last executing test programs:

6m25.11720399s ago: executing program 1 (id=134):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000980)={'wg2\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f00000000c0)="0b03", 0x2, 0x1, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14)

6m25.058527676s ago: executing program 1 (id=135):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000005a40)={[{@metadata_ratio={'metadata_ratio', 0x3d, 0x2}}, {}, {@compress_force}, {@nodiscard}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@clear_cache}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x74, 0x2d, 0x33, 0x74, 0x65, 0x36]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTtRq2fvz3mQI6xdW8rsJfhMPtyspzI8VCh2tpMe22CMvzI8XCh1zSY/NkyE8uLCyPyn8PxbaSeHK2rxwJCmcjoX8fOgWjiWFE/FM+3xtPt208H0s5BdYzMcrKNZ0L4lIelzt12OhcMMeZ7sHBwAAuKfE8Jxn2bHeZkij7Hxt0A6rB+0wMmiH+qAdRpMd0h37bQ+zvYW4vX1m49Ke/39kuPwf34pV2aLf9f8hXv+fP9ewe/3/bCw0ksJ8LLTSOwa04jGysPtxPEajlfe4sr5bAAAAgLta/F6gvsLzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5h715j5KruA4CffY734fVCUoXQKNkkNY6beL22gUQtVdaUqhEpzbqhoCqi2NhrsnjBjm1KjEJkbCIaIShtkJIPRRhFUc0HqBWISAoIFymOUHlEVEUBBAqtIQoipSQRaYIUqtl7z+ydc3cefqzx0t9P8s6Z+Z/nnYfn3HvnXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/h4Feu+dtm8Ud/e96zL1w8fsWetRe/et15pz4ZwsTM4x1ZuKP/xtvHf373uffseWD1HfcdPv+jvXm5PB4Gqn868zs3xFoPLw7h/o4QutPAisEs0JPfH4z1vW8whFPCbKBWYrI/K5E2HL7fF8K+MBuoVfW9vhAGC4ELn3rk4Zuridv6QlgaQqikbTxfydroSwNn9GaB/jSwtTsL/OqtTC3w3c4sAMcsvhlqL/oDE/UZhucu1+D113PcOvb2SofXFRPDjfP9bO08d6qgN31g4pietlJ1zIvS2+Ogd9sCeLeVtvOtnrbiF6n8G8pbs6FK6Nw0uXnD1dM74yOdYXS0q1FN8/Q8P/P6lzYeSXrBvA5jB4aPy+vwlieW3t21/ILH71ux9OX9H9v7yrF280eFTVpMz7dKyF9zC+Z5jMZ9niyAt1/pW9KIL10hhM2f/73PNIuX5v/Dzef/8eUcbzvrcsda3xzK5ubxkcGYeG0om5sDAADAgrEQ9ppuHX3oE83qK83/R9o7/h8P+eeT+Wy0B0MYn0nsXRLCaTOPZ4G7YnOXLQnhgzOpifrA2iRwMIT3ziSW16pKSiyKJUaSwE+G8sB4EjgUAxNJ4FsxcGsSuCEGDiSBjTFwMAmcGwNhqn4cvz+Uj6PtQF8MrM824oF4FsIvhmJrybZ6rlYVAADAcZLPDnvq7xbOdTjWDHF6eaCvVYZ4BnbDDJWkhnQGW5tWNayhu1UNna1qqI17d/Phl2ruaFVz6TSMjvoMt//ybz4bmijN/8eaz/8rc3Sko3T8P4R1M39j7s48Ml2Lr5+oywAAAAAcg4H/ffGbzeKl+f94e+f/x30iXYXM4bG4G2LLkhDG6gNZtX9YDmRHvQfyAAAAACwEtePxtWPhU/ltdop2Op8u5584wvzxwP/4nPl7Dz64vll/S/P/ifbO/++vv806cSj24mtLQlhUCPwg9rIamDESAz/+ZH0gH/+huAFuilXlJybUqropllgfA2NJYF+jEj+slTitPpA/WbXG99bGMZWXKAQAAADghIu7A+Jx+Xj+/4d+s/qaZuVK8//1R3b+/8w8uHR6//RACCu7Q+hKfxjwWH+2MGAMDHbkiYf6s7q60qqu7w/hnOrA0qpezNf/707XGHyqL6sqBk770P7Xz6gmvtkXwspi4OnP3XlWNbEzCdQa/8u+ED5QHW3a+HcWZY33pI1/fVEI7y8EalVdtiiEamO9aVWPVPLrGKRV/XMlhHcVArWqzq6EsCsAsEDF/0o3FR/csevaLRumpye3z2Mi7sPvC5unpidHN26d3lRp0KdNSZ/rljG6vjymdq9881y+RNFF964bbCdd+53gWLGtfD9+6cTB/H78LtQzM87VPXV316RD/siHy02EwjepRkPunOch9xcrmX0SS/XH/L1hICy6esfk9tEvbti5c/uq7G+72Vdnf+NhpmxbrUq3Vf9cfWvj5dFwtazE0W6rZcVKVu68ctvKHbuuXTF15YbLJy+fvGrV2avHzhxbM/bxM1dWRzWW/W0x1GVzVZ0M9a072xzXcRzq6d2FSk7Ep4aEhMRCS2wdWNb0/+TS/H9b8/l//NSJn/z5+gyNjv8Px8P82eOzh/nXx8C+do//Dzc6ml87MWAkCeyOgd0O8wMAAPDOECf5cW9m3Cv90+XfeblZudL8f3d7v/8/Tuv/15auP7/RMv/LY4mxRuv/p8v819b/391o/f90mf/a+v/73ob1/6+uBZJN8gvr/wMAAO8EJ279/5bL+6cXCChlaLm8f3qBgFKGlsv4t3uBgCNe///5//yr/w5NlOb/t7Y3/7dwPwAAAJw8vvxn1/xOs3hp/r+vvfn/iV//LzQ6/3+kUWCi0cKA1v8DAABggWq0/t/wjf2XNitXmv8faG/+H0+76KzLHWt9cyhb0y6ka9q9NlT7yQAAAAAsDJ1hdLSnzbx1K6OuPfo2n8mXAm2WLnrxTw4f2fn/B9ub/9f9LuOWJ5be3bX8gsffvG/F0pf3f2zvK7PH/wEAAID50+5+CQAAAAAAAAAAAAAA4O334n/sWdMsXvr9f1g383ij3//H6/7F3xe8uy53rLX1+n/5/Qs/fc+umSULHxsK4cPFwJY9W04J+bX5lxUDD1+y/D3VxJ60xIMvnPtSNXFpGvjUilPfqCbOSQLr4yKJ700D8aqKbyxOAnF5xX9PA3F7HEgDvXngq4uzcXSk2+qng9m26ki31bODISwpBGrb6v7BrI2OdIC3JYHaAL+QBuIA/zwPdKa9umcg61UMDMaidwxkvQIA4KQVvwX2hM1T05Nj8St8vD29u/42qluy7PpytR1tNv9cvjTZRfeuG2wn3ZV+F5291nhPqFSHsKr0dbWYpWNmlMenlhab7t0NhtxqtbfOBuVSR7rpehuPqC8b0ejGrdObeloOfE3rLKu7W2ZZVZrsFLN0zmzSNmppoy9tjKjNbdNGl+P9zjA62pXk+oMYHA51Wr0i2v29fnGdv0avgmKeqw7v/VWz+krz/+H25v+V4rjeyC8GsDteWe/vlljmHwAAAObXV9f++hvx32dvfPTpZnlL8/+R9ub/cQ9Wfig429txMF7/f++SEGYurT+cBe6KzV22JIQPzqQmYonsgvrnxxJjWeCuuMNkeSyxfqK+qkUxcCAJ/GQoDxxMAodiIN9LsT/ku3L+fiiEs2ZS6+pLbIslhpPAZ2JgJAmMxsBYElgcA+NJ4NXFeWAiCfxbDISp+m117+J8WwEAAByJfJ7VU383pPO8A92tMnS0ytDfKkNnqwyVVhkajSLe/3bM0JOcvNJRyNST1tqX1FLKEC+Gf8T9KmUIP6zPmRYsNR3PP6idb9BRn+GBT3RXQhOl+f9Ye/P//vrbrPVDcf4/e/2/LPCD2L2vxVPHR2Lgx5+sD+Q7Bg7Fye5Ntaom8hL5pP2mWGI8BkaSwLYYGE8C69flgX3vqQ/kM+1a43trjU/lJQoBAAAAOOHiDoK4mybO/+/Y8ZWBZuVK8//x9ub/sb2BYmM3xFoPLw7h/o7Z3tQCKwazQNyPMRh/Hv++wRBOKezgqJWY7M9K9CYNh+/3Zb9Q702r+l5f9uODeP/Cpx55+OZq4ra+EJYW9r7U2ni+krXRlwbO6M0C/Wlga3cWiHt+aoHvdmYBOGa1vYLxBZWf6lIzPHe5Bq+/d8o1QdPhlfaBzpFvrt9czZfSDtd8n2rNkT1tTfffctyU3h4HvdsW4rtt2Lut+EUq/4by1myoEjo3TW7ecPX0zvhI8ZesJfP0PBd/pdpO+ji8DncffW9bq6QdGEs+PsbmLjf367AjVnfLE0vv7lp+weP3rVj68v6P7X2l7W40EH8o/Mh1/zr4o8LmnW+VkL/mFtznyYTPk4X438CIpy2EsO7Vr9/ULF6a/0+0N//vTm5n/DpuzB1LQvhIYeM+Fjf/Hy/JPgcLgexT8l3lQHbI/b+GGn5yAgAAwPFW291R218wld9mJ4Sn8+Ry/okjzB/3V4zPmb/dfvf/9SVLm8VL8//1zef/i5JuOv7v+D/zxPH/OZ3su6IXpQ/sPqZd0aXqmBeO/8/pZH+3Of4/J8f/Hf+fi+P/LTj+P6eT/WkrfUva5ktXCOHlP3ro2Wbx0vx/W3vzf+v/zb1oX239v/WN1v/b1mj9v93W/wMAAOZVg4Xm0nleafW+UoZ09b5ShpYLBLZcYtD6f0e8/t9Lpz//m9BEaf6/u735f3w5DBRbXyjr/42sa1DVrTGwzcKAAAAAnIwa7SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg7fXAP/zPpmbxR3973rMvXDx+xZ61F7963XmnPhnC1MzjHVm4o//G28d/fve59+x5YPUd9x0+/6OVvFxPfvu7dbljrW8OhbCv8MhgTLw2VL0zG7jw0/fs6q4mHhsK4cPFwJY9W06pJr41FMKyYuDhS5a/p5rYk5Z48IVzX6omLk0Dn1px6hvVxDl5oCPt7j8uzrrbkXb35sUhLCkEat29YnF9VbU2/jQPdKZt/NNg1kYMDMai3xjM2oiB6VhialEIK7tD6EqrerSSVdWVVvUvlayqrrSqL1dCOCeE0J1W9UJvVlV3OvIne7OqYuC0D+1//YxqYl9vCCuLgac/d+dZ1cQXkkCt8b/oDeED1ZdM2vi3e7LGe9LGb+sJ4f0hhN60xC+7sxK9aYkXu0N4VyFQa/zz3SHsCrwjxA+fuk+0Hbuu3bJhenpy+zwmevO2+sLmqenJ0Y1bpzdVkj410lFIv3X90Y/9ude/tLF6e9G96wbbSXfn5Xpmury6p+7umpO997Ff/cVKZp+PUv0xf28YCIuu3jG5ffSLG3bu3L4q+9tu9tXZ3648mm2rVQtlWy0rVrJy55XbVu7Yde2KqSs3XD55+eRVq85ePXbm2Jqxj5+5sjqqsezv8RjqnSd+qKd3Fyo5ER8AEhISCy3RWffpNnayf5CXvujPdrQnVGY+oEvTimKWjplRHo9Brz3KER/N95SWI1pVmjiUsqyeI8v19VnWlCYTs7X0ZVlmvteVJofFxjpnNmm83xlGR7sabYfh+rvFzfuzY9i8z+Sbrt00AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP/HDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8rcPo2QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEsBAAD//+erI4o=")
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0xa0)
ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, 0x0)

6m24.474090041s ago: executing program 1 (id=141):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f0000000f00)=ANY=[@ANYBLOB="6c617374626c6f636b3d30303030303030303030303030303030303030302c756d61736b3d30303030303030303030303030303030303030303030302c756e64656c6574652c6c6f6e6761642c73686f727461642c7569643d666f726765742c756e64656c6574652c696f636861727365743d757466382c73686f727461642c696f636861727365743d64656661756c742c7569643d666f726765742c6e6f7374726963742c73657373696f6e3d30303030303030303030303030303030303030302c706172746974696f6e3d30303030303030303030303030303030303030362c00b2e01f5c0b5c8fb2623d8f888e41dfceb3ecf959d23d90b071660660b17884bd109d37086024cf83fa"], 0x2, 0xc2d, &(0x7f00000001c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61)
truncate(&(0x7f00000000c0)='./file1\x00', 0x8000008)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x84042, 0x1fb)
write$P9_RUNLINKAT(r1, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7)

6m23.668010888s ago: executing program 1 (id=150):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'geneve0\x00', <r1=>0x0})
r2 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r2, &(0x7f00000002c0)="fb149d84f90000000000000088a8704b88a8", 0x36, 0x0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14)

6m23.497705768s ago: executing program 1 (id=151):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000180), 0x1, 0x553, &(0x7f0000001080)="$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")
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r0], 0x0, 0x8, 0x28, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180))

6m22.470052484s ago: executing program 1 (id=159):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="001004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000640)={0x34, &(0x7f0000000300)={0x0, 0x12, 0x2, "f725"}, 0x0, 0x0, 0x0, 0x0, 0x0})

6m7.510120863s ago: executing program 32 (id=159):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="001004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000640)={0x34, &(0x7f0000000300)={0x0, 0x12, 0x2, "f725"}, 0x0, 0x0, 0x0, 0x0, 0x0})

6m0.414034162s ago: executing program 3 (id=259):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22ffef)
ioctl$TUNGETVNETLE(r0, 0x4004743b, &(0x7f0000000100))

6m0.017213673s ago: executing program 3 (id=310):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x28, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0x4, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x34000}}}]}, 0x28}}, 0x0)

5m59.920455314s ago: executing program 3 (id=311):
symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x0)

5m59.816359649s ago: executing program 3 (id=313):
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000001900)="$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")
creat(&(0x7f0000000300)='./bus\x00', 0x0)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]})
r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r1, 0x0, 0x0)

5m59.610086005s ago: executing program 3 (id=316):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010004b0400f4ed00000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c000280080004"], 0x4c}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb00148008000d"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

5m57.825317788s ago: executing program 3 (id=329):
r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000800)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="001022000000571b6d5d09"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

5m57.708115325s ago: executing program 33 (id=329):
r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000800)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="001022000000571b6d5d09"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

4m56.910032167s ago: executing program 0 (id=900):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000100)={0x34, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ppoll(&(0x7f0000000000)=[{r1, 0x9424}], 0x1, 0x0, 0x0, 0x0)

4m55.428196616s ago: executing program 0 (id=923):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4400, 0x0)
ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000080))

4m55.288786845s ago: executing program 0 (id=924):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x20, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040041}, 0x40)

4m55.238652674s ago: executing program 0 (id=925):
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x205)
move_mount(r1, 0x0, r0, 0x0, 0x46)

4m55.15989553s ago: executing program 0 (id=926):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x0, 0xc, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x8, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x2f}, 0x94)

4m54.908773638s ago: executing program 0 (id=927):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001a40)={0x11, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b40)={r0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

4m54.731506642s ago: executing program 34 (id=927):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001a40)={0x11, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b40)={r0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

3m30.268073574s ago: executing program 4 (id=1811):
r0 = socket$key(0xf, 0x3, 0x2)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)

3m30.181650342s ago: executing program 4 (id=1812):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)

3m30.134370626s ago: executing program 4 (id=1813):
r0 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r0, &(0x7f0000000840)={&(0x7f0000000340)={0x2, 0x4e26, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@ip_retopts={{0x18, 0x0, 0x7, {[@noop, @ra={0x94, 0x3}]}}}], 0x18}, 0x0)

3m30.134106791s ago: executing program 4 (id=1814):
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3813009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='proc\x00', 0x16, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00')

3m30.009552304s ago: executing program 4 (id=1815):
syz_usb_connect(0x0, 0x202, &(0x7f0000000780)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f0"], 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380))
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x400200c1})
io_uring_setup(0x3e76, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0})
pipe(&(0x7f0000000000))
io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0)

3m29.694010653s ago: executing program 4 (id=1816):
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x41}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3m29.52722403s ago: executing program 35 (id=1816):
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x41}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

