"], 0x4c}, 0x1, 0x0, 0x0, 0x24048084}, 0x40000)

4.769249476s ago: executing program 0 (id=4119):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x3}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth0_to_bridge\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f00000000c0)="47ae88816e", 0x5, 0xc190, &(0x7f0000000200)={0x11, 0x8100, r2, 0x1, 0xe0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14)

4.675901964s ago: executing program 2 (id=4120):
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
write$fb(r0, &(0x7f0000000100)="732f64bd01d8958da2", 0x9)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x40000, 0x19b)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40)

4.174146365s ago: executing program 6 (id=4121):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0)
pipe2(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = epoll_create1(0x0)
epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0x30000008})
dup3(r0, r1, 0x0)

3.960871988s ago: executing program 0 (id=4122):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x589, &(0x7f00000083c0)="$eJzs3c1rHOUfAPDvbHb7/vs1hVKsiBR6sFK7aRJfKnioR9FiQT3XkGxDyaZbspvSxILtwV68SBFELIh3vXvwULx49K8oaKFICQp6WZnNbLJpNslmszFp9/OBSZ5nZnafeeaZ78Mz++wyAfStE+mfXMTxiPgiiTjcsi0f2cYTi/stPL45ni5J1Osf/JFEkq1r7p9k/w9mmeci4ufPIk7nVpdbnZufGiuXSzNZfqg2fW2oOjd/5sr02GRpsnR1ZHT03GujI2++8XrP6vryxb++fv/+O+c+P7nw1Q8Pj9xN4nwcyra11mNT9q7I3WrNnKjXs3NSiPNPvGy4q8J2r2SnD4CuDGRxXoiI44XDhWbUA8++TyOiDvSpZJPxv1d/Ac+I5jigeW/f9X3wU+rR24s3QKvrn1/8bCT2Ne6NDiwkK+6M0vvdwR6Un5bx4+/37qZLbOVzCIBNunU7Is7m86v7vyTr/7p3toN9nixD/wf/nfvp+OeVduOf3NL4J9qMfw62id1ubBz/uYc9KGZN6fjvrbbj36VJq8GBLPe/xpivkFy+Ui6lfdv/I+JUFPam+fXmc84tPKivta11/JcuafnNsWB2HA/zK+eYYmKsNraVOrd6dDvi+bbj32Sp/ZM27Z+ej486LONY6d6La23buP7bq/5dxEtt2395RitZf35yqHE9DDWvitX+vHPs17XKb1//X37ahqq2lbb/gfXrP5i0ztdWN1/Gt/v+Ka21rdvrf0/yYSO9J1t3Y6xWmxmO2JO8t3r9yPJrm/nm/mn9T51cv/9rd/3vj4iPO6z/naPfv9B9/bdXWv+JTbX/5hMP3v3km7XK76z9X22kTmVrOun/Oj3ArZw7AAAAAAAA2G1yEXEoklwx9mXpXK5YXPx+x9E4kCtXqrXTlyuzVyei8VvZwSjkmjPdh1u+DzGcfR+2mR95Ij8aEUci4suB/Y18cbxSntjpygMAAAAAAAAAAAAAAAAAAMAucXDp9/+x4vf/qd8GdvrogG2XX3z+N9CHNnzkfy+e9ATsShvGP/DMEv/Qv8Q/9C/xD32pMcUn/qF/iX/oX+If+pf4BwAAAAAAAAAAAAAAAAAAAAAAAAAAgJ66eOFCutQXHt8cT/MT1+dmpyrXz0yUqlPF6dnx4nhl5lpxslKZLJeK45Xpjd6vXKlcGx6J2RtDtVK1NlSdm780XZm9Wrt0ZXpssnSp5DnjAAAAAAAAAAAAAAAAAAAAsFp1bn5qrFwuzfQgUSiXS7mI6GTniB4V+tQl/t7y+6Ttdivf2XnenkQSy2vyu+KsSvQ6sdM9EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAs+zcAAP//MUwypA==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a)
fallocate(r0, 0x20, 0x0, 0x8000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
write$FUSE_DIRENTPLUS(r1, &(0x7f00000006c0)=ANY=[], 0x1f0)
ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000600)={0x45, 0x6c, 0x4, 0x200b62, 0x2, 0x0, [{0xff, 0xf98, 0x70}, {0x8, 0xfffffffffffffffb, 0x9, '\x00', 0x400}]})

3.74325804s ago: executing program 2 (id=4123):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1})
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000001a80)=0x5, 0x8)
close(0x3)

3.58702078s ago: executing program 1 (id=4124):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0xc}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = socket$inet_icmp(0x2, 0x2, 0x1)
getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000080), &(0x7f00000000c0)=0x40)

3.337267973s ago: executing program 6 (id=4125):
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
r0 = open(&(0x7f0000000280)='.\x00', 0x743800, 0x181)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
renameat2(r1, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000180)='./file1\x00', 0x4)
renameat2(r0, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000002c0)='./file0\x00', 0x2)

3.178639376s ago: executing program 7 (id=4126):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000b00))
syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

2.806196112s ago: executing program 0 (id=4127):
setreuid(0xee01, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x0, 0x0, 0x0, 0x4}, 0x94)
r0 = getuid()
setreuid(0xffffffffffffffff, r0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)

2.716002312s ago: executing program 1 (id=4128):
r0 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0)
landlock_restrict_self(r0, 0x1)
r1 = socket$unix(0x1, 0x2, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r2, &(0x7f0000003000)=@file={0x1}, 0x6e)
connect$unix(r1, &(0x7f0000000640)=@file={0x1}, 0x6e)

2.612114289s ago: executing program 6 (id=4129):
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fcntl$notify(r0, 0x402, 0x11)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='ns\x00')
exit(0xf)
getdents64(r1, 0x0, 0x0)

2.311028115s ago: executing program 2 (id=4130):
mkdirat(0xffffffffffffffff, 0x0, 0x5b)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000000c0)=@framed, &(0x7f00000001c0)='GPL\x00'}, 0x80)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
socket(0x10, 0x3, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x3)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4)

2.043010111s ago: executing program 1 (id=4131):
socket$nl_netfilter(0x10, 0x3, 0xc)
set_mempolicy(0x3, &(0x7f0000000040)=0xfff, 0x5)
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'xfrm0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001a00)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0)

1.697866944s ago: executing program 7 (id=4132):
process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=")
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./mnt\x00', 0x4000, &(0x7f0000000580)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000102,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYRESOCT, @ANYRESOCT], 0x12, 0xc38, &(0x7f0000001080)="$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")
syz_mount_image$exfat(0x0, &(0x7f00000003c0)='./bus\x00', 0x448c, 0x0, 0x0, 0x0, &(0x7f0000000300))
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./bus/file0\x00', 0x80008, 0x0, 0x0, 0x0, &(0x7f0000000000))
rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000080)='./mnt\x00')

1.591226108s ago: executing program 2 (id=4133):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000003c0)='^', 0x1}], 0x1, 0x0, 0x0, 0x10}}], 0x1, 0x10004841)
setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000300), 0x4)
recvmsg(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000580)=""/118, 0x76}], 0x1}, 0x20002)
recvmmsg(r1, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0)
sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000001840)="da", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="1dafa9", 0x3}], 0x1}}], 0x2, 0x4044004)

1.315203893s ago: executing program 1 (id=4134):
syz_io_uring_setup(0x495, 0x0, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
io_setup(0x9, &(0x7f0000000b80)=<r0=>0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0x0, 0x7fc00100}]})
socket$nl_route(0x10, 0x3, 0x0)
io_submit(r0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])

1.095115721s ago: executing program 6 (id=4135):
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x190)
fcntl$setlease(r0, 0x400, 0x1)
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x2c600, 0x0, 0xbe, 0x0, &(0x7f00000007c0))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f0000000000)='./bus/file0\x00', 0x0)
renameat2(r1, &(0x7f0000000240)='./bus/file0\x00', r1, &(0x7f00000001c0)='./file0\x00', 0x2)

722.236665ms ago: executing program 0 (id=4136):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xf)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$TCFLSH(r1, 0x400455c8, 0x4)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x2)

486.236732ms ago: executing program 2 (id=4137):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x2000, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0xc, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0xfdef)

181.277039ms ago: executing program 6 (id=4138):
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1)
r1 = syz_io_uring_setup(0x233, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f0000000080)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x2})
io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0)

0s ago: executing program 0 (id=4139):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0xaa443)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}})
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0xd, 0x3, 0x0, 'queue0\x00', 0x6})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x7}})

kernel console output (not intermixed with test programs):

