last executing test programs:

4m21.855098846s ago: executing program 32 (id=576):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x8, &(0x7f0000000200)=@raw=[@generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffffc}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffb}, @generic={0xb7, 0x4}, @generic={0x95}], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0}, 0x94)

4m17.171401158s ago: executing program 33 (id=618):
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f00000000c0)={{0x2, 0x6}, 0x20}, 0x10)

3m40.624751313s ago: executing program 3 (id=1278):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10)
accept4(r1, 0x0, 0x0, 0x800)
nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0)

3m39.674281195s ago: executing program 3 (id=1285):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
getcwd(&(0x7f0000001e00)=""/4096, 0x1000)

3m39.673972061s ago: executing program 3 (id=1286):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000380)={{0x1, 0x7ff, 0x4b, 0x8009}, 'syz0\x00', 0x8})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
close_range(r1, 0xffffffffffffffff, 0x0)

3m39.486518481s ago: executing program 3 (id=1289):
syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x3010050, &(0x7f0000000280)=ANY=[@ANYBLOB="8011a73c6f5c17ab4018ee31a2f01978447cc2ac"], 0x41, 0x1505, &(0x7f0000000840)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000380)='./bus\x00', &(0x7f00000004c0)='./file0/../file0\x00', 0x0, 0x185082, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0)
umount2(&(0x7f0000000100)='./file0/file0\x00', 0x0)

3m39.403122513s ago: executing program 3 (id=1291):
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file2\x00', 0x0, &(0x7f0000000d00)={[{@umask={'umask', 0x3d, 0x4}}, {@barrier}, {@nls={'nls', 0x3d, 'cp737'}}, {@gid}, {@type={'type', 0x3d, "e481e91c"}}, {@gid}, {@nobarrier}, {@umask={'umask', 0x3d, 0x35}}]}, 0xfe, 0x5e5, &(0x7f0000000680)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x115)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

3m38.859416489s ago: executing program 3 (id=1298):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x28011, r2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r3, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x1000)
ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000180)={0x1100, 0x0, 0x52, 0x11000})

3m38.691266908s ago: executing program 34 (id=1298):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x28011, r2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r3, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x1000)
ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000180)={0x1100, 0x0, 0x52, 0x11000})

3m36.833793539s ago: executing program 4 (id=1322):
r0 = semget$private(0x0, 0x2, 0x30)
semop(r0, &(0x7f0000000000)=[{0x2, 0x7, 0x3800}], 0x1)
r1 = semget(0x1, 0x1, 0x200)
semop(r1, &(0x7f00000002c0)=[{0x4, 0x1, 0x1800}], 0x1)
semtimedop(0x0, &(0x7f0000000580)=[{0x2, 0x9, 0x1000}], 0x1, 0x0)

3m36.758323914s ago: executing program 4 (id=1323):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000040)={@void, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@val, {0x8100, 0x0, 0x0, 0x3}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x4000, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}, @multicast1}, {0x4e22, 0x17c1, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x4, 0x100, @void}}}}}}}}, 0x36)

3m36.520358618s ago: executing program 4 (id=1326):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001d00070f00000000000000000700", @ANYRES32, @ANYBLOB="00005200060005000100"], 0x2c}, 0x1, 0x0, 0x0, 0x40c4}, 0x20008000)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40014}, 0x0)

3m36.422714485s ago: executing program 4 (id=1327):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x180)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x38b1012, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
umount2(&(0x7f0000000140)='./file0/file0\x00', 0x0)

3m36.346620105s ago: executing program 4 (id=1328):
r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f00000002c0)={0x11, &(0x7f00000002c0)})

3m35.867596574s ago: executing program 4 (id=1334):
r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c::=\x00', 0x0)

3m35.728924151s ago: executing program 35 (id=1334):
r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c::=\x00', 0x0)

2m39.513205447s ago: executing program 5 (id=2381):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xd, &(0x7f0000000f40)=@framed={{}, [@cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffd}, @printk={@llu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd450}, 0x94)

2m39.458689204s ago: executing program 5 (id=2385):
syz_emit_ethernet(0xfdef, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1811"}, {0x0, 0x1, "000000050000000026000400"}, {0x4, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "ffffffffffff00000000000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0)

2m39.458469596s ago: executing program 5 (id=2386):
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63)
write$P9_RLERRORu(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="c5"], 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0)

2m39.314199713s ago: executing program 5 (id=2390):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x86ff39d4d87f103b, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd0}}, 0x0)

2m39.253399887s ago: executing program 5 (id=2393):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0xb4})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000200)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000766000/0x4000)=nil, 0x800000})

2m39.176618687s ago: executing program 5 (id=2395):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f0000000100)='tcp 2049\n', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/versions\x00', 0x2, 0x0)
write(r1, &(0x7f0000000540)='-2 -3 +4\n', 0x9)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/threads\x00', 0x2, 0x0)
write(r2, &(0x7f0000000180)='1\n', 0x2)
close(r2)

2m22.930160874s ago: executing program 36 (id=2395):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/portlist\x00', 0x2, 0x0)
write(r0, &(0x7f0000000100)='tcp 2049\n', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/versions\x00', 0x2, 0x0)
write(r1, &(0x7f0000000540)='-2 -3 +4\n', 0x9)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/threads\x00', 0x2, 0x0)
write(r2, &(0x7f0000000180)='1\n', 0x2)
close(r2)

1m29.240920908s ago: executing program 7 (id=3459):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000002d40)=0x1, 0x4)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', <r2=>0x0})
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x10, r2}, 0x10)

1m29.111110313s ago: executing program 7 (id=3464):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a5c000000030a010800000000000000000a0000070900010073797a31000000000c00024000000000000000020400048018000480140003006772653a0000000000000000000000000a000700", @ANYRESHEX=r0], 0x84}, 0x1, 0x0, 0x0, 0x40080a5}, 0x20008140)

1m29.034247935s ago: executing program 7 (id=3465):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]})
fchmod(r0, 0x29)

1m29.034061462s ago: executing program 7 (id=3466):
socket$phonet_pipe(0x23, 0x5, 0x2)
socket$phonet_pipe(0x23, 0x5, 0x2)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff7000/0x2000)=nil, 0x0, 0x5e}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x1b7c, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xc}}}, 0x24}}, 0x4004004)
r1 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

1m28.969913995s ago: executing program 7 (id=3467):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/threads\x00', 0x1, 0x65)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
write(r0, &(0x7f0000000400)='c', 0x1)

1m28.969677072s ago: executing program 7 (id=3468):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000001740)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x800}], 0x18}, 0x4000000)

1m12.228181307s ago: executing program 37 (id=3468):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000001740)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x800}], 0x18}, 0x4000000)

1m0.867149641s ago: executing program 2 (id=4015):
unshare(0x22020600)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000800000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x31)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r0, 0x0, 0x0}, 0x10)

1m0.748102191s ago: executing program 2 (id=4016):
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000080)=@shmem={0xc, 0x40000, {0x2, 0x9}}, 0x0)

1m0.672554343s ago: executing program 2 (id=4017):
syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000340)='./file2\x00', 0x2a0400b, &(0x7f0000000040)=ANY=[], 0x41, 0x24b, &(0x7f0000000840)="$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")
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000)
r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0)
getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0)
getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0)

1m0.541805959s ago: executing program 2 (id=4019):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x283, 0x4)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv6_getaddrlabel={0x1c, 0x4a, 0x3, 0x70bd2c, 0x25dfdbfb, {0xa, 0x0, 0x80}}, 0x1c}, 0x1, 0x0, 0x0, 0x44090}, 0x20000010)

59.945474622s ago: executing program 2 (id=4027):
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x3)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000))
read$dsp(r0, &(0x7f0000000280)=""/79, 0x4f)

59.88143326s ago: executing program 2 (id=4029):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
sync()
ptrace(0x10, r0)
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x0, 0x0)

56.564284954s ago: executing program 8 (id=4077):
r0 = syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040109720770000000000010902350001010080320904000005ffffff000705810340000107058202400000070503024000000705840240000007050502"], 0x0)
syz_usb_connect$midi(0x2, 0x44, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x2a39, 0x3fa0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32, 0x1, 0x1, 0x3, 0x20, 0xe, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x0, 0x3, [], [{{0x9, 0x5, 0x5, 0x0, 0x3ff, 0x6, 0x70, 0x8, {0xa, 0x25, 0x1, 0x6, "2fe6ade0bc8c"}}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0xc, 0x4, 0x2, {0x4}}}]}}}}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f00000000c0)=ANY=[])

54.959753496s ago: executing program 8 (id=4088):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a090000000000000000000200000009000200000000000000000008000440000000000900010073797a30000000000800034000000001"], 0x90}}, 0x0)

54.923422006s ago: executing program 8 (id=4090):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000000c0)={r1, 0x4}, 0x8)

54.923140337s ago: executing program 8 (id=4091):
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x40, 0x6, 0x5, 0x8, 0x6, 0xffffff26, 0x2, 0x80, 0x8, 0x7, 0x15, 0xa, 0x4, 0x5, 0x7, 0xc5f7}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r7, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0xa, 0x2, 0xf, 0x6, 0x7, 0x1, 0x8, 0x4, 0xe, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x480dc}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x24000800)

54.784190657s ago: executing program 8 (id=4096):
setns(0xc9, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)

54.778864945s ago: executing program 8 (id=4098):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x24, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

43.565467304s ago: executing program 38 (id=4029):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
sync()
ptrace(0x10, r0)
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x0, 0x0)

38.486656849s ago: executing program 39 (id=4098):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x24, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

25.099204842s ago: executing program 0 (id=4399):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2})
ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, 0x0)

25.037918803s ago: executing program 0 (id=4400):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x28, 0x41, 0x107, 0x70bd27, 0xfffffdfe, {0x4, 0x7c}, [@nested={0x4, 0x142}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @nested={0x4, 0x1d}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc0d4)

24.927851262s ago: executing program 0 (id=4402):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000040000000400000002"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f0000000280), &(0x7f0000000000)=""/10, 0x23}, 0x20)

24.828429112s ago: executing program 0 (id=4404):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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")
syz_mount_image$vfat(&(0x7f0000005880), &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, 0x5, 0x0, &(0x7f0000000240))
r0 = open(&(0x7f0000014000)='.\x00', 0x8000, 0x14b)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc4}})
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

24.646104554s ago: executing program 0 (id=4406):
syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000540)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7)
syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303"], 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000bc0)='/proc/timer_list\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000080)='./file1\x00', 0x146142, 0x90)
pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0xf, 0x7000, 0x0, 0x3)

23.748257868s ago: executing program 0 (id=4422):
syz_mount_image$ocfs2(&(0x7f0000000100), &(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f00000005c0)={[{@localflocks}, {@intr}, {@err_ro}, {@coherency_buffered}, {@heartbeat_none}, {@err_cont}, {@coherency_buffered}, {@localalloc}, {@err_ro}, {@nouser_xattr}]}, 0x18, 0x448c, &(0x7f0000008980)="$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")
setresuid(0x0, 0xee01, 0xffffffffffffffff)
creat(&(0x7f0000000380)='./bus\x00', 0x0)

23.567019744s ago: executing program 40 (id=4422):
syz_mount_image$ocfs2(&(0x7f0000000100), &(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f00000005c0)={[{@localflocks}, {@intr}, {@err_ro}, {@coherency_buffered}, {@heartbeat_none}, {@err_cont}, {@coherency_buffered}, {@localalloc}, {@err_ro}, {@nouser_xattr}]}, 0x18, 0x448c, &(0x7f0000008980)="$eJzs281vG0UDB+DZTd63Tt+2b7763UoWSBABipyegB4obQBVQpSEDyEOjZyPtgEnjhIH9YBEEZwrIXFAnDhwacUdtaf+CxzolWMPhQMXBBeCbK8T7zqmVmU3avo8El7v7M7skF92PZNx40TlyuJafnEtX1zOl+curZ3Kf1IurS8thPgR2enr05le5CT7nXPh3OvvvH8qhKs/D/9vY2NjI1QNhm1NNL3/4/dP55q3DXGmTrXd7Vvrlg9DCKMhhFzI9qcvhPDBjyFEIYShpGw42Q6EEPaF+rEvfrgxnetSb/ru3Zy6MTV5/db9pbsD5y7m254YhfBt6egLl5d+fbrv9C/PdenyAADwr96YvvDe24WJcCcKB273b43XG+P4w8m23fh4g4688mjiBAAAgG1tzf8HozhqXa8bTbZtlgSDie3j7fxbFyZfK0wk679Ry/EXk6LfXu2rraFm132z679Dmfrbr/+2XudhNfrXuO5giOLx1H4cj4+HMHG2vn8k2huXymuV5y+V15fnu9aNx1Y6//pf/VLpJH8I7DT/4Uz7vV//H2n5baru57v3K7arpfPva3ve959HHeU/kqn3KPLn4aXz76+VPdV8Qr7+AKjm/1X/g/MfzbTfq/wPVJ/tUbWvudQToDqGqZa3G6+kfdeLrj1W0vn/p1aWenQmP8h29/9fmfwPZtrfqef/2NneXnW3SOf/31pZ+ktrW/f/UPzg+/9Qpv12+X/Ztf+D1vyr/R/z+d+RdP576oXph2ftJ9np8/9wpv0e3f/XkmXVEA5EYaTpW6e3++sfDo316tqUpnp4pQe92AXS+beu8m/N/+KOxn9HMvWT/Ju+FjzQk/lf47qN+V9jHjIW1ed/bC+d/0Db8zq9/49m6vX88z/KJTOAjc96ep1dKp3/3nrhNgPATvM/lmm/R/k/U3vNNfLf6vDfe+rlBeO/jqTzT6JKfQxcq73Wxn9Ra+5/ZvI/nmm/Kf/sPw3pktbxX7X/Y/HWe9pL57+v7XnV/H9qvu/P1Muz9/+JTL3ez/9CKBjrP7R0/vvbnle7/3MPfv6fzNTrdf7P9rJxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAnwHCyHQxRPJ7aj+Px8RBGkv0jYW80W5yfmS2V5z5eC2E0Kc+H4ehyqTxbLM0sLpfnF2aKpVJ5LoSDyfHRkIvWSuXKzFJx5dBmWwPRlYXiamV2oVgJIRxOyk+E/Y22ZhcrS8WV2rmNY/+Py6srV4rLM/OLqy8XCoVCOLrZh6Fo4WplYblSv3r9aAjHNusORk2dqx0+vtmXfdFH5fXV5WKpVn6iqU6pPFcsNdU5mRz7OgxFldX15bliZWGmVL7cuN5OOpNsJ89Pvzv95kTTkaj2mq9vNvMFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Ml05/RL34QQ+ut7cQjhTONNlPwXck3n9927OXVjavL6rftLdwfOXcw3zgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgq7dKzSMBSFAfjcq6Dgoo4+gVNINldFERcjgk/gSzgIPqWP0aFjl1JobiAkDXRp6fB9yyH5ufccuAcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABO0+tn+/VRNxEpLtcXET//t1fD/K7U+mn3+bMjzMjhvL23zy91U949TfKH8mvxmLfpavn7HV39Ox9895rRnoz3qTPtMza3b3Pz9X2vI+UqIm5Kfp9yrqr97gIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA27M2hCYBgEMfRO8Fks7iGTmFUBPcwOp5LOI8mwWAQvvpeOjh+/AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP4Zl2md+yGOjOrKjP1sm/e/e47tu8+y+bosBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAmx04kAEAAAAQ5m+dR/sBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCgAAP//rivM8w==")
setresuid(0x0, 0xee01, 0xffffffffffffffff)
creat(&(0x7f0000000380)='./bus\x00', 0x0)

1.671706574s ago: executing program 1 (id=4788):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x20, 0x2e, 0xb, 0x0, 0x0, {0x2}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x132, 0x0, 0x0, @str='\x88H'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x8000)

1.616565745s ago: executing program 6 (id=4790):
syz_emit_ethernet(0x86, &(0x7f0000000400)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x38, 0x80, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x6, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x89, 0x0, @loopback, @multicast2}, "00186371ae9b1c03"}}}}}, 0x0)

1.563337115s ago: executing program 1 (id=4791):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r1 = socket$tipc(0x1e, 0x1, 0x0)
bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
listen(r1, 0x0)
r2 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380)='/', 0x1}], 0x1, 0x0, 0x0, 0x40010}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1.487632555s ago: executing program 6 (id=4793):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='my_configfs\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='my_configfs/nullb\x00', 0x10000, 0x0)
mkdirat(r0, &(0x7f0000000180)='nullb1\x00', 0x1ff)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)

1.410994899s ago: executing program 1 (id=4794):
mkdirat(0xffffffffffffff9c, &(0x7f00000000a0)='./dev\x00', 0x147)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0)
pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./dev\x00')

1.410796367s ago: executing program 6 (id=4795):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000180)={[{@noflush_merge}, {@adaptive_mode}, {@block_mode}, {@alloc_mode_reuse}, {@inline_xattr}, {@disable_roll_forward}, {@discard}, {@nouser_xattr}, {@jqfmt_vfsv1}, {@errors_remount}, {@fsync_mode_strict}, {@age_extent_cache}, {@nocheckpoint_merge}, {@resuid}]}, 0x1, 0x552b, &(0x7f0000005a40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0)
pwrite64(r0, &(0x7f0000000080)="e0", 0x1, 0x401)

1.330738449s ago: executing program 1 (id=4796):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./proc/thread-self/fail-nth\x00', &(0x7f0000000240)={0x40, 0x8, 0x10}, 0x18)

1.330296093s ago: executing program 9 (id=4797):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)

