last executing test programs:

1m28.053836289s ago: executing program 0 (id=17):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(r1, r0, &(0x7f00000000c0)=0x58, 0x5)
r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/clear_refs\x00', 0x1, 0x0)
io_setup(0x8, &(0x7f0000000080)=<r3=>0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f0000000280)={0x20, r4, 0x8, 0x0, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}]})
io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000140)='-', 0x1}])

1m27.701062812s ago: executing program 0 (id=18):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="4c00010002"], 0x8)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0x800, @loopback, 0xfffffffd}], 0x1c)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000480)={0xc})
sendmmsg$inet6(r2, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000004c0)={0x0, 0x2}, &(0x7f0000000880)=0x8)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r4 = socket$xdp(0x2c, 0x3, 0x0)
r5 = open(&(0x7f0000000000)='./file0\x00', 0x1, 0xd3)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff)
setsockopt$sock_int(r4, 0x1, 0x2d, &(0x7f0000000140)=0x40, 0x4)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r7, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x0, 0x1, 0xc1}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20044090}, 0x0)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r7, 0x220, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x404c800}, 0x4000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000100)={0x0, 0xffffffffffffff90, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB="28000000bcc8503f1b42d8e54cef1905f86787571dcda4867fb21fb213e6695730a9212e6d2c1508755956817cf05ba892561e5564bc60b3a980b809bee9e3426f334855d05c79ae6d9c962f9c8300d53965b10448dd39de8aaa3c76afc77aa1bff14a59292d54518ac3df5a6c17c9108c607a3518ddfaf26d55261c08922835ca95a1a47995c151eeda2e1994c19e99c5254ee2fd738ee94ec25800000000000000", @ANYRES16=r9, @ANYBLOB="0100000000000000000007000080140001800500020012000000080006001a000000605cea270fa0d57ad530d146724ea73a1d1c10f7811a5fc39119ea1b1509f1b2aab26dd78007e66a1d3964f77094b30d8d9c5d84b0d587cdb582c6ba9da6c637b1502caa502043d47072936d6758b9503b1a1004b2919e2e4b8d09d57c3d8d9d81ae7013285173c32536c51d057bf18bae7c33935e08f85f69c6fa82ac512e48c33ce69b26b2610e6e11e61f58644014b245ede7455dbb2a5a9d28e36ccc2569eb9ad672bfe70949e2f0a7625d57935900"/225], 0x28}}, 0x1)

1m26.954397424s ago: executing program 0 (id=22):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$bt_hci(r4, 0x0, 0x1, &(0x7f0000000580)=""/187, &(0x7f00000002c0)=0xbb)
bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0x1, 0x2005, &(0x7f000005ffe4)={0xa, 0x4e23, 0x8419, @loopback}, 0x1c)
shutdown(r3, 0x2)
close_range(r2, 0xffffffffffffffff, 0x0)
sendfile(r1, r0, &(0x7f00000000c0)=0x58, 0x5)
r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
io_setup(0x8, &(0x7f0000000080)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000140)='-', 0x1}])

1m26.803755473s ago: executing program 0 (id=23):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pipe2(&(0x7f0000000080)={<r0=>0xffffffffffffffff}, 0x4000)
fallocate(r0, 0x2, 0x100000000, 0x9c7)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(r2, r1, &(0x7f00000000c0)=0x58, 0x5)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x4a0f0000}, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
mmap(&(0x7f00009c2000/0x2000)=nil, 0x2000, 0x27fffff, 0x4012011, r4, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f0000000440)={0x10000, 0x34363248, 0x1, @stepwise={0x3, 0xfffffffa, 0x7fff, 0x5, 0xffffffff, 0xc4}})
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
io_setup(0x8, &(0x7f0000000080)=<r5=>0x0)
accept4$llc(r4, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000680)=0x10, 0x80000)
r6 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x1, 0x4b4, &(0x7f0000000c80)="$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")
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0a64febc53872a5f0cd8f3d0edfb2cd5dd07ba6e35abd849625b4d5796d533f253526bb62bcba866bec7aeeee0d300fffecfa78d52ae6ff2c22a29d3219ee5ef198ff45c738e7b51d23d3d3884b02ee42abd96889bb3b8bf90c5424bbf91d6a5b3824e725783730ebb1064496bb030a763813995171897", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000949500000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2a}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2006300, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
open$dir(&(0x7f0000000580)='./file0/file0\x00', 0x82, 0x178)
linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', r6, &(0x7f0000000140)='./file0\x00', 0x1000)
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x40002})
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000580), 0x0, 0x0, 0x0})
r9 = creat(&(0x7f00000002c0)='./file0\x00', 0x118)
ioctl$FICLONERANGE(r9, 0x4020940d, &(0x7f0000000100)={{r9}, 0x7, 0x3, 0x9})
r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
io_submit(r5, 0x2, &(0x7f0000000400)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x8001, r2, &(0x7f0000000180)="b06e21338b7b58449a5ee6c756623a67343f6072126343877cfb4a7f06d55e2172d0e3f08241829f12bb96a282d61a9ffd5643be8225a8ecdd744218eee58f46f79f7d0306c8f27956c19cb5c5678d0a275551e7815c02a9af350d35200086de3eed0bec871e5ae4e4ab49d0471a5a33c9300860b32757df23a4b6a7e3bbd75dc5c986620858b25cc602aba2259f9db48a2c92486cf162316254d134228afc9e6d9f90247e6a2a569b17172ff077975803bd2eaea6c7b7278e58e1c71bfd099ac461a5c0876aa22bfc9619c8c6745b250aded0cc053cbfbbd003dc9df44e15ba959160a1c5fb3378", 0xe8, 0x8, 0x0, 0x3, r9}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x6, r10, &(0x7f0000000900)="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", 0x15e, 0x100000000, 0x0, 0x2, r1}])

1m26.587363718s ago: executing program 0 (id=24):
r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', <r1=>0x0})
sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r0, 0x4, 0x5, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000840}, 0x2404504c)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_TX_POWER(r2, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2001}, 0x4000800) (async)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r0, 0xa20, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x4000084)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_SET_MACPARAMS(r3, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x64, r0, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x9}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x9}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x81}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x3}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x6}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x80000001}]}, 0x64}, 0x1, 0x0, 0x0, 0x10000804}, 0x40000) (async)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
getpeername$unix(r5, &(0x7f0000000500)=@abs, &(0x7f0000000580)=0x6e) (async)
r6 = socket$l2tp(0x2, 0x2, 0x73) (async)
r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000600), r3)
sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x40, r7, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}]}, 0x40}, 0x1, 0x0, 0x0, 0x8014}, 0x40000) (async)
r8 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000740), r2)
sendmsg$NET_DM_CMD_START(r2, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, r8, 0x20, 0x70bd2a, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x4000000)
r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000880), r2)
sendmsg$NFC_CMD_SE_IO(r2, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, r9, 0x310, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x14)
r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000980), 0x484000, 0x0) (async)
ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, &(0x7f0000000a00)={0x28, 0x1, 0x0, 0x0, <r11=>0x0, 0x0, 0xdead, 0x4, &(0x7f00000009c0)})
ioctl$IOMMU_DESTROY$hwpt(r10, 0x3b80, &(0x7f0000000a40)={0x8, r11})
r12 = pidfd_getfd(0xffffffffffffffff, r6, 0x0)
sendmsg$802154_dgram(r12, &(0x7f0000000b80)={&(0x7f0000000a80)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f0000000b40)={&(0x7f0000000ac0)="4663f0c1127da6b3b68bcf4600e01c6199e4cbde0c29890dea76311b1bf7684658503e6309c7b636a266f52605b163103f8ba7f8ec2b35916648528099b9014c2b1eb73dc4b680211d3eb3634ad3df9226e6de31", 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) (async)
ioctl$EXT4_IOC_MOVE_EXT(r10, 0xc028660f, &(0x7f0000000bc0)={0x0, r6, 0x10000, 0x401, 0x9, 0x4}) (async)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r4, 0x8983, &(0x7f0000000c00)={0x7, 'lo\x00', {0xd}, 0x4}) (async)
ioctl$EXT4_IOC_GROUP_EXTEND(r5, 0x40086607, &(0x7f0000000c40)=0x10) (async)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000c80), r2) (async)
r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000000d00), r12)
sendmsg$TIPC_CMD_GET_LINKS(r12, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x24, r13, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0xfffffffb}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20044814}, 0x4008000)
bind$inet6(r12, &(0x7f0000000e00)={0xa, 0x4e22, 0x6986, @dev={0xfe, 0x80, '\x00', 0x28}, 0x1}, 0x1c)

1m26.359907289s ago: executing program 0 (id=25):
syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000a13de30840205029f1850102030109022d0002000000000904210001d553e5000905060500000000000904000001f238b50009050102f7"], 0x0)
syz_usb_connect_ath9k(0x3, 0xb3, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffed7}}]}}, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
sendmsg$sock(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)="6fde7026d5dd2957d32d81fdfd250760a64ebb5c1ddd9acc85ad1f2a38349ae270f8c564e4593229ee93969e0d9abbecb67746e9e12a6333fa5a1dc2f251cad3d77f3768d4a23bebe58db3e702b7ccbbe11f9eac60887bbb0b7fb4e2232739e8c02fca83dce875c442", 0x69}, {&(0x7f0000000200)="8ce0c74fc0daaa7afdcde686330975260484f25c95a2d7c79bc5607f82446376061889916666cc755fae855899081a4fe723f4bd4e300637f7926e33e70e23d571ee61005dec5405ecf64b13bce5cd6ee8e34e1ef1", 0x55}, {&(0x7f0000000280)="2626f761ff5748fe9ba19cbba0fe4556dc5f82f41bcb17839054cdf2082fc28f09612879547b8b29e342f1aa6419d949753017471201523798f223bdaa514f559984eedb110325f73a3f8e3a74d2a031e43e7c8cc5ab4cb5a25c21451e06b2f19895182ffff954702ffaf60713976de5eccf98e46618173e1ae11de0ca167a3acc2f", 0x82}, {&(0x7f0000000380)="ee44a1d2497c68d63087e267ce8856", 0xf}, {&(0x7f00000003c0)="df77e669b8de6a4e09cc69fe8289802c83ba499bb30a899aa97981710913926dd58e3fa725c305b263f4f5a36739ff050cf1bc02ee255cdabaaac7fcf0eb61c37cf455d81e588a82f372af10c9813d4d2e8f524b728500eb9f720dc66d89916901cd93ca1744ff1b55bbdb2814a4fb1925052c06c536eeb5ccd984dfa98ee96720185d2ba1a628", 0x87}], 0x5, &(0x7f0000000580)=[@timestamping={{0x14, 0x1, 0x25, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x8}}], 0x48}, 0x24000010)
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(r1, r0, &(0x7f00000000c0)=0x58, 0x5)
r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
io_setup(0x8, &(0x7f0000000080)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000140)='-', 0x1}])
syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000a13de30840205029f1850102030109022d0002000000000904210001d553e5000905060500000000000904000001f238b50009050102f7"], 0x0) (async)
syz_usb_connect_ath9k(0x3, 0xb3, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffed7}}]}}, 0x0) (async)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) (async)
sendmsg$sock(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)="6fde7026d5dd2957d32d81fdfd250760a64ebb5c1ddd9acc85ad1f2a38349ae270f8c564e4593229ee93969e0d9abbecb67746e9e12a6333fa5a1dc2f251cad3d77f3768d4a23bebe58db3e702b7ccbbe11f9eac60887bbb0b7fb4e2232739e8c02fca83dce875c442", 0x69}, {&(0x7f0000000200)="8ce0c74fc0daaa7afdcde686330975260484f25c95a2d7c79bc5607f82446376061889916666cc755fae855899081a4fe723f4bd4e300637f7926e33e70e23d571ee61005dec5405ecf64b13bce5cd6ee8e34e1ef1", 0x55}, {&(0x7f0000000280)="2626f761ff5748fe9ba19cbba0fe4556dc5f82f41bcb17839054cdf2082fc28f09612879547b8b29e342f1aa6419d949753017471201523798f223bdaa514f559984eedb110325f73a3f8e3a74d2a031e43e7c8cc5ab4cb5a25c21451e06b2f19895182ffff954702ffaf60713976de5eccf98e46618173e1ae11de0ca167a3acc2f", 0x82}, {&(0x7f0000000380)="ee44a1d2497c68d63087e267ce8856", 0xf}, {&(0x7f00000003c0)="df77e669b8de6a4e09cc69fe8289802c83ba499bb30a899aa97981710913926dd58e3fa725c305b263f4f5a36739ff050cf1bc02ee255cdabaaac7fcf0eb61c37cf455d81e588a82f372af10c9813d4d2e8f524b728500eb9f720dc66d89916901cd93ca1744ff1b55bbdb2814a4fb1925052c06c536eeb5ccd984dfa98ee96720185d2ba1a628", 0x87}], 0x5, &(0x7f0000000580)=[@timestamping={{0x14, 0x1, 0x25, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x8}}], 0x48}, 0x24000010) (async)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) (async)
sendfile(r1, r0, &(0x7f00000000c0)=0x58, 0x5) (async)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) (async)
io_setup(0x8, &(0x7f0000000080)) (async)
io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000140)='-', 0x1}]) (async)

1m26.177832373s ago: executing program 32 (id=25):
syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000a13de30840205029f1850102030109022d0002000000000904210001d553e5000905060500000000000904000001f238b50009050102f7"], 0x0)
syz_usb_connect_ath9k(0x3, 0xb3, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffed7}}]}}, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
sendmsg$sock(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)="6fde7026d5dd2957d32d81fdfd250760a64ebb5c1ddd9acc85ad1f2a38349ae270f8c564e4593229ee93969e0d9abbecb67746e9e12a6333fa5a1dc2f251cad3d77f3768d4a23bebe58db3e702b7ccbbe11f9eac60887bbb0b7fb4e2232739e8c02fca83dce875c442", 0x69}, {&(0x7f0000000200)="8ce0c74fc0daaa7afdcde686330975260484f25c95a2d7c79bc5607f82446376061889916666cc755fae855899081a4fe723f4bd4e300637f7926e33e70e23d571ee61005dec5405ecf64b13bce5cd6ee8e34e1ef1", 0x55}, {&(0x7f0000000280)="2626f761ff5748fe9ba19cbba0fe4556dc5f82f41bcb17839054cdf2082fc28f09612879547b8b29e342f1aa6419d949753017471201523798f223bdaa514f559984eedb110325f73a3f8e3a74d2a031e43e7c8cc5ab4cb5a25c21451e06b2f19895182ffff954702ffaf60713976de5eccf98e46618173e1ae11de0ca167a3acc2f", 0x82}, {&(0x7f0000000380)="ee44a1d2497c68d63087e267ce8856", 0xf}, {&(0x7f00000003c0)="df77e669b8de6a4e09cc69fe8289802c83ba499bb30a899aa97981710913926dd58e3fa725c305b263f4f5a36739ff050cf1bc02ee255cdabaaac7fcf0eb61c37cf455d81e588a82f372af10c9813d4d2e8f524b728500eb9f720dc66d89916901cd93ca1744ff1b55bbdb2814a4fb1925052c06c536eeb5ccd984dfa98ee96720185d2ba1a628", 0x87}], 0x5, &(0x7f0000000580)=[@timestamping={{0x14, 0x1, 0x25, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x8}}], 0x48}, 0x24000010)
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(r1, r0, &(0x7f00000000c0)=0x58, 0x5)
r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
io_setup(0x8, &(0x7f0000000080)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000140)='-', 0x1}])
syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000a13de30840205029f1850102030109022d0002000000000904210001d553e5000905060500000000000904000001f238b50009050102f7"], 0x0) (async)
syz_usb_connect_ath9k(0x3, 0xb3, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffed7}}]}}, 0x0) (async)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) (async)
sendmsg$sock(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)="6fde7026d5dd2957d32d81fdfd250760a64ebb5c1ddd9acc85ad1f2a38349ae270f8c564e4593229ee93969e0d9abbecb67746e9e12a6333fa5a1dc2f251cad3d77f3768d4a23bebe58db3e702b7ccbbe11f9eac60887bbb0b7fb4e2232739e8c02fca83dce875c442", 0x69}, {&(0x7f0000000200)="8ce0c74fc0daaa7afdcde686330975260484f25c95a2d7c79bc5607f82446376061889916666cc755fae855899081a4fe723f4bd4e300637f7926e33e70e23d571ee61005dec5405ecf64b13bce5cd6ee8e34e1ef1", 0x55}, {&(0x7f0000000280)="2626f761ff5748fe9ba19cbba0fe4556dc5f82f41bcb17839054cdf2082fc28f09612879547b8b29e342f1aa6419d949753017471201523798f223bdaa514f559984eedb110325f73a3f8e3a74d2a031e43e7c8cc5ab4cb5a25c21451e06b2f19895182ffff954702ffaf60713976de5eccf98e46618173e1ae11de0ca167a3acc2f", 0x82}, {&(0x7f0000000380)="ee44a1d2497c68d63087e267ce8856", 0xf}, {&(0x7f00000003c0)="df77e669b8de6a4e09cc69fe8289802c83ba499bb30a899aa97981710913926dd58e3fa725c305b263f4f5a36739ff050cf1bc02ee255cdabaaac7fcf0eb61c37cf455d81e588a82f372af10c9813d4d2e8f524b728500eb9f720dc66d89916901cd93ca1744ff1b55bbdb2814a4fb1925052c06c536eeb5ccd984dfa98ee96720185d2ba1a628", 0x87}], 0x5, &(0x7f0000000580)=[@timestamping={{0x14, 0x1, 0x25, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x8}}], 0x48}, 0x24000010) (async)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) (async)
sendfile(r1, r0, &(0x7f00000000c0)=0x58, 0x5) (async)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) (async)
io_setup(0x8, &(0x7f0000000080)) (async)
io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000140)='-', 0x1}]) (async)

1m15.943214964s ago: executing program 3 (id=84):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(r1, r0, &(0x7f00000000c0)=0x58, 0x5)
r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
r3 = socket(0x11, 0xa, 0x0)
syz_mount_image$nilfs2(&(0x7f0000000a00), &(0x7f0000000080)='./file0\x00', 0x800408, &(0x7f00000001c0)=ANY=[@ANYBLOB="00c1d143753d2c083ee422f83383b46202c4de2de291601c80052445e264d4679b97678c14da06e79245374cfb5a59ebaeff670caadb5694b952eb30672a383a1f6fadcd60e27a35d7323b726ca42335f73e82b529330acfc29896dc42aec0f5556f5065681f53223e2a31ee24d8b022c2efed9fd16c3b883288a1f4a7e058e3eedefe389ff7f2c1659806e246de77872f47b9bf24c721dd9fa20e826b3f5cd1b88228211b647af80c"], 0x3, 0xa2d, &(0x7f0000000a40)="$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")
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7)
sendmsg$can_bcm(r3, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8, 0x0, 0x0, 0x14}, 0x0)
io_setup(0x8, &(0x7f0000000080)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000140)='-', 0x1}])
r5 = syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00')
pread64(r5, &(0x7f0000032140)=""/102344, 0x18fc8, 0x4000c2a)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x8}}, './file1\x00'})

1m15.523835704s ago: executing program 3 (id=87):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sysvipc/shm\x00', 0x0, 0x0)
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(r1, r0, &(0x7f00000000c0)=0x58, 0x5)
r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
io_setup(0x8, &(0x7f0000000080)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000140)='-', 0x1}])

1m15.389479652s ago: executing program 3 (id=90):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(r1, r0, &(0x7f00000000c0)=0x58, 0x5)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x2000085c, &(0x7f0000000380)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESDEC=0x0, @ANYBLOB=',discard,\x00', @ANYRES16, @ANYRESOCT=0x0, @ANYBLOB="dd812246da16e3f3744109adecbf790b293943c866e410686871297a5f0d7ae82908f6ba144c43d8299b393f0bf8d5ce774794f45e41d2baac5bb21da7bfa7953e1b99f77929f7a4f3069219c59678f7fd86f2371cd5238783f37d25cfb853f3330632288112a663e0547534d398a77ef57503cb1b1b2548726354308bb8723bedc0c1997f043d9ff1745bc4f980882eb24cce51c0f9e6cfac5596d0013f775910ea2f18d46216b9ecd3508b347cf690c1db6bd77bff73e719be2d22b0bc374048d493bb3262859982a98b7f523ea4e8044ab6de9cdbee0cc9540eb8f06aa7b239e62bc6fab71a2ca0ff472263f9fcca9c45", @ANYRES8=0x0, @ANYRESHEX, @ANYRES32, @ANYRESHEX], 0xc1, 0x151a, &(0x7f0000002a80)="$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")
r2 = open(&(0x7f00000000c0)='.\x00', 0x101000, 0x190)
getdents(r2, 0x0, 0x0)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
io_setup(0x8, &(0x7f0000000080)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000140)='-', 0x1}])

1m15.011595697s ago: executing program 3 (id=95):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xb, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0xa1b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0xfeffff, 0xffffff69, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40)
r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(r2, r0, &(0x7f00000000c0)=0x58, 0x5)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r3, &(0x7f0000000640)=[{0x0}, {&(0x7f00000002c0)=""/231, 0xe7}], 0x2, 0x1, 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0)
syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00089aafc727346c3e0d8728525a2641b3b31621730c58dcf8e0ca2e6767a45a978776e9d2c689feab83a160d00a77ae5112cd4e7141cad333d7cbb69dc6b314609d3827059c11066ba0b4b95c12d2d9ff9c8896d9e247bd55f9ff578a14e0e9d0ca07693396b00d2ef44adb4858475a07d5e8fa3ef5b306fe8a5d1cd2d8e06e7f88226ece092c6aabf8870e140124d5a48670513e0c419c99b7c5105959e7a535f12694634cf272490e0000"], 0x81, 0x4ac, &(0x7f00000011c0)="$eJzs20tsG1UXwPFzPLbruPk+3Adpi6piCSRCS9skLmmrIKE8iEBqG0gaEBUPhdgJJk4cxSkkVUu7BHYsumTJlgUrxBZVYolYoCDUXemGjVeUHeiO52XXSewm8TT1/1e1dx7H7r33zMy914kFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACIDL022NOrYdcCAAC00qWJ8Z4M4z8AAG3lMut/AACAdqJiyR+icnKurBft/YrEhfzC1ZXJkdH6L+tQUYmIZcebv4nevsyZl/vPnnPLjV+/3Y7I2MTlwfRwcX5xKVcq5bLpyYX8dDGba/gdtvr6WsftDkjPz13NzsyU0n2nMlWnV1L39+ztSg30vz8cd2MnR0ZHJwIx0dgj/+8PWW+GHxdLXhSVT374Ti+JSES23hebXDs7rcNuxHG7EZMjo3ZDCvmphWVzUiNOVKS6T+JuH7UgF1sSETH10vj2rNliYsmPojJ0uqxjImK5/XDC/mC4ofqEIWqWriLSLbsgZ4+xPWLJh6Jy53RK3nT61c5/XOR62JXDjos6939Ry/qW/Tww95N5bF54O/3GwkwxEKsR545qZnyocw+GPj600mP+bEqIJWP2HV/W8bArg5brEEvmRSX+9af2vELseelTA2ePPXs+OMM4tMn7mNhTzs3VyJgcc6YOGjF/HqHa2BYJteRPUXnwe8Le73Zyw08E2oRaUhCVf26UVWvWpVZgfe/Z7WvDna1/R2K4uLi6lJ/9eLnu+WRi8KPS8tLUdP3TlbWrFTyy2Tq2VqS5JVlSKyu+Lz4re69z1gD/q+z5tfn2un8tdNeUruD108h2w8+ZJuZRpk6qltwTlZkPDlfGGUk23TftwOR/VFRK5V/UzbST/2hlL5D/V/z+S2h16bFz+//K51ruXOLIlYPrHd+J/Js6mfy/KypDfx92PtOo5N+qiTVxXaLy3u2jTlwkbuKibnMq7ziTL+R6TOy/orL/ZzdW7NikE3vAj+01sSVR+fJOdexeJ/agH9tnYtdE5e5v9WOf9mMzJnbV5Otu2o1NmthjTmyXH3tquljIbtatJv99ovLOzdfVbfO6+Q/c/7dqSs9DOd94e7vynwocu+Xk9YqT/+gm+f9KVFb/Ouq22+5797LaZ//r59/Mlb+/XR3rTkb3+7G9jTYrbCb/+0Tl/qtrXpudtjm7foaC+X8mWl16/RpS/vcFjqWcesWb7It2VFq9NjdVKOSW2GCDDTa8jbCfTGgFM/6Pm1G931J3HuOM/52VPX/G9OBzf/wfqCk9IY3/+wPHBpxZSywqklieX4wdEkmUVq+dzM9PzeZmcwuZM/09fefP9GTOxeLu5M7farjvngQm/ydE5cZPv3rrmOr5X/35f7Km9ISU/wPBNlXNaxruirZk8t8pKv331rz15kbzf3f93/1cdendfyHl/2DgWMqpV2eTfQEAAAAAAAAAAAAAAAAAu0lSLXleVFbGX1L3O0SN/P5ftqb0hPT7X12BY9nt/16D+9WoqlONVh0AAAAAAAAAAKCVImLJN6LygpT1pjnQKXIxWOKJ9l8AAAD//16uQhc=")
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x24040804}, 0x0)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f1b"], 0x22)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000, 0x0, 0x0)
syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='noadinicb,partition=00000000000000000005,noadinicb,mode=00000000000000000003324,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c766f6c756d653d303030303030303030303030302c0000000000000000501cb5d7c12e5184d12ef849f01234cc0632d887ab83b9a499f253a549724d60457bb58a75adb74f3af03ad3ce885b137f28e47a314f31f232c3a9f530c68d8ba34bf01945e243cbc23403afab131b58d3a2aa64136e0a7c462f6b7050c665746acc89d02bf21ece3866519a7826f4e18fda118954b3c6e9738bfb06d6c52c8d07"], 0x1, 0x489, &(0x7f0000000580)="$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")
symlink(&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000080))
chdir(&(0x7f0000000080)='./file1\x00')
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x2, 0x400)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x20, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0})
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7, 0x1, 0x8000000000000000, 0x0, 0xfffffffffffffffe, 0xb, 0x0, 0x6, 0x0, 0xfffffffd, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4, 0x0, 0x2000100, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd, 0x8, 0x7, 0x4, 0x800000, 0x0, 0x101, 0x1, 0xd721, 0x0, 0x4, 0x0, 0x0, 0x1, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x58, 0x4, 0x0, 0x3, 0x4000000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000006fd, 0x0, 0x0, 0x0, 0x0, 0xffffffff]})
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='cgroup2\x00', 0x4, 0x0)
mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', 0x0, 0xf0, 0x0)