1" dev="loop0" ino=1048755 res=0 errno=0
[  958.027781][T15469] loop5: detected capacity change from 0 to 512
[  958.077970][T15469] EXT4-fs: inline encryption not supported
[  958.170908][T15469] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  958.277946][T15469] EXT4-fs (loop5): 1 truncate cleaned up
[  958.324606][T15469] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  958.789354][ T9963] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  958.837118][T15476] loop0: detected capacity change from 0 to 1024
[  959.038793][T15476] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  959.092892][T15476] ext4 filesystem being mounted at /365/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  959.141416][   T30] audit: type=1800 audit(1770514867.921:239): pid=15476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3210" name="file1" dev="loop0" ino=15 res=0 errno=0
[  959.188277][T15479] loop8: detected capacity change from 0 to 2048
[  959.197187][T15476] EXT4-fs error (device loop0): ext4_map_blocks:825: inode #15: comm syz.0.3210: lblock 0 mapped to illegal pblock 0 (length 1)
[  959.266060][T15476] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  959.278920][T15476] EXT4-fs (loop0): This should not happen!! Data will be lost
[  959.278920][T15476] 
[  959.357789][T15479] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  959.385510][T15484] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: comm syz.0.3210: lblock 0 mapped to illegal pblock 0 (length 1)
[  959.462842][T15484] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #15: comm syz.0.3210: lblock 0 mapped to illegal pblock 0 (length 1)
[  959.521967][T15484] EXT4-fs error (device loop0): ext4_ext_remove_space:2955: inode #15: comm syz.0.3210: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  960.001346][T10105] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  960.452656][ T5845] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  960.489611][T15493] loop0: detected capacity change from 0 to 128
[  960.500914][T15493] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  960.554464][T15493] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  960.607729][T15493] ext2 filesystem being mounted at /366/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  960.618259][T15497] loop5: detected capacity change from 0 to 512
[  960.680119][T15491] loop9: detected capacity change from 0 to 2048
[  960.682482][ T5845] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  960.697990][ T5845] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  960.708209][ T5845] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  960.721582][ T5845] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  960.731096][ T5845] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  960.794230][T15491] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  960.820308][ T5845] usb 3-1: config 0 descriptor??
[  960.965458][T15497] EXT4-fs (loop5): 1 orphan inode deleted
[  960.997755][   T13] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  961.008404][   T13] EXT4-fs error (device loop5): ext4_release_dquot:7022: comm kworker/u8:1: Failed to release dquot type 1
[  961.026024][T15497] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  961.039383][ T5846] usb 9-1: new high-speed USB device number 24 using dummy_hcd
[  961.103981][T15497] ext4 filesystem being mounted at /390/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  961.232697][ T5846] usb 9-1: Using ep0 maxpacket: 16
[  961.255802][T10105] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  961.293412][ T5846] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  961.305568][ T5846] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  961.391497][ T8817] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  961.466710][ T5846] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  961.477632][ T5846] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  961.486404][ T5846] usb 9-1: Product: syz
[  961.490802][ T5846] usb 9-1: Manufacturer: syz
[  961.495746][ T5846] usb 9-1: SerialNumber: syz
[  961.532691][ T5845] plantronics 0003:047F:FFFF.0025: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  961.729573][ T5846] usb 9-1: config 0 descriptor??
[  961.805995][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  961.820779][ T9963] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  961.871828][ T5846] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  961.881599][ T5846] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class)
[  962.032385][T15506] input: syz1 as /devices/virtual/input/input40
[  962.483847][ T5846] em28xx 9-1:0.0: unknown em28xx chip ID (238)
[  962.673556][    C0] plantronics 0003:047F:FFFF.0025: usb_submit_urb(ctrl) failed: -1
[  962.690692][ T5846] em28xx 9-1:0.0: Config register raw data: 0xfffffffb
[  962.962643][ T5846] em28xx 9-1:0.0: AC97 chip type couldn't be determined
[  962.969972][ T5846] em28xx 9-1:0.0: No AC97 audio processor
[  963.094118][ T5846] usb 9-1: USB disconnect, device number 24
[  963.143962][ T5846] em28xx 9-1:0.0: Disconnecting em28xx
[  963.223440][ T5846] em28xx 9-1:0.0: Freeing device
[  963.493389][ T5842] usb 3-1: USB disconnect, device number 17
[  963.948635][T15520] loop2: detected capacity change from 0 to 512
[  963.970395][T15521] loop0: detected capacity change from 0 to 128
[  964.075071][T15521] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  964.105028][T15520] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  964.178012][T15521] ext4 filesystem being mounted at /369/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  964.408382][T15528] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3230'.
[  964.417928][T15528] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3230'.
[  964.675015][ T8979] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  964.761794][T10105] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  966.888436][ T5786] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  966.898421][ T5786] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  966.910066][ T5786] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  966.933818][ T5786] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  966.945018][ T5786] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  967.057343][T15559] loop8: detected capacity change from 0 to 512
[  967.066953][T15559] EXT4-fs: Ignoring removed bh option
[  967.076011][T15559] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem
[  967.227405][T15559] EXT4-fs (loop8): 1 truncate cleaned up
[  967.267596][T15559] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  967.936557][T14602] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  968.145422][T15573] loop7: detected capacity change from 0 to 16384
[  968.368348][T15575] loop7: detected capacity change from 16384 to 0
[  968.434675][    C0] I/O error, dev loop7, sector 128 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2
[  968.795768][T15555] chnl_net:caif_netlink_parms(): no params data found
[  968.876849][    C1] IPv4: Oversized IP packet from 172.20.20.24
[  969.042532][ T5786] Bluetooth: hci4: command tx timeout
[  969.178600][T15585] loop8: detected capacity change from 0 to 256
[  969.403333][T15585] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x8277d129, utbl_chksum : 0xe619d30d)
[  969.560355][T15585] exFAT-fs (loop8): valid_size(562949953421322) is greater than size(10)
[  969.648120][   T30] audit: type=1800 audit(1770514878.431:240): pid=15585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3250" name="file1" dev="loop8" ino=1048756 res=0 errno=0
[  969.851689][T15599] loop2: detected capacity change from 0 to 128
[  970.172742][   T30] audit: type=1800 audit(1770514878.951:241): pid=15599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3253" name="bus" dev="loop2" ino=1048757 res=0 errno=0
[  970.311439][T15555] bridge0: port 1(bridge_slave_0) entered blocking state
[  970.319437][T15555] bridge0: port 1(bridge_slave_0) entered disabled state
[  970.402926][T15555] bridge_slave_0: entered allmulticast mode
[  970.444394][T15555] bridge_slave_0: entered promiscuous mode
[  970.488408][T15555] bridge0: port 2(bridge_slave_1) entered blocking state
[  970.496270][T15555] bridge0: port 2(bridge_slave_1) entered disabled state
[  970.561456][T15555] bridge_slave_1: entered allmulticast mode
[  970.635909][T15555] bridge_slave_1: entered promiscuous mode
[  970.952463][ T5842] usb 9-1: new high-speed USB device number 25 using dummy_hcd
[  970.984446][T15555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  971.065617][T15555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  971.123392][ T5786] Bluetooth: hci4: command tx timeout
[  971.153185][ T5842] usb 9-1: Using ep0 maxpacket: 8
[  971.206687][ T5842] usb 9-1: config index 0 descriptor too short (expected 301, got 45)
[  971.232183][T15555] team0: Port device team_slave_0 added
[  971.240280][ T5842] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  971.250581][ T5842] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  971.260819][ T5842] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  971.270440][T15555] team0: Port device team_slave_1 added
[  971.271236][ T5842] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  971.294891][ T5842] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  971.306939][ T5842] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  971.664624][T15555] batman_adv: batadv0: Adding interface: batadv_slave_0
[  971.671772][T15555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  971.698412][T15555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  971.733376][ T5842] usb 9-1: GET_CAPABILITIES returned 0
[  971.739153][ T5842] usbtmc 9-1:16.0: can't read capabilities
[  971.912736][T15555] batman_adv: batadv0: Adding interface: batadv_slave_1
[  971.920886][T15555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  971.950284][T15555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  972.009872][ T5842] usb 9-1: USB disconnect, device number 25
[  972.580782][T15555] hsr_slave_0: entered promiscuous mode
[  972.601037][T15555] hsr_slave_1: entered promiscuous mode
[  972.637794][T15555] debugfs: 'hsr0' already exists in 'hsr'
[  972.645674][T15555] Cannot create hsr debugfs directory
[  972.697524][ T5842] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  972.899471][ T5842] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  972.910120][ T5842] usb 3-1: config 0 has no interfaces?
[  972.916386][ T5842] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  972.925986][ T5842] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  973.047302][ T5842] usb 3-1: config 0 descriptor??
[  973.203585][ T5786] Bluetooth: hci4: command tx timeout
[  973.343989][ T5842] usb 3-1: USB disconnect, device number 18
[  975.229875][T15555] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  975.282864][ T5786] Bluetooth: hci4: command tx timeout
[  975.328199][T15555] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  975.397549][T15555] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  975.504498][T15555] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  975.881187][T15666] loop0: detected capacity change from 0 to 4096
[  976.014130][T15670] loop8: detected capacity change from 0 to 4096
[  976.088499][T15670] ntfs3(loop8): Different NTFS sector size (1024) and media sector size (512).
[  976.218099][T15679] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  976.297195][   T30] audit: type=1800 audit(1770514885.081:242): pid=15666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3278" name="file1" dev="loop0" ino=15 res=0 errno=0
[  976.408959][T15664] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  976.511181][T15664] Remounting filesystem read-only
[  976.566421][T15664] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  977.008293][T10105] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer
[  977.093819][T15555] 8021q: adding VLAN 0 to HW filter on device bond0
[  977.401851][T15555] 8021q: adding VLAN 0 to HW filter on device team0
[  977.520199][ T6482] bridge0: port 1(bridge_slave_0) entered blocking state
[  977.527877][ T6482] bridge0: port 1(bridge_slave_0) entered forwarding state
[  977.775539][ T6482] bridge0: port 2(bridge_slave_1) entered blocking state
[  977.783230][ T6482] bridge0: port 2(bridge_slave_1) entered forwarding state
[  978.284243][T15695] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3285'.
[  978.612507][ T5842] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  978.817172][ T5842] usb 6-1: Using ep0 maxpacket: 16
[  978.874603][ T5842] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  978.887624][ T5842] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  978.899430][ T5842] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  978.912887][ T5842] usb 6-1: config 0 interface 0 has no altsetting 0
[  978.919831][ T5842] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  978.929270][ T5842] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  979.214972][ T5842] usb 6-1: config 0 descriptor??
[  979.339092][T15709] syzkaller1: entered promiscuous mode
[  979.345194][T15709] syzkaller1: entered allmulticast mode
[  979.544784][T15711] loop8: detected capacity change from 0 to 128
[  979.621882][T15714] loop0: detected capacity change from 0 to 128
[  979.631488][T15714] EXT4-fs: Ignoring removed nobh option
[  979.648635][T15711] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256
[  979.776572][T15697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  979.798652][T15697] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  979.851687][T15711] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  979.869937][T15714] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  979.996961][ T5842] hid (null): global environment stack underflow
[  980.006328][ T5842] hid (null): report_id 0 is invalid
[  980.022526][ T5842] hid (null): usage index exceeded
[  980.036651][ T5842] hid (null): invalid report_size 25380
[  980.042569][ T5842] hid (null): unknown global tag 0xd
[  980.048490][ T5842] hid (null): unknown global tag 0xc
[  980.054309][ T5842] hid (null): unknown global tag 0xd
[  980.077083][T15714] ext4 filesystem being mounted at /385/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  980.626689][ T5842] usb 6-1: USB disconnect, device number 27
[  980.634320][T15723] netlink: 51 bytes leftover after parsing attributes in process `syz.2.3292'.
[  980.743976][T10105] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  980.966106][T15555] 8021q: adding VLAN 0 to HW filter on device batadv0
[  981.770068][T15555] veth0_vlan: entered promiscuous mode
[  981.920868][T15555] veth1_vlan: entered promiscuous mode
[  982.124551][T15734] loop2: detected capacity change from 0 to 4096
[  982.420800][T15555] veth0_macvtap: entered promiscuous mode
[  982.599141][T15555] veth1_macvtap: entered promiscuous mode
[  982.742736][ T5845] usb 9-1: new high-speed USB device number 26 using dummy_hcd
[  982.976617][ T5845] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  982.989998][ T5845] usb 9-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[  982.999787][ T5845] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  983.009867][T15555] batman_adv: batadv0: Interface activated: batadv_slave_0
[  983.101828][T15555] batman_adv: batadv0: Interface activated: batadv_slave_1
[  983.133584][T15748] loop5: detected capacity change from 0 to 2048
[  983.171641][ T5845] usb 9-1: config 0 descriptor??
[  983.184804][T15752] loop0: detected capacity change from 0 to 512
[  983.297831][T15748] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  983.325156][T15752] EXT4-fs: Ignoring removed mblk_io_submit option
[  983.378130][   T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  983.469012][T15752] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  983.528534][ T1131] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  983.590694][ T1131] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  983.660872][T15752] EXT4-fs (loop0): 1 truncate cleaned up
[  983.732943][ T6482] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  983.804750][T15752] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  983.904005][ T5845] lenovo 0003:17EF:6047.0027: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.8-1/input0
[  983.942780][T15747] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  984.062903][T15747] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 28
[  984.075836][T15747] EXT4-fs (loop5): This should not happen!! Data will be lost
[  984.075836][T15747] 
[  984.090807][T15747] EXT4-fs (loop5): Total free blocks count 0
[  984.097254][T15747] EXT4-fs (loop5): Free/Dirty block details
[  984.103484][T15747] EXT4-fs (loop5): free_blocks=2415919504
[  984.110135][T15747] EXT4-fs (loop5): dirty_blocks=16
[  984.115916][T15747] EXT4-fs (loop5): Block reservation details
[  984.122220][T15747] EXT4-fs (loop5): i_reserved_data_blocks=1
[  984.631252][ T5845] lenovo 0003:17EF:6047.0027: Sensitivity setting failed: -71
