last executing test programs:

3m33.757959687s ago: executing program 2 (id=1221):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000180)={0x0, 0x4, 0x1, "e0"}, 0x9)

3m33.259891247s ago: executing program 2 (id=1224):
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xf0f043})
ppoll(&(0x7f0000000300)=[{r0, 0x2007}], 0x1, 0x0, 0x0, 0x0)

3m32.987306063s ago: executing program 2 (id=1225):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={@dev={0xfe, 0x80, '\x00', 0xe}, @dev={0xfe, 0x80, '\x00', 0x2f}, @empty, 0x8, 0x0, 0x0, 0x500, 0x0, 0x4d30356, r2})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', r2, 0x29, 0x86, 0x0, 0x2, 0x2e, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x7800, 0x80, 0x5, 0x9}})

3m32.982924394s ago: executing program 2 (id=1226):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfe1d, @loopback={0xe0}, 0x9371}, 0x1c)

3m32.982750464s ago: executing program 2 (id=1227):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x243014, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x4000, 0x0)

3m32.901731874s ago: executing program 2 (id=1229):
openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000000), 0x100000000, 0x200)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])

3m17.763240674s ago: executing program 32 (id=1229):
openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000000), 0x100000000, 0x200)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])

2m55.649829596s ago: executing program 0 (id=1568):
r0 = syz_open_dev$video(&(0x7f0000000040), 0xfffffffffffffffe, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000180)={0x7, 0x30312246, 0x1, @discrete={0x44f9, 0x9}})

2m55.537251407s ago: executing program 0 (id=1570):
set_mempolicy(0x2, &(0x7f0000000080)=0x4716, 0x3)
kexec_load(0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0)

2m55.105953174s ago: executing program 0 (id=1575):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f9471633078", 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x80000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = dup(r1)
r6 = accept4(r5, 0x0, 0x0, 0x0)
sendmmsg$unix(r6, &(0x7f0000000080)=[{{0x0, 0x8d, &(0x7f00000009c0)=[{&(0x7f0000000480)='Y', 0xff8d}, {&(0x7f0000000100)="d5", 0xf4240}], 0x2}}], 0x1, 0x0)

2m54.335207355s ago: executing program 0 (id=1581):
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@noblock_validity}]}, 0x1, 0xb80, &(0x7f0000000c40)="$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")
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x104000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0)
mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$9p_unix(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x2a05004, 0x0)
umount2(&(0x7f0000000180)='./file0/file0\x00', 0x0)

2m54.195683076s ago: executing program 0 (id=1582):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
r1 = dup2(r0, r0)
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1)

2m53.814054209s ago: executing program 0 (id=1587):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'veth1_virt_wifi\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x4, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, @TCA_TBF_PTAB={0x404, 0x3, [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xfffffffd, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}]}}]}, 0x45c}}, 0x0)

2m53.471762252s ago: executing program 33 (id=1587):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'veth1_virt_wifi\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x4, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, @TCA_TBF_PTAB={0x404, 0x3, [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xfffffffd, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}]}}]}, 0x45c}}, 0x0)

12.412699228s ago: executing program 4 (id=3618):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_DYNSET_FLAGS={0x8}, @NFTA_DYNSET_OP={0x8}, @NFTA_DYNSET_SREG_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd8}}, 0x0)

12.328990566s ago: executing program 4 (id=3619):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b8647000905e8ff000900000009050a", @ANYRES16], 0x0)
syz_usb_ep_read(r0, 0xa, 0x0, 0x0)

11.130617207s ago: executing program 4 (id=3628):
r0 = semget(0x1, 0x5, 0x6b4)
semtimedop(r0, &(0x7f0000000280)=[{0x0, 0x7, 0x3800}], 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x1, 0x0, 0x1800}], 0x12)
semop(0x0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1)
semop(0x0, &(0x7f0000000040)=[{0x1, 0xbbdd, 0x1000}], 0x1)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x3, 0x3ff])

10.251352506s ago: executing program 4 (id=3630):
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000540)='./file0\x00', 0x204818, &(0x7f0000000240)={[{@map_off}, {@check_strict}, {@hide}, {@unhide}, {@sbsector}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@session={'session', 0x3d, 0x56}}, {}]}, 0x1, 0x544, &(0x7f0000001000)="$eJzs3V9v01YfwPGfS/sQ5ZGqRw8TQlWBQ9mkIpXgJBAUceU5J+mBxI5sB7VXqKIpqkhhokxae8O4YZu0vQh2uRexd4T2EjbZTvqHJjHQv6u+nwjOiX3s8zup5Z/cxscCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADEcmu2XbSkabzOkhrNrQV+a/dtf+sDC+TWvmJMvyJW/E9yObmSLrry1e7qy/F/czKbvpuVXFzkZPu/l//34NLkxGD7MQF/lt+/cE+bW9vPV3q97qujCuQMunpx9LqG9kzom5bT0MqEvqpWKvadxXqo6qapw+Uw0i3lBtqJ/EDNu7dUsVotK11Y9jteo+Y09WDh/dsl266oh4W2doLQ9+48LITuomk2jddI2sSr4zb34wPxkYlUpJ2WUmvrvW45awBxo+KnNCplNSrZpVKxWCoVK/eq9+7b9uSBBfZH5ECLozto8e90hGdv4HAm+vlfmmLEk44siRr6cqUmgfjSGrG+b5D/v7mjx/a7N/8PsvyV3dUzkuT/a+m7a6Py/4hYTu61KVuyLc9lRXrSk668OvWITvbVEC2eGAnFFyMtcZIlqr9ESVUqUhFbnsii1CUUJXUx0hQtoSxLKJHo5IhyJRAtjkTiSyBK5sWVW6KkKFWpSlmUaCnIsvjSEU8aUhMn2cuarCefe1mUNSrGnUbFkcPID467rpTGjJb8j8M70vM3cBh/D/I/AAAAAAA4t6zkt+/x9f+UXE1qddPU9mmHBQAAAAAAjlDyl//ZuJiKa1fF4vofAAAAAIDzxkrusbNEJC/X09qaWMntUvwSAAAAAACAcyL5+/+1uEjmQLku1s50KVz/AwAAAABwTvycOcd+2L5o/fmXBMGU9ba99LW1kczN62xcSLe78PEeo/qMNd3fSVJU0mJy0tWzVi5ttDMJ5od+sZYVh7UbgLMTwI+fE8ClSflVbqRtbqym5epgTdpLvm6auuD6zQdFcZzpiUgvRd+/WP9BkuH/4rWmrZys97qFpy97q0ksb+O9vN3oT6B4YB7FMbG8TuZbSO65GDriqeRGjH6/eUvW1ntde+/4J9LNJ/b3+GZ6TJ/vZC5tNdef8Ta/f/y5uM9iYdTo+1EUDznyd3IzbXNz/mZaDImilBVFaW8Uwz+Lw0dRzoqifMgoAOC0rGVkIUsO5N0vOMt9WXaXz8zu72Q+bTM/k5xYJ2eGnNHtrDO6fcjs9seBZyCNyrFxv799lFXfxxu8H9lv2CxZ8Ud44fXGd3J5c2v79vrGyrPus+6LUqlcse/a9r2STCXD6BfkHgDAEHufsWMNzf+ZT+Gx7mZcVf9/5ysFBXkqL6Unq7KQ3G2QfONg6F7ze76GsJBx1ZpP0mT6hJeFMVd1/0nuchjstzS27f4YyifwkwAA4OTMZeThT8n/CxnX3ftz+fir4/yep7UBAIDjoYMPVj76yQoC035SrFaLTrSoVeC7j1Rgag2tjBfpwF10vIZW7cCPfNdvxpXHpqZDFXbabT+IVN0PVNsPzVIyfaDqP/o91C3Hi4wbtpvaCbVyfS9y3EjVTOiqdufbpgkXdZBsHLa1a+rGdSLjeyr0O4GrC0qFWu9paGrai0zdxFVPtQPTcoKceuw3Oy2tajp0A9OO/HSHg76MV/eDVrLbwml/2AAAnBGbW9vPV3q97qtjrAztOHfiQwUAAH0ZWRoAAAAAAAAAAAAAAAAAAAAAAJwBJ3H/H5VzXhlMBX1W4qFyBJXMU8ebYz85AThW/wQAAP//rVVPjw==")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020)
bind$unix(0xffffffffffffffff, 0x0, 0x0)

10.140484139s ago: executing program 4 (id=3631):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@remote, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x27}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x2, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x40}, 0x70bd2a, 0x3503, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)

9.768713295s ago: executing program 4 (id=3634):
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2)
r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2)
ftruncate(r1, 0xffff)
prlimit64(0x0, 0x7, &(0x7f0000002640)={0x3, 0xa5b1}, 0x0)
fcntl$addseals(r1, 0x409, 0x7)
ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x1, 0x0, 0x4000})

9.112284432s ago: executing program 34 (id=3634):
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2)
r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2)
ftruncate(r1, 0xffff)
prlimit64(0x0, 0x7, &(0x7f0000002640)={0x3, 0xa5b1}, 0x0)
fcntl$addseals(r1, 0x409, 0x7)
ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x1, 0x0, 0x4000})

2.69046993s ago: executing program 1 (id=3679):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x18418, &(0x7f0000000380)=ANY=[@ANYRES8=0x0, @ANYRES32], 0xfe, 0x4b1, &(0x7f0000001d00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0)
sendfile(r0, r1, 0x0, 0x20fffe82)

2.548132506s ago: executing program 1 (id=3680):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file3\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='localalloc=00000000000000000000,journal_async_commit,heartbeat=none,atime_quantum=00000000000000000004,cluster_stack=o/cb,resv_level=00000000000000000000,errors=continue,user_xattr,barrier=00000000000000026114,data=writeback,acl,journal_async_commit,\x00'], 0x1, 0x442a, &(0x7f0000008940)="$eJzs3c9PHGUfAPBnBvoW+rZ9oW8PfZM3cRObaNQQ6EmliZTSUmixptrGeNkusG3RhW1gMR56wFsTTyYejIdGE2+cGg5e65/gxWM9N9GDFxOTRszuzgIz7IaVsGDr53NgmOc3+5159pnD8MSJyp25pdzcUq6wkCvP3Fo6k/u4XFqeL4Z4nzTt/9D+9U97OnGdHPS190929fzFd2+cCeH72R+frK+vr4eq7tDU0Jbff/v13szWY0OcqVNtt3lre+WDEMLJbeOq6gohvP9dCFEI4VySNpoce0MIx0I978a9z27m9mg0Dx8Xz+afTt1fGz49ufpgrfXfHoXwVel/r92e//nFruGfXtmj7gEAAAAAAAAAAAAAAAAAeMaNX7t6/Z3BofAoCt2r0fb3dceTY6v3Y9f3zAud/2MBAAAAAAAAAAAAAAAAAADgb2rz/f9cdKLJ+/9jyXGkRf31tzo/Rjpn4u2rYxcGh5L936Nt+a8nSb+c6wr9TfZ9z+7/fi5Tv/n+79v72a3G+Br99oUoHkidx/HAQAjfJBu/n4qOxKXyUuXVW+Xlhdk9G8YzKx3/+u79qegkG/q3G//RTPud3///v9uupur5zb27xJ5r6fh3tSz37adRW/E/n6m3H/Fn99Lx766l9W4tMFKfAKrx/7x75/iPZdrvVPyPhxByUXWsudQMUF3DVNNbrVdIS8f/UC0tNXUmH2Sr+//3TPwvZNo/qPl/JftFRFPp+P+rltaTKrF5//fHO9//FzPtH0T8q+Nf8f3flnT8D9cTu1NFap9ku/P/eKb9TsX/epyM83iUugJWo3p6q/9XR1o6/j3b8jef/+K21n+XMvX36/mv0W/j+a8x/b8c1Z//aC4d/96W5dq9/ycy9To9/4/U1n/sVjr+R2pp6bVzX+1nu/GfzLTfqfjXViU9jfhvzid/HK6nf23915Z0/P9dT4y3llip/ayt/6Kd1/+XM+0fxPqvOv6VuLO9Pi/S8T/aslw1/j+08f1/JVOv8/EPYdBaf9fS8T/Wslzt/u/ZOf5TmXqdjv9LnWwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Bkwmhz7QhQPpM7jeGAghPPJ+alwJJouzOanS+WZj5ZCGEvSc+FEdLtUni6U8nML5dlivlAqlWdCuJDknww90VKpXMnPF+5e3GirN7pTLCxWpouFSghhPEn/fzjWaGt6rjJfuBtCuLSR95+4vHj3TmEhPzu3+Obg4OBgmNgYQ39U/KRSXKjUe6/nhjC5Ubcv2jK4WvbljbEcjT4sLy8uFEq19Ctb6pTKM4XSljpTSd4XoT+qLC4vzBQqxXypfLvR30EaSY5jE9feu3ZlaFv+zah+HN3fYQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwFz0afuPLEEJ3/SwOIYw0fomalX/4uHg2/3Tq/trw6cnVB2tPWpUDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+JMdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7NIxSgNBFAbgN2Ohdh7DatntbFcU0cIVwRPoMTyMHsVLeIcUKdKmCIFkFsJmF7ZJqu9rHszPzHswDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHme3ruPt7qJSHG1uYz4+/pfHOYvpf7cj9+/OMOMnM7za/fwWDfl39NRfleOlm3epevV92eM1N7vYE+G+7TX97menGtq36bm6/veRMpVRLQlv005V9W8twAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgyw4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24FgAAAAAQJi/dRR9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPArAAD///4CHxA=")

2.54780427s ago: executing program 3 (id=3681):
syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x3214212, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYRES32], 0x7, 0xf08, &(0x7f0000001e40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x42180, 0x158)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086e8b, &(0x7f0000000080)={@desc={0x101d00, 0x0, @desc1}})

2.302310741s ago: executing program 3 (id=3682):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220f00000003a8407a730b93bf0280b3"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000040), 0x0, 0x40a00)
ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f00000001c0)={0x3, 0x0, 0x17c, 0xa, 0x4, 0x4})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.700464983s ago: executing program 1 (id=3683):
memfd_create(&(0x7f00000009c0)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$video(0x0, 0xd, 0x4080c0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x121602, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
r3 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x240048c1)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc)

1.70025212s ago: executing program 3 (id=3684):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
shutdown(r0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000000080), 0x72a, 0x4000, 0x0)
poll(&(0x7f0000000180)=[{r0, 0x3001}, {r0, 0x80}], 0x2, 0x2)

1.676820202s ago: executing program 3 (id=3685):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xf, 0x4, 0x4, 0x22}, 0x50)
r1 = socket$inet(0x2, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r0, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r1}, 0x20)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000280), &(0x7f0000000100)=@udp6=r2, 0x1}, 0x20)

1.530578457s ago: executing program 3 (id=3686):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010017"], 0x1c}}, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

414.948397ms ago: executing program 3 (id=3687):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
shutdown(r0, 0x0)

295.000208ms ago: executing program 1 (id=3688):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', <r2=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r1, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="b40002"], 0xd0}, 0x1, 0x0, 0x0, 0x24004000}, 0x24044880)

