last executing test programs:

1m24.203873991s ago: executing program 0 (id=43):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.current\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001040)='cgroup.controllers\x00', 0x275a, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@gettfilter={0x24, 0x28, 0x6ce324a938346939, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x3}, {0x0, 0xffff}}}, 0x24}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0x4, &(0x7f0000000740)=ANY=[@ANYRES32=r1, @ANYRESOCT=r2], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x51, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
socket$packet(0x11, 0x2, 0x300)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0)
r9 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0)
syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc216, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x90, 0x0, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x4, 0x1, 0x1, {0x22, 0x1bc}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc1, 0x6, 0xb7}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x7, 0xe, 0xf}}]}}}]}}]}}, &(0x7f0000000100)={0xa, &(0x7f0000000080)={0x8f, 0x6, 0x110, 0x1, 0x4, 0xc, 0x9f, 0x8}, 0x1a, &(0x7f00000000c0)={0x5, 0xf, 0x1a, 0x3, [@wireless={0xb, 0x10, 0x1, 0x4, 0x8f, 0x3, 0x5, 0x3}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x8, 0x1, 0x6e3a}]}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl1\x00', <r10=>0x0, 0x4, 0x3, 0xd3, 0x45, 0x0, @remote, @loopback, 0x7800, 0x10, 0x9, 0x5}})
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000400)={@multicast2, @multicast2, r10}, 0xc)
syz_usb_control_io$cdc_ecm(r9, 0x0, 0x0)
syz_usb_control_io$uac1(r9, 0x0, &(0x7f0000000580)={0x44, &(0x7f00000002c0)=ANY=[@ANYBLOB="400004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1m20.994482936s ago: executing program 0 (id=46):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x0, 0x0, @void, @value}, 0x10)
socket$inet6_dccp(0xa, 0x6, 0x0)

1m20.154454029s ago: executing program 0 (id=47):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x804000, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x44f, &(0x7f00000009c0)="$eJzs271vG2UYAPDn7DhtSEtCKV8tH4GCiPhImrRABwZAIDEUCQkGGKMkrULdBDVBolUkUoYyIYTEjhj5F5hgQYgJiRV2VKlCWWiZjM6+S2zXcZPUjkv9+0nXPu995H0f3732e/faAfStsfSfJOJARPwRESO1Ymr/xg5jtf+ur6/O3lhfnU2iUnnv76S63z/rq7P538qOi+H6QiRxtEW9yxcvnZspl+cvZOXJlfMfTy5fvPTiwvmZs/Nn5xenT506eWLqlZenX+pInsNRyKK3P/z6ndNfNuTflEeHjLXb+Eyl0uHqeutgXZwM9LAh7EgxItLTVar2/5EoxubJG4m3Pu9p44CuqlQqleGtN69VgLtYEo1lXR76Rf5Bn97/5kvzIOC17g0/eu7a67UboDTv69lS2zKw8cSg1HR/20ljEfHB2r/fpkt05zkEAECDH9PxzwvpaKd5/FeIB+v2uzebGxqNiPsi4lBE3B+LcTgiHoio7vtQRDy8w/qbJ0luHv8Uru4qsW1Kx3+vZnNbjeO/fPQXo8WsdLCafyk5s1CeP569JuNR2peWp9rU8dObv3+11bb68V+6pPXnY8GsHVcH9jUeMzezMnM7Ode7djniyECr/JONmYAkIh6JiCO7rGPhue8f3WrbrfNvowPzTJXvIp6tnf+1aMo/l7Sfn5zcH+X545P5VXGzX3+78u5W9d9W/h2Qnv97Wl7/G/mPJvXztcs7r+PKn1/M5tPJzXZ7/Q8m71fjwWzdpzMrKxemIgaT07VG16+f3jw2L+f7p/mPH2vd/w/F5itxNCLSi/ixiHg8Ip7I2v5kRDwVEcfa5P/LG09/1LxuaNv5d1ea/9yOzv9mMBjNa1oHxXM//9BQ6ehmmOV/o/35P1mNxrM123n/2067dnc1AwAAwP9PISIORFKY2IgLhYmJ2nf4D0cUykvLK8+fWfpkca72G4HRKBXyJ10jdc9Dp7Lb+lr5ckTUvlqQbz8Rhepz42+KQ9XyxOxSea7XyUOfG96i/6f+Kva6dUDX+b0W9C/9H/qX/g/9a2f9f1/X2gHsvRb9f6gX7QD2XqvP/8960A5g7zX1f9N+0Ec8/4P+pf9D/9L/oS8tD8WtfyTfNsj/0i4Pv2uDKN0RzehaEIU7ohmCLgW9fV8CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADolP8CAAD//6RH3J8=")
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000440)={0x1c, &(0x7f00000004c0)={0x20, 0x16, 0x6, "69c069a9af88"}, 0x0, 0x0})
syz_usb_control_io$printer(r1, &(0x7f0000000100)={0x14, &(0x7f0000000080)={0x20, 0x6, 0x74, {0x74, 0xb, "603a0f46811b15564904462e97dffe42b59d1a0ea1053ada30798697da1b3c47edeaba5f96767f80b70b3752632b6c8f3612bc6a39a0d05e694613a64d42485c9b046756d316d445901116e3c529fc221a1d77495664413b7ef7337f07fac526cddb9068ef5712db55551a8d8c78f7892304"}}, &(0x7f00000001c0)={0x0, 0x3, 0x9b, @string={0x9b, 0x3, "a1057fc085a3b9ef76a24859239eda26a6bfaa3611bce175b7516c05ae145353a9883cf98883f733e44eaebdc387b408e836df220c029ac291b5fbdab0b2a4185af3e561b15fb4b1a7eab9e79d1814e4c4e8c872d821a74a8caef5fff6513697fa61ce5b8f4f7e7408b015552f430640f9a403f897607fbb097814da1619139f53b5b827e5fe85283053373630a0d98c550d077730b27862eb"}}}, &(0x7f0000000440)={0x34, &(0x7f0000000140)={0x20, 0xa, 0x13, "8b904b71690db695d180293d8f848751ab741e"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000300)={0x20, 0x0, 0x83, {0x81, "2c9fc1ec85597f2cb628cae0ecfa3978f683515504aec56748ce07c04aec54fb2c77450fa722dbdc41684ae82d101e6eeff74f7f306caec6986b3b809fa277f1a78c9b2e7a66d1057f666f9e517d15b7753098e4a8cd187e1c9349d28742eee3bf7b35177d7213333e7793e759d6511bdc158d160864cf6439cdeb3beb8f76ef6b"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x6}, &(0x7f0000000400)={0x20, 0x0, 0x1, 0x6}})

1m19.371265939s ago: executing program 0 (id=50):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./file1\x00', 0x84, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x8b, 0x2bb, &(0x7f00000009c0)="$eJzs3U9rE0EYx/Hf7KZJamtdbUUQD1ItepK2XsRLQIqvwYuiNhGKocVaQb0YPIsvwLsXX4AvwpMInvXkyRfQ28pMJs1ss5s0Lc22+P1Ams3u/Hlms8nOs5CuAPy37q39+nz7j30YKVYs6a4U2U1XVZF0UZfqrzZ3NnbareawhmKpLvcwkqtpBsqsb7byqtp6roaX2FcVzYbrcDzSNE1/lx0EylT3z3Hexkiq+U9nHBY+Tab2ve7EUqekWE4Ks6tdvdZc2XEAAMpluuf3yJ/nZ/38PYqkJX/aD8//P8+WHO/R3NBu2SGULDj/uywrNfb9Pec29fM9l8LZ7VEvSxy3Hzt5rKp7ZGUmmCabVQ4miy6WaPrZRrt1a32r3Yz0Xg3HhHnhgqSGmj5n9TLRDja9mLMuq6qi1sYy48YwZcew2o+/0QiKzOd1evgeRzPfzHfzyCT6pObe/K+SmnDM/p26P9WPf7moua0XD+1z0i1VMMrzrpPL2R07dJRxUUYiv6fSWNkLBEk2zmpurar21eqObqWoJ9/OfG6t1RG1FmytL0Gt/tFcXPO4mY/mgVnUX33VWjD/j+zeXtLgJzO/EVfSHxlDx1NxJZNwVedKbslo/LFgTP19/EFPdUdzL9+8ff6k3W5tT3rBxjDxTlnoLvQOgpMSz+EW7HdsuEZJa7symd6rR951dY0qUwsLZ0e6f6H3sT5A770LeCMjnPA3E0rRf9OLy7ybZECYNPvlYbr5X5CvLLsUyf5JhszT01HTtqDFlZzcoLZX8EzQkvHX54szoJncDK6jMXKuazel68HKETlXogvS9NCxniZmTT/0mOv/AAAAAAAAAAAAAAAAAAAAp80kfq0RdMd/9AEAAAAAAAAAAAAAAAAAAAAA4BCK7/9b1zHe/zfzO4AD3/+3doSBAhjwLwAA///073LE")
chdir(0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
getdents64(r0, 0x0, 0x0)
r1 = getpgrp(0x0)
prlimit64(r1, 0xc, &(0x7f0000000200)={0x6, 0x800}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x26e1, 0x0)
close(r2)

49.708642797s ago: executing program 0 (id=50):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./file1\x00', 0x84, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x8b, 0x2bb, &(0x7f00000009c0)="$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")
chdir(0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
getdents64(r0, 0x0, 0x0)
r1 = getpgrp(0x0)
prlimit64(r1, 0xc, &(0x7f0000000200)={0x6, 0x800}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x26e1, 0x0)
close(r2)

21.202377212s ago: executing program 0 (id=50):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./file1\x00', 0x84, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x8b, 0x2bb, &(0x7f00000009c0)="$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")
chdir(0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
getdents64(r0, 0x0, 0x0)
r1 = getpgrp(0x0)
prlimit64(r1, 0xc, &(0x7f0000000200)={0x6, 0x800}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x26e1, 0x0)
close(r2)

12.258833394s ago: executing program 4 (id=203):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0))
open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88)
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
pipe2$watch_queue(&(0x7f0000000280), 0x80)
socket$tipc(0x1e, 0x5, 0x0)
socket$inet6(0xa, 0x3, 0xff)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100))
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0xfffffffd, 0x10100, 0x0, 0x21b}, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x7, 0x0, 0x45, @remote, @remote}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[@ANYRES64=r3], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

11.570895721s ago: executing program 4 (id=204):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1, 0x4040, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001680)={r0, &(0x7f0000001540), 0x0}, 0x20)
r1 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r1, 0x84, 0x6e, &(0x7f0000000000), 0x10)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)
r2 = io_uring_setup(0x3eae, &(0x7f0000000100)={0x0, 0x6d33, 0x1000, 0x0, 0x4000000})
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000180)='./file2\x00', 0x214018, &(0x7f00000014c0), 0xfc, 0x6e4, &(0x7f0000000c80)="$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")
io_uring_enter(r2, 0x3d74, 0x41eb, 0x19, &(0x7f0000000040)={[0x80000001]}, 0x8)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, 0xe)
writev(r3, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000600)="1c", 0x1}], 0x2)
removexattr(&(0x7f0000000080)='./file1\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="747275737465642e63703894f2b8ce2910e07788b1bae2787a03e329c2f425d1b82f46a7fe600869a59dc928"])

10.511391283s ago: executing program 3 (id=206):
mount$tmpfs(0x0, &(0x7f0000000140)='./cgroup\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={[], [{@smackfsroot={'smackfsroot', 0x3d, 'usrquota_block_har{limit'}}]})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
clock_gettime(0x0, &(0x7f0000000380)={<r1=>0x0, <r2=>0x0})
recvmmsg$unix(r0, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/63, 0x3f}, {&(0x7f00000001c0)=""/177, 0xb1}, {&(0x7f00000000c0)=""/116, 0x74}], 0x3, &(0x7f00000002c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}}], 0x1, 0x40030102, &(0x7f00000003c0)={r1, r2+60000000})

9.982402103s ago: executing program 4 (id=208):
socket$nl_netfilter(0x10, 0x3, 0xc)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340), 0x106}}, 0x20)
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2)
mmap(&(0x7f0000138000/0x1000)=nil, 0x1000, 0xa, 0x12, r0, 0xc1f72000)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340), 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400), 0x13f, 0x8}}, 0x20)
r2 = syz_open_dev$sndctrl(&(0x7f0000000780), 0xe8, 0x0)
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x3, 0xa83, &(0x7f0000000180)="$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")
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r2, 0xc0045540, &(0x7f00000007c0)={0x7})
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0), 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0x20)
socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0xffffffff7fffffff]}, 0x8)
fcntl$lock(r4, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x100000000000, 0x0, 0xffffffffffffffff})
fcntl$lock(r4, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1})
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
read$eventfd(r5, &(0x7f0000000080), 0x8)
r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x1fffff, 0x1, 0x11, r6, 0x0)

9.089806527s ago: executing program 3 (id=210):
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_cache\x00')
pread64(r0, &(0x7f0000000180)=""/15, 0xfffffe9c, 0xb6) (fail_nth: 2)

9.038059356s ago: executing program 2 (id=211):
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000440)=0x7)
ioctl$TCXONC(r0, 0x8910, 0x2)

8.179656426s ago: executing program 4 (id=212):
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x408000, 0x0)
io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, &(0x7f0000000180)={&(0x7f0000004000)={[{&(0x7f0000000080)="ee8c86e784b81c6bfe98d7b57a3d2aeea1164de94d4dd2cb724ad1f8612cdeb9260f0b0a5e5f2550db68c1e3a89cdacf2172d474", 0x34, 0x3}, {&(0x7f00000000c0)="aca80c553ec963768d62ae4b0c246e6ba3b8b38e7712ae6ef1bced8cc130822bf52516d36db27c932515656d9917f62a2918ec40806cd1ad5fb02e31e30bbff7c98e39686dd8bc88033f1e6f957d3f061bcb7c545a4afd7409a16a8d384c84af9f353cb90529b76b20956188650aaacaac7ffae33383e6889d654a4298662e23be24770a7878b43337b1ab33d3db7404d71996c0b9db858dd5314b71e1ea4d8b2292833fa38ea4db3d46a4e5ba1ca500"/185, 0xb9, 0x3}, {&(0x7f00000002c0)="f143581efd32f82db76e9ebe342e1aa29d1c9e043be66484b848fab300d8bfdf49b2a9b06a1a3a46d9937f0e4251b0f11dcd9c875097cab0b857cf53424350fd9c08b9177199b3534f83ac9e6fc075443b546a9c9462cae4667fe5a08b4abf8c828d736872f69dc78384ea26a74fe1f9cc599f1b6d149d737c29bcbe547c8da45a9dc5272018cb046cebd335f8fd869663a7f97f8a4507e67fb25f51dd391dbb62d767f11412e6b10e646a13d4", 0xad, 0x1}, {&(0x7f0000000200)="34af449eb488ed3584c53ad182a33e499181da219d25fe49b1c075ba9800b85f2535bf5961105820bcd4d6ac47c74ad7e3e36805552bb379166096d12be3035f78b64d2ff25f37c3404a46b16e4be78e0df13eba", 0x54, 0x3}]}, 0x4}, 0x1)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280))
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

8.131537502s ago: executing program 3 (id=214):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
pipe(&(0x7f0000000100))
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file2\x00', 0x800080, &(0x7f00000004c0)=ANY=[@ANYBLOB='flush_merge,fastboot,background_gc=off,noinline_dentry,mode=lfs,fsync_mode=strict,flush_merge,prjjquota=,fsync_mode=strict,background_gc=sync,resgid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6f666c7573685f6d657267652c6e6f6c617a7974696d652c002e5eab1ea1c8bbcec43f3f30"], 0x1, 0x5501, &(0x7f00000059c0)="$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")
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000240), &(0x7f00000003c0)=r3}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r2, 0x0, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x1c)
syz_emit_ethernet(0xf2, &(0x7f00000005c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb08004c6100e40066000001069078ac1414aaac1e00018303a18313d7000000000a0101000a010100ac1e01019404000000000000000000000000000000000000000300004e2100004e2400000002000000020000000000000000fffffffd00000009000000030000000c00000008fffffc00000000900000000700000006000010040000000900000091000000030000009080000001000000010000000200001018000000060000000e00000090000001ff00000000000000"], 0x0)

7.590140237s ago: executing program 2 (id=215):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@getnexthop={0x20, 0x76, 0xb0d, 0x4000, 0x0, {0x3}, [@NHA_MASTER={0x8, 0xa, 0x2}]}, 0x20}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=<r2=>0x0, &(0x7f00000000c0)=0x4)
sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipmr_newroute={0x30, 0x18, 0x100, 0x70bd26, 0x25dfdbff, {0x80, 0x0, 0x14, 0x8, 0xff, 0x2, 0xfd, 0x8, 0x400}, [@RTA_DST={0x8, 0x1, @rand_addr=0x64010100}, @RTA_MULTIPATH={0xc, 0x9, {0xffff, 0x4, 0x7, r2}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x440c0)

7.373249455s ago: executing program 4 (id=216):
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4)
syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x800000, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xff, 0x594d, &(0x7f000000b480)="$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")
stat(&(0x7f0000000100)='./file1\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setuid(r0)
creat(&(0x7f0000000140)='./file2\x00', 0x1ac)

