last executing test programs:

1m28.773303151s ago: executing program 0 (id=809):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x1, 0x54f4, &(0x7f0000001880)="$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")
open(&(0x7f0000006d80)='./file1\x00', 0x4827e, 0x20)
truncate(&(0x7f0000006dc0)='./file1\x00', 0x591)
r0 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x42, 0x49)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000840)={0x17c04, 0xffffffffffffffff, 0x6, 0x8100000002, 0x40000})

1m27.608028629s ago: executing program 0 (id=815):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0xc0010001, 0x0, 0xbffffffffffffffd}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1m26.268075814s ago: executing program 0 (id=824):
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x8031, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140), 0x4)

1m25.811117581s ago: executing program 0 (id=829):
syz_mount_image$ext4(&(0x7f0000000880)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x800, &(0x7f0000000900)={[{@noauto_da_alloc}, {@errors_remount}, {@dioread_nolock}, {@grpquota}]}, 0x4, 0x504, &(0x7f0000000e40)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000500)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000540)='./bus\x00', &(0x7f0000000580), 0x8, &(0x7f00000005c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f0000000600)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f0000000640)='./file1\x00', 0x101142, 0xeaf9)

1m25.150960457s ago: executing program 0 (id=835):
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000680)='./file2\x00', 0x800000, &(0x7f0000000000)=ANY=[], 0x1, 0x5504, &(0x7f000000c0c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0)
ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000180)=0xfffffff9)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x20242, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0xc3ff, 0x8001})

1m24.443500798s ago: executing program 0 (id=843):
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./myconfig\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./myconfig\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./myconfig/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000480)='./myconfig/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0xe8202, 0x1c3)

1m24.050591578s ago: executing program 32 (id=843):
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./myconfig\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./myconfig\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./myconfig/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000480)='./myconfig/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0xe8202, 0x1c3)

42.376231318s ago: executing program 3 (id=1186):
r0 = creat(&(0x7f0000000180)='./file0\x00', 0xa)
close(r0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0)
r1 = timerfd_create(0x0, 0x80800)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

41.335127854s ago: executing program 3 (id=1196):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10)
sendto$inet(r0, 0x0, 0x0, 0x886, &(0x7f0000000100)={0x2, 0x6e22, @multicast1}, 0x4f)
setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f00000003c0)=0x5, 0x4)
recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, 0x0}, 0xfffffffd}], 0x1, 0x22, 0x0)

41.176363379s ago: executing program 3 (id=1198):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002220000090582020002"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000001280)={0x1c, &(0x7f0000000580)={0x40, 0x16, 0x4, "906a6007"}, 0x0, &(0x7f0000001240)})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001940)={0x34, &(0x7f0000001740)={0x20, 0xe, 0x15, "08c3c3c8745098bbf2c41622201493868a5a20ce6e"}, &(0x7f0000001800)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001840)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000001880)={0xc0, 0xa1, 0x4, 0xffff}, &(0x7f00000018c0)={0x40, 0xa0, 0x4, 0x108}, &(0x7f0000001900)={0xc0, 0xa2, 0x2f, "295a65907e2c9f881c3956188e02a0c244f7ac6917c3b2d0823c2c0d159b34e863a745cff95a6ce8ab261f419448a1"}})

38.720939208s ago: executing program 3 (id=1227):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='./file0/file0/..\x00', 0x0, 0x1a474dc, 0x0)
umount2(&(0x7f0000000000)='./file0/file0/..\x00', 0x1)

38.515228068s ago: executing program 3 (id=1231):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x460, &(0x7f0000000380)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0)
pwrite64(r1, &(0x7f00000002c0)="0635", 0x2, 0x8000c61)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, r1, 0x8000002, 0x6f1f, 0x4, 0x80000001})

38.023874798s ago: executing program 3 (id=1238):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e900272f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000c40)="051a00000e800065581f2bde7a", 0xd}], 0x2)

37.832825437s ago: executing program 33 (id=1238):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e900272f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000c40)="051a00000e800065581f2bde7a", 0xd}], 0x2)

4.75109195s ago: executing program 6 (id=1528):
r0 = socket(0x1e, 0x1, 0x0)
connect$tipc(r0, &(0x7f0000000480)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x4000)
write$binfmt_misc(r0, &(0x7f0000000680), 0x2000011a)
recvmmsg$unix(r0, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000008c0)=""/4081, 0xff1}], 0x1}}], 0x1, 0x121, 0x0)

4.520649823s ago: executing program 1 (id=1531):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f00000004c0)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
bind$inet6(r1, &(0x7f0000000880)={0xa, 0xe22, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x50, &(0x7f00000008c0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "910100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3, 0x0, @val=0x300}, '\x00\x00\x00\x00\x00\x00'}}}}}}}, 0x0)

4.218758344s ago: executing program 1 (id=1533):
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24)
listen(r0, 0x5)
sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[{0x18, 0x110, 0x1, "12"}, {0x10, 0x110, 0xe}], 0x28}, 0x0)
sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "12"}, {0x10, 0x110, 0xe}], 0x28}, 0x0)

4.072165248s ago: executing program 5 (id=1534):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15)
preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)

3.904487156s ago: executing program 1 (id=1535):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f00000000c0), 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)={0x5, 0x901, 0xfffffbff, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "d7c139a0d4fe372efa7e8cdba3417665ffb2b92af56c860b29402f8111302ae84c15b9dd43bda8847acbe40605b5ee1c8f0676814afc7e9f0413567e592c7c15"}}, 0x80}}, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)={0x6, 0x74, 0x1, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x2, 0x3, 0x0, 0x0, "a464357177330772"}}, 0x48}}, 0x8044)

3.903260876s ago: executing program 4 (id=1545):
r0 = syz_open_dev$dvb_demux(&(0x7f0000000100), 0x0, 0x41)
r1 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4})
ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000000)={0x2, {"a163ef8b5442ff3000020100", "000900000000000200", "0007009980000000000000000400"}, 0x6, 0x4})
close(r1)

3.694760197s ago: executing program 2 (id=1536):
mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000001c0)={r0, r0, 0x8, 0x20, 0x0, 0x6, 0xfe, 0x46d, 0xa0e, 0x5, 0x2, 0x1, 'syz0\x00'})

3.683362347s ago: executing program 1 (id=1537):
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)
setsockopt$inet_buf(r0, 0x0, 0x23, 0x0, 0x0)

3.300359996s ago: executing program 2 (id=1538):
r0 = syz_open_dev$loop(&(0x7f0000001740), 0xffff, 0x14f602)
fspick(0xffffffffffffff9c, &(0x7f0000001940)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001780)='cgroup.kill\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f00000017c0), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000001800)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800080000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x10]}})

3.300244266s ago: executing program 4 (id=1539):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x6071, 0x0, 0xe7}}}}}}, 0x0)
syz_emit_ethernet(0x3a, &(0x7f0000000300)={@local, @random='?\x00', @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x2c, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x10, 0x7, 0x0, 0x67, {[@mptcp]}}}}}}}, 0x0)

3.037844843s ago: executing program 1 (id=1540):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000030c0)={0x0, 0x10, &(0x7f0000003100)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000003140)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000003180)={0x1, [<r2=>0x0]}, &(0x7f00000031c0)=0x8)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000003300)={r2, 0x9}, &(0x7f0000003340)=0x8)

2.737458543s ago: executing program 2 (id=1541):
r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$f2fs(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2800000, &(0x7f0000000680)=ANY=[@ANYRES16=r0, @ANYRES16=r0], 0x1, 0x5505, &(0x7f0000001300)="$eJzs3M1rI2UYAPAn/djtfrgW8eBtBxahhU1o+rHoreoufmCXsurBk6ZJGrKbZEqTprUnDx7Fg/+JKHjy6N/gwbM38aB4E5TMTHXrBwhNm+3294PJM++bN888b1gWnpmSAC6s+eTXn0txI65ExHREXI/IzkvFkVnPwwsRcTMiph47SsX8nxOXIuJqRNwYJc9zloq3Pr89vLX201u/fPPd5ZlrX3z9/eR2DUzaixHR3cnP97t5TFt5fFjM14btLHZXh0XM3+g+KsZpHvebW1mG/drRuloWV1r5+nRnrz+K251afRRb7e1sfqeXX7A/bB3lyT7wsLabjRvNrSy2+2kWW4d5XQeH+f9th/1BnqdR5PsoSx+DwVHM55sHzXw/O4+yWO8Nivk8b9poHozisIjF5aKedhpZHVsn+aafbG+3e3sHybC522+nvWStUn2pUr1Tru6mjeaguVqudRt3VpOFVme0rDxo1rrrrTRtdZqVetpdTBZa9Xq5Wk0W7ja32rVeUq1WVipL5bXF4ux28vr995JOI1kYxVfbvb1Bu9NPttPdJP/EYrJcWXl5MblVTd7Z2Ew2H9y7t7H57gd337//ysabrxWL/lFWsrC8tLxcri6Vl6uLF2j/nxRFj3H/cCKlSRcAcP7o/4FJOL3+f/dBxOn3/6H/H4tz1f9e9P7/FPYPJ6L/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4sH6Y/fKN7GQ+H18r5p8ppp4rxqWImIqI3//FdFw6lnO6yDP7H+tn/1bDt6XIMoyucbk4rkbEenH89uxpfwsAAADw9Prq45uf5d16/jI/6YI4S/lNm6nrH44p31xEzM7/OKZsU6OX58eULPv3PRMHY8qW3cCaG1Oy/JbbzLiy/S/Tx8LcY6GUh6kzLQcAADgTxzuBs+1CAAAAOEufTroAJqMUR48yj54FZ395/9cDwSvHRgAAAMA5VJp0AQAAAMCpy/p/v/8HAAAAT7f89/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgD3bu5zZxIIoD8LPBC/tPi1Z731b2BmVsCXvcY0QBaYICciAtpAFqILeUEEGExyEQcYjksa1E3yc5k7HMjzcIDjMjDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KX7ar24vfp93TZnt28nz2gAAACAS7bVelH/M0v9r839782tn02/iIgyIi7N3Ufx6Sxz1ORUL8/fnD5fvarhLqJOOLzHpLm+RMSf5nr80fWnAAAAAB/XZrmap9l6+jMbuiD6lBZtym9/M+UVEVHNHjKllYe8X5nC6u/3OP5nSqsXsKaZwtKS2zhX2pvUP/fjqt30pClSU1582bHIbGMHAAB6NDpr+p2FAAAA0Kd/QxfAMIp43so8bgVOUtNs730+6wEAAADvUDF0AQAAAEDn6vl/T+f/7Z3/BwAAAMNI5/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQpW21XmyWq3nbnN2+nTyjAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCf25x0FQiAMwmDv+s5k7n9YadDU1KQKhI+/MRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHjzu7/8n5gaZ5K518bS80iydmpsnRp758bRH8bXrwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuNiflxQIgSCIgjnjfyd9/8NKgp5BhAhoeFRRiwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvuh3v/yfmBpnkrnTxtLxSLJ21di6auw9aBw9GG//BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuNi5n9c4qjgA4G9mdra2Kq5R9hARBQ96sdttbe1NPCjBg3+CENJtjd36o83BliLm4k1y7kX0KCIo8db/IecEcom3HPYQwbMyszPZyQ9w/TWzST4fePO+Owzzvm8WQr7zXgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEBp9PYkTrJDZxzHxbnNvYdLWb91qM88Xtuez1oWR3UmfTK8WP0QdZtLBAAAgLMjKev7EMJOur6Q9XEnr//T8pqs5v/26XFc1vOH6/6yL2v/rP3y8+7z+wN1xuNkN725PBxcOppK6/+b5Wx75i+vaOVPPn/3kuRfSPze6nOjNH+e0dcbG++08/BcHdkCAP/ExbIvgvL3oazvN5kYAGdGq1J4l/V/0mk2JwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA6jFbDk2UchRDmW5M4s7X3cOm4/vHa9nzZrj16tBa+nNwzu0UaQri5PBxcqnU2s+3e/Qe3F4fDwd36g5dCCE2N/lYx/dsfTHFxCI08H8F/FMTFlz0r+ZyMoMEfSgAAnEpp0bK6fiddX8jORXMh/PHdwfr/1Uocpqz/dz+8tlkdq1r/92ub4ezrrdz5tHfv/oPXl+8s3hrcGnz8xuX+m/0r169evd7L35X0vDEBAADg32kXrVr/x3NH1/8vVOIwZf3/2Tf9L6pjJer/Y00W/ZrOBAAA4Gx79uXff4uOOR+12+HzxZWVu/3xcf/z5fGxgVT/tnNFq9b/yVzTWQEAAAB1GK1GB9b/b1TiMOX6/1Pfv/Bj9Z5JCOF8sf5/cemT4Y36pjPT6vhz4qbnCAAAQLPOF626/p/m+//j/S0PcQjhtVfGcfFvAKeq/5N3v/qhOlZ1//+V+qY4k+Lu+HnkfTeEVrfpjAAAADjNnihaVuz/mq4vfPTThffb9v8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1O3PAAAA//9WwT6Z")
r1 = openat(0xffffffffffffff9c, &(0x7f0000006840)='./file0\x00', 0x8ad41, 0x1b)
ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000006880)=0xfffffff9)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000068c0)={0x0, 0x0, 0x7318, 0x2000000})

2.660808381s ago: executing program 6 (id=1542):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44)
setsockopt(r0, 0x0, 0x483, &(0x7f0000000300)="060000007f00000100150000000000006d6800"/44, 0x2c)
setsockopt(r0, 0x0, 0x487, &(0x7f0000000400)="060000007f00000100150000000000006d68000000000000000000000000000000000000000000000000faff7e00000100"/68, 0x44)

2.608191816s ago: executing program 5 (id=1543):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/sys/kernel/ns_last_pid\x00', 0x202, 0x0)
write(r0, 0x0, 0x0)

2.511983436s ago: executing program 6 (id=1544):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0xb, 0x8, 0x2}, 0x50)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg(r1, &(0x7f000000ae00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000480), &(0x7f0000000280)=@udp=r1, 0x1}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000005c0)={r0, &(0x7f0000000440)}, 0x20)

2.362011921s ago: executing program 5 (id=1546):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
close(r0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0xc0a02, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0))
write$cgroup_devices(r0, 0x0, 0xfffffeff)

2.331908504s ago: executing program 6 (id=1547):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x590)
r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), 0xc9, 0xfffffffffffffffd)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)
keyctl$dh_compute(0x17, &(0x7f0000000180)={r0, r0, r0}, &(0x7f0000000240)=""/66, 0x42, &(0x7f00000002c0)={&(0x7f0000000300)={'sha224-generic\x00'}})

2.320624145s ago: executing program 4 (id=1548):
syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x8000c2, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x1, 0x4421, &(0x7f0000001000)="$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")
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = syz_open_dev$loop(&(0x7f000003d380), 0x5, 0x86100)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f000003d3c0)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f000003d400)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1c, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000000000000000000001b00", "28095397bab22d0000b42076c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f00", "90be8b1c5512406c7f00", [0x4, 0xa]}})

2.181412679s ago: executing program 6 (id=1549):
r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)

2.150860353s ago: executing program 5 (id=1550):
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
rseq(&(0x7f0000000300), 0x20, 0x0, 0x0)
io_setup(0x3ff, &(0x7f0000000500)=<r2=>0x0)
read$FUSE(r0, &(0x7f0000001740)={0x2020}, 0x2020)
io_submit(r2, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0xfffffdfc}])

2.068440771s ago: executing program 1 (id=1551):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001400)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f727400001f000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001500)={0x5c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
syz_usb_connect$uac1(0x3, 0xa2, 0x0, 0x0)

1.610062147s ago: executing program 2 (id=1552):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1_to_team\x00', 0x10)
setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000040)=0xa91, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10)
recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}, 0x8a}], 0x1, 0x22, 0x0)

983.72273ms ago: executing program 5 (id=1553):
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
r1 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x3fe, @loopback, 0x2}, 0x1c)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9533, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4)

701.028079ms ago: executing program 5 (id=1554):
syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0)
r0 = syz_open_dev$dvb_demux(&(0x7f0000000380), 0xcd79, 0x141000)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000003c0)={0x2, 0x0, 0x1, 0x7, 0x4})
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000400)={0x2, 0x1, 0x3, 0x4, 0x4})
close(r0)

