last executing test programs:

15.125813492s ago: executing program 2 (id=4358):
r0 = socket(0x0, 0x5, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB='l\x00'])
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f00000066c0)="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", 0x2000, &(0x7f0000008b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x90, 0x0, 0x0, {0x100000000404, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000}}}, 0x0, 0x0, 0x0, 0x0})
readlink(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000540)=""/179, 0xb9)
read$FUSE(r1, &(0x7f000000ac00)={0x2020, 0x0, <r3=>0x0}, 0x2020)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000400)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmmsg$unix(r6, &(0x7f0000004080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r5], 0x18}}], 0x1, 0x0)
sendmmsg$unix(r6, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r5], 0x18}}], 0x1, 0x0)
r7 = dup3(r6, r5, 0x0)
connect$unix(r7, &(0x7f0000000100)=@abs={0x1}, 0x6e)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000100)={0x34, 0x2e, 0x503, 0x0, 0x0, "", [@nested={0x20, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0xc, 0xf, 0x0, 0x0, @u64}]}, @generic='p']}, 0x34}], 0x1}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000580)='kmem_cache_free\x00', r8}, 0x10)
write$FUSE_INIT(r1, &(0x7f0000000280)={0x50, 0x0, r3, {0x7, 0x24}}, 0x50)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4e9, &(0x7f0000000e80)="$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")
r10 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000000c0)={0x0, 0xfbdf, 0x7, 0x1a, 0x5}, 0x14)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r10, 0x7, 0x0, 0x0, 0x0)
r11 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
llistxattr(&(0x7f0000000180)='./file2\x00', 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r11, 0x7, 0x0, 0x0, 0x0)

14.501601935s ago: executing program 2 (id=4360):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000087b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10)
ioctl$TCFLSH(r0, 0x400455c8, 0x4)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x32)

4.623111973s ago: executing program 1 (id=4428):
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a\x00', @ANYRES32], 0x50)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, 0x0, 0x0)
write$binfmt_misc(r1, 0x0, 0x0)
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)

4.264238173s ago: executing program 3 (id=4431):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4)
sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
close(r4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={[], [], 0x2c})

3.911837582s ago: executing program 1 (id=4432):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYRESDEC=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, 0x0, 0x8)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x2)
readv(r4, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1)
ioctl$TIOCVHANGUP(r4, 0x5437, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x2, &(0x7f0000001740)=0x8, 0x4)
recvmmsg(r3, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
r5 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0)
unshare(0x20000400)
fsconfig$FSCONFIG_SET_FD(r5, 0x5, 0x0, 0x0, r5)
setsockopt$inet_mreqsrc(r2, 0x0, 0x26, &(0x7f0000000040)={@local, @remote, @local}, 0xc)
sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000d40)="$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")

3.911617783s ago: executing program 3 (id=4433):
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r1, 0x80015b1b, 0x0)

3.626922646s ago: executing program 1 (id=4434):
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0)
syz_emit_ethernet(0x19, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
pipe(&(0x7f0000000080))
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007e3dc410cd0621013ddd0102030109021b000100094000090485000189fe1f000905820220"], 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1f, 0x0, 0x0)

3.036121976s ago: executing program 2 (id=4435):
r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={0xffffffffffffffff, r1, 0x1, 0x0, @void}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r2, 0x3)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000f08000140000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x78}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)

2.969813111s ago: executing program 2 (id=4436):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0xfffc, 0x0, @loopback, 0x3}, 0x1c)
r1 = syz_open_procfs(0x0, &(0x7f0000000580)='net/tcp6\x00')
preadv(r1, &(0x7f0000000780)=[{&(0x7f0000000000)=""/65, 0x41}], 0x1, 0x1ef, 0x0)

2.969516241s ago: executing program 2 (id=4437):
syz_usb_connect$cdc_ecm(0x2, 0x52, &(0x7f0000000480)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x40, 0x1, 0x1, 0x7, 0x20, 0x3, [{{0x9, 0x4, 0x0, 0xd9, 0x2, 0x2, 0x6, 0x0, 0x2, {{0x5}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x7fff, 0xfff, 0xaf, 0x8f}, [@obex={0x5, 0x24, 0x15, 0xf56d}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x0, 0x84}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x32, 0x5, 0x59}}}}}]}}]}}, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)

1.887443662s ago: executing program 1 (id=4438):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x6}]})
socket$xdp(0x2c, 0x3, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r3=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4)
bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)

1.329770259s ago: executing program 4 (id=4440):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0)

1.300402201s ago: executing program 4 (id=4441):
r0 = socket(0x2b, 0x80801, 0x1)
setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000100)=0x7fff, 0x4)

1.273874494s ago: executing program 4 (id=4442):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
accept(0xffffffffffffffff, 0x0, 0x0)

1.177664852s ago: executing program 4 (id=4443):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00'}, 0x10)
r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cgroup.max.descendants\x00', 0x2, 0x0)
sendfile(r2, r2, 0x0, 0x10000a006)

1.177307572s ago: executing program 4 (id=4444):
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3a8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="48000000110001000000000000000000ac141400000000000000000000000000000000000000000014000d00200100"], 0x48}}, 0x0)

1.108120977s ago: executing program 2 (id=4445):
r0 = syz_usb_connect(0x3, 0x3f, &(0x7f0000000340)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000100)=""/119, 0x77}], 0x1, 0x0, 0x2)

958.27473ms ago: executing program 1 (id=4446):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x20)

853.570709ms ago: executing program 1 (id=4447):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x42000, &(0x7f0000000280)={[], [{@fowner_lt}]}, 0x3, 0x4d7, &(0x7f0000001000)="$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")
syz_usb_connect(0x0, 0x34, &(0x7f0000001380)=ANY=[@ANYBLOB="120100009bbd8b08e80430ffd1a601020301090222000100000000090400000129fddd00090500000000000000070594"], 0x0)

620.976529ms ago: executing program 3 (id=4449):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_SCRNMAP(r0, 0x4b46, &(0x7f0000000000))

620.477798ms ago: executing program 0 (id=4450):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffbfffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x0, 0xe80, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

533.765386ms ago: executing program 3 (id=4451):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000001080), 0x1, 0x4f7, &(0x7f0000000540)="$eJzs3c9vI1cdAPDvTOJNmqZNCpUKCOhSCgtarZ1426jqqVxAqKqEqDhxSEPijaLYcRQ7pQkrNfkfkKjEAcGJMwckDpV64ojgBre9LAekBVagDRIHo/GPbHZjJ2HXsVX785FGM2/eeL7vrTXveb9J/AIYW1cj4iAirkTEexEx1z6ftLd4q7Vl1z24f3v16P7t1SQajXf/kTTrs3Nx4jWZZ9v3nI6I738n4kfJ6bi1vf3NlXK5tNMuF+qV7UJtb//GRmVlvbRe2ioWlxaXFt64+Xqxb319ufKbe9/eePsHH//uS3f/dPDNn2TNmm3XnexHP7W6njuOk5mMiLcvI9gQTLT7c2XYDeGJpBHxmYh4pfn8z8VE8928mC6PNQDwKdBozEVj7mQZABh1aTMHlqT5di5gNtI0n2/l8F6MmbRcrdWv36rubq21cmXzkUtvbZRLC+1c4Xzkkqy8+GF2/LBcjEfLNyPihYj46dQzzXJ+9eJ5BgCgv559bP7/91Rr/gcARtz0eRcsD6YdAMDgnDv/AwAjx/wPAOPH/A8A48f8DwDjx/wPAOPmTmf+nxh2SwCAgfjeO+9kW+Oo/f3Xa+/v7W5W37+xVqpt5iu7q/nV6s52fr1aXS+X8qvVynn3K1er24uvxe4HhXqpVi/U9vaXK9Xdrfpy83u9l0u5gfQKADjLCy9/8pckIg7efKa5xYm1HMzVMNrSYTcAGBo5fxhfvoUbxpf/4wPnreXZ81eEP3qCYI0Pn+BFQL9d+7z8P4wr+X8YX/L/ML7k/2F8NRpJrzX/0+NLAICRIscPDPTn/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAiZpvb/IlymubzEc9FxHzkklsb5dJCRDwfEX+eyk1l5cWhthgAeHrp35L2+l/X5l6dfbz2SvKfqeY+In7883d/9sFKvb6zmJ3/5/H5+kft88VhtB8AOE9nnu7M4x0P7t9e7WyDbM+9b7UWF83iHrW3Vs1kTGa7P05HLiJm/pW0ym3Z55WJPsQ/OIyIz3Xrf9LMjcy3Vz59PH4W+7mBxk8fiZ8261r77N/is6fuPNUz5nlrvcK4+CQbf97q9vylcbW5n+66+PF0c4R6ep3x7+jU+Nd53qebY0238e/qRWO89vvv9qw7jPjCZLf4yXH8pEf8Vy8Y/84Xv/xKr7rGLyOuRff4J2MV6pXtQm1v/8ZGZWW9tF7aKhaXFpcW3rj5erHQzFEXOpnq0/7+5vXne/b/1xEzPeJPn9P/r53Z68bxAPyr/773w6/0in8Y8Y2vdn//XzwjfjYnfv3M+A+tzPy25/LdWfy1Vv8P/9/3//oF49/96/7aBS8FAAagtre/uVIul3b6epCLPt/wxEFySW12MOIH2efxp73PS+2UWddr/vCLj1/KKofe074cDHlgAi7dw4d+2C0BAAAAAAAAAAAAAAB6ufQ/J0qH3UMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABG2f8CAAD//zwQyy8=")
rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000000)='./file0/file0\x00')
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r0 = open$dir(&(0x7f0000000240)='.\x00', 0x0, 0x0)
renameat(r0, &(0x7f0000000400)='./file0\x00', r0, &(0x7f0000000440)='./file1\x00')

525.721466ms ago: executing program 0 (id=4452):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r0)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r1 = inotify_init1(0x0)
fcntl$setown(r1, 0x8, 0xffffffffffffffff)
fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, <r2=>0x0})
r3 = syz_open_procfs(r2, &(0x7f0000000600)='fd/4\x00')
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r3, 0x8004587d, &(0x7f0000001ec0)={@id={0x2, 0x0, @auto="de60e4b8e8c640437d02438081fc0e47"}})

415.167275ms ago: executing program 0 (id=4453):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0xfffffebe, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)

333.727252ms ago: executing program 0 (id=4454):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x48}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x1c, 0x4, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

333.419533ms ago: executing program 0 (id=4455):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)={0x38, r2, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}]]}, 0x38}}, 0x0)

326.392813ms ago: executing program 0 (id=4456):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, &(0x7f0000010180)=ANY=[], 0x0}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_script(r1, 0x0, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0)
r2 = socket$tipc(0x1e, 0x4, 0x0)
getsockopt$TIPC_NODE_RECVQ_DEPTH(r2, 0x10f, 0x82, 0x0, &(0x7f00000000c0))
r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000140)={0x12, 0xdb0, &(0x7f0000000240)="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"})
syz_usb_disconnect(r3)
syz_open_dev$hidraw(&(0x7f0000000180), 0xcc2, 0x20000)
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r4, 0x0, 0x0)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0)
r5 = syz_open_dev$hidraw(&(0x7f0000000000), 0x8000000000000001, 0x48c2c0)
read$hidraw(r5, &(0x7f0000000040)=""/58, 0x3a)
r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x2, 0x0)
ioctl$EVIOCGMASK(r6, 0x5b02, 0x0)

165.768987ms ago: executing program 3 (id=4457):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x21081a, &(0x7f0000000040)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
syz_open_procfs(0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)

113.707801ms ago: executing program 4 (id=4458):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x180000e, &(0x7f00000000c0)={[{@usrjquota}, {@init_itable}, {@acl}, {@auto_da_alloc}, {@noacl}, {@nombcache}]}, 0x3, 0x434, &(0x7f00000002c0)="$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")
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
socket$packet(0x11, 0x3, 0x300)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)='D', 0x1, 0x0, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x1)
splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x406f413, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket(0x28, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0xe, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)

0s ago: executing program 3 (id=4459):
syz_mount_image$f2fs(&(0x7f0000000680), &(0x7f0000000080)='./file2\x00', 0x2000000, &(0x7f0000000740)=ANY=[], 0x1, 0x54f9, &(0x7f0000002a80)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYogbSQBqiB3FJCBBEeB4WIRJE8thX0fZIZxoIfMwgO80YaAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgS3fVenFz9fu6bc5u306e2QAAAADnbKv1on4yS/2vzf3vza2fTb+IiDIizq3dR/HpJHPU5FSvvL56MYbbiDrh8BmT5voSEX+a6+FH198CAAAAXK7NcjVPq/X0MBt6QPQpFW3Kb38z5RURUc3uM6WVh7xfmcLq3/c4/mdKqwtY00xhqeQ2zpX2LvXf/Vi1mz5ritSUb78/29wBAIAejU6aflchAAAA9Onf0ANgGEU8bWUetwInqWm29z6f9AAAAIAPqBh6AAAAAEDn6vW/8/8AAADgsqXz/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOjStlovNsvVvG3Obt9OntkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI/szzsKhEAYhMHe9Z3J3P+w0qCpqUkVCB9/YzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvPndX/5PTI0zydxrY+l5JFk7NbZOjb1z4+gP4+vXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcLE/LykQAkEQBXPG/076/oeVBD2DCBHQ8KiiFg0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABf9Ltf/k9MjTPJ3Glj6XgkWbtqbF019h40jh6Mt38DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcLFzP69xVHEAwN/M7GxtVVyj7CEiCh70Yrfb2tqbeFCCB/8EIaTbGrv1R5uDLUXIxZvknIvoUURQ4i3/Q84J5BJvOewhgmdlZmeSyQ9w/dGZTfL5wJv33WGY932zEPKd9xIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNLo3YM4yQ6dcRwX5zb3Hi9k/daRPrO+sj2btSyO6kz6dHi5+iHqNpcIAAAA50dS1vchhJ10bS7r405e/6flNVnN/92z47is54/W/WVf1v5Z+/WX3Rf3B+qMx8luentxOLhyPJXWk5vldHvub69o5U8+f/eS5F9I/MHyC6M0f57RNxsb77Xz8EId2QIA/8blsi+C8vehrO83mRgA50arUniX9X/SaTYnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDqMlsPTZRyFEGZbB3Fma+/xwkn9+sr2bNlurK6uVO+Z3SINIdxeHA6u1DiXaffg4aO788Ph4H79wSshhKZGf6eY/t2PJrg4hEaej+B/CuLiy56WfE5H0OAPJQAAzqS0aFldv5OuzWXnopkQ/vz+cP3/eiUOE9b/ux/f2KyOVa3/+7XNcPr1lu593nvw8NGbi/fm7wzuDD5962r/7f61m9ev3+zl70p63pgAAADw37SLVq3/45nj6/+XKnGYsP7/4tv+V9WxEvX/iQ4W/ZrOBAAA4Hx7/tU/fo9OOB+12+HL+aWl+/3xcf/z1fGxgVT/sQtFq9b/yUzTWQEAAAB1GC1Hh9b/b1XiMOH6/zM/vPRT9Z5JCOFisf5/eeGz4a36pjPV6vhz4qbnCAAAQLMuFq26/p/m+//j/S0PcQjhjdfGcfFvACeq/5P3v/6xOlZ1//+1+qY4leLu+HnkfTeEVrfpjAAAADjLnipaVuz/lq7NffLzpQ/b9v8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1O2vAAAA//+END5e")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0)
ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000180)=0xfffffff9)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x20242, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000, 0x5})
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003})
openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x20242, 0x0)

kernel console output (not intermixed with test programs):