1.271077441s ago: executing program 1 (id=4798):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010425bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="2395050000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x4000880)

1.075555281s ago: executing program 1 (id=4799):
socket$kcm(0x2, 0x200000000000001, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$make_it_fail(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0)
close(0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x20c03, 0x0)
r1 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_control_io$cdc_ncm(r1, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, &(0x7f00000020c0)=ANY=[@ANYBLOB="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", @ANYRES64=r0])

1.020221801s ago: executing program 9 (id=4800):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/afs/sysname\x00', 0x0, 0x23)
pread64(r0, &(0x7f0000000380)=""/48, 0x30, 0x7)

1.019795803s ago: executing program 6 (id=4801):
socket(0x1d, 0x2, 0x6)
r0 = syz_io_uring_setup(0xf00, &(0x7f0000000000)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f00000002c0)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}})
io_uring_enter(r0, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0)

1.019224469s ago: executing program 6 (id=4802):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3}, 0xc)
r4 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f00000000c0)={{@hyper, 0xfffffffc}, 0x1, 0x1, 0x4})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0x4, 0x0, &(0x7f0000000200)="63eced8e", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
close(r6)
getsockopt$sock_buf(r7, 0x1, 0x1c, 0x0, &(0x7f0000000040))
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt_trace\x00', 0x1ff)

967.163154ms ago: executing program 9 (id=4803):
r0 = openat$sysfs(0xffffff9c, &(0x7f0000000240)='/sys/power/reserved_size', 0x40000, 0x16)
finit_module(r0, 0x0, 0x2)

912.792649ms ago: executing program 9 (id=4804):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r3=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, r3, 0x25, 0x2, @void}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000280)={@random="458f88c1044f", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x31, 0x1c, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010101, @local}, {0x17, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}}}}}, 0x0)

758.307974ms ago: executing program 9 (id=4805):
unshare(0x20000400)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000090000000700000000000008000000000000000000000461"], 0x0, 0x2d}, 0x28)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r0, 0x86, &(0x7f00000002c0)}, 0x10)

564.830938ms ago: executing program 9 (id=4806):
unshare(0x26020480)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x28c, 0x1}, {0x7}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@mcast1, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x2f}, {0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x400000000}, 0x3, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@local, 0x1, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x3d}, 0x0, 0x0, 0x0, 0xb7}}, 0xe8)

0s ago: executing program 6 (id=4807):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)

kernel console output (not intermixed with test programs):