51.456116373s ago: executing program 5 (id=3801):
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[], 0x2, 0xa41, &(0x7f000000a440)="$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")

51.345818483s ago: executing program 5 (id=3802):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)={0x1c, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x5, 0x11, 0x0, 0x1, [@generic='/']}]}, 0x1c}], 0x1}, 0x0)
sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[], 0x1c}], 0x1, 0x0, 0x0, 0x4000092}, 0x0)

51.092567254s ago: executing program 5 (id=3803):
r0 = msgget$private(0x0, 0x7fc)
msgrcv(r0, 0xffffffffffffffff, 0x0, 0x3, 0x1000)
msgsnd(r0, &(0x7f0000000000)={0x3}, 0x8, 0x0)
msgctl$IPC_RMID(r0, 0x0)

50.964754906s ago: executing program 5 (id=3804):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200010e, &(0x7f0000000140)={[{@inlinecrypt}, {@nodelalloc}, {@data_journal}, {@test_dummy_encryption}, {@block_validity}, {@quota}]}, 0x3, 0x460, &(0x7f0000001380)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x20, &(0x7f0000000140)='usrjquota=')

50.90498592s ago: executing program 5 (id=3805):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r0, 0x84, 0x82, &(0x7f00000001c0)="020900000080efff", 0x8)

50.616159657s ago: executing program 5 (id=3811):
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x10}}}, [0x8, 0x7181, 0x5, 0x7fffffffffffffff, 0x5, 0x7, 0x50, 0x8000000000000000, 0x82d, 0x7, 0x6, 0x5, 0x8, 0xd6, 0x4]}, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x1f)

50.535137559s ago: executing program 36 (id=3811):
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x10}}}, [0x8, 0x7181, 0x5, 0x7fffffffffffffff, 0x5, 0x7, 0x50, 0x8000000000000000, 0x82d, 0x7, 0x6, 0x5, 0x8, 0xd6, 0x4]}, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x1f)

3.416516494s ago: executing program 7 (id=4424):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "2e2b5aa4"}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0x8}]}}, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGPHYS(r1, 0x80404812, &(0x7f0000000040))

1.562266294s ago: executing program 7 (id=4437):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0xa08811, &(0x7f0000000100)={[{@nobarrier}, {@nodatasum}, {@flushoncommit}, {@compress_algo={'compress', 0x3d, 'no'}}, {@flushoncommit}, {@rescue={'rescue', 0x3d, 'imetacsums'}}, {@acl}, {@nodiscard}]}, 0xfb, 0x516d, &(0x7f000000a2c0)="$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")

1.217672453s ago: executing program 2 (id=4439):
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0)
r1 = syz_io_uring_setup(0x2f1, &(0x7f0000000300)={0x0, 0x200000, 0x10100, 0x3}, &(0x7f0000000000)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x50, 0x0, @fd_index=0x3})
io_uring_enter(r1, 0x2de7, 0x4000, 0x0, 0x0, 0x0)
write$dsp(r0, &(0x7f0000002000)='`', 0x88020)

1.129021896s ago: executing program 2 (id=4440):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=@base={0x9, 0x4, 0x6, 0xb}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38)

1.067494203s ago: executing program 2 (id=4441):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xe}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)

970.766816ms ago: executing program 2 (id=4442):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9a860675e5aa2a63, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = openat(0xffffffffffffff9c, 0x0, 0x440, 0x55)
getdents64(r3, 0x0, 0x0)
lseek(r3, 0x3, 0x1)
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
syz_io_uring_setup(0x676d, 0x0, 0x0, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r4, 0x29, 0x4b, 0x0, 0xad)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00')
pread64(r5, &(0x7f0000000240)=""/164, 0xa4, 0x4)

861.738912ms ago: executing program 7 (id=4444):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x40202, 0x0)
ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f00000000c0)=0x1)
mmap$dsp(&(0x7f0000fec000/0x12000)=nil, 0x12000, 0x9, 0x13, r0, 0x0)

609.493773ms ago: executing program 7 (id=4447):
syz_mount_image$ocfs2(&(0x7f0000004480), &(0x7f00000044c0)='./file0\x00', 0x800401, &(0x7f0000000080)={[{@data_ordered}, {@err_ro}, {@heartbeat_none}, {@localflocks}, {@heartbeat_none}, {@data_writeback}, {@localalloc}, {@intr}]}, 0x8, 0x446c, &(0x7f0000004780)="$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")

229.089104ms ago: executing program 6 (id=4452):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f00000002c0)="ec", 0x1)
setsockopt$inet_buf(r0, 0x0, 0x27, 0x0, 0x0)

161.47059ms ago: executing program 6 (id=4453):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000014c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x3, 0x80000000, {0x60, 0x0, 0x0, r1, {0x0, 0xa}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x6}, @TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001d4}, 0x4008000)

161.318783ms ago: executing program 7 (id=4454):
r0 = syz_open_dev$video(&(0x7f0000000040), 0x0, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x34565348, 0x0, 0x0, 0x40, 0x6, 0xfeedcafe, 0x0, 0x0, 0x2, 0x1}})

88.928396ms ago: executing program 6 (id=4455):
r0 = socket$inet6(0xa, 0x5, 0x0)
listen(r0, 0x50)
listen(r0, 0x0)

88.485035ms ago: executing program 7 (id=4456):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r1 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02)
syz_usb_disconnect(r1)
close_range(r0, 0xffffffffffffffff, 0x0)

88.380063ms ago: executing program 6 (id=4457):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0xfffffffc}, 0x8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x97, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)

67.45282ms ago: executing program 2 (id=4458):
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r0}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)

620.409µs ago: executing program 6 (id=4459):
timerfd_create(0x9, 0x800)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/196, 0xc4}], 0x1, 0x8, 0xffffffff)

316.952µs ago: executing program 6 (id=4460):
openat$comedi(0xffffffffffffff9c, 0x0, 0x8080, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc)
r1 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0xfffffffffffffffc}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x1c}, 0xfffffffd, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0xfffffffe}}, 0xe8)
sendmmsg(r1, &(0x7f0000000480), 0x21, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="8400000012000501"], 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x20040810)

0s ago: executing program 2 (id=4461):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x1c, &(0x7f0000001840)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{}, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5}, {0x3, 0x3, 0x3, 0xa, 0xa}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{}, {0x5, 0x0, 0xb, 0x2, 0x0, 0x0, 0xf593ba03a9afa629}, {0x28, 0x0, 0x0, 0x85}}}, &(0x7f00000003c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)

kernel console output (not intermixed with test programs):

