last executing test programs:

36.032058543s ago: executing program 3 (id=906):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_', @ANYRESDEC=r0])
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
ptrace$getregset(0x4204, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x89}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10)
r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r7, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"})
ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

35.016654492s ago: executing program 3 (id=910):
syz_clone3(&(0x7f0000000680)={0x800, 0x0, 0x0, 0x0, {0x2f}, &(0x7f0000000300)=""/21, 0x15, 0x0, 0x0}, 0x58)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(0x0, 0x0)
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='R', 0x1, 0xfffffffffffffffd)
r4 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)='e', 0x1, 0xfffffffffffffffe)
r5 = add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="60cd153f5954e3b7cefddfbed84b91d3d9a9fd43dd92f43358ada528c9975f6a54460d82bfed69629ca866d8c96bcfa57faa0d6331c47570853a59d9c3a0115e550c32a738277dac34c4f099d5baf5375003b36317e98386e681a1aa460047b346ce5323723800283a5bbb1414629063c33634e02855543b4c7c8959c4bcba5fd364f3ef6f17ea7ff6abd4c5f19a620098fcac44ba30b9fa29c34e67aef6f4d42ed06c8f61c9e9094c5d46e8e24bce13d71a1f0c09dbc7b73a7ad36e7f288650b53771860093ddbc9c50a5cdefe904da32", 0xd1, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r5}, &(0x7f0000000ac0)=""/262, 0x106, &(0x7f0000000540)={&(0x7f0000000280)={'sha512-ssse3\x00'}, &(0x7f0000000580)="92f900a77cb6719ff389c726f7db65f500000000", 0x14})
ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0x8004551a, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
open(0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006)
mkdir(0x0, 0x0)
r6 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000009, 0x13, r6, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0)
ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0x1b309)

31.374720361s ago: executing program 3 (id=923):
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xeef, 0x72d0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000200)=0x9, 0xffffffffffffff5d)
add_key$keyring(0x0, &(0x7f0000000380), 0x0, 0x0, 0xffffffffffffffff)
socket$igmp6(0xa, 0x3, 0x2)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@ipv6_deladdrlabel={0x38, 0x49, 0x1, 0x0, 0x0, {0xa, 0x0, 0x80}, [@IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x38}}, 0x0)

30.679576212s ago: executing program 2 (id=927):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000069c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5511, &(0x7f0000006b80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getrlimit(0xe, &(0x7f0000000280))
pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f00000002c0)='y', 0x1}], 0x1f, 0x7fff, 0x0, 0x0)
unshare(0x8040480)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatacow}, {@enospc_debug}, {@nossd}, {@nodatasum}, {@autodefrag}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x33, 0x78, 0x39, 0x65, 0x36]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTtRq2fvz3mQI6xdW8rsJfhMPtyspzI8VCh2tpMe22CMvzI8XCh1zSY/NkyE8uLCyPyn8PxbaSeHK2rxwJCmcjoX8fOgWjiWFE/FM+3xtPt208H0s5BdYzMcrKNZ0L4lIelzt12OhcMMeZ7sHBwAAuKfE8Jxn2bHeZkij7Hxt0A6rB+0wMmiH+qAdRpMd0h37bQ+zvYW4vX1m49Ke/39kuPwf34pV2aLf9f8hXv+fP9ewe/3/bCw0ksJ8LLTSOwa04jGysPtxPEajlfe4sr5bAAAAgLta/F6gvsLzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5h715j5KruA4CffY734fVCUoXQKNkkNY6beL22gUQtVdaUqhEpzbqhoCqi2NhrsnjBjm1KjEJkbCIaIShtkJIPRRhFUc0HqBWISAoIFymOUHlEVEUBBAqtIQoipSQRaYIUqtl7z+ydc3cefqzx0t9P8s6Z+Z/nnYfn3HvnXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/h4Feu+dtm8Ud/e96zL1w8fsWetRe/et15pz4ZwsTM4x1ZuKP/xtvHf373uffseWD1HfcdPv+jvXm5PB4Gqn868zs3xFoPLw7h/o4QutPAisEs0JPfH4z1vW8whFPCbKBWYrI/K5E2HL7fF8K+MBuoVfW9vhAGC4ELn3rk4Zuridv6QlgaQqikbTxfydroSwNn9GaB/jSwtTsL/OqtTC3w3c4sAMcsvhlqL/oDE/UZhucu1+D113PcOvb2SofXFRPDjfP9bO08d6qgN31g4pietlJ1zIvS2+Ogd9sCeLeVtvOtnrbiF6n8G8pbs6FK6Nw0uXnD1dM74yOdYXS0q1FN8/Q8P/P6lzYeSXrBvA5jB4aPy+vwlieW3t21/ILH71ux9OX9H9v7yrF280eFTVpMz7dKyF9zC+Z5jMZ9niyAt1/pW9KIL10hhM2f/73PNIuX5v/Dzef/8eUcbzvrcsda3xzK5ubxkcGYeG0om5sDAADAgrEQ9ppuHX3oE83qK83/R9o7/h8P+eeT+Wy0B0MYn0nsXRLCaTOPZ4G7YnOXLQnhgzOpifrA2iRwMIT3ziSW16pKSiyKJUaSwE+G8sB4EjgUAxNJ4FsxcGsSuCEGDiSBjTFwMAmcGwNhqn4cvz+Uj6PtQF8MrM824oF4FsIvhmJrybZ6rlYVAADAcZLPDnvq7xbOdTjWDHF6eaCvVYZ4BnbDDJWkhnQGW5tWNayhu1UNna1qqI17d/Phl2ruaFVz6TSMjvoMt//ybz4bmijN/8eaz/8rc3Sko3T8P4R1M39j7s48Ml2Lr5+oywAAAAAcg4H/ffGbzeKl+f94e+f/x30iXYXM4bG4G2LLkhDG6gNZtX9YDmRHvQfyAAAAACwEtePxtWPhU/ltdop2Op8u5584wvzxwP/4nPl7Dz64vll/S/P/ifbO/++vv806cSj24mtLQlhUCPwg9rIamDESAz/+ZH0gH/+huAFuilXlJybUqropllgfA2NJYF+jEj+slTitPpA/WbXG99bGMZWXKAQAAADghIu7A+Jx+Xj+/4d+s/qaZuVK8//1R3b+/8w8uHR6//RACCu7Q+hKfxjwWH+2MGAMDHbkiYf6s7q60qqu7w/hnOrA0qpezNf/707XGHyqL6sqBk770P7Xz6gmvtkXwspi4OnP3XlWNbEzCdQa/8u+ED5QHW3a+HcWZY33pI1/fVEI7y8EalVdtiiEamO9aVWPVPLrGKRV/XMlhHcVArWqzq6EsCsAsEDF/0o3FR/csevaLRumpye3z2Mi7sPvC5unpidHN26d3lRp0KdNSZ/rljG6vjymdq9881y+RNFF964bbCdd+53gWLGtfD9+6cTB/H78LtQzM87VPXV316RD/siHy02EwjepRkPunOch9xcrmX0SS/XH/L1hICy6esfk9tEvbti5c/uq7G+72Vdnf+NhpmxbrUq3Vf9cfWvj5dFwtazE0W6rZcVKVu68ctvKHbuuXTF15YbLJy+fvGrV2avHzhxbM/bxM1dWRzWW/W0x1GVzVZ0M9a072xzXcRzq6d2FSk7Ep4aEhMRCS2wdWNb0/+TS/H9b8/l//NSJn/z5+gyNjv8Px8P82eOzh/nXx8C+do//Dzc6ml87MWAkCeyOgd0O8wMAAPDOECf5cW9m3Cv90+XfeblZudL8f3d7v/8/Tuv/15auP7/RMv/LY4mxRuv/p8v819b/391o/f90mf/a+v/73ob1/6+uBZJN8gvr/wMAAO8EJ279/5bL+6cXCChlaLm8f3qBgFKGlsv4t3uBgCNe///5//yr/w5NlOb/t7Y3/7dwPwAAAJw8vvxn1/xOs3hp/r+vvfn/iV//LzQ6/3+kUWCi0cKA1v8DAABggWq0/t/wjf2XNitXmv8faG/+H0+76KzLHWt9cyhb0y6ka9q9NlT7yQAAAAAsDJ1hdLSnzbx1K6OuPfo2n8mXAm2WLnrxTw4f2fn/B9ub/9f9LuOWJ5be3bX8gsffvG/F0pf3f2zvK7PH/wEAAID50+5+CQAAAAAAAAAAAAAA4O334n/sWdMsXvr9f1g383ij3//H6/7F3xe8uy53rLX1+n/5/Qs/fc+umSULHxsK4cPFwJY9W04J+bX5lxUDD1+y/D3VxJ60xIMvnPtSNXFpGvjUilPfqCbOSQLr4yKJ700D8aqKbyxOAnF5xX9PA3F7HEgDvXngq4uzcXSk2+qng9m26ki31bODISwpBGrb6v7BrI2OdIC3JYHaAL+QBuIA/zwPdKa9umcg61UMDMaidwxkvQIA4KQVvwX2hM1T05Nj8St8vD29u/42qluy7PpytR1tNv9cvjTZRfeuG2wn3ZV+F5291nhPqFSHsKr0dbWYpWNmlMenlhab7t0NhtxqtbfOBuVSR7rpehuPqC8b0ejGrdObeloOfE3rLKu7W2ZZVZrsFLN0zmzSNmppoy9tjKjNbdNGl+P9zjA62pXk+oMYHA51Wr0i2v29fnGdv0avgmKeqw7v/VWz+krz/+H25v+V4rjeyC8GsDteWe/vlljmHwAAAObXV9f++hvx32dvfPTpZnlL8/+R9ub/cQ9Wfig429txMF7/f++SEGYurT+cBe6KzV22JIQPzqQmYonsgvrnxxJjWeCuuMNkeSyxfqK+qkUxcCAJ/GQoDxxMAodiIN9LsT/ku3L+fiiEs2ZS6+pLbIslhpPAZ2JgJAmMxsBYElgcA+NJ4NXFeWAiCfxbDISp+m117+J8WwEAAByJfJ7VU383pPO8A92tMnS0ytDfKkNnqwyVVhkajSLe/3bM0JOcvNJRyNST1tqX1FLKEC+Gf8T9KmUIP6zPmRYsNR3PP6idb9BRn+GBT3RXQhOl+f9Ye/P//vrbrPVDcf4/e/2/LPCD2L2vxVPHR2Lgx5+sD+Q7Bg7Fye5Ntaom8hL5pP2mWGI8BkaSwLYYGE8C69flgX3vqQ/kM+1a43trjU/lJQoBAAAAOOHiDoK4mybO/+/Y8ZWBZuVK8//x9ub/sb2BYmM3xFoPLw7h/o7Z3tQCKwazQNyPMRh/Hv++wRBOKezgqJWY7M9K9CYNh+/3Zb9Q702r+l5f9uODeP/Cpx55+OZq4ra+EJYW9r7U2ni+krXRlwbO6M0C/Wlga3cWiHt+aoHvdmYBOGa1vYLxBZWf6lIzPHe5Bq+/d8o1QdPhlfaBzpFvrt9czZfSDtd8n2rNkT1tTfffctyU3h4HvdsW4rtt2Lut+EUq/4by1myoEjo3TW7ecPX0zvhI8ZesJfP0PBd/pdpO+ji8DncffW9bq6QdGEs+PsbmLjf367AjVnfLE0vv7lp+weP3rVj68v6P7X2l7W40EH8o/Mh1/zr4o8LmnW+VkL/mFtznyYTPk4X438CIpy2EsO7Vr9/ULF6a/0+0N//vTm5n/DpuzB1LQvhIYeM+Fjf/Hy/JPgcLgexT8l3lQHbI/b+GGn5yAgAAwPFW291R218wld9mJ4Sn8+Ry/okjzB/3V4zPmb/dfvf/9SVLm8VL8//1zef/i5JuOv7v+D/zxPH/OZ3su6IXpQ/sPqZd0aXqmBeO/8/pZH+3Of4/J8f/Hf+fi+P/LTj+P6eT/WkrfUva5ktXCOHlP3ro2Wbx0vx/W3vzf+v/zb1oX239v/WN1v/b1mj9v93W/wMAAOZVg4Xm0nleafW+UoZ09b5ShpYLBLZcYtD6f0e8/t9Lpz//m9BEaf6/u735f3w5DBRbXyjr/42sa1DVrTGwzcKAAAAAnIwa7SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg7fXAP/zPpmbxR3973rMvXDx+xZ61F7963XmnPhnC1MzjHVm4o//G28d/fve59+x5YPUd9x0+/6OVvFxPfvu7dbljrW8OhbCv8MhgTLw2VL0zG7jw0/fs6q4mHhsK4cPFwJY9W06pJr41FMKyYuDhS5a/p5rYk5Z48IVzX6omLk0Dn1px6hvVxDl5oCPt7j8uzrrbkXb35sUhLCkEat29YnF9VbU2/jQPdKZt/NNg1kYMDMai3xjM2oiB6VhialEIK7tD6EqrerSSVdWVVvUvlayqrrSqL1dCOCeE0J1W9UJvVlV3OvIne7OqYuC0D+1//YxqYl9vCCuLgac/d+dZ1cQXkkCt8b/oDeED1ZdM2vi3e7LGe9LGb+sJ4f0hhN60xC+7sxK9aYkXu0N4VyFQa/zz3SHsCrwjxA+fuk+0Hbuu3bJhenpy+zwmevO2+sLmqenJ0Y1bpzdVkj410lFIv3X90Y/9ude/tLF6e9G96wbbSXfn5Xpmury6p+7umpO997Ff/cVKZp+PUv0xf28YCIuu3jG5ffSLG3bu3L4q+9tu9tXZ3648mm2rVQtlWy0rVrJy55XbVu7Yde2KqSs3XD55+eRVq85ePXbm2Jqxj5+5sjqqsezv8RjqnSd+qKd3Fyo5ER8AEhISCy3RWffpNnayf5CXvujPdrQnVGY+oEvTimKWjplRHo9Brz3KER/N95SWI1pVmjiUsqyeI8v19VnWlCYTs7X0ZVlmvteVJofFxjpnNmm83xlGR7sabYfh+rvFzfuzY9i8z+Sbrt00AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP/HDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8rcPo2QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEsBAAD//+erI4o=")
mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0)
r3 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
r4 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0)
pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000240)="c1156504da24dc3f09e1bd3e8e17a79b69fc53b8564a8b3c73b108981cfbc83f9e87f39952811cd6192456b073d5d1be738570ec31367a8f48aa4cdfe90db5656226a51cafbeff271a346dddcf064f6f9a5fe715f5477f60d96edb7684787fe21ee755f6237fba151434e0baa50504e39f7c17cd5431e8bfe8552679737f2ce1510e0d95b5b823db090170106c27e4cd184e00e17c6500dd0a31fe301a2a7231d8f87bfa8682bd056ef451f538", 0xad}, {&(0x7f0000000300)="597faf88858cca7936b2d0853c6a6bd73883ae0782087fe964da5e6d2a4a2b238043a722610451f61de155bd8f83abb5ab9521765765d4f78e51db8553c15a940b8847a3dd7b061ac23c878cd02af0acd7b902d7b77a5639901f1373ad3c9fd0886594ac8f22992c72202d1c84c452b9966126415570c8a44c9318d07e080f926f9515344031cccada761b65bfe9853e5991f15dadc20d74e751577883ec8ab7548bd09f6cc84a5a27f037172a1de0ce30bd63c4d6e6525f96ca8764b6d653", 0xbf}, {&(0x7f0000001640)="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", 0xe90}], 0x3, 0x5, 0x0, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
fallocate(0xffffffffffffffff, 0x63, 0x0, 0xffffffffffffffbf)
ioctl$BTRFS_IOC_DEFRAG_RANGE(r4, 0x40309410, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x3, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x5c, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x70dab7c4}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x0, 0x1, 0x0, 0x8001, 0x0, 0x8}, 0x0, 0x0, 0x138f}}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa7, 0x1, 0x0, 0x8, 0x4, 0x90e4}, {0x8, 0x1, 0x443, 0xa8ea, 0x394d, 0x6}, 0x9, 0x40, 0x67}}]}}]}, 0x88}}, 0x0)
write$binfmt_script(r1, 0x0, 0x0)
getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x17, 0x0, 0x0)

25.884000062s ago: executing program 2 (id=941):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
r0 = getpid()
syz_pidfd_open(r0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x4005, 0x0, 0x0, 0xc}]}, 0x10)
socket$inet(0x2, 0x4000000000000001, 0x0)
r5 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0)
ioctl$CEC_S_MODE(r5, 0x40046109, &(0x7f0000000080)=0xf0)
ioctl$CEC_S_MODE(r5, 0x40046109, &(0x7f0000000100)=0xd0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000100)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r8, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, &(0x7f0000000080)=0x4e1f, 0x4)

24.281630623s ago: executing program 3 (id=943):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51b, &(0x7f0000000100)="$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")
open(&(0x7f0000000040)='./bus\x00', 0x1ed37e, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@li, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x64}}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0)
read(r0, &(0x7f0000000180)=""/19, 0xfffffe47)

23.041630481s ago: executing program 2 (id=948):
syz_mount_image$xfs(&(0x7f0000009800), &(0x7f0000009840)='./bus\x00', 0x0, &(0x7f00000000c0)={[{@bsdgroups}, {@pquota}, {@uqnoenforce}]}, 0x1, 0x9867, &(0x7f00000130c0)="$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")
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0xffffffff}]}}]}, 0x40}}, 0x0)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x882)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x1, 0x0, 0x3}})
write$sndseq(r4, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c)
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180), &(0x7f0000000340)=ANY=[], 0x1001, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x13}, 0x18)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
unshare(0x28000600)
rt_sigaction(0x30, &(0x7f0000000000)={0xfffffffffffffffc, 0x0, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000600))
r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, 0x0, 0x0)
socket$inet6_dccp(0xa, 0x6, 0x0)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
r8 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r8, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, @ib={0x1b, 0x0, 0x0, {"44906dc621937dfcd7a18fbad0522c51"}}}}, 0xa0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2002, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0xbc, 0x0, &(0x7f0000000780)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}, 0x400}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000400)={@fda={0x66646185, 0x0, 0x0, 0x30}, @ptr={0x70742a85, 0x1, &(0x7f0000001740)=""/4096, 0x1000, 0x0, 0x15}, @fda={0x66646185, 0x2, 0x1, 0x5}}, &(0x7f00000003c0)={0x0, 0x20, 0x48}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x0, 0x0, 0x0})

22.787966284s ago: executing program 3 (id=949):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), 0x0}, 0x38)
socket$igmp(0x2, 0x3, 0x2)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0)
r1 = socket(0xa, 0x2, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000000)={0x2, 0x4e20}, 0x10)
recvmsg(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2001)
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0})
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='net_prio.prioidx\x00', 0x275a, 0x0)
accept(r3, 0x0, 0x0)

22.466628092s ago: executing program 3 (id=950):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0xd, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x7}, [@map_idx={0x18, 0x7, 0x5, 0x0, 0x10}, @generic={0xf5, 0x9, 0xc, 0xff, 0x4000}, @jmp={0x5, 0x0, 0x7, 0x5, 0x1, 0xfffffffffffffff8, 0xffffffffffffffff}, @map_fd={0x18, 0x5, 0x1, 0x0, r0}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0x401, 0x69, &(0x7f0000000580)=""/105, 0x41000, 0xa, '\x00', 0x0, 0x18, r0, 0x8, &(0x7f00000006c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000700)={0x5, 0x8, 0x2, 0x4}, 0x10, 0x0, r0, 0x6, &(0x7f0000000940)=[r0, 0xffffffffffffffff, r0, r0, r0, r0], &(0x7f0000000b00)=[{0x4, 0x5, 0x5, 0x4}, {0x4, 0x1, 0xa, 0x1}, {0x0, 0x3, 0x2, 0xc}, {0x0, 0x1, 0x5, 0xa}, {0x1, 0x4, 0x8, 0xc}, {0x0, 0x5, 0xa, 0x1}], 0x10, 0x8}, 0x90)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f000096e000/0x1000)=nil, 0x1000, 0x200000a, 0x8031, 0xffffffffffffffff, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x195, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='xprt_transmit\x00', r0}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r5}, 0x10)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
fcntl$lock(r6, 0x26, &(0x7f0000000000))