700.938749ms ago: executing program 4 (id=1555):
bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x4, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)=ANY=[@ANYBLOB="03000000030003"], 0xa)
getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)={0x3, [0x8001, 0x8, 0x6]}, &(0x7f00000000c0)=0xa)

645.010755ms ago: executing program 2 (id=1556):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8)
close(0x3)

420.748107ms ago: executing program 2 (id=1557):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='fd\x00')
fchdir(r0)
exit(0x5)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97)
getdents64(r1, 0x0, 0x0)

349.346495ms ago: executing program 4 (id=1558):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000004c0)="99", 0x1}], 0x1}, 0x4048043)
setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0), 0x4)

167.031923ms ago: executing program 4 (id=1559):
syz_mount_image$reiserfs(&(0x7f0000000ac0), &(0x7f0000000b00)='./file0\x00', 0x800, &(0x7f0000000b40), 0xf4, 0x1119, &(0x7f0000000b80)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001cc0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
r1 = dup(r0)
syz_mount_image$fuse(0x0, &(0x7f0000007400)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x846048, 0x0, 0x0, 0x0, 0x0)
ftruncate(r1, 0x3f3ffc)

0s ago: executing program 6 (id=1560):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000080)={{0x3, 0x1, 0x1, 0x1}, 'syz0\x00', 0x1})
ioctl$UI_DEV_CREATE(r1, 0x5501)
close_range(r0, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