.5.2689'.
[  327.772410][T18982] usb usb9: usbfs: process 18982 (syz.5.2691) did not claim interface 3 before use
[  328.308855][T19003] loop2: detected capacity change from 0 to 40427
[  328.313246][T19003] F2FS-fs (loop2): Image doesn't support compression
[  328.330495][T19003] F2FS-fs (loop2): invalid crc value
[  328.401074][T19003] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  328.406949][T19003] F2FS-fs (loop2): Start checkpoint disabled!
[  328.413822][T19003] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  328.432266][T19003] F2FS-fs (loop2): Image doesn't support compression
[  328.641387][T19018] loop2: detected capacity change from 0 to 8192
[  328.783256][T19031] loop2: detected capacity change from 0 to 4096
[  328.814344][T19031] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  328.953694][T19048] loop5: detected capacity change from 0 to 128
[  328.959107][T19048] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  328.963568][T19048] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  329.013283][T19057] trusted_key: encrypted_key: master key parameter 'user:' is invalid
[  329.173270][T19073] loop2: detected capacity change from 0 to 4096
[  329.200728][T19073] ntfs3(loop2): ino=19, mi_enum_attr
[  329.203056][T19073] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  329.290227][T19089] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2732'.
[  329.324927][ T5897] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[  329.334200][T19096] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2734'.
[  329.425080][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[  329.480324][ T5897] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  329.485176][ T5897] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  329.489751][ T5897] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  329.493589][ T5897] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  329.502212][ T5897] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  329.506871][ T5897] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  329.512513][ T5897] usb 6-1: config 0 descriptor??
[  329.536289][ T6824] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[  329.702229][ T6824] usb 3-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5
[  329.706326][ T6824] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  329.709615][ T6824] usb 3-1: Product: syz
[  329.711370][ T6824] usb 3-1: Manufacturer: syz
[  329.713300][ T6824] usb 3-1: SerialNumber: syz
[  329.722887][ T6824] usb 3-1: config 0 descriptor??
[  329.732399][ T6824] gspca_main: sq905c-2.14.0 probing 2770:9052
[  329.926209][ T5897] plantronics 0003:047F:FFFF.0010: ignoring exceeding usage max
[  329.932848][ T6824] gspca_sq905c: sq905c_command: usb_control_msg failed (-71)
[  329.942097][ T6824] sq905c 3-1:0.0: Get version command failed
[  329.944530][ T6824] sq905c 3-1:0.0: probe with driver sq905c failed with error -71
[  329.956934][ T6824] usb 3-1: USB disconnect, device number 54
[  329.960082][ T5897] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  330.744853][  T791] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[  331.014256][  T791] usb 3-1: Using ep0 maxpacket: 8
[  331.026371][  T791] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  331.029831][  T791] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  331.035733][  T791] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.40
[  331.039096][  T791] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  331.042087][  T791] usb 3-1: Product: syz
[  331.043734][  T791] usb 3-1: Manufacturer: syz
[  331.046366][  T791] usb 3-1: SerialNumber: syz
[  331.296330][  T791] usb 3-1: USB disconnect, device number 55
[  332.650602][  T791] usb 6-1: USB disconnect, device number 33
[  332.775879][T19211] netlink: 'syz.5.2766': attribute type 1 has an invalid length.
[  333.162128][T19229] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2774'.
[  333.178575][T19229] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2774'.
[  333.392306][T19257] tipc: Started in network mode
[  333.394714][T19257] tipc: Node identity 080211000001, cluster identity 4711
[  333.399318][T19257] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  333.436874][T19261] loop2: detected capacity change from 0 to 16
[  333.443813][T19261] erofs (device loop2): mounted with root inode @ nid 36.
[  333.618606][ T5850] Bluetooth: hci1: unexpected event for opcode 0x2012
[  333.634613][T19286] IPVS: Error joining to the multicast group
[  333.782386][T19303] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  333.852378][T19309] loop5: detected capacity change from 0 to 22
[  333.858046][T19309] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  333.871575][T19309] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  334.318345][   T33] audit: type=1326 audit(1755068998.789:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19326 comm="syz.5.2814" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0bca58ebe9 code=0x0
[  334.335772][T19329] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2816'.
[  334.518527][ T5909] tipc: Node number set to 134418688
[  334.831873][T19345] input: syz1 as /devices/virtual/input/input27
[  334.880002][T19351] loop2: detected capacity change from 0 to 512
[  335.788269][T19375] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  336.253647][T19387] loop2: detected capacity change from 0 to 22
[  336.257324][T19387] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  336.262138][T19387] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  336.327577][  T792] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[  336.412295][T19398] loop2: detected capacity change from 0 to 1024
[  336.419194][T19398] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  336.496549][  T792] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  336.500350][  T792] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  336.503429][  T792] usb 6-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  336.506412][  T792] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  336.511046][  T792] usb 6-1: config 0 descriptor??
[  336.885126][ T5897] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[  336.920493][  T792] hid-led 0003:27B8:01ED.0011: unbalanced delimiter at end of report description
[  336.923740][  T792] hid-led 0003:27B8:01ED.0011: probe with driver hid-led failed with error -22
[  337.035232][ T5897] usb 3-1: Using ep0 maxpacket: 8
[  337.042336][ T5897] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  337.046133][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  337.049507][ T5897] usb 3-1: Product: syz
[  337.051277][ T5897] usb 3-1: Manufacturer: syz
[  337.053214][ T5897] usb 3-1: SerialNumber: syz
[  337.059985][ T5897] usb 3-1: config 0 descriptor??
[  337.122205][ T5909] usb 6-1: USB disconnect, device number 34
[  337.253099][T19431] bridge_slave_0: default FDB implementation only supports local addresses
[  337.266439][ T5897] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  337.968892][ T5897] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  337.975328][ T5897] usb 3-1: USB disconnect, device number 56
[  338.188433][T19464] loop5: detected capacity change from 0 to 4096
[  338.200413][T19466] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  338.232615][T19464] NILFS (loop5): DAT doesn't have a block to manage vblocknr = 648518346341351424
[  338.238178][T19464] NILFS error (device loop5): nilfs_bmap_truncate: broken bmap (inode number=12)
[  338.251001][T19464] Remounting filesystem read-only
[  338.253176][T19464] NILFS (loop5): error -5 truncating bmap (ino=12)
[  338.270942][T10012] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer
[  338.411259][T19480] smc: net device bond0 applied user defined pnetid SYZ2
[  338.793375][T19502] netlink: 'syz.6.2872': attribute type 64 has an invalid length.
[  338.796196][T19502] netlink: 9 bytes leftover after parsing attributes in process `syz.6.2872'.
[  339.634923][ T5897] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[  339.786456][ T5897] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  339.789598][ T5897] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[  339.793108][ T5897] usb 6-1: config 1 has no interface number 0
[  339.796297][ T5897] usb 6-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  339.802351][ T5897] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  339.806787][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  339.809291][ T5897] usb 6-1: Product: syz
[  339.810554][ T5897] usb 6-1: Manufacturer: syz
[  339.811922][ T5897] usb 6-1: SerialNumber: syz
[  339.818903][ T5897] usb 6-1: selecting invalid altsetting 1
[  340.224253][ T5897] cdc_ncm 6-1:1.1: failed GET_NTB_PARAMETERS
[  340.226401][ T5897] cdc_ncm 6-1:1.1: bind() failure
[  340.230425][ T5897] usb 6-1: USB disconnect, device number 35
[  340.704443][T19536] loop2: detected capacity change from 0 to 32768
[  340.709959][T19536] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2881 (19536)
[  340.727848][T19536] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  340.730665][T19540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  340.731081][T19536] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  340.743841][T19540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  340.744903][T19536] BTRFS info (device loop2): using free-space-tree
[  340.839198][ T5842] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  341.096082][   T33] audit: type=1326 audit(1755069005.569:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19569 comm="syz.2.2887" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa0e058ebe9 code=0x0
[  343.005364][T19632] loop2: detected capacity change from 0 to 32768
[  343.008498][T19632] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2910 (19632)
[  343.014634][T19632] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  343.018740][T19632] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  343.021650][T19632] BTRFS info (device loop2): using free-space-tree
[  343.049547][ T1088] BTRFS warning (device loop2): checksum verify failed on logical 1052672 mirror 1 wanted 0x11f3e929624b680852cd2754314153a53c00b22ae8936d589814e00d5ed09030 found 0xe38ba9bd71c513db051652ecf0e4e83d075b6f90790e6c1c1ddb1c188093d1e0 level 0
[  343.063022][T19632] BTRFS error (device loop2): failed to read chunk root
[  343.199457][T19632] BTRFS error (device loop2): open_ctree failed: -5
[  343.968948][ T5909] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[  344.327924][ T5909] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  344.332612][ T5909] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  344.337889][ T5909] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  344.341467][ T5909] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  344.431456][ T5909] usb 6-1: config 0 descriptor??
[  344.478054][T19685] loop2: detected capacity change from 0 to 47
[  344.718749][T19704] loop2: detected capacity change from 0 to 4096
[  344.723653][T19704] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  344.744275][T19704] ntfs3(loop2): ino=19, mi_enum_attr
[  344.763997][T19704] ntfs3(loop2): ino=5, "/" indx_read
[  344.766611][T19704] ntfs3(loop2): ino=5, "/" ntfs_readdir
[  344.867391][ T5909] hid-thrustmaster 0003:044F:B65D.0012: unknown main item tag 0x0
[  344.870603][ T5909] hid-thrustmaster 0003:044F:B65D.0012: unknown main item tag 0x0
[  344.878946][ T5909] hid-thrustmaster 0003:044F:B65D.0012: unknown main item tag 0x0
[  344.883063][ T5909] hid-thrustmaster 0003:044F:B65D.0012: unknown main item tag 0x0
[  344.887661][ T5909] hid-thrustmaster 0003:044F:B65D.0012: unknown main item tag 0x0
[  344.890975][ T5909] hid-thrustmaster 0003:044F:B65D.0012: unknown main item tag 0x0
[  344.894685][ T5909] hid-thrustmaster 0003:044F:B65D.0012: unknown main item tag 0x0
[  344.902871][ T5909] hid-thrustmaster 0003:044F:B65D.0012: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.5-1/input0
[  344.910557][ T5909] hid-thrustmaster 0003:044F:B65D.0012: Wrong number of endpoints?
[  345.073337][T19731] netlink: 10 bytes leftover after parsing attributes in process `syz.6.2940'.
[  345.083067][    C0] hid-thrustmaster 0003:044F:B65D.0012: Unknown wheel's model id 0x0, unable to proceed further with wheel init
[  345.190128][T19739] program syz.2.2944 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  345.231346][T19743] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2946'.
[  345.284273][ T6824] usb 6-1: USB disconnect, device number 36
[  345.663284][T19770] loop2: detected capacity change from 0 to 512
[  345.804404][T19774] loop2: detected capacity change from 0 to 256
[  345.829557][T19774] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  345.946937][T19774] exFAT-fs (loop2): IO charset iso8859- not found
[  346.089104][T19785] vivid-001: disconnect
[  346.503159][T19798] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.2961'.
[  346.584871][ T5881] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[  346.752295][ T5881] usb 3-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=3f.fc
[  346.756063][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  346.759018][ T5881] usb 3-1: Product: syz
[  346.760585][ T5881] usb 3-1: Manufacturer: syz
[  346.762527][ T5881] usb 3-1: SerialNumber: syz
[  346.778220][ T5881] usb 3-1: config 0 descriptor??
[  346.786736][ T5881] cypress_m8 3-1:0.0: Nokia CA-42 V2 Adapter converter detected
[  346.790890][ T5881] nokiaca42v2 ttyUSB0: required endpoint is missing
[  346.863251][T19781] vivid-001: reconnect
[  347.015128][  T792] usb 3-1: USB disconnect, device number 57
[  347.030445][  T792] cypress_m8 3-1:0.0: device disconnected
[  347.231465][T19827] tipc: Enabling of bearer <etl:g> rejected, media not registered
[  347.621824][T19832] loop5: detected capacity change from 0 to 32768
[  348.355156][T19832] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2966 (19832)
[  348.658511][T19832] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  348.662437][T19832] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  348.665639][T19832] BTRFS info (device loop5): using free-space-tree
[  348.730232][T19858] netlink: 'syz.6.2972': attribute type 2 has an invalid length.
[  348.803457][ T6824] IPVS: starting estimator thread 0...
[  348.857739][T19873] loop2: detected capacity change from 0 to 512
[  348.861791][T19873] EXT4-fs: Ignoring removed nomblk_io_submit option
[  348.918901][T19873] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  348.927169][T19871] IPVS: using max 42 ests per chain, 100800 per kthread
[  348.934952][T19873] ext4 filesystem being mounted at /994/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  348.944159][T10012] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  349.036471][T19873] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0
[  349.044303][T19873] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0
[  349.051326][T19873] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.2976: Failed to acquire dquot type 1
[  349.139744][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  349.231036][T19899] netlink: 'syz.2.2982': attribute type 30 has an invalid length.
[  349.329873][T19903] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2985'.
[  349.333353][T19903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2985'.
[  349.457643][ T5881] usb 6-1: new full-speed USB device number 37 using dummy_hcd
[  349.549745][T19915] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  349.616858][ T5881] usb 6-1: config 4 has an invalid interface number: 121 but max is 0
[  349.619963][ T5881] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  349.623776][ T5881] usb 6-1: config 4 has no interface number 0
[  349.634866][ T5881] usb 6-1: config 4 interface 121 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  349.645020][ T5881] usb 6-1: config 4 interface 121 has no altsetting 0
[  349.659251][ T5881] usb 6-1: New USB device found, idVendor=6b86, idProduct=c24a, bcdDevice=25.ca
[  349.663171][ T5881] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  349.666752][ T5881] usb 6-1: Product: syz
[  349.668485][ T5881] usb 6-1: Manufacturer: syz
[  349.670307][ T5881] usb 6-1: SerialNumber: syz
[  349.887173][T19923] loop2: detected capacity change from 0 to 32768
[  349.891684][T19923] XFS: ikeep mount option is deprecated.
[  349.899390][ T5881] usb 6-1: USB disconnect, device number 37
[  349.907476][T19923] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  349.944223][T19923] XFS (loop2): Ending clean mount
[  349.955713][T19923] XFS (loop2): Quotacheck needed: Please wait.
[  349.997011][T19923] XFS (loop2): Quotacheck: Done.
[  350.009134][   T33] audit: type=1800 audit(1755069014.479:107): pid=19923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2992" name="file1" dev="loop2" ino=9286 res=0 errno=0
[  350.043842][ T5842] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  350.627873][T19971] loop2: detected capacity change from 0 to 32768
[  350.631975][T19971] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3005 (19971)
[  350.640988][T19971] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  350.645851][T19971] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  350.649317][T19971] BTRFS info (device loop2): using free-space-tree
[  350.667685][ T1088] BTRFS warning (device loop2): checksum verify failed on logical 5328896 mirror 1 wanted 0xac8366d3d2e6f7dc04e332773638acafeccdac9b39be662d19e98924efedf548 found 0x09baaddde01c70d9f564d40d40bbd1072cb01ca9c506f6ee2b940aea4af18207 level 0
[  350.681069][T19971] BTRFS warning (device loop2): failed to read root (objectid=4): -5
[  350.684355][T19971] BTRFS warning (device loop2): try to load backup roots slot 1
[  350.692749][T19971] BTRFS warning (device loop2): global root 2 0 already exists
[  350.696033][T19971] BTRFS error (device loop2): failed to load root extent
[  350.698886][T19971] BTRFS warning (device loop2): try to load backup roots slot 2
[  350.702238][   T32] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  350.707098][T19971] BTRFS warning (device loop2): couldn't read tree root
[  350.709840][T19971] BTRFS warning (device loop2): try to load backup roots slot 3
[  350.713604][ T1088] BTRFS warning (device loop2): checksum verify failed on logical 5251072 mirror 1 wanted 0x3733e4df68c3b780deac4f047b3ac85a180e047a8c6c5314b53c1b8a9369ce12 found 0x14b35fdb1819392a43b7915d2192f571ea07cbff49835ef44835d3e0976a7a91 level 0
[  350.723551][T19971] BTRFS error (device loop2): failed to load root extent
[  350.779598][  T792] usb 6-1: new low-speed USB device number 38 using dummy_hcd
[  350.870696][T19971] BTRFS error (device loop2): open_ctree failed: -5
[  350.947826][  T792] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  350.952063][  T792] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 32200, setting to 8
[  350.957159][  T792] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 is Bulk; changing to Interrupt
[  350.961068][  T792] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  350.965332][  T792] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  350.971109][  T792] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8d.58
[  350.974727][  T792] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  350.982235][  T792] usb 6-1: config 0 descriptor??
[  350.985156][T19978] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  351.198019][ T5881] usb 6-1: USB disconnect, device number 38
[  351.255988][T20018] loop2: detected capacity change from 0 to 1024
[  351.259628][T20018] EXT4-fs: Ignoring removed orlov option
[  351.271482][T20018] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  351.306162][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  352.558461][T20070] overlayfs: failed to clone upperpath
[  353.014967][  T791] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[  353.174956][  T791] usb 6-1: Using ep0 maxpacket: 8
[  353.180726][  T791] usb 6-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb
[  353.183762][  T791] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  353.189540][  T791] usb 6-1: Product: syz
[  353.191242][  T791] usb 6-1: Manufacturer: syz
[  353.192994][  T791] usb 6-1: SerialNumber: syz
[  353.479252][T20124] overlayfs: missing 'lowerdir'
[  353.507422][T20127] loop2: detected capacity change from 0 to 128
[  353.520200][   T33] audit: type=1800 audit(1755069017.989:108): pid=20127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3057" name="file0" dev="loop2" ino=1048695 res=0 errno=0
[  353.568668][T20127] syz.2.3057: attempt to access beyond end of device
[  353.568668][T20127] loop2: rw=0, sector=121, nr_sectors = 8 limit=128
[  353.589112][   T27] kworker/u10:0: attempt to access beyond end of device
[  353.589112][   T27] loop2: rw=1, sector=129, nr_sectors = 912 limit=128
[  353.605692][  T791] mxuport 6-1:254.0: mxuport_recv_ctrl_urb - short read (0 / 4)
[  353.608233][  T791] mxuport 6-1:254.0: probe with driver mxuport failed with error -5
[  353.633384][T20138] netlink: 284 bytes leftover after parsing attributes in process `syz.6.3061'.
[  353.840569][  T792] usb 6-1: USB disconnect, device number 39
[  354.482474][T20161] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  355.724297][T20219] loop5: detected capacity change from 0 to 256
[  355.737824][T20219] FAT-fs (loop5): Directory bread(block 64) failed
[  355.740122][T20219] FAT-fs (loop5): Directory bread(block 65) failed
[  355.742584][T20219] FAT-fs (loop5): Directory bread(block 66) failed
[  355.746539][T20219] FAT-fs (loop5): Directory bread(block 67) failed
[  355.757571][T20219] FAT-fs (loop5): Directory bread(block 68) failed
[  355.759600][T20219] FAT-fs (loop5): Directory bread(block 69) failed
[  355.761987][T20219] FAT-fs (loop5): Directory bread(block 70) failed
[  355.768453][T20219] FAT-fs (loop5): Directory bread(block 71) failed
[  355.770890][T20219] FAT-fs (loop5): Directory bread(block 72) failed
[  355.772918][T20219] FAT-fs (loop5): Directory bread(block 73) failed
[  355.934558][T20233] loop5: detected capacity change from 0 to 1764
[  355.951849][T20233] iso9660: Corrupted directory entry in block 2 of inode 1920
[  356.531743][T20260] batadv0: entered allmulticast mode
[  356.759227][T20270] loop5: detected capacity change from 0 to 2048
[  356.843495][T20270] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  356.859019][T20270] EXT4-fs error (device loop5): ext4_find_extent:939: inode #2: comm syz.5.3109: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  356.885963][T20270] EXT4-fs (loop5): Remounting filesystem read-only
[  356.930220][T10012] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  357.734290][T20308] loop2: detected capacity change from 0 to 1024
[  357.737137][T20308] EXT4-fs: Ignoring removed nomblk_io_submit option
[  357.752080][T20308] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  357.792949][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  357.998306][T20321] loop2: detected capacity change from 0 to 256
[  358.157647][T20330] netlink: 'syz.2.3130': attribute type 12 has an invalid length.
[  358.160917][T20330] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.3130'.
[  358.535559][ T5881] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[  358.568920][T20355] loop5: detected capacity change from 0 to 4096
[  358.634098][T20363] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3142'.
[  358.684639][T20365] loop5: detected capacity change from 0 to 2048
[  358.699888][ T5881] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  358.706848][ T5881] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  358.707373][T20365] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  358.710820][ T5881] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  358.710843][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  358.720658][T20336] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  358.736730][ T5881] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  358.751104][T20365] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.3143: bg 0: block 3: invalid block bitmap
