last executing test programs:

9m34.302388139s ago: executing program 32 (id=338):
syz_emit_ethernet(0x52, &(0x7f00000043c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x1c, 0x2c, 0x0, @remote, @local, {[@hopopts={0x6c}], {{0x2b00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x40}}}}}}}, 0x0)

8m54.372359832s ago: executing program 33 (id=734):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0xfffffffb}, @FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7fffffff}]}, 0x2c}}, 0x0)

8m12.765154572s ago: executing program 34 (id=1134):
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
socket(0x1, 0x2, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYRES16=r0], 0x2)

7m38.03806238s ago: executing program 35 (id=1502):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x1}, 'syz1\x00'})
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xf)
ioctl$UI_DEV_CREATE(r0, 0x5501)

7m14.882954098s ago: executing program 36 (id=1783):
syz_mount_image$minix(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x808441, &(0x7f00000000c0)=ANY=[], 0xfe, 0x20d, &(0x7f0000000680)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x1d4)
getdents64(r0, 0xfffffffffffffffe, 0xffffffffffffff15)

7m6.001019938s ago: executing program 4 (id=1841):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, 0x0}, 0x94)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001100), 0x2, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
writev(r0, &(0x7f0000000000)=[{0x0}], 0x1)

7m5.938625346s ago: executing program 4 (id=1844):
openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa0d81)
r0 = syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x0, 0x100002cf}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31})
io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0)

7m5.870331124s ago: executing program 4 (id=1845):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0xa08811, &(0x7f0000000100)={[{@nobarrier}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'no'}}, {@barrier}, {@rescue={'rescue', 0x3d, 'all'}}, {@acl}, {@nodiscard}]}, 0xfb, 0x513a, &(0x7f000000f380)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, 0x0)

7m5.560506033s ago: executing program 4 (id=1846):
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x205)
move_mount(r1, 0x0, r0, 0x0, 0x46)

7m5.229706385s ago: executing program 4 (id=1847):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000240)='./file1\x00', 0x8c0, &(0x7f0000000100)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c001967b9b8a6cdd636d75428f2c5e8054d01858eef552755576e749526b36860cf2511040d1ce5a743ffd83d29d1ba3a54a59d8c7aa249f08d3c8c6d04ac105d67934db6190d59f2323b55a5a4"], 0x1, 0x444a, &(0x7f0000004480)="$eJzs3b1PHGcaAPB3BnwGfx32ufBJJ91KZ+k+hcDV3WHpMMbGYHOOnNhFmvUCa5tkYS1YohQuSGcpVaQUUQorkdJRWUhp0jh/QpqUTm0pKdJEimSFaHdnMTPsmg3ZhWD9fsXOzvv5wLMzvGNp/caJyr355dz8cq6wmCvP3lk+l3unXFpZKIZ4jzSd/9DezU97uvE5edmYn3cscpq5fvHy67fOhfDl3NfPNjY2NkJVb2hqeMv7H75/MLv12BBn+lTHbTLUoeYz7MabIYTT2+Kq6gkh9IUQohDChaRsLDn2hxCOJ3W3Hrx/O9ehaB4/LZ7PP59+uD5ydmrt0Xqzn70uCuHj0h//dXfh27/0jHzzj9YjfnG0Q6EBAAAAAAAAAAAAAAAAAHAATNy4fvO1oeHwJAq9a9H27+tOJMcW34/t3eiYP78szL+f6NyPDAAAAAAAAAAAAAAAAAAAAL85L77/n4tONfn+/3hyHG3Rf+N/3Y+R7pn8//XxS0PDyf7v0bb6fydF313oCSeb7Pue3f/9QqZ/8/3ft8+zW434GvMOhCgeTJ3H8eBgCJ8mG7+fiY7EpfJy5Z93yiuLcx0L48BK57++e38qO8mG/m3mPx7LjN9i//8O+sO2T1P1/HbnPmKvtHT+e1q2++y9qK3r/2Km317kn91L57+3Vta/tcFo/QZQzf8HvTvnfzwzfrfyfyKEkIuqseZSd4DqGqZa3mq9Qlo6/4dqZalbZ/KLbHX9/5jJ/6XM+Pt1/1/N/iGiqXT+f1cr60u1OFx7reU/3vn6v5wZfz/yX41/tV640d25D750/uu5Dr2pJrXfZLv3/4nM+C3zf/jXxX0zTuI8EaU+AWtRvbzF/1dHRjr/fdvqXzz/xW2t/65k+u/V819j3sbzX+P2/7eo/vxHc+n897ds1+71P5np1+37/2ht/cdupfN/pFaWXjsP1F7bzf9UZvxu5b/2VNLXyP+L+8lPh+vln1j/tSWd/6P1wnhri9Xaa239F+28/r+aGX8/1n/V+Ffj7s76qkjn/1jLdtX8f9XG3/9rmX7dz38IQ/6tb9fS+T/esl3t+u/bOf/Tm+/qY3U7/3/t5uAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8BYchwIUTyYOo/jwcEQLibnZ8KRaKYwl58plWffXg5hPCnPhVPR3VJ5plDKzy+W54r5QqlUng3hUlJ/OvRFy6VyJb9QuH95c6z+6F6xsFSZKRYqIYSJpPxP4XhjrJn5ykLhfgjhymbd7+Py0v17hcX83PzSf4eGhobC5GYMJ6Piu5XiYqU+e702hKnNvgPRluBq1Vc3YzkWvVVeWVoslGrl17b0KZVnC6UtfaaTug/DyaiytLI4W6gU86Xy3cZ8+2k0OY5P3njjxrXhbfW3o/pxbG/DAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAXejLyn49CCL31sziEMNp4EzVr//hp8Xz++fTD9ZGzU2uP1p+1agcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DM7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2KVj1ASCKAzAbyZFki7HSLUkXdoNgZAU2SB4Aj2Gh9GjeAnvYGFhayGC7KKuu7CNVt/XPJifmfdgHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAw3yPqvH/23tEiqf9Y8Ryulqf5791nX9233+4w4zczs9f9XX6w3SVf9RHmzIf0912NomO2li09qS9T5d9nnvn6tu3vvmavi+RchERZZ2/ppyLYthbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcGAHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AsAAAAACDM3zqKvg0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+BUAAP//hkEdVg==")
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800000, 0x0, 0xb6, 0x0, &(0x7f00000003c0))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
lseek(r0, 0x3, 0x1)
getdents64(r0, 0x0, 0x0)

7m4.999857223s ago: executing program 4 (id=1848):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f6ffffff00000000fcffffff180100002020642500000000002020207b1af8ff00000000c3a100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000340)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2}, 0x94)

7m4.869259357s ago: executing program 37 (id=1848):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f6ffffff00000000fcffffff180100002020642500000000002020207b1af8ff00000000c3a100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000340)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2}, 0x94)

5m17.101727246s ago: executing program 7 (id=3018):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000100000085000000ae000000850000000500000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0, 0x0, 0x4}, 0x18)

5m17.101317815s ago: executing program 7 (id=3020):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, 0x0, &(0x7f0000000b00)=""/151}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x3}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c)

5m16.92102525s ago: executing program 7 (id=3021):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x106, 0x9}}, 0x54)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000001c0)={0x5, 0x10, 0xfa00, {&(0x7f0000002200), r1}}, 0x18)

5m16.920527675s ago: executing program 7 (id=3022):
syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000040)='./file2\x00', 0x800810, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x1f, 0x249, &(0x7f0000000a00)="$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")
r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x7, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c675bd9bffbcc2542ded71238259ca171ce1a311ef543dc137661d34f7c700", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204, 0x5]})
write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000180)={0x22, 0x3, 0x0, {0x6, 0x1, 0x0, '/'}}, 0x22)

5m16.703189821s ago: executing program 7 (id=3031):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0x6}]}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter6\x00')
preadv(r6, &(0x7f0000000280)=[{&(0x7f0000000a00)=""/4096, 0x1000}], 0x1, 0x1f1, 0x1)
r7 = socket$inet(0x2, 0x3, 0x6)
setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000140)='xfrm0\x00', 0x10)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r4, 0x8983, &(0x7f0000000300)={0x7, 'erspan0\x00', {0x75a}, 0x6})
sendto$inet(r7, 0x0, 0x0, 0x20000800, &(0x7f0000001080)={0x2, 0x4e24, @multicast1}, 0x10)
r8 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1})
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=@ipv6_deladdr={0x18, 0x15, 0x1, 0x70bd29, 0x25dfdbfd, {0xa, 0x78, 0x10, 0xff}}, 0x18}, 0x1, 0x0, 0x0, 0x804}, 0x800)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xe1000, 0x280000b, 0x28011, r8, 0x40000)
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x140cc014)

5m16.24133133s ago: executing program 7 (id=3032):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000a000000000000000100000d00000000010000000300000002000000000000110300000000000000000000000000000500000000005f61"], 0x0, 0x52}, 0x28)

5m16.180864729s ago: executing program 38 (id=3032):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000a000000000000000100000d00000000010000000300000002000000000000110300000000000000000000000000000500000000005f61"], 0x0, 0x52}, 0x28)

4m18.212537111s ago: executing program 9 (id=3677):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r0, 0x891a, 0x0)

4m18.155128052s ago: executing program 9 (id=3678):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)

4m16.283290347s ago: executing program 9 (id=3704):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000014000780080008400000000008001240ffffffe8050001"], 0x5c}}, 0x0)

4m16.165547332s ago: executing program 9 (id=3705):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000240)='./file1\x00', 0x1008400, &(0x7f0000000080)=ANY=[], 0x85, 0x677, &(0x7f0000002100)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_ext_remove_space_done\x00'}, 0x10)
ptrace$cont(0x21, r1, 0x80000001, 0x4)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x69000}], 0x1)

4m15.865358803s ago: executing program 9 (id=3710):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x10, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="7910480000000000790048000000000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)

4m15.093059173s ago: executing program 9 (id=3715):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = syz_io_uring_setup(0x2f42, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x3, 0x1, 0x0, 0xce})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x55, 0x2000, @fd_index=0xd, 0x7, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

4m14.935477845s ago: executing program 39 (id=3715):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = syz_io_uring_setup(0x2f42, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x3, 0x1, 0x0, 0xce})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x55, 0x2000, @fd_index=0xd, 0x7, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

3m29.810208943s ago: executing program 0 (id=4190):
r0 = socket(0x840000000002, 0x3, 0xfa)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @remote}, 0x10)
sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0)
connect$vsock_stream(r0, &(0x7f0000000180)={0x28, 0x0, 0x2711, @hyper}, 0x10)

3m29.405660006s ago: executing program 0 (id=4204):
r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
read$FUSE(r0, &(0x7f0000000980)={0x2020, 0x0, 0x0, 0x0, <r1=>0x0}, 0x2020)
setresgid(0x0, r1, r1)
setresgid(0x0, r1, 0x0)

3m29.324360021s ago: executing program 0 (id=4205):
r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x2, @pix_mp={0x7, 0x11f5218d, 0x32315659, 0x3, 0x3, [{0x80000000, 0x2}, {0x3, 0xfff}, {0x8, 0x4}, {0x4}, {0xffffff84}, {0x1000, 0xfffffffe}, {0x80000001, 0x2a}, {0x9, 0x9}], 0xf8, 0x6, 0x8, 0x0, 0x5}})

3m29.274655531s ago: executing program 0 (id=4206):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002380)='./file0\x00', 0x80000c, &(0x7f0000000040)=ANY=[@ANYRES8=0x0, @ANYRESHEX=0x0, @ANYRES16, @ANYRESHEX=0x0, @ANYBLOB="2c756d61736b3d30303030303030303030303030303030303030303030302c6465636f6d706f73652c666f7263652c6e6f6465636f6d706f73652c626172726965722c6e6f6465636f6d706f73652c747970653db029e1c02c7569643d", @ANYRESHEX=0x0, @ANYBLOB="2c747970653dd2100d1b2c7529643dd4f81c66210bbcbf82440a104ab956f2ba5e36e41ccb1b040fa8b829b0b87078de654c66ac22aebaa2c653ef127e38e0aa2229f9cf6a8503", @ANYRESDEC, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRESHEX=0x0, @ANYRES8=0x0], 0x2, 0x6ee, &(0x7f0000032440)="$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")
creat(&(0x7f0000000100)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, 0x0, 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94)
r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0)
preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0)

3m29.105242919s ago: executing program 0 (id=4208):
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x806c0, 0x0)

3m27.963423497s ago: executing program 0 (id=4213):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000140)={0x24, r1, 0x801, 0x0, 0x0, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}}, 0x0)

3m27.743119977s ago: executing program 40 (id=4213):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000140)={0x24, r1, 0x801, 0x0, 0x0, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}}, 0x0)

3m2.646096373s ago: executing program 1 (id=4464):
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
r1 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000380)={0x6, 0x1c, 0x1, 0x3, 0x1a, "0300000001000000000000000000be00"})
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x3)

3m2.645816724s ago: executing program 1 (id=4465):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000040)=@ethtool_cmd={0x2e, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80000045}})

3m2.565080066s ago: executing program 1 (id=4466):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r0, &(0x7f00000008c0)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0x66a5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000180)="bf", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffffa}, 0x1c, &(0x7f0000000580)=[{&(0x7f00000001c0)="05", 0x1}], 0x1}}], 0x2, 0x931766f6319eed44)
shutdown(r0, 0x1)
getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000980)={0x0, 0x1, 0x6e3, 0x80, 0x8, 0x8000, 0x2, 0xf3b3, {0x0, @in6={{0xa, 0x4e20, 0x3, @empty, 0x3}}, 0xb, 0x401, 0xfffffff0, 0xfffffff8, 0x800}}, &(0x7f0000000840)=0xb0)

3m2.476041358s ago: executing program 1 (id=4467):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200010e, &(0x7f0000000140)={[{@inlinecrypt}, {@nodelalloc}, {@data_journal}, {@test_dummy_encryption}, {@block_validity}, {@quota}]}, 0x3, 0x460, &(0x7f0000001380)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x20, &(0x7f0000000140)='usrjquota=')

3m2.416077312s ago: executing program 1 (id=4468):
r0 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='source', &(0x7f0000000000)='\\/\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6\x01 @\xf4M\xba\xf2<\xd6C\xdb\xd7\xbeY@g\xcc\a\x00\x00\x00\xa3\xfe%\x11\xc9\xc5\x06\x00\x00\x00\x00\x00\x00\x00\xa3`fd\xdc\x8b\x00\x00\x00\x00{\x82\\/A\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\xe3\xb8\xc7\x0f\xaaQ\x98F*T\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0)

3m2.010607515s ago: executing program 1 (id=4469):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x80, 0x29}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x502a, 0x9ba3, 0xffff, 0x8251c, 0x5, 0x40}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x2, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}, 0x6}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)

3m1.894755422s ago: executing program 41 (id=4469):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x80, 0x29}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x502a, 0x9ba3, 0xffff, 0x8251c, 0x5, 0x40}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x2, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}, 0x6}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)

2m55.029100036s ago: executing program 2 (id=4527):
r0 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000c80)={0x0, [[0x8, 0x80, 0x6, 0x0, 0x4], [0x80000000, 0x100001, 0x587c5f32], [0x4000091, 0x0, 0x0, 0x8, 0x4000, 0x0, 0x4]], '\x00', [{0x400000, 0xfffffffe}, {}, {}, {}, {0x0, 0xfffffffc}, {0x3fec7e55, 0xfffffffd}, {}, {}, {0xfffffffc}, {}, {0x2}, {0xcbe, 0x3}], '\x00', 0x1300})

2m54.96689276s ago: executing program 2 (id=4528):
syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x110, 0x18, 0x6d, 0xa7, 0x40, 0x10fd, 0xde00, 0x1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x66, 0x5, 0xd0, 0x3, [{{0x9, 0x4, 0x78, 0x2, 0x0, 0x45, 0xde, 0x7e, 0x3a}}]}}]}}, 0x0)

2m53.767166655s ago: executing program 2 (id=4540):
r0 = socket(0x1, 0x2, 0x0)
ioctl$SIOCRSGCAUSE(r0, 0x89e0, 0x0)

2m53.766951028s ago: executing program 2 (id=4541):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x504, &(0x7f0000002580)="$eJzs3c9rXFsdAPDvzCR5SZtn33uKvFfBFirUHzSTH0gTFcSVuiiIBTcKNSbTWDPphMykNqFgqrsuXIiiIC7c+xe4sStLQVwrbl1Ji9YIVSpcmTtz00kyk041mfHlfj4wnXvnTOd7ziTfkzPnnjs3gNy62PynEDEZEb+PiHOt3f1PuNi62312b6l5K0SSXP9rIX1ecz97avb/zkbETkSMR8RXvxjxrcLhuPWt7dXFarWy0d4vN9bWy/Wt7Su31hZXKiuV2zPzVxcW5qfnZheOra0PfvidB9d+/eWxXz3/wZNHP/rtb5rVmmyXdbbjOLWaPhpvdzw2EhGfO4lgQ1Bqt2di2BXhv9L8+X0wIi6l+X8uSulPsz8vTrRmwElLkiT5d/JGr+KdBDi1iukYuFCciojWdrE4NdUaw38ozhSrtXrjUzdrm7eXW2Plt2K0ePNWtTLd/qzwVowWmvsz6fbL/dkD+3MR6Rj4x6WJdH9qqVZdHmxXBxxw9kD+/6PUyn8gJ/r/yA+cNvIf8kv+Q37Jf8gv+Q/5Jf8hv+Q/5Jf8h/yS/5Bfnfmfncj15pDqAgzWUX//xwZYD2CgvnLtWvOWZOe/L9/Z2lyt3bmyXKmvTq1tLk0t1TbWp1ZqtZX0nJ21V71etVZbn/l0bN4tNyr1Rrm+tX1jrbZ5u3EjPa//RmV0IK0C+vH2hYd/LETEzmcm0lt0/MmXq3C6JUkhhn0OMjAcpWF3QMDQOPQH+fUan/F7fkkY8P7W5St694yf7Vn0+Vg/keoAA1A8qvDF48FVBBi4y+85/gd5Zf4f8sv8P+TXK8b4hgeQA0fN/0f7Wn5d9Tv///z16gOcvCPn/4FTbbLL9b+SJPnemx3X7pqOiA9ExB9Ko29k1/oCToPiXwrt8f/lcx+bPFg6VvhnOgcwFhHf/fn1n95dbDQ2ZpqP/23v8cbP2o/PDqP+QG/7Z/iyPM3yGADIr91n95ay2yDjPv1CaxHC4fgj7bnJ8XQEc2a3sG+tQuGY1i7s3I+Id7vFL7Svd9468nFmt3Qo/jvt+0LrJdL6jqTXTR9M/Pc64n+0I/75//ldgXx42Ox/prvlXzHN6djLv/39z+QxrY/O+r9szXVn/Kz/K/Xo/y70GePbv/h+t8O76WLvp/cjznftf7N442msg/GbdbvcZ/wn3/jah3uVJb9svU63+JnmVrmxtl6ub21fuZXVYv7qwsL89NzsQjmdoy5nM9WHffbd3z3qFb/Z/rYe7f/TofZPtOv0iT7b/6+PPP76xSPif/xS99+/d9L7A+9/kuzV4ZN9xv/77J+/2ausGX+5x/tf7BY/stKIuT7j13/yJecOA8D/kfrW9upitVrZ6LIx2rvIhg0bg94YiQEGfVXPsTOYDgo4MS+Tftg1AQAAAAAAAAAAAPrVa/Xvw2NcTjzsNgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnAb/CQAA//9AntRF")
fcntl$lock(0xffffffffffffffff, 0x26, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3853008, 0x0, 0x1, 0x0, 0x0)
setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000000), 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