usb 1-1: new high-speed USB device number 82 using dummy_hcd
[ 1044.140643][T17156] FAULT_INJECTION: forcing a failure.
[ 1044.140643][T17156] name fail_futex, interval 1, probability 0, space 0, times 1
[ 1044.153933][T17156] CPU: 1 PID: 17156 Comm: syz.1.4215 Tainted: G        W         5.15.167-syzkaller-02003-g5e4635681cf1 #0
[ 1044.165024][T17156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1044.175000][T17156] Call Trace:
[ 1044.178043][T17156]  <TASK>
[ 1044.180820][T17156]  dump_stack_lvl+0x151/0x1c0
[ 1044.185333][T17156]  ? io_uring_drop_tctx_refs+0x190/0x190
[ 1044.190805][T17156]  dump_stack+0x15/0x20
[ 1044.194794][T17156]  should_fail+0x3c6/0x510
[ 1044.199045][T17156]  get_futex_key+0x177/0xce0
[ 1044.203474][T17156]  ? futex_wait_restart+0x250/0x250
[ 1044.208512][T17156]  do_futex+0x6fe/0x37f0
[ 1044.212588][T17156]  ? kmem_cache_free+0x116/0x2e0
[ 1044.217359][T17156]  ? slab_free_freelist_hook+0xbd/0x190
[ 1044.222738][T17156]  ? do_sys_openat2+0x1fc/0x820
[ 1044.227427][T17156]  ? __x64_sys_openat+0x243/0x290
[ 1044.232284][T17156]  ? x64_sys_call+0x6bf/0x9a0
[ 1044.236802][T17156]  ? futex_exit_release+0x1e0/0x1e0
[ 1044.241837][T17156]  ? _kstrtoull+0x3a0/0x4a0
[ 1044.246180][T17156]  ? kstrtouint_from_user+0x20a/0x2a0
[ 1044.251386][T17156]  ? kstrtol_from_user+0x310/0x310
[ 1044.256331][T17156]  ? __kasan_check_write+0x14/0x20
[ 1044.261275][T17156]  ? proc_fail_nth_write+0x20b/0x290
[ 1044.266395][T17156]  ? selinux_file_permission+0x2c4/0x570
[ 1044.271862][T17156]  ? proc_fail_nth_read+0x210/0x210
[ 1044.276898][T17156]  ? fsnotify_perm+0x6a/0x5b0
[ 1044.279583][  T410] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1044.281412][T17156]  ? vfs_write+0x94d/0x1110
[ 1044.292411][  T410] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1044.296438][T17156]  ? ttwu_do_wakeup+0x430/0x430
[ 1044.296471][T17156]  ? __kasan_check_write+0x14/0x20
[ 1044.307580][  T410] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1044.310053][T17156]  ? wait_for_completion_killable_timeout+0x10/0x10
[ 1044.320350][  T410] usb 1-1: config 0 descriptor??
[ 1044.322813][T17156]  ? exfat_get_block+0x250/0x20d0
[ 1044.322844][T17156]  __se_sys_futex+0x37b/0x3e0
[ 1044.343377][T17156]  ? fput+0x1a/0x20
[ 1044.347025][T17156]  ? __x64_sys_futex+0x100/0x100
[ 1044.351796][T17156]  ? __ia32_sys_read+0x90/0x90
[ 1044.356399][T17156]  ? debug_smp_processor_id+0x17/0x20
[ 1044.361611][T17156]  __x64_sys_futex+0xe5/0x100
[ 1044.366126][T17156]  x64_sys_call+0x561/0x9a0
[ 1044.370457][T17156]  do_syscall_64+0x3b/0xb0
[ 1044.374711][T17156]  ? clear_bhb_loop+0x35/0x90
[ 1044.379235][T17156]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1044.384952][T17156] RIP: 0033:0x7f03645b6ff9
[ 1044.389211][T17156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1044.408733][T17156] RSP: 002b:00007f036320f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1044.416987][T17156] RAX: ffffffffffffffda RBX: 00007f036476f058 RCX: 00007f03645b6ff9
[ 1044.424899][T17156] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000020004000
[ 1044.432779][T17156] RBP: 00007f036320f090 R08: 0000000020004000 R09: 0000000082020000
[ 1044.440590][T17156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1044.448402][T17156] R13: 0000000000000000 R14: 00007f036476f058 R15: 00007fffefed5d78
[ 1044.456224][T17156]  </TASK>
[ 1044.459247][  T509] Bluetooth: hci0: command 0x1001 tx timeout
[ 1044.465159][T14908] Bluetooth: hci0: sending frame failed (-49)
[ 1044.594260][T17158] loop3: detected capacity change from 0 to 256
[ 1044.644981][T17158] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1044.760643][T17162] loop1: detected capacity change from 0 to 4096
[ 1044.790237][T17162] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 1045.028564][  T410] keytouch 0003:0926:3333.00E7: fixing up Keytouch IEC report descriptor
[ 1045.047368][  T410] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.00E7/input/input262
[ 1045.118124][T17162] syz.1.4218[17162] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1045.118212][T17162] syz.1.4218[17162] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1045.141269][  T410] keytouch 0003:0926:3333.00E7: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0
[ 1045.700508][T17172] loop3: detected capacity change from 0 to 128
[ 1045.793359][  T509] Bluetooth: hci1: command 0x1001 tx timeout
[ 1046.052110][T14908] Bluetooth: hci1: sending frame failed (-49)
[ 1046.287474][T17184] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1046.294592][T17184] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1046.302239][T17184] device bridge_slave_0 entered promiscuous mode
[ 1046.309357][T17184] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1046.316576][T17184] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1046.324078][T17184] device bridge_slave_1 entered promiscuous mode
[ 1046.401054][T17184] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1046.407927][T17184] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1046.415040][T17184] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1046.421816][T17184] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1046.451663][T11515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1046.459376][T11515] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1046.467332][T11515] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1046.484705][T11515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1046.492937][T11515] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1046.499782][T11515] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1046.507200][T11515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1046.515721][T11515] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1046.522574][T11515] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1046.539081][T11515] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1046.547102][T11515] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1046.565377][T11515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1046.580603][T17184] device veth0_vlan entered promiscuous mode
[ 1046.586891][T11515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1046.598129][T11515] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1046.606062][T11515] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1046.624045][T11515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1046.632930][T17184] device veth1_macvtap entered promiscuous mode
[ 1046.643932][T11515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1046.684934][   T26] Bluetooth: hci0: command 0x1009 tx timeout
[ 1046.699959][T11515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1046.803046][ T5466] device bridge_slave_1 left promiscuous mode
[ 1046.809015][ T5466] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1046.816825][ T5466] device bridge_slave_0 left promiscuous mode
[ 1046.822806][ T5466] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1046.831484][ T5466] device veth1_macvtap left promiscuous mode
[ 1046.837373][ T5466] device veth0_vlan left promiscuous mode
[ 1047.294245][  T410] usb 2-1: new high-speed USB device number 102 using dummy_hcd
[ 1047.695948][T17196] loop3: detected capacity change from 0 to 1024
[ 1047.700529][  T410] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1047.713036][T17196] EXT4-fs (loop3): Test dummy encryption mode enabled
[ 1047.719702][T17196] EXT4-fs (loop3): Test dummy encryption mode enabled
[ 1047.726559][  T410] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1047.736372][T17196] EXT4-fs (loop3): Ignoring removed orlov option
[ 1047.744630][T17196] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,dioread_lock,test_dummy_encryption,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback.
[ 1047.818113][  T410] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1047.826979][  T410] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1047.850226][  T410] usb 2-1: SerialNumber: syz
[ 1048.115842][T17200] device veth0_vlan left promiscuous mode
[ 1048.124952][T17200] device veth0_vlan entered promiscuous mode
[ 1048.203630][T17199] overlayfs: failed to resolve './file0': -2
[ 1048.235129][  T509] Bluetooth: hci1: command 0x1009 tx timeout
[ 1048.449687][  T410] usb 2-1: 0:2 : does not exist
[ 1048.612480][   T20] usb 1-1: USB disconnect, device number 82
[ 1048.640122][T17203] FAULT_INJECTION: forcing a failure.
[ 1048.640122][T17203] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1048.653054][T17203] CPU: 1 PID: 17203 Comm: syz.0.4228 Tainted: G        W         5.15.167-syzkaller-02003-g5e4635681cf1 #0
[ 1048.664160][T17203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1048.674049][T17203] Call Trace:
[ 1048.677170][T17203]  <TASK>
[ 1048.679951][T17203]  dump_stack_lvl+0x151/0x1c0
[ 1048.684472][T17203]  ? io_uring_drop_tctx_refs+0x190/0x190
[ 1048.689931][T17203]  ? kasan_set_track+0x5d/0x70
[ 1048.694528][T17203]  ? __kasan_slab_free+0x11/0x20
[ 1048.699306][T17203]  ? kmem_cache_free+0x116/0x2e0
[ 1048.704076][T17203]  ? putname+0xfa/0x150
[ 1048.708068][T17203]  ? do_sys_openat2+0x1fc/0x820
[ 1048.712757][T17203]  ? x64_sys_call+0x6bf/0x9a0
[ 1048.717377][T17203]  dump_stack+0x15/0x20
[ 1048.721372][T17203]  should_fail+0x3c6/0x510
[ 1048.725607][T17203]  should_fail_usercopy+0x1a/0x20
[ 1048.730462][T17203]  _copy_from_user+0x20/0xd0
[ 1048.734887][T17203]  iovec_from_user+0xc7/0x330
[ 1048.739404][T17203]  __import_iovec+0x6d/0x420
[ 1048.743831][T17203]  import_iovec+0xe5/0x120
[ 1048.748081][T17203]  ___sys_recvmsg+0x56b/0x690
[ 1048.752599][T17203]  ? __sys_recvmsg+0x260/0x260
[ 1048.757204][T17203]  ? __fdget+0x1bc/0x240
[ 1048.761280][T17203]  __x64_sys_recvmsg+0x1dc/0x2b0
[ 1048.766050][T17203]  ? ___sys_recvmsg+0x690/0x690
[ 1048.770734][T17203]  ? fpregs_assert_state_consistent+0xb6/0xe0
[ 1048.776649][T17203]  ? exit_to_user_mode_prepare+0x39/0xa0
[ 1048.782111][T17203]  x64_sys_call+0x171/0x9a0
[ 1048.786443][T17203]  do_syscall_64+0x3b/0xb0
[ 1048.790697][T17203]  ? clear_bhb_loop+0x35/0x90
[ 1048.795207][T17203]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1048.800938][T17203] RIP: 0033:0x7f1408edbff9
[ 1048.805194][T17203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1048.824721][T17203] RSP: 002b:00007f1407b55038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[ 1048.832969][T17203] RAX: ffffffffffffffda RBX: 00007f1409093f80 RCX: 00007f1408edbff9
[ 1048.840775][T17203] RDX: 0000000000000000 RSI: 0000000020000b00 RDI: 0000000000000004
[ 1048.848583][T17203] RBP: 00007f1407b55090 R08: 0000000000000000 R09: 0000000000000000
[ 1048.856396][T17203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1048.864208][T17203] R13: 0000000000000000 R14: 00007f1409093f80 R15: 00007ffceda2dd58
[ 1048.872203][T17203]  </TASK>
[ 1048.938799][T17209] loop3: detected capacity change from 0 to 16
[ 1049.071716][T17209] erofs: (device loop3): mounted with root inode @ nid 36.
[ 1049.149117][T17209] overlayfs: unrecognized mount option "fsname=erofs" or missing value
[ 1049.305907][  T410] usb 2-1: USB disconnect, device number 102
[ 1049.313821][  T331] udevd[331]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[ 1049.940935][T17221] syz.1.4231[17221] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1049.940997][T17221] syz.1.4231[17221] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1050.220726][T17223] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1050.239028][   T26] usb 4-1: new high-speed USB device number 91 using dummy_hcd
[ 1050.241062][T17223] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1050.253795][T17223] device bridge_slave_0 entered promiscuous mode
[ 1050.261458][T17223] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1050.268411][T17223] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1050.275570][T17223] device bridge_slave_1 entered promiscuous mode
[ 1050.357445][T17223] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1050.364312][T17223] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1050.371455][T17223] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1050.378303][T17223] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1050.415679][T11515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1050.423518][T11515] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1050.430680][T11515] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1050.440972][T11515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1050.449810][T11515] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1050.456677][T11515] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1050.466269][T11515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1050.474848][T11515] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1050.481712][T11515] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1050.499806][T11515] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1050.510226][T11515] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1050.531134][T11515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1050.545852][T11515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1050.553780][T11515] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1050.563709][T11515] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1050.572592][T17223] device veth0_vlan entered promiscuous mode
[ 1050.587093][T11515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1050.597641][T17223] device veth1_macvtap entered promiscuous mode
[ 1050.610848][T11515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1050.622723][T11515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1050.651278][   T26] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11
[ 1050.662663][   T26] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024
[ 1050.673768][   T30] audit: type=1400 audit(2000000089.912:4457): avc:  denied  { write } for  pid=17228 comm="syz.4.4233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[ 1050.693020][   T26] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[ 1050.701824][   T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1050.726203][T17220] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[ 1050.884284][T17235] FAULT_INJECTION: forcing a failure.
[ 1050.884284][T17235] name failslab, interval 1, probability 0, space 0, times 0
[ 1050.897708][T17235] CPU: 1 PID: 17235 Comm: syz.0.4234 Tainted: G        W         5.15.167-syzkaller-02003-g5e4635681cf1 #0
[ 1050.908901][T17235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1050.918798][T17235] Call Trace:
[ 1050.921929][T17235]  <TASK>
[ 1050.924696][T17235]  dump_stack_lvl+0x151/0x1c0
[ 1050.929218][T17235]  ? io_uring_drop_tctx_refs+0x190/0x190
[ 1050.934675][T17235]  ? avc_has_perm+0x16f/0x260
[ 1050.939191][T17235]  dump_stack+0x15/0x20
[ 1050.943181][T17235]  should_fail+0x3c6/0x510
[ 1050.947435][T17235]  __should_failslab+0xa4/0xe0
[ 1050.952034][T17235]  should_failslab+0x9/0x20
[ 1050.956378][T17235]  slab_pre_alloc_hook+0x37/0xd0
[ 1050.961150][T17235]  kmem_cache_alloc_trace+0x48/0x210
[ 1050.966270][T17235]  ? sel_open_policy+0x243/0x4a0
[ 1050.971050][T17235]  sel_open_policy+0x243/0x4a0
[ 1050.975646][T17235]  ? sel_mmap_policy+0x100/0x100
[ 1050.980422][T17235]  do_dentry_open+0x81c/0xfd0
[ 1050.984934][T17235]  vfs_open+0x73/0x80
[ 1050.988753][T17235]  path_openat+0x26f0/0x2f40
[ 1050.993181][T17235]  ? __kasan_slab_alloc+0xb1/0xe0
[ 1050.998034][T17235]  ? kmem_cache_alloc+0xf5/0x200
[ 1051.002808][T17235]  ? getname_flags+0xba/0x520
[ 1051.007408][T17235]  ? __x64_sys_openat+0x243/0x290
[ 1051.012357][T17235]  ? do_filp_open+0x460/0x460
[ 1051.016874][T17235]  do_filp_open+0x21c/0x460
[ 1051.021209][T17235]  ? vfs_tmpfile+0x2c0/0x2c0
[ 1051.025649][T17235]  do_sys_openat2+0x13f/0x820
[ 1051.030149][T17235]  ? wait_for_completion_killable_timeout+0x10/0x10
[ 1051.036569][T17235]  ? __mutex_lock_slowpath+0x10/0x10
[ 1051.041689][T17235]  ? do_sys_open+0x220/0x220
[ 1051.046117][T17235]  ? __kasan_check_write+0x14/0x20
[ 1051.051068][T17235]  ? ksys_write+0x260/0x2c0
[ 1051.055406][T17235]  __x64_sys_openat+0x243/0x290
[ 1051.060090][T17235]  ? __ia32_sys_open+0x270/0x270
[ 1051.064862][T17235]  ? debug_smp_processor_id+0x17/0x20
[ 1051.070074][T17235]  ? fpregs_assert_state_consistent+0xb6/0xe0
[ 1051.075982][T17235]  ? exit_to_user_mode_prepare+0x39/0xa0
[ 1051.081441][T17235]  x64_sys_call+0x6bf/0x9a0
[ 1051.085783][T17235]  do_syscall_64+0x3b/0xb0
[ 1051.090033][T17235]  ? clear_bhb_loop+0x35/0x90
[ 1051.094543][T17235]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1051.100270][T17235] RIP: 0033:0x7f1408edbff9
[ 1051.104530][T17235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1051.123972][T17235] RSP: 002b:00007f1407b34038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1051.132215][T17235] RAX: ffffffffffffffda RBX: 00007f1409094058 RCX: 00007f1408edbff9
[ 1051.140027][T17235] RDX: 0000000000000000 RSI: 0000000020000040 RDI: ffffffffffffff9c
[ 1051.147837][T17235] RBP: 00007f1407b34090 R08: 0000000000000000 R09: 0000000000000000