1m14.053360126s ago: executing program 3 (id=101):
syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f00000000c0)={[{@compress_algo={'compress', 0x3d, 'lzo'}}, {@discard_sync}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {}, {@datasum}, {@user_subvol_rm}, {@nodiscard}]}, 0xfb, 0x5136, &(0x7f0000000340)="$eJzs3U+IVWUfB/Dnzp3rzKvg3FcIbJVFINXCwU1ERFeZoKLolovBCJxaBOnCSZBoIYgt+rfwlhS1kFxJLZJZGEFtXEhhBG5Dw1y4UQykWbTTmHvOc+fe53jPvTOOjennIzPnPOd3nuc893IW93udc04AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAEMILv392pKx+5vrUuQvTjd2Htk1fPTC14WwIlfb2Sl7ftf3ZV97csevF8dhh5uVsWa/3GzLrejFrrOnZuNCv9+f1EEItGaCaL59ZVxi1e3VfccBSNy7vPb5lf2PzyaOt6vyV86eLL50F46s9gdWSn1eXFs+lRvv3SLJHp9116lV6TtGsf3rC/SsvAgBYkslme9H5OJp/xO20D6b1pN1I2q2svWnxCNknhFZ3Yzmycdf0m+emtD7cPGsrPc9GFhXG+s4zqefvf6fdTPsn7SRqLGGevbvmkWa83zxnk/pqzRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgTvLI26MPldXPXJ86d2G6sfvQtumrB6Y2nA2h3t5eycqVte8fbfz17fYTh37c+tXJS88/Vs37xeVo187ht7jyxEQIb3RVLsVhL68PodlbaDfDl8XCW+2V52IBAACAu8n97d8jnXYWB2s97Uo7TVba/6IsLN64vPf4lv2NzSePtqrzV86fXv54zT7jNW46XqddX/ypdAXjGH/T8Rbrcdd9hXHKpSOmef7xi5N/l/Uv5P96ef6P75z8DwAAwK2Q/9Nxyg3K/9+99scnZf0L+X9TzyEL+T/OOOb/kbC8/A8AAAB3stud/xuFccr1y/+1kOX5sZdqX5f1L+T/yeHy/2j3tOPGX+OE90yEMDlo6gAAAEAf8f/dF79aiHk9++YgzetPPXr4Qtl4hfzfGC7/11b0VQEAAAC34tgXOx8uqxfyf3O4/D92W2cNAAAALMU7H45/UFYv5P+Z4fL/2nyZX/mQdfop/hXCkYkQxhdWZrPCz6H1dKcAAAAArJCY0//8dPcPZfsV8v9s+f3/450O4vX/Pff/K1z/31XI7vr3pBsDAAAAcC8qXs8fb4+fPbmg3/P3h73+/4H/HX617PiF/H9wuPxf7V6u5PP/AAAAYBn+a8//21kYp9yg5//d99G7v5T1L+T/1nD5Py7Xdb+8U5VK9v68NxHCxoWV/G6C38TD7UkKc7WuQlsz6bEj9sgLc2NdhbbZpMfWiRAeXFg5mBT+HwutpHBtfV44lhTOxkJ+PnQKJ5LCqXimfb4+n25a+D4W8gss5uIVFOs6l0QkPeb79Vgo3LTH+c7BAQAA7ikxPOdZttbbDGmUnasM2mHtoB1GBu1QHbTDaLJDumO/7WGmtxC3t85tXtrz/48Nl//jW7EmW/S7/j/E6//z5xp2rv+fiYV6UpiLhWZ6x4BmPEYWdj+Ox6g38x7XNnYKAAAAcFeL3wtUV3keAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/sHfvMXJd9eHAz+xr9uXdTeAnQn4IDNQxLvF6bYeH2lSs01RFoZR1SYkqRLGx12HxBhvbKTgCtLFBKYqgaYkEfxTFEUI1fyS1SBDQgOJGwihqeIiqEUmUiLROEFFoGkChEIlUM/ee2Tvn7szOxruON3w+knfOzPc878xcz7n3zhkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfjec/OSH/7Zd/N7fXv7gI1dNfuDItque/Njl538/hKn645UsXBm84QuTP7/tstuP3LXlljtPX/H6vrxcHg9DtT9d+Z1PxFpPrwnha5UQetLAxuEs0JvfH471vWI4hPPCfKBRYnowK5E2HL49EMKxMB9oVPWNgRCGC4Erf3jP3Z+uJW4eCGFdCKGatvFwNWtjIA1c1JcFBtPAvp4s8KvnMo3A17uyAJyx+GZovOhPTDVnGFu4XIvXX++ydeyFlQ6vOybGWuf72bYV7lRBX/rA1Bk9baXqWBGlt8dJ77ZV8G4rbeebPG3FD1L5J5Tn5kPV0LV7es/Oa2cPxUe6wvh4d6uaVuh5fuDpj+5aSnrVvA5jB8aW5XX4me+tu617w9u/e+fGdY8fv/joE2fazR8VNmkxvdKqIX/NrZrnMZq0P1kFb7/Sp6S1PnSFEPa8//fe0S5emv+PtZ//x5dzvO1qyh1rfXYkm5vHR4Zj4qmRbG7eTs9SxwgAAADLr6uQOvePmu4b/9abC8VHq0l9pfn/2s7O/8etkE/ms9GeDGGynjg6GsIF9cezwJdjc+8bDeHV9dRUc2BbEjgZwsvriQ2NqpIS/bHE2iTwk5E8MJkETsXAVBL4UgzclAQ+EQMnksCuGDiZBC6LgTDTPI7fH8nH0XFgIAZ2ZBvxRLwK4RcjsbVkWz3UqAoAAGCZ5LPD+kngi+cf7l0wQ2H223GGOL08MbBYhngFdssM1aSGdAbbmFa1rKFnsRq6FquhMe659sMv1VxZrObSZRiV5gxf+OXfvDO0UZr/T7Sf/1cX6EildP4/hO31vzF3Vx6ZbcR3TDVlAAAAAM7A0P8++sV28dL8f7Kz6//jMZHuQuZwXzwMsXc0hInmQFbtH5YD2VnvoTwAAAAAq0HjfHzjXPhMfptdop3Op8v5p5aYP574n1wwf9/Jb+5o19/S/H+qs+v/B5tvs06cir347GgI/YXAd2Iva4G6tTHw47c0B/Lxn4ob4MZYVX5hQqOqG2OJHTEwkQSOtSrxg0aJC5oD+ZPVaPxoYxwzeYlCAAAAAM66eDggnpeP1/+/5jdbPtyuXGn+v2Np1//X58Gly/tnh0LY1BNCd/rFgPsGs4UBY2C4kie+NZjV1Z1Wdf1gCJfWBpZW9Wi+/n9PusbgDweyqmLggtccf/qiWuKLAyFsKgbuf/etb6glDiWBRuN/ORDCq2qjTRv/an/WeG/a+Of6Q3hlIdCo6n39IdQa60uruqea/45BWtU/V0N4SSHQqOqN1RAOBwBWqfhf6e7igwcPX7d35+zs9IEVTMRj+ANhz8zs9PiufbO7qy36tDvpc9MyRteXx9TpL988lC9R9K47tg93km58T3Ci2FZ+HL904WB+P34W6q2Pc0tv092t6ZBf99pyE6FpvaeFh9y1wkMeLFYy/ySW6o/5+8JQ6L/24PSB8Y/sPHTowObsb6fZt2R/42mmbFttTrfV4EJ96+Dl0XK1rMTz3Vbri5VsOnTN/k0HD1+3ceaanVdPXz39wc1v3DJxycTWiTddsqk2qons7yJDXb9Q1clQn7u1w3Et41AvLC6TfTb2GhISEqstsW9ofdv/k0vz//3t5/9xrxP3/Pn6DK3O/4/F0/zZ4/On+XfEwLFOz/+PtTqb37gwYG0SmIuBOaf5AQAAeHGIk/x4NDMelf7phq8+3q5caf4/19n3/5dp/f/G0vVXtFrmf0MsMdFq/f90mf/G+v9zrdb/T5f5b6z/f+wFWP//2kYg2SS/sP4/AADwYnD21v9fdHn/9AcCShkWXd4//YGAUoZFl/Hv9AcClrz+/8P/+Vf/Hdoozf9v6mz+b+F+AAAAOHd8/M8+/P/axUvz/2Odzf/P/vp/odX1/2tbBaZaLQxo/T8AAABWqVbr/43dMPjeduVK8/8Tnc3/42UXXU25Y63PjmRr2oV0TbunRhpfGQAAAIDVoSuMj/d2mLdpZdRtz7/NB/KlQNulix79k9NLu/7/ZGfz/6bvZXzme+tu697w9u8+e+fGdY8fv/joE/Pn/wEAAICV0+lxCQAAAAAAAAAAAAAA4IX36H8c2douXvr+f9hef7zV9//j7/7F7xe8tCl3rHXx9f/y+1e+7fbD9SUL7xsJ4bXFwN4je88L+W/zry8G7n7PhpfVEkfSEt985LLHaon3poG3bjz/mVri0iSwIy6S+PI0EH9V8Zk1SSAur/jvaSBujxNpoC8PfGpNNo5Kuq1+Opxtq0q6rR4cDmG0EGhsq68NZ21U0gHenAQaA/xQGogD/PM80JX26vahrFcxMByL3jKU9QoAgHNW/BTYG/bMzE5PxI/w8fbCnubbqGnJsuvL1VY6bP6hfGmyd92xfbiWrrZ4PKa708+i87813huqtSFsLn1cLWap1Ee5PLUssule2mLIi6321tWiXKrVJmqV7ms9ooFsROO79s3u7l104FsXz7KlZ9Esm0uTnWKWrvom7aCWDvrSwYg63DYddDne7wrj491Jrj+IwbHQZLFXRKff1y+u89fqVVDM88HTR3/Vrr7S/H+ss/l/tTiuZ/IfA5iLv6z3d6OW+QcAAICV9altv/58/PfOG+69v13e0vx/bWfz/3gEKz8VnB3tOBl////oaAj1n9YfywJfjs29bzSEV9dTU7FE9oP6V8QSE1ngy/GAyYZYYsdUc1X9MXAiCfxkJA+cTAKnYiA/SnE85Idy/n4khDfUU9ubS+yPJcaSwDtiYG0SGI+BiSSwJgYmk8CTa/LAVBL4txgIM83b6o41+bYCAABYinye1dt8N6TzvBM9i2WoLJZhcLEMXYtlqC6WodUo4v2vxAy9ycUrlUKm3rTWgaSWUob4Y/hL7lcpQ/hBc860YKnpeP1B43qDSnOGu97cUw1tlOb/E53N/webb7PWT8X5//zv/2WB78TufTZeOr42Bn78luZAfmDgVJzs3tioaiovkU/ab4wlJmNgbRLYHwOTSWDH9jxw7GXNgXym3Wj8aKPxmbxEIQAAAABnXTxAEA/TxPn/LQc/OdSuXGn+P9nZ/D+2N1Rs7BOx1tNrQvhaZb43jcDG4SwQj2MMx6/Hv2I4hPMKBzgaJaYHsxJ9ScPh2wPZN9T70qq+MZB9+SDev/KH99z96Vri5oEQ1hWOvjTaeLiatTGQBi7qywKDaWBfTxaIR34aga93ZQE4Y42jgvEFlV/q0jC2cLkWr78Xy2+CpsMrHQNdIN9C37laKaUDrvkx1YalPW1tj9+ybEpvj5Pebavx3Tbm3Vb8IJV/QumfD1VD1+7pPTuvnT0UHyl+k7VkhZ7n4rdUO0kvw+tw7vn3dnHVtAMTye5jYsFiPQvXVonVfeZ7627r3vD27965cd3jxy8++kTH3WghflH4no/96/CPCpt3pVVD/ppbdfuTKfuTVfHfwFyhU/NXZjf8bj5t25/83I3t4qX5/1Rn8/+e5Lbu13FjHhwN4XWFjXtf3Px/PJrtBwuBbC/5knIgO+X+XyOt9pwAAACw7BpHFhrHC2by2+yC8HSeXM4/tcT88XjF5IL5O+334F+/Z127eGn+v6P9/L8/6abz/87/s0Kc/1/QuX4ouj99YO6MDkWXqmNFOP+/oHP93eb8/4LS8//PzYec/18Jz/P8f4vXofP/58z+xPn/sAr+Gyh9StrvQ1cI4fE/+taD7eKl+f/+zub/1v9beNG+xvp/O1qt/7e/1fp/c9b/AwAAVlSLhebSeV5p9b5ShnT1vlKGRRcIXHSJQev/LXn9v8cufPg3oY3S/H+us/l/fDkMFVtfLev/rd3eoqqbYmC/hQEBAAA4F7U6QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAL665/+J/d7eL3/vbyBx+5avIDR7Zd9eTHLj//+yHM1B+vZOHK4A1fmPz5bZfdfuSuLbfcefqK11fzcr357f9vyh1rfXYkhGOFR4Zj4qmR2p35wJVvu/1wTy1x30gIry0G9h7Ze14t8aWRENYXA3e/Z8PLaokjaYlvPnLZY7XEe9PAWzee/0wtcWkeqKTd/cc1WXcraXc/vSaE0UKg0d0PrGmuqtHGn+aBrrSNfxrO2oiB4Vj088NZGzEwG0vM9IewqSeE7rSqe6tZVd1pVf9SzarqTqv6eDWES0MIPWlVj/RlVfWkI/9+X1ZVDFzwmuNPX1RLHOsLYVMxcP+7b31DLfGhJNBo/C/6QnhV7SWTNv6V3qzx3rTxm3tDeGUIoS8t8cuerERfWuLRnhBeUgg0Gn9/TwiHAy8KcefTtEc7ePi6vTtnZ6cPrGCiL29rIOyZmZ0e37Vvdnc16VMrlUL6ueuf/9gfevqju2q377pj+3An6Z68XG+9y1t6m+5uPdd7H/s1WKxk/vko1R/z94Wh0H/twekD4x/ZeejQgc3Z306zb8n+dufRbFttXi3ban2xkk2Hrtm/6eDh6zbOXLPz6umrpz+4+Y1bJi6Z2Drxpks21UY1kf1djqHeevaHemFPoZKzsQOQ6DBRe0GdA92QkNg529W0d5tY8R15Ze6M9m6lD/rzHe0N1foOujCt6CtlqdRHuRyD3raEQSeW/DmlzaD7mvu24HapZB9vylmub86ytTSZmK9lIMtS/1xXmhwWG+uqb9J4vyuMj3e32g5jzXeLm/dnZ7B5H8g3XadpAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6PHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhB44FAAAAAIT5W4fRswEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJcCAAD//yrEHlg=")

1m13.811838934s ago: executing program 3 (id=102):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) (async)
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(r1, r0, &(0x7f00000000c0)=0x58, 0x5)
r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) (async, rerun: 64)
io_setup(0x8, &(0x7f0000000080)=<r3=>0x0) (async, rerun: 64)
write$cgroup_int(r0, &(0x7f00000001c0)=0x5, 0x12) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) (rerun: 64)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) (async, rerun: 64)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 64)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) (async)
io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000140)='-', 0x1}])

1m13.682356937s ago: executing program 33 (id=102):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) (async)
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(r1, r0, &(0x7f00000000c0)=0x58, 0x5)
r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) (async, rerun: 64)
io_setup(0x8, &(0x7f0000000080)=<r3=>0x0) (async, rerun: 64)
write$cgroup_int(r0, &(0x7f00000001c0)=0x5, 0x12) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) (rerun: 64)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) (async, rerun: 64)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 64)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) (async)
io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000140)='-', 0x1}])

3.665062538s ago: executing program 1 (id=576):
syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f00000000c0)={[{@compress_algo={'compress', 0x3d, 'lzo'}}, {@discard_sync}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {}, {@datasum}, {@user_subvol_rm}, {@nodiscard}]}, 0xfb, 0x5136, &(0x7f0000000340)="$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")

3.155099918s ago: executing program 1 (id=580):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) (async)
connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000cbd70100400000005000000080009a5c7a3150008000c00a80a000008000b000000000006000100070000000c0410000000000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) (async)
sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000cbd70100400000005000000080009a5c7a3150008000c00a80a000008000b000000000006000100070000000c0410000000000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) (async)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x50, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa368100000086dd60010100001611fffe8000000000000000000000001a55bbfe8000000000000000000000000000aa00000e22001690780203000000000000200000000000"], 0x0) (async)
syz_emit_ethernet(0x50, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa368100000086dd60010100001611fffe8000000000000000000000001a55bbfe8000000000000000000000000000aa00000e22001690780203000000000000200000000000"], 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r6=>0x0})
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782700000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782700000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r8, r6, 0x25, 0x0, @val=@tcx}, 0x1c)
syz_emit_ethernet(0x32, &(0x7f0000000380)=ANY=[], 0x0) (async)
syz_emit_ethernet(0x32, &(0x7f0000000380)=ANY=[], 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r9 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) (async)
read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8)
r10 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
connect$802154_dgram(r10, &(0x7f0000000180)={0x27}, 0x14)
r11 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(r11, r0, &(0x7f00000000c0)=0x58, 0x5)
r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000c0"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000002000000181100001de85d87be6187a8b0c0675515", @ANYRES32=r12, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090000000000005609010000000000270000000000000018010000696c6c2500000000002020207b1af8ff00000000bda100000000000037010000f8ffffffb702000008000000b70300004000000025000000060000009c23000000000000b5030000010000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000002000000181100001de85d87be6187a8b0c0675515", @ANYRES32=r12, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090000000000005609010000000000270000000000000018010000696c6c2500000000002020207b1af8ff00000000bda100000000000037010000f8ffffffb702000008000000b70300004000000025000000060000009c23000000000000b5030000010000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
io_setup(0x8, &(0x7f0000000080))
syz_clone(0x0, &(0x7f0000000380)="d93a646320cb44bf372b0e4d8e7145e9e1980f141d0c2e54736d92d1575640c5bbbde0794d05f009857184630235a42ff9ae2043897ac495da5c90ba4f7da1c6c4de55b901f9dcda5b8a9ca498cd311782090fc452c2d0a1baf6d597d9ebe59977d0414a84b087d37d8141b39875cfc419aca2d618d5eb32221ae6f4fdd7dd2f9acde99c", 0x84, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000440)="07aa8a17081aa10b72e02dcaf2a355031feaa837234171ef08eb241079a382784df02da1de8ec944ce87958b1b911b4ecf3eff7725bf4cf409f0ae3d4ef4d44e3fef62eff6888de69be372048539b9322fd74e3258ae64efdd117d93202707de663891cfcd8999618d0573171363b6c48ee6caf9aa403f10e60a1fa8c20479360c01a818d4c3c8dc1d43fb6b66b30cfa56cfe760ff4db81be52bff8b00bfc6b9dc96362bb77630693d18a48f42df41518536760f68847add148f5f00fda9427950fa9882d2964e48cdfa4873f72103c1fe4f94793feabe104395255a008cbd63199646e3ec674415c3f2857744cc30")

2.648991809s ago: executing program 4 (id=582):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffe66}, &(0x7f0000000040)=0xfce8)
r1 = socket$inet(0x2, 0x3, 0x8)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000010c0)=@raw={'raw\x00', 0x8, 0x3, 0x310, 0x0, 0xe138, 0x198, 0x1c0, 0x198, 0x278, 0x358, 0x358, 0x278, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0xc}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffffd, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xfffd, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x370)
syz_emit_ethernet(0x33, &(0x7f0000000200)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x25, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x11, 0x0, @opaque="0b80d010da6a6a3cd6"}}}}}, 0x0)
syz_emit_ethernet(0x32, &(0x7f0000000240)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x6}}}}}}}, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc02864cf, &(0x7f00000001c0)={0x0, 0x7, {0xffffffffffffffff}, {}, 0x0, 0xffffffffffffffff})
r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f0000000000)={[{@errors_remount}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@grpjquota, 0x22}, {@grpquota}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x45a, &(0x7f0000000d80)="$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")
sendfile(r4, r2, &(0x7f00000000c0)=0x58, 0x5)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1401, 0x1, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c1}, 0x10)
io_setup(0x5, &(0x7f0000000300))
openat$cgroup_type(r2, &(0x7f0000000680), 0x2, 0x0)

1.865115786s ago: executing program 1 (id=584):
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0)
r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000140)=0xc)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000200)='./bus\x00', 0x2010880, &(0x7f0000000400)=ANY=[@ANYBLOB="646973636172643d3078303030303030303030303030303030342c71756f74612c6572726f72733d636f6e74696e75652c646973636172643d3078303030303030303030303030303030342c756d61736b3d303430372c75737271756f74612c6572726f72733d72656d6f756e742d726f006e6f646973636172642c726573697a653d3078303030303030303030303031303030302c756d61736b3d3078301030303030303030303030303030322c71756f74612c67695b3d00"/199, @ANYRES32, @ANYRES8=0x0, @ANYRES8, @ANYRES16=0x0], 0x1, 0x6240, &(0x7f0000023d00)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
sendfile(r2, r1, &(0x7f00000000c0)=0x58, 0x5)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001f80)=ANY=[@ANYBLOB="0a000000010000000400000004"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYRES8=r0, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xd, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r4, <r6=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000280)=r5}, 0x20)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000200)={r5, r6}, 0x17)
io_setup(0x8, &(0x7f0000000080)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000140)='-', 0x1}])