z-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2185d9e159 code=0x7ffc0000
[  235.022592][   T33] audit: type=1326 audit(2000000417.879:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12959 comm="syz.7.2962" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f2185d9e159 code=0x7ffc0000
[  235.056078][T12968] netlink: 'syz.7.2965': attribute type 22 has an invalid length.
[  235.059528][T12968] netlink: 'syz.7.2965': attribute type 22 has an invalid length.
[  235.062051][T12968] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2965'.
[  235.338419][T12972] loop7: detected capacity change from 0 to 32768
[  235.364832][T12972] XFS (loop7): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  235.380642][T12972] XFS (loop7): Ending clean mount
[  235.414470][T12065] XFS (loop7): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  235.565813][T13003] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2977'.
[  235.570381][T13003] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2977'.
[  235.573291][T13003] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2977'.
[  235.911530][T13020] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2984'.
[  235.951079][T13020] bond0: entered promiscuous mode
[  235.965511][T13020] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  235.995474][T13024] bond0: invalid ARP target specified
[  237.363843][T13063] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  237.522387][T13069] RDS: rds_bind could not find a transport for a:0:20::, load rds_tcp or rds_rdma?
[  238.004855][T13096] ip6tnl1: entered promiscuous mode
[  238.732751][T13130] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  238.737690][T13130] IPv6: NLM_F_CREATE should be set when creating new route
[  238.740987][T13130] IPv6: NLM_F_CREATE should be set when creating new route
[  239.780784][T13146] netlink: 'syz.2.3032': attribute type 6 has an invalid length.
[  240.304902][T13193] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3053'.
[  240.310391][T13195] 9pnet_fd: p9_fd_create_unix (13195): problem connecting socket: ./file0: -111
[  240.499300][T13212] : renamed from bond_slave_0
[  240.590507][   T54] Bluetooth: hci2: unexpected cc 0x042d length: 1 < 7
[  240.593375][   T54] Bluetooth: hci2: unexpected event for opcode 0x042d
[  241.999414][T13276] syzkaller0: entered promiscuous mode
[  242.001265][T13276] syzkaller0: entered allmulticast mode
[  243.452441][T13323] input: syz1 as /devices/virtual/input/input6
[  244.036852][   T54] Bluetooth: hci2: Ignoring connect complete event for invalid link type
[  244.577036][T13348] binder: 13347:13348 ioctl c0306201 200000000040 returned -14
[  245.112877][T13383] netlink: 136 bytes leftover after parsing attributes in process `syz.6.3139'.
[  245.116768][T13383] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  246.404118][T13418] 8021q: adding VLAN 0 to HW filter on device bond0
[  246.445744][T13418] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  246.455492][T13418] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  247.965274][T13481] MTD: Couldn't look up '/dev/nullb0': -15
[  248.620830][T13500] loop7: detected capacity change from 0 to 512
[  248.656001][T13500] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  248.665766][T13500] ext4 filesystem being mounted at /119/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  248.682748][T13500] fs-verity (loop7, inode 15): Unrecognized descriptor size: 0 bytes
[  248.713740][T12065] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  249.038657][T13522] xt_time: unknown flags 0x50
[  250.673738][T13560] netlink: 'syz.2.3217': attribute type 23 has an invalid length.
[  250.678995][T13560] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3217'.
[  250.835860][T13572] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3224'.
[  251.112113][T13599] fuse: fd is not a fuse device
[  251.363623][T13605] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3238'.
[  251.366490][T13605] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3238'.
[  251.381612][T13605] netlink: 'syz.7.3238': attribute type 7 has an invalid length.
[  251.403594][ T7256] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  251.411198][ T7256] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  251.415500][ T7256] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  251.418602][ T7256] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  251.421589][T13608] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4
[  251.508826][T13612] FAULT_INJECTION: forcing a failure.
[  251.508826][T13612] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  251.514708][T13612] CPU: 1 UID: 0 PID: 13612 Comm: syz.7.3242 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  251.514732][T13612] Tainted: [L]=SOFTLOCKUP
[  251.514737][T13612] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  251.514745][T13612] Call Trace:
[  251.514752][T13612]  <TASK>
[  251.514758][T13612]  dump_stack_lvl+0xe8/0x150
[  251.514804][T13612]  should_fail_ex+0x410/0x560
[  251.514823][T13612]  prepare_alloc_pages+0x230/0x650
[  251.514848][T13612]  __alloc_frozen_pages_noprof+0x12f/0x380
[  251.514870][T13612]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  251.514888][T13612]  ? __alloc_frozen_pages_noprof+0x1db/0x380
[  251.514909][T13612]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  251.514931][T13612]  ? __pfx_policy_nodemask+0x10/0x10
[  251.514944][T13612]  ? __get_vm_area_node+0x155/0x2f0
[  251.514960][T13612]  ? vmap+0x162/0x310
[  251.514975][T13612]  ? bpf_ringbuf_alloc+0x322/0x5b0
[  251.514994][T13612]  __alloc_pages_noprof+0x10/0x100
[  251.515014][T13612]  alloc_pages_bulk_noprof+0x5f7/0x7c0
[  251.515037][T13612]  ? alloc_pages_noprof+0x140/0x2b0
[  251.515053][T13612]  __kasan_populate_vmalloc+0xb7/0x1c0
[  251.515075][T13612]  alloc_vmap_area+0xd1a/0x1420
[  251.515100][T13612]  ? __pfx_alloc_vmap_area+0x10/0x10
[  251.515114][T13612]  ? __kmalloc_cache_node_noprof+0x3d2/0x630
[  251.515132][T13612]  ? __kmalloc_cache_node_noprof+0x1f4/0x630
[  251.515149][T13612]  ? __get_vm_area_node+0x155/0x2f0
[  251.515163][T13612]  ? __get_vm_area_node+0x155/0x2f0
[  251.515180][T13612]  __get_vm_area_node+0x200/0x2f0
[  251.515197][T13612]  ? bpf_ringbuf_alloc+0x322/0x5b0
[  251.515214][T13612]  vmap+0x162/0x310
[  251.515229][T13612]  ? bpf_ringbuf_alloc+0x322/0x5b0
[  251.515247][T13612]  bpf_ringbuf_alloc+0x322/0x5b0
[  251.515266][T13612]  ringbuf_map_alloc+0x1f1/0x330
[  251.515284][T13612]  map_create+0xf2a/0x1b90
[  251.515308][T13612]  ? __pfx_map_create+0x10/0x10
[  251.515332][T13612]  ? bpf_lsm_bpf+0x9/0x20
[  251.515349][T13612]  ? security_bpf+0x7e/0x2d0
[  251.515365][T13612]  __sys_bpf+0xaea/0xd90
[  251.515387][T13612]  ? __pfx___sys_bpf+0x10/0x10
[  251.515407][T13612]  ? do_futex+0x3e7/0x4e0
[  251.515436][T13612]  ? ksys_write+0x242/0x270
[  251.515452][T13612]  ? rcu_is_watching+0x16/0xb0
[  251.515469][T13612]  __x64_sys_bpf+0xba/0xd0
[  251.515488][T13612]  do_syscall_64+0x166/0x520
[  251.515531][T13612]  ? trace_irq_disable+0x3b/0x140
[  251.515550][T13612]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  251.515567][T13612]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  251.515581][T13612] RIP: 0033:0x7f2185d9e159
[  251.515595][T13612] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  251.515607][T13612] RSP: 002b:00007f2186c9a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  251.515624][T13612] RAX: ffffffffffffffda RBX: 00007f2186025fa0 RCX: 00007f2185d9e159
[  251.515634][T13612] RDX: 0000000000000050 RSI: 0000200000000800 RDI: 0000000000000000
[  251.515643][T13612] RBP: 00007f2185e3506b R08: 0000000000000000 R09: 0000000000000000
[  251.515651][T13612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  251.515660][T13612] R13: 00007f2186026038 R14: 00007f2186025fa0 R15: 00007ffcc2f6b588
[  251.515687][T13612]  </TASK>
[  251.752983][T13618] FAULT_INJECTION: forcing a failure.
[  251.752983][T13618] name failslab, interval 1, probability 0, space 0, times 0
[  251.765123][T13618] CPU: 0 UID: 0 PID: 13618 Comm: syz.7.3245 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  251.765148][T13618] Tainted: [L]=SOFTLOCKUP
[  251.765152][T13618] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  251.765160][T13618] Call Trace:
[  251.765166][T13618]  <TASK>
[  251.765173][T13618]  dump_stack_lvl+0xe8/0x150
[  251.765199][T13618]  should_fail_ex+0x410/0x560
[  251.765240][T13618]  should_failslab+0xa8/0x100
[  251.765264][T13618]  kmem_cache_alloc_lru_noprof+0xa7/0x5f0
[  251.765285][T13618]  ? proc_alloc_inode+0x2a/0xc0
[  251.765302][T13618]  ? proc_alloc_inode+0x2a/0xc0
[  251.765320][T13618]  ? __pfx_proc_alloc_inode+0x10/0x10
[  251.765336][T13618]  proc_alloc_inode+0x2a/0xc0
[  251.765350][T13618]  alloc_inode+0x6a/0x1b0
[  251.765369][T13618]  new_inode+0x1f/0x170
[  251.765387][T13618]  ? proc_pid_make_inode+0x19/0x130
[  251.765407][T13618]  proc_pid_make_inode+0x21/0x130
[  251.765426][T13618]  proc_ns_instantiate+0x53/0xf0
[  251.765444][T13618]  proc_fill_cache+0x2a8/0x390
[  251.765462][T13618]  ? __pfx_proc_ns_instantiate+0x10/0x10
[  251.765477][T13618]  ? __pfx_proc_fill_cache+0x10/0x10
[  251.765493][T13618]  ? filldir64+0x429/0x620
[  251.765546][T13618]  proc_ns_dir_readdir+0x2f1/0x3d0
[  251.765566][T13618]  iterate_dir+0x2e2/0x4d0
[  251.765587][T13618]  __se_sys_getdents64+0xf1/0x280
[  251.765606][T13618]  ? __pfx___se_sys_getdents64+0x10/0x10
[  251.765624][T13618]  ? __pfx_filldir64+0x10/0x10
[  251.765648][T13618]  ? rcu_is_watching+0x16/0xb0
[  251.765670][T13618]  do_syscall_64+0x166/0x520
[  251.765690][T13618]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  251.765708][T13618]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  251.765722][T13618] RIP: 0033:0x7f2185d9e159
[  251.765735][T13618] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  251.765747][T13618] RSP: 002b:00007f2186c9a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[  251.765762][T13618] RAX: ffffffffffffffda RBX: 00007f2186025fa0 RCX: 00007f2185d9e159
[  251.765773][T13618] RDX: 0000000000000077 RSI: 0000200000000200 RDI: 0000000000000004
[  251.765780][T13618] RBP: 00007f2185e3506b R08: 0000000000000000 R09: 0000000000000000
[  251.765787][T13618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  251.765796][T13618] R13: 00007f2186026038 R14: 00007f2186025fa0 R15: 00007ffcc2f6b588
[  251.765815][T13618]  </TASK>
[  252.971944][T13648] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3259'.
[  252.978532][T13648] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3259'.
[  252.986783][T13648] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3259'.
[  253.133078][T13655] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3262'.
[  253.401352][T13673] loop7: detected capacity change from 0 to 2048
[  253.411635][T13673] EXT4-fs: Ignoring removed nomblk_io_submit option
[  253.435719][T13673] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  254.177936][T13673] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.3271: bg 0: block 2: invalid block bitmap
[  254.188091][T13673] EXT4-fs (loop7): Remounting filesystem read-only
[  254.192689][T13673] EXT4-fs (loop7): error restoring inline_data for inode -- potential data loss! (inode 18, error -30)
[  254.224220][T12065] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  254.266478][T13713] netlink: 'syz.2.3291': attribute type 2 has an invalid length.
[  255.127948][T13747] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3304'.
[  255.736594][T13781] netlink: 732 bytes leftover after parsing attributes in process `syz.2.3322'.
[  255.791089][T13783] netlink: 'syz.6.3319': attribute type 12 has an invalid length.
[  256.851631][T13820] __nla_validate_parse: 1 callbacks suppressed
[  256.851647][T13820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3339'.
[  257.038669][T13831] syzkaller1: entered promiscuous mode
[  257.043753][T13831] syzkaller1: entered allmulticast mode
[  257.249416][T13844] xt_hashlimit: size too large, truncated to 1048576
[  257.481886][   T33] audit: type=1800 audit(2000000438.686:618): pid=13848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3351" name="bus" dev="tmpfs" ino=4405 res=0 errno=0
[  257.808526][   T33] audit: type=1326 audit(2000000438.991:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13857 comm="syz.7.3356" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2185d9e159 code=0x7ffc0000
[  257.823066][   T33] audit: type=1326 audit(2000000438.991:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13857 comm="syz.7.3356" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2185d9e159 code=0x7ffc0000
[  257.834300][   T33] audit: type=1326 audit(2000000439.000:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13857 comm="syz.7.3356" exe="/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f2185d9e159 code=0x7ffc0000
[  257.856112][   T33] audit: type=1326 audit(2000000439.000:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13857 comm="syz.7.3356" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2185d9e159 code=0x7ffc0000
[  257.872175][   T33] audit: type=1326 audit(2000000439.000:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13857 comm="syz.7.3356" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2185d9e159 code=0x7ffc0000
[  257.891572][   T33] audit: type=1326 audit(2000000439.009:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13857 comm="syz.7.3356" exe="/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f2185d9e159 code=0x7ffc0000
[  257.902759][   T33] audit: type=1326 audit(2000000439.009:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13857 comm="syz.7.3356" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2185d9e159 code=0x7ffc0000
[  257.906870][T13868] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3361'.
[  257.913630][   T33] audit: type=1326 audit(2000000439.009:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13857 comm="syz.7.3356" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2185d9e159 code=0x7ffc0000
[  257.928597][   T33] audit: type=1326 audit(2000000439.009:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13857 comm="syz.7.3356" exe="/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f2185d9e159 code=0x7ffc0000
[  257.933286][T13868] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3361'.
[  258.012691][T13874] ip_tables: iptables: counters copy to user failed while replacing table
[  258.430665][T13911] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3379'.
[  259.531085][T13954] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  259.777280][T13967] loop7: detected capacity change from 0 to 32768
[  259.790184][T13967] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  259.931265][T12065] ocfs2: Unmounting device (7,7) on (node local)
[  260.081873][   T24] IPVS: starting estimator thread 0...
[  260.183981][T13995] IPVS: using max 90 ests per chain, 216000 per kthread
[  260.912418][T14047] netlink: 'syz.2.3443': attribute type 32 has an invalid length.
[  260.946604][T14050] CIFS mount error: No usable UNC path provided in device string!
[  260.946604][T14050] 
[  260.952694][T14050] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  261.013706][T14052] netlink: 'syz.2.3445': attribute type 11 has an invalid length.
[  261.202576][T14062] netlink: 3 bytes leftover after parsing attributes in process `syz.7.3450'.
[  261.325354][T14058] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  261.557526][T14058] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  261.613646][T14091] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3464'.
[  261.712330][T14058] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  261.794407][T14058] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  261.925702][   T12] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  261.950380][   T12] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  261.953734][   T12] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  261.958273][   T12] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  262.709718][T14120] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3478'.
[  262.864923][T14130] netlink: 'syz.6.3483': attribute type 5 has an invalid length.
[  262.868212][T14130] netlink: 'syz.6.3483': attribute type 2 has an invalid length.
[  263.333694][T14172] overlayfs: failed to clone upperpath
[  264.544067][T14244] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3535'.
[  264.565012][T14246] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3536'.
[  264.569174][T14246] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3536'.
[  264.779737][T14264] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3544'.
[  264.807992][T14264] bond1: peer notification delay (2365) is not a multiple of miimon (80), value rounded to 2320 ms
[  264.827581][T14264] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3544'.
[  264.831857][T14264] bond1: Unable to set peer notification delay as MII monitoring is disabled
[  265.533866][T14293] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3557'.
[  265.541453][T14293] openvswitch: netlink: Missing key (keys=c0, expected=880)
[  266.400946][T14324] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3572'.
[  266.582204][   T54] Bluetooth: hci2: Malformed HCI Event: 0x22
[  266.620806][   T33] kauditd_printk_skb: 41 callbacks suppressed
[  266.620828][   T33] audit: type=1326 audit(2000000447.119:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14339 comm="syz.2.3580" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbddbd9e159 code=0x7ffc0000
[  266.633587][   T33] audit: type=1326 audit(2000000447.119:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14339 comm="syz.2.3580" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbddbd9e159 code=0x7ffc0000
[  266.642744][   T33] audit: type=1326 audit(2000000447.119:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14339 comm="syz.2.3580" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbddbd9e159 code=0x7ffc0000
[  266.651947][   T33] audit: type=1326 audit(2000000447.119:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14339 comm="syz.2.3580" exe="/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fbddbd9f9fa code=0x7ffc0000
[  266.660882][   T33] audit: type=1326 audit(2000000447.119:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14339 comm="syz.2.3580" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbddbd9e159 code=0x7ffc0000
[  266.672423][   T33] audit: type=1326 audit(2000000447.119:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14339 comm="syz.2.3580" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbddbd5e98e code=0x7ffc0000
[  266.682482][   T33] audit: type=1326 audit(2000000447.119:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14339 comm="syz.2.3580" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbddbd9e159 code=0x7ffc0000
[  266.691621][   T33] audit: type=1326 audit(2000000447.138:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14339 comm="syz.2.3580" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fbddbd9e159 code=0x7ffc0000
[  266.700645][   T33] audit: type=1326 audit(2000000447.138:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14339 comm="syz.2.3580" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbddbd5e98e code=0x7ffc0000
[  266.709643][   T33] audit: type=1326 audit(2000000447.138:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14339 comm="syz.2.3580" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbddbd9e159 code=0x7ffc0000
[  268.478544][T14408] ip6tnl2: entered promiscuous mode
[  268.488877][T14409] vcan1: entered promiscuous mode
[  268.498164][T14409] vcan1: entered allmulticast mode
[  268.538426][T14413] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  268.584507][T14415] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  269.037350][T14470] netlink: 'syz.2.3640': attribute type 9 has an invalid length.
[  269.192756][T14484] netlink: 15143 bytes leftover after parsing attributes in process `syz.6.3647'.
[  269.228150][T14486] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3648'.
[  269.302929][T14490] netlink: 124 bytes leftover after parsing attributes in process `syz.2.3649'.
[  270.963685][T14538] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3671'.
[  270.967353][T14538] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3671'.
[  271.091742][ T1375] ieee802154 phy0 wpan0: encryption failed: -22
[  271.098009][ T1375] ieee802154 phy1 wpan1: encryption failed: -22
[  271.109193][T14544] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3674'.
[  271.758921][T14572] bridge0: port 1(bond0) entered blocking state
[  271.761154][T14572] bridge0: port 1(bond0) entered disabled state
[  271.763562][T14572] bond0: entered allmulticast mode
[  271.770708][T14572] bond0: left allmulticast mode
[  272.113719][T14566] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3685'.
[  272.117384][T14566] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  272.149624][T14566] batman_adv: batadv0: Removing interface: batadv_slave_1
[  272.546730][T14580] netlink: 'syz.2.3690': attribute type 4 has an invalid length.
[  272.955141][T14608] netlink: 'syz.6.3701': attribute type 8 has an invalid length.
[  273.979969][   T33] kauditd_printk_skb: 6 callbacks suppressed
[  273.979978][   T33] audit: type=1326 audit(2000000453.911:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14643 comm="syz.6.3719" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f355e99e159 code=0x0
[  274.527069][T14675] fuse: fd is not a fuse device
[  274.787618][T14695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3742'.
[  275.385182][T14729] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3759'.
[  276.146637][   T33] audit: type=1326 audit(2000000455.913:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14740 comm="syz.2.3765" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbddbd9e159 code=0x7ffc0000