[  984.705838][ T5845] usb 9-1: USB disconnect, device number 26
[  984.767816][T10105] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  984.888517][T15762] fido_id[15762]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory
[  984.898230][ T9963] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  985.477071][T15774] loop0: detected capacity change from 0 to 128
[  986.430669][T15788] loop5: detected capacity change from 0 to 1024
[  986.449224][ T5845] usb 9-1: new high-speed USB device number 27 using dummy_hcd
[  986.642453][T15788] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  986.672699][T15788] ext4 filesystem being mounted at /414/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  986.726818][ T5845] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  986.738035][ T5845] usb 9-1: config 0 has no interfaces?
[  986.744175][ T5845] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  986.753544][ T5845] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  986.878165][T15788] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: comm syz.5.3308: lblock 0 mapped to illegal pblock 0 (length 1)
[  986.914881][ T5845] usb 9-1: config 0 descriptor??
[  986.985327][T15788] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  986.998358][T15788] EXT4-fs (loop5): This should not happen!! Data will be lost
[  986.998358][T15788] 
[  987.140098][T15782] loop8: detected capacity change from 0 to 8192
[  987.308334][ T6939]  loop8: p1 p2 p3
[  987.312402][ T6939] loop8: partition table partially beyond EOD, truncated
[  987.333972][T15788] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: comm syz.5.3308: lblock 0 mapped to illegal pblock 0 (length 1)
[  987.361929][ T6939] loop8: p1 start 51379968 is beyond EOD, truncated
[  987.415412][   T30] audit: type=1800 audit(1770514896.201:243): pid=15788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3308" name="file1" dev="loop5" ino=15 res=0 errno=0
[  987.418278][ T6939] loop8: p3 size 100663552 extends beyond EOD, truncated
[  987.474397][T15788] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #15: comm syz.5.3308: lblock 0 mapped to illegal pblock 0 (length 1)
[  987.621565][T15782]  loop8: p1 p2 p3
[  987.626146][T15782] loop8: partition table partially beyond EOD, truncated
[  987.644504][T15782] loop8: p1 start 51379968 is beyond EOD, truncated
[  987.738823][T15782] loop8: p3 size 100663552 extends beyond EOD, truncated
[  987.907568][ T5842] usb 9-1: USB disconnect, device number 27
[  988.032488][T15807] netlink: 'syz.0.3311': attribute type 1 has an invalid length.
[  988.048194][ T9963] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  988.401184][T15807] 8021q: adding VLAN 0 to HW filter on device bond1
[  988.680964][T15812] loop2: detected capacity change from 0 to 4096
[  988.716519][T15814] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  988.821997][T15819] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  990.036783][ T6939] udevd[6939]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory
[  990.112934][ T7989] udevd[7989]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory
[  990.711318][T13730] udevd[13730]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory
[  990.754223][ T6939] udevd[6939]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory
[  991.764723][T10119] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  991.772935][T10119] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  992.029865][T15862] netlink: 'syz.5.3324': attribute type 1 has an invalid length.
[  992.036291][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  992.048716][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  992.385790][T15862] 8021q: adding VLAN 0 to HW filter on device bond1
[  992.492302][ T5846] usb 9-1: new high-speed USB device number 28 using dummy_hcd
[  992.566873][T15866] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  992.694561][ T5846] usb 9-1: Using ep0 maxpacket: 16
[  992.762444][ T5846] usb 9-1: config 0 has an invalid interface number: 105 but max is 0
[  992.770855][ T5846] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  992.783164][ T5846] usb 9-1: config 0 has no interface number 0
[  992.923903][ T5846] usb 9-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  992.933384][ T5846] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  992.941577][ T5846] usb 9-1: Product: syz
[  992.946211][ T5846] usb 9-1: Manufacturer: syz
[  992.950982][ T5846] usb 9-1: SerialNumber: syz
[  993.090571][ T5846] usb 9-1: config 0 descriptor??
[  993.166420][ T5846] uvcvideo 9-1:0.105: Found UVC 0.00 device syz (046d:08f3)
[  993.174202][ T5846] uvcvideo 9-1:0.105: No valid video chain found.
[  993.412913][ T5846] usb 9-1: USB disconnect, device number 28
[  995.225142][T15901] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  995.404521][T15901] bridge0: port 2(bridge_slave_1) entered disabled state
[  995.413873][T15901] bridge0: port 1(bridge_slave_0) entered disabled state
[  996.329871][T15920] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3342'.
[  998.034803][T15941] loop5: detected capacity change from 0 to 7
[  998.071131][ T6939] Dev loop5: unable to read RDB block 7
[  998.077192][ T6939]  loop5: unable to read partition table
[  998.160446][ T6939] loop5: partition table beyond EOD, truncated
[  998.171471][T15941] Dev loop5: unable to read RDB block 7
[  998.179460][T15941]  loop5: unable to read partition table
[  998.253882][T15941] loop5: partition table beyond EOD, truncated
[  998.260440][T15941] loop_reread_partitions: partition scan of loop5 (�被x������ ) failed (rc=-5)
[  998.856651][T15950] vxcan1: tx drop: invalid da for name 0x0000000000000016
[  999.776619][T15963] loop2: detected capacity change from 0 to 1024
[ 1000.019964][T15962] loop5: detected capacity change from 0 to 4096
[ 1000.094301][T15962] EXT4-fs: Ignoring removed bh option
[ 1000.141145][T15963] hfsplus: catalog searching failed
[ 1000.221537][T15962] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1000.680101][T15962] EXT4-fs error (device loop5): ext4_get_first_dir_block:3547: inode #12: block 80: comm syz.5.3357: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0
[ 1000.797868][T15962] EXT4-fs error (device loop5): ext4_get_first_dir_block:3550: inode #12: comm syz.5.3357: directory missing '..'
[ 1000.914881][ T1131] hfsplus: b-tree write err: -5, ino 3
[ 1000.959697][ T8979] hfsplus: node 4:3 still has 1 user(s)!
[ 1001.140203][ T9963] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1001.473206][T15985] netlink: 'syz.2.3363': attribute type 8 has an invalid length.
[ 1001.481266][T15985] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3363'.
[ 1001.675264][T15985] bond0: entered promiscuous mode
[ 1001.680630][T15985] bond_slave_0: entered promiscuous mode
[ 1001.687937][T15985] bond_slave_1: entered promiscuous mode
[ 1001.863872][T15985] gretap0: entered promiscuous mode
[ 1001.928904][T15985] ip6gretap0: entered promiscuous mode
[ 1001.996458][T15985] hsr2: entered promiscuous mode
[ 1002.376546][T15996] loop1: detected capacity change from 0 to 1024
[ 1002.493006][T15996] EXT4-fs: Ignoring removed nobh option
[ 1002.498942][T15996] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1002.633886][T15996] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1003.338600][T15555] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1003.392466][ T5846] usb 9-1: new high-speed USB device number 29 using dummy_hcd
[ 1003.635288][ T5846] usb 9-1: Using ep0 maxpacket: 16
[ 1003.675910][ T5846] usb 9-1: config 1 has an invalid interface number: 105 but max is 0
[ 1003.684501][ T5846] usb 9-1: config 1 has no interface number 0
[ 1003.762736][ T5846] usb 9-1: config 1 interface 105 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1003.775831][ T5846] usb 9-1: config 1 interface 105 has no altsetting 0
[ 1003.864566][ T5846] usb 9-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[ 1003.875546][ T5846] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1003.884425][ T5846] usb 9-1: Product: syz
[ 1003.888808][ T5846] usb 9-1: Manufacturer: syz
[ 1003.893963][ T5846] usb 9-1: SerialNumber: syz
[ 1003.895261][T16019] loop2: detected capacity change from 0 to 128
[ 1003.929607][T16019] vfat: Unknown parameter '0177777777777777777777718446744073709551615�I���`�0'
[ 1004.307877][ T5846] aqc111 9-1:1.105: probe with driver aqc111 failed with error -22
[ 1004.449648][   T30] audit: type=1326 audit(1770514913.231:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16028 comm="syz.5.3376" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf739d539 code=0x0
[ 1004.565600][ T5846] usb 9-1: USB disconnect, device number 29
[ 1005.793911][T16045] loop8: detected capacity change from 0 to 8
[ 1005.912746][T16045] SQUASHFS error: Failed to read block 0x4de: -5
[ 1005.984993][T16045] SQUASHFS error: Failed to read block 0x4de: -5
[ 1005.997234][   T30] audit: type=1800 audit(1770514914.781:245): pid=16045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3380" name="file1" dev="loop8" ino=5 res=0 errno=0
[ 1006.933783][T16061] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3387'.
[ 1008.623432][T16087] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3395'.
[ 1008.690034][T16087] netlink: 190 bytes leftover after parsing attributes in process `syz.0.3395'.
[ 1009.510137][T16100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3400'.
[ 1009.573009][T16100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3400'.
[ 1009.923196][T14272] Bluetooth: hci1: command 0x0406 tx timeout
[ 1010.405007][T16117] loop0: detected capacity change from 0 to 512
[ 1010.448755][T16117] EXT4-fs: Ignoring removed nobh option
[ 1010.516818][T16117] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[ 1010.707958][T16117] EXT4-fs (loop0): 1 truncate cleaned up
[ 1010.776200][T16117] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1010.808395][T16125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3407'.
[ 1011.324565][T10105] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1012.822283][ T5846] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[ 1012.833367][T16157] loop5: detected capacity change from 0 to 7
[ 1012.858880][T16157] Dev loop5: unable to read RDB block 7
[ 1012.865346][T16157]  loop5: AHDI p1 p2 p3
[ 1012.869690][T16157] loop5: partition table partially beyond EOD, truncated
[ 1012.968070][T16157] loop5: p1 start 1601398130 is beyond EOD, truncated
[ 1012.978382][T16157] loop5: p2 start 1702059890 is beyond EOD, truncated
[ 1013.019657][ T5846] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1013.033918][ T5846] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1013.044207][ T5846] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1013.057614][ T5846] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1013.067044][ T5846] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1013.169024][ T5846] usb 3-1: config 0 descriptor??
[ 1013.741307][T16166] loop8: detected capacity change from 0 to 128
[ 1013.794364][ T5846] plantronics 0003:047F:FFFF.0028: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[ 1013.846856][T16166] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[ 1013.889485][T16166] hpfs: filesystem error: improperly stopped
[ 1013.896350][T16166] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[ 1013.906322][T16166] hpfs: You really don't want any checks? You are crazy...
[ 1013.972754][T16166] hpfs: hpfs_map_sector(): read error
[ 1013.978432][T16166] hpfs: code page support is disabled
[ 1014.099909][T16166] hpfs: hpfs_map_4sectors(): unaligned read
[ 1014.175328][T16166] hpfs: hpfs_map_4sectors(): unaligned read
[ 1014.181575][T16166] hpfs: filesystem error: unable to find root dir
[ 1014.236701][T16172] netlink: 7 bytes leftover after parsing attributes in process `syz.5.3422'.
[ 1014.248530][T16172] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3422'.
[ 1014.258068][T16172] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3422'.
[ 1014.972991][    C0] plantronics 0003:047F:FFFF.0028: usb_submit_urb(ctrl) failed: -1
[ 1015.112466][ T5846] usb 3-1: reset high-speed USB device number 19 using dummy_hcd
[ 1015.348098][T16180] loop5: detected capacity change from 0 to 512
[ 1015.467153][T16184] netlink: 'syz.0.3426': attribute type 25 has an invalid length.
[ 1015.475974][T16184] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3426'.
[ 1015.533162][T16180] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[ 1015.703898][T16180] EXT4-fs (loop5): 1 truncate cleaned up
[ 1015.711606][T16180] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1015.867170][T16179] loop1: detected capacity change from 0 to 4096
[ 1015.946639][ T5845] usb 3-1: USB disconnect, device number 19
[ 1016.410502][T16192] loop0: detected capacity change from 0 to 512
[ 1016.502396][T16192] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[ 1016.544930][ T9963] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1016.677992][T16192] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.3428: inode has both inline data and extents flags
[ 1016.791658][   T30] audit: type=1800 audit(1770514925.571:246): pid=16179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3423" name="file1" dev="loop1" ino=33 res=0 errno=0
[ 1016.864797][T16192] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.3428: couldn't read orphan inode 15 (err -117)
[ 1016.936000][T16192] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1017.237161][T16199] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3431'.
[ 1017.240480][T16202] loop5: detected capacity change from 0 to 8
[ 1017.434381][T10105] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1021.315052][   T30] audit: type=1800 audit(1770514930.091:247): pid=16255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3445" name="file1" dev="overlay" ino=2363 res=0 errno=0
[ 1022.494369][T16272] loop8: detected capacity change from 0 to 8
[ 1022.548448][ T6939] Dev loop8: unable to read RDB block 8
[ 1022.554756][ T6939]  loop8: unable to read partition table
[ 1022.583833][ T6939] loop8: partition table beyond EOD, truncated
[ 1022.618542][T16272] Dev loop8: unable to read RDB block 8
[ 1022.624669][T16272]  loop8: unable to read partition table
[ 1022.691335][T16272] loop8: partition table beyond EOD, truncated
[ 1022.698913][T16272] loop_reread_partitions: partition scan of loop8 (�被x�^>��� ) failed (rc=-5)
[ 1022.891171][T16276] loop0: detected capacity change from 0 to 256
[ 1023.077688][T16279] loop2: detected capacity change from 0 to 128
[ 1023.116768][T16279] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1023.235307][T16279] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1023.275328][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 1023.373024][T16276] FAT-fs (loop0): Directory bread(block 64) failed
[ 1023.420853][T16276] FAT-fs (loop0): Directory bread(block 65) failed
[ 1023.497590][T16276] FAT-fs (loop0): Directory bread(block 66) failed
[ 1023.586123][T16276] FAT-fs (loop0): Directory bread(block 67) failed
[ 1023.615344][T16282] loop5: detected capacity change from 0 to 1024
[ 1023.669292][T16276] FAT-fs (loop0): Directory bread(block 68) failed
[ 1023.730673][T16276] FAT-fs (loop0): Directory bread(block 69) failed
[ 1023.741650][T16277] loop8: detected capacity change from 0 to 4096
[ 1023.787864][T16276] FAT-fs (loop0): Directory bread(block 70) failed
[ 1023.805354][T16282] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1023.867457][T16276] FAT-fs (loop0): Directory bread(block 71) failed
[ 1023.937023][T16276] FAT-fs (loop0): Directory bread(block 72) failed
[ 1023.973072][T16276] FAT-fs (loop0): Directory bread(block 73) failed
[ 1024.495907][ T9963] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1025.480888][T16302] loop2: detected capacity change from 0 to 256
[ 1025.510201][T16302] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1025.682389][T16302] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1025.958641][ T5845] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[ 1026.175554][ T5845] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1026.187410][ T5845] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1026.199321][ T5845] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1026.213141][ T5845] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1026.222588][ T5845] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1026.327716][ T5845] usb 2-1: config 0 descriptor??
[ 1026.924222][T16319] loop2: detected capacity change from 0 to 1024
[ 1026.952558][ T5845] plantronics 0003:047F:FFFF.0029: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[ 1026.955221][T16319] EXT4-fs: Ignoring removed bh option
[ 1027.087303][T16319] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1027.165955][ T8224] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[ 1027.337854][T16328] loop0: detected capacity change from 0 to 512
[ 1027.347220][ T8224] usb 6-1: Using ep0 maxpacket: 8
[ 1027.414529][ T8224] usb 6-1: config 179 has an invalid interface number: 97 but max is 0