[ 1051.155734][T17235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1051.163554][T17235] R13: 0000000000000000 R14: 00007f1409094058 R15: 00007ffceda2dd58
[ 1051.171363][T17235]  </TASK>
[ 1051.299197][T17220] loop3: detected capacity change from 0 to 40427
[ 1051.464275][T17220] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[ 1051.505150][T17220] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[ 1051.519680][T17220] F2FS-fs (loop3): invalid crc value
[ 1051.571417][T17220] F2FS-fs (loop3): Found nat_bits in checkpoint
[ 1051.628140][T17248] loop4: detected capacity change from 0 to 512
[ 1051.652333][T17220] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[ 1051.662047][T17220] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[ 1051.724135][T17248] EXT4-fs error (device loop4): ext4_do_update_inode:5205: inode #3: comm syz.4.4237: corrupted inode contents
[ 1051.736647][T17248] EXT4-fs error (device loop4): ext4_dirty_inode:6038: inode #3: comm syz.4.4237: mark_inode_dirty error
[ 1051.750894][T17220] UDC core: couldn't find an available UDC or it's busy: -16
[ 1051.751314][T17248] EXT4-fs error (device loop4): ext4_do_update_inode:5205: inode #3: comm syz.4.4237: corrupted inode contents
[ 1051.758110][T17220] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 1051.777620][T17248] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #3: comm syz.4.4237: mark_inode_dirty error
[ 1051.781813][T17254] loop0: detected capacity change from 0 to 512
[ 1051.795344][T17248] Quota error (device loop4): write_blk: dquota write failed
[ 1051.802920][T17248] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[ 1051.812965][T17248] EXT4-fs error (device loop4): ext4_acquire_dquot:6187: comm syz.4.4237: Failed to acquire dquot type 0
[ 1051.827719][T17248] EXT4-fs error (device loop4): ext4_do_update_inode:5205: inode #16: comm syz.4.4237: corrupted inode contents
[ 1051.839753][T17248] EXT4-fs error (device loop4): ext4_dirty_inode:6038: inode #16: comm syz.4.4237: mark_inode_dirty error
[ 1051.851192][   T26] aiptek 4-1:17.0: Aiptek using 400 ms programming speed
[ 1051.851346][T17248] EXT4-fs error (device loop4): ext4_do_update_inode:5205: inode #16: comm syz.4.4237: corrupted inode contents
[ 1051.867459][   T26] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input263
[ 1051.879313][T17248] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #16: comm syz.4.4237: mark_inode_dirty error
[ 1051.890180][   T26] usb 4-1: USB disconnect, device number 91
[ 1051.890946][T17248] EXT4-fs error (device loop4): ext4_do_update_inode:5205: inode #16: comm syz.4.4237: corrupted inode contents
[ 1051.896198][    C1] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[ 1051.908491][T17248] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem
[ 1051.924823][T17248] EXT4-fs error (device loop4): ext4_do_update_inode:5205: inode #16: comm syz.4.4237: corrupted inode contents
[ 1051.928757][T17254] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback.
[ 1051.940244][T17248] EXT4-fs error (device loop4): ext4_truncate:4303: inode #16: comm syz.4.4237: mark_inode_dirty error
[ 1051.955779][T17254] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038 (0x7fffffff)
[ 1051.959834][T17248] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem
[ 1051.981691][T17248] EXT4-fs (loop4): 1 truncate cleaned up
[ 1051.987501][T17248] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 1051.998602][T17248] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038 (0x7fffffff)
[ 1052.133317][T17260] loop4: detected capacity change from 0 to 2048
[ 1052.240490][   T30] audit: type=1400 audit(2000000091.381:4458): avc:  denied  { read } for  pid=17253 comm="syz.0.4238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[ 1052.312816][T17260] FAULT_INJECTION: forcing a failure.
[ 1052.312816][T17260] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1052.359606][T17260] CPU: 1 PID: 17260 Comm: syz.4.4240 Tainted: G        W         5.15.167-syzkaller-02003-g5e4635681cf1 #0
[ 1052.370803][T17260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1052.380694][T17260] Call Trace:
[ 1052.383859][T17260]  <TASK>
[ 1052.386601][T17260]  dump_stack_lvl+0x151/0x1c0
[ 1052.391113][T17260]  ? io_uring_drop_tctx_refs+0x190/0x190
[ 1052.396591][T17260]  dump_stack+0x15/0x20
[ 1052.400586][T17260]  should_fail+0x3c6/0x510
[ 1052.404823][T17260]  should_fail_usercopy+0x1a/0x20
[ 1052.409695][T17260]  _copy_to_user+0x20/0x90
[ 1052.414026][T17260]  simple_read_from_buffer+0xc7/0x150
[ 1052.419231][T17260]  proc_fail_nth_read+0x1a3/0x210
[ 1052.424092][T17260]  ? proc_fault_inject_write+0x390/0x390
[ 1052.429579][T17260]  ? fsnotify_perm+0x269/0x5b0
[ 1052.434158][T17260]  ? security_file_permission+0x86/0xb0
[ 1052.439540][T17260]  ? proc_fault_inject_write+0x390/0x390
[ 1052.445009][T17260]  vfs_read+0x27d/0xd40
[ 1052.449002][T17260]  ? kernel_read+0x1f0/0x1f0
[ 1052.451141][T15532] EXT4-fs error (device loop0): ext4_empty_dir:3137: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[ 1052.453425][T17260]  ? __kasan_check_write+0x14/0x20
[ 1052.466737][T15532] EXT4-fs error (device loop0): ext4_empty_dir:3137: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[ 1052.471304][T17260]  ? mutex_lock+0xb6/0x1e0
[ 1052.471330][T17260]  ? wait_for_completion_killable_timeout+0x10/0x10
[ 1052.484944][T15532] EXT4-fs error (device loop0): ext4_empty_dir:3137: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[ 1052.488576][T17260]  ? __fdget_pos+0x2e7/0x3a0
[ 1052.488599][T17260]  ? ksys_read+0x77/0x2c0
[ 1052.488620][T17260]  ksys_read+0x199/0x2c0
[ 1052.488637][T17260]  ? user_path_at_empty+0x14e/0x1a0
[ 1052.488661][T17260]  ? vfs_write+0x1110/0x1110
[ 1052.488680][T17260]  ? debug_smp_processor_id+0x17/0x20
[ 1052.488701][T17260]  ? fpregs_assert_state_consistent+0xb6/0xe0
[ 1052.488725][T17260]  __x64_sys_read+0x7b/0x90
[ 1052.488745][T17260]  x64_sys_call+0x28/0x9a0
[ 1052.488765][T17260]  do_syscall_64+0x3b/0xb0
[ 1052.488782][T17260]  ? clear_bhb_loop+0x35/0x90
[ 1052.488807][T17260]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1052.495739][T15532] EXT4-fs error (device loop0): ext4_empty_dir:3137: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[ 1052.508128][T17260] RIP: 0033:0x7fe99a7e9a3c
[ 1052.508149][T17260] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48
[ 1052.508165][T17260] RSP: 002b:00007fe999464030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1052.508187][T17260] RAX: ffffffffffffffda RBX: 00007fe99a9a2f80 RCX: 00007fe99a7e9a3c
[ 1052.508201][T17260] RDX: 000000000000000f RSI: 00007fe9994640a0 RDI: 0000000000000007
[ 1052.508229][T17260] RBP: 00007fe999464090 R08: 0000000000000000 R09: 0000000000000000
[ 1052.508242][T17260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1052.508253][T17260] R13: 0000000000000000 R14: 00007fe99a9a2f80 R15: 00007ffd162630b8
[ 1052.508272][T17260]  </TASK>
[ 1052.653870][T15532] EXT4-fs error (device loop0): ext4_empty_dir:3137: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[ 1052.670268][T15532] EXT4-fs error (device loop0): ext4_empty_dir:3137: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[ 1052.706079][T15532] EXT4-fs error (device loop0): ext4_empty_dir:3137: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[ 1052.727738][T17258] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1052.734592][T17258] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1052.786870][T16589] attempt to access beyond end of device
[ 1052.786870][T16589] loop3: rw=2049, want=45104, limit=40427
[ 1052.799510][T17258] device bridge_slave_0 entered promiscuous mode
[ 1052.806169][T15532] EXT4-fs error (device loop0): ext4_empty_dir:3137: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[ 1052.829870][T17258] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1052.839555][T15532] EXT4-fs error (device loop0): ext4_empty_dir:3137: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[ 1052.854571][T17258] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1052.864377][T15532] EXT4-fs error (device loop0): ext4_empty_dir:3137: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[ 1052.877195][T17258] device bridge_slave_1 entered promiscuous mode
[ 1052.891723][T17277] FAULT_INJECTION: forcing a failure.
[ 1052.891723][T17277] name failslab, interval 1, probability 0, space 0, times 0
[ 1052.904415][T17277] CPU: 0 PID: 17277 Comm: syz.4.4244 Tainted: G        W         5.15.167-syzkaller-02003-g5e4635681cf1 #0
[ 1052.915805][T17277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1052.925697][T17277] Call Trace:
[ 1052.928819][T17277]  <TASK>
[ 1052.931598][T17277]  dump_stack_lvl+0x151/0x1c0
[ 1052.936121][T17277]  ? io_uring_drop_tctx_refs+0x190/0x190
[ 1052.941583][T17277]  dump_stack+0x15/0x20
[ 1052.945571][T17277]  should_fail+0x3c6/0x510
[ 1052.949830][T17277]  __should_failslab+0xa4/0xe0
[ 1052.954425][T17277]  should_failslab+0x9/0x20
[ 1052.958765][T17277]  slab_pre_alloc_hook+0x37/0xd0
[ 1052.963540][T17277]  ? netlink_sendmsg+0x797/0xd20
[ 1052.968317][T17277]  __kmalloc_track_caller+0x6c/0x260
[ 1052.973439][T17277]  ? netlink_sendmsg+0x797/0xd20
[ 1052.978208][T17277]  ? netlink_sendmsg+0x797/0xd20
[ 1052.982994][T17277]  __alloc_skb+0x10c/0x550
[ 1052.987237][T17277]  netlink_sendmsg+0x797/0xd20
[ 1052.991836][T17277]  ? netlink_getsockopt+0x560/0x560
[ 1052.996865][T17277]  ? kmem_cache_free+0x116/0x2e0
[ 1053.001641][T17277]  ? security_socket_sendmsg+0x82/0xb0
[ 1053.006934][T17277]  ? netlink_getsockopt+0x560/0x560
[ 1053.011966][T17277]  ____sys_sendmsg+0x59e/0x8f0
[ 1053.016573][T17277]  ? __sys_sendmsg_sock+0x40/0x40
[ 1053.021430][T17277]  ? import_iovec+0xe5/0x120
[ 1053.025855][T17277]  ___sys_sendmsg+0x252/0x2e0
[ 1053.030371][T17277]  ? __sys_sendmsg+0x260/0x260
[ 1053.034980][T17277]  ? __fdget+0x1bc/0x240
[ 1053.039046][T17277]  __se_sys_sendmsg+0x19a/0x260
[ 1053.043739][T17277]  ? __x64_sys_sendmsg+0x90/0x90
[ 1053.048503][T17277]  ? ksys_write+0x260/0x2c0
[ 1053.052850][T17277]  ? debug_smp_processor_id+0x17/0x20
[ 1053.058053][T17277]  ? fpregs_assert_state_consistent+0xb6/0xe0
[ 1053.063957][T17277]  __x64_sys_sendmsg+0x7b/0x90
[ 1053.068558][T17277]  x64_sys_call+0x16a/0x9a0
[ 1053.072895][T17277]  do_syscall_64+0x3b/0xb0
[ 1053.077153][T17277]  ? clear_bhb_loop+0x35/0x90
[ 1053.081672][T17277]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1053.087474][T17277] RIP: 0033:0x7fe99a7eaff9
[ 1053.091741][T17277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1053.111259][T17277] RSP: 002b:00007fe999464038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1053.119509][T17277] RAX: ffffffffffffffda RBX: 00007fe99a9a2f80 RCX: 00007fe99a7eaff9
[ 1053.127313][T17277] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000005
[ 1053.135121][T17277] RBP: 00007fe999464090 R08: 0000000000000000 R09: 0000000000000000
[ 1053.142934][T17277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1053.150744][T17277] R13: 0000000000000000 R14: 00007fe99a9a2f80 R15: 00007ffd162630b8
[ 1053.158564][T17277]  </TASK>
[ 1053.402838][T17258] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1053.409808][T17258] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1053.416936][T17258] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1053.423797][T17258] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1053.456461][T17286] sch_tbf: burst 53766 is lower than device lo mtu (65550) !
[ 1053.487394][  T384] device bridge_slave_1 left promiscuous mode
[ 1053.561852][T17289] binder: 17283:17289 ioctl c0306201 0 returned -14
[ 1053.620167][  T384] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1053.729339][  T384] device bridge_slave_0 left promiscuous mode
[ 1053.793049][  T384] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1053.806815][  T384] device veth1_macvtap left promiscuous mode
[ 1053.823574][  T384] device veth0_vlan left promiscuous mode
[ 1053.959913][ T5758] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1053.967228][ T5758] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1054.058198][ T5758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1054.066198][ T5758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1054.082702][ T5758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1054.091833][ T5758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1054.100313][ T5758] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1054.107283][ T5758] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1054.129650][ T5758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1054.137979][ T5758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1054.146052][ T5758] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1054.152913][ T5758] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1054.194848][T17291] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1054.201826][T17291] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1054.209363][T17291] device bridge_slave_0 entered promiscuous mode
[ 1054.216544][ T5758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1054.230857][ T5758] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1054.300961][T17291] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1054.308454][T17291] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1054.321596][T17291] device bridge_slave_1 entered promiscuous mode
[ 1054.331453][ T5758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1054.344891][ T5758] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1054.354103][ T5758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1054.363238][ T5758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1054.526821][T17306] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4251'.
[ 1054.604156][T17306] loop3: detected capacity change from 0 to 2048
[ 1054.839700][ T5758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1054.847668][ T5758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1054.855774][ T5758] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1054.863924][ T5758] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1054.892567][T17258] device veth0_vlan entered promiscuous mode
[ 1054.918035][ T5758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1054.926430][ T5758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1054.939506][T17258] device veth1_macvtap entered promiscuous mode
[ 1054.963688][ T5758] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1054.971651][ T5758] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1054.979821][ T5758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1055.009686][ T5758] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1055.017814][ T5758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1055.102358][T17317] binder: BINDER_SET_CONTEXT_MGR already set
[ 1055.112593][T17317] binder: 17307:17317 ioctl 4018620d 200002c0 returned -16
[ 1055.114904][ T5758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1055.127983][ T5758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1055.186151][ T5758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1055.195771][   T30] audit: type=1400 audit(2000000094.150:4459): avc:  denied  { ioctl } for  pid=17318 comm="syz.4.4254" path="socket:[114024]" dev="sockfs" ino=114024 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[ 1055.198708][ T5758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1055.239656][ T5758] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1055.246521][ T5758] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1055.254124][ T5758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1055.269301][ T5758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1055.291746][ T5758] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1055.298603][ T5758] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1055.322958][ T5758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1055.340331][ T5758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1055.348299][ T5758] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1055.366540][ T5758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1055.374397][ T5758] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1055.387015][  T409] usb 3-1: new high-speed USB device number 77 using dummy_hcd
[ 1055.402904][ T5758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1055.411478][ T5758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1055.425232][T17291] device veth0_vlan entered promiscuous mode
[ 1055.437155][ T5758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1055.445169][ T5758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1055.460809][T17291] device veth1_macvtap entered promiscuous mode
[ 1055.467722][ T5758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1055.475914][ T5758] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1055.483481][ T5758] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1055.498174][ T5758] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1055.506378][ T5758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1055.515997][ T5758] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1055.524068][ T5758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1055.579482][  T410] usb 5-1: new high-speed USB device number 92 using dummy_hcd