143.248707ms ago: executing program 1 (id=3689):
r0 = mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0)
mq_notify(r0, &(0x7f0000000280)={0x0, 0x2a, 0x0, @thr={0x0, 0x0}})
getpid()
r1 = epoll_create1(0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0)
r2 = syz_open_procfs(0x0, 0x0)
read$FUSE(r2, 0x0, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x2)
socket$inet_udp(0x2, 0x2, 0x0)
socket(0x10, 0x803, 0x0)
mq_timedsend(r0, 0x0, 0x0, 0x5, 0x0)

0s ago: executing program 1 (id=3690):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001000)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)={@ifindex, 0xffffffffffffffff, 0x2f}, 0x20)
r5 = syz_open_dev$video(0x0, 0x7, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r5, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0})
ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0)
timer_create(0x0, 0x0, 0x0)
gettid()
timer_create(0x0, 0x0, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000040), 0x4)
r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0)
write$P9_RSTATu(r7, &(0x7f0000000540)={0x41c, 0x7d, 0x0, {{0x500, 0x2db, 0x0, 0x5000000, {0xcdb74b01717932d9, 0x400}, 0x10000000, 0x0, 0x0, 0x8000fe, 0x1f, '\x04nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\xff\xff\xff0\xff\xce\xbc\x92\x00\x00\x00', 0x120, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05>\x00\x1e\x00\x00\x18{\x82O^\x97\xe5p\xbeg\xb0^\xb0V\xca|=9\x00\xb5\x00\x00;Y_\xcb\x14\x03\x03\x00\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x1a\xb4\x94\xcc\xe37A\x95\xcc\x90U\xd1\xc8~x\xcdY\x96\xd9\x967\x87\xe7\xb6\x98\"l5\xf0\x17K\r\xf3\xf8\x91\xcf\x99lI\b\xe889d\x01,\xe2\x15]\xd6\xb3\xf4kb\xcay$\xeba\x13\x90\x98\xb2\"\xbc\xf4/\xeah1Z\x81ju\x16i\xd6%\xe5\xe4\xe4_\x96?\x1e\xe2\x1e\xb7N\xf3\xcd\xf9\x8f7\xb2?\r\xac\xc9\xd9\xe5\xd4\xbe\xbf\x91J\x8d,\x9f\x19fxu\xd1\r\xeb\xddkT\x03\xf6j\xe8}\x8a/\x067\xcdH\x82\x8f,W\xc3,\x19\xc3#9(O\xa5\x14\xa9#l\x1b\x17\xe7R\x93^J\xf4v\x86\xa6\xcfHC\x10\xec\xd1\xe8\x98l\x12_\xb7B\xfd2\xfc]\x87\xe0\x8aj\x8e\r\x94X\x02\xd7\x7f\x15\xb4G\t\x8b\xd5c\x9c\x0e\xba\\o\xd2\x132\xf6\xddX\x8b\x17\"=\xa7l-\xf5\x91\v_\xf9\xfc\x01\x9f\xd9&', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x157, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85+\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00\xd0\x02\xaf\x02k\x9en\r\xca\x00\x89\xfdL\xd0\x9c\xf8\r\xbb\xe9Q\xb2\x1f5y\x8b\n\xb6hx\xc0\x9d\"\x8b7\x88\\\x10\x8a\xcb\xee\xcd\xbe\x06Kz\xd8\xd79\x9f\xd5\x18j\'t\x8f$\x88\'\x06\x8f\x89\x0fOPZ\x04\xc4$\xd7%\xc8\x1exa\xe1 --\xc4\xc94\x1dWH\xff\x9eS\x9e\rIT\x8fz\x1c\xcf^\xac\x9a\xa0\x92L\a\x00\x00\x00\xf3|c\xccjn1\xa7}\x1f\xad\x05\x83h\xae\xd5\xe3\xc1M\x89\x96\x87\n\v\t\xd0l\x97\x04\x98\v\xb4GxB\xb1\xed.\x8f%\x01\xb2_\xbc\\^\xe6}\x8bnN\xc7G\xe9]\x03\xf6x\xd7\x1a-\xa34\x92\xf8\xd4\x87\xeeB|Y\xf6\xe7\ni\xa9J}\x987\xd6\x02c\xd68\aM\xfa\x04\xa4V\x04\tD\xb7\x02\"gFh\xc7D\xb7\xba\xda\xad4uXO 5|\x84 \xc1IO\x8d\r4 *\xfb5\xccVp\xe2@\xbe\xba\x96SS\xaf\xe9F\xc0\xc1\xb5\t\x1d9U\xc8\xc8_\xf1\xc7q|\n'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcf\x01.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb49\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0xffffffffffffffff, 0xee00}}, 0x41c)
openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f00000000c0), 0xfe, 0x4ec, &(0x7f0000000380)="$eJzs3UFrHG8ZAPBnJrtt06Zuqh5qwbbYSlK0m6SxbfBQFURPBbXea0y2IWSTLcmmbULRFD+AIKKCFz15EfwAgvQjiFDQu6gooq0ePFRHdnc2puluktLsrv/k94M3M+/M7D7vk2HfnXdm2Ang2LocEeMRkWVZdi0iSvnyNC+x1SqN7V69fDrXKElk2b2/JZHky9rvdTKfnslfdioivvbliG8mb8dd29hcmq1WK6t5faK+nLzOss3ri8uzC5WFysr09NStmdszN2cmDyXP0Yi488U//eC7P/vSnV99+vHv7/9l/FutBFt25nGYWqkXm/+LtkJErPYi2IAUmhm23BxwWwAA2FvjeP/DEfGJiLgWpRhqHs0BAAAAR0n2uZF4nbSu/wEAAABHUxoRI5Gk5fx+35FI03K5dQ/vR+N0Wq2t1T+VlbbPF4xGMX2wWK1M5vcOjEYxadSn8nts2/Ubu+rTEXEuIr5fGm7Wy3O16vxAz3wAAADA8XFm1/j/n6XW+B8AAAA4YkYH3QAAAACg54z/AQAA4Ogz/gcAAIAj7St37zZK1n7+9fyjjfWl2qPr85W1pfLy+lx5rrb6sLxQqy00f7Nveb/3q9ZqDz8TK+tPJuqVtfrE2sbm/eXa+kr9/uIbj8AGAAAA+ujcpee/SyJi67PDaURkyY51xYhsaOfGhf63D+id9F02/mPv2gH039CgGwAMjEN6OL6Kg24AMHD79QNdb9759eG3BQAA6I2xj21f/2+WhhP5uktZlg20cUBP5df/k2TQDQH6zvV/OL5c/4Pjq7jXEYBBARx56QE+6u9//d+5RAAAGLSRZknScj4OGIk0LZcjzjYfC1BMHixWK5MR8aGI+G2peLJRn2q+MnF6AAAAAAAAAAAAAAAAAAAAAAAAAAAOKMuSyLoY3t4GAAAA+CCLSP+c5M//GitdHdl9fuBE8q9ScxoRj39874dPZuv11anG8r9vL6//KF9+o99nLwAAAIBO2uP09jgeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7Tq5dP59qln3H/+oWIGO0UvxCnmtNTUYyI0/9IorDjdUlEDB1C/K1nEXG+U/yk0awYzVuxO34aEcMDjn/mEOLDcfa80f98vtPnL43LzWnnz18hL++re/+Xbvd/Q136v7Od3jB9e9GFF7+Y6Br/WcSFQuf+px0/6RL/ygFz/MbXNze7rct+GjHW8fsneSPWRFJ4OLG2sXl9cXl2obJQWZmenro1c3vm5szkxIPFaiX/2zHG9z7+y//slf/pLvFH98n/6gHz//eLJy8/0pot7lpVjJ9k2fiVzvv/fJf47e++T+a7u1Efa89vteZ3uvjz31y8tEf+813y32//jx8w/2tf/c4fDrgpANAHaxubS7PVamXVjJmezQxHH4POxl7btA9i+9Ceb+eh/i92wTvPDLBTAgAAeuJ/B/2DbgkAAAAAAAAAAAAAAAAAAAAcX/v9DFgcws+J7Y65NZhUAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD29N8AAAD//5yOzl8=")
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0xffffffff})
socket(0x200000100000011, 0x2, 0xfffffffe)
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00')
preadv(r8, &(0x7f00000008c0)=[{&(0x7f0000000480)=""/187, 0xbb}], 0x1, 0x4a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002e00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x48)

kernel console output (not intermixed with test programs):