1.785137217s ago: executing program 2 (id=585):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff"], 0x0}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xd00, 0xf20c0000, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8640888a8", 0x0, 0x1200}, 0x28)
syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00089aafc727346c3e0d8728525a2641b3b31621730c58dcf8e0ca2e6767a45a978776e9d2c689feab83a160d00a77ae5112cd4e7141cad333d7cbb69dc6b314609d3827059c11066ba0b4b95c12d2d9ff9c8896d9e247bd55f9ff578a14e0e9d0ca07693396b00d2ef44adb4858475a07d5e8fa3ef5b306fe8a5d1cd2d8e06e7f88226ece092c6aabf8870e140124d5a48670513e0c419c99b7c5105959e7a535f12694634cf272490e0000"], 0x81, 0x4ac, &(0x7f00000011c0)="$eJzs20tsG1UXwPFzPLbruPk+3Adpi6piCSRCS9skLmmrIKE8iEBqG0gaEBUPhdgJJk4cxSkkVUu7BHYsumTJlgUrxBZVYolYoCDUXemGjVeUHeiO52XXSewm8TT1/1e1dx7H7r33zMy914kFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACIDL022NOrYdcCAAC00qWJ8Z4M4z8AAG3lMut/AACAdqJiyR+icnKurBft/YrEhfzC1ZXJkdH6L+tQUYmIZcebv4nevsyZl/vPnnPLjV+/3Y7I2MTlwfRwcX5xKVcq5bLpyYX8dDGba/gdtvr6WsftDkjPz13NzsyU0n2nMlWnV1L39+ztSg30vz8cd2MnR0ZHJwIx0dgj/+8PWW+GHxdLXhSVT374Ti+JSES23hebXDs7rcNuxHG7EZMjo3ZDCvmphWVzUiNOVKS6T+JuH7UgF1sSETH10vj2rNliYsmPojJ0uqxjImK5/XDC/mC4ofqEIWqWriLSLbsgZ4+xPWLJh6Jy53RK3nT61c5/XOR62JXDjos6939Ry/qW/Tww95N5bF54O/3GwkwxEKsR545qZnyocw+GPj600mP+bEqIJWP2HV/W8bArg5brEEvmRSX+9af2vELseelTA2ePPXs+OMM4tMn7mNhTzs3VyJgcc6YOGjF/HqHa2BYJteRPUXnwe8Le73Zyw08E2oRaUhCVf26UVWvWpVZgfe/Z7WvDna1/R2K4uLi6lJ/9eLnu+WRi8KPS8tLUdP3TlbWrFTyy2Tq2VqS5JVlSKyu+Lz4re69z1gD/q+z5tfn2un8tdNeUruD108h2w8+ZJuZRpk6qltwTlZkPDlfGGUk23TftwOR/VFRK5V/UzbST/2hlL5D/V/z+S2h16bFz+//K51ruXOLIlYPrHd+J/Js6mfy/KypDfx92PtOo5N+qiTVxXaLy3u2jTlwkbuKibnMq7ziTL+R6TOy/orL/ZzdW7NikE3vAj+01sSVR+fJOdexeJ/agH9tnYtdE5e5v9WOf9mMzJnbV5Otu2o1NmthjTmyXH3tquljIbtatJv99ovLOzdfVbfO6+Q/c/7dqSs9DOd94e7vynwocu+Xk9YqT/+gm+f9KVFb/Ouq22+5797LaZ//r59/Mlb+/XR3rTkb3+7G9jTYrbCb/+0Tl/qtrXpudtjm7foaC+X8mWl16/RpS/vcFjqWcesWb7It2VFq9NjdVKOSW2GCDDTa8jbCfTGgFM/6Pm1G931J3HuOM/52VPX/G9OBzf/wfqCk9IY3/+wPHBpxZSywqklieX4wdEkmUVq+dzM9PzeZmcwuZM/09fefP9GTOxeLu5M7farjvngQm/ydE5cZPv3rrmOr5X/35f7Km9ISU/wPBNlXNaxruirZk8t8pKv331rz15kbzf3f93/1cdendfyHl/2DgWMqpV2eTfQEAAAAAAAAAAAAAAAAAu0lSLXleVFbGX1L3O0SN/P5ftqb0hPT7X12BY9nt/16D+9WoqlONVh0AAAAAAAAAAKCVImLJN6LygpT1pjnQKXIxWOKJ9l8AAAD//16uQhc=")

1.780432719s ago: executing program 4 (id=586):
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000000)=0x3)
ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000040)={0xba7, 0x8, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000011800), 0x2, 0x0)
write$FUSE_INTERRUPT(r1, &(0x7f0000011840)={0x10}, 0x10)
getpeername$unix(r0, &(0x7f0000011880)=@abs, &(0x7f0000011900)=0x6e)
ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000011980)={'vxcan1\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000011a80)={&(0x7f0000011940)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000011a40)={&(0x7f00000119c0)=@can_delroute={0x50, 0x19, 0x200, 0x70bd25, 0x25dfdbfe, {0x1d, 0x1, 0x1}, [@CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "25b2b1badd729a9d"}}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0x6, 0x1, 0x7}}, @CGW_DST_IF={0x8, 0xa, r3}, @CGW_FILTER={0xc, 0xb, {{0x3, 0x1, 0x1}, {0x1, 0x1}}}, @CGW_LIM_HOPS={0x5, 0xd, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x2400c805}, 0x800)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000011b80)={'sit0\x00', &(0x7f0000011ac0)={@multicast1, 0x0, 0x0, 0x90, 0x0, [{@empty}, {@local}, {@multicast2}, {@initdev}, {@private}, {@empty}, {@initdev}, {@empty}, {@empty}]}})
sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000011c80)={&(0x7f0000011bc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000011c40)={&(0x7f0000011c00)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000050}, 0x0)
r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000011cc0)={0xffffffffffffffff}, 0x4)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000011d00)={{0x1, 0x1, 0x18, <r5=>r4, {0x9516}}, './file0\x00'})
read$FUSE(r1, &(0x7f0000011d40)={0x2020, 0x0, <r6=>0x0, 0x0, 0x0, <r7=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r1, &(0x7f0000013d80)={0x10, 0x0, r6}, 0x10)
write$FUSE_DIRENT(r1, &(0x7f0000013dc0)={0x130, 0x0, r6, [{0x3, 0x9, 0x1, 0x7, '\x00'}, {0x2, 0x2abda0a1, 0x9, 0xc1, '^\xc3).-@\xeb--'}, {0x1, 0xac, 0x4, 0x0, '.%/\''}, {0x5, 0x6, 0x7, 0x0, 'vxcan1\x00'}, {0x4, 0x5, 0x7, 0x4fc, 'vxcan1\x00'}, {0x4, 0x1, 0x5, 0x4, 'sit0\x00'}, {0x1, 0x6, 0x7, 0x80, '%!^@%^\''}, {0x2, 0xfffffffffffffffb, 0x0, 0x9}, {0x5, 0x9, 0x5, 0x4, ',&$@$'}]}, 0x130)
tkill(r7, 0x3d)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000013fc0)={r5, r3, 0x25, 0xc, @val=@uprobe_multi={&(0x7f0000013f00)='./file0\x00', &(0x7f0000013f40)=[0xa8, 0x79668544, 0x1, 0xef37], &(0x7f0000013f80), 0xe907, 0x4, 0x1, r7}}, 0x40)
ioctl$FAT_IOCTL_GET_VOLUME_ID(r5, 0x80047213, &(0x7f0000014000))
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$net_dm(&(0x7f0000014040), r8)
r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet6(r9, &(0x7f0000014080)={0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x8}, 0x1c)
capget(&(0x7f00000140c0)={0x20071026, r7}, &(0x7f0000014100)={0x6, 0x7, 0x9, 0xff, 0x6, 0x4})
ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc028564e, &(0x7f0000014140)={0x1, 0x1, [0x800, 0x4, 0x8, 0x3ff, 0x2, 0xfd, 0x7bc, 0x3]})
ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000014180)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x22, r3})
ioctl$sock_qrtr_SIOCGIFADDR(r5, 0x8915, &(0x7f00000141c0)={'veth0\x00'})
ioctl$HIDIOCGREPORTINFO(r5, 0xc00c4809, &(0x7f0000014200)={0x3, 0xfffffefe, 0x8000000})
lsetxattr$security_capability(&(0x7f0000014240)='./file0/file0\x00', &(0x7f0000014280), &(0x7f00000142c0)=@v2={0x2000000, [{0x5, 0x401}, {0x804, 0xfffffff7}]}, 0x14, 0x2)

1.654265412s ago: executing program 4 (id=587):
r0 = syz_open_procfs(0x0, &(0x7f0000000440)='ns\x00')
getdents(r0, &(0x7f0000000040)=""/34, 0x22)
syz_open_dev$I2C(&(0x7f0000000200), 0x287, 0x141000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=ANY=[@ANYBLOB="86808d58448113c628bd707136d13baa29f29387dbdf248180800000"], 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0xc8c4)
getdents(r0, 0xffffffffffffffff, 0x5a)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)
r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x12c00)
ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r2, 0xf505, 0x0)
r3 = accept4$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14, 0x0)
shutdown(r3, 0x1)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x10, 0x94}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
openat$mice(0xffffffffffffff9c, &(0x7f00000001c0), 0x0)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
write$uinput_user_dev(r4, &(0x7f0000000a80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23d, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x4, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x960, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x3, 0x1010001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x3, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9388, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000]}, 0x45c)
ioctl$UI_SET_RELBIT(r4, 0x40045566, 0x8)
ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x2)
ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x1)
ioctl$UI_DEV_CREATE(r4, 0x5501)
ioctl$UI_DEV_DESTROY(r4, 0x5502)

1.654007852s ago: executing program 2 (id=588):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "ef"}]}], {0x14}}, 0xe0}, 0x1, 0x0, 0x0, 0xfffffff5}, 0x0)

1.55477s ago: executing program 4 (id=589):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(r1, r0, &(0x7f00000000c0)=0x58, 0x5)
r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4040054}, 0x20040015)
mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0xd)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x10)
io_setup(0x8, &(0x7f0000000080)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000140)='-', 0x1}])
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000480)=0x7)
prlimit64(r5, 0x6, &(0x7f00000001c0)={0x9, 0xf}, &(0x7f0000000280))

1.473988306s ago: executing program 2 (id=590):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(r1, r0, &(0x7f00000000c0)=0x58, 0x5)
r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
io_setup(0x8, &(0x7f0000000080)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000140)='-', 0x1}])

1.273755597s ago: executing program 1 (id=591):
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
prctl$PR_SET_THP_DISABLE(0x29, 0x0)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x1d, &(0x7f0000000000)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0xffffff2c}, @jmp={0x5, 0x1, 0x6, 0x3, 0x8, 0xfffffffffffffff4, 0xfffffffffffffff0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffd12c}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x8}, @ringbuf_query, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, @exit], &(0x7f0000000100)='syzkaller\x00', 0x27, 0x19, &(0x7f0000000140)=""/25, 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'gretap0\x00', &(0x7f0000000280)={'syztnl1\x00', <r1=>0x0, 0x1, 0x20, 0x5, 0x6ea4, {{0x37, 0x4, 0x1, 0x8, 0xdc, 0x65, 0x0, 0x9, 0x2f, 0x0, @loopback, @rand_addr=0x64010100, {[@noop, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x2c, 0x2e, 0x1, 0xe, [{@rand_addr=0x64010101, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2991ba2a}, {@multicast1, 0x8}, {@broadcast, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}]}, @timestamp_addr={0x44, 0x14, 0xb8, 0x1, 0x8, [{@multicast2, 0x40}, {@empty, 0x5}]}, @timestamp_addr={0x44, 0x34, 0x30, 0x1, 0x4, [{@rand_addr=0x64010102, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@multicast2, 0x8}, {@broadcast, 0xf}, {@private=0xa010101, 0x8000}, {@multicast1, 0x2}]}, @end, @cipso={0x86, 0xa, 0x3, [{0x2, 0x4, "853c"}]}, @lsrr={0x83, 0x17, 0x7c, [@empty, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, @remote]}, @timestamp_addr={0x44, 0x2c, 0x9d, 0x1, 0x5, [{@local, 0xff}, {@rand_addr=0x64010101, 0x6}, {@private=0xa010102, 0x2}, {@remote}, {@multicast2, 0x8}]}]}}}}})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r0, r1, 0x25, 0x4, @void}, 0x10)
mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0)
r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000400), 0x4000)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000480)={'rose0\x00', &(0x7f0000000440)=@ethtool_wolinfo={0x6, 0x0, 0x1ec0, "8a3c32010c9d"}})
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000580)={{{@in6=@initdev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@local}, 0x0, @in6}}, &(0x7f0000000680)=0xe8)
getresuid(&(0x7f00000006c0)=<r4=>0x0, &(0x7f0000000700)=<r5=>0x0, &(0x7f0000000740))
mount$pvfs2(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x40, &(0x7f0000000780)={[{'syztnl1\x00'}, {'syztnl1\x00'}, {'-#8]-'}, {'!.'}, {':\\{(%^'}, {'rose0\x00'}, {'gretap0\x00'}, {'\x00'}], [{@dont_hash}, {@euid_gt={'euid>', r3}}, {@appraise}, {@subj_user={'subj_user', 0x3d, 'syztnl1\x00'}}, {@subj_user={'subj_user', 0x3d, '}\\)$-&\xd6'}}, {@audit}, {@euid_lt={'euid<', r5}}, {@fsmagic={'fsmagic', 0x3d, 0x7}}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]})
r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x1c1812, r2, 0x10000000)
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r6, &(0x7f00000008c0)=@IORING_OP_MKDIRAT={0x25, 0x2, 0x0, r2, 0x0, &(0x7f0000000880)='./file0\x00', 0x20, 0x0, 0x0, {0x0, r7}})
ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000900)=<r8=>0x0)
syz_io_uring_setup(0x4e14, &(0x7f0000000940)={0x0, 0xb99c, 0x800, 0x0, 0xc9, 0x0, r2}, &(0x7f00000009c0), &(0x7f0000000a00))
r9 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000a40), 0x38100, 0x0)
r10 = getgid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r9, 0xc018937b, &(0x7f0000000a80)={{0x1, 0x1, 0x18, <r11=>r0, {r3, <r12=>r10}}, './file0\x00'})
getgroups(0x5, &(0x7f0000000b40)=[r10, r10, r12, r12, <r13=>r12])
mount$bpf(0x0, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00), 0x5400, &(0x7f0000000b80)={[{@gid={'gid', 0x3d, r13}}, {@uid={'uid', 0x3d, r8}}, {@gid={'gid', 0x3d, r10}}, {@gid={'gid', 0x3d, r12}}, {@uid={'uid', 0x3d, r8}}, {@gid={'gid', 0x3d, r10}}, {@uid={'uid', 0x3d, r4}}, {@gid={'gid', 0x3d, r10}}], [{@flag='nomand'}, {@smackfsroot={'smackfsroot', 0x3d, '}\\)$-&\xd6'}}]})
socket$pppoe(0x18, 0x1, 0x0)
syz_usb_connect(0x52f7769a79058ccb, 0x3fa, &(0x7f0000000c80)={{0x12, 0x1, 0x200, 0x8d, 0x74, 0x30, 0x40, 0xbc2, 0x3332, 0x509c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3e8, 0x1, 0x3, 0x10, 0xe0, 0xe, [{{0x9, 0x4, 0x10, 0xfb, 0xe, 0x2f, 0x5c, 0xd2, 0x37, [], [{{0x9, 0x5, 0xe, 0xc, 0x200, 0x81, 0x1, 0x9}}, {{0x9, 0x5, 0x4, 0x10, 0x200, 0x5, 0x11, 0xf9, [@generic={0xaa, 0x22, "eb73e746cf737f7ac6790912f3d241f163325110c343ddfed15f256af2bb867df238aa0df33a957f84126df275b3e6309213876221dac6110526bab45c7cafe4e68c61d8db01e717956a32606f5cc2a066b8d49be9a0d8f1849bf3d6ea49f52a2ce5e7127ceb7d42fe40721f60c0226a38234141f65cd00d18ace0c0b2eb71edfb3e09ec472b456a60b0b10711599b4af56d90429eb5eb7572c2c385a6dfbf3e43f13c5efa97b464"}, @generic={0xe2, 0x24, "3640ce384a21acd8718f5b2c01ab3e76ed0ff85ba3046e529d72cfd4260f1705bc7913cb9a7a5f5f9bd0a4020b0ec0dd1c51dbf93c8336ba107b3e80821bfa0acec6b24a2bda19932ad291b9ecf1a91ee3f516b21b3cd87c68668c05adb963728424d3c65aec20fd5720421d2a3e639d30c8ee83eace7406cf5069bc295d3fe890fe7e6d164d58d9015b1e33e130d5b8a535390204df2e18ffb168cefd3bd24560bcc2fe62bc3a464e248f0954ffc1df64f5c5dc892c179957dfe2cebed1cf3049da3b9773797622b2b975e2dc5e6095665c958151302b2dab7af5ff8e18c172"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0xdd, 0x7, 0x4}}, {{0x9, 0x5, 0x1, 0xc, 0x8, 0x4, 0x81, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x9}]}}, {{0x9, 0x5, 0x7, 0x3, 0x10, 0x20, 0x9, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x40, 0x2, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9a, 0x1f6}]}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0x9, 0xa, 0x2, [@generic={0x50, 0x6, "719162e375d31ac8c06e99beb847039172e23701c0583683dc96f02411b606881f672be8f97c4ad489444fc269f3e82fd209f9fa3420aceb95c38ff2a8edbfb75c17423153652e517b3dfda7fe8e"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x3753}]}}, {{0x9, 0x5, 0x9, 0x10, 0x400, 0x2, 0x1, 0x1}}, {{0x9, 0x5, 0x0, 0x1, 0x200, 0x7, 0xc6, 0x10}}, {{0x9, 0x5, 0x5, 0xc, 0x40, 0x2, 0x6, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xfa, 0x7}]}}, {{0x9, 0x5, 0x8, 0x1, 0x8, 0x40, 0x7f, 0x40}}, {{0x9, 0x5, 0x8, 0x10, 0x400, 0xd8, 0x7, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xff, 0x8}, @generic={0xc6, 0x23, "7d92df8e21027660c1403320ecff39f057936dfa3963397332c92ce0c1e761ff7d2be3fa5652548d1b6b7c3428e2f0c3968b2f41e2bc342c8c4e835d64c18dea692c38d3569965ba3abc8ce43b74e1bb7000da0bbd875b78ae614c9230b74a36f013fd2f08ddce0ca47ed4d43d8603890d19f5aa7934270602a3715c73c4910a0c7e65cac0cfe04605ef32f7314cea253e3ca7ef7b32e75dc64fde140dc3ba9f3b8da185ffcaed133322db6f69c905ce43ba80bc12994eba4080ed89669cdfb31046260b"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x20, 0xce, 0x12, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x6}, @generic={0x31, 0x22, "174afabdf48d99c7871c9cf549317e9a51ed5f7aefd99ccb217a9010898bddd409a221b015d1bb0ec51fd9d90f5ce8"}]}}, {{0x9, 0x5, 0x3864d75a67125b9c, 0x10, 0x8, 0x1, 0xff, 0xd, [@generic={0x38, 0x4, "260c3ba4675200cca02df92b8c1c41502ae09e9a41fd00229ce9d488085ce5bcfe24b58618e61d40e90e3250b4c964cf33717dc2fc3d"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xf7}]}}, {{0x9, 0x5, 0x1, 0x8, 0x40, 0x9, 0x25, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xd, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x84f}]}}]}}]}}]}}, &(0x7f0000001540)={0xa, &(0x7f0000001080)={0xa, 0x6, 0x201, 0xc9, 0x30, 0x4, 0x20, 0x80}, 0xc2, &(0x7f00000010c0)={0x5, 0xf, 0xc2, 0x2, [@generic={0xb6, 0x10, 0xa, "4e3046243e4fdb2e93208ebfbb3c4b4e6c0e3b7d6d0789565a6ddcfad3865c94485597a3d4c868e066102a28bd9ba3f4f620ad63c3b8a6eec507197d45eec8b1c4d093ab2f4ffba2edde82844bcd9ed432549490962337c27b8fafe9dee59ce818634823e46485a442e4cf4b68995fb3bfd3ebcf912d0545d512f2c75caf3178e5daaf366406088ae0449780697055dd1d01d440fdd8d4d9adbddbc5a2d41012072b6c78e8e5e7403bb38926773f53f42ab30d"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x4, 0xa, 0x4}]}, 0x7, [{0x4, &(0x7f00000011c0)=@lang_id={0x4, 0x3, 0x426}}, {0x13, &(0x7f0000001200)=@string={0x13, 0x3, "42aa45bbf575360e01269a512fd06aea74"}}, {0x4, &(0x7f0000001240)=@lang_id={0x4, 0x3, 0x2809}}, {0x4a, &(0x7f0000001280)=@string={0x4a, 0x3, "6479e12fafa67af64026764f717678d4967fb1bc1521f543d13003b4caa75d561de1b36390931e1773095c50522ba9696aa77063523c84d413f45dbc4ee7a7d1fed5bd63913c15fe"}}, {0x9e, &(0x7f0000001300)=@string={0x9e, 0x3, "b557632b119215f7944153f8dc25820956e1bae92b55e11c370c2305440e8e975606db63f30b2ea4ec7fac91d02d2bf3547454ce581ff7d880744c3e0e0ddfd850a31bc21514cc5974a72b8a397038fe0300168478b17add2f909225cc316f781e04b153de3f9dbe1486e031bf6abcff7a28edf72f47147aaa3899b1a40be7faa4393b9153ca0358d6fedc79afd6851e9bb6b4153e6edaee4da1e706"}}, {0x6a, &(0x7f00000013c0)=@string={0x6a, 0x3, "ac337f0b77cd728f277aca6fee46b25bee6a8b884b23c67e0773d64774d1295492ccc5581024e96f8a067a70e0e59552a0de1057f862bd416f7af28e95bc536df549f4397b6e2d19a13687322c6ddde0a0d998c77981a74e8b93d018a18f7ea447526f7405a8cbee"}}, {0xcb, &(0x7f0000001440)=@string={0xcb, 0x3, "4ddf566d2304a000a9e0b3ba4964a7f620b03d3bc609197279206c123bb725d3ce49d3a25447722e889bab75d507ffac28fe7ab1089c23efc3cba1e855b24e39369d74f39711e3c3778f111b96f19253ed7decccb2db550b5daa2c2b327f044eb6ba45bdd8e3a773d034e14c485bc16e549be41611055a786bf8df30dddc9574574f9403edfa653e9a9586db43b18ba19ee1cecd2f99efeda53ff4552cc84aa03fa452cf8a5080e0b8cb4a640128884ab3e8876c0172b6f4c30bab6648af8ad19b4869a887f778659d"}}]})
openat2$dir(0xffffffffffffff9c, &(0x7f00000015c0)='\x00', &(0x7f0000001600)={0x88000, 0x12, 0x10}, 0x18)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r11, 0xc0189375, &(0x7f0000001680)={{0x1, 0x1, 0x18, <r14=>r11}, './file0\x00'})
syz_genetlink_get_family_id$batadv(&(0x7f0000001640), r14)
recvfrom$netrom(r2, &(0x7f00000016c0)=""/32, 0x20, 0x100, &(0x7f0000001700)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
ioctl$VIDIOC_SUBDEV_S_FMT(r11, 0xc0585605, &(0x7f0000001780)={0x0, 0x0, {0x9, 0x2, 0x0, 0x5, 0x3, 0x6, 0x2, 0x4804d6e47f17e54}})
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001800)={0xffffffffffffffff, <r15=>0xffffffffffffffff})
sendmsg$tipc(r15, &(0x7f0000001b80)={&(0x7f0000001840)=@name={0x1e, 0x2, 0x0, {{0x41, 0x3}}}, 0x10, &(0x7f0000001a80)=[{&(0x7f0000001880)="2a96c092444a2d11756330b9cb6e6e444517edba71cb3f82a439dbc17cbe730ff9dd456e8563a767020d99be3484237f6642a505e11ea81857db38d39c024d40eda0069904f38a83e2bd58f426786c1e5f", 0x51}, {&(0x7f0000001900)="d1687dc4768804db748d24d84c5fdf8890337464363b5a9a181a573a50ea1a0f25b02ebd588891232a", 0x29}, {&(0x7f0000001940)="750bb97281530699ccd6d476397dcf50b34fa16bf43aa058f8bc24e302526f2d63d4b73160fcae5918dcbea84dd96dc71ac9bb6936c59a7f24b0ce50a95794a7f206554b5cdcbaaf166793fb7870c3328994ddc5b2ecdd5a17d50858e81df2d4c3dfbc242011c19a89c0a9c687c0aa29d3a3f8d00f418c6e94c0a7b4a914f60002077f48b0745e1a81e8cadc605280199a86572ee6e02f44227bbea925c44e9f2121ac6111c060436f9f9e1a5c", 0xad}, {&(0x7f0000001a00)="52ab68e70d673174969bfd8764737978ac2e8d4644867178a2a85c188b684db1411528514ced7bf68454734cb83223d2660e77dfc419d2254b6d016a7986ab876ee460239341816cbf8695f071f699", 0x4f}], 0x4, &(0x7f0000001ac0)="563d91d48aeab45822e1431df14520c9faa015ca386a75da86644f69e517684fe09426e46304c40dc8985099549c0b7e55522453d85cba921bbe18af64539332172affd32fd7cc6c4b52b696172e371acb7156d0f8bd1220697c3d9043bc54f999c1c2922a09f62f8fd9e8ff923d44f2d87c0c069ab83264a28093910f3d46ba0c2c53a0342472f0dedc3ecb4630799512", 0x91, 0x20000000}, 0x20000004)

