last executing test programs:

2m21.103778275s ago: executing program 1 (id=1342):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x10e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@jqfmt_vfsv0}, {@quota}]}, 0x3, 0x45f, &(0x7f0000000ec0)="$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")
chdir(&(0x7f0000000140)='./file0\x00')
r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

2m21.02638182s ago: executing program 1 (id=1343):
setns(0xc9, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000080801"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4)

2m20.966681227s ago: executing program 1 (id=1344):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/vm/compaction_proactiveness\x00', 0x80401, 0x0)
pwrite64(r0, &(0x7f00000002c0)="13", 0x1, 0x9)

2m20.914507766s ago: executing program 1 (id=1346):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001680)=ANY=[@ANYBLOB="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"/2728], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x108, 0xe, 0x0, &(0x7f0000000340)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf48f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2m20.846514923s ago: executing program 1 (id=1349):
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
r1 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, 0x0)
syz_ublk_add_dev(r0, 0x0, r1, 0x0, &(0x7f0000000340)={0x2e, 0x40, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@any_dev={0x2, 0x62c, 0x0, 0x0, 0x1000, 0x4, 0x0, 0x0, 0x6}}}, &(0x7f00000003c0)=<r2=>0x0)
syz_ublk_setup_queues(r0, r2, &(0x7f0000000200)={0x0, 0x8427, 0x0, 0xfffffffe, 0x34d}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c8b, 0x20, 0x3, 0x98}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x8000, 0x43, 0xffffffff}}], 0x1, 0x0, 0x0)

2m20.604563892s ago: executing program 1 (id=1352):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000080), 0x4)
recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x764a}, {{0x0, 0x0, 0x0}, 0x1000}], 0x2, 0x4010022, 0x0)

2m20.497739745s ago: executing program 32 (id=1352):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000080), 0x4)
recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x764a}, {{0x0, 0x0, 0x0}, 0x1000}], 0x2, 0x4010022, 0x0)

2m17.437696569s ago: executing program 3 (id=1353):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
lseek(r0, 0x2, 0x1000000)

2m17.365173671s ago: executing program 3 (id=1373):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x209, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x1c}}, 0x10)

2m17.364688996s ago: executing program 3 (id=1374):
close(0x3)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40000)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000340)={[{@test_dummy_encryption}, {@nodioread_nolock}, {@norecovery}]}, 0x3, 0x470, &(0x7f0000000dc0)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000300)='./bus\x00', 0x448c, 0x0, 0x0, 0x0, &(0x7f0000000300))
chdir(&(0x7f00000003c0)='./bus\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x0, 0x111, 0x4b4, 0x1d0, 0xd4feffff, 0x1d0, 0x20a, 0x278, 0x2c8, 0x278, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xbf8, 'system_u:object_r:auditd_exec_t:s0\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8)
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000700), 0x24, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0}, 0x28)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./trace/current_tracer\x00', 0x1, 0x0)
write(r4, &(0x7f0000000140)='nop', 0x3)
syz_mount_image$vfat(&(0x7f0000000600), &(0x7f0000000680)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x620442, 0x0, 0x1, 0x0, &(0x7f0000000d40))
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)

2m16.437404457s ago: executing program 3 (id=1383):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/apparmor/.access\x00', 0x2, 0x0)
write$P9_RLERRORu(r0, &(0x7f0000000440)={0xe, 0x7, 0x2, {{0x1, '-'}, 0x400}}, 0xe)

2m14.745314767s ago: executing program 3 (id=1395):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22}, {0x2, 0x200, @dev={0xac, 0x14, 0x14, 0x39}}, {0x2, 0x0, @broadcast}, 0x105, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0xe1b2})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local})
ioctl$sock_SIOCSIFBR(r1, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2})

2m14.605689819s ago: executing program 33 (id=1395):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22}, {0x2, 0x200, @dev={0xac, 0x14, 0x14, 0x39}}, {0x2, 0x0, @broadcast}, 0x105, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0xe1b2})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local})
ioctl$sock_SIOCSIFBR(r1, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2})

1m25.479707928s ago: executing program 4 (id=1954):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x12}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80)

1m25.294415605s ago: executing program 4 (id=1957):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007882b740422c0917b7ca010203010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00\a\a'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1m25.174568867s ago: executing program 2 (id=1958):
r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)
pselect6(0x40, &(0x7f0000000040)={0x8, 0x0, 0x0, 0xffffffffffffe198, 0x7, 0xfffffff9, 0x1}, 0x0, 0x0, 0x0, 0x0)

1m24.07034297s ago: executing program 2 (id=1959):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@setlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0xfffe}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast2}]}}}, @IFLA_MTU={0x8, 0x4, 0x80}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0)

1m24.069064131s ago: executing program 2 (id=1960):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000024c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f00000084c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x3c, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0xc880)

1m23.995891824s ago: executing program 2 (id=1961):
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x51)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0)
chdir(&(0x7f0000000200)='./file0/file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000000)='sysfs\x00', 0x1214040, 0x0)

1m23.995660338s ago: executing program 2 (id=1962):
syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./file0\x00', 0x1c802, &(0x7f0000002740)=ANY=[@ANYBLOB="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"], 0x1, 0x5f16, &(0x7f0000003100)="$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")
symlink(&(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0/file0\x00', &(0x7f0000000280)='./file0\x00')
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
rename(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0\x00')

1m23.895429614s ago: executing program 4 (id=1963):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x100, @empty, 'lo\x00'}}, 0x1e)
ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000080))

1m23.895169879s ago: executing program 4 (id=1964):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f00000059c0)=ANY=[@ANYBLOB="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"], 0x5, 0x5505, &(0x7f0000000340)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r1=>0x0}, 0x0)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
splice(r0, &(0x7f0000000040)=0x9100000000000000, r1, 0x0, 0x808, 0x0)

1m23.79567486s ago: executing program 2 (id=1965):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000a0)='./proc/net/afs/cells\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)="61646420206f6f73797a205b959b86c2038af739ac7ce85b1980981f94ea922cca2e2045096e3b58cd2c18b3ffd4d8d8725257bd7534fad339b98b74ad76ceaf04ad12bd0f6b7e78e77de62fc12e724fe08e1e6f0318a33d60e7c5747aa64a65b6fa5edf11a745f5aa89796672611fc76df92ab1a4d716b740733f969554b324885bc81435681dc8dd9b8a63ee618c5ed31ce810a1868954249311e9a23e9fcb3df5cbed706333cdb519ad4f3c7230cd3742a3b88f08280f0eb33499969c0d88d5cd9b108397bff94a463097efc9637d98a89bb16e87b09e5d", 0xd9)

1m23.78740389s ago: executing program 34 (id=1965):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000a0)='./proc/net/afs/cells\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)="61646420206f6f73797a205b959b86c2038af739ac7ce85b1980981f94ea922cca2e2045096e3b58cd2c18b3ffd4d8d8725257bd7534fad339b98b74ad76ceaf04ad12bd0f6b7e78e77de62fc12e724fe08e1e6f0318a33d60e7c5747aa64a65b6fa5edf11a745f5aa89796672611fc76df92ab1a4d716b740733f969554b324885bc81435681dc8dd9b8a63ee618c5ed31ce810a1868954249311e9a23e9fcb3df5cbed706333cdb519ad4f3c7230cd3742a3b88f08280f0eb33499969c0d88d5cd9b108397bff94a463097efc9637d98a89bb16e87b09e5d", 0xd9)

1m23.645338105s ago: executing program 4 (id=1966):
syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x1000041, &(0x7f00000002c0)={[{@noblock_validity}, {@oldalloc}, {@orlov}, {@quota}]}, 0x1, 0x5a4, &(0x7f00000003c0)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000100)='./file0\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
getdents64(r0, &(0x7f0000002f40)=""/4079, 0x7c4)

1m23.53537664s ago: executing program 4 (id=1967):
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2)
r1 = dup(r0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x80005520, 0x0)

1m7.9314469s ago: executing program 35 (id=1967):
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2)
r1 = dup(r0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x80005520, 0x0)

1.993671869s ago: executing program 5 (id=3098):
listns(&(0x7f0000000000)={0x20, 0x0, 0x2, 0x8000000}, &(0x7f0000000040)=[0x0], 0x1, 0x0)

1.486712119s ago: executing program 5 (id=3100):
r0 = socket$kcm(0x10, 0x2, 0x10)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000001140)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRESOCT, @ANYRESOCT, @ANYRESDEC], 0x6, 0x2c1, &(0x7f0000001880)="$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")
r1 = epoll_create1(0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x5586, &(0x7f00000079c0)="$eJzs3EtvG2UXAOAzTtP71y9CLNh1pAopkWqrTi+CFQVacRGtKi4LVuDYruXW9kSx44SsumCJWPBPEEisWPIbWMASdogFiB0SyDMTaNoGSuM4avs80vjMHL8+874jK9KZiRzAU2sh/e2XJE7FsYiYi4iTSeT7SblF3Im4XIx9LiJOR0Tlri0p838lDkfE8Yg4NSle1EzKtz47Oz5z8ec3f/362yOHTnz+1XcHunDgQD0fEf3VYn+jX8SsU8RbZb4x7uaxf2FcxtUdNfpZkd9or+QVNhrb4xp5PN8pxmer68NJvNlrNCex072Z51cHxQmH4852nckH0luNtfy41V7JY3eY5bGzVZx3c6v427Y1HBV1WmW9j/LyMRptxyLf3mwX61m9ncfmYFTmi7pZq705ieMylqeLZtZr5fNYecSL/Bh4qztY30zH7bVhNxukF2v1F2r1S9X6WtZqj9oXqo1+69KFdLHTmwyrjtqN/uVOlnV67Voz6y+li51ms1qvp4tX2ivdxiCt12vna+eqF5fKvbPpa9ffS3utdHESX+kO1kfd3jC9ma2lxSeW0uXa+ReX0jP19J1rN9Ibb1+9eu3Gux9cef/6y9feeLUcdN+00sXlc8vL1fq56nJ96Sla/8flpP/D+pMHp3/4fm+XDQq7fMEA2N19/X/c2/+H/h+Yur30//3b5fH+9P/xMP1/TLP/n7RU+v9/738rB9D/zof+fx/XD3vyaP3/4anPAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAmftx/ovX852F4vhEmf9fmXqmPE4iohIRfzzAXBzeUXOurDO/y/j5e+bwTRJ5hck5jpTb8Yi4XG6//3+/rwIAAAA8ub68c/rTolsvXhYOekLMUnHTpnLywynVSyJifuGnKVWrTF6enVKx/Pt9KDanVC2/gXV0SsWKW26HplXtocztCEfvCkkRKjOdDgAAMBM7O4HZdiEAAADM0if/+O5LM5sHM5bE9qPM7WfB+X/e//1A8NiO9wAAAIDHUHLQEwAAAAD2Xd7/+/0/AAAAeLIVv/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf7JzP7lpA1EcgJ8Nhv5VUdV9r9IdHKNH6LLLwgF6CY5Ar9ALcAYiZZEjRBBhT5CcgBSJMU7Q90m2M+Po5xlg88bSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXbqpVrN/f77/PTdnuztPntkAAAAAx2yq1az+Y9K0P6b+z6nra2oXEVFGxLHafRCjVuYg5VQn/r96Mob/EXXCvn+cjg8R8SMd91+6/hQAAADgeq0Xy2lTrTentARw2++ouJBm0ab89DNTXhER1eQuU1q5P33LFFb/vofxO1NavYD1LlNYs+Q2PH5vlOshbYPW5XEm8/pLrFtlN88FAAD61K4ETlQhAAAAXIFffQ+AS3he2heH0+E947i5pBeC71stAAAA4A0q+h4AAAAA0Lm6/n9N+/8V9v8DAACA7Jr9/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOjSplrN1ovl9NT9+Qtztrvz5JsRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLA/7ygQAmEQBnvXdyZz/8NKg4bGJlUgfPyNwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJvf/eX/xNQ4k8y9NpaeR5K1U2Pr1Ng7N47+ML5+DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxf68pEAIBEEUzBn/O+n7H1YS9AwiREDDo4paNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwRb/75f/E1DiTzJ02lo5HkrWrxtZVY+9B4+jBePs3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxb799EZRhgEAf3anu1DUWKtpYtVgwkEvUhYEuRqjaTz4EUyassXqIgo9CGnEXryZnrkYPRpjoqm3fgfONOGCNw491MSTh5r5V2bbFRqUmUJ/v+Td99nZ4f23E9Jn3lkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABKm+/Gq+0iTtKXiTwuj93eWp5P641ddWp99c50WtK4VfO4nwCvVd8cn2puIAAAABweSZnfR8TdztpsWrcnsvy/U56T5vw/PJfHZT6/O+/f2Fo+Wnw0Xeb/v/9276WdjiaSrJ+00YXFQf/U3qGMPaYpHnjPP/SMsWzls3svSfaFtD9ceXGzk61n67tbt97vZuGROkYLADyKk2VdBOXfQ2nda3JgABwaY5XEu8z/k4lmxwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQh82VeKaMWxExPXY/Tm1sLc+Pqr9ZvTO9XpRzN2+uVttMm+hExMLioH+qxrkcXOVqXv9sbjDoX7l6re7geESM+OjG/v55Ugz/X8/pRsTQkRMvj2jn4330taudPUFxeUa9aziezu+hJ7eGjrT2LPh727kmLoC6gnbx/TyOLsZr/96Hg/La+/9brvm/IwAAnnqdoqSZ6N3O2mx6rDUZsf3jcP7/RiWOobx/+0Z+JH+/Xsn/731y7na1r2r+36tpfk+CmaVLX8xcvXb9rcVLcxf7F/ufv326907vzPmzZ8/PZPdKZhai7Y4JAAAA/0G3KNX8vz25d///WCWOB+z/51vCef7/5fe9r6t9JfL/ke5v+jU9EgAAgMOouxO98Ppff7ZGnNHqduOruaWlK738def96fy11uE+oiNFqeb/yWTTowIAAADqsLnSGtr/v1CJ4wH7/9Xn/5/96ZVfqm0mETEecTki+ifnLw8u1DedA62OHypnHXWbnikAAABNGS9Kdf+/kz3/39555KEdEW+eiPi7+A1/7DP/Tz749udqX9Xn/8/UOsuDpz2Vr0dWT0WMTTU9IgAAAJ5mR4uSJvt/dNZmP/312Eddz/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1O2fAAAA//+FVSwP")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000003c0)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
syz_open_dev$vivid(&(0x7f0000000140), 0x3, 0x2)
keyctl$dh_compute(0x17, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={'sha384\x00'}})
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x187)
syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f0000000b40)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1802e53, 0x0, 0xfa, 0x0, &(0x7f00000000c0))
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f00000044c0), 0x0, 0x2022, 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989})
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x21, @any, 0x0, 0x2}, 0xe)

827.048971ms ago: executing program 5 (id=3116):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@local, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0xffff, 0x7, 0x22d4, 0x400, 0x4, 0x53})

738.883788ms ago: executing program 0 (id=3117):
socket(0x10, 0x3, 0x0)
socket$pptp(0x18, 0x1, 0x2)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x11e, 0x110, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430)
r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x10)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x4004, @fd, 0xf8, 0x0, 0x0, 0x11, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0)

738.653908ms ago: executing program 5 (id=3118):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b'], 0x38}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x200040c1)
r0 = io_uring_setup(0x6bb, &(0x7f0000000040)={0x0, 0x3cb3, 0x1c080, 0xa, 0x20082f5})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x0)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

738.395185ms ago: executing program 0 (id=3119):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000180)=0x84, 0x4)
sendto$inet6(r0, 0x0, 0x4881b39f, 0x4, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f00000000c0), 0x4)

673.138438ms ago: executing program 0 (id=3120):
r0 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r0)
keyctl$KEYCTL_MOVE(0x1e, r0, 0xffffffffffffffff, r0, 0x1)

672.841259ms ago: executing program 0 (id=3121):
r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
ioctl$SG_IO(r0, 0x2285, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000340)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000400)="aa1d484e0a4e200000008133d576983340cb31a5fc977c2e4891f7c08bfcd111fbdf23ea32db0e8f20d5bc27bd80", 0x2e}], 0x2)

672.632284ms ago: executing program 5 (id=3122):
r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0xfffffffdfffffff9, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000100)={0x1, 0x1, 0x1, "4a37f6c000190000000000000020000000000000000000000100", 0x31435641})

586.089925ms ago: executing program 0 (id=3123):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1a, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48)