4.1679" name="bus" dev="loop4" ino=18 res=0 errno=0
[  250.061747][T10045] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  250.545130][   T33] audit: type=1326 audit(1759033724.396:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10349 comm="syz.1.1684" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff9f758ec29 code=0x0
[  251.338903][T10367] loop4: detected capacity change from 0 to 2048
[  251.348125][T10367] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  251.363356][T10367] UDF-fs: error (device loop4): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376)
[  251.424638][T10370] loop4: detected capacity change from 0 to 256
[  252.631269][T10389] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1697'.
[  252.878842][T10396] geneve2: entered promiscuous mode
[  252.882358][T10396] geneve2: entered allmulticast mode
[  253.027672][T10400] loop4: detected capacity change from 0 to 1024
[  253.283191][T10412] loop3: detected capacity change from 0 to 1024
[  253.379508][T10415] netlink: 692 bytes leftover after parsing attributes in process `syz.3.1708'.
[  254.635684][   T69] hfsplus: b-tree write err: -5, ino 4
[  254.834416][T10455] loop3: detected capacity change from 0 to 2048
[  254.853401][T10455] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  254.874040][T10455] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  255.074807][T10442] loop4: detected capacity change from 0 to 32768
[  255.083217][T10442] bcachefs (/dev/loop4): error validating superblock: Invalid superblock section clean: entry type clock overruns end of section
[  255.083217][T10442] clean (size 2912):
[  255.083217][T10442] flags:          0
[  255.083217][T10442] journal_seq:    10
[  255.083217][T10442] dev_usage: 
[  255.083217][T10442] usage: type=key_version v=0
[  255.083217][T10442] (unknown jset_entry_type 255)
[  255.083217][T10442] usage: type=reserved v=0
[  255.083217][T10442] usage: type=reserved v=0
[  255.083217][T10442] usage: type=reserved v=0
[  255.083217][T10442] data_usage: btree: 1/1 [0]=2816
[  255.083217][T10442] data_usage: journal: 1/1 [0]=0
[  255.083217][T10442] data_usage: user: 1/1 [0]=16
[  255.083217][T10442] dev_usage: dev=0  
[  255.083217][T10442]   free: buckets=83 sectors=0 fragmented=0
[  255.083217][T10442]   sb: buckets=25 sectors=6152 fragmented=248
[  255.083217][T10442]   journal: buckets=8 sectors=2048 fragmented=0
[  255.083217][T10442]   btree: buckets=11 sectors=2816 fragmented=0
[  255.083217][T10442]   user: buckets=1 sectors=16 fragmented=240
[  255.083217][T10442]   cached: buckets=0 sectors=0 fragmented=0
[  255.083217][T10442]   parity: buckets=0 sectors=0 fragmented=0
[  255.083217][T10442]   stripe: buckets=0 sectors=0 fragmented=0
[  255.083217][T10442]   need_gc_gens: buckets=0 sectors=0 fragmented=0
[  255.083217][T10442]   need_discard: buckets=0 sectors=0 fragmented=0
[  255.083217][T10442] 
[  255.142663][T10442] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean
[  255.322733][T10475] 9pnet_fd: Insufficient options for proto=fd
[  255.434097][T10484] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1732'.
[  255.444676][T10486] loop3: detected capacity change from 0 to 64
[  255.645510][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  255.648198][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  255.862956][T10493] loop3: detected capacity change from 0 to 32768
[  256.318987][T10493] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,checksum_err_retry_nr=12,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,degraded=yes,nojournal_transaction_names
[  256.319013][T10493]   allowing incompatible features above 0.0: (unknown version)
[  256.319023][T10493]   features: lz4
[  256.339673][T10493] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[  256.344006][T10493] bcachefs (loop3): initializing new filesystem
[  256.361012][T10493] bcachefs (loop3): going read-write
[  256.372496][T10493] bcachefs (loop3): marking superblocks
[  256.375587][T10515] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1741'.
[  256.413320][T10493] bcachefs (loop3): initializing freespace
[  256.430637][T10493] bcachefs (loop3): done initializing freespace
[  256.443303][T10493] bcachefs (loop3): reading snapshots table
[  256.447115][T10493] bcachefs (loop3): reading snapshots done
[  256.487386][T10493] bcachefs (loop3): done starting filesystem
[  256.750508][ T9409] bcachefs (loop3): shutting down
[  256.752552][ T9409] bcachefs (loop3): going read-only
[  256.755286][ T9409] bcachefs (loop3): finished waiting for writes to stop
[  256.762073][ T9409] bcachefs (loop3): flushing journal and stopping allocators, journal seq 3
[  257.099870][ T9409] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 3
[  257.104846][ T9409] bcachefs (loop3): clean shutdown complete, journal seq 4
[  257.109743][ T9409] bcachefs (loop3): marking filesystem clean
[  257.131889][ T9409] bcachefs (loop3): shutdown complete
[  257.463995][ T6000] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  257.616187][ T6000] usb 5-1: Using ep0 maxpacket: 16
[  257.624554][ T6000] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  257.628411][ T6000] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  257.631511][ T6000] usb 5-1: Product: syz
[  257.633126][ T6000] usb 5-1: Manufacturer: syz
[  257.634981][ T6000] usb 5-1: SerialNumber: syz
[  257.639967][ T6000] usb 5-1: config 0 descriptor??
[  257.855021][  T793] usb 5-1: USB disconnect, device number 2
[  258.597812][   T33] audit: type=1326 audit(1759033732.456:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10547 comm="syz.1.1755" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff9f758ec29 code=0x0
[  258.696066][T10222] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[  258.748768][T10546] loop3: detected capacity change from 0 to 32768
[  258.793800][T10546] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  258.813432][T10546] XFS (loop3): Ending clean mount
[  258.842312][   T33] audit: type=1804 audit(1759033732.696:135): pid=10546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1754" name="/newroot/103/file1/file1" dev="loop3" ino=4422 res=1 errno=0
[  258.861022][T10222] usb 5-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62
[  258.865586][T10222] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  258.870317][T10222] usb 5-1: Product: syz
[  258.872555][T10222] usb 5-1: Manufacturer: syz
[  258.874613][T10222] usb 5-1: SerialNumber: syz
[  258.881773][ T9409] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  258.882441][T10222] usb 5-1: config 0 descriptor??
[  258.907373][T10222] usb 5-1: selecting invalid altsetting 3
[  258.909951][T10222] comedi comedi5: could not set alternate setting 3 in high speed
[  258.913099][T10222] usbdux 5-1:0.0: driver 'usbdux' failed to auto-configure device.
[  258.920503][T10222] usbdux 5-1:0.0: probe with driver usbdux failed with error -22
[  259.110316][ T6000] usb 5-1: USB disconnect, device number 3
[  259.209678][T10561] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1757'.
[  259.413326][T10568] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1760'.
[  259.425250][T10567] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1760'.
[  259.532653][T10575] fuse: Bad value for 'fd'
[  259.709573][   T33] audit: type=1326 audit(1759033733.556:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10577 comm="syz.1.1765" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f758ec29 code=0x7ffc0000
[  259.786992][   T33] audit: type=1326 audit(1759033733.556:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10577 comm="syz.1.1765" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f758ec29 code=0x7ffc0000
[  259.795834][   T33] audit: type=1326 audit(1759033733.556:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10577 comm="syz.1.1765" exe="/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7ff9f758ec29 code=0x7ffc0000
[  259.855023][   T33] audit: type=1326 audit(1759033733.566:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10577 comm="syz.1.1765" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f758ec29 code=0x7ffc0000
[  259.897278][   T33] audit: type=1326 audit(1759033733.596:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10577 comm="syz.1.1765" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff9f758ec29 code=0x7ffc0000
[  259.920048][   T33] audit: type=1326 audit(1759033733.606:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10577 comm="syz.1.1765" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f758ec29 code=0x7ffc0000
[  259.970128][   T33] audit: type=1326 audit(1759033733.606:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10577 comm="syz.1.1765" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f758ec29 code=0x7ffc0000
[  260.015470][   T33] audit: type=1326 audit(1759033733.606:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10577 comm="syz.1.1765" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff9f758ec29 code=0x7ffc0000
[  262.183949][T10616] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1779'.
[  262.743381][T10625] loop4: detected capacity change from 0 to 128
[  262.787685][T10625] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  262.793697][T10625] ext4 filesystem being mounted at /60/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  262.821140][T10629] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  262.852558][T10045] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  262.958444][T10635] netlink: 'syz.4.1785': attribute type 10 has an invalid length.
[  262.983049][T10635] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  263.163544][T10649] netlink: 'syz.3.1795': attribute type 5 has an invalid length.
[  263.181642][T10649] ip6erspan0: entered promiscuous mode
[  263.364669][T10664] loop4: detected capacity change from 0 to 1037
[  263.397671][T10668] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3
[  263.404568][T10664] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  263.416144][T10664] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  263.421329][T10664] EXT4-fs error (device loop4): ext4_xattr_block_list:762: inode #15: comm syz.4.1800: corrupted xattr block 128: invalid header
[  263.431420][T10664] EXT4-fs (loop4): Remounting filesystem read-only
[  263.451770][T10045] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  264.060309][T10710] loop8: detected capacity change from 0 to 7
[  264.074364][T10710] Dev loop8: unable to read RDB block 7
[  264.079196][T10710]  loop8: unable to read partition table
[  264.081720][T10710] loop8: partition table beyond EOD, truncated
[  264.083949][T10710] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5)
[  264.176301][T10715] netlink: 'syz.3.1825': attribute type 29 has an invalid length.
[  264.180425][T10715] netlink: 'syz.3.1825': attribute type 29 has an invalid length.
[  264.186495][T10715] netlink: 500 bytes leftover after parsing attributes in process `syz.3.1825'.
[  264.196909][T10715] unsupported nla_type 58
[  264.482813][T10735] xt_limit: Overflow, try lower: 271964/0
[  264.776957][T10749] loop3: detected capacity change from 0 to 512
[  265.186877][T10749] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  265.200790][T10749] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #17: comm syz.3.1841: iget: bad i_size value: -6917529027641081756
[  265.210367][T10749] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1841: couldn't read orphan inode 17 (err -117)
[  265.217625][T10749] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  265.252817][ T9409] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  265.563767][T10768] bridge_slave_1: left allmulticast mode
[  265.566662][T10768] bridge_slave_1: left promiscuous mode
[  265.569321][T10768] bridge0: port 2(bridge_slave_1) entered disabled state
[  265.786181][ T8029] wlan1: Trigger new scan to find an IBSS to join
[  266.234197][T10760] loop3: detected capacity change from 0 to 32768
[  266.250513][T10760] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1845 (10760)
[  266.290064][T10760] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  266.294139][T10760] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  266.565588][T10760] BTRFS info (device loop3): enabling ssd optimizations
[  266.578922][T10760] BTRFS info (device loop3): enabling free space tree
[  266.689589][ T9409] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  267.598712][T10818] netlink: 'syz.1.1862': attribute type 10 has an invalid length.
[  267.607695][T10818] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  267.612250][T10818] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  267.618659][T10818] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  268.039889][T10846] tipc: Started in network mode
[  268.042592][T10846] tipc: Node identity 2d57e396000000000000000000000013, cluster identity 4711
[  268.046692][T10846] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  268.096377][ T5999] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  268.168994][T10854] libceph: resolve '0' (ret=-3): failed
[  268.249576][ T5999] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  268.253132][ T5999] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  268.262167][ T5999] usb 5-1: config 0 descriptor??
[  268.269117][ T5999] gspca_main: cpia1-2.14.0 probing 0813:0001
[  268.639659][T10872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1889'.
[  268.682106][ T5999] cpia1 5-1:0.0: unexpected state after lo power cmd: 00
[  269.084345][ T5999] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0)
[  269.295096][ T5999] usb 5-1: USB disconnect, device number 4
[  269.922716][T10891] loop3: detected capacity change from 0 to 512
[  269.952669][T10891] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  270.037222][T10896] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1900'.
[  270.071225][T10899] loop3: detected capacity change from 0 to 128
[  270.097793][T10899] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  270.116943][T10899] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  270.165707][ T9409] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  270.511401][T10925] loop4: detected capacity change from 0 to 1024
[  270.515010][T10925] EXT4-fs: Ignoring removed oldalloc option
[  270.523815][T10925] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled
[  270.551000][T10925] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  270.672304][T10045] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  270.830878][   T52] wlan1: Trigger new scan to find an IBSS to join
[  271.807734][T10957] xt_l2tp: missing protocol rule (udp|l2tpip)
[  272.008743][   T28] wlan1: Creating new IBSS network, BSSID 3e:83:2d:05:54:6d
[  272.324356][T10963] loop4: detected capacity change from 0 to 32768
[  272.347653][T10963] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  272.369957][T10963] XFS (loop4): Ending clean mount
[  272.388922][T10963] XFS (loop4): Quotacheck needed: Please wait.
[  272.452041][T10963] XFS (loop4): Quotacheck: Done.
[  272.505349][T10045] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  273.063399][T11009] loop4: detected capacity change from 0 to 32768
[  273.091421][T11009] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  273.110481][T11009] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50.
[  273.116733][T11009] XFS (loop4): Tail block (0x29) overwrite detected. Updated to 0x30
[  273.130141][T11009] XFS (loop4): Ending clean mount
[  273.142916][T11009] XFS (loop4): Quotacheck needed: Please wait.
[  273.154655][   T69] XFS (loop4): Metadata corruption detected at xfs_dinode_verify+0x1a6/0x1570, inode 0x1803 dinode
[  273.159537][   T69] XFS (loop4): Unmount and run xfs_repair
[  273.161240][   T69] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  273.163522][   T69] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00  INA.............
[  273.169223][   T69] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  273.172623][   T69] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 e2 bf 3d  4.Xh....4.Xh...=
[  273.176309][   T69] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 00 20  4.Xh...=....... 
[  273.179690][   T69] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  273.184000][   T69] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 ca e6 3d c1  ..............=.
[  273.189944][   T69] 00000060: ff ff ff ff 6e d0 e3 2d 00 00 00 00 00 00 00 04  ....n..-........
[  273.193292][   T69] 00000070: 00 00 00 03 00 00 00 10 00 00 00 00 00 00 00 06  ................
[  273.228443][T11009] XFS (loop4): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[  273.232930][T11009] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  274.080835][T11043] overlayfs: failed to clone upperpath
[  274.149053][T11047] netlink: 'syz.1.1964': attribute type 10 has an invalid length.
[  274.153031][T11047] syz_tun: entered promiscuous mode
[  274.158558][T11009] XFS (loop4): Uncorrected metadata errors detected; please run xfs_repair.
[  274.174640][T11047] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  274.973990][T11062] overlayfs: failed to clone upperpath
[  276.378891][T11102] batadv_slave_1: entered promiscuous mode
[  276.387824][T11102] batman_adv: batadv0: Adding interface: macsec1
[  276.390342][T11102] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500.
[  276.400979][T11102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  276.404948][T11102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  276.409902][T11102] batman_adv: batadv0: Interface activated: macsec1
[  276.424898][T11091] loop4: detected capacity change from 0 to 32768
[  276.479391][T11091] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  276.534133][T11091] XFS (loop4): Ending clean mount
[  276.539799][T11091] XFS (loop4): Quotacheck needed: Please wait.
[  276.590048][T11091] XFS (loop4): Quotacheck: Done.
[  276.607896][   T33] kauditd_printk_skb: 17 callbacks suppressed
[  276.607916][   T33] audit: type=1800 audit(1759033750.466:161): pid=11091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1983" name="file1" dev="loop4" ino=9286 res=0 errno=0
[  276.669143][T10045] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  277.066464][T11120] loop4: detected capacity change from 0 to 4096
[  277.093686][T11120] NILFS (loop4): invalid segment: Checksum error in segment payload
[  277.100796][T11120] NILFS (loop4): trying rollback from an earlier position
[  277.180538][T11120] NILFS (loop4): recovery complete
[  277.190424][T11121] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  278.379628][T11155] loop4: detected capacity change from 0 to 4096
[  278.484814][T11161] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2013'.
[  279.600345][T11181] wg1: entered promiscuous mode
[  279.601855][T11181] wg1: entered allmulticast mode
[  279.782874][T11197] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2029'.
[  279.916290][T11203] netlink: 'syz.3.2031': attribute type 29 has an invalid length.
[  280.553756][   T33] audit: type=1326 audit(1759033754.406:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11216 comm="syz.1.2037" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f758ec29 code=0x7ffc0000
[  280.566355][   T33] audit: type=1326 audit(1759033754.406:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11216 comm="syz.1.2037" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f758ec29 code=0x7ffc0000
[  280.573860][   T33] audit: type=1326 audit(1759033754.406:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11216 comm="syz.1.2037" exe="/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7ff9f758ec29 code=0x7ffc0000