6.931488293s ago: executing program 2 (id=218):
syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000055131eac8f33851a93087c0500229023000000ffae000000a6c02777ca4753f720b7e252230000000000000000"], 0x0)
prctl$PR_GET_TSC(0x19, &(0x7f0000000400))
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000640)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x2}}, './file0\x00'})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0xe)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r4=>0x0})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000680)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x2})
sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYRESDEC=0x0, @ANYRES32=r4, @ANYBLOB="000000000000000014001a80100004800c"], 0x34}}, 0x10)
r5 = socket$unix(0x1, 0x1, 0x0)
socket$unix(0x1, 0x1, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
mkdir(0x0, 0x1a0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x1c}], 0x1}, 0x0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x1, 0x20, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xacd}, {0xd, 0x24, 0xf, 0x1, 0x10, 0x4b21, 0x3, 0x6}, {0x6, 0x24, 0x1a, 0x7, 0x3d}}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x80, 0x9, 0x80}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0xec, 0x8, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xf, 0x1, 0x8}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x310, 0xff, 0x7, 0xb2, 0x40, 0x8}, 0x18, &(0x7f0000000280)=ANY=[@ANYBLOB="050718000203100b10100a00"/24], 0x1, [{0x6b, &(0x7f0000000440)=@string={0x6b, 0x3, "cdf475900203c7ca997b47587ac5467a4f431b44fe587b06c2110bcddc674cbe8c1b38dbdaca12aa88a1e40a832b62b1a99def39de8c36e0a6f3c5974bff13f3b2d295d292dc1bfc649cfee0643e477f9e1127a0ca31e7a002614dff3cf604d53bebb010c66a3b46c3"}}]})
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b30, &(0x7f0000000040)={'wlan0\x00'})
r7 = accept4$unix(r5, &(0x7f0000000580), &(0x7f0000000600)=0x6e, 0x80800)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b30, &(0x7f00000000c0)={'wlan0\x00'})
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
r9 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="011f00000000000000000d0000000c000180080001"], 0x20}}, 0x0)

5.842327911s ago: executing program 3 (id=219):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000c50000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='netlink_extack\x00', r2}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001a00010000000000000000000a000000000000000010"], 0x24}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8905, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'})
syz_usb_connect(0x3, 0x24, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0], 0x0)

5.461813719s ago: executing program 1 (id=220):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="56a900000000000061118cd46c8cd14edace45000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)

4.603637706s ago: executing program 1 (id=221):
syz_emit_ethernet(0x76, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001200)=ANY=[], 0x28}}, 0x0)

3.895558997s ago: executing program 1 (id=222):
socket$nl_netfilter(0x10, 0x3, 0xc)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340), 0x106}}, 0x20)
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2)
mmap(&(0x7f0000138000/0x1000)=nil, 0x1000, 0xa, 0x12, r0, 0xc1f72000)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340), 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400), 0x13f, 0x8}}, 0x20)
r2 = syz_open_dev$sndctrl(&(0x7f0000000780), 0xe8, 0x0)
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x3, 0xa83, &(0x7f0000000180)="$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")
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r2, 0xc0045540, &(0x7f00000007c0)={0x7})
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0), 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20)
r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0x20)
socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0xffffffff7fffffff]}, 0x8)
fcntl$lock(r4, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x100000000000, 0x0, 0xffffffffffffffff})
fcntl$lock(r4, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1})
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
read$eventfd(r5, &(0x7f0000000080), 0x8)
r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x1fffff, 0x1, 0x11, r6, 0x0)

3.149424812s ago: executing program 2 (id=223):
migrate_pages(0x0, 0xfff, &(0x7f0000000200)=0x67cc, &(0x7f0000000240)=0x5)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x10000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffe, 0x2, 0xffffffff}, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_pid(r2, &(0x7f0000000080), 0x12)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x401)

2.631616906s ago: executing program 4 (id=224):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3804402, &(0x7f0000000bc0)={[{@user_xattr}, {@nojournal_checksum}, {@resuid}, {@errors_remount}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x1}}, {@noinit_itable}, {@nomblk_io_submit}, {@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x55f, &(0x7f0000002f80)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
exit(0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6)
syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000102505a1a44000000001010902440001fd00000009040000ff0202ffff052406000005240000000d240f010000000000000000000905810320000000000905820220000000000905030208"], 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$FUSE_BMAP(r1, &(0x7f0000000240)={0x18, 0xffffffffffffffda}, 0x18)
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000004f40)='./bus\x00', 0x409, &(0x7f0000000080)={[{@nobarrier}, {@datasum}, {@space_cache}, {@compress_algo={'compress', 0x3d, 'no'}}, {@flushoncommit}, {@subvol={'subvol', 0x3d, 'device'}}, {@compress}, {@thread_pool={'thread_pool', 0x3d, 0x9e}}, {@discard_async}]}, 0x4, 0x55ae, &(0x7f000000ac40)="$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")
getdents(r0, 0xfffffffffffffffd, 0xbb)

1.963386201s ago: executing program 1 (id=225):
syz_mount_image$hfs(&(0x7f0000001600), &(0x7f0000000080)='./file1\x00', 0x2000000, &(0x7f0000000180)=ANY=[@ANYBLOB='file_umask=00000000000000002000004,iocharxet=koi8-u,codepage=cp869,dir_umask=00000000000000000000005,quiet,\x00'], 0x1, 0x2fe, &(0x7f0000001100)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x105042, 0x0)
r1 = getpid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r1, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
write$FUSE_DIRENTPLUS(r0, &(0x7f0000000600)=ANY=[], 0x200)

1.597883609s ago: executing program 2 (id=226):
r0 = socket$inet6_dccp(0xa, 0x6, 0x0)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000})
close_range(r0, 0xffffffffffffffff, 0x400000000000000)

1.429920156s ago: executing program 3 (id=227):
syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./bus\x00', 0x3000002, &(0x7f0000000340)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0, @ANYBLOB="2c66696c655f756d61736b3d30303030303030303030303030303030303030303030312c696f636861727365743d6d6163726f6d616e2c706172743d3078303030303030303030303030613565662c63726561746f723da0a54db32c706172743d3078303030303030303030303030306666662c6769643d", @ANYRESHEX=0x0, @ANYBLOB=',uid=', @ANYRESHEX=0x0, @ANYBLOB=',codepage=macinuit,dir_umask=0000000000000codepage=cp737,func=POLICY_CHECK,\x00'/87], 0x1, 0x2f2, &(0x7f00000006c0)="$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")
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x84)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
listen(r2, 0x3)
shutdown(r2, 0x1)
getdents(r0, &(0x7f00000008c0)=""/54, 0x36)
mkdir(&(0x7f0000000440)='./control\x00', 0x0)
rmdir(&(0x7f0000000040)='./control\x00')
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000080)={r4, 0x7}, &(0x7f00000000c0)=0x8)
r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000000)={0x7fff, "664378cab0396d0c0d13c001f7adaff634ade1810861c4b9a0cec785478abbe7"})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000040)={0xc, "55780d4dc328000010c46fa9d1f5ffb92eafb6723b08000000172578e35bde00"})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000080)={0xc, "7dd6f631275eca1bd06d4f200eff8ead66f1fa2bdfcd661e75e74eef6b82279c"})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e80)=ANY=[@ANYBLOB="7c0000001000010026bd70000000000000000000", @ANYRES32=0x0, @ANYRES16=r6], 0x7c}}, 0x20000000)
r7 = syz_open_dev$video(&(0x7f0000000680), 0x10000, 0x40)
ioctl$VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f0000000840)={0x8, 0x1, 0x2, {0x8, @pix={0x4513, 0x9, 0x3032344d, 0x5, 0x5, 0x8000, 0x3, 0xfffffffa, 0x1, 0x1, 0x2, 0x6}}, 0x5})
r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r9 = syz_open_dev$sg(&(0x7f00000060c0), 0x2b46e208, 0x8002)
ioctl$SG_NEXT_CMD_LEN(r9, 0x2283, &(0x7f0000000380)=0x3)
connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)

1.429582643s ago: executing program 1 (id=228):
openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000600)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000008000000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0)
r4 = socket(0x2, 0x2, 0x0)
r5 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
ioctl$NBD_SET_SOCK(r3, 0xab00, r4)
ioctl$NBD_DO_IT(r5, 0xab03)
ioctl$NBD_SET_SIZE_BLOCKS(r3, 0xab07, 0x4007)
openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
r6 = syz_io_uring_setup(0x239, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f00000002c0)=<r7=>0x0, &(0x7f0000000000)=<r8=>0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r6, 0x2def, 0x0, 0x0, 0x0, 0x0)
mount(&(0x7f0000000500)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000080)='btrfs\x00', 0x8007, 0x0)

264.438204ms ago: executing program 3 (id=229):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
pipe(&(0x7f0000000100))
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file2\x00', 0x800080, &(0x7f00000004c0)=ANY=[@ANYBLOB='flush_merge,fastboot,background_gc=off,noinline_dentry,mode=lfs,fsync_mode=strict,flush_merge,prjjquota=,fsync_mode=strict,background_gc=sync,resgid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6f666c7573685f6d657267652c6e6f6c617a7974696d652c002e5eab1ea1c8bbcec43f3f30"], 0x1, 0x5501, &(0x7f00000059c0)="$eJzs3E1rY+UXAPCTdjrv//kXceFuLgxCC5PQ9GXQXdUZfMEOZdSFK02TNGQmyS1NmtauXLgUF34TUXDl0s/gwrU7caG4E5Tce6NTX3Cg6cS2vx/cnPs8eXJynlBKz70lAZxb88nPP5biRlyJiNmIuB6RnZeKI7Oeh+ci4mZEzDx2lIr53ycuRsTViLgxSp7nLBVPfXp7eGvthzd++uqbSxeuffblt9PbNTBtz0dEdyc/3+/mMW3l8WExXxu2s9hdHRYxf6L7qBinedxvbmUZ9mvjdbUsrrTy9enOXn8Utzu1+ii22tvZ/E4vf8P+sDXOk73gYW03GzeaW1ls99Mstg7zug4O899th/1BnqdR5PsgSx+DwTjm882DZr6fnUdZrPcGxXyeN200D0ZxWMTi7aKedhpZHVvH+aT/295s9/YOkmFzt99Oe8lapfpCpXqnXN1NG81Bc7Vc6zburCYLrc5oWXnQrHXXW2na6jQr9bS7mCy06vVytZos3G1utWu9pFqtrFSWymuLxdnt5NX77ySdRrIwii+3e3uDdqefbKe7Sf6KxWS5svLiYnKrmry1sZlsPrh3b2Pz7ffuvnv/pY3XXykW/aWsZGF5aXm5XF0qL1cXz9H+PyqKnuD+4VhK0y4A4PQ5bv8/O+7/Q/8PPLmT6/93H0ScfP8f+v+JOFX973nv/09g/3As+n8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHPru7nPX8tO5vPxtWL+f8XUM8W4FBEzEfHr35iNi0dyzhZ55v5h/dyfavi6FFmG0XtcKo6rEbFeHL/8/6Q/BQAAADi7vvjw5id5t54/zE+7IJ6m/KLNzPX3J5SvFBFz899PKNvM6OHZCSXLfr4vxMGEsmUXsC5PKFl+ye3CpLI9kdkj4fJjoZSHmX/L8HTrBQAAJuFoJ+CvegAAgLPr42kXwHSUYnwrc3wvOPvP+z9uCF45MgIAAABOodK0CwAAAABOXNb/+/4/AAAAONvy7/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDf2Lmf28SBKA7AzwYv7D8tWu19W9kblLEl7HGPEQWkCUogLaQBaiC3lBBBhMdBISJRJI9tBX2fZIax4McMgsO8kQYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADo0l21Xtxc/b5um7Pbt5NnNgAAAMA522q9qJ/MUv9rc/97c+tn0y8iooyIc2v3UXw6yRw1OdUrr69ejOE2ok44fMakub5ExJ/mevjR9bcAAAAAl2uzXM3Taj09zIYeEH1KRZvy299MeUVEVLP7TGnlIe9XprD69z2O/5nS6gLWNFNYKrmNc6W9S/13P1btps+aIjXl2+/PNncAAKBHo5Om31UIAAAAffo39AAYRhFPW5nHrcBJaprtvc8nPQAAAOADKoYeAAAAANC5ev3v/D8AAAC4bOn8PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALq0rdaLzXI1b5uz27eTZzYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAI/vzjgIhEAZhsHd9ZzL3P6w0aGpqUgXCx98YDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb373l/8TU+NMMvfaWHoeSdZOja1TY+/cOPrD+Po1AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABc7M9LCoRAEETBnPG/k77/YSVBzyBCBDQ8qqhFAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAX/e6X/xNT40wyd9pYOh5J1q4aW1eNvQeNowfj7d8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABc7NzPaxxVHADwNzM7W1sV1yh7iIiCB73Y7ba29iYelODBP0EI6bbGbv3R5mBLEXLxJjnnInoUEZR4y/+QcwK5xFsOe4jgWZnZmWTyA1x/dGaTfD7w5n13GOZ93yyEfOe9BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDR69yBOskNnHMfFuc29xwtZv3Wkz6yvbM9mLYujOpM+HV6ufoi6zSUCAADA+ZGU9X0IYSddm8v6uJPX/2l5TVbzf/fsOC7r+aN1f9mXtX/Wfv1l98X9gTrjcbKb3l4cDq4cT6X15GY53Z772yta+ZPP370k+RcSf7D8wijNn2f0zcbGe+08vFBHtgDAv3G57Iug/H0o6/tNJgbAudGqFN5l/Z90ms0JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoA6j5fB0GUchhNnWQZzZ2nu8cFK/vrI9W7Ybq6sr1Xtmt0hDCLcXh4MrNc5l2j14+Oju/HA4uF9/8EoIoanR3ymmf/ejCS4OoZHnI/ifgrj4sqcln9MRNPhDCQCAMyktWlbX76Rrc9m5aCaEP78/XP+/XonDhPX/7sc3NqtjVev/fm0znH69pXuf9x48fPTm4r35O4M7g0/futp/u3/t5vXrN3v5u5KeNyYAAAD8N+2iVev/eOb4+v+lShwmrP+/+Lb/VXWsRP1/ooNFv6YzAQAAON+ef/WP36MTzkftdvhyfmnpfn983P98dXxsINV/7ELRqvV/MtN0VgAAAEAdRsvRofX/W5U4TLj+/8wPL/1UvWcSQrhYrP9fXvhseKu+6Uy1Ov6cuOk5AgAA0KyLRauu/6f5/v94f8tDHEJ447VxXPwbwInq/+T9r3+sjlXd/3+tvilOpbg7fh553w2h1W06IwAAAM6yp4qWFfu/pWtzn/x86cO2/f8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdfsrAAD//9WjPmI=")

50.948326ms ago: executing program 1 (id=230):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='ns\x00')
r1 = landlock_create_ruleset(0x0, 0x0, 0x0)
landlock_restrict_self(r1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$int_in(r3, 0x5452, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = getpgid(0x0)
fcntl$setownex(r3, 0xf, &(0x7f0000000440)={0x0, r5})
sendmmsg$unix(r2, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="11", 0x1}], 0x1}}], 0x1, 0x40015)
fchdir(r0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6, 0x2, 0x0, 0x1}]})
lstat(0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x1, 0x178, [0x8, 0x7, 0x0, 0x200003f0, 0xb02d], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/376]}, 0x1f0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79"], 0xfdef)
accept$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000040)=0xffffffffffffffa8)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r8, 0x1, 0x70bd29, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4890)
r9 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
unshare(0x5a070700)
r10 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r10, &(0x7f0000006cc0)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@dstopts_2292={{0x14, 0x29, 0x4, {0x32}}}], 0x14}}], 0x1, 0x0)
fcntl$dupfd(r9, 0x0, r9)