21.724036547s ago: executing program 2 (id=954):
accept4$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = getpid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r4 = socket$unix(0x1, 0x5, 0x0)
r5 = dup2(r4, r3)
r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$VIDIOC_REQBUFS(r6, 0xc0145608, 0x0)
r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_REQBUFS(r7, 0xc0585609, &(0x7f0000000040)={0x0, 0xa})
close_range(r5, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000009fc0)={{0x1}, &(0x7f0000009f40), 0x0}, 0x20)
socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x200000000000011, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r9=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x5, 0x4, 0x7, 0x4}, 0x48)
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', r9, r5, 0x0, 0x2, 0x2}, 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{r10, <r11=>0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000400)='%pi6   \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r11}, 0x4)

19.382306942s ago: executing program 2 (id=959):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000006000000140008"], 0x28}}, 0x0)

19.184000639s ago: executing program 2 (id=960):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), 0x0}, 0x38)
socket$igmp(0x2, 0x3, 0x2)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0)
r1 = socket(0xa, 0x2, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000000)={0x2, 0x4e20}, 0x10)
recvmsg(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2001)
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0})
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='net_prio.prioidx\x00', 0x275a, 0x0)
accept(r3, 0x0, 0x0)

6.397513899s ago: executing program 1 (id=976):
r0 = getpid()
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff)
r1 = syz_open_procfs(r0, &(0x7f0000000100)='pagemap\x00')
sendmsg$DEVLINK_CMD_TRAP_GET(r1, 0x0, 0x20000001)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x20d6, 0xcb17, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000001100)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c)
mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r3, 0x0)
move_pages(0x0, 0x1, &(0x7f0000000280)=[&(0x7f0000ffa000/0x4000)=nil], &(0x7f0000000080), 0xfffffffffffffffe, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0x8, "505c905e"}, @main=@item_012={0x1, 0x0, 0x0, "ec"}]}}, 0x0}, 0x0)
r4 = openat$cgroup_ro(r1, &(0x7f0000000180)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0)
recvmsg$unix(r4, &(0x7f0000000240)={&(0x7f00000002c0)=@abs, 0x6e, &(0x7f00000001c0), 0x0, &(0x7f0000000440)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x150}, 0x10003)
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)

4.585410528s ago: executing program 4 (id=979):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3567], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10)
r2 = socket(0x10, 0x3, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmmsg(r3, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x0, 0x0)
connect$can_bcm(r3, &(0x7f00000000c0), 0x10)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000340)=0x10, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000001d40)={'vcan0\x00', <r5=>0x0})
sendmsg$can_bcm(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x1d, r5}, 0x10, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="00000000010000000000000000000000c4f40c848d97a447"], 0x48}}, 0x0)
sendto$packet(r2, &(0x7f00000001c0)="49a3bb4455b6eae51f4283073207b212da6b112d3274aae34270ea78238d976ba70a92972c063973112e2eba4913dc5dcba36e2b2bacf8ca6d163e1ec812d6361a63b9054b1e60808d1ee7314c1efcc971c75cbbf33f5f24451823b6603f69f81d630fbe6b876ac976bb559da8ebcab4ae0dc7c4300c0e65f31427893baf8e5820b38af230d30baeb1e54e673b6f2eb4bb4d36c5d3bceea4237c18eb2702ff51069fa5a0c834597c93aadf852dabf2b6a45cec11c9", 0xb5, 0x8001, &(0x7f0000000040)={0x11, 0x6, r5, 0x1, 0xe4}, 0x14)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x1200, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500160002"], 0x44}}, 0x0)

2.73721982s ago: executing program 0 (id=982):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008000, &(0x7f0000000500)={[{@debug}, {@orlov}, {@nomblk_io_submit}, {@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@dioread_nolock}, {@usrquota}, {@usrquota}]}, 0x1, 0x5bf, &(0x7f0000001080)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc042, 0x0)
creat(&(0x7f0000000300)='./bus\x00', 0x0)
r2 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0)
syncfs(r2)
write$P9_RXATTRCREATE(r1, &(0x7f0000000400)={0x7}, 0x2000)

2.6198354s ago: executing program 4 (id=983):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_', @ANYRESDEC=r0])
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
ptrace$getregset(0x4204, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x89}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10)
r7 = syz_open_dev$usbfs(0x0, 0x75, 0x109301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r7, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"})
ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

2.610032661s ago: executing program 1 (id=984):
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'interleave', '', @void}}}]})

2.528714508s ago: executing program 1 (id=985):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x240000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x3c, r1, 0x135, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x5}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x28d39a2fbec724a8}, 0x2000004)

2.223660145s ago: executing program 1 (id=986):
r0 = syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000880)={[{@errors_remount}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x2, 0x44a, &(0x7f0000000400)="$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")
r1 = fspick(r0, &(0x7f0000000000)='./file0\x00', 0x1)
fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0x40106614, 0x1000000000000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00'})

2.187085568s ago: executing program 0 (id=987):
getdents(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="980000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00000000000000004c001280110001006272696467655f736c61766500000000340005800500190003"], 0x98}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r4, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c00058005001900000000002dbd0ba007f786171b27ee202c0b808244e2070f1e3e3c8598c849fc83732b00fde7790cbce99009cd6e1c2b12ba8568f8b95286db0a0825de73f94373c23757ccc8817f175d9b5095988de55d185be2f220770db12de285455a0877f2d46adabcf20ba1fdea2c3d892c69d855cf76ab6faea7b13fc5410d938c106d71b29a7fdbef12752574db9c779bbbbfcc"], 0x44}}, 0x0)

1.723001559s ago: executing program 1 (id=988):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0xc8c0}, 0x4000800)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5)
preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
r2 = userfaultfd(0x801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0))
r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
r4 = add_key$keyring(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, r3)
pipe2$watch_queue(&(0x7f0000000100)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r6, 0x9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$igmp(0x2, 0x3, 0x2)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map}, 0x10)
syz_emit_ethernet(0xf87, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xf51, 0x0, 0x0, @private2, @mcast2, {[@routing={0x84}], "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"}}}}}, 0x0)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x8)
add_key$keyring(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, r4)
keyctl$get_persistent(0x16, 0x0, r4)
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000582000/0x2000)=nil, 0x800000})
r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
keyctl$invalidate(0x15, 0x0)
preadv(r5, &(0x7f0000000280), 0x0, 0x7ff, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0xe8d7000)
ioctl$sock_inet_udp_SIOCOUTQ(r7, 0x5411, 0x0)

1.659642554s ago: executing program 4 (id=989):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = userfaultfd(0x1)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000300))
r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_ro(r4, &(0x7f00000000c0)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x4, &(0x7f00000003c0)=0xed5, 0x4)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r5 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x894a, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240), 0xa8be)
r6 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x61)
listen(r6, 0x80280400)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x23}}, 0x1c)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl(r7, 0x8b2c, &(0x7f0000000040))
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10)
getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xcd, &(0x7f0000000000), &(0x7f0000000080)=0x4)

1.14261904s ago: executing program 4 (id=990):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r1 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000300))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x2})
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000bfd000/0x400000)=nil, &(0x7f0000bd1000/0x2000)=nil, 0x400000}) (fail_nth: 1)

1.072329856s ago: executing program 0 (id=991):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r1 = userfaultfd(0x80801)
r2 = socket$kcm(0x29, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000100), 0xfecc)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000140)={r3})
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000300))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x2})
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000bfd000/0x400000)=nil, &(0x7f0000bd1000/0x2000)=nil, 0x400000})

706.364218ms ago: executing program 1 (id=992):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3567], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10)
r2 = socket(0x10, 0x3, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmmsg(r3, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x0, 0x0)
connect$can_bcm(r3, &(0x7f00000000c0), 0x10)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000340)=0x10, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000001d40)={'vcan0\x00', <r5=>0x0})
sendmsg$can_bcm(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x1d, r5}, 0x10, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="00000000010000000000000000000000c4f40c848d97a447"], 0x48}}, 0x0)
sendto$packet(r2, &(0x7f00000001c0)="49a3bb4455b6eae51f4283073207b212da6b112d3274aae34270ea78238d976ba70a92972c063973112e2eba4913dc5dcba36e2b2bacf8ca6d163e1ec812d6361a63b9054b1e60808d1ee7314c1efcc971c75cbbf33f5f24451823b6603f69f81d630fbe6b876ac976bb559da8ebcab4ae0dc7c4300c0e65f31427893baf8e5820b38af230d30baeb1e54e673b6f2eb4bb4d36c5d3bceea4237c18eb2702ff51069fa5a0c834597c93aadf852dabf2b6a45cec11c9", 0xb5, 0x8001, &(0x7f0000000040)={0x11, 0x6, r5, 0x1, 0xe4}, 0x14)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x1200, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500160002"], 0x44}}, 0x0)

556.103801ms ago: executing program 0 (id=993):
clock_adjtime(0x0, 0x0) (fail_nth: 1)

307.482583ms ago: executing program 4 (id=994):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0xfffffffe)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
dup3(r1, r0, 0x0)

219.8582ms ago: executing program 0 (id=995):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CCA_MODE(r0, 0x0, 0x2000004)

196.042502ms ago: executing program 4 (id=996):
syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
gettid()
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800"], 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = socket$inet(0x2, 0x3, 0x5)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x3}}}})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x20, 0x80, 0x1000, 0x1, {{0x5, 0x4, 0x2, 0x2, 0x14, 0x66, 0x0, 0xe9, 0x2f, 0x0, @private, @multicast1}}}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @in=@multicast2, {@in6=@dev, @in6=@dev}, {{@in=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}}}, [@tmpl={0x44, 0x8, [{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x0, @in=@loopback}]}]}, 0x16c}}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
close(r5)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
getpid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_pidfd_open(0x0, 0x0)
close(r6)
r7 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
ioctl$SIOCSIFHWADDR(r6, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_FRAME(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x44, r10, 0xb7a006d1969b963b, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_FRAME={0x26, 0x33, @probe_request={{{}, {}, @device_b, @device_b}, @void, @val, @void, @void, @val={0x72, 0x6}}}]}, 0x44}}, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="02000000000a"})

0s ago: executing program 0 (id=997):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_', @ANYRESDEC=r0])
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
ptrace$getregset(0x4204, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x89}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10)
r7 = syz_open_dev$usbfs(0x0, 0x75, 0x109301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r7, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"})
ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

kernel console output (not intermixed with test programs):