[  358.788851][T10012] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  358.998730][ T5881] usb 3-1: USB disconnect, device number 58
[  359.828999][T20441] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22)
[  360.302316][  T791] Process accounting resumed
[  360.542095][T20454] loop5: detected capacity change from 0 to 256
[  360.565425][T20454] FAT-fs (loop5): Directory bread(block 64) failed
[  360.571159][T20454] FAT-fs (loop5): Directory bread(block 65) failed
[  360.573301][T20454] FAT-fs (loop5): Directory bread(block 66) failed
[  360.578504][T20454] FAT-fs (loop5): Directory bread(block 67) failed
[  360.583908][T20454] FAT-fs (loop5): Directory bread(block 68) failed
[  360.594070][T20454] FAT-fs (loop5): Directory bread(block 69) failed
[  360.598885][T20454] FAT-fs (loop5): Directory bread(block 70) failed
[  360.607616][T20454] FAT-fs (loop5): Directory bread(block 71) failed
[  360.616264][T20454] FAT-fs (loop5): Directory bread(block 72) failed
[  360.618409][T20454] FAT-fs (loop5): Directory bread(block 73) failed
[  360.888885][T20473] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3174'.
[  361.371956][T20488] loop2: detected capacity change from 0 to 32768
[  361.396592][T20488] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  361.436063][ T5842] ocfs2: Unmounting device (7,2) on (node local)
[  361.464998][  T791] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[  361.627131][  T791] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  361.630872][  T791] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  361.634148][  T791] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  361.639865][  T791] usb 6-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00
[  361.644034][  T791] usb 6-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[  361.647461][  T791] usb 6-1: Product: syz
[  361.651711][  T791] usb 6-1: config 0 descriptor??
[  362.070771][  T791] waltop 0003:172F:0037.0013: unknown main item tag 0x0
[  362.073158][  T791] waltop 0003:172F:0037.0013: unknown main item tag 0x0
[  362.075530][  T791] waltop 0003:172F:0037.0013: unknown main item tag 0x0
[  362.079938][  T791] waltop 0003:172F:0037.0013: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0
[  362.109646][ T6824] kernel read not supported for file /dsp1 (pid: 6824 comm: kworker/1:6)
[  362.268412][ T6824] usb 6-1: USB disconnect, device number 40
[  362.445043][  T791] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[  362.595667][  T791] usb 3-1: Using ep0 maxpacket: 16
[  362.600061][  T791] usb 3-1: config 0 has an invalid interface number: 157 but max is 0
[  362.603436][  T791] usb 3-1: config 0 has no interface number 0
[  362.606584][  T791] usb 3-1: config 0 interface 157 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  362.611255][  T791] usb 3-1: config 0 interface 157 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  362.619513][  T791] usb 3-1: New USB device found, idVendor=058f, idProduct=9720, bcdDevice=fb.74
[  362.623402][  T791] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  362.628650][  T791] usb 3-1: Product: syz
[  362.630379][  T791] usb 3-1: Manufacturer: syz
[  362.632326][  T791] usb 3-1: SerialNumber: syz
[  362.637678][  T791] usb 3-1: config 0 descriptor??
[  362.642428][T20523] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  362.645501][T20523] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  362.650507][  T791] pl2303 3-1:0.157: required interrupt-in endpoint missing
[  362.863486][ T6824] usb 3-1: USB disconnect, device number 59
[  363.176048][T20585] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  363.395891][  T791] usb 6-1: new high-speed USB device number 41 using dummy_hcd
[  363.449897][T20595] loop2: detected capacity change from 0 to 2048
[  363.459361][T20595] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  363.469311][T20595] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  363.558552][  T791] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  363.564999][  T791] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  363.578308][  T791] usb 6-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00
[  363.586836][  T791] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  363.594510][  T791] usb 6-1: config 0 descriptor??
[  364.020760][  T791] hid-led 0003:1294:1320.0014: hidraw0: USB HID vff.fe Device [HID 1294:1320] on usb-dummy_hcd.5-1/input0
[  364.034635][  T791] hid-led 0003:1294:1320.0014: Riso Kagaku Webmail Notifier initialized
[  364.275899][ T6824] usb 6-1: USB disconnect, device number 41
[  364.288120][ T5740] leds riso_kagaku0:blue: Setting an LED's brightness failed (-38)
[  364.297533][ T5740] leds riso_kagaku0:green: Setting an LED's brightness failed (-38)
[  364.302716][ T5740] leds riso_kagaku0:red: Setting an LED's brightness failed (-38)
[  364.521040][T20640] loop2: detected capacity change from 0 to 256
[  364.524439][T20640] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  364.529229][T20640] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  364.539792][T20640] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  365.225977][ T5897] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[  365.386120][ T5897] usb 6-1: Using ep0 maxpacket: 8
[  365.400962][ T5897] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  365.424961][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  365.428383][ T5897] usb 6-1: Product: syz
[  365.430080][ T5897] usb 6-1: Manufacturer: syz
[  365.431975][ T5897] usb 6-1: SerialNumber: syz
[  365.458695][ T5897] usb 6-1: config 0 descriptor??
[  365.477125][ T5897] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  365.480424][ T5897] usb 6-1: setting power ON
[  365.482303][ T5897] dvb-usb: bulk message failed: -22 (2/0)
[  365.541159][ T5897] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  365.575235][ T5897] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  365.582620][ T5897] usb 6-1: media controller created
[  365.617257][T20675] netlink: 724 bytes leftover after parsing attributes in process `syz.6.3223'.
[  365.632774][T20675] netlink: 724 bytes leftover after parsing attributes in process `syz.6.3223'.
[  365.647294][ T5897] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  365.727756][ T5897] usb 6-1: selecting invalid altsetting 6
[  365.746068][ T5897] usb 6-1: digital interface selection failed (-22)
[  365.748753][ T5897] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  365.771779][ T5897] usb 6-1: setting power OFF
[  365.773720][ T5897] dvb-usb: bulk message failed: -22 (2/0)
[  365.795015][ T5897] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  365.798423][ T5897] (NULL device *): no alternate interface
[  365.938159][ T5897] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  365.957653][ T5897] usb 6-1: USB disconnect, device number 42
[  366.234643][T20700] vlan2: entered promiscuous mode
[  366.237207][T20700] bridge0: entered promiscuous mode
[  366.239321][T20700] vlan2: entered allmulticast mode
[  366.240925][T20700] bridge0: entered allmulticast mode
[  366.263223][T20700] bond0: (slave bridge0): Releasing backup interface
[  366.278584][T20700] bridge0: port 2(bridge_slave_1) entered disabled state
[  366.281806][T20700] bridge0: port 1(bridge_slave_0) entered disabled state
[  366.299760][T20700] bridge_slave_0: left allmulticast mode
[  366.302064][T20700] bridge_slave_0: left promiscuous mode
[  366.304510][T20700] bridge0: port 1(bridge_slave_0) entered disabled state
[  366.316433][T20700] bridge_slave_1: left allmulticast mode
[  366.318784][T20700] bridge_slave_1: left promiscuous mode
[  366.321240][T20700] bridge0: port 2(bridge_slave_1) entered disabled state
[  366.332678][T20700] bond0: (slave bond_slave_0): Releasing backup interface
[  366.342527][T20700] bond0: (slave bond_slave_1): Releasing backup interface
[  366.362784][T20700] team0: Port device team_slave_0 removed
[  366.376008][T20700] team0: Port device team_slave_1 removed
[  366.379372][T20700] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  366.382497][T20700] batman_adv: batadv0: Removing interface: batadv_slave_0
[  366.387218][T20700] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  366.390684][T20700] batman_adv: batadv0: Removing interface: batadv_slave_1
[  367.038419][T20716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3235'.
[  367.055029][T20716] openvswitch: netlink: nsh attr 0 has unexpected len 4 expected 0
[  367.057497][T20716] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  367.211399][T20733] netlink: zone id is out of range
[  367.213028][T20733] netlink: zone id is out of range
[  367.214710][T20733] netlink: zone id is out of range
[  367.219723][T20733] netlink: zone id is out of range
[  367.221587][T20733] netlink: zone id is out of range
[  367.223196][T20733] netlink: zone id is out of range
[  367.225582][T20733] netlink: zone id is out of range
[  367.425481][ T6824] usb 6-1: new high-speed USB device number 43 using dummy_hcd
[  367.577436][ T6824] usb 6-1: config 127 has an invalid interface number: 124 but max is 0
[  367.581050][ T6824] usb 6-1: config 127 has no interface number 0
[  367.583729][ T6824] usb 6-1: config 127 interface 124 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64
[  367.589490][ T6824] usb 6-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=1d.4f
[  367.593561][ T6824] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  367.811292][ T5909] usb 6-1: USB disconnect, device number 43
[  368.247601][T20769] mac80211_hwsim hwsim4 `: renamed from wlan1 (while UP)
[  368.299300][   T33] audit: type=1326 audit(1755069032.774:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20770 comm="syz.2.3257" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa0e058ebe9 code=0x0
[  368.441469][T20778] loop5: detected capacity change from 0 to 16
[  368.446367][T20778] erofs (device loop5): mounted with root inode @ nid 36.
[  368.687675][T20791] loop5: detected capacity change from 0 to 2048
[  368.694187][T20791] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  368.709993][T20793] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  369.077898][T20801] loop5: detected capacity change from 0 to 32768
[  369.098293][T20801] (syz.5.3268,20801,0):ocfs2_load_local_alloc:339 ERROR: inconsistent detected, clean journal with unrecovered local alloc, please run fsck.ocfs2!
[  369.098293][T20801] found = 0, set = 0, taken = 0, off = 1280
[  369.107193][T20801] (syz.5.3268,20801,0):ocfs2_load_local_alloc:356 ERROR: status = -22
[  369.110488][T20801] (syz.5.3268,20801,0):ocfs2_check_volume:2404 ERROR: status = -22
[  369.113716][T20801] (syz.5.3268,20801,0):ocfs2_check_volume:2432 ERROR: status = -22
[  369.117371][T20801] (syz.5.3268,20801,0):ocfs2_mount_volume:1764 ERROR: status = -22
[  369.141254][T20801] (syz.5.3268,20801,0):ocfs2_fill_super:1177 ERROR: status = -22
[  369.206470][T20818] loop2: detected capacity change from 0 to 256
[  369.336615][T20831] loop5: detected capacity change from 0 to 256
[  369.873570][T20850] netlink: 'syz.6.3285': attribute type 8 has an invalid length.
[  370.598922][T20871] netlink: 'syz.2.3292': attribute type 21 has an invalid length.
[  370.603137][T20871] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3292'.
[  370.837012][ T6824] usb 6-1: new high-speed USB device number 44 using dummy_hcd
[  370.864646][T20881] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3298'.
[  371.065004][ T6824] usb 6-1: Using ep0 maxpacket: 8
[  371.598603][T20912] team_slave_0: entered promiscuous mode
[  371.601519][T20912] team_slave_1: entered promiscuous mode
[  371.610072][T20912] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  371.700630][ T6824] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7
[  371.743672][ T6824] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  371.747354][ T6824] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  371.750667][ T6824] usb 6-1: Product: syz
[  371.752342][ T6824] usb 6-1: Manufacturer: syz
[  371.754197][ T6824] usb 6-1: SerialNumber: syz
[  371.788685][T20923] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3315'.
[  371.970238][ T6824] usb 6-1: palm_os_3_probe - error -71 getting connection information
[  371.974916][ T6824] visor 6-1:1.0: probe with driver visor failed with error -71
[  371.990896][ T6824] usb 6-1: USB disconnect, device number 44
[  373.221035][T20963] dvmrp17: entered allmulticast mode
[  373.229102][T20963] dvmrp17: left allmulticast mode
[  373.512448][ T5909] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[  373.536834][ T5909] hid-generic 0000:0000:0000.0015: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  373.888392][T21006] loop5: detected capacity change from 0 to 32768
[  373.894390][T21006] bcachefs (/dev/loop5): error validating superblock: Invalid superblock section replicas_v0: invalid device 1 in entry journal: 1/3 [0 1 4]
[  373.894390][T21006] replicas_v0 (size 24):
[  373.894390][T21006] btree: 1 [0] journal: 3 [0 4 1]
[  373.894390][T21006] 
[  373.902318][T21006] bcachefs: bch2_fs_get_tree() error: invalid_replicas_entry
[  373.962716][T21019] syz.2.3346 (21019): /proc/21018/oom_adj is deprecated, please use /proc/21018/oom_score_adj instead.
[  374.019204][T21026] loop5: detected capacity change from 0 to 512
[  374.244920][ T5881] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[  374.400369][ T5881] usb 3-1: New USB device found, idVendor=0c45, idProduct=62a0, bcdDevice=a8.22
[  374.403548][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  374.410431][ T5881] usb 3-1: config 0 descriptor??
[  374.417037][ T5881] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:62a0
[  374.618108][ T5881] gspca_sn9c20x: Write register 1000 failed -71
[  374.620062][ T5881] gspca_sn9c20x: Device initialization failed
[  374.622481][ T5881] gspca_sn9c20x 3-1:0.0: probe with driver gspca_sn9c20x failed with error -71
[  374.630375][ T5881] usb 3-1: USB disconnect, device number 60
[  375.270241][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[  375.371420][T21095] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3375'.
[  375.627856][T21107] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96
[  375.746352][T21115] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  375.983524][T21122] loop5: detected capacity change from 0 to 32768
[  375.993860][T21122] ocfs2: Slot 0 on device (7,5) was already allocated to this node!
[  376.004492][T21122] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  376.015405][T21122] (syz.5.3384,21122,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=0, inode=65, rec_len=16, name_len=9
[  376.060870][T10012] ocfs2: Unmounting device (7,5) on (node local)
[  376.251625][T21146] loop5: detected capacity change from 0 to 2048
[  376.267860][T21146] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  376.281093][T21146] cifs: Unknown parameter 'norecovery'
[  376.471000][T21154] loop2: detected capacity change from 0 to 1024
[  376.474665][T21154] EXT4-fs: Ignoring removed nomblk_io_submit option
[  376.479701][T21154] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003]
[  376.479973][T10012] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  376.482279][T21154] System zones: 0-1, 3-36
[  376.505366][T21154] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  376.575936][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  376.809585][T21178] netlink: 'syz.5.3404': attribute type 8 has an invalid length.
[  376.824575][T21176] loop2: detected capacity change from 0 to 4096
[  377.020379][T21181] loop5: detected capacity change from 0 to 32768
[  377.035269][T21181] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  377.066403][T10012] ocfs2: Unmounting device (7,5) on (node local)
[  377.254894][ T5909] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[  377.325240][T21198] loop5: detected capacity change from 0 to 32768
[  377.335001][T21198] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  377.353062][T21198] XFS (loop5): Ending clean mount
[  377.388142][T10012] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  377.422986][ T5909] usb 3-1: Using ep0 maxpacket: 32
[  377.446106][ T5909] usb 3-1: config 0 interface 0 has no altsetting 0
[  377.477640][ T5909] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  377.480432][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  377.483532][ T5909] usb 3-1: Product: syz
[  377.495192][ T5909] usb 3-1: Manufacturer: syz
[  377.497064][ T5909] usb 3-1: SerialNumber: syz
[  377.505242][ T5909] usb 3-1: config 0 descriptor??
[  377.675079][T21219] loop5: detected capacity change from 0 to 256
[  377.692859][T21219] FAT-fs (loop5): Directory bread(block 64) failed
[  377.696055][T21219] FAT-fs (loop5): Directory bread(block 65) failed
[  377.698836][T21219] FAT-fs (loop5): Directory bread(block 66) failed
[  377.701548][T21219] FAT-fs (loop5): Directory bread(block 67) failed
[  377.704176][T21219] FAT-fs (loop5): Directory bread(block 68) failed
[  377.706915][T21219] FAT-fs (loop5): Directory bread(block 69) failed
[  377.710012][T21219] FAT-fs (loop5): Directory bread(block 70) failed
[  377.712685][T21219] FAT-fs (loop5): Directory bread(block 71) failed
[  377.715767][T21219] FAT-fs (loop5): Directory bread(block 72) failed
[  377.718481][T21219] FAT-fs (loop5): Directory bread(block 73) failed
[  377.741974][   T33] audit: type=1800 audit(1755069042.214:110): pid=21219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3412" name="bus" dev="loop5" ino=1048720 res=0 errno=0
[  377.921195][ T5909] gs_usb 3-1:0.0: Configuring for 84 interfaces
[  377.923854][ T5909] gs_usb 3-1:0.0: Driver cannot handle more that 3 CAN interfaces
[  377.927928][ T5909] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -22
[  378.021187][T21228] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3412'.
[  378.293126][ T5897] usb 3-1: USB disconnect, device number 61
[  378.309029][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  378.317085][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  378.668349][T21257] loop5: detected capacity change from 0 to 1024
[  379.292321][T21266] loop2: detected capacity change from 0 to 2048
[  379.360681][T21266] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  379.424234][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  380.310334][T21299] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  380.419204][T21299] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  380.491630][T21299] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  380.572664][T21299] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  380.696671][ T5872] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  380.717566][ T5740] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  380.732567][ T5740] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  380.759704][ T5740] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  380.773578][T21294] loop2: detected capacity change from 0 to 131072
[  380.777864][T21294] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0)
[  380.781636][T21294] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  380.789063][T21294] F2FS-fs (loop2): invalid crc value
[  380.845863][T21294] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  380.856142][T21294] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  380.859959][T21294] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  381.677006][ T5909] usb 6-1: new high-speed USB device number 45 using dummy_hcd
[  381.834992][ T5909] usb 6-1: Using ep0 maxpacket: 32
[  381.858281][ T5909] usb 6-1: unable to get BOS descriptor or descriptor too short
[  381.877253][ T5909] usb 6-1: config 128 has an invalid interface number: 127 but max is 3
[  381.879959][ T5909] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  381.883083][ T5909] usb 6-1: config 128 has 1 interface, different from the descriptor's value: 4
[  381.887317][ T5909] usb 6-1: config 128 has no interface number 0
[  381.889899][ T5909] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  381.900871][ T5909] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0
[  381.908541][ T5909] usb 6-1: config 128 interface 127 has no altsetting 0
[  381.918154][ T5909] usb 6-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  381.921496][ T5909] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  381.923995][ T5909] usb 6-1: Product: syz
[  381.926391][ T5909] usb 6-1: Manufacturer: syz
[  381.927825][ T5909] usb 6-1: SerialNumber: syz
[  382.172084][ T5909] usb 6-1: USB disconnect, device number 45
[  383.358568][T21395] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3453'.
[  383.361979][T21395] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3453'.
[  383.366173][T21395] netlink: 21 bytes leftover after parsing attributes in process `syz.5.3453'.
[  384.172629][  T791] usb 3-1: new high-speed USB device number 62 using dummy_hcd
[  384.326686][  T791] usb 3-1: Using ep0 maxpacket: 16
[  384.340302][  T791] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  384.345193][  T791] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  384.350544][  T791] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  384.355200][  T791] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  384.361406][  T791] usb 3-1: config 0 descriptor??
[  384.666220][T21437] netlink: 'syz.2.3466': attribute type 1 has an invalid length.
[  385.357300][T21445] loop5: detected capacity change from 0 to 1024
[  385.371398][T21445] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  386.447072][  T791] usbhid 3-1:0.0: can't add hid device: -71
[  386.449543][  T791] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  386.455740][  T791] usb 3-1: USB disconnect, device number 62
[  386.557382][  T792] usb 6-1: new full-speed USB device number 46 using dummy_hcd
[  386.717020][  T792] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  386.720277][  T792] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  386.726985][  T792] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64
[  386.732340][  T792] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  386.735593][  T792] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  386.738139][  T792] usb 6-1: Product: syz
[  386.739425][  T792] usb 6-1: Manufacturer: syz
[  386.745003][  T792] usb 6-1: SerialNumber: syz
[  386.748989][  T792] usb 6-1: config 0 descriptor??
[  386.755305][T21462] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  386.758457][T21462] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  386.763173][  T792] usb 6-1: ucan: probing device on interface #0
[  387.196608][T21462] loop5: detected capacity change from 0 to 2048
[  387.201980][T21462] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  387.223436][T21462] syz.5.3477: attempt to access beyond end of device
[  387.223436][T21462] loop5: rw=524288, sector=33554430, nr_sectors = 2 limit=2048
[  387.228038][T21509] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  387.495320][  T792] ucan 6-1:0.0: probe with driver ucan failed with error -71
[  387.511160][  T792] usb 6-1: USB disconnect, device number 46
[  388.375590][T21546] loop2: detected capacity change from 0 to 2048
[  388.406114][T21546] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  388.470809][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  388.530031][T21562] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3510'.
[  388.553973][T21560] loop2: detected capacity change from 0 to 2048
[  388.591375][T21560] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  388.602816][T21560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3509'.
[  388.615139][T21560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3509'.
[  388.974909][  T791] usb 3-1: new full-speed USB device number 63 using dummy_hcd
[  389.147350][  T791] usb 3-1: config 0 has an invalid interface number: 128 but max is 0
[  389.156944][  T791] usb 3-1: config 0 has no interface number 0