1.113959739s ago: executing program 4 (id=592):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffe66}, &(0x7f0000000040)=0xfce8)
r1 = socket$inet(0x2, 0x3, 0x8)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000010c0)=@raw={'raw\x00', 0x8, 0x3, 0x310, 0x0, 0xe138, 0x198, 0x1c0, 0x198, 0x278, 0x358, 0x358, 0x278, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0xc}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffffd, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xfffd, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x370)
syz_emit_ethernet(0x33, &(0x7f0000000200)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x25, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x11, 0x0, @opaque="0b80d010da6a6a3cd6"}}}}}, 0x0)
syz_emit_ethernet(0x32, &(0x7f0000000240)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x6}}}}}}}, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc02864cf, &(0x7f00000001c0)={0x0, 0x7, {0xffffffffffffffff}, {}, 0x0, 0xffffffffffffffff})
r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f0000000000)={[{@errors_remount}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@grpjquota, 0x22}, {@grpquota}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x45a, &(0x7f0000000d80)="$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")
sendfile(r4, r2, &(0x7f00000000c0)=0x58, 0x5)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1401, 0x1, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c1}, 0x10)
io_setup(0x5, &(0x7f0000000300))

1.043062665s ago: executing program 2 (id=593):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1)
ioctl$UI_DEV_CREATE(r0, 0x5501)

944.222709ms ago: executing program 2 (id=594):
mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket(0xa, 0x1, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x2f)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB='p\b\x00\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7060000050000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff0000000065090000000000007baaf0ff00000000ad9900000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(r6, r5, &(0x7f00000000c0)=0x58, 0x5)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0xfffffe71, 0x1}}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0x34, 0x10000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x6}, 0x2c)
r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
write$binfmt_misc(r5, &(0x7f0000000e00)="595ebff8039630ac876a2f063ef02feb7736fdc196e03fc3088c8e45644744f95e6ed582c8fc88f39e81243d889da6e11fbdfaafa69576c550d32ec2799611fc799f4fd172c7ee143dbefb751ec3ba4f26adb3d68bbbe8db98e0f35ef4f0fc57f3e6c460b7b33a814d5f5edcf07daf693325f600272d21dd80e333dcefd94ab4604e98", 0x83)
io_setup(0x8, &(0x7f0000000080)=<r9=>0x0)
io_submit(r9, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r8, &(0x7f0000000140)='-', 0x1}])

504.994082ms ago: executing program 1 (id=595):
r0 = syz_open_procfs(0x0, &(0x7f0000000440)='ns\x00')
getdents(r0, &(0x7f0000000040)=""/34, 0x22)
syz_open_dev$I2C(&(0x7f0000000200), 0x287, 0x141000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=ANY=[@ANYBLOB="86808d58448113c628bd707136d13baa29f29387dbdf248180800000"], 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0xc8c4)
getdents(r0, 0xffffffffffffffff, 0x5a)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)
r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x12c00)
ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r2, 0xf505, 0x0)
r3 = accept4$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14, 0x0)
shutdown(r3, 0x1)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x10, 0x94}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
openat$mice(0xffffffffffffff9c, &(0x7f00000001c0), 0x0)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
write$uinput_user_dev(r4, &(0x7f0000000a80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23d, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x4, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x960, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x3, 0x1010001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x3, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9388, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000]}, 0x45c)
ioctl$UI_SET_RELBIT(r4, 0x40045566, 0x8)
ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x2)
ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x1)
ioctl$UI_DEV_CREATE(r4, 0x5501)
ioctl$UI_DEV_DESTROY(r4, 0x5502)

424.550033ms ago: executing program 1 (id=596):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
r2 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000980)={0x0, {{0xa, 0x4e22, 0x6ef, @mcast1, 0xfffffffd}}, {{0xa, 0x4e24, 0xfffffff9, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffdfe}}}, 0x108)
sendfile(r1, r0, &(0x7f00000000c0)=0x58, 0x5)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
io_setup(0x8, &(0x7f0000000080)=<r4=>0x0)
syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@barrier={'barrier', 0x3d, 0x7}}, {@heartbeat_none}, {@inode64}]}, 0x1, 0x4703, &(0x7f0000004800)="$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")
ioctl$sock_qrtr_TIOCOUTQ(r2, 0x5411, &(0x7f00000003c0))
mknod$loop(&(0x7f0000004500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x230, 0x0)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000000c0)='./bus\x00')
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
ftruncate(r5, 0x8008976)
ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f0000001040)={0x6, 0x2, 0x2, 0x0, 0x0, [{{r5}, 0x559}, {{}, 0xb4}]})
io_submit(r4, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000180)='-', 0x1, 0x0, 0x0, 0x0, r0}])

294.706967ms ago: executing program 4 (id=597):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
syz_usb_connect(0x2, 0x36, &(0x7f0000000140)=ANY=[], 0x0)
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(r1, r0, &(0x7f00000000c0)=0x58, 0x5)
r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x20201)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f00000000c0)={{0x2, 0x1, 0x5, 0x3}, 0x3, 0x7})
io_setup(0x8, &(0x7f0000000080)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000001c0)="2dbe1d714d97f4658fb99b7efd1bb9b1fd662b92ac6d501c9cfab07b20769a7b29cd10341bea011aa170293698bdf015aecac26c96151007b7ac7516c34c6bfe56fbfd98f17722ad01da6aeeabf11a0dd54ec529c50f39a6c4d4d756a5ad0ea81b17425c3246c3886a98a5f4b028b03d2bb13f8f0e899d82e34149", 0x7b, 0xfff}])
ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000180)={{0x1, 0x2, 0xfffffffc, 0xff0024efffe505ee, 0x2faf}})

0s ago: executing program 2 (id=598):
syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00089aafc727346c3e0d8728525a2641b3b31621730c58dcf8e0ca2e6767a45a978776e9d2c689feab83a160d00a77ae5112cd4e7141cad333d7cbb69dc6b314609d3827059c11066ba0b4b95c12d2d9ff9c8896d9e247bd55f9ff578a14e0e9d0ca07693396b00d2ef44adb4858475a07d5e8fa3ef5b306fe8a5d1cd2d8e06e7f88226ece092c6aabf8870e140124d5a48670513e0c419c99b7c5105959e7a535f12694634cf272490e0000"], 0x81, 0x4ac, &(0x7f00000011c0)="$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")
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x108, &(0x7f0000000080))

kernel console output (not intermixed with test programs):