2m53.657196032s ago: executing program 2 (id=4542):
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'lo\x00', 0x1}, 0x18)

2m52.120356274s ago: executing program 2 (id=4558):
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x41071, 0xffffffffffffffff, 0x0)
futex_waitv(&(0x7f0000001a40)=[{0x1, 0x0, 0x2}], 0x1, 0x0, &(0x7f0000002300)={0x77359400}, 0x0)

2m51.541856035s ago: executing program 42 (id=4558):
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x41071, 0xffffffffffffffff, 0x0)
futex_waitv(&(0x7f0000001a40)=[{0x1, 0x0, 0x2}], 0x1, 0x0, &(0x7f0000002300)={0x77359400}, 0x0)

2m35.776396774s ago: executing program 5 (id=4722):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAPCLR(r0, 0x4b68, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x6}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x3}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r4, 0x1, 0x80, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x87}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$tipc(r7, 0x0, 0x0)
ptrace$getregs(0xc, r1, 0x9, 0x0)

2m34.84387148s ago: executing program 5 (id=4733):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x1, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0xd0}, 0x20000000)

2m34.757285048s ago: executing program 5 (id=4734):
lsm_set_self_attr(0x69, 0x0, 0x42, 0x0)

2m34.707397857s ago: executing program 5 (id=4736):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000000), 0xfc, 0x582, &(0x7f0000000b40)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1c0000000, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]})
unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0)

2m34.566086348s ago: executing program 5 (id=4740):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="cc0000001b0001002dbd7000fddbdf2500008000000000000000000000000000ac1e00010000000000000000119e9c66c88d4a6a4e2300040a00008032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00080000000000008000000000000000f8ffffffffffffffff01000000000000010000000000000009000000000000000900000000000000000000008015010002000000000000000100000000000000fd0000000000000004000000000000000700000000000000000002030000000029000000000000000c0008"], 0xcc}, 0x1, 0x0, 0x0, 0xc040}, 0x8010)

2m33.84073108s ago: executing program 5 (id=4749):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x2000002, &(0x7f0000000400)={[{@iocharset={'iocharset', 0x3d, 'iso8859-3'}}, {@gid}, {@dmode={'dmode', 0x3d, 0x3}}, {@rootdir={'rootdir', 0x3d, 0x1}}, {@uid}, {@gid_forget}, {@rootdir={'rootdir', 0x3d, 0x7}}, {@anchor={'anchor', 0x3d, 0x100}}, {@umask={'umask', 0x3d, 0x70ed}}]}, 0x1, 0xc42, &(0x7f0000000540)="$eJzs3U9sHNd9B/DfG+6KK7utmNhRnDQuNm2Ryorl6l9MxSrcVU2zDSDLaijmFoArcaUSpkiCpBrZSAumlx56CFAUPeREoDUKpGhgNEXQI9O6QHLxocip6IFoYSMoemCLADkFDGb2rbikqD8RRYmSPh+b+u7OvDf73rz1jCzozQsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIOL3Xj9z9Fh62K0AAB6kc2NfPnrc/R8AnigX/P8/AAAAAAAAAAAAAADsdSmKeCZSzJ1bSxPV+67G2an6tevjI6PbV9ufqpoDVfnyp3Hs+ImTX3h5+FQvz07N3Kb+/fbpeHPswpnma7NX5+Y7Cwudyeb4zNSl2cnOXR9hp/W3OlydgObVt65NXr680Dz+0olNu68PfTT49MGh08MvHHm+V3Z8ZHR0bKNIo7987Z4b0nWrGR77oogjkeLF7/w4tSOiiJ2fi8aDHfut9ledOFx1YnxktOrI9FR7ZrHceb53IoqIZl+lVu8cbT8WUas/0D7cWitiqWx+2eDDZffG5trz7YvTneb59vzi1OLU7Mz51G1t2Z9mFHEqRSxHxOrgzYerRxG1SPGtA2vpYkQM9M7D56uJwbduR7GLfbwLZTub9Yjl4hEYsz1sMIp4I1L85P1DcSlfZ6przeci3ijzexHvlvlqRCq/GCcjPtzme8SjqRZF/EU5/qfX0mR1PehdV85+pfmlmcuzfWV715Vf8P5w05XiId0f9m/JB2OPX5saUUS7uuKvpXv/zQ4AAAAAAAAAAAAAAAAA99v+KOJTkeL1f//jal5xVPPSD5we/v2hX+6fM/7cHY5Tln0pIpaKu5uTuy9PDDyfzqf0kOcSP8kaUcSf5Pl/33jYjQEAAAAAAAAAAAAAAAAAAHiCracifhQpXvngUFqO/jXFp2auNC+0L053V4Xtrf3bWzN9fX19vZm62co5kXMp53LOlZyrOaPI9XO2ck7kXMq5nHMl52rOGMj1c7ZyTuRcyrmccyXnas6o5fo5Wzknci7lXM65knM1Z+yRtXsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4nRRTxs0jxza+tpUgR0YqYiG6uDD7s1gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAApcFUxHcjRfMPWje21SIiVf92HSp/ORmtfWV+PFrDZb4arTM521XWWt94CO1nZ+qpiB9GisHGezcGPI9/vfvuxtcg3v36xrtP17o50Ns59NHg0wcPnB4e/bXnbvU6bdeAw2enZq5db46PjI6O9W2u5U//eN+2ofy5xf3pOhGx8PY7b7Wnpzvz9/6i/ArsoPqj8yJS7QnpqRfdF1HbE814OH3nCVDe/z+MFL/9wX/0bvjd+38jfqn77sYdPn76pxv3/1e2Huj29///7N3/a1vr5ft/eU/f7v7/TN+2V/LvRuq1iMbi1bn6wYjGwtvvHJm62r7SudKZOXn06BeHh7944mh9X0Tj8tR0p+/VfTldAAAAAAAAAAAAAAAAAA9OKuJ3I0X7h2upGRHXq/laQ6eHXzjy/EAMVPOtNs3bfnPswpnma7NX5+Y7Cwudyeb4zNSl2clOd2f9jh/XqKZ7jY+M7lqHbmv/7dt/Z3do//7Ga7Nzb89PXfmjxW33P9U4c3Fhcb59afvdsT+KiFb/lsNVg8dHRqtGT0+1Z6qq57edTP+Lq6ci/itSXDrZTJ/N2/L8/60z/DfN/1/aeqBdmv//sb5t5WemVMRPI8Vv/eVz8dmqnU/FTecsl/vbSHH41GdyudhXluu1oftcge7MwLLs/0WKf/zZ5rK9b/MzG2WP3fWJfUSU438gUnz3z78dv563bX7+w/bj/9TWA+3S+D/bt+2pTc8r2HHXyeN/JFK8+sx78Rt52+2e/9F79sahXPjG8zl2afw/0bdtKH/ub96frgMAAAAAAAAAADzS6qmIv4sU3x+tpZfztrv5+3+TWw+0S3//65N92ybvz3pFd3xRftYfDu70zAIAAADAw1dPRfwoUlxZfO/GHOrN87/75n/+zsb8z5G0ZW/153y/Uj034H7++V+/ofy5EzvvNgAAAAAAAAAAAAAAAAAAAOwpKRXxcl5PfaKazz95y/XUVyLF6//zYi6XDpbleuvAD1W/Ns7Nzhw5Mz09e6m92L443WmOzbUvdcq6z0aKtb/5TK5bVOur99ab767xvrEW+3ykGP37XtnuWuy9tcmf7ZVd6hwry34sUvz3P2wu21vH+hMbxz1elv3rSPHVf96+7MGNsifKst+OFD/4arNX9qmybO/5qJ/cKPvSpdliF0YFAAAAAAAAAAAAAAAAAACAJ009FfFnkeJ/ry7fmMuf1/+v972tvPv1vvX+t7herfM/VK3/f6vX97L+f/VcgaW0qR0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPC4S1HEO5Fi7txaWhks33c1zk7NXLs+PjK6fbX9qao5UJUvfxrHjp84+YWXh0/18vb177dPxZtjF840X5u9OjffWVjoTDbHZ6YuzU527voIO62/1eHqBDSvvnVt8vLlhebxl05s2n196KPBpw8OnR5+4cjzvbLjI6OjY31lavV7/vSbpFts3xdF/FWkePE7P07fH4woYufn4g7fnd22v+rE4aoT4yOjVUemp9ozi+XO870TUUQ0+yq1eufoAYzFjrQilsrmlw0+XHZvbK4937443Vk/0C0wO3M+dVtb9qcZRZxKEcsRsTp48+HqUcRbkeJbB9bSvwxGDPTOw+fPjX356PFbt6PYrQ7enbKdzXrEcnG7Mdumw2wyGEX8U6T4yfuH4l8HI2rR/YnPRbxR5vci3o3ueKfyi3Ey4kOn9bFRiyL+vxz/02vp/cHyetC7rpz9SvNLM5dn+8r2riuP/P3hQdrj95NGFPGD6oq/lv7Nf9cAAAAAAAAAAAAAAAAAe0gRvxopXvngUKrmB9+YUzw1c6V5oX1xujutrzf3rzdnen19fb2ZutnKOZFzKedyzpWcqzmjyPVztspsrK9PFKk68lLevpxzJedqzhjI9XO2ck7kXMq5nHMl52rOqOX6OVs5J3Iu5VzOuZJzNWfskbl7AAAAAAAAAAAAAAAAAADA46Wo/knxza+tpfXBan3pgd6+FeuBPvZ+HgAA//8bKfXU")

2m33.721701341s ago: executing program 43 (id=4749):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x2000002, &(0x7f0000000400)={[{@iocharset={'iocharset', 0x3d, 'iso8859-3'}}, {@gid}, {@dmode={'dmode', 0x3d, 0x3}}, {@rootdir={'rootdir', 0x3d, 0x1}}, {@uid}, {@gid_forget}, {@rootdir={'rootdir', 0x3d, 0x7}}, {@anchor={'anchor', 0x3d, 0x100}}, {@umask={'umask', 0x3d, 0x70ed}}]}, 0x1, 0xc42, &(0x7f0000000540)="$eJzs3U9sHNd9B/DfG+6KK7utmNhRnDQuNm2Ryorl6l9MxSrcVU2zDSDLaijmFoArcaUSpkiCpBrZSAumlx56CFAUPeREoDUKpGhgNEXQI9O6QHLxocip6IFoYSMoemCLADkFDGb2rbikqD8RRYmSPh+b+u7OvDf73rz1jCzozQsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIOL3Xj9z9Fh62K0AAB6kc2NfPnrc/R8AnigX/P8/AAAAAAAAAAAAAADsdSmKeCZSzJ1bSxPV+67G2an6tevjI6PbV9ufqpoDVfnyp3Hs+ImTX3h5+FQvz07N3Kb+/fbpeHPswpnma7NX5+Y7Cwudyeb4zNSl2cnOXR9hp/W3OlydgObVt65NXr680Dz+0olNu68PfTT49MGh08MvHHm+V3Z8ZHR0bKNIo7987Z4b0nWrGR77oogjkeLF7/w4tSOiiJ2fi8aDHfut9ledOFx1YnxktOrI9FR7ZrHceb53IoqIZl+lVu8cbT8WUas/0D7cWitiqWx+2eDDZffG5trz7YvTneb59vzi1OLU7Mz51G1t2Z9mFHEqRSxHxOrgzYerRxG1SPGtA2vpYkQM9M7D56uJwbduR7GLfbwLZTub9Yjl4hEYsz1sMIp4I1L85P1DcSlfZ6przeci3ijzexHvlvlqRCq/GCcjPtzme8SjqRZF/EU5/qfX0mR1PehdV85+pfmlmcuzfWV715Vf8P5w05XiId0f9m/JB2OPX5saUUS7uuKvpXv/zQ4AAAAAAAAAAAAAAAAA99v+KOJTkeL1f//jal5xVPPSD5we/v2hX+6fM/7cHY5Tln0pIpaKu5uTuy9PDDyfzqf0kOcSP8kaUcSf5Pl/33jYjQEAAAAAAAAAAAAAAAAAAHiCracifhQpXvngUFqO/jXFp2auNC+0L053V4Xtrf3bWzN9fX19vZm62co5kXMp53LOlZyrOaPI9XO2ck7kXMq5nHMl52rOGMj1c7ZyTuRcyrmccyXnas6o5fo5Wzknci7lXM65knM1Z+yRtXsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4nRRTxs0jxza+tpUgR0YqYiG6uDD7s1gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAApcFUxHcjRfMPWje21SIiVf92HSp/ORmtfWV+PFrDZb4arTM521XWWt94CO1nZ+qpiB9GisHGezcGPI9/vfvuxtcg3v36xrtP17o50Ns59NHg0wcPnB4e/bXnbvU6bdeAw2enZq5db46PjI6O9W2u5U//eN+2ofy5xf3pOhGx8PY7b7Wnpzvz9/6i/ArsoPqj8yJS7QnpqRfdF1HbE814OH3nCVDe/z+MFL/9wX/0bvjd+38jfqn77sYdPn76pxv3/1e2Huj29///7N3/a1vr5ft/eU/f7v7/TN+2V/LvRuq1iMbi1bn6wYjGwtvvHJm62r7SudKZOXn06BeHh7944mh9X0Tj8tR0p+/VfTldAAAAAAAAAAAAAAAAAA9OKuJ3I0X7h2upGRHXq/laQ6eHXzjy/EAMVPOtNs3bfnPswpnma7NX5+Y7Cwudyeb4zNSl2clOd2f9jh/XqKZ7jY+M7lqHbmv/7dt/Z3do//7Ga7Nzb89PXfmjxW33P9U4c3Fhcb59afvdsT+KiFb/lsNVg8dHRqtGT0+1Z6qq57edTP+Lq6ci/itSXDrZTJ/N2/L8/60z/DfN/1/aeqBdmv//sb5t5WemVMRPI8Vv/eVz8dmqnU/FTecsl/vbSHH41GdyudhXluu1oftcge7MwLLs/0WKf/zZ5rK9b/MzG2WP3fWJfUSU438gUnz3z78dv563bX7+w/bj/9TWA+3S+D/bt+2pTc8r2HHXyeN/JFK8+sx78Rt52+2e/9F79sahXPjG8zl2afw/0bdtKH/ub96frgMAAAAAAAAAADzS6qmIv4sU3x+tpZfztrv5+3+TWw+0S3//65N92ybvz3pFd3xRftYfDu70zAIAAADAw1dPRfwoUlxZfO/GHOrN87/75n/+zsb8z5G0ZW/153y/Uj034H7++V+/ofy5EzvvNgAAAAAAAAAAAAAAAAAAAOwpKRXxcl5PfaKazz95y/XUVyLF6//zYi6XDpbleuvAD1W/Ns7Nzhw5Mz09e6m92L443WmOzbUvdcq6z0aKtb/5TK5bVOur99ab767xvrEW+3ykGP37XtnuWuy9tcmf7ZVd6hwry34sUvz3P2wu21vH+hMbxz1elv3rSPHVf96+7MGNsifKst+OFD/4arNX9qmybO/5qJ/cKPvSpdliF0YFAAAAAAAAAAAAAAAAAACAJ009FfFnkeJ/ry7fmMuf1/+v972tvPv1vvX+t7herfM/VK3/f6vX97L+f/VcgaW0qR0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPC4S1HEO5Fi7txaWhks33c1zk7NXLs+PjK6fbX9qao5UJUvfxrHjp84+YWXh0/18vb177dPxZtjF840X5u9OjffWVjoTDbHZ6YuzU527voIO62/1eHqBDSvvnVt8vLlhebxl05s2n196KPBpw8OnR5+4cjzvbLjI6OjY31lavV7/vSbpFts3xdF/FWkePE7P07fH4woYufn4g7fnd22v+rE4aoT4yOjVUemp9ozi+XO870TUUQ0+yq1eufoAYzFjrQilsrmlw0+XHZvbK4937443Vk/0C0wO3M+dVtb9qcZRZxKEcsRsTp48+HqUcRbkeJbB9bSvwxGDPTOw+fPjX356PFbt6PYrQ7enbKdzXrEcnG7Mdumw2wyGEX8U6T4yfuH4l8HI2rR/YnPRbxR5vci3o3ueKfyi3Ey4kOn9bFRiyL+vxz/02vp/cHyetC7rpz9SvNLM5dn+8r2riuP/P3hQdrj95NGFPGD6oq/lv7Nf9cAAAAAAAAAAAAAAAAAe0gRvxopXvngUKrmB9+YUzw1c6V5oX1xujutrzf3rzdnen19fb2ZutnKOZFzKedyzpWcqzmjyPVztspsrK9PFKk68lLevpxzJedqzhjI9XO2ck7kXMq5nHMl52rOqOX6OVs5J3Iu5VzOuZJzNWfskbl7AAAAAAAAAAAAAAAAAADA46Wo/knxza+tpfXBan3pgd6+FeuBPvZ+HgAA//8bKfXU")

5.217517135s ago: executing program 3 (id=6903):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="60010000", @ANYRES16=r1, @ANYBLOB="01000000000000000000140000000c00078008000200ff7f00000c00068004000200040005009000058007000100696200000700010069620000440002800800020007000000080004000400000008000400040000000800010017000000080002000500000008000300070000000000000003000000080004000a000000080001006574680014000280080003007032ffff0800010002000000080001007564700014000280080001001500000008000200ffffffff0c0003800800020008eeffff5b0007800c0004000000000000000000080001000000ffff0c00030006000000000000000c000400c5080000000000000800020008"], 0x160}}, 0x0)

5.117369291s ago: executing program 3 (id=6904):
r0 = syz_usb_connect(0x1, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920000000109021b1901000000d40904150001da40df0009058202"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)

2.507625107s ago: executing program 3 (id=6921):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0xf0, 0x10, 0x300, 0x70bd28, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@local, 0x4e23, 0x1, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x8, 0x100000001, 0x6}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc}, 0x70bd27, 0x0, 0x2, 0x0, 0x2}}, 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)

2.458792113s ago: executing program 3 (id=6923):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000500)={<r1=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r1, 0x3, r0, 0x120000})

1.606917055s ago: executing program 3 (id=6935):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f000000560900a1004daf25cee2d5d1c1"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f00000000c0)={0x2, 0x200, 0x4, 0x0, 0x70, 0x4})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)={0x2000001a})

1.205338686s ago: executing program 6 (id=6941):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@umask={'umask', 0x3d, 0x5}}, {@namecase}, {@namecase}, {@fmask={'fmask', 0x3d, 0x8}}, {@discard}, {@keep_last_dots}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@errors_continue}, {@errors_continue}]}, 0x1, 0x1528, &(0x7f00000037c0)="$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")
mount$nfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x817888, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x200)

1.205233872s ago: executing program 6 (id=6942):
syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b", @ANYRES8], 0x0)

608.901473ms ago: executing program 6 (id=6953):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f0000000300)={[{@keep_last_dots}, {@sys_tz}, {@uid={'uid', 0x3d, 0xee00}}, {@discard}, {@namecase}, {@zero_size_dir}, {@gid}, {@keep_last_dots}, {@errors_continue}, {@uid={'uid', 0x3d, 0xee01}}]}, 0x1, 0x152f, &(0x7f00000037c0)="$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")
rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r0 = open(&(0x7f00000001c0)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000000900)=""/4105, 0x1009)

608.374555ms ago: executing program 6 (id=6955):
r0 = socket(0x10, 0x80002, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x1, 0x4, 0x8, 0x840, 0x1, 0xce50, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x2, 0x3}, 0x50)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b24, &(0x7f0000000000)={'wlan0\x00'})