[  389.165271][  T791] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  389.170112][  T791] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  389.181257][  T791] usb 3-1: Product: syz
[  389.183919][T21585] loop5: detected capacity change from 0 to 40427
[  389.185681][  T791] usb 3-1: Manufacturer: syz
[  389.192040][  T791] usb 3-1: SerialNumber: syz
[  389.192423][T21585] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  389.196991][T21585] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  389.207437][  T791] usb 3-1: config 0 descriptor??
[  389.280598][T21585] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  389.287008][T21585] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  389.289555][T21585] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  389.339880][T10012] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix.
[  389.342884][T10012] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix.
[  389.353203][T10012] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix.
[  389.357033][T10012] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix.
[  389.359827][T10012] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix.
[  389.362685][T10012] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix.
[  389.366756][T10012] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix.
[  389.821825][  T791] usb 3-1: Firmware version (0.0) predates our first public release.
[  389.826858][  T791] usb 3-1: Please update to version 0.2 or newer
[  389.877737][  T791] usb 3-1: USB disconnect, device number 63
[  390.607530][T21652] loop5: detected capacity change from 0 to 4096
[  390.627167][T21652] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  390.632376][T21657] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3537'.
[  390.634291][T21652] ntfs3(loop5): Failed to load $Extend (-22).
[  390.639588][T21652] ntfs3(loop5): Failed to initialize $Extend.
[  390.640762][T21657] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3537'.
[  390.653162][T21652] ntfs3(loop5): ino=1b, "file0" ntfs_readdir
[  391.004900][  T791] usb 3-1: new high-speed USB device number 64 using dummy_hcd
[  391.074965][ T5897] usb 6-1: new high-speed USB device number 47 using dummy_hcd
[  391.097375][T21690] overlayfs: failed to clone upperpath
[  391.161102][  T791] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  391.164637][  T791] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  391.169664][  T791] usb 3-1: Product: syz
[  391.171464][  T791] usb 3-1: Manufacturer: syz
[  391.173272][  T791] usb 3-1: SerialNumber: syz
[  391.185206][  T791] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  391.201759][ T5909] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  391.225277][ T5897] usb 6-1: Using ep0 maxpacket: 16
[  391.233232][ T5897] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  391.238626][ T5897] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  391.251675][ T5897] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  391.255092][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  391.257982][ T5897] usb 6-1: Product: syz
[  391.259503][ T5897] usb 6-1: Manufacturer: syz
[  391.261226][ T5897] usb 6-1: SerialNumber: syz
[  391.674305][ T5897] usb 6-1: cannot find UAC_HEADER
[  391.688723][ T5881] usb 3-1: USB disconnect, device number 64
[  391.709817][ T5897] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22
[  391.717005][ T5897] usb 6-1: USB disconnect, device number 47
[  392.226914][ T5909] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[  392.229974][ T5909] ath9k_htc: Failed to initialize the device
[  392.247427][ T5881] usb 3-1: ath9k_htc: USB layer deinitialized
[  392.267146][T21765] loop2: detected capacity change from 0 to 256
[  392.280822][T21765] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x587066de, utbl_chksum : 0xe619d30d)
[  392.350443][   T33] audit: type=1326 audit(1755069056.824:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21774 comm="syz.5.3571" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bca58ebe9 code=0x7ffc0000
[  392.364740][T21775] loop2: detected capacity change from 0 to 1024
[  392.370767][   T33] audit: type=1326 audit(1755069056.824:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21774 comm="syz.5.3571" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bca58ebe9 code=0x7ffc0000
[  392.391649][   T33] audit: type=1326 audit(1755069056.824:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21774 comm="syz.5.3571" exe="/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f0bca58ebe9 code=0x7ffc0000
[  392.416850][   T33] audit: type=1326 audit(1755069056.824:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21774 comm="syz.5.3571" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bca58ebe9 code=0x7ffc0000
[  392.416891][   T33] audit: type=1326 audit(1755069056.824:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21774 comm="syz.5.3571" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bca58ebe9 code=0x7ffc0000
[  392.431480][T12546] hfsplus: b-tree write err: -5, ino 4
[  392.532734][T21787] netlink: 'syz.2.3575': attribute type 1 has an invalid length.
[  392.654469][T21798] erspan0: entered promiscuous mode
[  392.720402][T21809] net_ratelimit: 15 callbacks suppressed
[  392.720418][T21809] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  392.939614][T21828] loop5: detected capacity change from 0 to 1024
[  393.062878][T21828] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  393.074929][T21828] ext4 filesystem being mounted at /825/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  393.478959][T10012] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  393.533787][T21848] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3598'.
[  393.785544][T21866] netlink: 'syz.2.3608': attribute type 10 has an invalid length.
[  393.788732][T21866] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3608'.
[  393.921477][T21882] loop2: detected capacity change from 0 to 128
[  393.926573][T21882] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  393.932234][T21880] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  393.980852][T21888] netlink: 'syz.2.3616': attribute type 1 has an invalid length.
[  393.984931][T21888] netlink: 184 bytes leftover after parsing attributes in process `syz.2.3616'.
[  394.048036][T21896] input: syz1 as /devices/virtual/input/input28
[  394.206121][T21909] loop2: detected capacity change from 0 to 4096
[  394.227269][T21911] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  394.275309][ T5897] usb 6-1: new high-speed USB device number 48 using dummy_hcd
[  394.326492][T21915] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3624'.
[  394.355679][T21915] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3624'.
[  394.454943][ T5897] usb 6-1: Using ep0 maxpacket: 8
[  394.459306][ T5897] usb 6-1: config 2 has an invalid interface number: 31 but max is 0
[  394.461953][ T5897] usb 6-1: config 2 has no interface number 0
[  394.464149][ T5897] usb 6-1: config 2 interface 31 has no altsetting 0
[  394.471503][ T5897] usb 6-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[  394.484866][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  394.487573][ T5897] usb 6-1: Product: syz
[  394.488893][ T5897] usb 6-1: Manufacturer: syz
[  394.490332][ T5897] usb 6-1: SerialNumber: syz
[  394.674709][T21934] loop2: detected capacity change from 0 to 4096
[  394.691993][T21934] ntfs3(loop2): ino=1a, mi_enum_attr
[  394.694943][T21934] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  394.712374][T21934] ntfs3(loop2): ino=5, "/" mi_enum_attr
[  395.112832][ T5897] ch9200 6-1:2.31: probe with driver ch9200 failed with error -22
[  395.120147][ T5897] usb 6-1: USB disconnect, device number 48
[  395.157501][T21968] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[  395.160121][T21968] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  395.164719][T21968] vhci_hcd vhci_hcd.0: Device attached
[  395.334966][ T5881] vhci_hcd: vhci_device speed not set
[  395.405015][ T5881] usb 37-1: new full-speed USB device number 2 using vhci_hcd
[  395.408176][ T5909] usb 3-1: new low-speed USB device number 65 using dummy_hcd
[  395.557337][ T5909] usb 3-1: config 0 has no interfaces?
[  395.559798][ T5909] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  395.563438][ T5909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  395.569736][ T5909] usb 3-1: config 0 descriptor??
[  395.775449][ T5897] usb 3-1: USB disconnect, device number 65
[  395.780837][T21983] loop5: detected capacity change from 0 to 4096
[  395.782969][T21969] vhci_hcd: connection reset by peer
[  395.791109][T21983] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  395.796920][   T12] vhci_hcd: stop threads
[  395.799508][   T12] vhci_hcd: release socket
[  395.808261][T21983] ntfs3(loop5): Looks like $AttrDef is corrupted (size=0).
[  395.808488][   T12] vhci_hcd: disconnect device
[  395.837161][ T5881] vhci_hcd: vhci_device speed not set
[  396.074616][T22009] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3655'.
[  396.488174][T22042] loop2: detected capacity change from 0 to 1024
[  396.500613][T22042] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  396.667766][T22051] syz_tun: entered allmulticast mode
[  396.670851][T22050] syz_tun: left allmulticast mode
[  396.695707][  T791] usb 6-1: new high-speed USB device number 49 using dummy_hcd
[  396.845535][  T791] usb 6-1: Using ep0 maxpacket: 32
[  396.849682][  T791] usb 6-1: config 0 has an invalid interface number: 51 but max is 0
[  396.852962][  T791] usb 6-1: config 0 has no interface number 0
[  396.858494][  T791] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  396.862230][  T791] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  396.865928][  T791] usb 6-1: Product: syz
[  396.867715][  T791] usb 6-1: Manufacturer: syz
[  396.869690][  T791] usb 6-1: SerialNumber: syz
[  396.875289][  T791] usb 6-1: config 0 descriptor??
[  396.879846][  T791] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  397.087389][  T791] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  397.094374][  T791] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  397.334240][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  397.406916][T22069] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  397.489607][    C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71
[  397.490059][ T5897] usb 6-1: USB disconnect, device number 49
[  397.508730][ T5897] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  397.521631][ T5897] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  397.526923][ T5897] quatech2 6-1:0.51: device disconnected
[  398.258234][T22114] loop5: detected capacity change from 0 to 2048
[  398.262697][T22114] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  398.277859][T22118] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  398.649112][T22139] loop2: detected capacity change from 0 to 4096
[  398.705138][T22142] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  399.595050][T22158] loop2: detected capacity change from 0 to 256
[  399.597981][T22158] exfat: Unknown parameter ''
[  400.227154][T22165] (syz.5.3706,22165,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  400.230476][T22165] (syz.5.3706,22165,0):ocfs2_fill_super:1177 ERROR: status = -22
[  400.610632][T22170] qrtr: Invalid version 0
[  400.627974][T22172] loop2: detected capacity change from 0 to 512
[  400.632295][T22172] EXT4-fs: Ignoring removed orlov option
[  400.637786][T22172] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  400.647060][T22172] EXT4-fs (loop2): orphan cleanup on readonly fs
[  400.656730][T22172] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3709: bg 0: block 248: padding at end of block bitmap is not set
[  400.667800][T22172] Quota error (device loop2): write_blk: dquota write failed
[  400.671045][T22172] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  400.683441][T22172] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.3709: Failed to acquire dquot type 1
[  400.696330][T22172] EXT4-fs (loop2): 1 truncate cleaned up
[  400.700882][T22172] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  400.714292][T22172] EXT4-fs error (device loop2): __ext4_remount:6736: comm syz.2.3709: Abort forced by user
[  400.725116][T22172] EXT4-fs (loop2): Remounting filesystem read-only
[  400.727150][T22172] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000.
[  400.750751][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  401.054844][ T5881] usb 6-1: new high-speed USB device number 50 using dummy_hcd
[  401.216511][ T5881] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  401.219670][ T5881] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  401.223638][ T5881] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  401.226916][ T5881] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  401.229633][ T5881] usb 6-1: SerialNumber: syz
[  401.348013][ T5897] usb 3-1: new high-speed USB device number 66 using dummy_hcd
[  401.477963][ T5881] usb 6-1: 0:2 : does not exist
[  401.490198][ T5881] usb 6-1: USB disconnect, device number 50
[  401.496285][ T5897] usb 3-1: Using ep0 maxpacket: 16
[  401.504302][ T5897] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  401.508253][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  401.511127][ T5897] usb 3-1: Product: syz
[  401.512500][ T5897] usb 3-1: Manufacturer: syz
[  401.513882][ T5897] usb 3-1: SerialNumber: syz
[  401.518664][ T5897] r8152-cfgselector 3-1: Unknown version 0x0000
[  401.520768][ T5897] r8152-cfgselector 3-1: config 0 descriptor??
[  401.588236][T22244] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3729'.
[  401.653035][T22246] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3729'.
[  402.038608][ T5897] r8152-cfgselector 3-1: USB disconnect, device number 66
[  402.072513][T22256] loop5: detected capacity change from 0 to 2048
[  402.647161][   T33] audit: type=1326 audit(1755069067.124:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22293 comm="syz.2.3745" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa0e058ebe9 code=0x0
[  402.715640][ T5897] usb 6-1: new high-speed USB device number 51 using dummy_hcd
[  402.865075][ T5897] usb 6-1: Using ep0 maxpacket: 8
[  402.872488][ T5897] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  402.880214][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  402.883457][ T5897] usb 6-1: Product: syz
[  402.886212][ T5897] usb 6-1: Manufacturer: syz
[  402.888426][ T5897] usb 6-1: SerialNumber: syz
[  402.898365][ T5897] usb 6-1: config 0 descriptor??
[  403.119809][ T5897] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  403.254542][T22325] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3756'.
[  403.352241][T22332] netlink: 92 bytes leftover after parsing attributes in process `syz.6.3759'.
[  403.558735][T22345] netlink: 27 bytes leftover after parsing attributes in process `syz.2.3765'.
[  403.596843][T22347] ip6erspan0: entered promiscuous mode
[  403.725589][ T5897] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  403.731941][ T5897] usb 6-1: USB disconnect, device number 51
[  403.949067][T22378] loop2: detected capacity change from 0 to 512
[  403.952459][T22378] EXT4-fs: Ignoring removed orlov option
[  403.955985][T22378] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  403.960786][T22378] EXT4-fs (loop2): orphan cleanup on readonly fs
[  403.968738][T22378] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3773: bg 0: block 248: padding at end of block bitmap is not set
[  403.974120][T22378] Quota error (device loop2): write_blk: dquota write failed
[  403.977676][T22378] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  403.980947][T22378] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.3773: Failed to acquire dquot type 1
[  403.987955][T22378] EXT4-fs (loop2): 1 truncate cleaned up
[  403.992343][T22378] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  404.002672][T22378] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended
[  404.019689][T22378] EXT4-fs error (device loop2): __ext4_remount:6736: comm syz.2.3773: Abort forced by user
[  404.022973][T22378] EXT4-fs (loop2): Remounting filesystem read-only
[  404.025269][T22378] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  404.027903][T22378] ext4 filesystem being remounted at /1232/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  404.032834][T22378] EXT4-fs: Ignoring removed orlov option
[  404.035093][T22378] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  404.038305][T22378] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000.
[  404.065884][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  404.142679][T22389] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard
[  404.146773][T22389] exFAT-fs (nullb0): invalid boot record signature
[  404.148964][T22389] exFAT-fs (nullb0): failed to read boot sector
[  404.151243][T22389] exFAT-fs (nullb0): failed to recognize exfat type
[  404.180549][T22392] program syz.2.3776 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  404.417195][T22404] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3782'.
[  404.582748][T22413] loop5: detected capacity change from 0 to 8
[  404.591041][T22413] SQUASHFS error: lzo decompression failed, data probably corrupt
[  404.593630][T22413] SQUASHFS error: Failed to read block 0x144: -5
[  404.597805][T22413] SQUASHFS error: Unable to read metadata cache entry [142]
[  404.600301][T22413] SQUASHFS error: Unable to read inode 0x11f
[  404.987090][T22433] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3792'.
[  405.035218][ T5881] usb 3-1: new high-speed USB device number 67 using dummy_hcd
[  405.165091][ T5881] usb 3-1: device descriptor read/64, error -71
[  405.334930][ T5909] usb 6-1: new high-speed USB device number 52 using dummy_hcd
[  405.414938][ T5881] usb 3-1: new high-speed USB device number 68 using dummy_hcd
[  405.497165][ T5909] usb 6-1: Using ep0 maxpacket: 32
[  405.504641][ T5909] usb 6-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=e0.b8
[  405.509398][ T5909] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  405.512851][ T5909] usb 6-1: Product: syz
[  405.514555][ T5909] usb 6-1: Manufacturer: syz
[  405.520894][ T5909] usb 6-1: SerialNumber: syz
[  405.529576][ T5909] empeg 6-1:1.0: empeg converter detected
[  405.565055][ T5881] usb 3-1: device descriptor read/64, error -71
[  405.685973][ T5881] usb usb3-port1: attempt power cycle
[  405.734319][ T5909] empeg 6-1:1.0: probe with driver empeg failed with error -71
[  405.741322][ T5909] usb 6-1: USB disconnect, device number 52
[  406.025208][ T5881] usb 3-1: new high-speed USB device number 69 using dummy_hcd
[  406.057474][ T5881] usb 3-1: device descriptor read/8, error -71
[  406.305079][ T5881] usb 3-1: new high-speed USB device number 70 using dummy_hcd
[  406.330803][ T5881] usb 3-1: device descriptor read/8, error -71
[  406.436119][ T5881] usb usb3-port1: unable to enumerate USB device
[  406.507898][T22466] loop5: detected capacity change from 0 to 2048
[  406.512520][T22466] NILFS (loop5): couldn't mount RDWR because of unsupported optional features (40)
[  406.603078][T22471] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  406.608270][T22471] CPU: 0 UID: 0 PID: 22471 Comm: syz.5.3802 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  406.608285][T22471] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  406.608292][T22471] Call Trace:
[  406.608297][T22471]  <TASK>
[  406.608302][T22471]  dump_stack_lvl+0x189/0x250
[  406.608320][T22471]  ? __pfx_dump_stack_lvl+0x10/0x10
[  406.608331][T22471]  ? __pfx__printk+0x10/0x10
[  406.608349][T22471]  ? kernfs_path_from_node+0x2f/0x290
[  406.608360][T22471]  ? kernfs_path_from_node+0x250/0x290
[  406.608369][T22471]  ? kernfs_path_from_node+0x2f/0x290
[  406.608380][T22471]  sysfs_warn_dup+0x8e/0xa0
[  406.608389][T22471]  sysfs_do_create_link_sd+0xc0/0x110
[  406.608400][T22471]  device_add_class_symlinks+0x1cf/0x240
[  406.608416][T22471]  device_add+0x475/0xb50
[  406.608429][T22471]  wiphy_register+0x1ba6/0x28d0
[  406.608450][T22471]  ? __pfx_wiphy_register+0x10/0x10
[  406.608464][T22471]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  406.608483][T22471]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  406.608502][T22471]  ieee80211_register_hw+0x3425/0x4080
[  406.608525][T22471]  ? ieee80211_register_hw+0x1481/0x4080
[  406.608542][T22471]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  406.608558][T22471]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  406.608572][T22471]  ? __hrtimer_setup+0x187/0x210
[  406.608580][T22471]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  406.608596][T22471]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  406.608621][T22471]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  406.608630][T22471]  ? trace_kmalloc+0x1f/0xd0
[  406.608641][T22471]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  406.608653][T22471]  ? kstrndup+0xbf/0x160
[  406.608667][T22471]  hwsim_new_radio_nl+0xea4/0x1b10
[  406.608679][T22471]  ? __pfx___nla_validate_parse+0x10/0x10
[  406.608716][T22471]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  406.608734][T22471]  ? __nla_parse+0x40/0x60
[  406.608748][T22471]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  406.608762][T22471]  genl_family_rcv_msg_doit+0x215/0x300
[  406.608775][T22471]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  406.608790][T22471]  ? bpf_lsm_capable+0x9/0x20
[  406.608802][T22471]  ? security_capable+0x7e/0x2e0
[  406.608817][T22471]  genl_rcv_msg+0x60e/0x790
[  406.608833][T22471]  ? __pfx_genl_rcv_msg+0x10/0x10
[  406.608844][T22471]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  406.608860][T22471]  netlink_rcv_skb+0x208/0x470
[  406.608869][T22471]  ? __lock_acquire+0xab9/0xd20
[  406.608882][T22471]  ? __pfx_genl_rcv_msg+0x10/0x10
[  406.608895][T22471]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  406.608914][T22471]  ? down_read+0x1ad/0x2e0
[  406.608926][T22471]  genl_rcv+0x28/0x40
[  406.608937][T22471]  netlink_unicast+0x82f/0x9e0
[  406.608950][T22471]  ? __pfx_netlink_unicast+0x10/0x10
[  406.608981][T22471]  ? netlink_sendmsg+0x642/0xb30
[  406.608994][T22471]  ? skb_put+0x11b/0x210
[  406.609009][T22471]  netlink_sendmsg+0x805/0xb30
[  406.609025][T22471]  ? __pfx_netlink_sendmsg+0x10/0x10
[  406.609038][T22471]  ? aa_sock_msg_perm+0xf1/0x1d0
[  406.609053][T22471]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  406.609061][T22471]  ? __pfx_netlink_sendmsg+0x10/0x10
[  406.609072][T22471]  __sock_sendmsg+0x21c/0x270
[  406.609083][T22471]  ____sys_sendmsg+0x505/0x830
[  406.609098][T22471]  ? __pfx_____sys_sendmsg+0x10/0x10
[  406.609114][T22471]  ? import_iovec+0x74/0xa0
[  406.609125][T22471]  ___sys_sendmsg+0x21f/0x2a0
[  406.609138][T22471]  ? __pfx____sys_sendmsg+0x10/0x10
[  406.609167][T22471]  ? __fget_files+0x2a/0x420
[  406.609179][T22471]  ? __fget_files+0x3a0/0x420
[  406.609196][T22471]  __x64_sys_sendmsg+0x19b/0x260
[  406.609209][T22471]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  406.609226][T22471]  ? rcu_is_watching+0x15/0xb0
[  406.609237][T22471]  ? do_syscall_64+0xbe/0x3b0
[  406.609250][T22471]  do_syscall_64+0xfa/0x3b0
[  406.609260][T22471]  ? lockdep_hardirqs_on+0x9c/0x150
[  406.609269][T22471]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  406.609277][T22471]  ? exc_page_fault+0x9f/0xf0
[  406.609288][T22471]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  406.609297][T22471] RIP: 0033:0x7f0bca58ebe9
[  406.609306][T22471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  406.609314][T22471] RSP: 002b:00007f0bcb3cd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  406.609324][T22471] RAX: ffffffffffffffda RBX: 00007f0bca7b5fa0 RCX: 00007f0bca58ebe9
[  406.609330][T22471] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004
[  406.609335][T22471] RBP: 00007f0bca611e19 R08: 0000000000000000 R09: 0000000000000000
[  406.609340][T22471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  406.609346][T22471] R13: 00007f0bca7b6038 R14: 00007f0bca7b5fa0 R15: 00007ffd05aea698