[ 1055.587687][  T384] device bridge_slave_1 left promiscuous mode
[ 1055.593811][   T20] usb 4-1: new high-speed USB device number 92 using dummy_hcd
[ 1055.601435][  T384] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1055.609156][  T384] device bridge_slave_0 left promiscuous mode
[ 1055.615319][  T384] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1055.623872][  T384] device bridge_slave_1 left promiscuous mode
[ 1055.629857][  T384] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1055.637500][  T384] device bridge_slave_0 left promiscuous mode
[ 1055.643465][  T384] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1055.652216][  T384] device veth1_macvtap left promiscuous mode
[ 1055.658144][  T384] device veth0_vlan left promiscuous mode
[ 1055.663912][  T384] device veth1_macvtap left promiscuous mode
[ 1055.669810][  T384] device veth0_vlan left promiscuous mode
[ 1055.782699][  T409] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1055.804203][  T409] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1055.813856][  T409] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 1055.823107][  T409] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1055.836075][  T410] usb 5-1: Using ep0 maxpacket: 32
[ 1055.847790][  T409] usb 3-1: config 0 descriptor??
[ 1055.857790][   T20] usb 4-1: Using ep0 maxpacket: 32
[ 1055.873809][T17331] loop1: detected capacity change from 0 to 16
[ 1055.914485][T17331] erofs: (device loop1): mounted with root inode @ nid 36.
[ 1055.934489][T17331] overlayfs: unrecognized mount option "fsname=erofs" or missing value
[ 1055.964392][  T410] usb 5-1: config 0 interface 0 altsetting 30 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1055.975675][  T410] usb 5-1: config 0 interface 0 altsetting 30 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1055.985335][  T410] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1055.992049][   T20] usb 4-1: config 0 interface 0 altsetting 30 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1056.003148][  T410] usb 5-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00
[ 1056.012550][   T20] usb 4-1: config 0 interface 0 altsetting 30 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1056.022271][  T410] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1056.030045][   T20] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1056.036428][   T20] usb 4-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00
[ 1056.045762][   T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1056.054016][  T410] usb 5-1: config 0 descriptor??
[ 1056.060379][   T20] usb 4-1: config 0 descriptor??
[ 1056.523775][T17335] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4258'.
[ 1056.533848][T17335] device bridge1 entered promiscuous mode
[ 1056.565257][  T410] hkems 0003:2006:0118.00E9: bogus close delimiter
[ 1056.571598][  T410] hkems 0003:2006:0118.00E9: item 0 4 2 10 parsing failed
[ 1056.582575][   T20] hkems 0003:2006:0118.00EA: bogus close delimiter
[ 1056.590537][  T410] hkems 0003:2006:0118.00E9: parse failed
[ 1056.596272][   T20] hkems 0003:2006:0118.00EA: item 0 4 2 10 parsing failed
[ 1056.603359][   T20] hkems 0003:2006:0118.00EA: parse failed
[ 1056.609686][  T410] hkems: probe of 0003:2006:0118.00E9 failed with error -22
[ 1056.617902][   T20] hkems: probe of 0003:2006:0118.00EA failed with error -22
[ 1056.821033][  T509] usb 5-1: USB disconnect, device number 92
[ 1056.900600][   T26] usb 4-1: USB disconnect, device number 92
[ 1057.141912][  T409] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.00E8/input/input265
[ 1057.155439][  T409] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.00E8/input/input266
[ 1057.174143][  T409] uclogic 0003:256C:006D.00E8: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0
[ 1057.187180][T17345] sch_tbf: burst 53766 is lower than device lo mtu (65550) !
[ 1057.529856][T17351] sch_tbf: burst 53766 is lower than device lo mtu (65550) !
[ 1057.672043][T17356] loop0: detected capacity change from 0 to 512
[ 1057.988780][T17356] EXT4-fs error (device loop0): ext4_do_update_inode:5205: inode #3: comm syz.0.4264: corrupted inode contents
[ 1058.038530][T17356] EXT4-fs error (device loop0): ext4_dirty_inode:6038: inode #3: comm syz.0.4264: mark_inode_dirty error
[ 1058.062412][T17356] EXT4-fs error (device loop0): ext4_do_update_inode:5205: inode #3: comm syz.0.4264: corrupted inode contents
[ 1058.103679][T17356] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #3: comm syz.0.4264: mark_inode_dirty error
[ 1058.132527][T17356] Quota error (device loop0): write_blk: dquota write failed
[ 1058.146814][T17356] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[ 1058.165436][T17356] EXT4-fs error (device loop0): ext4_acquire_dquot:6187: comm syz.0.4264: Failed to acquire dquot type 0
[ 1058.178644][T17356] EXT4-fs error (device loop0): ext4_do_update_inode:5205: inode #16: comm syz.0.4264: corrupted inode contents
[ 1058.200349][T17356] EXT4-fs error (device loop0): ext4_dirty_inode:6038: inode #16: comm syz.0.4264: mark_inode_dirty error
[ 1058.222918][T17356] EXT4-fs error (device loop0): ext4_do_update_inode:5205: inode #16: comm syz.0.4264: corrupted inode contents
[ 1058.248216][T17356] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #16: comm syz.0.4264: mark_inode_dirty error
[ 1058.267279][T17356] EXT4-fs error (device loop0): ext4_do_update_inode:5205: inode #16: comm syz.0.4264: corrupted inode contents
[ 1058.286970][T17356] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem
[ 1058.302170][T17356] EXT4-fs error (device loop0): ext4_do_update_inode:5205: inode #16: comm syz.0.4264: corrupted inode contents
[ 1058.322866][T17356] EXT4-fs error (device loop0): ext4_truncate:4303: inode #16: comm syz.0.4264: mark_inode_dirty error
[ 1058.334144][T17356] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem
[ 1058.343547][T17356] EXT4-fs (loop0): 1 truncate cleaned up
[ 1058.349304][T17356] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 1058.360410][T17356] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038 (0x7fffffff)
[ 1058.499970][T17370] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4267'.
[ 1059.076495][T17377] loop1: detected capacity change from 0 to 40427
[ 1059.155557][T17377] F2FS-fs (loop1): Invalid SB checksum offset: 0
[ 1059.163934][T17377] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[ 1059.172134][  T409] usb 1-1: new high-speed USB device number 83 using dummy_hcd
[ 1059.182061][T17377] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[ 1059.207997][T17377] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[ 1059.215038][T17377] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[ 1059.227553][T17377] attempt to access beyond end of device
[ 1059.227553][T17377] loop1: rw=2049, want=45104, limit=40427
[ 1059.256612][T17184] attempt to access beyond end of device
[ 1059.256612][T17184] loop1: rw=2049, want=45112, limit=40427
[ 1059.409753][T17388] loop1: detected capacity change from 0 to 256
[ 1059.430535][T17388] exfat: Bad value for 'uid'
[ 1059.437969][T17390] loop3: detected capacity change from 0 to 512
[ 1059.449558][  T410] usb 5-1: new high-speed USB device number 93 using dummy_hcd
[ 1059.517900][ T7695] usb 3-1: USB disconnect, device number 77
[ 1059.556377][  T409] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1059.570622][  T409] usb 1-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1059.581994][  T409] usb 1-1: config 0 interface 0 altsetting 129 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1059.591915][  T409] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1059.598394][  T409] usb 1-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00
[ 1059.608644][  T409] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1059.641664][  T409] usb 1-1: config 0 descriptor??
[ 1059.798647][T17402] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1546 sclass=netlink_route_socket pid=17402 comm=syz.3.4273
[ 1060.005391][ T7695] usb 3-1: new high-speed USB device number 78 using dummy_hcd
[ 1060.101668][  T410] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1060.112416][  T410] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1060.125109][  T410] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1060.133877][  T410] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1060.142394][  T410] usb 5-1: config 0 descriptor??
[ 1060.252104][  T409] zeroplus 0003:0C12:0005.00EB: item fetching failed at offset 1/5
[ 1060.260021][  T409] zeroplus 0003:0C12:0005.00EB: parse failed
[ 1060.265879][  T409] zeroplus: probe of 0003:0C12:0005.00EB failed with error -22
[ 1060.283329][ T7695] usb 3-1: Using ep0 maxpacket: 32
[ 1062.397781][T17412] usb 1-1: USB disconnect, device number 83
[ 1062.667976][T17418] loop3: detected capacity change from 0 to 512
[ 1062.819957][   T20] usb 2-1: new high-speed USB device number 103 using dummy_hcd
[ 1062.837358][ T7695] usb 3-1: config 0 interface 0 altsetting 30 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1062.863068][T17418] EXT4-fs (loop3): Unrecognized mount option "sb=0x0000000000007fff." or missing value
[ 1062.988548][ T7695] usb 3-1: config 0 interface 0 altsetting 30 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1062.998521][ T7695] usb 3-1: config 0 interface 0 has no altsetting 0
[ 1063.005973][ T7695] usb 3-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00
[ 1063.073261][ T7695] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1063.159154][   T20] usb 2-1: Using ep0 maxpacket: 32
[ 1063.333117][ T7695] usb 3-1: config 0 descriptor??
[ 1063.379749][ T7695] usb 3-1: can't set config #0, error -71
[ 1063.401548][ T7695] usb 3-1: USB disconnect, device number 78
[ 1063.510607][T17427] loop0: detected capacity change from 0 to 512
[ 1063.535536][T17427] EXT4-fs (loop0): error: journal path ./file0 is not a block device
[ 1063.787501][  T410] usbhid 5-1:0.0: can't add hid device: -71
[ 1063.793301][  T410] usbhid: probe of 5-1:0.0 failed with error -71
[ 1063.799472][   T20] usb 2-1: New USB device found, idVendor=0b54, idProduct=62a0, bcdDevice=a0.56
[ 1063.808316][   T20] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1063.817092][  T410] usb 5-1: USB disconnect, device number 93
[ 1063.862808][   T20] usb 2-1: Product: syz
[ 1063.868458][   T20] usb 2-1: Manufacturer: syz
[ 1063.872940][   T20] usb 2-1: SerialNumber: syz
[ 1063.878189][   T20] usb 2-1: config 0 descriptor??
[ 1063.884105][ T7695] usb 3-1: new high-speed USB device number 79 using dummy_hcd
[ 1063.909488][T17435] loop3: detected capacity change from 0 to 256
[ 1063.971201][T17435] exfat: Bad value for 'uid'
[ 1064.263520][   T30] audit: type=1400 audit(2000000102.624:4460): avc:  denied  { setcheckreqprot } for  pid=17439 comm="syz.3.4285" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[ 1064.293248][T17412] usb 2-1: USB disconnect, device number 103
[ 1064.412373][ T7695] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 26
[ 1064.523695][T17451] FAULT_INJECTION: forcing a failure.
[ 1064.523695][T17451] name failslab, interval 1, probability 0, space 0, times 0
[ 1064.536359][T17451] CPU: 1 PID: 17451 Comm: syz.4.4287 Tainted: G        W         5.15.167-syzkaller-02003-g5e4635681cf1 #0
[ 1064.547550][T17451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1064.557443][T17451] Call Trace:
[ 1064.560567][T17451]  <TASK>
[ 1064.563344][T17451]  dump_stack_lvl+0x151/0x1c0
[ 1064.567875][T17451]  ? io_uring_drop_tctx_refs+0x190/0x190
[ 1064.573448][T17451]  dump_stack+0x15/0x20
[ 1064.577435][T17451]  should_fail+0x3c6/0x510
[ 1064.581689][T17451]  __should_failslab+0xa4/0xe0
[ 1064.586289][T17451]  should_failslab+0x9/0x20
[ 1064.590626][T17451]  slab_pre_alloc_hook+0x37/0xd0
[ 1064.595402][T17451]  kmem_cache_alloc_trace+0x48/0x210
[ 1064.600521][T17451]  ? tcf_action_init_1+0x1d2/0x7f0
[ 1064.605483][T17451]  tcf_action_init_1+0x1d2/0x7f0
[ 1064.610245][T17451]  ? tc_action_load_ops+0x550/0x550
[ 1064.615276][T17451]  ? _raw_read_unlock+0x25/0x40
[ 1064.619968][T17451]  ? tc_action_load_ops+0x2a6/0x550
[ 1064.625004][T17451]  ? irqentry_exit_cond_resched+0x2a/0x30
[ 1064.630554][T17451]  tcf_action_init+0x306/0x840
[ 1064.635152][T17451]  ? avc_denied+0x161/0x1b0
[ 1064.639490][T17451]  ? avc_has_perm_noaudit+0x9b/0x430
[ 1064.644628][T17451]  ? tcf_action_init_1+0x7f0/0x7f0
[ 1064.649556][T17451]  ? irqentry_exit_cond_resched+0x2a/0x30
[ 1064.655124][T17451]  ? security_capable+0x87/0xb0
[ 1064.659803][T17451]  tc_ctl_action+0x49b/0xd00
[ 1064.664225][T17451]  ? tcf_free_cookie_rcu+0x50/0x50
[ 1064.669183][T17451]  ? __kasan_check_write+0x14/0x20
[ 1064.674130][T17451]  ? mutex_lock+0xb6/0x1e0
[ 1064.678375][T17451]  ? wait_for_completion_killable_timeout+0x10/0x10
[ 1064.684797][T17451]  ? __rcu_read_unlock+0x7e/0xd0
[ 1064.689569][T17451]  ? tcf_free_cookie_rcu+0x50/0x50
[ 1064.694520][T17451]  rtnetlink_rcv_msg+0x951/0xc40
[ 1064.699293][T17451]  ? plist_add+0x3e0/0x460
[ 1064.703558][T17451]  ? rtnetlink_bind+0x80/0x80
[ 1064.708054][T17451]  ? _raw_spin_lock+0xa4/0x1b0
[ 1064.712661][T17451]  ? compat_start_thread+0x20/0x20
[ 1064.717600][T17451]  ? kvm_sched_clock_read+0x18/0x40
[ 1064.722642][T17451]  ? sched_clock+0x9/0x10
[ 1064.726804][T17451]  ? sched_clock_cpu+0x18/0x3b0
[ 1064.731488][T17451]  ? plist_del+0x40e/0x420
[ 1064.735742][T17451]  ? plist_add+0x3e0/0x460
[ 1064.739996][T17451]  ? _raw_spin_unlock+0x4d/0x70
[ 1064.744685][T17451]  ? finish_task_switch+0x167/0x7b0
[ 1064.749716][T17451]  ? __schedule+0xcd4/0x1590
[ 1064.754143][T17451]  ? release_firmware_map_entry+0x190/0x190
[ 1064.759870][T17451]  ? avc_has_perm+0x16f/0x260
[ 1064.764385][T17451]  ? irqentry_exit+0x30/0x40
[ 1064.768812][T17451]  netlink_rcv_skb+0x1cf/0x410
[ 1064.773407][T17451]  ? rtnetlink_bind+0x80/0x80
[ 1064.777919][T17451]  ? netlink_ack+0xb10/0xb10
[ 1064.782345][T17451]  ? irqentry_exit+0x30/0x40
[ 1064.786774][T17451]  ? asm_sysvec_reschedule_ipi+0x1b/0x20
[ 1064.792241][T17451]  ? netlink_unicast+0x7d6/0xac0
[ 1064.797014][T17451]  rtnetlink_rcv+0x1c/0x20
[ 1064.801267][T17451]  netlink_unicast+0x8df/0xac0
[ 1064.805870][T17451]  ? netlink_detachskb+0x90/0x90
[ 1064.810658][T17451]  ? security_netlink_send+0x7b/0xa0
[ 1064.815794][T17451]  netlink_sendmsg+0xa0a/0xd20
[ 1064.820365][T17451]  ? sysvec_reschedule_ipi+0x7d/0x150
[ 1064.825657][T17451]  ? netlink_getsockopt+0x560/0x560
[ 1064.830691][T17451]  ? ____sys_sendmsg+0x525/0x8f0
[ 1064.835485][T17451]  ? netlink_getsockopt+0x560/0x560
[ 1064.840500][T17451]  ____sys_sendmsg+0x59e/0x8f0
[ 1064.845101][T17451]  ? __sys_sendmsg_sock+0x40/0x40
[ 1064.849961][T17451]  ? import_iovec+0xe5/0x120
[ 1064.854401][T17451]  ___sys_sendmsg+0x252/0x2e0
[ 1064.858896][T17451]  ? rcu_preempt_deferred_qs_irqrestore+0x709/0x9f0
[ 1064.865321][T17451]  ? __sys_sendmsg+0x260/0x260
[ 1064.869923][T17451]  ? rcu_read_unlock_special+0xdb/0x4c0
[ 1064.875314][T17451]  ? __fdget+0x1bc/0x240
[ 1064.879521][T17451]  __se_sys_sendmsg+0x19a/0x260
[ 1064.884201][T17451]  ? __x64_sys_sendmsg+0x90/0x90
[ 1064.888974][T17451]  ? ksys_write+0x260/0x2c0
[ 1064.893326][T17451]  ? __kasan_check_write+0x14/0x20
[ 1064.898258][T17451]  ? switch_fpu_return+0x15f/0x2e0
[ 1064.903241][T17451]  __x64_sys_sendmsg+0x7b/0x90
[ 1064.907807][T17451]  x64_sys_call+0x16a/0x9a0
[ 1064.912147][T17451]  do_syscall_64+0x3b/0xb0
[ 1064.916399][T17451]  ? clear_bhb_loop+0x35/0x90
[ 1064.920931][T17451]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1064.926642][T17451] RIP: 0033:0x7fe99a7eaff9
[ 1064.930898][T17451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1064.950436][T17451] RSP: 002b:00007fe999422038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1064.958677][T17451] RAX: ffffffffffffffda RBX: 00007fe99a9a3130 RCX: 00007fe99a7eaff9
[ 1064.966489][T17451] RDX: 0000000000000000 RSI: 00000000200006c0 RDI: 0000000000000005
[ 1064.974302][T17451] RBP: 00007fe999422090 R08: 0000000000000000 R09: 0000000000000000
[ 1064.982112][T17451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1064.989926][T17451] R13: 0000000000000000 R14: 00007fe99a9a3130 R15: 00007ffd162630b8
[ 1064.997741][T17451]  </TASK>
[ 1065.040742][ T7695] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1065.049611][ T7695] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1065.072685][ T7695] usb 3-1: SerialNumber: syz
[ 1066.951836][T17469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4292'.
[ 1066.990798][T17478] loop2: detected capacity change from 0 to 256
[ 1067.032310][T17478] exfat: Bad value for 'uid'
[ 1067.064182][ T7695] cdc_ether: probe of 3-1:1.0 failed with error -71
[ 1067.077257][ T7695] usb 3-1: USB disconnect, device number 79
[ 1067.212637][T17482] loop4: detected capacity change from 0 to 2048
[ 1067.292631][T17481] loop0: detected capacity change from 0 to 512
[ 1067.404083][T17481] EXT4-fs error (device loop0): ext4_do_update_inode:5205: inode #3: comm syz.0.4296: corrupted inode contents