539.738872ms ago: executing program 6 (id=6956):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x200}, {{0x0, 0x0, 0x0}, 0x401}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000007c0)=""/139, 0x8b}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000340)=""/113, 0x71}, {&(0x7f0000000240)=""/78, 0x4e}, {&(0x7f0000000100)=""/98, 0x62}, {&(0x7f00000004c0)=""/100, 0x64}, {&(0x7f00000006c0)=""/200, 0xc8}, {&(0x7f0000000440)=""/67, 0x43}], 0x9}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x0, 0x0)

539.527745ms ago: executing program 8 (id=6957):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000007c0)={0x3c, 0x0, 0x8, 0x101, 0x0, 0x0, {0x6}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xe25}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x3c47}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000010)

539.34104ms ago: executing program 6 (id=6958):
futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0xfffffffe)
futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0x1)
futex(&(0x7f000000cffc), 0xa, 0x8000, 0x0, 0x0, 0x2)

479.483364ms ago: executing program 8 (id=6959):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2c, &(0x7f0000000000)=0x33b5, 0x4)

479.250399ms ago: executing program 8 (id=6960):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10)
r1 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x1108)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)

369.713229ms ago: executing program 8 (id=6961):
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, 0x0)

369.442741ms ago: executing program 8 (id=6962):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8)
sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000080)={0x0, 0x401, 0x51}, 0x8)

249.894811ms ago: executing program 8 (id=6963):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1}, 0x18)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r3=>0x0})
bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3}, 0x18)
connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3}, 0x18)
sendmsg$can_j1939(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)='d', 0x1}}, 0x0)
recvmsg$can_j1939(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)

0s ago: executing program 3 (id=6964):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file3\x00', 0xcc0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6865617274626561743d6e6f6e652c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c636f686572656e63793d62756666657265642c6572726f72733d636f6e74696e75652c757365725f78617474722c626172726965723d30303030303030303030303030303032363131352c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030362c696e74722c6a6f75726e616c5f6173796e635f636f6d6d69742c00535d4e036013ec9e6e7ecdee3849b40884b95e94f35cec9600cd19beb0"], 0x1, 0x442a, &(0x7f0000004480)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
fallocate(r0, 0x0, 0x0, 0xffff)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0x0)
write$binfmt_script(r1, &(0x7f0000000380)={'#! ', './file0'}, 0xb)

kernel console output (not intermixed with test programs):