number 11
[  303.282949][ T7034] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  303.876951][ T4786] Bluetooth: hci1: command 0x0406 tx timeout
[  304.210366][ T7044] loop2: detected capacity change from 0 to 4096
[  304.229405][ T4782] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  304.276135][ T7049] loop0: detected capacity change from 0 to 64
[  304.341731][ T7046] loop1: detected capacity change from 0 to 4096
[  304.379971][ T7046] ntfs3: Unknown parameter 'ÿÿÿÿÿÿÿÿ'
[  304.420114][   T25] audit: type=1800 audit(1725754463.254:35): pid=7049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.769" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=3 res=0 errno=0
[  304.461982][    C1] vkms_vblank_simulate: vblank timer overrun
[  304.509522][ T4782] usb 5-1: Using ep0 maxpacket: 16
[  304.527587][ T7046] loop1: detected capacity change from 0 to 64
[  304.747734][ T4782] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  305.215004][ T4783] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  305.249240][ T3616] usbhid 4-1:0.0: can't add hid device: -71
[  305.255256][ T3616] usbhid: probe of 4-1:0.0 failed with error -71
[  305.264029][ T7059] loop1: detected capacity change from 0 to 128
[  305.272175][ T7057] loop3: detected capacity change from 0 to 128
[  305.281785][ T3616] usb 4-1: USB disconnect, device number 15
[  305.360061][ T7057] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  305.360071][ T7059] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  305.360163][ T7059] ext4 filesystem being mounted at /91/mnt supports timestamps until 2038 (0x7fffffff)
[  305.389595][ T4782] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  305.419483][ T7057] ext4 filesystem being mounted at /60/mnt supports timestamps until 2038 (0x7fffffff)
[  305.467629][ T4783] usb 3-1: device descriptor read/64, error -71
[  305.481902][ T4782] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  305.517272][ T4782] usb 5-1: Product: syz
[  305.533012][ T4782] usb 5-1: Manufacturer: syz
[  305.537635][ T4782] usb 5-1: SerialNumber: syz
[  305.692826][ T7064] FAULT_INJECTION: forcing a failure.
[  305.692826][ T7064] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  305.717314][ T4782] usb 5-1: config 0 descriptor??
[  305.725917][ T7064] CPU: 1 PID: 7064 Comm: syz.0.773 Not tainted 5.15.166-syzkaller #0
[  305.733996][ T7064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  305.744186][ T7064] Call Trace:
[  305.747464][ T7064]  <TASK>
[  305.750382][ T7064]  dump_stack_lvl+0x1e3/0x2d0
[  305.755052][ T7064]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  305.760666][ T7064]  ? panic+0x860/0x860
[  305.764722][ T7064]  should_fail+0x38a/0x4c0
[  305.769126][ T7064]  _copy_from_user+0x2d/0x170
[  305.773781][ T7064]  iovec_from_user+0x13b/0x390
[  305.778527][ T7064]  __import_iovec+0x72/0x4b0
[  305.783102][ T7064]  import_iovec+0xe6/0x120
[  305.787505][ T7064]  do_writev+0x242/0x470
[  305.791731][ T7064]  ? do_readv+0x460/0x460
[  305.796049][ T7064]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  305.802011][ T7064]  ? vtime_user_exit+0x2d1/0x400
[  305.806932][ T7064]  ? syscall_enter_from_user_mode+0x2e/0x240
[  305.812889][ T7064]  ? lockdep_hardirqs_on+0x94/0x130
[  305.818068][ T7064]  ? syscall_enter_from_user_mode+0x2e/0x240
[  305.824028][ T7064]  do_syscall_64+0x3b/0xb0
[  305.828434][ T7064]  ? clear_bhb_loop+0x15/0x70
[  305.833088][ T7064]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  305.838962][ T7064] RIP: 0033:0x7feea4fd2ef9
[  305.843359][ T7064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  305.862943][ T7064] RSP: 002b:00007feea344c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  305.871335][ T7064] RAX: ffffffffffffffda RBX: 00007feea518bf80 RCX: 00007feea4fd2ef9
[  305.879286][ T7064] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000003
[  305.887234][ T7064] RBP: 00007feea344c090 R08: 0000000000000000 R09: 0000000000000000
[  305.895182][ T7064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  305.903130][ T7064] R13: 0000000000000000 R14: 00007feea518bf80 R15: 00007ffdc71f0348
[  305.911089][ T7064]  </TASK>
[  306.389549][ T4783] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  306.430243][ T4782] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  306.440897][ T4782] em28xx 5-1:0.0: DVB interface 0 found: bulk
[  306.761278][ T4783] usb 3-1: device descriptor read/64, error -71
[  309.978380][ T4783] usb usb3-port1: attempt power cycle
[  310.539457][ T4782] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[  310.570228][ T7076] FAULT_INJECTION: forcing a failure.
[  310.570228][ T7076] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  310.775951][ T4782] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  310.779814][ T7076] CPU: 0 PID: 7076 Comm: syz.0.776 Not tainted 5.15.166-syzkaller #0
[  310.784252][ T4782] em28xx 5-1:0.0: board has no eeprom
[  310.791999][ T7076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  310.792012][ T7076] Call Trace:
[  310.792019][ T7076]  <TASK>
[  310.792026][ T7076]  dump_stack_lvl+0x1e3/0x2d0
[  310.792051][ T7076]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  310.792067][ T7076]  ? panic+0x860/0x860
[  310.792089][ T7076]  ? __lock_acquire+0x1295/0x1ff0
[  310.792108][ T7076]  should_fail+0x38a/0x4c0
[  310.792133][ T7076]  prepare_alloc_pages+0x1db/0x5b0
[  310.792158][ T7076]  __alloc_pages+0x14f/0x700
[  310.792178][ T7076]  ? __rmqueue_pcplist+0x2030/0x2030
[  310.792201][ T7076]  ? __lock_acquire+0x1ff0/0x1ff0
[  310.792218][ T7076]  ? alloc_pages+0x458/0x570
[  310.792239][ T7076]  skb_page_frag_refill+0x220/0x4b0
[  310.792258][ T7076]  tun_get_user+0x1bd7/0x40f0
[  310.792292][ T7076]  ? tun_ring_recv+0xcc0/0xcc0
[  310.876400][ T7076]  ? rcu_lock_release+0x5/0x20
[  310.881153][ T7076]  tun_chr_write_iter+0x10c/0x1e0
[  310.886155][ T7076]  vfs_write+0xacd/0xe50
[  310.890397][ T7076]  ? file_end_write+0x250/0x250
[  310.895225][ T7076]  ? __fget_files+0x413/0x480
[  310.899878][ T7076]  ? __fdget_pos+0x1e9/0x380
[  310.904439][ T7076]  ? ksys_write+0x77/0x2c0
[  310.908827][ T7076]  ksys_write+0x1a2/0x2c0
[  310.913127][ T7076]  ? print_irqtrace_events+0x210/0x210
[  310.918559][ T7076]  ? __ia32_sys_read+0x80/0x80
[  310.923297][ T7076]  ? syscall_enter_from_user_mode+0x2e/0x240
[  310.929248][ T7076]  ? lockdep_hardirqs_on+0x94/0x130
[  310.934418][ T7076]  ? syscall_enter_from_user_mode+0x2e/0x240
[  310.940372][ T7076]  do_syscall_64+0x3b/0xb0
[  310.944764][ T7076]  ? clear_bhb_loop+0x15/0x70
[  310.949434][ T7076]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  310.955425][ T7076] RIP: 0033:0x7feea4fd19df
[  310.960794][ T7076] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48
[  310.986417][ T7076] RSP: 002b:00007feea344c000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  310.994815][ T7076] RAX: ffffffffffffffda RBX: 00007feea518bf80 RCX: 00007feea4fd19df
[  311.002766][ T7076] RDX: 000000000000004a RSI: 0000000020000100 RDI: 00000000000000c8
[  311.010715][ T7076] RBP: 00007feea344c090 R08: 0000000000000000 R09: 0000000000000000
[  311.018662][ T7076] R10: 000000000000004a R11: 0000000000000293 R12: 0000000000000001
[  311.026609][ T7076] R13: 0000000000000000 R14: 00007feea518bf80 R15: 00007ffdc71f0348
[  311.034651][ T7076]  </TASK>
[  311.740496][ T4782] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  311.760825][ T4782] em28xx 5-1:0.0: dvb set to bulk mode.
[  311.812125][ T4782] usb 5-1: USB disconnect, device number 12
[  311.819507][ T4786] em28xx 5-1:0.0: Binding DVB extension
[  311.828725][ T4782] em28xx 5-1:0.0: Disconnecting em28xx
[  312.004986][ T4786] em28xx 5-1:0.0: Registering input extension
[  312.013646][ T4782] em28xx 5-1:0.0: Closing input extension
[  312.026192][ T4782] em28xx 5-1:0.0: Freeing device
[  312.814174][ T7092] loop3: detected capacity change from 0 to 128
[  312.825646][ T7095] loop2: detected capacity change from 0 to 128
[  312.884604][ T7092] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  312.918114][ T7092] ext4 filesystem being mounted at /62/mnt supports timestamps until 2038 (0x7fffffff)
[  313.014111][ T7095] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  313.049579][ T7095] ext4 filesystem being mounted at /115/mnt supports timestamps until 2038 (0x7fffffff)
[  313.217938][ T4782] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  313.858964][ T7124] FAULT_INJECTION: forcing a failure.
[  313.858964][ T7124] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  313.872404][ T7124] CPU: 1 PID: 7124 Comm: syz.0.788 Not tainted 5.15.166-syzkaller #0
[  313.880489][ T7124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  313.890544][ T7124] Call Trace:
[  313.893812][ T7124]  <TASK>
[  313.896722][ T7124]  dump_stack_lvl+0x1e3/0x2d0
[  313.901383][ T7124]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  313.906996][ T7124]  ? panic+0x860/0x860
[  313.911052][ T7124]  should_fail+0x38a/0x4c0
[  313.915456][ T7124]  _copy_from_user+0x2d/0x170
[  313.920116][ T7124]  __sys_bpf+0x1d5/0x670
[  313.924341][ T7124]  ? bpf_link_show_fdinfo+0x2d0/0x2d0
[  313.929703][ T7124]  ? syscall_enter_from_user_mode+0x2e/0x240
[  313.935660][ T7124]  ? lockdep_hardirqs_on+0x94/0x130
[  313.940838][ T7124]  __x64_sys_bpf+0x78/0x90
[  313.945233][ T7124]  do_syscall_64+0x3b/0xb0
[  313.949626][ T7124]  ? clear_bhb_loop+0x15/0x70
[  313.954281][ T7124]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  313.960159][ T7124] RIP: 0033:0x7feea4fd2ef9
[  313.964554][ T7124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  313.984136][ T7124] RSP: 002b:00007feea344c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  313.992529][ T7124] RAX: ffffffffffffffda RBX: 00007feea518bf80 RCX: 00007feea4fd2ef9
[  314.000479][ T7124] RDX: 0000000000000010 RSI: 0000000020000040 RDI: 0000000000000011
[  314.008427][ T7124] RBP: 00007feea344c090 R08: 0000000000000000 R09: 0000000000000000
[  314.016380][ T7124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  314.024327][ T7124] R13: 0000000000000000 R14: 00007feea518bf80 R15: 00007ffdc71f0348
[  314.032290][ T7124]  </TASK>
[  314.035348][    C1] vkms_vblank_simulate: vblank timer overrun
[  314.160003][ T7126] FAULT_INJECTION: forcing a failure.
[  314.160003][ T7126] name failslab, interval 1, probability 0, space 0, times 0
[  314.179200][ T4782] usb 5-1: Using ep0 maxpacket: 8
[  314.198442][ T7126] CPU: 1 PID: 7126 Comm: syz.0.790 Not tainted 5.15.166-syzkaller #0
[  314.206535][ T7126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  314.216574][ T7126] Call Trace:
[  314.219853][ T7126]  <TASK>
[  314.222786][ T7126]  dump_stack_lvl+0x1e3/0x2d0
[  314.227453][ T7126]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  314.233075][ T7126]  ? panic+0x860/0x860
[  314.237126][ T7126]  should_fail+0x38a/0x4c0
[  314.241525][ T7126]  should_failslab+0x5/0x20
[  314.246007][ T7126]  slab_pre_alloc_hook+0x53/0xc0
[  314.250933][ T7126]  kmem_cache_alloc_node+0x49/0x2c0
[  314.256124][ T7126]  ? dup_task_struct+0x57/0xb60
[  314.260953][ T7126]  ? _raw_spin_lock_irq+0xdb/0x110
[  314.266051][ T7126]  dup_task_struct+0x57/0xb60
[  314.270709][ T7126]  ? _raw_spin_unlock_irq+0x1f/0x40
[  314.275885][ T7126]  ? lockdep_hardirqs_on+0x94/0x130
[  314.281059][ T7126]  copy_process+0x5eb/0x3ef0
[  314.285656][ T7126]  ? rcu_lock_release+0x5/0x20
[  314.290411][ T7126]  ? pidfd_show_fdinfo+0x2e0/0x2e0
[  314.295497][ T7126]  ? __lock_acquire+0x1295/0x1ff0
[  314.300513][ T7126]  kernel_clone+0x210/0x960
[  314.305019][ T7126]  ? create_io_thread+0x1e0/0x1e0
[  314.310042][ T7126]  ? read_lock_is_recursive+0x10/0x10
[  314.315392][ T7126]  ? __context_tracking_exit+0x4c/0x80
[  314.320830][ T7126]  __x64_sys_clone+0x23f/0x290
[  314.325573][ T7126]  ? __do_sys_vfork+0x130/0x130
[  314.330400][ T7126]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  314.336360][ T7126]  ? syscall_enter_from_user_mode+0x2e/0x240
[  314.342420][ T7126]  ? lockdep_hardirqs_on+0x94/0x130
[  314.348131][ T7126]  ? syscall_enter_from_user_mode+0x2e/0x240
[  314.356223][ T7126]  do_syscall_64+0x3b/0xb0
[  314.360763][ T7126]  ? clear_bhb_loop+0x15/0x70
[  314.365890][ T7126]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  314.371927][ T7126] RIP: 0033:0x7feea4fd2ef9
[  314.376344][ T7126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  314.396336][ T7126] RSP: 002b:00007feea344bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  314.404736][ T7126] RAX: ffffffffffffffda RBX: 00007feea518bf80 RCX: 00007feea4fd2ef9
[  314.412724][ T7126] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  314.420672][ T7126] RBP: 00007feea344c090 R08: 0000000000000000 R09: 0000000000000000
[  314.428638][ T7126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  314.436588][ T7126] R13: 0000000000000000 R14: 00007feea518bf80 R15: 00007ffdc71f0348
[  314.444545][ T7126]  </TASK>
[  314.447554][    C1] vkms_vblank_simulate: vblank timer overrun
[  314.636709][ T7132] loop3: detected capacity change from 0 to 4096
[  314.649399][ T4782] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  314.657776][ T4782] usb 5-1: config 179 has no interface number 0
[  314.664288][ T4782] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  314.675510][ T4782] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  314.686942][ T4783] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  314.694618][ T4782] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 99, changing to 10
[  314.706286][ T4782] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  314.717834][ T4782] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  314.805024][ T4782] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  314.839592][ T7132] ntfs3: Unknown parameter 'ÿÿÿÿÿÿÿÿ'
[  315.089255][ T4783] usb 3-1: Using ep0 maxpacket: 16
[  315.206177][ T4782] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  315.218562][ T4783] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  315.253832][ T7132] loop3: detected capacity change from 0 to 64
[  315.325332][ T4782] usb 5-1: can't set config #179, error -71
[  315.334410][ T4782] usb 5-1: USB disconnect, device number 13
[  315.467899][ T4783] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  315.493489][ T4783] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  315.525440][ T4783] usb 3-1: Product: syz
[  315.580810][ T4783] usb 3-1: Manufacturer: syz
[  315.581884][ T7139] loop1: detected capacity change from 0 to 4096
[  315.585537][ T4783] usb 3-1: SerialNumber: syz
[  315.612413][ T4783] usb 3-1: config 0 descriptor??
[  315.661108][ T4783] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  315.670629][ T4783] em28xx 3-1:0.0: DVB interface 0 found: bulk
[  315.770615][ T7139] Cannot load nls iso9859d
[  316.882140][ T4783] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[  317.134496][ T1389] ieee802154 phy0 wpan0: encryption failed: -22
[  317.181020][ T1389] ieee802154 phy1 wpan1: encryption failed: -22
[  319.784816][ T7155] loop0: detected capacity change from 0 to 128
[  319.821162][ T4783] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  319.839188][ T4783] em28xx 3-1:0.0: board has no eeprom
[  319.856225][ T7156] loop3: detected capacity change from 0 to 2048
[  319.904311][ T7155] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  319.931859][ T7155] ext4 filesystem being mounted at /101/mnt supports timestamps until 2038 (0x7fffffff)
[  320.009135][ T3710] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  320.117332][ T4783] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  320.135350][ T4783] em28xx 3-1:0.0: dvb set to bulk mode.
[  320.162609][   T21] em28xx 3-1:0.0: Binding DVB extension
[  320.174557][ T4783] usb 3-1: USB disconnect, device number 22
[  320.409944][ T3710] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  320.441254][ T3710] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  320.500001][ T3710] usb 5-1: New USB device found, idVendor=056a, idProduct=00d1, bcdDevice= 0.00
[  320.714747][ T4783] em28xx 3-1:0.0: Disconnecting em28xx
[  320.750241][ T3710] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  320.751656][   T21] em28xx 3-1:0.0: Registering input extension
[  320.779193][ T4786] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  320.799486][ T4783] em28xx 3-1:0.0: Closing input extension
[  320.810263][ T7165] loop2: detected capacity change from 0 to 2048
[  320.847981][ T4783] em28xx 3-1:0.0: Freeing device
[  320.916593][ T3710] usb 5-1: config 0 descriptor??
[  321.359389][   T13] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  321.619270][   T13] usb 4-1: Using ep0 maxpacket: 8
[  321.690583][ T7175] FAULT_INJECTION: forcing a failure.
[  321.690583][ T7175] name failslab, interval 1, probability 0, space 0, times 0
[  321.709134][ T4786] usb 2-1: Using ep0 maxpacket: 16
[  321.755221][   T13] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  321.759299][ T7175] CPU: 1 PID: 7175 Comm: syz.2.805 Not tainted 5.15.166-syzkaller #0
[  321.771524][ T7175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  321.781578][ T7175] Call Trace:
[  321.784854][ T7175]  <TASK>
[  321.787781][ T7175]  dump_stack_lvl+0x1e3/0x2d0
[  321.792396][   T13] usb 4-1: config 179 has no interface number 0
[  321.792458][ T7175]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  321.798996][   T13] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  321.804282][ T7175]  ? panic+0x860/0x860
[  321.804308][ T7175]  ? __might_sleep+0xc0/0xc0
[  321.804334][ T7175]  should_fail+0x38a/0x4c0
[  321.804358][ T7175]  should_failslab+0x5/0x20
[  321.832814][ T7175]  slab_pre_alloc_hook+0x53/0xc0
[  321.837763][ T7175]  __kmalloc+0x6e/0x300
[  321.841918][ T7175]  ? tomoyo_realpath_from_path+0xd8/0x5e0
[  321.847640][ T7175]  tomoyo_realpath_from_path+0xd8/0x5e0
[  321.850523][   T13] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  321.853190][ T7175]  tomoyo_path_number_perm+0x225/0x810
[  321.869880][ T7175]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  321.875377][ T7175]  ? __fget_files+0x413/0x480
[  321.876623][   T13] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 99, changing to 10
[  321.880060][ T7175]  security_file_ioctl+0x6d/0xa0
[  321.880088][ T7175]  __se_sys_ioctl+0x47/0x160
[  321.900970][ T7175]  do_syscall_64+0x3b/0xb0
[  321.905387][ T7175]  ? clear_bhb_loop+0x15/0x70
[  321.910067][ T7175]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  321.915963][ T7175] RIP: 0033:0x7ff66d1bbef9
[  321.920374][ T7175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  321.940064][ T7175] RSP: 002b:00007ff66b635038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  321.948483][ T7175] RAX: ffffffffffffffda RBX: 00007ff66d374f80 RCX: 00007ff66d1bbef9
[  321.956452][ T7175] RDX: 0000000000000000 RSI: 00000000c0145401 RDI: 0000000000000003
[  321.964426][ T7175] RBP: 00007ff66b635090 R08: 0000000000000000 R09: 0000000000000000
[  321.967758][   T13] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  321.972391][ T7175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  321.972406][ T7175] R13: 0000000000000000 R14: 00007ff66d374f80 R15: 00007fff473cc9f8
[  321.972431][ T7175]  </TASK>
[  321.972469][    C1] vkms_vblank_simulate: vblank timer overrun
[  321.996807][   T13] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  322.001408][    C1] vkms_vblank_simulate: vblank timer overrun
[  322.017736][ T7184] loop0: detected capacity change from 0 to 1024
[  322.044957][   T13] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  322.057488][   T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  322.059995][ T7175] ERROR: Out of memory at tomoyo_realpath_from_path.
[  322.099419][ T7170] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  322.146062][ T3710] usbhid 5-1:0.0: can't add hid device: -71
[  322.165429][ T3710] usbhid: probe of 5-1:0.0 failed with error -71
[  322.182065][ T7184] netlink: 244 bytes leftover after parsing attributes in process `syz.0.806'.
[  323.429977][ T3710] usb 5-1: USB disconnect, device number 14
[  323.491609][ T7195] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  323.519258][ T4786] usb 2-1: New USB device found, idVendor=6603, idProduct=0011, bcdDevice=32.4f
[  323.555956][ T4786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  323.617460][ T4786] usb 2-1: config 0 descriptor??
[  323.669609][ T4786] usb 2-1: can't set config #0, error -71
[  323.703895][ T4786] usb 2-1: USB disconnect, device number 12
[  323.884297][ T4783] usb 4-1: USB disconnect, device number 16
[  323.909165][    C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  323.991431][ T7208] loop2: detected capacity change from 0 to 128
[  324.075767][ T3710] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  324.131952][ T7208] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  324.148070][ T7196] loop1: detected capacity change from 0 to 32768
[  324.165513][ T7208] ext4 filesystem being mounted at /121/mnt supports timestamps until 2038 (0x7fffffff)