[  280.590685][   T33] audit: type=1326 audit(1759033754.406:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11216 comm="syz.1.2037" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f758ec29 code=0x7ffc0000
[  280.601104][   T33] audit: type=1326 audit(1759033754.406:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11216 comm="syz.1.2037" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f758ec29 code=0x7ffc0000
[  280.986547][T11232] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2044'.
[  281.344527][T11248] netlink: 'syz.3.2052': attribute type 2 has an invalid length.
[  281.352930][T11248] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2052'.
[  281.380826][T11250] loop4: detected capacity change from 0 to 764
[  281.407836][T11250] rock: directory entry would overflow storage
[  281.410476][T11250] rock: sig=0x5850, size=36, remaining=7
[  281.525289][T11254] loop4: detected capacity change from 0 to 16
[  281.530546][T11254] /dev/loop4: Can't open blockdev
[  281.818228][T11269] loop4: detected capacity change from 0 to 512
[  281.826538][T11269] EXT4-fs (loop4): blocks per group (255) and clusters per group (8192) inconsistent
[  281.840451][    C1] blk_print_req_error: 2 callbacks suppressed
[  281.840465][    C1] operation not supported error, dev loop4, sector 0 op 0x9:(WRITE_ZEROES) flags 0x20000800 phys_seg 0 prio class 2
[  281.942586][T11278] netlink: 288 bytes leftover after parsing attributes in process `syz.1.2065'.
[  282.072038][ T5940] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201'
[  282.078206][ T5940] CPU: 0 UID: 0 PID: 5940 Comm: kworker/u11:3 Not tainted syzkaller #0 PREEMPT(full) 
[  282.078228][ T5940] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  282.078239][ T5940] Workqueue: hci0 hci_rx_work
[  282.078264][ T5940] Call Trace:
[  282.078271][ T5940]  <TASK>
[  282.078278][ T5940]  dump_stack_lvl+0x189/0x250
[  282.078298][ T5940]  ? __pfx_dump_stack_lvl+0x10/0x10
[  282.078311][ T5940]  ? __pfx__printk+0x10/0x10
[  282.078333][ T5940]  ? kernfs_path_from_node+0x250/0x290
[  282.078348][ T5940]  ? kernfs_path_from_node+0x2f/0x290
[  282.078362][ T5940]  sysfs_create_dir_ns+0x259/0x280
[  282.078378][ T5940]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  282.078394][ T5940]  ? do_raw_spin_unlock+0x4d/0x240
[  282.078412][ T5940]  kobject_add_internal+0x59f/0xb40
[  282.078437][ T5940]  kobject_add+0x155/0x220
[  282.078460][ T5940]  ? __pfx_kobject_add+0x10/0x10
[  282.078478][ T5940]  ? _raw_spin_unlock+0x28/0x50
[  282.078501][ T5940]  ? get_device_parent+0x366/0x3a0
[  282.078530][ T5940]  device_add+0x408/0xb50
[  282.078555][ T5940]  hci_conn_add_sysfs+0xd5/0x1e0
[  282.078589][ T5940]  le_conn_complete_evt+0xc3a/0x1220
[  282.078628][ T5940]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  282.078651][ T5940]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  282.078674][ T5940]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  282.078688][ T5940]  ? skb_pull_data+0xfb/0x200
[  282.078712][ T5940]  hci_le_enh_conn_complete_evt+0x189/0x470
[  282.078725][ T5940]  ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10
[  282.078742][ T5940]  hci_event_packet+0x78f/0x1200
[  282.078766][ T5940]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  282.078781][ T5940]  ? __pfx_hci_event_packet+0x10/0x10
[  282.078800][ T5940]  ? kcov_remote_start+0x4d3/0x7f0
[  282.078822][ T5940]  ? lockdep_hardirqs_on+0x90/0x150
[  282.078840][ T5940]  ? hci_send_to_monitor+0xe2/0x570
[  282.078856][ T5940]  hci_rx_work+0x46a/0xe80
[  282.078909][ T5940]  ? process_scheduled_works+0x9ef/0x17b0
[  282.078927][ T5940]  process_scheduled_works+0xae1/0x17b0
[  282.078965][ T5940]  ? __pfx_process_scheduled_works+0x10/0x10
[  282.078993][ T5940]  worker_thread+0x8a0/0xda0
[  282.079027][ T5940]  kthread+0x711/0x8a0
[  282.079047][ T5940]  ? __pfx_worker_thread+0x10/0x10
[  282.079061][ T5940]  ? __pfx_kthread+0x10/0x10
[  282.079081][ T5940]  ? _raw_spin_unlock_irq+0x23/0x50
[  282.079099][ T5940]  ? lockdep_hardirqs_on+0x9c/0x150
[  282.079112][ T5940]  ? __pfx_kthread+0x10/0x10
[  282.079136][ T5940]  ret_from_fork+0x439/0x7d0
[  282.079155][ T5940]  ? __pfx_ret_from_fork+0x10/0x10
[  282.079176][ T5940]  ? __switch_to_asm+0x39/0x70
[  282.079194][ T5940]  ? __switch_to_asm+0x33/0x70
[  282.079209][ T5940]  ? __pfx_kthread+0x10/0x10
[  282.079224][ T5940]  ret_from_fork_asm+0x1a/0x30
[  282.079250][ T5940]  </TASK>
[  282.079272][ T5940] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  282.136064][T11275] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  282.140503][ T5940] Bluetooth: hci0: failed to register connection device
[  282.153427][T11275] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  282.234011][T11275] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  282.236960][T11275] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  282.245769][T11275] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  282.255554][T11275] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  282.267543][T11275] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  282.287707][T11275] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  282.302393][T11275] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  282.508604][T11287] loop4: detected capacity change from 0 to 32768
[  282.515907][T11287] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2066 (11287)
[  282.561762][T11287] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  282.565688][T11287] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm
[  282.679669][T11287] BTRFS info (device loop4): allowing degraded mounts
[  282.684454][T11287] BTRFS info (device loop4): enabling ssd optimizations
[  282.695722][T11287] BTRFS info (device loop4): enabling free space tree
[  282.706218][T11287] BTRFS info (device loop4): force zlib compression, level 3
[  283.130043][T10045] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  283.652988][T11338] loop4: detected capacity change from 0 to 32768
[  283.667123][T11338] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  283.705032][T11338] XFS (loop4): Ending clean mount
[  283.713132][T11338] XFS (loop4): Quotacheck needed: Please wait.
[  283.760791][T11338] XFS (loop4): Quotacheck: Done.
[  283.805318][T10045] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  284.106251][ T5942] Bluetooth: hci2: command 0x0419 tx timeout
[  284.319398][ T5942] Bluetooth: hci0: command 0x0c1a tx timeout
[  284.327439][ T5942] Bluetooth: hci3: command 0x0c1a tx timeout
[  284.759997][T11381] loop4: detected capacity change from 0 to 40427
[  284.766079][T11381] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  284.768410][T11381] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  284.778283][T11381] F2FS-fs (loop4): invalid crc value
[  284.833269][T11381] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  284.843138][T11381] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  284.845813][T11381] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  285.491701][    C0] vcan0: j1939_tp_rxtimer: 0xffff888028c81000: rx timeout, send abort
[  285.797846][T11416] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2117'.
[  285.905286][T11421] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null.
[  285.997455][    C0] vcan0: j1939_tp_rxtimer: 0xffff888028c81000: abort rx timeout. Force session deactivation
[  286.325828][ T5942] Bluetooth: hci2: command 0x0419 tx timeout
[  286.355416][ T5942] Bluetooth: hci3: command 0x0c1a tx timeout
[  286.366560][ T5940] Bluetooth: hci0: command 0x0c1a tx timeout
[  286.950963][T11437] vlan3: entered allmulticast mode
[  287.165059][T11443] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2126'.
[  287.408727][T11457] loop4: detected capacity change from 0 to 1024
[  287.490005][T11457] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  287.512024][T11457] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  287.530752][T11457] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2134: bg 0: block 480: padding at end of block bitmap is not set
[  287.567634][T11457] EXT4-fs (loop4): Remounting filesystem read-only
[  287.608155][T10045] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  288.248736][T11477] loop4: detected capacity change from 0 to 1024
[  288.330772][T11482] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2143'.
[  288.334916][T11482] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2143'.
[  288.352069][T11482] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2143'.
[  288.426093][ T5942] Bluetooth: hci3: command 0x0c1a tx timeout
[  288.428147][ T5942] Bluetooth: hci0: command 0x0c1a tx timeout
[  288.475063][T11487] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  288.591016][T11488] hfsplus: xattr searching failed
[  288.597878][T11488] hfsplus: xattr searching failed
[  288.793556][T11494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2148'.
[  288.799932][T11494] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2148'.
[  288.813504][T11496] ref_ctr_offset mismatch. inode: 0x4c0 offset: 0x0 ref_ctr_offset(old): 0x200000000100 ref_ctr_offset(new): 0x0
[  289.596911][T11542] loop4: detected capacity change from 0 to 1024
[  289.619456][T11542] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  290.506260][ T5940] Bluetooth: hci0: command 0x0c1a tx timeout
[  290.754704][T10045] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  290.819544][T11572] loop4: detected capacity change from 0 to 16
[  290.826896][T11572] erofs (device loop4): mounted with root inode @ nid 36.
[  290.871758][T11572] erofs (device loop4): bogus lookback distance 1388 @ lcn 42 of nid 36
[  290.908736][T11572] erofs (device loop4): failed to decompress -29 in[58, 4038] out[1851]
[  290.927403][T11572] erofs (device loop4): read error -117 @ 43 of nid 36
[  291.107641][T11572] erofs (device loop4): bogus lookback distance 1388 @ lcn 42 of nid 36
[  291.110498][T11572] erofs (device loop4): bogus lookback distance 1388 @ lcn 42 of nid 36
[  291.138464][T11572] erofs (device loop4): readahead error at folio 42 @ nid 36
[  291.141170][T11572] erofs (device loop4): bogus lookback distance 774 @ lcn 40 of nid 36
[  291.144209][T11572] erofs (device loop4): readahead error at folio 41 @ nid 36
[  291.176384][T11572] erofs (device loop4): bogus lookback distance 774 @ lcn 40 of nid 36
[  291.179060][T11572] erofs (device loop4): readahead error at folio 40 @ nid 36
[  291.193671][T11572] erofs (device loop4): readahead error at folio 39 @ nid 36
[  291.217651][T11572] erofs (device loop4): readahead error at folio 38 @ nid 36
[  291.228388][T11572] erofs (device loop4): readahead error at folio 36 @ nid 36
[  291.244302][T11572] erofs (device loop4): bogus lookback distance 1468 @ lcn 31 of nid 36
[  291.375284][T11572] erofs (device loop4): readahead error at folio 31 @ nid 36
[  291.382197][T11572] erofs (device loop4): readahead error at folio 25 @ nid 36
[  291.396400][T11572] erofs (device loop4): readahead error at folio 24 @ nid 36
[  291.400646][T11572] erofs (device loop4): readahead error at folio 19 @ nid 36
[  291.414223][T11572] syz.4.2183: attempt to access beyond end of device
[  291.414223][T11572] loop4: rw=524288, sector=784, nr_sectors = 64 limit=16
[  291.438095][T11572] syz.4.2183: attempt to access beyond end of device
[  291.438095][T11572] loop4: rw=524288, sector=13478624080, nr_sectors = 24 limit=16
[  291.464351][T11572] syz.4.2183: attempt to access beyond end of device
[  291.464351][T11572] loop4: rw=524288, sector=13478624032, nr_sectors = 48 limit=16
[  291.516138][T11572] erofs (device loop4): failed to decompress -29 in[58, 4038] out[2639]
[  291.531094][T11572] erofs (device loop4): bogus lookback distance 1586 @ lcn 46 of nid 36
[  291.545733][T11572] erofs (device loop4): readahead error at folio 47 @ nid 36
[  291.558217][T11572] erofs (device loop4): bogus lookback distance 1586 @ lcn 46 of nid 36
[  291.574207][T11572] erofs (device loop4): readahead error at folio 46 @ nid 36
[  291.605159][T11572] erofs (device loop4): readahead error at folio 45 @ nid 36
[  291.682113][T11572] syz.4.2183: attempt to access beyond end of device
[  291.682113][T11572] loop4: rw=524288, sector=16, nr_sectors = 16 limit=16
[  291.888480][T11572] erofs (device loop4): failed to decompress -29 in[58, 4038] out[3537]
[  292.329314][T11604] netlink: 25 bytes leftover after parsing attributes in process `syz.1.2193'.
[  292.680919][T11610] loop4: detected capacity change from 0 to 512
[  292.719902][T11610] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  292.724997][T11610] ext4 filesystem being mounted at /144/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  292.751532][T10045] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  294.582810][T11643] loop4: detected capacity change from 0 to 32768
[  294.588911][T11643] 
[  294.588911][T11643]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  294.588911][T11643] 
[  294.615053][T11643] 
[  294.615053][T11643]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  294.615053][T11643] 
[  294.620755][T11643] 
[  294.620755][T11643]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  294.620755][T11643] 
[  294.624140][T11643] 
[  294.624140][T11643]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  294.624140][T11643] 
[  294.641211][  T116] 
[  294.641211][  T116]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  294.641211][  T116] 
[  294.661874][T10045] 
[  294.661874][T10045]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  294.661874][T10045] 
[  294.672322][T11649] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2215'.
[  294.678070][T10045] 
[  294.678070][T10045]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  294.678070][T10045] 
[  295.526231][ T5999] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  295.746080][ T5999] usb 5-1: Using ep0 maxpacket: 32
[  295.750090][ T5999] usb 5-1: config 0 interface 0 has no altsetting 0
[  295.754867][ T5999] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  295.758639][ T5999] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  295.761766][ T5999] usb 5-1: Product: syz
[  295.763582][ T5999] usb 5-1: Manufacturer: syz
[  295.765450][ T5999] usb 5-1: SerialNumber: syz
[  295.771828][ T5999] usb 5-1: config 0 descriptor??
[  295.778761][ T5999] gs_usb 5-1:0.0: Required endpoints not found
[  296.001316][ T5999] usb 5-1: USB disconnect, device number 5
[  296.511578][T11673] overlayfs: failed to resolve './file1': -2
[  296.722218][T11687] loop4: detected capacity change from 0 to 128
[  296.726547][T11687] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  296.731881][T11687] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  296.800918][ T2993] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  297.043548][T11700] netlink: 'syz.3.2235': attribute type 3 has an invalid length.
[  297.046981][T11700] netlink: 'syz.3.2235': attribute type 1 has an invalid length.
[  297.050041][T11700] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.2235'.
[  298.397019][T11742] loop4: detected capacity change from 0 to 512
[  298.424694][T11742] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  298.430101][T11742] ext4 filesystem being mounted at /163/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  298.452554][   T33] audit: type=1800 audit(1759033772.306:167): pid=11742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2252" name="file2" dev="loop4" ino=16 res=0 errno=0
[  298.503887][T10045] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  298.571110][T11753] : renamed from wg2 (while UP)
[  298.926940][T11763] fuse: Bad value for 'fd'
[  298.966132][ T5972] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  299.121302][ T5972] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  299.124651][ T5972] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  299.129037][ T5972] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  299.132625][ T5972] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  299.137192][ T5972] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  299.142899][ T5972] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  299.148058][ T5972] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  299.151355][ T5972] usb 5-1: Product: syz
[  299.153190][ T5972] usb 5-1: Manufacturer: syz
[  299.169300][ T5972] cdc_wdm 5-1:1.0: skipping garbage
[  299.171386][ T5972] cdc_wdm 5-1:1.0: skipping garbage
[  299.179740][ T5972] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  299.182076][ T5972] cdc_wdm 5-1:1.0: Unknown control protocol
[  299.857468][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -EPIPE
[  300.068750][ T5972] usb 5-1: USB disconnect, device number 6
[  300.916128][T10222] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  301.157829][T10222] usb 5-1: config 0 has an invalid interface number: 64 but max is 0
[  301.161120][T10222] usb 5-1: config 0 has no interface number 0
[  301.173077][T10222] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07
[  301.180484][T10222] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  301.183632][T10222] usb 5-1: Product: syz
[  301.185395][T10222] usb 5-1: Manufacturer: syz
[  301.196275][T10222] usb 5-1: SerialNumber: syz
[  301.212760][T10222] usb 5-1: config 0 descriptor??
[  301.435172][T10222] usb 5-1: Found UVC 0.08 device syz (046d:0823)
[  301.441105][T10222] usb 5-1: No valid video chain found.
[  301.453754][T10222] usb 5-1: USB disconnect, device number 7
[  302.067425][   T35] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  303.261945][ T5940] Bluetooth: hci0: unexpected event for opcode 0x0402
[  303.436526][T11908] loop4: detected capacity change from 0 to 2048
[  303.446332][T11908] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  303.449922][T11908] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  303.452759][T11908] UDF-fs: Scanning with blocksize 512 failed
[  303.468193][T11908] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  304.116237][T10222] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  304.566064][T10222] usb 5-1: Using ep0 maxpacket: 16
[  304.573009][T10222] usb 5-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25
[  304.576794][T10222] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  304.580064][T10222] usb 5-1: Product: syz
[  304.581752][T10222] usb 5-1: Manufacturer: syz
[  304.584144][T10222] usb 5-1: SerialNumber: syz
[  304.589198][T10222] usb 5-1: config 0 descriptor??
[  304.595223][T10222] usb 5-1: Found UVC 0.00 device syz (046d:0721)
[  304.598513][T10222] usb 5-1: No valid video chain found.
[  304.843237][  T793] usb 5-1: USB disconnect, device number 8
[  305.472097][T11979] loop4: detected capacity change from 0 to 2048
[  305.480415][T11979] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  305.610108][T11985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2362'.
[  305.613552][T11985] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2362'.
[  306.104083][T12020] loop4: detected capacity change from 0 to 256
[  306.224097][   T33] audit: type=1326 audit(1759033780.076:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12022 comm="syz.4.2379" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4ebd8ec29 code=0x7ffc0000
[  306.240724][   T33] audit: type=1326 audit(1759033780.076:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12022 comm="syz.4.2379" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4ebd8ec29 code=0x7ffc0000
[  306.264977][   T33] audit: type=1326 audit(1759033780.076:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12022 comm="syz.4.2379" exe="/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7fa4ebd8ec29 code=0x7ffc0000