[ 1027.424969][ T8224] usb 6-1: config 179 has no interface number 0
[ 1027.463877][    C1] plantronics 0003:047F:FFFF.0029: hid_field_extract() called with n (132) > 32! (syz.1.3463)
[ 1027.497987][ T8224] usb 6-1: config 179 interface 97 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[ 1027.511196][ T8224] usb 6-1: config 179 interface 97 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[ 1027.524630][ T8224] usb 6-1: config 179 interface 97 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23
[ 1027.538801][ T8224] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.ce
[ 1027.548281][ T8224] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1027.567241][T16321] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1027.619226][T16328] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1027.643430][T16328] ext4 filesystem being mounted at /418/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1027.776340][ T8224] usb 2-1: USB disconnect, device number 3
[ 1027.869223][ T8979] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1027.915654][T16321] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3465'.
[ 1027.976267][ T5842] usb 6-1: USB disconnect, device number 28
[ 1028.028019][T16330] fido_id[16330]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[ 1028.678048][T16338] loop8: detected capacity change from 0 to 1024
[ 1028.709663][T16338] EXT4-fs: Ignoring removed orlov option
[ 1028.786628][T10105] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1028.796706][T16338] /dev/loop8: Can't open blockdev
[ 1029.435260][T16347] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.3472'.
[ 1030.327840][T16359] loop1: detected capacity change from 0 to 2048
[ 1030.453037][T16359]  loop1: p3 < > p4 < >
[ 1030.457471][T16359] loop1: partition table partially beyond EOD, truncated
[ 1030.477766][T16359] loop1: p3 start 4284289 is beyond EOD, truncated
[ 1030.902823][    T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!!
[ 1031.615253][T16385] overlayfs: "xino" feature enabled using 3 upper inode bits.
[ 1031.689677][T16385] overlayfs: "xino" feature enabled using 3 upper inode bits.
[ 1034.108834][   T30] audit: type=1800 audit(1770514942.891:248): pid=16422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3495" name="file1" dev="overlay" ino=535 res=0 errno=0
[ 1034.616652][T16429] loop8: detected capacity change from 0 to 256
[ 1034.972352][ T5845] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[ 1035.185026][ T5845] usb 3-1: Using ep0 maxpacket: 32
[ 1035.256845][ T5845] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1035.268772][ T5845] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1035.279770][ T5845] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[ 1035.289477][ T5845] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1035.461033][ T5845] usb 3-1: config 0 descriptor??
[ 1035.762848][ T5845] usbhid 3-1:0.0: can't add hid device: -71
[ 1035.769374][ T5845] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 1035.842336][ T5845] usb 3-1: USB disconnect, device number 20
[ 1036.652721][ T5845] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[ 1036.873477][ T5845] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1036.884151][ T5845] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1036.893420][ T5845] usb 2-1: config 1 has no interface number 0
[ 1036.938606][ T5845] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1036.951400][ T5845] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[ 1037.002393][ T5845] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 14385, setting to 1024
[ 1037.016455][ T5845] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[ 1037.026959][ T5845] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1037.144063][ T5845] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1037.155120][ T5845] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1037.164003][ T5845] usb 2-1: Product: syz
[ 1037.168336][ T5845] usb 2-1: Manufacturer: syz
[ 1037.173238][ T5845] usb 2-1: SerialNumber: syz
[ 1037.385484][T16460] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3509'.
[ 1037.395265][T16460] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3509'.
[ 1037.407622][T16460] macvlan0: entered allmulticast mode
[ 1037.413551][T16460] veth1_vlan: entered allmulticast mode
[ 1037.513420][T16449] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1038.154666][T16449] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1038.209444][ T5845] cdc_ncm 2-1:1.1: bind() failure
[ 1038.392345][ T8224] libceph: connect (1)[c::]:6789 error -101
[ 1038.403517][ T8224] libceph: mon0 (1)[c::]:6789 connect error
[ 1038.422351][ T8224] libceph: connect (1)[c::]:6789 error -101
[ 1038.428652][ T8224] libceph: mon0 (1)[c::]:6789 connect error
[ 1038.487862][ T5845] usb 2-1: USB disconnect, device number 4
[ 1038.713748][ T5842] libceph: connect (1)[c::]:6789 error -101
[ 1038.723403][ T5842] libceph: mon0 (1)[c::]:6789 connect error
[ 1039.102867][T16471] ceph: No mds server is up or the cluster is laggy
[ 1040.539755][T16497] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[ 1040.540221][T16497] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[ 1041.172692][T16503] loop5: detected capacity change from 0 to 7
[ 1041.213064][T13730] Dev loop5: unable to read RDB block 7
[ 1041.219151][T13730]  loop5: AHDI p1 p2 p3
[ 1041.223876][T13730] loop5: partition table partially beyond EOD, truncated
[ 1041.266497][T13730] loop5: p1 size 100663304 extends beyond EOD, truncated
[ 1041.284102][T13730] loop5: p2 start 1702059890 is beyond EOD, truncated
[ 1041.367551][T16503] Dev loop5: unable to read RDB block 7
[ 1041.373661][T16503]  loop5: AHDI p1 p2 p3
[ 1041.378013][T16503] loop5: partition table partially beyond EOD, truncated
[ 1041.441628][T16503] loop5: p1 size 100663304 extends beyond EOD, truncated
[ 1041.516503][T16503] loop5: p2 start 1702059890 is beyond EOD, truncated
[ 1041.870258][ T6939] udevd[6939]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[ 1042.054619][ T6939] udevd[6939]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[ 1042.173522][ T5846] usb 9-1: new high-speed USB device number 30 using dummy_hcd
[ 1042.374964][ T5846] usb 9-1: Using ep0 maxpacket: 16
[ 1042.438587][ T5846] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[ 1042.438739][ T5846] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 52, changing to 9
[ 1042.438883][ T5846] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 8241, setting to 1024
[ 1042.439029][ T5846] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1042.446853][ T5846] usb 9-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[ 1042.446994][ T5846] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1042.447111][ T5846] usb 9-1: Product: syz
[ 1042.447204][ T5846] usb 9-1: Manufacturer: syz
[ 1042.447296][ T5846] usb 9-1: SerialNumber: syz
[ 1042.481401][ T5846] usb 9-1: config 0 descriptor??
[ 1042.762676][ T5846] input: syz syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input42
[ 1043.045925][ T8224] usb 9-1: USB disconnect, device number 30
[ 1044.257327][T16531] loop2: detected capacity change from 0 to 2048
[ 1044.414590][T16531] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[ 1044.486585][T16531] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1044.852419][T16544] loop5: detected capacity change from 0 to 7
[ 1044.892920][T16544] Dev loop5: unable to read RDB block 7
[ 1044.898832][T16544]  loop5: AHDI p1 p2 p3
[ 1044.904087][T16544] loop5: partition table partially beyond EOD, truncated
[ 1044.984647][T16544] loop5: p1 size 100663304 extends beyond EOD, truncated
[ 1045.093914][T16544] loop5: p2 start 1702059890 is beyond EOD, truncated
[ 1045.594879][ T6939] udevd[6939]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[ 1045.973816][T16554] tun0: tun_chr_ioctl cmd 1074025675
[ 1045.979467][T16554] tun0: persist enabled
[ 1046.028656][T16559] tun0: tun_chr_ioctl cmd 1074025675
[ 1046.034532][T16559] tun0: persist disabled
[ 1046.057883][T16557] loop2: detected capacity change from 0 to 256
[ 1046.240001][   T30] audit: type=1800 audit(1770514955.011:249): pid=16557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3545" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=1048767 res=0 errno=0
[ 1046.868201][T16567] loop1: detected capacity change from 0 to 128
[ 1047.039945][T16567] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1047.166325][T16567] ext4 filesystem being mounted at /45/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[ 1047.739425][T15555] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1048.361795][T16586] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[ 1048.504760][T16588] pim6reg1: entered promiscuous mode
[ 1048.510327][T16588] pim6reg1: entered allmulticast mode
[ 1049.931229][T16601] loop1: detected capacity change from 0 to 8192
[ 1050.007231][T16610] loop0: detected capacity change from 0 to 128
[ 1050.116387][T16610] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1050.171905][T16610] ext4 filesystem being mounted at /431/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1050.649979][T10105] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1050.791664][T16617] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3569'.
[ 1050.853671][T16617] vxlan0: entered promiscuous mode
[ 1050.894650][T16618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3570'.
[ 1050.907710][ T1131] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1051.122440][ T1131] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1051.203187][   T36] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1051.269478][T15759] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1054.519207][T16667] loop8: detected capacity change from 0 to 164
[ 1054.683086][ T5842] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[ 1054.763581][T16669] loop1: detected capacity change from 0 to 512
[ 1054.815150][T16671] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1054.826097][T16671] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1054.835010][T16669] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[ 1054.884157][ T5842] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1054.895497][ T5842] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1054.905747][ T5842] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1054.919164][ T5842] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1054.928585][ T5842] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1055.028918][T16669] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #2: block 9: comm syz.1.3588: lblock 0 mapped to illegal pblock 9 (length 1)
[ 1055.080049][ T5842] usb 6-1: config 0 descriptor??
[ 1055.159819][T16669] EXT4-fs (loop1): mount failed
[ 1055.602941][ T5842] plantronics 0003:047F:FFFF.002A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[ 1056.690100][ T1094] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1056.926565][ T1094] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1056.975640][    C1] plantronics 0003:047F:FFFF.002A: usb_submit_urb(ctrl) failed: -1
[ 1057.138535][ T1094] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1057.328319][ T1094] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1057.757572][ T1094] bridge_slave_1: left allmulticast mode
[ 1057.763754][ T1094] bridge_slave_1: left promiscuous mode
[ 1057.770292][ T1094] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1057.785061][ T5846] usb 6-1: USB disconnect, device number 29
[ 1057.838820][ T1094] bridge_slave_0: left allmulticast mode
[ 1057.845754][ T1094] bridge_slave_0: left promiscuous mode
[ 1057.852471][ T1094] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1058.430945][ T1094] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1058.451647][ T1094] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1058.466955][ T1094] bond0 (unregistering): Released all slaves
[ 1059.690455][ T1094] hsr_slave_0: left promiscuous mode
[ 1059.728727][ T1094] hsr_slave_1: left promiscuous mode
[ 1059.755086][ T1094] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1059.763363][ T1094] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1059.793614][ T1094] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1059.801385][ T1094] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1059.873084][T14272] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1059.900187][T14272] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1059.913659][T14272] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1059.937313][T14272] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1059.950828][T14272] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1060.018022][ T1094] veth1_macvtap: left promiscuous mode
[ 1060.036745][T16720] loop5: detected capacity change from 0 to 2048
[ 1060.046727][T16720] EXT4-fs: Ignoring removed i_version option
[ 1060.072663][ T1094] veth0_macvtap: left promiscuous mode
[ 1060.089527][ T1094] veth1_vlan: left promiscuous mode
[ 1060.122470][ T1094] veth0_vlan: left promiscuous mode
[ 1060.132765][T16720] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1060.168340][T16720] ext4 filesystem being mounted at /474/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1060.854235][ T9963] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1062.003023][ T5786] Bluetooth: hci1: command tx timeout
[ 1062.020905][T16744] loop0: detected capacity change from 0 to 1024
[ 1062.169874][T16744] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1062.311301][ T1094] team0 (unregistering): Port device team_slave_1 removed
[ 1062.348647][T16748] loop5: detected capacity change from 0 to 1024
[ 1062.363504][T16744] EXT4-fs (loop0): shut down requested (0)
[ 1062.502660][ T1094] team0 (unregistering): Port device team_slave_0 removed
[ 1062.825630][T10105] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1063.000212][ T1131] hfsplus: bad catalog file entry
[ 1063.057030][ T1131] hfsplus: b-tree write err: -5, ino 3
[ 1064.082521][ T5786] Bluetooth: hci1: command tx timeout
[ 1065.025400][T16717] chnl_net:caif_netlink_parms(): no params data found
[ 1065.314219][T16645] kernel write not supported for file bpf-prog (pid: 16645 comm: kworker/1:11)
[ 1066.174842][ T5786] Bluetooth: hci1: command tx timeout
[ 1066.388147][T16717] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1066.395894][T16717] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1066.435438][T16717] bridge_slave_0: entered allmulticast mode
[ 1066.458257][T16717] bridge_slave_0: entered promiscuous mode
[ 1066.486088][T16717] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1066.494063][T16717] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1066.531567][T16717] bridge_slave_1: entered allmulticast mode
[ 1066.564909][T16717] bridge_slave_1: entered promiscuous mode
[ 1066.982687][T16717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1067.034377][T16717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1067.280832][T16717] team0: Port device team_slave_0 added
[ 1067.352986][T16717] team0: Port device team_slave_1 added
[ 1067.638523][T16717] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1067.645957][T16717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1067.673512][T16717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1067.814840][T16717] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1067.823191][T16717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1067.849994][T16717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1068.204001][T16827] loop5: detected capacity change from 0 to 2048
[ 1068.244756][ T5786] Bluetooth: hci1: command tx timeout
[ 1068.401932][T16717] hsr_slave_0: entered promiscuous mode
[ 1068.414649][T16832] loop2: detected capacity change from 0 to 1024
[ 1068.429864][T16717] hsr_slave_1: entered promiscuous mode
[ 1068.469877][T16717] debugfs: 'hsr0' already exists in 'hsr'
[ 1068.475967][T16717] Cannot create hsr debugfs directory
[ 1069.083355][T10119] hfsplus: b-tree write err: -5, ino 4
[ 1071.296830][T16717] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1071.352539][T16865] loop5: detected capacity change from 0 to 256
[ 1071.392654][T16865] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1071.409511][T16717] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1071.528257][T16717] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1071.535013][T16865] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010364, chksum : 0x44009a1b, utbl_chksum : 0xe619d30d)
[ 1071.628030][T16717] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1071.928888][T16871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3649'.
[ 1073.421276][T16717] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1073.543649][T16717] 8021q: adding VLAN 0 to HW filter on device team0
[ 1073.658247][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1073.665777][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1073.829613][T10119] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1073.837156][T10119] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1076.137029][T16717] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1076.705502][    C0] vcan0: j1939_tp_rxtimer: 0xffff88804f5bee00: rx timeout, send abort