med from eth2
[   73.853265][ T5995] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   73.903279][ T5995] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.906160][ T5995] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.909962][ T5995] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.912909][ T5995] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.015094][ T5995] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.031623][ T3868] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.035345][ T3868] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.064310][ T6063] loop2: detected capacity change from 0 to 32768
[   74.065882][ T5995] 8021q: adding VLAN 0 to HW filter on device team0
[   74.090546][ T6063] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.39 (6063)
[   74.091262][ T3868] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.097313][ T3868] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.121564][ T6063] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[   74.130424][ T6063] BTRFS info (device loop2): using blake2b (blake2b-256-lib) checksum algorithm
[   74.133138][ T6063] BTRFS error (device loop2): superblock checksum mismatch
[   74.134226][ T3868] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.135613][ T6063] BTRFS error (device loop2): open_ctree failed: -22
[   74.138029][ T3868] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.449108][ T5995] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.531108][ T5995] veth0_vlan: entered promiscuous mode
[   74.550333][ T5995] veth1_vlan: entered promiscuous mode
[   74.603433][ T5995] veth0_macvtap: entered promiscuous mode
[   74.614514][ T5995] veth1_macvtap: entered promiscuous mode
[   74.639537][ T5995] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.648151][ T5995] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.654735][    T9] usb 2-1: USB disconnect, device number 4
[   74.663900][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.681912][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.684771][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.698588][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.746339][ T6090] loop5: detected capacity change from 0 to 7
[   74.756661][ T6090] Dev loop5: unable to read RDB block 7
[   74.760954][ T6090]  loop5: unable to read partition table
[   74.763234][ T6090] loop5: partition table beyond EOD, truncated
[   74.775776][ T6090] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5)
[   74.803722][ T3938] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.806294][ T3938] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.863420][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.865766][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.945688][ T6094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.26'.
[   74.951228][ T6094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.26'.
[   74.954054][ T6094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.26'.
[   75.023458][ T6096] Bluetooth: MGMT ver 1.23
[   75.338142][ T6102] netlink: 20 bytes leftover after parsing attributes in process `syz.1.47'.
[   75.342021][ T6099] loop2: detected capacity change from 0 to 32768
[   75.346408][ T6099] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.46 (6099)
[   75.378597][ T6099] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[   75.381829][ T6099] BTRFS info (device loop2): using blake2b (blake2b-256-lib) checksum algorithm
[   75.401818][ T6099] BTRFS error (device loop2): superblock checksum mismatch
[   75.404493][ T6099] BTRFS error (device loop2): open_ctree failed: -22
[   75.511899][ T6107] loop5: detected capacity change from 0 to 7
[   75.537004][ T6107] Dev loop5: unable to read RDB block 7
[   75.539247][ T6107]  loop5: unable to read partition table
[   75.577555][ T6107] loop5: partition table beyond EOD, truncated
[   75.580033][ T6107] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5)
[   75.677437][ T5858] Bluetooth: hci0: command tx timeout
[   75.980930][ T6119] loop2: detected capacity change from 0 to 512
[   75.983884][ T6119] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   76.003117][ T6119] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   76.006138][ T6119] EXT4-fs (loop2): Unsupported encryption level 5
[   76.325505][ T6128] loop2: detected capacity change from 0 to 1024
[   76.366497][ T6128] hfsplus: Unknown parameter 'N(2bV'
[   76.634991][ T6132] netlink: 20 bytes leftover after parsing attributes in process `syz.3.54'.
[   76.873143][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[   76.875810][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[   77.090941][ T6144] loop1: detected capacity change from 0 to 32768
[   77.097180][ T6144] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.59 (6144)
[   77.106947][ T6144] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[   77.110029][ T6144] BTRFS info (device loop1): using blake2b (blake2b-256-lib) checksum algorithm
[   77.114703][ T6144] BTRFS error (device loop1): superblock checksum mismatch
[   77.117901][ T6144] BTRFS error (device loop1): open_ctree failed: -22
[   77.758126][ T5858] Bluetooth: hci0: command tx timeout
[   78.837013][   T33] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   78.986915][   T33] usb 4-1: Using ep0 maxpacket: 16
[   78.991555][   T33] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   78.995636][   T33] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   79.002708][   T33] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 17728, setting to 1024
[   79.013939][   T33] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 22
[   79.024138][   T33] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   79.028684][   T33] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   79.043193][   T33] usb 4-1: SerialNumber: syz
[   79.064870][ T6167] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   79.074663][   T33] cdc_acm 4-1:1.0: Control and data interfaces are not separated!
[   79.079136][   T33] cdc_acm 4-1:1.0: This needs exactly 3 endpoints
[   79.081422][   T33] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -22
[   79.100106][ T6172] netlink: 40 bytes leftover after parsing attributes in process `syz.2.68'.
[   79.550123][ T1274] usb 4-1: USB disconnect, device number 2
[   79.856903][ T5858] Bluetooth: hci0: command tx timeout
[   79.997514][ T6175] comedi comedi0: Minor 6 could not be opened
[   80.974105][ T6196] loop2: detected capacity change from 0 to 32768
[   80.982536][ T6196] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.77 (6196)
[   81.026120][ T6196] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[   81.030860][ T6196] BTRFS info (device loop2): using blake2b (blake2b-256-lib) checksum algorithm
[   81.034370][ T6196] BTRFS error (device loop2): superblock checksum mismatch
[   81.041102][ T6196] BTRFS error (device loop2): open_ctree failed: -22
[   81.456543][ T6214] loop5: detected capacity change from 0 to 7
[   81.460032][ T6214] Dev loop5: unable to read RDB block 7
[   81.462499][ T6214]  loop5: unable to read partition table
[   81.464982][ T6214] loop5: partition table beyond EOD, truncated
[   81.476021][ T6214] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5)
[   81.502699][ T6216] netlink: 12 bytes leftover after parsing attributes in process `syz.1.82'.
[   81.639159][ T6221] loop3: detected capacity change from 0 to 2048
[   81.707514][ T6225] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   81.746938][ T1274] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   82.040330][ T6234] netlink: 20 bytes leftover after parsing attributes in process `syz.2.89'.
[   82.160470][ T6239] loop3: detected capacity change from 0 to 256
[   82.182931][ T6239] =======================================================
[   82.182931][ T6239] WARNING: The mand mount option has been deprecated and
[   82.182931][ T6239]          and is ignored by this kernel. Remove the mand
[   82.182931][ T6239]          option from the mount to silence this warning.
[   82.182931][ T6239] =======================================================
[   82.221855][ T6239] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[   82.581864][ T6246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.94'.
[   82.584595][ T6246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.94'.
[   82.588301][ T6246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.94'.
[   82.652655][ T6252] netlink: 'syz.2.96': attribute type 1 has an invalid length.
[   82.655109][ T6252] netlink: 'syz.2.96': attribute type 2 has an invalid length.
[   82.694744][ T6253] loop3: detected capacity change from 0 to 128
[   82.707370][ T6253] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[   82.712404][ T6253] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   82.722226][ T5858] Bluetooth: hci0: Malformed LE Event: 0x1b
[   82.985996][ T6258] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   82.989992][ T6258] block device autoloading is deprecated and will be removed.
[   82.991522][ T6257] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   82.997770][ T6257] block device autoloading is deprecated and will be removed.
[   83.403904][ T5995] UDF-fs: error (device loop3): udf_read_inode: (ino 114) failed !bh
[   83.407816][ T5995] UDF-fs: error (device loop3): udf_read_inode: (ino 114) failed !bh
[   83.447615][   T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   83.577059][   T10] usb 2-1: device descriptor read/64, error -71
[   83.688625][ T5863] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.758776][ T5863] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.817134][ T5863] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.837157][   T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   83.871557][ T5863] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.909916][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   83.913784][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   83.916699][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   83.920736][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   83.923281][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   83.978918][   T10] usb 2-1: device descriptor read/64, error -71
[   84.050003][ T5863] bridge_slave_1: left allmulticast mode
[   84.059508][ T5863] bridge_slave_1: left promiscuous mode
[   84.061445][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.079496][ T5863] bridge_slave_0: left allmulticast mode
[   84.087335][ T5863] bridge_slave_0: left promiscuous mode
[   84.087814][   T10] usb usb2-port1: attempt power cycle
[   84.089821][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.329887][ T6276] loop2: detected capacity change from 0 to 16
[   84.352186][ T6276] erofs (device loop2): mounted with root inode @ nid 36.
[   84.375426][ T5863] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   84.381844][ T5863] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   84.386377][ T5863] bond0 (unregistering): Released all slaves
[   84.476119][   T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[   84.508286][   T10] usb 2-1: device descriptor read/8, error -71
[   84.706647][ T6273] chnl_net:caif_netlink_parms(): no params data found
[   84.767857][   T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[   84.926144][   T10] usb 2-1: device descriptor read/8, error -71
[   84.993427][ T5863] hsr_slave_0: left promiscuous mode
[   84.996259][ T5863] hsr_slave_1: left promiscuous mode
[   84.999160][ T5863] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   85.002079][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_0
[   85.040491][   T10] usb usb2-port1: unable to enumerate USB device
[   85.123466][ T6290] input: syz0 as /devices/virtual/input/input4
[   85.355851][ T5863] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   85.358902][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_1
[   85.395513][ T5863] veth1_macvtap: left promiscuous mode
[   85.398334][ T5863] veth0_macvtap: left promiscuous mode
[   85.401079][ T5863] veth1_vlan: left promiscuous mode
[   85.403276][ T5863] veth0_vlan: left promiscuous mode
[   85.783759][ T6293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.107'.
[   85.787266][ T6293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.107'.
[   85.791149][ T6293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.107'.
[   85.871989][ T5863] team0 (unregistering): Port device team_slave_1 removed
[   85.902111][ T5863] team0 (unregistering): Port device team_slave_0 removed
[   85.998676][ T5851] Bluetooth: hci0: command tx timeout
[   86.278304][ T6273] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.280974][ T6273] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.289952][ T6273] bridge_slave_0: entered allmulticast mode
[   86.299276][ T6273] bridge_slave_0: entered promiscuous mode
[   86.317015][ T6273] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.319911][ T6273] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.328985][ T6273] bridge_slave_1: entered allmulticast mode
[   86.337933][ T6273] bridge_slave_1: entered promiscuous mode
[   86.364830][ T6273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.378273][ T6273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   86.413249][ T6273] team0: Port device team_slave_0 added
[   86.416695][ T6273] team0: Port device team_slave_1 added
[   86.447246][ T6273] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.449334][ T6273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.487852][ T6273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.498958][ T6273] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.501859][ T6273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.511888][ T6273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.546259][ T6273] hsr_slave_0: entered promiscuous mode
[   86.548704][ T6273] hsr_slave_1: entered promiscuous mode
[   86.551069][ T6273] debugfs: 'hsr0' already exists in 'hsr'
[   86.553764][ T6273] Cannot create hsr debugfs directory
[   86.890398][ T6273] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   86.904155][ T6273] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   86.920058][ T6325] loop1: detected capacity change from 0 to 512
[   86.927180][ T6273] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   86.952604][ T6273] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   86.963858][ T6325] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=6054e01c, mo2=0102]
[   86.971338][ T6325] System zones: 1-12
[   86.998880][ T6325] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.112: inode has both inline data and extents flags
[   87.032073][ T6325] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.112: couldn't read orphan inode 15 (err -117)
[   87.058006][ T6325] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   87.075214][ T6273] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.078192][ T6273] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.081079][ T6273] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.083353][ T6273] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.099412][ T6321] netlink: 'syz.1.112': attribute type 1 has an invalid length.
[   87.309938][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.310467][ T5848] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   87.329349][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.418309][ T6273] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.453347][ T6273] 8021q: adding VLAN 0 to HW filter on device team0
[   87.466643][ T1100] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.468824][ T1100] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.491119][ T1100] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.493339][ T1100] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.561358][ T6273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   87.740113][ T6273] 8021q: adding VLAN 0 to HW filter on device batadv0
[   87.762287][ T6371] loop5: detected capacity change from 0 to 7
[   87.772673][ T5991] Dev loop5: unable to read RDB block 7
[   87.774575][ T5991]  loop5: unable to read partition table
[   87.776658][ T5991] loop5: partition table beyond EOD, truncated
[   87.795454][ T6371] Dev loop5: unable to read RDB block 7
[   87.798786][ T6371]  loop5: unable to read partition table
[   87.800574][ T6371] loop5: partition table beyond EOD, truncated
[   87.802617][ T6371] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5)
[   87.990952][ T6273] veth0_vlan: entered promiscuous mode
[   88.001522][ T6273] veth1_vlan: entered promiscuous mode
[   88.042960][ T6273] veth0_macvtap: entered promiscuous mode
[   88.048041][ T6273] veth1_macvtap: entered promiscuous mode
[   88.061077][ T6273] batman_adv: batadv0: Interface activated: batadv_slave_0
[   88.068710][ T6273] batman_adv: batadv0: Interface activated: batadv_slave_1
[   88.077640][ T5851] Bluetooth: hci0: command tx timeout
[   88.081258][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.088063][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.091003][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.096605][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.166195][ T3938] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.177860][ T3938] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.210607][ T3938] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.213138][ T3938] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.273960][ T6392] loop2: detected capacity change from 0 to 2048
[   88.298677][ T6396] netlink: 20 bytes leftover after parsing attributes in process `syz.4.104'.
[   88.305527][ T5991] udevd[5991]: incorrect nilfs2 checksum on /dev/loop2
[   88.312959][ T6392] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[   88.341767][ T6398] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   88.372153][ T6400] loop4: detected capacity change from 0 to 1024
[   88.390276][ T6400] hfsplus: Bad value for 'umask'
[   88.407562][ T6400] nfs: Unknown parameter '/proc/partitions'
[   88.465905][ T6402] loop4: detected capacity change from 0 to 128
[   88.539199][ T6402] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   88.544913][ T6402] ext4 filesystem being mounted at /1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   88.659253][   T34] audit: type=1800 audit(1770161117.369:3): pid=6402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.122" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=12 res=0 errno=0
[   88.793868][ T6423] loop1: detected capacity change from 0 to 512
[   88.808325][ T6423] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   88.811902][ T6423] EXT4-fs (loop1): Unsupported encryption level 5
[   88.832041][ T6273] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   89.133100][ T6433] loop5: detected capacity change from 0 to 7
[   89.142791][ T5991] Dev loop5: unable to read RDB block 7
[   89.147150][ T5991]  loop5: unable to read partition table
[   89.154576][ T5991] loop5: partition table beyond EOD, truncated
[   89.177533][ T6433] Dev loop5: unable to read RDB block 7
[   89.184130][ T6433]  loop5: unable to read partition table
[   89.192351][ T6433] loop5: partition table beyond EOD, truncated
[   89.199850][ T6433] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5)
[   89.795272][ T6448] loop4: detected capacity change from 0 to 128
[   89.813265][ T6448] ufs: You didn't specify the type of your ufs filesystem
[   89.813265][ T6448] 
[   89.813265][ T6448] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[   89.813265][ T6448] 
[   89.813265][ T6448] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[   89.832296][ T6448] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2
[   89.895153][ T6448] netlink: 8 bytes leftover after parsing attributes in process `syz.4.134'.
[   89.900250][ T6448] netlink: 8 bytes leftover after parsing attributes in process `syz.4.134'.
[   89.903819][ T6448] netlink: 8 bytes leftover after parsing attributes in process `syz.4.134'.
[   89.935448][ T6442] loop1: detected capacity change from 0 to 32768
[   89.985385][ T6442] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   90.021465][ T6442] XFS (loop1): Ending clean mount
[   90.027020][ T6442] XFS (loop1): Quotacheck needed: Please wait.
[   90.055530][ T6442] XFS (loop1): Quotacheck: Done.
[   90.066716][ T6440] overlayfs: workdir and upperdir must reside under the same mount
[   90.126991][ T5916] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   90.168980][ T5848] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   90.286883][ T5916] usb 3-1: Using ep0 maxpacket: 8
[   90.299941][ T5916] usb 3-1: config 0 has an invalid interface number: 239 but max is 0
[   90.302915][ T5916] usb 3-1: config 0 has no interface number 0
[   90.305157][ T5916] usb 3-1: config 0 interface 239 altsetting 0 has an endpoint descriptor with address 0x64, changing to 0x4
[   90.317680][ T5916] usb 3-1: config 0 interface 239 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 8
[   90.330679][ T5916] usb 3-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a
[   90.337246][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.340480][ T5916] usb 3-1: Product: syz
[   90.342181][ T5916] usb 3-1: Manufacturer: syz
[   90.344070][ T5916] usb 3-1: SerialNumber: syz
[   90.357974][ T5916] usb 3-1: config 0 descriptor??
[   90.361010][ T6450] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   90.502535][ T6464] loop4: detected capacity change from 0 to 512
[   90.543364][ T6464] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   90.547650][ T6464] EXT4-fs (loop4): Unsupported encryption level 5
[   90.607236][ T6450] input: syz1 as /devices/virtual/input/input5
[   90.976892][ T5899] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[   91.106980][ T5899] usb 2-1: device descriptor read/64, error -71
[   91.343231][ T5916] ath6kl: Failed to submit usb control message: -71
[   91.345892][ T5916] ath6kl: unable to send the bmi data to the device: -71
[   91.352663][ T5916] ath6kl: Unable to send get target info: -71
[   91.354803][ T5899] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[   91.365635][ T5916] ath6kl: Failed to init ath6kl core: -71
[   91.371744][ T5916] ath6kl_usb 3-1:0.239: probe with driver ath6kl_usb failed with error -71
[   91.394367][ T5916] usb 3-1: USB disconnect, device number 4
[   91.496964][ T5899] usb 2-1: device descriptor read/64, error -71
[   91.608138][ T5899] usb usb2-port1: attempt power cycle
[   91.640132][ T6482] BFS-fs: bfs_fill_super(): NOTE: filesystem loop4 was created with 512 inodes, the real maximum is 511, mounting anyway
[   91.867256][ T6485] netlink: 20 bytes leftover after parsing attributes in process `syz.4.142'.
[   91.947632][ T5899] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[   91.963469][ T6488] set_capacity_and_notify: 1 callbacks suppressed
[   91.963488][ T6488] loop4: detected capacity change from 0 to 512
[   91.968237][ T5899] usb 2-1: device descriptor read/8, error -71
[   91.977732][ T6488] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   91.996930][ T5851] Bluetooth: hci0: command tx timeout
[   92.002871][ T6488] EXT4-fs (loop4): Unsupported encryption level 5
[   92.037387][ T6490] tipc: Started in network mode
[   92.044366][ T6490] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711
[   92.062710][ T6490] tipc: Enabled bearer <udp:syz1>, priority 10
[   92.233853][   T62] cfg80211: failed to load regulatory.db
[   92.257050][ T5899] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[   92.477756][ T5899] usb 2-1: device descriptor read/8, error -71
[   92.597134][ T5899] usb usb2-port1: unable to enumerate USB device
[   93.063008][   T62] tipc: Node number set to 4269801494
[   93.602370][ T6508] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   93.711633][ T6504] loop4: detected capacity change from 0 to 32768
[   93.716281][ T6504] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.149 (6504)
[   93.757549][ T6504] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[   93.760929][ T6504] BTRFS info (device loop4): using blake2b (blake2b-256-lib) checksum algorithm
[   93.790243][ T6516] loop2: detected capacity change from 0 to 512
[   93.790528][ T6504] BTRFS error (device loop4): superblock checksum mismatch
[   93.795063][ T6504] BTRFS error (device loop4): open_ctree failed: -22
[   93.795094][ T6516] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   93.814032][ T6516] EXT4-fs (loop2): Unsupported encryption level 5
[   94.769124][ T6533] netlink: 20 bytes leftover after parsing attributes in process `syz.2.159'.
[   94.837174][ T5899] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   94.960991][ T6537] loop2: detected capacity change from 0 to 8192
[   94.986845][ T5899] usb 5-1: Using ep0 maxpacket: 8
[   94.993866][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   95.002922][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   95.015728][ T5899] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00
[   95.023449][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   95.039564][ T5899] usb 5-1: config 0 descriptor??
[   95.266933][ T1274] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   95.382266][ T6527] loop1: detected capacity change from 0 to 262144
[   95.387678][ T6527] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.157 (6527)
[   95.399091][ T6527] BTRFS info (device loop1): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[   95.403191][ T6527] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[   95.417096][ T1274] usb 3-1: Using ep0 maxpacket: 16
[   95.428760][ T1274] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[   95.434930][ T1274] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.441785][ T1274] usb 3-1: Product: syz
[   95.443618][ T1274] usb 3-1: Manufacturer: syz
[   95.445486][ T1274] usb 3-1: SerialNumber: syz
[   95.453757][ T1274] usb 3-1: config 0 descriptor??
[   95.460084][ T5899] koneplus 0003:1E7D:2D51.0001: unknown main item tag 0x0
[   95.462450][ T5899] koneplus 0003:1E7D:2D51.0001: item fetching failed at offset 9/11
[   95.470535][ T1274] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected
[   95.474021][ T1274] usb 3-1: Detected FT-X
[   95.479643][ T5899] koneplus 0003:1E7D:2D51.0001: parse failed
[   95.481541][ T5899] koneplus 0003:1E7D:2D51.0001: probe with driver koneplus failed with error -22
[   95.518631][ T6527] BTRFS info (device loop1): enabling ssd optimizations
[   95.521466][ T6527] BTRFS info (device loop1): turning on async discard
[   95.524196][ T6527] BTRFS info (device loop1): enabling free space tree
[   95.663336][ T6530] loop4: detected capacity change from 0 to 512
[   95.753183][ T5899] usb 5-1: USB disconnect, device number 2
[   95.758079][ T5848] BTRFS info (device loop1): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[   95.880594][ T6537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.161'.
[   95.938768][ T6537] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   96.349863][ T6554] macsec0: entered promiscuous mode
[   96.352275][ T6554] netlink: 4 bytes leftover after parsing attributes in process `syz.4.163'.
[   96.356674][ T6554] veth1_macvtap: left promiscuous mode
[   96.378085][ T6554] macsec0 (unregistering): left promiscuous mode
[   96.563536][ T6561] loop4: detected capacity change from 0 to 512
[   96.587302][ T6561] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   96.590275][ T6561] EXT4-fs (loop4): Unsupported encryption level 5
[   96.599189][ T1274] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[   96.607365][ T1274] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71
[   96.624744][ T1274] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0
[   96.767091][ T1274] usb 3-1: USB disconnect, device number 5
[   96.767804][ T6565] netlink: 20 bytes leftover after parsing attributes in process `syz.2.166'.
[   97.017676][ T1274] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[   97.021231][ T1274] ftdi_sio 3-1:0.0: device disconnected
[   97.150661][ T6559] loop1: detected capacity change from 0 to 32768
[   97.153586][ T6559] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.164 (6559)
[   97.160961][ T6559] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[   97.164634][ T6559] BTRFS info (device loop1): using blake2b (blake2b-256-lib) checksum algorithm
[   97.167643][ T6559] BTRFS error (device loop1): superblock checksum mismatch
[   97.169909][ T6559] BTRFS error (device loop1): open_ctree failed: -22
[   97.352717][ T6579] fuse: Unknown parameter ''
[   97.479175][ T5851] Bluetooth: hci0: Unknown advertising packet type: 0x7f
[   97.479209][ T5851] Bluetooth: hci0: adv larger than maximum supported
[   97.482126][ T5851] Bluetooth: hci0: Malformed LE Event: 0x0d
[   97.741829][ T6597] loop4: detected capacity change from 0 to 1024
[   97.744783][ T6597] hfsplus: Unknown parameter '/proc/sys/vm/compact_memory'
[   97.767721][ T5916] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[   97.916903][ T5916] usb 2-1: Using ep0 maxpacket: 8
[   97.921515][ T5916] usb 2-1: config 0 has an invalid interface number: 239 but max is 0
[   97.924551][ T5916] usb 2-1: config 0 has no interface number 0
[   97.930358][ T5916] usb 2-1: config 0 interface 239 altsetting 0 has an endpoint descriptor with address 0x64, changing to 0x4
[   97.934226][ T5916] usb 2-1: config 0 interface 239 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 8
[   97.942739][ T5916] usb 2-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a
[   97.945506][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.953087][ T5916] usb 2-1: Product: syz
[   97.954360][ T5916] usb 2-1: Manufacturer: syz
[   97.955738][ T5916] usb 2-1: SerialNumber: syz
[   97.963846][ T5916] usb 2-1: config 0 descriptor??
[   97.971698][ T6588] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   98.014765][ T6605] loop2: detected capacity change from 0 to 512
[   98.020416][ T6605] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   98.033292][ T6605] EXT4-fs (loop2): Unsupported encryption level 5
[   98.204634][ T6588] input: syz1 as /devices/virtual/input/input6
[   98.682783][ T5916] ath6kl: Failed to submit usb control message: -71
[   98.684945][ T5916] ath6kl: unable to send the bmi data to the device: -71
[   98.690721][ T5916] ath6kl: Unable to send get target info: -71
[   98.701401][ T5916] ath6kl: Failed to init ath6kl core: -71
[   98.704801][ T5916] ath6kl_usb 2-1:0.239: probe with driver ath6kl_usb failed with error -71
[   98.731039][ T5916] usb 2-1: USB disconnect, device number 14
[   98.940210][ T6617] loop2: detected capacity change from 0 to 32768
[   98.943462][ T6617] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.180 (6617)
[   98.975911][ T6617] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[   98.980725][ T6617] BTRFS info (device loop2): using blake2b (blake2b-256-lib) checksum algorithm