[  276.154849][   T33] audit: type=1326 audit(2000000455.913:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14740 comm="syz.2.3765" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbddbd9e159 code=0x7ffc0000
[  276.163817][   T33] audit: type=1326 audit(2000000455.913:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14740 comm="syz.2.3765" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbddbd9e159 code=0x7ffc0000
[  276.172813][   T33] audit: type=1326 audit(2000000455.913:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14740 comm="syz.2.3765" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbddbd9e159 code=0x7ffc0000
[  276.181642][   T33] audit: type=1326 audit(2000000455.913:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14740 comm="syz.2.3765" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbddbd9e159 code=0x7ffc0000
[  276.452164][   T54] Bluetooth: hci2: unexpected event for opcode 0x1001
[  277.531663][T14801] x_tables: unsorted underflow at hook 2
[  278.102048][T14812] overlayfs: failed to clone upperpath
[  278.537735][T14817] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3800'.
[  278.561941][ T5600] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  278.574450][ T5600] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  278.577519][ T5600] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  278.584943][ T5600] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  278.587576][ T5600] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  278.954214][T14818] bridge0: port 1(bridge_slave_0) entered blocking state
[  278.956488][T14818] bridge0: port 1(bridge_slave_0) entered disabled state
[  278.958884][T14818] bridge_slave_0: entered allmulticast mode
[  278.961576][T14818] bridge_slave_0: entered promiscuous mode
[  278.965330][T14818] bridge0: port 2(bridge_slave_1) entered blocking state
[  278.967700][T14818] bridge0: port 2(bridge_slave_1) entered disabled state
[  278.969994][T14818] bridge_slave_1: entered allmulticast mode
[  278.972695][T14818] bridge_slave_1: entered promiscuous mode
[  278.989824][T14818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  278.994955][T14818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  279.012661][T14818] team0: Port device team_slave_0 added
[  279.015857][T14818] team0: Port device team_slave_1 added
[  279.031638][T14818] batman_adv: batadv0: Adding interface: batadv_slave_0
[  279.033837][T14818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  279.041874][T14818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  279.045908][T14818] batman_adv: batadv0: Adding interface: batadv_slave_1
[  279.048122][T14818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  279.056114][T14818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  279.082963][T14818] hsr_slave_0: entered promiscuous mode
[  279.085268][T14818] hsr_slave_1: entered promiscuous mode
[  279.087320][T14818] debugfs: 'hsr0' already exists in 'hsr'
[  279.089361][T14818] Cannot create hsr debugfs directory
[  279.220096][T14818] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  279.224456][T14818] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  279.227074][T14818] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  279.232017][T14818] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  279.235366][T14818] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  279.240188][T14818] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  279.243185][T14818] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  279.248485][T14818] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  279.268229][T14818] bridge0: port 2(bridge_slave_1) entered blocking state
[  279.270508][T14818] bridge0: port 2(bridge_slave_1) entered forwarding state
[  279.272784][T14818] bridge0: port 1(bridge_slave_0) entered blocking state
[  279.274924][T14818] bridge0: port 1(bridge_slave_0) entered forwarding state
[  279.308251][T14818] 8021q: adding VLAN 0 to HW filter on device bond0
[  279.317070][ T1108] bridge0: port 1(bridge_slave_0) entered disabled state
[  279.319753][ T1108] bridge0: port 2(bridge_slave_1) entered disabled state
[  279.327330][T14818] 8021q: adding VLAN 0 to HW filter on device team0
[  279.333133][ T1105] bridge0: port 1(bridge_slave_0) entered blocking state
[  279.335513][ T1105] bridge0: port 1(bridge_slave_0) entered forwarding state
[  279.340870][ T1105] bridge0: port 2(bridge_slave_1) entered blocking state
[  279.343140][ T1105] bridge0: port 2(bridge_slave_1) entered forwarding state
[  279.544845][T14818] 8021q: adding VLAN 0 to HW filter on device batadv0
[  279.699499][T14818] veth0_vlan: entered promiscuous mode
[  279.711330][T14818] veth1_vlan: entered promiscuous mode
[  279.739521][T14818] veth0_macvtap: entered promiscuous mode
[  279.747505][T14818] veth1_macvtap: entered promiscuous mode
[  279.763742][T14818] batman_adv: batadv0: Interface activated: batadv_slave_0
[  279.778455][T14818] batman_adv: batadv0: Interface activated: batadv_slave_1
[  279.853385][ T7256] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  279.873747][ T7256] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  279.899162][   T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  279.922689][   T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  279.962738][ T7612] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  279.973127][ T7612] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  280.005543][ T7612] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  280.009171][ T7612] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  280.140134][T14883] input: syz0 as /devices/virtual/input/input7
[  280.192169][   T54] Bluetooth: hci2: unexpected event for opcode 0x0c26
[  280.456975][   T33] audit: type=1326 audit(2000000459.880:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14902 comm="syz.8.3821" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2dd659e159 code=0x0
[  280.488890][T14907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3823'.
[  280.521596][T14908] loop8: detected capacity change from 0 to 2048
[  280.531710][T14910] sctp: [Deprecated]: syz.2.3824 (pid 14910) Use of struct sctp_assoc_value in delayed_ack socket option.
[  280.531710][T14910] Use struct sctp_sack_info instead
[  280.586798][T14908]  loop8: p3 p4 < >
[  280.591688][T14908] loop8: p3 start 4284289 is beyond EOD, truncated
[  280.649584][ T5039]  loop8: p3 p4 < >
[  280.657571][ T5039] loop8: p3 start 4284289 is beyond EOD, truncated
[  280.795543][   T54] Bluetooth: hci4: command tx timeout
[  280.837235][T14925] netlink: 'syz.2.3832': attribute type 1 has an invalid length.
[  280.839958][T14925] nbd: illegal input index 393222
[  281.194184][T14942] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3839'.
[  281.197813][T14942] unsupported nlmsg_type 40
[  281.300298][   T54] Bluetooth: hci2: unexpected event for opcode 0x0803
[  281.340301][T14948] netlink: 'syz.2.3842': attribute type 1 has an invalid length.
[  281.343286][T14948] netlink: 'syz.2.3842': attribute type 2 has an invalid length.
[  281.418379][T14952] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3844'.
[  281.426262][T14952] netlink: 'syz.8.3844': attribute type 2 has an invalid length.
[  281.434161][T14952] netlink: 128 bytes leftover after parsing attributes in process `syz.8.3844'.
[  281.690541][T14977] loop8: detected capacity change from 0 to 128
[  281.700699][T14977] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256
[  281.709434][T14977] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  281.929095][T15002] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3867'.
[  281.932063][T15002] tipc: Invalid UDP bearer configuration
[  281.932089][T15002] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  282.161111][T15026] loop8: detected capacity change from 0 to 8
[  282.346777][T15032] loop8: detected capacity change from 0 to 4096
[  282.352663][T15032] EXT4-fs: Ignoring removed nobh option
[  282.363290][T15032] EXT4-fs: Ignoring removed bh option
[  282.371342][T15032] EXT4-fs (loop8): Test dummy encryption mode enabled
[  282.379805][T15032] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  282.412354][T14818] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  282.605920][   T33] audit: type=1326 audit(2000000461.873:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15043 comm="syz.8.3888" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2dd659e159 code=0x0
[  282.653690][T15048] CIFS: Attempting to mount //127.0.0.1/share
[  282.661064][T15048] CIFS: VFS: Error connecting to socket. Aborting operation.
[  282.663858][T15048] CIFS: VFS: cifs_mount failed w/return code = -111
[  283.754144][   T54] Bluetooth: hci4: command tx timeout
[  283.755907][T15064] bond2: option arp_all_targets: invalid value (2097152)
[  283.764508][T15064] bond2 (unregistering): Released all slaves
[  283.959713][T15079] /dev/nullb0: Can't lookup blockdev
[  284.078101][ T9083] usb 9-1: new full-speed USB device number 2 using dummy_hcd
[  284.241720][ T9083] usb 9-1: not running at top speed; connect to a high speed hub
[  284.246144][ T9083] usb 9-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 0.00
[  284.250690][ T9083] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  284.255812][ T9083] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  284.264976][ T9083] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  284.269574][ T9083] usb 9-1: Product: syz
[  284.271559][ T9083] usb 9-1: Manufacturer: syz
[  284.274430][ T9083] usb 9-1: SerialNumber: syz
[  284.278685][T15072] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  284.284394][T15072] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  284.290610][ T9083] ums_eneub6250 9-1:1.0: USB Mass Storage device detected
[  284.306906][ T9083] scsi host6: usb-storage 9-1:1.0
[  284.387582][ T9083] ums_eneub6250 9-1:1.0: probe with driver ums_eneub6250 failed with error 3
[  284.517152][ T9083] usb 9-1: USB disconnect, device number 2
[  284.895680][   T33] audit: type=1800 audit(2000000463.986:693): pid=15093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3904" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[  285.158617][T15117] xt_hashlimit: size too large, truncated to 1048576
[  285.216326][T15124] xt_hashlimit: size too large, truncated to 1048576
[  285.219204][T15126] tipc: Can't bind to reserved service type 0
[  285.338701][T15135] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3921'.
[  285.502196][T15143] loop8: detected capacity change from 0 to 8192
[  285.505098][T15143] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512).
[  285.595825][T15143] ntfs3(loop8): Mark volume as dirty due to NTFS errors
[  285.611352][T15143] ntfs3(loop8): Failed to load $Extend (-2).
[  285.614390][T15143] ntfs3(loop8): Failed to initialize $Extend.
[  285.618348][T15143] ntfs3(loop8): Failed to load root (-22).
[  285.917653][T15156] netlink: 'syz.8.3928': attribute type 2 has an invalid length.
[  285.922878][T15156] netlink: 11575 bytes leftover after parsing attributes in process `syz.8.3928'.
[  285.927054][T15156] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3928'.
[  286.003485][T15162] loop8: detected capacity change from 0 to 16
[  286.008385][   T54] Bluetooth: hci4: command tx timeout
[  286.033948][T15162] erofs (device loop8): mounted with root inode @ nid 36.
[  286.255995][   T54] Bluetooth: hci2: ACL packet for unknown connection handle 201
[  286.264615][   T33] audit: type=1326 audit(2000000465.241:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15181 comm="syz.8.3940" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2dd659e159 code=0x0
[  287.576325][T15220] loop8: detected capacity change from 0 to 256
[  288.016603][T15259] loop8: detected capacity change from 0 to 512
[  288.025129][T15259] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  288.033315][T15259] EXT4-fs (loop8): 1 truncate cleaned up
[  288.037589][T15259] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  288.080619][T14818] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  288.115676][T15272] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3983'.
[  288.208654][   T33] audit: type=1326 audit(2000000467.041:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15284 comm="syz.2.3989" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbddbd9e159 code=0x7ffc0000
[  288.215525][   T33] audit: type=1326 audit(2000000467.041:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15284 comm="syz.2.3989" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbddbd9e159 code=0x7ffc0000
[  288.222744][   T33] audit: type=1326 audit(2000000467.041:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15284 comm="syz.2.3989" exe="/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fbddbd9e159 code=0x7ffc0000
[  288.230009][   T33] audit: type=1326 audit(2000000467.041:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15284 comm="syz.2.3989" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbddbd9e159 code=0x7ffc0000
[  288.237519][   T33] audit: type=1326 audit(2000000467.041:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15284 comm="syz.2.3989" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbddbd9e159 code=0x7ffc0000
[  288.245130][   T33] audit: type=1326 audit(2000000467.041:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15284 comm="syz.2.3989" exe="/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7fbddbd9e159 code=0x7ffc0000
[  288.253911][   T33] audit: type=1326 audit(2000000467.041:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15284 comm="syz.2.3989" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbddbd9e159 code=0x7ffc0000
[  288.262729][   T33] audit: type=1326 audit(2000000467.041:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15284 comm="syz.2.3989" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbddbd9e159 code=0x7ffc0000
[  288.344887][T15294] binder: 15293:15294 ioctl c0306201 2000000001c0 returned -14
[  288.435876][T15306] overlayfs: failed to clone upperpath
[  288.572181][T15317] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  288.583960][T15317] batman_adv: batadv0: Adding interface: macsec1
[  288.586446][T15317] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  288.603878][T15317] batman_adv: batadv0: Interface activated: macsec1
[  288.621675][ T5057] IPVS: starting estimator thread 0...
[  288.638855][T15321] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0
[  288.656097][T15319] nvme_fabrics: no handler found for transport fc-raddrR+0x333:pn-0x0444444444444444+host_traddr?nn-0x11111111111111117x:pn-0x22r222.
[  288.667931][T15319] bridge0: port 3(bond0) entered blocking state
[  288.670649][T15319] bridge0: port 3(bond0) entered disabled state
[  288.673803][T15319] bond0: entered allmulticast mode
[  288.676051][T15319] bond_slave_0: entered allmulticast mode
[  288.678515][T15319] bond_slave_1: entered allmulticast mode
[  288.683019][T15319] bond0: entered promiscuous mode
[  288.685496][T15319] bond_slave_0: entered promiscuous mode
[  288.688023][T15319] bond_slave_1: entered promiscuous mode
[  288.691125][T15319] bridge0: port 3(bond0) entered blocking state
[  288.693743][T15319] bridge0: port 3(bond0) entered forwarding state
[  288.727533][T15320] IPVS: using max 50 ests per chain, 120000 per kthread
[  288.811132][T15333] loop8: detected capacity change from 0 to 512
[  288.820527][T15333] EXT4-fs (loop8): revision level too high, forcing read-only mode
[  288.824362][T15333] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  288.828471][T15333] System zones: 0-1, 15-15, 18-18, 34-34
[  288.831354][T15333] EXT4-fs (loop8): orphan cleanup on readonly fs
[  288.833517][T15333] Quota error (device loop8): v2_read_header: Failed header read: expected=8 got=0
[  288.838841][T15333] EXT4-fs warning (device loop8): ext4_enable_quotas:7284: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  288.844058][T15333] EXT4-fs (loop8): Cannot turn on quotas: error -22
[  288.848237][T15333] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.4009: bg 0: block 40: padding at end of block bitmap is not set
[  288.852921][T15333] loop8: lost filesystem error report for type 5 error -117
[  288.853109][T15333] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  288.858740][    C1] EXT4-fs (loop8): error count since last fsck: 1
[  288.858749][    C1] EXT4-fs (loop8): initial error at time 2000000467: ext4_validate_block_bitmap:441
[  288.858760][    C1] EXT4-fs (loop8): last error at time 2000000467: ext4_validate_block_bitmap:441
[  288.871729][T15333] loop8: lost filesystem error report for type 5 error -117
[  288.873859][T15333] EXT4-fs (loop8): 1 truncate cleaned up
[  288.881728][T15333] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  288.889898][T15333] EXT4-fs error (device loop8): ext4_encrypted_get_link:46: inode #16: comm syz.8.4009: bad symlink.
[  288.909497][T14818] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  291.031474][T15386] netdevsim netdevsim8 netdevsim0: entered allmulticast mode
[  291.130697][T15387] 8021q: adding VLAN 0 to HW filter on device bond1
[  291.135803][T15387] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check.
[  291.326406][T15404] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4040'.
[  291.370540][T15408] loop8: detected capacity change from 0 to 512
[  291.393183][T15408] EXT4-fs (loop8): revision level too high, forcing read-only mode
[  291.402954][T15408] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002]
[  291.411086][T15408] EXT4-fs (loop8): orphan cleanup on readonly fs
[  291.417475][T15408] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #13: comm syz.8.4042: iget: bad i_size value: 12154761577498
[  291.421490][T15408] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  291.421704][T15408] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.4042: couldn't read orphan inode 13 (err -117)
[  291.429229][    C0] EXT4-fs (loop8): error count since last fsck: 1
[  291.431618][    C0] EXT4-fs (loop8): initial error at time 2000000470: ext4_orphan_get:1399: inode 13
[  291.434905][    C0] EXT4-fs (loop8): last error at time 2000000470: ext4_orphan_get:1399: inode 13
[  291.441700][T15408] loop8: lost filesystem error report for type 5 error -117
[  291.442695][T15408] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  291.452632][T15408] EXT4-fs warning (device loop8): dx_probe:861: inode #2: comm syz.8.4042: dx entry: limit 65535 != root limit 120
[  291.459125][T15408] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.4042: Corrupt directory, running e2fsck is recommended
[  291.475349][T14818] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  291.591107][T15419] loop8: detected capacity change from 0 to 512
[  291.595833][T15419] EXT4-fs: Ignoring removed bh option
[  291.603811][T15419] EXT4-fs: Ignoring removed mblk_io_submit option
[  291.630361][T15419] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  291.637555][T15419] ext4 filesystem being mounted at /73/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  291.657130][T15426] netlink: Unknown NAT attribute (type=16383, max=9)
[  291.659649][T15426] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  292.436912][T15445] xt_CT: You must specify a L4 protocol and not use inversions on it
[  292.585144][   T10] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  292.771932][   T10] usb 9-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40
[  292.778675][   T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  292.782101][   T10] usb 9-1: Product: syz
[  292.785143][   T10] usb 9-1: Manufacturer: syz
[  292.786989][   T10] usb 9-1: SerialNumber: syz
[  292.959334][T15448] fuse: fd is not a fuse device
[  293.020781][   T10] usb 9-1: Quirk or no altset; falling back to MIDI 1.0
[  293.027868][   T10] usb 9-1: MIDIStreaming interface descriptor not found
[  293.082671][   T10] usb 9-1: USB disconnect, device number 3
[  293.152622][T15457] udevd[15457]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  293.585552][T14818] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  293.736831][T15473] loop8: detected capacity change from 0 to 1024
[  293.803669][T15477] netlink: 'syz.6.4070': attribute type 4 has an invalid length.
[  293.877528][T15479] netlink: 27 bytes leftover after parsing attributes in process `syz.8.4071'.
[  293.980758][T15487] loop8: detected capacity change from 0 to 16
[  293.990417][T15487] MTD: Attempt to mount non-MTD device "/dev/loop8"
[  294.417583][   T10] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  294.478281][T15497] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4078'.
[  294.591241][   T10] usb 9-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00
[  294.595670][   T10] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  294.598640][   T10] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64
[  294.601738][   T10] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64
[  294.604708][   T10] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  294.607580][   T10] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  294.610697][   T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  294.616668][T15495] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  294.619455][T15495] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  294.621981][T15495] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  294.626583][   T10] mos7720 9-1:1.0: Moschip 2 port adapter converter detected
[  294.707179][   T54] Bluetooth: hci0: unexpected event for opcode 0x1408
[  294.881325][T15495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  294.898189][T15495] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  295.123147][   T10] usb 9-1: mos7720: usb_control_msg() failed: -71
[  295.135056][   T10] usb 9-1: Moschip 2 port adapter converter now attached to ttyUSB0
[  295.161981][   T10] usb 9-1: Moschip 2 port adapter converter now attached to ttyUSB1
[  295.172509][   T10] usb 9-1: USB disconnect, device number 4