[  406.609361][T22471]  </TASK>
[  406.931852][T22488] loop5: detected capacity change from 0 to 512
[  406.935192][T22488] EXT4-fs: inline encryption not supported
[  406.937848][T22488] EXT4-fs (loop5): Test dummy encryption mode enabled
[  406.939912][T22488] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  406.947225][T22488] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #17: comm syz.5.3804: corrupted in-inode xattr: e_name out of bounds
[  406.951973][T22488] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.3804: couldn't read orphan inode 17 (err -117)
[  406.959495][T22488] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  406.967447][T22488] EXT4-fs: Remounting file system with no journal so ignoring journalled data option
[  406.971683][T22488] EXT4-fs: journaled quota format not specified
[  406.993544][T10012] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  406.999224][T10012] EXT4-fs error (device loop5): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 17
[  407.003117][T10012] EXT4-fs error (device loop5): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 17
[  407.241724][T10012] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  407.361422][ T5740] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  407.456869][ T5740] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  407.571459][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  407.579559][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  407.595851][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  407.598471][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  407.603051][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  407.622476][ T5740] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  407.646054][T22515] loop2: detected capacity change from 0 to 1024
[  407.789292][ T5740] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  408.158675][T22507] chnl_net:caif_netlink_parms(): no params data found
[  408.172205][   T33] audit: type=1800 audit(1755069072.644:117): pid=22644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3821" name="nullb0" dev="tmpfs" ino=3283 res=0 errno=0
[  408.814946][T22660] loop2: detected capacity change from 0 to 131072
[  408.819708][T22660] F2FS-fs (loop2): invalid crc value
[  408.892560][T22660] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  408.897199][T22660] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  408.985552][   T33] audit: type=1800 audit(1755069073.464:118): pid=22660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3822" name="file1" dev="loop2" ino=7 res=0 errno=0
[  409.069461][ T5740] bond0 (unregistering): Released all slaves
[  409.174706][T22507] bridge0: port 1(bridge_slave_0) entered blocking state
[  409.191055][T22507] bridge0: port 1(bridge_slave_0) entered disabled state
[  409.193908][T22507] bridge_slave_0: entered allmulticast mode
[  409.200044][T22507] bridge_slave_0: entered promiscuous mode
[  409.209490][T22507] bridge0: port 2(bridge_slave_1) entered blocking state
[  409.212385][T22507] bridge0: port 2(bridge_slave_1) entered disabled state
[  409.216768][T22507] bridge_slave_1: entered allmulticast mode
[  409.220534][T22507] bridge_slave_1: entered promiscuous mode
[  409.278435][T22507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  409.364502][T22507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  409.420533][T22507] team0: Port device team_slave_0 added
[  409.436371][T22507] team0: Port device team_slave_1 added
[  409.582973][T22507] batman_adv: batadv0: Adding interface: batadv_slave_0
[  409.585463][T22507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  409.593563][T22507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  409.623227][T22507] batman_adv: batadv0: Adding interface: batadv_slave_1
[  409.631718][T22507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  409.640947][T22507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  409.650758][ T5740] hsr_slave_0: left promiscuous mode
[  409.652976][ T5740] hsr_slave_1: left promiscuous mode
[  409.673567][ T5850] Bluetooth: hci1: command tx timeout
[  409.698762][ T5740] veth1_macvtap: left promiscuous mode
[  409.705962][ T5740] veth0_macvtap: left promiscuous mode
[  409.708022][ T5740] veth1_vlan: left promiscuous mode
[  409.709884][ T5740] veth0_vlan: left promiscuous mode
[  410.988292][ T5740] batadv0 (unregistering): left allmulticast mode
[  411.342865][T22507] hsr_slave_0: entered promiscuous mode
[  411.348363][T22507] hsr_slave_1: entered promiscuous mode
[  411.350603][T22507] debugfs: 'hsr0' already exists in 'hsr'
[  411.352478][T22507] Cannot create hsr debugfs directory
[  411.563471][T22918] loop2: detected capacity change from 0 to 2048
[  411.570192][T22920] netlink: 'syz.6.3843': attribute type 64 has an invalid length.
[  411.685950][T22918] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  411.745156][ T5850] Bluetooth: hci1: command tx timeout
[  411.778215][T22507] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  411.799383][T22507] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  411.806339][T22507] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  411.814711][T22507] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  411.906737][T22507] 8021q: adding VLAN 0 to HW filter on device bond0
[  411.921170][T22507] 8021q: adding VLAN 0 to HW filter on device team0
[  411.930821][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  411.933116][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  411.950735][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  411.953050][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  412.079558][T22507] 8021q: adding VLAN 0 to HW filter on device batadv0
[  412.220272][T22507] veth0_vlan: entered promiscuous mode
[  412.238167][T22507] veth1_vlan: entered promiscuous mode
[  412.242281][T22945] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3842: bg 0: block 234: padding at end of block bitmap is not set
[  412.253237][T22945] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 2048 with error 117
[  412.260302][T22945] EXT4-fs (loop2): This should not happen!! Data will be lost
[  412.260302][T22945] 
[  412.261618][T22507] veth0_macvtap: entered promiscuous mode
[  412.270273][T22507] veth1_macvtap: entered promiscuous mode
[  412.286193][T22507] batman_adv: batadv0: Interface activated: batadv_slave_0
[  412.293910][T22507] batman_adv: batadv0: Interface activated: batadv_slave_1
[  412.310478][   T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  412.319601][   T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  412.337455][   T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  412.340289][   T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  412.341916][T22918] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 2066 with max blocks 2048 with error 28
[  412.348490][T22918] EXT4-fs (loop2): This should not happen!! Data will be lost
[  412.348490][T22918] 
[  412.352179][T22918] EXT4-fs (loop2): Total free blocks count 0
[  412.354551][T22918] EXT4-fs (loop2): Free/Dirty block details
[  412.387321][T22918] EXT4-fs (loop2): free_blocks=0
[  412.400103][T22918] EXT4-fs (loop2): dirty_blocks=6128
[  412.402444][T22918] EXT4-fs (loop2): Block reservation details
[  412.438910][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  412.442682][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  412.481060][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  412.483565][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  413.333097][T23001] loop7: detected capacity change from 0 to 32768
[  413.351163][T23012] binder: 23011:23012 ioctl 400c620e 200000000380 returned -22
[  413.393377][ T5910] hid-generic 0008:0006:0000.0016: unknown main item tag 0x0
[  413.397188][ T5910] hid-generic 0008:0006:0000.0016: unknown main item tag 0x0
[  413.399563][ T5910] hid-generic 0008:0006:0000.0016: unknown main item tag 0x0
[  413.401871][ T5910] hid-generic 0008:0006:0000.0016: unknown main item tag 0x0
[  413.404076][ T5910] hid-generic 0008:0006:0000.0016: unknown main item tag 0x0
[  413.407899][ T5910] hid-generic 0008:0006:0000.0016: unknown main item tag 0x0
[  413.410259][ T5910] hid-generic 0008:0006:0000.0016: unknown main item tag 0x0
[  413.412747][ T5910] hid-generic 0008:0006:0000.0016: unknown main item tag 0x0
[  413.417675][ T5910] hid-generic 0008:0006:0000.0016: unknown main item tag 0x0
[  413.420465][ T5910] hid-generic 0008:0006:0000.0016: unknown main item tag 0x0
[  413.451730][ T5910] hid-generic 0008:0006:0000.0016: hidraw0: <UNKNOWN> HID v0.0c Device [syz0] on syz1
[  413.648177][T23024] loop2: detected capacity change from 0 to 32768
[  413.789871][T23031] syz_tun: entered allmulticast mode
[  413.825079][ T5850] Bluetooth: hci1: command tx timeout
[  413.860585][T23037] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3869'.
[  414.174011][T23062] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3875'.
[  414.695128][T23083] netlink: 'syz.7.3879': attribute type 21 has an invalid length.
[  414.893033][T23058] loop2: detected capacity change from 0 to 131072
[  414.897194][T23058] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0)
[  414.900263][T23058] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  414.905432][T23058] F2FS-fs (loop2): invalid crc value
[  414.978037][T23058] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  414.983375][T23058] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  414.987334][T23058] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  415.863441][T23141] ./file0: Can't lookup blockdev
[  415.906516][ T5850] Bluetooth: hci1: command tx timeout
[  416.792914][T23166] syz_tun: entered allmulticast mode
[  416.990910][T23165] syz_tun: left allmulticast mode
[  417.334966][  T791] usb 3-1: new high-speed USB device number 71 using dummy_hcd
[  417.488261][  T791] usb 3-1: New USB device found, idVendor=187f, idProduct=0202, bcdDevice=39.91
[  417.491499][  T791] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  417.494277][  T791] usb 3-1: Product: syz
[  417.496406][  T791] usb 3-1: Manufacturer: syz
[  417.498174][  T791] usb 3-1: SerialNumber: syz
[  417.501958][  T791] usb 3-1: config 0 descriptor??
[  417.506247][  T791] smsusb:smsusb_probe: board id=11, interface number 0
[  417.508788][  T791] smsusb:smsusb_probe: Device initialized with return code -19
[  417.605208][    T9] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  417.714041][   T24] usb 3-1: USB disconnect, device number 71
[  417.756640][    T9] usb 8-1: Using ep0 maxpacket: 32
[  417.763343][    T9] usb 8-1: New USB device found, idVendor=050d, idProduct=0121, bcdDevice= 6.59
[  417.768063][    T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  417.771220][    T9] usb 8-1: Product: syz
[  417.773006][    T9] usb 8-1: Manufacturer: syz
[  417.775144][    T9] usb 8-1: SerialNumber: syz
[  417.779432][    T9] usb 8-1: config 0 descriptor??
[  417.949391][ T5850] Bluetooth: hci2: unexpected event for opcode 0x2040
[  417.990957][    T9] pegasus 8-1:0.0: probe with driver pegasus failed with error -71
[  417.999641][    T9] usb 8-1: USB disconnect, device number 2
[  418.739435][T23230] loop7: detected capacity change from 0 to 32768
[  418.814519][T23230] bcachefs (loop7): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  418.814536][T23230]   allowing incompatible features above 0.0: (unknown version)
[  418.814541][T23230]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  418.831348][T23230] bcachefs (loop7): Using encoding defined by superblock: utf8-12.1.0
[  418.833885][T23230] bcachefs (loop7): initializing new filesystem
[  418.842142][T23230] bcachefs (loop7): going read-write
[  418.851313][T23230] bcachefs (loop7): marking superblocks
[  418.856927][T23230] bcachefs (loop7): initializing freespace
[  418.861038][T23230] bcachefs (loop7): done initializing freespace
[  418.864142][T23230] bcachefs (loop7): reading snapshots table
[  418.866142][T23230] bcachefs (loop7): reading snapshots done
[  418.922295][T23230] bcachefs (loop7): done starting filesystem
[  418.968568][T23260] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3916'.
[  418.988198][T22507] bcachefs (loop7): shutting down
[  418.989813][T22507] bcachefs (loop7): going read-only
[  418.991392][T22507] bcachefs (loop7): finished waiting for writes to stop
[  419.016122][T22507] bcachefs (loop7): flushing journal and stopping allocators, journal seq 2
[  419.066412][T22507] bcachefs (loop7): flushing journal and stopping allocators complete, journal seq 3
[  419.078636][T22507] bcachefs (loop7): clean shutdown complete, journal seq 4
[  419.081265][T22507] bcachefs (loop7): marking filesystem clean
[  419.126467][T22507] bcachefs (loop7): shutdown complete
[  419.509600][T23295] loop2: detected capacity change from 0 to 1024
[  419.538659][ T1092] hfsplus: b-tree write err: -5, ino 4
[  419.725170][T23314] geneve3: entered promiscuous mode
[  420.557451][ T5850] Bluetooth: hci0: command 0x0406 tx timeout
[  421.817868][    T9] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  421.932268][T23369] loop2: detected capacity change from 0 to 2048
[  421.941866][T23369] EXT4-fs (loop2): bad geometry: first data block 0 is beyond end of filesystem (0)
[  421.976463][    T9] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  421.980008][    T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  421.990794][    T9] usb 8-1: config 0 descriptor??
[  421.997053][    T9] cp210x 8-1:0.0: cp210x converter detected
[  422.403205][    T9] cp210x 8-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  422.412190][    T9] usb 8-1: cp210x converter now attached to ttyUSB0
[  422.454357][T23388] loop2: detected capacity change from 0 to 32768
[  422.461504][T23388] (syz.2.3963,23388,1):ocfs2_journal_addressable:1935 ERROR: The journal cannot address the entire volume. Enable the 'block64' journal option with tunefs.ocfs2
[  422.461527][T23388] (syz.2.3963,23388,1):ocfs2_check_volume:2432 ERROR: status = -27
[  422.469065][T23388] (syz.2.3963,23388,1):ocfs2_mount_volume:1764 ERROR: status = -27
[  422.472578][T23388] (syz.2.3963,23388,1):ocfs2_fill_super:1177 ERROR: status = -27
[  422.611593][ T5909] usb 8-1: USB disconnect, device number 3
[  422.623382][ T5909] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  422.637731][ T5909] cp210x 8-1:0.0: device disconnected
[  422.751892][T23423] loop2: detected capacity change from 0 to 2048
[  422.757354][T23423] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  422.760864][T23423] NILFS (loop2): mounting unchecked fs
[  422.797071][T23423] NILFS (loop2): recovery complete
[  422.799593][T23426] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  423.444190][T23452] loop7: detected capacity change from 0 to 512
[  423.452841][T23452] EXT4-fs (loop7): Test dummy encryption mode enabled
[  423.455754][T23452] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  423.477296][T23452] EXT4-fs error (device loop7): ext4_orphan_get:1418: comm syz.7.3980: bad orphan inode 131083
[  423.483427][T23452] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  424.106607][   T33] audit: type=1800 audit(1755069089.550:119): pid=23468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3980" name="file1" dev="loop7" ino=19 res=0 errno=0
[  424.564441][T22507] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  424.731356][T23485] bridge0: port 2(bridge_slave_1) entered disabled state
[  424.736667][T23485] bridge0: port 1(bridge_slave_0) entered disabled state
[  425.362228][T23485] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  425.373357][T23485] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  425.644594][T23503] loop2: detected capacity change from 0 to 16
[  425.649867][T23503] erofs (device loop2): mounted with root inode @ nid 36.
[  425.670001][   T13] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  425.692730][   T13] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  425.697569][   T13] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  425.700743][   T13] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  425.874330][T23523] gre1: entered promiscuous mode
[  425.878258][T23523] gre1: entered allmulticast mode
[  425.918731][T23530] netlink: 212264 bytes leftover after parsing attributes in process `syz.7.4009'.
[  426.084407][T23542] netlink: 'syz.7.4014': attribute type 2 has an invalid length.
[  426.437989][T23568] loop2: detected capacity change from 0 to 128
[  426.723421][T23581] loop2: detected capacity change from 0 to 4096
[  426.732816][T23581] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  426.751510][T23581] ntfs3(loop2): ino=19, mi_enum_attr
[  426.753850][T23581] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  427.743445][T23604] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4041'.
[  428.794989][ T5909] usb 3-1: new full-speed USB device number 72 using dummy_hcd
[  428.949149][ T5909] usb 3-1: config 0 has no interfaces?
[  428.952294][ T5909] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  428.957342][ T5909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  428.964231][ T5909] usb 3-1: config 0 descriptor??
[  429.189103][ T5909] usb 3-1: USB disconnect, device number 72
[  429.228728][T23639] loop7: detected capacity change from 0 to 4096
[  429.256363][T23639] ntfs3(loop7): Mark volume as dirty due to NTFS errors
[  429.259997][T23639] ntfs3(loop7): Failed to initialize $Extend/$ObjId.
[  429.262380][T23639] ntfs3(loop7): ino=5, mi_enum_attr
[  429.995402][ T5909] usb 3-1: new high-speed USB device number 73 using dummy_hcd
[  430.145042][ T5909] usb 3-1: Using ep0 maxpacket: 8
[  430.150458][ T5909] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  430.154930][ T5909] usb 3-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00
[  430.158553][ T5909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  430.164576][ T5909] usb 3-1: config 0 descriptor??
[  430.652158][ T5909] aureal 0003:0755:2626.0017: hidraw0: USB HID v0.03 Device [HID 0755:2626] on usb-dummy_hcd.2-1/input0
[  430.831610][ T5910] usb 3-1: USB disconnect, device number 73
[  430.881203][T23698] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4073'.
[  430.888124][T23698] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4073'.
[  431.436252][   T33] audit: type=1326 audit(1755069096.900:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23714 comm="syz.2.4078" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0e058ebe9 code=0x7ffc0000
[  431.445077][   T33] audit: type=1326 audit(1755069096.900:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23714 comm="syz.2.4078" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0e058ebe9 code=0x7ffc0000
[  431.464406][   T33] audit: type=1326 audit(1755069096.910:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23714 comm="syz.2.4078" exe="/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7fa0e058ebe9 code=0x7ffc0000
[  431.472818][   T33] audit: type=1326 audit(1755069096.910:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23714 comm="syz.2.4078" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0e058ebe9 code=0x7ffc0000
[  431.482639][   T33] audit: type=1326 audit(1755069096.910:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23714 comm="syz.2.4078" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0e058ebe9 code=0x7ffc0000
[  432.563953][T23761] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  432.929597][T23800] 9pnet_fd: Insufficient options for proto=fd
[  432.955189][ T6824] usb 3-1: new high-speed USB device number 74 using dummy_hcd
[  433.108279][ T6824] usb 3-1: config 0 has an invalid interface number: 171 but max is 0
[  433.110821][ T6824] usb 3-1: config 0 has no interface number 0
[  433.112696][ T6824] usb 3-1: config 0 interface 171 has no altsetting 0
[  433.127207][ T6824] usb 3-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67
[  433.135125][ T6824] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  433.137615][ T6824] usb 3-1: Product: syz
[  433.141322][ T6824] usb 3-1: Manufacturer: syz
[  433.143625][ T6824] usb 3-1: SerialNumber: syz
[  433.155645][ T6824] usb 3-1: config 0 descriptor??
[  433.312985][T23836] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4107'.
[  433.363914][ T6824] dvb_usb_m920x 3-1:0.171: probe with driver dvb_usb_m920x failed with error -71
[  433.373315][ T6824] usb 3-1: USB disconnect, device number 74
[  434.048947][T23878] CIFS mount error: No usable UNC path provided in device string!
[  434.048947][T23878] 
[  434.052228][T23878] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  434.520610][T23903] overlayfs: failed to clone upperpath
[  434.755008][ T6824] usb 3-1: new high-speed USB device number 75 using dummy_hcd
[  434.905558][ T6824] usb 3-1: Using ep0 maxpacket: 8
[  434.909909][ T6824] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[  434.913384][ T6824] usb 3-1: config 179 has no interface number 0
[  434.918140][ T6824] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  434.922575][ T6824] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  434.927358][ T6824] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  434.931614][ T6824] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  434.937681][ T6824] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  434.942876][ T6824] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  434.947344][ T6824] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  434.953842][T23898] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  435.247862][   T52] usb 8-1: new full-speed USB device number 4 using dummy_hcd
[  435.290698][T23915] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4122'.
[  435.365584][T23919] netlink: 'syz.6.4124': attribute type 4 has an invalid length.
[  435.377835][    T9] usb 3-1: USB disconnect, device number 75
[  435.377921][    C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  435.383741][    C1] dummy_hcd dummy_hcd.2: timer fired with no URBs pending?
[  435.407765][   T52] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  435.411722][   T52] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  435.416626][   T52] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  435.420317][   T52] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  435.427908][   T52] usb 8-1: config 0 descriptor??
[  435.518168][T23936] syz_tun: entered allmulticast mode
[  435.865436][   T52] savu 0003:1E7D:2D5A.0018: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.7-1/input0
[  436.008846][T23956] bridge0: port 2(bridge_slave_1) entered disabled state
[  436.131425][ T5909] usb 8-1: USB disconnect, device number 4
[  436.298279][T23963] loop2: detected capacity change from 0 to 32768
[  436.320811][T23963] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  436.342445][T23963] XFS (loop2): Ending clean mount
[  436.345919][T23963] XFS (loop2): Quotacheck needed: Please wait.
[  436.398911][T23963] XFS (loop2): Quotacheck: Done.
[  436.426143][ T5842] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  436.539661][T24007] loop2: detected capacity change from 0 to 2048
[  436.609505][T24007] loop2: detected capacity change from 0 to 4096
[  436.729033][T24021] loop7: detected capacity change from 0 to 2048
[  436.743815][T24021] UDF-fs: warning (device loop7): udf_fill_super: No fileset found
[  436.836939][T24035] loop7: detected capacity change from 0 to 512
[  436.840381][T24035] EXT4-fs: Ignoring removed nobh option
[  436.847946][T24035] EXT4-fs (loop7): Test dummy encryption mode enabled
[  436.859528][T24035] EXT4-fs error (device loop7): __ext4_iget:5464: inode #11: block 1: comm syz.7.4158: invalid block
[  436.864330][T24035] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.4158: couldn't read orphan inode 11 (err -117)
[  436.877887][T24035] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  436.907779][T22507] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  436.972236][T24047] netlink: 6032 bytes leftover after parsing attributes in process `syz.7.4159'.