[  306.539196][   T33] audit: type=1326 audit(1759033780.076:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12022 comm="syz.4.2379" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4ebd8ec29 code=0x7ffc0000
[  306.547682][   T33] audit: type=1326 audit(1759033780.076:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12022 comm="syz.4.2379" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa4ebd8ec29 code=0x7ffc0000
[  306.555195][   T33] audit: type=1326 audit(1759033780.076:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12022 comm="syz.4.2379" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4ebd8ec29 code=0x7ffc0000
[  306.870868][T12032] loop4: detected capacity change from 0 to 256
[  306.883942][T12032] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  306.892776][T12032] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  306.901819][T12032] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  307.681856][T12079] ip6gre1: entered promiscuous mode
[  308.261435][T12099] netlink: 'syz.4.2413': attribute type 2 has an invalid length.
[  308.399653][T12105] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2416'.
[  308.726156][ T5999] usb 5-1: new full-speed USB device number 9 using dummy_hcd
[  308.891152][ T5999] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  308.895661][ T5999] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[  308.900450][ T5999] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  308.903771][ T5999] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  308.916734][ T5999] usb 5-1: config 0 descriptor??
[  308.920975][T12109] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  308.928912][ T5999] hub 5-1:0.0: USB hub found
[  309.131888][ T5999] hub 5-1:0.0: 2 ports detected
[  309.537202][ T5999] hub 5-1:0.0: set hub depth failed
[  309.542898][ T5999] usb 5-1: USB disconnect, device number 9
[  309.789701][T12133] netlink: 'syz.1.2430': attribute type 2 has an invalid length.
[  309.796208][T12133] netlink: 'syz.1.2430': attribute type 1 has an invalid length.
[  309.799350][T12133] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2430'.
[  309.850010][T12137] 9pnet_fd: Insufficient options for proto=fd
[  310.420195][T12171] loop4: detected capacity change from 0 to 512
[  310.441894][T12171] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  310.565437][T10045] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  310.742317][T12184] loop4: detected capacity change from 0 to 2048
[  310.780451][T12189] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  311.274682][T12216] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README
[  311.280994][T12216] Error validating options; rc = [-22]
[  311.862170][T12214] loop4: detected capacity change from 0 to 32768
[  313.070624][T12236] loop4: detected capacity change from 0 to 32768
[  313.102706][T12236] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  313.147268][T12236] XFS (loop4): Ending clean mount
[  313.160590][T12254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2481'.
[  313.599825][T12265] netlink: 320 bytes leftover after parsing attributes in process `syz.1.2485'.
[  313.792781][T10045] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  314.789659][ T5314] IPVS: starting estimator thread 0...
[  314.793321][T12299] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available
[  314.886115][T12301] IPVS: using max 63 ests per chain, 151200 per kthread
[  315.598778][T12333] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2516'.
[  315.604565][T12333] tipc: Enabled bearer <udp:syz0>, priority 10
[  316.716164][ T5314] tipc: Node number set to 760734597
[  316.782256][T12356] loop4: detected capacity change from 0 to 32768
[  316.816762][T12356] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  316.845691][T12356] XFS (loop4): Ending clean mount
[  316.859781][T12356] XFS (loop4): Quotacheck needed: Please wait.
[  316.878055][T12377] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2532'.
[  316.910898][T12356] XFS (loop4): Quotacheck: Done.
[  316.972720][T10045] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  317.075101][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  317.077702][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  317.696963][T12399] netlink: 'syz.3.2541': attribute type 10 has an invalid length.
[  317.700004][T12399] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2541'.
[  317.704394][T12399] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  317.712183][T12399] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  317.770335][T12401] loop4: detected capacity change from 0 to 2048
[  317.788585][T12401] NILFS (loop4): couldn't find nilfs on the device
[  319.071013][T12423] loop4: detected capacity change from 0 to 512
[  319.117165][T12423] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.2550: iget: bad extended attribute block 1
[  319.122888][T12423] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.2550: couldn't read orphan inode 15 (err -117)
[  319.129484][T12423] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  319.163442][T10045] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  319.381440][T12437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2556'.
[  319.392521][T12437] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2556'.
[  319.563339][T12445] overlayfs: failed to clone upperpath
[  319.743541][T12454] netlink: 'syz.3.2564': attribute type 11 has an invalid length.
[  321.732966][T12477] loop4: detected capacity change from 0 to 32768
[  322.094176][T12493] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2582'.
[  322.102319][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[  322.105140][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.108434][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.111667][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.115067][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.118312][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.121592][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.124899][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.128498][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.131930][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.135250][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.138631][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.141873][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.145225][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.148667][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.151830][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.155174][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.158586][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.161905][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.165153][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.168600][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.171928][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.175196][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.178929][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.182321][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.185602][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.188987][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.192282][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.195616][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.199059][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.202418][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.205636][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.209080][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.212226][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.215518][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.218939][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.222314][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.225604][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.229160][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.232467][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.235655][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.238968][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.242306][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.245693][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.249219][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.252380][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.255719][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.259035][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.262274][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.265574][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.269155][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.272522][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.276042][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.279335][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.282688][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.286121][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.289457][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.292727][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.296154][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.299387][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.302690][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.306114][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.309458][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.312708][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.316083][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.319415][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.322784][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.326095][ T5314] usb 5-1: new full-speed USB device number 10 using dummy_hcd
[  322.329360][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.332482][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.335744][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.339088][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.342387][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.345715][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.348973][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.352274][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.355556][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.359158][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.362343][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.365718][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.369093][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.374128][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.377591][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.380961][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.384222][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.387643][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.390887][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.394196][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.397598][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.400969][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.404259][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.407778][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.411123][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.414473][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.417950][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.421324][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.424578][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.428106][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.431254][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.434507][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.437990][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.441419][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.444677][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.448217][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.451509][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.454889][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.457791][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.460624][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.463563][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.466463][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.469685][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.472975][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.476264][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.479577][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.482852][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.486188][ T5314] usb 5-1: config 0 has an invalid interface number: 52 but max is 0
[  322.486204][ T5314] usb 5-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config
[  322.486212][ T5314] usb 5-1: config 0 has no interface number 0
[  322.486234][ T5314] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 24929, setting to 64
[  322.486246][ T5314] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  322.486257][ T5314] usb 5-1: config 0 interface 52 has no altsetting 0
[  322.491020][ T5314] usb 5-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00
[  322.493483][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.495869][ T5314] usb 5-1: New USB device strings: Mfr=0, Product=234, SerialNumber=34
[  322.499647][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.499712][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.499720][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.499758][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.518046][ T5314] usb 5-1: Product: syz
[  322.519276][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.519352][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.522367][ T5314] usb 5-1: SerialNumber: syz
[  322.524827][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.524909][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.532461][ T5314] usb 5-1: config 0 descriptor??
[  322.534964][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.535045][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.549128][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.552100][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.554839][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.557904][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.560989][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.564087][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.567211][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.570298][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.573271][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.575510][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.577911][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.580977][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.584463][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.587701][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.590783][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.593785][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.596403][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.598961][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.601823][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.604620][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.607278][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.609914][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.612748][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.615382][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.618168][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.621094][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.624097][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.627349][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.630420][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.633400][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.636105][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.639057][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.642414][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.645765][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.649237][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.652610][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.656080][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.659460][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.662742][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.666327][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.669431][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.672332][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.674877][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.677603][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.680321][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.683353][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.686750][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.689886][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.692838][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.695701][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.698428][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.701495][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.704472][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.707200][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.710261][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.713286][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.716481][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.719576][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.722639][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.725715][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.728426][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.731140][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.733977][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.737248][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.740144][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.743296][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.746198][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.749417][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.752500][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.755560][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.758854][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.761903][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.764975][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.768121][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.771080][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.774145][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.777124][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.779542][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.780511][ T5314] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.52/input/input8
[  322.782477][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.782555][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.782563][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  322.782599][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  322.782605][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  323.073355][ T5314] usb 5-1: USB disconnect, device number 10
[  323.073446][    C1] synaptics_usb 5-1:0.52: synusb_irq - usb_submit_urb failed with result: -19
[  323.405853][T12515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2592'.
[  325.516088][ T5972] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  325.568461][T12528] bridge3: entered promiscuous mode