[  295.174330][    C0] usb 9-1: mos7720_interrupt_callback - Error -19 submitting control urb
[  295.180788][   T10] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0
[  295.186516][   T10] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1
[  295.193138][   T10] mos7720 9-1:1.0: device disconnected
[  295.734246][T15517] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4088'.
[  295.782311][T15521] netlink: 'syz.6.4089': attribute type 13 has an invalid length.
[  296.635874][T15545] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4103'.
[  298.087498][   T33] audit: type=1326 audit(2000000476.120:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15555 comm="syz.6.4108" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f355e99e159 code=0x7ffc0000
[  298.098756][   T33] audit: type=1326 audit(2000000476.120:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15555 comm="syz.6.4108" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f355e99e159 code=0x7ffc0000
[  298.107783][   T33] audit: type=1326 audit(2000000476.120:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15555 comm="syz.6.4108" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f355e99e159 code=0x7ffc0000
[  298.131461][   T33] audit: type=1326 audit(2000000476.120:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15555 comm="syz.6.4108" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f355e99e159 code=0x7ffc0000
[  298.173695][   T33] audit: type=1326 audit(2000000476.120:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15555 comm="syz.6.4108" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f355e99e159 code=0x7ffc0000
[  298.184420][   T33] audit: type=1326 audit(2000000476.120:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15555 comm="syz.6.4108" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f355e99e159 code=0x7ffc0000
[  298.199226][   T33] audit: type=1326 audit(2000000476.120:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15555 comm="syz.6.4108" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f355e99e159 code=0x7ffc0000
[  298.209663][   T33] audit: type=1326 audit(2000000476.120:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15555 comm="syz.6.4108" exe="/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f355e99e159 code=0x7ffc0000
[  298.219235][   T33] audit: type=1326 audit(2000000476.120:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15555 comm="syz.6.4108" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f355e99e159 code=0x7ffc0000
[  298.229459][   T33] audit: type=1326 audit(2000000476.120:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15555 comm="syz.6.4108" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f355e99e159 code=0x7ffc0000
[  300.327693][T15574] netlink: 'syz.6.4114': attribute type 1 has an invalid length.
[  302.284709][T15585] fuse: fd is not a fuse device
[  304.548769][T15608] netlink: 'syz.6.4129': attribute type 1 has an invalid length.
[  304.552805][T15608] netlink: 5120 bytes leftover after parsing attributes in process `syz.6.4129'.
[  304.603764][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  304.608269][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  304.637070][   T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  304.641311][   T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  305.093851][T15629] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4139'.
[  306.117659][T15651] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4150'.
[  306.230681][T15657] netlink: 'syz.6.4153': attribute type 29 has an invalid length.
[  306.280310][T15661] /dev/nullb0: Can't lookup blockdev
[  306.341150][T15665] fuse: fd is not a fuse device
[  307.228699][ T5600] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  307.246525][ T5600] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  307.255298][ T5600] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  307.259762][ T5600] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  307.263925][ T5600] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  307.930284][T15685] bridge0: port 1(bridge_slave_0) entered blocking state
[  307.932944][T15685] bridge0: port 1(bridge_slave_0) entered disabled state
[  307.935256][T15685] bridge_slave_0: entered allmulticast mode
[  307.937924][T15685] bridge_slave_0: entered promiscuous mode
[  307.941445][T15685] bridge0: port 2(bridge_slave_1) entered blocking state
[  307.943824][T15685] bridge0: port 2(bridge_slave_1) entered disabled state
[  307.946246][T15685] bridge_slave_1: entered allmulticast mode
[  307.949058][T15685] bridge_slave_1: entered promiscuous mode
[  307.971899][T15685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  307.977025][T15685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  307.996486][T15685] team0: Port device team_slave_0 added
[  308.001444][T15685] team0: Port device team_slave_1 added
[  308.019858][T15685] batman_adv: batadv0: Adding interface: batadv_slave_0
[  308.022205][T15685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  308.031780][T15685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  308.036155][T15685] batman_adv: batadv0: Adding interface: batadv_slave_1
[  308.038298][T15685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  308.047749][T15685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  308.078103][T15685] hsr_slave_0: entered promiscuous mode
[  308.080847][T15685] hsr_slave_1: entered promiscuous mode
[  308.082990][T15685] debugfs: 'hsr0' already exists in 'hsr'
[  308.085093][T15685] Cannot create hsr debugfs directory
[  308.230282][T15685] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  308.240361][T15685] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  308.243646][T15685] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  308.251463][T15685] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  308.255147][T15685] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  308.263755][T15685] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  308.269819][T15685] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  308.275999][T15685] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  308.310232][T15685] bridge0: port 2(bridge_slave_1) entered blocking state
[  308.312694][T15685] bridge0: port 2(bridge_slave_1) entered forwarding state
[  308.315567][T15685] bridge0: port 1(bridge_slave_0) entered blocking state
[  308.318273][T15685] bridge0: port 1(bridge_slave_0) entered forwarding state
[  308.363914][T15685] 8021q: adding VLAN 0 to HW filter on device bond0
[  308.378154][ T7673] bridge0: port 1(bridge_slave_0) entered disabled state
[  308.382833][ T7673] bridge0: port 2(bridge_slave_1) entered disabled state
[  308.397227][T15685] 8021q: adding VLAN 0 to HW filter on device team0
[  308.407551][ T7612] bridge0: port 1(bridge_slave_0) entered blocking state
[  308.409901][ T7612] bridge0: port 1(bridge_slave_0) entered forwarding state
[  308.415886][ T7612] bridge0: port 2(bridge_slave_1) entered blocking state
[  308.418215][ T7612] bridge0: port 2(bridge_slave_1) entered forwarding state
[  308.611036][T15685] 8021q: adding VLAN 0 to HW filter on device batadv0
[  308.732168][T15685] veth0_vlan: entered promiscuous mode
[  308.738442][T15685] veth1_vlan: entered promiscuous mode
[  308.756657][T15685] veth0_macvtap: entered promiscuous mode
[  308.762746][T15685] veth1_macvtap: entered promiscuous mode
[  308.772815][T15685] batman_adv: batadv0: Interface activated: batadv_slave_0
[  308.781567][T15685] batman_adv: batadv0: Interface activated: batadv_slave_1
[  308.821350][ T5426] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  308.826396][ T5426] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  308.830913][ T5426] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  308.835183][ T5426] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  308.913356][ T7593] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  308.922029][ T7593] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  308.943394][ T7593] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  308.946253][ T7593] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  309.002001][T15741] netlink: 84 bytes leftover after parsing attributes in process `syz.6.4178'.
[  309.030642][T15741] vlan3: entered promiscuous mode
[  309.038056][T15741] bridge0: entered promiscuous mode
[  309.047777][T15741] vlan3: entered allmulticast mode
[  309.053607][T15741] bridge0: entered allmulticast mode
[  309.161932][ T5600] Bluetooth: hci0: connection err: -111
[  309.282797][T15756] netlink: 'syz.6.4180': attribute type 21 has an invalid length.
[  309.288708][   T12] batman_adv: batadv1: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 3
[  309.298411][ T5057] usb 10-1: new full-speed USB device number 2 using dummy_hcd
[  309.413018][T15766] bridge0: port 2(syz_tun) entered blocking state
[  309.415196][T15766] bridge0: port 2(syz_tun) entered disabled state
[  309.421375][T15766] syz_tun: entered allmulticast mode
[  309.423975][T15766] syz_tun: entered promiscuous mode
[  309.426198][T15766] bridge0: port 2(syz_tun) entered blocking state
[  309.428295][T15766] bridge0: port 2(syz_tun) entered forwarding state
[  309.433208][T15766] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  309.460771][ T5057] usb 10-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  309.466057][ T5057] usb 10-1: config 0 has an invalid interface number: 41 but max is 0
[  309.471615][ T5057] usb 10-1: config 0 has no interface number 0
[  309.473630][ T5057] usb 10-1: config 0 interface 41 has no altsetting 0
[  309.477533][ T5057] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  309.480140][ T5057] usb 10-1: Product: syz
[  309.481584][ T5057] usb 10-1: Manufacturer: syz
[  309.483206][ T5057] usb 10-1: SerialNumber: syz
[  309.490200][ T5057] usb 10-1: config 0 descriptor??
[  309.493129][ T5600] Bluetooth: hci5: command tx timeout
[  310.368181][ T5057] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[  310.809146][ T5057] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9
[  310.813429][ T5057] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71
[  310.816683][ T5057] CoreChips 10-1:0.41: probe with driver CoreChips failed with error -71
[  310.823245][ T5057] usb 10-1: USB disconnect, device number 2
[  311.750050][ T5600] Bluetooth: hci5: command tx timeout
[  311.825578][T15810] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4204'.
[  312.329172][   T54] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  312.341184][   T54] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  312.356232][   T54] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  312.361800][   T54] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  312.369116][   T54] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  312.472597][T15841] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4219'.
[  312.793196][T15870] loop9: detected capacity change from 0 to 1024
[  312.796270][T15870] EXT4-fs: Ignoring removed mblk_io_submit option
[  312.845040][T15870] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  312.879185][T15685] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  312.932820][T15834] bridge0: port 1(bridge_slave_0) entered blocking state
[  312.937342][T15834] bridge0: port 1(bridge_slave_0) entered disabled state
[  312.943352][T15834] bridge_slave_0: entered allmulticast mode
[  312.956126][T15834] bridge_slave_0: entered promiscuous mode
[  312.968440][T15834] bridge0: port 2(bridge_slave_1) entered blocking state
[  312.974565][T15834] bridge0: port 2(bridge_slave_1) entered disabled state
[  312.978493][T15834] bridge_slave_1: entered allmulticast mode
[  312.981648][T15834] bridge_slave_1: entered promiscuous mode
[  313.023150][T15834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  313.028421][T15834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  313.065901][T15834] team0: Port device team_slave_0 added
[  313.071236][T15834] team0: Port device team_slave_1 added
[  313.094284][T15834] batman_adv: batadv0: Adding interface: batadv_slave_0
[  313.096589][T15834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  313.105224][T15834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  313.124961][T15834] batman_adv: batadv0: Adding interface: batadv_slave_1
[  313.127240][T15834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  313.137054][T15834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  313.171226][T15889] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  313.173510][T15834] hsr_slave_0: entered promiscuous mode
[  313.178719][T15834] hsr_slave_1: entered promiscuous mode
[  313.181004][T15834] debugfs: 'hsr0' already exists in 'hsr'
[  313.182779][T15834] Cannot create hsr debugfs directory
[  313.196037][T15889] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  313.601127][T15916] team0: Device vlan4 is already an upper device of the team interface
[  313.711044][ T5652] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  313.871952][ T5652] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  313.879099][ T5652] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  313.886570][ T5652] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  313.893859][ T5652] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  313.901830][ T5652] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  313.909998][ T5652] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  313.915038][    C1] batman_adv: batadv1: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 3
[  313.934251][ T5652] usb 10-1: config 0 descriptor??
[  314.007431][   T54] Bluetooth: hci5: command tx timeout
[  314.143291][T15834] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  314.152474][T15834] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  314.163393][T15834] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  314.176096][T15834] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  314.182829][T15834] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  314.203822][T15834] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  314.211640][T15834] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  314.220100][T15834] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  314.309016][T15834] 8021q: adding VLAN 0 to HW filter on device bond0
[  314.344864][T15834] 8021q: adding VLAN 0 to HW filter on device team0
[  314.363357][ T7593] bridge0: port 1(bridge_slave_0) entered blocking state
[  314.365637][ T7593] bridge0: port 1(bridge_slave_0) entered forwarding state
[  314.378926][ T7593] bridge0: port 2(bridge_slave_1) entered blocking state
[  314.381350][ T7593] bridge0: port 2(bridge_slave_1) entered forwarding state
[  314.386477][ T5652] plantronics 0003:047F:FFFF.0005: ignoring exceeding usage max
[  314.437609][ T5652] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0
[  314.608557][   T54] Bluetooth: hci6: command tx timeout
[  314.631830][T15834] 8021q: adding VLAN 0 to HW filter on device batadv0
[  314.661022][T15834] veth0_vlan: entered promiscuous mode
[  314.669031][T15834] veth1_vlan: entered promiscuous mode
[  314.686653][T15834] veth0_macvtap: entered promiscuous mode
[  314.691744][T15834] veth1_macvtap: entered promiscuous mode
[  314.700640][T15834] batman_adv: batadv0: Interface activated: batadv_slave_0
[  314.712142][T15834] batman_adv: batadv0: Interface activated: batadv_slave_1
[  314.750191][ T7256] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  314.752978][ T7256] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  314.755732][ T7256] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  314.792500][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  314.893722][ T7594] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  314.899372][ T7594] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  314.919067][ T7594] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  314.921807][ T7594] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  315.491084][T16021] netlink: 'syz.0.4257': attribute type 6 has an invalid length.
[  316.145122][T16028] bond0: entered allmulticast mode
[  316.157956][T16028] bond_slave_0: entered allmulticast mode
[  316.159784][T16028] bond_slave_1: entered allmulticast mode
[  316.161496][T16028] batadv0: entered allmulticast mode
[  316.175155][T16028] bridge0: port 4(bond0) entered blocking state
[  316.178078][T16028] bridge0: port 4(bond0) entered disabled state
[  316.183438][T16028] bond0: entered promiscuous mode
[  316.186028][T16028] bond_slave_0: entered promiscuous mode
[  316.188537][T16028] bond_slave_1: entered promiscuous mode
[  316.191291][T16028] batadv0: entered promiscuous mode
[  316.197657][T16028] bridge0: port 4(bond0) entered blocking state
[  316.200402][T16028] bridge0: port 4(bond0) entered forwarding state
[  316.255449][   T54] Bluetooth: hci5: command tx timeout
[  316.298153][T16032] netlink: 'syz.6.4261': attribute type 2 has an invalid length.
[  316.464513][T16039] FAULT_INJECTION: forcing a failure.
[  316.464513][T16039] name failslab, interval 1, probability 0, space 0, times 0
[  316.470989][T16039] CPU: 0 UID: 0 PID: 16039 Comm: syz.9.4263 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  316.471003][T16039] Tainted: [L]=SOFTLOCKUP
[  316.471006][T16039] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  316.471011][T16039] Call Trace:
[  316.471015][T16039]  <TASK>
[  316.471019][T16039]  dump_stack_lvl+0xe8/0x150
[  316.471034][T16039]  should_fail_ex+0x410/0x560
[  316.471046][T16039]  should_failslab+0xa8/0x100
[  316.471059][T16039]  kmem_cache_alloc_noprof+0xa6/0x5f0
[  316.471070][T16039]  ? radix_tree_node_alloc+0x82/0x3a0
[  316.471080][T16039]  ? radix_tree_node_alloc+0x82/0x3a0
[  316.471091][T16039]  radix_tree_node_alloc+0x82/0x3a0
[  316.471102][T16039]  idr_get_free+0x28f/0xa10
[  316.471115][T16039]  idr_alloc_u32+0x18a/0x330
[  316.471127][T16039]  ? __pfx_idr_alloc_u32+0x10/0x10
[  316.471138][T16039]  ? do_raw_spin_lock+0x12b/0x2f0
[  316.471149][T16039]  idr_alloc_cyclic+0x9c/0x1b0
[  316.471162][T16039]  bpf_link_prime+0x6b/0x220
[  316.471175][T16039]  tcx_link_attach+0x1ec/0x860
[  316.471188][T16039]  ? __pfx_tcx_link_attach+0x10/0x10
[  316.471197][T16039]  ? __fget_files+0x2a/0x420
[  316.471206][T16039]  ? __fget_files+0x3a2/0x420
[  316.471212][T16039]  ? __fget_files+0x2a/0x420
[  316.471220][T16039]  ? bpf_prog_attach_check_attach_type+0x1e5/0x540
[  316.471229][T16039]  link_create+0x51a/0x850
[  316.471242][T16039]  __sys_bpf+0x760/0xd90
[  316.471256][T16039]  ? __pfx___sys_bpf+0x10/0x10
[  316.471267][T16039]  ? do_futex+0x3e7/0x4e0
[  316.471283][T16039]  ? ksys_write+0x242/0x270
[  316.471292][T16039]  ? rcu_is_watching+0x16/0xb0
[  316.471329][T16039]  __x64_sys_bpf+0xba/0xd0
[  316.471341][T16039]  do_syscall_64+0x166/0x520
[  316.471353][T16039]  ? trace_irq_disable+0x3b/0x140
[  316.471363][T16039]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  316.471375][T16039]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  316.471383][T16039] RIP: 0033:0x7f7dc779e159
[  316.471391][T16039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  316.471398][T16039] RSP: 002b:00007f7dc862f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  316.471407][T16039] RAX: ffffffffffffffda RBX: 00007f7dc7a25fa0 RCX: 00007f7dc779e159
[  316.471413][T16039] RDX: 0000000000000020 RSI: 0000200000000040 RDI: 000000000000001c
[  316.471417][T16039] RBP: 00007f7dc783506b R08: 0000000000000000 R09: 0000000000000000
[  316.471422][T16039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  316.471426][T16039] R13: 00007f7dc7a26038 R14: 00007f7dc7a25fa0 R15: 00007ffff03b5528
[  316.471438][T16039]  </TASK>
[  316.604915][ T5426] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  316.610515][ T5426] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  316.638128][T16042] JFS: charset not found
[  316.638678][T16045] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  316.723954][ T5698] usb 10-1: USB disconnect, device number 3
[  316.863443][   T54] Bluetooth: hci6: command tx timeout
[  318.738815][T16087] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4284'.
[  318.748685][T16087] netlink: 'syz.0.4284': attribute type 12 has an invalid length.
[  318.769597][T16087] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4284'.
[  318.778433][T16087] netlink: 'syz.0.4284': attribute type 12 has an invalid length.
[  318.782052][ T7256] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  318.794815][ T7256] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  318.806867][ T7256] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  318.819959][ T7256] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  318.882847][T16097] bond0: entered allmulticast mode
[  318.885033][T16097] bond_slave_0: entered allmulticast mode
[  318.887489][T16097] bond_slave_1: entered allmulticast mode
[  318.894038][T16097] bridge0: port 3(bond0) entered blocking state
[  318.896409][T16097] bridge0: port 3(bond0) entered disabled state
[  318.900829][T16097] bond0: entered promiscuous mode
[  318.903530][T16097] bond_slave_0: entered promiscuous mode
[  318.905724][T16097] bond_slave_1: entered promiscuous mode
[  318.908576][T16097] bridge0: port 3(bond0) entered blocking state
[  318.910638][T16097] bridge0: port 3(bond0) entered forwarding state
[  319.117993][   T54] Bluetooth: hci6: command tx timeout
[  319.297200][T16127] netlink: 'syz.0.4303': attribute type 6 has an invalid length.
[  319.547226][T16142] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4309'.
[  320.047934][T16146] loop0: detected capacity change from 0 to 131072
[  320.056343][T16146] F2FS-fs (loop0): Wrong secs_per_zone / total_sections (512, 24)
[  320.058812][T16146] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[  320.061381][T16146] F2FS-fs (loop0): Test dummy encryption mode enabled
[  320.065791][T16146] F2FS-fs (loop0): invalid crc value