[  437.176973][T24059] loop7: detected capacity change from 0 to 1024
[  437.191431][T24059] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  437.216610][T24059] EXT4-fs error (device loop7): ext4_xattr_inode_iget:437: inode #11: comm syz.7.4165: missing EA_INODE flag
[  437.227872][T24059] EXT4-fs (loop7): Remounting filesystem read-only
[  437.230656][T24059] EXT4-fs warning (device loop7): ext4_xattr_inode_dec_ref_all:1221: inode #18: comm syz.7.4165: ea_inode dec ref err=-30
[  437.237305][T24059] EXT4-fs warning (device loop7): ext4_evict_inode:274: xattr delete (err -30)
[  437.265792][T22507] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  437.368180][T24068] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4167'.
[  437.371613][T24068] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4167'.
[  437.849465][T24082] loop7: detected capacity change from 0 to 32768
[  437.860482][T24082] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.4174 (24082)
[  437.874679][T24082] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  437.881117][T24082] BTRFS info (device loop7): using sha256 (sha256-lib) checksum algorithm
[  437.982848][T24082] BTRFS info (device loop7): rebuilding free space tree
[  438.014354][T24082] BTRFS info (device loop7): disabling free space tree
[  438.017626][T24082] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  438.021573][T24082] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  438.191699][T22507] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  438.772619][T24146] netlink: 'syz.6.4194': attribute type 1 has an invalid length.
[  439.756972][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  439.759219][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  439.895112][ T6824] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  440.041550][T24184] 9pnet: p9_errstr2errno: server reported unknown error @c0xffffffffffffffff
[  440.065069][ T6824] usb 8-1: Using ep0 maxpacket: 16
[  440.076177][ T6824] usb 8-1: unable to get BOS descriptor or descriptor too short
[  440.079884][ T6824] usb 8-1: config 0 has an invalid interface number: 51 but max is 0
[  440.082499][ T6824] usb 8-1: config 0 has no interface number 0
[  440.084475][ T6824] usb 8-1: config 0 interface 51 has no altsetting 0
[  440.099682][ T6824] usb 8-1: New USB device found, idVendor=eb1a, idProduct=2710, bcdDevice=83.9c
[  440.106571][ T6824] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  440.114694][ T6824] usb 8-1: Product: syz
[  440.118823][ T6824] usb 8-1: Manufacturer: syz
[  440.120362][ T6824] usb 8-1: SerialNumber: syz
[  440.123941][ T6824] usb 8-1: config 0 descriptor??
[  440.557027][ T6824] em28xx 8-1:0.51: audio device (eb1a:2710): interface 51, class 1
[  441.071812][T24215] loop7: detected capacity change from 0 to 256
[  441.080490][ T6824] usb 8-1: USB disconnect, device number 5
[  441.095295][T24215] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xf4000b1f, utbl_chksum : 0xe619d30d)
[  441.923508][T24254] loop2: detected capacity change from 0 to 2048
[  441.931465][T24254] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  442.018803][T24263] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  442.335582][ T5909] usb 3-1: new full-speed USB device number 76 using dummy_hcd
[  442.484983][ T5910] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  442.510088][ T5909] usb 3-1: config 2 has an invalid interface number: 211 but max is 0
[  442.513870][ T5909] usb 3-1: config 2 has no interface number 0
[  442.516802][ T5909] usb 3-1: config 2 interface 211 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64
[  442.521085][ T5909] usb 3-1: config 2 interface 211 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 4
[  442.533156][ T5909] usb 3-1: New USB device found, idVendor=2040, idProduct=8268, bcdDevice=27.95
[  442.538898][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  442.542233][ T5909] usb 3-1: Product: syz
[  442.543936][ T5909] usb 3-1: Manufacturer: syz
[  442.547865][ T5909] usb 3-1: SerialNumber: syz
[  442.553925][T24267] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  442.564377][ T5909] em28xx 3-1:2.211: New device syz syz @ 12 Mbps (2040:8268, interface 211, class 211)
[  442.570309][ T5909] em28xx 3-1:2.211: Device initialization failed.
[  442.573423][ T5909] em28xx 3-1:2.211: Device must be connected to a high-speed USB 2.0 port.
[  442.637161][ T5910] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  442.641262][ T5910] usb 8-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[  442.645342][ T5910] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  442.652104][ T5910] usb 8-1: config 0 descriptor??
[  442.774341][ T6824] usb 3-1: USB disconnect, device number 76
[  443.084182][ T5910] lenovo 0003:17EF:6047.0019: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.7-1/input0
[  443.273510][ T5910] lenovo 0003:17EF:6047.0019: Failed to switch F7/9/11 mode: -71
[  443.282304][ T5910] lenovo 0003:17EF:6047.0019: Failed to switch middle button: -71
[  443.286596][ T5910] lenovo 0003:17EF:6047.0019: Fn-lock setting failed: -71
[  443.290374][ T5910] lenovo 0003:17EF:6047.0019: Sensitivity setting failed: -71
[  443.303854][ T5910] usb 8-1: USB disconnect, device number 6
[  443.758949][T24351] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  443.820180][T24357] syz.2.4267: attempt to access beyond end of device
[  443.820180][T24357] loop2: rw=0, sector=0, nr_sectors = 1 limit=0
[  443.826527][T24357] exFAT-fs (loop2): unable to read boot sector
[  443.829034][T24357] exFAT-fs (loop2): failed to read boot sector
[  443.831469][T24357] exFAT-fs (loop2): failed to recognize exfat type
[  444.241218][T24374] loop7: detected capacity change from 0 to 8
[  444.250392][T24374] syz.7.4275: attempt to access beyond end of device
[  444.250392][T24374] loop7: rw=2048, sector=36028797018963960, nr_sectors = 16 limit=8
[  444.263539][T24374] SQUASHFS error: Failed to read block 0xfffffffffffffffa: -5
[  444.267077][T24374] unable to read xattr id index table
[  444.327565][T24383] bridge_slave_0: left allmulticast mode
[  444.330181][T24383] bridge0: port 1(bridge_slave_0) entered disabled state
[  444.888220][T24393] loop2: detected capacity change from 0 to 40427
[  444.898908][T24393] F2FS-fs (loop2): invalid crc value
[  444.930927][T24393] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  444.934152][T24393] F2FS-fs (loop2): Start checkpoint disabled!
[  444.939814][T24393] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  444.947517][T24393] F2FS-fs (loop2): disabling checkpoint not compatible with read-only
[  445.278716][T24430] loop2: detected capacity change from 0 to 128
[  445.290845][T24430] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  445.298311][T24430] ext4 filesystem being mounted at /1394/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  445.338050][ T5842] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  445.443026][T24437] loop2: detected capacity change from 0 to 4096
[  445.448294][T24437] ntfs3: Unexpected value for 'sparse'
[  445.537445][T24444] loop2: detected capacity change from 0 to 1024
[  445.553414][T24444] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  445.602560][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  445.693388][T24457] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  446.957132][T24512] loop2: detected capacity change from 0 to 32768
[  446.971172][T24512] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  447.113073][T24527] bridge2: the hash_elasticity option has been deprecated and is always 16
[  447.216479][ T5842] ocfs2: Unmounting device (7,2) on (node local)
[  447.311842][T24544] loop2: detected capacity change from 0 to 256
[  447.535543][T24551] exFAT-fs (loop2): start_clu is invalid cluster(0x400)
[  447.941732][T24560] loop7: detected capacity change from 0 to 128
[  447.949606][T24560] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256
[  447.993243][T24560] UDF-fs: error (device loop7): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  448.016187][T24560] UDF-fs: error (device loop7): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  448.087139][T24569] netlink: 'syz.7.4341': attribute type 12 has an invalid length.
[  448.089689][T24569] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4341'.
[  448.283501][T24575] loop2: detected capacity change from 0 to 1024
[  448.295717][T24575] EXT4-fs: Ignoring removed oldalloc option
[  448.298084][T24575] EXT4-fs: Ignoring removed bh option
[  448.340930][T24575] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  448.377906][T24575] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.4343: Allocating blocks 385-513 which overlap fs metadata
[  448.397899][T24575] EXT4-fs (loop2): pa ffff8881116c73a0: logic 16, phys. 129, len 24
[  448.401899][T24575] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8
[  448.504284][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  448.700465][T24593] loop2: detected capacity change from 0 to 4096
[  449.125436][T24612] loop2: detected capacity change from 0 to 1024
[  449.152145][T24612] syz.2.4356: attempt to access beyond end of device
[  449.152145][T24612] loop2: rw=0, sector=5778, nr_sectors = 2 limit=1024
[  449.170288][T24612] syz.2.4356: attempt to access beyond end of device
[  449.170288][T24612] loop2: rw=0, sector=5778, nr_sectors = 2 limit=1024
[  449.321554][T24621] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4359'.
[  449.638518][T24625] loop2: detected capacity change from 0 to 32768
[  449.651521][T24625] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  449.701156][ T5842] ocfs2: Unmounting device (7,2) on (node local)
[  450.151017][   T55] Bluetooth: hci1: command 0x0406 tx timeout
[  450.428726][T24645] tmpfs: Bad value for 'grpquota_inode_hardlimit'
[  450.492212][T24647] netlink: 'syz.6.4368': attribute type 8 has an invalid length.
[  450.878685][T24660] loop2: detected capacity change from 0 to 8
[  451.150516][   T33] audit: type=1326 audit(1755069116.620:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24674 comm="syz.6.4379" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162d18ebe9 code=0x7ffc0000
[  451.158998][   T33] audit: type=1326 audit(1755069116.620:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24674 comm="syz.6.4379" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162d18ebe9 code=0x7ffc0000
[  451.180527][   T33] audit: type=1326 audit(1755069116.650:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24674 comm="syz.6.4379" exe="/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f162d18ebe9 code=0x7ffc0000
[  451.347199][   T33] audit: type=1326 audit(1755069116.660:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24674 comm="syz.6.4379" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162d18ebe9 code=0x7ffc0000
[  451.370505][   T33] audit: type=1326 audit(1755069116.670:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24674 comm="syz.6.4379" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162d18ebe9 code=0x7ffc0000
[  451.388053][   T33] audit: type=1326 audit(1755069116.790:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24674 comm="syz.6.4379" exe="/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7f162d18ebe9 code=0x7ffc0000
[  451.409010][   T33] audit: type=1326 audit(1755069116.830:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24674 comm="syz.6.4379" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162d18ebe9 code=0x7ffc0000
[  451.412820][T24680] netlink: 'syz.7.4380': attribute type 1 has an invalid length.
[  451.417819][   T33] audit: type=1326 audit(1755069116.830:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24674 comm="syz.6.4379" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f162d18ebe9 code=0x7ffc0000
[  451.430747][T24680] netlink: 232 bytes leftover after parsing attributes in process `syz.7.4380'.
[  451.434479][T24680] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4380'.
[  451.555352][T24686] loop7: detected capacity change from 0 to 4096
[  451.558290][T24686] ntfs3: Unknown parameter 'noshowmeta'
[  451.605788][ T5910] IPVS: starting estimator thread 0...
[  451.695064][T24692] IPVS: using max 41 ests per chain, 98400 per kthread
[  452.089217][T24712] vivid-007: =================  START STATUS  =================
[  452.102751][T24712] vivid-007: Generate PTS: true
[  452.110798][T24712] vivid-007: Generate SCR: true
[  452.112842][T24712] tpg source WxH: 320x240 (Y'CbCr)
[  452.120724][T24712] tpg field: 1
[  452.124405][T24712] tpg crop: (0,0)/320x240
[  452.130500][T24712] tpg compose: (0,0)/320x240
[  452.134580][T24712] tpg colorspace: 8
[  452.141434][T24712] tpg transfer function: 0/0
[  452.146950][T24712] tpg Y'CbCr encoding: 0/0
[  452.152533][T24712] tpg quantization: 0/0
[  452.160705][T24712] tpg RGB range: 0/2
[  452.162291][T24712] vivid-007: ==================  END STATUS  ==================
[  452.165929][T24714] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10)
[  452.168408][T24714] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  452.172888][T24714] vhci_hcd vhci_hcd.0: Device attached
[  452.415033][ T5909] usb 37-1: new high-speed USB device number 3 using vhci_hcd
[  452.571328][T24718] loop7: detected capacity change from 0 to 512
[  452.586513][T24718] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  452.594302][T24718] EXT4-fs (loop7): 1 truncate cleaned up
[  452.600206][T24718] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  452.629683][T24718] syz.7.4394 (pid 24718) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  452.718840][T22507] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  452.851067][T24715] vhci_hcd: connection reset by peer
[  452.865803][ T5872] vhci_hcd: stop threads
[  452.868281][ T5872] vhci_hcd: release socket
[  452.872378][ T5872] vhci_hcd: disconnect device
[  453.024831][T24741] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4400'.
[  453.216381][    T9] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  453.386634][    T9] usb 8-1: Using ep0 maxpacket: 16
[  453.395975][    T9] usb 8-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90
[  453.399566][    T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  453.402675][    T9] usb 8-1: Product: syz
[  453.417445][    T9] usb 8-1: Manufacturer: syz
[  453.419388][    T9] usb 8-1: SerialNumber: syz
[  453.427302][    T9] usb 8-1: config 0 descriptor??
[  453.432604][    T9] ums-onetouch 8-1:0.0: USB Mass Storage device detected
[  453.648373][    T9] usb 8-1: USB disconnect, device number 7
[  453.741890][T24784] loop2: detected capacity change from 0 to 1024
[  453.779483][T24784] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  453.837489][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  454.745047][ T5910] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  454.908052][ T5910] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  454.912549][ T5910] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  454.918253][ T5910] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  454.926455][ T5910] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  454.931233][ T5910] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  454.934178][ T5910] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  454.949938][ T5910] usb 8-1: config 0 descriptor??
[  455.119758][T24820] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  455.233027][T24831] loop2: detected capacity change from 0 to 16
[  455.236588][T24831] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  455.241860][T24831] cramfs: empty filesystem
[  455.396021][ T5910] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0
[  455.448424][T24839] loop2: detected capacity change from 0 to 32768
[  455.452728][T24839] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.4433 (24839)
[  455.459310][T24839] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  455.462294][T24839] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[  455.464993][T24839] BTRFS info (device loop2): disk space caching is enabled
[  455.467678][T24839] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  455.609116][T24839] BTRFS info (device loop2): rebuilding free space tree
[  455.621081][T24839] BTRFS info (device loop2): disabling free space tree
[  455.623911][T24839] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  455.627879][T24839] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  455.639255][ T5910] usb 8-1: USB disconnect, device number 8
[  455.807196][T24878] BTRFS info (device loop2 state M): max_inline set to 4096
[  456.403066][ T5842] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  456.484703][T24883] loop7: detected capacity change from 0 to 32768
[  456.509493][T24883] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.4437 (24883)
[  456.521065][T24883] BTRFS info (device loop7 state S): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  456.547939][T24883] BTRFS info (device loop7 state S): using crc32c (crc32c-lib) checksum algorithm
[  456.551274][T24883] BTRFS info (device loop7 state S): using free-space-tree
[  456.700068][ T1090] BTRFS warning (device loop7 state S): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0x3a96e814 level 0, ignored
[  456.736405][T24883] BTRFS error (device loop7 state S): devid 1 uuid ffe9ff7f-0000-0000-0000-9003f3eadbc4 is missing
[  456.741781][T24883] BTRFS error (device loop7 state S): failed to read chunk tree: -2
[  456.788117][T24883] BTRFS error (device loop7 state S): open_ctree failed: -2
[  457.525797][ T5909] vhci_hcd: vhci_device speed not set
[  457.615721][T24928] loop7: detected capacity change from 0 to 32768
[  457.639969][T24928] (syz.7.4447,24928,1):ocfs2_journal_addressable:1935 ERROR: The journal cannot address the entire volume. Enable the 'block64' journal option with tunefs.ocfs2
[  457.640007][T24928] (syz.7.4447,24928,1):ocfs2_check_volume:2432 ERROR: status = -27
[  457.652598][T24928] (syz.7.4447,24928,1):ocfs2_mount_volume:1764 ERROR: status = -27
[  457.659791][T24928] (syz.7.4447,24928,1):ocfs2_fill_super:1177 ERROR: status = -27
[  457.933930][T24963] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI
[  457.938229][T24963] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[  457.941503][T24963] CPU: 1 UID: 0 PID: 24963 Comm: syz.6.4460 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  457.946560][T24963] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  457.950096][T24963] RIP: 0010:xfrm_state_find+0x4c9b/0x5400
[  457.952126][T24963] Code: 00 00 00 00 00 fc ff df 80 3c 03 00 74 08 4c 89 ff e8 59 42 03 f8 49 8b 1f 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 48 89 df e8 27 43 03 f8 4c 89 23 48 b8 00 00 00
[  457.958845][T24963] RSP: 0018:ffffc9000635ef00 EFLAGS: 00010246
[  457.960996][T24963] RAX: 0000000000000000 RBX: 0000000000000000 RCX: dffffc0000000000
[  457.963793][T24963] RDX: ffffc900209a2000 RSI: 0000000000000378 RDI: 0000000000000379
[  457.966587][T24963] RBP: ffffc9000635f120 R08: dffffc0000000000 R09: 0000000000000002
[  457.969370][T24963] R10: 000000000000000a R11: 0000000000000002 R12: ffff88812f2984a8
[  457.972123][T24963] R13: ffff88812f298480 R14: ffff88811e16d6a8 R15: ffff88812f2984b0
[  457.974873][T24963] FS:  00007f162df5c6c0(0000) GS:ffff8881a3c21000(0000) knlGS:0000000000000000
[  457.977892][T24963] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  457.980207][T24963] CR2: 000000110c39e630 CR3: 0000000027f6e000 CR4: 00000000000006f0
[  457.982959][T24963] Call Trace:
[  457.984134][T24963]  <TASK>
[  457.985232][T24963]  ? lockdep_hardirqs_on+0x9c/0x150
[  457.987132][T24963]  ? xfrm_state_find+0x1da/0x5400
[  457.988944][T24963]  ? __pfx_xfrm_state_find+0x10/0x10
[  457.990823][T24963]  ? ip6_pol_route+0x547/0x1180
[  457.992567][T24963]  ? fib6_rule_saddr+0xc0/0x420
[  457.994337][T24963]  ? __pfx_ip6_pol_route+0x10/0x10
[  457.996194][T24963]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  457.998374][T24963]  ? fib_rules_lookup+0x96/0xe90
[  458.000120][T24963]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  458.002454][T24963]  ? __lock_acquire+0xab9/0xd20
[  458.004212][T24963]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  458.006112][T24963]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  458.007919][T24963]  ? xfrm_expand_policies+0x41f/0x6a0
[  458.009755][T24963]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  458.011587][T24963]  ? __pfx_ip6_dst_lookup_tail+0x10/0x10
[  458.013505][T24963]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  458.015521][T24963]  ? txopt_get+0x335/0x3f0
[  458.017102][T24963]  ? aa_label_sk_perm+0x4cd/0x630
[  458.018879][T24963]  ? __pfx_txopt_get+0x10/0x10
[  458.020527][T24963]  xfrm_lookup_route+0x3c/0x1c0
[  458.022188][T24963]  rawv6_sendmsg+0xdab/0x1820
[  458.023817][T24963]  ? __pfx_rawv6_sendmsg+0x10/0x10
[  458.025580][T24963]  ? finish_task_switch+0x266/0x950
[  458.027396][T24963]  ? __pfx_aa_sk_perm+0x10/0x10
[  458.029097][T24963]  ? sock_rps_record_flow+0x19/0x410
[  458.030870][T24963]  ? inet_sendmsg+0x2f4/0x370
[  458.032454][T24963]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  458.034247][T24963]  __sock_sendmsg+0x19c/0x270
[  458.035866][T24963]  ____sys_sendmsg+0x52d/0x830
[  458.037558][T24963]  ? __pfx_____sys_sendmsg+0x10/0x10
[  458.039397][T24963]  ? import_iovec+0x74/0xa0
[  458.041002][T24963]  ___sys_sendmsg+0x21f/0x2a0
[  458.042681][T24963]  ? __pfx____sys_sendmsg+0x10/0x10
[  458.044531][T24963]  ? __fget_files+0x2a/0x420
[  458.046204][T24963]  ? __fget_files+0x3a0/0x420
[  458.047870][T24963]  __sys_sendmmsg+0x227/0x430
[  458.049510][T24963]  ? __pfx___sys_sendmmsg+0x10/0x10
[  458.051356][T24963]  ? do_futex+0x333/0x420
[  458.052901][T24963]  ? rcu_is_watching+0x15/0xb0
[  458.054620][T24963]  __x64_sys_sendmmsg+0xa0/0xc0
[  458.056395][T24963]  do_syscall_64+0xfa/0x3b0
[  458.058022][T24963]  ? lockdep_hardirqs_on+0x9c/0x150
[  458.059870][T24963]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  458.062024][T24963]  ? exc_page_fault+0x9f/0xf0
[  458.063721][T24963]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  458.065824][T24963] RIP: 0033:0x7f162d18ebe9
[  458.067431][T24963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  458.074165][T24963] RSP: 002b:00007f162df5c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  458.077054][T24963] RAX: ffffffffffffffda RBX: 00007f162d3b5fa0 RCX: 00007f162d18ebe9
[  458.079740][T24963] RDX: 0000000000000021 RSI: 0000200000000480 RDI: 0000000000000004
[  458.082475][T24963] RBP: 00007f162d211e19 R08: 0000000000000000 R09: 0000000000000000
[  458.085285][T24963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  458.088090][T24963] R13: 00007f162d3b6038 R14: 00007f162d3b5fa0 R15: 00007ffe2fdcba88
[  458.090791][T24963]  </TASK>
[  458.091843][T24963] Modules linked in:
[  458.093562][T24963] ---[ end trace 0000000000000000 ]---
[  458.095816][T24963] RIP: 0010:xfrm_state_find+0x4c9b/0x5400
[  458.098060][T24963] Code: 00 00 00 00 00 fc ff df 80 3c 03 00 74 08 4c 89 ff e8 59 42 03 f8 49 8b 1f 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 48 89 df e8 27 43 03 f8 4c 89 23 48 b8 00 00 00
[  458.105523][T24963] RSP: 0018:ffffc9000635ef00 EFLAGS: 00010246
[  458.107989][T24963] RAX: 0000000000000000 RBX: 0000000000000000 RCX: dffffc0000000000
[  458.111119][T24963] RDX: ffffc900209a2000 RSI: 0000000000000378 RDI: 0000000000000379
[  458.114180][T24963] RBP: ffffc9000635f120 R08: dffffc0000000000 R09: 0000000000000002
[  458.117241][T24963] R10: 000000000000000a R11: 0000000000000002 R12: ffff88812f2984a8
[  458.120298][T24963] R13: ffff88812f298480 R14: ffff88811e16d6a8 R15: ffff88812f2984b0
[  458.122834][T24963] FS:  00007f162df5c6c0(0000) GS:ffff8881a3c21000(0000) knlGS:0000000000000000
[  458.126119][T24963] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  458.128680][T24963] CR2: 000000110c39e630 CR3: 0000000027f6e000 CR4: 00000000000006f0
[  458.131270][T24963] Kernel panic - not syncing: Fatal exception in interrupt
[  458.134159][T24963] Kernel Offset: disabled
[  458.135519][T24963] Rebooting in 86400 seconds..