6] cp210x 7-1:0.0: failed to get vendor val 0x000e size 3: -32
[  573.305861][ T5856] usb 7-1: cp210x converter now attached to ttyUSB0
[  573.508555][ T5910] usb 7-1: USB disconnect, device number 11
[  573.517948][ T5910] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  573.524811][ T5910] cp210x 7-1:0.0: device disconnected
[  573.895483][T28581] syz.3.5350 (28581): drop_caches: 4
[  574.055645][T28583] loop6: detected capacity change from 0 to 256
[  574.060185][T28583] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  574.526319][ T5856] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  574.684339][ T5856] usb 7-1: config 220 has an invalid interface number: 76 but max is 2
[  574.695461][ T5856] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  574.699382][ T5856] usb 7-1: config 220 has no interface number 2
[  574.701834][ T5856] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  574.724073][ T5856] usb 7-1: config 220 interface 0 has no altsetting 0
[  574.727042][ T5856] usb 7-1: config 220 interface 76 has no altsetting 0
[  574.729660][ T5856] usb 7-1: config 220 interface 1 has no altsetting 0
[  574.735301][ T5856] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  574.738861][ T5856] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  574.741994][ T5856] usb 7-1: Product: syz
[  574.743613][ T5856] usb 7-1: Manufacturer: syz
[  574.756732][ T5856] usb 7-1: SerialNumber: syz
[  574.980855][ T5856] usb 7-1: selecting invalid altsetting 0
[  575.002136][ T5856] usb 7-1: Found UVC 7.01 device syz (8086:0b07)
[  575.004148][ T5856] usb 7-1: No valid video chain found.
[  575.010226][ T5856] usb 7-1: selecting invalid altsetting 0
[  575.012004][ T5856] usbtest 7-1:220.1: probe with driver usbtest failed with error -22
[  575.018572][ T5856] usb 7-1: USB disconnect, device number 12
[  575.749495][T28632] loop3: detected capacity change from 0 to 4096
[  575.753313][T28632] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  575.767273][T28632] ntfs3(loop3): ino=1a, mi_enum_attr
[  575.769093][T28632] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  575.771680][T28632] ntfs3(loop3): ino=1a, mi_enum_attr
[  575.773952][T28632] ntfs3(loop3): Failed to initialize $Extend/$Reparse.
[  576.092931][T28655] loop3: detected capacity change from 0 to 1024
[  576.104856][T28656] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun!
[  576.110237][T28637] loop6: detected capacity change from 0 to 40427
[  576.134860][T28637] F2FS-fs (loop6): invalid crc value
[  576.181805][T28637] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  576.185964][T28637] F2FS-fs (loop6): Start checkpoint disabled!
[  576.188839][T28637] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[  576.300318][T28670] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.5374'.
[  576.601378][T28694] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5385'.
[  576.607974][T28694] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5385'.
[  576.628148][T28696] loop6: detected capacity change from 0 to 164
[  576.637273][T28696] ISOFS: unable to read i-node block
[  576.639463][T28696] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  576.643375][T28696] isofs_fill_super: get root inode failed
[  576.895100][   T10] usb 4-1: new high-speed USB device number 95 using dummy_hcd
[  577.034048][ T5856] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  577.057382][   T10] usb 4-1: unable to get BOS descriptor or descriptor too short
[  577.061769][   T10] usb 4-1: config 7 has an invalid interface number: 232 but max is 0
[  577.066224][   T10] usb 4-1: config 7 has no interface number 0
[  577.068651][   T10] usb 4-1: config 7 interface 232 has no altsetting 0
[  577.073702][   T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice=7d.1d
[  577.077599][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  577.080752][   T10] usb 4-1: Product: syz
[  577.082514][   T10] usb 4-1: Manufacturer: syz
[  577.084750][   T10] usb 4-1: SerialNumber: syz
[  577.185137][ T5856] usb 7-1: Using ep0 maxpacket: 32
[  577.190064][ T5856] usb 7-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice=30.46
[  577.193797][ T5856] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  577.203403][ T5856] usb 7-1: config 0 descriptor??
[  577.299662][   T10] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:7.232/input/input48
[  577.312845][   T10] usb 4-1: USB disconnect, device number 95
[  577.422316][   T52] usb 7-1: USB disconnect, device number 13
[  577.596551][T28756] overlayfs: failed to clone upperpath
[  577.834636][T28764] loop3: detected capacity change from 0 to 64
[  577.838981][T28764] Bad inode number on dev loop3: 1 is out of range
[  578.070251][T28786] overlayfs: failed to clone upperpath
[  578.241993][   T52] usb 4-1: new high-speed USB device number 96 using dummy_hcd
[  578.396444][   T52] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  578.399495][   T52] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  578.402347][   T52] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  578.418175][   T52] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  578.421959][   T52] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  578.439881][   T52] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  578.447010][   T52] usb 4-1: config 0 descriptor??
[  578.672751][   T52] hdpvr 4-1:0.0: firmware version 0x20 dated %@
[  578.691904][   T52] hdpvr 4-1:0.0: untested firmware, the driver might not work.
[  579.374981][   T52] hdpvr 4-1:0.0: Could not setup controls
[  579.377164][   T52] hdpvr 4-1:0.0: registering videodev failed
[  579.455100][   T52] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -71
[  579.460744][   T52] usb 4-1: USB disconnect, device number 96
[  579.836308][T28809] loop3: detected capacity change from 0 to 4096
[  579.893371][T28809] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  580.012058][T13563] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  582.172213][ T5856] usb 4-1: new high-speed USB device number 97 using dummy_hcd
[  582.231605][   T10] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  582.342902][ T5856] usb 4-1: Using ep0 maxpacket: 8
[  582.347613][ T5856] usb 4-1: unable to get BOS descriptor or descriptor too short
[  582.351903][ T5856] usb 4-1: config 0 has an invalid interface number: 88 but max is 0
[  582.354874][ T5856] usb 4-1: config 0 has no interface number 0
[  582.357103][ T5856] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  582.363850][ T5856] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0
[  582.367719][ T5856] usb 4-1: config 0 interface 88 has no altsetting 0
[  582.375545][ T5856] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[  582.378747][ T5856] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[  582.381925][   T10] usb 7-1: Using ep0 maxpacket: 32
[  582.385588][ T5856] usb 4-1: Product: syz
[  582.387209][ T5856] usb 4-1: SerialNumber: syz
[  582.392678][   T10] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0
[  582.396515][   T10] usb 7-1: config 0 interface 0 has no altsetting 0
[  582.398921][   T10] usb 7-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[  582.402576][   T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  582.414781][ T5856] usb 4-1: config 0 descriptor??
[  582.418420][   T10] usb 7-1: config 0 descriptor??
[  582.636016][ T5856] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.88/input/input49
[  582.652149][ T5856] usb 4-1: USB disconnect, device number 97
[  582.835197][   T10] corsair-cpro 0003:1B1C:0C10.002D: unknown main item tag 0x0
[  582.838132][   T10] corsair-cpro 0003:1B1C:0C10.002D: unknown main item tag 0x0
[  582.841484][   T10] corsair-cpro 0003:1B1C:0C10.002D: unknown main item tag 0x0
[  582.844326][   T10] corsair-cpro 0003:1B1C:0C10.002D: unknown main item tag 0x0
[  582.847138][   T10] corsair-cpro 0003:1B1C:0C10.002D: unknown main item tag 0x0
[  582.856531][   T10] corsair-cpro 0003:1B1C:0C10.002D: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.6-1/input0
[  582.929068][   T10] corsair-cpro 0003:1B1C:0C10.002D: probe with driver corsair-cpro failed with error -38
[  583.033820][   T10] usb 7-1: USB disconnect, device number 14
[  583.216848][T28906] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5437'.
[  583.263979][T28906] 8021q: adding VLAN 0 to HW filter on device bond2
[  583.296311][T28941] 8021q: adding VLAN 0 to HW filter on device bond2
[  583.299428][T28941] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  583.307315][T28941] bond2: (slave vxcan3): Error -95 calling set_mac_address
[  583.501174][T28947] loop3: detected capacity change from 0 to 32768
[  583.516002][T28947] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  583.535464][T28947] ocfs2: Unknown parameter '184467440737095516150xffffffffffffffff18446744073709551615V?Cp~'~8pٻ젌|^(coM)'
[  583.607947][T13563] ocfs2: Unmounting device (7,3) on (node local)
[  583.965140][T28992] netlink: 'syz.3.5456': attribute type 1 has an invalid length.
[  584.126137][T29005] loop3: detected capacity change from 0 to 8
[  584.130255][T29005] SQUASHFS error: zlib decompression failed, data probably corrupt
[  584.135316][T29005] SQUASHFS error: Failed to read block 0x9b: -5
[  584.137315][T29005] SQUASHFS error: Unable to read metadata cache entry [99]
[  584.139593][T29005] SQUASHFS error: Unable to read inode 0x127
[  584.277241][T29020] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5468'.
[  584.310591][T29018] loop3: detected capacity change from 0 to 8192
[  585.031730][T29046] 9pnet_fd: Insufficient options for proto=fd
[  585.235653][T29060] loop6: detected capacity change from 0 to 16
[  585.250333][T29060] erofs (device loop6): mounted with root inode @ nid 36.
[  585.297579][T29060] erofs (device loop6): readahead error at folio 6 @ nid 36
[  585.305905][T29060] erofs (device loop6): readahead error at folio 4 @ nid 36
[  585.309642][T29060] erofs (device loop6): invalid logical cluster 0 at nid 36
[  585.315186][T29060] erofs (device loop6): readahead error at folio 0 @ nid 36
[  585.335586][T29060] syz.6.5484: attempt to access beyond end of device
[  585.335586][T29060] loop6: rw=524288, sector=296, nr_sectors = 16 limit=16
[  585.341042][T29060] syz.6.5484: attempt to access beyond end of device
[  585.341042][T29060] loop6: rw=524288, sector=1049264, nr_sectors = 16 limit=16
[  585.346130][T29060] syz.6.5484: attempt to access beyond end of device
[  585.346130][T29060] loop6: rw=524288, sector=8, nr_sectors = 16 limit=16
[  585.366045][T29060] syz.6.5484: attempt to access beyond end of device
[  585.366045][T29060] loop6: rw=524288, sector=720, nr_sectors = 16 limit=16
[  585.386534][T29060] erofs (device loop6): invalid logical cluster 0 at nid 36
[  585.392325][T29060] syz.6.5484: attempt to access beyond end of device
[  585.392325][T29060] loop6: rw=0, sector=296, nr_sectors = 8 limit=16
[  585.398705][T29060] erofs (device loop6): read error -5 @ 0 of nid 36
[  585.410223][T29060] erofs (device loop6): failed to readdir of logical block 0 of nid 36
[  585.597665][T29086] tipc: Started in network mode
[  585.599206][T29086] tipc: Node identity ac14140f, cluster identity 4711
[  585.602879][T29086] tipc: New replicast peer: 255.255.255.255
[  585.605166][T29086] tipc: Enabled bearer <udp:syz2>, priority 10
[  585.638780][T29089] loop6: detected capacity change from 0 to 8
[  585.653048][T29089] SQUASHFS error: Unable to read directory block [2c0:35]
[  585.842922][T29081] loop3: detected capacity change from 0 to 32768
[  585.915000][T29081] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  585.915029][T29081]   allowing incompatible features above 0.0: (unknown version)
[  585.915040][T29081]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  585.931338][T29081] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[  585.933979][T29081] bcachefs (loop3): initializing new filesystem
[  585.944209][T29081] bcachefs (loop3): going read-write
[  585.980789][T29081] bcachefs (loop3): marking superblocks
[  586.025615][T29081] bcachefs (loop3): initializing freespace
[  586.038726][T29081] bcachefs (loop3): done initializing freespace
[  586.052151][T29081] bcachefs (loop3): reading snapshots table
[  586.066900][T29081] bcachefs (loop3): reading snapshots done
[  586.128615][T29081] bcachefs (loop3): done starting filesystem
[  586.256570][T29137] netlink: 55631 bytes leftover after parsing attributes in process `syz.6.5513'.
[  586.264321][T13563] bcachefs (loop3): shutting down
[  586.267042][T13563] bcachefs (loop3): going read-only
[  586.274492][T29137] netlink: 6320 bytes leftover after parsing attributes in process `syz.6.5513'.
[  586.277219][T13563] bcachefs (loop3): finished waiting for writes to stop
[  586.278921][T29137] tc_dump_action: action bad kind
[  586.283658][T13563] bcachefs (loop3): flushing journal and stopping allocators, journal seq 2
[  586.367495][T13563] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 3
[  586.375566][T13563] bcachefs (loop3): clean shutdown complete, journal seq 4
[  586.378303][T13563] bcachefs (loop3): marking filesystem clean
[  586.426427][T13563] bcachefs (loop3): shutdown complete
[  586.724493][  T792] tipc: Node number set to 2886997007
[  586.989490][  T792] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  587.149051][  T792] usb 7-1: Using ep0 maxpacket: 8
[  587.154566][  T792] usb 7-1: config 8 has an invalid interface number: 161 but max is 0
[  587.157968][  T792] usb 7-1: config 8 has no interface number 0
[  587.161026][  T792] usb 7-1: config 8 interface 161 has no altsetting 0
[  587.165487][  T792] usb 7-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=60.da
[  587.170886][  T792] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  587.173925][  T792] usb 7-1: Product: syz
[  587.175575][  T792] usb 7-1: Manufacturer: syz
[  587.177371][  T792] usb 7-1: SerialNumber: syz
[  587.405912][  T792] net1080 7-1:8.161: probe with driver net1080 failed with error -22
[  587.411777][  T792] usb 7-1: USB disconnect, device number 15
[  588.008205][T29195] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5514'.
[  588.147916][T29204] ipip0: entered promiscuous mode
[  588.217135][T29216] netlink: 'syz.8.5539': attribute type 4 has an invalid length.
[  588.482068][T29232] netlink: 'syz.3.5546': attribute type 3 has an invalid length.
[  588.485180][T29232] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5546'.
[  588.607605][T29236] sctp: [Deprecated]: syz.3.5548 (pid 29236) Use of struct sctp_assoc_value in delayed_ack socket option.
[  588.607605][T29236] Use struct sctp_sack_info instead
[  589.352621][T29266] netlink: 452 bytes leftover after parsing attributes in process `syz.8.5562'.
[  589.551906][T29281] loop6: detected capacity change from 0 to 16
[  589.556273][T29281] erofs (device loop6): mounted with root inode @ nid 36.
[  590.464329][T29316] loop3: detected capacity change from 0 to 32768
[  590.469926][T29316] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.5584 (29316)
[  590.479144][T29316] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  590.483045][T29316] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  590.486350][T29316] BTRFS info (device loop3): using free-space-tree
[  590.490793][T29319] netdevsim netdevsim6 netdevsim0: entered allmulticast mode
[  590.507775][T29319] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  590.733864][T29328] loop6: detected capacity change from 0 to 32768
[  590.850503][T29328] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  590.876349][T29328] XFS (loop6): Ending clean mount
[  590.922037][T29328] XFS (loop6): Quotacheck needed: Please wait.
[  590.979202][T29328] XFS (loop6): Quotacheck: Done.
[  591.196671][T26288] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  591.421389][T13563] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  591.519040][T29361] loop6: detected capacity change from 0 to 1024
[  591.650953][   T32] hfsplus: b-tree write err: -5, ino 4
[  591.781536][T29377] random: crng reseeded on system resumption
[  592.858965][T29394] loop6: detected capacity change from 0 to 32768
[  592.862730][T29394] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.5601 (29394)
[  592.869823][T29394] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  592.873173][T29394] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm
[  592.876436][T29394] BTRFS info (device loop6): disk space caching is enabled
[  592.878596][T29394] BTRFS warning (device loop6): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  592.896724][T29394] BTRFS info (device loop6): rebuilding free space tree
[  592.908129][T29394] BTRFS info (device loop6): disabling free space tree
[  592.910608][T29394] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  592.913596][T29394] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  592.951696][   T33] audit: type=1800 audit(2000000124.552:180): pid=29394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.5601" name="file1" dev="loop6" ino=263 res=0 errno=0
[  593.016513][T26288] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  593.525849][   T10] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  593.641737][T29443] loop3: detected capacity change from 0 to 32768
[  593.659793][T29443] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  593.676785][T29443] XFS (loop3): Ending clean mount
[  593.690635][   T10] usb 7-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  593.694004][   T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  593.697428][T29443] XFS (loop3): User initiated shutdown received.
[  593.699440][T29443] XFS (loop3): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:476).  Shutting down filesystem.
[  593.700893][   T10] usb 7-1: config 0 descriptor??
[  593.703807][T29443] XFS (loop3): Please unmount the filesystem and rectify the problem(s)
[  593.712845][   T10] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  593.723641][T13563] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  593.907311][T29458] loop3: detected capacity change from 0 to 128
[  593.914367][T29458] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  593.924063][T29458] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  593.953452][T29458] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  593.965042][T29458] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  594.982311][   T10] usb 7-1: USB disconnect, device number 16
[  595.137221][T29503] netlink: 'syz.8.5629': attribute type 41 has an invalid length.
[  595.171245][T29505] loop3: detected capacity change from 0 to 256
[  595.206211][T29505] FAT-fs (loop3): Directory bread(block 64) failed
[  595.208906][T29505] FAT-fs (loop3): Directory bread(block 65) failed
[  595.211409][T29505] FAT-fs (loop3): Directory bread(block 66) failed
[  595.214005][T29505] FAT-fs (loop3): Directory bread(block 67) failed
[  595.220238][T29505] FAT-fs (loop3): Directory bread(block 68) failed
[  595.222675][T29505] FAT-fs (loop3): Directory bread(block 69) failed
[  595.226589][T29505] FAT-fs (loop3): Directory bread(block 70) failed
[  595.229060][T29505] FAT-fs (loop3): Directory bread(block 71) failed
[  595.231521][T29505] FAT-fs (loop3): Directory bread(block 72) failed
[  595.233936][T29505] FAT-fs (loop3): Directory bread(block 73) failed
[  595.364219][T29524] IPv6: Can't replace route, no match found
[  595.714713][  T792] usb 4-1: new full-speed USB device number 98 using dummy_hcd
[  595.917267][  T792] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  595.922968][  T792] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  595.928133][  T792] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  595.933625][  T792] usb 4-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00
[  595.941296][  T792] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  595.947638][  T792] usb 4-1: config 0 descriptor??
[  595.982793][T29557] loop6: detected capacity change from 0 to 256
[  595.989847][T29557] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d)
[  595.993618][T29557] exFAT-fs (loop6): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  596.173757][T29564] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5652'.
[  596.395197][  T792] ntrig 0003:1B96:0009.002E: hidraw0: USB HID v0.00 Device [HID 1b96:0009] on usb-dummy_hcd.3-1/input0
[  596.592306][  T792] ntrig 0003:1B96:0009.002E: Firmware version: 2.3.14.45.6 (cd15 bed5)
[  596.801782][  T792] usb 4-1: USB disconnect, device number 98
[  597.398666][T29617] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5669'.
[  597.721789][T29637] netlink: 'syz.3.5679': attribute type 11 has an invalid length.
[  598.051741][T29652] netlink: 'syz.8.5686': attribute type 4 has an invalid length.
[  598.208611][T29654] loop3: detected capacity change from 0 to 32768
[  598.211811][T29654] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.5687 (29654)
[  598.218265][T29654] BTRFS info (device loop3): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9
[  598.222281][T29654] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  598.227257][T29654] BTRFS info (device loop3): using free-space-tree
[  598.322304][   T33] audit: type=1804 audit(2000000129.924:181): pid=29654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.5687" name="/newroot/1134/file0/file1" dev="loop3" ino=260 res=1 errno=0
[  598.391077][T13563] BTRFS info (device loop3): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9
[  598.893142][   T10] usb 4-1: new high-speed USB device number 99 using dummy_hcd
[  599.012396][T29700] loop6: detected capacity change from 0 to 32768
[  599.015367][T29700] XFS (loop6): invalid logbufsize: 73 [not 16k,32k,64k,128k or 256k]
[  599.053727][   T10] usb 4-1: Using ep0 maxpacket: 8
[  599.057977][   T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D
[  599.062755][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0
[  599.069048][   T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0
[  599.073995][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  599.080555][   T10] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0124, bcdDevice=3a.9f
[  599.085274][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  599.088337][   T10] usb 4-1: Product: syz
[  599.090107][   T10] usb 4-1: Manufacturer: syz
[  599.091996][   T10] usb 4-1: SerialNumber: syz
[  599.097859][   T10] usb 4-1: config 0 descriptor??
[  599.102700][   T10] kvaser_usb 4-1:0.0: error -ENODEV: Cannot get usb endpoint(s)
[  599.310810][   T10] usb 4-1: USB disconnect, device number 99
[  599.366978][T29724] netlink: 'syz.6.5703': attribute type 39 has an invalid length.
[  599.372061][T29724] veth0_macvtap: left promiscuous mode
[  599.769349][T29747] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5710'.
[  600.047482][T29753] loop3: detected capacity change from 0 to 32768
[  600.054578][T29753] 
[  600.054578][T29753]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  600.054578][T29753] 
[  600.079382][T29753] read_mapping_page failed!
[  600.081146][T29753] ERROR: (device loop3): txCommit: 
[  600.081146][T29753] 
[  600.090549][T29753] read_mapping_page failed!
[  600.092015][T29753] ERROR: (device loop3): txCommit: 
[  600.092015][T29753] 
[  600.121738][T13563] 
[  600.121738][T13563]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  600.121738][T13563] 
[  600.133896][T13563] 
[  600.133896][T13563]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  600.133896][T13563] 
[  600.556912][T29784] netlink: 168 bytes leftover after parsing attributes in process `syz.8.5726'.
[  601.833074][T29828] loop6: detected capacity change from 0 to 512
[  601.845060][T29828] EXT4-fs: Ignoring removed oldalloc option
[  601.848441][T29828] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  601.882064][T29828] EXT4-fs (loop6): 1 truncate cleaned up
[  601.885016][T29828] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  601.922061][T26288] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  602.016791][T29826] loop3: detected capacity change from 0 to 32768
[  602.109361][T29826] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,background_target=invalid device 79,nojournal_transaction_names
[  602.109382][T29826]   allowing incompatible features above 0.0: (unknown version)
[  602.109388][T29826]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  602.128540][T29826] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[  602.131088][T29826] bcachefs (loop3): initializing new filesystem
[  602.136760][T29854] loop6: detected capacity change from 0 to 2048
[  602.142473][T29826] bcachefs (loop3): going read-write
[  602.147500][T29854] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  602.164935][T29826] bcachefs (loop3): marking superblocks
[  602.255430][T29826] bcachefs (loop3): initializing freespace
[  602.268678][T29826] bcachefs (loop3): done initializing freespace
[  602.268966][T29864] loop6: detected capacity change from 0 to 1024
[  602.276446][T29864] hfsplus: invalid btree flag
[  602.278458][T29864] hfsplus: failed to load attributes file
[  602.283487][T29826] bcachefs (loop3): reading snapshots table
[  602.285520][T29826] bcachefs (loop3): reading snapshots done
[  602.322556][T29826] bcachefs (loop3): done starting filesystem
[  602.381173][T29877] loop6: detected capacity change from 0 to 16
[  602.388604][T29877] erofs (device loop6): mounted with root inode @ nid 36.
[  602.489817][T29881] netlink: 80 bytes leftover after parsing attributes in process `syz.8.5755'.
[  602.518457][T13563] bcachefs (loop3): shutting down
[  602.520453][T13563] bcachefs (loop3): going read-only
[  602.523833][T13563] bcachefs (loop3): finished waiting for writes to stop
[  602.527499][T13563] bcachefs (loop3): flushing journal and stopping allocators, journal seq 3
[  602.626130][T13563] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 4
[  602.629831][T13563] bcachefs (loop3): clean shutdown complete, journal seq 5
[  602.634165][T13563] bcachefs (loop3): marking filesystem clean
[  602.664564][T13563] bcachefs (loop3): shutdown complete
[  604.182115][T29902] loop6: detected capacity change from 0 to 2048
[  604.193497][T29902] hpfs: Bad magic ... probably not HPFS
[  604.308153][T29915] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5769'.
[  604.417447][T29924] ubi31: detaching mtd0
[  604.449583][T29924] ubi31: mtd0 is detached
[  604.787172][T29944] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  604.820708][T29946] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5779'.
[  604.823494][T29946] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5779'.
[  604.990530][ T5876] usb 4-1: new full-speed USB device number 100 using dummy_hcd
[  605.142273][ T5876] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  605.146890][ T5876] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  605.151468][ T5876] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  605.155078][ T5876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  605.161847][ T5876] usb 4-1: config 0 descriptor??
[  605.212556][T29956] loop6: detected capacity change from 0 to 64
[  605.266202][   T33] audit: type=1326 audit(2000000136.868:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29960 comm="syz.6.5784" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2685d8ebe9 code=0x0
[  605.580346][ T5876] isku 0003:1E7D:319C.002F: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.3-1/input0
[  605.653255][T29970] overlayfs: failed to resolve './cgroup': -2
[  605.978676][  T792] usb 4-1: USB disconnect, device number 100
[  606.018723][T30005] netlink: 'syz.8.5797': attribute type 23 has an invalid length.
[  606.108227][T30012] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5799'.
[  606.929262][   T52] usb 4-1: new high-speed USB device number 101 using dummy_hcd
[  607.129286][   T52] usb 4-1: Using ep0 maxpacket: 16
[  607.134063][   T52] usb 4-1: unable to get BOS descriptor or descriptor too short
[  607.137906][   T52] usb 4-1: config 218 has an invalid interface number: 135 but max is 0
[  607.142221][   T52] usb 4-1: config 218 has no interface number 0
[  607.144531][   T52] usb 4-1: config 218 interface 135 has no altsetting 0
[  607.150884][   T52] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=38.d9
[  607.154470][   T52] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  607.157665][   T52] usb 4-1: Product: syz
[  607.162517][   T52] usb 4-1: Manufacturer: syz
[  607.164278][   T52] usb 4-1: SerialNumber: syz
[  607.368385][T30045] netlink: 340 bytes leftover after parsing attributes in process `syz.6.5806'.
[  607.390230][   T52] usb 4-1: USB disconnect, device number 101
[  607.416948][T30056] loop6: detected capacity change from 0 to 512
[  607.421570][T30056] EXT4-fs: Ignoring removed nomblk_io_submit option
[  607.434340][T30056] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  607.443424][T30056] ext4 filesystem being mounted at /273/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  607.476210][T26288] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  607.961511][T30085] netlink: 'syz.6.5818': attribute type 40 has an invalid length.
[  607.964308][T30085] netlink: 52 bytes leftover after parsing attributes in process `syz.6.5818'.
[  607.991323][   T52] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0
[  608.000658][   T52] hid-generic 0000:0000:0000.0030: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  608.011351][T30087] loop3: detected capacity change from 0 to 2048
[  608.022929][T30087] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  608.231634][T30119] overlayfs: failed to clone upperpath
[  608.295758][T30125] openvswitch: netlink: IP tunnel dst address not specified
[  608.737754][   T33] audit: type=1326 audit(2000000140.340:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30139 comm="syz.8.5838" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22ab18ebe9 code=0x7ffc0000
[  608.745837][   T33] audit: type=1326 audit(2000000140.340:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30139 comm="syz.8.5838" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22ab18ebe9 code=0x7ffc0000
[  608.755024][   T33] audit: type=1326 audit(2000000140.350:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30139 comm="syz.8.5838" exe="/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f22ab18ebe9 code=0x7ffc0000