[  320.093241][T16146] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix.
[  320.096694][T16146] loop0: lost filesystem error report for type 5 error -117
[  320.101575][T16146] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  320.109636][T16146] F2FS-fs (loop0): f2fs_disable_checkpoint starts, unusable: 0
[  320.112037][T16146] F2FS-fs (loop0): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  320.115732][T16146] F2FS-fs (loop0): Start checkpoint disabled!
[  320.131960][T16146] F2FS-fs (loop0): f2fs_disable_checkpoint finishes, err:0
[  320.140090][T16146] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[  320.142340][T16146] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  320.153793][T16146] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=6165745f, run fsck to fix.
[  320.207646][T16153] netlink: 'syz.6.4313': attribute type 8 has an invalid length.
[  321.373458][   T54] Bluetooth: hci6: command tx timeout
[  322.733056][T16230] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  323.588997][T16258] loop9: detected capacity change from 0 to 256
[  323.613005][T16258] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x52c1951d, utbl_chksum : 0xe619d30d)
[  323.799302][    C1] batman_adv: batadv1: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 3
[  323.905527][T16274] loop0: detected capacity change from 0 to 32768
[  323.908718][T16274] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.4367 (16274)
[  323.915882][T16274] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  323.920995][T16274] BTRFS info (device loop0): using sha256 checksum algorithm
[  323.924030][T16274] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  323.972057][T16274] BTRFS info (device loop0): rebuilding free space tree
[  324.022002][T16274] BTRFS info (device loop0): disabling free space tree
[  324.024193][T16274] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  324.027864][T16274] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  324.059991][T16274] BTRFS info (device loop0): enabling ssd optimizations
[  324.063089][T16274] BTRFS info (device loop0): enabling disk space caching
[  324.065992][T16274] BTRFS info (device loop0): force clearing of disk cache
[  324.068732][T16274] BTRFS info (device loop0): enabling auto defrag
[  324.072021][T16274] BTRFS info (device loop0): max_inline set to 0
[  324.244423][T15834] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  324.251137][   T12] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared)
[  324.304001][T16303] ./file0: Can't open blockdev
[  324.489668][   T33] kauditd_printk_skb: 473 callbacks suppressed
[  324.489682][   T33] audit: type=1326 audit(2000000500.516:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16314 comm="syz.0.4378" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1948d9e159 code=0x7ffc0000
[  324.503180][   T33] audit: type=1326 audit(2000000500.516:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16314 comm="syz.0.4378" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1948d9e159 code=0x7ffc0000
[  324.532365][   T33] audit: type=1326 audit(2000000500.516:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16314 comm="syz.0.4378" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1948d9e159 code=0x7ffc0000
[  324.543590][T16318] loop0: detected capacity change from 0 to 512
[  324.549935][T16318] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  324.562399][   T33] audit: type=1326 audit(2000000500.516:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16314 comm="syz.0.4378" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1948d5e98e code=0x7ffc0000
[  324.569883][T16318] EXT4-fs (loop0): orphan cleanup on readonly fs
[  324.570618][   T33] audit: type=1326 audit(2000000500.516:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16314 comm="syz.0.4378" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1948d9e159 code=0x7ffc0000
[  324.580115][   T33] audit: type=1326 audit(2000000500.516:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16314 comm="syz.0.4378" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1948d9e159 code=0x7ffc0000
[  324.591966][T16318] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.4379: Block bitmap for bg 0 marked uninitialized
[  324.593452][   T33] audit: type=1326 audit(2000000500.516:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16314 comm="syz.0.4378" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1948d9e159 code=0x7ffc0000
[  324.596370][T16318] loop0: lost filesystem error report for type 5 error -117
[  324.610421][T16318] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  324.613007][T16323] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  324.613136][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  324.616055][   T33] audit: type=1326 audit(2000000500.516:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16314 comm="syz.0.4378" exe="/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f1948d9e159 code=0x7ffc0000
[  324.618399][    C1] EXT4-fs (loop0): initial error at time 2000000500: ext4_read_block_bitmap_nowait:517
[  324.618412][    C1] EXT4-fs (loop0): last error at time 2000000500: ext4_read_block_bitmap_nowait:517
[  324.631359][T16318] loop0: lost filesystem error report for type 5 error -117
[  324.635850][T16318] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.4379: Block bitmap for bg 0 marked uninitialized
[  324.645785][T16318] loop0: lost filesystem error report for type 5 error -117
[  324.645986][T16318] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  324.651812][T16318] loop0: lost filesystem error report for type 5 error -117
[  324.652139][T16318] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.4379: Block bitmap for bg 0 marked uninitialized
[  324.658845][   T33] audit: type=1326 audit(2000000500.516:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16314 comm="syz.0.4378" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1948d9e159 code=0x7ffc0000
[  324.665929][T16318] loop0: lost filesystem error report for type 5 error -117
[  324.668058][T16318] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  324.674088][T16318] loop0: lost filesystem error report for type 5 error -117
[  324.674470][T16318] EXT4-fs (loop0): 1 orphan inode deleted
[  324.680825][T16318] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  324.685701][   T33] audit: type=1326 audit(2000000500.516:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16314 comm="syz.0.4378" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1948d9e159 code=0x7ffc0000
[  324.725425][T15834] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  324.927952][T16343] loop0: detected capacity change from 0 to 24
[  324.931473][T16343] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  324.941089][T16343] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  325.489397][T16362] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4397'.
[  325.492292][T16362] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4397'.
[  325.497863][T16362] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4397'.
[  325.501421][T16362] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4397'.
[  325.674880][T16369] openvswitch: netlink: Key type 29 is not supported
[  325.867121][T16377] loop0: detected capacity change from 0 to 512
[  325.871370][T16377] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  325.878418][T16377] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.4404: bad orphan inode 131083
[  325.885864][T16377] loop0: lost filesystem error report for type 5 error -117
[  325.893537][T16377] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  325.963941][T16377] EXT4-fs (loop0): shut down requested (1)
[  326.008523][T16377] overlayfs: failed to create directory ./bus/work (errno: 5); mounting read-only
[  326.022521][T16377] overlayfs: failed to get uuid (/file0, err=-5); falling back to uuid=null.
[  326.454389][ T7256] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  326.473871][ T7256] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  326.644723][ T7256] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  326.653380][ T7256] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  326.763188][ T7256] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  326.767829][ T7256] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  326.854902][T16133] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  326.896887][ T7256] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  326.900154][ T7256] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  327.072882][ T7256] bridge_slave_1: left allmulticast mode
[  327.077514][ T7256] bridge_slave_1: left promiscuous mode
[  327.080074][ T7256] bridge0: port 2(bridge_slave_1) entered disabled state
[  327.088799][ T7256] bridge_slave_0: left allmulticast mode
[  327.091155][ T7256] bridge_slave_0: left promiscuous mode
[  327.100698][ T7256] bridge0: port 1(bridge_slave_0) entered disabled state
[  327.320610][ T5600] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  327.335762][ T5600] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  327.345745][ T5600] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  327.351929][ T5600] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  327.362778][ T5600] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  327.512656][ T7256] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  327.522598][ T7256] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  327.526509][ T7256] bond0 (unregistering): Released all slaves
[  327.536048][ T5336] 8021q: adding VLAN 0 to HW filter on device eth1
[  327.822238][ T5336] 8021q: adding VLAN 0 to HW filter on device eth2
[  327.827224][T16457] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4431'.
[  327.859180][ T7256] hsr_slave_0: left promiscuous mode
[  327.876911][ T7256] hsr_slave_1: left promiscuous mode
[  327.879294][ T7256] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  327.882373][ T7256] batman_adv: batadv0: Removing interface: batadv_slave_0
[  327.886504][ T7256] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  327.888906][ T7256] batman_adv: batadv0: Removing interface: batadv_slave_1
[  327.900974][ T7256] veth1_macvtap: left promiscuous mode
[  327.905035][ T7256] veth0_macvtap: left promiscuous mode
[  327.908633][ T7256] veth1_vlan: left promiscuous mode
[  327.910407][ T7256] veth0_vlan: left promiscuous mode
[  328.467973][ T7256] team0 (unregistering): Port device team_slave_1 removed
[  328.522720][ T7256] team0 (unregistering): Port device team_slave_0 removed
[  328.616627][T16482] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  328.910799][T16507] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4447'.
[  328.994322][ T5336] 8021q: adding VLAN 0 to HW filter on device eth3
[  329.081036][T16517] netlink: 'syz.9.4449': attribute type 21 has an invalid length.
[  329.084572][T16429] bridge0: port 1(bridge_slave_0) entered blocking state
[  329.089347][T16429] bridge0: port 1(bridge_slave_0) entered disabled state
[  329.091848][T16429] bridge_slave_0: entered allmulticast mode
[  329.094494][T16429] bridge_slave_0: entered promiscuous mode
[  329.099379][T16429] bridge0: port 2(bridge_slave_1) entered blocking state
[  329.103451][T16429] bridge0: port 2(bridge_slave_1) entered disabled state
[  329.111057][T16429] bridge_slave_1: entered allmulticast mode
[  329.120219][T16429] bridge_slave_1: entered promiscuous mode
[  329.125647][T16519] openvswitch: netlink: IP tunnel dst address not specified
[  329.220396][T16429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  329.287122][T16429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  329.341419][T16429] team0: Port device team_slave_0 added
[  329.349760][T16429] team0: Port device team_slave_1 added
[  329.367166][T16429] batman_adv: batadv0: Adding interface: batadv_slave_0
[  329.369599][T16429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  329.390192][T16429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  329.400633][T16429] batman_adv: batadv0: Adding interface: batadv_slave_1
[  329.403573][T16429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  329.411792][T16429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  329.448978][T16429] hsr_slave_0: entered promiscuous mode
[  329.453571][T16429] hsr_slave_1: entered promiscuous mode
[  329.458728][T16429] debugfs: 'hsr0' already exists in 'hsr'
[  329.462216][T16429] Cannot create hsr debugfs directory
[  329.604793][ T5336] 8021q: adding VLAN 0 to HW filter on device eth4
[  329.608846][   T54] Bluetooth: hci6: command tx timeout
[  329.830697][T16555] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4460'.
[  329.938577][   T55] block nbd0: Receive control failed (result -107)
[  330.128932][T16565] loop9: detected capacity change from 0 to 4096
[  330.132990][T16565] ntfs3(loop9): Different NTFS sector size (1024) and media sector size (512).
[  330.162678][T16565] ntfs3(loop9): Mark volume as dirty due to NTFS errors
[  330.174149][T16565] ntfs3(loop9): Failed to load $Extend (-22).
[  330.177645][T16565] ntfs3(loop9): Failed to initialize $Extend.
[  330.197100][T16565] ntfs3(loop9): ino=0, attr_set_size_ex
[  330.316021][T16576] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  330.416650][T16429] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  330.428295][T16429] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  330.435973][T16429] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  330.443060][T16429] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  330.451355][T16429] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  330.472818][T16429] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  330.478902][T16429] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  330.495859][T16429] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  330.602310][T16607] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4476'.
[  330.625239][T16429] 8021q: adding VLAN 0 to HW filter on device bond0
[  330.649648][T16429] 8021q: adding VLAN 0 to HW filter on device team0
[  330.671006][ T7646] bridge0: port 1(bridge_slave_0) entered blocking state
[  330.673379][ T7646] bridge0: port 1(bridge_slave_0) entered forwarding state
[  330.688109][ T7646] bridge0: port 2(bridge_slave_1) entered blocking state
[  330.690387][ T7646] bridge0: port 2(bridge_slave_1) entered forwarding state
[  330.835789][T16622] loop9: detected capacity change from 0 to 2048
[  330.836113][T16624] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  330.842549][T16624] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  330.848603][T16624] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  330.854392][T16624] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  330.860689][T16624] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  330.882613][T16622] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  330.891659][T16622] FAULT_INJECTION: forcing a failure.
[  330.891659][T16622] name failslab, interval 1, probability 0, space 0, times 0
[  330.903536][T16622] CPU: 0 UID: 0 PID: 16622 Comm: syz.9.4480 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  330.903551][T16622] Tainted: [L]=SOFTLOCKUP
[  330.903555][T16622] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  330.903559][T16622] Call Trace:
[  330.903563][T16622]  <TASK>
[  330.903568][T16622]  dump_stack_lvl+0xe8/0x150
[  330.903584][T16622]  should_fail_ex+0x410/0x560
[  330.903597][T16622]  should_failslab+0xa8/0x100
[  330.903610][T16622]  __kmalloc_noprof+0xfe/0x720
[  330.903622][T16622]  ? ext4_convert_inline_data_nolock+0x102/0x980
[  330.903631][T16622]  ? ext4_convert_inline_data_nolock+0x102/0x980
[  330.903642][T16622]  ext4_convert_inline_data_nolock+0x102/0x980
[  330.903655][T16622]  ? __pfx_ext4_convert_inline_data_nolock+0x10/0x10
[  330.903664][T16622]  ? down_write+0x16b/0x200
[  330.903676][T16622]  ? __pfx_down_write+0x10/0x10
[  330.903690][T16622]  ext4_convert_inline_data+0x484/0x5c0
[  330.903711][T16622]  ? __pfx_ext4_convert_inline_data+0x10/0x10
[  330.903721][T16622]  ? down_write+0x16b/0x200
[  330.903732][T16622]  ? __pfx_down_write+0x10/0x10
[  330.903747][T16622]  ext4_fallocate+0x1e2/0x400
[  330.903758][T16622]  vfs_fallocate+0x65a/0x7e0
[  330.903767][T16622]  ? __fget_files+0x2a/0x420
[  330.903778][T16622]  ? __pfx_vfs_fallocate+0x10/0x10
[  330.903792][T16622]  __x64_sys_fallocate+0xbf/0x110
[  330.903802][T16622]  do_syscall_64+0x166/0x520
[  330.903812][T16622]  ? trace_irq_disable+0x3b/0x140
[  330.903822][T16622]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  330.903832][T16622]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  330.903840][T16622] RIP: 0033:0x7f7dc779e159
[  330.903848][T16622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  330.903854][T16622] RSP: 002b:00007f7dc862f028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d
[  330.903864][T16622] RAX: ffffffffffffffda RBX: 00007f7dc7a25fa0 RCX: 00007f7dc779e159
[  330.903870][T16622] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000006
[  330.903875][T16622] RBP: 00007f7dc783506b R08: 0000000000000000 R09: 0000000000000000
[  330.903880][T16622] R10: 000000000008ffff R11: 0000000000000246 R12: 0000000000000000
[  330.903886][T16622] R13: 00007f7dc7a26038 R14: 00007f7dc7a25fa0 R15: 00007ffff03b5528
[  330.903899][T16622]  </TASK>
[  331.003571][T16627] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  331.069895][T15685] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  331.171911][T16429] 8021q: adding VLAN 0 to HW filter on device batadv0
[  331.259065][T16647] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4484'.
[  331.269093][T16429] veth0_vlan: entered promiscuous mode
[  331.275321][T16429] veth1_vlan: entered promiscuous mode
[  331.305494][T16429] veth0_macvtap: entered promiscuous mode
[  331.317131][T16429] veth1_macvtap: entered promiscuous mode
[  331.359785][T16429] batman_adv: batadv0: Interface activated: batadv_slave_0
[  331.370805][T16429] batman_adv: batadv0: Interface activated: batadv_slave_1
[  331.407170][ T5426] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  331.416040][ T5426] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  331.419958][T16660] loop9: detected capacity change from 0 to 512
[  331.441696][T16660] EXT4-fs error (device loop9): ext4_iget_extra_inode:5152: inode #15: comm syz.9.4488: corrupted in-inode xattr: invalid ea_ino
[  331.480492][T16660] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  331.480701][T16660] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.4488: couldn't read orphan inode 15 (err -117)
[  331.483684][    C0] EXT4-fs (loop9): error count since last fsck: 1
[  331.483698][    C0] EXT4-fs (loop9): initial error at time 2000000506: ext4_iget_extra_inode:5152: inode 15
[  331.483711][    C0] EXT4-fs (loop9): last error at time 2000000506: ext4_iget_extra_inode:5152: inode 15
[  331.527167][ T5426] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  331.586684][ T7593] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  331.595947][ T7593] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  331.637906][ T7593] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  331.640979][T16660] loop9: lost filesystem error report for type 5 error -117
[  331.641967][T16660] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  331.649411][ T5426] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  331.652615][ T7593] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  331.751245][T16680] netlink: 'syz.6.4491': attribute type 4 has an invalid length.
[  331.824882][T16686] loop1: detected capacity change from 0 to 512
[  331.841052][T16686] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  331.856325][T15685] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  331.870164][   T54] Bluetooth: hci6: command tx timeout
[  331.893159][T16686] EXT4-fs (loop1): 1 truncate cleaned up
[  331.903214][T16686] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  332.775125][T16429] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  332.923709][T16750] loop1: detected capacity change from 0 to 1024
[  332.931937][T16750] EXT4-fs: Ignoring removed nomblk_io_submit option
[  332.934165][T16750] EXT4-fs: Ignoring removed nomblk_io_submit option
[  332.937828][T16750] EXT4-fs: Ignoring removed i_version option
[  332.954833][T16750] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  332.961225][T16750] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  332.982020][T16750] EXT4-fs error (device loop1): ext4_map_blocks:835: inode #15: comm syz.1.4508: lblock 0 mapped to illegal pblock 0 (length 6)
[  332.994949][T16750] EXT4-fs (loop1): Remounting filesystem read-only
[  333.007490][T16429] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  333.498350][T16775] loop1: detected capacity change from 0 to 2048
[  333.573270][T16776] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  333.625650][   T33] kauditd_printk_skb: 11 callbacks suppressed
[  333.625659][   T33] audit: type=1800 audit(2000000508.940:1207): pid=16775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4518" name="bus" dev="loop1" ino=2097152 res=0 errno=0
[  333.776018][T16774] loop9: detected capacity change from 0 to 32768
[  333.798973][T16774] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.4517 (16774)
[  333.841774][T16774] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  333.848370][T16774] BTRFS info (device loop9): using sha256 checksum algorithm
[  333.867368][T16774] BTRFS info (device loop9): enabling ssd optimizations
[  333.869519][T16774] BTRFS info (device loop9): turning on async discard
[  333.871589][T16774] BTRFS info (device loop9): enabling free space tree
[  333.902843][T15685] BTRFS info (device loop9): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  333.972498][T16804] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4524'.
[  334.118559][   T54] Bluetooth: hci6: command tx timeout