[ 1067.416951][T17481] EXT4-fs error (device loop0): ext4_dirty_inode:6038: inode #3: comm syz.0.4296: mark_inode_dirty error
[ 1067.428928][T17481] EXT4-fs error (device loop0): ext4_do_update_inode:5205: inode #3: comm syz.0.4296: corrupted inode contents
[ 1067.448127][T17481] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #3: comm syz.0.4296: mark_inode_dirty error
[ 1067.461944][T17481] Quota error (device loop0): write_blk: dquota write failed
[ 1067.469645][T17481] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[ 1067.481587][T17481] EXT4-fs error (device loop0): ext4_acquire_dquot:6187: comm syz.0.4296: Failed to acquire dquot type 0
[ 1067.514635][T17481] EXT4-fs error (device loop0): ext4_do_update_inode:5205: inode #16: comm syz.0.4296: corrupted inode contents
[ 1067.528856][T17481] EXT4-fs error (device loop0): ext4_dirty_inode:6038: inode #16: comm syz.0.4296: mark_inode_dirty error
[ 1067.542654][T17481] EXT4-fs error (device loop0): ext4_do_update_inode:5205: inode #16: comm syz.0.4296: corrupted inode contents
[ 1067.556446][T17481] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #16: comm syz.0.4296: mark_inode_dirty error
[ 1067.569974][T17481] EXT4-fs error (device loop0): ext4_do_update_inode:5205: inode #16: comm syz.0.4296: corrupted inode contents
[ 1067.586352][T17481] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem
[ 1067.596996][T17481] EXT4-fs error (device loop0): ext4_do_update_inode:5205: inode #16: comm syz.0.4296: corrupted inode contents
[ 1067.603590][   T20] usb 2-1: new high-speed USB device number 104 using dummy_hcd
[ 1067.609276][T17481] EXT4-fs error (device loop0): ext4_truncate:4303: inode #16: comm syz.0.4296: mark_inode_dirty error
[ 1067.627355][T17481] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem
[ 1067.636945][T17481] EXT4-fs (loop0): 1 truncate cleaned up
[ 1067.642611][T17481] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 1067.653768][T17481] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038 (0x7fffffff)
[ 1068.002047][   T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1068.018310][   T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1068.033478][   T20] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 1068.046958][   T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1068.062758][   T20] usb 2-1: config 0 descriptor??
[ 1068.205327][ T7695] usb 4-1: new high-speed USB device number 93 using dummy_hcd
[ 1068.312622][T17496] loop0: detected capacity change from 0 to 40427
[ 1068.332401][T17496] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[ 1068.340331][T17496] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[ 1068.352959][T17496] F2FS-fs (loop0): Found nat_bits in checkpoint
[ 1068.386704][T17496] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[ 1068.393692][T17496] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[ 1069.215606][ T7695] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1069.226841][ T7695] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 255, changing to 11
[ 1069.239233][ T7695] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 59391, setting to 1024
[ 1069.247492][T17510] loop2: detected capacity change from 0 to 512
[ 1069.250575][ T7695] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1069.265428][ T7695] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1069.306302][T17493] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[ 1069.329828][T17510] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 1069.349088][T17510] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038 (0x7fffffff)
[ 1070.109333][   T20] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.00EC/input/input271
[ 1070.123713][   T20] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.00EC/input/input272
[ 1070.137878][   T20] uclogic 0003:256C:006D.00EC: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.1-1/input0
[ 1070.193701][T17258] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[ 1070.225772][   T30] audit: type=1326 audit(2000000108.209:4461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17525 comm="syz.4.4305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe99a7eaff9 code=0x7ffc0000
[ 1070.256282][   T30] audit: type=1326 audit(2000000108.209:4462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17525 comm="syz.4.4305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe99a7eaff9 code=0x7ffc0000
[ 1070.294150][   T30] audit: type=1326 audit(2000000108.209:4463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17525 comm="syz.4.4305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7fe99a7eaff9 code=0x7ffc0000
[ 1070.319979][   T30] audit: type=1326 audit(2000000108.209:4464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17525 comm="syz.4.4305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe99a7eaff9 code=0x7ffc0000
[ 1070.346397][   T30] audit: type=1326 audit(2000000108.209:4465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17525 comm="syz.4.4305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe99a7eaff9 code=0x7ffc0000
[ 1070.373828][T17530] FAULT_INJECTION: forcing a failure.
[ 1070.373828][T17530] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1070.386904][T17530] CPU: 0 PID: 17530 Comm: syz.2.4304 Tainted: G        W         5.15.167-syzkaller-02003-g5e4635681cf1 #0
[ 1070.398043][T17530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1070.407933][T17530] Call Trace:
[ 1070.411061][T17530]  <TASK>
[ 1070.413837][T17530]  dump_stack_lvl+0x151/0x1c0
[ 1070.418348][T17530]  ? io_uring_drop_tctx_refs+0x190/0x190
[ 1070.423829][T17530]  dump_stack+0x15/0x20
[ 1070.427822][T17530]  should_fail+0x3c6/0x510
[ 1070.432064][T17530]  should_fail_alloc_page+0x5a/0x80
[ 1070.437093][T17530]  prepare_alloc_pages+0x15c/0x700
[ 1070.442044][T17530]  ? __alloc_pages_bulk+0xe40/0xe40
[ 1070.447075][T17530]  __alloc_pages+0x18c/0x8f0
[ 1070.451498][T17530]  ? x64_sys_call+0x5ae/0x9a0
[ 1070.456020][T17530]  ? prep_new_page+0x110/0x110
[ 1070.460620][T17530]  new_slab+0x9a/0x4e0
[ 1070.464526][T17530]  ___slab_alloc+0x39e/0x830
[ 1070.468948][T17530]  ? p9_client_prepare_req+0x32f/0xbf0
[ 1070.474242][T17530]  ? p9_client_prepare_req+0x32f/0xbf0
[ 1070.479536][T17530]  __slab_alloc+0x4a/0x90
[ 1070.483706][T17530]  ? p9_client_prepare_req+0x32f/0xbf0
[ 1070.488999][T17530]  kmem_cache_alloc+0x134/0x200
[ 1070.493686][T17530]  p9_client_prepare_req+0x32f/0xbf0
[ 1070.498815][T17530]  p9_client_rpc+0x159/0x13a0
[ 1070.503324][T17530]  ? p9_fid_create+0x280/0x280
[ 1070.507922][T17530]  ? __alloc_pages_bulk+0xe40/0xe40
[ 1070.512955][T17530]  ? __alloc_pages+0x27e/0x8f0
[ 1070.517735][T17530]  ? iov_iter_kvec+0x53/0x190
[ 1070.522248][T17530]  p9_client_readdir+0x320/0x850
[ 1070.527032][T17530]  ? __this_cpu_preempt_check+0x13/0x20
[ 1070.532401][T17530]  ? __mod_node_page_state+0xac/0xf0
[ 1070.537528][T17530]  ? p9_client_xattrcreate+0x130/0x130
[ 1070.542818][T17530]  ? __kmalloc+0x19c/0x270
[ 1070.547075][T17530]  v9fs_dir_readdir_dotl+0x238/0x620
[ 1070.552200][T17530]  ? v9fs_dir_readdir+0x940/0x940
[ 1070.557048][T17530]  ? proc_fail_nth_write+0x20b/0x290
[ 1070.562177][T17530]  ? __kasan_check_read+0x11/0x20
[ 1070.567031][T17530]  ? security_file_permission+0x86/0xb0
[ 1070.572417][T17530]  iterate_dir+0x265/0x600
[ 1070.576674][T17530]  ? v9fs_dir_readdir+0x940/0x940
[ 1070.581524][T17530]  __se_sys_getdents64+0x1c1/0x460
[ 1070.586472][T17530]  ? fput_many+0x160/0x1b0
[ 1070.590728][T17530]  ? __x64_sys_getdents64+0x90/0x90
[ 1070.595765][T17530]  ? filldir+0x680/0x680
[ 1070.599844][T17530]  ? __ia32_sys_read+0x90/0x90
[ 1070.604440][T17530]  ? debug_smp_processor_id+0x17/0x20
[ 1070.609645][T17530]  ? fpregs_assert_state_consistent+0xb6/0xe0
[ 1070.615551][T17530]  __x64_sys_getdents64+0x7b/0x90
[ 1070.620409][T17530]  x64_sys_call+0x5ae/0x9a0
[ 1070.624832][T17530]  do_syscall_64+0x3b/0xb0
[ 1070.629088][T17530]  ? clear_bhb_loop+0x35/0x90
[ 1070.633603][T17530]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1070.639328][T17530] RIP: 0033:0x7fe4270bcff9
[ 1070.643602][T17530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1070.663023][T17530] RSP: 002b:00007fe425d36038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[ 1070.671265][T17530] RAX: ffffffffffffffda RBX: 00007fe427274f80 RCX: 00007fe4270bcff9
[ 1070.679077][T17530] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006
[ 1070.686886][T17530] RBP: 00007fe425d36090 R08: 0000000000000000 R09: 0000000000000000
[ 1070.694697][T17530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1070.702512][T17530] R13: 0000000000000000 R14: 00007fe427274f80 R15: 00007ffd10ab83d8
[ 1070.710328][T17530]  </TASK>
[ 1070.814006][T17535] loop2: detected capacity change from 0 to 16
[ 1070.846136][T17535] erofs: (device loop2): mounted with root inode @ nid 36.
[ 1070.865815][T17535] overlayfs: unrecognized mount option "fsname=erofs" or missing value
[ 1071.160031][   T42] usb 4-1: USB disconnect, device number 93
[ 1071.329848][T17544] loop3: detected capacity change from 0 to 512
[ 1071.349521][T17544] EXT4-fs (loop3): Test dummy encryption mode enabled
[ 1071.356377][T17544] EXT4-fs (loop3): Test dummy encryption mode enabled
[ 1071.380791][T17544] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #12: comm syz.3.4309: inline data xattr refers to an external xattr inode
[ 1071.412388][T17544] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.4309: couldn't read orphan inode 12 (err -117)
[ 1071.433737][T17544] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000040000,init_itable=0x0000000000000000,nolazytime,grpid,prjquota,usrjquota=,lazytime,errors=continue,test_dummy_encryption,test_dummy_encryption,,errors=continue. Quota mode: writeback.
[ 1071.893457][   T20] usb 2-1: USB disconnect, device number 104
[ 1071.919779][   T42] hid-generic 0000:0000:0000.00ED: unknown main item tag 0x7
[ 1071.932859][   T42] hid-generic 0000:0000:0000.00ED: unknown main item tag 0x3
[ 1071.944053][T17557] loop2: detected capacity change from 0 to 512
[ 1071.950244][   T42] hid-generic 0000:0000:0000.00ED: unknown main item tag 0x0
[ 1071.958084][   T42] hid-generic 0000:0000:0000.00ED: unknown main item tag 0x0
[ 1071.965385][   T42] hid-generic 0000:0000:0000.00ED: unknown main item tag 0x2
[ 1071.965619][T17557] EXT4-fs (loop2): Test dummy encryption mode enabled
[ 1071.973445][   T42] hid-generic 0000:0000:0000.00ED: unknown main item tag 0x0
[ 1071.983199][T17557] EXT4-fs error (device loop2): __ext4_iget:4903: inode #11: block 1: comm syz.2.4312: invalid block
[ 1071.986404][   T42] hid-generic 0000:0000:0000.00ED: unknown main item tag 0x0
[ 1071.997347][T17557] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.4312: couldn't read orphan inode 11 (err -117)
[ 1072.004524][   T42] hid-generic 0000:0000:0000.00ED: unknown main item tag 0x0
[ 1072.016681][T17557] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,inode_readahead_blks=0x0000000000002000,jqfmt=vfsv0,delalloc,usrjquota=,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none.
[ 1072.023063][   T42] hid-generic 0000:0000:0000.00ED: unknown main item tag 0x0
[ 1072.023085][   T42] hid-generic 0000:0000:0000.00ED: unknown main item tag 0x0
[ 1072.023105][   T42] hid-generic 0000:0000:0000.00ED: unknown main item tag 0x0
[ 1072.023123][   T42] hid-generic 0000:0000:0000.00ED: unknown main item tag 0x0
[ 1072.023142][   T42] hid-generic 0000:0000:0000.00ED: unknown main item tag 0x0
[ 1072.084486][   T42] hid-generic 0000:0000:0000.00ED: unknown main item tag 0x0
[ 1072.139684][   T42] hid-generic 0000:0000:0000.00ED: unknown main item tag 0x0
[ 1072.146919][   T42] hid-generic 0000:0000:0000.00ED: unknown main item tag 0x0
[ 1072.154276][   T42] hid-generic 0000:0000:0000.00ED: unknown main item tag 0x0
[ 1072.161442][   T42] hid-generic 0000:0000:0000.00ED: unknown main item tag 0x0
[ 1072.168723][   T42] hid-generic 0000:0000:0000.00ED: unknown main item tag 0x0
[ 1072.175996][   T42] hid-generic 0000:0000:0000.00ED: unknown main item tag 0x0
[ 1072.183177][   T42] hid-generic 0000:0000:0000.00ED: unknown main item tag 0x0
[ 1072.190332][   T42] hid-generic 0000:0000:0000.00ED: unknown main item tag 0x0
[ 1072.197569][   T42] hid-generic 0000:0000:0000.00ED: unknown main item tag 0x0
[ 1072.203426][T17412] usb 5-1: new high-speed USB device number 94 using dummy_hcd
[ 1072.204758][   T42] hid-generic 0000:0000:0000.00ED: unknown main item tag 0x0
[ 1072.219362][   T42] hid-generic 0000:0000:0000.00ED: unknown main item tag 0x0
[ 1072.226562][   T42] hid-generic 0000:0000:0000.00ED: unknown main item tag 0x0
[ 1072.233890][   T42] hid-generic 0000:0000:0000.00ED: unknown main item tag 0x0
[ 1072.241153][   T42] hid-generic 0000:0000:0000.00ED: unknown main item tag 0x0
[ 1072.248326][   T42] hid-generic 0000:0000:0000.00ED: unknown main item tag 0x0
[ 1072.255511][   T42] hid-generic 0000:0000:0000.00ED: unknown main item tag 0x0
[ 1072.262758][   T42] hid-generic 0000:0000:0000.00ED: unknown main item tag 0x0
[ 1072.269926][   T42] hid-generic 0000:0000:0000.00ED: unknown main item tag 0x0
[ 1072.277116][   T42] hid-generic 0000:0000:0000.00ED: unknown main item tag 0x0
[ 1072.277905][T17560] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.4312: Directory hole found for htree leaf block 0
[ 1072.284843][   T42] hid-generic 0000:0000:0000.00ED: unknown main item tag 0x0
[ 1072.304390][   T42] hid-generic 0000:0000:0000.00ED: unknown main item tag 0x0
[ 1072.311734][   T42] hid-generic 0000:0000:0000.00ED: unknown main item tag 0x0
[ 1072.319850][   T42] hid-generic 0000:0000:0000.00ED: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[ 1072.362131][T17562] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[ 1072.391806][T17564] loop3: detected capacity change from 0 to 4096
[ 1072.449364][T17567] loop0: detected capacity change from 0 to 512
[ 1072.504526][T17567] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 1072.516818][T17567] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038 (0x7fffffff)
[ 1072.535947][T17564] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 1072.953506][T17412] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1072.963459][T17412] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1073.047929][T17412] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1073.059436][T17412] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1073.071650][T17412] usb 5-1: SerialNumber: syz
[ 1073.097295][T17564] syz.3.4315[17564] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1073.097379][T17564] syz.3.4315[17564] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1073.605002][T17412] usb 5-1: 0:2 : does not exist
[ 1073.686509][   T30] audit: type=1326 audit(2000000111.436:4466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17582 comm="syz.0.4319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40cc775ff9 code=0x7ffc0000
[ 1073.719213][   T30] audit: type=1326 audit(2000000111.436:4467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17582 comm="syz.0.4319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40cc775ff9 code=0x7ffc0000
[ 1073.743228][   T30] audit: type=1326 audit(2000000111.436:4468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17582 comm="syz.0.4319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40cc775ff9 code=0x7ffc0000
[ 1073.760901][   T42] usb 2-1: new high-speed USB device number 105 using dummy_hcd
[ 1073.766871][   T30] audit: type=1326 audit(2000000111.436:4469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17582 comm="syz.0.4319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40cc775ff9 code=0x7ffc0000
[ 1073.806398][   T30] audit: type=1326 audit(2000000111.436:4470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17582 comm="syz.0.4319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40cc775ff9 code=0x7ffc0000
[ 1074.032545][T17593] FAULT_INJECTION: forcing a failure.
[ 1074.032545][T17593] name failslab, interval 1, probability 0, space 0, times 0
[ 1074.063499][   T42] usb 2-1: Using ep0 maxpacket: 32
[ 1074.077028][T17593] CPU: 0 PID: 17593 Comm: syz.3.4321 Tainted: G        W         5.15.167-syzkaller-02003-g5e4635681cf1 #0
[ 1074.088219][T17593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1074.098114][T17593] Call Trace:
[ 1074.101238][T17593]  <TASK>
[ 1074.104015][T17593]  dump_stack_lvl+0x151/0x1c0
[ 1074.108530][T17593]  ? io_uring_drop_tctx_refs+0x190/0x190
[ 1074.113997][T17593]  dump_stack+0x15/0x20
[ 1074.117989][T17593]  should_fail+0x3c6/0x510
[ 1074.122240][T17593]  __should_failslab+0xa4/0xe0
[ 1074.126839][T17593]  should_failslab+0x9/0x20
[ 1074.131180][T17593]  slab_pre_alloc_hook+0x37/0xd0
[ 1074.136043][T17593]  __kmalloc+0x6d/0x270
[ 1074.140035][T17593]  ? kvmalloc_node+0x1f0/0x4d0
[ 1074.144631][T17593]  kvmalloc_node+0x1f0/0x4d0
[ 1074.149059][T17593]  ? vm_mmap+0xb0/0xb0
[ 1074.152967][T17593]  map_update_elem+0x308/0x770
[ 1074.157564][T17593]  __sys_bpf+0x405/0x760
[ 1074.161644][T17593]  ? fput_many+0x160/0x1b0
[ 1074.165899][T17593]  ? bpf_link_show_fdinfo+0x2d0/0x2d0