[  324.349753][ T4783] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  324.377053][ T7196] XFS (loop1): DAX enabled. Warning: EXPERIMENTAL, use at your own risk
[  324.386585][ T7196] XFS (loop1): DAX unsupported by block device. Turning off DAX.
[  324.396996][ T7196] XFS (loop1): DAX and reflink cannot be used together!
[  324.759772][ T4783] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  324.839258][ T4783] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  324.864776][ T4783] usb 4-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00
[  324.886565][ T4783] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  324.912439][ T4783] usb 4-1: config 0 descriptor??
[  325.029308][ T3710] usb 5-1: Using ep0 maxpacket: 16
[  325.102463][ T7224] loop2: detected capacity change from 0 to 256
[  325.124645][ T7222] loop0: detected capacity change from 0 to 2048
[  325.160009][ T3710] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  325.185237][ T7224] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xadbf5ead, utbl_chksum : 0xe619d30d)
[  325.253376][ T7224] FAULT_INJECTION: forcing a failure.
[  325.253376][ T7224] name failslab, interval 1, probability 0, space 0, times 0
[  325.328909][ T7224] CPU: 0 PID: 7224 Comm: syz.2.816 Not tainted 5.15.166-syzkaller #0
[  325.337895][ T7224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  325.348621][ T7224] Call Trace:
[  325.351902][ T7224]  <TASK>
[  325.354831][ T7224]  dump_stack_lvl+0x1e3/0x2d0
[  325.359507][ T7224]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  325.365412][ T7224]  ? panic+0x860/0x860
[  325.369509][ T7224]  should_fail+0x38a/0x4c0
[  325.374045][ T7224]  should_failslab+0x5/0x20
[  325.378824][ T7224]  slab_pre_alloc_hook+0x53/0xc0
[  325.383764][ T7224]  ? getname_flags+0xb8/0x4e0
[  325.388433][ T7224]  kmem_cache_alloc+0x3f/0x280
[  325.393180][ T7224]  ? vtime_user_exit+0x2d1/0x400
[  325.398114][ T7224]  getname_flags+0xb8/0x4e0
[  325.402611][ T7224]  ? syscall_enter_from_user_mode+0x2e/0x240
[  325.408578][ T7224]  ? lockdep_hardirqs_on+0x94/0x130
[  325.413762][ T7224]  __x64_sys_mkdir+0x5b/0x80
[  325.418349][ T7224]  do_syscall_64+0x3b/0xb0
[  325.422757][ T7224]  ? clear_bhb_loop+0x15/0x70
[  325.427416][ T7224]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  325.433292][ T7224] RIP: 0033:0x7ff66d1bbef9
[  325.437697][ T7224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  325.457282][ T7224] RSP: 002b:00007ff66b635038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[  325.465692][ T7224] RAX: ffffffffffffffda RBX: 00007ff66d374f80 RCX: 00007ff66d1bbef9
[  325.473651][ T7224] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000300
[  325.481610][ T7224] RBP: 00007ff66b635090 R08: 0000000000000000 R09: 0000000000000000
[  325.489570][ T7224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  325.497525][ T7224] R13: 0000000000000000 R14: 00007ff66d374f80 R15: 00007fff473cc9f8
[  325.505492][ T7224]  </TASK>
[  325.515235][ T7196] loop1: detected capacity change from 0 to 128
[  325.526913][ T3710] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  325.541349][ T3710] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  325.549948][ T3710] usb 5-1: Product: syz
[  325.554115][ T3710] usb 5-1: Manufacturer: syz
[  325.558694][ T3710] usb 5-1: SerialNumber: syz
[  326.274764][ T3710] usb 5-1: config 0 descriptor??
[  326.286789][ T7196] VFS: Found a Xenix FS (block size = 512) on device loop1
[  326.312148][ T7228] loop2: detected capacity change from 0 to 512
[  326.334437][ T7196] sysv_free_block: trying to free block not in datazone
[  326.342192][ T3710] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  326.359939][ T7196] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  326.366669][ T3710] em28xx 5-1:0.0: DVB interface 0 found: bulk
[  326.505438][ T7237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.819'.
[  327.621460][ T3710] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[  328.529232][ T3710] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  328.559374][ T4783] usbhid 4-1:0.0: can't add hid device: -71
[  328.574112][ T4783] usbhid: probe of 4-1:0.0 failed with error -71
[  328.580157][ T3710] em28xx 5-1:0.0: board has no eeprom
[  328.674692][ T7249] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  329.099306][ T3710] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  329.107419][ T3710] em28xx 5-1:0.0: dvb set to bulk mode.
[  329.144634][ T3714] em28xx 5-1:0.0: Binding DVB extension
[  329.387656][ T3710] usb 5-1: USB disconnect, device number 15
[  329.423182][ T4782] Bluetooth: hci5: command 0x0406 tx timeout
[  329.542408][ T3710] em28xx 5-1:0.0: Disconnecting em28xx
[  329.543691][ T4783] usb 4-1: USB disconnect, device number 17
[  329.556121][ T7248] loop3: detected capacity change from 0 to 4096
[  329.929281][ T4782] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  329.949941][ T7259] loop1: detected capacity change from 0 to 128
[  330.323507][ T7261] loop0: detected capacity change from 0 to 1024
[  330.330154][ T4782] usb 3-1: Using ep0 maxpacket: 8
[  330.332106][ T3714] em28xx 5-1:0.0: Registering input extension
[  330.348813][ T7259] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  330.362709][ T3710] em28xx 5-1:0.0: Closing input extension
[  330.369780][ T7259] ext4 filesystem being mounted at /101/mnt supports timestamps until 2038 (0x7fffffff)
[  330.371519][ T7248] NILFS (loop3): invalid segment: Checksum error in segment payload
[  330.388573][ T7261] EXT4-fs (loop0): Ignoring removed orlov option
[  330.389215][ T7248] NILFS (loop3): trying rollback from an earlier position
[  330.395153][ T7261] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option
[  330.410178][ T7261] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  330.424910][ T3710] em28xx 5-1:0.0: Freeing device
[  330.525112][ T4782] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[  330.537141][ T4782] usb 3-1: config 179 has no interface number 0
[  330.564145][ T7261] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84fc018, mo2=0002]
[  330.572836][ T7261] System zones: 0-1, 3-36
[  330.579356][ T7261] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,orlov,nomblk_io_submit,noauto_da_alloc,debug_want_extra_isize=0x0000000000000006,dioread_nolock,usrquota,usrquota,,errors=continue. Quota mode: writeback.
[  330.779199][   T25] audit: type=1804 audit(1725754489.534:36): pid=7261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.827" name="/newroot/108/file0/bus" dev="loop0" ino=18 res=1 errno=0
[  330.934466][ T4782] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  330.983887][ T4782] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  330.985942][ T7248] NILFS (loop3): recovery complete
[  331.038158][ T4782] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 99, changing to 10
[  331.069951][ T4782] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  331.098367][ T4782] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  331.173671][ T7273] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  331.193986][ T4782] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  331.206740][ T4782] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  331.249890][ T7257] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  331.467262][ T7284] FAULT_INJECTION: forcing a failure.
[  331.467262][ T7284] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  331.481002][ T7284] CPU: 0 PID: 7284 Comm: syz.3.832 Not tainted 5.15.166-syzkaller #0
[  331.489084][ T7284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  331.499143][ T7284] Call Trace:
[  331.502424][ T7284]  <TASK>
[  331.505354][ T7284]  dump_stack_lvl+0x1e3/0x2d0
[  331.510305][ T7284]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  331.515956][ T7284]  ? panic+0x860/0x860
[  331.520129][ T7284]  ? validate_chain+0x112/0x5930
[  331.525072][ T7284]  ? validate_chain+0x112/0x5930
[  331.530034][ T7284]  should_fail+0x38a/0x4c0
[  331.534473][ T7284]  _copy_from_user+0x2d/0x170
[  331.539156][ T7284]  __copy_msghdr_from_user+0xaf/0x7c0
[  331.544632][ T7284]  ? __ia32_sys_shutdown+0x60/0x60
[  331.550289][ T7284]  ___sys_sendmsg+0x166/0x2e0
[  331.555161][ T7284]  ? __sys_sendmsg+0x260/0x260
[  331.559985][ T7284]  ? __fdget+0x191/0x220
[  331.564282][ T7284]  __se_sys_sendmsg+0x19a/0x260
[  331.569495][ T7284]  ? __x64_sys_sendmsg+0x80/0x80
[  331.574443][ T7284]  ? syscall_enter_from_user_mode+0x2e/0x240
[  331.580423][ T7284]  ? lockdep_hardirqs_on+0x94/0x130
[  331.585623][ T7284]  ? syscall_enter_from_user_mode+0x2e/0x240
[  331.591604][ T7284]  do_syscall_64+0x3b/0xb0
[  331.596017][ T7284]  ? clear_bhb_loop+0x15/0x70
[  331.600688][ T7284]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  331.606584][ T7284] RIP: 0033:0x7f1386196ef9
[  331.610999][ T7284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  331.619449][ T4786] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  331.630600][ T7284] RSP: 002b:00007f1384610038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  331.630628][ T7284] RAX: ffffffffffffffda RBX: 00007f138634ff80 RCX: 00007f1386196ef9
[  331.630640][ T7284] RDX: 0000000000000000 RSI: 00000000200005c0 RDI: 0000000000000005
[  331.630651][ T7284] RBP: 00007f1384610090 R08: 0000000000000000 R09: 0000000000000000
[  331.630663][ T7284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  331.630674][ T7284] R13: 0000000000000000 R14: 00007f138634ff80 R15: 00007ffe3456aa18
[  331.630704][ T7284]  </TASK>
[  332.059517][ T4786] usb 5-1: Using ep0 maxpacket: 8
[  332.100506][ T4786] usb 5-1: too many configurations: 52, using maximum allowed: 8
[  332.250417][ T4786] usb 5-1: unable to read config index 0 descriptor/start: -61
[  332.272214][ T4786] usb 5-1: can't read configurations, error -61
[  332.498741][ T7282] loop0: detected capacity change from 0 to 32768
[  332.509463][ T4786] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  332.562008][ T7298] loop3: detected capacity change from 0 to 128
[  332.646330][ T7298] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  332.676559][ T7298] ext4 filesystem being mounted at /71/mnt supports timestamps until 2038 (0x7fffffff)
[  332.689520][ T7282] XFS (loop0): Mounting V5 Filesystem
[  332.749323][ T4786] usb 5-1: Using ep0 maxpacket: 8
[  332.754494][ T3714] usb 3-1: USB disconnect, device number 23
[  332.762394][ T7298] netlink: 32 bytes leftover after parsing attributes in process `syz.3.836'.
[  332.771371][    C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  332.799495][ T4786] usb 5-1: too many configurations: 52, using maximum allowed: 8
[  332.959320][ T4786] usb 5-1: unable to read config index 0 descriptor/start: -61
[  332.971192][ T4786] usb 5-1: can't read configurations, error -61
[  332.982442][ T4786] usb usb5-port1: attempt power cycle
[  333.004149][ T7282] XFS (loop0): Ending clean mount
[  333.049413][ T7282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.831'.
[  333.065491][ T7282] device macsec0 entered promiscuous mode
[  333.120830][ T5105] XFS (loop0): Unmounting Filesystem
[  333.192841][   T13] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  333.357776][ T7319] loop0: detected capacity change from 0 to 128
[  333.382767][ T7319] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  333.393610][ T7319] ext4 filesystem being mounted at /110/mnt supports timestamps until 2038 (0x7fffffff)
[  333.403663][ T4786] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  333.499419][ T4786] usb 5-1: Using ep0 maxpacket: 8
[  333.539546][ T4786] usb 5-1: too many configurations: 52, using maximum allowed: 8
[  333.562650][   T13] usb 4-1: Using ep0 maxpacket: 16
[  333.670114][ T4786] usb 5-1: unable to read config index 0 descriptor/start: -61
[  333.736616][ T4786] usb 5-1: can't read configurations, error -61
[  334.049352][ T4786] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  334.170291][ T4786] usb 5-1: Using ep0 maxpacket: 8
[  334.249964][ T4786] usb 5-1: too many configurations: 52, using maximum allowed: 8
[  334.309360][   T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  334.338701][   T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  334.349331][ T4786] usb 5-1: unable to read config index 0 descriptor/start: -71
[  334.369497][   T13] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[  334.399291][ T4786] usb 5-1: can't read configurations, error -71
[  334.406574][   T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  334.416008][ T4786] usb usb5-port1: unable to enumerate USB device
[  334.440765][   T13] usb 4-1: config 0 descriptor??
[  335.089320][ T7341] FAULT_INJECTION: forcing a failure.
[  335.089320][ T7341] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  335.098762][ T7342] loop0: detected capacity change from 0 to 1024
[  335.117549][ T7341] CPU: 0 PID: 7341 Comm: syz.4.845 Not tainted 5.15.166-syzkaller #0
[  335.125658][ T7341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  335.135705][ T7341] Call Trace:
[  335.140261][ T7341]  <TASK>
[  335.146567][ T7341]  dump_stack_lvl+0x1e3/0x2d0
[  335.153212][ T7341]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  335.160451][ T7341]  ? panic+0x860/0x860
[  335.166656][ T7341]  ? __lock_acquire+0x1295/0x1ff0
[  335.171911][ T7341]  should_fail+0x38a/0x4c0
[  335.176327][ T7341]  _copy_from_user+0x2d/0x170
[  335.180988][ T7341]  ___sys_recvmsg+0x150/0x690
[  335.185655][ T7341]  ? __sys_recvmsg+0x260/0x260
[  335.190422][ T7341]  ? __fdget+0x191/0x220
[  335.194658][ T7341]  __x64_sys_recvmsg+0x1dc/0x2b0
[  335.199588][ T7341]  ? ___sys_recvmsg+0x690/0x690
[  335.204430][ T7341]  ? syscall_enter_from_user_mode+0x2e/0x240
[  335.210395][ T7341]  ? lockdep_hardirqs_on+0x94/0x130
[  335.215582][ T7341]  ? syscall_enter_from_user_mode+0x2e/0x240
[  335.221549][ T7341]  do_syscall_64+0x3b/0xb0
[  335.225946][ T7341]  ? clear_bhb_loop+0x15/0x70
[  335.230607][ T7341]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  335.236482][ T7341] RIP: 0033:0x7f1559efcef9
[  335.240879][ T7341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  335.260470][ T7341] RSP: 002b:00007f1558376038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  335.268887][ T7341] RAX: ffffffffffffffda RBX: 00007f155a0b5f80 RCX: 00007f1559efcef9
[  335.276852][ T7341] RDX: 00000000000000f2 RSI: 0000000020000e80 RDI: 0000000000000003
[  335.284803][ T7341] RBP: 00007f1558376090 R08: 0000000000000000 R09: 0000000000000000
[  335.292754][ T7341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  335.300705][ T7341] R13: 0000000000000000 R14: 00007f155a0b5f80 R15: 00007fff7d059378
[  335.308670][ T7341]  </TASK>
[  335.334281][ T7342] EXT4-fs (loop0): Ignoring removed orlov option
[  335.340805][ T7342] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option
[  335.348131][ T7342] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  335.403741][ T7342] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84fc018, mo2=0002]
[  335.412030][ T7342] System zones: 0-1, 3-36
[  335.420269][ T7342] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,orlov,nomblk_io_submit,noauto_da_alloc,debug_want_extra_isize=0x0000000000000006,dioread_nolock,usrquota,usrquota,,errors=continue. Quota mode: writeback.
[  335.473637][   T25] audit: type=1804 audit(1725754494.304:37): pid=7342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.841" name="/newroot/111/file0/bus" dev="loop0" ino=18 res=1 errno=0
[  335.599216][   T13] usbhid 4-1:0.0: can't add hid device: -71
[  335.605254][   T13] usbhid: probe of 4-1:0.0 failed with error -71
[  335.617816][   T13] usb 4-1: USB disconnect, device number 18
[  335.989187][ T4786] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  336.995384][ T7350] loop1: detected capacity change from 0 to 512
[  337.028813][ T7362] loop3: detected capacity change from 0 to 1024
[  337.058731][ T7350] EXT4-fs (loop1): Ignoring removed orlov option
[  337.068510][ T7350] EXT4-fs (loop1): error: journal path ./cgroup.net/devices.allow is not a block device
[  337.104141][ T7362] netlink: 244 bytes leftover after parsing attributes in process `syz.3.850'.
[  337.249156][ T4786] usb 3-1: Using ep0 maxpacket: 8
[  337.420036][ T4786] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[  337.601784][ T4786] usb 3-1: config 179 has no interface number 0
[  337.802823][ T4786] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  337.901304][ T7369] loop0: detected capacity change from 0 to 128
[  337.906641][ T4786] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  337.939211][ T4786] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 99, changing to 10
[  337.961058][ T4786] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  337.989439][ T4786] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  338.003778][ T7369] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  338.013012][ T4786] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  338.020909][ T7369] ext4 filesystem being mounted at /112/mnt supports timestamps until 2038 (0x7fffffff)
[  338.033769][ T4786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  338.079545][ T7359] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  338.912342][ T7376] netlink: 160 bytes leftover after parsing attributes in process `syz.1.853'.
[  338.979461][ T7376] netlink: 76 bytes leftover after parsing attributes in process `syz.1.853'.
[  339.158733][ T7383] loop0: detected capacity change from 0 to 1024
[  339.233937][ T7383] EXT4-fs (loop0): Ignoring removed orlov option
[  339.240486][ T7383] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option
[  339.247852][ T7383] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  339.251604][ T7385] loop1: detected capacity change from 0 to 4096
[  339.287345][ T7383] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84fc018, mo2=0002]
[  339.295838][ T7383] System zones: 0-1, 3-36
[  339.305592][ T7383] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,orlov,nomblk_io_submit,noauto_da_alloc,debug_want_extra_isize=0x0000000000000006,dioread_nolock,usrquota,usrquota,,errors=continue. Quota mode: writeback.
[  339.342799][ T7385] ntfs3: Unknown parameter 'ÿÿÿÿÿÿÿÿ'
[  339.451761][ T3714] usb 3-1: USB disconnect, device number 24
[  339.469146][    C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  340.854287][ T7396] loop1: detected capacity change from 0 to 512
[  340.936930][ T7396] EXT4-fs (loop1): Test dummy encryption mode enabled
[  341.029709][ T7396] EXT4-fs error (device loop1): ext4_fill_super:4840: inode #2: comm syz.1.860: casefold flag without casefold feature
[  341.084352][ T7396] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended
[  341.117870][ T7396] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,test_dummy_encryption,,errors=continue. Quota mode: none.
[  341.297157][ T7406] loop2: detected capacity change from 0 to 512
[  341.324605][ T7401] loop0: detected capacity change from 0 to 32768
[  341.328233][ T7404] loop4: detected capacity change from 0 to 4096
[  341.358222][ T7406] EXT4-fs (loop2): Test dummy encryption mode enabled
[  341.372100][ T7406] EXT4-fs error (device loop2): ext4_fill_super:4840: inode #2: comm syz.2.863: casefold flag without casefold feature
[  341.385922][ T7404] ntfs3: Unknown parameter 'ÿÿÿÿÿÿÿÿ'
[  341.394939][ T7396] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  341.395779][ T7406] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended
[  341.415087][ T7406] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv0,test_dummy_encryption,,errors=continue. Quota mode: none.
[  341.494872][ T7401] XFS (loop0): Mounting V5 Filesystem
[  341.496969][ T7404] loop4: detected capacity change from 0 to 64
[  341.516370][ T7396] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[  341.681858][ T7401] XFS (loop0): Ending clean mount
[  341.704927][ T7401] XFS (loop0): Quotacheck needed: Please wait.
[  341.907892][ T7401] XFS (loop0): Quotacheck: Done.
[  341.978771][ T7401] FAULT_INJECTION: forcing a failure.
[  341.978771][ T7401] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  342.242911][ T7401] CPU: 0 PID: 7401 Comm: syz.0.859 Not tainted 5.15.166-syzkaller #0
[  342.251016][ T7401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  342.261072][ T7401] Call Trace:
[  342.264351][ T7401]  <TASK>
[  342.267280][ T7401]  dump_stack_lvl+0x1e3/0x2d0
[  342.271964][ T7401]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  342.277596][ T7401]  ? panic+0x860/0x860
[  342.281677][ T7401]  ? snprintf+0xd6/0x120
[  342.285926][ T7401]  should_fail+0x38a/0x4c0
[  342.290347][ T7401]  _copy_to_user+0x2d/0x130
[  342.294864][ T7401]  simple_read_from_buffer+0xc6/0x150
[  342.300248][ T7401]  proc_fail_nth_read+0x1a3/0x210
[  342.305276][ T7401]  ? proc_fault_inject_write+0x390/0x390
[  342.310909][ T7401]  ? fsnotify_perm+0x442/0x590
[  342.315669][ T7401]  ? proc_fault_inject_write+0x390/0x390
[  342.321296][ T7401]  vfs_read+0x2fc/0xe10
[  342.325457][ T7401]  ? kernel_read+0x1f0/0x1f0
[  342.330051][ T7401]  ? __fget_files+0x413/0x480
[  342.334733][ T7401]  ? mutex_lock_nested+0x17/0x20