585.969251ms ago: executing program 5 (id=3124):
r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000001680)={{0x12, 0x1, 0x300, 0xe2, 0x24, 0x2c, 0x8, 0x41e, 0x401d, 0x295c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x7, 0x0, 0x9, "", [{{0x9, 0x4, 0xab, 0x3, 0x0, 0x96, 0xe2, 0x4d}}]}}]}}, &(0x7f0000002040)={0x0, 0x0, 0x0, 0x0, 0x59})
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)

533.201056ms ago: executing program 0 (id=3126):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000e2793b10d10501200010010203010902120001000000000904"], 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff)
r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
close(r1)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e65772064656661756c7420757365723a73797a203004f1303030303030303030303030303430393300"], 0x2a, 0x0)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
add_key$user(0x0, &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd)
execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)
execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y<yN\xfbXh[\xe9\xa9\x1702\x7f\x9e\xf0\x99\xad\xdc;p\x98R\a\xb1\x9d^\x0f\x121\xb3\xab?P\xd6\xcb\x06\xfe2~W\xd9\xad\x80\xd9!\x89%\xb8\x10\xa3l;\x1eK\x90\x15\xc6\x11A\xfc\x7f\xc6\xed\xe7\xa3\x9f\xb4\xce\"\xef\xa8\x86F\x15\x03\rj\f\xafa\xb0}\xde\'E\x84\xb2bO\xd2\xd4\x85F\xde1e\xe0\xf2\xa0/\xd3<\xda\xfe\x04,\xfa\x97\xb6\xf4\xcf\x0el\xf2\xbd\x18\x88\xd7\x02\xce\x99\x1f\xadj\x89\xd9\xb7\xae9\xb0\xb0{n.\xd7vC\x0eh|KZG\x108l\n\xcd\xe9\x04\xafM\xbf\x83#>\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']})
syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f00000006c0)={0x0, 0xa, 0x2, '8F'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000100db7b1c304feb0db3328f3ac647d22cddc4a0c5756d1dc299516ace6d401a59e9ac46f3a128d2e2755d782ec3b4884fb9fd027836afcee781cd2ddee86e5ef7b56e74c7f24bcb83ab60c9a7d9631c68bd6f2467ee329fce5421c3b03833e5c8725b06aeb19c372d2a4bd1ff778c573d3a73945c4d19355841c9b74a9cd986e5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioprio_set$pid(0x3, r2, 0x0)
r3 = getpid()
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0)
write$vga_arbiter(r4, &(0x7f0000000040)=@target={'target ', {'PCI:', 'e', ':', '12', ':', '13', '.', '6'}}, 0x15)
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x13, 0xffffffffffffffff, 0x1b5cb000)
pipe(0xfffffffffffffffc)
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)

153.042513ms ago: executing program 6 (id=3132):
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x6b)
lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0)
write$binfmt_elf32(r0, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x4, 0x2, 0x8d, 0x4, 0x3, 0x6, 0x8, 0x19, 0x38, 0x25e, 0x408, 0x4, 0x20, 0x1, 0x5, 0x8, 0x200}, [{0x6474e551, 0x8, 0x7, 0x3, 0x2, 0xc, 0x8, 0x7fffffff}]}, 0x58)
close(r0)
execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

152.596269ms ago: executing program 6 (id=3133):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000480)={0x4, {{0x2, 0x4e23, @multicast2}}}, 0x88)
setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@loopback, @broadcast, @empty}, 0xc)

152.179899ms ago: executing program 6 (id=3134):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0x609, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0xffffffff, {0x0, 0x2}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x0)

65.385669ms ago: executing program 6 (id=3135):
r0 = syz_open_dev$vim2m(&(0x7f0000000440), 0x8, 0x2)
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405668, &(0x7f0000000100)={0x3, 0x3, 0x2})

206.395µs ago: executing program 6 (id=3136):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000c80)={0x28, 0x12, 0x1, 0x70bd25, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x135, 0x0, 0x0, @u64}]}, @nested={0x8, 0x31, 0x0, 0x1, [@nested={0x4, 0xd5}]}]}, 0x28}], 0x1}, 0x0)

0s ago: executing program 6 (id=3137):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x24}}, 0x0)

0s ago: executing program 6 (id=3139):
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x500}, 0x48)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)={0x88, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x300, 0x1, 0x7, 0x0, {0xa600000000000000, 0x1, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffe}]}, 0x88}}, 0x20000014)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r2=>0xffffffffffffffff})
unshare(0x22020600)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x4002c0, 0x0)
close(r3)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r3, 0x4010744d, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000400)={0x3c, r6, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

kernel console output (not intermixed with test programs):

aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  223.679400][   T36] audit: type=1800 audit(1788965334.787:2194): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14595 res=0 errno=0
[  223.782014][ T7629] usb 6-1: new full-speed USB device number 5 using dummy_hcd
[  223.794035][   T36] audit: type=1800 audit(1788965334.899:2195): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14595 res=0 errno=0
[  223.841570][   T36] audit: type=1800 audit(1788965334.936:2196): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14595 res=0 errno=0
[  223.955553][ T7629] usb 6-1: unable to get BOS descriptor or descriptor too short
[  223.957291][ T7629] usb 6-1: not running at top speed; connect to a high speed hub
[  223.957314][ T7629] usb 6-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40
[  223.960019][ T7629] usb 6-1: config 1 has an invalid descriptor of length 111, skipping remainder of the config
[  223.960037][ T7629] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  223.962265][ T7629] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.962283][ T7629] usb 6-1: Product: syz
[  223.962292][ T7629] usb 6-1: Manufacturer: syz
[  223.962302][ T7629] usb 6-1: SerialNumber: syz
[  224.055914][T11014] loop0: detected capacity change from 0 to 164
[  224.079021][T11014] iso9660: Corrupted directory entry in block 4 of inode 1792
[  224.193036][ T7629] usb 6-1: unit 3 not found!
[  224.246381][ T7629] usb 6-1: USB disconnect, device number 5
[  224.303087][ T5604] udevd[5604]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  224.743610][T10659] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  224.777105][T11024] IPv6: NLM_F_CREATE should be specified when creating new route
[  224.883018][T11033] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2113'.
[  225.009847][T11037] SET target dimension over the limit!
[  225.238605][T11046] loop5: detected capacity change from 0 to 2048
[  225.262649][T11046] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  225.276895][T11046] EXT4-fs: Remounting file system with no journal so ignoring journalled data option
[  225.276955][T11046] EXT4-fs: Remounting fs w/o journal so ignoring data_err option
[  225.283290][T11046] EXT4-fs (loop5): can't disable delalloc during remount
[  225.309504][T10659] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  225.380394][T11051] loop5: detected capacity change from 0 to 512
[  225.381110][T11051] EXT4-fs: Ignoring removed oldalloc option
[  225.388929][T11051] EXT4-fs error (device loop5): ext4_get_branch:178: inode #13: block 1024: comm syz.5.2120: invalid block
[  225.391216][T11051] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  225.391500][T11051] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.2120: invalid indirect mapped block 1024 (level 0)
[  225.391520][T11051] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  225.391941][T11051] EXT4-fs error (device loop5): ext4_validate_block_bitmap:445: comm syz.5.2120: bg 0: block 35: padding at end of block bitmap is not set
[  225.391961][T11051] loop5: lost filesystem error report for type 5 error -117
[  225.392331][T11051] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6680: Corrupt filesystem
[  225.392345][T11051] loop5: lost filesystem error report for type 5 error -117
[  225.392856][T11051] EXT4-fs (loop5): 1 truncate cleaned up
[  225.396627][T11051] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  225.420919][T10659] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  225.726925][  T810] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  225.899140][  T810] usb 6-1: Using ep0 maxpacket: 32
[  225.901285][  T810] usb 6-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  225.902270][  T810] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  225.902283][  T810] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  225.902293][  T810] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  225.902302][  T810] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[  225.902311][  T810] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[  225.904283][  T810] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  225.904297][  T810] usb 6-1: Product: syz
[  225.904305][  T810] usb 6-1: Manufacturer: syz
[  225.904314][  T810] usb 6-1: SerialNumber: syz
[  225.907512][  T810] usb 6-1: config 0 descriptor??
[  226.199214][ T5602] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  226.211144][ T5602] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  226.212206][ T5602] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  226.212753][ T5602] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  226.213089][ T5602] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  226.351107][  T810] iforce 6-1:0.0: usb_submit_urb failed: -32
[  226.351210][  T810] input input17: Device does not respond to id packet M
[  226.352893][  T810] iforce 6-1:0.0: usb_submit_urb failed: -32
[  226.352924][  T810] input input17: Device does not respond to id packet P
[  226.353493][  T810] iforce 6-1:0.0: usb_submit_urb failed: -32
[  226.353512][  T810] input input17: Device does not respond to id packet B
[  226.354039][  T810] input input17: Limiting number of effects to 32 (device reports 85)
[  226.571470][T11054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  226.571834][T11054] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  226.575849][  T810] iforce 6-1:0.0: usb_submit_urb failed: -71
[  226.577828][  T810] iforce 6-1:0.0: usb_submit_urb failed: -71
[  226.578987][  T810] iforce 6-1:0.0: usb_submit_urb failed: -71
[  226.579465][  T810] iforce 6-1:0.0: usb_submit_urb failed: -71
[  226.586540][  T810] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input17
[  226.600694][  T810] usb 6-1: USB disconnect, device number 6
[  226.603538][ T5030] iforce 6-1:0.0: usb_submit_urb failed -19
[  226.716535][T11056] bridge0: port 1(bridge_slave_0) entered blocking state
[  226.716707][T11056] bridge0: port 1(bridge_slave_0) entered disabled state
[  226.716954][T11056] bridge_slave_0: entered allmulticast mode
[  226.718278][T11056] bridge_slave_0: entered promiscuous mode
[  226.720526][T11056] bridge0: port 2(bridge_slave_1) entered blocking state
[  226.720589][T11056] bridge0: port 2(bridge_slave_1) entered disabled state
[  226.720667][T11056] bridge_slave_1: entered allmulticast mode
[  226.721735][T11056] bridge_slave_1: entered promiscuous mode
[  226.742056][T11056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  226.743527][T11056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  226.759998][T11056] team0: Port device team_slave_0 added
[  226.761405][T11056] team0: Port device team_slave_1 added
[  226.777653][T11056] batman_adv: batadv0: Adding interface: batadv_slave_0
[  226.777710][T11056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  226.778057][T11056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  226.779654][T11056] batman_adv: batadv0: Adding interface: batadv_slave_1
[  226.779663][T11056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  226.779680][T11056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  226.803956][T11056] hsr_slave_0: entered promiscuous mode
[  226.804411][T11056] hsr_slave_1: entered promiscuous mode
[  226.805465][T11056] debugfs: 'hsr0' already exists in 'hsr'
[  226.805475][T11056] Cannot create hsr debugfs directory
[  226.992488][T11056] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  226.998256][T11056] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  226.999381][T11056] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  227.003770][T11056] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  227.004423][T11056] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  227.011340][T11056] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  227.014141][T11056] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  227.019527][T11056] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  227.044683][T11056] bridge0: port 2(bridge_slave_1) entered blocking state
[  227.044814][T11056] bridge0: port 2(bridge_slave_1) entered forwarding state
[  227.044982][T11056] bridge0: port 1(bridge_slave_0) entered blocking state
[  227.045062][T11056] bridge0: port 1(bridge_slave_0) entered forwarding state
[  227.102032][T11056] 8021q: adding VLAN 0 to HW filter on device bond0
[  227.110943][   T30] bridge0: port 1(bridge_slave_0) entered disabled state
[  227.114324][   T30] bridge0: port 2(bridge_slave_1) entered disabled state
[  227.141537][T11056] 8021q: adding VLAN 0 to HW filter on device team0
[  227.157295][   T30] bridge0: port 1(bridge_slave_0) entered blocking state
[  227.157436][   T30] bridge0: port 1(bridge_slave_0) entered forwarding state
[  227.172675][   T87] bridge0: port 2(bridge_slave_1) entered blocking state
[  227.172792][   T87] bridge0: port 2(bridge_slave_1) entered forwarding state
[  227.413481][T11056] 8021q: adding VLAN 0 to HW filter on device batadv0
[  227.515395][T11056] veth0_vlan: entered promiscuous mode
[  227.523591][T11056] veth1_vlan: entered promiscuous mode
[  227.555460][T11056] veth0_macvtap: entered promiscuous mode
[  227.565819][T11056] veth1_macvtap: entered promiscuous mode
[  227.579031][T11056] batman_adv: batadv0: Interface activated: batadv_slave_0
[  227.588415][T11056] batman_adv: batadv0: Interface activated: batadv_slave_1
[  227.595577][ T5631] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  227.595696][ T5631] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  227.595778][ T5631] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  227.728408][   T36] kauditd_printk_skb: 51 callbacks suppressed
[  227.728532][   T36] audit: type=1800 audit(1788965338.549:2248): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14595 res=0 errno=0
[  227.737902][   T87] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  227.737966][   T87] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  227.747737][   T36] audit: type=1800 audit(1788965338.568:2249): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=156457 res=0 errno=0
[  227.754613][   T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  227.848092][   T36] audit: type=1800 audit(1788965338.661:2250): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14595 res=0 errno=0
[  227.851219][   T87] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  227.851235][   T87] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  227.916096][   T36] audit: type=1800 audit(1788965338.716:2251): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14595 res=0 errno=0
[  227.978843][   T36] audit: type=1800 audit(1788965338.781:2252): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15333 res=0 errno=0
[  228.003879][   T36] audit: type=1800 audit(1788965338.799:2253): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15333 res=0 errno=0
[  228.034185][   T36] audit: type=1800 audit(1788965338.827:2254): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14595 res=0 errno=0
[  228.076741][   T36] audit: type=1800 audit(1788965338.864:2255): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14595 res=0 errno=0
[  228.101025][   T36] audit: type=1800 audit(1788965338.901:2256): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15333 res=0 errno=0
[  228.164923][   T36] audit: type=1800 audit(1788965338.948:2257): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15333 res=0 errno=0
[  228.167727][T11118] loop0: detected capacity change from 0 to 4096
[  228.175438][T11118] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512).
[  228.180721][T11118] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  228.194400][T11118] ntfs3(loop0): volume is dirty and "force" flag is not set!
[  228.315634][T11127] netlink: 1363 bytes leftover after parsing attributes in process `syz.0.2137'.
[  228.458597][ T5602] Bluetooth: hci3: command tx timeout
[  228.478408][ T7629] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[  228.643330][ T7629] usb 7-1: New USB device found, idVendor=08b7, idProduct=ec00, bcdDevice= 0.00
[  228.649676][ T7629] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  228.649751][ T7629] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  228.651315][ T7629] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  228.651333][ T7629] usb 7-1: SerialNumber: syz
[  228.880606][ T7629] usb 7-1: 0:2 : does not exist
[  228.906286][ T7629] usb 7-1: USB disconnect, device number 2
[  228.927381][ T5604] udevd[5604]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  229.429467][T11143] loop0: detected capacity change from 0 to 4096
[  229.434271][T11143] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  229.822822][T11165] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  229.949896][T11180] IPv6: A: Disabled Multicast RS
[  230.031835][T11184] loop5: detected capacity change from 0 to 1024
[  230.706346][ T5602] Bluetooth: hci3: command tx timeout
[  231.790473][T11196] loop0: detected capacity change from 0 to 2048
[  231.991381][T11202] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  232.046424][T11204] loop6: detected capacity change from 0 to 128
[  232.083722][T11204] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  232.088634][T11204] ext4 filesystem being mounted at /11/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  232.129722][T11056] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  232.198669][T11198] loop0: detected capacity change from 0 to 32768
[  232.202782][T11198] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2170 (11198)
[  232.209992][T11198] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  232.214284][T11198] BTRFS info (device loop0): using crc32c checksum algorithm
[  232.246722][T11212] loop5: detected capacity change from 0 to 512
[  232.255282][T11212] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  232.263698][T11212] EXT4-fs error (device loop5): ext4_orphan_get:1429: comm syz.5.2175: bad orphan inode 131083
[  232.263772][T11212] loop5: lost filesystem error report for type 5 error -117
[  232.280485][T11212] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  232.301458][T11198] BTRFS info (device loop0): enabling ssd optimizations
[  232.304311][T11198] BTRFS info (device loop0): turning on flush-on-commit
[  232.307288][T11198] BTRFS info (device loop0): enabling free space tree
[  232.310758][T11198] BTRFS info (device loop0): enabling auto defrag
[  232.313594][T11198] BTRFS info (device loop0): use lzo compression, level 1
[  232.316618][T11198] BTRFS info (device loop0): max_inline set to 4096
[  232.353928][ T5600] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  232.355473][T10659] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.666920][T11238] aoe: error packet from 0.0@lo; ecode=101 'no such error'
[  232.666968][T11238] aoe: error packet from 0.0@lo; ecode=101 'no such error'
[  232.667007][T11238] aoe: error packet from 0.0@lo; ecode=101 'no such error'
[  232.667038][T11238] aoe: error packet from 0.0@lo; ecode=101 'no such error'
[  232.667068][T11238] aoe: error packet from 0.0@lo; ecode=101 'no such error'
[  232.667120][T11238] aoe: error packet from 0.0@lo; ecode=101 'no such error'
[  232.667151][T11238] aoe: error packet from 0.0@lo; ecode=101 'no such error'
[  232.667181][T11238] aoe: error packet from 0.0@lo; ecode=101 'no such error'
[  232.667212][T11238] aoe: error packet from 0.0@lo; ecode=101 'no such error'
[  232.971762][ T5602] Bluetooth: hci3: command tx timeout
[  233.049382][T11252] loop0: detected capacity change from 0 to 32768
[  233.051170][T11252] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2185 (11252)
[  233.056226][T11252] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  233.056240][T11252] BTRFS info (device loop0): using sha256 checksum algorithm
[  233.104862][T11252] BTRFS info (device loop0): enabling ssd optimizations
[  233.104919][T11252] BTRFS info (device loop0): turning on sync discard
[  233.104961][T11252] BTRFS info (device loop0): enabling free space tree
[  233.104987][T11252] BTRFS info (device loop0): use zlib compression, level 3
[  233.544087][   T36] kauditd_printk_skb: 136 callbacks suppressed
[  233.544171][   T36] audit: type=1800 audit(1788965343.726:2394): pid=11270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2185" name="file1" dev="loop0" ino=260 res=0 errno=0
[  233.641798][   T36] audit: type=1800 audit(1788965344.012:2395): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15333 res=0 errno=0
[  233.754366][T11272] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2186'.
[  233.754418][T11272] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2186'.
[  233.817894][   T36] audit: type=1800 audit(1788965344.178:2396): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15333 res=0 errno=0
[  233.942938][   T36] audit: type=1800 audit(1788965344.289:2397): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15333 res=0 errno=0
[  234.013314][   T36] audit: type=1800 audit(1788965344.363:2398): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15333 res=0 errno=0
[  234.044035][T11284] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2193'.
[  234.065326][   T36] audit: type=1800 audit(1788965344.409:2399): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15333 res=0 errno=0
[  234.089080][T11286] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2194'.
[  234.103001][ T5600] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  234.129291][   T36] audit: type=1800 audit(1788965344.455:2400): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15333 res=0 errno=0
[  234.141076][T11288] loop6: detected capacity change from 0 to 256
[  234.141909][T11288] exfat: Deprecated parameter 'namecase'
[  234.152135][T11288] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0x88f4ad1f, utbl_chksum : 0xe619d30d)
[  234.179701][   T36] audit: type=1800 audit(1788965344.510:2402): pid=11288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2195" name="file1" dev="loop6" ino=1048652 res=0 errno=0
[  234.180369][   T36] audit: type=1800 audit(1788965344.501:2401): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15333 res=0 errno=0
[  234.220712][   T36] audit: type=1800 audit(1788965344.547:2403): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14595 res=0 errno=0
[  234.412482][T11296] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2198'.
[  234.515754][T11307] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2203'.
[  234.945279][T11313] loop6: detected capacity change from 0 to 131072
[  234.950085][T11313] F2FS-fs (loop6): Wrong CP boundary, start(512) end(1536) blocks(0)
[  234.950141][T11313] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  234.957634][T11313] F2FS-fs (loop6): invalid crc value
[  235.013927][T11313] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  235.024956][T11313] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  235.025023][T11313] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4
[  235.232834][ T5602] Bluetooth: hci3: command tx timeout
[  236.379608][T11358] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2222'.
[  236.590043][T11366] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  236.590079][T11366] IPv6: NLM_F_CREATE should be set when creating new route
[  236.676643][T11376] netlink: 256 bytes leftover after parsing attributes in process `syz.6.2231'.
[  236.966410][ T7618] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  237.128885][ T7618] usb 7-1: Using ep0 maxpacket: 8