[  608.762809][   T33] audit: type=1326 audit(2000000140.350:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30139 comm="syz.8.5838" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22ab18ebe9 code=0x7ffc0000
[  608.772206][   T33] audit: type=1326 audit(2000000140.350:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30139 comm="syz.8.5838" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22ab18ebe9 code=0x7ffc0000
[  608.779339][   T33] audit: type=1326 audit(2000000140.350:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30139 comm="syz.8.5838" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f22ab18ebe9 code=0x7ffc0000
[  608.788799][   T33] audit: type=1326 audit(2000000140.350:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30139 comm="syz.8.5838" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22ab18ebe9 code=0x7ffc0000
[  608.796609][   T33] audit: type=1326 audit(2000000140.350:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30139 comm="syz.8.5838" exe="/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f22ab18ebe9 code=0x7ffc0000
[  608.807985][   T33] audit: type=1326 audit(2000000140.350:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30139 comm="syz.8.5838" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22ab18ebe9 code=0x7ffc0000
[  609.130788][T30153] netlink: 'syz.3.5843': attribute type 4 has an invalid length.
[  609.134151][T30153] netlink: 17 bytes leftover after parsing attributes in process `syz.3.5843'.
[  609.263296][T30157] dvmrp0: entered allmulticast mode
[  609.334097][T30163] overlayfs: failed to clone upperpath
[  609.544750][T30173] overlayfs: failed to clone upperpath
[  609.871354][ T5897] usb 7-1: new full-speed USB device number 17 using dummy_hcd
[  609.908031][   T10] usb 4-1: new low-speed USB device number 102 using dummy_hcd
[  610.030765][ T5897] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  610.034645][ T5897] usb 7-1: New USB device found, idVendor=056a, idProduct=032b, bcdDevice= 0.00
[  610.039104][ T5897] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  610.045157][ T5897] usb 7-1: config 0 descriptor??
[  610.070276][   T10] usb 4-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[  610.074257][   T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  610.079932][   T10] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  610.086828][   T10] usb 4-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[  610.091355][   T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  610.095466][   T10] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  610.101913][   T10] usb 4-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[  610.105848][   T10] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  610.110054][   T10] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  610.120635][   T10] usb 4-1: string descriptor 0 read error: -22
[  610.123082][   T10] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  610.126542][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  610.141200][   T10] adutux 4-1:168.0: interrupt endpoints not found
[  610.342501][ T5876] usb 4-1: USB disconnect, device number 102
[  610.658035][ T5876] usb 7-1: USB disconnect, device number 17
[  611.163610][T30252] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  611.497861][T30254] loop6: detected capacity change from 0 to 32768
[  611.541886][T30254] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  611.573487][T30254] XFS (loop6): Ending clean mount
[  611.585943][T30254] XFS (loop6): Quotacheck needed: Please wait.
[  611.680779][T30254] XFS (loop6): Quotacheck: Done.
[  611.722946][T30273] loop3: detected capacity change from 0 to 4096
[  611.726388][T30273] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512).
[  611.741641][T26288] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  611.977237][T30297] loop3: detected capacity change from 0 to 512
[  611.981642][T30297] EXT4-fs (loop3): Test dummy encryption mode enabled
[  611.984423][T30297] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  612.021256][T30297] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.5891: bad orphan inode 131083
[  612.034297][T30297] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  612.077560][T13563] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  612.196343][ T5876] hid-generic 0000:0000:0000.0032: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz1
[  612.336225][T30343] loop3: detected capacity change from 0 to 256
[  612.424806][T30356] netlink: 'syz.3.5912': attribute type 2 has an invalid length.
[  612.428454][T30356] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5912'.
[  612.455784][T30358] netlink: 104 bytes leftover after parsing attributes in process `syz.8.5913'.
[  613.296693][T30360] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  613.300028][T30360] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  613.360119][T30422] loop6: detected capacity change from 0 to 8192
[  613.396912][T30422] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[  613.400171][T30422] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[  613.402702][T30422]  loop6: unable to read partition table
[  613.404654][T30422] loop_reread_partitions: partition scan of loop6 () failed (rc=-5)
[  613.744782][T30450] loop6: detected capacity change from 0 to 40427
[  613.748467][T30450] F2FS-fs (loop6): Corrupted extension count (3831 + 1 > 64)
[  613.750818][T30450] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock
[  613.753377][T30450] F2FS-fs (loop6): FLUSH_MERGE not compatible with readonly mode
[  613.817689][T30467] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5935'.
[  613.976669][T30478] Invalid ELF header magic: != ELF
[  614.097130][  T975] usb 4-1: new high-speed USB device number 103 using dummy_hcd
[  614.245707][  T975] usb 4-1: Using ep0 maxpacket: 8
[  614.249416][  T975] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  614.251898][  T975] usb 4-1: config 179 has no interface number 0
[  614.253809][  T975] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  614.257759][  T975] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  614.261224][  T975] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  614.264760][  T975] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  614.268650][  T975] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  614.272744][  T975] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  614.276634][  T975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  614.281505][T30469] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  614.435794][ T5897] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  614.505981][   T10] usb 4-1: USB disconnect, device number 103
[  614.506111][    C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  614.510744][    C1] dummy_hcd dummy_hcd.3: timer fired with no URBs pending?
[  614.595346][ T5897] usb 7-1: Using ep0 maxpacket: 32
[  614.599496][ T5897] usb 7-1: config index 0 descriptor too short (expected 35577, got 27)
[  614.602162][ T5897] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  614.604934][ T5897] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92
[  614.608029][ T5897] usb 7-1: config 1 has no interface number 0
[  614.609958][ T5897] usb 7-1: config 1 interface 1 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  614.613428][ T5897] usb 7-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  614.618245][ T5897] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  614.621225][ T5897] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  614.629765][ T5897] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found
[  614.830239][ T5897] snd_usb_pod 7-1:1.1: endpoint not available, using fallback values
[  614.833173][ T5897] snd_usb_pod 7-1:1.1: invalid control EP
[  614.835225][ T5897] snd_usb_pod 7-1:1.1: cannot start listening: -22
[  614.837460][ T5897] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected
[  614.840037][ T5897] snd_usb_pod 7-1:1.1: probe with driver snd_usb_pod failed with error -22
[  615.072409][T30519] loop3: detected capacity change from 0 to 512
[  615.085786][T30519] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  615.158245][T13563] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  615.715169][   T10] usb 4-1: new full-speed USB device number 104 using dummy_hcd
[  615.866960][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64
[  615.870728][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  615.877109][   T10] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  615.879926][   T10] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3
[  615.882617][   T10] usb 4-1: Manufacturer: syz
[  615.884897][   T10] usb 4-1: SerialNumber: syz
[  615.902439][   T10] usb 4-1: config 0 descriptor??
[  615.905915][T30536] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  615.910539][   T10] usb 4-1: ucan: probing device on interface #0
[  615.913035][   T10] usb 4-1: ucan: invalid endpoint configuration
[  615.916543][   T10] usb 4-1: ucan: probe failed; try to update the device firmware
[  616.290428][  T975] usb 4-1: USB disconnect, device number 104
[  617.078521][T30584] loop3: detected capacity change from 0 to 128
[  617.081883][T30584] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  617.087223][T30584] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  617.099627][T30584] overlayfs: upper fs needs to support d_type.
[  617.101818][T30584] overlayfs: upper fs does not support tmpfile.
[  617.464235][   T33] kauditd_printk_skb: 1 callbacks suppressed
[  617.464247][   T33] audit: type=1326 audit(2000000149.084:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30595 comm="syz.3.5970" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ed58ebe9 code=0x7ffc0000
[  617.475776][   T33] audit: type=1326 audit(2000000149.084:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30595 comm="syz.3.5970" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ed58ebe9 code=0x7ffc0000
[  617.483404][   T33] audit: type=1326 audit(2000000149.084:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30595 comm="syz.3.5970" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ed58ebe9 code=0x7ffc0000
[  617.490575][   T33] audit: type=1326 audit(2000000149.084:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30595 comm="syz.3.5970" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ed58ebe9 code=0x7ffc0000
[  617.492335][   T52] usb 7-1: USB disconnect, device number 18
[  617.497586][   T33] audit: type=1326 audit(2000000149.084:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30595 comm="syz.3.5970" exe="/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7f05ed58ebe9 code=0x7ffc0000
[  617.607444][T30608] loop6: detected capacity change from 0 to 4096
[  617.610908][T30608] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512).
[  617.624155][T30608] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[  617.682263][T30613] loop6: detected capacity change from 0 to 8
[  617.698310][T30613] SQUASHFS error: Failed to read block 0x63a: -5
[  617.701015][T30613] SQUASHFS error: Unable to read metadata cache entry [638]
[  617.704713][T30613] SQUASHFS error: Unable to read directory block [26067d:0]
[  617.892276][T30628] loop6: detected capacity change from 0 to 1024
[  617.896736][T30628] EXT4-fs: Ignoring removed bh option
[  617.899130][T30628] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  617.910184][T30628] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  617.975465][T30628] EXT4-fs error (device loop6): ext4_find_dest_de:2052: inode #12: block 7: comm syz.6.5980: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0
[  617.989522][T30628] EXT4-fs (loop6): Remounting filesystem read-only
[  618.035922][T26288] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  618.232723][T30653] netlink: 'syz.6.5989': attribute type 10 has an invalid length.
[  618.241632][T30653] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  618.260577][T30653] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  618.519727][T30665] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5992'.
[  618.526086][T30665] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5992'.
[  618.630131][T30662] overlayfs: missing 'lowerdir'
[  618.693324][   T33] audit: type=1326 audit(2000000150.305:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30595 comm="syz.3.5970" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ed58ebe9 code=0x7ffc0000
[  618.705335][   T33] audit: type=1326 audit(2000000150.305:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30595 comm="syz.3.5970" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ed58ebe9 code=0x7ffc0000
[  619.045421][T30681] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5999'.
[  619.234289][T30688] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6002'.
[  619.237926][T30688] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6002'.
[  619.772956][   T52] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[  619.823645][  T975] usb 4-1: new high-speed USB device number 105 using dummy_hcd
[  619.943702][   T52] usb 7-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac
[  619.946738][   T52] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  619.949404][   T52] usb 7-1: Product: syz
[  619.950933][   T52] usb 7-1: Manufacturer: syz
[  619.958134][   T52] usb 7-1: SerialNumber: syz
[  619.996398][  T975] usb 4-1: config 0 has an invalid interface number: 69 but max is 0
[  620.000069][   T52] usb 7-1: config 0 descriptor??
[  620.003427][  T975] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  620.007690][  T975] usb 4-1: config 0 has no interface number 0
[  620.017543][  T975] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 255
[  620.029180][  T975] usb 4-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  620.067739][  T975] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  620.071862][   T52] usb 7-1: interface 1 not found
[  620.074207][  T975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  620.076675][  T975] usb 4-1: Product: syz
[  620.081030][  T975] usb 4-1: Manufacturer: syz
[  620.084728][  T975] usb 4-1: SerialNumber: syz
[  620.088000][  T975] usb 4-1: config 0 descriptor??
[  620.090250][T30697] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  620.095072][  T975] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  620.098781][  T975] cyberjack ttyUSB0: usb_submit_urb(read int) failed
[  620.102024][  T975] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  620.298727][ T5897] usb 4-1: USB disconnect, device number 105
[  620.305213][ T5897] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  620.310266][ T5897] cyberjack 4-1:0.69: device disconnected
[  620.736099][T30736] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:9e:14:f0
[  620.741514][T30736] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:9e:14:f0
[  620.747357][T30736] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:9e:14:f0
[  620.752686][T30736] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:9e:14:f0
[  620.757167][T30736] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:9e:14:f0
[  620.761570][T30736] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:9e:14:f0
[  620.766808][T30736] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:9e:14:f0
[  620.771898][T30736] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:9e:14:f0
[  620.776588][T30736] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:9e:14:f0
[  620.781068][T30736] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:9e:14:f0
[  621.047840][T30748] loop3: detected capacity change from 0 to 40427
[  621.052626][T30748] F2FS-fs (loop3): invalid crc value
[  621.083017][T30748] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  621.086597][T30748] F2FS-fs (loop3): Start checkpoint disabled!
[  621.089431][T30748] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  621.120649][T30748] F2FS-fs (loop3): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled
[  621.154580][   T27] kworker/u10:0: attempt to access beyond end of device
[  621.154580][   T27] loop3: rw=1, sector=45096, nr_sectors = 128 limit=40427
[  621.163108][   T27] kworker/u10:0: attempt to access beyond end of device
[  621.163108][   T27] loop3: rw=2049, sector=45224, nr_sectors = 16 limit=40427
[  621.170062][   T27] CPU: 0 UID: 0 PID: 27 Comm: kworker/u10:0 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  621.170079][   T27] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  621.170087][   T27] Workqueue: writeback wb_workfn (flush-7:3)
[  621.170106][   T27] Call Trace:
[  621.170111][   T27]  <TASK>
[  621.170117][   T27]  dump_stack_lvl+0x189/0x250
[  621.170133][   T27]  ? __pfx_dump_stack_lvl+0x10/0x10
[  621.170143][   T27]  ? __pfx_queue_work_on+0x10/0x10
[  621.170152][   T27]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  621.170163][   T27]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  621.170178][   T27]  f2fs_handle_critical_error+0x37c/0x540
[  621.170195][   T27]  f2fs_write_end_io+0x886/0xb60
[  621.170217][   T27]  __submit_merged_bio+0x27a/0x6a0
[  621.170238][   T27]  __submit_merged_write_cond+0x255/0x530
[  621.170253][   T27]  f2fs_write_data_pages+0x261d/0x3000
[  621.170282][   T27]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  621.170336][   T27]  ? f2fs_write_meta_pages+0x357/0x450
[  621.170353][   T27]  ? __lock_acquire+0xab9/0xd20
[  621.170368][   T27]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  621.170379][   T27]  do_writepages+0x32e/0x550
[  621.170395][   T27]  ? reacquire_held_locks+0x127/0x1d0
[  621.170403][   T27]  ? writeback_sb_inodes+0x384/0x1010
[  621.170419][   T27]  __writeback_single_inode+0x145/0xff0
[  621.170429][   T27]  ? do_raw_spin_unlock+0x4d/0x240
[  621.170442][   T27]  writeback_sb_inodes+0x6c7/0x1010
[  621.170467][   T27]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  621.170523][   T27]  ? rcu_is_watching+0x15/0xb0
[  621.170540][   T27]  wb_writeback+0x43b/0xaf0
[  621.170555][   T27]  ? queue_io+0x3d1/0x590
[  621.170566][   T27]  ? __pfx_wb_writeback+0x10/0x10
[  621.170582][   T27]  ? _raw_spin_unlock_irq+0x23/0x50
[  621.170593][   T27]  wb_workfn+0x409/0xef0
[  621.170610][   T27]  ? __pfx_wb_workfn+0x10/0x10
[  621.170622][   T27]  ? __lock_acquire+0xab9/0xd20
[  621.170639][   T27]  ? process_scheduled_works+0x9ef/0x17b0
[  621.170651][   T27]  ? _raw_spin_unlock_irq+0x23/0x50
[  621.170659][   T27]  ? process_scheduled_works+0x9ef/0x17b0
[  621.170666][   T27]  ? process_scheduled_works+0x9ef/0x17b0
[  621.170675][   T27]  process_scheduled_works+0xae1/0x17b0
[  621.170699][   T27]  ? __pfx_process_scheduled_works+0x10/0x10
[  621.170716][   T27]  worker_thread+0x8a0/0xda0
[  621.170740][   T27]  kthread+0x711/0x8a0
[  621.170752][   T27]  ? __pfx_worker_thread+0x10/0x10
[  621.170760][   T27]  ? __pfx_kthread+0x10/0x10
[  621.170771][   T27]  ? _raw_spin_unlock_irq+0x23/0x50
[  621.170779][   T27]  ? lockdep_hardirqs_on+0x9c/0x150
[  621.170789][   T27]  ? __pfx_kthread+0x10/0x10
[  621.170799][   T27]  ret_from_fork+0x3fc/0x770
[  621.170810][   T27]  ? __pfx_ret_from_fork+0x10/0x10
[  621.170823][   T27]  ? __switch_to_asm+0x39/0x70
[  621.170833][   T27]  ? __switch_to_asm+0x33/0x70
[  621.170843][   T27]  ? __pfx_kthread+0x10/0x10
[  621.170853][   T27]  ret_from_fork_asm+0x1a/0x30
[  621.170872][   T27]  </TASK>
[  621.170877][   T27] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  621.266186][   T27] CPU: 0 UID: 0 PID: 27 Comm: kworker/u10:0 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  621.266201][   T27] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  621.266208][   T27] Workqueue: writeback wb_workfn (flush-7:3)
[  621.266234][   T27] Call Trace:
[  621.266238][   T27]  <TASK>
[  621.266243][   T27]  dump_stack_lvl+0x189/0x250
[  621.266259][   T27]  ? __pfx_dump_stack_lvl+0x10/0x10
[  621.266269][   T27]  ? __pfx_queue_work_on+0x10/0x10
[  621.266278][   T27]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  621.266289][   T27]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  621.266304][   T27]  f2fs_handle_critical_error+0x37c/0x540
[  621.266321][   T27]  f2fs_write_end_io+0x886/0xb60
[  621.266343][   T27]  __submit_merged_bio+0x27a/0x6a0
[  621.266356][   T27]  __submit_merged_write_cond+0x255/0x530
[  621.266370][   T27]  f2fs_write_data_pages+0x261d/0x3000
[  621.266400][   T27]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  621.266454][   T27]  ? f2fs_write_meta_pages+0x357/0x450
[  621.266470][   T27]  ? __lock_acquire+0xab9/0xd20
[  621.266512][   T27]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  621.266525][   T27]  do_writepages+0x32e/0x550
[  621.266540][   T27]  ? reacquire_held_locks+0x127/0x1d0
[  621.266548][   T27]  ? writeback_sb_inodes+0x384/0x1010
[  621.266563][   T27]  __writeback_single_inode+0x145/0xff0
[  621.266574][   T27]  ? do_raw_spin_unlock+0x4d/0x240
[  621.266587][   T27]  writeback_sb_inodes+0x6c7/0x1010
[  621.266612][   T27]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  621.266653][   T27]  ? rcu_is_watching+0x15/0xb0
[  621.266673][   T27]  wb_writeback+0x43b/0xaf0
[  621.266695][   T27]  ? queue_io+0x3d1/0x590
[  621.266715][   T27]  ? __pfx_wb_writeback+0x10/0x10
[  621.266735][   T27]  ? _raw_spin_unlock_irq+0x23/0x50
[  621.266748][   T27]  wb_workfn+0x409/0xef0
[  621.266775][   T27]  ? __pfx_wb_workfn+0x10/0x10
[  621.266793][   T27]  ? __lock_acquire+0xab9/0xd20
[  621.266825][   T27]  ? process_scheduled_works+0x9ef/0x17b0
[  621.266838][   T27]  ? _raw_spin_unlock_irq+0x23/0x50
[  621.266847][   T27]  ? process_scheduled_works+0x9ef/0x17b0
[  621.266854][   T27]  ? process_scheduled_works+0x9ef/0x17b0
[  621.266862][   T27]  process_scheduled_works+0xae1/0x17b0
[  621.266887][   T27]  ? __pfx_process_scheduled_works+0x10/0x10
[  621.266905][   T27]  worker_thread+0x8a0/0xda0
[  621.266929][   T27]  kthread+0x711/0x8a0
[  621.266942][   T27]  ? __pfx_worker_thread+0x10/0x10
[  621.266955][   T27]  ? __pfx_kthread+0x10/0x10
[  621.266971][   T27]  ? _raw_spin_unlock_irq+0x23/0x50
[  621.266983][   T27]  ? lockdep_hardirqs_on+0x9c/0x150
[  621.267000][   T27]  ? __pfx_kthread+0x10/0x10
[  621.267018][   T27]  ret_from_fork+0x3fc/0x770
[  621.267037][   T27]  ? __pfx_ret_from_fork+0x10/0x10
[  621.267057][   T27]  ? __switch_to_asm+0x39/0x70
[  621.267075][   T27]  ? __switch_to_asm+0x33/0x70
[  621.267092][   T27]  ? __pfx_kthread+0x10/0x10
[  621.267108][   T27]  ret_from_fork_asm+0x1a/0x30
[  621.267128][   T27]  </TASK>
[  621.267135][   T27] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  621.390834][T30769] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6024'.
[  621.931612][ T5897] usb 4-1: new high-speed USB device number 106 using dummy_hcd
[  622.132356][   T10] usb 7-1: USB disconnect, device number 19
[  622.145182][ T5897] usb 4-1: config 0 has an invalid interface number: 212 but max is 0
[  622.147720][ T5897] usb 4-1: config 0 has no interface number 0
[  622.149584][ T5897] usb 4-1: config 0 interface 212 has no altsetting 0
[  622.157515][ T5897] usb 4-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=31.00
[  622.160764][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  622.164071][ T5897] usb 4-1: Product: syz
[  622.165524][ T5897] usb 4-1: Manufacturer: syz
[  622.167137][ T5897] usb 4-1: SerialNumber: syz
[  622.170081][ T5897] usb 4-1: config 0 descriptor??
[  622.176893][ T5897] ftdi_sio 4-1:0.212: FTDI USB Serial Device converter detected
[  622.183250][ T5897] usb 4-1: Detected FT4232HP
[  622.226066][T30818] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6038'.
[  622.229244][T30818] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6038'.
[  622.338808][T30824] loop6: detected capacity change from 0 to 512
[  622.342510][T30824] EXT4-fs: Ignoring removed orlov option
[  622.344784][T30824] EXT4-fs: Ignoring removed mblk_io_submit option
[  622.349190][T30824] EXT4-fs (loop6): orphan cleanup on readonly fs
[  622.352469][T30824] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13
[  622.356629][T30824] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.6041: attempt to clear invalid blocks 2 len 1
[  622.365314][T30824] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  622.374240][T30824] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.6041: invalid indirect mapped block 1819239214 (level 0)
[  622.380227][T30824] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.6041: invalid indirect mapped block 1819239214 (level 1)
[  622.383566][ T5897] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  622.385367][T30824] EXT4-fs (loop6): 1 truncate cleaned up
[  622.389494][ T5897] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  622.389494][T30824] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  622.398650][ T5897] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  622.403790][ T5897] usb 4-1: USB disconnect, device number 106
[  622.407651][T26288] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  622.414525][ T5897] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  622.436276][ T5897] ftdi_sio 4-1:0.212: device disconnected
[  622.657110][T30846] loop6: detected capacity change from 0 to 40427
[  622.681253][   T33] audit: type=1326 audit(2000000154.297:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30855 comm="syz.8.6046" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22ab18ebe9 code=0x7ffc0000
[  622.687794][   T33] audit: type=1326 audit(2000000154.297:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30855 comm="syz.8.6046" exe="/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f22ab18ebe9 code=0x7ffc0000
[  622.712684][   T33] audit: type=1326 audit(2000000154.297:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30855 comm="syz.8.6046" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22ab18ebe9 code=0x7ffc0000
[  622.719503][   T33] audit: type=1326 audit(2000000154.297:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30855 comm="syz.8.6046" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22ab18ebe9 code=0x7ffc0000
[  622.728792][T30846] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  622.733593][T30846] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  622.749978][T30846] syz.6.6043: attempt to access beyond end of device
[  622.749978][T30846] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  622.778430][T26288] syz-executor: attempt to access beyond end of device
[  622.778430][T26288] loop6: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  622.791175][T26288] CPU: 1 UID: 0 PID: 26288 Comm: syz-executor Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  622.791193][T26288] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  622.791200][T26288] Call Trace:
[  622.791204][T26288]  <TASK>
[  622.791209][T26288]  dump_stack_lvl+0x189/0x250
[  622.791228][T26288]  ? __pfx_dump_stack_lvl+0x10/0x10
[  622.791239][T26288]  ? __pfx_queue_work_on+0x10/0x10
[  622.791248][T26288]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  622.791260][T26288]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  622.791275][T26288]  f2fs_handle_critical_error+0x37c/0x540
[  622.791292][T26288]  f2fs_write_end_io+0x886/0xb60
[  622.791315][T26288]  __submit_merged_bio+0x27a/0x6a0
[  622.791328][T26288]  __submit_merged_write_cond+0x255/0x530
[  622.791363][T26288]  f2fs_write_data_pages+0x261d/0x3000
[  622.791394][T26288]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  622.791404][T26288]  ? is_bpf_text_address+0x26/0x2b0
[  622.791440][T26288]  ? ktime_get+0x3e/0x1f0
[  622.791450][T26288]  ? ktime_get+0x3e/0x1f0
[  622.791460][T26288]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  622.791469][T26288]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[  622.791485][T26288]  ? rcu_is_watching+0x15/0xb0
[  622.791499][T26288]  ? __lock_acquire+0xab9/0xd20
[  622.791520][T26288]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  622.791531][T26288]  do_writepages+0x32e/0x550
[  622.791550][T26288]  ? do_raw_spin_unlock+0x4d/0x240
[  622.791563][T26288]  filemap_fdatawrite+0x199/0x240
[  622.791576][T26288]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  622.791612][T26288]  ? do_raw_spin_unlock+0x4d/0x240
[  622.791624][T26288]  f2fs_sync_dirty_inodes+0x31f/0x830
[  622.791644][T26288]  f2fs_write_checkpoint+0x95a/0x1df0
[  622.791668][T26288]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  622.791705][T26288]  ? kill_f2fs_super+0x298/0x6c0
[  622.791720][T26288]  kill_f2fs_super+0x2c3/0x6c0
[  622.791735][T26288]  ? __pfx_kill_f2fs_super+0x10/0x10
[  622.791745][T26288]  ? radix_tree_delete_item+0x2b6/0x400
[  622.791760][T26288]  ? shrinker_free+0x2ce/0x3e0
[  622.791770][T26288]  deactivate_locked_super+0xbc/0x130
[  622.791782][T26288]  cleanup_mnt+0x425/0x4c0
[  622.791792][T26288]  ? lockdep_hardirqs_on+0x9c/0x150
[  622.791804][T26288]  task_work_run+0x1d4/0x260
[  622.791822][T26288]  ? __pfx_task_work_run+0x10/0x10
[  622.791831][T26288]  ? __x64_sys_umount+0x122/0x160
[  622.791845][T26288]  ? exit_to_user_mode_loop+0x40/0x110
[  622.791859][T26288]  exit_to_user_mode_loop+0xec/0x110
[  622.791870][T26288]  do_syscall_64+0x2bd/0x3b0
[  622.791880][T26288]  ? lockdep_hardirqs_on+0x9c/0x150
[  622.791890][T26288]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  622.791898][T26288]  ? exc_page_fault+0x9f/0xf0
[  622.791909][T26288]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  622.791917][T26288] RIP: 0033:0x7f2685d8ff17
[  622.791926][T26288] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  622.791934][T26288] RSP: 002b:00007ffe91f44eb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  622.791944][T26288] RAX: 0000000000000000 RBX: 00007f2685e11c05 RCX: 00007f2685d8ff17
[  622.791950][T26288] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe91f44f70
[  622.791955][T26288] RBP: 00007ffe91f44f70 R08: 0000000000000000 R09: 0000000000000000
[  622.791961][T26288] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe91f46000
[  622.791967][T26288] R13: 00007f2685e11c05 R14: 00000000000980e0 R15: 00007ffe91f46040
[  622.791982][T26288]  </TASK>
[  622.791986][T26288] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  623.211012][ T5897] usb 4-1: new high-speed USB device number 107 using dummy_hcd
[  623.268666][T30891] netlink: 224 bytes leftover after parsing attributes in process `syz.8.6059'.
[  623.274625][T30891] netlink: 224 bytes leftover after parsing attributes in process `syz.8.6059'.