VM DIAGNOSIS:
07:12:02  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81b4512b RBX=1ffff11026cc7f61 RCX=ffff888107a49cc0 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc90006d174c0 RSP=ffffc90006d17340
R8 =ffffffff8fa34737 R9 =1ffffffff1f468e6 R10=dffffc0000000000 R11=fffffbfff1f468e7
R12=ffff88813663fb08 R13=dffffc0000000000 R14=ffff88804b03b1c0 R15=0000000000000001
RIP=ffffffff81b45113 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8621000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c3d655f CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fa0e0787498 00007fa0e0787470 XMM03=00007fa0e07874a8 00007fa0e07874a0
XMM04=00007fa0e12ed100 00007fa0e0787460 XMM05=00007fa0e0787478 00007fa0e07874c0
XMM06=00007fa0e07874b8 00007fa0e07874b0 XMM07=00007fa0e07874a8 00007fa0e07874a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fa0e0612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000015ce RDI=00000000000015cf RBP=00000000000003f8 RSP=ffffc9000635e690
R8 =ffff8880216f8237 R9 =1ffff110042df046 R10=dffffc0000000000 R11=ffffffff854e7aa0
R12=dffffc0000000000 R13=ffffffff99af48dc R14=ffffffff99de94e0 R15=0000000000000000
RIP=ffffffff854e7b1c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f162df5c6c0 ffffffff 00c00000
GS =0000 ffff8881a3c21000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c39e630 CR3=0000000027f6e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f162d387498 00007f162d387470 XMM03=00007f162d3874a8 00007f162d3874a0
XMM04=00007f162deed100 00007f162d387460 XMM05=00007f162d387478 00007f162d3874c0
XMM06=00007f162d3874b8 00007f162d3874b0 XMM07=00007f162d3874a8 00007f162d3874a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f162d212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