[ 1076.715362][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88804f5bee00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[ 1077.409206][T16950] loop1: detected capacity change from 0 to 128
[ 1077.541717][T16950] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1077.575427][T16950] ext4 filesystem being mounted at /72/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1078.066358][T15555] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1079.387727][T16717] veth0_vlan: entered promiscuous mode
[ 1079.568908][T16717] veth1_vlan: entered promiscuous mode
[ 1080.041084][T16717] veth0_macvtap: entered promiscuous mode
[ 1080.193144][T16717] veth1_macvtap: entered promiscuous mode
[ 1080.434413][T16717] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1080.545540][T16717] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1080.679074][ T1131] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1080.755771][ T1131] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1080.792951][ T1131] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1080.847600][ T1131] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1080.952189][T16989] loop2: detected capacity change from 0 to 8192
[ 1081.418399][T17001] loop5: detected capacity change from 0 to 16
[ 1081.479389][T17001] erofs: Unknown parameter 'A'
[ 1081.482209][T17005] loop1: detected capacity change from 0 to 16
[ 1081.632961][T17005] erofs (device loop1): mounted with root inode @ nid 36.
[ 1081.753772][T17005] erofs (device loop1): bogus lookback distance 1388 @ lcn 42 of nid 36
[ 1081.813158][T17005] erofs (device loop1): failed to decompress (lz4) -117 @ pa 4096 size 4096 => 1851
[ 1081.823400][T17005] erofs (device loop1): read error -117 @ 43 of nid 36
[ 1081.914923][T17009] erofs (device loop1): bogus lookback distance 1388 @ lcn 42 of nid 36
[ 1082.005950][T17009] erofs (device loop1): failed to decompress (lz4) -117 @ pa 4096 size 4096 => 1851
[ 1082.064261][T17009] erofs (device loop1): read error -117 @ 43 of nid 36
[ 1082.648779][T17015] loop5: detected capacity change from 0 to 2048
[ 1082.870843][T17015] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1083.001344][T17015] EXT4-fs (loop5): shut down requested (1)
[ 1083.484534][ T9963] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1083.797089][T17031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3693'.
[ 1083.900047][T17031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3693'.
[ 1084.008189][T17034] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3693'.
[ 1084.681808][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 1085.042610][T16644] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[ 1085.245839][T16644] usb 6-1: Using ep0 maxpacket: 32
[ 1085.302784][T16644] usb 6-1: config 0 has an invalid interface number: 67 but max is 0
[ 1085.311233][T16644] usb 6-1: config 0 has no interface number 0
[ 1085.372781][T16644] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1085.383580][T16644] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1085.391784][T16644] usb 6-1: Product: syz
[ 1085.396768][T16644] usb 6-1: Manufacturer: syz
[ 1085.401541][T16644] usb 6-1: SerialNumber: syz
[ 1085.499750][T16644] usb 6-1: config 0 descriptor??
[ 1085.554099][T16644] smsc95xx v2.0.0
[ 1086.814338][T16644] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71
[ 1086.825971][T16644] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD
[ 1086.922883][T16644] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[ 1086.991458][T16644] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71
[ 1087.102627][T16644] usb 6-1: USB disconnect, device number 30
[ 1087.886222][ T1131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1087.894490][ T1131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1088.039113][T17094] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3710'.
[ 1088.266365][T15759] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1088.274597][T15759] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1088.463908][T17101] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3713'.
[ 1091.654040][ T1154] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1091.665023][ T1154] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1091.856204][T14272] Bluetooth: hci4: command 0x0406 tx timeout
[ 1092.038817][ T1154] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1092.049903][ T1154] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1092.258026][ T1154] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1092.269161][ T1154] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1092.498313][ T1154] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1092.509097][ T1154] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1093.021686][ T1154] bridge_slave_1: left allmulticast mode
[ 1093.027802][ T1154] bridge_slave_1: left promiscuous mode
[ 1093.034414][ T1154] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1093.076946][ T1154] bridge_slave_0: left allmulticast mode
[ 1093.083000][ T1154] bridge_slave_0: left promiscuous mode
[ 1093.089549][ T1154] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1093.858310][ T1154] bond1 (unregistering): (slave geneve2): Releasing backup interface
[ 1093.930415][T17171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3733'.
[ 1094.231882][ T1154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1094.313298][ T1154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1094.387814][ T1154] bond0 (unregistering): Released all slaves
[ 1094.532723][ T1154] bond1 (unregistering): Released all slaves
[ 1094.725565][T14272] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1094.743893][T14272] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1094.764959][T14272] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1094.794244][T14272] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1094.807341][T14272] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1096.399703][ T1154] hsr_slave_0: left promiscuous mode
[ 1096.445102][ T1154] hsr_slave_1: left promiscuous mode
[ 1096.480729][ T1154] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1096.504944][ T1154] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1096.512844][ T1154] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1096.630802][ T1154] veth1_macvtap: left promiscuous mode
[ 1096.669312][ T1154] veth0_macvtap: left promiscuous mode
[ 1096.689344][ T1154] veth1_vlan: left allmulticast mode
[ 1096.696315][ T1154] veth1_vlan: left promiscuous mode
[ 1096.743149][ T1154] veth0_vlan: left promiscuous mode
[ 1096.882707][T14272] Bluetooth: hci2: command tx timeout
[ 1098.312743][T17237] loop2: detected capacity change from 0 to 512
[ 1098.605990][T17237] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1098.701742][T17237] ext4 filesystem being mounted at /578/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1098.814400][ T1154] team0 (unregistering): Port device team_slave_1 removed
[ 1098.924344][ T1154] team0 (unregistering): Port device team_slave_0 removed
[ 1098.962510][T14272] Bluetooth: hci2: command tx timeout
[ 1099.045395][ T8979] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1099.537423][ T1154] team0 (unregistering): Port device dummy0 removed
[ 1100.205772][T17255] netlink: 1371 bytes leftover after parsing attributes in process `syz.1.3756'.
[ 1101.042903][T14272] Bluetooth: hci2: command tx timeout
[ 1101.349789][T17181] chnl_net:caif_netlink_parms(): no params data found
[ 1101.625228][T17268] loop1: detected capacity change from 0 to 4096
[ 1101.678906][T17268] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[ 1102.056486][T17268] ntfs3(loop1): ino=19, mi_enum_attr
[ 1102.082416][T17268] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[ 1102.365158][T17281] kernel read not supported for file /file0 (pid: 17281 comm: syz.4.3764)
[ 1102.426534][   T30] audit: type=1800 audit(1770515011.211:250): pid=17281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3764" name="file0" dev="mqueue" ino=57955 res=0 errno=0
[ 1103.099110][T17181] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1103.109910][T17181] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1103.132298][T14272] Bluetooth: hci2: command tx timeout
[ 1103.169174][T17181] bridge_slave_0: entered allmulticast mode
[ 1103.197790][T17181] bridge_slave_0: entered promiscuous mode
[ 1103.229147][T17181] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1103.237531][T17181] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1103.292831][T17296] fuse: Bad value for 'fd'
[ 1103.313920][T17181] bridge_slave_1: entered allmulticast mode
[ 1103.366034][T17181] bridge_slave_1: entered promiscuous mode
[ 1103.444167][T16645] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[ 1103.658085][T16645] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1103.671407][T16645] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1103.683276][T16645] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1103.693438][T16645] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1103.706731][T16645] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1103.717189][T16645] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1103.785939][T17181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1103.796641][T17300] loop1: detected capacity change from 0 to 1024
[ 1103.885626][T17181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1103.910561][T17300] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1103.995134][T16645] usb 5-1: config 0 descriptor??
[ 1104.034864][T17181] team0: Port device team_slave_0 added
[ 1104.065721][T17181] team0: Port device team_slave_1 added
[ 1104.124275][T17300] EXT4-fs (loop1): shut down requested (1)
[ 1104.507048][T17181] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1104.514257][T17181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1104.542469][T17181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1104.567074][T16645] plantronics 0003:047F:FFFF.002B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[ 1104.762577][T17181] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1104.769841][T17181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1104.796565][T17181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1104.989633][T15555] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1105.210221][T17312] loop2: detected capacity change from 0 to 2048
[ 1105.329177][T17312] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1105.436260][T16645] usb 5-1: USB disconnect, device number 6
[ 1105.639067][T17181] hsr_slave_0: entered promiscuous mode
[ 1105.690196][T17181] hsr_slave_1: entered promiscuous mode
[ 1105.756690][T17181] debugfs: 'hsr0' already exists in 'hsr'
[ 1105.766693][T17181] Cannot create hsr debugfs directory
[ 1105.802662][ T5845] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[ 1106.020494][ T5845] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1106.034032][ T5845] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1106.107547][ T5845] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1106.119311][ T5845] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1106.127750][ T5845] usb 3-1: SerialNumber: syz
[ 1106.440901][ T5845] usb 3-1: 0:2 : does not exist
[ 1106.629043][ T5845] usb 3-1: USB disconnect, device number 21
[ 1106.819202][ T6939] udevd[6939]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1107.697415][T17181] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1107.818135][T17342] binder: 17341:17342 ioctl 4018620d 0 returned -22
[ 1107.918260][T17342] binder: 17341:17342 ioctl c0306201 800001c0 returned -14
[ 1107.955428][T17181] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1108.198665][T17181] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1108.313469][T17335] loop4: detected capacity change from 0 to 8192
[ 1108.414243][T17335] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1108.437584][T17181] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1109.435085][T17181] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1109.537501][T17181] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1109.572409][T17365] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3789'.
[ 1109.623318][ T5838] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[ 1109.624502][T17367] loop1: detected capacity change from 0 to 256
[ 1109.654637][T17181] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1109.740801][T17181] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1109.802920][ T5838] usb 5-1: Using ep0 maxpacket: 8
[ 1109.832275][ T5838] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[ 1109.872537][T17367] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[ 1109.901498][ T5838] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1109.911919][ T5838] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1109.924937][ T5838] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1109.935927][ T5838] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1109.949279][ T5838] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1109.959471][ T5838] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1110.425560][ T5838] usb 5-1: usb_control_msg returned -32
[ 1110.431411][ T5838] usbtmc 5-1:16.0: can't read capabilities
[ 1110.720249][T17371] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1110.744364][T17371] bond3: entered promiscuous mode
[ 1110.793212][T17371] bond0: (slave bond3): Enslaving as an active interface with an up link
[ 1111.488226][T17382] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 1111.689605][T17382] bond2: (slave lo): Enslaving as an active interface with an up link
[ 1111.786248][T17382] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[ 1112.463590][T17181] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1112.629734][T17181] 8021q: adding VLAN 0 to HW filter on device team0
[ 1112.761118][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1112.768708][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1112.930061][   T54] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1112.937648][   T54] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1113.775308][T16644] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[ 1113.799400][T17410] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1113.989707][T16644] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[ 1114.001779][T16644] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[ 1114.011335][T16644] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1114.147182][T16644] usb 2-1: config 0 descriptor??
[ 1114.188843][T17408] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 1114.813722][T16644] elan 0003:04F3:0755.002C: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0
[ 1114.967242][T17408] elan 0003:04F3:0755.002C: pid 17408 passed too short report
[ 1115.016099][T16644] usb 2-1: USB disconnect, device number 5
[ 1115.029221][T17424] overlayfs: failed to clone upperpath
[ 1115.761865][T17426] fido_id[17426]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[ 1115.852396][T17181] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1116.221008][T17433] schedule_timeout: wrong timeout value fffffffffffffff8
[ 1116.228535][T17433] CPU: 0 UID: 0 PID: 17433 Comm: vivid-005-sdr-c Tainted: G             L      syzkaller #0 PREEMPT(voluntary) 
[ 1116.228710][T17433] Tainted: [L]=SOFTLOCKUP
[ 1116.228760][T17433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1116.228837][T17433] Call Trace:
[ 1116.228882][T17433]  <TASK>
[ 1116.228927][T17433]  __dump_stack+0x26/0x30
[ 1116.229082][T17433]  dump_stack_lvl+0x14c/0x1c0
[ 1116.229233][T17433]  dump_stack+0x1e/0x25
[ 1116.229364][T17433]  schedule_timeout+0x1d2/0x240
[ 1116.229487][T17433]  ? kthread_should_stop+0xd7/0x140
[ 1116.229672][T17433]  vivid_thread_sdr_cap+0x12af/0x1720
[ 1116.229821][T17433]  ? __pfx_autoremove_wake_function+0x10/0x10
[ 1116.230051][T17433]  kthread+0xd5a/0xf00
[ 1116.230174][T17433]  ? __pfx_vivid_thread_sdr_cap+0x10/0x10
[ 1116.230348][T17433]  ? __pfx_kthread+0x10/0x10
[ 1116.230471][T17433]  ret_from_fork+0x207/0x6f0
[ 1116.230647][T17433]  ? __switch_to+0x521/0x750
[ 1116.230810][T17433]  ? __pfx_kthread+0x10/0x10
[ 1116.230937][T17433]  ret_from_fork_asm+0x1a/0x30
[ 1116.231120][T17433]  </TASK>
[ 1116.435020][T17384] usbtmc 5-1:16.0: usb_control_msg returned -110
[ 1116.582466][T17433] schedule_timeout: wrong timeout value fffffffffffffffb
[ 1116.589859][T17433] CPU: 0 UID: 0 PID: 17433 Comm: vivid-005-sdr-c Tainted: G             L      syzkaller #0 PREEMPT(voluntary) 
[ 1116.590026][T17433] Tainted: [L]=SOFTLOCKUP
[ 1116.590074][T17433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1116.590148][T17433] Call Trace:
[ 1116.590196][T17433]  <TASK>
[ 1116.590241][T17433]  __dump_stack+0x26/0x30
[ 1116.590393][T17433]  dump_stack_lvl+0x14c/0x1c0
[ 1116.590546][T17433]  dump_stack+0x1e/0x25
[ 1116.590688][T17433]  schedule_timeout+0x1d2/0x240