[  237.129576][ T7618] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  237.130705][ T7618] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  237.130724][ T7618] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  237.130740][ T7618] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  237.130754][ T7618] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  237.130779][ T7618] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  237.149842][T11408] netlink: 'syz.5.2247': attribute type 11 has an invalid length.
[  237.355843][ T7618] usb 7-1: GET_CAPABILITIES returned 0
[  237.355901][ T7618] usbtmc 7-1:16.0: can't read capabilities
[  237.576820][    C0] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  237.579300][ T7618] usb 7-1: USB disconnect, device number 3
[  237.867065][T11424] loop0: detected capacity change from 0 to 64
[  237.990409][T11430] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2256'.
[  238.002303][T11430] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2256'.
[  238.199513][T11445] sd 0:0:0:0: PR command failed: 1026
[  238.199596][T11445] sd 0:0:0:0: Sense Key : Illegal Request [current] 
[  238.199649][T11445] sd 0:0:0:0: Add. Sense: Invalid command operation code
[  238.441596][T11456] loop6: detected capacity change from 0 to 128
[  238.445564][T11456] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  238.450813][T11456] hpfs: filesystem error: improperly stopped
[  238.450901][T11456] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  238.451034][T11456] hpfs: You really don't want any checks? You are crazy...
[  238.451065][T11456] hpfs: Code page index out of array
[  238.451093][T11456] hpfs: code page support is disabled
[  238.464126][T11456] hpfs: hpfs_map_4sectors(): unaligned read
[  238.464216][T11456] hpfs: hpfs_map_4sectors(): unaligned read
[  238.464266][T11456] hpfs: filesystem error: unable to find root dir
[  238.480234][T11456] hpfs: hpfs_map_4sectors(): unaligned read
[  238.752731][T11476] Bluetooth: MGMT ver 1.23
[  238.869776][T11482] loop6: detected capacity change from 0 to 1024
[  238.873862][T11482] EXT4-fs: Mount option(s) incompatible with ext3
[  239.000764][   T36] kauditd_printk_skb: 66 callbacks suppressed
[  239.000825][   T36] audit: type=1800 audit(1788965348.959:2470): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15333 res=0 errno=0
[  239.134604][   T36] audit: type=1800 audit(1788965349.088:2471): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15333 res=0 errno=0
[  239.173653][   T36] audit: type=1800 audit(1788965349.116:2472): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15333 res=0 errno=0
[  239.217467][   T36] audit: type=1800 audit(1788965349.162:2473): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15333 res=0 errno=0
[  239.239814][T11498] netlink: 'syz.6.2289': attribute type 1 has an invalid length.
[  239.245167][T11498] netlink: 'syz.6.2289': attribute type 2 has an invalid length.
[  239.548967][   T36] audit: type=1800 audit(1788965349.467:2474): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15333 res=0 errno=0
[  239.611115][   T36] audit: type=1326 audit(1788965349.531:2475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11499 comm="syz.6.2290" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff7b2f9e159 code=0x0
[  240.681903][   T36] audit: type=1800 audit(1788965350.509:2476): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15333 res=0 errno=0
[  240.964809][ T7625] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  241.015243][   T36] audit: type=1800 audit(1788965350.823:2477): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14595 res=0 errno=0
[  241.088490][   T36] audit: type=1800 audit(1788965350.888:2478): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14595 res=0 errno=0
[  241.139785][ T7625] usb 7-1: Using ep0 maxpacket: 32
[  241.147816][ T7625] usb 7-1: New USB device found, idVendor=056a, idProduct=0014, bcdDevice= 0.00
[  241.150761][ T7625] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[  241.150795][ T7625] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  241.150823][ T7625] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  241.157028][ T7625] usb 7-1: config 0 descriptor??
[  241.170888][   T36] audit: type=1800 audit(1788965350.962:2479): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14595 res=0 errno=0
[  241.493706][T11520] sg_write: data in/out 235872/136 bytes for SCSI command 0x0-- guessing data in;
[  241.493706][T11520]    program syz.0.2298 not setting count and/or reply_len properly
[  241.630075][ T7625] wacom 0003:056A:0014.000F: ignoring exceeding usage max
[  241.632023][ T7625] wacom 0003:056A:0014.000F: unknown main item tag 0x2
[  241.819402][T11533] __nla_validate_parse: 1 callbacks suppressed
[  241.822472][T11533] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2304'.
[  241.832547][ T7625] usb 7-1: USB disconnect, device number 4
[  242.018851][T11546] 9p: Bad value for 'rfdno'
[  242.638705][T11581] program syz.6.2328 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  242.693572][T11585] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  242.797345][T11594] comedi comedi4: bad chanlist[0]=0x0000ddb7 chan=56759 range length=2
[  242.870020][T11599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2335'.
[  242.870372][T11599] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2335'.
[  242.988600][T11602] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2336'.
[  243.232142][T11606] net_ratelimit: 3256 callbacks suppressed
[  243.232204][T11606] openvswitch: netlink: Unexpected mask (mask=4000010, allowed=10058)
[  243.350620][T11614] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2343'.
[  243.350685][T11614] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2343'.
[  243.438124][T11618] 9p: Bad value for 'wfdno'
[  243.915081][T11644] loop6: detected capacity change from 0 to 64
[  243.918210][T11644] MINIX-fs: bad superblock
[  244.060510][T11648] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2359'.
[  244.084278][T11646] loop6: detected capacity change from 0 to 40427
[  244.088068][T11646] F2FS-fs (loop6): invalid crc value
[  244.121300][T11646] F2FS-fs (loop6): NAT is corrupt, run fsck to fix it
[  244.131193][T11646] loop6: lost filesystem error report for type 5 error -117
[  244.131261][T11646] F2FS-fs (loop6): Failed to initialize F2FS node manager (-117)
[  244.399407][T11670] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2367'.
[  244.403444][T11670] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2367'.
[  244.406278][T11670] netlink: 'syz.5.2367': attribute type 4 has an invalid length.
[  244.430165][   T36] kauditd_printk_skb: 37 callbacks suppressed
[  244.430229][   T36] audit: type=1800 audit(1788965354.968:2517): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15333 res=0 errno=0
[  244.461604][T11678] FAULT_INJECTION: forcing a failure.
[  244.461604][T11678] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  244.461678][T11678] CPU: 0 UID: 0 PID: 11678 Comm: syz.6.2371 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  244.461715][T11678] Tainted: [L]=SOFTLOCKUP
[  244.461721][T11678] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  244.461729][T11678] Call Trace:
[  244.461735][T11678]  <TASK>
[  244.461741][T11678]  dump_stack_lvl+0xe8/0x150
[  244.461766][T11678]  should_fail_ex+0x410/0x560
[  244.461785][T11678]  prepare_alloc_pages+0x223/0x600
[  244.461804][T11678]  __alloc_frozen_pages_noprof+0x185/0x5a0
[  244.461823][T11678]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  244.461845][T11678]  ? policy_nodemask+0x2cc/0x8e0
[  244.461862][T11678]  ? rcu_is_watching+0x16/0xb0
[  244.461879][T11678]  alloc_pages_mpol+0x21e/0x390
[  244.461899][T11678]  alloc_pages_noprof+0xb1/0x2b0
[  244.461943][T11678]  alloc_pages_exact_noprof+0x3b/0xc0
[  244.461959][T11678]  snd_pcm_attach_substream+0x5c5/0xb10
[  244.461984][T11678]  snd_pcm_open_substream+0xb9/0x24f0
[  244.461999][T11678]  ? rcu_is_watching+0x16/0xb0
[  244.462013][T11678]  ? __kasan_kmalloc+0x93/0xb0
[  244.462026][T11678]  ? __pfx_snd_pcm_open_substream+0x10/0x10
[  244.462039][T11678]  ? __kmalloc_cache_noprof+0x14d/0x600
[  244.462051][T11678]  ? snd_pcm_oss_open+0xa37/0x1c00
[  244.462063][T11678]  ? snd_pcm_oss_open+0xa37/0x1c00
[  244.462082][T11678]  snd_pcm_oss_open+0xbb3/0x1c00
[  244.462108][T11678]  ? __pfx_snd_pcm_oss_open+0x10/0x10
[  244.462122][T11678]  ? tomoyo_check_open_permission+0x38e/0x470
[  244.462140][T11678]  ? do_raw_spin_lock+0x12b/0x2f0
[  244.462161][T11678]  ? __pfx_default_wake_function+0x10/0x10
[  244.462186][T11678]  chrdev_open+0x4d9/0x600
[  244.462202][T11678]  ? __pfx_chrdev_open+0x10/0x10
[  244.462217][T11678]  ? fsnotify_open_perm_and_set_mode+0x135/0x6b0
[  244.462235][T11678]  ? __pfx_chrdev_open+0x10/0x10
[  244.462249][T11678]  do_dentry_open+0x816/0x1380
[  244.462272][T11678]  vfs_open+0x3b/0x340
[  244.462285][T11678]  ? path_openat+0x1428/0x1d60
[  244.462299][T11678]  path_openat+0x1443/0x1d60
[  244.462325][T11678]  do_file_open+0x23e/0x4a0
[  244.462342][T11678]  ? __pfx_do_file_open+0x10/0x10
[  244.462368][T11678]  ? _raw_spin_unlock+0x28/0x50
[  244.462384][T11678]  ? alloc_fd+0x651/0x6c0
[  244.462409][T11678]  do_sys_openat2+0x115/0x200
[  244.462432][T11678]  ? __se_sys_futex+0x3a8/0x450
[  244.462449][T11678]  ? __pfx_do_sys_openat2+0x10/0x10
[  244.462468][T11678]  ? rcu_is_watching+0x16/0xb0
[  244.462487][T11678]  __x64_sys_openat+0x138/0x170
[  244.462507][T11678]  do_syscall_64+0x166/0x520
[  244.462519][T11678]  ? trace_irq_disable+0x3b/0x140
[  244.462531][T11678]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  244.462547][T11678]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  244.462559][T11678] RIP: 0033:0x7ff7b2f9e159
[  244.462574][T11678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  244.462586][T11678] RSP: 002b:00007ff7b3de7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  244.462602][T11678] RAX: ffffffffffffffda RBX: 00007ff7b3225fa0 RCX: 00007ff7b2f9e159
[  244.462612][T11678] RDX: 0000000000000081 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  244.462621][T11678] RBP: 00007ff7b3035024 R08: 0000000000000000 R09: 0000000000000000
[  244.462630][T11678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  244.462638][T11678] R13: 00007ff7b3226038 R14: 00007ff7b3225fa0 R15: 00007ffe60bbce18
[  244.462659][T11678]  </TASK>
[  244.583497][   T36] audit: type=1800 audit(1788965355.106:2518): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15333 res=0 errno=0
[  244.594967][   T36] audit: type=1800 audit(1788965355.116:2519): pid=11670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.5.2367" name="/newroot/193/file0" dev="tmpfs" ino=1038 res=0 errno=0
[  244.604734][   T36] audit: type=1800 audit(1788965355.125:2520): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=159418 res=0 errno=0
[  244.629193][ T7618] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  244.654363][ T7618] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  244.657627][   T36] audit: type=1800 audit(1788965355.180:2521): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15333 res=0 errno=0
[  244.676350][   T36] audit: type=1800 audit(1788965355.199:2522): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15333 res=0 errno=0
[  244.933190][ T7618] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  245.180696][  T810] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  245.239964][T11679] ceph: No mds server is up or the cluster is laggy
[  245.355681][  T810] usb 7-1: Using ep0 maxpacket: 16
[  245.359621][  T810] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  245.363712][  T810] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  245.363755][  T810] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  245.363802][  T810] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18
[  245.380670][  T810] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  245.380719][  T810] usb 7-1: SerialNumber: syz
[  245.390756][   T36] audit: type=1800 audit(1788965355.863:2523): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=159445 res=0 errno=0
[  245.398458][   T36] audit: type=1800 audit(1788965355.863:2524): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=159475 res=0 errno=0
[  245.398478][   T36] audit: type=1800 audit(1788965355.863:2525): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=159452 res=0 errno=0
[  245.398491][   T36] audit: type=1800 audit(1788965355.863:2526): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=159453 res=0 errno=0
[  245.425569][  T810] hub 7-1:1.0: bad descriptor, ignoring hub
[  245.427932][  T810] hub 7-1:1.0: probe with driver hub failed with error -5
[  245.430994][  T810] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22
[  245.632509][T11703] netlink: 'syz.5.2381': attribute type 10 has an invalid length.
[  245.746419][ T7618] usb 7-1: USB disconnect, device number 5
[  245.752214][T11711] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  245.898707][T11719] netlink: 'syz.5.2389': attribute type 5 has an invalid length.
[  246.356975][T11749] loop6: detected capacity change from 0 to 512
[  246.361082][T11749] EXT4-fs: Ignoring removed nobh option
[  246.389866][T11749] EXT4-fs error (device loop6): ext4_do_update_inode:5801: inode #3: comm syz.6.2404: corrupted inode contents
[  246.397146][T11749] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  246.404100][T11749] EXT4-fs (loop6): Remounting filesystem read-only
[  246.407184][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  246.407194][    C1] EXT4-fs (loop6): initial error at time 1788965356: ext4_do_update_inode:5801: inode 3
[  246.407205][    C1] EXT4-fs (loop6): last error at time 1788965356: ext4_do_update_inode:5801: inode 3
[  246.412170][T11749] EXT4-fs (loop6): 1 truncate cleaned up
[  246.412952][T11749] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  246.413007][T11749] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  246.450756][T11056] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  246.696331][T11760] bridge1: entered promiscuous mode
[  246.698499][T11760] bridge1: entered allmulticast mode
[  247.130850][T11767] loop0: detected capacity change from 0 to 128
[  247.145172][T11767] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  247.145408][T11767] ext4 filesystem being mounted at /758/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  247.172376][T11767] EXT4-fs error (device loop0): ext4_check_dx_root:2203: inode #2: comm syz.0.2410: Corrupt dir, invalid name for '..', running e2fsck is recommended
[  247.205474][ T5600] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  247.255122][T11770] loop0: detected capacity change from 0 to 16
[  247.255849][T11770] erofs (device loop0): DAX unsupported by block device. Turning off DAX.
[  247.256026][T11770] erofs (device loop0): mounted with root inode @ nid 36.
[  247.290511][ T7974] erofs (device loop0): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000
[  247.312701][T11770] erofs (device loop0): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000
[  247.312792][T11770] erofs (device loop0): read error -117 @ 2 of nid 89
[  247.774770][T11802] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2427'.
[  247.869322][T11810] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2431'.
[  248.533719][T11833] loop6: detected capacity change from 0 to 4096
[  250.775846][   T36] kauditd_printk_skb: 26 callbacks suppressed
[  250.775899][   T36] audit: type=1800 audit(1788965360.827:2551): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14595 res=0 errno=0
[  250.854477][   T36] audit: type=1800 audit(1788965360.901:2552): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14595 res=0 errno=0
[  250.943448][   T36] audit: type=1800 audit(1788965360.975:2553): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14595 res=0 errno=0
[  251.091148][   T36] audit: type=1800 audit(1788965361.122:2554): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15333 res=0 errno=0
[  251.115559][   T36] audit: type=1800 audit(1788965361.141:2555): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14595 res=0 errno=0
[  251.155645][   T36] audit: type=1800 audit(1788965361.178:2556): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14595 res=0 errno=0
[  251.262482][   T36] audit: type=1800 audit(1788965361.279:2557): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14595 res=0 errno=0
[  251.281309][   T36] audit: type=1800 audit(1788965361.289:2558): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15333 res=0 errno=0
[  251.308168][T11887] loop0: detected capacity change from 0 to 128
[  251.329452][   T36] audit: type=1800 audit(1788965361.335:2559): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15333 res=0 errno=0
[  251.346456][   T36] audit: type=1800 audit(1788965361.353:2560): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14595 res=0 errno=0
[  251.364807][T11887] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  251.369390][T11887] ext4 filesystem being mounted at /768/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  251.607426][ T7618] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  251.816795][ T7618] usb 7-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00
[  251.819212][ T7618] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  251.819231][ T7618] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64
[  251.819247][ T7618] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64
[  251.819262][ T7618] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  251.819275][ T7618] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  251.819299][ T7618] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  251.831867][T11890] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  251.832003][T11890] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  251.832067][T11890] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  251.833714][ T7618] mos7720 7-1:1.0: Moschip 2 port adapter converter detected
[  252.095117][T11890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  252.095460][T11890] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  252.313783][ T7618] usb 7-1: mos7720: usb_control_msg() failed: -71
[  252.372598][ T7618] usb 7-1: Moschip 2 port adapter converter now attached to ttyUSB0
[  252.380546][ T7618] usb 7-1: Moschip 2 port adapter converter now attached to ttyUSB1
[  252.398627][ T7618] usb 7-1: USB disconnect, device number 6
[  252.398744][    C0] usb 7-1: mos7720_interrupt_callback - Error -19 submitting control urb
[  252.438409][ T7618] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0
[  252.444903][ T7618] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1
[  252.445298][ T7618] mos7720 7-1:1.0: device disconnected
[  252.546643][ T5600] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  253.164855][T11912] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2476'.
[  253.164916][T11912] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2476'.
[  253.241610][T10138] cxacru 1-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?)
[  253.263809][T11916] netlink: 'syz.5.2478': attribute type 11 has an invalid length.
[  253.333982][T11922] netlink: 'syz.6.2481': attribute type 9 has an invalid length.
[  253.334041][T11922] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2481'.
[  253.569078][ T5666] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  253.733770][ T5666] usb 1-1: Using ep0 maxpacket: 16
[  253.739051][ T5666] usb 1-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00
[  253.740317][ T5666] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0
[  253.740330][ T5666] usb 1-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  253.740340][ T5666] usb 1-1: config 0 interface 0 has no altsetting 0
[  253.740353][ T5666] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  253.742650][ T5666] usb 1-1: config 0 descriptor??