[  334.322407][T16821] loop9: detected capacity change from 0 to 4096
[  334.356156][T16822] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  334.388500][T16821] NILFS (loop9): nilfs_sufile_do_free: segment 9 is already clean
[  334.669735][T16835] loop1: detected capacity change from 0 to 4096
[  334.684079][T16835] ntfs3(loop1): Failed to load $Extend (-22).
[  334.686237][T16835] ntfs3(loop1): Failed to initialize $Extend.
[  334.901627][T16844] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4540'.
[  334.974778][T16848] loop9: detected capacity change from 0 to 1024
[  334.980950][T16848] EXT4-fs: Ignoring removed orlov option
[  335.002066][T16848] EXT4-fs (loop9): stripe (7) is not aligned with cluster size (16), stripe is disabled
[  335.018316][T16848] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  335.177583][T15685] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  335.633401][   T10] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  335.795921][   T10] usb 10-1: Using ep0 maxpacket: 32
[  335.801069][   T10] usb 10-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00
[  335.811901][   T10] usb 10-1: config 0 interface 0 has no altsetting 0
[  335.817158][   T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  335.832349][   T10] usb 10-1: config 0 descriptor??
[  335.932336][T16875] loop1: detected capacity change from 0 to 32768
[  335.944842][T16875] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.4553 (16875)
[  335.957295][T16875] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  335.963575][T16875] BTRFS info (device loop1): using crc32c checksum algorithm
[  335.965919][T16875] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  336.013466][T16875] BTRFS info (device loop1): rebuilding free space tree
[  336.027099][T16875] BTRFS info (device loop1): disabling free space tree
[  336.029359][T16875] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  336.032398][T16875] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  336.046362][T16875] BTRFS info (device loop1): enabling ssd optimizations
[  336.048630][T16875] BTRFS info (device loop1): turning on async discard
[  336.051004][T16875] BTRFS info (device loop1): enabling disk space caching
[  336.053573][T16875] BTRFS info (device loop1): force clearing of disk cache
[  336.055794][T16875] BTRFS info (device loop1): use zstd compression, level 3
[  336.075011][   T10] usbhid 10-1:0.0: can't add hid device: -71
[  336.082931][   T10] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[  336.088998][   T10] usb 10-1: USB disconnect, device number 4
[  336.157505][T16429] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  336.372204][   T54] Bluetooth: hci6: command tx timeout
[  336.402578][T16901] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4557'.
[  337.019277][T16937] input: syz1 as /devices/virtual/input/input8
[  337.093259][T16939] Cannot find add_set index 4 as target
[  337.188876][T16947] team0: entered allmulticast mode
[  337.192602][T16947] team_slave_0: entered allmulticast mode
[  337.196218][T16947] team_slave_1: entered allmulticast mode
[  337.199466][T16947] team0: Cannot enslave team device to itself
[  337.212314][   T33] audit: type=1800 audit(2000000512.253:1208): pid=16952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4581" name="idVendor" dev="configfs" ino=44226 res=0 errno=0
[  337.232748][   T33] audit: type=1800 audit(2000000512.253:1209): pid=16952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4581" name="idProduct" dev="configfs" ino=44227 res=0 errno=0
[  337.250584][   T33] audit: type=1800 audit(2000000512.253:1210): pid=16952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4581" name="serialnumber" dev="configfs" ino=44229 res=0 errno=0
[  337.276568][   T33] audit: type=1800 audit(2000000512.253:1211): pid=16952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4581" name="manufacturer" dev="configfs" ino=44230 res=0 errno=0
[  337.277892][T16956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4582'.
[  337.288108][   T33] audit: type=1800 audit(2000000512.253:1212): pid=16952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4581" name="product" dev="configfs" ino=44231 res=0 errno=0
[  337.335962][T16960] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4584'.
[  337.569735][T16982] netlink: NAT attribute has 4 unknown bytes
[  337.571702][T16982] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  337.579627][T16984] loop1: detected capacity change from 0 to 512
[  337.668000][   T33] audit: type=1326 audit(2000000512.677:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16991 comm="syz.1.4600" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5826b9e159 code=0x7ffc0000
[  337.683505][ T1375] ieee802154 phy0 wpan0: encryption failed: -22
[  337.685720][ T1375] ieee802154 phy1 wpan1: encryption failed: -22
[  337.686759][   T33] audit: type=1326 audit(2000000512.677:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16991 comm="syz.1.4600" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5826b9e159 code=0x7ffc0000
[  337.699298][   T33] audit: type=1326 audit(2000000512.677:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16991 comm="syz.1.4600" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5826b9e159 code=0x7ffc0000
[  337.707480][   T33] audit: type=1326 audit(2000000512.677:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16991 comm="syz.1.4600" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5826b9e159 code=0x7ffc0000
[  337.899325][ T5652] usb 10-1: new full-speed USB device number 5 using dummy_hcd
[  338.039826][   T10] usb 2-1: new full-speed USB device number 9 using dummy_hcd
[  338.061641][ T5652] usb 10-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.03
[  338.069171][ T5652] usb 10-1: config 0 has an invalid interface number: 147 but max is 0
[  338.077722][ T5652] usb 10-1: config 0 has no interface number 0
[  338.082019][ T5652] usb 10-1: config 0 interface 147 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  338.092836][ T5652] usb 10-1: config 0 interface 147 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  338.104975][ T5652] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  338.108889][ T5652] usb 10-1: Product: syz
[  338.110801][ T5652] usb 10-1: Manufacturer: syz
[  338.116129][ T5652] usb 10-1: SerialNumber: syz
[  338.120210][ T5652] usb 10-1: config 0 descriptor??
[  338.123265][T16990] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  338.157601][ T5652] usb 10-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  338.213966][   T10] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f
[  338.219437][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  338.226182][   T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C
[  338.231932][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10
[  338.239409][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 108, setting to 64
[  338.243975][   T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  338.255582][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  338.261452][   T10] usb 2-1: Product: syz
[  338.263339][   T10] usb 2-1: Manufacturer: syz
[  338.265679][   T10] usb 2-1: SerialNumber: syz
[  338.273537][   T10] usb 2-1: config 0 descriptor??
[  338.276882][T16998] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  338.350317][ T5652] usb 10-1: USB disconnect, device number 5
[  338.356421][   T10] rc_core: IR keymap rc-xbox-dvd not found
[  338.357795][ T5426] usb 10-1: Failed to submit usb control message: -71
[  338.362622][ T5426] usb 10-1: unable to send the bmi data to the device: -71
[  338.365444][   T10] Registered IR keymap rc-empty
[  338.371932][   T10] rc rc0: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  338.373016][ T5426] usb 10-1: unable to get target info from device
[  338.386104][ T5426] usb 10-1: could not get target info (-71)
[  338.388306][   T10] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input9
[  338.396494][ T5426] usb 10-1: could not probe fw (-71)
[  338.515427][   T10] usb 2-1: USB disconnect, device number 9
[  338.518124][    C0] xbox_remote 2-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19
[  338.998559][T17041] loop9: detected capacity change from 0 to 64
[  339.370258][T17055] netlink: 'syz.9.4629': attribute type 1 has an invalid length.
[  339.418488][T17055] 8021q: adding VLAN 0 to HW filter on device bond1
[  339.468620][T17055] bond1: (slave gretap1): making interface the new active one
[  339.474549][T17055] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  339.579075][T17055] bond1: (slave dummy0): Enslaving as an active interface with an up link
[  339.603889][T17055] netlink: 'syz.9.4629': attribute type 10 has an invalid length.
[  339.610913][T17055] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4629'.
[  339.626760][T17055] dummy0: entered promiscuous mode
[  339.631176][T17055] bond1: (slave dummy0): Releasing active interface
[  339.975568][T17078] overlayfs: failed to clone lowerpath
[  339.983838][T17078] overlayfs: failed to clone lowerpath
[  340.136595][T17080] nvme nvme0: failed to connect socket: -111
[  340.255615][T17089] loop9: detected capacity change from 0 to 24
[  340.259367][T17089] MTD: Attempt to mount non-MTD device "/dev/loop9"
[  340.270966][T17089] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  340.301066][T17095] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4648'.
[  340.351039][T17098] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4649'.
[  340.366316][T17100] loop9: detected capacity change from 0 to 256
[  340.377888][T17100] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  340.392128][   T33] kauditd_printk_skb: 5 callbacks suppressed
[  340.392137][   T33] audit: type=1800 audit(2000000515.187:1222): pid=17100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4650" name="file1" dev="loop9" ino=1048699 res=0 errno=0
[  340.407029][   T33] audit: type=1800 audit(2000000515.206:1223): pid=17100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4650" name="file1" dev="loop9" ino=1048699 res=0 errno=0
[  340.537206][T17105] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16779008)
[  340.538407][T17106] netlink: 'syz.1.4652': attribute type 10 has an invalid length.
[  340.539897][T17105] FAT-fs (loop9): Filesystem has been set read-only
[  340.545346][T17105] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16779008)
[  340.549585][T17105] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16779008)
[  340.556468][T17105] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16779008)
[  340.559103][T17105] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16779008)
[  340.562630][T17105] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16779008)
[  340.651918][T17110] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4654'.
[  340.654857][T17110] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4654'.
[  340.738294][T17118] loop9: detected capacity change from 0 to 128
[  340.744783][T17118] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256
[  340.767466][   T33] audit: type=1326 audit(2000000515.538:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17119 comm="syz.1.4659" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5826b9e159 code=0x0
[  340.835700][T17126] netlink: 'syz.6.4662': attribute type 2 has an invalid length.
[  340.918553][T17137] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  340.928289][T17138] FAULT_INJECTION: forcing a failure.
[  340.928289][T17138] name failslab, interval 1, probability 0, space 0, times 0
[  340.934133][T17138] CPU: 0 UID: 0 PID: 17138 Comm: syz.9.4666 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  340.934158][T17138] Tainted: [L]=SOFTLOCKUP
[  340.934163][T17138] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  340.934171][T17138] Call Trace:
[  340.934177][T17138]  <TASK>
[  340.934184][T17138]  dump_stack_lvl+0xe8/0x150
[  340.934207][T17138]  should_fail_ex+0x410/0x560
[  340.934254][T17138]  should_failslab+0xa8/0x100
[  340.934277][T17138]  kmem_cache_alloc_noprof+0xa6/0x5f0
[  340.934294][T17138]  ? dst_alloc+0x105/0x170
[  340.934311][T17138]  ? dst_alloc+0x105/0x170
[  340.934329][T17138]  ? fib_lookup+0x76/0x440
[  340.934346][T17138]  dst_alloc+0x105/0x170
[  340.934367][T17138]  ip_route_output_key_hash_rcu+0x14ac/0x2720
[  340.934382][T17138]  ? ip_route_output_key_hash_rcu+0x13a1/0x2720
[  340.934405][T17138]  ? ip_route_output_key_hash+0xd8/0x2a0
[  340.934423][T17138]  ip_route_output_key_hash+0x18d/0x2a0
[  340.934438][T17138]  ? dev_ioctl+0x84c/0x1150
[  340.934452][T17138]  ? sock_ioctl+0x753/0x7e0
[  340.934472][T17138]  ? __pfx_ip_route_output_key_hash+0x10/0x10
[  340.934491][T17138]  ? make_kuid+0x1e5/0x670
[  340.934508][T17138]  ? __pfx_make_kuid+0x10/0x10
[  340.934524][T17138]  ip_route_output_flow+0x2a/0x150
[  340.934543][T17138]  ipip6_tunnel_bind_dev+0x235/0x640
[  340.934562][T17138]  ? __pfx_ipip6_tunnel_bind_dev+0x10/0x10
[  340.934603][T17138]  ipip6_tunnel_init+0xbd/0x590
[  340.934626][T17138]  register_netdevice+0x6a1/0x1eb0
[  340.934653][T17138]  ? __pfx_register_netdevice+0x10/0x10
[  340.934668][T17138]  ? __hw_addr_insert+0x1f8/0x220
[  340.934681][T17138]  ? dev_addr_mod+0x174/0x350
[  340.934722][T17138]  ? ipip6_tunnel_create+0x7c/0x440
[  340.934741][T17138]  ipip6_tunnel_create+0x116/0x440
[  340.934757][T17138]  ipip6_tunnel_locate+0x545/0x7a0
[  340.934772][T17138]  ? __pfx_ipip6_tunnel_locate+0x10/0x10
[  340.934790][T17138]  ipip6_tunnel_ctl+0x6af/0x9e0
[  340.934812][T17138]  ip_tunnel_siocdevprivate+0x125/0x1d0
[  340.934832][T17138]  ? __pfx_ip_tunnel_siocdevprivate+0x10/0x10
[  340.934860][T17138]  ipip6_tunnel_siocdevprivate+0x27d/0x1690
[  340.934882][T17138]  ? __pfx___mutex_trylock_common+0x10/0x10
[  340.934895][T17138]  ? __pfx_ipip6_tunnel_siocdevprivate+0x10/0x10
[  340.934915][T17138]  ? rcu_is_watching+0x16/0xb0
[  340.934926][T17138]  ? trace_contention_end+0x3d/0x140
[  340.934942][T17138]  ? __mutex_lock+0x30b/0x1550
[  340.934960][T17138]  ? do_vfs_ioctl+0x116f/0x1530
[  340.934980][T17138]  ? dev_ioctl+0x83c/0x1150
[  340.934995][T17138]  ? __pfx___mutex_lock+0x10/0x10
[  340.935010][T17138]  ? full_name_hash+0x92/0xe0
[  340.935032][T17138]  dev_ifsioc+0xb56/0x1360
[  340.935051][T17138]  dev_ioctl+0x84c/0x1150
[  340.935068][T17138]  sock_ioctl+0x753/0x7e0
[  340.935086][T17138]  ? __pfx_sock_ioctl+0x10/0x10
[  340.935105][T17138]  ? __fget_files+0x3a2/0x420
[  340.935117][T17138]  ? __fget_files+0x2a/0x420
[  340.935131][T17138]  ? bpf_lsm_file_ioctl+0x9/0x20
[  340.935146][T17138]  ? __pfx_sock_ioctl+0x10/0x10
[  340.935164][T17138]  __se_sys_ioctl+0xfc/0x170
[  340.935180][T17138]  do_syscall_64+0x166/0x520
[  340.935196][T17138]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  340.935212][T17138]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  340.935249][T17138] RIP: 0033:0x7f7dc779e159
[  340.935263][T17138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  340.935276][T17138] RSP: 002b:00007f7dc862f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  340.935290][T17138] RAX: ffffffffffffffda RBX: 00007f7dc7a25fa0 RCX: 00007f7dc779e159
[  340.935302][T17138] RDX: 0000200000000440 RSI: 00000000000089f1 RDI: 0000000000000004
[  340.935310][T17138] RBP: 00007f7dc783506b R08: 0000000000000000 R09: 0000000000000000
[  340.935318][T17138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  340.935328][T17138] R13: 00007f7dc7a26038 R14: 00007f7dc7a25fa0 R15: 00007ffff03b5528
[  340.935349][T17138]  </TASK>
[  341.105680][T17136] loop1: detected capacity change from 0 to 32768
[  341.133856][T17136] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.4667 (17136)
[  341.201577][T17136] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  341.206459][T17136] BTRFS info (device loop1): using crc32c checksum algorithm
[  341.321644][T17136] BTRFS info (device loop1): enabling ssd optimizations
[  341.329212][T17136] BTRFS info (device loop1): turning on flush-on-commit
[  341.343642][T17136] BTRFS info (device loop1): enabling free space tree
[  341.358182][T17136] BTRFS info (device loop1): enabling auto defrag
[  341.372715][T17136] BTRFS info (device loop1): use lzo compression, level 1
[  341.381029][T17136] BTRFS info (device loop1): max_inline set to 4096
[  341.699171][T17191] overlayfs: failed to clone upperpath
[  342.629885][T16429] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  343.224082][    C1] batman_adv: batadv1: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 3
[  343.545242][T17238] netlink: 'syz.6.4699': attribute type 1 has an invalid length.
[  343.736317][T17242] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  344.207447][   T33] audit: type=1326 audit(2000000518.712:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17258 comm="syz.6.4709" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f355e99e159 code=0x7ffc0000
[  344.215280][   T33] audit: type=1326 audit(2000000518.712:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17258 comm="syz.6.4709" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f355e99e159 code=0x7ffc0000
[  344.228046][   T33] audit: type=1326 audit(2000000518.712:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17258 comm="syz.6.4709" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f355e99e159 code=0x7ffc0000
[  344.246035][   T33] audit: type=1326 audit(2000000518.721:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17258 comm="syz.6.4709" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f355e99e159 code=0x7ffc0000
[  344.254922][   T33] audit: type=1326 audit(2000000518.721:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17258 comm="syz.6.4709" exe="/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f355e99e159 code=0x7ffc0000
[  344.265158][   T33] audit: type=1326 audit(2000000518.721:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17258 comm="syz.6.4709" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f355e99e159 code=0x7ffc0000
[  344.276097][   T33] audit: type=1326 audit(2000000518.721:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17258 comm="syz.6.4709" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f355e99e159 code=0x7ffc0000
[  344.449322][T17274] tun0: tun_chr_ioctl cmd 1074025675
[  344.451138][T17274] tun0: persist enabled
[  344.452715][T17274] tun0: tun_chr_ioctl cmd 1074025675
[  344.454445][T17274] tun0: persist disabled
[  344.483662][T17277] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4715'.
[  344.530698][T17282] Bluetooth: hci0: invalid length 0, exp 2 for type 30
[  345.474024][ T5600] Bluetooth: hci3: command 0x0406 tx timeout
[  345.732763][T17313] loop9: detected capacity change from 0 to 256
[  345.917020][T17325] ip_tables: iptables: counters copy to user failed while replacing table
[  345.958516][T17327] loop1: detected capacity change from 0 to 128
[  345.976629][T17327] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  345.981988][T17327] ext4 filesystem being mounted at /66/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  346.048540][   T32] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  346.211590][   T32] usb 10-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00
[  346.215521][   T32] usb 10-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  346.219007][   T32] usb 10-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  346.223485][   T32] usb 10-1: config 0 interface 0 has no altsetting 0
[  346.225689][   T32] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  346.230675][   T32] usb 10-1: config 0 descriptor??
[  346.674283][   T32] hid (null): bogus close delimiter
[  346.681888][   T32] hid-multitouch 0003:0EEF:72C4.0006: collection stack underflow
[  346.687552][   T32] hid-multitouch 0003:0EEF:72C4.0006: item 0 4 0 12 parsing failed
[  346.700960][   T32] hid-multitouch 0003:0EEF:72C4.0006: probe with driver hid-multitouch failed with error -22
[  346.896893][   T32] usb 10-1: USB disconnect, device number 6
[  346.927043][T16429] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  347.052895][T17345] loop1: detected capacity change from 0 to 256
[  347.071277][T17345] syz.1.4745: attempt to access beyond end of device
[  347.071277][T17345] loop1: rw=8912896, sector=1800, nr_sectors = 20 limit=256
[  347.077042][T17345] syz.1.4745: attempt to access beyond end of device
[  347.077042][T17345] loop1: rw=8388608, sector=1800, nr_sectors = 8 limit=256
[  347.083316][   T33] kauditd_printk_skb: 2 callbacks suppressed
[  347.083324][   T33] audit: type=1800 audit(2000000521.369:1234): pid=17345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4745" name="file2" dev="loop1" ino=1048715 res=0 errno=0
[  347.084980][T17345] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF
[  347.097677][T17345] FAT-fs (loop1): Filesystem has been set read-only
[  347.247692][T17353] loop1: detected capacity change from 0 to 512
[  347.257197][T17353] EXT4-fs error (device loop1): ext4_iget_extra_inode:5152: inode #15: comm syz.1.4749: corrupted in-inode xattr: e_value out of bounds
[  347.266878][T17353] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  347.267092][T17353] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.4749: couldn't read orphan inode 15 (err -117)
[  347.273689][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  347.273699][    C1] EXT4-fs (loop1): initial error at time 2000000521: ext4_iget_extra_inode:5152: inode 15
[  347.273711][    C1] EXT4-fs (loop1): last error at time 2000000521: ext4_iget_extra_inode:5152: inode 15
[  347.286800][T17353] loop1: lost filesystem error report for type 5 error -117
[  347.287763][T17353] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  347.318666][T16429] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  347.478417][T17369] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4757'.
[  347.481782][T17369] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4757'.