[  623.277900][T30891] netlink: 38 bytes leftover after parsing attributes in process `syz.8.6059'.
[  623.363253][ T5897] usb 4-1: config 0 has an invalid interface number: 239 but max is 0
[  623.366355][ T5897] usb 4-1: config 0 has no interface number 0
[  623.374356][ T5897] usb 4-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73
[  623.377374][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  623.382818][ T5897] usb 4-1: Product: syz
[  623.384540][ T5897] usb 4-1: Manufacturer: syz
[  623.386308][ T5897] usb 4-1: SerialNumber: syz
[  623.393231][ T5897] usb 4-1: config 0 descriptor??
[  623.400923][  T792] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  623.550934][  T792] usb 7-1: Using ep0 maxpacket: 16
[  623.555692][  T792] usb 7-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  623.559084][  T792] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  623.911653][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  623.915391][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  623.952346][  T792] usb 7-1: config 0 descriptor??
[  623.958822][  T792] gspca_main: sonixj-2.14.0 probing 0471:0327
[  624.319719][T30904] netlink: 'syz.8.6062': attribute type 16 has an invalid length.
[  624.322625][T30904] netlink: 'syz.8.6062': attribute type 3 has an invalid length.
[  624.325523][T30904] netlink: 132 bytes leftover after parsing attributes in process `syz.8.6062'.
[  624.330508][ T5897] asix 4-1:0.239 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  624.336683][ T5897] asix 4-1:0.239: probe with driver asix failed with error -71
[  624.342492][ T5897] usb 4-1: USB disconnect, device number 107
[  624.362510][  T792] gspca_sonixj: reg_r err -71
[  624.364067][  T792] sonixj 7-1:0.0: probe with driver sonixj failed with error -71
[  624.367977][  T792] usb 7-1: USB disconnect, device number 20
[  624.468833][   T33] audit: type=1107 audit(2000000156.088:204): pid=30925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  625.008606][T30942] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  625.147259][T30938] loop3: detected capacity change from 0 to 32768
[  625.412753][T30963] batadv0: entered promiscuous mode
[  625.414897][T30963] macvtap1: entered promiscuous mode
[  625.417524][T30963] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  625.427734][T30963] batadv0: left promiscuous mode
[  625.554422][T30977] loop6: detected capacity change from 0 to 2048
[  625.559960][T30977] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  625.660604][T30986] loop6: detected capacity change from 0 to 128
[  625.675096][T30986] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  625.679392][T30986] ext4 filesystem being mounted at /361/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  625.685569][T30986] EXT4-fs warning (device loop6): verify_group_input:137: Cannot add at group 25 (only 1 groups)
[  625.702124][T26288] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  625.929881][ T5876] usb 4-1: new high-speed USB device number 108 using dummy_hcd
[  625.932942][T31002] loop6: detected capacity change from 0 to 32768
[  625.936471][T31002] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.6093 (31002)
[  625.943574][T31002] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  625.946733][T31002] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm
[  625.949731][T31002] BTRFS info (device loop6): using free-space-tree
[  626.022136][T26288] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  626.138362][ T5876] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  626.142079][ T5876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  626.144575][ T5876] usb 4-1: Product: syz
[  626.145926][ T5876] usb 4-1: Manufacturer: syz
[  626.147548][ T5876] usb 4-1: SerialNumber: syz
[  626.154830][ T5876] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  626.230263][  T975] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  626.425125][T31037] loop6: detected capacity change from 0 to 256
[  626.480085][T31037] FAT-fs (loop6): Directory bread(block 64) failed
[  626.483167][T31037] FAT-fs (loop6): Directory bread(block 65) failed
[  626.485374][T31037] FAT-fs (loop6): Directory bread(block 66) failed
[  626.487547][T31037] FAT-fs (loop6): Directory bread(block 67) failed
[  626.499456][T31037] FAT-fs (loop6): Directory bread(block 68) failed
[  626.502181][T31037] FAT-fs (loop6): Directory bread(block 69) failed
[  626.515939][T31037] FAT-fs (loop6): Directory bread(block 70) failed
[  626.518029][T31037] FAT-fs (loop6): Directory bread(block 71) failed
[  626.526135][T31037] FAT-fs (loop6): Directory bread(block 72) failed
[  626.528224][T31037] FAT-fs (loop6): Directory bread(block 73) failed
[  626.873387][T31049] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6102'.
[  627.199295][   T52] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[  627.365449][   T52] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  627.369587][   T52] usb 7-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  627.376740][   T52] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  627.382565][   T52] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  627.385259][   T52] usb 7-1: Product: syz
[  627.386658][   T52] usb 7-1: Manufacturer: syz
[  627.388181][   T52] usb 7-1: SerialNumber: syz
[  627.397601][   T52] cdc_ncm 7-1:1.0: skipping garbage
[  627.400479][   T52] cdc_ncm 7-1:1.0: NCM or ECM functional descriptors missing
[  627.402970][   T52] cdc_ncm 7-1:1.0: bind() failure
[  627.410034][   T52] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found
[  627.412233][   T52] cdc_ncm 7-1:1.1: bind() failure
[  627.560880][  T975] usb 4-1: Service connection timeout for: 256
[  627.563036][  T975] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services
[  627.586069][  T975] ath9k_htc: Failed to initialize the device
[  627.611721][  T975] usb 4-1: ath9k_htc: USB layer deinitialized
[  627.626750][   T52] usb 7-1: USB disconnect, device number 21
[  627.760447][T31076] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  627.834584][T31080] pimreg: entered allmulticast mode
[  627.840566][T31080] pimreg: left allmulticast mode
[  627.865357][   T52] usb 4-1: USB disconnect, device number 108
[  628.185389][T31103] netlink: 'syz.6.6116': attribute type 4 has an invalid length.
[  628.427671][T31128] input: syz1 as /devices/virtual/input/input50
[  628.555143][T31143] netlink: 'syz.3.6131': attribute type 1 has an invalid length.
[  628.702694][T31153] loop3: detected capacity change from 0 to 64
[  629.149049][T31178] loop6: detected capacity change from 0 to 32768
[  629.156108][T31178] 
[  629.156108][T31178]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  629.156108][T31178] 
[  629.172594][T31178] read_mapping_page failed!
[  629.174777][T31178] ERROR: (device loop6): txCommit: 
[  629.174777][T31178] 
[  629.187187][T31178] jfs_rmdir: dtDelete returned -2
[  629.437146][T24570] ERROR: (device loop6): diWrite: ixpxd invalid
[  629.437146][T24570] 
[  629.441465][T24570] ERROR: (device loop6): txCommit: 
[  629.441465][T24570] 
[  629.444165][T24570] jfs_write_inode: jfs_commit_inode failed!
[  629.446345][T26288] 
[  629.446345][T26288]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  629.446345][T26288] 
[  629.451602][T26288] 
[  629.451602][T26288]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  629.451602][T26288] 
[  629.544974][T31198] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6152'.
[  629.548410][T31198] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6152'.
[  630.367707][  T975] usb 4-1: new high-speed USB device number 109 using dummy_hcd
[  630.518043][  T975] usb 4-1: Using ep0 maxpacket: 16
[  630.522422][  T975] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[  630.525973][  T975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  630.532260][  T975] usb 4-1: config 0 descriptor??
[  630.541699][  T975] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[  630.750239][  T975] usb 4-1: Detected FT232A
[  630.755397][  T975] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  630.765386][  T975] usb 4-1: USB disconnect, device number 109
[  630.771038][  T975] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  630.779102][  T975] ftdi_sio 4-1:0.0: device disconnected
[  630.864683][T31275] loop6: detected capacity change from 0 to 2048
[  630.913309][T31275] Alternate GPT is invalid, using primary GPT.
[  630.915823][T31275]  loop6: p2 p3 p7
[  631.081840][T31293] loop6: detected capacity change from 0 to 512
[  631.435753][T31315] loop6: detected capacity change from 0 to 2048
[  631.443308][T31315] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  631.450439][T31315] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found
[  631.453093][T31315] UDF-fs: Scanning with blocksize 512 failed
[  631.471973][T31315] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  631.551070][T31325] netlink: 'syz.8.6195': attribute type 30 has an invalid length.
[  631.645649][T31319] loop3: detected capacity change from 0 to 32768
[  631.656339][T31319] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  631.683296][T31319] XFS (loop3): Ending clean mount
[  631.730735][   T33] audit: type=1800 audit(2000000163.351:205): pid=31319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6193" name="file1" dev="loop3" ino=6150 res=0 errno=0
[  631.756197][T13563] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  631.891130][    C0] vkms_vblank_simulate: vblank timer overrun
[  631.920676][    C0] vkms_vblank_simulate: vblank timer overrun
[  632.056113][T31364] netlink: 'syz.3.6207': attribute type 2 has an invalid length.
[  632.104081][T31368] ALSA: mixer_oss: invalid OSS volume ''
[  632.159533][T31372] sctp: [Deprecated]: syz.3.6211 (pid 31372) Use of int in max_burst socket option deprecated.
[  632.159533][T31372] Use struct sctp_assoc_value instead
[  632.976431][  T975] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[  633.128278][  T975] usb 7-1: Using ep0 maxpacket: 8
[  633.141037][  T975] usb 7-1: config 2 has an invalid interface number: 206 but max is 0
[  633.144431][  T975] usb 7-1: config 2 has no interface number 0
[  633.150813][  T975] usb 7-1: config 2 interface 206 has no altsetting 0
[  633.154027][  T975] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10b2, bcdDevice=b1.2a
[  633.158303][  T975] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  633.385638][T31395] kAFS: Can only specify source 'none' with -o dyn
[  633.509413][  T792] usb 7-1: USB disconnect, device number 22
[  634.628192][T31423] loop6: detected capacity change from 0 to 40427
[  634.706544][T31437] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  634.747182][T31437] bond3: entered promiscuous mode
[  634.749625][T31437] bond3: entered allmulticast mode
[  634.752009][T31437] 8021q: adding VLAN 0 to HW filter on device bond3
[  634.757214][  T975] usb 4-1: new high-speed USB device number 110 using dummy_hcd
[  634.911041][  T975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  634.927891][  T975] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  634.933437][  T975] usb 4-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00
[  634.940707][  T975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  634.953712][  T975] usb 4-1: config 0 descriptor??
[  635.379977][  T975] ortek 0003:1223:3F07.0033: unknown main item tag 0x6
[  635.384050][  T975] ortek 0003:1223:3F07.0033: report_id 0 is invalid
[  635.389461][  T975] ortek 0003:1223:3F07.0033: item 0 2 1 8 parsing failed
[  635.392062][  T975] ortek 0003:1223:3F07.0033: probe with driver ortek failed with error -22
[  635.625766][  T792] usb 4-1: USB disconnect, device number 110
[  636.153512][T31541] netlink: 'syz.6.6258': attribute type 10 has an invalid length.
[  636.161575][T31541] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6258'.
[  636.476584][T31547] loop6: detected capacity change from 0 to 32768
[  636.480506][T31545] loop3: detected capacity change from 0 to 32768
[  636.483486][T31545] XFS: attr2 mount option is deprecated.
[  636.503455][T31547] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  636.509002][T31545] XFS (loop3): DAX unsupported by block device. Turning off DAX.
[  636.513212][T31545] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  636.520180][T31547] XFS (loop6): Ending clean mount
[  636.538581][T31545] XFS (loop3): Ending clean mount
[  636.543302][T31545] XFS (loop3): Quotacheck needed: Please wait.
[  636.611351][T26288] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  636.623667][T31545] XFS (loop3): Quotacheck: Done.
[  636.627609][T31586] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6268'.
[  636.694480][T13563] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  636.827277][T31594] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6272'.
[  636.893754][T31598] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6273'.
[  637.007093][T31603] netlink: 'syz.8.6274': attribute type 178 has an invalid length.
[  637.613805][  T792] usb 4-1: new high-speed USB device number 111 using dummy_hcd
[  637.763748][  T792] usb 4-1: Using ep0 maxpacket: 32
[  637.768751][  T792] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  637.774060][  T792] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95
[  637.777220][  T792] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  637.780307][  T792] usb 4-1: Product: syz
[  637.781978][  T792] usb 4-1: Manufacturer: syz
[  637.789562][  T792] usb 4-1: SerialNumber: syz
[  637.795712][  T792] usb 4-1: config 0 descriptor??
[  637.800881][  T792] microtek usb (rev 0.4.3): expecting 3 got 0 endpoints! Bailing out.
[  637.844843][T31634] loop6: detected capacity change from 0 to 40427
[  637.849545][T31634] F2FS-fs (loop6): invalid crc value
[  637.880857][T31634] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  637.885343][T31634] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  638.010800][  T792] usb 4-1: USB disconnect, device number 111
[  638.324182][  T975] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[  638.566884][  T975] usb 7-1: unable to get BOS descriptor or descriptor too short
[  638.571254][  T975] usb 7-1: config 6 has an invalid interface number: 158 but max is 0
[  638.576964][  T975] usb 7-1: config 6 has no interface number 0
[  638.579583][  T975] usb 7-1: config 6 interface 158 has no altsetting 0
[  638.587082][  T975] usb 7-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=da.29
[  638.590645][  T975] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  638.598557][  T975] usb 7-1: Product: syz
[  638.600270][  T975] usb 7-1: Manufacturer: syz
[  638.602096][  T975] usb 7-1: SerialNumber: syz
[  638.966486][T31671] loop3: detected capacity change from 0 to 32768
[  638.970262][T31671] jfs_mount: dbMount failed w/rc = -22
[  638.976191][T31671] Mount JFS Failure: -22
[  639.114996][T31681] loop3: detected capacity change from 0 to 512
[  639.118621][T31681] EXT4-fs (loop3): Test dummy encryption mode enabled
[  639.121016][T31681] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  639.128272][T31681] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.6299: bad orphan inode 131083
[  639.135433][T31681] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  639.177379][T13563] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  639.464676][  T792] usb 4-1: new high-speed USB device number 112 using dummy_hcd
[  639.612745][  T792] usb 4-1: Using ep0 maxpacket: 16
[  639.624367][  T792] usb 4-1: config 0 has an invalid interface number: 41 but max is 0
[  639.626835][  T792] usb 4-1: config 0 has no interface number 0
[  639.628764][  T792] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  639.633989][  T792] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  639.638445][  T792] usb 4-1: config 0 interface 41 has no altsetting 0
[  639.648187][  T792] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  639.651978][  T792] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  639.655462][  T792] usb 4-1: Product: syz
[  639.656997][  T792] usb 4-1: Manufacturer: syz
[  639.658663][  T792] usb 4-1: SerialNumber: syz
[  639.663532][  T792] usb 4-1: config 0 descriptor??
[  639.672575][T31688] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  639.675988][T31688] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  639.843947][  T975] rtsx_usb 7-1:6.158: probe with driver rtsx_usb failed with error -71
[  639.849997][  T975] usb 7-1: USB disconnect, device number 23
[  639.885819][T31688] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  639.888184][T31688] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  640.094307][T31727] netlink: 'syz.8.6311': attribute type 1 has an invalid length.
[  640.097109][T31727] netlink: 'syz.8.6311': attribute type 1 has an invalid length.
[  640.497224][  T792] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[  640.910544][  T792] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9
[  640.916695][  T792] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71
[  640.920024][  T792] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71
[  640.926249][  T792] usb 4-1: USB disconnect, device number 112
[  641.219015][T31756] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000004
[  641.300735][T31762] tmpfs: Bad value for 'mpol'
[  641.304230][   T33] audit: type=1326 audit(2000000172.995:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31759 comm="syz.8.6324" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f22ab18ebe9 code=0x0
[  641.624196][T31778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6332'.
[  642.316840][T31791] geneve2: entered promiscuous mode
[  642.521674][T31789] loop3: detected capacity change from 0 to 32768
[  642.554708][T31789] bcachefs: bch2_fs_open() bch_fs_open err opening /dev/loop3: erofs_nochanges
[  642.566617][T31789] bcachefs: bch2_fs_get_tree() error: erofs_nochanges
[  642.951326][T31806] netlink: 17 bytes leftover after parsing attributes in process `syz.8.6341'.
[  642.954268][T31806] net_ratelimit: 245 callbacks suppressed
[  642.954277][T31806] netlink: zone id is out of range
[  642.957626][T31806] netlink: zone id is out of range
[  642.959212][T31806] netlink: zone id is out of range
[  642.960821][T31806] netlink: zone id is out of range
[  642.962756][T31806] netlink: zone id is out of range
[  642.964312][T31806] netlink: zone id is out of range
[  642.965895][T31806] netlink: zone id is out of range
[  642.967460][T31806] netlink: zone id is out of range
[  642.969085][T31806] netlink: zone id is out of range
[  642.970643][T31806] netlink: zone id is out of range
[  643.127846][T31810] loop6: detected capacity change from 0 to 24
[  643.136602][T31810] MTD: Attempt to mount non-MTD device "/dev/loop6"
[  643.155640][T31810] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  643.191705][T31813] overlayfs: failed to resolve 'W': -2
[  643.201309][T31810] romfs: read error for inode 0x70040
[  643.558445][T31815] loop3: detected capacity change from 0 to 40427
[  643.564660][T31815] F2FS-fs (loop3): invalid crc value
[  643.624725][T31815] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  643.628961][T31815] F2FS-fs (loop3): Start checkpoint disabled!
[  643.636286][T31815] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  643.666979][T24570] kworker/u9:6: attempt to access beyond end of device
[  643.666979][T24570] loop3: rw=1, sector=45096, nr_sectors = 8 limit=40427
[  643.675791][T24570] kworker/u9:6: attempt to access beyond end of device
[  643.675791][T24570] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  643.682557][T24570] CPU: 0 UID: 0 PID: 24570 Comm: kworker/u9:6 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  643.682573][T24570] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  643.682580][T24570] Workqueue: writeback wb_workfn (flush-7:3)
[  643.682597][T24570] Call Trace:
[  643.682602][T24570]  <TASK>
[  643.682606][T24570]  dump_stack_lvl+0x189/0x250
[  643.682623][T24570]  ? __pfx_dump_stack_lvl+0x10/0x10
[  643.682633][T24570]  ? __pfx_queue_work_on+0x10/0x10
[  643.682642][T24570]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  643.682654][T24570]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  643.682669][T24570]  f2fs_handle_critical_error+0x37c/0x540
[  643.682686][T24570]  f2fs_write_end_io+0x886/0xb60
[  643.682708][T24570]  __submit_merged_bio+0x27a/0x6a0
[  643.682722][T24570]  __submit_merged_write_cond+0x255/0x530
[  643.682736][T24570]  f2fs_write_data_pages+0x261d/0x3000
[  643.682765][T24570]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  643.682783][T24570]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  643.682822][T24570]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  643.682840][T24570]  ? trace_f2fs_writepages+0x7f/0x200
[  643.682850][T24570]  ? f2fs_write_node_pages+0x478/0x6e0
[  643.682873][T24570]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  643.682884][T24570]  do_writepages+0x32e/0x550
[  643.682899][T24570]  ? reacquire_held_locks+0x127/0x1d0
[  643.682909][T24570]  ? writeback_sb_inodes+0x384/0x1010
[  643.682925][T24570]  __writeback_single_inode+0x145/0xff0
[  643.682935][T24570]  ? do_raw_spin_unlock+0x4d/0x240
[  643.682948][T24570]  writeback_sb_inodes+0x6c7/0x1010
[  643.682957][T24570]  ? lockdep_hardirqs_on+0x9c/0x150
[  643.682982][T24570]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  643.683015][T24570]  ? rcu_is_watching+0x15/0xb0
[  643.683029][T24570]  wb_writeback+0x43b/0xaf0
[  643.683044][T24570]  ? queue_io+0x3d1/0x590
[  643.683056][T24570]  ? __pfx_wb_writeback+0x10/0x10
[  643.683071][T24570]  ? _raw_spin_unlock_irq+0x23/0x50
[  643.683083][T24570]  wb_workfn+0x409/0xef0
[  643.683100][T24570]  ? __pfx_wb_workfn+0x10/0x10
[  643.683111][T24570]  ? __lock_acquire+0xab9/0xd20
[  643.683129][T24570]  ? process_scheduled_works+0x9ef/0x17b0
[  643.683141][T24570]  ? _raw_spin_unlock_irq+0x23/0x50
[  643.683149][T24570]  ? process_scheduled_works+0x9ef/0x17b0
[  643.683156][T24570]  ? process_scheduled_works+0x9ef/0x17b0
[  643.683165][T24570]  process_scheduled_works+0xae1/0x17b0
[  643.683189][T24570]  ? __pfx_process_scheduled_works+0x10/0x10
[  643.683206][T24570]  worker_thread+0x8a0/0xda0
[  643.683217][T24570]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  643.683230][T24570]  ? __kthread_parkme+0x7b/0x200
[  643.683245][T24570]  kthread+0x711/0x8a0
[  643.683257][T24570]  ? __pfx_worker_thread+0x10/0x10
[  643.683264][T24570]  ? __pfx_kthread+0x10/0x10
[  643.683275][T24570]  ? _raw_spin_unlock_irq+0x23/0x50
[  643.683283][T24570]  ? lockdep_hardirqs_on+0x9c/0x150
[  643.683291][T24570]  ? __pfx_kthread+0x10/0x10
[  643.683301][T24570]  ret_from_fork+0x3fc/0x770
[  643.683312][T24570]  ? __pfx_ret_from_fork+0x10/0x10
[  643.683324][T24570]  ? __switch_to_asm+0x39/0x70
[  643.683334][T24570]  ? __switch_to_asm+0x33/0x70
[  643.683368][T24570]  ? __pfx_kthread+0x10/0x10
[  643.683379][T24570]  ret_from_fork_asm+0x1a/0x30
[  643.683398][T24570]  </TASK>
[  643.683403][T24570] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  644.100361][T31853] loop6: detected capacity change from 0 to 32768
[  644.104895][T31853] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.6361 (31853)
[  644.111647][T31853] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  644.114796][T31853] BTRFS info (device loop6): using crc32c (crc32c-lib) checksum algorithm
[  644.117752][T31853] BTRFS info (device loop6): disk space caching is enabled
[  644.121847][T31853] BTRFS warning (device loop6): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  644.196058][T31853] BTRFS info (device loop6): rebuilding free space tree
[  644.211398][T31853] BTRFS info (device loop6): disabling free space tree
[  644.213677][T31853] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  644.217580][T31853] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  644.560619][T26288] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  644.955199][T31905] fuse: Bad value for 'fd'
[  646.296330][T31925] loop6: detected capacity change from 0 to 32768
[  646.311182][T31925] ea_get: invalid extended attribute
[  646.313642][T31925] ffff88802b743a80: 04 00 00 00                                      ....
[  646.619847][T31966] loop6: detected capacity change from 0 to 256
[  646.631481][  T792] usb 4-1: new high-speed USB device number 113 using dummy_hcd
[  646.789489][  T792] usb 4-1: Using ep0 maxpacket: 16
[  646.794156][  T792] usb 4-1: config 0 has an invalid interface number: 249 but max is 0
[  646.797436][  T792] usb 4-1: config 0 has no interface number 0
[  646.800189][  T792] usb 4-1: config 0 interface 249 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 64
[  646.804241][  T792] usb 4-1: config 0 interface 249 has no altsetting 0
[  646.809730][  T792] usb 4-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice= 5.c1
[  646.812550][  T792] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  646.815948][  T792] usb 4-1: Product: syz
[  646.817325][  T792] usb 4-1: Manufacturer: syz
[  646.818720][  T792] usb 4-1: SerialNumber: syz
[  646.825295][  T792] usb 4-1: config 0 descriptor??
[  646.828388][T31948] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  646.839694][  T792] aircable 4-1:0.249: aircable converter detected
[  646.851605][  T792] usb 4-1: aircable converter now attached to ttyUSB0
[  647.048880][ T5897] usb 4-1: USB disconnect, device number 113
[  647.055213][ T5897] aircable ttyUSB0: aircable converter now disconnected from ttyUSB0
[  647.064702][ T5897] aircable 4-1:0.249: device disconnected
[  647.119194][  T792] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[  647.286311][T32009] trusted_key: syz.8.6404 sent an empty control message without MSG_MORE.
[  647.304496][  T792] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  647.307627][  T792] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  647.314029][  T792] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  647.316814][  T792] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  647.319408][  T792] usb 7-1: SerialNumber: syz
[  647.533383][  T792] usb 7-1: 0:2 : does not exist
[  647.552009][  T792] usb 7-1: USB disconnect, device number 24
[  648.028685][  T792] usb 4-1: new high-speed USB device number 114 using dummy_hcd
[  648.188722][  T792] usb 4-1: Using ep0 maxpacket: 32
[  648.195186][  T792] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[  648.198732][  T792] usb 4-1: config 0 has no interface number 0
[  648.204934][  T792] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  648.209524][  T792] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  648.212678][  T792] usb 4-1: Product: syz
[  648.222105][  T792] usb 4-1: Manufacturer: syz
[  648.229038][  T792] usb 4-1: SerialNumber: syz
[  648.231566][T32055] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6416'.
[  648.236849][  T792] usb 4-1: config 0 descriptor??
[  648.241964][  T792] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  648.330749][T32065] sit0: entered promiscuous mode
[  648.349052][T32065] netlink: 'syz.8.6420': attribute type 1 has an invalid length.
[  648.351493][T32065] netlink: 1 bytes leftover after parsing attributes in process `syz.8.6420'.
[  648.458638][  T792] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  648.467061][  T792] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  648.520207][T32087] loop6: detected capacity change from 0 to 256
[  648.842593][T32097] loop6: detected capacity change from 0 to 32768
[  648.857514][    C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71
[  648.857784][   T52] usb 4-1: USB disconnect, device number 114
[  648.865939][   T52] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  648.875153][T32097] ocfs2: Mounting device (7,6) on (node local, slot 0) with writeback data mode.
[  648.895337][   T52] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  648.904532][   T52] quatech2 4-1:0.51: device disconnected
[  648.929213][   T33] audit: type=1800 audit(2000000180.609:207): pid=32097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.6429" name="file1" dev="loop6" ino=17059 res=0 errno=0
[  648.997650][T26288] ocfs2: Unmounting device (7,6) on (node local)
[  649.165072][T32127] binder: 32126:32127 ioctl c0306201 200000000240 returned -14
[  649.491045][T32145] loop6: detected capacity change from 0 to 4096
[  649.505408][T32145] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[  649.517374][T32145] ntfs3(loop6): Failed to load $MFT (-22).
[  649.783358][T32176] loop3: detected capacity change from 0 to 128
[  649.789656][T32176] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  650.041459][T18161] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  650.118894][T32187] loop3: detected capacity change from 0 to 4096
[  650.126097][T32187] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  650.183985][T13563] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  650.264553][T32201] netlink: 79 bytes leftover after parsing attributes in process `syz.8.6465'.
[  650.707971][T32214] netlink: 136 bytes leftover after parsing attributes in process `syz.6.6471'.
[  650.965688][T32231] net_ratelimit: 77 callbacks suppressed
[  650.965701][T32231] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  651.483132][   T33] audit: type=1107 audit(2000000183.160:208): pid=32243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  651.813721][T32241] loop3: detected capacity change from 0 to 32768
[  651.821777][T32241] (syz.3.6484,32241,1):ocfs2_read_virt_blocks:1007 ERROR: Inode #66 contains a hole at offset 0
[  651.828729][T32241] (syz.3.6484,32241,1):ocfs2_read_dir_block:511 ERROR: status = -5
[  651.831907][T32241] (syz.3.6484,32241,1):ocfs2_init_global_system_inodes:465 ERROR: status = -22
[  651.835231][T32241] (syz.3.6484,32241,1):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 1, possibly corrupt fs?
[  651.835254][T32241] (syz.3.6484,32241,1):ocfs2_init_global_system_inodes:476 ERROR: status = -22
[  651.849351][T32241] (syz.3.6484,32241,1):ocfs2_initialize_super:2198 ERROR: status = -22
[  651.852799][T32241] (syz.3.6484,32241,1):ocfs2_fill_super:1177 ERROR: status = -22
[  652.053155][T32269] loop3: detected capacity change from 0 to 256
[  653.351192][T32318] loop6: detected capacity change from 0 to 1024
[  653.409199][T32330] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  653.652054][T32347] loop3: detected capacity change from 0 to 1024