[  254.186256][ T5666] elan 0003:04F3:074D.0010: unknown main item tag 0x0
[  254.186428][ T5666] elan 0003:04F3:074D.0010: unknown main item tag 0x0
[  254.186992][ T5666] elan 0003:04F3:074D.0010: unknown main item tag 0x0
[  254.187008][ T5666] elan 0003:04F3:074D.0010: unknown main item tag 0x0
[  254.187022][ T5666] elan 0003:04F3:074D.0010: unknown main item tag 0x0
[  254.187036][ T5666] elan 0003:04F3:074D.0010: unknown main item tag 0x0
[  254.187050][ T5666] elan 0003:04F3:074D.0010: unknown main item tag 0x0
[  254.187064][ T5666] elan 0003:04F3:074D.0010: unknown main item tag 0x0
[  254.187078][ T5666] elan 0003:04F3:074D.0010: unknown main item tag 0x0
[  254.187092][ T5666] elan 0003:04F3:074D.0010: unknown main item tag 0x0
[  254.187127][ T5666] elan 0003:04F3:074D.0010: unbalanced collection at end of report description
[  254.187532][ T5666] elan 0003:04F3:074D.0010: Hid Parse failed
[  254.187595][ T5666] elan 0003:04F3:074D.0010: probe with driver elan failed with error -22
[  254.409934][  T810] usb 1-1: USB disconnect, device number 34
[  254.703900][T11947] loop6: detected capacity change from 0 to 65536
[  254.727908][T11947] XFS (loop6): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  254.739306][T11947] XFS (loop6): Ending clean mount
[  254.846293][T11056] XFS (loop6): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  255.069063][T11974] loop6: detected capacity change from 0 to 1024
[  255.540730][T11999] loop6: detected capacity change from 0 to 8192
[  255.603849][T11999]  loop6: RDSK (0)
[  255.603849][T11999]  AHDI p2 p3 p4
[  255.604006][T11999] loop6: p2 start 4294967046 is beyond EOD, truncated
[  255.604070][T11999] loop6: p3 size 67164644 extends beyond EOD, truncated
[  255.763411][ T5604] udevd[5604]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory
[  255.851918][T12012] netlink: 'syz.5.2518': attribute type 4 has an invalid length.
[  255.867331][T12012] netlink: 'syz.5.2518': attribute type 4 has an invalid length.
[  255.979429][T12018] IPVS: wlc: FWM 3 0x00000003 - no destination available
[  256.026267][   T73] IPVS: starting estimator thread 0...
[  256.097009][T12028] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2525'.
[  256.100544][T12028] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2525'.
[  256.104457][T12028] netlink: 'syz.5.2525': attribute type 15 has an invalid length.
[  256.124305][T12031] loop6: detected capacity change from 0 to 1024
[  256.127076][T12020] IPVS: using max 93 ests per chain, 223200 per kthread
[  256.132412][T12031] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  256.134874][T12028] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2525'.
[  256.134887][T12028] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2525'.
[  256.134905][T12028] netlink: 'syz.5.2525': attribute type 15 has an invalid length.
[  256.148871][ T8244] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0
[  256.148934][ T8244] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0
[  256.148978][ T8244] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0
[  256.149021][ T8244] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0
[  256.196829][T12031] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  256.232529][T11056] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  256.277321][   T36] kauditd_printk_skb: 55 callbacks suppressed
[  256.277382][   T36] audit: type=1800 audit(1788965365.902:2616): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15333 res=0 errno=0
[  256.321081][T12042] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2530'.
[  256.324158][   T36] audit: type=1800 audit(1788965365.948:2617): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15333 res=0 errno=0
[  256.389314][   T36] audit: type=1800 audit(1788965366.013:2618): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15333 res=0 errno=0
[  256.625605][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  256.630212][ T7625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  256.782448][T12050] loop6: detected capacity change from 0 to 32768
[  256.829973][T12050] ERROR: (device loop6): diNewExt: no free extents
[  256.829973][T12050] 
[  256.842138][   T36] audit: type=1800 audit(1788965366.419:2619): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15333 res=0 errno=0
[  256.863224][T12050] ERROR: (device loop6): remounting filesystem as read-only
[  256.863497][T12050] ialloc: diAlloc returned -5!
[  256.996169][   T36] audit: type=1800 audit(1788965366.566:2620): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15333 res=0 errno=0
[  257.362645][   T35] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  257.408117][  T810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  257.508366][T12088] netlink: zone id is out of range
[  257.511005][T12088] netlink: zone id is out of range
[  257.516774][T12088] netlink: zone id is out of range
[  257.519419][T12088] netlink: zone id is out of range
[  257.522452][T12088] netlink: zone id is out of range
[  257.527311][T12088] netlink: zone id is out of range
[  257.537252][   T35] usb 7-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00
[  257.544115][   T35] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  257.552315][   T35] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  257.555636][   T35] usb 7-1: Product: syz
[  257.559027][   T35] usb 7-1: Manufacturer: syz
[  257.559073][   T35] usb 7-1: SerialNumber: syz
[  257.569641][   T36] audit: type=1800 audit(1788965367.092:2621): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=160746 res=0 errno=0
[  257.569689][   T36] audit: type=1800 audit(1788965367.092:2622): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=160778 res=0 errno=0
[  257.569831][   T36] audit: type=1800 audit(1788965367.102:2623): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=160753 res=0 errno=0
[  257.569867][   T36] audit: type=1800 audit(1788965367.102:2624): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=160754 res=0 errno=0
[  257.591196][   T35] gspca_main: mr97310a-2.14.0 probing 08ca:0110
[  257.637294][T12090] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2553'.
[  257.640850][T12090] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2553'.
[  257.706465][T12096] netlink: 'syz.5.2556': attribute type 1 has an invalid length.
[  257.783589][T12096] 8021q: adding VLAN 0 to HW filter on device bond3
[  257.789281][T12096] bond2: (slave bond3): making interface the new active one
[  257.792493][T12096] bond2: (slave bond3): Enslaving as an active interface with an up link
[  257.815163][T12101] bond2: (slave gretap1): Enslaving as a backup interface with an up link
[  257.827563][T12096] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2556'.
[  257.834696][T12096] 8021q: adding VLAN 0 to HW filter on device bond2
[  257.919360][T12109] netlink: 27 bytes leftover after parsing attributes in process `syz.5.2561'.
[  257.999381][   T36] audit: type=1326 audit(1788965367.489:2625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12116 comm="syz.5.2565" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb0bc39e159 code=0x0
[  258.028483][T12119] FAULT_INJECTION: forcing a failure.
[  258.028483][T12119] name failslab, interval 1, probability 0, space 0, times 0
[  258.028551][T12119] CPU: 0 UID: 0 PID: 12119 Comm: syz.0.2566 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  258.028589][T12119] Tainted: [L]=SOFTLOCKUP
[  258.028595][T12119] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  258.028603][T12119] Call Trace:
[  258.028608][T12119]  <TASK>
[  258.028615][T12119]  dump_stack_lvl+0xe8/0x150
[  258.028638][T12119]  should_fail_ex+0x410/0x560
[  258.028656][T12119]  should_failslab+0xa8/0x100
[  258.028676][T12119]  __kmalloc_noprof+0xfe/0x720
[  258.028689][T12119]  ? prepare_creds+0x30/0x820
[  258.028705][T12119]  ? security_prepare_creds+0x52/0x360
[  258.028746][T12119]  ? security_prepare_creds+0x52/0x360
[  258.028762][T12119]  ? kmem_cache_alloc_noprof+0x156/0x600
[  258.028791][T12119]  security_prepare_creds+0x52/0x360
[  258.028809][T12119]  prepare_creds+0x57d/0x820
[  258.028825][T12119]  lookup_user_key+0x316/0x1150
[  258.028845][T12119]  ? __pfx_lookup_user_key+0x10/0x10
[  258.028861][T12119]  ? __pfx_lookup_user_key_possessed+0x10/0x10
[  258.028882][T12119]  ? _copy_from_user+0x94/0xb0
[  258.028898][T12119]  ? memdup_user+0x99/0xd0
[  258.028916][T12119]  __se_sys_add_key+0x315/0x420
[  258.028937][T12119]  ? __pfx___se_sys_add_key+0x10/0x10
[  258.028963][T12119]  ? __x64_sys_add_key+0x20/0xc0
[  258.028984][T12119]  do_syscall_64+0x166/0x520
[  258.028997][T12119]  ? trace_irq_disable+0x3b/0x140
[  258.029009][T12119]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  258.029026][T12119]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  258.029039][T12119] RIP: 0033:0x7f76bef9e159
[  258.029052][T12119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  258.029063][T12119] RSP: 002b:00007f76bfde6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[  258.029079][T12119] RAX: ffffffffffffffda RBX: 00007f76bf225fa0 RCX: 00007f76bef9e159
[  258.029089][T12119] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000200000000000
[  258.029097][T12119] RBP: 00007f76bf035024 R08: fffffffffffffffe R09: 0000000000000000
[  258.029106][T12119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  258.029114][T12119] R13: 00007f76bf226038 R14: 00007f76bf225fa0 R15: 00007ffe07f9e218
[  258.029135][T12119]  </TASK>
[  258.068991][   T35] gspca_mr97310a: reg write [21] error -71
[  258.069054][   T35] mr97310a 7-1:1.0: probe with driver mr97310a failed with error -71
[  258.121921][   T35] usb 7-1: USB disconnect, device number 7
[  258.627043][T12131] loop6: detected capacity change from 0 to 128
[  258.662457][T12131] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2
[  258.711949][ T1381] ieee802154 phy0 wpan0: encryption failed: -22
[  258.712022][ T1381] ieee802154 phy1 wpan1: encryption failed: -22
[  258.847269][T12141] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2576'.
[  258.997073][T12151] loop6: detected capacity change from 0 to 512
[  259.005228][T12151] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities
[  259.246525][T12162] netlink: 'syz.5.2586': attribute type 3 has an invalid length.
[  259.246573][T12162] tc_dump_action: action bad kind
[  259.305739][T12151] loop6: detected capacity change from 0 to 40427
[  259.312128][T12151] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[  259.317188][T12151] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  259.365580][T12151] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  259.373756][T12151] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  259.373817][T12151] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  260.250031][T12216] team0: Device ipip0 is up. Set it down before adding it as a team port
[  260.342761][T12219] FAULT_INJECTION: forcing a failure.
[  260.342761][T12219] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  260.342814][T12219] CPU: 1 UID: 0 PID: 12219 Comm: syz.0.2604 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  260.342841][T12219] Tainted: [L]=SOFTLOCKUP
[  260.342845][T12219] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  260.342851][T12219] Call Trace:
[  260.342854][T12219]  <TASK>
[  260.342858][T12219]  dump_stack_lvl+0xe8/0x150
[  260.342873][T12219]  should_fail_ex+0x410/0x560
[  260.342884][T12219]  _copy_to_user+0x31/0xb0
[  260.342895][T12219]  bpf_verifier_vlog+0x496/0x900
[  260.342912][T12219]  __btf_verifier_log+0xe2/0x140
[  260.342925][T12219]  ? __pfx___btf_verifier_log+0x10/0x10
[  260.342940][T12219]  __btf_verifier_log_type+0x4fd/0x6a0
[  260.342955][T12219]  ? __pfx___btf_verifier_log_type+0x10/0x10
[  260.342969][T12219]  btf_datasec_check_meta+0x40e/0xad0
[  260.342983][T12219]  ? __pfx_btf_sec_info_cmp+0x10/0x10
[  260.342994][T12219]  btf_parse_type_sec+0x3cf/0x2360
[  260.343004][T12219]  ? btf_parse_hdr+0x1da/0x810
[  260.343015][T12219]  ? btf_parse_hdr+0x5f2/0x810
[  260.343021][T12219]  ? btf_parse_str_sec+0x244/0x2f0
[  260.343030][T12219]  btf_new_fd+0x487/0xbb0
[  260.343057][T12219]  __sys_bpf+0xd2e/0xd90
[  260.343068][T12219]  ? __pfx___sys_bpf+0x10/0x10
[  260.343078][T12219]  ? do_futex+0x3e7/0x4e0
[  260.343096][T12219]  ? __fget_files+0x3a2/0x420
[  260.343107][T12219]  ? rcu_is_watching+0x16/0xb0
[  260.343118][T12219]  __x64_sys_bpf+0xba/0xd0
[  260.343126][T12219]  do_syscall_64+0x166/0x520
[  260.343134][T12219]  ? trace_irq_disable+0x3b/0x140
[  260.343143][T12219]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  260.343155][T12219]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  260.343162][T12219] RIP: 0033:0x7f76bef9e159
[  260.343169][T12219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  260.343176][T12219] RSP: 002b:00007f76bfde6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  260.343187][T12219] RAX: ffffffffffffffda RBX: 00007f76bf225fa0 RCX: 00007f76bef9e159
[  260.343192][T12219] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012
[  260.343197][T12219] RBP: 00007f76bf035024 R08: 0000000000000000 R09: 0000000000000000
[  260.343202][T12219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  260.343207][T12219] R13: 00007f76bf226038 R14: 00007f76bf225fa0 R15: 00007ffe07f9e218
[  260.343223][T12219]  </TASK>
[  260.735301][T12241] loop6: detected capacity change from 0 to 256
[  260.828372][T12250] netlink: 'syz.5.2615': attribute type 153 has an invalid length.
[  260.831849][T12250] netlink: 5316 bytes leftover after parsing attributes in process `syz.5.2615'.
[  260.980607][T12255] loop6: detected capacity change from 0 to 4096
[  261.010757][T12255] ntfs3(loop6): ino=9, mi_enum_attr
[  261.010828][T12255] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[  261.011300][T12255] ntfs3(loop6): ino=9, mi_enum_attr
[  261.011368][T12255] ntfs3(loop6): ino=b, mi_enum_attr
[  261.011417][T12255] ntfs3(loop6): Failed to load $Extend (-22).
[  261.011429][T12255] ntfs3(loop6): Failed to initialize $Extend.
[  261.055104][T12261] xt_hashlimit: size too large, truncated to 1048576
[  261.113148][T12265] : renamed from vxcan1
[  261.202911][T12265] vxcan2: entered promiscuous mode
[  261.206704][T12265] vxcan2: entered allmulticast mode
[  261.404842][ T7625] net_ratelimit: 23 callbacks suppressed
[  261.404932][ T7625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  261.481231][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  261.481551][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  261.488357][ T7618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  261.562090][T12296] IPv6: Can't replace route, no match found
[  261.663775][T12308] FAULT_INJECTION: forcing a failure.
[  261.663775][T12308] name failslab, interval 1, probability 0, space 0, times 0
[  261.663832][T12308] CPU: 1 UID: 0 PID: 12308 Comm: syz.0.2642 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  261.663859][T12308] Tainted: [L]=SOFTLOCKUP
[  261.663864][T12308] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  261.663869][T12308] Call Trace:
[  261.663873][T12308]  <TASK>
[  261.663877][T12308]  dump_stack_lvl+0xe8/0x150
[  261.663893][T12308]  should_fail_ex+0x410/0x560
[  261.663904][T12308]  ? __pfx_jfs_alloc_inode+0x10/0x10
[  261.663915][T12308]  should_failslab+0xa8/0x100
[  261.663926][T12308]  ? __pfx_jfs_alloc_inode+0x10/0x10
[  261.663936][T12308]  kmem_cache_alloc_lru_noprof+0xa7/0x5f0
[  261.663949][T12308]  ? jfs_alloc_inode+0x28/0x70
[  261.663959][T12308]  ? jfs_alloc_inode+0x28/0x70
[  261.663973][T12308]  ? __pfx_jfs_alloc_inode+0x10/0x10
[  261.663982][T12308]  jfs_alloc_inode+0x28/0x70
[  261.663994][T12308]  alloc_inode+0x6a/0x1b0
[  261.664005][T12308]  new_inode+0x1f/0x170
[  261.664017][T12308]  jfs_fill_super+0x570/0xda0
[  261.664030][T12308]  get_tree_bdev_flags+0x430/0x4f0
[  261.664038][T12308]  ? __pfx_jfs_fill_super+0x10/0x10
[  261.664048][T12308]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[  261.664075][T12308]  vfs_get_tree+0x92/0x2a0
[  261.664086][T12308]  do_new_mount+0x319/0xdc0
[  261.664098][T12308]  ? __pfx_do_new_mount+0x10/0x10
[  261.664109][T12308]  ? ns_capable+0x89/0xe0
[  261.664120][T12308]  ? path_mount+0x647/0x1050
[  261.664131][T12308]  ? user_path_at+0xd4/0x160
[  261.664144][T12308]  __se_sys_mount+0x31d/0x420
[  261.664156][T12308]  ? __pfx___se_sys_mount+0x10/0x10
[  261.664169][T12308]  ? __x64_sys_mount+0x20/0xc0
[  261.664179][T12308]  do_syscall_64+0x166/0x520
[  261.664187][T12308]  ? trace_irq_disable+0x3b/0x140
[  261.664195][T12308]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  261.664205][T12308]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  261.664213][T12308] RIP: 0033:0x7f76bef9e159
[  261.664221][T12308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  261.664228][T12308] RSP: 002b:00007f76bfde6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  261.664239][T12308] RAX: ffffffffffffffda RBX: 00007f76bf225fa0 RCX: 00007f76bef9e159
[  261.664245][T12308] RDX: 0000200000000040 RSI: 0000200000000240 RDI: 0000200000000000
[  261.664251][T12308] RBP: 00007f76bf035024 R08: 0000000000000000 R09: 0000000000000000
[  261.664256][T12308] R10: 0000000002200010 R11: 0000000000000246 R12: 0000000000000000
[  261.664260][T12308] R13: 00007f76bf226038 R14: 00007f76bf225fa0 R15: 00007ffe07f9e218
[  261.664274][T12308]  </TASK>
[  261.792735][   T36] kauditd_printk_skb: 31 callbacks suppressed
[  261.792820][   T36] audit: type=1800 audit(1788965370.986:2657): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15333 res=0 errno=0
[  261.857737][T12318] input: syz1 as /devices/virtual/input/input18
[  261.861529][   T36] audit: type=1800 audit(1788965371.060:2658): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=161931 res=0 errno=0
[  261.868778][   T36] audit: type=1800 audit(1788965371.060:2659): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=161946 res=0 errno=0
[  261.876918][   T36] audit: type=1800 audit(1788965371.078:2660): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=161949 res=0 errno=0
[  261.891956][   T36] audit: type=1800 audit(1788965371.078:2661): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="rel" dev="sysfs" ino=161948 res=0 errno=0
[  261.910052][   T36] audit: type=1800 audit(1788965371.097:2662): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="key" dev="sysfs" ino=161947 res=0 errno=0
[  261.924503][   T36] audit: type=1800 audit(1788965371.115:2663): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="properties" dev="sysfs" ino=161938 res=0 errno=0
[  261.924564][   T36] audit: type=1800 audit(1788965371.115:2664): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bustype" dev="sysfs" ino=161941 res=0 errno=0
[  261.924605][   T36] audit: type=1800 audit(1788965371.115:2665): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="name" dev="sysfs" ino=161934 res=0 errno=0
[  261.931712][   T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  261.959335][   T36] audit: type=1800 audit(1788965371.143:2666): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15333 res=0 errno=0
[  262.069943][T12339] CIFS mount error: No usable UNC path provided in device string!
[  262.069943][T12339] 
[  262.069993][T12339] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  262.283546][   T35] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  262.436621][ T5010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  262.461585][   T35] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  262.462775][   T35] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  262.462793][   T35] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  262.462809][   T35] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  262.462821][   T35] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  262.462846][   T35] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  262.467626][   T35] usb 1-1: config 0 descriptor??