[ 1074.171106][T17593]  ? debug_smp_processor_id+0x17/0x20
[ 1074.176310][T17593]  ? fpregs_assert_state_consistent+0xb6/0xe0
[ 1074.182212][T17593]  __x64_sys_bpf+0x7c/0x90
[ 1074.186470][T17593]  x64_sys_call+0x87f/0x9a0
[ 1074.190803][T17593]  do_syscall_64+0x3b/0xb0
[ 1074.195058][T17593]  ? clear_bhb_loop+0x35/0x90
[ 1074.199568][T17593]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 1074.205297][T17593] RIP: 0033:0x7f8ba2dfeff9
[ 1074.209570][T17593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1074.228992][T17593] RSP: 002b:00007f8ba1a36038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1074.237237][T17593] RAX: ffffffffffffffda RBX: 00007f8ba2fb7130 RCX: 00007f8ba2dfeff9
[ 1074.245047][T17593] RDX: 0000000000000020 RSI: 00000000200001c0 RDI: 0000000000000002
[ 1074.252861][T17593] RBP: 00007f8ba1a36090 R08: 0000000000000000 R09: 0000000000000000
[ 1074.260673][T17593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1074.268483][T17593] R13: 0000000000000000 R14: 00007f8ba2fb7130 R15: 00007ffd1105bb08
[ 1074.276302][T17593]  </TASK>
[ 1074.405671][   T42] usb 2-1: config 0 interface 0 altsetting 30 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1074.426587][   T42] usb 2-1: config 0 interface 0 altsetting 30 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1074.456161][   T42] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1074.469964][   T42] usb 2-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00
[ 1074.478865][   T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1074.484526][T17610] loop2: detected capacity change from 0 to 1024
[ 1074.505545][   T42] usb 2-1: config 0 descriptor??
[ 1074.901773][T17610] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled
[ 1074.921841][T17610] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option
[ 1074.939792][T17610] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1074.960203][T17615] loop3: detected capacity change from 0 to 1024
[ 1074.972481][T17610] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003]
[ 1074.980488][T17610] System zones: 0-1, 3-36
[ 1074.986490][T17610] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,jqfmt=vfsold,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback.
[ 1075.037312][T17615] EXT4-fs (loop3): Test dummy encryption mode enabled
[ 1075.044248][T17615] EXT4-fs (loop3): Test dummy encryption mode enabled
[ 1075.051098][T17615] EXT4-fs (loop3): Ignoring removed orlov option
[ 1075.060333][T17615] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,dioread_lock,test_dummy_encryption,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback.
[ 1075.091077][   T42] hkems 0003:2006:0118.00EE: bogus close delimiter
[ 1075.107277][   T42] hkems 0003:2006:0118.00EE: item 0 4 2 10 parsing failed
[ 1075.114696][   T42] hkems 0003:2006:0118.00EE: parse failed
[ 1075.120433][   T42] hkems: probe of 0003:2006:0118.00EE failed with error -22
[ 1075.124809][T17621] loop0: detected capacity change from 0 to 512
[ 1075.565610][T17622] x_tables: unsorted underflow at hook 3
[ 1075.820047][T17624] device veth0_vlan left promiscuous mode
[ 1075.835144][T17624] device veth0_vlan entered promiscuous mode
[ 1076.207635][   T42] usb 2-1: USB disconnect, device number 105
[ 1076.216713][T17621] EXT4-fs error (device loop0): ext4_do_update_inode:5205: inode #3: comm syz.0.4326: corrupted inode contents
[ 1076.239417][T17621] EXT4-fs error (device loop0): ext4_dirty_inode:6038: inode #3: comm syz.0.4326: mark_inode_dirty error
[ 1076.252306][T17621] EXT4-fs error (device loop0): ext4_do_update_inode:5205: inode #3: comm syz.0.4326: corrupted inode contents
[ 1076.264359][T17621] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #3: comm syz.0.4326: mark_inode_dirty error
[ 1076.275830][T17621] __quota_error: 7 callbacks suppressed
[ 1076.275847][T17621] Quota error (device loop0): write_blk: dquota write failed
[ 1076.289197][T17621] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[ 1076.299248][T17621] EXT4-fs error (device loop0): ext4_acquire_dquot:6187: comm syz.0.4326: Failed to acquire dquot type 0
[ 1076.311025][T17621] EXT4-fs error (device loop0): ext4_do_update_inode:5205: inode #16: comm syz.0.4326: corrupted inode contents
[ 1076.325481][T17621] EXT4-fs error (device loop0): ext4_dirty_inode:6038: inode #16: comm syz.0.4326: mark_inode_dirty error
[ 1076.337035][T17621] EXT4-fs error (device loop0): ext4_do_update_inode:5205: inode #16: comm syz.0.4326: corrupted inode contents
[ 1076.348949][T17621] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #16: comm syz.0.4326: mark_inode_dirty error
[ 1076.360277][T17621] EXT4-fs error (device loop0): ext4_do_update_inode:5205: inode #16: comm syz.0.4326: corrupted inode contents
[ 1076.372190][T17621] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem
[ 1076.380796][T17621] EXT4-fs error (device loop0): ext4_do_update_inode:5205: inode #16: comm syz.0.4326: corrupted inode contents
[ 1076.392883][T17621] EXT4-fs error (device loop0): ext4_truncate:4303: inode #16: comm syz.0.4326: mark_inode_dirty error
[ 1076.403996][T17621] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem
[ 1076.417679][  T410] usb 5-1: USB disconnect, device number 94
[ 1076.428553][T17621] EXT4-fs (loop0): 1 truncate cleaned up
[ 1076.433529][T17629] loop2: detected capacity change from 0 to 1024
[ 1076.434062][T17621] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 1076.452288][T17412] hid-generic 0000:0000:0000.00EF: unknown main item tag 0x7
[ 1076.461198][T17412] hid-generic 0000:0000:0000.00EF: unknown main item tag 0x3
[ 1076.462472][T17621] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038 (0x7fffffff)
[ 1076.482284][T17412] hid-generic 0000:0000:0000.00EF: unknown main item tag 0x0
[ 1076.491536][T17633] loop4: detected capacity change from 0 to 1024
[ 1076.499168][T17412] hid-generic 0000:0000:0000.00EF: unknown main item tag 0x0
[ 1076.508237][T17412] hid-generic 0000:0000:0000.00EF: unknown main item tag 0x2
[ 1076.508279][T17629] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 1076.512278][T17633] EXT4-fs (loop4): Test dummy encryption mode enabled
[ 1076.533197][T17633] EXT4-fs (loop4): Test dummy encryption mode enabled
[ 1076.556405][T17633] EXT4-fs (loop4): Ignoring removed orlov option
[ 1076.608728][T17412] hid-generic 0000:0000:0000.00EF: unknown main item tag 0x0
[ 1076.616216][T17412] hid-generic 0000:0000:0000.00EF: unknown main item tag 0x0
[ 1076.623891][T17412] hid-generic 0000:0000:0000.00EF: unknown main item tag 0x0
[ 1076.629295][T17633] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,dioread_lock,test_dummy_encryption,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback.
[ 1076.648403][T17412] hid-generic 0000:0000:0000.00EF: unknown main item tag 0x0
[ 1078.845040][T17412] hid-generic 0000:0000:0000.00EF: unknown main item tag 0x0
[ 1078.861549][T17412] hid-generic 0000:0000:0000.00EF: unknown main item tag 0x0
[ 1078.877487][T17412] hid-generic 0000:0000:0000.00EF: unknown main item tag 0x0
[ 1078.887722][T17648] loop1: detected capacity change from 0 to 4096
[ 1078.893943][T17412] hid-generic 0000:0000:0000.00EF: unknown main item tag 0x0
[ 1078.912685][T17412] hid-generic 0000:0000:0000.00EF: unknown main item tag 0x0
[ 1078.920086][T17412] hid-generic 0000:0000:0000.00EF: unknown main item tag 0x0
[ 1078.928532][T17412] hid-generic 0000:0000:0000.00EF: unknown main item tag 0x0
[ 1078.935978][T17412] hid-generic 0000:0000:0000.00EF: unknown main item tag 0x0
[ 1078.943483][T17412] hid-generic 0000:0000:0000.00EF: unknown main item tag 0x0
[ 1078.967630][T17648] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 1079.040728][T17654] sch_tbf: burst 53766 is lower than device lo mtu (65550) !
[ 1079.061355][T17412] hid-generic 0000:0000:0000.00EF: unknown main item tag 0x0
[ 1079.069227][T17412] hid-generic 0000:0000:0000.00EF: unknown main item tag 0x0
[ 1079.076538][T17412] hid-generic 0000:0000:0000.00EF: unknown main item tag 0x0
[ 1079.109449][T17412] hid-generic 0000:0000:0000.00EF: unknown main item tag 0x0
[ 1079.116763][T17412] hid-generic 0000:0000:0000.00EF: unknown main item tag 0x0
[ 1079.152286][T17412] hid-generic 0000:0000:0000.00EF: unknown main item tag 0x0
[ 1079.159881][T17412] hid-generic 0000:0000:0000.00EF: unknown main item tag 0x0
[ 1079.173593][T17412] hid-generic 0000:0000:0000.00EF: unknown main item tag 0x0
[ 1079.180933][T17412] hid-generic 0000:0000:0000.00EF: unknown main item tag 0x0
[ 1079.194963][T17412] hid-generic 0000:0000:0000.00EF: unknown main item tag 0x0
[ 1079.202210][T17412] hid-generic 0000:0000:0000.00EF: unknown main item tag 0x0
[ 1079.213170][T17412] hid-generic 0000:0000:0000.00EF: unknown main item tag 0x0
[ 1079.221349][T17412] hid-generic 0000:0000:0000.00EF: unknown main item tag 0x0
[ 1079.229131][T17412] hid-generic 0000:0000:0000.00EF: unknown main item tag 0x0
[ 1079.236463][T17412] hid-generic 0000:0000:0000.00EF: unknown main item tag 0x0
[ 1079.244357][T17412] hid-generic 0000:0000:0000.00EF: unknown main item tag 0x0
[ 1079.251983][T17412] hid-generic 0000:0000:0000.00EF: unknown main item tag 0x0
[ 1079.259636][T17412] hid-generic 0000:0000:0000.00EF: unknown main item tag 0x0
[ 1079.274124][T17412] hid-generic 0000:0000:0000.00EF: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[ 1079.403878][ T7695] usb 5-1: new high-speed USB device number 95 using dummy_hcd
[ 1079.411447][T17648] syz.1.4331[17648] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1079.416616][T17648] syz.1.4331[17648] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1080.443308][T17668] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4335'.
[ 1080.767954][T17670] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[ 1080.866384][ T7695] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1080.882565][ T7695] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1080.901986][ T7695] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1080.944743][ T7695] usb 5-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00
[ 1081.043195][ T7695] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1081.345314][ T7695] usb 5-1: config 0 descriptor??
[ 1081.367787][T17680] loop1: detected capacity change from 0 to 512
[ 1081.410377][T17680] EXT4-fs (loop1): orphan cleanup on readonly fs
[ 1081.418018][T17680] EXT4-fs (loop1): 1 orphan inode deleted
[ 1081.423927][T17680] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 1081.511263][T17677] loop0: detected capacity change from 0 to 40427
[ 1081.594243][T17677] F2FS-fs (loop0): Unrecognized mount option "0xffffffffffffffff˙˙˙˙˙˙˙˙0x0000000000000000˙˙017777777777777777777771844674407370955161500000000000000000003" or missing value
[ 1081.670841][   T42] usb 4-1: new high-speed USB device number 94 using dummy_hcd
[ 1081.745985][T17653] fuse: Bad value for 'fd'
[ 1081.880855][   T30] audit: type=1400 audit(2000000119.106:4478): avc:  denied  { create } for  pid=17687 comm="syz.2.4342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[ 1082.024445][T17695] loop2: detected capacity change from 0 to 1024
[ 1082.104228][ T7695] holtek_mouse 0003:04D9:A070.00F0: item fetching failed at offset 1/5
[ 1082.107309][T17695] EXT4-fs (loop2): Test dummy encryption mode enabled
[ 1082.115946][ T7695] holtek_mouse 0003:04D9:A070.00F0: hid parse failed: -22
[ 1082.119735][T17695] EXT4-fs (loop2): Test dummy encryption mode enabled
[ 1082.126322][ T7695] holtek_mouse: probe of 0003:04D9:A070.00F0 failed with error -22
[ 1082.133500][T17695] EXT4-fs (loop2): Ignoring removed orlov option
[ 1082.149235][T17695] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,dioread_lock,test_dummy_encryption,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback.
[ 1082.305983][  T592] usb 1-1: new high-speed USB device number 84 using dummy_hcd
[ 1082.513103][ T7695] usb 5-1: USB disconnect, device number 95
[ 1082.520052][   T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1082.532844][   T42] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1082.556651][   T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1082.572295][   T42] usb 4-1: config 0 descriptor??
[ 1082.578906][T16147] hid-generic 0000:0000:0000.00F1: unknown main item tag 0x7
[ 1082.586978][T16147] hid-generic 0000:0000:0000.00F1: unknown main item tag 0x3
[ 1082.594258][T16147] hid-generic 0000:0000:0000.00F1: unknown main item tag 0x0
[ 1082.601721][T16147] hid-generic 0000:0000:0000.00F1: unknown main item tag 0x0
[ 1082.609314][T16147] hid-generic 0000:0000:0000.00F1: unknown main item tag 0x2
[ 1082.664231][  T592] usb 1-1: Using ep0 maxpacket: 8
[ 1082.669271][T16147] hid-generic 0000:0000:0000.00F1: unknown main item tag 0x0
[ 1082.676603][T16147] hid-generic 0000:0000:0000.00F1: unknown main item tag 0x0
[ 1082.684010][T16147] hid-generic 0000:0000:0000.00F1: unknown main item tag 0x0
[ 1082.691420][T16147] hid-generic 0000:0000:0000.00F1: unknown main item tag 0x0
[ 1082.698611][T16147] hid-generic 0000:0000:0000.00F1: unknown main item tag 0x0
[ 1082.706025][T16147] hid-generic 0000:0000:0000.00F1: unknown main item tag 0x0
[ 1082.713323][T16147] hid-generic 0000:0000:0000.00F1: unknown main item tag 0x0
[ 1082.720416][T16147] hid-generic 0000:0000:0000.00F1: unknown main item tag 0x0
[ 1082.727739][T16147] hid-generic 0000:0000:0000.00F1: unknown main item tag 0x0
[ 1082.734936][T16147] hid-generic 0000:0000:0000.00F1: unknown main item tag 0x0
[ 1082.742126][T16147] hid-generic 0000:0000:0000.00F1: unknown main item tag 0x0
[ 1082.749953][T16147] hid-generic 0000:0000:0000.00F1: unknown main item tag 0x0
[ 1082.757280][T16147] hid-generic 0000:0000:0000.00F1: unknown main item tag 0x0
[ 1082.764538][T16147] hid-generic 0000:0000:0000.00F1: unknown main item tag 0x0
[ 1082.772684][T16147] hid-generic 0000:0000:0000.00F1: unknown main item tag 0x0
[ 1082.779984][T16147] hid-generic 0000:0000:0000.00F1: unknown main item tag 0x0
[ 1082.787819][T16147] hid-generic 0000:0000:0000.00F1: unknown main item tag 0x0
[ 1082.795124][T16147] hid-generic 0000:0000:0000.00F1: unknown main item tag 0x0
[ 1082.802380][T16147] hid-generic 0000:0000:0000.00F1: unknown main item tag 0x0
[ 1082.829586][T16147] hid-generic 0000:0000:0000.00F1: unknown main item tag 0x0
[ 1082.844026][T16147] hid-generic 0000:0000:0000.00F1: unknown main item tag 0x0
[ 1082.853357][T16147] hid-generic 0000:0000:0000.00F1: unknown main item tag 0x0
[ 1082.860958][T16147] hid-generic 0000:0000:0000.00F1: unknown main item tag 0x0
[ 1082.870508][T16147] hid-generic 0000:0000:0000.00F1: unknown main item tag 0x0
[ 1082.880303][T16147] hid-generic 0000:0000:0000.00F1: unknown main item tag 0x0
[ 1082.890934][T16147] hid-generic 0000:0000:0000.00F1: unknown main item tag 0x0
[ 1082.899791][T16147] hid-generic 0000:0000:0000.00F1: unknown main item tag 0x0
[ 1082.908370][T16147] hid-generic 0000:0000:0000.00F1: unknown main item tag 0x0
[ 1082.915960][T16147] hid-generic 0000:0000:0000.00F1: unknown main item tag 0x0
[ 1082.923325][T16147] hid-generic 0000:0000:0000.00F1: unknown main item tag 0x0
[ 1082.931164][T16147] hid-generic 0000:0000:0000.00F1: unknown main item tag 0x0
[ 1082.939208][T16147] hid-generic 0000:0000:0000.00F1: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[ 1082.958181][  T592] usb 1-1: New USB device found, idVendor=0424, idProduct=7505, bcdDevice=7c.44
[ 1082.967254][  T592] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1082.975108][  T592] usb 1-1: Product: syz
[ 1082.979077][  T592] usb 1-1: Manufacturer: syz
[ 1082.983549][  T592] usb 1-1: SerialNumber: syz
[ 1082.988979][  T592] usb 1-1: config 0 descriptor??
[ 1083.033755][  T592] smsc75xx v1.0.0
[ 1083.037286][  T592] smsc75xx 1-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[ 1083.047066][  T592] smsc75xx: probe of 1-1:0.0 failed with error -22
[ 1084.226653][T17715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4338'.
[ 1084.239559][T17715] loop0: detected capacity change from 0 to 256
[ 1084.250126][   T42] keytouch 0003:0926:3333.00F2: fixing up Keytouch IEC report descriptor
[ 1085.080910][   T42] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.00F2/input/input274
[ 1085.104139][T17718] loop2: detected capacity change from 0 to 512
[ 1085.177192][T17718] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 1085.195477][   T42] keytouch 0003:0926:3333.00F2: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0
[ 1085.226019][T17718] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038 (0x7fffffff)
[ 1085.281198][T17725] loop1: detected capacity change from 0 to 16
[ 1085.288114][T17718] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[ 1085.331834][T17718] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 10 with max blocks 1 with error 28
[ 1085.357213][T17718] EXT4-fs (loop2): This should not happen!! Data will be lost
[ 1085.357213][T17718] 
[ 1085.374923][T17725] erofs: (device loop1): mounted with root inode @ nid 36.
[ 1085.395702][T17718] EXT4-fs (loop2): Total free blocks count 0
[ 1085.401511][T17718] EXT4-fs (loop2): Free/Dirty block details