0s ago: executing program 2 (id=231):
ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000040)=0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001a00010028bd7000fedbdf24818000006d"], 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x0)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, &(0x7f00000000c0))

kernel console output (not intermixed with test programs):

r_slave_0) is not up; please bring it up to get a fully working HSR network
[  231.598647][ T5802] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  231.633019][ T3547] bridge0: port 2(bridge_slave_1) entered blocking state
[  231.640815][ T3547] bridge0: port 2(bridge_slave_1) entered forwarding state
[  232.659373][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0
[  232.980128][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0
[  233.135156][ T5813] veth0_vlan: entered promiscuous mode
[  233.188942][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0
[  233.279479][ T5813] veth1_vlan: entered promiscuous mode
[  233.408611][ T5802] 8021q: adding VLAN 0 to HW filter on device batadv0
[  233.506543][ T5803] veth0_vlan: entered promiscuous mode
[  233.628830][ T5803] veth1_vlan: entered promiscuous mode
[  233.769464][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0
[  233.786310][ T5796] veth0_vlan: entered promiscuous mode
[  233.828053][ T5813] veth0_macvtap: entered promiscuous mode
[  233.899287][ T5813] veth1_macvtap: entered promiscuous mode
[  233.922847][ T5796] veth1_vlan: entered promiscuous mode
[  233.997741][ T5803] veth0_macvtap: entered promiscuous mode
[  234.043766][ T5803] veth1_macvtap: entered promiscuous mode
[  234.095485][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0
[  234.211361][ T5803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  234.223370][ T5803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  234.237780][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0
[  234.271954][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1
[  234.357475][ T5813] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  234.366677][ T5813] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  234.376099][ T5813] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  234.385287][ T5813] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  234.441173][ T5803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  234.451923][ T5803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  234.466376][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1
[  234.524153][ T5796] veth0_macvtap: entered promiscuous mode
[  234.583995][ T5803] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  234.594850][ T5803] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  234.604421][ T5803] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  234.613544][ T5803] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  234.658353][ T5800] veth0_vlan: entered promiscuous mode
[  234.687749][ T5796] veth1_macvtap: entered promiscuous mode
[  234.732948][ T5800] veth1_vlan: entered promiscuous mode
[  234.848540][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  234.859791][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  234.869969][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  234.880853][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  234.895343][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0
[  235.063660][ T5800] veth0_macvtap: entered promiscuous mode
[  235.090945][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  235.102445][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.112595][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  235.124188][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.138565][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1
[  235.189708][ T5800] veth1_macvtap: entered promiscuous mode
[  235.352232][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  235.363090][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.373207][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  235.383932][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.394019][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  235.404803][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.419250][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0
[  235.464728][ T5796] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  235.475932][ T5796] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  235.485144][ T5796] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  235.494203][ T5796] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  235.619050][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  235.631457][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.642898][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  235.654412][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.664930][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  235.675780][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.690853][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1
[  235.869420][ T5800] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  235.879766][ T5800] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  235.889419][ T5800] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  235.898463][ T5800] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  236.197581][ T5802] veth0_vlan: entered promiscuous mode
[  236.336213][ T5802] veth1_vlan: entered promiscuous mode
[  236.710348][ T5802] veth0_macvtap: entered promiscuous mode
[  236.796374][ T5802] veth1_macvtap: entered promiscuous mode
[  236.976834][ T5802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  236.987751][ T5802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.998036][ T5802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  237.008802][ T5802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.019050][ T5802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  237.029863][ T5802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.040037][ T5802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  237.051579][ T5802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.066702][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_0
[  237.375597][ T5802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  237.386382][ T5802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.396564][ T5802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  237.407511][ T5802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.417700][ T5802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  237.430839][ T5802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.442302][ T5802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  237.453879][ T5802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.468312][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_1
[  237.754914][ T5802] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  237.765286][ T5802] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  237.774437][ T5802] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  237.783517][ T5802] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  241.214120][ T4127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  241.222326][ T4127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  241.348635][ T4127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  241.357683][ T4127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  241.726687][ T3619] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  241.735891][ T3619] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  241.767564][ T3619] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  241.777823][ T3619] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  241.832550][ T4127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  241.840494][ T4127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  242.134002][   T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  242.142151][   T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  242.542050][ T5813] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  242.655884][ T4651] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  242.664088][ T4651] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  242.938394][ T5987] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  242.967775][ T3686] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  242.975960][ T3686] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  243.196786][ T5990] loop2: detected capacity change from 0 to 1024
[  243.264993][ T5988] loop0: detected capacity change from 0 to 2048
[  243.274075][ T5988] =======================================================
[  243.274075][ T5988] WARNING: The mand mount option has been deprecated and
[  243.274075][ T5988]          and is ignored by this kernel. Remove the mand
[  243.274075][ T5988]          option from the mount to silence this warning.
[  243.274075][ T5988] =======================================================
[  243.345978][ T5995] netlink: 'syz.1.2': attribute type 12 has an invalid length.
[  243.386330][ T5988] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  243.508921][ T5987] hfsplus: request for non-existent node 16777216 in B*Tree
[  243.516650][ T5987] hfsplus: request for non-existent node 16777216 in B*Tree
[  243.527397][ T5987] hfsplus: request for non-existent node 16777216 in B*Tree
[  243.535915][ T5987] hfsplus: request for non-existent node 16777216 in B*Tree
[  243.543812][ T5987] hfsplus: request for non-existent node 16777216 in B*Tree
[  243.551410][ T5987] hfsplus: request for non-existent node 16777216 in B*Tree
[  243.567262][ T5987] hfsplus: request for non-existent node 16777216 in B*Tree
[  243.576953][ T5987] hfsplus: request for non-existent node 16777216 in B*Tree
[  243.584819][ T5987] hfsplus: request for non-existent node 16777216 in B*Tree
[  243.592394][ T5987] hfsplus: request for non-existent node 16777216 in B*Tree
[  243.631987][ T5987] hfsplus: request for non-existent node 16777216 in B*Tree
[  243.639717][ T5987] hfsplus: request for non-existent node 16777216 in B*Tree
[  243.670083][ T5997] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  243.913193][ T5988] NILFS (loop0): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157
[  243.919391][   T29] audit: type=1800 audit(1738455503.683:2): pid=5987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3" name="file1" dev="loop2" ino=20 res=0 errno=0
[  243.926060][ T5988] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  244.028938][ T5988] Remounting filesystem read-only
[  244.068944][ T5988] NILFS (loop0): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157
[  244.082898][ T5988] NILFS error (device loop0): nilfs_bmap_last_key: broken bmap (inode number=16)
[  244.092515][ T5988] NILFS (loop0): error -5 truncating bmap (ino=16)
[  244.124946][ T6000] loop3: detected capacity change from 0 to 128
[  244.179682][ T6000] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  244.234549][ T6000] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  244.383251][ T6000] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  244.433176][ T3619] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  244.441439][ T3619] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  244.578123][ T6004] loop1: detected capacity change from 0 to 16
[  244.588229][ T5813] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer
[  244.641858][ T6004] erofs: Unknown parameter '��E�<��Oޅ@��S��Gƭ�d�f�\)��}lY�%c�0�L`Da�����4A���AmTDqZpݚ�^n��'
[  244.669837][   T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  244.678563][   T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  244.726269][ T6007] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7'.
[  244.767007][ T6000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'.
[  245.129109][ T6009] FAULT_INJECTION: forcing a failure.
[  245.129109][ T6009] name failslab, interval 1, probability 0, space 0, times 1
[  245.142500][ T6009] CPU: 1 UID: 0 PID: 6009 Comm: syz.0.8 Not tainted 6.13.0-syzkaller-09950-g60c828cf80c0 #0
[  245.142617][ T6009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  245.142695][ T6009] Call Trace:
[  245.142746][ T6009]  <TASK>
[  245.142788][ T6009]  dump_stack_lvl+0x216/0x2d0
[  245.142932][ T6009]  dump_stack+0x1e/0x24
[  245.143042][ T6009]  should_fail_ex+0x767/0x830
[  245.143213][ T6009]  should_failslab+0x17f/0x210
[  245.143355][ T6009]  __kmalloc_node_noprof+0x183/0x1250
[  245.143530][ T6009]  ? allocate_slab+0x70a/0x1110
[  245.143667][ T6009]  ? kmsan_get_metadata+0x13e/0x1c0
[  245.143800][ T6009]  ? kmsan_get_shadow_origin_ptr+0x38/0xb0
[  245.143966][ T6009]  allocate_slab+0x70a/0x1110
[  245.144116][ T6009]  ___slab_alloc+0x1287/0x3540
[  245.144239][ T6009]  ? dup_task_struct+0xc8/0xac0
[  245.144366][ T6009]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  245.144528][ T6009]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  245.144674][ T6009]  kmem_cache_alloc_node_noprof+0x84a/0xe00
[  245.144847][ T6009]  ? dup_task_struct+0xc8/0xac0
[  245.144976][ T6009]  ? kmsan_get_metadata+0x13e/0x1c0
[  245.145119][ T6009]  dup_task_struct+0xc8/0xac0
[  245.145240][ T6009]  ? kmsan_get_metadata+0x13e/0x1c0
[  245.145382][ T6009]  copy_process+0x968/0x5c30
[  245.145500][ T6009]  ? kernel_clone+0x59/0x1040
[  245.145647][ T6009]  ? kmsan_internal_set_shadow_origin+0x69/0x100
[  245.145843][ T6009]  kernel_clone+0x401/0x1040
[  245.145973][ T6009]  ? stack_depot_save_flags+0x2c/0x750
[  245.146127][ T6009]  ? kmsan_get_metadata+0x13e/0x1c0
[  245.146261][ T6009]  ? kmsan_get_metadata+0x13e/0x1c0
[  245.146404][ T6009]  ? __msan_memset+0xf5/0x1b0
[  245.146521][ T6009]  __x64_sys_clone+0x25c/0x360
[  245.146683][ T6009]  x64_sys_call+0x3bcc/0x3c30
[  245.146810][ T6009]  do_syscall_64+0xcd/0x1e0
[  245.146980][ T6009]  ? clear_bhb_loop+0x25/0x80
[  245.147129][ T6009]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  245.147285][ T6009] RIP: 0033:0x7f2eec38cda9
[  245.147380][ T6009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  245.147482][ T6009] RSP: 002b:00007f2eed23afe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  245.147601][ T6009] RAX: ffffffffffffffda RBX: 00007f2eec5a5fa0 RCX: 00007f2eec38cda9
[  245.147686][ T6009] RDX: 0000000000000000 RSI: 0000000000040000 RDI: 00000000640c7000
[  245.147761][ T6009] RBP: 00007f2eed23b090 R08: 0000000000000000 R09: 0000000000000000
[  245.147836][ T6009] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001
[  245.147907][ T6009] R13: 0000000000000000 R14: 00007f2eec5a5fa0 R15: 00007fffdb31cd08
[  245.148010][ T6009]  </TASK>
[  245.638416][ T3786] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  246.144406][ T6016] loop2: detected capacity change from 0 to 1024
[  246.575634][ T5853] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  246.660874][   T44] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  246.811355][ T5853] usb 2-1: Using ep0 maxpacket: 32
[  246.846961][ T5853] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  246.857533][ T5853] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x2 has invalid wMaxPacketSize 0
[  246.867871][ T5853] usb 2-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  246.881394][ T5853] usb 2-1: config 0 interface 0 has no altsetting 0
[  246.888438][ T5853] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  246.897989][ T5853] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.085420][ T5853] usb 2-1: config 0 descriptor??
[  247.184814][ T6031] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  247.269507][ T6036] loop2: detected capacity change from 0 to 1024
[  247.601416][ T6018] loop1: detected capacity change from 0 to 2048
[  248.038508][ T6018] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  248.051360][ T6018] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  248.190166][ T6018] fs-verity: sha256 using implementation "sha256-generic"
[  248.507334][ T5853] hid-thrustmaster 0003:044F:B65D.0001: unknown main item tag 0x0
[  248.517506][ T5853] hid-thrustmaster 0003:044F:B65D.0001: unknown main item tag 0x0
[  248.526574][ T5853] hid-thrustmaster 0003:044F:B65D.0001: unknown main item tag 0x0
[  248.534843][ T5853] hid-thrustmaster 0003:044F:B65D.0001: unknown main item tag 0x0
[  248.543200][ T5853] hid-thrustmaster 0003:044F:B65D.0001: unknown main item tag 0x0
[  248.711713][ T6018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11'.
[  248.767448][ T5853] hid-thrustmaster 0003:044F:B65D.0001: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.1-1/input0
[  248.781416][ T5853] hid-thrustmaster 0003:044F:B65D.0001: Unexpected non-int endpoint
[  248.814261][   T29] audit: type=1326 audit(1738455508.593:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6017 comm="syz.1.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa08998cda9 code=0x7ffc0000
[  248.836337][    C0] vkms_vblank_simulate: vblank timer overrun
[  248.843474][   T29] audit: type=1326 audit(1738455508.603:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6017 comm="syz.1.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa08998cda9 code=0x7ffc0000
[  248.866090][   T29] audit: type=1326 audit(1738455508.603:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6017 comm="syz.1.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa08998cda9 code=0x7ffc0000
[  248.888057][    C0] vkms_vblank_simulate: vblank timer overrun
[  248.900347][   T29] audit: type=1326 audit(1738455508.603:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6017 comm="syz.1.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa08998cda9 code=0x7ffc0000
[  248.922566][    C0] vkms_vblank_simulate: vblank timer overrun
[  248.930910][   T29] audit: type=1326 audit(1738455508.603:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6017 comm="syz.1.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa08998cda9 code=0x7ffc0000
[  248.952952][    C0] vkms_vblank_simulate: vblank timer overrun
[  248.959585][   T29] audit: type=1326 audit(1738455508.603:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6017 comm="syz.1.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa08998ecc7 code=0x7ffc0000
[  248.982264][   T29] audit: type=1326 audit(1738455508.603:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6017 comm="syz.1.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fa08998ec3c code=0x7ffc0000
[  249.004232][    C0] vkms_vblank_simulate: vblank timer overrun
[  249.018437][   T29] audit: type=1326 audit(1738455508.753:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6017 comm="syz.1.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fa08998eb74 code=0x7ffc0000
[  249.040507][    C0] vkms_vblank_simulate: vblank timer overrun
[  249.047074][   T29] audit: type=1326 audit(1738455508.753:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6017 comm="syz.1.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fa08998eb74 code=0x7ffc0000
[  249.069174][    C0] vkms_vblank_simulate: vblank timer overrun
[  249.075914][   T29] audit: type=1326 audit(1738455508.753:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6017 comm="syz.1.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa08998ba0a code=0x7ffc0000
[  249.103865][   T29] audit: type=1326 audit(1738455508.793:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6017 comm="syz.1.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa08998cda9 code=0x7ffc0000
[  249.128352][   T29] audit: type=1326 audit(1738455508.793:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6017 comm="syz.1.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa08998cda9 code=0x7ffc0000
[  249.362702][ T6058] loop2: detected capacity change from 0 to 512