[  262.541134][ T1114] IPVS: starting estimator thread 0...
[  262.541720][T12380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  262.607726][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  262.613384][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  262.640736][T12381] IPVS: using max 92 ests per chain, 220800 per kthread
[  262.682597][T12388] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1'
[  262.682684][T12388] CPU: 1 UID: 0 PID: 12388 Comm: syz.6.2678 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  262.682727][T12388] Tainted: [L]=SOFTLOCKUP
[  262.682732][T12388] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  262.682739][T12388] Call Trace:
[  262.682745][T12388]  <TASK>
[  262.682750][T12388]  dump_stack_lvl+0xe8/0x150
[  262.682773][T12388]  sysfs_create_dir_ns+0x271/0x2a0
[  262.682797][T12388]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  262.682820][T12388]  ? do_raw_spin_unlock+0x4d/0x200
[  262.682840][T12388]  kobject_add_internal+0x622/0xcd0
[  262.682861][T12388]  kobject_add+0x163/0x240
[  262.682873][T12388]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  262.682890][T12388]  ? __pfx_kobject_add+0x10/0x10
[  262.682906][T12388]  ? get_device_parent+0x366/0x3a0
[  262.682929][T12388]  device_add+0x3fa/0xb80
[  262.682950][T12388]  tty_register_device_attr+0x425/0x990
[  262.682967][T12388]  ? __pfx_tty_register_device_attr+0x10/0x10
[  262.682985][T12388]  ? tty_port_init+0x136/0x1a0
[  262.682996][T12388]  ? gsm_dlci_alloc+0x330/0x640
[  262.683012][T12388]  gsm_activate_mux+0x110/0x2a0
[  262.683027][T12388]  gsmld_ioctl+0x12d3/0x1930
[  262.683051][T12388]  ? __pfx_gsmld_ioctl+0x10/0x10
[  262.683077][T12388]  ? __pfx___ldsem_down_read_nested+0x10/0x10
[  262.683098][T12388]  ? ldsem_down_read+0x12/0x40
[  262.683116][T12388]  ? __pfx_gsmld_ioctl+0x10/0x10
[  262.683134][T12388]  tty_ioctl+0x9bd/0xdd0
[  262.683151][T12388]  ? __pfx_tty_ioctl+0x10/0x10
[  262.683169][T12388]  __se_sys_ioctl+0xfc/0x170
[  262.683183][T12388]  do_syscall_64+0x166/0x520
[  262.683197][T12388]  ? trace_irq_disable+0x3b/0x140
[  262.683207][T12388]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  262.683222][T12388]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  262.683236][T12388] RIP: 0033:0x7ff7b2f9e159
[  262.683247][T12388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  262.683259][T12388] RSP: 002b:00007ff7b3dc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  262.683273][T12388] RAX: ffffffffffffffda RBX: 00007ff7b3226090 RCX: 00007ff7b2f9e159
[  262.683283][T12388] RDX: 00002000000001c0 RSI: 00000000404c4701 RDI: 0000000000000003
[  262.683290][T12388] RBP: 00007ff7b3035024 R08: 0000000000000000 R09: 0000000000000000
[  262.683298][T12388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  262.683305][T12388] R13: 00007ff7b3226128 R14: 00007ff7b3226090 R15: 00007ffe60bbce18
[  262.683324][T12388]  </TASK>
[  262.690584][T12388] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory.
[  262.713349][   T35] hdpvr 1-1:0.0: firmware version 0x50 dated 
[  262.713360][   T35] hdpvr 1-1:0.0: untested firmware, the driver might not work.
[  262.928593][   T35] hdpvr 1-1:0.0: device init failed
[  262.928694][   T35] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -12
[  262.934038][   T35] usb 1-1: USB disconnect, device number 35
[  263.042801][ T7629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  263.836741][T12443] syzkaller1: entered promiscuous mode
[  263.838718][T12443] syzkaller1: entered allmulticast mode
[  263.870975][T12445] overlayfs: failed to resolve './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  263.957117][T12449] loop6: detected capacity change from 0 to 256
[  263.998918][T12449] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  264.072301][T12456] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779008)
[  264.072368][T12456] FAT-fs (loop6): Filesystem has been set read-only
[  264.073344][T12456] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779008)
[  264.201725][T12460] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2713'.
[  264.321865][ T7629] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  264.496322][ T7629] usb 1-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00
[  264.497447][ T7629] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  264.497476][ T7629] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  264.497492][ T7629] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  264.497507][ T7629] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  264.497524][ T7629] usb 1-1: config 0 interface 0 has no altsetting 0
[  264.497544][ T7629] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  264.501927][ T7629] usb 1-1: config 0 descriptor??
[  264.950106][ T7629] hid_parser_main: 4 callbacks suppressed
[  264.950257][ T7629] logitech 0003:046D:C295.0011: unknown main item tag 0x0
[  264.950304][ T7629] logitech 0003:046D:C295.0011: unknown main item tag 0x0
[  264.950343][ T7629] logitech 0003:046D:C295.0011: unknown main item tag 0x0
[  264.950381][ T7629] logitech 0003:046D:C295.0011: unknown main item tag 0x0
[  264.950420][ T7629] logitech 0003:046D:C295.0011: unknown main item tag 0x0
[  264.950458][ T7629] logitech 0003:046D:C295.0011: unknown main item tag 0x0
[  264.950497][ T7629] logitech 0003:046D:C295.0011: unknown main item tag 0x0
[  264.950542][ T7629] logitech 0003:046D:C295.0011: unknown main item tag 0x0
[  264.950584][ T7629] logitech 0003:046D:C295.0011: unknown main item tag 0x0
[  264.950622][ T7629] logitech 0003:046D:C295.0011: unknown main item tag 0x0
[  264.983461][ T7629] logitech 0003:046D:C295.0011: hidraw0: USB HID v0.00 Device [HID 046d:c295] on usb-dummy_hcd.0-1/input0
[  264.983533][ T7629] logitech 0003:046D:C295.0011: no inputs found
[  265.170726][ T7629] usb 1-1: USB disconnect, device number 36
[  265.471807][T12499] loop6: detected capacity change from 0 to 1024
[  265.498669][T12499] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  265.505279][T12499] ext4 filesystem being mounted at /189/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  265.532408][T11056] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  265.771769][T12520] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0
[  265.882987][T12532] fuse: Bad value for 'fd'
[  265.888884][T12532] overlayfs: failed to clone upperpath
[  265.934929][T12537] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2747'.
[  266.491584][T12570] bond0: Error: Cannot enslave bond to itself.
[  266.584483][T12579] bridge0: port 1(bridge_slave_0) entered disabled state
[  266.616356][T12582] bridge0: port 3(vlan3) entered blocking state
[  266.620281][T12582] bridge0: port 3(vlan3) entered disabled state
[  266.623525][T12582] vlan3: entered allmulticast mode
[  266.625421][T12582] syz_tun: entered allmulticast mode
[  266.628248][T12582] vlan3: entered promiscuous mode
[  266.628571][T12582] syz_tun: entered promiscuous mode
[  266.630029][T12582] bridge0: port 3(vlan3) entered blocking state
[  266.630105][T12582] bridge0: port 3(vlan3) entered forwarding state
[  266.689316][T12588] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2772'.
[  266.689368][T12588] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2772'.
[  266.689411][T12588] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2772'.
[  266.949839][   T35] net_ratelimit: 1846 callbacks suppressed
[  266.949909][   T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  267.117210][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  267.119168][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  267.185276][T12617] FAULT_INJECTION: forcing a failure.
[  267.185276][T12617] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  267.185351][T12617] CPU: 0 UID: 0 PID: 12617 Comm: syz.6.2786 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  267.185389][T12617] Tainted: [L]=SOFTLOCKUP
[  267.185395][T12617] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  267.185403][T12617] Call Trace:
[  267.185409][T12617]  <TASK>
[  267.185415][T12617]  dump_stack_lvl+0xe8/0x150
[  267.185439][T12617]  should_fail_ex+0x410/0x560
[  267.185457][T12617]  prepare_alloc_pages+0x223/0x600
[  267.185476][T12617]  __alloc_frozen_pages_noprof+0x185/0x5a0
[  267.185494][T12617]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  267.185507][T12617]  ? __alloc_frozen_pages_noprof+0x29e/0x5a0
[  267.185525][T12617]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  267.185548][T12617]  __alloc_pages_noprof+0x10/0x100
[  267.185563][T12617]  alloc_pages_bulk_noprof+0x5fa/0x7c0
[  267.185582][T12617]  ? alloc_pages_noprof+0x140/0x2b0
[  267.185630][T12617]  __kasan_populate_vmalloc+0xb7/0x1c0
[  267.185648][T12617]  alloc_vmap_area+0xd1a/0x1420
[  267.185675][T12617]  ? __pfx_alloc_vmap_area+0x10/0x10
[  267.185692][T12617]  ? __kmalloc_cache_node_noprof+0x3d1/0x620
[  267.185706][T12617]  ? __kmalloc_cache_node_noprof+0x1f7/0x620
[  267.185718][T12617]  ? __get_vm_area_node+0x155/0x2f0
[  267.185738][T12617]  __get_vm_area_node+0x200/0x2f0
[  267.185760][T12617]  __vmalloc_node_range_noprof+0x36e/0x16f0
[  267.185779][T12617]  ? bpf_prog_alloc_no_stats+0x47/0x560
[  267.185817][T12617]  ? __lock_acquire+0x6df/0x2e50
[  267.185846][T12617]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  267.185864][T12617]  ? lock_acquire+0x115/0x350
[  267.185881][T12617]  ? bpf_prog_alloc_no_stats+0x47/0x560
[  267.185893][T12617]  __vmalloc_noprof+0xd2/0x120
[  267.185911][T12617]  ? bpf_prog_alloc_no_stats+0x47/0x560
[  267.185927][T12617]  bpf_prog_alloc_no_stats+0x47/0x560
[  267.185939][T12617]  ? bpf_prog_alloc+0x2a/0x1a0
[  267.185954][T12617]  bpf_prog_alloc+0x3c/0x1a0
[  267.185970][T12617]  bpf_prog_load+0x7f8/0x1c20
[  267.185990][T12617]  ? __pfx_bpf_prog_load+0x10/0x10
[  267.186018][T12617]  __sys_bpf+0xd0d/0xd90
[  267.186037][T12617]  ? __pfx___sys_bpf+0x10/0x10
[  267.186053][T12617]  ? do_futex+0x3e7/0x4e0
[  267.186081][T12617]  ? ksys_write+0x242/0x270
[  267.186095][T12617]  ? rcu_is_watching+0x16/0xb0
[  267.186114][T12617]  __x64_sys_bpf+0xba/0xd0
[  267.186137][T12617]  do_syscall_64+0x166/0x520
[  267.186150][T12617]  ? trace_irq_disable+0x3b/0x140
[  267.186162][T12617]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  267.186179][T12617]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  267.186191][T12617] RIP: 0033:0x7ff7b2f9e159
[  267.186204][T12617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  267.186216][T12617] RSP: 002b:00007ff7b3de7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  267.186230][T12617] RAX: ffffffffffffffda RBX: 00007ff7b3225fa0 RCX: 00007ff7b2f9e159
[  267.186239][T12617] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005
[  267.186247][T12617] RBP: 00007ff7b3035024 R08: 0000000000000000 R09: 0000000000000000
[  267.186255][T12617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  267.186262][T12617] R13: 00007ff7b3226038 R14: 00007ff7b3225fa0 R15: 00007ffe60bbce18
[  267.186282][T12617]  </TASK>
[  267.188097][T12617] syz.6.2786: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1
[  267.188156][T12617] CPU: 0 UID: 0 PID: 12617 Comm: syz.6.2786 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  267.188174][T12617] Tainted: [L]=SOFTLOCKUP
[  267.188179][T12617] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  267.188187][T12617] Call Trace:
[  267.188192][T12617]  <TASK>
[  267.188197][T12617]  dump_stack_lvl+0xe8/0x150
[  267.188217][T12617]  warn_alloc+0x24d/0x270
[  267.188231][T12617]  ? lockdep_hardirqs_on+0x7b/0x110
[  267.188252][T12617]  ? __pfx_warn_alloc+0x10/0x10
[  267.188264][T12617]  ? kfree+0x1c5/0x650
[  267.188285][T12617]  ? __get_vm_area_node+0x219/0x2f0
[  267.188310][T12617]  __vmalloc_node_range_noprof+0x396/0x16f0
[  267.188334][T12617]  ? __lock_acquire+0x6df/0x2e50
[  267.188363][T12617]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  267.188381][T12617]  ? lock_acquire+0x115/0x350
[  267.188398][T12617]  ? bpf_prog_alloc_no_stats+0x47/0x560
[  267.188411][T12617]  __vmalloc_noprof+0xd2/0x120
[  267.188429][T12617]  ? bpf_prog_alloc_no_stats+0x47/0x560
[  267.188444][T12617]  bpf_prog_alloc_no_stats+0x47/0x560
[  267.188456][T12617]  ? bpf_prog_alloc+0x2a/0x1a0
[  267.188471][T12617]  bpf_prog_alloc+0x3c/0x1a0
[  267.188485][T12617]  bpf_prog_load+0x7f8/0x1c20
[  267.188506][T12617]  ? __pfx_bpf_prog_load+0x10/0x10
[  267.188535][T12617]  __sys_bpf+0xd0d/0xd90
[  267.188553][T12617]  ? __pfx___sys_bpf+0x10/0x10
[  267.188568][T12617]  ? do_futex+0x3e7/0x4e0
[  267.188625][T12617]  ? ksys_write+0x242/0x270
[  267.188641][T12617]  ? rcu_is_watching+0x16/0xb0
[  267.188661][T12617]  __x64_sys_bpf+0xba/0xd0
[  267.188675][T12617]  do_syscall_64+0x166/0x520
[  267.188686][T12617]  ? trace_irq_disable+0x3b/0x140
[  267.188698][T12617]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  267.188714][T12617]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  267.188726][T12617] RIP: 0033:0x7ff7b2f9e159
[  267.188737][T12617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  267.188748][T12617] RSP: 002b:00007ff7b3de7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  267.188762][T12617] RAX: ffffffffffffffda RBX: 00007ff7b3225fa0 RCX: 00007ff7b2f9e159
[  267.188771][T12617] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005
[  267.188779][T12617] RBP: 00007ff7b3035024 R08: 0000000000000000 R09: 0000000000000000
[  267.188786][T12617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  267.188794][T12617] R13: 00007ff7b3226038 R14: 00007ff7b3225fa0 R15: 00007ffe60bbce18
[  267.188813][T12617]  </TASK>
[  267.188818][T12617] Mem-Info:
[  267.188824][T12617] active_anon:13846 inactive_anon:350 isolated_anon:0
[  267.188824][T12617]  active_file:579 inactive_file:114557 isolated_file:0
[  267.188824][T12617]  unevictable:1000 dirty:414 writeback:0
[  267.188824][T12617]  slab_reclaimable:7960 slab_unreclaimable:92116
[  267.188824][T12617]  mapped:19434 shmem:4008 pagetables:3707
[  267.188824][T12617]  sec_pagetables:0 bounce:0
[  267.188824][T12617]  kernel_misc_reclaimable:0
[  267.188824][T12617]  free:1029600 free_pcp:21790 free_cma:0
[  267.188857][T12617] Node 0 active_anon:31176kB inactive_anon:1400kB active_file:2124kB inactive_file:170228kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:35520kB dirty:152kB writeback:0kB shmem:7072kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8096kB pagetables:3648kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  267.188892][T12617] Node 1 active_anon:24208kB inactive_anon:0kB active_file:192kB inactive_file:288000kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:42216kB dirty:1504kB writeback:0kB shmem:8960kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6344kB pagetables:11180kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  267.188926][T12617] Node 0 DMA free:15360kB boost:0kB min:240kB low:300kB high:360kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  267.188963][T12617] lowmem_reserve[]: 0 1581 2111 2111 2111
[  267.188986][T12617] Node 0 DMA32 free:1427036kB boost:0kB min:24948kB low:31184kB high:37420kB reserved_highatomic:0kB free_highatomic:0kB active_anon:20384kB inactive_anon:40kB active_file:0kB inactive_file:46224kB unevictable:0kB writepending:108kB zspages:0kB present:2080636kB managed:1619432kB mlocked:0kB bounce:0kB free_pcp:17136kB local_pcp:15368kB free_cma:0kB
[  267.189025][T12617] lowmem_reserve[]: 0 0 529 529 529
[  267.189046][T12617] Node 0 Normal free:14388kB boost:0kB min:8512kB low:10640kB high:12768kB reserved_highatomic:0kB free_highatomic:0kB active_anon:10824kB inactive_anon:1360kB active_file:2124kB inactive_file:124004kB unevictable:2000kB writepending:44kB zspages:0kB present:1572868kB managed:542440kB mlocked:0kB bounce:0kB free_pcp:1236kB local_pcp:932kB free_cma:0kB
[  267.189082][T12617] lowmem_reserve[]: 0 0 0 0 0
[  267.189103][T12617] Node 1 Normal free:2661616kB boost:0kB min:56408kB low:70508kB high:84608kB reserved_highatomic:0kB free_highatomic:0kB active_anon:24208kB inactive_anon:0kB active_file:192kB inactive_file:288000kB unevictable:2000kB writepending:1504kB zspages:0kB present:3670012kB managed:3594688kB mlocked:0kB bounce:0kB free_pcp:68788kB local_pcp:30972kB free_cma:0kB
[  267.189145][T12617] lowmem_reserve[]: 0 0 0 0 0
[  267.189165][T12617] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  267.189238][T12617] Node 0 DMA32: 273*4kB (UME) 185*8kB (UME) 157*16kB (UME) 366*32kB (UME) 175*64kB (UE) 278*128kB (UME) 256*256kB (UME) 223*512kB (UME) 202*1024kB (UME) 15*2048kB (UME) 231*4096kB (UM) = 1427036kB
[  267.189334][T12617] Node 0 Normal: 310*4kB (UME) 147*8kB (UME) 121*16kB (UE) 12*32kB (UME) 25*64kB (UE) 13*128kB (UME) 5*256kB (UME) 2*512kB (UM) 2*1024kB (ME) 1*2048kB (M) 0*4096kB = 14400kB
[  267.189425][T12617] Node 1 Normal: 688*4kB (UME) 665*8kB (UME) 344*16kB (UME) 993*32kB (UME) 359*64kB (UME) 119*128kB (UME) 81*256kB (UME) 45*512kB (UM) 21*1024kB (UM) 9*2048kB (UME) 609*4096kB (UM) = 2661736kB
[  267.189520][T12617] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB
[  267.189530][T12617] Node 1 hugepages_total=7 hugepages_free=7 hugepages_surp=0 hugepages_size=2048kB
[  267.189539][T12617] 119115 total pagecache pages
[  267.189544][T12617] 0 pages in swap cache
[  267.189548][T12617] Free swap  = 124996kB
[  267.189552][T12617] Total swap = 124996kB
[  267.189557][T12617] 1834877 pages RAM
[  267.189561][T12617] 0 pages HighMem/MovableOnly
[  267.189566][T12617] 391897 pages reserved
[  267.189570][T12617] 0 pages cma reserved
[  267.326460][   T36] kauditd_printk_skb: 108 callbacks suppressed
[  267.326474][   T36] audit: type=1800 audit(1788965376.098:2775): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15333 res=0 errno=0
[  267.564573][ T7629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  267.691800][ T7625] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  267.834363][   T36] audit: type=1326 audit(1788965376.568:2776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12633 comm="syz.5.2794" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0bc39e159 code=0x7ffc0000
[  267.834424][   T36] audit: type=1326 audit(1788965376.568:2777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12633 comm="syz.5.2794" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0bc39e159 code=0x7ffc0000
[  267.834547][   T36] audit: type=1326 audit(1788965376.568:2778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12633 comm="syz.5.2794" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0bc39e159 code=0x7ffc0000
[  267.834563][   T36] audit: type=1326 audit(1788965376.568:2779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12633 comm="syz.5.2794" exe="/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7fb0bc39e159 code=0x7ffc0000
[  267.856782][ T7625] usb 7-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[  267.857929][ T7625] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88
[  267.857943][ T7625] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  267.857954][ T7625] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7
[  267.860425][ T7625] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  267.860442][ T7625] usb 7-1: Product: syz
[  267.860451][ T7625] usb 7-1: Manufacturer: syz
[  267.860460][ T7625] usb 7-1: SerialNumber: syz
[  267.879562][   T36] audit: type=1800 audit(1788965376.605:2780): pid=12390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=163511 res=0 errno=0