[  653.674932][T32347] EXT4-fs: Ignoring removed nobh option
[  653.694603][T32350] loop6: detected capacity change from 0 to 1024
[  653.697262][T32347] EXT4-fs: Ignoring removed bh option
[  653.723152][T32347] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  653.728737][T32350] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  653.744230][T32347] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt.
[  653.797211][T13563] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  653.809050][T26288] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  653.925349][T32367] usb usb6: usbfs: process 32367 (syz.6.6527) did not claim interface 46 before use
[  653.955805][T32369] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6525'.
[  654.264927][T32373] loop3: detected capacity change from 0 to 32768
[  654.273978][T32373] bcachefs (/dev/loop3): error validating superblock: Invalid superblock section clean: entry type btree_keys overruns end of section
[  654.273978][T32373] clean (size 2912):
[  654.273978][T32373] flags:          0
[  654.273978][T32373] journal_seq:    196618
[  654.273978][T32373] usage: type=inodes v=8
[  654.273978][T32373] usage: type=key_version v=0
[  654.273978][T32373] usage: type=reserved v=0
[  654.273978][T32373] usage: type=reserved v=0
[  654.273978][T32373] usage: type=reserved v=0
[  654.273978][T32373] usage: type=reserved v=0
[  654.273978][T32373] data_usage: btree: 1/1 [0]=2816
[  654.273978][T32373] data_usage: journal: 1/1 [0]=0
[  654.273978][T32373] data_usage: user: 1/1 [0]=16
[  654.273978][T32373] dev_usage: dev=0  
[  654.273978][T32373]   free: buckets=83 sectors=0 fragmented=0
[  654.273978][T32373]   sb: buckets=25 sectors=6152 fragmented=248
[  654.273978][T32373]   journal: buckets=8 sectors=2048 fragmented=0
[  654.273978][T32373]   btree: buckets=11 sectors=2816 fragmented=0
[  654.273978][T32373]   user: buckets=1 sectors=16 fragmented=240
[  654.273978][T32373]   cached: buckets=0 sectors=0 fragmented=0
[  654.273978][T32373]   parity: buckets=0 sectors=0 fragmented=0
[  654.273978][T32373]   stripe: buckets=0 sectors=0 fragmented=0
[  654.273978][T32373]   need_gc_gens: buckets=0 sectors=0 fragmented=0
[  654.273978][T32373]   need_discard: buckets=0 sectors=0 fragmented=0
[  654.273978][T32373] clock: read=0
[  654.273978][T32373] clock: write=1280
[  654.273978][T32373] btree_root: btree=extents level=0 u64s 11 type btree_ptr_v2 POS_MAX len 511 ver 0: s
[  654.274146][T32373] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean
[  654.325890][    C1] vkms_vblank_simulate: vblank timer overrun
[  654.729684][T32411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6544'.
[  655.108023][   T33] audit: type=1326 audit(2000000186.802:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32425 comm="syz.3.6550" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ed58ebe9 code=0x7ffc0000
[  655.120270][   T33] audit: type=1326 audit(2000000186.802:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32425 comm="syz.3.6550" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ed58ebe9 code=0x7ffc0000
[  655.152703][   T33] audit: type=1326 audit(2000000186.812:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32425 comm="syz.3.6550" exe="/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f05ed58ebe9 code=0x7ffc0000
[  655.195044][   T33] audit: type=1326 audit(2000000186.812:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32425 comm="syz.3.6550" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ed58ebe9 code=0x7ffc0000
[  655.202096][   T33] audit: type=1326 audit(2000000186.812:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32425 comm="syz.3.6550" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ed58ebe9 code=0x7ffc0000
[  655.239968][   T33] audit: type=1326 audit(2000000186.822:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32425 comm="syz.3.6550" exe="/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f05ed58ebe9 code=0x7ffc0000
[  655.265364][   T33] audit: type=1326 audit(2000000186.822:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32425 comm="syz.3.6550" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ed58ebe9 code=0x7ffc0000
[  655.280640][   T33] audit: type=1326 audit(2000000186.822:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32425 comm="syz.3.6550" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ed58ebe9 code=0x7ffc0000
[  655.289120][   T33] audit: type=1326 audit(2000000186.972:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32433 comm="syz.3.6554" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f05ed58ebe9 code=0x0
[  655.302058][T32436] loop6: detected capacity change from 0 to 512
[  655.308898][T32436] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.6555: bad orphan inode 15
[  655.313161][T32436] ext4_test_bit(bit=14, block=18) = 1
[  655.315946][T32436] is_bad_inode(inode)=0
[  655.317563][T32436] NEXT_ORPHAN(inode)=1023
[  655.319154][T32436] max_ino=32
[  655.320381][T32436] i_nlink=0
[  655.322319][T32436] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2962: inode #15: comm syz.6.6555: corrupted xattr block 19: invalid header
[  655.328321][T32436] EXT4-fs warning (device loop6): ext4_evict_inode:274: xattr delete (err -117)
[  655.339721][T32436] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none.
[  655.344536][T32436] ext4 filesystem being mounted at /513/qY3aK supports timestamps until 2038-01-19 (0x7fffffff)
[  655.378955][T26288] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0009-000000000000.
[  655.652267][T32447] loop6: detected capacity change from 0 to 32768
[  655.658688][T32447] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  655.680648][T32447] XFS (loop6): Ending clean mount
[  656.326057][T32471] bridge0: port 2(bridge_slave_1) entered blocking state
[  656.328511][T32471] bridge0: port 2(bridge_slave_1) entered listening state
[  656.330901][T32471] bridge0: port 1(bridge_slave_0) entered blocking state
[  656.333040][T32471] bridge0: port 1(bridge_slave_0) entered listening state
[  656.358243][T32471] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  656.393269][T32471] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  656.447991][T26288] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  656.453535][T32476] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6566'.
[  656.679940][T32487] netlink: 'syz.6.6567': attribute type 3 has an invalid length.
[  656.682567][T32487] netlink: 'syz.6.6567': attribute type 3 has an invalid length.
[  656.694376][  T792] usb 4-1: new high-speed USB device number 115 using dummy_hcd
[  656.720302][ T5876] hid-generic 00A0:0006:0003.0034: unknown main item tag 0x0
[  656.722703][ T5876] hid-generic 00A0:0006:0003.0034: unknown main item tag 0x0
[  656.725823][ T5876] hid-generic 00A0:0006:0003.0034: unknown main item tag 0x0
[  656.729300][ T5876] hid-generic 00A0:0006:0003.0034: unknown main item tag 0x0
[  656.732338][ T5876] hid-generic 00A0:0006:0003.0034: unknown main item tag 0x0
[  656.739402][ T5876] hid-generic 00A0:0006:0003.0034: unknown main item tag 0x0
[  656.742037][ T5876] hid-generic 00A0:0006:0003.0034: unknown main item tag 0x0
[  656.747640][ T5876] hid-generic 00A0:0006:0003.0034: unknown main item tag 0x0
[  656.750205][ T5876] hid-generic 00A0:0006:0003.0034: unknown main item tag 0x0
[  656.752701][ T5876] hid-generic 00A0:0006:0003.0034: unknown main item tag 0x0
[  656.758611][ T5876] hid-generic 00A0:0006:0003.0034: hidraw0: <UNKNOWN> HID v0.05 Device [syz1] on syz0
[  656.846176][  T792] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  656.850482][  T792] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  656.866872][  T792] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf
[  656.870497][  T792] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  656.873607][  T792] usb 4-1: Product: syz
[  656.878784][  T792] usb 4-1: Manufacturer: syz
[  656.880620][  T792] usb 4-1: SerialNumber: syz
[  656.887743][  T792] usb 4-1: config 0 descriptor??
[  656.896665][  T792] usb 4-1: Found UVC 0.00 device syz (18ec:3288)
[  656.904141][  T792] usb 4-1: No valid video chain found.
[  656.926443][T32507] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  657.001202][T32511] Invalid logical block size (-2147483648)
[  657.102080][  T792] usb 4-1: USB disconnect, device number 115
[  657.404669][ T5876] usb 7-1: new full-speed USB device number 25 using dummy_hcd
[  657.557485][ T5876] usb 7-1: unable to get BOS descriptor or descriptor too short
[  657.564451][ T5876] usb 7-1: not running at top speed; connect to a high speed hub
[  657.572087][ T5876] usb 7-1: config 2 has an invalid interface number: 212 but max is 1
[  657.575913][ T5876] usb 7-1: config 2 has an invalid interface number: 226 but max is 1
[  657.579119][ T5876] usb 7-1: config 2 has no interface number 0
[  657.581597][ T5876] usb 7-1: config 2 has no interface number 1
[  657.584433][ T5876] usb 7-1: config 2 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  657.587840][ T5876] usb 7-1: config 2 interface 226 altsetting 0 has a duplicate endpoint with address 0x1, skipping
[  657.592035][ T5876] usb 7-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 37745, setting to 64
[  657.596648][ T5876] usb 7-1: config 2 interface 226 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  657.600572][ T5876] usb 7-1: config 2 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  657.605090][ T5876] usb 7-1: config 2 interface 212 has no altsetting 0
[  657.610118][ T5876] usb 7-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce
[  657.613440][ T5876] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  657.618274][ T5876] usb 7-1: Product: syz
[  657.619799][ T5876] usb 7-1: Manufacturer: syz
[  657.621555][ T5876] usb 7-1: SerialNumber: syz
[  657.886416][ T5876] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:2.226/input/input51
[  657.890803][T32547] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6585'.
[  657.919261][ T5876] usb 7-1: USB disconnect, device number 25
[  658.038174][T32564] syzkaller1: entered promiscuous mode
[  658.040042][T32564] syzkaller1: entered allmulticast mode
[  658.407370][T32585] loop6: detected capacity change from 0 to 512
[  658.411199][T32585] EXT4-fs: Ignoring removed nobh option
[  658.418285][T32585] fscrypt (loop6, inode 2): Error -61 getting encryption context
[  658.424849][T32585] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -61
[  658.428626][T32585] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #13: comm syz.6.6594: casefold flag without casefold feature
[  658.434222][  T792] usb 4-1: new high-speed USB device number 116 using dummy_hcd
[  658.435078][T32585] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.6594: couldn't read orphan inode 13 (err -117)
[  658.444883][T32585] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  658.458873][T32585] fscrypt (loop6, inode 2): Error -61 getting encryption context
[  658.487253][T26288] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  658.576228][T32594] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  658.605373][  T792] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  658.609586][  T792] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  658.618743][  T792] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  658.623752][  T792] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  658.629314][T32596] trusted_key: encrypted_key: insufficient parameters specified
[  658.632493][  T792] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[  658.645030][  T792] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  658.650851][  T792] usb 4-1: config 0 descriptor??
[  658.683314][T32601] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6598'.
[  658.878876][ T6926] usb 4-1: USB disconnect, device number 116
[  660.366862][T32643] openvswitch: netlink: VXLAN extension 11 out of range max 1
[  660.589443][T32656] input: syz0 as /devices/virtual/input/input52
[  660.651263][T32667] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6620'.
[  660.657598][T32667] netlink: 'syz.8.6620': attribute type 1 has an invalid length.
[  660.661172][T32667] netlink: 'syz.8.6620': attribute type 2 has an invalid length.
[  660.668247][T32667] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6620'.
[  660.762597][T32675] input: syz0 as /devices/virtual/input/input53
[  661.173042][   T33] audit: type=1326 audit(2000000192.875:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32690 comm="syz.3.6630" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f05ed58ebe9 code=0x0
[  661.981253][T32707] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6636'.
[  662.744188][  T975] usb 4-1: new high-speed USB device number 117 using dummy_hcd
[  662.892732][  T975] usb 4-1: Using ep0 maxpacket: 8
[  662.902412][  T975] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  662.905633][  T975] usb 4-1: config 179 has no interface number 0
[  662.908079][  T975] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10
[  662.922340][  T975] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024
[  662.927017][  T975] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 102, changing to 10
[  662.938472][  T975] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 24624, setting to 1024
[  662.953711][  T975] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  662.964411][  T975] usb 4-1: config 179 interface 65 has no altsetting 0
[  662.967128][  T975] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  662.977341][  T975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  662.991862][T32739] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  663.024226][  T975] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input54
[  663.205106][    C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  663.208529][  T975] usb 4-1: USB disconnect, device number 117
[  663.395332][  T323] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  663.398444][  T323] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  663.401602][  T323] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  663.404546][  T323] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  663.407496][  T323] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  663.410428][  T323] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  663.413543][  T323] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  663.416532][  T323] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  663.419609][  T323] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  663.422981][  T323] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  663.744201][  T348] overlayfs: failed to clone upperpath
[  663.823981][  T357] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6682'.
[  664.649286][   T33] audit: type=1326 audit(2000000202.346:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=377 comm="syz.8.6691" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f22ab18ebe9 code=0x0
[  664.784778][  T374] loop3: detected capacity change from 0 to 32768
[  665.522063][   T10] usb 4-1: new low-speed USB device number 118 using dummy_hcd
[  665.682485][  T417] netlink: 'syz.8.6707': attribute type 10 has an invalid length.
[  665.685680][  T417] batman_adv: batadv0: Interface deactivated: dummy0
[  665.696063][  T417] batman_adv: batadv0: Removing interface: dummy0
[  665.699856][   T10] usb 4-1: config 32 has 1 interface, different from the descriptor's value: 2
[  665.703393][   T10] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10
[  665.708698][   T10] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 255, setting to 8
[  665.723902][   T10] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[  665.727451][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  665.733567][  T417] team0: Port device dummy0 added
[  665.733649][  T418] netlink: 'syz.8.6707': attribute type 10 has an invalid length.
[  665.753745][  T405] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  665.760834][  T418] team0: Port device dummy0 removed
[  665.766813][  T418] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  665.937946][  T433] netlink: 'syz.6.6714': attribute type 1 has an invalid length.
[  665.962348][   T10] usb 4-1: string descriptor 0 read error: -71
[  665.995111][   T10] usb 4-1: USB disconnect, device number 118
[  666.593497][  T478] sctp: [Deprecated]: syz.8.6727 (pid 478) Use of int in maxseg socket option.
[  666.593497][  T478] Use struct sctp_assoc_value instead
[  666.636613][   T33] audit: type=1326 audit(2000000204.337:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=479 comm="syz.3.6728" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f05ed58ebe9 code=0x0
[  666.761675][  T488] bpf: Bad value for 'mode'
[  666.794763][  T490] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  666.798467][  T490] bridge0: port 2(bridge_slave_1) entered disabled state
[  666.800845][  T490] bridge0: port 1(bridge_slave_0) entered disabled state
[  666.953500][  T496] netlink: 'syz.3.6737': attribute type 1 has an invalid length.
[  666.955968][  T496] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6737'.
[  667.155588][  T500] loop3: detected capacity change from 0 to 32768
[  667.160509][  T500] bcachefs (/dev/loop3): error validating superblock: Invalid superblock section disk_groups: label 3 empty
[  667.160509][  T500] disk_groups (size 2912):
[  667.160509][  T500] [deleted] [deleted] [parent 1028 name ] [parent 1028 name ] [parent 0 name ] [parent 32 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [deleted] [parent 146317 name ] [deleted] [deleted] [deleted] [deleted] [deleted] [deleted] [deleted] [deleted] [deleted] [parent 175370 name ] [deleted] [deleted] [deleted] [deleted] [deleted] [deleted] [deleted] [parent 95120 name ] [deleted] [deleted] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 
[  667.160606][  T500] bcachefs: bch2_fs_get_tree() error: invalid_sb_disk_groups
[  667.678780][ T5897] usb 4-1: new high-speed USB device number 119 using dummy_hcd
[  667.832052][ T5897] usb 4-1: New USB device found, idVendor=0582, idProduct=0044, bcdDevice=af.57
[  667.834904][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  667.837369][ T5897] usb 4-1: Product: syz
[  667.840235][ T5897] usb 4-1: Manufacturer: syz
[  667.841688][ T5897] usb 4-1: SerialNumber: syz
[  667.844981][ T5897] usb 4-1: config 0 descriptor??
[  668.064449][ T6926] usb 4-1: USB disconnect, device number 119
[  668.247571][  T558] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6758'.
[  668.456122][  T564] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6761'.
[  669.204354][T24570] Bluetooth: hci3: Frame reassembly failed (-84)
[  669.695703][  T630] tipc: Failed to remove unknown binding: 66,1,1/2886997007:3770302730/3770302732
[  670.070987][  T658] 9pnet_fd: Insufficient options for proto=fd
[  670.425096][  T678] netlink: 'syz.8.6810': attribute type 1 has an invalid length.
[  670.428643][  T678] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6810'.
[  670.506739][  T682] overlayfs: failed to clone upperpath
[  670.705725][  T696] team_slave_1: entered promiscuous mode
[  670.712429][  T696] netlink: 'syz.8.6817': attribute type 10 has an invalid length.
[  670.720027][  T696] team0: Port device team_slave_0 removed
[  670.963325][  T710] net_ratelimit: 44 callbacks suppressed
[  670.963350][  T710] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  671.207101][ T5234] Bluetooth: hci3: command 0x1003 tx timeout
[  671.212571][ T5847] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  671.440062][  T732] loop7: detected capacity change from 0 to 7
[  671.878349][    C1] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0
[  671.881968][    C1] Buffer I/O error on dev loop7, logical block 0, lost async page write
[  672.121171][  T763] netlink: 'syz.8.6845': attribute type 4 has an invalid length.
[  672.254757][  T772] loop3: detected capacity change from 0 to 4096
[  672.268484][  T772] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512).
[  672.275218][  T774] netlink: 3 bytes leftover after parsing attributes in process `+}[@'.
[  672.282623][  T772] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  672.285422][  T772] ntfs3(loop3): Failed to load $AttrDef (-22)
[  673.160213][  T839] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6879'.
[  673.330351][  T854] raw_sendmsg: syz.8.6886 forgot to set AF_INET. Fix it!
[  674.092064][  T868] sctp: [Deprecated]: syz.6.6892 (pid 868) Use of struct sctp_assoc_value in delayed_ack socket option.
[  674.092064][  T868] Use struct sctp_sack_info instead
[  674.421097][  T886] loop3: detected capacity change from 0 to 16
[  674.424520][  T886] erofs (device loop3): mounted with root inode @ nid 36.
[  674.488040][  T892] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6903'.
[  674.491530][  T892] netlink: 35 bytes leftover after parsing attributes in process `syz.3.6903'.
[  675.595003][ T6926] usb 4-1: new low-speed USB device number 120 using dummy_hcd
[  675.746987][ T6926] usb 4-1: config index 0 descriptor too short (expected 6427, got 27)
[  675.755200][ T6926] usb 4-1: config 0 has an invalid interface number: 21 but max is 0
[  675.758346][ T6926] usb 4-1: config 0 has no interface number 0
[  675.760951][ T6926] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt
[  675.771603][ T6926] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  675.781801][ T6926] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  675.792239][ T6926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  675.802944][ T6926] usb 4-1: config 0 descriptor??
[  676.429368][ T6926] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.21/input/input55
[  676.438761][ T6926] input: failed to attach handler kbd to device input55, error: -5
[  676.628877][ T6926] usb 4-1: USB disconnect, device number 120
[  677.171469][  T965] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.6921'.
[  678.313381][  T792] usb 4-1: new high-speed USB device number 121 using dummy_hcd
[  678.478094][  T792] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  678.482433][  T792] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  678.495517][  T792] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  678.506328][  T792] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  678.509686][  T792] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  678.518632][  T792] usb 4-1: config 0 descriptor??
[  678.929950][  T792] plantronics 0003:047F:FFFF.0035: reserved main item tag 0xe
[  678.934694][  T792] hid_parser_main: 5 callbacks suppressed
[  678.934712][  T792] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0
[  678.951097][  T792] plantronics 0003:047F:FFFF.0035: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  678.968298][ T1046] netlink: 'syz.8.6950': attribute type 2 has an invalid length.
[  679.128788][  T792] usb 4-1: USB disconnect, device number 121
[  679.798684][ T1112] loop3: detected capacity change from 0 to 32768
[  679.807787][ T1112] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  679.850327][ T1111] 
[  679.851375][ T1111] ======================================================
[  679.854110][ T1111] WARNING: possible circular locking dependency detected
[  679.856797][ T1111] 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 Not tainted
[  679.860221][ T1111] ------------------------------------------------------
[  679.863448][ T1111] syz.3.6964/1111 is trying to acquire lock:
[  679.865736][ T1111] ffff88803e632360 (&ocfs2_file_ip_alloc_sem_key){++++}-{4:4}, at: ocfs2_page_mkwrite+0x2ff/0xc40
[  679.868951][ T1111] 
[  679.868951][ T1111] but task is already holding lock:
[  679.871210][ T1111] ffff888037d7a520 (sb_pagefaults#8){.+.+}-{0:0}, at: do_page_mkwrite+0x14d/0x310
[  679.874072][ T1111] 
[  679.874072][ T1111] which lock already depends on the new lock.
[  679.874072][ T1111] 
[  679.877411][ T1111] 
[  679.877411][ T1111] the existing dependency chain (in reverse order) is:
[  679.880159][ T1111] 
[  679.880159][ T1111] -> #2 (sb_pagefaults#8){.+.+}-{0:0}:
[  679.882512][ T1111]        lock_acquire+0x120/0x360
[  679.884116][ T1111]        ocfs2_page_mkwrite+0x1da/0xc40
[  679.886047][ T1111]        do_page_mkwrite+0x14d/0x310
[  679.887713][ T1111]        do_wp_page+0x268d/0x5800
[  679.889320][ T1111]        __handle_mm_fault+0x1033/0x5440
[  679.891070][ T1111]        handle_mm_fault+0x40a/0x8e0
[  679.892700][ T1111]        do_user_addr_fault+0x764/0x1390
[  679.894443][ T1111]        exc_page_fault+0x76/0xf0
[  679.896109][ T1111]        asm_exc_page_fault+0x26/0x30
[  679.897774][ T1111] 
[  679.897774][ T1111] -> #1 (&mm->mmap_lock){++++}-{4:4}:
[  679.900533][ T1111]        lock_acquire+0x120/0x360
[  679.902531][ T1111]        __might_fault+0xcc/0x130
[  679.904535][ T1111]        _copy_to_user+0x2c/0xb0
[  679.906261][ T1111]        fiemap_fill_next_extent+0x1c0/0x390
[  679.908102][ T1111]        ocfs2_fiemap+0x9dc/0xc90
[  679.909685][ T1111]        do_vfs_ioctl+0x1173/0x1430
[  679.911313][ T1111]        __se_sys_ioctl+0x82/0x170
[  679.912907][ T1111]        do_syscall_64+0xfa/0x3b0
[  679.914467][ T1111]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  679.916437][ T1111] 
[  679.916437][ T1111] -> #0 (&ocfs2_file_ip_alloc_sem_key){++++}-{4:4}:
[  679.919826][ T1111]        validate_chain+0xb9b/0x2140
[  679.921967][ T1111]        __lock_acquire+0xab9/0xd20
[  679.924053][ T1111]        lock_acquire+0x120/0x360
[  679.926056][ T1111]        down_write+0x96/0x1f0
[  679.927992][ T1111]        ocfs2_page_mkwrite+0x2ff/0xc40
[  679.930217][ T1111]        do_page_mkwrite+0x14d/0x310
[  679.932354][ T1111]        do_wp_page+0x268d/0x5800
[  679.934406][ T1111]        __handle_mm_fault+0x1033/0x5440
[  679.936662][ T1111]        handle_mm_fault+0x40a/0x8e0
[  679.938811][ T1111]        do_user_addr_fault+0x764/0x1390
[  679.941095][ T1111]        exc_page_fault+0x76/0xf0
[  679.943137][ T1111]        asm_exc_page_fault+0x26/0x30
[  679.945306][ T1111] 
[  679.945306][ T1111] other info that might help us debug this:
[  679.945306][ T1111] 
[  679.949351][ T1111] Chain exists of:
[  679.949351][ T1111]   &ocfs2_file_ip_alloc_sem_key --> &mm->mmap_lock --> sb_pagefaults#8
[  679.949351][ T1111] 
[  679.954891][ T1111]  Possible unsafe locking scenario:
[  679.954891][ T1111] 
[  679.957827][ T1111]        CPU0                    CPU1
[  679.959970][ T1111]        ----                    ----
[  679.962121][ T1111]   rlock(sb_pagefaults#8);
[  679.963949][ T1111]                                lock(&mm->mmap_lock);
[  679.966686][ T1111]                                lock(sb_pagefaults#8);
[  679.969416][ T1111]   lock(&ocfs2_file_ip_alloc_sem_key);
[  679.971624][ T1111] 
[  679.971624][ T1111]  *** DEADLOCK ***
[  679.971624][ T1111] 
[  679.974848][ T1111] 2 locks held by syz.3.6964/1111:
[  679.976937][ T1111]  #0: ffff88802564ed60 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x32/0x300
[  679.980906][ T1111]  #1: ffff888037d7a520 (sb_pagefaults#8){.+.+}-{0:0}, at: do_page_mkwrite+0x14d/0x310
[  679.984714][ T1111] 
[  679.984714][ T1111] stack backtrace:
[  679.987140][ T1111] CPU: 1 UID: 0 PID: 1111 Comm: syz.3.6964 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  679.987159][ T1111] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  679.987170][ T1111] Call Trace:
[  679.987179][ T1111]  <TASK>
[  679.987187][ T1111]  dump_stack_lvl+0x189/0x250
[  679.987209][ T1111]  ? __pfx_dump_stack_lvl+0x10/0x10
[  679.987225][ T1111]  ? __pfx__printk+0x10/0x10
[  679.987253][ T1111]  ? print_lock_name+0xde/0x100
[  679.987272][ T1111]  print_circular_bug+0x2ee/0x310
[  679.987290][ T1111]  check_noncircular+0x134/0x160
[  679.987307][ T1111]  validate_chain+0xb9b/0x2140
[  679.987323][ T1111]  ? do_raw_spin_unlock+0x4d/0x240
[  679.987344][ T1111]  __lock_acquire+0xab9/0xd20
[  679.987368][ T1111]  ? ocfs2_page_mkwrite+0x2ff/0xc40
[  679.987386][ T1111]  lock_acquire+0x120/0x360
[  679.987404][ T1111]  ? ocfs2_page_mkwrite+0x2ff/0xc40
[  679.987423][ T1111]  ? lockdep_hardirqs_on+0x9c/0x150
[  679.987440][ T1111]  ? sigprocmask+0x15d/0x1a0
[  679.987456][ T1111]  down_write+0x96/0x1f0
[  679.987474][ T1111]  ? ocfs2_page_mkwrite+0x2ff/0xc40
[  679.987492][ T1111]  ? __pfx_down_write+0x10/0x10
[  679.987509][ T1111]  ? __schedule+0x17ae/0x4cc0
[  679.987526][ T1111]  ocfs2_page_mkwrite+0x2ff/0xc40
[  679.987547][ T1111]  ? do_page_mkwrite+0x14d/0x310
[  679.987560][ T1111]  ? __pfx_ocfs2_page_mkwrite+0x10/0x10
[  679.987580][ T1111]  ? ktime_get+0x3e/0x1f0
[  679.987597][ T1111]  ? ktime_get+0x3e/0x1f0
[  679.987616][ T1111]  do_page_mkwrite+0x14d/0x310
[  679.987630][ T1111]  do_wp_page+0x268d/0x5800
[  679.987655][ T1111]  ? __pfx_do_wp_page+0x10/0x10
[  679.987670][ T1111]  ? do_raw_spin_lock+0x121/0x290
[  679.987685][ T1111]  ? __handle_mm_fault+0xf87/0x5440
[  679.987702][ T1111]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  679.987721][ T1111]  __handle_mm_fault+0x1033/0x5440
[  679.987744][ T1111]  ? __pfx___handle_mm_fault+0x10/0x10
[  679.987766][ T1111]  ? find_vma+0xe7/0x160
[  679.987783][ T1111]  ? __pfx_find_vma+0x10/0x10
[  679.987801][ T1111]  handle_mm_fault+0x40a/0x8e0
[  679.987822][ T1111]  do_user_addr_fault+0x764/0x1390
[  679.987847][ T1111]  exc_page_fault+0x76/0xf0
[  679.987886][ T1111]  asm_exc_page_fault+0x26/0x30
[  679.987901][ T1111] RIP: 0033:0x7f05ed5588d8
[  679.987915][ T1111] Code: 10 8a 0e 74 0a 0f b7 74 16 fe 66 89 74 17 fe 88 0f c3 8b 4c 16 fc 8b 36 89 4c 17 fc 89 37 c3 0f 1f 00 48 8b 4c 16 f8 48 8b 36 <48> 89 37 48 89 4c 17 f8 c3 0f 10 54 16 f0 0f 10 5c 16 e0 0f 11 07
[  679.987928][ T1111] RSP: 002b:00007ffde31058e8 EFLAGS: 00010246
[  679.987941][ T1111] RAX: 0000200000000080 RBX: 0000000000000004 RCX: 0031656c69662f2e
[  679.987952][ T1111] RDX: 0000000000000008 RSI: 0031656c69662f2e RDI: 0000200000000080
[  679.987962][ T1111] RBP: 00007f05ed7b7da0 R08: 0000001b32d20000 R09: 0000000000000001
[  679.987971][ T1111] R10: 0000000000000001 R11: 0000000000000009 R12: 00007f05ed7b5fac
[  679.987980][ T1111] R13: 00007f05ed7b5fa0 R14: fffffffffffffffe R15: 00007ffde3105a00
[  679.987996][ T1111]  </TASK>
[  680.131904][T13563] ocfs2: Unmounting device (7,3) on (node local)
[  685.202904][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  685.205306][ T1363] ieee802154 phy1 wpan1: encryption failed: -22