ing): Released all slaves
[  167.009093][ T6927] loop2: detected capacity change from 0 to 2048
[  167.096439][ T6927]  loop2: p2 < > p3 < p5 > p4
[  167.116495][ T6927] loop2: p4 start 458752 is beyond EOD, truncated
[  167.172622][ T6927] loop2: p5 start 458752 is beyond EOD, truncated
[  167.302684][ T6762] chnl_net:caif_netlink_parms(): no params data found
[  167.351007][ T6940] loop4: detected capacity change from 0 to 2048
[  167.447165][ T6940] EXT4-fs error (device loop4): ext4_orphan_get:1435: comm syz.4.893: bad orphan inode 214
[  167.458621][ T6940] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  167.535724][ T6762] bridge0: port 1(bridge_slave_0) entered blocking state
[  167.543000][ T6762] bridge0: port 1(bridge_slave_0) entered disabled state
[  167.581783][ T6762] device bridge_slave_0 entered promiscuous mode
[  167.606888][ T6762] bridge0: port 2(bridge_slave_1) entered blocking state
[  167.631559][ T6762] bridge0: port 2(bridge_slave_1) entered disabled state
[  167.669099][ T6762] device bridge_slave_1 entered promiscuous mode
[  167.761260][ T6762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  167.824761][ T4272] EXT4-fs (loop4): unmounting filesystem.
[  167.832870][ T6762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  167.974395][ T6762] team0: Port device team_slave_0 added
[  168.051988][ T6762] team0: Port device team_slave_1 added
[  168.117727][ T6762] batman_adv: batadv0: Adding interface: batadv_slave_0
[  168.165440][ T6762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  168.223875][ T6762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  168.268062][ T6762] batman_adv: batadv0: Adding interface: batadv_slave_1
[  168.288664][ T6762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  168.365623][ T6762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  168.529408][ T6762] device hsr_slave_0 entered promiscuous mode
[  168.563995][ T6762] device hsr_slave_1 entered promiscuous mode
[  168.570871][ T4289] Bluetooth: hci0: command 0x0419 tx timeout
[  168.634646][ T6762] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  168.642275][ T6762] Cannot create hsr debugfs directory
[  168.709417][ T6959] loop1: detected capacity change from 0 to 32768
[  168.803723][ T6964] loop4: detected capacity change from 0 to 32768
[  168.819432][ T6966] loop3: detected capacity change from 0 to 32768
[  168.861712][ T6964] XFS (loop4): Mounting V5 Filesystem
[  168.873542][ T6966] JBD2: Ignoring recovery information on journal
[  168.887314][ T6964] XFS (loop4): Ending clean mount
[  168.966029][ T4272] XFS (loop4): Unmounting Filesystem
[  169.071178][ T6966] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  169.146888][ T6987] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3)
[  169.153982][ T6987] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  169.382406][ T4281] ocfs2: Unmounting device (7,3) on (node local)
[  169.383190][ T6987] vhci_hcd vhci_hcd.0: Device attached
[  169.394657][ T6884] usb 2-1: new low-speed USB device number 16 using dummy_hcd
[  169.496741][ T6997] loop4: detected capacity change from 0 to 512
[  169.583405][ T6997] EXT4-fs (loop4): 1 truncate cleaned up
[  169.593373][ T6997] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  169.604643][ T6884] usb 2-1: config 0 has no interfaces?
[  169.610162][ T6884] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  169.619900][ T6884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.624631][  T131] usb 35-1: new low-speed USB device number 2 using vhci_hcd
[  169.666295][   T26] audit: type=1800 audit(1794333777.751:106): pid=6997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.902" name="file0" dev="loop4" ino=13 res=0 errno=0
[  169.688082][ T6884] usb 2-1: config 0 descriptor??
[  169.721341][ T6997] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.902: bg 0: block 465: padding at end of block bitmap is not set
[  169.743239][ T6762] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  169.762160][ T6997] EXT4-fs (loop4): Remounting filesystem read-only
[  169.786306][ T6762] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  169.809216][ T7005] capability: warning: `syz.2.905' uses deprecated v2 capabilities in a way that may be insecure
[  169.841129][ T6762] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  169.866545][ T4272] EXT4-fs (loop4): unmounting filesystem.
[  169.890978][ T6762] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  170.018943][ T6648] usb 2-1: USB disconnect, device number 16
[  170.034902][ T6989] vhci_hcd: connection closed
[  170.057443][ T4372] vhci_hcd: stop threads
[  170.097414][ T4372] vhci_hcd: release socket
[  170.113967][ T4372] vhci_hcd: disconnect device
[  170.164983][  T131] usb 35-1: device descriptor read/64, error -71
[  170.198814][ T6762] 8021q: adding VLAN 0 to HW filter on device bond0
[  170.247872][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  170.283350][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  170.305599][ T6762] 8021q: adding VLAN 0 to HW filter on device team0
[  170.328277][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  170.365102][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  170.376243][ T7022] loop4: detected capacity change from 0 to 2048
[  170.380938][ T4398] bridge0: port 1(bridge_slave_0) entered blocking state
[  170.391506][ T4398] bridge0: port 1(bridge_slave_0) entered forwarding state
[  170.409418][  T131] vhci_hcd: vhci_device speed not set
[  170.437427][ T7022] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  170.456338][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  170.483958][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  170.540305][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  170.580635][ T4398] bridge0: port 2(bridge_slave_1) entered blocking state
[  170.587811][ T4398] bridge0: port 2(bridge_slave_1) entered forwarding state
[  170.643650][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  170.713662][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  170.773320][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  170.830295][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  170.859438][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  170.914815][ T7003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  170.937717][ T7003] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  170.974148][ T7003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  170.987992][ T7043] loop1: detected capacity change from 0 to 256
[  171.000059][ T7003] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  171.028827][ T7003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  171.054466][ T7003] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  171.069180][ T6762] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  171.240321][ T7051] loop2: detected capacity change from 0 to 64
[  171.544694][ T7059] loop3: detected capacity change from 0 to 1024
[  171.732024][ T4398] hfsplus: b-tree write err: -5, ino 25
[  171.741890][ T4398] hfsplus: b-tree write err: -5, ino 4
[  171.764959][ T4398] hfsplus: b-tree write err: -5, ino 2
[  171.782889][ T4398] hfsplus: b-tree write err: -5, ino 26
[  171.908875][ T7074] loop4: detected capacity change from 0 to 128
[  171.961149][ T7074] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  172.108548][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  172.133965][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  172.164379][ T6762] 8021q: adding VLAN 0 to HW filter on device batadv0
[  172.279897][ T4398] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  172.384874][ T4906] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  172.604683][ T4906] usb 3-1: Using ep0 maxpacket: 16
[  172.610117][ T6648] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  172.625533][ T4906] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  172.654009][ T4906] usb 3-1: config 0 has no interface number 0
[  172.664167][ T4906] usb 3-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  172.687728][ T4906] usb 3-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0
[  172.702477][ T4906] usb 3-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  172.724003][ T4906] usb 3-1: config 0 interface 1 has no altsetting 0
[  172.732546][ T4906] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00
[  172.747425][ T4906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.761419][ T4906] usb 3-1: config 0 descriptor??
[  172.791897][ T4906] usbhid 3-1:0.1: fixing wrong optional hid class descriptors count
[  172.832068][ T6648] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  172.858032][ T6648] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.890058][ T6648] usb 2-1: Product: syz
[  172.894334][ T6648] usb 2-1: Manufacturer: syz
[  172.915364][ T6648] usb 2-1: SerialNumber: syz
[  172.969663][ T4912] hid-generic 0005:046D:0A0E.000E: unknown main item tag 0x0
[  172.995004][ T4912] hid-generic 0005:046D:0A0E.000E: unknown main item tag 0x0
[  173.002799][ T4912] hid-generic 0005:046D:0A0E.000E: unknown main item tag 0x0
[  173.018712][ T4912] hid-generic 0005:046D:0A0E.000E: unknown main item tag 0x0
[  173.026602][ T4912] hid-generic 0005:046D:0A0E.000E: unknown main item tag 0x0
[  173.034231][ T4912] hid-generic 0005:046D:0A0E.000E: unknown main item tag 0x0
[  173.046774][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  173.051738][ T4912] hid-generic 0005:046D:0A0E.000E: unknown main item tag 0x0
[  173.062352][ T4912] hid-generic 0005:046D:0A0E.000E: unknown main item tag 0x0
[  173.069867][ T4912] hid-generic 0005:046D:0A0E.000E: unknown main item tag 0x0
[  173.083302][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  173.091549][ T4912] hid-generic 0005:046D:0A0E.000E: unknown main item tag 0x0
[  173.136376][ T4912] hid-generic 0005:046D:0A0E.000E: hidraw0: BLUETOOTH HID v0.05 Device [syz0] on aa:aa:aa:aa:aa:aa
[  173.152098][ T6762] device veth0_vlan entered promiscuous mode
[  173.159591][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  173.199027][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  173.206148][ T4906] elan 0003:04F3:074D.000F: failed to start in urb: -90
[  173.231226][ T6762] device veth1_vlan entered promiscuous mode
[  173.253033][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  173.262115][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  173.291841][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  173.363503][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready
[  173.369587][ T6648] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32
[  173.372825][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready
[  173.399350][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  173.409569][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  173.456552][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  173.483772][ T6762] device veth0_macvtap entered promiscuous mode
[  173.505317][ T6762] device veth1_macvtap entered promiscuous mode
[  173.572310][ T6762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  173.602948][ T4906] elan 0003:04F3:074D.000F: Get report error for parm 6: 0
[  173.606461][ T6762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.654565][ T6762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  173.686871][ T6762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.711302][ T6762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  173.742950][ T6762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.770522][ T6762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  173.804156][ T4906] elan 0003:04F3:074D.000F: Set report error for parm 7: -71
[  173.814804][ T6762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.817202][ T6648] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71
[  173.843556][ T6762] batman_adv: batadv0: Interface activated: batadv_slave_0
[  173.852210][ T4906] elan 0003:04F3:074D.000F: hidraw1: USB HID v0.00 Joystick [HID 04f3:074d] on usb-dummy_hcd.2-1/input1
[  173.874014][ T6648] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  173.875683][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  173.883397][ T4906] elan 0003:04F3:074D.000F: Input device is not registered
[  173.920981][ T6648] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  173.940424][ T4906] elan: probe of 0003:04F3:074D.000F failed with error -119
[  173.952966][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  173.974036][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  173.987976][ T4906] usb 3-1: USB disconnect, device number 10
[  173.997513][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  174.006459][ T7131] sctp: [Deprecated]: syz.3.941 (pid 7131) Use of int in maxseg socket option.
[  174.006459][ T7131] Use struct sctp_assoc_value instead
[  174.047869][ T6648] lan78xx: probe of 2-1:1.0 failed with error -71
[  174.073866][ T6648] usb 2-1: USB disconnect, device number 17
[  174.075585][ T6762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  174.107124][ T6762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.122773][ T6762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  174.170867][ T6762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.211301][ T6762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  174.242305][ T6762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.268668][ T7135] fido_id[7135]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  174.298949][ T6762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  174.318938][ T6762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.360855][ T6762] batman_adv: batadv0: Interface activated: batadv_slave_1
[  174.387246][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  174.410627][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  174.488397][ T6762] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  174.528834][ T6762] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  174.551559][ T6762] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  174.589297][ T6762] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  174.851055][ T4372] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  174.889363][ T4372] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  174.926833][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  174.978231][   T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  175.008685][   T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  175.036086][   T48] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  175.283747][ T7158] gadgetfs: bound to dummy_udc driver
[  175.334070][   T26] audit: type=1800 audit(1794333783.411:107): pid=7163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.946" name="ep1in-bulk" dev="gadgetfs" ino=43005 res=0 errno=0
[  175.400860][ T7145] loop2: detected capacity change from 0 to 32768
[  175.461163][ T7145] JBD2: Ignoring recovery information on journal
[  175.524930][  T131] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  175.563269][ T7145] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  175.744696][  T131] usb 6-1: Using ep0 maxpacket: 32
[  175.753663][  T131] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  175.785912][ T4274] ocfs2: Unmounting device (7,2) on (node local)
[  175.802207][  T131] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.854829][  T131] usb 6-1: Product: syz
[  175.859054][  T131] usb 6-1: Manufacturer: syz
[  175.900052][  T131] usb 6-1: SerialNumber: syz
[  175.910450][ T7181] loop5: detected capacity change from 0 to 7
[  175.920798][  T131] usb 6-1: config 0 descriptor??
[  175.952057][  T131] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  175.984975][ T7181] Dev loop5: unable to read RDB block 7
[  175.994996][ T7181]  loop5: unable to read partition table
[  176.016149][ T7181] loop5: partition table beyond EOD, truncated
[  176.054665][ T7181] loop_reread_partitions: partition scan of loop5 (�被x������ ) failed (rc=-5)
[  176.360223][ T7198] loop3: detected capacity change from 0 to 512
[  176.464187][ T7198] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  176.529686][ T7198] EXT4-fs error (device loop3): ext4_orphan_get:1435: comm syz.3.958: bad orphan inode 13
[  176.597107][ T7198] ext4_test_bit(bit=12, block=18) = 1
[  176.655674][ T7198] is_bad_inode(inode)=0
[  176.659889][ T7198] NEXT_ORPHAN(inode)=0
[  176.663969][ T7198] max_ino=32
[  176.731761][ T7198] i_nlink=1
[  176.752493][ T7212] input: syz0 as /devices/virtual/input/input12
[  176.765754][ T7198] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  176.796423][ T7213] loop2: detected capacity change from 0 to 1024
[  176.843551][ T7198] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  176.937731][ T7198] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.958: bg 0: block 248: padding at end of block bitmap is not set
[  177.005221][  T131] gspca_ov534_9: reg_w failed -71
[  177.031818][ T7198] Quota error (device loop3): write_blk: dquota write failed
[  177.090597][ T7198] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota
[  177.132565][ T7198] EXT4-fs error (device loop3): ext4_acquire_dquot:6848: comm syz.3.958: Failed to acquire dquot type 1
[  177.203451][ T4281] EXT4-fs (loop3): unmounting filesystem.
[  177.225134][   T48] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-5
[  177.234159][   T48] EXT4-fs error (device loop3): ext4_release_dquot:6884: comm kworker/u4:3: Failed to release dquot type 1
[  177.376774][ T7229] loop1: detected capacity change from 0 to 8192
[  177.412251][ T7229] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  177.431052][  T131] gspca_ov534_9: Unknown sensor 0000
[  177.431118][  T131] ov534_9: probe of 6-1:0.0 failed with error -22
[  177.454679][ T7229] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[  177.464247][ T7229] REISERFS (device loop1): using ordered data mode
[  177.470956][ T7229] reiserfs: using flush barriers
[  177.477867][ T7229] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  177.499903][  T131] usb 6-1: USB disconnect, device number 2
[  177.545048][ T7229] REISERFS (device loop1): checking transaction log (loop1)
[  177.560479][ T7229] REISERFS (device loop1): Using r5 hash to sort names
[  177.588839][ T7229] REISERFS (device loop1): using 3.5.x disk format
[  177.617722][ T7229] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  178.083544][ T7261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  178.494167][ T7278] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  178.510158][ T7280] vxcan0: tx drop: invalid da for name 0x00000000000000c8
[  178.734858][ T4917] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  178.759100][ T7285] rxe_eth0 speed is unknown, defaulting to 1000
[  178.761172][ T7283] kvm [7282]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0xbffffffffffffffd
[  178.943101][ T4917] usb 2-1: Using ep0 maxpacket: 8
[  178.953483][ T4917] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[  178.973836][ T4917] usb 2-1: config 179 has no interface number 0
[  178.987112][ T4917] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  179.016256][ T4917] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  179.052548][ T4917] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9
[  179.074596][ T4917] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024
[  179.123291][ T4917] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  179.172541][ T4917] usb 2-1: config 179 interface 65 has no altsetting 0
[  179.189976][ T4917] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  179.223675][ T4917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.357570][ T4917] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input13
[  179.727119][  T131] usb 2-1: USB disconnect, device number 18
[  179.727137][    C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  179.765445][  T131] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  179.842157][ T7305] loop2: detected capacity change from 0 to 1024
[  179.900774][ T7305] hfsplus: unable to parse mount options