[   98.983787][ T6617] BTRFS error (device loop2): superblock checksum mismatch
[   98.987453][ T6617] BTRFS error (device loop2): open_ctree failed: -22
[   99.033292][ T6625] loop4: detected capacity change from 0 to 8
[   99.051561][ T6625] SQUASHFS error: zlib decompression failed, data probably corrupt
[   99.054050][ T6625] SQUASHFS error: Failed to read block 0x9b: -5
[   99.055899][ T6625] SQUASHFS error: Unable to read metadata cache entry [99]
[   99.077305][ T6625] SQUASHFS error: Unable to read inode 0x127
[   99.958326][ T6663] loop2: detected capacity change from 0 to 32768
[   99.966273][ T6663] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.191 (6663)
[   99.992139][ T6663] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[   99.998641][ T6663] BTRFS info (device loop2): using blake2b (blake2b-256-lib) checksum algorithm
[  100.001337][ T6663] BTRFS error (device loop2): superblock checksum mismatch
[  100.012745][ T6663] BTRFS error (device loop2): open_ctree failed: -22
[  100.140743][ T6683] loop4: detected capacity change from 0 to 8
[  100.348731][ T5916] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  100.493458][ T6699] loop1: detected capacity change from 0 to 16
[  100.517026][ T5916] usb 3-1: Using ep0 maxpacket: 32
[  100.518195][ T6699] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  100.525309][ T5916] usb 3-1: config index 0 descriptor too short (expected 35577, got 27)
[  100.533305][ T5916] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  100.539643][ T5916] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92
[  100.545999][ T5916] usb 3-1: config 1 has no interface number 0
[  100.557738][ T5916] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  100.565358][ T5916] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  100.574530][ T5916] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  100.579950][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.596322][ T5916] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found
[  100.796267][ T5916] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached
[  101.522489][ T6726] hfs: can't find a HFS filesystem on dev nullb0
[  101.839264][ T5916] snd_usb_pod 3-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22)
[  101.858761][ T6731] netlink: 16 bytes leftover after parsing attributes in process `syz.1.212'.
[  101.924110][ T6736] netlink: 8 bytes leftover after parsing attributes in process `syz.4.214'.
[  101.926973][ T6736] netlink: 12 bytes leftover after parsing attributes in process `syz.4.214'.
[  101.994608][ T6738] random: crng reseeded on system resumption
[  103.158794][ T5919] usb 3-1: USB disconnect, device number 6
[  103.162448][ T5919] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected
[  104.558791][ T6762] loop4: detected capacity change from 0 to 32768
[  104.562222][ T6762] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.222 (6762)
[  104.580312][ T6762] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  104.583540][ T6762] BTRFS info (device loop4): using blake2b (blake2b-256-lib) checksum algorithm
[  104.586138][ T6762] BTRFS error (device loop4): superblock checksum mismatch
[  104.609948][ T6762] BTRFS error (device loop4): open_ctree failed: -22
[  104.783207][ T6785] loop2: detected capacity change from 0 to 512
[  104.814037][ T6785] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  104.837586][ T6785] EXT4-fs (loop2): Unsupported encryption level 5
[  104.996730][ T6789] loop2: detected capacity change from 0 to 128
[  105.029515][ T6789] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  105.043076][ T6789] ext4 filesystem being mounted at /93/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  105.157731][ T6798] openvswitch: netlink: IPv4 tun info is not correct
[  105.248758][ T6802] netlink: 20 bytes leftover after parsing attributes in process `syz.4.236'.
[  105.509152][ T6808] loop1: detected capacity change from 0 to 512
[  105.522934][ T6808] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  105.531881][ T6808] EXT4-fs (loop1): Unsupported encryption level 5
[  105.621649][ T1274] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  105.626689][ T5846] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  105.797120][ T1274] usb 5-1: Using ep0 maxpacket: 16
[  105.810105][ T1274] usb 5-1: config 0 has an invalid interface number: 28 but max is 0
[  105.812790][ T1274] usb 5-1: config 0 has no interface number 0
[  105.814636][ T1274] usb 5-1: config 0 interface 28 has no altsetting 0
[  105.828283][ T1274] usb 5-1: New USB device found, idVendor=12d1, idProduct=937e, bcdDevice=af.67
[  105.831209][ T1274] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.833726][ T1274] usb 5-1: Product: syz
[  105.834987][ T1274] usb 5-1: Manufacturer: syz
[  105.836417][ T1274] usb 5-1: SerialNumber: syz
[  105.846990][ T1274] usb 5-1: config 0 descriptor??
[  105.850050][ T1274] hub 5-1:0.28: bad descriptor, ignoring hub
[  105.851991][ T1274] hub 5-1:0.28: probe with driver hub failed with error -5
[  105.861312][ T1274] option 5-1:0.28: GSM modem (1-port) converter detected
[  105.881175][ T6810] loop1: detected capacity change from 0 to 32768
[  105.884121][ T6810] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.240 (6810)
[  105.903336][ T6810] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  105.906619][ T6810] BTRFS info (device loop1): using blake2b (blake2b-256-lib) checksum algorithm
[  105.922648][ T6810] BTRFS error (device loop1): superblock checksum mismatch
[  105.925149][ T6810] BTRFS error (device loop1): open_ctree failed: -22
[  106.050797][ T6806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  106.067522][ T6806] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  106.086110][ T6806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  106.096871][ T6821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  106.118228][ T6821] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  106.118390][ T6806] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  106.242078][ T6829] netlink: 20 bytes leftover after parsing attributes in process `syz.2.245'.
[  106.320531][   T10] usb 5-1: USB disconnect, device number 3
[  106.323278][   T10] option 5-1:0.28: device disconnected
[  106.329798][ T6836] loop4: detected capacity change from 0 to 256
[  106.332261][ T6836] exfat: Deprecated parameter 'utf8'
[  106.334051][ T6836] exfat: Deprecated parameter 'namecase'
[  106.391170][ T6836] exfat: Deprecated parameter 'utf8'
[  106.399339][ T6836] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  106.567426][ T6827] loop1: detected capacity change from 0 to 32768
[  106.586912][ T6827] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.243 (6827)
[  106.630080][ T6827] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  106.636130][ T6827] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  106.790740][ T6827] BTRFS info (device loop1): enabling ssd optimizations
[  106.793041][ T6827] BTRFS info (device loop1): turning on async discard
[  106.795143][ T6827] BTRFS info (device loop1): enabling free space tree
[  106.942539][ T5848] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  107.003876][   T10] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[  107.169020][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  107.181332][   T10] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  107.184956][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1
[  107.196888][   T10] usb 3-1: Product: syz
[  107.198652][   T10] usb 3-1: Manufacturer: syz
[  107.200235][   T10] usb 3-1: SerialNumber: syz
[  107.204760][   T10] usb 3-1: config 0 descriptor??
[  107.382349][ T6870] loop1: detected capacity change from 0 to 32768
[  107.405267][ T6870] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.253 (6870)
[  107.415354][ T6870] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  107.421046][ T6870] BTRFS info (device loop1): using blake2b (blake2b-256-lib) checksum algorithm
[  107.424728][ T6870] BTRFS error (device loop1): superblock checksum mismatch
[  107.428415][ T6870] BTRFS error (device loop1): open_ctree failed: -22
[  107.430724][   T10] usb 3-1: bad CDC descriptors
[  107.441815][   T10] usb 3-1: unsupported MDLM descriptors
[  107.449009][   T10] usb 3-1: USB disconnect, device number 7
[  107.984070][ T6882] netlink: 20 bytes leftover after parsing attributes in process `syz.1.257'.
[  108.123342][ T6891] netlink: 16 bytes leftover after parsing attributes in process `syz.2.261'.
[  108.128002][ T6891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.261'.
[  108.137139][ T6891] loop2: detected capacity change from 0 to 128
[  108.144579][ T6891] EXT4-fs: Ignoring removed nobh option
[  108.173629][ T6891] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  108.179815][ T6891] ext4 filesystem being mounted at /102/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  108.299019][ T6887] loop1: detected capacity change from 0 to 32768
[  108.363702][ T6887] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  108.398374][ T5846] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  108.423338][ T6887] XFS (loop1): Ending clean mount
[  108.429921][ T6887] XFS (loop1): Quotacheck needed: Please wait.
[  108.444088][ T6887] XFS (loop1): Quotacheck: Done.
[  108.483275][ T6887] mmap: syz.1.259 (6887) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  108.520010][ T5848] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  108.726939][   T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  108.765536][ T6916] input: syz1 as /devices/virtual/input/input7
[  108.882198][   T10] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  108.885791][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.888875][   T10] usb 3-1: Product: syz
[  108.890603][   T10] usb 3-1: Manufacturer: syz
[  108.892472][   T10] usb 3-1: SerialNumber: syz
[  108.900361][   T10] usb 3-1: config 0 descriptor??
[  108.905250][   T10] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  108.914702][   T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  108.919748][   T10] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  108.923573][   T10] usb 3-1: media controller created
[  108.938874][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  108.969715][   T10] DVB: Unable to find symbol mt352_attach()
[  108.990075][   T10] DVB: Unable to find symbol nxt6000_attach()
[  108.992025][   T10] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  108.997785][   T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input8
[  109.004151][   T10] dvb-usb: schedule remote query interval to 1000 msecs.
[  109.006607][   T10] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  109.013420][   T10] dvb-usb: bulk message failed: -22 (7/0)
[  109.015507][   T10] dvb-usb: bulk message failed: -22 (7/0)
[  109.132007][ T6903] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=18576, location=18576
[  109.152182][ T6903] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  109.178912][ T6903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.262'.
[  109.185267][   T10] usb 3-1: USB disconnect, device number 8
[  109.218945][   T10] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  109.651747][ T6927] set_capacity_and_notify: 2 callbacks suppressed
[  109.651758][ T6927] loop4: detected capacity change from 0 to 32768
[  109.796890][ T5919] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  109.959304][ T5919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  109.963670][ T5919] usb 2-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00
[  109.973000][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.984483][ T5919] usb 2-1: config 0 descriptor??
[  110.000485][ T5919] usbhid 2-1:0.0: fixing wrong optional hid class descriptors count
[  110.022597][ T6938] input: syz1 as /devices/virtual/input/input9
[  110.197422][ T5919] usbhid 2-1:0.0: can't add hid device: -71
[  110.199615][ T5919] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  110.209687][ T5919] usb 2-1: USB disconnect, device number 15
[  110.517008][ T5919] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  110.666895][ T5919] usb 3-1: Using ep0 maxpacket: 32
[  110.670319][ T5919] usb 3-1: config 0 has an invalid interface number: 48 but max is 0
[  110.673588][ T5919] usb 3-1: config 0 has no interface number 0
[  110.676020][ T5919] usb 3-1: too many endpoints for config 0 interface 48 altsetting 7: 201, using maximum allowed: 30
[  110.681333][ T5919] usb 3-1: config 0 interface 48 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  110.684736][ T5919] usb 3-1: config 0 interface 48 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 201
[  110.688727][ T5919] usb 3-1: config 0 interface 48 has no altsetting 0
[  110.693052][ T5919] usb 3-1: New USB device found, idVendor=1ae7, idProduct=0525, bcdDevice=74.d5
[  110.695934][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.698376][ T5919] usb 3-1: Product: syz
[  110.699748][ T5919] usb 3-1: Manufacturer: syz
[  110.701261][ T5919] usb 3-1: SerialNumber: syz
[  110.705042][ T5919] usb 3-1: config 0 descriptor??
[  110.710132][ T5919] HFC-S_USB 3-1:0.48: probe with driver HFC-S_USB failed with error -5
[  110.816920][   T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  110.967993][   T10] usb 5-1: device descriptor read/64, error -71
[  111.161857][ T6962] netlink: 4 bytes leftover after parsing attributes in process `syz.2.275'.
[  111.398481][   T62] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  111.457130][   T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  111.546954][   T62] usb 2-1: Using ep0 maxpacket: 8
[  111.551340][   T62] usb 2-1: config 0 has an invalid interface number: 239 but max is 0
[  111.554494][   T62] usb 2-1: config 0 has no interface number 0
[  111.556407][   T62] usb 2-1: config 0 interface 239 altsetting 0 has an endpoint descriptor with address 0x64, changing to 0x4
[  111.559890][   T62] usb 2-1: config 0 interface 239 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 8
[  111.564665][   T62] usb 2-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a
[  111.567852][   T62] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.570380][   T62] usb 2-1: Product: syz
[  111.571761][   T62] usb 2-1: Manufacturer: syz
[  111.573229][   T62] usb 2-1: SerialNumber: syz
[  111.575984][   T62] usb 2-1: config 0 descriptor??
[  111.578166][ T6960] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  111.596735][   T10] usb 5-1: device descriptor read/64, error -71
[  111.707551][   T10] usb usb5-port1: attempt power cycle
[  111.784645][ T6960] input: syz1 as /devices/virtual/input/input11
[  111.821615][   T62] ath6kl: Failed to submit usb control message: -71
[  111.824330][   T62] ath6kl: unable to send the bmi data to the device: -71
[  111.828387][   T62] ath6kl: Unable to send get target info: -71
[  111.838649][   T62] ath6kl: Failed to init ath6kl core: -71
[  111.841986][   T62] ath6kl_usb 2-1:0.239: probe with driver ath6kl_usb failed with error -71
[  111.855280][   T62] usb 2-1: USB disconnect, device number 16
[  112.076631][   T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  112.097177][   T10] usb 5-1: device descriptor read/8, error -71
[  112.346387][   T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  112.379002][   T10] usb 5-1: device descriptor read/8, error -71
[  112.497300][   T10] usb usb5-port1: unable to enumerate USB device
[  112.722495][ T6970] tun0: tun_chr_ioctl cmd 1074025675
[  112.724507][ T6970] tun0: persist enabled
[  112.727631][ T6970] tun0: tun_chr_ioctl cmd 1074025675
[  112.729354][ T6970] tun0: persist enabled
[  113.284998][ T6975] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  113.289009][ T6975] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  113.406963][ T5851] Bluetooth: hci2: ISO packet for unknown connection handle 816
[  113.439135][ T6948] ALSA: mixer_oss: invalid OSS volume 'u'
[  113.443029][   T10] usb 3-1: USB disconnect, device number 9
[  113.674705][ T6985] loop2: detected capacity change from 0 to 512
[  113.680797][ T6985] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  113.684428][ T6985] EXT4-fs (loop2): Unsupported encryption level 5
[  114.003669][ T6991] loop1: detected capacity change from 0 to 512
[  114.017661][ T6988] loop2: detected capacity change from 0 to 128
[  114.076324][ T6991] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  114.080563][ T6991] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  114.097572][ T5848] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.396146][ T1274] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  114.421561][ T7010] loop4: detected capacity change from 0 to 512
[  114.427205][ T7010] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  114.431180][ T7010] EXT4-fs (loop4): Unsupported encryption level 5
[  114.555365][ T1274] usb 2-1: Using ep0 maxpacket: 8
[  114.564519][ T1274] usb 2-1: config 0 has an invalid interface number: 239 but max is 0
[  114.568345][ T1274] usb 2-1: config 0 has no interface number 0
[  114.570263][ T1274] usb 2-1: config 0 interface 239 altsetting 0 has an endpoint descriptor with address 0x64, changing to 0x4
[  114.583939][ T1274] usb 2-1: config 0 interface 239 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 8
[  114.589847][ T1274] usb 2-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a
[  114.592516][ T1274] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.594972][ T1274] usb 2-1: Product: syz
[  114.605290][ T1274] usb 2-1: Manufacturer: syz
[  114.606721][ T1274] usb 2-1: SerialNumber: syz
[  114.616489][ T1274] usb 2-1: config 0 descriptor??
[  114.619110][ T7001] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  114.679830][ T7012] loop4: detected capacity change from 0 to 32768
[  114.696598][ T7012] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.294 (7012)
[  114.705999][ T7012] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  114.709186][ T7012] BTRFS info (device loop4): using blake2b (blake2b-256-lib) checksum algorithm
[  114.711900][ T7012] BTRFS error (device loop4): superblock checksum mismatch
[  114.714248][ T7012] BTRFS error (device loop4): open_ctree failed: -22
[  114.852526][ T7001] input: syz1 as /devices/virtual/input/input12
[  114.933952][ T7020] netlink: 20 bytes leftover after parsing attributes in process `syz.4.296'.
[  114.937513][ T1274] ath6kl: Failed to submit usb control message: -71
[  114.939510][ T1274] ath6kl: unable to send the bmi data to the device: -71
[  114.942780][ T1274] ath6kl: Unable to send get target info: -71
[  114.957383][ T1274] ath6kl: Failed to init ath6kl core: -71
[  114.960656][ T1274] ath6kl_usb 2-1:0.239: probe with driver ath6kl_usb failed with error -71
[  114.992074][ T1274] usb 2-1: USB disconnect, device number 17
[  115.018036][ T7024] loop2: detected capacity change from 0 to 128
[  115.021277][ T7024] ext2: Unknown parameter 'fscontext'
[  115.033110][ T7024] loop2: detected capacity change from 0 to 64
[  115.486670][ T7032] loop1: detected capacity change from 0 to 512
[  115.490893][ T7032] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  115.496678][ T7032] EXT4-fs (loop1): Unsupported encryption level 5
[  115.651081][ T7039] netlink: 200 bytes leftover after parsing attributes in process `syz.2.302'.
[  115.661086][ T7039] syz.2.302 uses obsolete (PF_INET,SOCK_PACKET)
[  115.675024][   T62] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  115.763424][ T7042] openvswitch: netlink: IP tunnel dst address not specified
[  115.825496][   T62] usb 5-1: device descriptor read/64, error -71
[  116.140018][   T62] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  116.204906][ T5919] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  116.274457][   T62] usb 5-1: device descriptor read/64, error -71
[  116.354439][ T5919] usb 2-1: Using ep0 maxpacket: 8
[  116.358667][ T5919] usb 2-1: config 0 has an invalid interface number: 239 but max is 0
[  116.361806][ T5919] usb 2-1: config 0 has no interface number 0
[  116.366074][ T5919] usb 2-1: config 0 interface 239 altsetting 0 has an endpoint descriptor with address 0x64, changing to 0x4
[  116.370633][ T5919] usb 2-1: config 0 interface 239 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 8
[  116.378689][ T5919] usb 2-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a
[  116.382207][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.385458][ T5919] usb 2-1: Product: syz
[  116.387084][ T5919] usb 2-1: Manufacturer: syz
[  116.388890][ T5919] usb 2-1: SerialNumber: syz
[  116.394666][ T5919] usb 2-1: config 0 descriptor??
[  116.394831][   T62] usb usb5-port1: attempt power cycle
[  116.399299][ T7051] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  116.434433][ T1274] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  116.584701][ T1274] usb 3-1: Using ep0 maxpacket: 8
[  116.589611][ T1274] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  116.593198][ T1274] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.609146][ T7051] input: syz1 as /devices/virtual/input/input13
[  116.628454][ T1274] pvrusb2: Hardware description: Terratec Grabster AV400
[  116.631274][ T1274] pvrusb2: **********
[  116.632933][ T1274] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  116.638575][ T1274] pvrusb2: Important functionality might not be entirely working.
[  116.643171][ T1274] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  116.647282][ T1274] pvrusb2: **********
[  116.662753][ T5919] ath6kl: Failed to submit usb control message: -71
[  116.664879][ T5919] ath6kl: unable to send the bmi data to the device: -71
[  116.668075][ T5919] ath6kl: Unable to send get target info: -71
[  116.671686][ T5919] ath6kl: Failed to init ath6kl core: -71
[  116.675619][ T5919] ath6kl_usb 2-1:0.239: probe with driver ath6kl_usb failed with error -71
[  116.685453][ T5919] usb 2-1: USB disconnect, device number 18
[  116.734229][   T62] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  116.755393][   T62] usb 5-1: device descriptor read/8, error -71
[  116.815706][ T2406] pvrusb2: Invalid write control endpoint
[  116.858422][ T2406] pvrusb2: Invalid write control endpoint
[  116.861013][ T2406] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  116.871071][ T2406] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  116.878473][ T2406] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  116.882403][ T2406] pvrusb2: Device being rendered inoperable
[  116.887917][ T2406] cx25840 2-0044: Unable to detect h/w, assuming cx23887
[  116.890870][ T2406] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  116.898254][ T2406] pvrusb2: Attached sub-driver cx25840
[  116.903833][ T2406] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  116.908157][ T2406] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  117.024160][   T62] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  117.056350][   T62] usb 5-1: device descriptor read/8, error -71
[  117.165291][   T62] usb usb5-port1: unable to enumerate USB device
[  117.386793][ T7065] loop2: detected capacity change from 0 to 512
[  117.390401][ T7065] EXT4-fs: Ignoring removed orlov option
[  117.404053][ T7065] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  117.422048][ T7065] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[  117.427019][ T7065] EXT4-fs error (device loop2): ext4_iget_extra_inode:5072: inode #15: comm syz.2.308: corrupted in-inode xattr: e_value size too large
[  117.432896][ T7065] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.308: couldn't read orphan inode 15 (err -117)
[  117.437936][ T7065] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  117.497327][ T7069] loop1: detected capacity change from 0 to 16
[  117.624945][ T7076] loop1: detected capacity change from 0 to 256
[  117.640876][ T7076] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  118.043597][   T62] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  118.197309][   T62] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[  118.200760][   T62] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.204021][   T62] usb 2-1: Product: syz
[  118.205690][   T62] usb 2-1: Manufacturer: syz
[  118.207456][   T62] usb 2-1: SerialNumber: syz
[  118.211521][   T62] usb 2-1: config 0 descriptor??
[  118.218485][   T62] gspca_main: sunplus-2.14.0 probing 055f:c230
[  118.637507][   T10] usb 2-1: USB disconnect, device number 19
[  118.825556][ T7085] loop4: detected capacity change from 0 to 32768
[  118.864793][ T5991]  loop4: p9 p11 p16
[  118.895948][ T7085]  loop4: p9 p11 p16
[  119.260671][ T1274] usb 3-1: USB disconnect, device number 10
[  119.291388][ T5846] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.441650][ T7098] sctp: [Deprecated]: syz.2.319 (pid 7098) Use of struct sctp_assoc_value in delayed_ack socket option.
[  119.441650][ T7098] Use struct sctp_sack_info instead
[  119.539883][ T7103] loop1: detected capacity change from 0 to 512
[  119.654949][ T7103] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  119.659067][ T7103] ext4 filesystem being mounted at /95/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  119.666677][ T7103] EXT4-fs warning (device loop1): ext4_group_add:1716: Can't resize non-sparse filesystem further
[  119.801240][ T7117] netlink: 20 bytes leftover after parsing attributes in process `syz.2.324'.
[  119.894549][ T5848] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.027606][ T7132] loop2: detected capacity change from 0 to 2048
[  120.067564][ T7132] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  120.106409][   T34] audit: type=1800 audit(1770161154.829:4): pid=7132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.328" name="bus" dev="loop2" ino=1367 res=0 errno=0
[  120.128174][   T34] audit: type=1326 audit(1770161154.849:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7118 comm="syz.4.325" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7f87f9acb9 code=0x0
[  120.512417][   T62] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  120.645257][ T7160] loop1: detected capacity change from 0 to 32768
[  120.648331][ T7160] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.335 (7160)
[  120.656374][ T7160] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  120.659412][ T7160] BTRFS info (device loop1): using blake2b (blake2b-256-lib) checksum algorithm
[  120.662455][ T7160] BTRFS error (device loop1): superblock checksum mismatch
[  120.664925][ T7160] BTRFS error (device loop1): open_ctree failed: -22
[  120.672270][   T62] usb 3-1: Using ep0 maxpacket: 32
[  120.677727][   T62] usb 3-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=f7.16
[  120.680428][   T62] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.683026][   T62] usb 3-1: Product: syz
[  120.684321][   T62] usb 3-1: Manufacturer: syz
[  120.686979][   T62] usb 3-1: SerialNumber: syz
[  120.693249][   T62] usb 3-1: config 0 descriptor??
[  120.703424][   T62] gspca_main: sunplus-2.14.0 probing 046d:0960
[  120.722365][   T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  120.892122][   T10] usb 5-1: Using ep0 maxpacket: 8
[  120.906007][   T10] usb 5-1: config 0 has an invalid interface number: 239 but max is 0
[  120.916400][   T10] usb 5-1: config 0 has no interface number 0
[  120.921062][   T10] usb 5-1: config 0 interface 239 altsetting 0 has an endpoint descriptor with address 0x64, changing to 0x4
[  120.942454][   T10] usb 5-1: config 0 interface 239 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 8
[  120.949859][   T10] usb 5-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a
[  120.956826][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.960272][   T10] usb 5-1: Product: syz
[  120.980002][   T10] usb 5-1: Manufacturer: syz
[  120.991570][ T7145] loop2: detected capacity change from 0 to 4096
[  120.992441][   T10] usb 5-1: SerialNumber: syz
[  121.000956][   T10] usb 5-1: config 0 descriptor??
[  121.005248][ T7158] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  121.014953][ T7145] EXT4-fs: Ignoring removed bh option
[  121.035717][ T7145] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  121.056599][ T7145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  121.060062][ T7145] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  121.098348][ T7172] loop1: detected capacity change from 0 to 2048
[  121.134646][ T7172] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  121.226110][   T62] gspca_sunplus: reg_w_riv err -110
[  121.229228][   T62] sunplus 3-1:0.0: probe with driver sunplus failed with error -110
[  121.236692][ T7158] input: syz1 as /devices/virtual/input/input14
[  121.268681][   T10] ath6kl: Failed to submit usb control message: -71
[  121.270707][   T10] ath6kl: unable to send the bmi data to the device: -71
[  121.275302][   T10] ath6kl: Unable to send get target info: -71
[  121.283095][   T10] ath6kl: Failed to init ath6kl core: -71
[  121.289665][   T10] ath6kl_usb 5-1:0.239: probe with driver ath6kl_usb failed with error -71
[  121.305831][   T10] usb 5-1: USB disconnect, device number 12
[  121.569371][ T1274] usb 3-1: USB disconnect, device number 11
[  121.589360][ T5846] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.842258][   T10] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  121.935206][ T7197] loop2: detected capacity change from 0 to 32768
[  121.944836][ T7197] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.345 (7197)
[  121.954349][ T7197] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  121.957470][ T7197] BTRFS info (device loop2): using blake2b (blake2b-256-lib) checksum algorithm
[  121.960425][ T7197] BTRFS error (device loop2): superblock checksum mismatch
[  121.963334][ T7197] BTRFS error (device loop2): open_ctree failed: -22
[  122.017238][   T10] usb 2-1: Using ep0 maxpacket: 8
[  122.033856][   T10] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  122.036828][   T10] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  122.040113][   T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  122.051632][   T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  122.055753][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.071482][   T10] usb 2-1: Product:  
[  122.073226][   T10] usb 2-1: Manufacturer: 뭥㭊䏣腖淛㎥ᾃ拱囁搎텹浺畘䬲복ᓾ蓬⻴鈵㋸敇뭓鏮⌧춼鿊埵ᦧ픭鍿̶暻灴戜ꀐ⇍瀳∭訏￟᳥⤣볾햱怒獒䧃⡣㑒㫖꽣瞳氵軐賴뮩愼阼逌॒훡꧂떘黎ᑦϧ幩纮ꊴ㨍㝐ꪝ䜯ቔ瞃氀苡쩉ƃ⅛嚮貃쾐ڀ
[  122.103677][   T10] usb 2-1: SerialNumber: ѕ
[  122.124678][ T7204] xt_CT: No such helper "snmp_trap"
[  122.243359][ T7212] netlink: 156 bytes leftover after parsing attributes in process `syz.4.349'.
[  122.249661][ T7212] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  122.547946][   T10] usb 2-1: 0:2 : does not exist
[  122.566510][   T10] usb 2-1: USB disconnect, device number 20
[  122.589373][ T5991] udevd[5991]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  122.850819][ T7222] loop2: detected capacity change from 0 to 2048