[  267.881851][   T36] audit: type=1800 audit(1788965376.605:2781): pid=12390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=163543 res=0 errno=0
[  267.881913][ T7625] usb 7-1: config 0 descriptor??
[  267.887470][   T36] audit: type=1800 audit(1788965376.615:2782): pid=12390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=163518 res=0 errno=0
[  267.888313][   T36] audit: type=1800 audit(1788965376.615:2783): pid=12390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=163519 res=0 errno=0
[  267.917996][   T36] audit: type=1326 audit(1788965376.615:2784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12633 comm="syz.5.2794" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb0bc35e98e code=0x7ffc0000
[  267.991034][ T5666] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  268.076462][ T7629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  268.243471][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  268.244038][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  268.678820][ T5010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  268.896705][T12646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  269.006066][T12650] xt_hashlimit: size too large, truncated to 1048576
[  269.389447][T12666] loop6: detected capacity change from 0 to 128
[  269.399615][T12666] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  269.399768][T12666] hpfs: filesystem error: improperly stopped
[  269.399776][T12666] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  269.399781][T12666] hpfs: You really don't want any checks? You are crazy...
[  269.399787][T12666] hpfs: Code page index out of array
[  269.399789][T12666] hpfs: code page support is disabled
[  269.400793][T12666] hpfs: hpfs_map_4sectors(): unaligned read
[  269.400895][T12666] hpfs: hpfs_map_4sectors(): unaligned read
[  269.400900][T12666] hpfs: filesystem error: unable to find root dir
[  270.324470][ T5596] Bluetooth: hci3: command 0x2016 tx timeout
[  270.459751][   T30] IPVS: starting estimator thread 0...
[  270.573702][T12678] IPVS: using max 53 ests per chain, 127200 per kthread
[  271.279771][ T7629] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  271.471825][ T7629] usb 1-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00
[  271.478366][ T7629] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  271.481579][ T7629] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  271.488096][T12701] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  271.491440][ T7629] opticon 1-1:1.0: opticon converter detected
[  271.511363][ T7629] usb 1-1: opticon converter now attached to ttyUSB0
[  272.058481][ T5596] Bluetooth: hci2: command 0x0406 tx timeout
[  272.246513][ T7619] usb 1-1: USB disconnect, device number 37
[  272.257936][ T7619] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0
[  272.258318][ T7619] opticon 1-1:1.0: device disconnected
[  272.578882][ T5603] Bluetooth: hci3: command 0x2016 tx timeout
[  272.581002][  T810] net_ratelimit: 18 callbacks suppressed
[  272.581069][  T810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  272.589474][ T7618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  272.751937][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  272.755312][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  272.972675][   T36] kauditd_printk_skb: 28 callbacks suppressed
[  272.972881][   T36] audit: type=1800 audit(1788965381.311:2813): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15333 res=0 errno=0
[  273.191370][   T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  273.287674][ T5602] Bluetooth: hci2: unexpected event for opcode 0x080c
[  273.438966][T12754] loop6: detected capacity change from 0 to 32768
[  273.451662][   T36] audit: type=1800 audit(1788965381.745:2814): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15333 res=0 errno=0
[  273.469465][T12754] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  273.516901][T12754] XFS (loop6): Ending clean mount
[  273.528449][T12754] XFS (loop6): Quotacheck needed: Please wait.
[  273.534880][   T36] audit: type=1800 audit(1788965381.828:2815): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=163772 res=0 errno=0
[  273.572621][T12754] XFS (loop6): Quotacheck: Done.
[  273.585737][   T36] audit: type=1800 audit(1788965381.865:2816): pid=12754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2851" name="file1" dev="loop6" ino=4422 res=0 errno=0
[  273.694947][T11056] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  273.695487][T12793] jffs2: notice: (12793) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 1 orphan) and 1 of xref (1 dead, 0 orphan) found.
[  273.706052][ T7629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  273.773663][T12798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2866'.
[  273.777746][T12798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2866'.
[  273.878978][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  273.879443][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  273.954900][   T36] audit: type=1800 audit(1788965382.188:2817): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15333 res=0 errno=0
[  274.116341][   T36] audit: type=1800 audit(1788965382.363:2818): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15333 res=0 errno=0
[  274.154588][T12809] bridge3: entered promiscuous mode
[  274.208938][   T36] audit: type=1800 audit(1788965382.446:2819): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15333 res=0 errno=0
[  274.232252][T12815] FAULT_INJECTION: forcing a failure.
[  274.232252][T12815] name fail_futex, interval 1, probability 0, space 0, times 0
[  274.239106][T12815] CPU: 1 UID: 0 PID: 12815 Comm: syz.0.2872 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  274.239147][T12815] Tainted: [L]=SOFTLOCKUP
[  274.239151][T12815] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  274.239156][T12815] Call Trace:
[  274.239161][T12815]  <TASK>
[  274.239165][T12815]  dump_stack_lvl+0xe8/0x150
[  274.239181][T12815]  should_fail_ex+0x410/0x560
[  274.239192][T12815]  get_futex_key+0x1b4/0x1580
[  274.239204][T12815]  ? preempt_schedule_thunk+0x16/0x40
[  274.239215][T12815]  ? __pfx_get_futex_key+0x10/0x10
[  274.239240][T12815]  ? futex_wake_op+0xda6/0xdc0
[  274.239256][T12815]  futex_wake+0x119/0x5f0
[  274.239267][T12815]  ? __pfx_futex_wake_op+0x10/0x10
[  274.239278][T12815]  ? __pfx_futex_wake+0x10/0x10
[  274.239295][T12815]  do_futex+0x458/0x4e0
[  274.239307][T12815]  ? __pfx_do_futex+0x10/0x10
[  274.239315][T12815]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  274.239327][T12815]  __se_sys_futex+0x3a8/0x450
[  274.239339][T12815]  ? ksys_write+0x242/0x270
[  274.239346][T12815]  ? __pfx___se_sys_futex+0x10/0x10
[  274.239355][T12815]  ? rcu_is_watching+0x16/0xb0
[  274.239366][T12815]  ? __x64_sys_futex+0x21/0xf0
[  274.239376][T12815]  do_syscall_64+0x166/0x520
[  274.239383][T12815]  ? trace_irq_disable+0x3b/0x140
[  274.239390][T12815]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  274.239400][T12815]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  274.239408][T12815] RIP: 0033:0x7f76bef9e159
[  274.239416][T12815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  274.239423][T12815] RSP: 002b:00007f76bfde60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  274.239433][T12815] RAX: ffffffffffffffda RBX: 00007f76bf225fa8 RCX: 00007f76bef9e159
[  274.239438][T12815] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f76bf225fac
[  274.239443][T12815] RBP: 00007f76bf225fa0 R08: 3fffffffffffffff R09: 0000000000000000
[  274.239448][T12815] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  274.239453][T12815] R13: 00007f76bf226038 R14: 00007ffe07f9e130 R15: 00007ffe07f9e218
[  274.239464][T12815]  </TASK>
[  274.967296][ T5666] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  274.967936][ T7619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  275.279169][T12816] input: syz0 as /devices/virtual/input/input20
[  275.285652][   T36] audit: type=1800 audit(1788965383.443:2820): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=163910 res=0 errno=0
[  275.293645][   T36] audit: type=1800 audit(1788965383.452:2821): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=163925 res=0 errno=0
[  275.319653][   T36] audit: type=1800 audit(1788965383.470:2822): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=163928 res=0 errno=0
[  276.661013][T12887] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2906'.
[  276.670569][T12887] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2906'.
[  276.686108][   T12] netdevsim netdevsim5 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0
[  276.686920][   T12] netdevsim netdevsim5 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0
[  276.686960][   T12] netdevsim netdevsim5 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0
[  276.686992][   T12] netdevsim netdevsim5 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0
[  278.147532][T12930] loop6: detected capacity change from 0 to 32768
[  278.153511][T12930] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2924 (12930)
[  278.163768][T12930] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  278.167538][T12930] BTRFS info (device loop6): using sha256 checksum algorithm
[  278.210239][T12930] BTRFS info (device loop6): enabling ssd optimizations
[  278.212645][T12930] BTRFS info (device loop6): turning on async discard
[  278.215083][T12930] BTRFS info (device loop6): enabling free space tree
[  278.267140][T11056] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  278.308282][ T7618] net_ratelimit: 12 callbacks suppressed
[  278.308433][ T7618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  278.309155][ T7618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  278.387821][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  278.389399][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  278.539369][   T36] kauditd_printk_skb: 34 callbacks suppressed
[  278.542060][   T36] audit: type=1800 audit(1788965386.451:2857): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15333 res=0 errno=0
[  278.651887][  T810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  278.655470][   T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  278.995683][  T810] usb 1-1: new full-speed USB device number 38 using dummy_hcd
[  279.158931][  T810] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  279.164000][  T810] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  279.168486][  T810] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  279.173787][  T810] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  279.180590][   T36] audit: type=1800 audit(1788965387.041:2858): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=164241 res=0 errno=0
[  279.193933][   T36] audit: type=1800 audit(1788965387.050:2859): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=164270 res=0 errno=0
[  279.203760][   T36] audit: type=1800 audit(1788965387.060:2860): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=164248 res=0 errno=0
[  279.213324][   T36] audit: type=1800 audit(1788965387.069:2861): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=164249 res=0 errno=0
[  279.215095][   T36] audit: type=1800 audit(1788965387.069:2862): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=164250 res=0 errno=0
[  279.219931][   T36] audit: type=1800 audit(1788965387.069:2863): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=164290 res=0 errno=0
[  279.409805][  T810] usb 1-1: GET_CAPABILITIES returned 0
[  279.412263][  T810] usbtmc 1-1:16.0: can't read capabilities
[  279.416744][   T36] audit: type=1800 audit(1788965387.253:2864): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=164307 res=0 errno=0
[  279.468632][   T36] audit: type=1326 audit(1788965387.299:2865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12955 comm="syz.6.2929" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7b2f9e159 code=0x7fc00000
[  279.468693][   T36] audit: type=1326 audit(1788965387.299:2866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12955 comm="syz.6.2929" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff7b2f9e159 code=0x7fc00000
[  279.517069][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  279.520448][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  279.576192][T12974] loop6: detected capacity change from 0 to 512
[  279.598453][T12974] EXT4-fs error (device loop6): ext4_orphan_get:1403: inode #15: comm syz.6.2936: inode has both inline data and extents flags
[  279.598520][T12974] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  279.600450][T12974] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.2936: couldn't read orphan inode 15 (err -117)
[  279.600472][T12974] loop6: lost filesystem error report for type 5 error -117
[  279.605243][T12974] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  279.650496][ T7618] usb 1-1: USB disconnect, device number 38
[  279.775903][  T810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  279.776138][  T810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  279.886936][T11056] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  280.159969][T12997] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  280.267997][T13002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  280.326375][T13002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  280.420101][T13014] netdevsim netdevsim6 : renamed from netdevsim0 (while UP)
[  280.494319][T13017] block nbd0: Cannot use ioctl interface on a netlink controlled device.
[  280.494566][T13017] block nbd0: Cannot use ioctl interface on a netlink controlled device.
[  280.497854][T13017] block nbd0: shutting down sockets
[  282.269584][T13033] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2956'.
[  283.332466][T13062] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2969'.
[  283.400893][ T5602] Bluetooth: hci0: SCO packet for unknown connection handle 0
[  283.408323][T13068] netlink: 'syz.5.2972': attribute type 10 has an invalid length.
[  283.419225][T13068] team0: Port device dummy0 added
[  283.654731][   T35] usb 1-1: new full-speed USB device number 39 using dummy_hcd
[  283.744487][T13072] input: syz1 as /devices/virtual/input/input21
[  283.833907][   T35] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  283.839461][   T35] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  283.843663][   T35] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  283.849891][   T35] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  284.023181][    C0] net_ratelimit: 17 callbacks suppressed
[  284.023234][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  284.025590][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  284.078407][   T35] usb 1-1: GET_CAPABILITIES returned 0
[  284.078489][   T35] usbtmc 1-1:16.0: can't read capabilities
[  284.085305][   T36] kauditd_printk_skb: 169 callbacks suppressed
[  284.085406][   T36] audit: type=1800 audit(1788965391.562:3036): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=164611 res=0 errno=0
[  284.294551][   T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  284.304429][ T7629] usb 1-1: USB disconnect, device number 39
[  284.458996][   T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  284.706639][T13086] xt_hashlimit: overflow, try lower: 18446744073709551615/255
[  284.783032][   T36] audit: type=1800 audit(1788965392.208:3037): pid=13090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2983" name="file1" dev="tmpfs" ino=2502 res=0 errno=0
[  284.890534][ T5651] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  284.890874][ T5651] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  284.909755][T13092] batman_adv: batadv0: Adding interface: vlan4
[  284.912003][T13092] batman_adv: batadv0: The MTU of interface vlan4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  284.912026][T13092] batman_adv: batadv0: Not using interface vlan4 (retrying later): interface not active
[  285.150304][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  285.150715][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  285.192250][T13103] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 1, id = 0
[  285.204613][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  285.410718][   T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  285.540619][ T7619] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  285.703036][ T7619] usb 1-1: Using ep0 maxpacket: 32
[  285.704594][ T7619] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad
[  285.706204][ T7619] usb 1-1: config 0 has an invalid interface number: 35 but max is 0
[  285.706222][ T7619] usb 1-1: config 0 has no interface number 0
[  285.706250][ T7619] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  285.706406][ T7619] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  285.711071][ T7619] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  285.711088][ T7619] usb 1-1: Product: syz
[  285.711098][ T7619] usb 1-1: Manufacturer: syz
[  285.711192][ T7619] usb 1-1: SerialNumber: syz
[  285.714994][ T7619] usb 1-1: config 0 descriptor??
[  285.739020][   T36] audit: type=1800 audit(1788965393.085:3038): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=164839 res=0 errno=0
[  285.747121][   T36] audit: type=1800 audit(1788965393.085:3039): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=164871 res=0 errno=0
[  285.747188][   T36] audit: type=1800 audit(1788965393.085:3040): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=164846 res=0 errno=0
[  285.747235][   T36] audit: type=1800 audit(1788965393.085:3041): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=164847 res=0 errno=0
[  286.122125][   T36] audit: type=1804 audit(1788965393.435:3042): pid=13116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2995" name="ptp0" dev="tmpfs" ino=2524 res=1 errno=0
[  286.158679][ T7619] radio-si470x 1-1:0.35: si470x_get_report: usb_control_msg returned -71
[  286.158914][ T7619] radio-si470x 1-1:0.35: probe with driver radio-si470x failed with error -5
[  286.191001][ T7619] radio-raremono 1-1:0.35: this is not Thanko's Raremono.
[  286.197234][   T36] audit: type=1800 audit(1788965393.509:3043): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=164868 res=0 errno=0
[  286.197967][   T36] audit: type=1800 audit(1788965393.509:3044): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=164869 res=0 errno=0
[  286.198950][   T36] audit: type=1800 audit(1788965393.509:3045): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=164848 res=0 errno=0
[  286.219946][ T7619] usb 1-1: USB disconnect, device number 40
[  286.850267][T13126] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2999'.
[  286.962676][T13130] input: syz1 as /devices/virtual/input/input22
[  286.964817][T13130] input: failed to attach handler leds to device input22, error: -6
[  287.020256][T13120] overlayfs: missing 'lowerdir'
[  287.491570][ T7619] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  287.653857][ T7619] usb 1-1: Using ep0 maxpacket: 32
[  287.656215][ T7619] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  287.661285][ T7619] usb 1-1: config 0 has an invalid interface number: 184 but max is 0
[  287.661361][ T7619] usb 1-1: config 0 has no interface number 0
[  287.661455][ T7619] usb 1-1: config 0 interface 184 has no altsetting 0
[  287.673023][ T7619] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  287.673074][ T7619] usb 1-1: Product: syz
[  287.673190][ T7619] usb 1-1: Manufacturer: syz
[  287.673197][ T7619] usb 1-1: SerialNumber: syz
[  287.684095][ T7619] usb 1-1: config 0 descriptor??
[  287.782451][T13148] loop6: detected capacity change from 0 to 40427
[  287.785514][T13148] F2FS-fs (loop6): Insane cp_payload (553648128 >= 504)