[  180.074863][ T4917] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  180.268186][ T4917] usb 5-1: Using ep0 maxpacket: 16
[  180.279590][ T4917] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  180.312216][ T4917] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  180.342454][ T4917] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  180.381612][ T4917] usb 5-1: config 0 interface 0 has no altsetting 0
[  180.391743][ T4917] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[  180.413536][ T4917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  180.443282][ T4917] usb 5-1: config 0 descriptor??
[  180.456362][ T7325] loop5: detected capacity change from 0 to 4096
[  180.521424][ T7329] kvm [7328]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0xbffffffffffffffd
[  180.549473][ T7325] NILFS (loop5): invalid segment: Checksum error in segment payload
[  180.568312][ T7325] NILFS (loop5): trying rollback from an earlier position
[  180.677561][ T7325] NILFS (loop5): recovery complete
[  180.695654][ T7335] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  180.775831][ T7325] NILFS (loop5): DAT doesn't have a block to manage vblocknr = 4096
[  180.795109][ T7325] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=12)
[  180.832647][ T7325] Remounting filesystem read-only
[  180.850034][ T7325] NILFS (loop5): error -5 cleaning segments
[  180.874632][  T131] usb 2-1: new full-speed USB device number 19 using dummy_hcd
[  180.889418][ T4917] input: HID 041e:2801 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:041E:2801.0010/input/input14
[  181.012376][ T4917] prodikeys 0003:041E:2801.0010: input,hidraw0: USB HID v0.00 Joystick [HID 041e:2801] on usb-dummy_hcd.4-1/input0
[  181.065659][  T131] usb 2-1: not running at top speed; connect to a high speed hub
[  181.092948][ T6648] usb 5-1: USB disconnect, device number 13
[  181.110332][  T131] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 255, setting to 64
[  181.144177][  T131] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00
[  181.158890][  T131] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.170506][ T7344] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  181.177685][ T7332] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  181.185842][ T7347] fido_id[7347]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory
[  181.187819][ T7325] NILFS (loop5): error -30 cleaning segments
[  181.215608][  T131] cyberjack 2-1:1.0: Reiner SCT Cyberjack USB card reader converter detected
[  181.227996][  T131] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  181.292720][ T6762] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer
[  181.432520][ T4352] usb 2-1: USB disconnect, device number 19
[  181.452722][ T4352] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  181.469191][ T4352] cyberjack 2-1:1.0: device disconnected
[  181.483959][ T7354] mkiss: ax0: crc mode is auto.
[  181.684909][  T131] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  181.884803][  T131] usb 6-1: Using ep0 maxpacket: 32
[  181.904002][  T131] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  181.934759][  T131] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.966760][  T131] usb 6-1: config 0 descriptor??
[  182.009886][  T131] as10x_usb: device has been detected
[  182.028843][  T131] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  182.100438][  T131] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  182.138258][  T131] as10x_usb: error during firmware upload part1
[  182.167551][  T131] Registered device nBox DVB-T Dongle
[  182.194191][ T7377] loop3: detected capacity change from 0 to 2048
[  182.194800][  T131] usb 6-1: USB disconnect, device number 3
[  182.263322][ T7377] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  182.298308][  T131] Unregistered device nBox DVB-T Dongle
[  182.320561][  T131] as10x_usb: device has been disconnected
[  182.424279][ T7382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1018'.
[  182.442414][ T4281] EXT4-fs (loop3): unmounting filesystem.
[  182.893922][ T7402] loop2: detected capacity change from 0 to 1024
[  182.950339][ T7402] EXT4-fs: Ignoring removed orlov option
[  183.013969][ T7406] loop1: detected capacity change from 0 to 512
[  183.083097][ T7402] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  183.142317][ T7406] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  183.195351][ T7406] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  183.250854][ T4275] EXT4-fs (loop1): unmounting filesystem.
[  183.327670][ T7423] loop4: detected capacity change from 0 to 256
[  183.353405][ T4274] EXT4-fs (loop2): unmounting filesystem.
[  183.379355][ T7423] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  183.395745][ T7421] overlayfs: failed to decode file handle (len=6, type=0, flags=0, err=-22)
[  183.660255][ T4352] kernel write not supported for file /tomoyo/query (pid: 4352 comm: kworker/1:6)
[  183.850607][ T7445] ubi0: attaching mtd0
[  183.861600][ T7445] ubi0: scanning is finished
[  183.877033][ T7445] ubi0 error: ubi_read_volume_table: the layout volume was not found
[  183.890070][ T7446] loop1: detected capacity change from 0 to 2048
[  184.036749][ T7445] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  184.413751][ T7473] loop2: detected capacity change from 0 to 512
[  184.504650][ T7473] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #2: comm syz.2.1055: missing EA_INODE flag
[  184.532758][ T7473] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.1055: error while reading EA inode 2 err=-117
[  184.570778][ T7473] EXT4-fs (loop2): 1 orphan inode deleted
[  184.607506][ T7473] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  184.652094][ T4274] EXT4-fs (loop2): unmounting filesystem.
[  184.711075][ T7484] loop4: detected capacity change from 0 to 2048
[  184.801637][ T7490] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  184.942404][ T7490] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  184.965288][ T7490] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4)
[  185.013677][ T7490] Remounting filesystem read-only
[  185.025392][ T4272] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer
[  185.564965][ T7527] ip_tables: iptables: counters copy to user failed while replacing table
[  185.724686][ T4917] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  185.794632][ T6648] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  185.911171][ T7532] jffs2: notice: (7532) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  185.933652][ T4917] usb 3-1: Using ep0 maxpacket: 32
[  185.943608][ T4917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  185.970646][ T4917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  185.990658][ T4917] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  185.990784][ T6648] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  186.004909][ T4917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.038885][ T6648] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  186.053819][ T7525] loop4: detected capacity change from 0 to 40427
[  186.060749][ T6648] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  186.076571][ T6648] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.087194][ T4917] usb 3-1: config 0 descriptor??
[  186.088906][ T7525] F2FS-fs (loop4): Invalid SB checksum offset: 0
[  186.116671][ T6648] usb 6-1: config 0 descriptor??
[  186.122259][ T7525] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  186.146615][ T7525] F2FS-fs (loop4): invalid crc value
[  186.213439][ T7525] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  186.264960][ T7541] FAULT_INJECTION: forcing a failure.
[  186.264960][ T7541] name failslab, interval 1, probability 0, space 0, times 0
[  186.298827][ T7541] CPU: 1 PID: 7541 Comm: syz.3.1078 Not tainted syzkaller #0
[  186.306270][ T7541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  186.316352][ T7541] Call Trace:
[  186.319646][ T7541]  <TASK>
[  186.322589][ T7541]  dump_stack_lvl+0x188/0x24e
[  186.327304][ T7541]  ? show_regs_print_info+0x12/0x12
[  186.332536][ T7541]  ? load_image+0x410/0x410
[  186.337065][ T7541]  ? __might_sleep+0xd0/0xd0
[  186.341666][ T7541]  ? __lock_acquire+0x7ea0/0x7ea0
[  186.346719][ T7541]  should_fail_ex+0x390/0x4c0
[  186.351424][ T7541]  should_failslab+0x5/0x20
[  186.355945][ T7541]  slab_pre_alloc_hook+0x59/0x300
[  186.361000][ T7541]  ? x509_key_preparse+0x2cf/0x660
[  186.366123][ T7541]  __kmem_cache_alloc_node+0x4f/0x270
[  186.371519][ T7541]  ? x509_key_preparse+0x2cf/0x660
[  186.376655][ T7541]  kmalloc_trace+0x26/0xe0
[  186.381090][ T7541]  x509_key_preparse+0x2cf/0x660
[  186.386061][ T7541]  asymmetric_key_preparse+0xa5/0x140
[  186.391467][ T7541]  key_create_or_update+0x405/0xa50
[  186.396699][ T7541]  ? key_type_put+0x20/0x20
[  186.401251][ T7541]  ? __might_fault+0xc2/0x120
[  186.405951][ T7541]  ? __might_fault+0xa6/0x120
[  186.410655][ T7541]  __se_sys_add_key+0x34b/0x410
[  186.415536][ T7541]  ? __x64_sys_add_key+0xc0/0xc0
[  186.420508][ T7541]  ? lockdep_hardirqs_on+0x94/0x140
[  186.425729][ T7541]  ? __x64_sys_add_key+0x1c/0xc0
[  186.430695][ T7541]  do_syscall_64+0x4c/0xa0
[  186.435134][ T7541]  ? clear_bhb_loop+0x60/0xb0
[  186.439829][ T7541]  ? clear_bhb_loop+0x60/0xb0
[  186.444529][ T7541]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  186.450447][ T7541] RIP: 0033:0x7f28bd5a8f19
[  186.454879][ T7541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  186.474505][ T7541] RSP: 002b:00007f28be420028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[  186.482955][ T7541] RAX: ffffffffffffffda RBX: 00007f28bd825fa0 RCX: 00007f28bd5a8f19
[  186.490956][ T7541] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 0000200000000240
[  186.498953][ T7541] RBP: 00007f28bd637f6d R08: ffffffffffffffff R09: 0000000000000000
[  186.506946][ T7541] R10: 00000000000000da R11: 0000000000000246 R12: 0000000000000000
[  186.514938][ T7541] R13: 00007f28bd826038 R14: 00007f28bd825fa0 R15: 00007ffcc51b9f08
[  186.517896][ T4917] savu 0003:1E7D:2D5A.0011: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0
[  186.522944][ T7541]  </TASK>
[  186.551310][ T7525] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  186.561640][ T7525] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  186.736201][ T6648] hid_parser_main: 22 callbacks suppressed
[  186.736221][ T6648] cm6533_jd 0003:0D8C:0022.0012: unknown main item tag 0x0
[  186.761985][ T6648] cm6533_jd 0003:0D8C:0022.0012: unknown main item tag 0x0
[  186.788959][ T6648] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0D8C:0022.0012/input/input15
[  186.882708][ T4917] usb 3-1: USB disconnect, device number 11
[  186.890604][ T6648] cm6533_jd 0003:0D8C:0022.0012: input,hiddev1,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0
[  186.975672][ T4352] usb 6-1: USB disconnect, device number 4
[  187.107636][ T7556] fido_id[7556]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  187.517479][ T4912] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  187.726780][ T4912] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  187.743916][ T4912] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  187.763160][ T4912] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  187.773257][ T4912] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  187.794349][ T4912] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  187.803601][ T4912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.123265][ T7601] loop1: detected capacity change from 0 to 512
[  188.450575][ T7610] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1103'.
[  188.607528][ T7616] loop2: detected capacity change from 0 to 24
[  188.645437][ T7616] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  188.700092][ T7616] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  188.846165][ T4912] gud 5-1:1.0: USB-1: Failed to add properties (ret=-71)
[  188.853334][ T4912] gud 5-1:1.0: Failed to get connectors (error=-71)
[  188.924703][ T4912] gud: probe of 5-1:1.0 failed with error -71
[  189.151549][ T4912] usb 5-1: USB disconnect, device number 14
[  190.124706][ T6648] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  190.253290][ T7667] loop2: detected capacity change from 0 to 40427
[  190.281725][ T7667] F2FS-fs (loop2): Invalid SB checksum offset: 0
[  190.292734][ T7667] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[  190.311681][ T7695] futex_wake_op: syz.5.1116 tries to shift op by 144; fix this program
[  190.321181][ T6648] usb 2-1: Using ep0 maxpacket: 16
[  190.334936][ T6648] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8
[  190.354833][ T7667] F2FS-fs (loop2): invalid crc value
[  190.362450][ T6648] usb 2-1: config 0 has no interface number 0
[  190.379490][ T6648] usb 2-1: config 0 interface 3 has no altsetting 0
[  190.397352][ T6648] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  190.419579][ T7667] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  190.439821][ T6648] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  190.452171][ T7672] loop3: detected capacity change from 0 to 40427
[  190.470027][ T6648] usb 2-1: Product: syz
[  190.470748][ T7695] futex_wake_op: syz.5.1116 tries to shift op by 144; fix this program
[  190.500041][ T7672] F2FS-fs (loop3): Invalid SB checksum offset: 0
[  190.511150][ T6648] usb 2-1: Manufacturer: syz
[  190.528408][ T7672] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  190.535782][ T7695] futex_wake_op: syz.5.1116 tries to shift op by 144; fix this program
[  190.537096][ T6648] usb 2-1: SerialNumber: syz
[  190.597547][ T7672] F2FS-fs (loop3): invalid crc value
[  190.615819][ T6648] usb 2-1: config 0 descriptor??
[  190.644740][ T6648] ftdi_sio 2-1:0.3: FTDI USB Serial Device converter detected
[  190.652948][ T6648] usb 2-1: Detected FT232R
[  190.678983][ T7672] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  190.718851][ T7667] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[  190.736836][ T7667] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  190.824118][ T6648] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  190.883857][ T4274] syz-executor: attempt to access beyond end of device
[  190.883857][ T4274] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  190.903841][ T7672] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[  190.922345][ T7672] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  190.973772][ T7710] loop5: detected capacity change from 0 to 2048
[  191.044702][ T4286] Bluetooth: hci1: command 0x0406 tx timeout
[  191.050765][ T4286] Bluetooth: hci2: command 0x0406 tx timeout
[  191.058272][ T4287] Bluetooth: hci3: command 0x0406 tx timeout
[  191.065705][ T6648] ftdi_sio 2-1:0.3: GPIO initialisation failed: -71
[  191.086314][ T6648] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  191.090038][ T7710] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  191.121397][ T6648] usb 2-1: USB disconnect, device number 20
[  191.131141][ T6648] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  191.143571][ T6648] ftdi_sio 2-1:0.3: device disconnected
[  191.169740][ T4281] syz-executor: attempt to access beyond end of device
[  191.169740][ T4281] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  191.602239][ T7725] loop4: detected capacity change from 0 to 1024
[  191.663068][ T7725] EXT4-fs: Ignoring removed mblk_io_submit option
[  191.712501][ T7725] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  191.763635][ T7732] loop2: detected capacity change from 0 to 128
[  191.874705][ T6648] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  192.124838][ T6648] usb 6-1: Using ep0 maxpacket: 16
[  192.137374][ T7725] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  192.146146][ T6648] usb 6-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  192.235407][ T6648] usb 6-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0
[  192.269368][ T7742] netlink: 'syz.3.1124': attribute type 12 has an invalid length.
[  192.367756][ T6648] usb 6-1: config 0 interface 0 has no altsetting 0
[  192.402482][ T7742] netlink: 'syz.3.1124': attribute type 12 has an invalid length.
[  192.441208][ T6648] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  192.523259][ T6648] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.603042][ T6648] usb 6-1: config 0 descriptor??
[  192.744525][    C0] sched: RT throttling activated
[  192.764543][ T4272] EXT4-fs (loop4): unmounting filesystem.
[  193.081785][ T6648] mcp2221 0003:04D8:00DD.0013: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0
[  193.335423][ T6648] usb 6-1: USB disconnect, device number 5
[  193.446352][ T7752] page:ffffea00013f8000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4fe00
[  193.474773][ T7752] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  193.518719][ T7752] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  193.544892][ T7752] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[  193.574028][ T7752] page dumped because: unmovable page
[  193.589289][ T7752] page_owner tracks the page as allocated
[  193.607906][ T7752] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x100cc0(GFP_USER), pid 6735, tgid 6735 (syz-executor), ts 159875024475, free_ts 131596960160
[  193.645477][ T7752]  post_alloc_hook+0x173/0x1a0
[  193.650324][ T7752]  get_page_from_freelist+0x206b/0x2180
[  193.666497][ T7752]  __alloc_pages+0x1ec/0x4f0
[  193.676639][ T7752]  __alloc_pages_bulk+0x491/0x910
[  193.697721][ T7752]  kasan_populate_vmalloc+0xc9/0x280
[  193.714962][ T7752]  alloc_vmap_area+0x19db/0x1b10
[  193.730327][ T7752]  __get_vm_area_node+0x158/0x330
[  193.745816][ T7752]  __vmalloc_node_range+0x357/0x1380
[  193.755276][ T7752]  vmalloc_user+0x70/0x80
[  193.774669][ T7752]  kcov_ioctl+0x54/0x610
[  193.778975][ T7752]  __se_sys_ioctl+0xfa/0x170
[  193.791526][ T7752]  do_syscall_64+0x4c/0xa0
[  193.817586][ T7752]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  193.839162][ T7752] page last free stack trace:
[  193.861190][ T7752]  free_unref_page_prepare+0x8e5/0x9e0
[  193.871307][ T7752]  free_unref_page+0x2e/0x3f0
[  193.885642][ T7752]  __unfreeze_partials+0x188/0x1e0
[  193.896580][ T7767] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  193.917654][ T7752]  put_cpu_partial+0x17c/0x250
[  193.932777][ T7752]  qlist_free_all+0x76/0xe0
[  193.942891][ T7752]  kasan_quarantine_reduce+0x144/0x160
[  193.956431][ T7752]  __kasan_slab_alloc+0x1e/0x80
[  193.967611][ T7767] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  193.975048][ T7752]  slab_post_alloc_hook+0x4b/0x490
[  193.980309][ T7752]  kmem_cache_alloc+0x18b/0x2f0
[  193.992174][ T7752]  getname_flags+0xb7/0x500
[  194.002939][ T7752]  __x64_sys_mkdirat+0x78/0x90
[  194.013470][ T7774] loop5: detected capacity change from 0 to 512
[  194.018749][ T7752]  do_syscall_64+0x4c/0xa0
[  194.054957][ T7752]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  194.098107][ T1283] ieee802154 phy0 wpan0: encryption failed: -22
[  194.104476][ T1283] ieee802154 phy1 wpan1: encryption failed: -22
[  194.118067][ T7774] EXT4-fs (loop5): invalid inodes per group: 462880
[  194.118067][ T7774] 
[  194.371085][ T7774] binder: 7772:7774 ioctl c0306201 200000000080 returned -14
[  194.599732][ T7790] loop5: detected capacity change from 0 to 164
[  194.997949][ T7802] loop5: detected capacity change from 0 to 2048
[  195.006869][ T4912] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  195.043885][ T7802] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  195.072677][ T7806] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1147'.
[  195.117497][ T7802] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  195.218960][ T4912] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  195.221631][ T7780] loop2: detected capacity change from 0 to 32768
[  195.258977][ T4912] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  195.292708][ T4912] usb 4-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00
[  195.317539][ T4912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  195.341643][ T4912] usb 4-1: Product: syz
[  195.364273][ T4912] usb 4-1: Manufacturer: syz