[  250.334128][   T29] audit: type=1326 audit(1738455508.973:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6017 comm="syz.1.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa08998cda9 code=0x7ffc0000
[  250.356203][    C0] vkms_vblank_simulate: vblank timer overrun
[  250.364375][   T29] audit: type=1326 audit(1738455508.973:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6017 comm="syz.1.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa08998cda9 code=0x7ffc0000
[  250.386520][    C0] vkms_vblank_simulate: vblank timer overrun
[  251.250839][ T6053] loop3: detected capacity change from 0 to 32768
[  251.393578][ T6048] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11'.
[  251.441382][ T1619] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  251.821181][ T1619] usb 1-1: device descriptor read/64, error -71
[  252.205197][ T1619] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  252.239842][ T6058] EXT4-fs: error -4 creating inode table initialization thread
[  252.385604][ T6053] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=gzip,erasure_code,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow
[  252.407020][ T6053] bcachefs (loop3): recovering from clean shutdown, journal seq 10
[  252.416555][ T6053] bcachefs (loop3): Version upgrade required:
[  252.416555][ T6053] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  252.416555][ T6053] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.20: directory_size
[  252.416555][ T6053]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance
[  252.486830][    C0] vkms_vblank_simulate: vblank timer overrun
[  252.503545][ T6053] bcachefs (loop3): dropping and reconstructing all alloc info
[  252.536738][ T6053] bcachefs (loop3): bch2_journal_reclaim_start(): error creating journal reclaim thread EINTR
[  252.548438][ T6053] bcachefs (loop3): bch2_fs_recovery(): error EINTR
[  252.555332][ T6053] bcachefs (loop3): bch2_fs_start(): error starting filesystem EINTR
[  252.563728][ T6053] bcachefs (loop3): shutting down
[  252.653642][ T6058] EXT4-fs (loop2): mount failed
[  252.666339][ T6053] bcachefs (loop3): shutdown complete
[  252.711108][ T1619] usb 1-1: device descriptor read/64, error -71
[  252.847838][ T1619] usb usb1-port1: attempt power cycle
[  253.300650][    C1] hid-thrustmaster 0003:044F:B65D.0001: URB to get model id failed with error -71
[  253.349570][ T5856] usb 2-1: USB disconnect, device number 2
[  253.538611][ T5796] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  254.280945][ T6053] bcachefs: bch2_fs_get_tree() error: EINTR
[  254.792035][ T1619] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  255.201847][ T1619] usb 5-1: Using ep0 maxpacket: 32
[  255.392988][ T1619] usb 5-1: config 4 has an invalid interface number: 228 but max is 0
[  255.402038][ T1619] usb 5-1: config 4 has no interface number 0
[  255.408437][ T1619] usb 5-1: config 4 interface 228 altsetting 68 has an invalid descriptor for endpoint zero, skipping
[  255.419784][ T1619] usb 5-1: config 4 interface 228 has no altsetting 0
[  255.471424][ T6087] loop2: detected capacity change from 0 to 64
[  256.167354][ T1619] usb 5-1: New USB device found, idVendor=0499, idProduct=a9a2, bcdDevice=c4.e8
[  256.176893][ T1619] usb 5-1: New USB device strings: Mfr=1, Product=25, SerialNumber=3
[  256.185364][ T1619] usb 5-1: Product: syz
[  256.189716][ T1619] usb 5-1: Manufacturer: syz
[  256.194596][ T1619] usb 5-1: SerialNumber: syz
[  256.316210][ T6087] hfs: request for non-existent node 16777216 in B*Tree
[  256.324710][ T6087] hfs: request for non-existent node 16777216 in B*Tree
[  256.570765][ T6087] hfs: request for non-existent node 16777216 in B*Tree
[  256.577944][ T6087] hfs: request for non-existent node 16777216 in B*Tree
[  257.360847][ T5853] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  257.571057][ T5853] usb 2-1: Using ep0 maxpacket: 16
[  257.618062][ T5853] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  257.630045][ T5853] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  257.719373][ T5853] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  257.729105][ T5853] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  257.737553][ T5853] usb 2-1: Product: syz
[  257.742022][ T5853] usb 2-1: Manufacturer: syz
[  257.746836][ T5853] usb 2-1: SerialNumber: syz
[  257.864283][ T5853] usb 2-1: config 0 descriptor??
[  258.087587][ T5853] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  258.097336][ T5853] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class)
[  258.476457][ T1619] usb 5-1: USB disconnect, device number 2
[  258.625912][ T6091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  258.636184][ T6091] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  258.675910][ T5853] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[  258.922819][ T6091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  258.932810][ T6091] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  258.973406][ T5853] em28xx 2-1:0.0: Config register raw data: 0xfffffffb
[  259.340720][ T5853] em28xx 2-1:0.0: AC97 chip type couldn't be determined
[  259.348045][ T5853] em28xx 2-1:0.0: No AC97 audio processor
[  259.459719][ T6108] loop2: detected capacity change from 0 to 32768
[  259.499339][ T5853] usb 2-1: USB disconnect, device number 3
[  259.507105][ T5853] em28xx 2-1:0.0: Disconnecting em28xx
[  259.518022][ T5974] udevd[5974]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:4.228/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  259.598947][ T5853] em28xx 2-1:0.0: Freeing device
[  259.723887][ T6108] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=gzip,erasure_code,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow
[  259.753427][ T6108] bcachefs (loop2): recovering from clean shutdown, journal seq 10
[  259.762938][ T6108] bcachefs (loop2): Version upgrade required:
[  259.762938][ T6108] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  259.762938][ T6108] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.20: directory_size
[  259.762938][ T6108]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance
[  259.835227][ T6108] bcachefs (loop2): dropping and reconstructing all alloc info
[  259.845446][ T6121] FAULT_INJECTION: forcing a failure.
[  259.845446][ T6121] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  259.845568][ T6121] CPU: 1 UID: 0 PID: 6121 Comm: syz.3.33 Not tainted 6.13.0-syzkaller-09950-g60c828cf80c0 #0
[  259.845696][ T6121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  259.845770][ T6121] Call Trace:
[  259.845813][ T6121]  <TASK>
[  259.845854][ T6121]  dump_stack_lvl+0x216/0x2d0
[  259.845987][ T6121]  dump_stack+0x1e/0x24
[  259.846091][ T6121]  should_fail_ex+0x767/0x830
[  259.846263][ T6121]  should_fail+0x2a/0x40
[  259.846408][ T6121]  should_fail_usercopy+0x2e/0x40
[  259.846573][ T6121]  _copy_from_user+0x35/0x110
[  259.846739][ T6121]  do_sock_getsockopt+0x201/0xa10
[  259.846902][ T6121]  __x64_sys_getsockopt+0x449/0x590
[  259.847057][ T6121]  x64_sys_call+0x1554/0x3c30
[  259.847186][ T6121]  do_syscall_64+0xcd/0x1e0
[  259.847349][ T6121]  ? clear_bhb_loop+0x25/0x80
[  259.847499][ T6121]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  259.847652][ T6121] RIP: 0033:0x7f37e018cda9
[  259.847739][ T6121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  259.847847][ T6121] RSP: 002b:00007f37e10a8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  259.847959][ T6121] RAX: ffffffffffffffda RBX: 00007f37e03a5fa0 RCX: 00007f37e018cda9
[  259.848046][ T6121] RDX: 00000000000000ac RSI: 000000000000010d RDI: 0000000000000003
[  259.848117][ T6121] RBP: 00007f37e10a8090 R08: 0000000020000080 R09: 0000000000000000
[  259.848194][ T6121] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001
[  259.848267][ T6121] R13: 0000000000000000 R14: 00007f37e03a5fa0 R15: 00007fff40919b28
[  259.848364][ T6121]  </TASK>
[  260.216956][ T6108] bcachefs (loop2): accounting_read... done
[  260.234306][ T6108] bcachefs (loop2): alloc_read... done
[  260.240210][ T6108] bcachefs (loop2): stripes_read... done
[  260.246647][ T6108] bcachefs (loop2): snapshots_read... done
[  260.267881][ T6108] bcachefs (loop2): done starting filesystem
[  260.551618][ T5803] bcachefs (loop2): shutting down
[  260.686799][ T5803] bcachefs (loop2): shutdown complete
[  261.052943][ T6135] loop1: detected capacity change from 0 to 64
[  261.391314][ T5853] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  261.431052][ T6134] netlink: 20 bytes leftover after parsing attributes in process `syz.0.38'.
[  261.612280][ T5853] usb 5-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  261.614817][ T6131] loop3: detected capacity change from 0 to 32768
[  261.624813][ T5853] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  261.642854][ T5853] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  261.654599][ T5853] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  261.664065][ T5853] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  262.018330][ T6137] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  262.086471][   T44] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  262.131620][ T6131] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=gzip,erasure_code,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow
[  262.154812][ T6131] bcachefs (loop3): recovering from clean shutdown, journal seq 10
[  262.164191][ T6131] bcachefs (loop3): Version upgrade required:
[  262.164191][ T6131] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  262.164191][ T6131] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.20: directory_size
[  262.164191][ T6131]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance
[  262.242705][ T6131] bcachefs (loop3): dropping and reconstructing all alloc info
[  262.346931][ T6131] bcachefs (loop3): accounting_read... done
[  262.351064][   T44] usb 2-1: Using ep0 maxpacket: 32
[  262.353860][ T6131] bcachefs (loop3): alloc_read... done
[  262.364770][ T6131] bcachefs (loop3): stripes_read... done
[  262.370931][ T6131] bcachefs (loop3): snapshots_read... done
[  262.384173][ T6131] bcachefs (loop3): done starting filesystem
[  262.459352][   T44] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  262.468981][   T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  262.547209][   T44] usb 2-1: config 0 descriptor??
[  262.580263][ T5800] bcachefs (loop3): shutting down
[  262.679083][ T5800] bcachefs (loop3): shutdown complete
[  262.837769][   T44] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  262.858825][   T44] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  262.903797][   T44] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  262.911465][   T44] usb 2-1: media controller created
[  262.926979][ T6137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  262.936858][ T6137] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  263.017949][   T44] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  263.057282][ T5853] aiptek 5-1:17.0: Aiptek using 400 ms programming speed
[  263.068374][ T5853] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input5
[  263.131103][ T6154] vlan2: entered allmulticast mode
[  263.136455][ T6154] syz_tun: entered allmulticast mode
[  263.155673][ T6154] syz_tun: left allmulticast mode
[  263.483416][ T1619] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  263.806323][ T1619] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  263.816123][ T1619] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  263.824833][ T1619] usb 1-1: Product: syz
[  263.829302][ T1619] usb 1-1: Manufacturer: syz
[  263.834205][ T1619] usb 1-1: SerialNumber: syz
[  264.088410][ T1619] usb 1-1: config 0 descriptor??
[  264.322801][ T6154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  264.335666][ T6154] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  264.344421][   T44] stb0899_attach: Driver disabled by Kconfig
[  264.353683][   T44] az6027: no front-end attached
[  264.353683][   T44] 
[  264.866746][ T1619] usb 1-1: Firmware version (0.0) predates our first public release.
[  264.875720][ T1619] usb 1-1: Please update to version 0.2 or newer
[  265.117762][ T1619] usb 1-1: USB disconnect, device number 6
[  265.181216][ T5856] usb 5-1: USB disconnect, device number 3
[  265.181372][    C1] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[  265.839605][ T6163] netlink: 12 bytes leftover after parsing attributes in process `syz.4.44'.
[  265.849806][   T44] az6027: usb out operation failed. (-71)
[  265.855974][   T44] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  265.867975][   T44] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input6
[  265.929053][   T44] dvb-usb: schedule remote query interval to 400 msecs.
[  265.937264][   T44] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  266.152266][   T44] usb 2-1: USB disconnect, device number 4
[  266.301462][ T5853] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  266.517179][ T5853] usb 5-1: unable to get BOS descriptor or descriptor too short
[  266.557006][ T5853] usb 5-1: unable to read config index 0 descriptor/start: -61
[  266.569166][ T5853] usb 5-1: can't read configurations, error -61
[  266.633978][   T44] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  266.768166][ T5853] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  267.191444][ T5853] usb 5-1: unable to get BOS descriptor or descriptor too short
[  267.242066][ T5853] usb 5-1: unable to read config index 0 descriptor/start: -61
[  267.249936][ T5853] usb 5-1: can't read configurations, error -61
[  267.311767][ T5853] usb usb5-port1: attempt power cycle
[  267.337806][ T6176] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  267.721993][ T5853] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  267.751698][   T44] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[  267.809760][ T5853] usb 5-1: unable to get BOS descriptor or descriptor too short
[  267.851958][ T5853] usb 5-1: unable to read config index 0 descriptor/start: -61
[  267.859913][ T5853] usb 5-1: can't read configurations, error -61
[  267.879982][ T3547] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  267.910896][ T1619] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  267.926888][ T5811] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  267.937128][ T5811] Bluetooth: hci0: Injecting HCI hardware error event
[  267.952529][ T5811] Bluetooth: hci0: hardware error 0x00
[  267.986285][   T44] usb 2-1: config 0 has an invalid interface number: 21 but max is 0
[  267.995600][   T44] usb 2-1: config 0 has no interface number 0
[  268.002175][   T44] usb 2-1: config 0 interface 21 has no altsetting 0
[  268.025795][ T5853] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  268.048054][ T3547] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.064247][   T44] usb 2-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac
[  268.074358][   T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  268.083346][   T44] usb 2-1: Product: syz
[  268.087706][   T44] usb 2-1: Manufacturer: syz
[  268.093207][   T44] usb 2-1: SerialNumber: syz
[  268.109183][   T44] usb 2-1: config 0 descriptor??
[  268.120846][ T1619] usb 4-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c
[  268.130325][ T1619] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  268.153296][ T5853] usb 5-1: unable to get BOS descriptor or descriptor too short
[  268.174718][ T5853] usb 5-1: unable to read config index 0 descriptor/start: -61
[  268.183022][ T5853] usb 5-1: can't read configurations, error -61
[  268.192546][ T5853] usb usb5-port1: unable to enumerate USB device
[  268.246189][ T3547] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.280424][ T1619] usb 4-1: config 0 descriptor??
[  268.295472][ T1619] usb 4-1: bad CDC descriptors
[  268.343160][   T44] peak_usb 2-1:0.21: PEAK-System PCAN-USB X6 v17 fw v81.0.0 (2 channels)
[  268.418454][ T3547] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.588415][ T1619] usb 4-1: USB disconnect, device number 2
[  268.621261][   T44] peak_usb 2-1:0.21 can0: unable to request usb[type=2 value=5] err=-71
[  268.629884][   T44] peak_usb 2-1:0.21: unable to tell PCAN-USB X6 driver is loaded (err -71)
[  268.807177][   T44] peak_usb 2-1:0.21: probe with driver peak_usb failed with error -71
[  268.892207][   T44] usb 2-1: USB disconnect, device number 5
[  269.047065][ T3547] bridge_slave_1: left allmulticast mode
[  269.053176][ T3547] bridge_slave_1: left promiscuous mode
[  269.068540][ T3547] bridge0: port 2(bridge_slave_1) entered disabled state
[  269.115137][ T3547] bridge_slave_0: left allmulticast mode
[  269.122776][ T3547] bridge_slave_0: left promiscuous mode
[  269.129350][ T3547] bridge0: port 1(bridge_slave_0) entered disabled state
[  269.827186][ T3547] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  269.859446][ T3547] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  269.897664][ T3547] bond0 (unregistering): Released all slaves
[  270.019628][ T5811] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  270.253530][ T6189] netlink: 36 bytes leftover after parsing attributes in process `syz.4.54'.
[  270.701154][ T3547] hsr_slave_0: left promiscuous mode
[  270.732400][ T3547] hsr_slave_1: left promiscuous mode
[  270.740148][ T3547] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  270.751673][ T3547] batman_adv: batadv0: Removing interface: batadv_slave_0
[  270.831722][ T3547] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  270.841247][ T3547] batman_adv: batadv0: Removing interface: batadv_slave_1
[  270.932676][ T3547] veth1_macvtap: left promiscuous mode
[  270.938418][ T3547] veth0_macvtap: left promiscuous mode
[  270.944736][ T3547] veth1_vlan: left promiscuous mode
[  270.950277][ T3547] veth0_vlan: left promiscuous mode
[  270.996071][ T6198] loop2: detected capacity change from 0 to 256
[  271.012620][ T5808] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  271.100030][ T5808] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  271.302369][ T5808] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  271.318508][ T5808] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  271.332726][ T5808] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  271.344077][ T5808] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  271.637536][ T6207] loop1: detected capacity change from 0 to 512
[  271.708204][ T6207] ext4: Unknown parameter '.'
[  272.097273][ T3547] team0 (unregistering): Port device team_slave_1 removed
[  272.186319][ T3547] team0 (unregistering): Port device team_slave_0 removed
[  273.445822][ T5808] Bluetooth: hci4: command tx timeout
[  273.836821][ T5859] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  273.881702][ T6199] chnl_net:caif_netlink_parms(): no params data found
[  274.019962][ T6233] loop2: detected capacity change from 0 to 512
[  274.038689][ T5859] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  274.049634][ T5859] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  274.142933][ T5859] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  274.153013][ T5859] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  274.161430][ T5859] usb 5-1: SerialNumber: syz
[  274.222486][ T6233] loop2: detected capacity change from 0 to 256
[  274.254322][ T6233] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  274.369487][ T6237] loop3: detected capacity change from 0 to 1024
[  274.439632][ T6233] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  274.520076][ T6237] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  274.580385][ T5859] usb 5-1: 0:2 : does not exist
[  274.655924][   T29] kauditd_printk_skb: 2 callbacks suppressed