[  325.666269][ T5972] usb 5-1: Using ep0 maxpacket: 32
[  325.677184][ T5972] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[  325.680520][ T5972] usb 5-1: config 0 has no interface number 0
[  325.685426][ T5972] usb 5-1: New USB device found, idVendor=16d8, idProduct=6803, bcdDevice=e5.e5
[  325.689662][ T5972] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  326.167118][ T5972] usb 5-1: Product: syz
[  326.168822][ T5972] usb 5-1: Manufacturer: syz
[  326.170632][ T5972] usb 5-1: SerialNumber: syz
[  326.175277][ T5972] usb 5-1: config 0 descriptor??
[  326.180308][ T5972] hub 5-1:0.184: bad descriptor, ignoring hub
[  326.182805][ T5972] hub 5-1:0.184: probe with driver hub failed with error -5
[  326.189140][ T5972] option 5-1:0.184: GSM modem (1-port) converter detected
[  326.486370][ T5972] usb 5-1: USB disconnect, device number 11
[  326.490350][ T5972] option 5-1:0.184: device disconnected
[  326.815415][T12565] netlink: 'syz.1.2614': attribute type 153 has an invalid length.
[  327.370503][T12593] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2628'.
[  327.390180][T12593] hsr_slave_0: left promiscuous mode
[  327.405801][T12593] hsr_slave_1: left promiscuous mode
[  328.545531][T12611] loop4: detected capacity change from 0 to 2048
[  328.599971][ T8420]  loop4: p1 < > p3
[  328.605287][ T8420] loop4: p3 size 134217728 extends beyond EOD, truncated
[  328.632449][T12611]  loop4: p1 < > p3
[  328.642933][T12611] loop4: p3 size 134217728 extends beyond EOD, truncated
[  328.752817][T12615] loop4: detected capacity change from 0 to 16
[  328.758517][T12615] erofs (device loop4): mounted with root inode @ nid 36.
[  328.798604][ T8420] udevd[8420]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  328.821728][ T7654] udevd[7654]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  329.326880][T12617] loop4: detected capacity change from 0 to 40427
[  329.330265][T12617] F2FS-fs (loop4): build fault injection rate: 19
[  329.332345][T12617] F2FS-fs (loop4): build fault injection type: 0x3bfe8c
[  329.335809][T12617] F2FS-fs (loop4): invalid crc value
[  329.351789][T12617] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x615/0x970
[  329.423329][T12617] F2FS-fs (loop4): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x20a/0x3f0
[  329.430256][T12617] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  329.433841][T12617] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  329.440856][T12617] F2FS-fs (loop4): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  329.445900][T12617] F2FS-fs (loop4): inject no more block in inc_valid_node_count of f2fs_new_node_folio+0x18b/0xa40
[  329.684847][T10045] syz-executor: attempt to access beyond end of device
[  329.684847][T10045] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  329.698018][T10045] CPU: 0 UID: 0 PID: 10045 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  329.698038][T10045] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  329.698045][T10045] Call Trace:
[  329.698049][T10045]  <TASK>
[  329.698054][T10045]  dump_stack_lvl+0x189/0x250
[  329.698074][T10045]  ? __pfx_dump_stack_lvl+0x10/0x10
[  329.698118][T10045]  ? __pfx_queue_work_on+0x10/0x10
[  329.698128][T10045]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  329.698143][T10045]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  329.698162][T10045]  f2fs_handle_critical_error+0x37c/0x540
[  329.698179][T10045]  f2fs_write_end_io+0x886/0xb60
[  329.698206][T10045]  __submit_merged_bio+0x27a/0x6a0
[  329.698229][T10045]  __submit_merged_write_cond+0x255/0x530
[  329.698253][T10045]  f2fs_write_data_pages+0x261d/0x3000
[  329.698292][T10045]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  329.698345][T10045]  ? folios_put_refs+0x560/0x640
[  329.698370][T10045]  ? __lock_acquire+0xab9/0xd20
[  329.698398][T10045]  ? do_raw_spin_lock+0x121/0x290
[  329.698423][T10045]  ? do_raw_spin_unlock+0x4d/0x240
[  329.698439][T10045]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  329.698450][T10045]  do_writepages+0x32e/0x550
[  329.698472][T10045]  ? preempt_schedule_thunk+0x16/0x30
[  329.698497][T10045]  filemap_fdatawrite+0x199/0x240
[  329.698515][T10045]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  329.698577][T10045]  ? do_raw_spin_unlock+0x4d/0x240
[  329.698598][T10045]  f2fs_sync_dirty_inodes+0x31f/0x830
[  329.698628][T10045]  f2fs_write_checkpoint+0x95a/0x1df0
[  329.698667][T10045]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  329.698717][T10045]  ? kill_f2fs_super+0x298/0x6c0
[  329.698735][T10045]  ? kasan_check_range+0x9f/0x2c0
[  329.698758][T10045]  ? kill_f2fs_super+0x298/0x6c0
[  329.698778][T10045]  kill_f2fs_super+0x2c3/0x6c0
[  329.698798][T10045]  ? __pfx_kill_f2fs_super+0x10/0x10
[  329.698811][T10045]  ? radix_tree_delete_item+0x2b6/0x400
[  329.698832][T10045]  ? shrinker_free+0x2ce/0x3e0
[  329.698851][T10045]  deactivate_locked_super+0xbc/0x130
[  329.698865][T10045]  cleanup_mnt+0x425/0x4c0
[  329.698880][T10045]  ? lockdep_hardirqs_on+0x9c/0x150
[  329.698898][T10045]  task_work_run+0x1d4/0x260
[  329.698920][T10045]  ? __pfx_task_work_run+0x10/0x10
[  329.698944][T10045]  ? exit_to_user_mode_loop+0x40/0x110
[  329.698989][T10045]  exit_to_user_mode_loop+0xec/0x110
[  329.699009][T10045]  do_syscall_64+0x2bd/0x3b0
[  329.699031][T10045]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  329.699045][T10045]  ? asm_sysvec_call_function_single+0x1a/0x20
[  329.699065][T10045]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  329.699101][T10045] RIP: 0033:0x7fa4ebd8ff57
[  329.699117][T10045] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  329.699129][T10045] RSP: 002b:00007ffc2f4a9988 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  329.699145][T10045] RAX: 0000000000000000 RBX: 00007fa4ebe11c2d RCX: 00007fa4ebd8ff57
[  329.699153][T10045] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc2f4a9a40
[  329.699162][T10045] RBP: 00007ffc2f4a9a40 R08: 0000000000000000 R09: 0000000000000000
[  329.699170][T10045] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc2f4aaad0
[  329.699179][T10045] R13: 00007fa4ebe11c2d R14: 00000000000506e3 R15: 00007ffc2f4aab10
[  329.699205][T10045]  </TASK>
[  329.700303][T10045] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  330.496108][T12666] vlan2: entered allmulticast mode
[  330.498191][T12666] bond0: entered allmulticast mode
[  330.500166][T12666] bond_slave_0: entered allmulticast mode
[  330.502471][T12666] bond_slave_1: entered allmulticast mode
[  330.518829][T12666] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode
[  330.606063][T12678] loop4: detected capacity change from 0 to 16
[  330.612288][T12678] erofs (device loop4): invalid checksum 0x7f4c178b, 0x02d6543f expected
[  330.783811][T12682] 9pnet: p9_errstr2errno: server reported unknown error 184467
[  331.084922][T12698] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2671'.
[  331.090243][T12698] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  331.093210][T12698] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  332.823442][T12762] loop4: detected capacity change from 0 to 1024
[  332.851221][T12762] hfsplus: xattr searching failed
[  332.855319][T12762] hfsplus: xattr searching failed
[  332.859726][T12762] hfsplus: xattr searching failed
[  333.701256][ T2993] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  333.929853][ T5942] Bluetooth: hci2: unexpected event for opcode 0x0c25
[  333.943931][T12814] openvswitch: netlink: IP tunnel dst address not specified
[  333.987544][T12816] netlink: 'syz.1.2723': attribute type 49 has an invalid length.
[  334.585378][T12819] loop4: detected capacity change from 0 to 131072
[  334.645092][T12819] F2FS-fs (loop4): invalid crc value
[  334.802376][T12819] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  334.822975][T12819] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  335.233202][   T33] audit: type=1800 audit(1759033809.086:174): pid=12842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2734" name="nullb0" dev="tmpfs" ino=4063 res=0 errno=0
[  335.308937][T12846] veth0_to_bond: entered allmulticast mode
[  335.400960][T12851] veth0_to_team: left promiscuous mode
[  335.402712][T12851] veth0_to_team: left allmulticast mode
[  335.846115][T10222] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  335.970634][   T33] audit: type=1326 audit(1759033809.826:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12871 comm="syz.1.2747" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f758ec29 code=0x7ffc0000
[  335.978813][   T33] audit: type=1326 audit(1759033809.826:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12871 comm="syz.1.2747" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f758ec29 code=0x7ffc0000
[  335.986635][   T33] audit: type=1326 audit(1759033809.836:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12871 comm="syz.1.2747" exe="/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7ff9f758ec29 code=0x7ffc0000
[  335.994820][   T33] audit: type=1326 audit(1759033809.836:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12871 comm="syz.1.2747" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f758ec29 code=0x7ffc0000
[  336.005540][   T33] audit: type=1326 audit(1759033809.836:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12871 comm="syz.1.2747" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f758ec29 code=0x7ffc0000
[  336.014424][   T33] audit: type=1326 audit(1759033809.846:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12871 comm="syz.1.2747" exe="/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7ff9f758ec29 code=0x7ffc0000
[  336.023743][   T33] audit: type=1326 audit(1759033809.846:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12871 comm="syz.1.2747" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f758ec29 code=0x7ffc0000
[  336.035861][   T33] audit: type=1326 audit(1759033809.846:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12871 comm="syz.1.2747" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f758ec29 code=0x7ffc0000
[  336.036184][T10222] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  336.043216][   T33] audit: type=1326 audit(1759033809.846:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12871 comm="syz.1.2747" exe="/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7ff9f758ec29 code=0x7ffc0000
[  336.059538][T10222] usb 5-1: config 0 has no interface number 0
[  336.064255][T10222] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  336.076285][T10222] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  336.079270][T10222] usb 5-1: Product: syz
[  336.080906][T10222] usb 5-1: Manufacturer: syz
[  336.082684][T10222] usb 5-1: SerialNumber: syz
[  336.091420][T10222] usb 5-1: config 0 descriptor??
[  336.301294][T10222] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  336.316244][T10222] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  336.320746][T10222] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  336.324095][T10222] usb 5-1: media controller created
[  336.405498][T10222] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  336.508130][T10222] i2c i2c-2: ec100: i2c rd failed=-71 reg=33
[  336.535219][T10222] usb 5-1: USB disconnect, device number 12
[  336.698331][T12880] libceph: resolve '400' (ret=-3): failed
[  337.471770][T12900] loop4: detected capacity change from 0 to 4096
[  337.488261][T12901] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  337.563544][T12903] loop4: detected capacity change from 0 to 128
[  337.616708][T12903] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  337.634403][T12903] ext4 filesystem being mounted at /291/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  337.688805][T10045] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  337.803657][T12909] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  338.899234][T12947] loop4: detected capacity change from 0 to 512
[  339.641563][T12987] syz_tun: entered allmulticast mode
[  339.733109][T12993] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2794'.
[  339.737047][T12993] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2794'.
[  339.741024][T12993] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2794'.
[  340.180700][T13013] loop4: detected capacity change from 0 to 2048
[  340.184865][T13013] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  340.201809][T13014] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  340.964403][T13029] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2809'.
[  340.994519][T13029] 8021q: adding VLAN 0 to HW filter on device bond1
[  341.021184][T13029] macvlan2: entered promiscuous mode
[  341.023490][T13029] macvlan2: entered allmulticast mode
[  341.034550][T13029] bond1: (slave macvlan2): Opening slave failed
[  342.044024][T13057] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.2819'.
[  342.094895][T13062] loop4: detected capacity change from 0 to 512
[  342.102249][T13062] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  342.111235][T13062] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  342.129457][T13062] EXT4-fs (loop4): 1 truncate cleaned up
[  342.139010][T13062] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  342.162204][T10045] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  343.418254][T13105] loop4: detected capacity change from 0 to 256
[  343.632795][T13118] program syz.4.2846 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  343.647071][   T33] kauditd_printk_skb: 20 callbacks suppressed
[  343.647087][   T33] audit: type=1326 audit(1759033817.506:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13116 comm="syz.3.2845" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9aaf98ec29 code=0x0
[  343.800236][   T33] audit: type=1326 audit(1759033817.656:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13133 comm="syz.1.2852" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f758ec29 code=0x7ffc0000
[  343.818022][   T33] audit: type=1326 audit(1759033817.656:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13133 comm="syz.1.2852" exe="/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7ff9f758ec29 code=0x7ffc0000
[  343.835009][   T33] audit: type=1326 audit(1759033817.656:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13133 comm="syz.1.2852" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f758ec29 code=0x7ffc0000
[  343.850238][   T33] audit: type=1326 audit(1759033817.656:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13133 comm="syz.1.2852" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9f758ec29 code=0x7ffc0000
[  344.238867][T13153] loop4: detected capacity change from 0 to 1024
[  344.301162][ T1092] hfsplus: b-tree write err: -5, ino 4
[  345.095525][T13172] overlayfs: failed to clone upperpath
[  345.218747][T13177] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2866'.
[  345.421198][T13194] team0: Caught tx_queue_len zero misconfig
[  345.712212][T13206] loop4: detected capacity change from 0 to 16
[  345.726353][T13206] erofs (device loop4): mounted with root inode @ nid 36.
[  345.742328][T13206] erofs (device loop4): bogus lookback distance 1388 @ lcn 42 of nid 36
[  345.749283][T13206] erofs (device loop4): failed to decompress -46 in[60, 4036] out[1851]
[  345.752418][T13206] erofs (device loop4): read error -117 @ 43 of nid 36
[  345.921954][T13210] netlink: 'syz.4.2882': attribute type 29 has an invalid length.
[  346.332886][T13222] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  346.601476][T13236] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2894'.
[  346.608926][T13236] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  347.238361][T13258] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2902'.
[  347.556154][  T792] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  347.736392][  T792] usb 5-1: Using ep0 maxpacket: 8
[  347.740796][  T792] usb 5-1: unable to get BOS descriptor or descriptor too short
[  347.747865][  T792] usb 5-1: config 8 has an invalid interface number: 255 but max is 0
[  347.750690][  T792] usb 5-1: config 8 has no interface number 0
[  347.753074][  T792] usb 5-1: config 8 interface 255 has no altsetting 0
[  347.766413][  T792] usb 5-1: string descriptor 0 read error: -22
[  347.776170][  T792] usb 5-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf
[  347.779887][  T792] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  349.317550][T13300] lo: Caught tx_queue_len zero misconfig
[  349.319256][T13300] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2923'.
[  350.034333][  T792] catc 5-1:8.255: Can't set altsetting 1.
[  350.081268][  T792] catc 5-1:8.255: probe with driver catc failed with error -5
[  350.089074][  T792] usb 5-1: USB disconnect, device number 13
[  350.546116][  T792] usb 5-1: new full-speed USB device number 14 using dummy_hcd
[  350.669066][T13338] netlink: 'syz.1.2939': attribute type 12 has an invalid length.
[  350.672508][T13338] netlink: 'syz.1.2939': attribute type 29 has an invalid length.
[  350.675592][T13338] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2939'.
[  350.698142][  T792] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  350.705573][  T792] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  350.720516][  T792] usb 5-1: config 0 descriptor??
[  350.731360][  T792] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  350.933451][  T792] gp8psk: usb in 128 operation failed.
[  351.008275][T13357] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  351.008275][T13357] The task syz.1.2946 (13357) triggered the difference, watch for misbehavior.
[  351.151705][  T792] gp8psk: usb in 146 operation failed.
[  351.154165][  T792] gp8psk: failed to get FW version
[  351.157340][  T792] gp8psk: FPGA Version = 0
[  351.357990][  T792] gp8psk: usb in 138 operation failed.
[  351.362583][  T792] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  351.367351][  T792] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  351.372480][  T792] usb 5-1: USB disconnect, device number 14
[  352.007620][T13380] netlink: 'syz.4.2958': attribute type 1 has an invalid length.
[  352.010597][T13380] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2958'.
[  353.042295][T13423] Bluetooth: MGMT ver 1.23
[  353.208823][T13430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2975'.
[  353.381344][T13434] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  353.484591][T13434] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  353.569537][T13432] loop4: detected capacity change from 0 to 40427
[  353.583595][T13432] F2FS-fs (loop4): invalid crc value
[  353.593203][T13434] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  353.647909][T13432] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  353.651966][T13432] F2FS-fs (loop4): Start checkpoint disabled!
[  353.660881][T13432] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  353.688236][T13434] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  353.784951][ T5965] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  353.801809][ T5933] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  353.840883][ T5965] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  353.849282][ T5965] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  354.213771][T13459] openvswitch: netlink: IP tunnel dst address not specified
[  354.272831][T13447] loop4: detected capacity change from 0 to 32768
[  354.285769][T13447] bcachefs: bch2_fs_parse_param() Error parsing option move_bytes_in_flight: option_value
[  354.818027][T13467] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2991'.
[  356.418489][T13536] loop4: detected capacity change from 0 to 32768
[  356.424497][T13536] 
[  356.424497][T13536]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  356.424497][T13536] 