[  342.339664][ T7401]  ? __fdget_pos+0x2cb/0x380
[  342.344246][ T7401]  ? ksys_read+0x77/0x2c0
[  342.348574][ T7401]  ksys_read+0x1a2/0x2c0
[  342.352812][ T7401]  ? print_irqtrace_events+0x210/0x210
[  342.358274][ T7401]  ? vfs_write+0xe50/0xe50
[  342.362694][ T7401]  ? syscall_enter_from_user_mode+0x2e/0x240
[  342.368675][ T7401]  ? lockdep_hardirqs_on+0x94/0x130
[  342.373875][ T7401]  ? syscall_enter_from_user_mode+0x2e/0x240
[  342.379859][ T7401]  do_syscall_64+0x3b/0xb0
[  342.384276][ T7401]  ? clear_bhb_loop+0x15/0x70
[  342.388941][ T7401]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  342.394821][ T7401] RIP: 0033:0x7feea4fd193c
[  342.399235][ T7401] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48
[  342.418835][ T7401] RSP: 002b:00007feea344c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  342.427227][ T7401] RAX: ffffffffffffffda RBX: 00007feea518bf80 RCX: 00007feea4fd193c
[  342.435181][ T7401] RDX: 000000000000000f RSI: 00007feea344c0a0 RDI: 0000000000000007
[  342.443138][ T7401] RBP: 00007feea344c090 R08: 0000000000000000 R09: 0000000000000000
[  342.451107][ T7401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  342.459071][ T7401] R13: 0000000000000000 R14: 00007feea518bf80 R15: 00007ffdc71f0348
[  342.467042][ T7401]  </TASK>
[  342.513002][ T5105] XFS (loop0): Unmounting Filesystem
[  343.119196][   T13] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  344.175444][ T7446] loop4: detected capacity change from 0 to 1024
[  344.244451][ T7448] loop2: detected capacity change from 0 to 4096
[  344.290181][ T7448] ntfs3: Unknown parameter 'ÿÿÿÿÿÿÿÿ'
[  344.298772][ T7446] EXT4-fs (loop4): Ignoring removed orlov option
[  344.305247][ T7446] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option
[  344.312964][ T7446] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  344.337771][ T7446] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84fc018, mo2=0002]
[  344.346128][ T7446] System zones: 0-1, 3-36
[  344.396540][ T7446] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,orlov,nomblk_io_submit,noauto_da_alloc,debug_want_extra_isize=0x0000000000000006,dioread_nolock,usrquota,usrquota,,errors=continue. Quota mode: writeback.
[  344.455477][   T13] usb 4-1: Using ep0 maxpacket: 8
[  344.495521][ T7448] loop2: detected capacity change from 0 to 64
[  344.568670][ T7452] loop0: detected capacity change from 0 to 1024
[  344.609355][   T13] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  344.617904][   T13] usb 4-1: config 179 has no interface number 0
[  344.628240][   T13] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  344.640699][   T13] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  344.652613][   T13] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 99, changing to 10
[  344.664382][   T13] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  344.676817][   T13] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  344.690296][   T13] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  344.699599][   T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  344.729686][ T7443] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  344.752022][ T7452] netlink: 244 bytes leftover after parsing attributes in process `syz.0.867'.
[  344.972661][ T7458] FAULT_INJECTION: forcing a failure.
[  344.972661][ T7458] name failslab, interval 1, probability 0, space 0, times 0
[  345.043839][ T7458] CPU: 0 PID: 7458 Comm: syz.2.872 Not tainted 5.15.166-syzkaller #0
[  345.055254][ T7458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  345.070979][ T7458] Call Trace:
[  345.075043][ T7458]  <TASK>
[  345.077969][ T7458]  dump_stack_lvl+0x1e3/0x2d0
[  345.082654][ T7458]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  345.088286][ T7458]  ? panic+0x860/0x860
[  345.092356][ T7458]  ? __might_sleep+0xc0/0xc0
[  345.096951][ T7458]  should_fail+0x38a/0x4c0
[  345.101373][ T7458]  should_failslab+0x5/0x20
[  345.105875][ T7458]  slab_pre_alloc_hook+0x53/0xc0
[  345.110820][ T7458]  __kmalloc+0x6e/0x300
[  345.114971][ T7458]  ? tomoyo_realpath_from_path+0xd8/0x5e0
[  345.120688][ T7458]  tomoyo_realpath_from_path+0xd8/0x5e0
[  345.126244][ T7458]  tomoyo_path_number_perm+0x225/0x810
[  345.131809][ T7458]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  345.137496][ T7458]  ? __fget_files+0x413/0x480
[  345.142527][ T7458]  security_file_ioctl+0x6d/0xa0
[  345.148296][ T7458]  __se_sys_ioctl+0x47/0x160
[  345.156853][ T7458]  do_syscall_64+0x3b/0xb0
[  345.161663][ T7458]  ? clear_bhb_loop+0x15/0x70
[  345.166563][ T7458]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  345.172915][ T7458] RIP: 0033:0x7ff66d1bbef9
[  345.178330][ T7458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  345.202014][ T7458] RSP: 002b:00007ff66b614038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  345.210936][ T7458] RAX: ffffffffffffffda RBX: 00007ff66d375058 RCX: 00007ff66d1bbef9
[  345.219135][ T7458] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007
[  345.229682][ T7458] RBP: 00007ff66b614090 R08: 0000000000000000 R09: 0000000000000000
[  345.242890][ T7458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  345.252007][ T7458] R13: 0000000000000000 R14: 00007ff66d375058 R15: 00007fff473cc9f8
[  345.261576][ T7458]  </TASK>
[  345.303692][ T7458] ERROR: Out of memory at tomoyo_realpath_from_path.
[  345.342002][ T7458] kvm: emulating exchange as write
[  345.644364][ T7464] loop2: detected capacity change from 0 to 512
[  345.682189][ T7454] loop4: detected capacity change from 0 to 40427
[  345.718795][ T7464] EXT4-fs (loop2): first meta block group too large: 8 (group descriptor block count 1)
[  345.725663][ T7454] F2FS-fs (loop4): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[  345.766610][ T7454] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  345.808961][ T7454] F2FS-fs (loop4): invalid crc value
[  345.960316][ T7454] F2FS-fs (loop4): Found nat_bits in checkpoint
[  346.107893][ T7473] overlayfs: failed to resolve './file1': -2
[  346.282965][ T7467] loop0: detected capacity change from 0 to 1024
[  346.298335][ T7454] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  346.309015][ T7454] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  346.323619][ T7467] EXT4-fs (loop0): Ignoring removed orlov option
[  346.330103][ T7467] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option
[  346.337453][ T7467] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  346.376329][ T7467] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84fc018, mo2=0002]
[  346.385041][ T7467] System zones: 0-1, 3-36
[  346.411278][ T7467] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,orlov,nomblk_io_submit,noauto_da_alloc,debug_want_extra_isize=0x0000000000000006,dioread_nolock,usrquota,usrquota,,errors=continue. Quota mode: writeback.
[  346.425251][ T3710] usb 4-1: USB disconnect, device number 19
[  346.439126][    C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  346.447433][    C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  346.460079][   T25] audit: type=1800 audit(1725754505.284:38): pid=7478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.871" name="bus" dev="loop4" ino=10 res=0 errno=0
[  346.486137][ T7472] loop1: detected capacity change from 0 to 4096
[  346.573090][ T7472] ntfs3: Unknown parameter 'ÿÿÿÿÿÿÿÿ'
[  346.602543][   T25] audit: type=1804 audit(1725754505.294:39): pid=7467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.875" name="/newroot/116/file0/bus" dev="loop0" ino=18 res=1 errno=0
[  346.715243][ T4542] attempt to access beyond end of device
[  346.715243][ T4542] loop4: rw=2049, want=45104, limit=40427
[  346.754993][ T7472] loop1: detected capacity change from 0 to 64
[  346.929139][ T3616] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  346.941903][ T7486] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  347.009552][ T7487] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  347.036086][ T7487] CIFS mount error: No usable UNC path provided in device string!
[  347.036086][ T7487] 
[  347.123630][ T7487] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  347.349405][ T3616] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  347.365671][ T3616] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  347.385763][ T3616] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  347.447393][ T7498] FAULT_INJECTION: forcing a failure.
[  347.447393][ T7498] name failslab, interval 1, probability 0, space 0, times 0
[  347.456602][ T7494] loop1: detected capacity change from 0 to 1024
[  347.460582][ T7498] CPU: 0 PID: 7498 Comm: syz.0.883 Not tainted 5.15.166-syzkaller #0
[  347.469206][ T3616] usb 3-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00
[  347.474539][ T7498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  347.474556][ T7498] Call Trace:
[  347.496859][ T7498]  <TASK>
[  347.499815][ T7498]  dump_stack_lvl+0x1e3/0x2d0
[  347.504496][ T7498]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  347.510129][ T7498]  ? panic+0x860/0x860
[  347.514203][ T7498]  ? __might_sleep+0xc0/0xc0
[  347.518801][ T7498]  should_fail+0x38a/0x4c0
[  347.523227][ T7498]  should_failslab+0x5/0x20
[  347.527732][ T7498]  slab_pre_alloc_hook+0x53/0xc0
[  347.532675][ T7498]  __kmalloc+0x6e/0x300
[  347.536830][ T7498]  ? tomoyo_realpath_from_path+0xd8/0x5e0
[  347.542553][ T7498]  tomoyo_realpath_from_path+0xd8/0x5e0
[  347.548089][ T7498]  tomoyo_path_number_perm+0x225/0x810
[  347.553547][ T7498]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  347.559030][ T7498]  ? __fget_files+0x413/0x480
[  347.563702][ T7498]  security_file_ioctl+0x6d/0xa0
[  347.568633][ T7498]  __se_sys_ioctl+0x47/0x160
[  347.573221][ T7498]  do_syscall_64+0x3b/0xb0
[  347.577624][ T7498]  ? clear_bhb_loop+0x15/0x70
[  347.582284][ T7498]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  347.588158][ T7498] RIP: 0033:0x7feea4fd2ef9
[  347.592555][ T7498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  347.612142][ T7498] RSP: 002b:00007feea344c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  347.620541][ T7498] RAX: ffffffffffffffda RBX: 00007feea518bf80 RCX: 00007feea4fd2ef9
[  347.628495][ T7498] RDX: 0000000020000040 RSI: 00000000c018ae85 RDI: 0000000000000005
[  347.636455][ T7498] RBP: 00007feea344c090 R08: 0000000000000000 R09: 0000000000000000
[  347.644406][ T7498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  347.652357][ T7498] R13: 0000000000000000 R14: 00007feea518bf80 R15: 00007ffdc71f0348
[  347.660322][ T7498]  </TASK>
[  347.753206][ T7494] EXT4-fs (loop1): Ignoring removed orlov option
[  347.953743][ T7494] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option
[  348.005594][ T7481] loop3: detected capacity change from 0 to 40427
[  348.046812][ T7494] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  348.197243][ T7481] F2FS-fs (loop3): Unrecognized mount option "di
able_roll_forward" or missing value
[  348.282426][ T3616] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  348.287589][ T7494] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84fc018, mo2=0002]
[  348.305112][ T7494] System zones: 0-1, 3-36
[  348.315549][ T3616] usb 3-1: config 0 descriptor??
[  348.322048][ T7498] ERROR: Out of memory at tomoyo_realpath_from_path.
[  348.360020][ T7494] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,orlov,nomblk_io_submit,noauto_da_alloc,debug_want_extra_isize=0x0000000000000006,dioread_nolock,usrquota,usrquota,,errors=continue. Quota mode: writeback.
[  348.873210][ T7509] loop1: detected capacity change from 0 to 1024
[  348.962453][ T7509] netlink: 244 bytes leftover after parsing attributes in process `syz.1.885'.
[  349.051496][ T3616] hid-udraw 0003:20D6:CB17.0004: unknown main item tag 0x0
[  349.070619][ T3616] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:20D6:CB17.0004/input/input38
[  349.198993][ T7505] loop0: detected capacity change from 0 to 32768
[  349.210586][ T3616] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:20D6:CB17.0004/input/input39
[  349.286617][ T3616] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:20D6:CB17.0004/input/input40
[  349.315428][ T7483] loop2: detected capacity change from 0 to 2048
[  349.400047][ T3616] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:20D6:CB17.0004/input/input41
[  349.436199][ T7483] EXT4-fs (loop2): Mount option "nouser_xattr" will be removed by 3.5
[  349.436199][ T7483] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  349.436199][ T7483] 
[  349.436744][ T7505] XFS (loop0): Mounting V5 Filesystem
[  349.455809][ T7483] EXT4-fs (loop2): Unrecognized mount option "permit_directio" or missing value
[  349.471320][ T3616] hid-udraw 0003:20D6:CB17.0004: hidraw0: USB HID v0.00 Device [HID 20d6:cb17] on usb-dummy_hcd.2-1/input0
[  349.770416][ T4786] usb 3-1: USB disconnect, device number 25
[  349.782494][ T7505] XFS (loop0): Ending clean mount
[  349.798139][ T7505] XFS (loop0): Quotacheck needed: Please wait.
[  349.886601][ T7505] XFS (loop0): Quotacheck: Done.
[  350.202890][ T7524] loop3: detected capacity change from 0 to 64
[  350.221724][ T7525] fuse: Bad value for 'group_id'
[  351.179209][ T4783] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  351.482935][ T7547] loop2: detected capacity change from 0 to 1024
[  351.569305][ T3714] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  351.623854][ T7547] EXT4-fs (loop2): Ignoring removed orlov option
[  351.630317][ T7547] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option
[  351.637621][ T7547] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  351.662935][ T7547] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84fc018, mo2=0002]
[  351.671136][ T7547] System zones: 0-1, 3-36
[  351.679355][ T4783] usb 2-1: Using ep0 maxpacket: 8
[  351.791265][ T7547] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,orlov,nomblk_io_submit,noauto_da_alloc,debug_want_extra_isize=0x0000000000000006,dioread_nolock,usrquota,usrquota,,errors=continue. Quota mode: writeback.
[  351.819411][ T4783] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[  351.852645][ T4783] usb 2-1: config 179 has no interface number 0
[  351.861152][   T25] audit: type=1804 audit(1725754510.694:40): pid=7547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.891" name="/newroot/139/file0/bus" dev="loop2" ino=18 res=1 errno=0
[  351.882834][ T4783] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  351.893952][ T4783] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  351.912433][ T4783] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 99, changing to 10
[  351.931094][ T4783] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  351.942839][ T4783] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  351.962288][ T4783] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  351.971655][ T4783] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  351.988948][ T5105] XFS (loop0): Unmounting Filesystem
[  352.010367][ T7544] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  352.018615][ T3714] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[  352.259491][ T3714] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=16.64
[  352.284435][ T3714] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  352.321980][ T3714] usb 5-1: Product: syz
[  352.349448][ T3714] usb 5-1: Manufacturer: syz
[  352.387096][ T3714] usb 5-1: SerialNumber: syz
[  352.432695][ T7563] loop2: detected capacity change from 0 to 1024
[  352.434164][ T3714] usb 5-1: config 0 descriptor??
[  352.489912][ T7563] EXT4-fs (loop2): Ignoring removed orlov option
[  352.496333][ T7563] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option
[  352.503757][ T7563] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  352.512644][ T3714] usb 5-1: Found UVC 0.00 device syz (05ac:8501)
[  352.541751][ T7563] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84fc018, mo2=0002]
[  352.550180][ T7563] System zones: 0-1, 3-36
[  352.555787][ T7563] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,orlov,nomblk_io_submit,noauto_da_alloc,debug_want_extra_isize=0x0000000000000006,dioread_nolock,usrquota,usrquota,,errors=continue. Quota mode: writeback.
[  352.643000][ T3714] usb 5-1: No valid video chain found.
[  352.836221][ T7567] loop0: detected capacity change from 0 to 128
[  352.921498][ T7567] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  352.956410][ T7568] loop3: detected capacity change from 0 to 1024
[  352.979286][ T7567] ext4 filesystem being mounted at /120/mnt supports timestamps until 2038 (0x7fffffff)
[  353.110036][ T7568] netlink: 244 bytes leftover after parsing attributes in process `syz.3.897'.
[  353.203718][ T7571] loop2: detected capacity change from 0 to 512
[  353.683353][ T3616] usb 2-1: USB disconnect, device number 13
[  353.689388][    C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  353.689433][    C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  353.752451][ T7571] EXT4-fs (loop2): 1 orphan inode deleted
[  353.793949][ T7571] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,quota,errors=continue,sysvgroups,bsddf,dioread_lock,. Quota mode: writeback.
[  353.829223][ T7571] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038 (0x7fffffff)
[  354.075019][ T7578] validate_nla: 1 callbacks suppressed
[  354.075035][ T7578] netlink: 'syz.1.899': attribute type 1 has an invalid length.
[  354.114010][ T7580] loop0: detected capacity change from 0 to 512
[  354.152716][ T7578] netlink: 'syz.1.899': attribute type 2 has an invalid length.
[  354.223008][ T7578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.899'.
[  354.275945][ T7580] EXT4-fs (loop0): 1 orphan inode deleted
[  354.316663][ T7580] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,quota,errors=continue,sysvgroups,bsddf,dioread_lock,. Quota mode: writeback.
[  354.435912][ T7580] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038 (0x7fffffff)
[  354.509195][ T4783] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  354.712992][ T7587] loop0: detected capacity change from 0 to 512
[  354.844121][ T7587] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal
[  354.869754][ T4783] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  354.893710][ T4783] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  354.906356][ T4783] usb 3-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00
[  354.920818][ T3714] usb 5-1: USB disconnect, device number 20
[  354.922848][ T4783] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  354.977859][ T4783] usb 3-1: config 0 descriptor??
[  355.249039][ T7596] FAULT_INJECTION: forcing a failure.
[  355.249039][ T7596] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  355.361691][ T7596] CPU: 1 PID: 7596 Comm: syz.0.903 Not tainted 5.15.166-syzkaller #0
[  355.369794][ T7596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  355.379847][ T7596] Call Trace:
[  355.383117][ T7596]  <TASK>
[  355.386044][ T7596]  dump_stack_lvl+0x1e3/0x2d0
[  355.390726][ T7596]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  355.396351][ T7596]  ? panic+0x860/0x860
[  355.400415][ T7596]  ? __lock_acquire+0x1ff0/0x1ff0
[  355.405430][ T7596]  ? __local_bh_enable_ip+0x164/0x1f0
[  355.410804][ T7596]  ? local_bh_enable+0x5/0x20
[  355.415481][ T7596]  should_fail+0x38a/0x4c0
[  355.419906][ T7596]  copy_fpstate_to_sigframe+0x85d/0xb40
[  355.425457][ T7596]  ? fpregs_set+0x700/0x700
[  355.429959][ T7596]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  355.435934][ T7596]  ? print_irqtrace_events+0x210/0x210
[  355.441384][ T7596]  ? _raw_spin_lock_irq+0xdb/0x110
[  355.446504][ T7596]  ? fpu__alloc_mathframe+0x80/0x140
[  355.453354][ T7596]  get_sigframe+0x378/0x4b0
[  355.459911][ T7596]  ? _raw_spin_unlock_irq+0x1f/0x40
[  355.468455][ T7596]  ? lockdep_hardirqs_on+0x94/0x130
[  355.475083][ T7596]  ? restore_sigcontext+0x710/0x710
[  355.480303][ T7596]  arch_do_signal_or_restart+0x4ac/0x1890
[  355.486037][ T7596]  ? __sys_sendto+0x5d5/0x720
[  355.490722][ T7596]  ? __ia32_sys_getpeername+0x80/0x80
[  355.496104][ T7596]  ? get_sigframe_size+0x10/0x10
[  355.501056][ T7596]  ? print_irqtrace_events+0x210/0x210
[  355.506533][ T7596]  ? exit_to_user_mode_loop+0x39/0x130
[  355.511999][ T7596]  exit_to_user_mode_loop+0x97/0x130
[  355.517285][ T7596]  exit_to_user_mode_prepare+0xb1/0x140
[  355.522832][ T7596]  syscall_exit_to_user_mode+0x5d/0x240
[  355.528387][ T7596]  do_syscall_64+0x47/0xb0
[  355.532799][ T7596]  ? clear_bhb_loop+0x15/0x70
[  355.537474][ T7596]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  355.543367][ T7596] RIP: 0033:0x7feea4fd2ef7
[  355.547782][ T7596] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89
[  355.567468][ T7596] RSP: 002b:00007feea342b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  355.575888][ T7596] RAX: 000000000000002c RBX: 00007feea518c058 RCX: 00007feea4fd2ef9
[  355.583860][ T7596] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  355.591828][ T7596] RBP: 00007feea342b090 R08: 0000000000000000 R09: 0000000000000000