[  122.853890][   T62] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  122.868845][ T7223] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  123.021112][   T62] usb 5-1: Using ep0 maxpacket: 8
[  123.027447][   T62] usb 5-1: config 0 has an invalid interface number: 239 but max is 0
[  123.030446][   T62] usb 5-1: config 0 has no interface number 0
[  123.033358][   T62] usb 5-1: config 0 interface 239 altsetting 0 has an endpoint descriptor with address 0x64, changing to 0x4
[  123.038177][   T62] usb 5-1: config 0 interface 239 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 8
[  123.045426][   T62] usb 5-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a
[  123.049222][   T62] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.052527][   T62] usb 5-1: Product: syz
[  123.054469][   T62] usb 5-1: Manufacturer: syz
[  123.056319][   T62] usb 5-1: SerialNumber: syz
[  123.060844][   T62] usb 5-1: config 0 descriptor??
[  123.065185][ T7220] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  123.171131][   T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  123.287480][ T7220] input: syz1 as /devices/virtual/input/input15
[  123.319064][ T7228] loop1: detected capacity change from 0 to 32768
[  123.323233][   T62] ath6kl: Failed to submit usb control message: -71
[  123.325914][   T62] ath6kl: unable to send the bmi data to the device: -71
[  123.338248][ T7228] (syz.1.355,7228,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  123.338933][   T62] ath6kl: Unable to send get target info: -71
[  123.346563][   T10] usb 3-1: Using ep0 maxpacket: 32
[  123.346590][ T7228] (syz.1.355,7228,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  123.365914][   T62] ath6kl: Failed to init ath6kl core: -71
[  123.369242][   T10] usb 3-1: config 232 has an invalid interface number: 126 but max is 0
[  123.376622][   T62] ath6kl_usb 5-1:0.239: probe with driver ath6kl_usb failed with error -71
[  123.382756][   T10] usb 3-1: config 232 has no interface number 0
[  123.385175][   T10] usb 3-1: config 232 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023
[  123.398539][   T62] usb 5-1: USB disconnect, device number 13
[  123.400196][ T7228] JBD2: Ignoring recovery information on journal
[  123.401104][   T10] usb 3-1: config 232 interface 126 altsetting 16 endpoint 0x82 has invalid wMaxPacketSize 0
[  123.410674][   T10] usb 3-1: config 232 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 0
[  123.415931][   T10] usb 3-1: config 232 interface 126 has no altsetting 0
[  123.421660][   T10] usb 3-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c
[  123.426753][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.433849][   T10] usb 3-1: Product: syz
[  123.435089][   T10] usb 3-1: Manufacturer: syz
[  123.436458][   T10] usb 3-1: SerialNumber: syz
[  123.443858][ T7228] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  123.444651][ T7225] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  123.449705][ T7228] (syz.1.355,7228,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x78b62c9b, computed 0xc30516c1. Applying ECC.
[  123.455175][ T7228] (syz.1.355,7228,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x78b62c9b, computed 0xd377cde9
[  123.460115][ T7228] (syz.1.355,7228,1):ocfs2_read_virt_blocks:1037 ERROR: status = -5
[  123.466309][ T7228] (syz.1.355,7228,1):ocfs2_read_quota_block:150 ERROR: status = -5
[  123.471090][ T7228] (syz.1.355,7228,1):ocfs2_local_check_quota_file:209 ERROR: status = -5
[  123.474271][ T7228] (syz.1.355,7228,1):ocfs2_local_check_quota_file:211 ERROR: failed to read global quota file header (type=0)
[  123.478387][ T7228] (syz.1.355,7228,1):ocfs2_enable_quotas:943 ERROR: status = -22
[  123.484609][ T7228] (syz.1.355,7228,1):ocfs2_fill_super:1144 ERROR: status = -22
[  123.513516][ T7228] ocfs2: Unmounting device (7,1) on (node local)
[  123.619280][ T7228] netlink: 56 bytes leftover after parsing attributes in process `syz.1.355'.
[  123.811822][ T7232] loop1: detected capacity change from 0 to 32768
[  123.816013][ T7232] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.356 (7232)
[  123.823824][ T7232] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  123.828097][ T7232] BTRFS info (device loop1): using blake2b (blake2b-256-lib) checksum algorithm
[  123.832225][ T7232] BTRFS error (device loop1): superblock checksum mismatch
[  123.835495][ T7232] BTRFS error (device loop1): open_ctree failed: -22
[  123.864826][ T7225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  123.867744][ T7225] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  123.882540][   T10] ir_usb 3-1:232.126: IR Dongle converter detected
[  124.093994][   T10] usb 3-1: IR Dongle converter now attached to ttyUSB0
[  124.430326][   T10] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  124.470488][ T1274] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  124.571386][   T10] usb 2-1: device descriptor read/64, error -71
[  124.621853][ T1274] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  124.625232][ T1274] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  124.628357][ T1274] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00
[  124.631385][ T1274] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.635551][ T1274] usb 5-1: config 0 descriptor??
[  124.810318][   T10] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  124.941015][   T10] usb 2-1: device descriptor read/64, error -71
[  125.044198][ T1274] hid-picolcd 0003:04D8:C002.0002: item fetching failed at offset 5/7
[  125.047002][ T1274] hid-picolcd 0003:04D8:C002.0002: device report parse failed
[  125.049411][ T1274] hid-picolcd 0003:04D8:C002.0002: probe with driver hid-picolcd failed with error -22
[  125.051168][   T10] usb usb2-port1: attempt power cycle
[  125.246463][ T1274] usb 5-1: USB disconnect, device number 14
[  125.389888][   T10] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  125.410745][   T10] usb 2-1: device descriptor read/8, error -71
[  125.649792][   T10] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  125.670234][   T10] usb 2-1: device descriptor read/8, error -71
[  125.780303][   T10] usb usb2-port1: unable to enumerate USB device
[  126.035870][   T10] usb 3-1: USB disconnect, device number 12
[  126.073738][   T10] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0
[  126.080156][   T10] ir_usb 3-1:232.126: device disconnected
[  126.152359][ T7260] mmap: syz.2.366 (7260): VmData 37593088 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data.
[  126.373545][ T7265] loop2: detected capacity change from 0 to 32768
[  126.376867][ T7265] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.368 (7265)
[  126.387182][ T7265] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  126.390764][ T7265] BTRFS info (device loop2): using blake2b (blake2b-256-lib) checksum algorithm
[  126.393532][ T7265] BTRFS error (device loop2): superblock checksum mismatch
[  126.395730][ T7265] BTRFS error (device loop2): open_ctree failed: -22
[  126.789165][ T7282] TCP: TCP_TX_DELAY enabled
[  127.125268][ T7284] loop4: detected capacity change from 0 to 32768
[  127.139847][ T7284] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.374 (7284)
[  127.161745][ T7284] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  127.177286][ T7284] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm
[  127.182089][ T7284] BTRFS error (device loop4): superblock checksum mismatch
[  127.185281][ T7284] BTRFS error (device loop4): open_ctree failed: -22
[  127.294401][ T7290] loop1: detected capacity change from 0 to 1024
[  127.355434][ T7293] tmpfs: Bad value for 'mpol'
[  127.390649][ T7290] hfsplus: xattr searching failed
[  127.525673][ T1100] hfsplus: b-tree write err: -5, ino 3
[  127.697407][ T7308] loop1: detected capacity change from 0 to 1024
[  127.711068][ T7308] EXT4-fs: Ignoring removed nomblk_io_submit option
[  127.752122][ T7308] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  128.006828][ T7315] netlink: 20 bytes leftover after parsing attributes in process `syz.2.382'.
[  128.068808][ T5848] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.099735][ T1274] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  128.249673][ T1274] usb 5-1: Using ep0 maxpacket: 8
[  128.262122][ T1274] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  128.265804][ T1274] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.269106][ T1274] usb 5-1: Product: syz
[  128.336781][ T7326] loop2: detected capacity change from 0 to 32768
[  128.340238][ T7326] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.386 (7326)
[  128.349433][ T1274] usb 5-1: Manufacturer: syz
[  128.353551][ T7326] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  128.360680][ T1274] usb 5-1: SerialNumber: syz
[  128.362608][ T7326] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  128.366327][ T1274] usb 5-1: config 0 descriptor??
[  128.519459][ T7326] BTRFS info (device loop2): enabling ssd optimizations
[  128.522395][ T7326] BTRFS info (device loop2): turning on async discard
[  128.525068][ T7326] BTRFS info (device loop2): enabling free space tree
[  128.584215][ T1274] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  128.711165][ T5846] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  129.000988][ T1274] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  129.013721][ T1274] usb 5-1: USB disconnect, device number 15
[  129.095949][ T7352] loop2: detected capacity change from 0 to 32768
[  129.103055][ T7352] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.390 (7352)
[  129.115686][ T7352] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  129.129598][ T7352] BTRFS info (device loop2): using blake2b (blake2b-256-lib) checksum algorithm
[  129.132893][ T7352] BTRFS error (device loop2): superblock checksum mismatch
[  129.135495][ T7352] BTRFS error (device loop2): open_ctree failed: -22
[  129.209324][ T7356] netlink: 20 bytes leftover after parsing attributes in process `syz.2.391'.
[  129.482142][ T7358] loop1: detected capacity change from 0 to 32768
[  129.495738][ T7358] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.393 (7358)
[  129.521343][ T7358] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  129.524904][ T7358] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  129.527955][ T7358] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  129.620053][ T7358] BTRFS info (device loop1): rebuilding free space tree
[  129.652744][ T7358] BTRFS info (device loop1): disabling free space tree
[  129.655507][ T7358] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  129.659262][ T7358] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  129.673116][ T7358] BTRFS info (device loop1): enabling ssd optimizations
[  129.675845][ T7358] BTRFS info (device loop1): turning on async discard
[  129.678446][ T7358] BTRFS info (device loop1): enabling disk space caching
[  129.681374][ T7358] BTRFS info (device loop1): force clearing of disk cache
[  129.686236][ T7358] BTRFS info (device loop1): enabling auto defrag
[  129.688748][ T7358] BTRFS info (device loop1): force zlib compression, level 3
[  130.085322][ T5848] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  130.384591][ T7409] netlink: 20 bytes leftover after parsing attributes in process `syz.1.401'.
[  130.453130][ T7407] loop2: detected capacity change from 0 to 32768
[  130.456952][ T7407] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.402 (7407)
[  130.465693][ T7407] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  130.469715][ T7407] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  130.520563][ T7407] BTRFS info (device loop2): enabling ssd optimizations
[  130.523247][ T7407] BTRFS info (device loop2): turning on async discard
[  130.525936][ T7407] BTRFS info (device loop2): enabling free space tree
[  130.584518][ T5846] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  130.818480][ T7432] xt_CT: No such helper "snmp_trap"
[  130.841757][ T7429] loop1: detected capacity change from 0 to 512
[  130.845639][ T7429] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  130.848899][ T7429] EXT4-fs error (device loop1): ext4_get_journal_inode:5849: comm syz.1.405: inode #1792: comm syz.1.405: iget: illegal inode #
[  130.858954][ T7429] EXT4-fs (loop1): Remounting filesystem read-only
[  130.864343][ T7429] EXT4-fs (loop1): no journal found
[  130.868333][ T7429] EXT4-fs (loop1): can't get journal size
[  130.887082][ T7429] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended
[  130.896434][ T7429] EXT4-fs (loop1): Errors on filesystem, clearing orphan list.
[  130.903247][ T7429] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  130.949772][ T5919] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  131.099615][ T5919] usb 3-1: Using ep0 maxpacket: 8
[  131.104690][ T5919] usb 3-1: config 0 has an invalid interface number: 239 but max is 0
[  131.109668][ T5919] usb 3-1: config 0 has no interface number 0
[  131.116068][ T5919] usb 3-1: config 0 interface 239 altsetting 0 has an endpoint descriptor with address 0x64, changing to 0x4
[  131.128344][ T5919] usb 3-1: config 0 interface 239 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 8
[  131.136003][ T5919] usb 3-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a
[  131.142084][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.146710][ T5919] usb 3-1: Product: syz
[  131.148698][ T5919] usb 3-1: Manufacturer: syz
[  131.152243][ T5919] usb 3-1: SerialNumber: syz
[  131.160143][ T5919] usb 3-1: config 0 descriptor??
[  131.164495][ T7431] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  131.281166][ T7440] loop4: detected capacity change from 0 to 64
[  131.285280][ T7440] minix: Unknown parameter 'wlan1'
[  131.299199][ T7440] netlink: 8 bytes leftover after parsing attributes in process `syz.4.407'.
[  131.352782][ T5848] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.391245][ T7431] input: syz1 as /devices/virtual/input/input16
[  131.460870][ T5919] ath6kl: Failed to submit usb control message: -71
[  131.468375][ T5919] ath6kl: unable to send the bmi data to the device: -71
[  131.474018][ T5919] ath6kl: Unable to send get target info: -71
[  131.487260][ T5919] ath6kl: Failed to init ath6kl core: -71
[  131.491042][ T7447] netlink: 20 bytes leftover after parsing attributes in process `syz.1.409'.
[  131.501656][ T5919] ath6kl_usb 3-1:0.239: probe with driver ath6kl_usb failed with error -71
[  131.522674][ T5919] usb 3-1: USB disconnect, device number 13
[  131.763256][ T7456] loop1: detected capacity change from 0 to 128
[  131.795818][   T34] audit: type=1800 audit(1770161422.525:6): pid=7456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.412" name="bus" dev="loop1" ino=1048611 res=0 errno=0
[  132.070129][   T34] audit: type=1326 audit(1770161422.805:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7462 comm="syz.4.416" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f87f9acb9 code=0x7ffc0000
[  132.089730][   T34] audit: type=1326 audit(1770161422.805:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7462 comm="syz.4.416" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f87f9acb9 code=0x7ffc0000
[  132.102215][   T34] audit: type=1326 audit(1770161422.825:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7462 comm="syz.4.416" exe="/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f7f87f9acb9 code=0x7ffc0000
[  132.117791][   T34] audit: type=1326 audit(1770161422.825:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7462 comm="syz.4.416" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f87f9acb9 code=0x7ffc0000
[  132.135142][   T34] audit: type=1326 audit(1770161422.825:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7462 comm="syz.4.416" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f87f9acb9 code=0x7ffc0000
[  132.293732][   T34] audit: type=1326 audit(1770161422.825:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7462 comm="syz.4.416" exe="/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f7f87f9acb9 code=0x7ffc0000
[  132.310680][   T34] audit: type=1326 audit(1770161422.825:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7462 comm="syz.4.416" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f87f9acb9 code=0x7ffc0000
[  132.317635][   T34] audit: type=1326 audit(1770161422.825:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7462 comm="syz.4.416" exe="/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f7f87f9acb9 code=0x7ffc0000
[  132.328828][   T34] audit: type=1326 audit(1770161422.825:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7462 comm="syz.4.416" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f87f9acb9 code=0x7ffc0000
[  132.509773][ T7470] loop4: detected capacity change from 0 to 128
[  132.527543][ T7470] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  132.560778][ T7470] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  133.312061][ T7482] netlink: 540 bytes leftover after parsing attributes in process `syz.4.421'.
[  133.722154][ T7489] netlink: 28 bytes leftover after parsing attributes in process `syz.4.424'.
[  133.725585][ T7489] netlink: 28 bytes leftover after parsing attributes in process `syz.4.424'.
[  133.842438][ T7493] netlink: 'syz.4.426': attribute type 15 has an invalid length.
[  133.844750][ T7493] netlink: 25 bytes leftover after parsing attributes in process `syz.4.426'.
[  134.015732][ T7496] loop2: detected capacity change from 0 to 128
[  134.022472][ T7496] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  134.029813][ T7496] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  134.170327][ T7504] fuse: Unknown parameter 'group]id'
[  134.391986][ T7503] loop2: detected capacity change from 0 to 32768
[  134.401246][ T7503] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.430 (7503)
[  134.422842][ T7503] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  134.435687][ T7503] BTRFS info (device loop2): using blake2b (blake2b-256-lib) checksum algorithm
[  134.438727][ T7503] BTRFS error (device loop2): superblock checksum mismatch
[  134.446129][ T7503] BTRFS error (device loop2): open_ctree failed: -22
[  134.875030][ T7533] netlink: 20 bytes leftover after parsing attributes in process `syz.1.436'.
[  134.902904][ T7535] random: crng reseeded on system resumption
[  134.949791][ T7535] loop2: detected capacity change from 0 to 2048
[  134.957221][ T7535] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  134.966724][ T5991] udevd[5991]: incorrect nilfs2 checksum on /dev/loop2
[  134.969455][ T7535] NILFS (loop2): mounting unchecked fs
[  134.994314][ T5991] udevd[5991]: incorrect nilfs2 checksum on /dev/loop2
[  135.004363][ T7535] NILFS (loop2): recovery complete
[  135.009361][ T7538] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  135.318281][ T7554] netlink: 24 bytes leftover after parsing attributes in process `syz.4.443'.
[  135.328334][ T7554] netlink: 8 bytes leftover after parsing attributes in process `syz.4.443'.
[  135.429446][ T7545] loop2: detected capacity change from 0 to 32768
[  135.431435][ T7558] netlink: 20 bytes leftover after parsing attributes in process `syz.4.445'.
[  135.438096][ T7545] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.440 (7545)
[  135.467076][ T7545] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  135.477730][ T7545] BTRFS info (device loop2): using blake2b (blake2b-256-lib) checksum algorithm
[  135.481119][ T7545] BTRFS error (device loop2): superblock checksum mismatch
[  135.484217][ T7545] BTRFS error (device loop2): open_ctree failed: -22
[  135.525435][ T7561] loop4: detected capacity change from 0 to 2048
[  135.727553][ T7567] loop1: detected capacity change from 0 to 512
[  135.750674][ T7567] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  135.757082][ T7567] ext4 filesystem being mounted at /138/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  135.761624][ T7576] netlink: 'syz.4.449': attribute type 23 has an invalid length.
[  135.764034][ T7576] netlink: 8 bytes leftover after parsing attributes in process `syz.4.449'.
[  135.879645][   T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  136.721215][ T5848] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.991494][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  137.001093][   T10] usb 3-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00
[  137.003847][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.041561][   T10] usb 3-1: config 0 descriptor??
[  137.063771][   T10] usbhid 3-1:0.0: fixing wrong optional hid class descriptors count
[  137.216001][ T7590] IPVS: wlc: FWM 3 0x00000003 - no destination available
[  137.234266][   T33] IPVS: starting estimator thread 0...
[  137.341604][ T7592] IPVS: using max 65 ests per chain, 156000 per kthread
[  137.619303][   T10] usbhid 3-1:0.0: can't add hid device: -71
[  137.622850][   T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  137.628474][   T10] usb 3-1: USB disconnect, device number 14
[  137.973528][ T7598] loop2: detected capacity change from 0 to 4096
[  137.980756][ T7598] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[  137.999938][ T7598] ntfs3(loop2): Failed to load $Extend (-22).
[  138.002077][ T7598] ntfs3(loop2): Failed to initialize $Extend.
[  138.057148][ T7604] netlink: 20 bytes leftover after parsing attributes in process `syz.1.458'.
[  138.164608][ T7609] Bluetooth: MGMT ver 1.23
[  138.303088][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  138.305580][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  138.439609][ T1274] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  138.569661][ T1274] usb 3-1: device descriptor read/64, error -71
[  138.680980][ T5919] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  138.809692][ T1274] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  138.831909][ T5919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  138.836292][ T5919] usb 2-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00
[  138.840084][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.845863][ T5919] usb 2-1: config 0 descriptor??
[  138.852634][ T5919] usbhid 2-1:0.0: fixing wrong optional hid class descriptors count
[  138.889739][   T33] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  138.939687][ T1274] usb 3-1: device descriptor read/64, error -71
[  139.039633][   T33] usb 5-1: Using ep0 maxpacket: 8
[  139.044602][   T33] usb 5-1: config 0 has an invalid interface number: 239 but max is 0
[  139.047082][   T33] usb 5-1: config 0 has no interface number 0
[  139.048934][   T33] usb 5-1: config 0 interface 239 altsetting 0 has an endpoint descriptor with address 0x64, changing to 0x4
[  139.054493][ T1274] usb usb3-port1: attempt power cycle
[  139.057363][ T5919] usbhid 2-1:0.0: can't add hid device: -71
[  139.059280][ T5919] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  139.064812][   T33] usb 5-1: config 0 interface 239 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 8
[  139.070618][ T5919] usb 2-1: USB disconnect, device number 25
[  139.075052][   T33] usb 5-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a
[  139.077946][   T33] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.082547][   T33] usb 5-1: Product: syz
[  139.083860][   T33] usb 5-1: Manufacturer: syz
[  139.085252][   T33] usb 5-1: SerialNumber: syz
[  139.088081][   T33] usb 5-1: config 0 descriptor??
[  139.092969][ T7617] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  139.303074][ T7617] input: syz1 as /devices/virtual/input/input17
[  139.318126][   T33] ath6kl: Failed to submit usb control message: -71
[  139.320902][   T33] ath6kl: unable to send the bmi data to the device: -71
[  139.323650][   T33] ath6kl: Unable to send get target info: -71
[  139.332591][   T33] ath6kl: Failed to init ath6kl core: -71
[  139.335663][   T33] ath6kl_usb 5-1:0.239: probe with driver ath6kl_usb failed with error -71
[  139.343144][   T33] usb 5-1: USB disconnect, device number 16
[  139.399822][ T1274] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  139.420666][ T1274] usb 3-1: device descriptor read/8, error -71
[  139.668684][ T1274] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  139.690127][ T1274] usb 3-1: device descriptor read/8, error -71
[  139.738653][ T7620] loop1: detected capacity change from 0 to 32768
[  139.751020][ T7620] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.464 (7620)
[  139.772830][ T7620] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  139.777187][ T7620] BTRFS info (device loop1): using blake2b (blake2b-256-lib) checksum algorithm
[  139.781101][ T7620] BTRFS error (device loop1): superblock checksum mismatch
[  139.784075][ T7620] BTRFS error (device loop1): open_ctree failed: -22
[  139.809854][ T1274] usb usb3-port1: unable to enumerate USB device
[  140.012077][ T7629] netlink: 48 bytes leftover after parsing attributes in process `syz.4.467'.
[  140.276096][ T7641] loop1: detected capacity change from 0 to 512
[  140.386044][ T7647] netlink: 16 bytes leftover after parsing attributes in process `syz.1.475'.
[  140.389268][ T7647] netlink: 12 bytes leftover after parsing attributes in process `syz.1.475'.
[  140.396074][ T7647] netlink: 12 bytes leftover after parsing attributes in process `syz.1.475'.
[  140.514174][ T7645] loop4: detected capacity change from 0 to 32768
[  140.520681][ T7645] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.474 (7645)
[  140.548054][ T7645] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  140.552321][ T7645] BTRFS info (device loop4): using blake2b (blake2b-256-lib) checksum algorithm
[  140.555360][ T7645] BTRFS error (device loop4): superblock checksum mismatch
[  140.557747][ T7645] BTRFS error (device loop4): open_ctree failed: -22
[  141.167608][ T7660] loop1: detected capacity change from 0 to 128
[  141.173383][ T7660] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  141.179217][ T7660] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  141.518580][ T7669] netlink: 16 bytes leftover after parsing attributes in process `syz.1.486'.
[  141.657468][ T7670] comedi comedi4: bad chanlist[0]=0x00000055 chan=85 range length=2
[  141.755950][ T7673] netlink: 16 bytes leftover after parsing attributes in process `syz.4.482'.
[  142.697243][ T7690] xt_CT: No such helper "snmp_trap"
[  142.711865][ T7690] loop2: detected capacity change from 0 to 512
[  142.715150][ T7690] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  142.718524][ T7690] EXT4-fs error (device loop2): ext4_get_journal_inode:5849: comm syz.2.488: inode #1792: comm syz.2.488: iget: illegal inode #
[  142.727518][ T7690] EXT4-fs (loop2): Remounting filesystem read-only
[  142.730228][ T7690] EXT4-fs (loop2): no journal found
[  142.732090][ T7690] EXT4-fs (loop2): can't get journal size
[  142.750389][ T7690] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended
[  142.756689][ T7690] EXT4-fs (loop2): Errors on filesystem, clearing orphan list.
[  142.764027][ T7690] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  142.939595][    T9] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  142.986245][ T7699] loop4: detected capacity change from 0 to 32768
[  142.992483][ T7699] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.491 (7699)
[  143.018966][ T7699] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  143.025673][ T7699] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm
[  143.030091][ T7699] BTRFS error (device loop4): superblock checksum mismatch
[  143.032875][ T5846] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.036818][ T7699] BTRFS error (device loop4): open_ctree failed: -22
[  143.122143][    T9] usb 2-1: Using ep0 maxpacket: 8
[  143.127751][    T9] usb 2-1: config 0 has an invalid interface number: 78 but max is 0
[  143.133921][    T9] usb 2-1: config 0 has no interface number 0
[  143.141883][    T9] usb 2-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=f0.21
[  143.151013][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.169593][    T9] usb 2-1: Product: syz
[  143.171243][    T9] usb 2-1: Manufacturer: syz
[  143.173179][    T9] usb 2-1: SerialNumber: syz
[  143.177558][    T9] usb 2-1: config 0 descriptor??
[  143.200245][ T7702] loop2: detected capacity change from 0 to 164
[  143.251029][ T7702] Unable to read rock-ridge attributes
[  143.376153][ T7708] loop4: detected capacity change from 0 to 32768
[  143.379273][ T7708] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.494 (7708)
[  143.399178][ T7708] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  143.402303][    T9] usbhid 2-1:0.78: couldn't find an input interrupt endpoint
[  143.403248][ T7708] BTRFS info (device loop4): using blake2b (blake2b-256-lib) checksum algorithm
[  143.414320][ T7708] BTRFS error (device loop4): superblock checksum mismatch
[  143.416823][ T7708] BTRFS error (device loop4): open_ctree failed: -22
[  143.432393][    T9] usb 2-1: USB disconnect, device number 26
[  143.490272][ T7712] netlink: 'syz.2.495': attribute type 4 has an invalid length.
[  143.541808][ T7712] netlink: 'syz.2.495': attribute type 4 has an invalid length.
[  144.115931][ T7732] loop1: detected capacity change from 0 to 8192
[  144.377265][ T7741] loop4: detected capacity change from 0 to 32768
[  144.393847][ T7741] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.504 (7741)
[  144.961140][ T7741] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  144.971194][ T7741] BTRFS info (device loop4): using blake2b (blake2b-256-lib) checksum algorithm
[  144.974651][ T7741] BTRFS error (device loop4): superblock checksum mismatch
[  144.986099][ T7741] BTRFS error (device loop4): open_ctree failed: -22
[  145.275347][ T7749] xt_CT: No such helper "snmp_trap"
[  145.298292][ T7749] loop1: detected capacity change from 0 to 512
[  145.306761][ T7749] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  145.320152][ T7754] netlink: 32 bytes leftover after parsing attributes in process `syz.4.509'.
[  145.325420][ T7749] EXT4-fs error (device loop1): ext4_get_journal_inode:5849: comm syz.1.507: inode #1792: comm syz.1.507: iget: illegal inode #
[  145.344593][ T7749] EXT4-fs (loop1): Remounting filesystem read-only
[  145.347566][ T7749] EXT4-fs (loop1): no journal found
[  145.351975][ T7749] EXT4-fs (loop1): can't get journal size
[  145.358296][ T7749] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended
[  145.363499][ T7749] EXT4-fs (loop1): Errors on filesystem, clearing orphan list.
[  145.368127][ T7749] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  145.442207][ T7761] loop4: detected capacity change from 0 to 128
[  145.445628][ T7761] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  145.450040][ T7761] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  145.664553][ T5848] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  145.811167][   T62] hid-generic 0006:79D90A04:10000.0003: item fetching failed at offset 0/1
[  145.815508][   T62] hid-generic 0006:79D90A04:10000.0003: probe with driver hid-generic failed with error -22