[  274.655991][   T29] audit: type=1326 audit(1738455534.423:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6239 comm="syz.1.66" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa08998cda9 code=0x0
[  274.681856][ T5859] usb 5-1: USB disconnect, device number 8
[  274.801419][ T6237] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  274.889798][    C0] Unknown status report in ack skb
[  274.997736][ T6248] mmap: syz.3.65 (6248) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  275.189381][ T5974] udevd[5974]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  275.525811][ T5808] Bluetooth: hci4: command tx timeout
[  275.605295][ T5800] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  276.243412][ T6258] IPv6: NLM_F_CREATE should be specified when creating new route
[  276.264586][ T6199] bridge0: port 1(bridge_slave_0) entered blocking state
[  276.272952][ T6199] bridge0: port 1(bridge_slave_0) entered disabled state
[  276.280923][ T6199] bridge_slave_0: entered allmulticast mode
[  276.289740][ T6199] bridge_slave_0: entered promiscuous mode
[  276.348755][ T6258] Zero length message leads to an empty skb
[  276.377919][ T6199] bridge0: port 2(bridge_slave_1) entered blocking state
[  276.385925][ T6199] bridge0: port 2(bridge_slave_1) entered disabled state
[  276.394760][ T6199] bridge_slave_1: entered allmulticast mode
[  276.403760][ T6199] bridge_slave_1: entered promiscuous mode
[  276.410911][ T5859] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  276.600889][ T5859] usb 2-1: Using ep0 maxpacket: 8
[  276.629774][ T5859] usb 2-1: config 0 has an invalid interface number: 52 but max is 0
[  276.642834][ T5859] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  276.655047][ T5859] usb 2-1: config 0 has no interface number 0
[  276.661424][ T5859] usb 2-1: config 0 interface 52 has no altsetting 0
[  276.668370][ T5859] usb 2-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00
[  276.677739][ T5859] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  276.749462][ T5859] usb 2-1: config 0 descriptor??
[  276.957192][ T6199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  276.981991][ T5859] usb 2-1: Can not set alternate setting to 1, error: -71
[  276.989479][ T5859] synaptics_usb 2-1:0.52: probe with driver synaptics_usb failed with error -71
[  277.071399][ T6199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  277.104161][ T5859] usb 2-1: USB disconnect, device number 6
[  277.472115][ T6273] loop4: detected capacity change from 0 to 8192
[  277.542896][ T6273] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  277.607154][ T6199] team0: Port device team_slave_0 added
[  277.615324][ T5808] Bluetooth: hci4: command tx timeout
[  277.649293][ T6199] team0: Port device team_slave_1 added
[  277.730873][ T6273] overlay: filesystem on ./file0 not supported
[  277.764402][ T6276] FAULT_INJECTION: forcing a failure.
[  277.764402][ T6276] name failslab, interval 1, probability 0, space 0, times 0
[  277.778634][ T6276] CPU: 1 UID: 0 PID: 6276 Comm: syz.2.75 Not tainted 6.13.0-syzkaller-09950-g60c828cf80c0 #0
[  277.778754][ T6276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  277.778823][ T6276] Call Trace:
[  277.778866][ T6276]  <TASK>
[  277.778908][ T6276]  dump_stack_lvl+0x216/0x2d0
[  277.779047][ T6276]  dump_stack+0x1e/0x24
[  277.779153][ T6276]  should_fail_ex+0x767/0x830
[  277.779323][ T6276]  should_failslab+0x17f/0x210
[  277.779464][ T6276]  kmem_cache_alloc_noprof+0xee/0xe10
[  277.779631][ T6276]  ? security_inode_alloc+0x7d/0x6d0
[  277.779774][ T6276]  ? kmsan_get_metadata+0x13e/0x1c0
[  277.779918][ T6276]  security_inode_alloc+0x7d/0x6d0
[  277.780066][ T6276]  inode_init_always_gfp+0x7d7/0x890
[  277.780215][ T6276]  alloc_inode+0x12a/0x460
[  277.780355][ T6276]  new_inode+0x38/0x480
[  277.780485][ T6276]  ? kmsan_get_metadata+0x13e/0x1c0
[  277.780621][ T6276]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  277.780782][ T6276]  shmem_get_inode+0x705/0x1c50
[  277.780966][ T6276]  __shmem_file_setup+0x249/0x4d0
[  277.781127][ T6276]  shmem_file_setup+0x61/0x80
[  277.781275][ T6276]  __se_sys_memfd_create+0x80a/0x1210
[  277.781445][ T6276]  __x64_sys_memfd_create+0x6c/0xa0
[  277.781599][ T6276]  x64_sys_call+0x3b63/0x3c30
[  277.781730][ T6276]  do_syscall_64+0xcd/0x1e0
[  277.781894][ T6276]  ? clear_bhb_loop+0x25/0x80
[  277.782048][ T6276]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  277.782199][ T6276] RIP: 0033:0x7faf6bf8cda9
[  277.782287][ T6276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  277.782390][ T6276] RSP: 002b:00007faf6cdcde18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[  277.782503][ T6276] RAX: ffffffffffffffda RBX: 00000000000004c2 RCX: 00007faf6bf8cda9
[  277.782585][ T6276] RDX: 00007faf6cdcdef0 RSI: 0000000000000000 RDI: 00007faf6c00ec51
[  277.782664][ T6276] RBP: 0000000020000980 R08: 00007faf6cdcdbb7 R09: 00007faf6cdcde40
[  277.782746][ T6276] R10: 000000000000000a R11: 0000000000000202 R12: 0000000020000380
[  277.782819][ T6276] R13: 00007faf6cdcdef0 R14: 00007faf6cdcdeb0 R15: 00000000200000c0
[  277.782920][ T6276]  </TASK>
[  277.996966][    C1] vkms_vblank_simulate: vblank timer overrun
[  278.082724][ T6199] batman_adv: batadv0: Adding interface: batadv_slave_0
[  278.089947][ T6199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  278.116388][ T6199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  278.132685][ T6199] batman_adv: batadv0: Adding interface: batadv_slave_1
[  278.139894][ T6199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  278.166336][ T6199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  278.433825][ T6199] hsr_slave_0: entered promiscuous mode
[  278.443675][ T6199] hsr_slave_1: entered promiscuous mode
[  278.791782][ T6284] FAULT_INJECTION: forcing a failure.
[  278.791782][ T6284] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  278.805348][ T6284] CPU: 1 UID: 0 PID: 6284 Comm: syz.1.77 Not tainted 6.13.0-syzkaller-09950-g60c828cf80c0 #0
[  278.805467][ T6284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  278.805537][ T6284] Call Trace:
[  278.805580][ T6284]  <TASK>
[  278.805621][ T6284]  dump_stack_lvl+0x216/0x2d0
[  278.805763][ T6284]  dump_stack+0x1e/0x24
[  278.805869][ T6284]  should_fail_ex+0x767/0x830
[  278.806042][ T6284]  should_fail+0x2a/0x40
[  278.806187][ T6284]  should_fail_usercopy+0x2e/0x40
[  278.806350][ T6284]  _copy_to_user+0x34/0x120
[  278.806510][ T6284]  simple_read_from_buffer+0x199/0x340
[  278.806654][ T6284]  proc_fail_nth_read+0x1e5/0x2c0
[  278.806813][ T6284]  vfs_read+0x29f/0xf70
[  278.806919][ T6284]  ? stack_depot_save_flags+0x2c/0x750
[  278.807073][ T6284]  ? kmsan_get_metadata+0x13e/0x1c0
[  278.807210][ T6284]  ? kmsan_internal_set_shadow_origin+0x69/0x100
[  278.807393][ T6284]  ? kmsan_get_metadata+0x13e/0x1c0
[  278.807525][ T6284]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  278.807676][ T6284]  ksys_read+0x240/0x4b0
[  278.807784][ T6284]  ? kmsan_get_metadata+0x13e/0x1c0
[  278.807925][ T6284]  __x64_sys_read+0x93/0xe0
[  278.808043][ T6284]  x64_sys_call+0x314c/0x3c30
[  278.808172][ T6284]  do_syscall_64+0xcd/0x1e0
[  278.808336][ T6284]  ? clear_bhb_loop+0x25/0x80
[  278.808486][ T6284]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  278.808643][ T6284] RIP: 0033:0x7fa08998b7bc
[  278.808733][ T6284] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  278.808834][ T6284] RSP: 002b:00007fa08a720030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  278.808946][ T6284] RAX: ffffffffffffffda RBX: 00007fa089ba5fa0 RCX: 00007fa08998b7bc
[  278.809032][ T6284] RDX: 000000000000000f RSI: 00007fa08a7200a0 RDI: 0000000000000004
[  278.809105][ T6284] RBP: 00007fa08a720090 R08: 0000000000000000 R09: 0000000000000000
[  278.809178][ T6284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  278.809246][ T6284] R13: 0000000000000000 R14: 00007fa089ba5fa0 R15: 00007ffe8c6bf2b8
[  278.809342][ T6284]  </TASK>
[  279.017794][    C1] vkms_vblank_simulate: vblank timer overrun
[  279.120359][ T6288] loop3: detected capacity change from 0 to 1024
[  279.290953][   T44] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[  279.351890][ T6288] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  279.430941][   T44] usb 3-1: device descriptor read/64, error -71
[  279.555267][ T6288] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  279.681178][ T5808] Bluetooth: hci4: command tx timeout
[  279.740967][   T44] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[  279.971247][   T44] usb 3-1: device descriptor read/64, error -71
[  280.093796][   T44] usb usb3-port1: attempt power cycle
[  280.266635][ T5800] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  280.462791][ T6302] capability: warning: `syz.4.82' uses 32-bit capabilities (legacy support in use)
[  280.542645][   T44] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[  280.621354][   T44] usb 3-1: device descriptor read/8, error -71
[  280.719760][ T1287] ieee802154 phy0 wpan0: encryption failed: -22
[  280.726620][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[  280.759766][ T6199] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  280.790762][ T6199] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  280.832050][ T6199] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  280.902211][ T6199] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  280.915646][   T44] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[  281.031072][   T44] usb 3-1: device descriptor read/8, error -71
[  281.156880][   T44] usb usb3-port1: unable to enumerate USB device
[  281.180816][ T5856] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  281.291692][ T6314] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  281.364743][ T6314] netlink: 24 bytes leftover after parsing attributes in process `syz.1.85'.
[  281.406151][ T5856] usb 4-1: Using ep0 maxpacket: 16
[  281.438085][ T5856] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  281.455411][ T5856] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  281.467374][ T5856] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1d00, bcdDevice= 0.00
[  281.476826][ T5856] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  281.573468][ T5856] usb 4-1: config 0 descriptor??
[  281.665321][ T5853] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  281.872006][ T5853] usb 5-1: Using ep0 maxpacket: 32
[  281.909797][ T5853] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  281.921936][ T5853] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  281.932633][ T5853] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  281.942082][ T5853] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  282.023358][ T5853] usb 5-1: config 0 descriptor??
[  282.052587][ T6199] 8021q: adding VLAN 0 to HW filter on device bond0
[  282.057521][ T5856] usbhid 4-1:0.0: can't add hid device: -71
[  282.071765][ T5853] hub 5-1:0.0: USB hub found
[  282.077507][ T5856] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  282.242128][ T5853] hub 5-1:0.0: 1 port detected
[  282.246078][ T5856] usb 4-1: USB disconnect, device number 3
[  282.279209][ T6199] 8021q: adding VLAN 0 to HW filter on device team0
[  282.367329][ T3619] bridge0: port 1(bridge_slave_0) entered blocking state
[  282.375046][ T3619] bridge0: port 1(bridge_slave_0) entered forwarding state
[  282.552446][ T5882] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  282.588430][ T3619] bridge0: port 2(bridge_slave_1) entered blocking state
[  282.596138][ T3619] bridge0: port 2(bridge_slave_1) entered forwarding state
[  282.760103][ T5882] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  282.770841][ T5882] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  282.925109][ T6315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  282.936281][ T6315] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  282.972026][ T5882] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  282.982086][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  282.990323][ T5882] usb 2-1: SerialNumber: syz
[  283.105147][ T6315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  283.115673][ T6315] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  283.300064][ T5853] hub 5-1:0.0: hub_ext_port_status failed (err = -71)
[  283.308061][ T5856] usb 5-1: USB disconnect, device number 9
[  283.361880][ T5882] usb 2-1: 0:2 : does not exist
[  283.515537][ T5882] usb 2-1: USB disconnect, device number 7
[  283.587010][ T6326] netlink: 'syz.3.89': attribute type 64 has an invalid length.
[  283.595633][ T6326] netlink: 12 bytes leftover after parsing attributes in process `syz.3.89'.
[  283.836659][ T5974] udevd[5974]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  283.976645][ T5859] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  284.224502][ T5859] usb 4-1: Using ep0 maxpacket: 32
[  284.257412][ T5859] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  284.269129][ T5859] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  284.279365][ T5859] usb 4-1: New USB device found, idVendor=056a, idProduct=00fa, bcdDevice= 0.00
[  284.288909][ T5859] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  284.466265][ T5859] usb 4-1: config 0 descriptor??
[  284.716950][ T6337] IPv6: Can't replace route, no match found
[  284.940383][ T6199] 8021q: adding VLAN 0 to HW filter on device batadv0
[  285.003167][ T5859] wacom 0003:056A:00FA.0002: hidraw0: USB HID v0.00 Device [HID 056a:00fa] on usb-dummy_hcd.3-1/input0
[  285.325881][ T5856] usb 4-1: USB disconnect, device number 4
[  285.608526][ T6199] veth0_vlan: entered promiscuous mode
[  285.757321][ T6199] veth1_vlan: entered promiscuous mode
[  286.119491][ T6349] loop4: detected capacity change from 0 to 1024
[  286.304741][ T6199] veth0_macvtap: entered promiscuous mode
[  286.311286][ T6349] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  286.411270][ T5856] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  286.541333][ T6199] veth1_macvtap: entered promiscuous mode
[  286.702695][ T5856] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[  286.703842][ T6349] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  286.712711][ T5856] usb 3-1: config 0 interface 0 has no altsetting 0
[  286.712875][ T5856] usb 3-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00
[  286.741791][ T5856] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  287.001297][ T6199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  287.012182][ T6199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.022397][ T6199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  287.033224][ T6199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.045428][ T6199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  287.056168][ T6199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.066369][ T6199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  287.077106][ T6199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.094440][ T6199] batman_adv: batadv0: Interface activated: batadv_slave_0
[  287.109318][ T5856] usb 3-1: config 0 descriptor??
[  287.529615][ T6364] FAULT_INJECTION: forcing a failure.
[  287.529615][ T6364] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  287.543561][ T6364] CPU: 1 UID: 0 PID: 6364 Comm: syz.1.97 Not tainted 6.13.0-syzkaller-09950-g60c828cf80c0 #0
[  287.543680][ T6364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  287.543749][ T6364] Call Trace:
[  287.543799][ T6364]  <TASK>
[  287.543840][ T6364]  dump_stack_lvl+0x216/0x2d0
[  287.543969][ T6364]  dump_stack+0x1e/0x24
[  287.544074][ T6364]  should_fail_ex+0x767/0x830
[  287.544246][ T6364]  should_fail+0x2a/0x40
[  287.544393][ T6364]  should_fail_usercopy+0x2e/0x40
[  287.544557][ T6364]  _copy_from_user+0x35/0x110
[  287.544722][ T6364]  ___sys_sendmsg+0x120/0x3c0
[  287.544865][ T6364]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  287.545018][ T6364]  ? __rcu_read_unlock+0x7b/0xe0
[  287.545179][ T6364]  ? __fget_files+0x42b/0x500
[  287.545323][ T6364]  ? kmsan_get_metadata+0x13e/0x1c0
[  287.545456][ T6364]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  287.545603][ T6364]  __x64_sys_sendmsg+0x212/0x3c0
[  287.545739][ T6364]  ? kmsan_get_metadata+0x13e/0x1c0
[  287.545879][ T6364]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  287.546019][ T6364]  ? kmsan_get_metadata+0x13e/0x1c0
[  287.546162][ T6364]  x64_sys_call+0x2ed6/0x3c30
[  287.546293][ T6364]  do_syscall_64+0xcd/0x1e0
[  287.546457][ T6364]  ? clear_bhb_loop+0x25/0x80
[  287.546609][ T6364]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  287.546762][ T6364] RIP: 0033:0x7fa08998cda9
[  287.546857][ T6364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  287.546963][ T6364] RSP: 002b:00007fa08a720038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  287.547077][ T6364] RAX: ffffffffffffffda RBX: 00007fa089ba5fa0 RCX: 00007fa08998cda9
[  287.547163][ T6364] RDX: 0000000000000000 RSI: 0000000020000680 RDI: 0000000000000003
[  287.547235][ T6364] RBP: 00007fa08a720090 R08: 0000000000000000 R09: 0000000000000000
[  287.547309][ T6364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  287.547379][ T6364] R13: 0000000000000000 R14: 00007fa089ba5fa0 R15: 00007ffe8c6bf2b8
[  287.547474][ T6364]  </TASK>
[  287.794607][ T6199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  287.807892][ T6199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.818017][ T6199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  287.828746][ T6199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.838865][ T6199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  287.849757][ T6199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.859877][ T6199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  287.870697][ T6199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.885544][ T6199] batman_adv: batadv0: Interface activated: batadv_slave_1
[  287.906427][ T6199] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  287.915544][ T6199] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  287.927702][ T6199] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  287.936794][ T6199] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  288.064776][ T5856] magicmouse 0003:05AC:0269.0003: unknown main item tag 0x6
[  288.073388][ T5856] magicmouse 0003:05AC:0269.0003: unknown main item tag 0x0
[  288.082275][ T5856] magicmouse 0003:05AC:0269.0003: unknown main item tag 0x0
[  288.107537][ T5802] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  288.184601][ T5856] magicmouse 0003:05AC:0269.0003: hidraw0: USB HID v10.00 Device [HID 05ac:0269] on usb-dummy_hcd.2-1/input0
[  288.301996][ T5856] usb 3-1: USB disconnect, device number 6
[  288.674457][ T6373] netlink: 8 bytes leftover after parsing attributes in process `syz.4.99'.
[  288.684044][ T6373] netlink: 44 bytes leftover after parsing attributes in process `syz.4.99'.
[  289.701991][ T6384] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  289.813595][ T6392] libceph: resolve '.
[  289.813595][ T6392] #)|' (ret=-3): failed
[  290.551436][ T6394] loop1: detected capacity change from 0 to 32768
[  290.820446][ T6394] 
[  290.820446][ T6394]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  290.820446][ T6394] 
[  290.845935][ T6386] 
[  290.845935][ T6386]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  290.845935][ T6386] 
[  290.941796][ T6386] 
[  290.941796][ T6386]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  290.941796][ T6386] 
[  291.037490][ T6386] 
[  291.037490][ T6386]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  291.037490][ T6386] 