[  356.440721][T13536] ERROR: (device loop4): diWrite: ixpxd invalid
[  356.440721][T13536] 
[  356.448748][T13536] ERROR: (device loop4): txCommit: 
[  356.448748][T13536] 
[  356.453909][T13536] ERROR: (device loop4): diWrite: ixpxd invalid
[  356.453909][T13536] 
[  356.457814][T13536] ERROR: (device loop4): txCommit: 
[  356.457814][T13536] 
[  356.471089][T10045] 
[  356.471089][T10045]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  356.471089][T10045] 
[  356.475000][T10045] 
[  356.475000][T10045]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  356.475000][T10045] 
[  356.735276][T13551] trusted_key: encrypted_key: insufficient parameters specified
[  356.860046][T13563] netlink: 'syz.4.3032': attribute type 9 has an invalid length.
[  356.863029][T13563] netlink: 200108 bytes leftover after parsing attributes in process `syz.4.3032'.
[  356.869234][T13561] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  356.876278][T13563] openvswitch: netlink: Message has 5 unknown bytes.
[  357.322693][T13587] overlayfs: missing 'lowerdir'
[  357.980486][  T793] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  358.306188][  T793] usb 5-1: config index 0 descriptor too short (expected 23569, got 27)
[  358.309113][  T793] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  358.351182][  T793] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  358.354323][  T793] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  358.363980][  T793] usb 5-1: Manufacturer: syz
[  358.368153][  T793] usb 5-1: config 0 descriptor??
[  358.426114][  T793] rc_core: IR keymap rc-hauppauge not found
[  358.428174][  T793] Registered IR keymap rc-empty
[  358.432038][  T793] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  358.443559][  T793] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input9
[  358.580569][    C1] igorplugusb 5-1:0.0: Error: urb status = -32
[  359.470289][T13688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3066'.
[  359.533938][T13694] trusted_key: syz.1.3069 sent an empty control message without MSG_MORE.
[  360.444342][ T6000] usb 5-1: USB disconnect, device number 15
[  360.601659][T13717] loop4: detected capacity change from 0 to 512
[  360.613405][T13717] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  360.636073][T13717] EXT4-fs (loop4): 1 truncate cleaned up
[  360.641411][T13717] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  360.783719][T13717] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3078: bg 0: block 256: padding at end of block bitmap is not set
[  360.810141][T13717] EXT4-fs (loop4): Remounting filesystem read-only
[  360.837253][T13724] EXT4-fs error (device loop4): ext4_get_verity_descriptor_location:298: inode #15: comm syz.4.3078: verity file has no extents
[  360.842571][T13724] fs-verity (loop4, inode 15): Error -117 getting verity descriptor size
[  360.861313][ T6000] IPVS: starting estimator thread 0...
[  360.886355][T10045] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  360.957355][T13729] IPVS: using max 63 ests per chain, 151200 per kthread
[  361.277969][T13761] loop4: detected capacity change from 0 to 136
[  361.425731][T13765] netlink: 'syz.4.3098': attribute type 10 has an invalid length.
[  361.440500][T13765] syz_tun: entered allmulticast mode
[  361.443166][T13765] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  361.478325][T13765] 8021q: adding VLAN 0 to HW filter on device bond1
[  361.500017][T13765] bond_slave_0: entered promiscuous mode
[  361.502824][T13765] bond_slave_1: entered promiscuous mode
[  361.505040][T13765] mac80211_hwsim hwsim13 wlan1: entered promiscuous mode
[  361.508249][T13765] syz_tun: entered promiscuous mode
[  361.515200][T13765] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  361.527377][T13765] bond1: (slave macvlan2): Enslaving as a backup interface with an up link
[  362.360245][ T5942] Bluetooth: hci3: ACL packet for unknown connection handle 201
[  362.521593][T13801] vlan0: entered promiscuous mode
[  363.279437][T13830] sctp: [Deprecated]: syz.4.3126 (pid 13830) Use of struct sctp_assoc_value in delayed_ack socket option.
[  363.279437][T13830] Use struct sctp_sack_info instead
[  363.389318][T13836] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3129'.
[  363.533997][T13846] openvswitch: netlink: Invalid VLAN frame
[  363.986165][ T6000] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  364.136309][ T6000] usb 5-1: Using ep0 maxpacket: 8
[  364.144419][ T6000] usb 5-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5
[  364.147430][ T6000] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  364.152238][ T6000] usb 5-1: config 0 descriptor??
[  364.365437][ T6000] usb 5-1: string descriptor 0 read error: -71
[  364.372151][ T6000] usb 5-1: Found UVC 0.00 device <unnamed> (2833:0201)
[  364.374960][ T6000] usb 5-1: No valid video chain found.
[  364.383034][ T6000] usb 5-1: USB disconnect, device number 16
[  364.920812][T13890] loop4: detected capacity change from 0 to 512
[  364.955316][T13890] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.3151: casefold flag without casefold feature
[  364.960874][T13890] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.3151: couldn't read orphan inode 15 (err -117)
[  364.967132][T13890] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  364.980940][T13890] EXT4-fs: Ignoring removed nomblk_io_submit option
[  364.983706][T13890] EXT4-fs: Can't set or change test_dummy_encryption on remount
[  365.005566][T10045] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  365.404553][   T35] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  367.300095][T13936] loop4: detected capacity change from 0 to 256
[  367.304123][T13936] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  367.316078][T13936] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  367.341709][T13936] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d)
[  367.756556][T13959] gtp0: entered promiscuous mode
[  367.758656][T13959] gtp0: entered allmulticast mode
[  367.776365][ T5985] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  367.926162][ T5985] usb 5-1: Using ep0 maxpacket: 8
[  367.930683][ T5985] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  367.937383][ T5985] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  367.944325][ T5985] usb 5-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52
[  367.950483][ T5985] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  367.953815][ T5985] usb 5-1: Product: syz
[  367.955192][ T5985] usb 5-1: Manufacturer: syz
[  367.957719][ T5985] usb 5-1: SerialNumber: syz
[  367.967453][ T5985] usb 5-1: config 0 descriptor??
[  368.289774][   T33] audit: type=1326 audit(1759033842.146:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13975 comm="syz.3.3185" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aaf98ec29 code=0x7ffc0000
[  368.299455][   T33] audit: type=1326 audit(1759033842.146:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13975 comm="syz.3.3185" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aaf98ec29 code=0x7ffc0000
[  368.312711][   T33] audit: type=1326 audit(1759033842.156:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13975 comm="syz.3.3185" exe="/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7f9aaf98ec29 code=0x7ffc0000
[  368.324116][   T33] audit: type=1326 audit(1759033842.156:212): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=unconfined pid=13975 comm="syz.3.3185" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aaf98ec29 code=0x7ffc0000
[  368.383777][ T5972] usb 5-1: USB disconnect, device number 17
[  368.724425][T13988] netlink: 201872 bytes leftover after parsing attributes in process `syz.1.3191'.
[  368.729115][T13988] netlink: zone id is out of range
[  368.731202][T13988] netlink: zone id is out of range
[  368.733212][T13988] netlink: zone id is out of range
[  368.735228][T13988] netlink: zone id is out of range
[  368.738793][T13988] netlink: zone id is out of range
[  368.741820][T13988] netlink: zone id is out of range
[  368.743981][T13988] netlink: zone id is out of range
[  368.749355][T13988] netlink: zone id is out of range
[  368.751381][T13988] netlink: zone id is out of range
[  368.753742][T13988] netlink: zone id is out of range
[  369.052631][T13995] xt_l2tp: v2 tid > 0xffff: 1114244
[  369.538189][T14003] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3197'.
[  369.581620][T14006] vcan0: tx drop: invalid da for name 0xfffffffffffffffe
[  369.621492][T14009] loop4: detected capacity change from 0 to 512
[  369.703209][T14009] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  369.712350][T14009] ext4 filesystem being mounted at /428/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  369.853077][T10045] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  371.531426][T14068] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3225'.
[  371.801514][T14087] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3233'.
[  371.842936][T14089] overlayfs: failed to clone upperpath
[  371.983019][T14099] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3238'.
[  372.660134][T14130] loop4: detected capacity change from 0 to 512
[  372.720323][T14130] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  372.725052][T14130] ext4 filesystem being mounted at /438/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  372.755793][T10045] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  373.524223][   T33] audit: type=1800 audit(1759033847.376:213): pid=14173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3272" name="nullb0" dev="tmpfs" ino=3420 res=0 errno=0
[  373.768565][T14186] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.3278'.
[  373.911498][T14194] veth1_macvtap: left promiscuous mode
[  373.913818][T14194] macsec0: entered promiscuous mode
[  373.918714][T14194] macsec0: entered allmulticast mode
[  373.951276][T14194] veth1_macvtap: entered promiscuous mode
[  373.954013][T14194] veth1_macvtap: entered allmulticast mode
[  373.963064][T14194] macsec0: left promiscuous mode
[  373.965839][T14194] macsec0: left allmulticast mode
[  373.969725][T14194] veth1_macvtap: left allmulticast mode
[  374.100892][   T33] audit: type=1326 audit(1759033847.956:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14189 comm="syz.3.3279" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aaf98ec29 code=0x7ffc0000
[  374.123981][   T33] audit: type=1326 audit(1759033847.966:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14189 comm="syz.3.3279" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aaf98ec29 code=0x7ffc0000
[  374.137183][T14200] futex_wake_op: syz.1.3282 tries to shift op by 32; fix this program
[  374.221690][   T33] audit: type=1326 audit(1759033848.076:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14189 comm="syz.3.3279" exe="/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f9aaf98ec29 code=0x7ffc0000
[  374.242804][   T33] audit: type=1326 audit(1759033848.086:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14189 comm="syz.3.3279" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aaf98ec29 code=0x7ffc0000
[  374.475105][   T33] audit: type=1326 audit(1759033848.086:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14189 comm="syz.3.3279" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aaf98ec29 code=0x7ffc0000
[  375.512231][ T5942] Bluetooth: hci3: ACL packet for unknown connection handle 201
[  376.025178][T14233] loop4: detected capacity change from 0 to 32768
[  376.034872][T14233] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3295 (14233)
[  376.051452][T14233] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  376.061185][T14233] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  376.477604][T14233] BTRFS info (device loop4): enabling ssd optimizations
[  376.480361][T14233] BTRFS info (device loop4): enabling free space tree
[  376.543021][T10045] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  376.704651][T14268] netlink: 'syz.3.3304': attribute type 10 has an invalid length.
[  376.824320][T14268] 8021q: adding VLAN 0 to HW filter on device bond0
[  376.861931][T14268] team0: Port device bond0 added
[  377.852690][T14307] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3323'.
[  377.863439][T14307] veth0_macvtap: left promiscuous mode
[  378.514969][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  378.517682][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  378.552991][T14282] loop4: detected capacity change from 0 to 262144
[  378.575535][T14282] F2FS-fs (loop4): invalid crc value
[  378.646245][T14282] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  378.650510][T14282] F2FS-fs (loop4): Start checkpoint disabled!
[  378.659020][T14282] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  379.124554][T14344] /dev/nullb0: Can't lookup blockdev
[  379.250736][ T5942] Bluetooth: hci2: unknown advertising packet type: 0x21
[  379.250819][ T5942] Bluetooth: hci2: unknown advertising packet type: 0x1c
[  379.255764][ T5942] Bluetooth: hci2: unknown advertising packet type: 0x20
[  379.260655][ T5942] Bluetooth: hci2: unknown advertising packet type: 0x34
[  379.263506][ T5942] Bluetooth: hci2: unknown advertising packet type: 0x3a
[  379.267120][ T5942] Bluetooth: hci2: unknown advertising packet type: 0xb1
[  379.271857][ T5942] Bluetooth: hci2: unknown advertising packet type: 0xbc
[  379.274693][ T5942] Bluetooth: hci2: unknown advertising packet type: 0xe6
[  379.612128][T14351] loop4: detected capacity change from 0 to 128
[  379.693316][T14353] loop4: detected capacity change from 0 to 512
[  379.734827][T14353] EXT4-fs (loop4): 1 orphan inode deleted
[  379.738987][T14353] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  379.743163][T14353] ext4 filesystem being mounted at /454/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  379.748352][   T28] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  379.754166][   T28] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u9:1: Failed to release dquot type 1
[  379.782218][T10045] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  379.837875][T14359] loop4: detected capacity change from 0 to 1024
[  379.848807][T14359] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  379.855806][T14359] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  379.858749][T14359] EXT4-fs (loop4): orphan cleanup on readonly fs
[  379.863344][T14359] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm syz.4.3344: Invalid inode table block 0 in block_group 0
[  379.868803][T14359] EXT4-fs (loop4): Remounting filesystem read-only
[  379.871379][T14359] Quota error (device loop4): write_blk: dquota write failed
[  379.874129][T14359] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  379.878659][T14359] EXT4-fs (loop4): 1 truncate cleaned up
[  379.907370][T14359] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  379.937543][T14359] EXT4-fs (loop4): shut down requested (1)
[  379.968812][T10045] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  380.134292][T14374] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3349'.
[  380.835563][T14386] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3355'.
[  381.743307][T14392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3358'.
[  381.801229][T14396] net_ratelimit: 12 callbacks suppressed
[  381.801263][T14396] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  381.833219][T14400] overlayfs: failed to clone upperpath
[  381.843200][T14400] overlayfs: failed to clone upperpath
[  382.378858][T14414] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  382.635020][   T33] audit: type=1326 audit(1759033856.486:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14429 comm="syz.3.3376" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9aaf98ec29 code=0x0
[  382.813386][T14435] syz.4.3378 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  383.116178][  T793] usb 5-1: new full-speed USB device number 18 using dummy_hcd
[  383.279150][  T793] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 10
[  383.296035][  T793] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  383.300964][  T793] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  383.305436][  T793] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  383.315763][  T793] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  383.319642][  T793] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  383.322645][  T793] usb 5-1: Product: syz
[  383.324323][  T793] usb 5-1: Manufacturer: syz
[  383.326366][  T793] usb 5-1: SerialNumber: syz
[  383.332199][  T793] usb 5-1: config 0 descriptor??
[  383.341383][T14437] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  383.347171][  T793] usb 5-1: ucan: probing device on interface #0
[  383.350427][  T793] usb 5-1: ucan: invalid endpoint configuration
[  383.356828][  T793] usb 5-1: ucan: probe failed; try to update the device firmware
[  383.552187][  T792] usb 5-1: USB disconnect, device number 18
[  384.188137][   T33] audit: type=1326 audit(1759033858.046:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14454 comm="syz.4.3387" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4ebd8ec29 code=0x7ffc0000
[  384.198974][   T33] audit: type=1326 audit(1759033858.046:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14454 comm="syz.4.3387" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4ebd8ec29 code=0x7ffc0000
[  384.210181][   T33] audit: type=1326 audit(1759033858.056:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14454 comm="syz.4.3387" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4ebd8ec29 code=0x7ffc0000
[  384.222126][   T33] audit: type=1326 audit(1759033858.056:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14454 comm="syz.4.3387" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4ebd8ec29 code=0x7ffc0000
[  384.232510][   T33] audit: type=1326 audit(1759033858.056:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14454 comm="syz.4.3387" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4ebd8ec29 code=0x7ffc0000
[  384.245092][   T33] audit: type=1326 audit(1759033858.066:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14454 comm="syz.4.3387" exe="/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa4ebd8ec29 code=0x7ffc0000
[  385.507002][ T5942] Bluetooth: hci0: ACL packet for unknown connection handle 201
[  385.807367][T14482] PKCS7: Unknown OID: [5] (bad)
[  385.809936][T14482] PKCS7: Only support pkcs7_signedData type
[  386.874063][T14512] loop8: detected capacity change from 0 to 8
[  386.882658][   T33] kauditd_printk_skb: 24 callbacks suppressed
[  386.882669][   T33] audit: type=1326 audit(1759033860.736:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14509 comm="syz.3.3415" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aaf98ec29 code=0x7ffc0000
[  386.893034][T14512] Dev loop8: unable to read RDB block 8
[  386.894738][T14512]  loop8: unable to read partition table
[  386.899873][T14512] loop8: partition table beyond EOD, truncated
[  386.902640][T14512] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5)
[  386.909699][   T33] audit: type=1326 audit(1759033860.736:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14509 comm="syz.3.3415" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aaf98ec29 code=0x7ffc0000
[  386.923926][   T33] audit: type=1326 audit(1759033860.756:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14509 comm="syz.3.3415" exe="/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f9aaf98ec29 code=0x7ffc0000
[  386.942481][   T33] audit: type=1326 audit(1759033860.756:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14509 comm="syz.3.3415" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aaf98ec29 code=0x7ffc0000