[  146.232229][   T62] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  146.312105][ T7794] xt_CT: No such helper "snmp_trap"
[  146.331166][ T7794] loop2: detected capacity change from 0 to 512
[  146.336117][ T7794] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  146.339380][ T7794] EXT4-fs error (device loop2): ext4_get_journal_inode:5849: comm syz.2.521: inode #1792: comm syz.2.521: iget: illegal inode #
[  146.349934][ T7794] EXT4-fs (loop2): Remounting filesystem read-only
[  146.352609][ T7794] EXT4-fs (loop2): no journal found
[  146.354772][ T7794] EXT4-fs (loop2): can't get journal size
[  146.378026][ T7794] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended
[  146.382834][ T7794] EXT4-fs (loop2): Errors on filesystem, clearing orphan list.
[  146.387379][ T7794] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  146.391829][   T62] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  146.397599][   T62] usb 5-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00
[  146.406877][   T62] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.430989][   T62] usb 5-1: config 0 descriptor??
[  146.446680][   T62] usbhid 5-1:0.0: fixing wrong optional hid class descriptors count
[  146.588902][ T5846] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.650481][   T62] usbhid 5-1:0.0: can't add hid device: -71
[  146.656222][   T62] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  146.663528][   T62] usb 5-1: USB disconnect, device number 17
[  147.039719][ T1274] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  147.084569][ T7823] netlink: 'syz.1.528': attribute type 1 has an invalid length.
[  147.212570][ T1274] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  147.215626][ T1274] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  147.218944][ T1274] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  147.232540][ T1274] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  147.235232][ T1274] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  147.247312][ T1274] usb 3-1: config 0 descriptor??
[  147.281404][ T7828] xt_CT: No such helper "snmp_trap"
[  147.299895][ T7828] loop4: detected capacity change from 0 to 512
[  147.315912][ T7828] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  147.327399][ T7828] EXT4-fs error (device loop4): ext4_get_journal_inode:5849: comm syz.4.529: inode #1792: comm syz.4.529: iget: illegal inode #
[  147.352500][ T7828] EXT4-fs (loop4): Remounting filesystem read-only
[  147.355177][ T7828] EXT4-fs (loop4): no journal found
[  147.357184][ T7828] EXT4-fs (loop4): can't get journal size
[  147.372787][ T7828] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended
[  147.377364][ T7828] EXT4-fs (loop4): Errors on filesystem, clearing orphan list.
[  147.383550][ T7828] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  147.454835][ T7811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  147.479998][ T7811] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  147.491239][ T7811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  147.500631][ T7811] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  147.508378][ T7811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  147.519278][ T7811] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  147.529148][ T7811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  147.535223][ T7811] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  147.540595][ T7811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  147.544708][ T7811] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  147.572221][ T1274] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  147.600028][    T9] usb 2-1: new full-speed USB device number 27 using dummy_hcd
[  147.612573][ T6273] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.701923][ T7840] 8021q: VLANs not supported on ip6_vti0
[  147.739884][    T9] usb 2-1: device descriptor read/64, error -71
[  147.918603][ T7844] loop4: detected capacity change from 0 to 32768
[  147.921910][ T7844] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.533 (7844)
[  147.929204][ T7844] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  147.932551][ T7844] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  147.946482][   T62] usb 3-1: USB disconnect, device number 19
[  148.001434][ T7844] BTRFS info (device loop4): enabling ssd optimizations
[  148.003985][ T7844] BTRFS info (device loop4): turning on async discard
[  148.005940][    T9] usb 2-1: new full-speed USB device number 28 using dummy_hcd
[  148.006507][ T7844] BTRFS info (device loop4): enabling free space tree
[  148.150972][    T9] usb 2-1: device descriptor read/64, error -71
[  148.260173][    T9] usb usb2-port1: attempt power cycle
[  148.290235][   T62] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  148.419715][   T62] usb 5-1: device descriptor read/64, error -71
[  148.600619][    T9] usb 2-1: new full-speed USB device number 29 using dummy_hcd
[  148.630725][    T9] usb 2-1: device descriptor read/8, error -71
[  148.659721][   T62] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  148.789620][   T62] usb 5-1: device descriptor read/64, error -71
[  148.842468][ T7868] loop2: detected capacity change from 0 to 128
[  148.850928][ T7868] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  148.856219][ T7868] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  148.879814][    T9] usb 2-1: new full-speed USB device number 30 using dummy_hcd
[  148.901064][    T9] usb 2-1: device descriptor read/8, error -71
[  148.903704][   T62] usb usb5-port1: attempt power cycle
[  149.010243][    T9] usb usb2-port1: unable to enumerate USB device
[  149.145102][ T7870] loop2: detected capacity change from 0 to 32768
[  149.160206][ T7870] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.536 (7870)
[  149.175383][ T7870] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  149.180228][ T7870] BTRFS info (device loop2): using blake2b (blake2b-256-lib) checksum algorithm
[  149.183719][ T7870] BTRFS error (device loop2): superblock checksum mismatch
[  149.186493][ T7870] BTRFS error (device loop2): open_ctree failed: -22
[  149.250341][   T62] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  149.271312][   T62] usb 5-1: device descriptor read/8, error -71
[  149.328863][ T7875] xt_CT: No such helper "snmp_trap"
[  149.344578][ T7875] loop2: detected capacity change from 0 to 512
[  149.348682][ T7875] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  149.355610][ T7875] EXT4-fs error (device loop2): ext4_get_journal_inode:5849: comm syz.2.538: inode #1792: comm syz.2.538: iget: illegal inode #
[  149.361084][ T7875] EXT4-fs (loop2): Remounting filesystem read-only
[  149.363391][ T7875] EXT4-fs (loop2): no journal found
[  149.365230][ T7875] EXT4-fs (loop2): can't get journal size
[  149.379188][ T7875] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended
[  149.382706][ T7875] EXT4-fs (loop2): Errors on filesystem, clearing orphan list.
[  149.386417][ T7875] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  149.510531][   T62] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  149.530224][   T62] usb 5-1: device descriptor read/8, error -71
[  149.645878][   T62] usb usb5-port1: unable to enumerate USB device
[  149.656474][ T5846] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.688870][ T7880] netlink: 16 bytes leftover after parsing attributes in process `syz.2.539'.
[  149.717812][ T7882] input: syz1 as /devices/virtual/input/input19
[  150.196806][ T7888] efs: cannot read volume header
[  150.436584][ T7894] xt_CT: No such helper "snmp_trap"
[  150.451776][ T7894] loop2: detected capacity change from 0 to 512
[  150.455550][ T7894] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  150.458988][ T7894] EXT4-fs error (device loop2): ext4_get_journal_inode:5849: comm syz.2.545: inode #1792: comm syz.2.545: iget: illegal inode #
[  150.467292][ T7894] EXT4-fs (loop2): Remounting filesystem read-only
[  150.471015][ T7894] EXT4-fs (loop2): no journal found
[  150.472786][ T7894] EXT4-fs (loop2): can't get journal size
[  150.485509][ T7894] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended
[  150.490164][ T7894] EXT4-fs (loop2): Errors on filesystem, clearing orphan list.
[  150.494276][ T7894] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  150.593257][ T7901] netlink: 20 bytes leftover after parsing attributes in process `syz.1.546'.
[  150.659790][ T7903] input: syz1 as /devices/virtual/input/input20
[  150.706673][ T7905] loop1: detected capacity change from 0 to 128
[  150.722526][ T7905] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  150.726622][ T7905] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  150.727180][ T5846] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.745195][ T7905] capability: warning: `syz.1.548' uses 32-bit capabilities (legacy support in use)
[  150.811315][ T6273] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  151.107845][ T7917] netlink: 20 bytes leftover after parsing attributes in process `syz.1.553'.
[  151.179196][ T7922] input: syz1 as /devices/virtual/input/input21
[  151.406013][ T1274] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  151.408913][ T1274] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  151.414106][ T1274] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  151.416555][ T1274] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  151.419306][ T1274] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  151.432325][ T1274] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  151.437228][ T1274] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  151.442967][ T1274] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  151.447998][ T1274] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  151.451542][ T1274] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  151.460279][ T1274] hid-generic 0000:0000:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  151.490750][ T7934] loop2: detected capacity change from 0 to 128
[  151.498837][ T7934] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  151.507614][ T7934] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  151.539345][ T7936] loop4: detected capacity change from 0 to 128
[  151.551868][ T7936] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  151.555572][ T7936] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  151.779672][ T1274] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  152.005079][ T5919] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  152.019959][ T1274] usb 3-1: Using ep0 maxpacket: 16
[  152.025239][ T1274] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  152.028909][ T1274] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  152.033607][ T1274] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  152.037547][ T1274] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  152.041856][ T1274] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  152.048198][ T1274] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  152.052192][ T1274] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  152.055409][ T1274] usb 3-1: Manufacturer: syz
[  152.058697][ T1274] usb 3-1: config 0 descriptor??
[  152.065492][ T7944] overlayfs: missing 'workdir'
[  152.152768][ T5919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  152.156754][ T5919] usb 2-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00
[  152.160992][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.167183][ T5919] usb 2-1: config 0 descriptor??
[  152.172943][ T5919] usbhid 2-1:0.0: fixing wrong optional hid class descriptors count
[  152.320648][ T1274] rc_core: IR keymap rc-hauppauge not found
[  152.323082][ T1274] Registered IR keymap rc-empty
[  152.326320][ T1274] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  152.339884][ T1274] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  152.361661][ T1274] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  152.366986][ T1274] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input22
[  152.375015][ T1274] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  152.379226][ T7940] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  152.384686][ T7940] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[  152.387920][ T7940] overlayfs: missing 'lowerdir'
[  152.391853][ T1274] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  152.396368][ T7940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  152.401356][ T7940] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  152.409804][ T1274] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  152.429767][ T1274] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  152.449783][ T1274] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  152.469656][ T1274] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  152.472101][    C1] mceusb 3-1:0.0: long-range (0x61) receiver active
[  152.489650][ T1274] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  152.509683][ T1274] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  152.529763][ T1274] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  152.549790][ T1274] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  152.571285][ T1274] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  152.574639][ T1274] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x61 active)
[  152.722532][ T1274] usb 3-1: USB disconnect, device number 20
[  152.932036][ T5919] usbhid 2-1:0.0: can't add hid device: -71
[  152.933868][ T5919] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  152.949012][ T5919] usb 2-1: USB disconnect, device number 31
[  152.949320][ T7953] netlink: 20 bytes leftover after parsing attributes in process `syz.1.565'.
[  153.312124][ T7963] loop2: detected capacity change from 0 to 128
[  153.330822][ T7963] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  153.345851][ T7963] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  153.444242][ T7965] xt_CT: No such helper "snmp_trap"
[  153.451993][ T7968] loop1: detected capacity change from 0 to 512
[  153.469589][ T7968] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  153.477110][ T7968] EXT4-fs error (device loop1): ext4_get_journal_inode:5849: comm syz.1.569: inode #1792: comm syz.1.569: iget: illegal inode #
[  153.500427][ T7968] EXT4-fs (loop1): Remounting filesystem read-only
[  153.503053][ T7968] EXT4-fs (loop1): no journal found
[  153.505198][ T7968] EXT4-fs (loop1): can't get journal size
[  153.523800][ T7968] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended
[  153.531219][ T7968] EXT4-fs (loop1): Errors on filesystem, clearing orphan list.
[  153.538905][ T7968] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  153.578467][ T7979] netlink: 20 bytes leftover after parsing attributes in process `syz.2.573'.
[  153.624066][ T7981] netlink: 'syz.2.574': attribute type 1 has an invalid length.
[  153.627814][ T7981] netlink: 16 bytes leftover after parsing attributes in process `syz.2.574'.
[  153.634365][ T7981] loop2: detected capacity change from 0 to 128
[  153.646311][ T7981] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  153.664423][ T7981] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  153.772437][ T5848] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  153.786803][ T5916] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  153.886664][ T7987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.577'.
[  153.905898][ T7987] netlink: 48 bytes leftover after parsing attributes in process `syz.2.577'.
[  153.910826][ T7987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.577'.
[  153.914942][ T7987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.577'.
[  153.918668][ T7987] netlink: 48 bytes leftover after parsing attributes in process `syz.2.577'.
[  153.975357][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  153.979893][ T5916] usb 5-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00
[  153.989695][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.989837][ T7992] loop2: detected capacity change from 0 to 128
[  153.994974][ T5916] usb 5-1: config 0 descriptor??
[  154.004550][ T7992] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  154.014782][ T7992] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  154.023435][ T5916] usbhid 5-1:0.0: fixing wrong optional hid class descriptors count
[  154.171864][ T7985] loop1: detected capacity change from 0 to 32768
[  154.181792][ T7985] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.576 (7985)
[  154.211649][ T7985] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  154.217646][ T7985] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[  154.226097][ T5916] usbhid 5-1:0.0: can't add hid device: -71
[  154.228470][ T7985] BTRFS error (device loop1): superblock checksum mismatch
[  154.232222][ T7985] BTRFS error (device loop1): open_ctree failed: -22
[  154.235374][ T5916] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  154.251203][ T5916] usb 5-1: USB disconnect, device number 22
[  155.141287][ T8008] loop4: detected capacity change from 0 to 512
[  155.149738][ T8008] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  155.157675][ T8008] EXT4-fs error (device loop4): ext4_get_journal_inode:5849: comm syz.4.582: inode #1792: comm syz.4.582: iget: illegal inode #
[  155.171915][ T8008] EXT4-fs (loop4): Remounting filesystem read-only
[  155.172416][ T8006] xt_CT: No such helper "snmp_trap"
[  155.174298][ T8008] EXT4-fs (loop4): no journal found
[  155.177398][ T8008] EXT4-fs (loop4): can't get journal size
[  155.182826][ T8008] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended
[  155.186957][ T8008] EXT4-fs (loop4): Errors on filesystem, clearing orphan list.
[  155.192217][ T8008] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  155.684285][ T6273] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  155.707361][ T8015] loop2: detected capacity change from 0 to 128
[  155.741650][ T8015] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  155.757419][ T8015] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  155.808671][ T8019] input: syz1 as /devices/virtual/input/input23
[  155.906056][ T8013] loop1: detected capacity change from 0 to 32768
[  155.931516][ T8013] ERROR: (device loop1): diAllocAG: nfreeinos = 0, but iag on freelist
[  155.931516][ T8013] 
[  155.967476][ T8013] ERROR: (device loop1): remounting filesystem as read-only
[  155.975407][ T8013] ialloc: diAlloc returned -5!
[  156.408591][ T8032] xt_CT: No such helper "snmp_trap"
[  156.428549][ T8032] loop4: detected capacity change from 0 to 512
[  156.436065][ T8032] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  156.451100][ T8032] EXT4-fs error (device loop4): ext4_get_journal_inode:5849: comm syz.4.592: inode #1792: comm syz.4.592: iget: illegal inode #
[  156.457169][ T8032] EXT4-fs (loop4): Remounting filesystem read-only
[  156.460665][ T8032] EXT4-fs (loop4): no journal found
[  156.464805][ T8032] EXT4-fs (loop4): can't get journal size
[  156.479942][ T8032] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended
[  156.492620][ T8032] EXT4-fs (loop4): Errors on filesystem, clearing orphan list.
[  156.497039][ T8032] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  156.528127][ T8038] hpfs: hpfs_map_sector(): read error
[  156.980007][ T8044] input: syz1 as /devices/virtual/input/input25
[  157.146806][ T6273] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  157.395790][ T8047] loop1: detected capacity change from 0 to 32768
[  157.405674][ T8047] (syz.1.596,8047,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  157.427450][ T8047] (syz.1.596,8047,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  157.456582][ T8051] loop2: detected capacity change from 0 to 128
[  157.464075][ T8047] JBD2: Ignoring recovery information on journal
[  157.464765][ T8051] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  157.478724][ T8051] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  157.482286][ T5916] usb 5-1: new full-speed USB device number 23 using dummy_hcd
[  157.502179][ T8047] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  157.534584][ T8055] __nla_validate_parse: 192 callbacks suppressed
[  157.534600][ T8055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.599'.
[  157.558280][ T8046] 
[  157.559067][ T8046] ======================================================
[  157.561211][ T8046] WARNING: possible circular locking dependency detected
[  157.563378][ T8046] syzkaller #0 Tainted: G             L     
[  157.565600][ T8046] ------------------------------------------------------
[  157.567796][ T8046] syz.1.596/8046 is trying to acquire lock:
[  157.569586][ T8046] ffff88816e9e6610 (sb_internal#5){.+.+}-{0:0}, at: ocfs2_setattr+0xcc6/0x1c70
[  157.572195][ T8046] 
[  157.572195][ T8046] but task is already holding lock:
[  157.574449][ T8046] ffff8881b58cb1e0 (&oi->ip_alloc_sem){+.+.}-{4:4}, at: ocfs2_setattr+0xcb7/0x1c70
[  157.577314][ T8046] 
[  157.577314][ T8046] which lock already depends on the new lock.
[  157.577314][ T8046] 
[  157.580482][ T8046] 
[  157.580482][ T8046] the existing dependency chain (in reverse order) is:
[  157.583103][ T8046] 
[  157.583103][ T8046] -> #3 (&oi->ip_alloc_sem){+.+.}-{4:4}:
[  157.585384][ T8046]        down_write+0x96/0x200
[  157.586825][ T8046]        ocfs2_try_remove_refcount_tree+0xb6/0x340
[  157.588819][ T8046]        ocfs2_xattr_set+0x61a/0x13e0
[  157.590484][ T8046]        ocfs2_set_acl+0x701/0x7b0
[  157.592117][ T8046]        ocfs2_iop_set_acl+0x1b1/0x2b0
[  157.593820][ T8046]        vfs_remove_acl+0x482/0x6f0
[  157.595737][ T8046]        ovl_workdir_create+0x5b3/0x940
[  157.597636][ T8046]        ovl_fill_super+0x1a1e/0x5e60
[  157.599396][ T8046]        get_tree_nodev+0xbb/0x150
[  157.601022][ T8046]        vfs_get_tree+0x92/0x2a0
[  157.602827][ T8046]        do_new_mount+0x329/0xa50
[  157.604460][ T8046]        __se_sys_mount+0x31d/0x420
[  157.606088][ T8046]        do_syscall_64+0xe2/0xf80
[  157.607724][ T8046]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  157.609716][ T8046] 
[  157.609716][ T8046] -> #2 (&oi->ip_xattr_sem){++++}-{4:4}:
[  157.612084][ T8046]        down_read+0x47/0x2e0
[  157.613539][ T8046]        ocfs2_init_acl+0x2fd/0x7e0
[  157.615282][ T8046]        ocfs2_mknod+0x1423/0x2210
[  157.617167][ T8046]        ocfs2_mkdir+0x181/0x430
[  157.618844][ T8046]        vfs_mkdir+0x511/0x5b0
[  157.620251][ T8046]        do_mkdirat+0x27d/0x4b0
[  157.621912][ T8046]        __x64_sys_mkdir+0x6c/0x80
[  157.623571][ T8046]        do_syscall_64+0xe2/0xf80
[  157.625135][ T8046]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  157.627015][ T8046] 
[  157.627015][ T8046] -> #1 (&journal->j_trans_barrier){.+.+}-{4:4}:
[  157.629600][ T8046]        down_read+0x47/0x2e0
[  157.631095][ T8046]        ocfs2_start_trans+0x3ab/0x700
[  157.632708][ T8046]        ocfs2_shutdown_local_alloc+0x1fb/0xab0
[  157.634536][ T8046]        ocfs2_dismount_volume+0x1ec/0x8c0
[  157.636234][ T8046]        generic_shutdown_super+0x135/0x2c0
[  157.638029][ T8046]        kill_block_super+0x44/0x90
[  157.639636][ T8046]        deactivate_locked_super+0xbc/0x130
[  157.641427][ T8046]        get_tree_bdev_flags+0x44f/0x4f0
[  157.643084][ T8046]        vfs_get_tree+0x92/0x2a0
[  157.644549][ T8046]        do_new_mount+0x329/0xa50
[  157.646015][ T8046]        __se_sys_mount+0x31d/0x420
[  157.647560][ T8046]        do_syscall_64+0xe2/0xf80
[  157.649013][ T8046]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  157.650950][ T8046] 
[  157.650950][ T8046] -> #0 (sb_internal#5){.+.+}-{0:0}:
[  157.653137][ T8046]        __lock_acquire+0x15a5/0x2cf0
[  157.654833][ T8046]        lock_acquire+0x106/0x330
[  157.656456][ T8046]        ocfs2_start_trans+0x2ac/0x700
[  157.658158][ T8046]        ocfs2_setattr+0xcc6/0x1c70
[  157.659744][ T8046]        notify_change+0xc1a/0xf40
[  157.661224][ T8046]        ovl_workdir_create+0x716/0x940
[  157.662795][ T8046]        ovl_fill_super+0x1a1e/0x5e60
[  157.664346][ T8046]        get_tree_nodev+0xbb/0x150
[  157.665777][ T8046]        vfs_get_tree+0x92/0x2a0
[  157.667173][ T8046]        do_new_mount+0x329/0xa50
[  157.668770][ T8046]        __se_sys_mount+0x31d/0x420
[  157.670404][ T8046]        do_syscall_64+0xe2/0xf80
[  157.671995][ T8046]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  157.673974][ T8046] 
[  157.673974][ T8046] other info that might help us debug this:
[  157.673974][ T8046] 
[  157.677020][ T8046] Chain exists of:
[  157.677020][ T8046]   sb_internal#5 --> &oi->ip_xattr_sem --> &oi->ip_alloc_sem
[  157.677020][ T8046] 
[  157.680777][ T8046]  Possible unsafe locking scenario:
[  157.680777][ T8046] 
[  157.682921][ T8046]        CPU0                    CPU1
[  157.684571][ T8046]        ----                    ----
[  157.686174][ T8046]   lock(&oi->ip_alloc_sem);
[  157.687684][ T8046]                                lock(&oi->ip_xattr_sem);
[  157.689899][ T8046]                                lock(&oi->ip_alloc_sem);
[  157.692002][ T8046]   rlock(sb_internal#5);
[  157.693239][ T8046] 
[  157.693239][ T8046]  *** DEADLOCK ***
[  157.693239][ T8046] 
[  157.695491][ T8046] 4 locks held by syz.1.596/8046:
[  157.696918][ T8046]  #0: ffff88817321e0e0 (&type->s_umount_key#49/1){+.+.}-{4:4}, at: alloc_super+0x28c/0xaa0
[  157.699835][ T8046]  #1: ffff88816e9e6420 (sb_writers#28){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  157.702623][ T8046]  #2: ffff8881b58cb540 (&sb->s_type->i_mutex_key#41){+.+.}-{4:4}, at: ovl_workdir_create+0x6b7/0x940
[  157.706017][ T8046]  #3: ffff8881b58cb1e0 (&oi->ip_alloc_sem){+.+.}-{4:4}, at: ocfs2_setattr+0xcb7/0x1c70
[  157.709058][ T8046] 
[  157.709058][ T8046] stack backtrace:
[  157.710723][ T8046] CPU: 1 UID: 0 PID: 8046 Comm: syz.1.596 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  157.710736][ T8046] Tainted: [L]=SOFTLOCKUP
[  157.710740][ T8046] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  157.710746][ T8046] Call Trace:
[  157.710752][ T8046]  <TASK>
[  157.710757][ T8046]  dump_stack_lvl+0xe8/0x150
[  157.710771][ T8046]  print_circular_bug+0x2e1/0x300
[  157.710783][ T8046]  check_noncircular+0x12e/0x150
[  157.710794][ T8046]  __lock_acquire+0x15a5/0x2cf0
[  157.710802][ T8046]  ? lockdep_unlock+0x5d/0xd0
[  157.710814][ T8046]  ? ocfs2_setattr+0xcc6/0x1c70
[  157.710828][ T8046]  lock_acquire+0x106/0x330
[  157.710836][ T8046]  ? ocfs2_setattr+0xcc6/0x1c70
[  157.710849][ T8046]  ocfs2_start_trans+0x2ac/0x700
[  157.710857][ T8046]  ? ocfs2_setattr+0xcc6/0x1c70
[  157.710868][ T8046]  ? __pfx_ocfs2_start_trans+0x10/0x10
[  157.710876][ T8046]  ? setattr_prepare+0x1e6/0xac0
[  157.710886][ T8046]  ? do_raw_spin_unlock+0x4d/0x210
[  157.710896][ T8046]  ocfs2_setattr+0xcc6/0x1c70
[  157.710908][ T8046]  ? __pfx_ocfs2_setattr+0x10/0x10
[  157.710920][ T8046]  ? seqcount_lockdep_reader_access+0xa9/0x100
[  157.710932][ T8046]  ? lockdep_hardirqs_on+0x7a/0x110
[  157.710944][ T8046]  ? ktime_get_coarse_real_ts64_mg+0x59/0x1e0
[  157.710952][ T8046]  ? seqcount_lockdep_reader_access+0xea/0x100
[  157.710963][ T8046]  ? ktime_get_coarse_real_ts64_mg+0x1c5/0x1e0
[  157.710971][ T8046]  ? current_time+0x22a/0x370
[  157.710978][ T8046]  ? evm_inode_setattr+0x1bd/0x7d0
[  157.710987][ T8046]  ? __pfx_current_time+0x10/0x10
[  157.710994][ T8046]  ? try_break_deleg+0x79/0x120
[  157.711002][ T8046]  ? __pfx_ocfs2_setattr+0x10/0x10
[  157.711012][ T8046]  notify_change+0xc1a/0xf40
[  157.711022][ T8046]  ovl_workdir_create+0x716/0x940
[  157.711033][ T8046]  ? __pfx_ovl_workdir_create+0x10/0x10
[  157.711044][ T8046]  ? mnt_get_write_access+0x213/0x280
[  157.711053][ T8046]  ovl_fill_super+0x1a1e/0x5e60
[  157.711064][ T8046]  ? __lock_acquire+0x6b5/0x2cf0
[  157.711075][ T8046]  ? __pfx_ovl_fill_super+0x10/0x10
[  157.711083][ T8046]  ? xas_create+0x1902/0x1b90
[  157.711096][ T8046]  ? __mutex_trylock_common+0x158/0x260
[  157.711107][ T8046]  ? __pfx___mutex_trylock_common+0x10/0x10
[  157.711117][ T8046]  ? rcu_is_watching+0x15/0xb0
[  157.711127][ T8046]  ? trace_contention_end+0x39/0x100
[  157.711138][ T8046]  ? shrinker_register+0x124/0x230
[  157.711148][ T8046]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  157.711156][ T8046]  ? __pfx___mutex_lock+0x10/0x10
[  157.711163][ T8046]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  157.711171][ T8046]  ? __raw_spin_lock_init+0x45/0x100
[  157.711184][ T8046]  ? sget_fc+0x962/0xa40
[  157.711191][ T8046]  ? __pfx_set_anon_super_fc+0x10/0x10
[  157.711199][ T8046]  ? __pfx_ovl_fill_super+0x10/0x10
[  157.711207][ T8046]  get_tree_nodev+0xbb/0x150
[  157.711215][ T8046]  vfs_get_tree+0x92/0x2a0
[  157.711224][ T8046]  do_new_mount+0x329/0xa50
[  157.711234][ T8046]  ? apparmor_capable+0x137/0x1a0
[  157.711243][ T8046]  ? __pfx_do_new_mount+0x10/0x10
[  157.711253][ T8046]  ? ns_capable+0x89/0xe0
[  157.711261][ T8046]  ? path_mount+0x63d/0x1000
[  157.711270][ T8046]  ? kmem_cache_free+0x195/0x610
[  157.711304][ T8046]  __se_sys_mount+0x31d/0x420
[  157.711318][ T8046]  ? __pfx___se_sys_mount+0x10/0x10
[  157.711330][ T8046]  ? __x64_sys_mount+0x20/0xc0
[  157.711340][ T8046]  do_syscall_64+0xe2/0xf80
[  157.711348][ T8046]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  157.711356][ T8046]  ? trace_irq_disable+0x37/0x100
[  157.711368][ T8046]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  157.711377][ T8046] RIP: 0033:0x7f9a27d9acb9
[  157.711387][ T8046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  157.711395][ T8046] RSP: 002b:00007f9a28cdd028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  157.711404][ T8046] RAX: ffffffffffffffda RBX: 00007f9a28015fa0 RCX: 00007f9a27d9acb9
[  157.711411][ T8046] RDX: 0000200000000380 RSI: 0000200000000140 RDI: 0000000000000000
[  157.711416][ T8046] RBP: 00007f9a27e08bf7 R08: 0000200000000180 R09: 0000000000000000
[  157.711423][ T8046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  157.711428][ T8046] R13: 00007f9a28016038 R14: 00007f9a28015fa0 R15: 00007ffe53666918
[  157.711437][ T8046]  </TASK>
[  157.711798][ T5916] usb 5-1: device descriptor read/64, error -71
[  157.737194][ T8046] overlayfs: upper fs does not support tmpfile.
[  157.855543][ T8046] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  157.858379][ T8046] overlayfs: upper fs missing required features.
[  157.980676][ T5916] usb 5-1: new full-speed USB device number 24 using dummy_hcd
[  157.998360][ T5848] ocfs2: Unmounting device (7,1) on (node local)
[  158.109669][ T5916] usb 5-1: device descriptor read/64, error -71
[  158.220461][ T5916] usb usb5-port1: attempt power cycle
[  158.559717][ T5916] usb 5-1: new full-speed USB device number 25 using dummy_hcd
[  158.580105][ T5916] usb 5-1: device descriptor read/8, error -71
[  158.841769][ T5916] usb 5-1: new full-speed USB device number 26 using dummy_hcd
[  158.860174][ T5916] usb 5-1: device descriptor read/8, error -71
[  158.969839][ T5916] usb usb5-port1: unable to enumerate USB device