[  195.403319][ T7780] XFS (loop2): Mounting V5 Filesystem
[  195.405947][ T4912] iuu_phoenix 4-1:1.0: iuu_phoenix converter detected
[  195.421946][ T4912] usb 4-1: iuu_phoenix converter now attached to ttyUSB0
[  195.587097][ T7780] XFS (loop2): Ending clean mount
[  195.620652][ T7780] XFS (loop2): Quotacheck needed: Please wait.
[  195.641372][ T7795] iuu_phoenix ttyUSB0: vcc_mode_store - vcc_mode: 7u̝e�!W�i��j��/�����)P���( is not a unsigned long
[  195.717321][ T4917] usb 4-1: USB disconnect, device number 9
[  195.735614][ T7780] XFS (loop2): Quotacheck: Done.
[  195.764077][ T4917] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0
[  195.825075][ T4917] iuu_phoenix 4-1:1.0: device disconnected
[  196.136304][ T4274] XFS (loop2): Unmounting Filesystem
[  196.617370][ T7853] db_root: cannot open: /dev/net/tun
[  196.623103][ T7853] db_root: not a directory: /dev/net/tun
[  196.781094][ T7834] loop1: detected capacity change from 0 to 40427
[  196.831406][ T7834] F2FS-fs (loop1): invalid crc value
[  196.869733][ T7834] F2FS-fs (loop1): Found nat_bits in checkpoint
[  196.914230][ T7866] loop4: detected capacity change from 0 to 512
[  196.966851][ T7866] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  197.084821][ T7866] EXT4-fs (loop4): 1 truncate cleaned up
[  197.091371][ T7866] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  197.103299][ T7834] F2FS-fs (loop1): Start checkpoint disabled!
[  197.202872][ T7847] loop5: detected capacity change from 0 to 32768
[  197.219874][ T7834] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  197.271508][ T7880] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1164'.
[  197.293618][ T7847] JBD2: Ignoring recovery information on journal
[  197.382048][ T4272] EXT4-fs (loop4): unmounting filesystem.
[  197.436980][ T7847] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  197.556541][ T7887] loop2: detected capacity change from 0 to 512
[  197.671880][ T7887] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  197.895841][ T6762] ocfs2: Unmounting device (7,5) on (node local)
[  197.963944][ T4274] EXT4-fs (loop2): unmounting filesystem.
[  198.022298][ T7901] loop6: detected capacity change from 0 to 8
[  198.030477][ T7898] FAULT_INJECTION: forcing a failure.
[  198.030477][ T7898] name failslab, interval 1, probability 0, space 0, times 0
[  198.050293][ T7898] CPU: 1 PID: 7898 Comm: syz.3.1172 Not tainted syzkaller #0
[  198.057719][ T7898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  198.067793][ T7898] Call Trace:
[  198.071096][ T7898]  <TASK>
[  198.074042][ T7898]  dump_stack_lvl+0x188/0x24e
[  198.078750][ T7898]  ? show_regs_print_info+0x12/0x12
[  198.083997][ T7898]  ? load_image+0x410/0x410
[  198.088526][ T7898]  ? __might_sleep+0xd0/0xd0
[  198.093134][ T7898]  ? __lock_acquire+0x7ea0/0x7ea0
[  198.096257][ T7901] Dev loop6: unable to read RDB block 8
[  198.098174][ T7898]  should_fail_ex+0x390/0x4c0
[  198.098206][ T7898]  should_failslab+0x5/0x20
[  198.112946][ T7898]  slab_pre_alloc_hook+0x59/0x300
[  198.118009][ T7898]  kmem_cache_alloc_lru+0x49/0x2e0
[  198.123157][ T7898]  ? __d_alloc+0x2e/0x6e0
[  198.126351][ T7901]  loop6: unable to read partition table
[  198.127499][ T7898]  __d_alloc+0x2e/0x6e0
[  198.127523][ T7898]  ? d_alloc_pseudo+0xe/0x70
[  198.141913][ T7898]  d_alloc_pseudo+0x19/0x70
[  198.146441][ T7898]  alloc_file_pseudo+0xe0/0x200
[  198.147963][ T7901] loop6: partition table beyond EOD, 
[  198.151302][ T7898]  ? alloc_empty_file_noaccount+0x80/0x80
[  198.151332][ T7898]  ? alloc_anon_inode+0x22e/0x300
[  198.167448][ T7898]  ? memcpy+0x3c/0x60
[  198.171452][ T7898]  ? bpf_lsm_inode_init_security_anon+0x5/0x10
[  198.177259][ T7901] truncated
[  198.177608][ T7898]  ? security_inode_init_security_anon+0x7e/0xa0
[  198.187062][ T7898]  __anon_inode_getfile+0x22f/0x350
[  198.192293][ T7898]  ? anon_inode_getfile+0x1a0/0x1a0
[  198.195824][ T7901] loop_reread_partitions: partition scan of loop6 (�被x�^>����) failed (rc=-5)
[  198.197498][ T7898]  ? __might_fault+0xa6/0x120
[  198.197523][ T7898]  ? __might_fault+0xc2/0x120
[  198.216069][ T7898]  ? __might_fault+0xa6/0x120
[  198.220778][ T7898]  io_uring_create+0x8ae/0xd6c
[  198.225577][ T7898]  __x64_sys_io_uring_setup+0x21b/0x230
[  198.231160][ T7898]  ? __ia32_sys_io_uring_enter+0xf0/0xf0
[  198.236837][ T7898]  ? lockdep_hardirqs_on+0x94/0x140
[  198.242069][ T7898]  do_syscall_64+0x4c/0xa0
[  198.246517][ T7898]  ? clear_bhb_loop+0x60/0xb0
[  198.251220][ T7898]  ? clear_bhb_loop+0x60/0xb0
[  198.255954][ T7898]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  198.261872][ T7898] RIP: 0033:0x7f28bd5a8f19
[  198.266303][ T7898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  198.285932][ T7898] RSP: 002b:00007f28be420028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9
[  198.294375][ T7898] RAX: ffffffffffffffda RBX: 00007f28bd825fa0 RCX: 00007f28bd5a8f19
[  198.302369][ T7898] RDX: 0000000000000000 RSI: 0000200000000b00 RDI: 0000000000001b7b
[  198.310362][ T7898] RBP: 00007f28bd637f6d R08: 0000000000000000 R09: 0000000000000000
[  198.318355][ T7898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  198.326348][ T7898] R13: 00007f28bd826038 R14: 00007f28bd825fa0 R15: 00007ffcc51b9f08
[  198.334359][ T7898]  </TASK>
[  198.334385][ T7909] input: syz1 as /devices/virtual/input/input16
[  199.352696][ T7915] loop4: detected capacity change from 0 to 131072
[  199.383049][ T7915] F2FS-fs (loop4): invalid crc value
[  199.435741][ T7910] loop2: detected capacity change from 0 to 32768
[  199.452744][ T7915] F2FS-fs (loop4): Found nat_bits in checkpoint
[  199.489211][ T7915] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2
[  199.522914][ T7915] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  199.544771][ T4352] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  199.593861][ T7910] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  199.774767][ T4352] usb 2-1: Using ep0 maxpacket: 32
[  199.781813][ T4352] usb 2-1: config 0 has an invalid interface number: 85 but max is 0
[  199.819606][ T7919] loop5: detected capacity change from 0 to 32768
[  199.826221][ T4352] usb 2-1: config 0 has no interface number 0
[  199.832822][ T4352] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  199.913953][ T7919] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present!
[  199.925276][ T4352] usb 2-1: config 0 interface 85 has no altsetting 0
[  199.953999][ T4352] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  199.972035][ T4352] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.980259][ T4352] usb 2-1: Product: syz
[  199.984456][ T4352] usb 2-1: Manufacturer: syz
[  199.989116][ T4352] usb 2-1: SerialNumber: syz
[  200.002519][ T4352] usb 2-1: config 0 descriptor??
[  200.011659][ T7919] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  200.062059][ T4274] ocfs2: Unmounting device (7,2) on (node local)
[  200.225281][ T7947] netlink: 'syz.2.1182': attribute type 1 has an invalid length.
[  200.279126][ T7947] device bond1 entered promiscuous mode
[  200.356739][ T6762] ocfs2: Unmounting device (7,5) on (node local)
[  200.416259][ T7927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  200.431004][ T7947] 8021q: adding VLAN 0 to HW filter on device bond1
[  200.433962][ T7927] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  200.686075][ T7950] 8021q: adding VLAN 0 to HW filter on device bond1
[  200.709976][ T4352] appletouch 2-1:0.85: Geyser mode initialized.
[  200.723388][ T4352] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input17
[  200.755945][ T7950] bond1: (slave gre1): The slave device specified does not support setting the MAC address
[  200.774761][ T7950] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode
[  200.853329][ T7950] bond1: (slave gre1): making interface the new active one
[  200.914045][ T4352] usb 2-1: USB disconnect, device number 21
[  200.930349][ T7950] device gre1 entered promiscuous mode
[  200.962437][ T7950] bond1: (slave gre1): Enslaving as an active interface with an up link
[  201.009882][   T31] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  201.091090][ T4352] appletouch 2-1:0.85: input: appletouch disconnected
[  201.149265][ T7967] rnbd_client L211: map_device: Parameters missing
[  201.472742][ T4912] kernel read not supported for file /input/event1 (pid: 4912 comm: kworker/0:10)
[  201.742000][ T7990] loop4: detected capacity change from 0 to 2048
[  201.772227][ T7990] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  201.947554][ T7997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1194'.
[  202.357002][ T8016] loop4: detected capacity change from 0 to 512
[  202.402976][ T8016] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  202.460094][ T8022] loop5: detected capacity change from 0 to 1024
[  202.490663][ T8022] EXT4-fs: Ignoring removed bh option
[  202.493485][ T8016] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1202: invalid indirect mapped block 9 (level 0)
[  202.509583][ T4912] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  202.567763][ T8022] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  202.584079][ T8016] EXT4-fs (loop4): 1 truncate cleaned up
[  202.630705][ T8016] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  202.638235][ T8032] netlink: 'syz.1.1206': attribute type 29 has an invalid length.
[  202.647712][ T8032] netlink: 'syz.1.1206': attribute type 29 has an invalid length.
[  202.658270][ T8032] netlink: 'syz.1.1206': attribute type 29 has an invalid length.
[  202.666783][ T8032] netlink: 'syz.1.1206': attribute type 29 has an invalid length.
[  202.676419][ T8032] netlink: 'syz.1.1206': attribute type 29 has an invalid length.
[  202.704804][ T4912] usb 4-1: Using ep0 maxpacket: 32
[  202.711539][ T4912] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  202.734581][ T4912] usb 4-1: config 0 has no interface number 0
[  202.742953][ T4912] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  202.782735][ T4912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  202.808998][ T4912] usb 4-1: Product: syz
[  202.813217][ T4912] usb 4-1: Manufacturer: syz
[  202.844139][ T4912] usb 4-1: SerialNumber: syz
[  202.851170][ T4912] usb 4-1: config 0 descriptor??
[  202.861484][ T4272] EXT4-fs (loop4): unmounting filesystem.
[  202.883718][ T6762] EXT4-fs (loop5): unmounting filesystem.
[  202.927723][ T4912] smsc95xx v2.0.0
[  203.240982][ T8053] loop5: detected capacity change from 0 to 7
[  203.287392][ T8053] Dev loop5: unable to read RDB block 7
[  203.303246][ T8053]  loop5: AHDI p1 p2
[  203.323477][ T8053] loop5: partition table partially beyond EOD, truncated
[  203.353324][ T8053] loop5: p1 size 150995456 extends beyond EOD, truncated
[  203.478534][ T4266] udevd[4266]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  203.750197][ T8070] gadgetfs: bound to dummy_udc driver
[  203.864328][ T8076] FAULT_INJECTION: forcing a failure.
[  203.864328][ T8076] name failslab, interval 1, probability 0, space 0, times 0
[  203.890522][ T4912] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71
[  203.903283][ T8076] CPU: 1 PID: 8076 Comm: syz.4.1220 Not tainted syzkaller #0
[  203.910721][ T8076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  203.920802][ T8076] Call Trace:
[  203.924101][ T8076]  <TASK>
[  203.924763][ T4912] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  203.927031][ T8076]  dump_stack_lvl+0x188/0x24e
[  203.927066][ T8076]  ? show_regs_print_info+0x12/0x12
[  203.927097][ T8076]  ? load_image+0x410/0x410
[  203.927120][ T8076]  ? __might_sleep+0xd0/0xd0
[  203.927138][ T8076]  ? __lock_acquire+0x7ea0/0x7ea0
[  203.927166][ T8076]  should_fail_ex+0x390/0x4c0
[  203.927192][ T8076]  should_failslab+0x5/0x20
[  203.927210][ T8076]  slab_pre_alloc_hook+0x59/0x300
[  203.927235][ T8076]  kmem_cache_alloc+0x56/0x2f0
[  203.927254][ T8076]  ? __alloc_file+0x25/0x230
[  203.927278][ T8076]  __alloc_file+0x25/0x230
[  203.927300][ T8076]  alloc_empty_file+0x90/0x180
[  203.927320][ T8076]  alloc_file+0x5b/0x5f0
[  203.927339][ T8076]  alloc_file_pseudo+0x180/0x200
[  203.927357][ T8076]  ? alloc_empty_file_noaccount+0x80/0x80
[  203.927380][ T8076]  ? alloc_fd+0x590/0x640
[  203.927406][ T8076]  sock_alloc_file+0xb3/0x240
[  203.955223][ T4912] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  203.955386][ T8076]  __sys_socket+0x12d/0x190
[  203.960537][ T4912] smsc95xx: probe of 4-1:0.67 failed with error -71
[  203.965065][ T8076]  __x64_sys_socket+0x76/0x80
[  203.965100][ T8076]  do_syscall_64+0x4c/0xa0
[  203.965122][ T8076]  ? clear_bhb_loop+0x60/0xb0
[  203.965142][ T8076]  ? clear_bhb_loop+0x60/0xb0
[  203.965162][ T8076]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  203.965183][ T8076] RIP: 0033:0x7f885c3a8f19
[  203.977311][ T8047] loop5: detected capacity change from 0 to 32768
[  203.979437][ T8076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  204.093411][ T8076] RSP: 002b:00007f885d290fc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  204.101827][ T8076] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f885c3a8f19
[  204.109796][ T8076] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001f
[  204.117762][ T8076] RBP: 00007f885c437f6d R08: 0000000000000000 R09: 0000000000000000
[  204.125730][ T8076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  204.133692][ T8076] R13: 00007f885c626038 R14: 00007f885c625fa0 R15: 00007ffdb3994898
[  204.141667][ T8076]  </TASK>
[  204.156185][ T4912] usb 4-1: USB disconnect, device number 10
[  204.215674][ T8047] XFS (loop5): Mounting V5 Filesystem
[  204.320531][ T8047] XFS (loop5): Ending clean mount
[  204.391110][   T26] audit: type=1800 audit(1794333812.471:108): pid=8047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1209" name="file1" dev="loop5" ino=4422 res=0 errno=0
[  204.392083][ T8047] XFS (loop5): User initiated shutdown received.
[  204.451538][ T8047] XFS (loop5): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:499).  Shutting down filesystem.
[  204.466398][ T8047] XFS (loop5): Please unmount the filesystem and rectify the problem(s)
[  204.575728][ T6762] XFS (loop5): Unmounting Filesystem
[  204.919532][ T4281] tipc: Resetting bearer <eth:syz_tun>
[  204.985821][ T4352] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  205.016343][ T4281] tipc: Disabling bearer <eth:syz_tun>
[  205.196736][ T4352] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  205.214754][ T4352] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  205.227634][ T4352] usb 2-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00
[  205.243444][ T4352] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  205.302421][   T31] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.401893][   T31] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.454732][ T4906] usb 6-1: new full-speed USB device number 6 using dummy_hcd
[  205.473202][ T8126] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[  205.504014][  T131] usb 2-1: USB disconnect, device number 22
[  205.512927][   T31] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.627324][   T31] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.651673][ T4906] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  205.664660][ T4906] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.684585][ T4906] usb 6-1: Product: syz
[  205.688802][ T4906] usb 6-1: Manufacturer: syz
[  205.714677][ T4906] usb 6-1: SerialNumber: syz
[  205.732561][ T4906] usb 6-1: config 0 descriptor??
[  205.919130][   T31] tipc: Disabling bearer <eth:batadv0>
[  205.932187][ T4289] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  205.947561][ T4289] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  205.953015][   T31] tipc: Left network mode
[  205.956049][ T4906] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  205.970615][ T4289] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  205.985585][ T4289] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  205.993403][ T4289] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  206.003202][ T4289] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  206.296650][ T8143] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1244'.
[  206.369656][ T8131] rxe_eth0 speed is unknown, defaulting to 1000
[  206.435817][ T8146] loop4: detected capacity change from 0 to 1024
[  206.453354][ T8146] EXT4-fs: Ignoring removed bh option
[  206.538164][ T8146] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  206.557153][ T8146] ext4 filesystem being mounted at /259/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  206.570344][ T4906] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -71
[  206.586291][ T4906] usb 6-1: USB disconnect, device number 6
[  206.934914][  T131] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  207.038076][ T8165] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1251'.
[  207.158715][  T131] usb 5-1: Using ep0 maxpacket: 16
[  207.167867][  T131] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  207.213227][  T131] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  207.252879][  T131] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  207.323953][  T131] usb 5-1: New USB device found, idVendor=0582, idProduct=00eb, bcdDevice= 0.40
[  207.352368][  T131] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.360755][  T131] usb 5-1: Product: syz
[  207.382756][  T131] usb 5-1: Manufacturer: syz
[  207.394057][  T131] usb 5-1: SerialNumber: syz
[  207.468104][ T8131] chnl_net:caif_netlink_parms(): no params data found
[  207.627064][  T131] usb 5-1: 1:1 : no or invalid class specific endpoint descriptor
[  207.644762][  T131] usb 5-1: 1:1: invalid format type 0x1001 is detected, processed as PCM
[  207.661484][  T131] usb 5-1: 1:1 : sample bitwidth 194 in over sample bytes 4
[  207.676548][  T131] usb 5-1: 1:1 : invalid channels 0
[  207.694902][  T131] usb 5-1: 0:2 : does not exist
[  207.730814][  T131] usb 5-1: USB disconnect, device number 15
[  207.831808][ T8177] loop2: detected capacity change from 0 to 32768
[  207.925936][ T8177] find_entry called with index = 0
[  207.942619][ T8177] find_entry called with index >= next_index
[  207.968262][ T8177] find_entry called with index >= next_index
[  207.981231][ T4264] udevd[4264]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  207.994650][ T8177] find_entry called with index = 0
[  208.002248][ T8177] find_entry called with index >= next_index
[  208.026939][ T8177] find_entry called with index >= next_index
[  208.044295][ T8195] loop5: detected capacity change from 0 to 16
[  208.084735][ T4286] Bluetooth: hci4: command 0x0409 tx timeout
[  208.104166][ T8131] bridge0: port 1(bridge_slave_0) entered blocking state
[  208.114786][ T8131] bridge0: port 1(bridge_slave_0) entered disabled state
[  208.122837][ T8195] erofs: (device loop5): mounted with root inode @ nid 36.
[  208.130816][ T8177] jfs_readdir: bad index table
[  208.176457][ T8131] device bridge_slave_0 entered promiscuous mode
[  208.242013][ T4272] EXT4-fs (loop4): unmounting filesystem.
[  208.454711][ T6762] erofs: (device loop5): erofs_readdir: invalid de[0].nameoff 1050 @ nid 46
[  208.469645][ T8131] bridge0: port 2(bridge_slave_1) entered blocking state
[  208.492743][ T8131] bridge0: port 2(bridge_slave_1) entered disabled state
[  208.543574][ T6762] erofs: (device loop5): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[  208.560298][ T8131] device bridge_slave_1 entered promiscuous mode
[  208.583410][ T6762] erofs: (device loop5): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[  208.641439][ T8207] loop4: detected capacity change from 0 to 8192
[  208.691088][ T8131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  208.767102][ T8131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  208.973694][ T8131] team0: Port device team_slave_0 added
[  209.022152][ T8131] team0: Port device team_slave_1 added
[  209.079774][ T8216] FAULT_INJECTION: forcing a failure.
[  209.079774][ T8216] name fail_futex, interval 1, probability 0, space 0, times 0
[  209.154767][ T8216] CPU: 1 PID: 8216 Comm: syz.5.1265 Not tainted syzkaller #0