[  291.086300][ T6386] 
[  291.086300][ T6386]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  291.086300][ T6386] 
[  291.132112][ T6386] 
[  291.132112][ T6386]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  291.132112][ T6386] 
[  291.152418][  T113] 
[  291.152418][  T113]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  291.152418][  T113] 
[  291.452562][ T5796] 
[  291.452562][ T5796]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  291.452562][ T5796] 
[  291.498725][ T5796] 
[  291.498725][ T5796]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  291.498725][ T5796] 
[  292.281179][ T5853] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  292.472122][ T5853] usb 5-1: Using ep0 maxpacket: 32
[  292.534102][ T5853] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  292.544741][ T5853] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  292.634775][ T5853] usb 5-1: config 0 descriptor??
[  292.938686][ T5853] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware
[  293.071094][ T5853] usb 5-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2
[  293.080231][ T5853] usb 5-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw
[  293.242951][ T6427] loop3: detected capacity change from 0 to 1024
[  293.311080][ T6427] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  293.459776][ T6427] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  293.710346][ T6438] loop1: detected capacity change from 0 to 1024
[  293.738903][ T6434] loop2: detected capacity change from 0 to 1024
[  293.783635][ T6438] hfsplus: Unknown parameter 'nobarriernodecompose'
[  293.835142][ T6434] EXT4-fs: Ignoring removed bh option
[  293.843230][ T6434] EXT4-fs: inline encryption not supported
[  293.913279][ T6434] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  293.996673][ T6434] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  294.020376][ T5800] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  294.155215][ T6434] EXT4-fs error (device loop2): ext4_map_blocks:671: inode #3: block 2: comm syz.2.110: lblock 2 mapped to illegal pblock 2 (length 1)
[  294.223715][ T6434] Quota error (device loop2): qtree_write_dquot: dquota write failed
[  294.233529][ T6434] EXT4-fs error (device loop2): ext4_map_blocks:671: inode #3: block 48: comm syz.2.110: lblock 0 mapped to illegal pblock 48 (length 1)
[  294.331976][ T6434] Quota error (device loop2): v2_write_file_info: Can't write info structure
[  294.341181][ T6434] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.110: Failed to acquire dquot type 0
[  294.449644][ T6434] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5838: Corrupt filesystem
[  294.534428][ T6434] EXT4-fs error (device loop2): ext4_evict_inode:256: inode #11: comm syz.2.110: mark_inode_dirty error
[  294.605900][ T6434] EXT4-fs warning (device loop2): ext4_evict_inode:259: couldn't mark inode dirty (err -117)
[  294.616697][ T6434] EXT4-fs (loop2): 1 orphan inode deleted
[  294.624369][ T6434] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  294.637790][ T3686] EXT4-fs error (device loop2): ext4_map_blocks:671: inode #3: block 1: comm kworker/u8:17: lblock 1 mapped to illegal pblock 1 (length 1)
[  294.715199][ T6438] loop1: detected capacity change from 0 to 4096
[  294.728541][ T3686] Quota error (device loop2): remove_tree: Can't read quota data block 1
[  294.737602][ T3686] EXT4-fs error (device loop2): ext4_release_dquot:6950: comm kworker/u8:17: Failed to release dquot type 0
[  294.794245][ T6434] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  294.822925][ T6438] ntfs3: Unknown parameter 'w��dows_names'
[  294.863975][ T6434] EXT4-fs error (device loop2): __ext4_get_inode_loc:4435: comm syz.2.110: Invalid inode table block 1 in block_group 0
[  294.929980][ T6434] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5838: Corrupt filesystem
[  294.979439][ T6434] EXT4-fs error (device loop2): ext4_quota_off:7194: inode #3: comm syz.2.110: mark_inode_dirty error
[  295.716270][ T3786] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  295.724941][ T3786] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  296.074576][ T3686] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  296.082851][ T3686] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  296.261008][ T5856] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  296.463601][ T5856] usb 2-1: no configurations
[  296.468442][ T5856] usb 2-1: can't read configurations, error -22
[  296.651468][ T5856] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  296.893431][ T5856] usb 2-1: no configurations
[  296.898377][ T5856] usb 2-1: can't read configurations, error -22
[  296.941857][ T5856] usb usb2-port1: attempt power cycle
[  297.213419][ T3619] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  297.391328][ T5856] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  297.465394][ T3619] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  297.485255][ T5856] usb 2-1: no configurations
[  297.490160][ T5856] usb 2-1: can't read configurations, error -22
[  297.543047][ T6481] loop3: detected capacity change from 0 to 16
[  297.557539][ T6481] erofs (device loop3): mounted with root inode @ nid 36.
[  297.721349][ T5856] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  297.825651][ T3619] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  297.951809][ T5856] usb 2-1: no configurations
[  297.956636][ T5856] usb 2-1: can't read configurations, error -22
[  298.052462][ T5856] usb usb2-port1: unable to enumerate USB device
[  298.326572][ T3619] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  298.682045][ T6485] loop2: detected capacity change from 0 to 1024
[  298.877217][ T6485] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  299.514856][ T6485] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  299.788941][ T3619] bridge_slave_1: left allmulticast mode
[  299.795124][ T3619] bridge_slave_1: left promiscuous mode
[  299.801877][ T3619] bridge0: port 2(bridge_slave_1) entered disabled state
[  299.825008][ T3619] bridge_slave_0: left allmulticast mode
[  299.831030][ T3619] bridge_slave_0: left promiscuous mode
[  299.837571][ T3619] bridge0: port 1(bridge_slave_0) entered disabled state
[  300.656650][ T5803] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  300.722446][ T3619] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  300.769242][ T3619] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  300.792287][ T3619] bond0 (unregistering): Released all slaves
[  301.431470][ T3619] hsr_slave_0: left promiscuous mode
[  301.460940][ T3619] hsr_slave_1: left promiscuous mode
[  301.468711][ T3619] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  301.477515][ T3619] batman_adv: batadv0: Removing interface: batadv_slave_0
[  301.544401][ T3619] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  301.552228][ T3619] batman_adv: batadv0: Removing interface: batadv_slave_1
[  301.631884][ T3619] veth1_macvtap: left promiscuous mode
[  301.637627][ T3619] veth0_macvtap: left promiscuous mode
[  301.643737][ T3619] veth1_vlan: left promiscuous mode
[  301.649276][ T3619] veth0_vlan: left promiscuous mode
[  302.350496][   T29] audit: type=1800 audit(1738455562.063:20): pid=6502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.123" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  303.012204][ T5811] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  303.049890][ T5811] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  303.101385][ T5811] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  303.138454][ T5811] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  303.195736][ T5811] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  303.231666][ T5811] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  303.282303][ T3619] team0 (unregistering): Port device team_slave_1 removed
[  303.331010][ T3619] team0 (unregistering): Port device team_slave_0 removed
[  304.741424][ T6511] chnl_net:caif_netlink_parms(): no params data found
[  305.361652][ T5808] Bluetooth: hci4: command tx timeout
[  305.764491][ T6539] loop3: detected capacity change from 0 to 2048
[  305.823968][ T6539] udf: Unknown parameter 'unhide
'
[  305.951193][ T6539] loop3: detected capacity change from 0 to 16
[  305.988241][ T6542] loop2: detected capacity change from 0 to 1024
[  306.109243][ T6542] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  306.202057][ T6511] bridge0: port 1(bridge_slave_0) entered blocking state
[  306.209882][ T6511] bridge0: port 1(bridge_slave_0) entered disabled state
[  306.217970][ T6511] bridge_slave_0: entered allmulticast mode
[  306.227502][ T6511] bridge_slave_0: entered promiscuous mode
[  306.245326][ T6511] bridge0: port 2(bridge_slave_1) entered blocking state
[  306.253171][ T6511] bridge0: port 2(bridge_slave_1) entered disabled state
[  306.259835][ T6542] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  306.261053][ T6511] bridge_slave_1: entered allmulticast mode
[  306.282713][ T6511] bridge_slave_1: entered promiscuous mode
[  306.807525][ T5882] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  306.838314][ T5803] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  306.865570][ T6511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  306.947308][ T6511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  306.978346][ T5882] usb 4-1: device descriptor read/64, error -71
[  307.281315][ T5882] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  307.313914][ T6511] team0: Port device team_slave_0 added
[  307.413133][ T6511] team0: Port device team_slave_1 added
[  307.441398][ T5808] Bluetooth: hci4: command tx timeout
[  307.450981][ T5882] usb 4-1: device descriptor read/64, error -71
[  307.572966][ T5882] usb usb4-port1: attempt power cycle
[  307.670880][ T5856] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  307.721643][ T6511] batman_adv: batadv0: Adding interface: batadv_slave_0
[  307.728804][ T6511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  307.755243][ T6511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  307.884238][ T5856] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  307.887521][ T6564] syz.4.139 uses obsolete (PF_INET,SOCK_PACKET)
[  307.894572][ T5856] usb 2-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00
[  307.894707][ T5856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  307.944840][ T6511] batman_adv: batadv0: Adding interface: batadv_slave_1
[  307.948812][ T5856] usb 2-1: config 0 descriptor??
[  307.952199][ T6511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  307.985351][ T6511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  308.011249][ T5882] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  308.080160][ T5882] usb 4-1: device descriptor read/8, error -71
[  308.171194][   T44] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  308.191202][ T6559] FAULT_INJECTION: forcing a failure.
[  308.191202][ T6559] name failslab, interval 1, probability 0, space 0, times 0
[  308.204561][ T6559] CPU: 0 UID: 0 PID: 6559 Comm: syz.1.137 Not tainted 6.13.0-syzkaller-09950-g60c828cf80c0 #0
[  308.204679][ T6559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  308.204748][ T6559] Call Trace:
[  308.204797][ T6559]  <TASK>
[  308.204838][ T6559]  dump_stack_lvl+0x216/0x2d0
[  308.204970][ T6559]  dump_stack+0x1e/0x24
[  308.205075][ T6559]  should_fail_ex+0x767/0x830
[  308.205248][ T6559]  should_failslab+0x17f/0x210
[  308.205389][ T6559]  kmem_cache_alloc_node_noprof+0xf4/0xe00
[  308.205564][ T6559]  ? kmsan_internal_set_shadow_origin+0x69/0x100
[  308.205742][ T6559]  ? __alloc_skb+0x1e9/0x7b0
[  308.205862][ T6559]  ? kmsan_get_metadata+0x13e/0x1c0
[  308.206007][ T6559]  __alloc_skb+0x1e9/0x7b0
[  308.206130][ T6559]  xfrm_alloc_compat+0x33b/0x2050
[  308.206283][ T6559]  ? kmsan_get_metadata+0x13e/0x1c0
[  308.206427][ T6559]  ? __rcu_read_unlock+0x48/0xe0
[  308.206592][ T6559]  ? __pfx_xfrm_alloc_compat+0x10/0x10
[  308.206744][ T6559]  xfrm_send_policy_notify+0x3393/0x35f0
[  308.206919][ T6559]  ? __pfx_xfrm_send_policy_notify+0x10/0x10
[  308.207057][ T6559]  km_policy_notify+0xd2/0x1a0
[  308.207203][ T6559]  xfrm_add_policy+0x6c3/0xc90
[  308.207352][ T6559]  ? __pfx_xfrm_add_policy+0x10/0x10
[  308.207494][ T6559]  ? __pfx_xfrm_add_policy+0x10/0x10
[  308.207632][ T6559]  xfrm_user_rcv_msg+0xf6d/0x11f0
[  308.207798][ T6559]  ? kmsan_get_metadata+0x13e/0x1c0
[  308.207980][ T6559]  netlink_rcv_skb+0x375/0x650
[  308.208146][ T6559]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  308.208299][ T6559]  xfrm_netlink_rcv+0x76/0xb0
[  308.208434][ T6559]  ? __pfx_xfrm_netlink_rcv+0x10/0x10
[  308.208571][ T6559]  netlink_unicast+0xf52/0x1260
[  308.208729][ T6559]  netlink_sendmsg+0x10da/0x11e0
[  308.208905][ T6559]  ? __pfx_netlink_sendmsg+0x10/0x10
[  308.209057][ T6559]  ? __pfx_netlink_sendmsg+0x10/0x10
[  308.209209][ T6559]  __sock_sendmsg+0x30f/0x380
[  308.209364][ T6559]  ____sys_sendmsg+0x877/0xb60
[  308.209515][ T6559]  ___sys_sendmsg+0x28d/0x3c0
[  308.209656][ T6559]  ? __rcu_read_unlock+0x7b/0xe0
[  308.209818][ T6559]  ? __fget_files+0x42b/0x500
[  308.209962][ T6559]  ? kmsan_get_metadata+0x13e/0x1c0
[  308.210095][ T6559]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  308.210241][ T6559]  __x64_sys_sendmsg+0x212/0x3c0
[  308.210395][ T6559]  x64_sys_call+0x2ed6/0x3c30
[  308.210524][ T6559]  do_syscall_64+0xcd/0x1e0
[  308.210689][ T6559]  ? clear_bhb_loop+0x25/0x80
[  308.210848][ T6559]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  308.211001][ T6559] RIP: 0033:0x7fa08998cda9
[  308.211088][ T6559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  308.211190][ T6559] RSP: 002b:00007fa08a720038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  308.211296][ T6559] RAX: ffffffffffffffda RBX: 00007fa089ba5fa0 RCX: 00007fa08998cda9
[  308.211381][ T6559] RDX: 0000000000004000 RSI: 0000000020000580 RDI: 0000000000000003
[  308.211452][ T6559] RBP: 00007fa08a720090 R08: 0000000000000000 R09: 0000000000000000
[  308.211523][ T6559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  308.211590][ T6559] R13: 0000000000000000 R14: 00007fa089ba5fa0 R15: 00007ffe8c6bf2b8
[  308.211688][ T6559]  </TASK>
[  308.579802][ T5856] usbhid 2-1:0.0: can't add hid device: -71
[  308.593352][ T5856] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  308.626642][ T5856] usb 2-1: USB disconnect, device number 12
[  308.705428][   T44] usb 3-1: Using ep0 maxpacket: 32
[  308.713503][ T5882] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  308.742486][   T44] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  308.746847][ T6511] hsr_slave_0: entered promiscuous mode
[  308.752268][   T44] usb 3-1: config 0 has no interface number 0
[  308.761188][ T6511] hsr_slave_1: entered promiscuous mode
[  308.763478][   T44] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[  308.780088][   T44] usb 3-1: config 0 interface 1 has no altsetting 0
[  308.980454][ T5882] usb 4-1: device descriptor read/8, error -71
[  309.008387][   T44] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[  309.018069][   T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  309.026502][   T44] usb 3-1: Product: syz
[  309.030962][   T44] usb 3-1: Manufacturer: syz
[  309.035766][   T44] usb 3-1: SerialNumber: syz
[  309.118028][ T5882] usb usb4-port1: unable to enumerate USB device
[  309.177883][   T44] usb 3-1: config 0 descriptor??
[  309.456758][   T44] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[  309.520241][   T44] cx231xx 3-1:0.1: Failed to read PCB config
[  309.526820][   T44] cx231xx 3-1:0.1: probe with driver cx231xx failed with error -71
[  309.531046][ T5808] Bluetooth: hci4: command tx timeout
[  309.566247][ T6571] loop3: detected capacity change from 0 to 64
[  309.682176][   T44] usb 3-1: USB disconnect, device number 7
[  310.062081][ T5882] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  310.101197][   T44] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  310.252217][ T5882] usb 4-1: Using ep0 maxpacket: 8
[  310.311774][ T5882] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  310.321567][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  310.331452][ T5882] usb 4-1: Product: syz
[  310.335832][ T5882] usb 4-1: Manufacturer: syz
[  310.341333][ T5882] usb 4-1: SerialNumber: syz
[  310.349476][   T44] usb 3-1: Using ep0 maxpacket: 32
[  310.369592][   T44] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  310.378673][   T44] usb 3-1: config 0 has no interface number 0
[  310.385663][   T44] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[  310.396709][   T44] usb 3-1: config 0 interface 1 has no altsetting 0
[  310.428788][ T5882] usb 4-1: config 0 descriptor??
[  310.542284][   T44] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[  310.552716][   T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  310.561938][   T44] usb 3-1: Product: syz
[  310.563083][ T6511] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  310.566228][   T44] usb 3-1: Manufacturer: syz
[  310.578195][   T44] usb 3-1: SerialNumber: syz
[  310.611002][ T6511] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  310.674794][   T44] usb 3-1: config 0 descriptor??
[  310.687858][ T6511] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  310.692760][ T5882] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  310.774006][ T6511] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  311.302772][   T44] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[  311.333066][ T6582] loop1: detected capacity change from 0 to 64
[  311.402732][   T44] cx231xx 3-1:0.1: Failed to read PCB config
[  311.409289][   T44] cx231xx 3-1:0.1: probe with driver cx231xx failed with error -71
[  311.513227][   T44] usb 3-1: USB disconnect, device number 8
[  311.602417][ T5808] Bluetooth: hci4: command tx timeout
[  312.016068][ T6587] loop4: detected capacity change from 0 to 64
[  312.045732][ T5882] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  312.151009][ T5882] usb 4-1: USB disconnect, device number 9
[  312.224960][ T6587] hfs: invalid btree extent records (0 size)
[  312.231633][ T6587] hfs: unable to open catalog tree
[  312.277449][ T6587] hfs: can't find a HFS filesystem on dev loop4
[  312.386178][ T6587] netlink: 160 bytes leftover after parsing attributes in process `syz.4.145'.
[  312.396408][ T6587] netlink: 8 bytes leftover after parsing attributes in process `syz.4.145'.
[  312.457222][ T6511] 8021q: adding VLAN 0 to HW filter on device bond0
[  312.695987][ T6511] 8021q: adding VLAN 0 to HW filter on device team0
[  312.776796][   T34] bridge0: port 1(bridge_slave_0) entered blocking state
[  312.784592][   T34] bridge0: port 1(bridge_slave_0) entered forwarding state
[  312.950088][   T34] bridge0: port 2(bridge_slave_1) entered blocking state
[  312.957850][   T34] bridge0: port 2(bridge_slave_1) entered forwarding state
[  315.065146][ T6623] input: syz1 as /devices/virtual/input/input10
[  315.311435][ T6625] loop1: detected capacity change from 0 to 1024
[  315.343345][ T6625] hfsplus: Unknown parameter 'barri	�b�\�KL�s8���bi�(accenteuro'
[  315.438608][ T6511] 8021q: adding VLAN 0 to HW filter on device batadv0
[  316.012830][ T6511] veth0_vlan: entered promiscuous mode
[  316.092925][ T6511] veth1_vlan: entered promiscuous mode
[  316.174553][ T6631] loop2: detected capacity change from 0 to 256
[  316.317361][ T6631] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f50, chksum : 0xa6aae999, utbl_chksum : 0xe619d30d)
[  316.428995][ T6511] veth0_macvtap: entered promiscuous mode
[  316.507003][ T6511] veth1_macvtap: entered promiscuous mode