[  348.201891][   T33] audit: type=1326 audit(2000000522.393:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17395 comm="syz.6.4767" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f355e99e159 code=0x7ffc0000
[  348.217523][   T33] audit: type=1326 audit(2000000522.403:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17395 comm="syz.6.4767" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f355e99e159 code=0x7ffc0000
[  348.232142][   T33] audit: type=1326 audit(2000000522.403:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17395 comm="syz.6.4767" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f355e99e159 code=0x7ffc0000
[  348.241065][   T33] audit: type=1326 audit(2000000522.403:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17395 comm="syz.6.4767" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f355e99e159 code=0x7ffc0000
[  348.253183][   T33] audit: type=1326 audit(2000000522.403:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17395 comm="syz.6.4767" exe="/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f355e99e159 code=0x7ffc0000
[  348.266694][   T33] audit: type=1326 audit(2000000522.439:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17395 comm="syz.6.4767" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f355e99e159 code=0x7ffc0000
[  348.287917][   T33] audit: type=1326 audit(2000000522.458:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17395 comm="syz.6.4767" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f355e99e159 code=0x7ffc0000
[  348.308981][   T33] audit: type=1326 audit(2000000522.458:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17395 comm="syz.6.4767" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f355e99e159 code=0x7ffc0000
[  348.562023][T17419] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4778'.
[  349.054574][T17440] netlink: 'syz.1.4788': attribute type 1 has an invalid length.
[  349.174443][T17448] loop9: detected capacity change from 0 to 512
[  349.191610][T17448] EXT4-fs error (device loop9): ext4_orphan_get:1399: inode #15: comm syz.9.4792: iget: bad i_size value: 38620345925642
[  349.211773][T17448] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  349.212128][T17448] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.4792: couldn't read orphan inode 15 (err -117)
[  349.215815][    C0] EXT4-fs (loop9): error count since last fsck: 1
[  349.215830][    C0] EXT4-fs (loop9): initial error at time 2000000523: ext4_orphan_get:1399: inode 15
[  349.215851][    C0] EXT4-fs (loop9): last error at time 2000000523: ext4_orphan_get:1399: inode 15
[  349.278986][T17448] loop9: lost filesystem error report for type 5 error -117
[  349.280807][T17448] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  349.318183][T17448] Invalid argument reading file caps for ./file0
[  349.359332][T15685] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  349.453001][T17462] batadv0: entered promiscuous mode
[  349.468082][T17462] macvtap0: entered promiscuous mode
[  349.471656][T17462] 8021q: adding VLAN 0 to HW filter on device macvtap0
[  349.478799][T17462] batadv0: left promiscuous mode
[  350.253614][ T5057] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  350.440686][ T5057] usb 2-1: Using ep0 maxpacket: 16
[  350.447277][ T5057] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  350.462109][ T5057] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  350.470692][ T5057] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  350.477303][ T5057] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  350.480457][ T5057] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  350.488897][ T5057] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  350.495305][ T5057] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  350.497900][ T5057] usb 2-1: Manufacturer: syz
[  350.501053][ T5057] usb 2-1: config 0 descriptor??
[  350.853707][   T34] INFO: task syz.5.2395:11615 blocked for more than 143 seconds.
[  350.858969][   T34]       Tainted: G             L      syzkaller #0
[  350.865223][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  350.869494][   T34] task:syz.5.2395      state:D stack:26648 pid:11615 tgid:11609 ppid:8940   task_flags:0x400040 flags:0x00080002
[  350.873973][ T5057] rc_core: IR keymap rc-hauppauge not found
[  350.876381][   T34] Call Trace:
[  350.877616][   T34]  <TASK>
[  350.878963][ T5057] Registered IR keymap rc-empty
[  350.880684][   T34]  __schedule+0x17d4/0x5630
[  350.885869][ T5057] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  350.888124][   T34]  ? __pfx___schedule+0x10/0x10
[  350.889790][   T34]  ? schedule+0x90/0x2b0
[  350.891167][   T34]  schedule+0x164/0x2b0
[  350.894005][   T34]  schedule_preempt_disabled+0x13/0x30
[  350.896416][   T34]  __mutex_lock+0x7c1/0x1550
[  350.898293][   T34]  ? __mutex_lock+0x5d4/0x1550
[  350.900248][   T34]  ? write_versions+0x95/0xe30
[  350.902246][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  350.904336][   T34]  ? __might_fault+0xaf/0x130
[  350.906433][   T34]  write_versions+0x95/0xe30
[  350.909347][   T34]  ? __pfx_write_versions+0x10/0x10
[  350.913215][   T34]  ? _copy_from_user+0x94/0xb0
[  350.916080][   T34]  ? simple_transaction_get+0x12d/0x160
[  350.916129][ T5057] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  350.918614][   T34]  nfsctl_transaction_write+0x10f/0x160
[  350.923764][   T34]  ? __pfx_nfsctl_transaction_write+0x10/0x10
[  350.929173][   T34]  vfs_write+0x296/0xba0
[  350.931156][   T34]  ? __pfx_vfs_write+0x10/0x10
[  350.933331][   T34]  ? __fget_files+0x2a/0x420
[  350.935676][   T34]  ? __fget_files+0x3a2/0x420
[  350.938567][   T34]  ? __fget_files+0x2a/0x420
[  350.941144][   T34]  ksys_write+0x150/0x270
[  350.943104][   T34]  ? __pfx_ksys_write+0x10/0x10
[  350.945361][   T34]  do_syscall_64+0x166/0x520
[  350.948008][   T34]  ? trace_irq_disable+0x3b/0x140
[  350.950340][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  350.952967][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  350.956011][   T34] RIP: 0033:0x7fa2c399e159
[  350.958867][ T5057] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  350.960172][   T34] RSP: 002b:00007fa2c485d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  350.966400][   T34] RAX: ffffffffffffffda RBX: 00007fa2c3c26090 RCX: 00007fa2c399e159
[  350.969075][   T34] RDX: 0000000000000009 RSI: 0000200000000540 RDI: 0000000000000003
[  350.972268][   T34] RBP: 00007fa2c3a3506b R08: 0000000000000000 R09: 0000000000000000
[  350.975413][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  350.978482][   T34] R13: 00007fa2c3c26128 R14: 00007fa2c3c26090 R15: 00007ffe794dc288
[  350.979879][ T5057] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input11
[  350.982534][   T34]  </TASK>
[  350.987849][   T34] INFO: task syz.5.2395:11624 blocked for more than 143 seconds.
[  350.991542][   T34]       Tainted: G             L      syzkaller #0
[  350.994294][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  350.995300][ T5057] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  350.997791][   T34] task:syz.5.2395      state:D stack:27432 pid:11624 tgid:11609 ppid:8940   task_flags:0x400040 flags:0x00080002
[  351.005843][   T34] Call Trace:
[  351.007665][   T34]  <TASK>
[  351.009347][   T34]  __schedule+0x17d4/0x5630
[  351.011286][   T34]  ? kernel_text_address+0xa5/0xe0
[  351.017609][   T34]  ? __pfx___schedule+0x10/0x10
[  351.021251][   T34]  ? schedule+0x90/0x2b0
[  351.024713][   T34]  schedule+0x164/0x2b0
[  351.026569][   T34]  schedule_preempt_disabled+0x13/0x30
[  351.028924][   T34]  __mutex_lock+0x7c1/0x1550
[  351.030905][   T34]  ? nfsctl_transaction_write+0xc7/0x160
[  351.033235][   T34]  ? __mutex_lock+0x5d4/0x1550
[  351.034084][ T5057] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  351.035874][   T34]  ? write_threads+0x39d/0x5a0
[  351.039522][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  351.042132][   T34]  ? simple_strntoull+0x111/0x190
[  351.044313][   T34]  ? qword_get+0x5ad/0x650
[  351.048267][   T34]  write_threads+0x39d/0x5a0
[  351.050227][   T34]  ? __might_fault+0xaf/0x130
[  351.052187][   T34]  ? __pfx_write_threads+0x10/0x10
[  351.054332][   T34]  ? _copy_from_user+0x94/0xb0
[  351.056390][   T34]  ? simple_transaction_get+0x12d/0x160
[  351.058670][   T34]  nfsctl_transaction_write+0x10f/0x160
[  351.060833][   T34]  ? __pfx_nfsctl_transaction_write+0x10/0x10
[  351.063539][   T34]  vfs_write+0x296/0xba0
[  351.065407][   T34]  ? __pfx_vfs_write+0x10/0x10
[  351.066279][ T5057] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  351.067973][   T34]  ? __fget_files+0x2a/0x420
[  351.071429][   T34]  ? __fget_files+0x3a2/0x420
[  351.073238][   T34]  ? __fget_files+0x2a/0x420
[  351.074915][   T34]  ksys_write+0x150/0x270
[  351.076310][   T34]  ? __pfx_ksys_write+0x10/0x10
[  351.078917][   T34]  do_syscall_64+0x166/0x520
[  351.081034][   T34]  ? trace_irq_disable+0x3b/0x140
[  351.082971][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  351.085415][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  351.087439][   T34] RIP: 0033:0x7fa2c399e159
[  351.089525][   T34] RSP: 002b:00007fa2c483c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  351.092226][   T34] RAX: ffffffffffffffda RBX: 00007fa2c3c26180 RCX: 00007fa2c399e159
[  351.094923][   T34] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 0000000000000003
[  351.097731][   T34] RBP: 00007fa2c3a3506b R08: 0000000000000000 R09: 0000000000000000
[  351.098830][ T5057] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  351.100672][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  351.105020][   T34] R13: 00007fa2c3c26218 R14: 00007fa2c3c26180 R15: 00007ffe794dc288
[  351.107619][   T34]  </TASK>
[  351.109415][   T34] 
[  351.109415][   T34] Showing all locks held in the system:
[  351.112501][   T34] locks held by ksoftirqd/0/15: 1, last CPU#0:
[  351.114558][   T34]  #0: ffff88812103b2e0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160
[  351.128809][   T34] locks held by khungtaskd/34: 1, last CPU#1:
[  351.132944][ T5057] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  351.141849][   T34]  #0: ffffffff8eb5a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  351.160800][   T34] locks held by kworker/u10:2/68: 2, on CPU#1:
[  351.167907][ T5057] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  351.184590][   T34]  #0: ffff8881000ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0
[  351.198031][ T5057] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  351.227245][   T34]  #1: ffffc90001797c40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0
[  351.241453][ T5057] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  351.281399][   T34] locks held by kworker/0:3/5057: 5, last CPU#0:
[  351.293898][ T5057] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  351.304825][   T34]  #0: ffff888105695540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0
[  351.311018][   T34]  #1: ffffc900034cfc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0
[  351.314697][   T34]  #2: ffff88816b33d1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30
[  351.317984][ T5057] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  351.318362][   T34]  #3: ffff8881164071d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450
[  351.324023][   T34]  #4: ffff88811e5001a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450
[  351.328357][   T34] locks held by getty/5419: 2, on CPU#1:
[  351.330775][   T34]  #0: ffff8881722810a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  351.334710][   T34]  #1: ffffc900034762e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
[  351.339329][   T34] locks held by syz.5.2395/11610: 3, on CPU#1:
[  351.341935][   T34]  #0: ffff88816d9d8af0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  351.345619][   T34]  #1: ffff88811162a460 (sb_writers#42){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  351.349625][   T34]  #2: ffffffff8ee8fbe0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10
[  351.350618][ T5057] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  351.356078][   T34] locks held by syz.5.2395/11615: 3, on CPU#0:
[  351.359237][ T5057] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  351.361113][   T34]  #0: ffff888105f1a0f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  351.368989][ T5057] usb 2-1: USB disconnect, device number 10
[  351.369061][   T34]  #1: ffff88811162a460 (sb_writers#42){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  351.382731][   T34]  #2: ffffffff8ee8fbe0 (nfsd_mutex){+.+.}-{4:4}, at: write_versions+0x95/0xe30
[  351.386603][   T34] locks held by syz.5.2395/11624: 3, on CPU#1:
[  351.389303][   T34]  #0: ffff88816bcf4af0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  351.393850][   T34]  #1: ffff88811162a460 (sb_writers#42){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  351.397636][   T34]  #2: ffffffff8ee8fbe0 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x39d/0x5a0
[  351.401547][   T34] locks held by syz-executor/12065: 2, on CPU#1:
[  351.405903][   T34]  #0: ffff88817269e0e8 (&type->s_umount_key#96){++++}-{4:4}, at: deactivate_super+0xac/0xe0
[  351.410489][   T34]  #1: ffffffff8ee8fbe0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x4e/0xd0
[  351.415583][   T34] locks held by syz-executor/14818: 2, on CPU#1:
[  351.418305][   T34]  #0: ffff88811289e0e8 (&type->s_umount_key#96){++++}-{4:4}, at: deactivate_super+0xac/0xe0
[  351.422385][   T34]  #1: ffffffff8ee8fbe0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x4e/0xd0
[  351.426664][   T34] locks held by syz.2.4029/15379: 1, on CPU#0:
[  351.429394][   T34]  #0: ffff88817269e0e8 (&type->s_umount_key#96){++++}-{4:4}, at: super_lock+0x2d6/0x3d0
[  351.433288][   T34] locks held by syz.1.4799/17467: 1, last CPU#0:
[  351.436693][   T34]  #0: ffff88812103b2e0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160
[  351.440709][   T34] locks held by syz.9.4806/17484: 1, on CPU#1:
[  351.443108][   T34]  #0: ffffffff8eb603e8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770
[  351.447699][   T34] 
[  351.450109][   T34] =============================================
[  351.450109][   T34] 
[  351.461235][   T34] NMI backtrace for cpu 1
[  351.461249][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  351.461266][   T34] Tainted: [L]=SOFTLOCKUP
[  351.461270][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  351.461277][   T34] Call Trace:
[  351.461282][   T34]  <TASK>
[  351.461289][   T34]  dump_stack_lvl+0xe8/0x150
[  351.461312][   T34]  nmi_cpu_backtrace+0x274/0x2d0
[  351.461328][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  351.461348][   T34]  nmi_trigger_cpumask_backtrace+0x17d/0x390
[  351.461364][   T34]  sys_info+0x135/0x170
[  351.461376][   T34]  watchdog+0xfd7/0x1030
[  351.461398][   T34]  ? watchdog+0x1c7/0x1030
[  351.461420][   T34]  kthread+0x38b/0x480
[  351.461439][   T34]  ? __pfx_watchdog+0x10/0x10
[  351.461454][   T34]  ? __pfx_kthread+0x10/0x10
[  351.461472][   T34]  ret_from_fork+0x514/0xb70
[  351.461491][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  351.461510][   T34]  ? __switch_to+0xc89/0x1420
[  351.461527][   T34]  ? __pfx_kthread+0x10/0x10
[  351.461545][   T34]  ret_from_fork_asm+0x1a/0x30
[  351.461574][   T34]  </TASK>
[  351.461578][   T34] Sending NMI from CPU 1 to CPUs 0:
[  351.511372][    C0] NMI backtrace for cpu 0
[  351.511384][    C0] CPU: 0 UID: 0 PID: 5522 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  351.511396][    C0] Tainted: [L]=SOFTLOCKUP
[  351.511399][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  351.511403][    C0] RIP: 0010:deref_stack_reg+0x4a/0x220
[  351.511414][    C0] Code: df 48 83 c7 08 49 89 fc 49 c1 ec 03 41 80 3c 34 00 4c 89 04 24 74 13 e8 94 24 bd 00 4c 8b 04 24 48 be 00 00 00 00 00 fc ff df <48> 89 5c 24 08 49 8b 6f 08 49 8d 7f 10 49 89 fd 49 c1 ed 03 41 80
[  351.511420][    C0] RSP: 0018:ffffc90000007898 EFLAGS: 00000246
[  351.511428][    C0] RAX: fffffffffffffff0 RBX: ffffc900000079c8 RCX: 0000000000000000
[  351.511433][    C0] RDX: ffffc900000079c8 RSI: dffffc0000000000 RDI: ffffc90000007990
[  351.511437][    C0] RBP: 1ffffffff22efa2d R08: ffffc900048efb70 R09: 0000000000000000
[  351.511442][    C0] R10: ffffc900000079d8 R11: fffff52000000f3d R12: 1ffff92000000f32
[  351.511446][    C0] R13: ffffffff9177d16d R14: ffffc90000007988 R15: ffffc90000007988
[  351.511451][    C0] FS:  0000555594a40540(0000) GS:ffff88818d939000(0000) knlGS:0000000000000000
[  351.511457][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  351.511461][    C0] CR2: 00007f7dc79ef2f8 CR3: 0000000112000000 CR4: 00000000000006f0
[  351.511489][    C0] Call Trace:
[  351.511494][    C0]  <IRQ>
[  351.511498][    C0]  unwind_next_frame+0x19bd/0x2550
[  351.511507][    C0]  ? sock_recvmsg+0x166/0x1e0
[  351.511513][    C0]  ? unwind_next_frame+0x8f/0x2550
[  351.511520][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  351.511529][    C0]  arch_stack_walk+0x11b/0x150
[  351.511537][    C0]  ? sock_read_iter+0x22a/0x2f0
[  351.511547][    C0]  stack_trace_save+0xa9/0x100
[  351.511554][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  351.511563][    C0]  ? __lock_acquire+0x683/0x2cf0
[  351.511573][    C0]  kasan_save_track+0x3e/0x80
[  351.511582][    C0]  ? kasan_save_track+0x3e/0x80
[  351.511590][    C0]  ? kasan_save_free_info+0x40/0x50
[  351.511597][    C0]  ? __kasan_slab_free+0x5c/0x80
[  351.511606][    C0]  ? __rcu_free_sheaf_prepare+0x12d/0x2a0
[  351.511612][    C0]  ? rcu_free_sheaf+0x31/0x200
[  351.511620][    C0]  ? rcu_core+0x794/0x10b0
[  351.511633][    C0]  ? handle_softirqs+0x226/0x860
[  351.511641][    C0]  ? do_softirq+0x77/0xd0
[  351.511647][    C0]  ? __local_bh_enable_ip+0x100/0x140
[  351.511654][    C0]  ? tcp_recvmsg+0x1df/0x7f0
[  351.511660][    C0]  ? sock_recvmsg+0x166/0x1e0
[  351.511674][    C0]  kasan_save_free_info+0x40/0x50
[  351.511681][    C0]  __kasan_slab_free+0x5c/0x80
[  351.511690][    C0]  __rcu_free_sheaf_prepare+0x12d/0x2a0
[  351.511697][    C0]  ? rcu_core+0x716/0x10b0
[  351.511706][    C0]  ? rcu_core+0x716/0x10b0
[  351.511714][    C0]  rcu_free_sheaf+0x31/0x200
[  351.511723][    C0]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  351.511731][    C0]  ? __pfx_rcu_free_sheaf+0x10/0x10
[  351.511740][    C0]  ? rcu_core+0x716/0x10b0
[  351.511748][    C0]  rcu_core+0x794/0x10b0
[  351.511760][    C0]  ? __pfx_rcu_core+0x10/0x10
[  351.511768][    C0]  ? net_tx_action+0x5bb/0xc30
[  351.511777][    C0]  handle_softirqs+0x226/0x860
[  351.511785][    C0]  ? do_softirq+0x77/0xd0
[  351.511792][    C0]  ? tcp_recvmsg+0x1df/0x7f0
[  351.511798][    C0]  do_softirq+0x77/0xd0
[  351.511804][    C0]  </IRQ>
[  351.511806][    C0]  <TASK>
[  351.511808][    C0]  __local_bh_enable_ip+0x100/0x140
[  351.511816][    C0]  tcp_recvmsg+0x1df/0x7f0
[  351.511822][    C0]  ? __pfx_aa_sk_perm+0x10/0x10
[  351.511830][    C0]  ? __pfx_tcp_recvmsg+0x10/0x10
[  351.511836][    C0]  ? aa_sock_msg_perm+0xf6/0x1c0
[  351.511842][    C0]  ? sock_rps_record_flow+0x19/0x350
[  351.511851][    C0]  ? inet_recvmsg+0xb3/0x120
[  351.511859][    C0]  ? __pfx_inet_recvmsg+0x10/0x10
[  351.511867][    C0]  sock_recvmsg+0x166/0x1e0
[  351.511873][    C0]  sock_read_iter+0x22a/0x2f0
[  351.511883][    C0]  ? __pfx_sock_read_iter+0x10/0x10
[  351.511893][    C0]  ? bpf_lsm_file_permission+0x9/0x20
[  351.511901][    C0]  ? security_file_permission+0x75/0x260
[  351.511913][    C0]  vfs_read+0x595/0xa80
[  351.511919][    C0]  ? __hrtimer_setup+0x1b7/0x260
[  351.511927][    C0]  ? __pfx_vfs_read+0x10/0x10
[  351.511937][    C0]  ksys_read+0x150/0x270
[  351.511944][    C0]  ? __pfx_ksys_read+0x10/0x10
[  351.511952][    C0]  do_syscall_64+0x166/0x520
[  351.511960][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  351.511968][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  351.511974][    C0] RIP: 0033:0x7f337c9592d7
[  351.511980][    C0] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  351.511985][    C0] RSP: 002b:00007fff5d629460 EFLAGS: 00000202 ORIG_RAX: 0000000000000000
[  351.511992][    C0] RAX: ffffffffffffffda RBX: 0000555594a40540 RCX: 00007f337c9592d7
[  351.511997][    C0] RDX: 0000000000000004 RSI: 00007fff5d6294bc RDI: 0000000000000003
[  351.512001][    C0] RBP: 00007fff5d629960 R08: 0000000000000000 R09: 0000000000000000
[  351.512004][    C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000004
[  351.512008][    C0] R13: 00007fff5d6294bc R14: 00007fff5d629550 R15: 0000000000000000
[  351.512016][    C0]  </TASK>
[  351.771652][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  351.774397][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  351.778540][   T34] Tainted: [L]=SOFTLOCKUP
[  351.780293][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  351.784288][   T34] Call Trace:
[  351.785672][   T34]  <TASK>
[  351.786864][   T34]  vpanic+0x56d/0xa60
[  351.788512][   T34]  ? __pfx___schedule+0x10/0x10
[  351.790438][   T34]  ? __pfx_vpanic+0x10/0x10
[  351.792245][   T34]  ? nmi_trigger_cpumask_backtrace+0x20a/0x390
[  351.794681][   T34]  panic+0xc5/0xd0
[  351.796222][   T34]  ? __pfx_panic+0x10/0x10
[  351.797970][   T34]  ? preempt_schedule_common+0x7f/0xd0
[  351.800111][   T34]  ? preempt_schedule_thunk+0x16/0x40
[  351.802308][   T34]  ? nmi_trigger_cpumask_backtrace+0x31a/0x390
[  351.804836][   T34]  ? nmi_trigger_cpumask_backtrace+0x31f/0x390
[  351.807395][   T34]  watchdog+0x1030/0x1030
[  351.809320][   T34]  ? watchdog+0x1c7/0x1030
[  351.811228][   T34]  kthread+0x38b/0x480
[  351.812888][   T34]  ? __pfx_watchdog+0x10/0x10
[  351.814779][   T34]  ? __pfx_kthread+0x10/0x10
[  351.816670][   T34]  ret_from_fork+0x514/0xb70
[  351.818532][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  351.820597][   T34]  ? __switch_to+0xc89/0x1420
[  351.822541][   T34]  ? __pfx_kthread+0x10/0x10
[  351.824408][   T34]  ret_from_fork_asm+0x1a/0x30
[  351.826397][   T34]  </TASK>
[  351.828379][   T34] Kernel Offset: disabled
[  351.830131][   T34] Rebooting in 86400 seconds..