[  209.162202][ T8216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  209.172280][ T8216] Call Trace:
[  209.175574][ T8216]  <TASK>
[  209.178515][ T8216]  dump_stack_lvl+0x188/0x24e
[  209.183227][ T8216]  ? show_regs_print_info+0x12/0x12
[  209.188455][ T8216]  ? load_image+0x410/0x410
[  209.192982][ T8216]  ? get_user_pages_fast_only+0x40/0x40
[  209.198638][ T8216]  ? verify_lock_unused+0x140/0x140
[  209.203862][ T8216]  should_fail_ex+0x390/0x4c0
[  209.208565][ T8216]  get_futex_key+0x8bd/0xe70
[  209.213184][ T8216]  ? futex_setup_timer+0xc0/0xc0
[  209.218149][ T8216]  futex_wait_multiple+0x1f4/0x970
[  209.223299][ T8216]  ? futex_wait_queue+0x1b0/0x1b0
[  209.228339][ T8216]  ? __might_fault+0xc2/0x120
[  209.233034][ T8216]  ? __might_fault+0xa6/0x120
[  209.237741][ T8216]  ? __se_sys_futex_waitv+0x367/0x6d0
[  209.243138][ T8216]  __se_sys_futex_waitv+0x622/0x6d0
[  209.248366][ T8216]  ? __x64_sys_futex_waitv+0xc0/0xc0
[  209.253700][ T8216]  ? lockdep_hardirqs_on+0x94/0x140
[  209.258938][ T8216]  ? __x64_sys_futex_waitv+0x1c/0xc0
[  209.264249][ T8216]  do_syscall_64+0x4c/0xa0
[  209.268692][ T8216]  ? clear_bhb_loop+0x60/0xb0
[  209.273409][ T8216]  ? clear_bhb_loop+0x60/0xb0
[  209.278114][ T8216]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  209.284032][ T8216] RIP: 0033:0x7f52d01a8f19
[  209.288463][ T8216] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  209.308100][ T8216] RSP: 002b:00007f52d100b028 EFLAGS: 00000246 ORIG_RAX: 00000000000001c1
[  209.316545][ T8216] RAX: ffffffffffffffda RBX: 00007f52d0425fa0 RCX: 00007f52d01a8f19
[  209.324541][ T8216] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000200000000300
[  209.332536][ T8216] RBP: 00007f52d0237f6d R08: 0000000000000000 R09: 0000000000000000
[  209.340529][ T8216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  209.348525][ T8216] R13: 00007f52d0426038 R14: 00007f52d0425fa0 R15: 00007ffd20b87cb8
[  209.356538][ T8216]  </TASK>
[  209.362036][   T31] device hsr_slave_0 left promiscuous mode
[  209.376391][   T31] device hsr_slave_1 left promiscuous mode
[  209.400995][   T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  209.417674][   T31] batman_adv: batadv0: Removing interface: batadv_slave_0
[  209.436237][   T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  209.454166][   T31] batman_adv: batadv0: Removing interface: batadv_slave_1
[  209.480289][   T31] device bridge_slave_1 left promiscuous mode
[  209.497153][   T31] bridge0: port 2(bridge_slave_1) entered disabled state
[  209.525049][   T31] device bridge_slave_0 left promiscuous mode
[  209.546103][   T31] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.626184][ T8206] loop1: detected capacity change from 0 to 40427
[  209.636309][   T31] device veth1_macvtap left promiscuous mode
[  209.647336][   T31] device veth0_macvtap left promiscuous mode
[  209.662296][ T8206] F2FS-fs (loop1): invalid crc value
[  209.677967][ T8218] loop4: detected capacity change from 0 to 32768
[  209.687240][   T31] device veth1_vlan left promiscuous mode
[  209.698731][ T8206] F2FS-fs (loop1): Found nat_bits in checkpoint
[  209.711468][   T31] device veth0_vlan left promiscuous mode
[  209.738203][ T8218] JBD2: Ignoring recovery information on journal
[  209.824949][ T8218] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  209.901148][ T8206] F2FS-fs (loop1): Start checkpoint disabled!
[  209.956383][ T8206] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  209.971549][ T4272] ocfs2: Unmounting device (7,4) on (node local)
[  210.117353][ T7652] kworker/u4:17: attempt to access beyond end of device
[  210.117353][ T7652] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  210.164907][ T4286] Bluetooth: hci4: command 0x041b tx timeout
[  210.409695][ T6884] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  210.615059][ T6884] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  210.635572][ T6884] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  210.651650][ T6884] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  210.662358][ T6884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  210.680705][ T6884] usb 5-1: config 0 descriptor??
[  211.100207][ T6884] cm6533_jd 0003:0D8C:0022.0014: unknown main item tag 0x0
[  211.111127][ T6884] cm6533_jd 0003:0D8C:0022.0014: unknown main item tag 0x0
[  211.123209][ T6884] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.0014/input/input18
[  211.140590][ T6884] cm6533_jd 0003:0D8C:0022.0014: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0
[  211.262344][   T31] team0 (unregistering): Port device team_slave_1 removed
[  211.339984][   T31] team0 (unregistering): Port device team_slave_0 removed
[  211.348013][ T6884] usb 5-1: USB disconnect, device number 16
[  211.430682][   T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  211.482127][   T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  211.933625][   T31] bond0 (unregistering): Released all slaves
[  211.961717][ T4912] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  212.032373][ T8131] batman_adv: batadv0: Adding interface: batadv_slave_0
[  212.041465][ T8131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  212.069354][ T8131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  212.113894][ T8224] device ipvlan2 entered promiscuous mode
[  212.121205][ T8224] team0: Device ipvlan2 is up. Set it down before adding it as a team port
[  212.164861][ T4912] usb 3-1: Using ep0 maxpacket: 16
[  212.182246][ T8131] batman_adv: batadv0: Adding interface: batadv_slave_1
[  212.191598][ T4912] usb 3-1: config 0 has an invalid interface number: 98 but max is 0
[  212.202270][ T8131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  212.228503][ T4912] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  212.228528][ T4912] usb 3-1: config 0 has no interface number 0
[  212.228569][ T4912] usb 3-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16
[  212.228593][ T4912] usb 3-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  212.228614][ T4912] usb 3-1: config 0 interface 98 has no altsetting 0
[  212.231005][ T4912] usb 3-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9
[  212.239755][ T8131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  212.276195][ T4912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  212.282239][ T4286] Bluetooth: hci4: command 0x040f tx timeout
[  212.336647][ T4912] usb 3-1: Product: syz
[  212.341295][ T4912] usb 3-1: Manufacturer: syz
[  212.364779][ T4912] usb 3-1: SerialNumber: syz
[  212.377518][ T4912] usb 3-1: config 0 descriptor??
[  212.395717][ T8239] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  212.403288][ T8239] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  212.477936][ T8131] device hsr_slave_0 entered promiscuous mode
[  212.490715][ T8131] device hsr_slave_1 entered promiscuous mode
[  212.675048][ T8239] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  212.706814][ T8239] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  213.090482][ T8131] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  213.122430][ T8263] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1281'.
[  213.125581][ T8131] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  213.132594][ T8263] nbd: illegal input index 6573177
[  213.178359][ T8131] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  213.185415][ T4912] asix 3-1:0.98 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  213.204690][ T4912] asix: probe of 3-1:0.98 failed with error -71
[  213.246750][ T4912] usb 3-1: USB disconnect, device number 12
[  213.308052][ T8131] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  213.557535][ T8131] 8021q: adding VLAN 0 to HW filter on device bond0
[  213.592402][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  213.628234][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  213.659002][ T8131] 8021q: adding VLAN 0 to HW filter on device team0
[  213.697891][ T7649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  213.730231][ T7649] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  213.766708][ T7649] bridge0: port 1(bridge_slave_0) entered blocking state
[  213.774689][ T7649] bridge0: port 1(bridge_slave_0) entered forwarding state
[  213.809444][ T7649] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  213.844474][ T7649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  213.869891][ T7649] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  213.889909][ T7649] bridge0: port 2(bridge_slave_1) entered blocking state
[  213.898783][ T7649] bridge0: port 2(bridge_slave_1) entered forwarding state
[  213.919109][ T7649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  213.957655][ T8280] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  213.996298][ T8280] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  214.047633][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  214.077999][ T7649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  214.115767][ T7649] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  214.150746][ T7649] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  214.181826][ T7641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  214.198468][ T7641] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  214.204411][ T8269] loop4: detected capacity change from 0 to 32768
[  214.261420][ T8131] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  214.324656][ T4287] Bluetooth: hci4: command 0x0419 tx timeout
[  214.335337][ T8131] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  214.463599][ T7652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  214.483443][ T7652] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  214.493615][ T7652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  214.503229][ T7652] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  214.513695][ T7652] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  214.585173][ T8269] XFS (loop4): Mounting V5 Filesystem
[  214.788498][ T8302] device-mapper: table: 248:4: ram10 too small for target: start=4096, len=18014398509473791, dev_size=8192
[  214.812918][ T8269] XFS (loop4): Ending clean mount
[  214.860252][ T8306] loop1: detected capacity change from 0 to 8192
[  214.867153][ T8302] device-mapper: core: Cannot calculate initial queue limits
[  214.951235][ T8302] device-mapper: ioctl: unable to set up device queue for new table.
[  214.970484][ T8306] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  215.079873][ T8306] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  215.160414][ T8306] REISERFS (device loop1): using ordered data mode
[  215.254692][ T8306] reiserfs: using flush barriers
[  215.274944][ T8305] loop2: detected capacity change from 0 to 131072
[  215.284262][ T8305] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0)
[  215.292425][ T8305] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  215.302154][ T8305] F2FS-fs (loop2): invalid crc value
[  215.304709][ T8306] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  215.329636][ T8305] F2FS-fs (loop2): Found nat_bits in checkpoint
[  215.382066][ T7652] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  215.406049][ T8305] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  215.413178][ T8305] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  215.425412][ T8306] REISERFS (device loop1): checking transaction log (loop1)
[  215.429881][ T7652] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  215.468905][ T4272] XFS (loop4): Unmounting Filesystem
[  215.543407][ T8131] 8021q: adding VLAN 0 to HW filter on device batadv0
[  215.672026][ T7641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  215.694073][ T8306] REISERFS (device loop1): Using tea hash to sort names
[  215.717785][ T7641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  215.729505][ T8306] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  215.822904][ T8131] device veth0_vlan entered promiscuous mode
[  215.844644][ T7641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  215.882799][ T7641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  215.942090][ T8131] device veth1_vlan entered promiscuous mode
[  215.996139][ T7641] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  216.010881][ T7641] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  216.040773][ T7641] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  216.178640][ T8341] loop5: detected capacity change from 0 to 1024
[  216.219813][ T8131] device veth0_macvtap entered promiscuous mode
[  216.254838][ T7642] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready
[  216.266601][ T8341] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  216.271223][ T7642] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready
[  216.364040][ T7642] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  216.394326][ T8353] loop1: detected capacity change from 0 to 512
[  216.395403][ T8341] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  216.459382][ T8341] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  216.464120][ T8353] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  216.471754][ T7642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  216.489994][ T7642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  216.507197][ T8131] device veth1_macvtap entered promiscuous mode
[  216.514475][ T7642] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  216.525833][ T7642] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  216.601420][ T8353] EXT4-fs (loop1): 1 truncate cleaned up
[  216.636479][ T8131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  216.648312][ T8353] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  216.720271][ T8131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  216.760247][ T8131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  216.771213][ T8353] EXT4-fs (loop1): shut down requested (2)
[  216.804734][ T8131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  216.834574][ T8131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  216.852806][ T8131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  216.870320][ T8131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  216.882610][ T8131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  216.909591][ T6762] EXT4-fs (loop5): unmounting filesystem.
[  216.927436][ T8131] batman_adv: batadv0: Interface activated: batadv_slave_0
[  216.946956][ T4275] EXT4-fs (loop1): unmounting filesystem.
[  216.960902][ T7642] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  217.000834][ T7642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  217.061685][ T8131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  217.093492][ T8131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.114954][ T8131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  217.126104][ T8131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.148332][ T8131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  217.177285][ T8131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.204031][ T8131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  217.230251][ T8131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.261256][ T8131] batman_adv: batadv0: Interface activated: batadv_slave_1
[  217.288648][ T8375] loop2: detected capacity change from 0 to 512
[  217.307332][ T7641] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  217.348271][ T8375] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  217.367363][ T7641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  217.417854][ T8131] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  217.432035][ T8375] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a80ec018, mo2=0002]
[  217.444967][ T8375] System zones: 0-2, 18-18, 34-35
[  217.472549][ T8131] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  217.492141][ T8375] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  217.511503][ T8375] ext4 filesystem being mounted at /268/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  217.532098][ T8131] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  217.550403][ T8384] Bluetooth: MGMT ver 1.22
[  217.558529][ T8131] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  217.566098][ T8388] loop5: detected capacity change from 0 to 2048
[  217.597196][   T26] audit: type=1800 audit(1794333825.681:109): pid=8375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1302" name="file2" dev="loop2" ino=16 res=0 errno=0
[  217.645891][ T8375] EXT4-fs (loop2): unmounting filesystem.
[  217.704134][ T8388] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  217.820935][   T26] audit: type=1800 audit(1794333825.901:110): pid=8388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1306" name="file1" dev="loop5" ino=15 res=0 errno=0
[  218.038122][ T6762] EXT4-fs (loop5): unmounting filesystem.
[  218.096855][   T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  218.120101][   T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  218.188417][ T7642] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  218.201527][ T8407] loop5: detected capacity change from 0 to 128
[  218.220580][ T4372] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  218.252136][ T4372] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  218.265304][ T8407] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  218.293034][ T7642] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  218.342416][ T8407] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  218.370402][ T8412] loop4: detected capacity change from 0 to 512
[  218.493468][ T8412] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  218.552084][ T8412] ext4 filesystem being mounted at /273/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  218.649128][ T8428] loop6: detected capacity change from 0 to 256
[  218.682862][ T8428] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe61a088d, utbl_chksum : 0xe619d30d)
[  218.723609][ T7649] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  218.753350][ T8412] capability: warning: `syz.4.1315' uses 32-bit capabilities (legacy support in use)
[  218.971346][ T4272] EXT4-fs (loop4): unmounting filesystem.
[  218.993554][ T8438] exfat: Deprecated parameter 'utf8'
[  219.034801][ T8438] exfat: Deprecated parameter 'utf8'
[  219.086625][ T8438] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  219.244900][ T4906] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  219.436379][ T4906] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  219.454551][ T4906] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  219.481521][ T8457] set_capacity_and_notify: 1 callbacks suppressed
[  219.481537][ T8457] loop4: detected capacity change from 0 to 256
[  219.508056][ T4906] usb 6-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00
[  219.524751][ T4906] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  219.553230][ T4906] usb 6-1: Product: syz
[  219.557771][ T4906] usb 6-1: Manufacturer: syz
[  219.575703][ T4906] usb 6-1: SerialNumber: syz
[  219.588976][ T8457] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1f3a413c, utbl_chksum : 0xe619d30d)
[  219.729156][ T8463] input: syz1 as /devices/virtual/input/input19
[  219.832035][ T4906] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900
[  220.141626][ T8479] loop2: detected capacity change from 0 to 4096
[  220.230852][ T8479] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  220.253718][ T4352] usb 6-1: USB disconnect, device number 7
[  220.271669][ T4352] usblp0: removed
[  220.494662][ T4274] EXT4-fs (loop2): unmounting filesystem.
[  220.671986][ T8501] loop2: detected capacity change from 0 to 1024
[  220.740186][ T8501] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  220.864316][ T8501] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  220.930226][ T8509] loop1: detected capacity change from 0 to 8192
[  221.019053][ T8513] loop5: detected capacity change from 0 to 1024
[  221.211561][ T8513] hfsplus: xattr searching failed
[  221.277229][ T4274] EXT4-fs (loop2): unmounting filesystem.