[  355.599794][ T7596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  355.607758][ T7596] R13: 0000000000000000 R14: 00007feea518c058 R15: 00007ffdc71f0348
[  355.615742][ T7596]  </TASK>
[  356.469187][   T21] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  356.559235][ T3714] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  356.829734][   T21] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  356.851257][   T21] usb 2-1: New USB device found, idVendor=0471, idProduct=0303, bcdDevice=e5.df
[  356.866307][   T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  356.979182][ T3714] usb 5-1: Using ep0 maxpacket: 16
[  357.120232][ T3714] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  357.170389][ T3714] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[  357.256238][ T3714] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  357.270985][ T3710] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  357.319114][    C0] raw-gadget.3 gadget: ignoring, device is not running
[  357.399786][ T3714] usb 5-1: config 0 interface 0 has no altsetting 0
[  357.458806][ T3714] usb 5-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00
[  357.480443][ T3710] usb 4-1: device descriptor read/64, error -32
[  357.516474][ T3714] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  357.549188][ T3714] usb 5-1: config 0 descriptor??
[  357.569831][   T21] usb 2-1: config 0 descriptor??
[  357.611250][   T21] pwc: Philips PCA646VC USB webcam detected.
[  357.778467][ T7626] loop2: detected capacity change from 0 to 1024
[  357.799220][ T3710] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  357.819383][   T21] pwc: send_video_command error -71
[  357.824682][   T21] pwc: Failed to set video mode CIF@30 fps; return code = -71
[  357.833164][   T21] Philips webcam: probe of 2-1:0.0 failed with error -71
[  357.840698][ T4783] usbhid 3-1:0.0: can't add hid device: -71
[  357.847663][ T7609] udc-core: couldn't find an available UDC or it's busy
[  357.854684][ T7609] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  357.863832][ T4783] usbhid: probe of 3-1:0.0 failed with error -71
[  357.879607][   T21] usb 2-1: USB disconnect, device number 14
[  358.061668][ T7626] netlink: 244 bytes leftover after parsing attributes in process `syz.2.913'.
[  358.099836][ T4783] usb 3-1: USB disconnect, device number 26
[  358.599272][ T3710] usb 4-1: Using ep0 maxpacket: 8
[  358.749485][ T3710] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  358.775595][ T3710] usb 4-1: config 179 has no interface number 0
[  358.782319][ T3714] usbhid 5-1:0.0: can't add hid device: -71
[  358.788292][ T3714] usbhid: probe of 5-1:0.0 failed with error -71
[  358.795758][ T3710] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  358.810842][ T3714] usb 5-1: USB disconnect, device number 21
[  358.819781][ T3710] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  358.836095][ T3710] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 99, changing to 10
[  358.852783][ T3710] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  358.877148][ T3710] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  358.891466][ T3710] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  358.900791][ T3710] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  358.929463][ T7620] raw-gadget.3 gadget: fail, usb_ep_enable returned -22
[  359.115154][ T7640] FAULT_INJECTION: forcing a failure.
[  359.115154][ T7640] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  359.163321][ T7640] CPU: 0 PID: 7640 Comm: syz.0.917 Not tainted 5.15.166-syzkaller #0
[  359.171425][ T7640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  359.181483][ T7640] Call Trace:
[  359.184764][ T7640]  <TASK>
[  359.187690][ T7640]  dump_stack_lvl+0x1e3/0x2d0
[  359.192375][ T7640]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  359.198011][ T7640]  ? panic+0x860/0x860
[  359.202089][ T7640]  should_fail+0x38a/0x4c0
[  359.206508][ T7640]  _copy_from_user+0x2d/0x170
[  359.211184][ T7640]  iovec_from_user+0x13b/0x390
[  359.215948][ T7640]  __import_iovec+0x72/0x4b0
[  359.220546][ T7640]  import_iovec+0xe6/0x120
[  359.224967][ T7640]  do_preadv+0x1d7/0x350
[  359.229210][ T7640]  ? do_writev+0x470/0x470
[  359.233634][ T7640]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  359.239613][ T7640]  ? vtime_user_exit+0x2d1/0x400
[  359.244555][ T7640]  ? syscall_enter_from_user_mode+0x2e/0x240
[  359.250532][ T7640]  ? lockdep_hardirqs_on+0x94/0x130
[  359.255741][ T7640]  ? syscall_enter_from_user_mode+0x2e/0x240
[  359.261734][ T7640]  do_syscall_64+0x3b/0xb0
[  359.266145][ T7640]  ? clear_bhb_loop+0x15/0x70
[  359.270801][ T7640]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  359.276692][ T7640] RIP: 0033:0x7feea4fd2ef9
[  359.281115][ T7640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  359.300736][ T7640] RSP: 002b:00007feea344c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  359.309163][ T7640] RAX: ffffffffffffffda RBX: 00007feea518bf80 RCX: 00007feea4fd2ef9
[  359.318359][ T7640] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000003
[  359.329543][ T7640] RBP: 00007feea344c090 R08: 0000000000000000 R09: 0000000000000000
[  359.343811][ T7640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  359.351773][ T7640] R13: 0000000000000000 R14: 00007feea518bf80 R15: 00007ffdc71f0348
[  359.359761][ T7640]  </TASK>
[  360.237047][ T3710] usb 4-1: USB disconnect, device number 21
[  360.259129][    C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  360.308478][    C1] eth0: bad gso: type: 1, size: 1408
[  360.310526][ T7657] FAULT_INJECTION: forcing a failure.
[  360.310526][ T7657] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  360.339373][ T7657] CPU: 1 PID: 7657 Comm: syz.2.922 Not tainted 5.15.166-syzkaller #0
[  360.347467][ T7657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  360.357522][ T7657] Call Trace:
[  360.360806][ T7657]  <TASK>
[  360.363726][ T7657]  dump_stack_lvl+0x1e3/0x2d0
[  360.368390][ T7657]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  360.374000][ T7657]  ? panic+0x860/0x860
[  360.378049][ T7657]  ? validate_chain+0x112/0x5930
[  360.382965][ T7657]  ? validate_chain+0x112/0x5930
[  360.387894][ T7657]  should_fail+0x38a/0x4c0
[  360.392292][ T7657]  _copy_from_user+0x2d/0x170
[  360.396953][ T7657]  __copy_msghdr_from_user+0xaf/0x7c0
[  360.402323][ T7657]  ? __ia32_sys_shutdown+0x60/0x60
[  360.407529][ T7657]  ___sys_sendmsg+0x166/0x2e0
[  360.412210][ T7657]  ? __sys_sendmsg+0x260/0x260
[  360.416988][ T7657]  ? __fdget+0x191/0x220
[  360.421217][ T7657]  __se_sys_sendmsg+0x19a/0x260
[  360.426053][ T7657]  ? __x64_sys_sendmsg+0x80/0x80
[  360.430978][ T7657]  ? syscall_enter_from_user_mode+0x2e/0x240
[  360.436943][ T7657]  ? lockdep_hardirqs_on+0x94/0x130
[  360.442123][ T7657]  ? syscall_enter_from_user_mode+0x2e/0x240
[  360.448085][ T7657]  do_syscall_64+0x3b/0xb0
[  360.452477][ T7657]  ? clear_bhb_loop+0x15/0x70
[  360.457217][ T7657]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  360.463088][ T7657] RIP: 0033:0x7ff66d1bbef9
[  360.467496][ T7657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  360.487093][ T7657] RSP: 002b:00007ff66b635038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  360.495496][ T7657] RAX: ffffffffffffffda RBX: 00007ff66d374f80 RCX: 00007ff66d1bbef9
[  360.503451][ T7657] RDX: 0000000000000000 RSI: 0000000020002540 RDI: 0000000000000003
[  360.511400][ T7657] RBP: 00007ff66b635090 R08: 0000000000000000 R09: 0000000000000000
[  360.519436][ T7657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  360.527383][ T7657] R13: 0000000000000000 R14: 00007ff66d374f80 R15: 00007fff473cc9f8
[  360.535345][ T7657]  </TASK>
[  360.598239][ T7664] FAULT_INJECTION: forcing a failure.
[  360.598239][ T7664] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  360.612394][ T4782] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  360.635137][ T7664] CPU: 1 PID: 7664 Comm: syz.2.925 Not tainted 5.15.166-syzkaller #0
[  360.647002][ T7664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  360.657044][ T7664] Call Trace:
[  360.660322][ T7664]  <TASK>
[  360.663244][ T7664]  dump_stack_lvl+0x1e3/0x2d0
[  360.667910][ T7664]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  360.673522][ T7664]  ? panic+0x860/0x860
[  360.677592][ T7664]  ? snprintf+0xd6/0x120
[  360.681813][ T7664]  should_fail+0x38a/0x4c0
[  360.686301][ T7664]  _copy_to_user+0x2d/0x130
[  360.690790][ T7664]  simple_read_from_buffer+0xc6/0x150
[  360.696198][ T7664]  proc_fail_nth_read+0x1a3/0x210
[  360.701209][ T7664]  ? proc_fault_inject_write+0x390/0x390
[  360.706826][ T7664]  ? fsnotify_perm+0x442/0x590
[  360.711568][ T7664]  ? proc_fault_inject_write+0x390/0x390
[  360.717182][ T7664]  vfs_read+0x2fc/0xe10
[  360.721329][ T7664]  ? kernel_read+0x1f0/0x1f0
[  360.725910][ T7664]  ? read_lock_is_recursive+0x10/0x10
[  360.731260][ T7664]  ? __context_tracking_exit+0x4c/0x80
[  360.736710][ T7664]  ? __lock_acquire+0x1ff0/0x1ff0
[  360.741720][ T7664]  ? __fdget_pos+0x2d2/0x380
[  360.746336][ T7664]  ksys_read+0x1a2/0x2c0
[  360.750560][ T7664]  ? print_irqtrace_events+0x210/0x210
[  360.755999][ T7664]  ? vfs_write+0xe50/0xe50
[  360.760391][ T7664]  ? syscall_enter_from_user_mode+0x2e/0x240
[  360.766345][ T7664]  ? lockdep_hardirqs_on+0x94/0x130
[  360.771524][ T7664]  ? syscall_enter_from_user_mode+0x2e/0x240
[  360.777485][ T7664]  do_syscall_64+0x3b/0xb0
[  360.781878][ T7664]  ? clear_bhb_loop+0x15/0x70
[  360.786528][ T7664]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  360.792397][ T7664] RIP: 0033:0x7ff66d1ba93c
[  360.796793][ T7664] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48
[  360.816375][ T7664] RSP: 002b:00007ff66b635030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  360.824767][ T7664] RAX: ffffffffffffffda RBX: 00007ff66d374f80 RCX: 00007ff66d1ba93c
[  360.832713][ T7664] RDX: 000000000000000f RSI: 00007ff66b6350a0 RDI: 0000000000000003
[  360.840665][ T7664] RBP: 00007ff66b635090 R08: 0000000000000000 R09: 0000000000000000
[  360.848629][ T7664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  360.856586][ T7664] R13: 0000000000000000 R14: 00007ff66d374f80 R15: 00007fff473cc9f8
[  360.864543][ T7664]  </TASK>
[  360.909174][ T3710] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  361.083589][ T4782] usb 5-1: Using ep0 maxpacket: 8
[  361.163040][ T7673] loop1: detected capacity change from 0 to 256
[  361.359824][ T3710] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  361.459670][ T3710] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  361.732355][ T3710] usb 4-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00
[  361.894490][ T7677] "syz.1.928" (7677) uses obsolete ecb(arc4) skcipher
[  361.918934][ T4782] usb 5-1: config 0 has an invalid interface number: 143 but max is 0
[  361.960678][ T3710] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  362.120557][ T3710] usb 4-1: config 0 descriptor??
[  362.410445][ T4782] usb 5-1: config 0 has no interface number 0
[  362.416572][ T4782] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b
[  362.425698][ T4782] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  362.742473][ T4782] usb 5-1: config 0 descriptor??
[  362.857063][ T7679] loop0: detected capacity change from 0 to 256
[  362.919394][ T4782] viperboard 5-1:0.143: version 0.00 found at bus 005 address 022
[  362.974775][ T7681] loop1: detected capacity change from 0 to 256
[  363.004594][ T7679] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  363.017848][ T4782] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100
[  363.058520][ T7681] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  363.065016][ T4782] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5
[  363.118863][ T7681] FAULT_INJECTION: forcing a failure.
[  363.118863][ T7681] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  363.142245][ T4782] usb 5-1: USB disconnect, device number 22
[  363.150529][ T7669] loop2: detected capacity change from 0 to 40427
[  363.156363][ T7679] exFAT-fs (loop0): error, failed to bmap (inode : ffff888059c014e0 iblock : 0, err : -5)
[  363.176035][ T7681] CPU: 0 PID: 7681 Comm: syz.1.931 Not tainted 5.15.166-syzkaller #0
[  363.184117][ T7681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  363.194157][ T7681] Call Trace:
[  363.197418][ T7681]  <TASK>
[  363.200353][ T7681]  dump_stack_lvl+0x1e3/0x2d0
[  363.205026][ T7681]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  363.210638][ T7681]  ? panic+0x860/0x860
[  363.214687][ T7681]  ? validate_chain+0x13bd/0x5930
[  363.219697][ T7681]  should_fail+0x38a/0x4c0
[  363.224100][ T7681]  prepare_alloc_pages+0x1db/0x5b0
[  363.229197][ T7681]  __alloc_pages+0x14f/0x700
[  363.233769][ T7681]  ? __rmqueue_pcplist+0x2030/0x2030
[  363.239044][ T7681]  ? alloc_pages+0x458/0x570
[  363.243625][ T7681]  __page_cache_alloc+0xd4/0x4a0
[  363.248589][ T7681]  ? rcu_lock_release+0x5/0x20
[  363.253336][ T7681]  ? __lock_acquire+0x1ff0/0x1ff0
[  363.258342][ T7681]  ? add_to_page_cache_lru+0x560/0x560
[  363.263784][ T7681]  ? xas_start+0x3ff/0x7b0
[  363.268184][ T7681]  ? xas_load+0x11a/0x140
[  363.272495][ T7681]  pagecache_get_page+0xa91/0x1010
[  363.277597][ T7681]  ? page_cache_prev_miss+0x500/0x500
[  363.282965][ T7681]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  363.288944][ T7681]  grab_cache_page_write_begin+0x57/0x90
[  363.294584][ T7681]  cont_write_begin+0x5b1/0x840
[  363.299439][ T7681]  ? generic_cont_expand_simple+0x230/0x230
[  363.305319][ T7681]  ? fault_in_readable+0x1d5/0x2e0
[  363.310416][ T7681]  ? fault_in_safe_writeable+0x250/0x250
[  363.316032][ T7681]  ? __vfs_getxattr+0x6d/0x410
[  363.320806][ T7681]  exfat_write_begin+0xa2/0x170
[  363.325637][ T7681]  ? exfat_block_truncate_page+0x50/0x50
[  363.331257][ T7681]  generic_perform_write+0x2bf/0x5b0
[  363.336538][ T7681]  ? grab_cache_page_write_begin+0x90/0x90
[  363.342330][ T7681]  ? file_remove_privs+0x610/0x610
[  363.347426][ T7681]  ? rwsem_write_trylock+0x166/0x210
[  363.352700][ T7681]  __generic_file_write_iter+0x243/0x4f0
[  363.358408][ T7681]  generic_file_write_iter+0xa7/0x1b0
[  363.363762][ T7681]  vfs_write+0xacd/0xe50
[  363.367994][ T7681]  ? file_end_write+0x250/0x250
[  363.372832][ T7681]  ? __fget_files+0x413/0x480
[  363.377499][ T7681]  ? mutex_lock_nested+0x17/0x20
[  363.382419][ T7681]  ? __fdget_pos+0x2cb/0x380
[  363.386987][ T7681]  ? ksys_write+0x77/0x2c0
[  363.391384][ T7681]  ksys_write+0x1a2/0x2c0
[  363.395701][ T7681]  ? print_irqtrace_events+0x210/0x210
[  363.401139][ T7681]  ? __ia32_sys_read+0x80/0x80
[  363.405886][ T7681]  ? syscall_enter_from_user_mode+0x2e/0x240
[  363.411845][ T7681]  ? lockdep_hardirqs_on+0x94/0x130
[  363.417026][ T7681]  ? syscall_enter_from_user_mode+0x2e/0x240
[  363.422994][ T7681]  do_syscall_64+0x3b/0xb0
[  363.427392][ T7681]  ? clear_bhb_loop+0x15/0x70
[  363.432048][ T7681]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  363.438113][ T7681] RIP: 0033:0x7f06e9251ef9
[  363.443513][ T7681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  363.473196][ T7681] RSP: 002b:00007f06e76cb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  363.481606][ T7681] RAX: ffffffffffffffda RBX: 00007f06e940af80 RCX: 00007f06e9251ef9
[  363.489561][ T7681] RDX: 000000000000fea7 RSI: 00000000200000c0 RDI: 0000000000000004
[  363.497511][ T7681] RBP: 00007f06e76cb090 R08: 0000000000000000 R09: 0000000000000000
[  363.505469][ T7681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  363.513433][ T7681] R13: 0000000000000000 R14: 00007f06e940af80 R15: 00007ffcbb82f838
[  363.521407][ T7681]  </TASK>
[  363.530246][ T7679] exFAT-fs (loop0): Filesystem has been set read-only
[  363.603740][ T7669] F2FS-fs (loop2): Invalid SB checksum offset: 0
[  363.612728][ T7669] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[  363.708544][ T7669] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  363.741321][ T7690] loop1: detected capacity change from 0 to 256
[  363.837663][ T7669] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[  363.848456][ T7669] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  363.887382][ T7669] attempt to access beyond end of device
[  363.887382][ T7669] loop2: rw=2049, want=53256, limit=40427
[  363.916010][ T7690] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  364.092292][ T7695] FAULT_INJECTION: forcing a failure.
[  364.092292][ T7695] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  364.149675][ T7695] CPU: 1 PID: 7695 Comm: syz.4.934 Not tainted 5.15.166-syzkaller #0
[  364.158922][ T7695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  364.169707][ T7695] Call Trace:
[  364.173533][ T7695]  <TASK>
[  364.176542][ T7695]  dump_stack_lvl+0x1e3/0x2d0
[  364.181238][ T7695]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  364.187135][ T7695]  ? panic+0x860/0x860
[  364.191210][ T7695]  ? validate_chain+0x112/0x5930
[  364.196557][ T7695]  ? validate_chain+0x112/0x5930
[  364.201527][ T7695]  should_fail+0x38a/0x4c0
[  364.205988][ T7695]  _copy_from_user+0x2d/0x170
[  364.210755][ T7695]  __copy_msghdr_from_user+0xaf/0x7c0
[  364.216147][ T7695]  ? __ia32_sys_shutdown+0x60/0x60
[  364.221275][ T7695]  ___sys_sendmsg+0x166/0x2e0
[  364.225962][ T7695]  ? __sys_sendmsg+0x260/0x260
[  364.230764][ T7695]  ? __fdget+0x191/0x220
[  364.235010][ T7695]  __se_sys_sendmsg+0x19a/0x260
[  364.239861][ T7695]  ? __x64_sys_sendmsg+0x80/0x80
[  364.244803][ T7695]  ? syscall_enter_from_user_mode+0x2e/0x240
[  364.250779][ T7695]  ? lockdep_hardirqs_on+0x94/0x130
[  364.255973][ T7695]  ? syscall_enter_from_user_mode+0x2e/0x240
[  364.261952][ T7695]  do_syscall_64+0x3b/0xb0
[  364.266366][ T7695]  ? clear_bhb_loop+0x15/0x70
[  364.271041][ T7695]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  364.276944][ T7695] RIP: 0033:0x7f1559efcef9
[  364.281363][ T7695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  364.300972][ T7695] RSP: 002b:00007f1558376038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  364.309394][ T7695] RAX: ffffffffffffffda RBX: 00007f155a0b5f80 RCX: 00007f1559efcef9
[  364.317362][ T7695] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003
[  364.325329][ T7695] RBP: 00007f1558376090 R08: 0000000000000000 R09: 0000000000000000
[  364.333309][ T7695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  364.341278][ T7695] R13: 0000000000000000 R14: 00007f155a0b5f80 R15: 00007fff7d059378
[  364.349355][ T7695]  </TASK>
[  364.554490][ T7701] loop0: detected capacity change from 0 to 1024
[  364.621074][ T7701] EXT4-fs (loop0): Ignoring removed orlov option
[  364.628457][ T7701] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option
[  364.636263][ T7701] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  364.660369][ T7701] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84fc018, mo2=0002]
[  364.668574][ T7701] System zones: 0-1, 3-36
[  364.692900][ T7701] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,orlov,nomblk_io_submit,noauto_da_alloc,debug_want_extra_isize=0x0000000000000006,dioread_nolock,usrquota,usrquota,,errors=continue. Quota mode: writeback.
[  364.759248][   T25] audit: type=1804 audit(1725754523.594:41): pid=7701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.936" name="/newroot/132/file0/bus" dev="loop0" ino=18 res=1 errno=0
[  365.820264][ T4557] attempt to access beyond end of device
[  365.820264][ T4557] loop2: rw=2049, want=45104, limit=40427
[  365.867990][ T7711] loop0: detected capacity change from 0 to 4096
[  366.896584][ T7711] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512)
[  367.319324][ T7711] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  367.425776][ T3710] usbhid 4-1:0.0: can't add hid device: -71
[  367.432106][ T7723] loop3: detected capacity change from 0 to 512
[  367.449633][ T3710] usbhid: probe of 4-1:0.0 failed with error -71
[  367.478228][ T3710] usb 4-1: USB disconnect, device number 22
[  367.488580][ T7727] loop4: detected capacity change from 0 to 8
[  367.569794][ T7727] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  367.667297][ T7723] EXT4-fs error (device loop3): ext4_do_update_inode:5171: inode #16: comm syz.3.943: corrupted inode contents
[  367.688842][ T7723] EXT4-fs error (device loop3): ext4_dirty_inode:6004: inode #16: comm syz.3.943: mark_inode_dirty error
[  367.721082][ T3682] ntfs3: loop0: ntfs3_write_inode r=5 failed, -22.
[  367.763622][ T7723] EXT4-fs error (device loop3): ext4_do_update_inode:5171: inode #16: comm syz.3.943: corrupted inode contents
[  367.764142][ T5105] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22.
[  367.796350][ T7723] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #16: comm syz.3.943: mark_inode_dirty error
[  368.539609][ T7723] EXT4-fs error (device loop3): ext4_do_update_inode:5171: inode #16: comm syz.3.943: corrupted inode contents
[  368.570354][ T7723] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem
[  368.579993][ T7723] EXT4-fs error (device loop3): ext4_do_update_inode:5171: inode #16: comm syz.3.943: corrupted inode contents