[  316.744951][ T6511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  316.755952][ T6511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  316.766812][ T6511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  316.779784][ T6511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  316.790607][ T6511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  316.801564][ T6511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  316.811718][ T6511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  316.822480][ T6511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  316.837415][ T6511] batman_adv: batadv0: Interface activated: batadv_slave_0
[  317.167881][ T6511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  317.180352][ T6511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  317.193231][ T6511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  317.205884][ T6511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  317.216184][ T6511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  317.226994][ T6511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  317.237250][ T6511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  317.248045][ T6511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  317.264735][ T6511] batman_adv: batadv0: Interface activated: batadv_slave_1
[  317.432695][ T6511] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  317.443017][ T6511] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  317.452221][ T6511] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  317.461413][ T6511] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  317.652220][   T44] usb 2-1: new full-speed USB device number 13 using dummy_hcd
[  317.818868][   T44] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  317.830184][   T44] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  317.843412][   T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[  317.855493][   T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  317.867621][   T44] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  317.914003][ T6643] netlink: 728 bytes leftover after parsing attributes in process `syz.2.159'.
[  318.012652][   T44] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  318.022137][   T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  318.030733][   T44] usb 2-1: Product: syz
[  318.035095][   T44] usb 2-1: Manufacturer: syz
[  318.039884][   T44] usb 2-1: SerialNumber: syz
[  318.156060][   T44] usb 2-1: config 0 descriptor??
[  318.384383][ T6650] loop4: detected capacity change from 0 to 16
[  318.385305][   T44] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000
[  318.400879][   T44] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0.
[  318.441234][ T6650] erofs (device loop4): dirblkbits 4 isn't supported
[  318.595189][ T6638] sctp: [Deprecated]: syz.1.158 (pid 6638) Use of int in max_burst socket option.
[  318.595189][ T6638] Use struct sctp_assoc_value instead
[  318.615971][ T5856] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  318.666150][   T44] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -71
[  318.676855][   T44] radio-si470x 2-1:0.0: si470x_get_scratch: si470x_get_report returned -71
[  318.687113][   T44] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5
[  318.858873][   T44] usb 2-1: USB disconnect, device number 13
[  318.876074][ T5856] usb 4-1: Using ep0 maxpacket: 8
[  318.920259][ T5856] usb 4-1: config 0 has an invalid interface number: 52 but max is 0
[  318.933417][ T5856] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  318.945809][ T5856] usb 4-1: config 0 has no interface number 0
[  318.952232][ T5856] usb 4-1: config 0 interface 52 has no altsetting 0
[  318.959193][ T5856] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00
[  318.969202][ T5856] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  318.971422][ T6650] netlink: 144 bytes leftover after parsing attributes in process `syz.4.161'.
[  319.203338][ T5856] usb 4-1: config 0 descriptor??
[  319.424338][ T5856] usb 4-1: Can not set alternate setting to 1, error: -71
[  319.431981][ T5856] synaptics_usb 4-1:0.52: probe with driver synaptics_usb failed with error -71
[  319.561576][ T5856] usb 4-1: USB disconnect, device number 10
[  319.898523][   T29] audit: type=1326 audit(1738455579.653:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6668 comm="syz.1.163" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa08998cda9 code=0x0
[  322.417249][ T5856] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  322.647814][ T5856] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  322.658364][ T5856] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  322.671810][ T5856] usb 2-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00
[  322.681177][ T5856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  322.709295][ T6715] fuse: Unknown parameter 'grour�t�Sg��_�7�n ���)�T>���!Tqy�T�Y�#��[�O���������*@sGr��v3���}iJo�#O�����j�"�/�'
[  322.826232][ T5856] usb 2-1: config 0 descriptor??
[  322.857602][ T6715] loop4: detected capacity change from 0 to 512
[  322.874406][ T5856] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  323.024867][ T6715] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.174: bg 0: block 288: padding at end of block bitmap is not set
[  323.073723][ T6708] loop1: detected capacity change from 0 to 512
[  323.092164][ T6708] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349)
[  323.111448][ T6721] FAULT_INJECTION: forcing a failure.
[  323.111448][ T6721] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  323.130492][ T6721] CPU: 0 UID: 0 PID: 6721 Comm: syz.2.175 Not tainted 6.13.0-syzkaller-09950-g60c828cf80c0 #0
[  323.130619][ T6721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  323.130688][ T6721] Call Trace:
[  323.130731][ T6721]  <TASK>
[  323.130771][ T6721]  dump_stack_lvl+0x216/0x2d0
[  323.130902][ T6721]  dump_stack+0x1e/0x24
[  323.131006][ T6721]  should_fail_ex+0x767/0x830
[  323.131173][ T6721]  should_fail+0x2a/0x40
[  323.131318][ T6721]  should_fail_usercopy+0x2e/0x40
[  323.131481][ T6721]  _copy_from_user+0x35/0x110
[  323.131645][ T6721]  ___sys_recvmsg+0x102/0x840
[  323.131798][ T6721]  ? kmsan_get_metadata+0x13e/0x1c0
[  323.131936][ T6721]  ? kmsan_get_metadata+0x13e/0x1c0
[  323.132060][ T6721]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  323.132208][ T6721]  do_recvmmsg+0x45a/0xfc0
[  323.132347][ T6721]  ? stack_depot_save_flags+0x2c/0x750
[  323.132523][ T6721]  __x64_sys_recvmmsg+0x397/0x490
[  323.132684][ T6721]  x64_sys_call+0x35ba/0x3c30
[  323.132809][ T6721]  do_syscall_64+0xcd/0x1e0
[  323.132967][ T6721]  ? clear_bhb_loop+0x25/0x80
[  323.133116][ T6721]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  323.133269][ T6721] RIP: 0033:0x7faf6bf8cda9
[  323.133359][ T6721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  323.133460][ T6721] RSP: 002b:00007faf6cdce038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  323.133580][ T6721] RAX: ffffffffffffffda RBX: 00007faf6c1a5fa0 RCX: 00007faf6bf8cda9
[  323.133666][ T6721] RDX: 0000000000000004 RSI: 00000000200086c0 RDI: 0000000000000003
[  323.133738][ T6721] RBP: 00007faf6cdce090 R08: 0000000000000000 R09: 0000000000000000
[  323.133807][ T6721] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001
[  323.133876][ T6721] R13: 0000000000000000 R14: 00007faf6c1a5fa0 R15: 00007ffcaeea3eb8
[  323.133974][ T6721]  </TASK>
[  323.363040][ T6715] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem
[  323.377270][ T6708] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e02c, mo2=0002]
[  323.492034][ T6708] System zones: 1-12
[  323.497038][ T6708] EXT4-fs (loop1): orphan cleanup on readonly fs
[  323.503987][ T6708] EXT4-fs error (device loop1): ext4_read_inode_bitmap:167: comm syz.1.172: Inode bitmap for bg 0 marked uninitialized
[  323.522924][ T6715] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.174: attempt to clear invalid blocks 1024 len 1
[  323.605934][ T6715] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.174: invalid indirect mapped block 1819239214 (level 0)
[  323.642647][ T6715] EXT4-fs (loop4): 1 truncate cleaned up
[  323.650318][ T6715] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  323.686540][ T6708] EXT4-fs (loop1): Remounting filesystem read-only
[  323.716596][ T6708] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  323.903978][ T5856] usb 2-1: USB disconnect, device number 14
[  324.106303][ T5802] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  324.311384][ T5859] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  324.514748][ T4651] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  324.522819][ T4651] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  324.531024][ T5859] usb 3-1: Using ep0 maxpacket: 8
[  324.577698][ T5859] usb 3-1: config 0 has an invalid interface number: 52 but max is 0
[  324.586296][ T5859] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  324.596850][ T5859] usb 3-1: config 0 has no interface number 0
[  324.603318][ T5859] usb 3-1: config 0 interface 52 has no altsetting 0
[  324.610288][ T5859] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00
[  324.619711][ T5859] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  324.725964][ T5859] usb 3-1: config 0 descriptor??
[  324.741007][ T5796] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  324.777452][   T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  324.786484][   T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  324.977333][ T5859] usb 3-1: Can not set alternate setting to 1, error: -71
[  324.984989][ T5859] synaptics_usb 3-1:0.52: probe with driver synaptics_usb failed with error -71
[  325.053382][ T5859] usb 3-1: USB disconnect, device number 9
[  325.765625][ T4651] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  325.846253][   T29] audit: type=1326 audit(1738455585.623:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6737 comm="syz.1.179" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa08998cda9 code=0x0
[  325.991888][ T4651] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  326.126129][ T4651] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  326.267373][ T4651] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  326.570753][ T4651] bridge_slave_1: left allmulticast mode
[  326.576730][ T4651] bridge_slave_1: left promiscuous mode
[  326.583736][ T4651] bridge0: port 2(bridge_slave_1) entered disabled state
[  326.670036][ T4651] bridge_slave_0: left allmulticast mode
[  326.676719][ T4651] bridge_slave_0: left promiscuous mode
[  326.683540][ T4651] bridge0: port 1(bridge_slave_0) entered disabled state
[  327.168169][ T4651] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  327.232348][ T4651] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  327.262538][ T4651] bond0 (unregistering): Released all slaves
[  327.872484][ T6751] FAULT_INJECTION: forcing a failure.
[  327.872484][ T6751] name failslab, interval 1, probability 0, space 0, times 0
[  327.885612][ T6751] CPU: 0 UID: 0 PID: 6751 Comm: syz.3.183 Not tainted 6.13.0-syzkaller-09950-g60c828cf80c0 #0
[  327.885727][ T6751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  327.885793][ T6751] Call Trace:
[  327.885846][ T6751]  <TASK>
[  327.885886][ T6751]  dump_stack_lvl+0x216/0x2d0
[  327.886012][ T6751]  dump_stack+0x1e/0x24
[  327.886115][ T6751]  should_fail_ex+0x767/0x830
[  327.886281][ T6751]  should_failslab+0x17f/0x210
[  327.886420][ T6751]  __kmalloc_noprof+0x176/0x1230
[  327.886581][ T6751]  ? kmsan_get_metadata+0x13e/0x1c0
[  327.886710][ T6751]  ? tomoyo_encode+0x5f8/0xa40
[  327.886849][ T6751]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  327.886992][ T6751]  ? kmsan_get_metadata+0x13e/0x1c0
[  327.887124][ T6751]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  327.887263][ T6751]  tomoyo_encode+0x5f8/0xa40
[  327.887413][ T6751]  tomoyo_realpath_from_path+0x9dd/0xaa0
[  327.887575][ T6751]  tomoyo_path_number_perm+0x1d9/0x8f0
[  327.887749][ T6751]  ? kmsan_internal_set_shadow_origin+0x69/0x100
[  327.887950][ T6751]  ? kmsan_get_metadata+0x13e/0x1c0
[  327.888084][ T6751]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  327.888247][ T6751]  tomoyo_file_ioctl+0x3f/0x50
[  327.888393][ T6751]  security_file_ioctl+0x145/0x590
[  327.888562][ T6751]  __se_sys_ioctl+0xd0/0x440
[  327.888680][ T6751]  __x64_sys_ioctl+0x96/0xe0
[  327.888791][ T6751]  x64_sys_call+0x19f0/0x3c30
[  327.888923][ T6751]  do_syscall_64+0xcd/0x1e0
[  327.889081][ T6751]  ? clear_bhb_loop+0x25/0x80
[  327.889227][ T6751]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  327.889375][ T6751] RIP: 0033:0x7f37e018cda9
[  327.889460][ T6751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  327.889558][ T6751] RSP: 002b:00007f37e10a8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  327.889667][ T6751] RAX: ffffffffffffffda RBX: 00007f37e03a5fa0 RCX: 00007f37e018cda9
[  327.889749][ T6751] RDX: 0000000020000080 RSI: 0000000000008918 RDI: 0000000000000003
[  327.889819][ T6751] RBP: 00007f37e10a8090 R08: 0000000000000000 R09: 0000000000000000
[  327.889895][ T6751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  327.889961][ T6751] R13: 0000000000000000 R14: 00007f37e03a5fa0 R15: 00007fff40919b28
[  327.890053][ T6751]  </TASK>
[  327.890144][ T6751] ERROR: Out of memory at tomoyo_realpath_from_path.
[  328.160970][ T4651] hsr_slave_0: left promiscuous mode
[  328.192289][ T4651] hsr_slave_1: left promiscuous mode
[  328.200185][ T4651] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  328.208444][ T4651] batman_adv: batadv0: Removing interface: batadv_slave_0
[  328.273276][ T4651] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  328.281211][ T4651] batman_adv: batadv0: Removing interface: batadv_slave_1
[  328.367446][ T4651] veth1_macvtap: left promiscuous mode
[  328.373488][ T4651] veth0_macvtap: left promiscuous mode
[  328.379442][ T4651] veth1_vlan: left promiscuous mode
[  328.385179][ T4651] veth0_vlan: left promiscuous mode
[  329.049757][ T5811] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  329.083471][ T5811] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  329.094252][ T6769] FAULT_INJECTION: forcing a failure.
[  329.094252][ T6769] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  329.107876][ T6769] CPU: 1 UID: 0 PID: 6769 Comm: syz.4.186 Not tainted 6.13.0-syzkaller-09950-g60c828cf80c0 #0
[  329.107996][ T6769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  329.108066][ T6769] Call Trace:
[  329.108109][ T6769]  <TASK>
[  329.108151][ T6769]  dump_stack_lvl+0x216/0x2d0
[  329.108285][ T6769]  dump_stack+0x1e/0x24
[  329.108390][ T6769]  should_fail_ex+0x767/0x830
[  329.108562][ T6769]  should_fail+0x2a/0x40
[  329.108708][ T6769]  should_fail_usercopy+0x2e/0x40
[  329.108880][ T6769]  _copy_from_user+0x35/0x110
[  329.109042][ T6769]  kstrtouint_from_user+0x75/0x140
[  329.109185][ T6769]  ? proc_fail_nth_write+0x43/0x2e0
[  329.109329][ T6769]  ? vfs_write+0x48a/0x1540
[  329.109443][ T6769]  proc_fail_nth_write+0x62/0x2e0
[  329.109590][ T6769]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  329.109748][ T6769]  vfs_write+0x48a/0x1540
[  329.109858][ T6769]  ? stack_depot_save_flags+0x2c/0x750
[  329.110009][ T6769]  ? kmsan_get_metadata+0x13e/0x1c0
[  329.110146][ T6769]  ? kmsan_internal_set_shadow_origin+0x69/0x100
[  329.110346][ T6769]  ksys_write+0x240/0x4b0
[  329.110455][ T6769]  ? kmsan_get_metadata+0x13e/0x1c0
[  329.110600][ T6769]  __x64_sys_write+0x93/0xe0
[  329.110719][ T6769]  x64_sys_call+0x3161/0x3c30
[  329.110854][ T6769]  do_syscall_64+0xcd/0x1e0
[  329.111018][ T6769]  ? clear_bhb_loop+0x25/0x80
[  329.111168][ T6769]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  329.111321][ T6769] RIP: 0033:0x7f248758b85f
[  329.111410][ T6769] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  329.111513][ T6769] RSP: 002b:00007f2488356030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  329.111626][ T6769] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f248758b85f
[  329.111708][ T6769] RDX: 0000000000000001 RSI: 00007f24883560a0 RDI: 0000000000000003
[  329.111787][ T6769] RBP: 00007f2488356090 R08: 0000000000000000 R09: 0000000000000000
[  329.111860][ T6769] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  329.111930][ T6769] R13: 0000000000000000 R14: 00007f24877a6080 R15: 00007ffc77fa2728
[  329.112027][ T6769]  </TASK>
[  329.361426][ T5811] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  329.437189][ T5811] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  329.449797][ T5811] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  329.488960][ T5811] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  329.703192][ T4651] team0 (unregistering): Port device team_slave_1 removed
[  329.725576][ T4651] team0 (unregistering): Port device team_slave_0 removed
[  329.958172][ T5860] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  330.331108][ T5860] usb 3-1: Using ep0 maxpacket: 8
[  330.371359][ T5860] usb 3-1: config 2 has an invalid interface number: 175 but max is 0
[  330.379947][ T5860] usb 3-1: config 2 has no interface number 0
[  330.386495][ T5860] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=92.5b
[  330.397540][ T5860] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  330.491981][ T6779] netlink: 64 bytes leftover after parsing attributes in process `syz.4.188'.
[  330.748537][ T5860] usb 3-1: USB disconnect, device number 10
[  330.868999][ T6783] loop1: detected capacity change from 0 to 256
[  331.127973][ T6783] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  331.352662][ T6783] netlink: 12 bytes leftover after parsing attributes in process `syz.1.189'.
[  331.562319][   T29] audit: type=1326 audit(1738455591.343:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6789 comm="syz.4.191" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f248758cda9 code=0x0
[  331.674969][ T6766] chnl_net:caif_netlink_parms(): no params data found
[  331.764827][ T5811] Bluetooth: hci4: command tx timeout
[  331.882084][ T6783] syz.1.189 (6783) used greatest stack depth: 5016 bytes left
[  332.221592][ T6803] loop1: detected capacity change from 0 to 256
[  332.350802][   T29] audit: type=1800 audit(1738455592.123:24): pid=6803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.194" name="file0" dev="loop1" ino=11 res=0 errno=0
[  333.253801][ T6766] bridge0: port 1(bridge_slave_0) entered blocking state
[  333.269733][ T6766] bridge0: port 1(bridge_slave_0) entered disabled state
[  333.277639][ T6766] bridge_slave_0: entered allmulticast mode
[  333.286834][ T6766] bridge_slave_0: entered promiscuous mode
[  333.434500][ T6766] bridge0: port 2(bridge_slave_1) entered blocking state
[  333.444288][ T6766] bridge0: port 2(bridge_slave_1) entered disabled state
[  333.452167][ T6766] bridge_slave_1: entered allmulticast mode
[  333.461225][ T6766] bridge_slave_1: entered promiscuous mode
[  333.843217][ T5811] Bluetooth: hci4: command tx timeout
[  334.373521][ T6766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  334.521225][ T6766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  334.982210][ T6766] team0: Port device team_slave_0 added
[  335.071859][ T6766] team0: Port device team_slave_1 added
[  335.382457][ T6766] batman_adv: batadv0: Adding interface: batadv_slave_0
[  335.389803][ T6766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  335.422034][ T6766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  335.491806][   T44] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  335.635447][ T6766] batman_adv: batadv0: Adding interface: batadv_slave_1