[  221.490751][ T8520] loop2: detected capacity change from 0 to 512
[  221.550486][ T8522] loop4: detected capacity change from 0 to 8
[  221.557885][ T8520] EXT4-fs warning (device loop2): read_mmp_block:115: Error -74 while reading MMP block 13
[  221.744647][ T8528] sd 0:0:1:0: PR command failed: 1026
[  221.775246][ T8528] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  221.803421][ T8528] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  222.025688][ T8536] FAULT_INJECTION: forcing a failure.
[  222.025688][ T8536] name failslab, interval 1, probability 0, space 0, times 0
[  222.041777][ T8538] TCP: TCP_TX_DELAY enabled
[  222.074327][ T8536] CPU: 1 PID: 8536 Comm: syz.2.1352 Not tainted syzkaller #0
[  222.081766][ T8536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  222.084068][ T8543] loop4: detected capacity change from 0 to 1024
[  222.091823][ T8536] Call Trace:
[  222.091835][ T8536]  <TASK>
[  222.091844][ T8536]  dump_stack_lvl+0x188/0x24e
[  222.091874][ T8536]  ? show_regs_print_info+0x12/0x12
[  222.091896][ T8536]  ? load_image+0x410/0x410
[  222.091918][ T8536]  ? __might_sleep+0xd0/0xd0
[  222.091937][ T8536]  ? __lock_acquire+0x7ea0/0x7ea0
[  222.091963][ T8536]  should_fail_ex+0x390/0x4c0
[  222.091988][ T8536]  should_failslab+0x5/0x20
[  222.092004][ T8536]  slab_pre_alloc_hook+0x59/0x300
[  222.092025][ T8536]  ? vfs_write+0x777/0x9a0
[  222.092043][ T8536]  kmem_cache_alloc+0x56/0x2f0
[  222.092058][ T8536]  ? getname_flags+0xb7/0x500
[  222.092078][ T8536]  getname_flags+0xb7/0x500
[  222.092097][ T8536]  do_sys_openat2+0xdd/0x4f0
[  222.092121][ T8536]  ? do_sys_open+0xe0/0xe0
[  222.092144][ T8536]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  222.092169][ T8536]  ? lock_chain_count+0x20/0x20
[  222.092197][ T8536]  __x64_sys_openat+0x135/0x160
[  222.092224][ T8536]  do_syscall_64+0x4c/0xa0
[  222.092255][ T8536]  ? clear_bhb_loop+0x60/0xb0
[  222.092278][ T8536]  ? clear_bhb_loop+0x60/0xb0
[  222.092300][ T8536]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  222.092322][ T8536] RIP: 0033:0x7f1608f6974e
[  222.092340][ T8536] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  222.092354][ T8536] RSP: 002b:00007f1609e8bb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  222.092374][ T8536] RAX: ffffffffffffffda RBX: 00007f1609e8c6c0 RCX: 00007f1608f6974e
[  222.139411][ T8543] EXT4-fs: Ignoring removed bh option
[  222.143073][ T8536] RDX: 0000000000000002 RSI: 00007f1609e8bc00 RDI: ffffffffffffff9c
[  222.259511][ T8536] RBP: 00007f1609037f6d R08: 0000000000000000 R09: 0000000000000000
[  222.267504][ T8536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  222.275489][ T8536] R13: 00007f1609226038 R14: 00007f1609225fa0 R15: 00007ffeb9aaeeb8
[  222.283471][ T8536]  </TASK>
[  222.348324][ T8543] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  222.658912][ T8563] cougar: G6 mapped to F18
[  222.692355][ T4272] EXT4-fs (loop4): unmounting filesystem.
[  223.394602][ T4388] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  223.525721][ T8594] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  223.594694][ T4388] usb 6-1: Using ep0 maxpacket: 16
[  223.601572][ T4388] usb 6-1: config 0 has an invalid interface number: 34 but max is 0
[  223.620818][ T4388] usb 6-1: config 0 has no interface number 0
[  223.652811][ T4388] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  223.696680][ T4388] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  223.743257][ T4388] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  223.769167][ T4388] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.797658][ T4388] usb 6-1: Product: syz
[  223.801921][ T4388] usb 6-1: Manufacturer: syz
[  223.807909][ T8603] loop6: detected capacity change from 0 to 1024
[  223.826077][ T8603] EXT4-fs: Ignoring removed nomblk_io_submit option
[  223.842982][ T4388] usb 6-1: SerialNumber: syz
[  223.863868][ T4388] usb 6-1: config 0 descriptor??
[  223.884145][ T8583] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  223.896292][ T8583] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  223.911192][ T8603] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  223.988032][ T8603] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  224.142802][ T8131] EXT4-fs (loop6): unmounting filesystem.
[  224.145221][ T8583] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  224.181464][ T8583] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  224.420055][ T4388] asix 6-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  224.464656][  T131] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  224.664781][  T131] usb 5-1: Using ep0 maxpacket: 16
[  224.673076][  T131] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  224.703022][ T8636] loop6: detected capacity change from 0 to 1024
[  224.706443][  T131] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  224.765272][ T8636] hfsplus: xattr searching failed
[  224.777406][  T131] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  224.807353][ T8636] hfsplus: xattr searching failed
[  224.821189][  T131] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  224.828942][ T8636] hfsplus: request for non-existent node 62977 in B*Tree
[  224.843943][ T8636] hfsplus: request for non-existent node 62977 in B*Tree
[  224.859445][  T131] usb 5-1: config 0 descriptor??
[  225.023759][ T4388] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  225.064609][ T4388] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9
[  225.092201][ T8646] loop2: detected capacity change from 0 to 128
[  225.114881][ T4388] asix: probe of 6-1:0.34 failed with error -71
[  225.149736][ T4388] usb 6-1: USB disconnect, device number 8
[  225.178877][ T8646] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  225.204612][ T8646] hpfs: filesystem error: improperly stopped
[  225.211331][ T8646] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  225.219870][ T8646] hpfs: You really don't want any checks? You are crazy...
[  225.227278][ T6884] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  225.236571][ T8646] hpfs: Code page index out of array
[  225.241916][ T8646] hpfs: code page support is disabled
[  225.248010][ T8646] hpfs: hpfs_map_4sectors(): unaligned read
[  225.254106][ T8646] hpfs: hpfs_map_4sectors(): unaligned read
[  225.260268][ T6885] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  225.268476][ T8646] hpfs: filesystem error: unable to find root dir
[  225.308808][  T131] hid (null): report_id 0 is invalid
[  225.328853][  T131] hid (null): report_id 4252247276 is invalid
[  225.348691][  T131] hid (null): unknown global tag 0xe
[  225.354092][  T131] hid (null): global environment stack underflow
[  225.363561][  T131] hid (null): usage index exceeded
[  225.406339][ T6884] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  225.417207][ T6884] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  225.442040][ T6885] usb 7-1: unable to get BOS descriptor or descriptor too short
[  225.452902][ T6885] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  225.472478][ T6885] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  225.491978][ T6884] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  225.501425][ T6885] usb 7-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[  225.518832][ T6884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  225.518868][  T131] usb 5-1: string descriptor 0 read error: -71
[  225.527338][ T6885] usb 7-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[  225.555118][ T6884] usb 2-1: Product: syz
[  225.563022][ T6884] usb 2-1: Manufacturer: syz
[  225.570762][  T131] usb 5-1: Max retries (5) exceeded reading string descriptor 200
[  225.574643][ T6884] usb 2-1: SerialNumber: syz
[  225.589352][  T131] letsketch: probe of 0003:6161:4D15.0015 failed with error -32
[  225.595374][ T6885] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  225.625262][ T6885] usb 7-1: config 1 interface 1 has no altsetting 0
[  225.643450][  T131] usb 5-1: USB disconnect, device number 17
[  225.646538][ T6885] usb 7-1: string descriptor 0 read error: -22
[  225.677031][ T6885] usb 7-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  225.705349][ T6885] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  225.822378][ T8641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  225.835193][ T8641] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  225.856360][ T6884] cdc_ether: probe of 2-1:1.0 failed with error -22
[  225.885455][ T6884] usb 2-1: USB disconnect, device number 23
[  226.305228][ T8674] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1395'.
[  226.370226][ T8678] loop2: detected capacity change from 0 to 128
[  226.422912][ T8678] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002]
[  226.446466][ T8678] System zones: 1-3, 19-19, 35-36
[  226.455843][ T8678] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  226.474790][ T6884] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  226.499667][ T8678] ext4 filesystem being mounted at /285/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  226.644394][ T4274] EXT4-fs (loop2): unmounting filesystem.
[  226.655938][ T6885] usb 7-1: USB disconnect, device number 2
[  226.674582][ T6884] usb 2-1: Using ep0 maxpacket: 8
[  226.681467][ T6884] usb 2-1: config index 0 descriptor too short (expected 301, got 72)
[  226.709951][ T6884] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  226.770559][ T6884] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  226.782472][ T6884] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  226.798883][ T8690] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  226.813410][ T6884] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  226.862969][ T6884] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  226.893743][ T6884] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  226.915603][ T6884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  226.955504][ T6884] usbtmc 2-1:16.0: bulk endpoints not found
[  227.269011][ T8710] loop4: detected capacity change from 0 to 1024
[  227.307014][ T8710] hfsplus: invalid file type 0174377 for inode 21
[  227.791175][ T8729] loop5: detected capacity change from 0 to 1024
[  227.844172][ T8729] EXT4-fs: Ignoring removed i_version option
[  227.871782][ T8729] EXT4-fs: Ignoring removed i_version option
[  227.941152][ T8729] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  227.966333][ T8729] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  228.108918][ T6762] EXT4-fs (loop5): unmounting filesystem.
[  228.184196][ T8740] fuse: Invalid group_id
[  228.223367][ T8742] netlink: 'syz.5.1419': attribute type 12 has an invalid length.
[  228.223860][ T6884] usb 2-1: USB disconnect, device number 24
[  228.361432][ T8750] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1424'.
[  228.450837][ T8752] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1425'.
[  228.563110][ T8754] loop4: detected capacity change from 0 to 4096
[  228.734930][ T6885] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  228.889822][ T8769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1432'.
[  228.906352][ T8769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1432'.
[  228.937482][ T6885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  228.951761][ T6885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  228.961774][ T6885] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  228.978148][ T6884] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  228.991470][ T6885] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  229.000914][ T6885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  229.026132][ T6885] usb 3-1: config 0 descriptor??
[  229.059395][ T8773] loop4: detected capacity change from 0 to 128
[  229.114644][ T8773] FAT-fs (loop4): error, invalid FAT chain (i_pos 548, last_block 8)
[  229.126622][ T8773] FAT-fs (loop4): Filesystem has been set read-only
[  229.194801][ T6884] usb 6-1: Using ep0 maxpacket: 16
[  229.206617][ T6884] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  229.232561][ T6884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  229.242167][ T6884] usb 6-1: Product: syz
[  229.252638][ T6884] usb 6-1: Manufacturer: syz
[  229.258173][ T6884] usb 6-1: SerialNumber: syz
[  229.277191][ T6884] usb 6-1: config 0 descriptor??
[  229.299935][ T8781] ALSA: seq fatal error: cannot create timer (-22)
[  229.372856][ T8786] loop1: detected capacity change from 0 to 64
[  229.422225][   T26] audit: type=1800 audit(1794333837.501:111): pid=8786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1439" name="file1" dev="loop1" ino=21 res=0 errno=0
[  229.447025][ T6885] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0
[  229.460416][ T6885] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0
[  229.481209][ T6885] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving
[  229.519180][ T6885] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  229.694714][ T6884] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  229.732341][  T131] usb 3-1: USB disconnect, device number 13
[  229.762987][ T6884] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  229.784071][ T8788] fido_id[8788]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  229.787247][ T8794] loop4: detected capacity change from 0 to 1024
[  229.808164][ T6884] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  229.833236][ T6884] usb 6-1: media controller created
[  229.895741][ T8763] dtv5100: wlen = 0, aborting.
[  229.921710][ T8796] device syzkaller1 entered promiscuous mode
[  229.929417][ T6884] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  230.023169][ T6884] zl10353_read_register: readreg error (reg=127, ret==0)
[  230.039210][ T6884] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  230.053454][ T6884] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  230.081710][ T6884] usb 6-1: USB disconnect, device number 9
[  230.090194][ T8801] loop4: detected capacity change from 0 to 1024
[  230.159295][ T8801] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  230.174470][ T6884] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  230.179971][ T8801] ext4 filesystem being mounted at /306/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  230.230862][ T8801] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1445: bg 0: block 112: padding at end of block bitmap is not set
[  230.346977][ T8801] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28
[  230.396024][ T8801] EXT4-fs (loop4): This should not happen!! Data will be lost
[  230.396024][ T8801] 
[  230.396385][ T8813] loop2: detected capacity change from 0 to 16
[  230.410447][ T8801] EXT4-fs (loop4): Total free blocks count 0
[  230.439165][ T8813] erofs: (device loop2): mounted with root inode @ nid 36.
[  230.474814][ T8801] EXT4-fs (loop4): Free/Dirty block details
[  230.501409][ T8801] EXT4-fs (loop4): free_blocks=0
[  230.525509][ T8801] EXT4-fs (loop4): dirty_blocks=16
[  230.530692][ T8801] EXT4-fs (loop4): Block reservation details
[  230.551353][ T8801] EXT4-fs (loop4): i_reserved_data_blocks=1
[  230.555977][ T8818] vivid-000: disconnect
[  230.591280][ T8817] vivid-000: reconnect
[  230.629802][ T4272] EXT4-fs (loop4): unmounting filesystem.
[  230.811510][ T8826] loop5: detected capacity change from 0 to 2048
[  230.893224][ T8826] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  230.919997][ T8826] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  231.211515][ T8849] loop1: detected capacity change from 0 to 1024
[  231.348275][ T8851] loop5: detected capacity change from 0 to 1024
[  231.424655][ T4912] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  231.424734][  T131] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  231.464365][ T8851] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  231.505591][ T8851] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  231.567255][ T8850] EXT4-fs error (device loop5): ext4_free_blocks:6235: comm syz.5.1463: Freeing blocks not in datazone - block = 0, count = 16
[  231.594743][ T8850] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.1463: bg 0: block 112: padding at end of block bitmap is not set
[  231.614643][ T4912] usb 7-1: Using ep0 maxpacket: 8
[  231.625549][ T8850] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6195: Corrupt filesystem
[  231.637860][ T4912] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[  231.646256][ T4912] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  231.656617][ T4912] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  231.659490][  T131] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  231.684673][ T4912] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  231.702161][ T4912] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  231.726262][  T131] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  231.752091][  T131] usb 5-1: config 0 descriptor??
[  231.754708][ T4912] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  231.781154][ T4912] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  231.785270][  T131] cp210x 5-1:0.0: cp210x converter detected
[  231.815295][ T6762] EXT4-fs (loop5): unmounting filesystem.
[  232.018992][ T4912] usb 7-1: usb_control_msg returned -32
[  232.024690][ T4912] usbtmc 7-1:16.0: can't read capabilities
[  232.073322][ T8879] loop2: detected capacity change from 0 to 512
[  232.133446][ T8879] EXT4-fs (loop2): 1 orphan inode deleted
[  232.147941][ T8879] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  232.157716][ T8879] ext4 filesystem being mounted at /300/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  232.187243][  T131] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32
[  232.220873][ T8885] 9pnet: p9_errstr2errno: server reported unknown error ���#�
[  232.220873][ T8885] \,���7�͈�0x0000000000000004
[  232.226043][ T4906] usb 7-1: USB disconnect, device number 3
[  232.246465][ T6884] usb 6-1: new full-speed USB device number 10 using dummy_hcd
[  232.400878][  T131] usb 5-1: cp210x converter now attached to ttyUSB0
[  232.450918][ T6884] usb 6-1: config 0 has an invalid interface number: 214 but max is 0
[  232.464645][ T4388] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  232.469598][ T6884] usb 6-1: config 0 has no interface number 0
[  232.491905][ T6884] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  232.511283][ T6884] usb 6-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  232.522601][ T6884] usb 6-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3
[  232.537916][ T6884] usb 6-1: Manufacturer: syz
[  232.546740][ T6884] usb 6-1: SerialNumber: syz
[  232.570707][ T6884] usb 6-1: config 0 descriptor??
[  232.656380][ T4388] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  232.677154][ T4388] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  232.695324][ T4906] usb 5-1: USB disconnect, device number 18
[  232.702762][ T4388] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  232.724108][ T4906] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  232.732080][ T4388] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  232.744429][ T4906] cp210x 5-1:0.0: device disconnected
[  232.759301][ T4388] usb 3-1: SerialNumber: syz
[  232.863199][ T8892] loop6: detected capacity change from 0 to 256
[  232.876261][ T8892] exfat: Deprecated parameter 'utf8'
[  232.886274][ T8892] exfat: Deprecated parameter 'namecase'
[  232.893233][ T8892] exfat: Deprecated parameter 'namecase'
[  232.900868][ T8892] exfat: Deprecated parameter 'utf8'
[  232.947731][ T8892] exFAT-fs (loop6): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[  232.999188][ T4388] usb 3-1: 0:2 : does not exist
[  233.025615][   T26] audit: type=1800 audit(1794333841.111:112): pid=8892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1475" name="file2" dev="loop6" ino=1048683 res=0 errno=0
[  233.046491][    C1] vkms_vblank_simulate: vblank timer overrun
[  233.055937][ T4388] usb 3-1: USB disconnect, device number 14
[  233.194793][ T6884] usbtouchscreen: probe of 6-1:0.214 failed with error -71
[  233.219993][ T6884] usb 6-1: USB disconnect, device number 10