[ 1116.590815][T17433]  ? kthread_should_stop+0xd7/0x140
[ 1116.590993][T17433]  vivid_thread_sdr_cap+0x12af/0x1720
[ 1116.591136][T17433]  ? __pfx_autoremove_wake_function+0x10/0x10
[ 1116.591360][T17433]  kthread+0xd5a/0xf00
[ 1116.591480][T17433]  ? __pfx_vivid_thread_sdr_cap+0x10/0x10
[ 1116.591677][T17433]  ? __pfx_kthread+0x10/0x10
[ 1116.591800][T17433]  ret_from_fork+0x207/0x6f0
[ 1116.591968][T17433]  ? __switch_to+0x521/0x750
[ 1116.592102][T17433]  ? __pfx_kthread+0x10/0x10
[ 1116.592221][T17433]  ret_from_fork_asm+0x1a/0x30
[ 1116.592404][T17433]  </TASK>
[ 1116.686231][T16645] usb 5-1: USB disconnect, device number 7
[ 1117.420484][T17452] loop4: detected capacity change from 0 to 64
[ 1117.468616][T17449] ip6erspan1: entered allmulticast mode
[ 1118.994974][T17181] veth0_vlan: entered promiscuous mode
[ 1119.130577][T17181] veth1_vlan: entered promiscuous mode
[ 1119.242539][T17473] batadv_slave_0: entered promiscuous mode
[ 1119.279731][T17473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3816'.
[ 1119.406446][T17473] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1119.694385][T17473] batadv_slave_0 (unregistering): left promiscuous mode
[ 1119.716811][T17473] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1119.938485][T17181] veth0_macvtap: entered promiscuous mode
[ 1120.029363][T17181] veth1_macvtap: entered promiscuous mode
[ 1120.357497][T17181] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1120.474102][T17181] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1120.816962][ T1094] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1120.925561][ T1094] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1121.003477][ T1094] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1121.049827][ T1094] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1123.547896][T16645] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[ 1123.732688][T16645] usb 2-1: Using ep0 maxpacket: 8
[ 1123.770548][T16645] usb 2-1: config 162 has an invalid interface number: 251 but max is 1
[ 1123.781018][T16645] usb 2-1: config 162 has an invalid interface number: 209 but max is 1
[ 1123.790171][T16645] usb 2-1: config 162 has no interface number 0
[ 1123.796776][T16645] usb 2-1: config 162 has no interface number 1
[ 1123.903351][T16645] usb 2-1: config 162 interface 251 altsetting 4 has an endpoint descriptor with address 0x23, changing to 0x3
[ 1123.915874][T16645] usb 2-1: config 162 interface 251 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1124.012490][T16645] usb 2-1: config 162 interface 209 altsetting 1 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1124.023586][T16645] usb 2-1: config 162 interface 209 altsetting 1 has a duplicate endpoint with address 0x3, skipping
[ 1124.035084][T16645] usb 2-1: config 162 interface 209 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86
[ 1124.047450][T16645] usb 2-1: config 162 interface 209 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024
[ 1124.059444][T16645] usb 2-1: config 162 interface 209 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024
[ 1124.070356][T16645] usb 2-1: config 162 interface 209 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7
[ 1124.083102][T16645] usb 2-1: config 162 interface 209 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0
[ 1124.095316][T16645] usb 2-1: config 162 interface 209 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4
[ 1124.109235][T16645] usb 2-1: config 162 interface 251 has no altsetting 0
[ 1124.116618][T16645] usb 2-1: config 162 interface 209 has no altsetting 0
[ 1124.248332][T16645] usb 2-1: New USB device found, idVendor=1608, idProduct=0010, bcdDevice=4f.88
[ 1124.258036][T16645] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1124.268651][T16645] usb 2-1: Product: syz
[ 1124.273142][T16645] usb 2-1: Manufacturer: syz
[ 1124.277905][T16645] usb 2-1: SerialNumber: syz
[ 1124.716153][T16645] io_edgeport 2-1:162.251: required endpoints missing
[ 1124.916354][T16645] io_edgeport 2-1:162.209: Edgeport 2 port adapter converter detected
[ 1125.041822][T17560] loop4: detected capacity change from 0 to 1024
[ 1125.269539][   T30] audit: type=1800 audit(1770515034.051:251): pid=17560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3840" name="file1" dev="loop4" ino=20 res=0 errno=0
[ 1125.309734][T16645] usb 2-1:  䀁 detected
[ 1125.513545][T16645] usb 2-1: edge_startup - Error -90 submitting control urb
[ 1125.533290][T16645] io_edgeport 2-1:162.209: probe with driver io_edgeport failed with error -90
[ 1125.857013][ T5838] usb 2-1: USB disconnect, device number 6
[ 1127.166663][T17591] loop1: detected capacity change from 0 to 1024
[ 1127.359531][T17591] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[ 1127.399294][T17591] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1127.556676][T16645] hid_parser_main: 1 callbacks suppressed
[ 1127.556769][T16645] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0
[ 1127.658816][T17591] EXT4-fs error (device loop1): ext4_free_blocks:6728: comm syz.1.3848: Freeing blocks not in datazone - block = 0, count = 16
[ 1127.704627][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1127.712977][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1127.742121][T16645] hid-generic 0000:0000:0000.002D: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1127.813075][T17591] EXT4-fs (loop1): Remounting filesystem read-only
[ 1127.832706][T16644] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[ 1127.989941][   T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1127.998351][   T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1128.115671][T16644] usb 3-1: config 0 has no interfaces?
[ 1128.147494][T16644] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1128.157210][T16644] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1128.168835][T16644] usb 3-1: SerialNumber: syz
[ 1128.233901][T15555] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[ 1128.407853][T16644] usb 3-1: config 0 descriptor??
[ 1128.609585][T17607] ------------[ cut here ]------------
[ 1128.615610][T17607] WARNING: fs/exec.c:119 at path_noexec+0x2ac/0x310, CPU#1: syz.4.3852/17607
[ 1128.625351][T17607] Modules linked in:
[ 1128.629478][T17607] CPU: 1 UID: 0 PID: 17607 Comm: syz.4.3852 Tainted: G             L      syzkaller #0 PREEMPT(voluntary) 
[ 1128.641358][T17607] Tainted: [L]=SOFTLOCKUP
[ 1128.648522][T17607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1128.659290][T17607] RIP: 0010:path_noexec+0x2ac/0x310
[ 1128.664881][T17607] Code: 49 89 ff 8b 7d d4 e8 93 d5 e1 ff 4c 89 ff e9 c8 fe ff ff 44 89 e7 e8 83 d5 e1 ff 4d 85 ed 0f 85 a3 fe ff ff e8 65 ea 38 ff 90 <0f> 0b 90 48 8b 7d c0 4c 8b 37 e8 75 ca e1 ff 48 8b 00 48 89 45 c8
[ 1128.685053][T17607] RSP: 0018:ffff888029143b80 EFLAGS: 00010283
[ 1128.691410][T17607] RAX: ffffffff82c47e0b RBX: ffff888103500b90 RCX: 0000000000080000
[ 1128.702204][T17607] RDX: ffffc90010c23000 RSI: 0000000000000057 RDI: 0000000000000058
[ 1128.710382][T17607] RBP: ffff888029143bc0 R08: ffffea000000000f R09: 0000000000000003
[ 1128.719289][T17607] R10: 0000000000000003 R11: 0000000000000002 R12: 0000000000000000
[ 1128.727656][T17607] R13: 0000000000000000 R14: ffff888103586620 R15: 0000000000000000
[ 1128.735974][T17607] FS:  0000000000000000(0000) GS:ffff8881aa958000(0063) knlGS:00000000f54a6b40
[ 1128.745883][T17607] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[ 1128.752822][T17607] CR2: 000000000c3e42d5 CR3: 0000000022408000 CR4: 00000000003526f0
[ 1128.760983][T17607] Call Trace:
[ 1128.766536][T17607]  <TASK>
[ 1128.769622][T17607]  do_mmap+0x1572/0x1d70
[ 1128.774378][T17607]  vm_mmap_pgoff+0x40c/0x760
[ 1128.779282][T17607]  ksys_mmap_pgoff+0x51c/0x7d0
[ 1128.784448][T17607]  __ia32_sys_mmap_pgoff+0x11a/0x1d0
[ 1128.789996][T17607]  ia32_sys_call+0x19c7/0x4340
[ 1128.797405][T17607]  __do_fast_syscall_32+0x14a/0x310
[ 1128.803641][T17607]  do_fast_syscall_32+0x37/0x80
[ 1128.808758][T17607]  do_SYSENTER_32+0x1f/0x30
[ 1128.813639][T17607]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1128.820234][T17607] RIP: 0023:0xf747d539
[ 1128.824640][T17607] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1128.844935][T17607] RSP: 002b:00000000f54a650c EFLAGS: 00000206 ORIG_RAX: 00000000000000c0
[ 1128.853762][T17607] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000003000
[ 1128.862165][T17607] RDX: 0000000003000008 RSI: 0000000000000011 RDI: 0000000000000005
[ 1128.870321][T17607] RBP: 000000004cf17000 R08: 0000000000000000 R09: 0000000000000000
[ 1128.878789][T17607] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1128.887116][T17607] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1128.895533][T17607]  </TASK>
[ 1128.901142][T17607] ---[ end trace 0000000000000000 ]---
[ 1128.919007][T16644] usb 3-1: USB disconnect, device number 22
[ 1129.516588][ T5838] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[ 1129.759025][ T5838] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[ 1129.768521][ T5838] usb 2-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3
[ 1129.777092][ T5838] usb 2-1: Product: syz
[ 1129.781432][ T5838] usb 2-1: Manufacturer: syz
[ 1129.786433][ T5838] usb 2-1: SerialNumber: syz
[ 1129.990900][ T5838] usb 2-1: config 0 descriptor??
[ 1130.060951][ T5838] ch341 2-1:0.0: ch341-uart converter detected
[ 1130.120019][T17616] loop4: detected capacity change from 0 to 136
[ 1131.067447][ T5838] ch341-uart ttyUSB0: failed to read break control: -71
[ 1131.075188][ T5838] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71
[ 1131.309355][ T5838] usb 2-1: USB disconnect, device number 7
[ 1131.369733][ T5838] ch341 2-1:0.0: device disconnected
[ 1133.318447][T17643] loop2: detected capacity change from 0 to 128
[ 1136.002745][T17671] loop4: detected capacity change from 0 to 8192
[ 1137.094700][T17696] loop2: detected capacity change from 0 to 128
[ 1137.196140][T17696] FAT-fs (loop2): Directory bread(block 414) failed
[ 1137.242654][T17696] FAT-fs (loop2): Directory bread(block 415) failed
[ 1137.249528][T17696] FAT-fs (loop2): Directory bread(block 416) failed
[ 1137.342837][T17696] FAT-fs (loop2): Directory bread(block 417) failed
[ 1137.392317][T17696] FAT-fs (loop2): Directory bread(block 418) failed
[ 1137.458033][T17696] FAT-fs (loop2): Directory bread(block 419) failed
[ 1137.561137][T17696] FAT-fs (loop2): Directory bread(block 420) failed
[ 1137.623862][T17696] FAT-fs (loop2): Directory bread(block 421) failed
[ 1138.232553][    T9] usb 5-1: new full-speed USB device number 8 using dummy_hcd
[ 1138.492500][    T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[ 1138.507419][T17715] loop6: detected capacity change from 0 to 512
[ 1138.536841][    T9] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64
[ 1138.548846][    T9] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64
[ 1138.581810][T17715] EXT4-fs: Ignoring removed orlov option
[ 1138.657700][    T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1138.668085][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1138.677156][    T9] usb 5-1: Product: syz
[ 1138.681573][    T9] usb 5-1: Manufacturer: syz
[ 1138.687037][    T9] usb 5-1: SerialNumber: syz
[ 1138.715229][T17715] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13
[ 1138.771731][T17709] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1138.778037][T17715] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.3888: attempt to clear invalid blocks 2 len 1
[ 1138.946807][T17715] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[ 1138.976334][T17723] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[ 1138.985843][ T5845] IPVS: starting estimator thread 0...
[ 1139.038850][T17709] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1139.057511][T17715] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.3888: invalid indirect mapped block 1819239214 (level 0)
[ 1139.089451][T17729] IPVS: using max 240 ests per chain, 12000 per kthread
[ 1139.097760][T17709] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1139.108411][T17715] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.3888: invalid indirect mapped block 1819239214 (level 1)
[ 1139.228759][T17715] EXT4-fs (loop6): 1 truncate cleaned up
[ 1139.262914][T17715] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1139.621084][T17181] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1139.771070][T17709] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1139.782932][T17709] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1140.017666][    T9] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42
[ 1140.025167][    T9] cdc_ncm 5-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048
[ 1140.033162][    T9] cdc_ncm 5-1:1.0: setting rx_max = 2048
[ 1140.172441][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[ 1140.275980][    T9] cdc_ncm 5-1:1.0: setting tx_max = 88
[ 1140.401877][    T9] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[ 1140.531202][    T9] usb 5-1: USB disconnect, device number 8
[ 1140.570015][    T9] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP)
[ 1141.068477][T17747] overlayfs: failed to clone upperpath
[ 1141.572686][T17755] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3900'.
[ 1141.672704][T17754] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3900'.
[ 1141.742368][T17757] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3900'.
[ 1142.020656][T17761] overlayfs: failed to clone upperpath
[ 1143.283064][T16644] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[ 1143.433016][T17782] veth0: entered promiscuous mode
[ 1143.472235][T16644] usb 7-1: Using ep0 maxpacket: 32
[ 1143.486057][T17782] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3910'.
[ 1143.520349][T16644] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[ 1143.535931][T16644] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1143.626070][T16644] usb 7-1: config 0 descriptor??
[ 1143.941289][T17786] loop4: detected capacity change from 0 to 512
[ 1143.942491][T16644] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[ 1144.021892][T16644] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1144.034497][T17786] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[ 1144.111473][T16644] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[ 1144.153864][T17786] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002]
[ 1144.208697][T16644] usb 7-1: media controller created
[ 1144.259957][T17786] System zones: 1-12
[ 1144.291337][T17786] EXT4-fs (loop4): 1 truncate cleaned up
[ 1144.344444][T17786] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1144.413091][T17794] netlink: 'syz.1.3913': attribute type 10 has an invalid length.
[ 1144.491651][T16644] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1144.515642][T17797] netlink: 'syz.1.3913': attribute type 10 has an invalid length.
[ 1144.599332][T17786] loop4: detected capacity change from 512 to 0
[ 1144.604078][T17794] team0: Port device dummy0 added
[ 1144.622709][    C0] I/O error, dev loop4, sector 26 op 0x0:(READ) flags 0x803000 phys_seg 1 prio class 2
[ 1144.632802][T17798] EXT4-fs error (device loop4): __ext4_find_entry:1615: inode #2: comm syz.4.3911: reading directory lblock 0
[ 1144.732533][ T5838] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[ 1144.774937][T17798] Buffer I/O error on dev loop4, logical block 1, lost sync page write
[ 1144.842655][T17798] EXT4-fs (loop4): I/O error while writing superblock
[ 1144.877805][T17797] team0: Port device dummy0 removed
[ 1144.956819][ T5838] usb 3-1: Using ep0 maxpacket: 16
[ 1144.991321][ T5838] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b
[ 1145.000798][ T5838] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[ 1145.009289][ T5838] usb 3-1: Product: syz
[ 1145.009618][T17797] bond0: (slave dummy0): Enslaving as an active interface with an up link
[ 1145.013689][ T5838] usb 3-1: SerialNumber: syz
[ 1145.066409][T17803] syz_tun: entered allmulticast mode
[ 1145.087360][ T5838] usb 3-1: config 0 descriptor??
[ 1145.125543][ T5838] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[ 1145.153703][ T5838] dvb_usb_af9015 3-1:0.0: probe with driver dvb_usb_af9015 failed with error -22
[ 1145.223232][ T5838] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[ 1145.230173][ T5838] dvb_usb_af9035 3-1:0.0: probe with driver dvb_usb_af9035 failed with error -22
[ 1145.258770][T17803] dvmrp6: entered allmulticast mode
[ 1145.263101][T16717] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1145.280917][T17802] syz_tun: left allmulticast mode
[ 1145.336099][T16717] Buffer I/O error on dev loop4, logical block 1, lost sync page write
[ 1145.348203][ T5838] usb 3-1: USB disconnect, device number 23
[ 1145.372600][T16717] EXT4-fs (loop4): I/O error while writing superblock
[ 1145.532386][T16644] stb0899_attach: Driver disabled by Kconfig
[ 1145.538548][T16644] az6027: no front-end attached
[ 1145.538548][T16644] 
[ 1145.563510][T16644] az6027: usb out operation failed. (-71)
[ 1145.569426][T16644] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[ 1145.642266][T16644] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input44