[  287.785549][T13148] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  287.790507][T13148] F2FS-fs (loop6): Mismatch start address, segment0(1792) cp_blkaddr(512)
[  287.790538][T13148] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock
[  288.135381][T13160] loop6: detected capacity change from 0 to 4096
[  288.315539][T13160] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[  288.326707][T13160] ntfs3(loop6): Failed to load $Extend (-22).
[  288.328829][T13160] ntfs3(loop6): Failed to initialize $Extend.
[  288.395014][ T7619] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  288.395161][ T7619] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  288.709561][T13176] loop6: detected capacity change from 0 to 32768
[  288.713224][T13176] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.3021 (13176)
[  288.842580][T13176] BTRFS info (device loop6): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  288.849006][T13176] BTRFS info (device loop6): using blake2b checksum algorithm
[  288.946678][T13176] BTRFS info (device loop6): enabling ssd optimizations
[  288.946744][T13176] BTRFS info (device loop6): turning on async discard
[  288.946914][T13176] BTRFS info (device loop6): enabling free space tree
[  288.946928][T13176] BTRFS info (device loop6): use zstd compression, level 3
[  289.011698][T13199] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3025'.
[  289.016161][T13199] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3025'.
[  289.316473][ T7619] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  289.316676][ T7619] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  289.316717][ T7619] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  289.317216][ T7619] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71
[  289.350656][ T7619] usb 1-1: USB disconnect, device number 41
[  289.486562][   T35] net_ratelimit: 16 callbacks suppressed
[  289.486633][   T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  289.658893][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  289.659163][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  289.671344][T11056] BTRFS info (device loop6): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  289.815225][   T36] kauditd_printk_skb: 39 callbacks suppressed
[  289.815304][   T36] audit: type=1800 audit(1788965396.849:3085): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15333 res=0 errno=0
[  289.926743][ T7625] iguanair 7-1:0.0: failed to get version
[  289.929158][ T7625] iguanair 7-1:0.0: probe with driver iguanair failed with error -110
[  289.938192][   T36] audit: type=1800 audit(1788965396.960:3086): pid=12390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=163540 res=0 errno=0
[  289.942748][ T7625] usb 7-1: USB disconnect, device number 8
[  289.948446][   T36] audit: type=1800 audit(1788965396.960:3087): pid=12390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=163541 res=0 errno=0
[  289.948469][   T36] audit: type=1800 audit(1788965396.960:3088): pid=12390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=163520 res=0 errno=0
[  289.948484][   T36] audit: type=1800 audit(1788965396.960:3089): pid=12390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=163542 res=0 errno=0
[  289.988165][   T36] audit: type=1800 audit(1788965397.006:3090): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15333 res=0 errno=0
[  290.023564][   T36] audit: type=1800 audit(1788965397.043:3091): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15333 res=0 errno=0
[  290.088960][   T36] audit: type=1800 audit(1788965397.099:3092): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15333 res=0 errno=0
[  290.127201][   T36] audit: type=1800 audit(1788965397.135:3093): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15333 res=0 errno=0
[  290.156859][   T36] audit: type=1800 audit(1788965397.163:3094): pid=5045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15333 res=0 errno=0
[  290.179078][ T7629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  290.279611][ T7619] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  290.439293][ T7619] usb 1-1: Using ep0 maxpacket: 16
[  290.440206][ T7619] usb 1-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00
[  290.443604][ T7619] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  290.443621][ T7619] usb 1-1: Product: syz
[  290.443630][ T7619] usb 1-1: Manufacturer: syz
[  290.443639][ T7619] usb 1-1: SerialNumber: syz
[  290.452903][ T7619] usb 1-1: config 0 descriptor??
[  290.454796][ T7619] usb-storage 1-1:0.0: USB Mass Storage device detected
[  290.459467][ T7619] usb-storage 1-1:0.0: Quirks match for vid 054c pid 002e: 1
[  290.459484][ T7619] usb-storage 1-1:0.0: This device (054c,002e,0500 S 04 P 24) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller)
[  290.459484][ T7619]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  290.607747][T13269] loop6: detected capacity change from 0 to 128
[  290.610575][T13269] affs: Invalid blocksize (512, 1024, 2048, 4096 allowed)
[  290.624204][ T7625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  290.625841][   T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  290.674184][ T7619] usb 1-1: USB disconnect, device number 42
[  290.704908][T13273] netlink: 'syz.6.3058': attribute type 7 has an invalid length.
[  290.783296][T13277] loop6: detected capacity change from 0 to 512
[  290.785870][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  290.786422][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  290.792739][T13277] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e866c018, mo2=0002]
[  290.792821][T13277] System zones: 1-12
[  290.802578][T13277] EXT4-fs error (device loop6): ext4_xattr_inode_iget:473: comm syz.6.3060: EA inode 11 has unexpected i_nlink=2 ref_count=7168870745731235840
[  290.802642][T13277] loop6: lost filesystem error report for type 5 error -117
[  290.807598][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  290.807608][    C0] EXT4-fs (loop6): initial error at time 1788965397: ext4_xattr_inode_iget:473
[  290.807618][    C0] EXT4-fs (loop6): last error at time 1788965397: ext4_xattr_inode_iget:473
[  290.835022][T13277] EXT4-fs (loop6): 1 orphan inode deleted
[  290.835746][T13277] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  290.849523][T13277] EXT4-fs error (device loop6): __ext4_expand_extra_isize:6537: inode #15: comm syz.6.3060: bad extra_isize 6 (inode size 256)
[  290.879381][T11056] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  291.157535][T13299] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  291.179857][ T5602] Bluetooth: hci3: unexpected event for opcode 0x041c
[  291.269748][T13307] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3074'.
[  291.270882][T13307] jffs2: notice: (13307) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 1 orphan) and 1 of xref (1 dead, 0 orphan) found.
[  291.308485][   T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  291.319154][T13311] loop6: detected capacity change from 0 to 256
[  291.330592][T13311] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011bf5, chksum : 0x8604b368, utbl_chksum : 0xe619d30d)
[  291.330749][T13311] exFAT-fs (loop6): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  291.340629][T13311] exFAT-fs (loop6): failed to load alloc-bitmap
[  291.343347][T13311] exFAT-fs (loop6): failed to recognize exfat type
[  291.350867][T13312] binder: 13309:13312 unknown command 1935813253
[  291.350902][T13312] binder: 13309:13312 ioctl c0306201 2000000001c0 returned -22
[  291.379244][T13314] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3076'.
[  293.201312][T13408] jffs2: notice: (13408) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 1 orphan) and 1 of xref (1 dead, 0 orphan) found.
[  293.322830][T13404] loop6: detected capacity change from 0 to 32768
[  293.324321][T13404] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.3113 (13404)
[  293.337846][T13404] BTRFS info (device loop6): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  293.337919][T13404] BTRFS info (device loop6): using sha256 checksum algorithm
[  293.416152][T13404] BTRFS info (device loop6): turning off barriers
[  293.416195][T13404] BTRFS info (device loop6): enabling free space tree
[  293.463366][T11056] BTRFS info (device loop6): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  293.755455][ T7629] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  293.790323][T13457] loop6: detected capacity change from 0 to 256
[  293.794850][T13457] exfat: Deprecated parameter 'namecase'
[  293.802792][T13457] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0x84f53455, utbl_chksum : 0xe619d30d)
[  293.848844][T13459] Invalid argument reading file caps for ./file0
[  293.939806][ T7629] usb 1-1: Using ep0 maxpacket: 16
[  293.942182][ T7629] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[  293.953917][ T7629] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  293.953955][ T7629] usb 1-1: Product: syz
[  293.953987][ T7629] usb 1-1: Manufacturer: syz
[  293.954010][ T7629] usb 1-1: SerialNumber: syz
[  293.962940][ T7629] usb 1-1: config 0 descriptor??
[  293.966641][ T7629] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[  293.972495][ T7629] usb 1-1: Detected FT-X
[  294.101753][T13472] ------------[ cut here ]------------
[  294.101788][T13472] !chanctx_conf
[  294.101892][T13472] WARNING: net/mac80211/rate.c:51 at rate_control_rate_init+0x5a6/0x630, CPU#1: syz.6.3139/13472
[  294.108605][T13472] Modules linked in:
[  294.110125][T13472] CPU: 1 UID: 0 PID: 13472 Comm: syz.6.3139 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  294.113522][T13472] Tainted: [L]=SOFTLOCKUP
[  294.114973][T13472] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  294.118255][T13472] RIP: 0010:rate_control_rate_init+0x5a6/0x630
[  294.120364][T13472] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 7c c2 91 00 cc e8 76 fc 71 f6 90 0f 0b 90 eb e1 e8 6b fc 71 f6 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 84 00 00 00
[  294.127034][T13472] RSP: 0018:ffffc90003666fe8 EFLAGS: 00010283
[  294.129046][T13472] RAX: ffffffff8b55bc35 RBX: ffff888189778050 RCX: 0000000000080000
[  294.131727][T13472] RDX: ffffc90020381000 RSI: 00000000000003ac RDI: 00000000000003ad
[  294.134317][T13472] RBP: dffffc0000000000 R08: 0300000000000000 R09: 0000000000000000
[  294.136883][T13472] R10: 0000000000000000 R11: ffffffff8ed5c6e0 R12: ffffffff8b55b7a7
[  294.139457][T13472] R13: ffff888197d80f40 R14: 0000000000000001 R15: 0000000000000000
[  294.141984][T13472] FS:  00007ff7b3de76c0(0000) GS:ffff8882a8cd6000(0000) knlGS:0000000000000000
[  294.144930][T13472] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  294.147118][T13472] CR2: 00007fb0bd1556c8 CR3: 00000001baee2000 CR4: 00000000000006f0
[  294.149708][T13472] Call Trace:
[  294.150779][T13472]  <TASK>
[  294.151793][T13472]  rate_control_rate_init_all_links+0xf4/0x190
[  294.153792][T13472]  sta_apply_auth_flags+0x1bc/0x430
[  294.155460][T13472]  sta_apply_parameters+0x1291/0x1b50
[  294.157177][T13472]  ieee80211_add_station+0x3de/0x700
[  294.158918][T13472]  rdev_add_station+0xfc/0x290
[  294.160576][T13472]  nl80211_new_station+0x1b4e/0x1fd0
[  294.162338][T13472]  ? trace_contention_end+0x3d/0x140
[  294.164006][T13472]  ? __pfx_nl80211_new_station+0x10/0x10
[  294.165752][T13472]  ? __rtnl_unlock+0xc8/0xf0
[  294.167459][T13472]  ? nl80211_pre_doit+0x53d/0x890
[  294.169200][T13472]  genl_family_rcv_msg_doit+0x233/0x340
[  294.170924][T13472]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  294.172796][T13472]  ? bpf_lsm_capable+0x9/0x20
[  294.174282][T13472]  ? security_capable+0x7e/0x2c0
[  294.175844][T13472]  genl_rcv_msg+0x614/0x7a0
[  294.177290][T13472]  ? __pfx_genl_rcv_msg+0x10/0x10
[  294.178901][T13472]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  294.180594][T13472]  ? __pfx_nl80211_new_station+0x10/0x10
[  294.182330][T13472]  ? __pfx_nl80211_post_doit+0x10/0x10
[  294.184116][T13472]  ? __pfx_ref_tracker_free+0x10/0x10
[  294.185795][T13472]  netlink_rcv_skb+0x226/0x4a0
[  294.187375][T13472]  ? __pfx_genl_rcv_msg+0x10/0x10
[  294.189025][T13472]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  294.190706][T13472]  ? down_read+0x2be/0x330
[  294.192191][T13472]  genl_rcv+0x28/0x40
[  294.193511][T13472]  netlink_unicast+0x7bd/0x940
[  294.195046][T13472]  netlink_sendmsg+0x813/0xb40
[  294.196978][T13472]  ? __pfx_netlink_sendmsg+0x10/0x10
[  294.199065][T13472]  ? apparmor_socket_sendmsg+0x98/0x360
[  294.201285][T13472]  ? __pfx_netlink_sendmsg+0x10/0x10
[  294.203036][T13472]  sock_sendmsg_nosec+0x13a/0x180
[  294.206501][T13472]  ____sys_sendmsg+0x54e/0x850
[  294.208015][T13472]  ? __pfx_____sys_sendmsg+0x10/0x10
[  294.209649][T13472]  ? import_iovec+0x73/0xa0
[  294.211186][T13472]  ___sys_sendmsg+0x2a5/0x360
[  294.212693][T13472]  ? __pfx____sys_sendmsg+0x10/0x10
[  294.214321][T13472]  ? futex_wait+0x2a2/0x390
[  294.215753][T13472]  ? put_user_ifreq+0x7a/0xc0
[  294.217183][T13472]  ? __pfx_do_futex+0x10/0x10
[  294.218597][T13472]  __x64_sys_sendmsg+0x1b1/0x290
[  294.220080][T13472]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  294.221782][T13472]  do_syscall_64+0x166/0x520
[  294.223205][T13472]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.225064][T13472]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.226965][T13472] RIP: 0033:0x7ff7b2f9e159
[  294.228315][T13472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  294.234185][T13472] RSP: 002b:00007ff7b3de7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  294.236702][T13472] RAX: ffffffffffffffda RBX: 00007ff7b3225fa0 RCX: 00007ff7b2f9e159
[  294.239117][T13472] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000008
[  294.241587][T13472] RBP: 00007ff7b3035024 R08: 0000000000000000 R09: 0000000000000000
[  294.244064][T13472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  294.246521][T13472] R13: 00007ff7b3226038 R14: 00007ff7b3225fa0 R15: 00007ffe60bbce18
[  294.248900][T13472]  </TASK>
[  294.249862][T13472] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  294.252075][T13472] CPU: 1 UID: 0 PID: 13472 Comm: syz.6.3139 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  294.255420][T13472] Tainted: [L]=SOFTLOCKUP
[  294.256984][T13472] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  294.260157][T13472] Call Trace:
[  294.261232][T13472]  <TASK>
[  294.262156][T13472]  vpanic+0x56d/0xa60
[  294.263433][T13472]  ? __pfx__printk+0x10/0x10
[  294.265083][T13472]  ? __pfx_vpanic+0x10/0x10
[  294.266804][T13472]  ? is_bpf_text_address+0x292/0x2b0
[  294.268625][T13472]  ? is_bpf_text_address+0x26/0x2b0
[  294.270524][T13472]  panic+0xc5/0xd0
[  294.271806][T13472]  ? __pfx_panic+0x10/0x10
[  294.273493][T13472]  __warn+0x315/0x4c0
[  294.274912][T13472]  ? rate_control_rate_init+0x5a6/0x630
[  294.276954][T13472]  ? rate_control_rate_init+0x5a6/0x630
[  294.278994][T13472]  __report_bug+0x276/0x570
[  294.280607][T13472]  ? rate_control_rate_init+0x5a6/0x630
[  294.282318][T13472]  ? __pfx___report_bug+0x10/0x10
[  294.283864][T13472]  ? __lock_acquire+0x6df/0x2e50
[  294.285375][T13472]  ? __lock_acquire+0x6df/0x2e50
[  294.286942][T13472]  ? rate_control_rate_init+0x5a6/0x630
[  294.288719][T13472]  report_bug+0x16b/0x220
[  294.290067][T13472]  ? rate_control_rate_init+0x5a6/0x630
[  294.291736][T13472]  ? rate_control_rate_init+0x5a8/0x630
[  294.293471][T13472]  handle_bug+0x9c/0x200
[  294.294813][T13472]  exc_invalid_op+0x1a/0x50
[  294.296262][T13472]  asm_exc_invalid_op+0x1a/0x20
[  294.297737][T13472] RIP: 0010:rate_control_rate_init+0x5a6/0x630
[  294.299617][T13472] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 7c c2 91 00 cc e8 76 fc 71 f6 90 0f 0b 90 eb e1 e8 6b fc 71 f6 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 84 00 00 00
[  294.305416][T13472] RSP: 0018:ffffc90003666fe8 EFLAGS: 00010283
[  294.307275][T13472] RAX: ffffffff8b55bc35 RBX: ffff888189778050 RCX: 0000000000080000
[  294.309717][T13472] RDX: ffffc90020381000 RSI: 00000000000003ac RDI: 00000000000003ad
[  294.312136][T13472] RBP: dffffc0000000000 R08: 0300000000000000 R09: 0000000000000000
[  294.314499][T13472] R10: 0000000000000000 R11: ffffffff8ed5c6e0 R12: ffffffff8b55b7a7
[  294.316895][T13472] R13: ffff888197d80f40 R14: 0000000000000001 R15: 0000000000000000
[  294.319282][T13472]  ? rate_control_rate_init+0x117/0x630
[  294.320949][T13472]  ? rate_control_rate_init+0x5a5/0x630
[  294.322655][T13472]  ? rate_control_rate_init+0x5a5/0x630
[  294.324613][T13472]  rate_control_rate_init_all_links+0xf4/0x190
[  294.326685][T13472]  sta_apply_auth_flags+0x1bc/0x430
[  294.328483][T13472]  sta_apply_parameters+0x1291/0x1b50
[  294.330371][T13472]  ieee80211_add_station+0x3de/0x700
[  294.331976][T13472]  rdev_add_station+0xfc/0x290
[  294.333676][T13472]  nl80211_new_station+0x1b4e/0x1fd0
[  294.335635][T13472]  ? trace_contention_end+0x3d/0x140
[  294.337458][T13472]  ? __pfx_nl80211_new_station+0x10/0x10
[  294.339383][T13472]  ? __rtnl_unlock+0xc8/0xf0
[  294.341065][T13472]  ? nl80211_pre_doit+0x53d/0x890
[  294.342785][T13472]  genl_family_rcv_msg_doit+0x233/0x340
[  294.344550][T13472]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  294.346422][T13472]  ? bpf_lsm_capable+0x9/0x20
[  294.347853][T13472]  ? security_capable+0x7e/0x2c0
[  294.349389][T13472]  genl_rcv_msg+0x614/0x7a0
[  294.350758][T13472]  ? __pfx_genl_rcv_msg+0x10/0x10
[  294.352270][T13472]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  294.354024][T13472]  ? __pfx_nl80211_new_station+0x10/0x10
[  294.355972][T13472]  ? __pfx_nl80211_post_doit+0x10/0x10
[  294.357954][T13472]  ? __pfx_ref_tracker_free+0x10/0x10
[  294.359642][T13472]  netlink_rcv_skb+0x226/0x4a0
[  294.361274][T13472]  ? __pfx_genl_rcv_msg+0x10/0x10
[  294.363064][T13472]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  294.364919][T13472]  ? down_read+0x2be/0x330
[  294.366366][T13472]  genl_rcv+0x28/0x40
[  294.367831][T13472]  netlink_unicast+0x7bd/0x940
[  294.369614][T13472]  netlink_sendmsg+0x813/0xb40
[  294.371162][T13472]  ? __pfx_netlink_sendmsg+0x10/0x10
[  294.373058][T13472]  ? apparmor_socket_sendmsg+0x98/0x360
[  294.375128][T13472]  ? __pfx_netlink_sendmsg+0x10/0x10
[  294.376862][T13472]  sock_sendmsg_nosec+0x13a/0x180
[  294.378391][T13472]  ____sys_sendmsg+0x54e/0x850
[  294.380076][T13472]  ? __pfx_____sys_sendmsg+0x10/0x10
[  294.382048][T13472]  ? import_iovec+0x73/0xa0
[  294.383734][T13472]  ___sys_sendmsg+0x2a5/0x360
[  294.385369][T13472]  ? __pfx____sys_sendmsg+0x10/0x10
[  294.387001][T13472]  ? futex_wait+0x2a2/0x390
[  294.388470][T13472]  ? put_user_ifreq+0x7a/0xc0
[  294.389965][T13472]  ? __pfx_do_futex+0x10/0x10
[  294.391456][T13472]  __x64_sys_sendmsg+0x1b1/0x290
[  294.392973][T13472]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  294.394689][T13472]  do_syscall_64+0x166/0x520
[  294.396140][T13472]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.398063][T13472]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.399919][T13472] RIP: 0033:0x7ff7b2f9e159
[  294.401322][T13472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  294.407462][T13472] RSP: 002b:00007ff7b3de7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  294.410050][T13472] RAX: ffffffffffffffda RBX: 00007ff7b3225fa0 RCX: 00007ff7b2f9e159
[  294.412521][T13472] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000008
[  294.414914][T13472] RBP: 00007ff7b3035024 R08: 0000000000000000 R09: 0000000000000000
[  294.417340][T13472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  294.419809][T13472] R13: 00007ff7b3226038 R14: 00007ff7b3225fa0 R15: 00007ffe60bbce18
[  294.422304][T13472]  </TASK>
[  294.424046][T13472] Kernel Offset: disabled
[  294.425444][T13472] Rebooting in 86400 seconds..