VM DIAGNOSIS:
07:14:16  Registers:
info registers vcpu 0

CPU#0
RAX=20524311013dda00 RBX=ffffffff81968598 RCX=20524311013dda00 RDX=0000000000000001
RSI=ffffffff8be32b60 RDI=ffffffff81968598 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa34730 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7893f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8621000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f05ed5733e0 CR3=000000011d6f0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f2685f87498 00007f2685f87470 XMM03=00007f2685f874a8 00007f2685f874a0
XMM04=00007f2686aed100 00007f2685f87460 XMM05=00007f2685f87478 00007f2685f874c0
XMM06=00007f2685f874b8 00007f2685f874b0 XMM07=00007f2685f874a8 00007f2685f874a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f2685e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffffffff33bd205 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9
RSI=0000000000000000 RDI=0000000000000020 RBP=ffffc90006f57010 RSP=ffffc90006f56e38
R8 =0000000000000003 R9 =0000000000000004 R10=dffffc0000000000 R11=ffffffff854e79d0
R12=dffffc0000000000 R13=dffffc0000000000 R14=ffffffff99de94e0 R15=0000000000000000
RIP=ffffffff854e7a47 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055557101a500 ffffffff 00c00000
GS =0000 ffff8881a3c21000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000080 CR3=000000003f7fc000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f05ed787498 00007f05ed787470 XMM03=00007f05ed7874a8 00007f05ed7874a0
XMM04=00007f05ee2ed100 00007f05ed787460 XMM05=00007f05ed787478 00007f05ed7874c0
XMM06=00007f05ed7874b8 00007f05ed7874b0 XMM07=00007f05ed7874a8 00007f05ed7874a0
XMM08=0000000000000000 00001b7d1475bf98 XMM09=0000000000000000 00007f05ed612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