[  233.285370][ T8904] loop6: detected capacity change from 0 to 256
[  233.299963][ T4264] udevd[4264]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  233.349085][ T8904] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  233.569562][ T8907] FAULT_INJECTION: forcing a failure.
[  233.569562][ T8907] name failslab, interval 1, probability 0, space 0, times 0
[  233.592272][ T4274] EXT4-fs (loop2): unmounting filesystem.
[  233.632032][ T8907] CPU: 0 PID: 8907 Comm: syz.1.1482 Not tainted syzkaller #0
[  233.639472][ T8907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  233.649554][ T8907] Call Trace:
[  233.652847][ T8907]  <TASK>
[  233.655804][ T8907]  dump_stack_lvl+0x188/0x24e
[  233.660513][ T8907]  ? show_regs_print_info+0x12/0x12
[  233.665744][ T8907]  ? load_image+0x410/0x410
[  233.670273][ T8907]  ? __might_sleep+0xd0/0xd0
[  233.674885][ T8907]  ? __lock_acquire+0x7ea0/0x7ea0
[  233.679939][ T8907]  should_fail_ex+0x390/0x4c0
[  233.684642][ T8907]  should_failslab+0x5/0x20
[  233.689159][ T8907]  slab_pre_alloc_hook+0x59/0x300
[  233.694203][ T8907]  ? sctp_endpoint_new+0x11a/0xa00
[  233.699343][ T8907]  __kmem_cache_alloc_node+0x4f/0x270
[  233.704740][ T8907]  ? sctp_endpoint_new+0x11a/0xa00
[  233.709882][ T8907]  kmalloc_trace+0x26/0xe0
[  233.714326][ T8907]  sctp_endpoint_new+0x11a/0xa00
[  233.719296][ T8907]  sctp_init_sock+0x95b/0x11c0
[  233.724095][ T8907]  sctp_v6_init_sock+0x12/0x60
[  233.728882][ T8907]  inet6_create+0xdb3/0x11b0
[  233.733509][ T8907]  __sock_create+0x49a/0x940
[  233.738129][ T8907]  __sys_socket+0xc4/0x190
[  233.742660][ T8907]  __x64_sys_socket+0x76/0x80
[  233.747367][ T8907]  do_syscall_64+0x4c/0xa0
[  233.748440][ T8905] loop4: detected capacity change from 0 to 32768
[  233.751789][ T8907]  ? clear_bhb_loop+0x60/0xb0
[  233.762918][ T8907]  ? clear_bhb_loop+0x60/0xb0
[  233.767627][ T8907]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  233.773548][ T8907] RIP: 0033:0x7ff01c1a8f19
[  233.777986][ T8907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  233.781110][ T8905] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10
[  233.797602][ T8907] RSP: 002b:00007ff01d030028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  233.797636][ T8907] RAX: ffffffffffffffda RBX: 00007ff01c425fa0 RCX: 00007ff01c1a8f19
[  233.797649][ T8907] RDX: 0000000000000084 RSI: 0000000000000001 RDI: 000000000000000a
[  233.797659][ T8907] RBP: 00007ff01c237f6d R08: 0000000000000000 R09: 0000000000000000
[  233.797670][ T8907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  233.797679][ T8907] R13: 00007ff01c426038 R14: 00007ff01c425fa0 R15: 00007ffd142f26c8
[  233.797707][ T8907]  </TASK>
[  234.097437][ T4264] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10
[  234.505446][ T8928]  loop4: p2 < > p3 < p5 > p4
[  234.516830][ T8928] loop4: p4 start 458752 is beyond EOD, truncated
[  234.533482][ T8928] loop4: p5 start 458752 is beyond EOD, truncated
[  234.689936][ T8920] XFS (loop1): Mounting V5 Filesystem
[  234.765667][ T8920] XFS (loop1): Ending clean mount
[  234.854183][ T8922] set_capacity_and_notify: 2 callbacks suppressed
[  234.854198][ T8922] loop2: detected capacity change from 0 to 32768
[  234.971703][ T8941] loop6: detected capacity change from 0 to 512
[  234.992623][ T4275] XFS (loop1): Unmounting Filesystem
[  235.033488][ T8922] XFS (loop2): Mounting V5 Filesystem
[  235.099984][ T8941] EXT4-fs (loop6): 1 truncate cleaned up
[  235.106701][ T8941] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  235.170387][   T26] audit: type=1800 audit(1794333843.251:113): pid=8941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1492" name="file0" dev="loop6" ino=13 res=0 errno=0
[  235.193737][ T8941] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.1492: bg 0: block 465: padding at end of block bitmap is not set
[  235.273433][ T8941] EXT4-fs (loop6): Remounting filesystem read-only
[  235.288053][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880558bf000: rx timeout, send abort
[  235.296439][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880558bf000: 0x10000: (3) A timeout occurred and this is the connection abort to close the session.
[  235.298298][ T8922] XFS (loop2): Ending clean mount
[  235.467815][ T8952] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3)
[  235.474437][ T8952] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  235.486919][ T8131] EXT4-fs (loop6): unmounting filesystem.
[  235.522323][ T8952] vhci_hcd vhci_hcd.0: Device attached
[  235.644296][ T4274] XFS (loop2): Unmounting Filesystem
[  235.718875][ T8956] loop6: detected capacity change from 0 to 2048
[  235.782711][ T8956] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  235.794730][ T4912] usb 41-1: new low-speed USB device number 2 using vhci_hcd
[  235.841002][ T6885] usb 5-1: new low-speed USB device number 19 using dummy_hcd
[  236.026696][ T6885] usb 5-1: config 0 has no interfaces?
[  236.032242][ T6885] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  236.072580][ T6885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  236.115118][ T6885] usb 5-1: config 0 descriptor??
[  236.328227][  T131] usb 5-1: USB disconnect, device number 19
[  236.343633][ T8953] vhci_hcd: connection closed
[  236.362839][ T7644] vhci_hcd: stop threads
[  236.411054][ T7644] vhci_hcd: release socket
[  236.435452][ T7644] vhci_hcd: disconnect device
[  236.464426][ T8982] loop2: detected capacity change from 0 to 256
[  236.476608][ T4912] usb 41-1: device descriptor read/64, error -71
[  236.684804][ T4912] vhci_hcd: vhci_device speed not set
[  236.730357][ T8989] loop5: detected capacity change from 0 to 64
[  236.749244][ T8967] loop6: detected capacity change from 0 to 32768
[  236.961718][ T8995] loop1: detected capacity change from 0 to 512
[  237.029104][ T8995] EXT4-fs: Ignoring removed bh option
[  237.052792][ T8995] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  237.108406][ T8995] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  237.245405][ T8995] ext4 filesystem being mounted at /285/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  237.496587][ T4275] EXT4-fs (loop1): unmounting filesystem.
[  237.962518][ T8998] loop2: detected capacity change from 0 to 32768
[  237.985320][ T9029] loop1: detected capacity change from 0 to 1024
[  238.077380][ T8998] JBD2: Ignoring recovery information on journal
[  238.216911][ T7644] hfsplus: b-tree write err: -5, ino 25
[  238.222724][ T7644] hfsplus: b-tree write err: -5, ino 4
[  238.255915][ T7644] hfsplus: b-tree write err: -5, ino 2
[  238.261546][ T7644] hfsplus: b-tree write err: -5, ino 26
[  238.291469][ T8998] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  238.482896][ T9022] loop4: detected capacity change from 0 to 32768
[  238.550707][ T9022] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present!
[  238.642107][ T4274] ocfs2: Unmounting device (7,2) on (node local)
[  238.673440][ T9022] JBD2: Ignoring recovery information on journal
[  238.838988][ T9022] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  238.967809][ T9022] (syz.4.1520,9022,1):ocfs2_file_write_iter:2446 ERROR: status = -27
[  239.019034][ T9061] gadgetfs: bound to dummy_udc driver
[  239.082467][   T26] audit: type=1800 audit(1794333847.161:114): pid=9061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1532" name="ep1in-bulk" dev="gadgetfs" ino=48943 res=0 errno=0
[  239.150439][ T9063] EXT4-fs: Ignoring removed bh option
[  239.261754][ T9063] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[  239.291860][ T9063] EXT4-fs (loop2): 1 truncate cleaned up
[  239.314714][ T4272] ocfs2: Unmounting device (7,4) on (node local)
[  239.322221][ T9063] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  239.586151][ T4274] EXT4-fs (loop2): unmounting filesystem.
[  239.832814][ T4388] hid-generic 0005:046D:0A0E.0017: unknown main item tag 0x0
[  239.876486][ T4388] hid-generic 0005:046D:0A0E.0017: unknown main item tag 0x0
[  239.917785][ T4388] hid-generic 0005:046D:0A0E.0017: unknown main item tag 0x0
[  239.984985][ T4388] hid-generic 0005:046D:0A0E.0017: unknown main item tag 0x0
[  240.031705][ T4388] hid-generic 0005:046D:0A0E.0017: unknown main item tag 0x0
[  240.073307][ T4388] hid-generic 0005:046D:0A0E.0017: unknown main item tag 0x0
[  240.101855][ T4388] hid-generic 0005:046D:0A0E.0017: unknown main item tag 0x0
[  240.115790][ T9090] set_capacity_and_notify: 1 callbacks suppressed
[  240.115805][ T9090] loop5: detected capacity change from 0 to 7
[  240.138882][ T4388] hid-generic 0005:046D:0A0E.0017: unknown main item tag 0x0
[  240.187706][ T4388] hid-generic 0005:046D:0A0E.0017: unknown main item tag 0x0
[  240.201533][ T4264] Dev loop5: unable to read RDB block 7
[  240.204896][ T4388] hid-generic 0005:046D:0A0E.0017: unknown main item tag 0x0
[  240.207487][ T4264]  loop5: unable to read partition table
[  240.249705][ T4264] loop5: partition table beyond EOD, truncated
[  240.254425][ T4388] hid-generic 0005:046D:0A0E.0017: hidraw0: BLUETOOTH HID v0.05 Device [syz0] on aa:aa:aa:aa:aa:aa
[  240.320696][ T9090] Dev loop5: unable to read RDB block 7
[  240.337749][ T9090]  loop5: unable to read partition table
[  240.358441][ T9090] loop5: partition table beyond EOD, truncated
[  240.393686][ T9090] loop_reread_partitions: partition scan of loop5 (�被x������ ) failed (rc=-5)
[  241.299479][ T9102] loop2: detected capacity change from 0 to 40427
[  241.339557][ T9102] F2FS-fs (loop2): invalid crc value
[  241.367864][ T9102] F2FS-fs (loop2): Found nat_bits in checkpoint
[  241.434730][  T131] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  241.451876][ T9102] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  241.544333][ T9102] F2FS-fs (loop2): Inconsistent segment (8) type [1, 0] in SSA and SIT
[  241.638720][  T131] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  241.661609][  T131] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  241.694025][  T131] usb 7-1: Product: syz
[  241.744279][  T131] usb 7-1: Manufacturer: syz
[  241.761283][  T131] usb 7-1: SerialNumber: syz
[  241.922003][ T9120] loop4: detected capacity change from 0 to 32768
[  241.978555][ T9120] JBD2: Ignoring recovery information on journal
[  242.118471][ T9120] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  242.205104][  T131] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32
[  242.424299][ T9150] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  242.446553][ T4272] ocfs2: Unmounting device (7,4) on (node local)
[  242.642105][  T131] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71
[  242.664590][  T131] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  242.674102][  T131] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  242.737534][  T131] lan78xx: probe of 7-1:1.0 failed with error -71
[  242.774816][  T131] usb 7-1: USB disconnect, device number 4
[  243.001586][ T9165] sctp: [Deprecated]: syz.4.1558 (pid 9165) Use of int in maxseg socket option.
[  243.001586][ T9165] Use struct sctp_assoc_value instead
[  243.016388][ T4388] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  243.224669][ T4388] usb 6-1: Using ep0 maxpacket: 32
[  243.228098][ T9171] loop4: detected capacity change from 0 to 8192
[  243.231791][ T4388] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  243.275735][ T4388] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  243.298449][ T9171] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  243.313843][ T4388] usb 6-1: config 0 descriptor??
[  243.319669][ T9171] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  243.344440][ T9171] REISERFS (device loop4): using ordered data mode
[  243.400399][ T9171] reiserfs: using flush barriers
[  243.413314][ T4388] as10x_usb: device has been detected
[  243.443191][ T9176] input: syz0 as /devices/virtual/input/input21
[  243.457455][ T4388] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  243.467503][ T9171] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  243.535957][ T4388] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  243.563929][ T9171] REISERFS (device loop4): checking transaction log (loop4)
[  243.568547][ T9155] ------------[ cut here ]------------
[  243.574745][ T4388] as10x_usb: error during firmware upload part1
[  243.576779][ T9155] DEBUG_LOCKS_WARN_ON(lock->magic != lock)
[  243.593880][ T9171] REISERFS (device loop4): Using r5 hash to sort names
[  243.601180][ T9155] WARNING: CPU: 0 PID: 9155 at kernel/locking/mutex.c:582 __mutex_lock+0xa7e/0xb40
[  243.609359][ T4388] Registered device nBox DVB-T Dongle
[  243.616269][ T9155] Modules linked in:
[  243.616284][ T9155] CPU: 0 PID: 9155 Comm: syz.5.1554 Not tainted syzkaller #0
[  243.631914][ T9171] REISERFS (device loop4): using 3.5.x disk format
[  243.632919][ T9155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  243.632932][ T9155] RIP: 0010:__mutex_lock+0xa7e/0xb40
[  243.654851][ T9155] Code: 04 20 84 c0 0f 85 b3 00 00 00 83 3d d3 21 e2 04 00 0f 85 93 f6 ff ff 48 c7 c7 40 07 ac 8a 48 c7 c6 e0 07 ac 8a e8 e2 75 0d f7 <0f> 0b e9 79 f6 ff ff 0f 0b e9 27 f9 ff ff 48 c7 c1 40 91 c6 97 80
[  243.674528][ T9155] RSP: 0018:ffffc9000dac7ac0 EFLAGS: 00010246
[  243.680620][ T9155] RAX: bf779c6a2f7c9c00 RBX: ffff888027fe4ce0 RCX: 0000000000080000
[  243.686001][ T9171] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  243.688636][ T9155] RDX: ffffc90003d39000 RSI: 000000000004e060 RDI: 000000000004e061
[  243.705661][ T9155] RBP: ffffc9000dac7c20 R08: ffffc9000dac7747 R09: 1ffff92001b58ee8
[  243.713640][ T9155] R10: dffffc0000000000 R11: fffff52001b58ee9 R12: dffffc0000000000
[  243.721659][ T9155] R13: 0000000000000000 R14: ffff888027fe4000 R15: 0000000000000000
[  243.729727][ T9155] FS:  00007f52d100b6c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000
[  243.738711][ T9155] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  243.745333][ T9155] CR2: 00007f9f361eca90 CR3: 0000000059279000 CR4: 00000000003506f0
[  243.753329][ T9155] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  243.761361][ T9155] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  243.769385][ T9155] Call Trace:
[  243.772679][ T9155]  <TASK>
[  243.775658][ T9155]  ? __mutex_lock+0x1ab/0xb40
[  243.780354][ T9155]  ? as102_dvb_dmx_start_feed+0x6c/0x280
[  243.786056][ T9155]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  243.791704][ T9155]  ? mutex_lock_nested+0x10/0x10
[  243.796700][ T9155]  ? dmx_ts_feed_start_filtering+0x4e/0x210
[  243.802614][ T9155]  ? mutex_unlock+0x10/0x10
[  243.807169][ T9155]  ? mutex_lock_nested+0x10/0x10
[  243.812110][ T9155]  ? _raw_spin_lock_irq+0xb7/0xf0
[  243.817170][ T9155]  ? _raw_spin_unlock_irq+0x1f/0x40
[  243.822388][ T9155]  as102_dvb_dmx_start_feed+0x6c/0x280
[  243.827901][ T9155]  dmx_ts_feed_start_filtering+0x11c/0x210
[  243.833719][ T9155]  ? dmx_ts_feed_stop_filtering+0x190/0x190
[  243.839666][ T9155]  dvb_dmxdev_filter_start+0x422/0x1060
[  243.845271][ T9155]  dvb_demux_do_ioctl+0x47e/0x530
[  243.850313][ T9155]  dvb_usercopy+0x191/0x2b0
[  243.854871][ T9155]  ? dvb_dmxdev_buffer_read+0x4a0/0x4a0
[  243.860440][ T9155]  ? dvb_generic_ioctl+0xb0/0xb0
[  243.865452][ T9155]  ? dvb_demux_poll+0x210/0x210
[  243.870335][ T9155]  dvb_demux_ioctl+0x25/0x30
[  243.874992][ T9155]  __se_sys_ioctl+0xfa/0x170
[  243.879622][ T9155]  do_syscall_64+0x4c/0xa0
[  243.884058][ T9155]  ? clear_bhb_loop+0x60/0xb0
[  243.888782][ T9155]  ? clear_bhb_loop+0x60/0xb0
[  243.893483][ T9155]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  243.899443][ T9155] RIP: 0033:0x7f52d01a8f19
[  243.903870][ T9155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  243.923634][ T9155] RSP: 002b:00007f52d100b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  243.932111][ T9155] RAX: ffffffffffffffda RBX: 00007f52d0425fa0 RCX: 00007f52d01a8f19
[  243.940146][ T9155] RDX: 00002000000003c0 RSI: 0000000040146f2c RDI: 0000000000000004
[  243.948165][ T9155] RBP: 00007f52d0237f6d R08: 0000000000000000 R09: 0000000000000000
[  243.956197][ T9155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  243.964187][ T9155] R13: 00007f52d0426038 R14: 00007f52d0425fa0 R15: 00007ffd20b87cb8
[  243.972232][ T9155]  </TASK>
[  243.975309][ T9155] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  243.982620][ T9155] CPU: 0 PID: 9155 Comm: syz.5.1554 Not tainted syzkaller #0
[  243.989981][ T9155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  244.000022][ T9155] Call Trace:
[  244.003290][ T9155]  <TASK>
[  244.006211][ T9155]  dump_stack_lvl+0x188/0x24e
[  244.010885][ T9155]  ? memcpy+0x3c/0x60
[  244.014854][ T9155]  ? show_regs_print_info+0x12/0x12
[  244.020047][ T9155]  ? load_image+0x410/0x410
[  244.024562][ T9155]  panic+0x2d3/0x710
[  244.028445][ T9155]  ? bpf_jit_dump+0xd0/0xd0
[  244.032939][ T9155]  __warn+0x2f8/0x4f0
[  244.036913][ T9155]  ? __mutex_lock+0xa7e/0xb40
[  244.041587][ T9155]  ? __mutex_lock+0xa7e/0xb40
[  244.046249][ T9155]  report_bug+0x2ba/0x4f0
[  244.050576][ T9155]  ? __mutex_lock+0xa7e/0xb40
[  244.055242][ T9155]  handle_bug+0x3a/0x70
[  244.059388][ T9155]  exc_invalid_op+0x16/0x40
[  244.063879][ T9155]  asm_exc_invalid_op+0x16/0x20
[  244.068719][ T9155] RIP: 0010:__mutex_lock+0xa7e/0xb40
[  244.073992][ T9155] Code: 04 20 84 c0 0f 85 b3 00 00 00 83 3d d3 21 e2 04 00 0f 85 93 f6 ff ff 48 c7 c7 40 07 ac 8a 48 c7 c6 e0 07 ac 8a e8 e2 75 0d f7 <0f> 0b e9 79 f6 ff ff 0f 0b e9 27 f9 ff ff 48 c7 c1 40 91 c6 97 80
[  244.093588][ T9155] RSP: 0018:ffffc9000dac7ac0 EFLAGS: 00010246
[  244.099642][ T9155] RAX: bf779c6a2f7c9c00 RBX: ffff888027fe4ce0 RCX: 0000000000080000
[  244.107603][ T9155] RDX: ffffc90003d39000 RSI: 000000000004e060 RDI: 000000000004e061
[  244.115560][ T9155] RBP: ffffc9000dac7c20 R08: ffffc9000dac7747 R09: 1ffff92001b58ee8
[  244.123519][ T9155] R10: dffffc0000000000 R11: fffff52001b58ee9 R12: dffffc0000000000
[  244.131477][ T9155] R13: 0000000000000000 R14: ffff888027fe4000 R15: 0000000000000000
[  244.139443][ T9155]  ? __mutex_lock+0x1ab/0xb40
[  244.144110][ T9155]  ? as102_dvb_dmx_start_feed+0x6c/0x280
[  244.149730][ T9155]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  244.155349][ T9155]  ? mutex_lock_nested+0x10/0x10
[  244.160270][ T9155]  ? dmx_ts_feed_start_filtering+0x4e/0x210
[  244.166151][ T9155]  ? mutex_unlock+0x10/0x10
[  244.170640][ T9155]  ? mutex_lock_nested+0x10/0x10
[  244.175563][ T9155]  ? _raw_spin_lock_irq+0xb7/0xf0
[  244.180579][ T9155]  ? _raw_spin_unlock_irq+0x1f/0x40
[  244.185765][ T9155]  as102_dvb_dmx_start_feed+0x6c/0x280
[  244.191212][ T9155]  dmx_ts_feed_start_filtering+0x11c/0x210
[  244.197003][ T9155]  ? dmx_ts_feed_stop_filtering+0x190/0x190
[  244.202886][ T9155]  dvb_dmxdev_filter_start+0x422/0x1060
[  244.208427][ T9155]  dvb_demux_do_ioctl+0x47e/0x530
[  244.213442][ T9155]  dvb_usercopy+0x191/0x2b0
[  244.217934][ T9155]  ? dvb_dmxdev_buffer_read+0x4a0/0x4a0
[  244.223471][ T9155]  ? dvb_generic_ioctl+0xb0/0xb0
[  244.228406][ T9155]  ? dvb_demux_poll+0x210/0x210
[  244.233247][ T9155]  dvb_demux_ioctl+0x25/0x30
[  244.237828][ T9155]  __se_sys_ioctl+0xfa/0x170
[  244.242411][ T9155]  do_syscall_64+0x4c/0xa0
[  244.246818][ T9155]  ? clear_bhb_loop+0x60/0xb0
[  244.251484][ T9155]  ? clear_bhb_loop+0x60/0xb0
[  244.256178][ T9155]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  244.262065][ T9155] RIP: 0033:0x7f52d01a8f19
[  244.266466][ T9155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  244.286061][ T9155] RSP: 002b:00007f52d100b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  244.294463][ T9155] RAX: ffffffffffffffda RBX: 00007f52d0425fa0 RCX: 00007f52d01a8f19
[  244.302420][ T9155] RDX: 00002000000003c0 RSI: 0000000040146f2c RDI: 0000000000000004
[  244.310378][ T9155] RBP: 00007f52d0237f6d R08: 0000000000000000 R09: 0000000000000000
[  244.318334][ T9155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  244.326290][ T9155] R13: 00007f52d0426038 R14: 00007f52d0425fa0 R15: 00007ffd20b87cb8
[  244.334254][ T9155]  </TASK>
[  244.337399][ T9155] Kernel Offset: disabled
[  244.341706][ T9155] Rebooting in 86400 seconds..