[  368.640158][ T7723] EXT4-fs error (device loop3): ext4_truncate:4272: inode #16: comm syz.3.943: mark_inode_dirty error
[  368.671027][ T7723] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem
[  368.693581][ T7723] EXT4-fs (loop3): 1 truncate cleaned up
[  368.710884][ T4783] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  368.714803][ T7723] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  368.731727][ T7723] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038 (0x7fffffff)
[  368.765784][   T25] audit: type=1800 audit(1725754527.594:42): pid=7723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.943" name="bus" dev="loop3" ino=18 res=0 errno=0
[  368.959159][ T4783] usb 5-1: Using ep0 maxpacket: 8
[  368.959329][ T3710] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  369.024190][ T7740] loop2: detected capacity change from 0 to 32768
[  369.079407][ T4783] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  369.184103][ T3623] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  369.205781][ T7740] XFS (loop2): Mounting V5 Filesystem
[  369.230984][ T3710] usb 2-1: Using ep0 maxpacket: 16
[  369.249270][ T4783] usb 5-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40
[  369.260696][ T4783] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  369.268845][ T4783] usb 5-1: Product: syz
[  369.274134][ T4783] usb 5-1: Manufacturer: syz
[  369.276591][ T3623] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  369.278793][ T4783] usb 5-1: SerialNumber: syz
[  369.328771][ T7740] XFS (loop2): Ending clean mount
[  369.333159][ T4783] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input42
[  369.336554][ T7740] XFS (loop2): Quotacheck needed: Please wait.
[  369.365792][ T3623] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  369.406895][ T3710] usb 2-1: config 255 has an invalid interface number: 47 but max is 1
[  369.426761][ T3710] usb 2-1: config 255 has an invalid interface number: 218 but max is 1
[  369.435641][ T3710] usb 2-1: config 255 has no interface number 0
[  369.455857][ T3710] usb 2-1: config 255 has no interface number 1
[  369.465923][ T3710] usb 2-1: config 255 interface 47 altsetting 128 endpoint 0x4 has invalid maxpacket 1023, setting to 64
[  369.489259][ T3710] usb 2-1: config 255 interface 47 has no altsetting 0
[  369.496133][ T3710] usb 2-1: config 255 interface 218 has no altsetting 0
[  369.504950][ T7740] XFS (loop2): Quotacheck: Done.
[  369.520099][ T3623] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  369.689341][ T3710] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=b1.fc
[  369.703001][ T3710] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  369.726851][ T3710] usb 2-1: Product: syz
[  369.731334][ T3710] usb 2-1: Manufacturer: syz
[  369.736185][ T3710] usb 2-1: SerialNumber: syz
[  369.930787][ T7754] chnl_net:caif_netlink_parms(): no params data found
[  369.953606][ T4557] XFS (loop2): Unmounting Filesystem
[  370.050182][ T3012] bcm5974 5-1:1.0: could not read from device
[  370.070375][ T3710] legousbtower 2-1:255.47: interrupt endpoints not found
[  370.089679][ T3012] bcm5974 5-1:1.0: could not read from device
[  370.099778][ T4783] usb 5-1: USB disconnect, device number 23
[  370.113175][ T3710] legousbtower 2-1:255.218: interrupt endpoints not found
[  370.154380][ T3710] usb 2-1: USB disconnect, device number 15
[  370.199212][ T1075] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  370.800816][ T1075] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  370.909699][ T1075] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  371.025270][ T1075] usb 1-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00
[  371.040635][ T1075] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  371.057830][ T1075] usb 1-1: config 0 descriptor??
[  371.113553][ T7785] loop1: detected capacity change from 0 to 1024
[  371.160799][ T7754] bridge0: port 1(bridge_slave_0) entered blocking state
[  371.167887][ T7754] bridge0: port 1(bridge_slave_0) entered disabled state
[  371.182212][ T7754] device bridge_slave_0 entered promiscuous mode
[  371.223522][ T7785] EXT4-fs (loop1): Ignoring removed orlov option
[  371.230090][ T7754] bridge0: port 2(bridge_slave_1) entered blocking state
[  371.230128][ T7754] bridge0: port 2(bridge_slave_1) entered disabled state
[  371.231015][ T7754] device bridge_slave_1 entered promiscuous mode
[  371.252676][ T7785] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option
[  371.274107][ T7785] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  371.316673][ T7785] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84fc018, mo2=0002]
[  371.378587][ T7754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  371.428693][ T7785] System zones: 0-1, 3-36
[  371.460456][ T7785] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,orlov,nomblk_io_submit,noauto_da_alloc,debug_want_extra_isize=0x0000000000000006,dioread_nolock,usrquota,usrquota,,errors=continue. Quota mode: writeback.
[  371.511268][ T7754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  372.191604][ T4783] Bluetooth: hci4: command 0x0409 tx timeout
[  372.212972][   T25] audit: type=1800 audit(1725754531.044:43): pid=7785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.956" name="file1" dev="loop1" ino=15 res=0 errno=0
[  372.437708][ T7754] team0: Port device team_slave_0 added
[  372.457335][ T7754] team0: Port device team_slave_1 added
[  372.999196][ T5467] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  373.147319][ T3616] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  373.157375][ T7754] batman_adv: batadv0: Adding interface: batadv_slave_0
[  373.168948][ T7754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  373.195797][ T7754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  373.215949][ T7754] batman_adv: batadv0: Adding interface: batadv_slave_1
[  373.223573][ T7754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  373.263845][ T7754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  373.299194][ T5467] usb 3-1: Using ep0 maxpacket: 16
[  373.402681][ T7754] device hsr_slave_0 entered promiscuous mode
[  373.410751][ T7754] device hsr_slave_1 entered promiscuous mode
[  373.412290][ T3616] usb 5-1: Using ep0 maxpacket: 16
[  373.586572][ T3616] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  373.720834][ T3616] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  373.797033][ T3616] usb 5-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00
[  373.875093][ T3616] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  374.054127][ T5467] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  374.087575][ T3616] usb 5-1: config 0 descriptor??
[  374.125781][ T3623] device hsr_slave_0 left promiscuous mode
[  374.145135][ T3623] device hsr_slave_1 left promiscuous mode
[  374.160960][ T3623] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  374.168559][ T3623] batman_adv: batadv0: Removing interface: batadv_slave_0
[  374.216329][ T3623] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  374.229459][ T3714] Bluetooth: hci4: command 0x041b tx timeout
[  374.238788][ T3623] batman_adv: batadv0: Removing interface: batadv_slave_1
[  374.249275][ T5467] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  374.262840][ T5467] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  374.265343][ T7824] loop1: detected capacity change from 0 to 1024
[  374.274178][ T5467] usb 3-1: Product: syz
[  374.282293][ T3623] device bridge_slave_1 left promiscuous mode
[  374.285938][ T5467] usb 3-1: Manufacturer: syz
[  374.293443][ T3623] bridge0: port 2(bridge_slave_1) entered disabled state
[  374.296636][ T5467] usb 3-1: SerialNumber: syz
[  374.309618][ T7824] EXT4-fs (loop1): Ignoring removed orlov option
[  374.316018][ T7824] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option
[  374.323444][ T7824] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  374.344676][ T5467] usb 3-1: config 0 descriptor??
[  374.379588][ T3623] device bridge_slave_0 left promiscuous mode
[  374.385900][ T3623] bridge0: port 1(bridge_slave_0) entered disabled state
[  374.401157][ T5467] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  374.409514][ T7824] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84fc018, mo2=0002]
[  374.418547][ T7824] System zones: 0-1, 3-36
[  374.419335][ T5467] em28xx 3-1:0.0: DVB interface 0 found: bulk
[  374.429674][ T7824] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,orlov,nomblk_io_submit,noauto_da_alloc,debug_want_extra_isize=0x0000000000000006,dioread_nolock,usrquota,usrquota,,errors=continue. Quota mode: writeback.
[  374.456054][ T3623] device veth1_macvtap left promiscuous mode
[  374.462476][ T3623] device veth0_macvtap left promiscuous mode
[  374.468559][ T3623] device veth1_vlan left promiscuous mode
[  374.474592][ T3623] device veth0_vlan left promiscuous mode
[  374.489814][   T25] audit: type=1804 audit(1725754533.324:44): pid=7824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.962" name="/newroot/137/file0/bus" dev="loop1" ino=18 res=1 errno=0
[  374.703342][ T7797] loop4: detected capacity change from 0 to 2048
[  375.660535][ T5467] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[  375.922013][ T5467] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  375.930189][ T5467] em28xx 3-1:0.0: board has no eeprom
[  376.163009][ T5467] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  376.300592][ T5467] em28xx 3-1:0.0: dvb set to bulk mode.
[  376.402973][ T1075] usbhid 1-1:0.0: can't add hid device: -32
[  376.412389][ T1075] usbhid: probe of 1-1:0.0 failed with error -32
[  376.513523][ T3714] em28xx 3-1:0.0: Binding DVB extension
[  376.762034][ T5467] Bluetooth: hci4: command 0x040f tx timeout
[  378.536481][ T1389] ieee802154 phy0 wpan0: encryption failed: -22
[  378.650743][ T1389] ieee802154 phy1 wpan1: encryption failed: -22
[  378.856089][ T5467] Bluetooth: hci4: command 0x0419 tx timeout
[  379.359233][ T3616] usbhid 5-1:0.0: can't add hid device: -32
[  379.365229][ T3616] usbhid: probe of 5-1:0.0 failed with error -32
[  379.368173][ T5467] usb 1-1: USB disconnect, device number 22
[  379.426147][ T7833] loop1: detected capacity change from 0 to 512
[  379.459387][ T3714] em28xx 3-1:0.0: Registering input extension
[  379.510441][ T4750] usb 5-1: USB disconnect, device number 24
[  379.513982][ T7833] EXT4-fs (loop1): Ignoring removed bh option
[  379.583225][ T7833] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  379.626158][ T7840] loop0: detected capacity change from 0 to 64
[  379.673140][ T7833] EXT4-fs (loop1): 1 truncate cleaned up
[  379.678806][ T7833] EXT4-fs (loop1): mounted filesystem without journal. Opts: data_err=ignore,resgid=0x000000000000ee00,bh,noload,data_err=ignore,data_err=abort,,errors=continue. Quota mode: none.
[  379.761078][ T7844] loop4: detected capacity change from 0 to 128
[  379.954392][ T7844] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  379.976764][ T7844] ext4 filesystem being mounted at /150/mnt supports timestamps until 2038 (0x7fffffff)
[  380.045025][ T7847] FAULT_INJECTION: forcing a failure.
[  380.045025][ T7847] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  380.117707][ T7847] CPU: 0 PID: 7847 Comm: syz.1.963 Not tainted 5.15.166-syzkaller #0
[  380.125812][ T7847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  380.135864][ T7847] Call Trace:
[  380.139142][ T7847]  <TASK>
[  380.142067][ T7847]  dump_stack_lvl+0x1e3/0x2d0
[  380.146745][ T7847]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  380.152379][ T7847]  ? panic+0x860/0x860
[  380.156455][ T7847]  should_fail+0x38a/0x4c0
[  380.160870][ T7847]  _copy_to_user+0x2d/0x130
[  380.165371][ T7847]  __se_sys_semctl+0x208/0x310
[  380.170134][ T7847]  ? __x64_sys_semctl+0xa0/0xa0
[  380.175006][ T7847]  do_syscall_64+0x3b/0xb0
[  380.179414][ T7847]  ? clear_bhb_loop+0x15/0x70
[  380.184089][ T7847]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  380.189977][ T7847] RIP: 0033:0x7f06e9251ef9
[  380.194389][ T7847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  380.213986][ T7847] RSP: 002b:00007f06e7689038 EFLAGS: 00000246 ORIG_RAX: 0000000000000042
[  380.222403][ T7847] RAX: ffffffffffffffda RBX: 00007f06e940b130 RCX: 00007f06e9251ef9
[  380.230370][ T7847] RDX: 0000000000000014 RSI: 0000000000000000 RDI: 0000000000000000
[  380.238330][ T7847] RBP: 00007f06e7689090 R08: 0000000000000000 R09: 0000000000000000
[  380.246303][ T7847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  380.254277][ T7847] R13: 0000000000000000 R14: 00007f06e940b130 R15: 00007ffcbb82f838
[  380.262267][ T7847]  </TASK>
[  380.324302][ T3623] team0 (unregistering): Port device team_slave_1 removed
[  381.600966][ T3623] team0 (unregistering): Port device team_slave_0 removed
[  381.621847][ T3623] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  381.639821][ T3623] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  382.048732][ T3623] bond0 (unregistering): Released all slaves
[  382.791355][ T4786] usb 3-1: USB disconnect, device number 27
[  382.798154][ T4786] em28xx 3-1:0.0: Disconnecting em28xx
[  383.599145][ T4786] em28xx 3-1:0.0: Closing input extension
[  383.608355][ T4786] em28xx 3-1:0.0: Freeing device
[  383.708527][ T7868] loop4: detected capacity change from 0 to 1024
[  383.734390][ T7868] EXT4-fs (loop4): Ignoring removed orlov option
[  383.740910][ T7868] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option
[  383.748220][ T7868] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  383.773743][ T7868] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84fc018, mo2=0002]
[  383.781938][ T7868] System zones: 0-1, 3-36
[  383.787357][ T7868] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,orlov,nomblk_io_submit,noauto_da_alloc,debug_want_extra_isize=0x0000000000000006,dioread_nolock,usrquota,usrquota,,errors=continue. Quota mode: writeback.
[  383.834302][   T25] audit: type=1804 audit(1725754542.664:45): pid=7868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.972" name="/newroot/152/file0/bus" dev="loop4" ino=18 res=1 errno=0
[  383.989154][ T3710] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  384.249245][ T3710] usb 1-1: Using ep0 maxpacket: 32
[  384.869346][ T3710] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[  384.889144][ T3710] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  384.897164][ T3710] usb 1-1: Product: syz
[  384.942072][ T7884] loop4: detected capacity change from 0 to 256
[  384.949310][ T3710] usb 1-1: Manufacturer: syz
[  384.953963][ T3710] usb 1-1: SerialNumber: syz
[  385.051043][ T3710] usb 1-1: config 0 descriptor??
[  385.060548][ T7884] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xff6f124c, utbl_chksum : 0xe619d30d)
[  385.558988][ T7876] chnl_net:caif_netlink_parms(): no params data found
[  385.743568][ T4750] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  385.792815][ T7754] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  385.814585][ T7876] bridge0: port 1(bridge_slave_0) entered blocking state
[  385.822109][ T7876] bridge0: port 1(bridge_slave_0) entered disabled state
[  385.831623][ T7876] device bridge_slave_0 entered promiscuous mode
[  385.845623][ T7754] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  385.869685][ T7876] bridge0: port 2(bridge_slave_1) entered blocking state
[  385.876755][ T7876] bridge0: port 2(bridge_slave_1) entered disabled state
[  385.904972][ T7876] device bridge_slave_1 entered promiscuous mode
[  386.098450][ T7754] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  386.334071][ T7754] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  386.356582][ T7876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  386.428420][ T7876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  386.464253][ T3710] peak_usb 1-1:0.0 can0: unable to request usb[type=0 value=0] err=-71
[  386.472718][ T3710] peak_usb 1-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71)
[  386.549282][ T3714] Bluetooth: hci5: command 0x0409 tx timeout
[  386.608341][ T7912] loop4: detected capacity change from 0 to 1024
[  386.609199][ T4750] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  386.646564][ T7910] loop0: detected capacity change from 0 to 4096
[  386.652975][ T4750] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  386.679090][ T4750] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  386.692179][ T4750] usb 2-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00
[  386.694247][ T7912] EXT4-fs (loop4): Ignoring removed orlov option
[  386.714093][ T4750] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  386.722452][ T7912] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option
[  386.747009][ T7910] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 3) do not match.  Run ntfsfix or chkdsk.
[  386.749163][ T7912] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  386.769802][ T7910] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  386.793027][ T4750] usb 2-1: config 0 descriptor??
[  386.830536][ T7876] team0: Port device team_slave_0 added
[  386.838697][ T7912] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84fc018, mo2=0002]
[  386.850946][ T7876] team0: Port device team_slave_1 added
[  386.913588][ T3710] peak_usb: probe of 1-1:0.0 failed with error -71
[  386.914491][ T7876] batman_adv: batadv0: Adding interface: batadv_slave_0
[  386.926757][ T3710] usb 1-1: USB disconnect, device number 23
[  386.934334][ T7912] System zones: 0-1, 3-36
[  386.951310][ T7910] ntfs: (device loop0): ntfs_read_locked_inode(): Found compressed data but compression is disabled due to cluster size (65536) > 4kiB.
[  386.960128][ T7876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  386.993343][ T7912] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,orlov,nomblk_io_submit,noauto_da_alloc,debug_want_extra_isize=0x0000000000000006,dioread_nolock,usrquota,usrquota,,errors=continue. Quota mode: writeback.
[  387.019280][ T7910] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0x3 as bad.  Run chkdsk.
[  387.043105][   T25] audit: type=1800 audit(1725754545.874:46): pid=7912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.978" name="file1" dev="loop4" ino=15 res=0 errno=0
[  387.045252][ T7876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  387.107137][ T7910] ntfs: (device loop0): load_system_files(): Failed to load $Volume.
[  387.112214][ T7876] batman_adv: batadv0: Adding interface: batadv_slave_1
[  387.123974][ T7876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  387.159790][ T7910] ntfs: (device loop0): ntfs_fill_super(): Failed to load system files.
[  387.185788][ T7876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  387.267608][ T7876] device hsr_slave_0 entered promiscuous mode
[  387.332317][ T7876] device hsr_slave_1 entered promiscuous mode
[  387.351842][ T7876] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  387.370981][ T7876] Cannot create hsr debugfs directory
[  387.420775][ T7926] netlink: 8 bytes leftover after parsing attributes in process `syz.4.979'.
[  387.431280][ T4750] hid-udraw 0003:20D6:CB17.0005: unknown main item tag 0x0
[  387.461021][ T4750] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:20D6:CB17.0005/input/input44
[  387.652089][ T4750] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:20D6:CB17.0005/input/input45
[  387.831799][ T4750] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:20D6:CB17.0005/input/input46
[  387.937066][ T4750] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:20D6:CB17.0005/input/input47
[  388.030348][ T4750] hid-udraw 0003:20D6:CB17.0005: hidraw0: USB HID v0.00 Device [HID 20d6:cb17] on usb-dummy_hcd.1-1/input0
[  388.122075][ T7939] FAULT_INJECTION: forcing a failure.
[  388.122075][ T7939] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  388.135400][ T7939] CPU: 1 PID: 7939 Comm: syz.0.981 Not tainted 5.15.166-syzkaller #0
[  388.149922][ T7939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  388.160915][ T7939] Call Trace:
[  388.164182][ T7939]  <TASK>
[  388.167095][ T7939]  dump_stack_lvl+0x1e3/0x2d0
[  388.171949][ T7939]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  388.177574][ T7939]  ? panic+0x860/0x860
[  388.181629][ T7939]  ? validate_chain+0x112/0x5930
[  388.186550][ T7939]  ? validate_chain+0x112/0x5930
[  388.191479][ T7939]  should_fail+0x38a/0x4c0
[  388.195893][ T7939]  _copy_from_user+0x2d/0x170
[  388.200553][ T7939]  __copy_msghdr_from_user+0xaf/0x7c0
[  388.205918][ T7939]  ? __ia32_sys_shutdown+0x60/0x60
[  388.211026][ T7939]  ___sys_sendmsg+0x166/0x2e0
[  388.215692][ T7939]  ? __sys_sendmsg+0x260/0x260
[  388.220463][ T7939]  ? __fdget+0x191/0x220
[  388.224695][ T7939]  __se_sys_sendmsg+0x19a/0x260
[  388.229528][ T7939]  ? __x64_sys_sendmsg+0x80/0x80
[  388.234454][ T7939]  ? syscall_enter_from_user_mode+0x2e/0x240
[  388.240417][ T7939]  ? lockdep_hardirqs_on+0x94/0x130
[  388.245597][ T7939]  ? syscall_enter_from_user_mode+0x2e/0x240
[  388.251557][ T7939]  do_syscall_64+0x3b/0xb0
[  388.255953][ T7939]  ? clear_bhb_loop+0x15/0x70