[ 1145.723632][T16644] dvb-usb: schedule remote query interval to 400 msecs.
[ 1145.730972][T16644] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[ 1145.815599][ T1094] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1145.827487][T16644] usb 7-1: USB disconnect, device number 7
[ 1146.097189][ T1094] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1146.113690][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 1146.390820][T16644] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[ 1146.397374][ T1094] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1146.713326][ T1094] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1147.175227][ T1094] bridge_slave_1: left allmulticast mode
[ 1147.181076][ T1094] bridge_slave_1: left promiscuous mode
[ 1147.190840][ T1094] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1147.247423][ T1094] bridge_slave_0: left allmulticast mode
[ 1147.253517][ T1094] bridge_slave_0: left promiscuous mode
[ 1147.260020][ T1094] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1148.126643][T17819] loop2: detected capacity change from 0 to 1024
[ 1148.177373][ T1094] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1148.230996][ T1094] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1148.308154][ T1094] bond0 (unregistering): Released all slaves
[ 1148.502958][T17819] hfsplus: request for non-existent node 33554434 in B*Tree
[ 1148.510453][T17819] hfsplus: request for non-existent node 33554434 in B*Tree
[ 1149.186760][ T5786] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1149.208162][ T5786] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1149.217911][ T5786] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1149.221249][   T13] hfsplus: request for non-existent node 33554434 in B*Tree
[ 1149.231456][ T5786] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1149.233306][   T13] hfsplus: request for non-existent node 33554434 in B*Tree
[ 1149.244849][ T5786] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1149.381851][ T1094] hsr_slave_0: left promiscuous mode
[ 1149.431375][ T1094] hsr_slave_1: left promiscuous mode
[ 1149.474103][ T1094] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1149.483340][ T1094] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1149.535426][ T1094] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1149.543252][ T1094] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1149.653177][ T1094] veth1_macvtap: left promiscuous mode
[ 1149.680334][ T1094] veth0_macvtap: left promiscuous mode
[ 1149.711257][ T1094] veth1_vlan: left promiscuous mode
[ 1149.751638][ T1094] veth0_vlan: left promiscuous mode
[ 1150.340797][T17849] loop6: detected capacity change from 0 to 2048
[ 1150.668492][T17854] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1150.886307][   T30] audit: type=1800 audit(1770515059.661:252): pid=17849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3929" name="file2" dev="loop6" ino=16 res=0 errno=0
[ 1151.299082][ T5786] Bluetooth: hci1: command tx timeout
[ 1151.644030][T17854] NILFS (loop6): writing node/leaf block does not appear in b-tree (ino=16) at key=0, level=1
[ 1151.655234][T17854] NILFS error (device loop6): nilfs_bmap_propagate: broken bmap (inode number=16)
[ 1151.771525][T17854] Remounting filesystem read-only
[ 1151.806752][T17181] NILFS (loop6): disposed unprocessed dirty file(s) when stopping log writer
[ 1152.676188][T17866] loop6: detected capacity change from 0 to 2048
[ 1152.685244][ T1094] team0 (unregistering): Port device team_slave_1 removed
[ 1152.798279][ T1094] team0 (unregistering): Port device team_slave_0 removed
[ 1152.911273][ T5838] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[ 1152.927721][T17866] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1152.957529][   T30] audit: type=1800 audit(1770515061.741:253): pid=17866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3933" name="file1" dev="loop6" ino=15 res=0 errno=0
[ 1153.012789][T17866] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[ 1153.080649][ T5838] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[ 1153.083260][   T30] audit: type=1800 audit(1770515061.741:254): pid=17866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3933" name="file1" dev="loop6" ino=15 res=0 errno=0
[ 1153.095202][T17866] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28
[ 1153.126418][T17866] EXT4-fs (loop6): This should not happen!! Data will be lost
[ 1153.126418][T17866] 
[ 1153.136384][T17866] EXT4-fs (loop6): Total free blocks count 0
[ 1153.142816][T17866] EXT4-fs (loop6): Free/Dirty block details
[ 1153.148902][T17866] EXT4-fs (loop6): free_blocks=2415919104
[ 1153.154957][T17866] EXT4-fs (loop6): dirty_blocks=16
[ 1153.160278][T17866] EXT4-fs (loop6): Block reservation details
[ 1153.167589][T17866] EXT4-fs (loop6): i_reserved_data_blocks=1
[ 1153.198996][ T5838] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1153.211158][ T5838] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1153.221538][ T5838] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[ 1153.367633][ T5786] Bluetooth: hci1: command tx timeout
[ 1153.476929][ T5838] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[ 1153.487249][ T5838] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[ 1153.496241][ T5838] usb 3-1: Manufacturer: syz
[ 1153.607190][ T5838] usb 3-1: config 0 descriptor??
[ 1153.902247][T15759] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28
[ 1154.119826][ T5838] appleir 0003:05AC:8243.002E: unknown main item tag 0x0
[ 1154.208336][ T5838] appleir 0003:05AC:8243.002E: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0
[ 1154.364263][T17879] loop1: detected capacity change from 0 to 512
[ 1154.462735][ T5838] usb 3-1: USB disconnect, device number 24
[ 1154.654326][T17879] EXT4-fs (loop1): 1 orphan inode deleted
[ 1154.693516][   T36] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14
[ 1154.704972][   T36] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:2: Failed to release dquot type 1
[ 1154.794497][T17879] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1154.862602][T17879] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1155.352909][T17883] fido_id[17883]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[ 1155.374287][T15555] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1155.445889][ T5786] Bluetooth: hci1: command tx timeout
[ 1155.775913][T17837] chnl_net:caif_netlink_parms(): no params data found
[ 1156.624255][T17898] loop2: detected capacity change from 0 to 4096
[ 1157.394604][   T30] audit: type=1800 audit(1770515066.181:255): pid=17898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3943" name="file1" dev="loop2" ino=33 res=0 errno=0
[ 1157.504998][   T30] audit: type=1800 audit(1770515066.211:256): pid=17898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3943" name="file1" dev="loop2" ino=33 res=0 errno=0
[ 1157.532850][ T5786] Bluetooth: hci1: command tx timeout
[ 1157.817170][T17837] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1157.824807][T17837] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1157.882935][T17837] bridge_slave_0: entered allmulticast mode
[ 1157.894684][T17837] bridge_slave_0: entered promiscuous mode
[ 1157.984945][T17837] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1157.992976][T17837] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1158.037588][T17837] bridge_slave_1: entered allmulticast mode
[ 1158.065729][T17837] bridge_slave_1: entered promiscuous mode
[ 1158.501294][T17837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1158.574164][T17837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1158.803781][T17938] fuse: Bad value for 'fd'
[ 1158.914263][T17837] team0: Port device team_slave_0 added
[ 1159.015033][T17837] team0: Port device team_slave_1 added
[ 1159.270229][T17837] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1159.278123][T17837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1159.305071][T17837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1159.418875][T17837] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1159.426681][T17837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1159.456108][T17837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1160.004511][T17837] hsr_slave_0: entered promiscuous mode
[ 1160.035242][T17837] hsr_slave_1: entered promiscuous mode
[ 1160.046878][T17946] loop6: detected capacity change from 0 to 4096
[ 1160.067268][T17837] debugfs: 'hsr0' already exists in 'hsr'
[ 1160.073447][T17837] Cannot create hsr debugfs directory
[ 1160.417036][T17946] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[ 1160.673144][T17946] ntfs3(loop6): Failed to load $Extend (-22).
[ 1160.684577][T17946] ntfs3(loop6): Failed to initialize $Extend.
[ 1160.713802][T17954] loop2: detected capacity change from 0 to 256
[ 1160.905151][T17954] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d)
[ 1163.016238][T17977] loop6: detected capacity change from 0 to 128
[ 1163.053973][T17837] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1163.154656][T17837] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1163.258687][T17837] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1163.381312][T17837] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1164.284627][T17996] fuse: Bad value for 'fd'
[ 1164.848375][T17837] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1165.097251][T17837] 8021q: adding VLAN 0 to HW filter on device team0
[ 1165.133786][T18010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3978'.
[ 1165.251671][T15759] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1165.259264][T15759] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1165.309659][T18011] loop1: detected capacity change from 0 to 1024
[ 1165.416793][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1165.424381][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1165.503248][T18011] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[ 1165.597555][T18011] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1165.758216][T18011] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: block 3: comm syz.1.3979: lblock 3 mapped to illegal pblock 3 (length 3)
[ 1165.872920][T18011] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[ 1165.885815][T18011] EXT4-fs (loop1): This should not happen!! Data will be lost
[ 1165.885815][T18011] 
[ 1166.047219][T18026] EXT4-fs error (device loop1): ext4_ext_remove_space:2955: inode #15: comm syz.1.3979: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[ 1166.125256][T18026] EXT4-fs error (device loop1) in ext4_setattr:6035: Corrupt filesystem
[ 1166.676302][ T1094] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: comm kworker/u8:6: lblock 0 mapped to illegal pblock 0 (length 1)
[ 1166.738707][ T1094] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[ 1166.751849][ T1094] EXT4-fs (loop1): This should not happen!! Data will be lost
[ 1166.751849][ T1094] 
[ 1166.792370][T15555] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[ 1167.949091][T17837] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1168.986224][T18070] loop6: detected capacity change from 0 to 512
[ 1169.062520][T18070] EXT4-fs: Ignoring removed orlov option
[ 1169.160050][T18070] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[ 1169.316127][T18070] EXT4-fs (loop6): 1 orphan inode deleted
[ 1169.322268][T18070] EXT4-fs (loop6): 1 truncate cleaned up
[ 1169.404056][T18070] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1169.914342][T17181] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1170.621155][T17837] veth0_vlan: entered promiscuous mode
[ 1170.728496][T18090] loop6: detected capacity change from 0 to 128
[ 1170.754417][T18090] vfat: Bad value for 'gid'
[ 1170.759108][T18090] vfat: Bad value for 'gid'
[ 1170.824537][T17837] veth1_vlan: entered promiscuous mode
[ 1171.250166][T18097] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4002'.
[ 1171.360419][T17837] veth0_macvtap: entered promiscuous mode
[ 1171.470728][T17837] veth1_macvtap: entered promiscuous mode
[ 1171.857046][T17837] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1171.966908][T17837] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1172.056492][ T1094] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1172.112478][   T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1172.151540][T15759] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1172.248805][ T1131] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1172.656131][T18117] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4008'.
[ 1172.752852][T18117] veth0_macvtap: left promiscuous mode
[ 1173.609405][T18131] netlink: 'syz.1.4012': attribute type 6 has an invalid length.
[ 1175.782335][T16643] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[ 1176.023350][T16643] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1176.032906][T16643] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1176.049069][T16643] usb 7-1: Product: syz
[ 1176.054327][T16643] usb 7-1: Manufacturer: syz
[ 1176.059198][T16643] usb 7-1: SerialNumber: syz
[ 1176.666724][T18182] Invalid ELF header magic: != ELF
[ 1177.275807][T16643] cdc_ncm 7-1:1.0: MAC-Address: 42:42:42:42:42:42
[ 1177.282850][T16643] cdc_ncm 7-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048
[ 1177.290594][T16643] cdc_ncm 7-1:1.0: setting rx_max = 2048
[ 1177.486476][T16643] cdc_ncm 7-1:1.0: setting tx_max = 184
[ 1177.622869][T16643] cdc_ncm 7-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.6-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[ 1177.731593][T16643] usb 7-1: USB disconnect, device number 8
[ 1177.753731][T16643] cdc_ncm 7-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.6-1, CDC NCM (NO ZLP)
[ 1179.405364][T14874] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1179.413874][T14874] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1179.442721][    T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[ 1179.631864][T14874] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1179.640672][T14874] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1179.682241][    T9] usb 2-1: Using ep0 maxpacket: 16
[ 1179.734268][    T9] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1179.743921][    T9] usb 2-1: config 1 has no interface number 1
[ 1179.766844][    T9] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1179.778027][    T9] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[ 1179.856210][    T9] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1179.919475][    T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1179.929330][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1179.937801][    T9] usb 2-1: Product: syz
[ 1179.942596][    T9] usb 2-1: Manufacturer: syz
[ 1179.947373][    T9] usb 2-1: SerialNumber: syz
[ 1180.521224][    T9] usb 2-1: 2:1 : format type 0 is detected, processed as PCM
[ 1180.761501][T18238] loop7: detected capacity change from 0 to 128
[ 1180.805907][T18227] loop6: detected capacity change from 0 to 8192
[ 1180.986140][T18238] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1181.059636][T18238] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1181.240013][T18238] EXT4-fs (loop7): shut down requested (2)
[ 1181.379385][    T9] usb 2-1: 2:1: cannot get freq at ep 0x82
[ 1181.607224][T17837] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1181.607336][    T9] usb 2-1: USB disconnect, device number 8
[ 1182.095781][ T5935] udevd[5935]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1186.213051][    T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[ 1186.429630][    T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1186.500486][    T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1186.510229][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1186.518618][    T9] usb 3-1: Product: syz
[ 1186.523188][    T9] usb 3-1: Manufacturer: syz
[ 1186.527938][    T9] usb 3-1: SerialNumber: syz
[ 1187.306711][T18314] loop7: detected capacity change from 0 to 1024
[ 1187.431082][T18314] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[ 1187.514002][T18314] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1187.739079][T18314] EXT4-fs error (device loop7): ext4_map_blocks:825: inode #15: block 3: comm syz.7.4061: lblock 3 mapped to illegal pblock 3 (length 3)
[ 1187.786021][T18323] input: syz1 as /devices/virtual/input/input45
[ 1187.786562][    T9] cdc_ncm 3-1:1.0: failed to get mac address
[ 1187.838260][T18314] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[ 1187.853764][T18314] EXT4-fs (loop7): This should not happen!! Data will be lost
[ 1187.853764][T18314] 
[ 1187.917454][T18330] EXT4-fs error (device loop7): ext4_ext_remove_space:2955: inode #15: comm syz.7.4061: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[ 1188.003100][    T9] cdc_ncm 3-1:1.0: bind() failure
[ 1188.135178][T18330] EXT4-fs error (device loop7) in ext4_setattr:6035: Corrupt filesystem
[ 1188.153544][    T9] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71
[ 1188.201115][    T9] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71