[ 1085.427635][T17718] EXT4-fs (loop2): free_blocks=65280
[ 1085.438665][T17718] EXT4-fs (loop2): dirty_blocks=1
[ 1085.443541][T17718] EXT4-fs (loop2): Block reservation details
[ 1085.459182][T17718] EXT4-fs (loop2): i_reserved_data_blocks=1
[ 1085.553905][T17720] loop4: detected capacity change from 0 to 40427
[ 1085.730964][T17720] F2FS-fs (loop4): Invalid SB checksum offset: 0
[ 1085.738393][T17720] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[ 1085.858128][T17720] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[ 1085.937830][T17720] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[ 1085.944781][T17720] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[ 1085.972667][T17720] attempt to access beyond end of device
[ 1085.972667][T17720] loop4: rw=2049, want=45104, limit=40427
[ 1085.986036][T17720] attempt to access beyond end of device
[ 1085.986036][T17720] loop4: rw=2049, want=45192, limit=40427
[ 1085.997663][T17720] attempt to access beyond end of device
[ 1085.997663][T17720] loop4: rw=2049, want=45104, limit=40427
[ 1086.009916][T17720] attempt to access beyond end of device
[ 1086.009916][T17720] loop4: rw=2049, want=45120, limit=40427
[ 1086.025958][T17720] attempt to access beyond end of device
[ 1086.025958][T17720] loop4: rw=2049, want=45104, limit=40427
[ 1086.038075][T17720] attempt to access beyond end of device
[ 1086.038075][T17720] loop4: rw=2049, want=45232, limit=40427
[ 1086.062783][T17720] attempt to access beyond end of device
[ 1086.062783][T17720] loop4: rw=2049, want=45184, limit=40427
[ 1086.081614][T17734] loop2: detected capacity change from 0 to 1024
[ 1086.107991][T17223] attempt to access beyond end of device
[ 1086.107991][T17223] loop4: rw=2049, want=45240, limit=40427
[ 1086.124122][T17734] EXT4-fs (loop2): Test dummy encryption mode enabled
[ 1086.136384][T17734] EXT4-fs (loop2): Test dummy encryption mode enabled
[ 1086.150844][T17734] EXT4-fs (loop2): Ignoring removed orlov option
[ 1086.187182][  T592] usb 1-1: USB disconnect, device number 84
[ 1086.211438][T17734] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,dioread_lock,test_dummy_encryption,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback.
[ 1086.221869][T17738] loop0: detected capacity change from 0 to 256
[ 1086.259521][T17738] exfat: Bad value for 'uid'
[ 1086.382532][   T30] audit: type=1326 audit(2000000123.315:4479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17742 comm="syz.4.4352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe99a7eaff9 code=0x7ffc0000
[ 1086.413150][   T30] audit: type=1326 audit(2000000123.344:4480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17742 comm="syz.4.4352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe99a7eaff9 code=0x7ffc0000
[ 1086.521145][T17748] overlayfs: failed to resolve './file0': -2
[ 1086.626396][   T30] audit: type=1326 audit(2000000123.493:4481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17742 comm="syz.4.4352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe99a7eaff9 code=0x7ffc0000
[ 1086.739421][   T30] audit: type=1326 audit(2000000123.493:4482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17742 comm="syz.4.4352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe99a7eaff9 code=0x7ffc0000
[ 1086.806715][   T20] usb 2-1: new high-speed USB device number 106 using dummy_hcd
[ 1087.063269][   T20] usb 2-1: Using ep0 maxpacket: 16
[ 1087.170847][T17760] fuse: Bad value for 'group_id'
[ 1087.185702][T17760] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4358'.
[ 1087.194735][   T20] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8
[ 1087.237976][T17760] loop2: detected capacity change from 0 to 512
[ 1087.363460][T17760] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 1087.394748][   T20] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[ 1087.414396][   T20] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1087.434721][T17760] Quota error (device loop2): v2_read_file_info: Free block number too big (58381 >= 6).
[ 1087.445085][   T20] usb 2-1: Product: syz
[ 1087.453937][T17760] EXT4-fs warning (device loop2): ext4_enable_quotas:6422: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[ 1087.468703][   T20] usb 2-1: Manufacturer: syz
[ 1087.476724][   T20] usb 2-1: SerialNumber: syz
[ 1087.489263][   T20] usb 2-1: config 0 descriptor??
[ 1087.500267][T17760] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[ 1087.527967][T17760] Quota error (device loop2): v2_read_file_info: Free block number too big (58381 >= 6).
[ 1087.538562][   T20] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected
[ 1087.549239][   T20] usb 2-1: Detected FT232RL
[ 1087.555358][T17760] EXT4-fs warning (device loop2): ext4_enable_quotas:6422: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[ 1087.700469][  T384] Bluetooth: hci0: Frame reassembly failed (-84)
[ 1087.709922][T17772] Bluetooth: received HCILL_WAKE_UP_IND in state 2
[ 1087.758280][   T20] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[ 1088.038982][   T20] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[ 1088.254236][   T20] usb 2-1: USB disconnect, device number 106
[ 1088.267825][   T20] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[ 1088.278912][   T20] ftdi_sio 2-1:0.0: device disconnected
[ 1088.359641][T17777] loop4: detected capacity change from 0 to 1024
[ 1088.390131][T17777] EXT4-fs (loop4): Test dummy encryption mode enabled
[ 1088.396885][T17777] EXT4-fs (loop4): Journaled quota options ignored when QUOTA feature is enabled
[ 1088.409022][T17777] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,inlinecrypt,commit=0x0000000000000005,noinit_itable,usrjquota=./file0,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback.
[ 1088.708226][T17783] fuse: Unknown parameter 'user?id'
[ 1088.925648][   T42] usb 4-1: USB disconnect, device number 94
[ 1088.940940][T17789] loop3: detected capacity change from 0 to 512
[ 1089.214762][T17789] EXT4-fs (loop3): 1 orphan inode deleted
[ 1089.220372][T17789] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback.
[ 1089.241298][T17789] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038 (0x7fffffff)
[ 1089.260060][   T30] audit: type=1400 audit(2000000126.009:4483): avc:  denied  { rename } for  pid=17788 comm="syz.3.4366" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[ 1089.282266][   T20] usb 1-1: new high-speed USB device number 85 using dummy_hcd
[ 1089.411503][   T30] audit: type=1400 audit(2000000126.150:4484): avc:  denied  { rename } for  pid=17788 comm="syz.3.4366" name="file0" dev="overlay" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[ 1089.532816][   T20] usb 1-1: Using ep0 maxpacket: 32
[ 1089.850640][T17794] syz.3.4366 (17794) used greatest stack depth: 18400 bytes left
[ 1089.875379][  T410] Bluetooth: hci0: command 0x1003 tx timeout
[ 1089.881370][T14664] Bluetooth: hci0: sending frame failed (-49)
[ 1089.895078][T16589] EXT4-fs error (device loop3): ext4_lookup:1860: inode #2: comm syz-executor: deleted inode referenced: 16
[ 1089.906666][   T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1089.917897][T16589] EXT4-fs (loop3): Remounting filesystem read-only
[ 1089.924256][   T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1089.933754][T16589] EXT4-fs error (device loop3): ext4_lookup:1860: inode #2: comm syz-executor: deleted inode referenced: 16
[ 1089.945896][   T20] usb 1-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00
[ 1089.955574][   T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1089.968419][   T20] usb 1-1: config 0 descriptor??
[ 1089.992427][T17805] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4371'.
[ 1090.140076][T17811] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1090.153093][T17811] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1090.160571][T17811] device bridge_slave_0 entered promiscuous mode
[ 1090.171564][T17811] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1090.178786][T17811] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1090.186307][T17811] device bridge_slave_1 entered promiscuous mode
[ 1090.251797][T17822] netem: incorrect ge model size
[ 1090.256622][T17822] netem: change failed
[ 1090.276052][T17811] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1090.282947][T17811] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1090.290035][T17811] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1090.296830][T17811] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1090.304699][T17826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4379'.
[ 1090.380504][ T5466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1090.388363][ T5466] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1090.395558][ T5466] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1090.442544][ T5466] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1090.450852][ T5466] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1090.457738][ T5466] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1090.466527][   T20] greenasia 0003:0E8F:0012.00F3: item fetching failed at offset 0/3
[ 1090.474662][   T20] greenasia 0003:0E8F:0012.00F3: parse failed
[ 1090.478651][ T5466] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1090.482781][   T20] greenasia: probe of 0003:0E8F:0012.00F3 failed with error -22
[ 1090.496464][ T5466] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1090.503413][ T5466] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1090.514903][ T5466] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1090.524212][ T5466] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1090.540212][ T5466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1090.554539][ T5466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1090.562581][ T5466] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1090.570056][ T5466] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1090.578183][T17811] device veth0_vlan entered promiscuous mode
[ 1090.590906][ T5466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1090.600320][T17811] device veth1_macvtap entered promiscuous mode
[ 1090.610374][ T5466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1090.620522][ T5466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1090.630098][ T1084] device bridge_slave_1 left promiscuous mode
[ 1090.636123][ T1084] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1090.643473][ T1084] device bridge_slave_0 left promiscuous mode
[ 1090.649762][ T1084] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1090.657873][ T1084] device veth1_macvtap left promiscuous mode
[ 1090.663748][ T1084] device veth0_vlan left promiscuous mode
[ 1090.682494][T17785] loop0: detected capacity change from 0 to 16
[ 1090.721081][T17785] erofs: (device loop0): erofs_read_inode: unsupported chunk format ffff of nid 36
[ 1090.733301][   T42] usb 1-1: USB disconnect, device number 85
[ 1090.794549][T16147] usb 5-1: new high-speed USB device number 96 using dummy_hcd
[ 1091.072284][T16147] usb 5-1: Using ep0 maxpacket: 32
[ 1091.200585][  T592] usb 4-1: new high-speed USB device number 95 using dummy_hcd
[ 1091.244856][T16147] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1091.435882][T16147] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11
[ 1091.452837][T16147] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1091.471975][T16147] usb 5-1: Product: syz
[ 1091.478662][T16147] usb 5-1: Manufacturer: syz
[ 1091.485262][T16147] usb 5-1: SerialNumber: syz
[ 1091.494362][T16147] usb 5-1: config 0 descriptor??
[ 1091.499591][   T30] audit: type=1400 audit(2000000128.095:4485): avc:  denied  { create } for  pid=17859 comm="syz.1.4392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[ 1092.066039][  T410] usb 5-1: USB disconnect, device number 96
[ 1092.099063][ T7827] Bluetooth: hci0: command 0x1001 tx timeout
[ 1092.111574][T14664] Bluetooth: hci0: sending frame failed (-49)
[ 1092.301745][  T592] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[ 1092.310673][  T592] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1092.318485][  T592] usb 4-1: Product: syz
[ 1092.322434][  T592] usb 4-1: Manufacturer: syz
[ 1092.326905][  T592] usb 4-1: SerialNumber: syz
[ 1092.332087][  T592] usb 4-1: config 0 descriptor??
[ 1092.484134][   T30] audit: type=1400 audit(2000000129.031:4486): avc:  denied  { setopt } for  pid=17876 comm="syz.1.4398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[ 1092.535511][T17879] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4399'.
[ 1092.585288][T17873] loop0: detected capacity change from 0 to 40427
[ 1092.705771][T17873] F2FS-fs (loop0): invalid crc value
[ 1092.781050][T17873] F2FS-fs (loop0): Found nat_bits in checkpoint
[ 1092.806074][T17883] loop4: detected capacity change from 0 to 40427
[ 1092.820390][T17873] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[ 1092.905368][T17883] F2FS-fs (loop4): invalid crc value
[ 1092.926512][T17883] F2FS-fs (loop4): Found nat_bits in checkpoint
[ 1092.974346][T17883] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[ 1093.174903][T17895] syz.4.4401[17895] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1093.175010][T17895] syz.4.4401[17895] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1093.420602][T17291] attempt to access beyond end of device
[ 1093.420602][T17291] loop0: rw=2051, want=45064, limit=40427
[ 1093.443251][T17291] attempt to access beyond end of device
[ 1093.443251][T17291] loop0: rw=2051, want=131072, limit=40427
[ 1093.468029][T17291] F2FS-fs (loop0): Issue discard(4614, 4614, 1019) failed, ret: -5
[ 1093.468128][T17291] F2FS-fs (loop0): Issue discard(5637, 5637, 10747) failed, ret: -5
[ 1093.661868][T17223] attempt to access beyond end of device
[ 1093.661868][T17223] loop4: rw=2049, want=45104, limit=40427
[ 1093.717678][T17900] loop1: detected capacity change from 0 to 512
[ 1093.782056][T17900] EXT4-fs (loop1): Ignoring removed nobh option
[ 1093.794331][T17900] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1093.815120][T17900] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nobh,max_batch_time=0x00000000000003ff,nojournal_checksum,usrquota,dioread_nolock,nodiscard,. Quota mode: writeback.
[ 1093.834229][T17900] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038 (0x7fffffff)
[ 1093.915972][T16101] usb 1-1: new high-speed USB device number 86 using dummy_hcd
[ 1094.013257][T17910] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.4404: bg 0: block 224: padding at end of block bitmap is not set
[ 1094.027880][T17910] EXT4-fs (loop1): Remounting filesystem read-only
[ 1094.034960][T17910] EXT4-fs error (device loop1) in ext4_evict_inode:258: Readonly filesystem
[ 1094.044080][T17910] EXT4-fs error (device loop1) in ext4_evict_inode:258: Readonly filesystem
[ 1094.097691][T16147] usb 5-1: new high-speed USB device number 97 using dummy_hcd
[ 1094.123938][  T410] usb 4-1: USB disconnect, device number 95
[ 1094.215298][T16101] usb 1-1: Using ep0 maxpacket: 8
[ 1094.499686][ T7827] Bluetooth: hci0: command 0x1009 tx timeout
[ 1094.578891][T16101] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1094.588472][T16101] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1094.598138][T16147] usb 5-1: Using ep0 maxpacket: 16
[ 1094.603116][T16101] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1094.612927][T16101] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1094.625838][T16101] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1094.634927][T16101] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1094.670230][ T1084] Quota error (device loop1): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync!
[ 1094.682457][ T1084] Quota error (device loop1): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync!
[ 1094.694724][ T1084] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started
[ 1094.704636][ T1084] Quota error (device loop1): v2_write_file_info: Can't write info structure
[ 1094.747390][T17917] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4407'.
[ 1094.756646][T17917] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4407'.
[ 1094.760596][T16147] usb 5-1: config 0 has an invalid interface number: 105 but max is 0
[ 1094.774211][T16147] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1094.784976][T16147] usb 5-1: config 0 has no interface number 0
[ 1094.963857][T16147] usb 5-1: New USB device found, idVendor=456d, idProduct=3a16, bcdDevice= b.3b
[ 1094.972812][T16147] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1094.980645][T16147] usb 5-1: Product: syz
[ 1094.984695][T16147] usb 5-1: Manufacturer: syz
[ 1094.989145][T16147] usb 5-1: SerialNumber: syz
[ 1094.996778][T16147] usb 5-1: config 0 descriptor??
[ 1095.218006][T17930] loop3: detected capacity change from 0 to 512
[ 1095.276696][T17930] EXT4-fs (loop3): Ignoring removed orlov option
[ 1095.301038][T17931] UDC core: couldn't find an available UDC or it's busy: -16
[ 1095.308958][T17931] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 1095.309415][T17930] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,orlov,auto_da_alloc,,errors=continue. Quota mode: writeback.