[  335.642844][ T6766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  335.669697][ T6766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  335.738296][   T44] usb 3-1: unable to get BOS descriptor or descriptor too short
[  335.794041][   T44] usb 3-1: config 1 interface 0 altsetting 84 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  335.805906][   T44] usb 3-1: config 1 interface 0 has no altsetting 0
[  335.855229][   T44] usb 3-1: New USB device found, idVendor=05ac, idProduct=0263, bcdDevice= 0.40
[  335.864906][   T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  335.873473][   T44] usb 3-1: Product: syz
[  335.877828][   T44] usb 3-1: Manufacturer: syz
[  335.884571][   T44] usb 3-1: SerialNumber: syz
[  335.936991][ T5811] Bluetooth: hci4: command tx timeout
[  335.963147][   T29] audit: type=1326 audit(1738455595.743:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6836 comm="syz.1.205" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa08998cda9 code=0x0
[  336.036544][ T6766] hsr_slave_0: entered promiscuous mode
[  336.050297][ T6766] hsr_slave_1: entered promiscuous mode
[  336.211402][   T44] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input11
[  336.238507][ T5134] bcm5974 3-1:1.0: could not read from device
[  336.301059][ T5134] bcm5974 3-1:1.0: could not read from device
[  336.309930][   T44] usb 3-1: USB disconnect, device number 11
[  336.328329][ T5134] bcm5974 3-1:1.0: could not read from device
[  336.379573][ T5134] bcm5974 3-1:1.0: could not read from device
[  336.682555][ T6843] tmpfs: Unknown parameter 'smackfsroot'
[  337.682876][ T6766] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  337.697162][ T6849] loop4: detected capacity change from 0 to 2048
[  337.833775][ T6766] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  337.889697][ T6849] NILFS (loop4): ifile inode (checkpoint number=2) corrupted
[  337.897774][ T6849] NILFS (loop4): error -5 while loading last checkpoint (checkpoint number=2)
[  337.916376][ T6766] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  338.003742][ T5811] Bluetooth: hci4: command tx timeout
[  338.052839][ T6766] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  338.172879][ T6858] FAULT_INJECTION: forcing a failure.
[  338.172879][ T6858] name failslab, interval 1, probability 0, space 0, times 0
[  338.195649][ T6858] CPU: 0 UID: 0 PID: 6858 Comm: syz.3.210 Not tainted 6.13.0-syzkaller-09950-g60c828cf80c0 #0
[  338.195772][ T6858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  338.195852][ T6858] Call Trace:
[  338.195894][ T6858]  <TASK>
[  338.195933][ T6858]  dump_stack_lvl+0x216/0x2d0
[  338.196065][ T6858]  dump_stack+0x1e/0x24
[  338.196169][ T6858]  should_fail_ex+0x767/0x830
[  338.196345][ T6858]  should_failslab+0x17f/0x210
[  338.196487][ T6858]  __kmalloc_node_noprof+0x183/0x1250
[  338.196658][ T6858]  ? kmsan_get_metadata+0x13e/0x1c0
[  338.196792][ T6858]  ? alloc_slab_obj_exts+0xaa/0x2d0
[  338.196962][ T6858]  ? kmsan_internal_set_shadow_origin+0x69/0x100
[  338.197145][ T6858]  ? kmsan_get_metadata+0x13e/0x1c0
[  338.197278][ T6858]  ? kmsan_get_metadata+0x13e/0x1c0
[  338.197412][ T6858]  ? kmsan_get_shadow_origin_ptr+0x38/0xb0
[  338.197559][ T6858]  alloc_slab_obj_exts+0xaa/0x2d0
[  338.197731][ T6858]  __memcg_slab_post_alloc_hook+0xe40/0x1540
[  338.197913][ T6858]  ? kmsan_get_metadata+0x13e/0x1c0
[  338.198059][ T6858]  __kmalloc_node_noprof+0xbdc/0x1250
[  338.198232][ T6858]  ? __kvmalloc_node_noprof+0xc0/0x2d0
[  338.198384][ T6858]  __kvmalloc_node_noprof+0xc0/0x2d0
[  338.198520][ T6858]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  338.198669][ T6858]  traverse+0x107/0xa60
[  338.198849][ T6858]  ? kmsan_get_metadata+0x13e/0x1c0
[  338.198988][ T6858]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  338.199138][ T6858]  seq_read_iter+0x1cc3/0x20e0
[  338.199299][ T6858]  ? kmsan_get_metadata+0x13e/0x1c0
[  338.199440][ T6858]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  338.199595][ T6858]  seq_read+0x4ef/0x5d0
[  338.199748][ T6858]  ? kmsan_get_metadata+0x13e/0x1c0
[  338.199894][ T6858]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  338.200034][ T6858]  ? __pfx_seq_read+0x10/0x10
[  338.200190][ T6858]  ? __pfx_seq_read+0x10/0x10
[  338.200340][ T6858]  proc_reg_read+0x261/0x4b0
[  338.200518][ T6858]  vfs_read+0x29f/0xf70
[  338.200623][ T6858]  ? __fget_files+0x42b/0x500
[  338.200769][ T6858]  ? kmsan_get_metadata+0x13e/0x1c0
[  338.200911][ T6858]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  338.201060][ T6858]  __x64_sys_pread64+0x2c5/0x3b0
[  338.201196][ T6858]  x64_sys_call+0x2e58/0x3c30
[  338.201321][ T6858]  do_syscall_64+0xcd/0x1e0
[  338.201482][ T6858]  ? clear_bhb_loop+0x25/0x80
[  338.201628][ T6858]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  338.201779][ T6858] RIP: 0033:0x7f37e018cda9
[  338.201878][ T6858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  338.201987][ T6858] RSP: 002b:00007f37e10a8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011
[  338.202100][ T6858] RAX: ffffffffffffffda RBX: 00007f37e03a5fa0 RCX: 00007f37e018cda9
[  338.202188][ T6858] RDX: 00000000fffffe9c RSI: 0000000020000180 RDI: 0000000000000003
[  338.202263][ T6858] RBP: 00007f37e10a8090 R08: 0000000000000000 R09: 0000000000000000
[  338.202339][ T6858] R10: 00000000000000b6 R11: 0000000000000246 R12: 0000000000000001
[  338.202408][ T6858] R13: 0000000000000000 R14: 00007f37e03a5fa0 R15: 00007fff40919b28
[  338.202507][ T6858]  </TASK>
[  338.783491][ T6860] sp0: Synchronizing with TNC
[  338.974288][ T6863] process 'syz.1.213' launched './file0' with NULL argv: empty string added
[  340.078979][ T6868] loop3: detected capacity change from 0 to 40427
[  340.099470][   T29] audit: type=1326 audit(1738455599.863:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6873 comm="syz.1.217" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa08998cda9 code=0x0
[  340.168457][ T6868] F2FS-fs (loop3): Mismatch start address, segment0(0) cp_blkaddr(512)
[  340.181624][ T6868] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  340.202784][ T6868] F2FS-fs (loop3): Ignore s_resuid=0, s_resgid=60929 w/o reserve_root
[  340.252695][ T6868] F2FS-fs (loop3): Found nat_bits in checkpoint
[  340.556865][ T6868] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[  340.564518][ T6868] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  340.632378][ T5856] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  340.754664][ T6868] syz.3.214: attempt to access beyond end of device
[  340.754664][ T6868] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  340.769260][ T6868] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  340.792625][ T5856] usb 3-1: device descriptor read/64, error -71
[  340.820097][ T6766] 8021q: adding VLAN 0 to HW filter on device bond0
[  340.949535][ T6766] 8021q: adding VLAN 0 to HW filter on device team0
[  341.205629][ T4651] bridge0: port 1(bridge_slave_0) entered blocking state
[  341.213362][ T4651] bridge0: port 1(bridge_slave_0) entered forwarding state
[  341.228726][ T4651] bridge0: port 2(bridge_slave_1) entered blocking state
[  341.236416][ T4651] bridge0: port 2(bridge_slave_1) entered forwarding state
[  341.331336][ T5856] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  341.781295][ T5856] usb 3-1: device descriptor read/64, error -71
[  341.784328][ T6766] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  341.893524][ T5856] usb usb3-port1: attempt power cycle
[  342.116549][ T1287] ieee802154 phy0 wpan0: encryption failed: -22
[  342.124222][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[  342.311766][ T5856] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  342.387169][ T5856] usb 3-1: device descriptor read/8, error -71
[  342.600966][ T5860] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  342.672124][ T5856] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  342.734798][ T5856] usb 3-1: device descriptor read/8, error -71
[  342.781174][ T5860] usb 4-1: device descriptor read/64, error -71
[  342.863069][ T5856] usb usb3-port1: unable to enumerate USB device
[  343.061134][ T5860] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  343.237160][ T5860] usb 4-1: device descriptor read/64, error -71
[  343.375695][ T5860] usb usb4-port1: attempt power cycle
[  343.381835][ T6766] 8021q: adding VLAN 0 to HW filter on device batadv0
[  343.541217][ T5882] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  343.750981][ T5860] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  343.752253][ T6898] loop1: detected capacity change from 0 to 2048
[  343.824176][ T5860] usb 4-1: device descriptor read/8, error -71
[  343.908681][ T6766] veth0_vlan: entered promiscuous mode
[  344.011046][ T6898] NILFS (loop1): ifile inode (checkpoint number=2) corrupted
[  344.022523][ T6898] NILFS (loop1): error -5 while loading last checkpoint (checkpoint number=2)
[  344.054132][ T6766] veth1_vlan: entered promiscuous mode
[  344.142211][ T5860] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  344.163026][ T5801] Bluetooth: hci3: command 0x0406 tx timeout
[  344.169519][   T51] Bluetooth: hci1: command 0x0406 tx timeout
[  344.177317][ T5812] Bluetooth: hci2: command 0x0406 tx timeout
[  344.205783][ T5860] usb 4-1: device descriptor read/8, error -71
[  344.335538][ T5860] usb usb4-port1: unable to enumerate USB device
[  344.413506][ T6905] loop4: detected capacity change from 0 to 1024
[  344.439980][ T6905] EXT4-fs: Ignoring removed nomblk_io_submit option
[  344.509365][ T6766] veth0_macvtap: entered promiscuous mode
[  344.577853][ T6905] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  344.607010][ T6766] veth1_macvtap: entered promiscuous mode
[  344.679193][ T6766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  344.691007][ T6766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  344.701392][ T6766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  344.712180][ T6766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  344.722516][ T6766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  344.735146][ T6766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  344.745923][ T6766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  344.756694][ T6766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  344.771757][ T6766] batman_adv: batadv0: Interface activated: batadv_slave_0
[  344.811776][ T6766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  344.823266][ T6766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  344.835551][ T6766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  344.847725][ T6766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  344.857913][ T6766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  344.868685][ T6766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  344.878957][ T6766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  344.889778][ T6766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  344.904588][ T6766] batman_adv: batadv0: Interface activated: batadv_slave_1
[  345.077325][ T6914] loop1: detected capacity change from 0 to 64
[  345.112529][ T6914] hfs: Unknown parameter 'iocharxet'
[  345.132963][ T6766] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  345.144344][ T6766] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  345.154232][ T6766] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  345.163381][ T6766] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  345.773665][ T6923] loop3: detected capacity change from 0 to 64
[  345.994159][ T6926] nbd1: detected capacity change from 0 to 32782
[  346.025294][ T6923] netlink: 92 bytes leftover after parsing attributes in process `syz.3.227'.
[  346.092960][ T6926] block nbd1: Send control failed (result -89)
[  346.099396][ T6926] block nbd1: Request send failed, requeueing
[  346.106821][   T40] block nbd1: Dead connection, failed to find a fallback
[  346.114294][   T40] block nbd1: shutting down sockets
[  346.119709][   T40] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  346.129482][   T40] Buffer I/O error on dev nbd1, logical block 0, async page read
[  346.147666][ T6926] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  346.157190][ T6926] Buffer I/O error on dev nbd1, logical block 0, async page read
[  346.173163][ T6926] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  346.184611][ T6926] Buffer I/O error on dev nbd1, logical block 0, async page read
[  346.192908][ T6926] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  346.202320][ T6926] Buffer I/O error on dev nbd1, logical block 0, async page read
[  346.210466][ T6926] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  346.219859][ T6926] Buffer I/O error on dev nbd1, logical block 0, async page read
[  346.228177][ T6926] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  346.237566][ T6926] Buffer I/O error on dev nbd1, logical block 0, async page read
[  346.248172][ T6926] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  346.259036][ T6926] Buffer I/O error on dev nbd1, logical block 0, async page read
[  346.276377][ T6926] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  346.288712][ T6926] Buffer I/O error on dev nbd1, logical block 0, async page read
[  346.296825][ T6926] ldm_validate_partition_table(): Disk read failed.
[  346.304029][ T6926] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  346.313973][ T6926] Buffer I/O error on dev nbd1, logical block 0, async page read
[  346.322408][ T6926] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  346.331837][ T6926] Buffer I/O error on dev nbd1, logical block 0, async page read
[  346.340192][ T6926] Dev nbd1: unable to read RDB block 0
[  346.346930][ T6926]  nbd1: unable to read partition table
[  347.137524][   T29] audit: type=1326 audit(1738455606.913:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6937 comm="syz.1.230" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa08998cda9 code=0x0
[  347.141907][ T6939] =====================================================
[  347.166925][ T6939] BUG: KMSAN: uninit-value in full_proxy_unlocked_ioctl+0xed/0x3a0
[  347.175307][ T6939]  full_proxy_unlocked_ioctl+0xed/0x3a0
[  347.181260][ T6939]  __se_sys_ioctl+0x246/0x440
[  347.186111][ T6939]  __x64_sys_ioctl+0x96/0xe0
[  347.193149][ T6939]  x64_sys_call+0x19f0/0x3c30
[  347.198018][ T6939]  do_syscall_64+0xcd/0x1e0
[  347.210176][ T6939]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  347.216429][ T6939] 
[  347.218847][ T6939] Uninit was stored to memory at:
[  347.224282][ T6939]  __debugfs_file_get+0xe59/0xef0
[  347.229471][ T6939]  full_proxy_open_regular+0x67/0xa00
[  347.235768][ T6939]  do_dentry_open+0x1bdd/0x26b0
[  347.240921][ T6939]  vfs_open+0x53/0x5b0
[  347.245205][ T6939]  path_openat+0x56a1/0x6250
[  347.251649][ T6939]  do_filp_open+0x268/0x600
[  347.256306][ T6939]  do_sys_openat2+0x1bf/0x2f0
[  347.262532][ T6939]  __x64_sys_openat+0x2a1/0x310
[  347.267577][ T6939]  x64_sys_call+0x36f5/0x3c30
[  347.272704][ T6939]  do_syscall_64+0xcd/0x1e0
[  347.277415][ T6939]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  347.283674][ T6939] 
[  347.286084][ T6939] Uninit was stored to memory at:
[  347.293143][ T6939]  __debugfs_file_get+0xdff/0xef0
[  347.298327][ T6939]  full_proxy_open_regular+0x67/0xa00
[  347.304519][ T6939]  do_dentry_open+0x1bdd/0x26b0
[  347.309560][ T6939]  vfs_open+0x53/0x5b0
[  347.313965][ T6939]  path_openat+0x56a1/0x6250
[  347.318890][ T6939]  do_filp_open+0x268/0x600
[  347.323733][ T6939]  do_sys_openat2+0x1bf/0x2f0
[  347.328591][ T6939]  __x64_sys_openat+0x2a1/0x310
[  347.333766][ T6939]  x64_sys_call+0x36f5/0x3c30
[  347.338627][ T6939]  do_syscall_64+0xcd/0x1e0
[  347.343502][ T6939]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  347.349590][ T6939] 
[  347.353040][ T6939] Uninit was created at:
[  347.357544][ T6939]  __kmalloc_cache_noprof+0x8e3/0xdf0
[  347.364016][ T6939]  __debugfs_file_get+0x31d/0xef0
[  347.369214][ T6939]  full_proxy_open_regular+0x67/0xa00
[  347.375331][ T6939]  do_dentry_open+0x1bdd/0x26b0
[  347.380371][ T6939]  vfs_open+0x53/0x5b0
[  347.384958][ T6939]  path_openat+0x56a1/0x6250
[  347.389696][ T6939]  do_filp_open+0x268/0x600
[  347.396216][ T6939]  do_sys_openat2+0x1bf/0x2f0
[  347.401663][ T6939]  __x64_sys_openat+0x2a1/0x310
[  347.406704][ T6939]  x64_sys_call+0x36f5/0x3c30
[  347.411834][ T6939]  do_syscall_64+0xcd/0x1e0
[  347.416547][ T6939]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  347.422782][ T6939] 
[  347.425199][ T6939] CPU: 1 UID: 0 PID: 6939 Comm: syz.2.231 Not tainted 6.13.0-syzkaller-09950-g60c828cf80c0 #0
[  347.435745][ T6939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  347.446651][ T6939] =====================================================
[  347.454261][ T6939] Disabling lock debugging due to kernel taint
[  347.460670][ T6939] Kernel panic - not syncing: kmsan.panic set ...
[  347.467236][ T6939] CPU: 1 UID: 0 PID: 6939 Comm: syz.2.231 Tainted: G    B              6.13.0-syzkaller-09950-g60c828cf80c0 #0
[  347.479163][ T6939] Tainted: [B]=BAD_PAGE
[  347.483419][ T6939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  347.493612][ T6939] Call Trace:
[  347.497004][ T6939]  <TASK>
[  347.500040][ T6939]  dump_stack_lvl+0x216/0x2d0
[  347.504883][ T6939]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  347.510902][ T6939]  dump_stack+0x1e/0x24
[  347.515221][ T6939]  panic+0x4e2/0xcf0
[  347.519320][ T6939]  ? kmsan_get_metadata+0xf1/0x1c0
[  347.524632][ T6939]  kmsan_report+0x2c7/0x2d0
[  347.529327][ T6939]  ? kmsan_get_metadata+0x13e/0x1c0
[  347.534709][ T6939]  ? __msan_warning+0x95/0x120
[  347.539651][ T6939]  ? full_proxy_unlocked_ioctl+0xed/0x3a0
[  347.545559][ T6939]  ? __se_sys_ioctl+0x246/0x440
[  347.550566][ T6939]  ? __x64_sys_ioctl+0x96/0xe0
[  347.555498][ T6939]  ? x64_sys_call+0x19f0/0x3c30
[  347.560529][ T6939]  ? do_syscall_64+0xcd/0x1e0
[  347.565417][ T6939]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  347.571695][ T6939]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  347.577707][ T6939]  ? tomoyo_path_number_perm+0x82d/0x8f0
[  347.583585][ T6939]  ? kmsan_get_metadata+0x13e/0x1c0
[  347.588978][ T6939]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  347.595001][ T6939]  ? do_vfs_ioctl+0x1cf5/0x3e60
[  347.600025][ T6939]  ? kmsan_get_metadata+0x13e/0x1c0
[  347.605412][ T6939]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  347.611419][ T6939]  __msan_warning+0x95/0x120
[  347.616174][ T6939]  full_proxy_unlocked_ioctl+0xed/0x3a0
[  347.621929][ T6939]  ? __pfx_full_proxy_unlocked_ioctl+0x10/0x10
[  347.628275][ T6939]  __se_sys_ioctl+0x246/0x440
[  347.633122][ T6939]  __x64_sys_ioctl+0x96/0xe0
[  347.637877][ T6939]  x64_sys_call+0x19f0/0x3c30
[  347.642736][ T6939]  do_syscall_64+0xcd/0x1e0
[  347.647462][ T6939]  ? clear_bhb_loop+0x25/0x80
[  347.652340][ T6939]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  347.658442][ T6939] RIP: 0033:0x7faf6bf8cda9
[  347.662993][ T6939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  347.682901][ T6939] RSP: 002b:00007faf6cdce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  347.691506][ T6939] RAX: ffffffffffffffda RBX: 00007faf6c1a5fa0 RCX: 00007faf6bf8cda9
[  347.699640][ T6939] RDX: 00000000200000c0 RSI: 000000008002af76 RDI: 0000000000000003
[  347.707785][ T6939] RBP: 00007faf6c00e2a0 R08: 0000000000000000 R09: 0000000000000000
[  347.715903][ T6939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  347.724036][ T6939] R13: 0000000000000000 R14: 00007faf6c1a5fa0 R15: 00007ffcaeea3eb8
[  347.732182][ T6939]  </TASK>
[  347.735592][ T6939] Kernel Offset: disabled
[  347.739986][ T6939] Rebooting in 86400 seconds..