[  388.260614][ T7939]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  388.266488][ T7939] RIP: 0033:0x7feea4fd2ef9
[  388.270886][ T7939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  388.290469][ T7939] RSP: 002b:00007feea340a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  388.298863][ T7939] RAX: ffffffffffffffda RBX: 00007feea518c130 RCX: 00007feea4fd2ef9
[  388.306823][ T7939] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003
[  388.314785][ T7939] RBP: 00007feea340a090 R08: 0000000000000000 R09: 0000000000000000
[  388.322742][ T7939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  388.330700][ T7939] R13: 0000000000000000 R14: 00007feea518c130 R15: 00007ffdc71f0348
[  388.338670][ T7939]  </TASK>
[  388.932647][ T3710] Bluetooth: hci5: command 0x041b tx timeout
[  388.981670][ T7754] 8021q: adding VLAN 0 to HW filter on device bond0
[  389.051718][ T7941] loop0: detected capacity change from 0 to 1024
[  389.052370][ T7754] 8021q: adding VLAN 0 to HW filter on device team0
[  389.083280][ T7941] EXT4-fs (loop0): Ignoring removed orlov option
[  389.089709][ T7941] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option
[  389.097060][ T7941] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  389.124281][ T7941] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84fc018, mo2=0002]
[  389.132610][ T7941] System zones: 0-1, 3-36
[  389.137309][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  389.175585][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  389.199612][ T7941] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,orlov,nomblk_io_submit,noauto_da_alloc,debug_want_extra_isize=0x0000000000000006,dioread_nolock,usrquota,usrquota,,errors=continue. Quota mode: writeback.
[  389.324992][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  389.334521][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  389.342645][   T25] audit: type=1804 audit(1725754548.174:47): pid=7941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.982" name="/newroot/144/file0/bus" dev="loop0" ino=18 res=1 errno=0
[  389.384056][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[  389.392169][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[  389.472291][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  389.504408][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  389.530237][ T7961] loop1: detected capacity change from 0 to 512
[  389.534351][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[  389.543618][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[  389.587764][ T7961] EXT4-fs (loop1): Ignoring removed oldalloc option
[  389.622247][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  389.634356][ T7961] EXT4-fs error (device loop1): ext4_xattr_inode_iget:400: comm syz.1.986: Parent and EA inode have the same ino 15
[  389.661090][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  389.670488][ T7961] EXT4-fs (loop1): Remounting filesystem read-only
[  389.681926][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  389.710855][ T7754] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  389.723352][ T7754] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  389.735152][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  389.736110][ T7961] EXT4-fs error (device loop1): ext4_evict_inode:293: comm syz.1.986: couldn't truncate inode 15 (err -30)
[  389.755599][ T7961] EXT4-fs (loop1): 1 orphan inode deleted
[  389.761461][ T7961] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsdgroups,oldalloc,stripe=0x0000000000000002,. Quota mode: none.
[  389.781689][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  389.786245][ T1075] usb 2-1: USB disconnect, device number 16
[  389.850130][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  389.896908][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  390.021756][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  390.031442][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  390.042382][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  390.051291][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  390.060740][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  390.068702][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  390.118598][ T7966] netlink: 44 bytes leftover after parsing attributes in process `syz.0.987'.
[  390.138871][ T7966] netlink: 40 bytes leftover after parsing attributes in process `syz.0.987'.
[  390.573955][ T7876] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  390.655986][ T7992] FAULT_INJECTION: forcing a failure.
[  390.655986][ T7992] name failslab, interval 1, probability 0, space 0, times 0
[  390.703188][ T7992] CPU: 0 PID: 7992 Comm: syz.4.990 Not tainted 5.15.166-syzkaller #0
[  390.712173][ T7992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  390.722949][ T7992] Call Trace:
[  390.726211][ T7992]  <TASK>
[  390.729129][ T7992]  dump_stack_lvl+0x1e3/0x2d0
[  390.733979][ T7992]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  390.739607][ T7992]  ? panic+0x860/0x860
[  390.743673][ T7992]  ? __might_sleep+0xc0/0xc0
[  390.749303][ T7992]  should_fail+0x38a/0x4c0
[  390.753895][ T7992]  should_failslab+0x5/0x20
[  390.758547][ T7992]  slab_pre_alloc_hook+0x53/0xc0
[  390.763598][ T7992]  __kmalloc+0x6e/0x300
[  390.767896][ T7992]  ? tomoyo_realpath_from_path+0xd8/0x5e0
[  390.773618][ T7992]  tomoyo_realpath_from_path+0xd8/0x5e0
[  390.779198][ T7992]  tomoyo_path_number_perm+0x225/0x810
[  390.786602][ T7992]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  390.792740][ T7992]  ? __fget_files+0x413/0x480
[  390.797680][ T7992]  security_file_ioctl+0x6d/0xa0
[  390.802829][ T7992]  __se_sys_ioctl+0x47/0x160
[  390.808643][ T7992]  do_syscall_64+0x3b/0xb0
[  390.813329][ T7992]  ? clear_bhb_loop+0x15/0x70
[  390.818529][ T7992]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  390.824679][ T7992] RIP: 0033:0x7f1559efcef9
[  390.829369][ T7992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  390.850124][ T7992] RSP: 002b:00007f1558355038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  390.858884][ T7992] RAX: ffffffffffffffda RBX: 00007f155a0b6058 RCX: 00007f1559efcef9
[  390.870401][ T7992] RDX: 0000000020000080 RSI: 00000000c028aa03 RDI: 0000000000000003
[  390.878375][ T7992] RBP: 00007f1558355090 R08: 0000000000000000 R09: 0000000000000000
[  390.886328][ T7992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  390.894280][ T7992] R13: 0000000000000000 R14: 00007f155a0b6058 R15: 00007fff7d059378
[  390.902240][ T7992]  </TASK>
[  390.949312][ T3714] Bluetooth: hci5: command 0x040f tx timeout
[  390.958949][ T7876] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  390.989407][ T7992] ERROR: Out of memory at tomoyo_realpath_from_path.
[  391.099655][ T7876] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  391.131714][ T8006] FAULT_INJECTION: forcing a failure.
[  391.131714][ T8006] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  391.151742][ T8006] CPU: 0 PID: 8006 Comm: syz.0.993 Not tainted 5.15.166-syzkaller #0
[  391.158010][ T7754] 8021q: adding VLAN 0 to HW filter on device batadv0
[  391.162718][ T8006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  391.162745][ T8006] Call Trace:
[  391.162753][ T8006]  <TASK>
[  391.162761][ T8006]  dump_stack_lvl+0x1e3/0x2d0
[  391.162788][ T8006]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  391.162805][ T8006]  ? panic+0x860/0x860
[  391.162832][ T8006]  should_fail+0x38a/0x4c0
[  391.162860][ T8006]  _copy_from_user+0x2d/0x170
[  391.162879][ T8006]  __x64_sys_clock_adjtime+0xd7/0x290
[  391.162899][ T8006]  ? do_clock_adjtime+0x110/0x110
[  391.162931][ T8006]  ? vtime_user_exit+0x2d1/0x400
[  391.162954][ T8006]  ? syscall_enter_from_user_mode+0x2e/0x240
[  391.162974][ T8006]  ? lockdep_hardirqs_on+0x94/0x130
[  391.162992][ T8006]  ? syscall_enter_from_user_mode+0x2e/0x240
[  391.163013][ T8006]  do_syscall_64+0x3b/0xb0
[  391.163030][ T8006]  ? clear_bhb_loop+0x15/0x70
[  391.163046][ T8006]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  391.163066][ T8006] RIP: 0033:0x7feea4fd2ef9
[  391.163085][ T8006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  391.163099][ T8006] RSP: 002b:00007feea344c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000131
[  391.290156][ T8006] RAX: ffffffffffffffda RBX: 00007feea518bf80 RCX: 00007feea4fd2ef9
[  391.298113][ T8006] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  391.306061][ T8006] RBP: 00007feea344c090 R08: 0000000000000000 R09: 0000000000000000
[  391.314019][ T8006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  391.321978][ T8006] R13: 0000000000000001 R14: 00007feea518bf80 R15: 00007ffdc71f0348
[  391.329945][ T8006]  </TASK>
[  391.342034][ T8004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.992'.
[  391.363625][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  391.381547][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  391.425955][ T7876] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  391.506686][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  391.523775][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  391.605768][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  391.632991][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  391.690074][ T7754] device veth0_vlan entered promiscuous mode
[  391.875661][ T8022] ------------[ cut here ]------------
[  391.881526][ T8022] WARNING: CPU: 1 PID: 8022 at kernel/softirq.c:363 __local_bh_enable_ip+0x1b3/0x1f0
[  391.891004][ T8022] Modules linked in:
[  391.894900][ T8022] CPU: 1 PID: 8022 Comm: syz.4.996 Not tainted 5.15.166-syzkaller #0
[  391.902960][ T8022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  391.913009][ T8022] RIP: 0010:__local_bh_enable_ip+0x1b3/0x1f0
[  391.918994][ T8022] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 4a 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 0b e9 d0 fe ff ff e8 3f 00 00 00 eb a2 <0f> 0b e9 02 ff ff ff 48 c7 c1 c4 8e e9 8d 80 e1 07 80 c1 03 38 c1
[  391.938597][ T8022] RSP: 0018:ffffc90002d67140 EFLAGS: 00010046
[  391.944669][ T8022] RAX: 0000000000000000 RBX: 1ffff920005ace2c RCX: 0000000000040000
[  391.952642][ T8022] RDX: ffffc90010db2000 RSI: 0000000000000200 RDI: ffffffff884b6c35
[  391.960618][ T8022] RBP: ffffc90002d671f0 R08: dffffc0000000000 R09: fffffbfff1bd2b66
[  391.968591][ T8022] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
[  391.976566][ T8022] R13: 1ffff1100f2f3b18 R14: ffffc90002d67180 R15: 0000000000000200
[  391.984539][ T8022] FS:  00007f15583556c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000
[  391.993469][ T8022] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  392.000054][ T8022] CR2: 000000110c3d8202 CR3: 000000006aa0f000 CR4: 00000000003506e0
[  392.008029][ T8022] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  392.015999][ T8022] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  392.023969][ T8022] Call Trace:
[  392.027246][ T8022]  <TASK>
[  392.030175][ T8022]  ? __warn+0x15b/0x300
[  392.034341][ T8022]  ? __local_bh_enable_ip+0x1b3/0x1f0
[  392.039715][ T8022]  ? report_bug+0x1b7/0x2e0
[  392.044234][ T8022]  ? handle_bug+0x3d/0x70
[  392.048563][ T8022]  ? exc_invalid_op+0x16/0x40
[  392.053243][ T8022]  ? asm_exc_invalid_op+0x16/0x20
[  392.058282][ T8022]  ? local_bh_enable+0x5/0x20
[  392.062958][ T8022]  ? __local_bh_enable_ip+0x1b3/0x1f0
[  392.068339][ T8022]  ? local_bh_enable+0x5/0x20
[  392.073015][ T8022]  ? _local_bh_enable+0xa0/0xa0
[  392.077880][ T8022]  __dev_queue_xmit+0x1c56/0x3230
[  392.082930][ T8022]  ? dev_queue_xmit+0x20/0x20
[  392.087606][ T8022]  ? __copy_skb_header+0x47b/0x600
[  392.092724][ T8022]  ? __skb_clone+0x454/0x6c0
[  392.097329][ T8022]  ? skb_clone+0x1ee/0x350
[  392.101752][ T8022]  __netlink_deliver_tap+0x4d2/0x760
[  392.107061][ T8022]  netlink_deliver_tap+0x16c/0x180
[  392.112179][ T8022]  netlink_broadcast_filtered+0xc2d/0x11a0
[  392.118008][ T8022]  netlink_broadcast+0x35/0x50
[  392.123127][ T8022]  genlmsg_multicast_netns+0x8e/0xc0
[  392.128423][ T8022]  nl80211_frame_tx_status+0x659/0xa40
[  392.133894][ T8022]  ? cfg80211_control_port_tx_status+0x50/0x50
[  392.140047][ T8022]  ? do_raw_spin_unlock+0x137/0x8b0
[  392.145260][ T8022]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  392.151159][ T8022]  ? _raw_spin_unlock+0x40/0x40
[  392.156020][ T8022]  cfg80211_mgmt_tx_status+0x3a/0x50
[  392.161309][ T8022]  ieee80211_report_used_skb+0x12f6/0x1810
[  392.167127][ T8022]  ? _raw_spin_lock_irqsave+0xac/0x120
[  392.172595][ T8022]  ? ieee80211_handle_filtered_frame+0x750/0x750
[  392.178929][ T8022]  ? _raw_spin_lock_irqsave+0xdd/0x120
[  392.184390][ T8022]  ? _raw_spin_lock+0x40/0x40
[  392.189068][ T8022]  ? skb_queue_purge+0x2b9/0x2e0
[  392.194014][ T8022]  ieee80211_free_txskb+0x1e/0x30
[  392.199044][ T8022]  ieee80211_do_stop+0x10b8/0x1ce0
[  392.204173][ T8022]  ? ieee80211_stop_queues_by_reason+0x1ce/0x250
[  392.210503][ T8022]  ? ieee80211_sdata_stop+0x70/0x70
[  392.215700][ T8022]  ? ieee80211_get_vif_queues+0x228/0x390
[  392.221412][ T8022]  ieee80211_if_change_type+0x447/0x9f0
[  392.226941][ T8022]  ieee80211_change_iface+0x57/0x430
[  392.232291][ T8022]  ? cfg80211_mlme_purge_registrations+0x1f3/0x220
[  392.238789][ T8022]  cfg80211_change_iface+0x8ab/0x10c0
[  392.244144][ T8022]  __cfg80211_wext_siwmode+0x1b7/0x280
[  392.249585][ T8022]  ? __cfg80211_wext_giwfreq+0x7e0/0x7e0
[  392.255205][ T8022]  ? apparmor_capable+0x12e/0x190
[  392.260204][ T8022]  ? full_name_hash+0x8f/0xe0
[  392.264948][ T8022]  ioctl_standard_call+0xdb/0x280
[  392.270879][ T8022]  ? __cfg80211_wext_giwfreq+0x7e0/0x7e0
[  392.276612][ T8022]  ? __cfg80211_wext_giwfreq+0x7e0/0x7e0
[  392.282250][ T8022]  wext_ioctl_dispatch+0x16f/0x460
[  392.287467][ T8022]  ? wext_ioctl_dispatch+0x460/0x460
[  392.293582][ T8022]  ? iw_handler_get_private+0x1e0/0x1e0
[  392.299716][ T8022]  wext_handle_ioctl+0x15b/0x260
[  392.307000][ T8022]  ? call_commit_handler+0xf0/0xf0
[  392.312472][ T8022]  sock_ioctl+0x13b/0x770
[  392.320467][ T8022]  ? sock_poll+0x410/0x410
[  392.325552][ T8022]  ? __fget_files+0x413/0x480
[  392.330518][ T8022]  ? bpf_lsm_file_ioctl+0x5/0x10
[  392.336502][ T8022]  ? security_file_ioctl+0x7d/0xa0
[  392.341627][ T8022]  ? sock_poll+0x410/0x410
[  392.346028][ T8022]  __se_sys_ioctl+0xf1/0x160
[  392.350616][ T8022]  do_syscall_64+0x3b/0xb0
[  392.355008][ T8022]  ? clear_bhb_loop+0x15/0x70
[  392.359680][ T8022]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  392.366338][ T8022] RIP: 0033:0x7f1559efcef9
[  392.373422][ T8022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  392.396091][ T8022] RSP: 002b:00007f1558355038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  392.404486][ T8022] RAX: ffffffffffffffda RBX: 00007f155a0b6058 RCX: 00007f1559efcef9
[  392.412475][ T8022] RDX: 0000000020000000 RSI: 0000000000008b06 RDI: 0000000000000008
[  392.420427][ T8022] RBP: 00007f1559f6f046 R08: 0000000000000000 R09: 0000000000000000
[  392.428393][ T8022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  392.436340][ T8022] R13: 0000000000000000 R14: 00007f155a0b6058 R15: 00007fff7d059378
[  392.444407][ T8022]  </TASK>
[  392.447414][ T8022] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  392.454663][ T8022] CPU: 1 PID: 8022 Comm: syz.4.996 Not tainted 5.15.166-syzkaller #0
[  392.462709][ T8022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  392.472748][ T8022] Call Trace:
[  392.476010][ T8022]  <TASK>
[  392.478916][ T8022]  dump_stack_lvl+0x1e3/0x2d0
[  392.483577][ T8022]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  392.489190][ T8022]  ? panic+0x860/0x860
[  392.493238][ T8022]  ? panic+0x860/0x860
[  392.497278][ T8022]  ? __local_bh_enable_ip+0xe0/0x1f0
[  392.502539][ T8022]  ? __local_bh_enable_ip+0xe0/0x1f0
[  392.507796][ T8022]  panic+0x318/0x860
[  392.511665][ T8022]  ? __warn+0x16a/0x300
[  392.515794][ T8022]  ? fb_is_primary_device+0xd0/0xd0
[  392.520975][ T8022]  ? __local_bh_enable_ip+0x1b3/0x1f0
[  392.526319][ T8022]  __warn+0x2b2/0x300
[  392.530283][ T8022]  ? __local_bh_enable_ip+0x1b3/0x1f0
[  392.535646][ T8022]  report_bug+0x1b7/0x2e0
[  392.539958][ T8022]  handle_bug+0x3d/0x70
[  392.544109][ T8022]  exc_invalid_op+0x16/0x40
[  392.548588][ T8022]  asm_exc_invalid_op+0x16/0x20
[  392.553416][ T8022] RIP: 0010:__local_bh_enable_ip+0x1b3/0x1f0
[  392.559393][ T8022] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 4a 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 0b e9 d0 fe ff ff e8 3f 00 00 00 eb a2 <0f> 0b e9 02 ff ff ff 48 c7 c1 c4 8e e9 8d 80 e1 07 80 c1 03 38 c1
[  392.578990][ T8022] RSP: 0018:ffffc90002d67140 EFLAGS: 00010046
[  392.585036][ T8022] RAX: 0000000000000000 RBX: 1ffff920005ace2c RCX: 0000000000040000
[  392.592988][ T8022] RDX: ffffc90010db2000 RSI: 0000000000000200 RDI: ffffffff884b6c35
[  392.601039][ T8022] RBP: ffffc90002d671f0 R08: dffffc0000000000 R09: fffffbfff1bd2b66
[  392.609078][ T8022] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
[  392.617038][ T8022] R13: 1ffff1100f2f3b18 R14: ffffc90002d67180 R15: 0000000000000200
[  392.624992][ T8022]  ? local_bh_enable+0x5/0x20
[  392.629744][ T8022]  ? local_bh_enable+0x5/0x20
[  392.634439][ T8022]  ? _local_bh_enable+0xa0/0xa0
[  392.639272][ T8022]  __dev_queue_xmit+0x1c56/0x3230
[  392.644281][ T8022]  ? dev_queue_xmit+0x20/0x20
[  392.648929][ T8022]  ? __copy_skb_header+0x47b/0x600
[  392.654014][ T8022]  ? __skb_clone+0x454/0x6c0
[  392.658580][ T8022]  ? skb_clone+0x1ee/0x350
[  392.662971][ T8022]  __netlink_deliver_tap+0x4d2/0x760
[  392.668240][ T8022]  netlink_deliver_tap+0x16c/0x180
[  392.673323][ T8022]  netlink_broadcast_filtered+0xc2d/0x11a0
[  392.679131][ T8022]  netlink_broadcast+0x35/0x50
[  392.683908][ T8022]  genlmsg_multicast_netns+0x8e/0xc0
[  392.689175][ T8022]  nl80211_frame_tx_status+0x659/0xa40
[  392.694612][ T8022]  ? cfg80211_control_port_tx_status+0x50/0x50
[  392.700754][ T8022]  ? do_raw_spin_unlock+0x137/0x8b0
[  392.705930][ T8022]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  392.711815][ T8022]  ? _raw_spin_unlock+0x40/0x40
[  392.716661][ T8022]  cfg80211_mgmt_tx_status+0x3a/0x50
[  392.721920][ T8022]  ieee80211_report_used_skb+0x12f6/0x1810
[  392.727722][ T8022]  ? _raw_spin_lock_irqsave+0xac/0x120
[  392.733167][ T8022]  ? ieee80211_handle_filtered_frame+0x750/0x750
[  392.739495][ T8022]  ? _raw_spin_lock_irqsave+0xdd/0x120
[  392.744932][ T8022]  ? _raw_spin_lock+0x40/0x40
[  392.749584][ T8022]  ? skb_queue_purge+0x2b9/0x2e0
[  392.754498][ T8022]  ieee80211_free_txskb+0x1e/0x30
[  392.759502][ T8022]  ieee80211_do_stop+0x10b8/0x1ce0
[  392.764600][ T8022]  ? ieee80211_stop_queues_by_reason+0x1ce/0x250
[  392.770903][ T8022]  ? ieee80211_sdata_stop+0x70/0x70
[  392.776078][ T8022]  ? ieee80211_get_vif_queues+0x228/0x390
[  392.781786][ T8022]  ieee80211_if_change_type+0x447/0x9f0
[  392.787333][ T8022]  ieee80211_change_iface+0x57/0x430
[  392.792591][ T8022]  ? cfg80211_mlme_purge_registrations+0x1f3/0x220
[  392.799077][ T8022]  cfg80211_change_iface+0x8ab/0x10c0
[  392.804430][ T8022]  __cfg80211_wext_siwmode+0x1b7/0x280
[  392.809862][ T8022]  ? __cfg80211_wext_giwfreq+0x7e0/0x7e0
[  392.815475][ T8022]  ? apparmor_capable+0x12e/0x190
[  392.820476][ T8022]  ? full_name_hash+0x8f/0xe0
[  392.825129][ T8022]  ioctl_standard_call+0xdb/0x280
[  392.830134][ T8022]  ? __cfg80211_wext_giwfreq+0x7e0/0x7e0
[  392.835762][ T8022]  ? __cfg80211_wext_giwfreq+0x7e0/0x7e0
[  392.841367][ T8022]  wext_ioctl_dispatch+0x16f/0x460
[  392.846453][ T8022]  ? wext_ioctl_dispatch+0x460/0x460
[  392.851709][ T8022]  ? iw_handler_get_private+0x1e0/0x1e0
[  392.857228][ T8022]  wext_handle_ioctl+0x15b/0x260
[  392.862139][ T8022]  ? call_commit_handler+0xf0/0xf0
[  392.867232][ T8022]  sock_ioctl+0x13b/0x770
[  392.871540][ T8022]  ? sock_poll+0x410/0x410
[  392.875929][ T8022]  ? __fget_files+0x413/0x480
[  392.880599][ T8022]  ? bpf_lsm_file_ioctl+0x5/0x10
[  392.885553][ T8022]  ? security_file_ioctl+0x7d/0xa0
[  392.890659][ T8022]  ? sock_poll+0x410/0x410
[  392.895051][ T8022]  __se_sys_ioctl+0xf1/0x160
[  392.899620][ T8022]  do_syscall_64+0x3b/0xb0
[  392.904027][ T8022]  ? clear_bhb_loop+0x15/0x70
[  392.908685][ T8022]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  392.914573][ T8022] RIP: 0033:0x7f1559efcef9
[  392.918981][ T8022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  392.938558][ T8022] RSP: 002b:00007f1558355038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  392.946963][ T8022] RAX: ffffffffffffffda RBX: 00007f155a0b6058 RCX: 00007f1559efcef9
[  392.954909][ T8022] RDX: 0000000020000000 RSI: 0000000000008b06 RDI: 0000000000000008
[  392.962856][ T8022] RBP: 00007f1559f6f046 R08: 0000000000000000 R09: 0000000000000000
[  392.970805][ T8022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  392.978768][ T8022] R13: 0000000000000000 R14: 00007f155a0b6058 R15: 00007fff7d059378
[  392.986723][ T8022]  </TASK>
[  392.989929][ T8022] Kernel Offset: disabled
[  392.994556][ T8022] Rebooting in 86400 seconds..