[ 1095.330233][T17930] ext4 filesystem being mounted at /6/bus supports timestamps until 2038 (0x7fffffff)
[ 1095.377386][T16147] usb 5-1: USB disconnect, device number 97
[ 1095.485947][T17935] loop3: detected capacity change from 0 to 1024
[ 1096.007757][T17942] loop1: detected capacity change from 0 to 512
[ 1096.323987][T17942] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[ 1096.362623][T17942] EXT4-fs (loop1): 1 truncate cleaned up
[ 1096.368202][T17943] binder: 17939:17943 ioctl c0306201 0 returned -14
[ 1096.369243][T17942] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 1096.385140][T17943] binder: 17939:17943 unknown command 0
[ 1096.390747][T17943] binder: 17939:17943 ioctl c0306201 20000500 returned -22
[ 1097.006252][  T509] usb 1-1: USB disconnect, device number 86
[ 1097.317339][T17958] device syzkaller0 entered promiscuous mode
[ 1097.326463][T17963] 9p: Unknown access argument a
[ 1097.442857][T17978] loop1: detected capacity change from 0 to 512
[ 1097.452232][T17978] EXT4-fs (loop1): Invalid want_extra_isize 188
[ 1097.557580][T17982] loop3: detected capacity change from 0 to 512
[ 1097.659173][T17982] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x00000000000001ff,grpquota,,errors=continue. Quota mode: writeback.
[ 1097.674876][T17982] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038 (0x7fffffff)
[ 1097.689794][  T410] usb 5-1: new high-speed USB device number 98 using dummy_hcd
[ 1097.694704][T17982] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.4429: bg 0: block 256: padding at end of block bitmap is not set
[ 1097.700563][ T7827] usb 1-1: new high-speed USB device number 87 using dummy_hcd
[ 1097.718982][T17982] Quota error (device loop3): write_blk: dquota write failed
[ 1097.726230][T17982] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5
[ 1097.735158][T17982] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota
[ 1097.744892][T17982] EXT4-fs error (device loop3): ext4_acquire_dquot:6187: comm syz.3.4429: Failed to acquire dquot type 1
[ 1097.756381][T17986] Quota error (device loop3): write_blk: dquota write failed
[ 1097.763627][T17986] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5
[ 1097.772595][T17986] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota
[ 1097.782248][T17986] EXT4-fs error (device loop3): ext4_acquire_dquot:6187: comm syz.3.4429: Failed to acquire dquot type 1
[ 1097.794225][T17982] Quota error (device loop3): write_blk: dquota write failed
[ 1097.801525][T17982] EXT4-fs error (device loop3): ext4_acquire_dquot:6187: comm syz.3.4429: Failed to acquire dquot type 1
[ 1097.946314][  T410] usb 5-1: Using ep0 maxpacket: 8
[ 1098.200680][T17996] serio: Serial port ptm1
[ 1098.220950][ T7827] usb 1-1: too many configurations: 9, using maximum allowed: 8
[ 1098.309863][  T410] usb 5-1: config 0 has an invalid interface number: 52 but max is 0
[ 1098.310660][T17999] loop1: detected capacity change from 0 to 512
[ 1098.317991][ T7827] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1098.332750][  T410] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1098.342596][ T7827] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1098.353295][  T410] usb 5-1: config 0 has no interface number 0
[ 1098.354104][T17999] EXT4-fs (loop1): too many log groups per flexible block group
[ 1098.359125][  T410] usb 5-1: config 0 interface 52 has no altsetting 0
[ 1098.367078][T17999] EXT4-fs (loop1): failed to initialize mballoc (-12)
[ 1098.373313][ T7827] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1098.380118][T17999] EXT4-fs (loop1): mount failed
[ 1098.386558][  T410] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00
[ 1098.399756][  T410] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1098.408247][  T410] usb 5-1: config 0 descriptor??
[ 1098.480870][ T7827] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1098.489580][ T7827] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1098.501318][ T7827] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1098.524587][   T26] usb 4-1: new high-speed USB device number 96 using dummy_hcd
[ 1098.588042][ T7827] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1098.596843][ T7827] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1098.607786][ T7827] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1098.615026][T18005] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1098.621876][T18005] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1098.629026][T18005] device bridge_slave_0 entered promiscuous mode
[ 1098.635967][T18005] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1098.642816][T18005] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1098.649966][T18005] device bridge_slave_1 entered promiscuous mode
[ 1098.694778][ T7827] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1098.703545][ T7827] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1098.714211][ T7827] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1098.723286][T18005] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1098.730147][T18005] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1098.737224][T18005] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1098.744023][T18005] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1098.765425][ T1084] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1098.772632][ T1084] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1098.780091][ T1084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1098.787791][ T1084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1098.797470][ T1084] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1098.805538][ T7827] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1098.805716][ T1084] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1098.814381][  T410] usb 2-1: new full-speed USB device number 107 using dummy_hcd
[ 1098.821075][ T1084] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1098.821487][   T26] usb 4-1: Using ep0 maxpacket: 8
[ 1098.829197][ T7827] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1098.851412][ T7827] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1098.861942][ T1084] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1098.870313][ T1084] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1098.877196][ T1084] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1098.894528][ T1084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1098.902487][ T1084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1098.916950][ T1084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1098.929446][ T1084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1098.937408][ T1084] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1098.940632][ T7827] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1098.945397][ T1084] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1098.953691][ T7827] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1098.970948][ T7827] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1098.979333][T18005] device veth0_vlan entered promiscuous mode
[ 1098.985414][   T26] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[ 1098.994990][T18005] device veth1_macvtap entered promiscuous mode
[ 1099.002404][   T26] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1099.012288][   T26] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1099.012706][ T5758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1099.022212][   T26] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1099.037197][ T5758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1099.043107][   T26] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1099.052152][ T5758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1099.059974][   T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1099.070629][ T7827] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1099.093398][ T7827] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1099.104403][ T7827] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1099.186559][ T7827] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1099.195484][ T7827] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1099.206349][ T7827] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1099.229288][  T410] usb 2-1: config 0 has an invalid interface number: 133 but max is 0
[ 1099.237289][  T410] usb 2-1: config 0 has no interface number 0
[ 1099.378932][ T7827] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[ 1099.387811][ T7827] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[ 1099.396143][ T7827] usb 1-1: Product: syz
[ 1099.400309][ T7827] usb 1-1: Manufacturer: syz
[ 1099.404667][ T7827] usb 1-1: SerialNumber: syz
[ 1099.410154][ T7827] usb 1-1: config 0 descriptor??
[ 1099.415032][  T410] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[ 1099.424005][  T410] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1099.431799][  T410] usb 2-1: Product: syz
[ 1099.435808][  T410] usb 2-1: Manufacturer: syz
[ 1099.440213][  T410] usb 2-1: SerialNumber: syz
[ 1099.443038][   T26] usb 3-1: new full-speed USB device number 80 using dummy_hcd
[ 1099.446189][  T410] usb 2-1: config 0 descriptor??
[ 1099.593565][ T1084] device bridge_slave_1 left promiscuous mode
[ 1099.599586][ T1084] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1099.607239][ T1084] device bridge_slave_0 left promiscuous mode
[ 1099.613222][ T1084] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1099.621254][ T1084] device veth1_macvtap left promiscuous mode
[ 1099.683424][T17412] usb 1-1: USB disconnect, device number 87
[ 1099.754708][  T410] usb 2-1: USB disconnect, device number 107
[ 1099.892080][   T26] usb 3-1: config 1 interface 0 altsetting 217 endpoint 0x82 has invalid maxpacket 512, setting to 64
[ 1099.903078][   T26] usb 3-1: config 1 interface 0 altsetting 217 endpoint 0x3 has invalid maxpacket 512, setting to 64
[ 1099.914123][   T26] usb 3-1: config 1 interface 0 has no altsetting 0
[ 1100.116640][   T26] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1100.125564][   T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1100.133366][   T26] usb 3-1: Product: syz
[ 1100.137313][   T26] usb 3-1: Manufacturer: syz
[ 1100.141794][   T26] usb 3-1: SerialNumber: syz
[ 1100.170008][T18014] raw-gadget.4 gadget: fail, usb_ep_enable returned -22
[ 1100.176844][T18014] raw-gadget.4 gadget: fail, usb_ep_enable returned -22
[ 1100.259449][   T30] kauditd_printk_skb: 1 callbacks suppressed
[ 1100.259464][   T30] audit: type=1326 audit(2000000136.299:4487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18017 comm="syz.1.4438" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f62b0826ff9 code=0x0
[ 1100.544218][   T26] cdc_ether: probe of 3-1:1.0 failed with error -71
[ 1100.552061][   T26] usb 3-1: USB disconnect, device number 80
[ 1100.661991][ T3625] usb 5-1: USB disconnect, device number 98
[ 1100.872879][   T30] audit: type=1326 audit(2000000136.869:4488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18029 comm="syz.4.4442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe99a7eaff9 code=0x7ffc0000
[ 1100.896986][   T30] audit: type=1326 audit(2000000136.879:4489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18029 comm="syz.4.4442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7fe99a7eaff9 code=0x7ffc0000
[ 1100.921788][   T30] audit: type=1326 audit(2000000136.879:4490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18029 comm="syz.4.4442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe99a7eaff9 code=0x7ffc0000
[ 1101.117197][T18038] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4444'.
[ 1101.297236][T18042] loop1: detected capacity change from 0 to 512
[ 1101.335410][ T3625] usb 3-1: new high-speed USB device number 81 using dummy_hcd
[ 1101.462245][T17412] usb 4-1: USB disconnect, device number 96
[ 1101.624390][T18051] loop3: detected capacity change from 0 to 512
[ 1101.650214][T18053] EXT4-fs (sda1): shut down requested (2)
[ 1101.656563][T18053] Aborting journal on device sda1-8.
[ 1101.666884][ T3625] usb 3-1: Using ep0 maxpacket: 8
[ 1101.710909][T18051] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 1101.731127][T18051] ext4 filesystem being mounted at /18/bus supports timestamps until 2038 (0x7fffffff)
[ 1101.771224][   T30] audit: type=1400 audit(2000000137.711:4491): avc:  denied  { rename } for  pid=18050 comm="syz.3.4451" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1
[ 1101.805752][   T26] usb 2-1: new high-speed USB device number 108 using dummy_hcd
[ 1101.805894][ T3625] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[ 1101.832216][   T30] audit: type=1400 audit(2000000137.767:4492): avc:  denied  { rename } for  pid=18050 comm="syz.3.4451" name="file0" dev="overlay" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1
[ 1101.837049][ T3625] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1101.873534][ T3625] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1101.883865][   T30] audit: type=1400 audit(2000000137.805:4493): avc:  denied  { unlink } for  pid=18050 comm="syz.3.4451" name="file1" dev="overlay" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1
[ 1101.906877][ T3625] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1101.917053][ T3625] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1101.930247][   T30] audit: type=1400 audit(2000000137.805:4494): avc:  denied  { create } for  pid=18050 comm="syz.3.4451" name="#f2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1
[ 1101.951344][ T3625] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1101.960367][ T3625] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1101.974596][T17811] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0)
[ 1101.991732][T18066] loop4: detected capacity change from 0 to 512
[ 1101.998429][T17811] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0)
[ 1102.063193][T18066] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5
[ 1102.063193][T18066] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[ 1102.063193][T18066] 
[ 1102.081635][T18066] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[ 1102.092545][T18066] EXT4-fs (loop4): 1 truncate cleaned up
[ 1102.098036][T18066] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrjquota=,init_itable,acl,auto_da_alloc,noacl,nombcache,,errors=continue. Quota mode: none.
[ 1102.105049][   T26] usb 2-1: Using ep0 maxpacket: 8
SYZFAIL: posix_spawn failed
 (errno 5: Input/output error)
[ 1102.210492][   T30] audit: type=1400 audit(2000000138.114:4495): avc:  denied  { write } for  pid=291 comm="syz-executor" path="pipe:[457]" dev="pipefs" ino=457 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[ 1102.287764][   T26] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[ 1102.329487][  T509] usb 1-1: new high-speed USB device number 88 using dummy_hcd
[ 1102.368371][   T26] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x94, skipping
[ 1102.378855][   T26] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1102.468590][ T7827] usb 3-1: USB disconnect, device number 81
[ 1102.564696][   T26] usb 2-1: string descriptor 0 read error: -71
[ 1102.570931][   T26] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1
[ 1102.586043][   T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1102.599292][   T26] usb 2-1: config 0 descriptor??
[ 1102.618374][   T26] usb 2-1: can't set config #0, error -71
[ 1102.633942][   T26] usb 2-1: USB disconnect, device number 108
[ 1102.736434][ T5758] device bridge_slave_1 left promiscuous mode
[ 1102.742500][ T5758] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1102.750122][ T5758] device bridge_slave_0 left promiscuous mode
[ 1102.756053][ T5758] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1102.763972][ T5758] device veth1_macvtap left promiscuous mode
[ 1102.769819][ T5758] device veth0_vlan left promiscuous mode
[ 1103.944813][ T5758] device bridge_slave_1 left promiscuous mode
[ 1103.950760][ T5758] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1103.958212][ T5758] device bridge_slave_0 left promiscuous mode
[ 1103.964141][ T5758] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1103.972271][ T5758] device bridge_slave_1 left promiscuous mode
[ 1103.978238][ T5758] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1103.985501][ T5758] device bridge_slave_0 left promiscuous mode
[ 1103.991775][ T5758] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1103.999657][ T5758] device bridge_slave_1 left promiscuous mode
[ 1104.005578][ T5758] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1104.012990][ T5758] device bridge_slave_0 left promiscuous mode
[ 1104.018983][ T5758] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1104.027091][ T5758] device veth1_macvtap left promiscuous mode
[ 1104.033017][ T5758] device veth0_vlan left promiscuous mode
[ 1104.038698][ T5758] device veth1_macvtap left promiscuous mode
[ 1104.044592][ T5758] device veth0_vlan left promiscuous mode
[ 1104.050259][ T5758] device veth1_macvtap left promiscuous mode
[ 1104.056086][ T5758] device veth0_vlan left promiscuous mode