[ 1188.255303][    T9] usbtest 3-1:1.1: probe with driver usbtest failed with error -71
[ 1188.351427][    T9] usb 3-1: USB disconnect, device number 25
[ 1188.744621][T17837] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[ 1189.180357][T18343] loop2: detected capacity change from 0 to 8
[ 1189.328301][T18343] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4068'.
[ 1189.373650][T18343] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4068'.
[ 1190.159389][T18360] Invalid ELF header magic: != ELF
[ 1190.252256][T16643] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[ 1190.449208][T16643] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1190.524961][T16643] usb 7-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1190.580827][T16643] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1190.591465][T16643] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1190.600003][T16643] usb 7-1: Product: syz
[ 1190.604466][T16643] usb 7-1: Manufacturer: syz
[ 1190.609414][T16643] usb 7-1: SerialNumber: syz
[ 1191.781152][T16643] cdc_ncm 7-1:1.0: bind() failure
[ 1191.872525][T16643] cdc_ncm 7-1:1.1: probe with driver cdc_ncm failed with error -71
[ 1191.950380][T16643] cdc_mbim 7-1:1.1: probe with driver cdc_mbim failed with error -71
[ 1191.980656][T16643] usbtest 7-1:1.1: probe with driver usbtest failed with error -71
[ 1192.025849][T16643] usb 7-1: USB disconnect, device number 9
[ 1192.928908][T18386] delete_channel: no stack
[ 1193.762461][T16643] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[ 1193.982975][T16643] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1193.994352][T16643] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1194.004604][T16643] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 1194.013997][T16643] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1194.130760][T16643] usb 3-1: config 0 descriptor??
[ 1194.807933][T16643] usb 3-1: language id specifier not provided by device, defaulting to English
[ 1195.011807][T16643] uclogic 0003:256C:006D.002F: failed retrieving Huion firmware version: -71
[ 1195.021271][T16643] uclogic 0003:256C:006D.002F: failed probing parameters: -71
[ 1195.029453][T16643] uclogic 0003:256C:006D.002F: probe with driver uclogic failed with error -71
[ 1195.110420][T16643] usb 3-1: USB disconnect, device number 26
[ 1195.936105][T18431] loop6: detected capacity change from 0 to 1024
[ 1196.077719][T18431] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[ 1196.184537][T18431] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1196.408899][T18431] EXT4-fs error (device loop6): ext4_map_blocks:825: inode #15: block 3: comm syz.6.4095: lblock 3 mapped to illegal pblock 3 (length 3)
[ 1196.476458][T18444] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4097'.
[ 1196.507059][T18431] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[ 1196.523223][T18431] EXT4-fs (loop6): This should not happen!! Data will be lost
[ 1196.523223][T18431] 
[ 1196.619708][T18447] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #15: block 3: comm syz.6.4095: lblock 3 mapped to illegal pblock 3 (length 1)
[ 1196.721655][T18444] vxlan0: entered promiscuous mode
[ 1196.756025][T18447] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #15: block 3: comm syz.6.4095: lblock 3 mapped to illegal pblock 3 (length 1)
[ 1196.819730][T18431] EXT4-fs error (device loop6): ext4_ext_remove_space:2955: inode #15: comm syz.6.4095: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[ 1196.864292][T15759] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1196.915473][T18431] EXT4-fs error (device loop6) in ext4_setattr:6035: Corrupt filesystem
[ 1196.917689][T15759] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1196.976768][T15759] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1197.010789][T15759] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1197.330294][   T36] EXT4-fs error (device loop6): ext4_map_blocks:825: inode #15: comm kworker/u8:2: lblock 0 mapped to illegal pblock 0 (length 1)
[ 1197.385732][T18457] openvswitch: netlink: VXLAN extension message has 249 unknown bytes.
[ 1197.406213][   T36] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[ 1197.419065][   T36] EXT4-fs (loop6): This should not happen!! Data will be lost
[ 1197.419065][   T36] 
[ 1197.511668][T17181] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[ 1198.040144][T18466] bridge0: entered allmulticast mode
[ 1198.148060][T18466] pim6reg: entered allmulticast mode
[ 1198.818119][T18476] loop7: detected capacity change from 0 to 1024
[ 1198.936930][T18476] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1199.131395][T18484] overlayfs: failed to clone upperpath
[ 1199.613215][T17837] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1200.558775][T18502] loop1: detected capacity change from 0 to 512
[ 1200.590705][T18503] loop7: detected capacity change from 0 to 1024
[ 1200.615729][T18502] EXT4-fs: Ignoring removed oldalloc option
[ 1200.808816][T18503] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[ 1200.852681][T18503] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1200.873147][T18502] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: comm syz.1.4117: Parent and EA inode have the same ino 15
[ 1200.950485][T18502] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: comm syz.1.4117: Parent and EA inode have the same ino 15
[ 1201.011743][T18502] EXT4-fs (loop1): 1 orphan inode deleted
[ 1201.037206][T18502] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1201.120222][T18503] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.4115: bg 0: block 112: padding at end of block bitmap is not set
[ 1201.236783][T18503] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 117
[ 1201.252934][T18503] EXT4-fs (loop7): This should not happen!! Data will be lost
[ 1201.252934][T18503] 
[ 1201.381557][T18514] EXT4-fs error (device loop7): ext4_map_blocks:825: inode #15: block 4: comm syz.7.4115: lblock 4 mapped to illegal pblock 4 (length 1)
[ 1201.517611][T18514] EXT4-fs error (device loop7): ext4_map_blocks:825: inode #15: block 3: comm syz.7.4115: lblock 3 mapped to illegal pblock 3 (length 1)
[ 1201.674864][T18514] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117
[ 1201.687782][T18514] EXT4-fs (loop7): This should not happen!! Data will be lost
[ 1201.687782][T18514] 
[ 1201.748004][T15555] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1202.104762][T17837] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[ 1204.107931][T18551] loop7: detected capacity change from 0 to 512
[ 1204.354212][T18551] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1204.473309][T18551] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1205.022118][   T30] audit: type=1326 audit(1770515113.761:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18555 comm="syz.1.4134" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd539 code=0x7fc00000
[ 1205.149746][   T30] audit: type=1326 audit(1770515113.931:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18555 comm="syz.1.4134" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf73cd558 code=0x7fc00000
[ 1205.431121][    C1] =====================================================
[ 1205.438587][    C1] BUG: KMSAN: uninit-value in __dev_queue_xmit+0x2fe8/0x5890
[ 1205.446422][    C1]  __dev_queue_xmit+0x2fe8/0x5890
[ 1205.451660][    C1]  hsr_forward_skb+0x2193/0x3c30
[ 1205.456889][    C1]  hsr_handle_frame+0xcee/0x1110
[ 1205.462080][    C1]  __netif_receive_skb_core+0xeb0/0x4c70
[ 1205.467873][    C1]  __netif_receive_skb_list_core+0x2f9/0x1650
[ 1205.474251][    C1]  netif_receive_skb_list_internal+0xe9c/0x14e0
[ 1205.480839][    C1]  napi_complete_done+0x401/0x7b0
[ 1205.486166][    C1]  gro_cell_poll+0x2c8/0x310
[ 1205.490961][    C1]  __napi_poll+0xdc/0x8f0
[ 1205.495537][    C1]  net_rx_action+0xa5b/0x1c70
[ 1205.500363][    C1]  handle_softirqs+0x168/0x6f0
[ 1205.505389][    C1]  __do_softirq+0x14/0x1b
[ 1205.509883][    C1]  do_softirq+0x58/0x90
[ 1205.514293][    C1]  __local_bh_enable_ip+0xa1/0xb0
[ 1205.519469][    C1]  tun_rx_batched+0x887/0x980
[ 1205.524420][    C1]  tun_get_user+0x6002/0x7830
[ 1205.529291][    C1]  tun_chr_write_iter+0x3e9/0x5c0
[ 1205.534625][    C1]  vfs_write+0xbe1/0x15c0
[ 1205.539118][    C1]  ksys_write+0x1d9/0x470
[ 1205.543716][    C1]  __ia32_sys_write+0x9a/0xf0
[ 1205.548668][    C1]  ia32_sys_call+0x3d5e/0x4340
[ 1205.553799][    C1]  __do_fast_syscall_32+0x14a/0x310
[ 1205.559199][    C1]  do_fast_syscall_32+0x37/0x80
[ 1205.564416][    C1]  do_SYSENTER_32+0x1f/0x30
[ 1205.569135][    C1]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1205.575745][    C1] 
[ 1205.578129][    C1] Uninit was stored to memory at:
[ 1205.583479][    C1]  qdisc_pkt_len_segs_init+0xa19/0xa80
[ 1205.589135][    C1]  __dev_queue_xmit+0x303/0x5890
[ 1205.594384][    C1]  hsr_forward_skb+0x2193/0x3c30
[ 1205.599516][    C1]  hsr_handle_frame+0xcee/0x1110
[ 1205.604914][    C1]  __netif_receive_skb_core+0xeb0/0x4c70
[ 1205.610725][    C1]  __netif_receive_skb_list_core+0x2f9/0x1650
[ 1205.617081][    C1]  netif_receive_skb_list_internal+0xe9c/0x14e0
[ 1205.623672][    C1]  napi_complete_done+0x401/0x7b0
[ 1205.628882][    C1]  gro_cell_poll+0x2c8/0x310
[ 1205.633761][    C1]  __napi_poll+0xdc/0x8f0
[ 1205.638350][    C1]  net_rx_action+0xa5b/0x1c70
[ 1205.643296][    C1]  handle_softirqs+0x168/0x6f0
[ 1205.648236][    C1]  __do_softirq+0x14/0x1b
[ 1205.652830][    C1] 
[ 1205.655231][    C1] Uninit was created at:
[ 1205.659689][    C1]  kmem_cache_alloc_node_noprof+0x9de/0x1780
[ 1205.665962][    C1]  kmalloc_reserve+0x13c/0x4b0
[ 1205.670917][    C1]  __alloc_skb+0x805/0x1030
[ 1205.675725][    C1]  __pskb_copy_fclone+0xcc/0x14c0
[ 1205.680913][    C1]  hsr_create_tagged_frame+0x30b/0x1330
[ 1205.686859][    C1]  hsr_forward_skb+0x16ca/0x3c30
[ 1205.692091][    C1]  hsr_handle_frame+0xcee/0x1110
[ 1205.697301][    C1]  __netif_receive_skb_core+0xeb0/0x4c70
[ 1205.703312][    C1]  __netif_receive_skb_list_core+0x2f9/0x1650
[ 1205.709735][    C1]  netif_receive_skb_list_internal+0xe9c/0x14e0
[ 1205.716674][    C1]  napi_complete_done+0x401/0x7b0
[ 1205.721864][    C1]  gro_cell_poll+0x2c8/0x310
[ 1205.726940][    C1]  __napi_poll+0xdc/0x8f0
[ 1205.731450][    C1]  net_rx_action+0xa5b/0x1c70
[ 1205.736496][    C1]  handle_softirqs+0x168/0x6f0
[ 1205.741440][    C1]  __do_softirq+0x14/0x1b
[ 1205.746062][    C1] 
[ 1205.748491][    C1] CPU: 1 UID: 0 PID: 18572 Comm: syz.2.4137 Tainted: G        W    L      syzkaller #0 PREEMPT(voluntary) 
[ 1205.760184][    C1] Tainted: [W]=WARN, [L]=SOFTLOCKUP
[ 1205.765714][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1205.776270][    C1] =====================================================
[ 1205.783387][    C1] Disabling lock debugging due to kernel taint
[ 1205.789669][    C1] Kernel panic - not syncing: kmsan.panic set ...
[ 1205.796203][    C1] CPU: 1 UID: 0 PID: 18572 Comm: syz.2.4137 Tainted: G    B   W    L      syzkaller #0 PREEMPT(voluntary) 
[ 1205.808120][    C1] Tainted: [B]=BAD_PAGE, [W]=WARN, [L]=SOFTLOCKUP
[ 1205.814617][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1205.824865][    C1] Call Trace:
[ 1205.828219][    C1]  <IRQ>
[ 1205.831129][    C1]  __dump_stack+0x26/0x30
[ 1205.835695][    C1]  dump_stack_lvl+0x50/0x1c0
[ 1205.840428][    C1]  ? dump_stack+0x12/0x25
[ 1205.844923][    C1]  dump_stack+0x1e/0x25
[ 1205.849219][    C1]  vpanic+0x435/0xd40
[ 1205.853364][    C1]  panic+0x15d/0x160
[ 1205.857455][    C1]  kmsan_report+0x31a/0x320
[ 1205.862142][    C1]  ? __msan_warning+0x1b/0x30
[ 1205.866970][    C1]  ? __dev_queue_xmit+0x2fe8/0x5890
[ 1205.872357][    C1]  ? hsr_forward_skb+0x2193/0x3c30
[ 1205.877624][    C1]  ? hsr_handle_frame+0xcee/0x1110
[ 1205.882887][    C1]  ? __netif_receive_skb_core+0xeb0/0x4c70
[ 1205.888915][    C1]  ? __netif_receive_skb_list_core+0x2f9/0x1650
[ 1205.895299][    C1]  ? netif_receive_skb_list_internal+0xe9c/0x14e0
[ 1205.901855][    C1]  ? napi_complete_done+0x401/0x7b0
[ 1205.907211][    C1]  ? gro_cell_poll+0x2c8/0x310
[ 1205.912136][    C1]  ? __napi_poll+0xdc/0x8f0
[ 1205.916771][    C1]  ? net_rx_action+0xa5b/0x1c70
[ 1205.921757][    C1]  ? handle_softirqs+0x168/0x6f0
[ 1205.926843][    C1]  ? __do_softirq+0x14/0x1b
[ 1205.931485][    C1]  ? do_softirq+0x58/0x90
[ 1205.935938][    C1]  ? __local_bh_enable_ip+0xa1/0xb0
[ 1205.941265][    C1]  ? tun_rx_batched+0x887/0x980
[ 1205.946269][    C1]  ? tun_get_user+0x6002/0x7830
[ 1205.951271][    C1]  ? tun_chr_write_iter+0x3e9/0x5c0
[ 1205.956673][    C1]  ? vfs_write+0xbe1/0x15c0
[ 1205.961321][    C1]  ? ksys_write+0x1d9/0x470
[ 1205.965967][    C1]  ? __ia32_sys_write+0x9a/0xf0
[ 1205.970975][    C1]  ? ia32_sys_call+0x3d5e/0x4340
[ 1205.976174][    C1]  ? __do_fast_syscall_32+0x14a/0x310
[ 1205.981803][    C1]  ? do_fast_syscall_32+0x37/0x80
[ 1205.986990][    C1]  ? do_SYSENTER_32+0x1f/0x30
[ 1205.991818][    C1]  ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1205.998488][    C1]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1206.004495][    C1]  ? __dev_queue_xmit+0xa21/0x5890
[ 1206.009792][    C1]  ? filter_irq_stacks+0x49/0x190
[ 1206.014971][    C1]  ? kmsan_get_metadata+0xf1/0x160
[ 1206.020266][    C1]  ? kmsan_internal_set_shadow_origin+0x7a/0x110
[ 1206.026774][    C1]  ? kmsan_get_metadata+0xf1/0x160
[ 1206.032097][    C1]  __msan_warning+0x1b/0x30
[ 1206.036761][    C1]  __dev_queue_xmit+0x2fe8/0x5890
[ 1206.041967][    C1]  ? __msan_memset+0xf3/0x1a0
[ 1206.046806][    C1]  ? kmsan_get_metadata+0xf1/0x160
[ 1206.052287][    C1]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1206.058278][    C1]  ? kmsan_get_metadata+0xf1/0x160
[ 1206.063601][    C1]  ? __dev_queue_xmit+0x27d/0x5890
[ 1206.068921][    C1]  hsr_forward_skb+0x2193/0x3c30
[ 1206.074186][    C1]  hsr_handle_frame+0xcee/0x1110
[ 1206.079325][    C1]  ? __pfx_hsr_handle_frame+0x10/0x10
[ 1206.084867][    C1]  __netif_receive_skb_core+0xeb0/0x4c70
[ 1206.090649][    C1]  ? kmsan_get_metadata+0xf1/0x160
[ 1206.095951][    C1]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1206.101945][    C1]  ? filter_irq_stacks+0x49/0x190
[ 1206.107132][    C1]  ? kmsan_internal_set_shadow_origin+0x7a/0x110
[ 1206.113660][    C1]  __netif_receive_skb_list_core+0x2f9/0x1650
[ 1206.119942][    C1]  netif_receive_skb_list_internal+0xe9c/0x14e0
[ 1206.126358][    C1]  napi_complete_done+0x401/0x7b0
[ 1206.131540][    C1]  gro_cell_poll+0x2c8/0x310
[ 1206.136291][    C1]  ? kmsan_get_metadata+0x146/0x160
[ 1206.141682][    C1]  ? __pfx_gro_cell_poll+0x10/0x10
[ 1206.146953][    C1]  __napi_poll+0xdc/0x8f0
[ 1206.151422][    C1]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1206.157431][    C1]  net_rx_action+0xa5b/0x1c70
[ 1206.162245][    C1]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1206.168258][    C1]  ? sched_clock_cpu+0x59/0xa70
[ 1206.173246][    C1]  ? kmsan_get_metadata+0xf1/0x160
[ 1206.178569][    C1]  ? __pfx_net_rx_action+0x10/0x10
[ 1206.183826][    C1]  handle_softirqs+0x168/0x6f0
[ 1206.188751][    C1]  __do_softirq+0x14/0x1b
[ 1206.193225][    C1]  do_softirq+0x58/0x90
[ 1206.197516][    C1]  </IRQ>
[ 1206.200510][    C1]  <TASK>
[ 1206.203510][    C1]  __local_bh_enable_ip+0xa1/0xb0
[ 1206.208703][    C1]  ? tun_rx_batched+0x167/0x980
[ 1206.213721][    C1]  tun_rx_batched+0x887/0x980
[ 1206.218561][    C1]  ? kmsan_get_metadata+0xf1/0x160
[ 1206.223861][    C1]  ? kmsan_get_metadata+0xf1/0x160
[ 1206.229147][    C1]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1206.235140][    C1]  tun_get_user+0x6002/0x7830
[ 1206.239980][    C1]  ? stack_depot_save_flags+0x35/0x790
[ 1206.245584][    C1]  ? kmsan_get_metadata+0xf1/0x160
[ 1206.250891][    C1]  ? kmsan_get_metadata+0xf1/0x160
[ 1206.256179][    C1]  ? kmsan_internal_set_shadow_origin+0x7a/0x110
[ 1206.262692][    C1]  ? kmsan_get_metadata+0x60/0x160
[ 1206.268026][    C1]  tun_chr_write_iter+0x3e9/0x5c0
[ 1206.273231][    C1]  vfs_write+0xbe1/0x15c0
[ 1206.277726][    C1]  ? __pfx_tun_chr_write_iter+0x10/0x10
[ 1206.283445][    C1]  ksys_write+0x1d9/0x470
[ 1206.287940][    C1]  __ia32_sys_write+0x9a/0xf0
[ 1206.292780][    C1]  ia32_sys_call+0x3d5e/0x4340
[ 1206.297729][    C1]  __do_fast_syscall_32+0x14a/0x310
[ 1206.303117][    C1]  do_fast_syscall_32+0x37/0x80
[ 1206.308148][    C1]  do_SYSENTER_32+0x1f/0x30
[ 1206.312812][    C1]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1206.319320][    C1] RIP: 0023:0xf73fd539
[ 1206.323488][    C1] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1206.343233][    C1] RSP: 002b:00000000f542650c EFLAGS: 00000206 ORIG_RAX: 0000000000000004
[ 1206.351790][    C1] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800002c0
[ 1206.359864][    C1] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000000
[ 1206.367933][    C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1206.375994][    C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1206.384321][    C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1206.392430][    C1]  </TASK>
[ 1206.395987][    C1] Kernel Offset: disabled
[ 1206.400359][    C1] Rebooting in 86400 seconds..