[  386.972519][   T33] audit: type=1326 audit(1759033860.756:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14509 comm="syz.3.3415" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aaf98ec29 code=0x7ffc0000
[  386.992437][   T33] audit: type=1326 audit(1759033860.776:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14509 comm="syz.3.3415" exe="/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f9aaf98ec29 code=0x7ffc0000
[  387.001810][   T33] audit: type=1326 audit(1759033860.796:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14509 comm="syz.3.3415" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aaf98ec29 code=0x7ffc0000
[  387.010284][   T33] audit: type=1326 audit(1759033860.796:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14509 comm="syz.3.3415" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aaf98ec29 code=0x7ffc0000
[  387.079093][T14527] loop4: detected capacity change from 0 to 1024
[  387.081656][T14527] EXT4-fs: Ignoring removed bh option
[  387.112415][T14527] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  387.135420][T10045] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  387.764552][T14553] loop4: detected capacity change from 0 to 1024
[  387.832149][T14553] hfsplus: xattr searching failed
[  388.047422][T14561] overlayfs: failed to clone upperpath
[  388.144566][   T33] audit: type=1326 audit(1759033861.996:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14568 comm="syz.3.3436" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aaf98ec29 code=0x7ffc0000
[  388.157496][   T33] audit: type=1326 audit(1759033861.996:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14568 comm="syz.3.3436" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aaf98ec29 code=0x7ffc0000
[  388.449362][T14582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3442'.
[  388.568781][T14592] loop4: detected capacity change from 0 to 1764
[  391.514456][T14657] loop4: detected capacity change from 0 to 256
[  391.579891][T14657] FAT-fs (loop4): Directory bread(block 64) failed
[  391.582959][T14657] FAT-fs (loop4): Directory bread(block 65) failed
[  391.585032][T14657] FAT-fs (loop4): Directory bread(block 66) failed
[  391.595266][T14657] FAT-fs (loop4): Directory bread(block 67) failed
[  391.600063][T14657] FAT-fs (loop4): Directory bread(block 68) failed
[  391.602217][T14657] FAT-fs (loop4): Directory bread(block 69) failed
[  391.604287][T14657] FAT-fs (loop4): Directory bread(block 70) failed
[  391.607127][T14657] FAT-fs (loop4): Directory bread(block 71) failed
[  391.609664][T14657] FAT-fs (loop4): Directory bread(block 72) failed
[  391.611822][T14657] FAT-fs (loop4): Directory bread(block 73) failed
[  391.635301][T14665] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  391.638761][T14665] IPv6: NLM_F_CREATE should be set when creating new route
[  391.640975][T14665] IPv6: NLM_F_CREATE should be set when creating new route
[  391.643190][T14665] IPv6: NLM_F_CREATE should be set when creating new route
[  391.647756][T14665] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  392.454563][T14707] loop4: detected capacity change from 0 to 1024
[  392.475407][T14707] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  392.491644][T14707] EXT4-fs error (device loop4): __ext4_remount:6740: comm syz.4.3497: Abort forced by user
[  392.507041][T14707] EXT4-fs (loop4): Remounting filesystem read-only
[  392.509626][T14707] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  392.553592][T10045] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  393.553905][T14750] !: renamed from dummy0 (while UP)
[  393.656473][T14755] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3518'.
[  393.677317][T14755] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3518'.
[  394.635393][T14793] netlink: 'syz.3.3533': attribute type 10 has an invalid length.
[  394.712767][T14797] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (15)
[  395.884827][T14820] netlink: 'syz.3.3547': attribute type 1 has an invalid length.
[  395.888322][T14820] netlink: 'syz.3.3547': attribute type 1 has an invalid length.
[  396.003679][T14826] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3549'.
[  396.280534][T14838] loop4: detected capacity change from 0 to 64
[  396.323199][T14838] syz.4.3555: attempt to access beyond end of device
[  396.323199][T14838] loop4: rw=2049, sector=268435468, nr_sectors = 2 limit=64
[  396.416870][T14843] netlink: 15 bytes leftover after parsing attributes in process `syz.1.3557'.
[  396.420334][T14843] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3557'.
[  396.574986][ T8029] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  396.600268][T14856] loop4: detected capacity change from 0 to 512
[  396.613517][T14856] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  396.639101][T14856] EXT4-fs (loop4): 1 truncate cleaned up
[  396.642933][T14856] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  396.693253][T14856] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  396.741208][T10045] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  396.757008][T14867] netlink: 'syz.3.3568': attribute type 8 has an invalid length.
[  397.072769][T14873] lo speed is unknown, defaulting to 1000
[  397.082454][T14873] lo speed is unknown, defaulting to 1000
[  397.089885][T14873] lo speed is unknown, defaulting to 1000
[  397.293769][T14873] infiniband syz0: set active
[  397.295579][ T5999] lo speed is unknown, defaulting to 1000
[  397.296524][T14873] infiniband syz0: added lo
[  397.364618][T14873] RDS/IB: syz0: added
[  397.370832][T14873] smc: adding ib device syz0 with port count 1
[  397.373507][T14873] smc:    ib device syz0 port 1 has pnetid 
[  397.382092][  T792] lo speed is unknown, defaulting to 1000
[  397.403883][T14873] lo speed is unknown, defaulting to 1000
[  397.617077][T14873] lo speed is unknown, defaulting to 1000
[  397.884742][T14873] lo speed is unknown, defaulting to 1000
[  398.133263][T14873] lo speed is unknown, defaulting to 1000
[  398.923369][T14960] netlink: 'syz.1.3612': attribute type 11 has an invalid length.
[  398.926737][T14960] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3612'.
[  398.973632][T14965] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3613'.
[  399.466748][ T5999] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  399.630734][ T5999] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88
[  399.635363][ T5999] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  399.639363][ T5999] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7
[  399.645460][ T5999] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[  399.656109][ T5999] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  399.658662][ T5999] usb 5-1: Product: syz
[  399.662475][ T5999] usb 5-1: Manufacturer: syz
[  399.664290][ T5999] usb 5-1: SerialNumber: syz
[  399.671824][ T5999] usb 5-1: config 0 descriptor??
[  400.275878][T14991] netlink: 'syz.1.3625': attribute type 1 has an invalid length.
[  401.362334][T15007] loop4: detected capacity change from 0 to 164
[  401.424255][T10045] iso9660: Corrupted directory entry in block 2 of inode 1920
[  401.441828][T10045] iso9660: Corrupted directory entry in block 2 of inode 1920
[  401.447494][T10045] iso9660: Corrupted directory entry in block 2 of inode 1920
[  401.460404][T10045] iso9660: Corrupted directory entry in block 2 of inode 1920
[  401.599653][T12463] bond0: (slave syz_tun): Releasing backup interface
[  401.603242][T12463] syz_tun (unregistering): left allmulticast mode
[  401.859897][ T5965] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  402.274402][ T5965] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  402.389800][ T5965] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  402.567376][ T5965] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  402.856984][T15029] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  402.865209][T15029] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  402.869936][T15029] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  402.886817][T15029] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  402.890044][ T5965] bridge_slave_1: left allmulticast mode
[  402.892436][ T5965] bridge_slave_1: left promiscuous mode
[  402.898286][ T5965] bridge0: port 2(bridge_slave_1) entered disabled state
[  402.904446][T15029] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  402.916930][ T5965] bridge_slave_0: left allmulticast mode
[  402.919145][ T5965] bridge_slave_0: left promiscuous mode
[  402.924323][ T5965] bridge0: port 1(bridge_slave_0) entered disabled state
[  402.974541][ T5965] bond_slave_0: left promiscuous mode
[  402.979794][ T5965] bond_slave_1: left promiscuous mode
[  402.983369][ T5965] mac80211_hwsim hwsim13 wlan1: left promiscuous mode
[  403.459179][ T5965] bond1 (unregistering): (slave macvlan2): Removing an active aggregator
[  403.463350][ T5965] bond1 (unregistering): (slave macvlan2): Releasing backup interface
[  403.479604][ T5965] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  403.483365][ T5965] bond_slave_0: left allmulticast mode
[  403.492107][ T5965] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  403.495890][ T5965] bond_slave_1: left allmulticast mode
[  403.503076][ T5965] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  403.507263][ T5965] mac80211_hwsim hwsim13 wlan1: left allmulticast mode
[  403.518802][ T5965] bond0 (unregistering): Released all slaves
[  403.676202][ T5965] bond1 (unregistering): Released all slaves
[  403.785779][T15040] netlink: 'syz.1.3644': attribute type 1 has an invalid length.
[  403.789397][T15026] lo speed is unknown, defaulting to 1000
[  403.824892][T15040] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  404.002583][ T5942] Bluetooth: hci2: unexpected event for opcode 0x0c2d
[  404.613562][T15026] chnl_net:caif_netlink_parms(): no params data found
[  404.771202][ T5965] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  404.774098][ T5965] batman_adv: batadv0: Removing interface: batadv_slave_0
[  404.806830][ T5965] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  404.809422][ T5965] batman_adv: batadv0: Removing interface: batadv_slave_1
[  404.838848][ T5965] veth1_macvtap: left promiscuous mode
[  404.841019][ T5965] veth0_macvtap: left promiscuous mode
[  404.843245][ T5965] veth1_vlan: left promiscuous mode
[  404.844981][ T5965] veth0_vlan: left promiscuous mode
[  404.998648][ T5942] Bluetooth: hci0: command tx timeout
[  406.205344][T15093] 9pnet_fd: p9_fd_create_unix (15093): problem connecting socket: qY3aK: -111
[  406.211727][ T5965] team0 (unregistering): Port device team_slave_1 removed
[  406.350485][ T5965] team0 (unregistering): Port device team_slave_0 removed
[  406.593472][T15103] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  407.080097][ T5942] Bluetooth: hci0: command tx timeout
[  407.874450][T15121] netlink: 'syz.1.3675': attribute type 21 has an invalid length.
[  407.941830][T15124] openvswitch: netlink: IPv6 tunnel dst address is zero
[  407.988068][ T2993] smc: removing ib device syz0
[  408.197826][T15121] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3675'.
[  408.201643][ T5972] lo speed is unknown, defaulting to 1000
[  408.203826][ T5972] syz0: Port: 1 Link DOWN
[  408.589172][T15026] bridge0: port 1(bridge_slave_0) entered blocking state
[  408.604738][T15026] bridge0: port 1(bridge_slave_0) entered disabled state
[  408.627510][T15026] bridge_slave_0: entered allmulticast mode
[  408.680122][T15026] bridge_slave_0: entered promiscuous mode
[  408.732402][T15026] bridge0: port 2(bridge_slave_1) entered blocking state
[  408.751622][T15026] bridge0: port 2(bridge_slave_1) entered disabled state
[  408.770611][T15026] bridge_slave_1: entered allmulticast mode
[  408.886369][T15026] bridge_slave_1: entered promiscuous mode
[  409.146570][ T5942] Bluetooth: hci0: command tx timeout
[  409.168700][T15026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  409.207009][T15026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  409.436697][T15026] team0: Port device team_slave_0 added
[  409.444312][T15026] team0: Port device team_slave_1 added
[  409.597745][T15026] batman_adv: batadv0: Adding interface: batadv_slave_0
[  409.600166][T15026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  409.656469][T15026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  409.686936][T15026] batman_adv: batadv0: Adding interface: batadv_slave_1
[  409.689898][T15026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  409.710148][T15026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  411.032136][ T5999] iguanair 5-1:0.0: failed to get version
[  411.041867][ T5999] iguanair 5-1:0.0: probe with driver iguanair failed with error -110
[  411.090533][T15026] hsr_slave_0: entered promiscuous mode
[  411.106530][T15026] hsr_slave_1: entered promiscuous mode
[  411.186350][ T5999] usb 5-1: USB disconnect, device number 19
[  411.226241][ T5942] Bluetooth: hci0: command tx timeout
[  411.269334][T15162] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3688'.
[  411.557266][T15026] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  411.573609][T15026] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  411.590049][T15026] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  411.601490][T15026] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  411.639101][ T5965] IPVS: stop unused estimator thread 0...
[  412.077052][ T5965] ------------[ cut here ]------------
[  412.079236][ T5965] WARNING: CPU: 1 PID: 5965 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x26d/0x2f0
[  412.082658][ T5965] Modules linked in:
[  412.086477][ T5965] CPU: 1 UID: 0 PID: 5965 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) 
[  412.091008][ T5965] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  412.094833][ T5965] Workqueue: netns cleanup_net
[  412.098047][ T5965] RIP: 0010:xfrm_state_fini+0x26d/0x2f0
[  412.100149][ T5965] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 eb 4d 00 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 19 ff e0 f7 e8 64 d0 9c f7 90 <0f> 0b 90 e9 fd fd ff ff e8 56 d0 9c f7 90 0f 0b 90 e9 60 fe ff ff
[  412.108175][ T5965] RSP: 0018:ffffc90003e7f898 EFLAGS: 00010293
[  412.110612][ T5965] RAX: ffffffff8a22dd2c RBX: ffff888041448000 RCX: ffff888106f10000
[  412.113656][ T5965] RDX: 0000000000000000 RSI: ffffffff8dba996e RDI: ffff888106f10000
[  412.117308][ T5965] RBP: ffffc90003e7f9b0 R08: ffffffff8fa3a737 R09: 1ffffffff1f474e6
[  412.120422][ T5965] R10: dffffc0000000000 R11: fffffbfff1f474e7 R12: ffffffff8f632fc0
[  412.123868][ T5965] R13: 1ffff920007cff40 R14: ffff888041449480 R15: dffffc0000000000
[  412.127390][ T5965] FS:  0000000000000000(0000) GS:ffff8881a3c13000(0000) knlGS:0000000000000000
[  412.132004][ T5965] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  412.134615][ T5965] CR2: 0000200000251030 CR3: 000000011de42000 CR4: 00000000000006f0
[  412.138665][ T5965] Call Trace:
[  412.140074][ T5965]  <TASK>
[  412.141262][ T5965]  xfrm_net_exit+0x2d/0x70
[  412.143069][ T5965]  ops_undo_list+0x49a/0x990
[  412.144955][ T5965]  ? __pfx_ops_undo_list+0x10/0x10
[  412.148109][ T5965]  ? do_raw_spin_unlock+0x4d/0x240
[  412.150202][ T5965]  cleanup_net+0x4c5/0x800
[  412.152007][ T5965]  ? __pfx_cleanup_net+0x10/0x10
[  412.154036][ T5965]  ? _raw_spin_unlock_irq+0x23/0x50
[  412.156718][ T5965]  ? process_scheduled_works+0x9ef/0x17b0
[  412.159048][ T5965]  ? process_scheduled_works+0x9ef/0x17b0
[  412.161732][ T5965]  process_scheduled_works+0xae1/0x17b0
[  412.163958][ T5965]  ? __pfx_process_scheduled_works+0x10/0x10
[  412.166836][ T5965]  worker_thread+0x8a0/0xda0
[  412.169463][ T5965]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  412.172363][ T5965]  ? __kthread_parkme+0x7b/0x200
[  412.174381][ T5965]  kthread+0x711/0x8a0
[  412.176550][ T5965]  ? __pfx_worker_thread+0x10/0x10
[  412.178634][ T5965]  ? __pfx_kthread+0x10/0x10
[  412.180492][ T5965]  ? _raw_spin_unlock_irq+0x23/0x50
[  412.182563][ T5965]  ? lockdep_hardirqs_on+0x9c/0x150
[  412.184648][ T5965]  ? __pfx_kthread+0x10/0x10
[  412.186912][ T5965]  ret_from_fork+0x439/0x7d0
[  412.188725][ T5965]  ? __pfx_ret_from_fork+0x10/0x10
[  412.190752][ T5965]  ? __switch_to_asm+0x39/0x70
[  412.192672][ T5965]  ? __switch_to_asm+0x33/0x70
[  412.194569][ T5965]  ? __pfx_kthread+0x10/0x10
[  412.196614][ T5965]  ret_from_fork_asm+0x1a/0x30
[  412.198590][ T5965]  </TASK>
[  412.199829][ T5965] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  412.202638][ T5965] CPU: 1 UID: 0 PID: 5965 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) 
[  412.206364][ T5965] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  412.210299][ T5965] Workqueue: netns cleanup_net
[  412.212202][ T5965] Call Trace:
[  412.213537][ T5965]  <TASK>
[  412.214715][ T5965]  dump_stack_lvl+0x99/0x250
[  412.216568][ T5965]  ? __asan_memcpy+0x40/0x70
[  412.218374][ T5965]  ? __pfx_dump_stack_lvl+0x10/0x10
[  412.220327][ T5965]  ? __pfx__printk+0x10/0x10
[  412.222175][ T5965]  vpanic+0x281/0x750
[  412.223805][ T5965]  ? __pfx__printk+0x10/0x10
[  412.225566][ T5965]  ? __pfx_vpanic+0x10/0x10
[  412.227336][ T5965]  ? is_bpf_text_address+0x292/0x2b0
[  412.229362][ T5965]  panic+0xb9/0xc0
[  412.230766][ T5965]  ? __pfx_panic+0x10/0x10
[  412.232468][ T5965]  __warn+0x31b/0x4b0
[  412.234046][ T5965]  ? xfrm_state_fini+0x26d/0x2f0
[  412.236030][ T5965]  ? xfrm_state_fini+0x26d/0x2f0
[  412.237998][ T5965]  report_bug+0x2be/0x4f0
[  412.239769][ T5965]  ? xfrm_state_fini+0x26d/0x2f0
[  412.241762][ T5965]  ? xfrm_state_fini+0x26d/0x2f0
[  412.243686][ T5965]  ? xfrm_state_fini+0x26f/0x2f0
[  412.245506][ T5965]  handle_bug+0x84/0x160
[  412.247258][ T5965]  exc_invalid_op+0x1a/0x50
[  412.249021][ T5965]  asm_exc_invalid_op+0x1a/0x20
[  412.250872][ T5965] RIP: 0010:xfrm_state_fini+0x26d/0x2f0
[  412.252950][ T5965] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 eb 4d 00 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 19 ff e0 f7 e8 64 d0 9c f7 90 <0f> 0b 90 e9 fd fd ff ff e8 56 d0 9c f7 90 0f 0b 90 e9 60 fe ff ff
[  412.260062][ T5965] RSP: 0018:ffffc90003e7f898 EFLAGS: 00010293
[  412.262426][ T5965] RAX: ffffffff8a22dd2c RBX: ffff888041448000 RCX: ffff888106f10000
[  412.265507][ T5965] RDX: 0000000000000000 RSI: ffffffff8dba996e RDI: ffff888106f10000
[  412.268504][ T5965] RBP: ffffc90003e7f9b0 R08: ffffffff8fa3a737 R09: 1ffffffff1f474e6
[  412.271579][ T5965] R10: dffffc0000000000 R11: fffffbfff1f474e7 R12: ffffffff8f632fc0
[  412.274602][ T5965] R13: 1ffff920007cff40 R14: ffff888041449480 R15: dffffc0000000000
[  412.277641][ T5965]  ? xfrm_state_fini+0x26c/0x2f0
[  412.279572][ T5965]  ? xfrm_state_fini+0x26c/0x2f0
[  412.281496][ T5965]  xfrm_net_exit+0x2d/0x70
[  412.283261][ T5965]  ops_undo_list+0x49a/0x990
[  412.285014][ T5965]  ? __pfx_ops_undo_list+0x10/0x10
[  412.286931][ T5965]  ? do_raw_spin_unlock+0x4d/0x240
[  412.288975][ T5965]  cleanup_net+0x4c5/0x800
[  412.290762][ T5965]  ? __pfx_cleanup_net+0x10/0x10
[  412.292700][ T5965]  ? _raw_spin_unlock_irq+0x23/0x50
[  412.294716][ T5965]  ? process_scheduled_works+0x9ef/0x17b0
[  412.297090][ T5965]  ? process_scheduled_works+0x9ef/0x17b0
[  412.299405][ T5965]  process_scheduled_works+0xae1/0x17b0
[  412.301599][ T5965]  ? __pfx_process_scheduled_works+0x10/0x10
[  412.303958][ T5965]  worker_thread+0x8a0/0xda0
[  412.305689][ T5965]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  412.308044][ T5965]  ? __kthread_parkme+0x7b/0x200
[  412.310003][ T5965]  kthread+0x711/0x8a0
[  412.311478][ T5965]  ? __pfx_worker_thread+0x10/0x10
[  412.313573][ T5965]  ? __pfx_kthread+0x10/0x10
[  412.315152][ T5965]  ? _raw_spin_unlock_irq+0x23/0x50
[  412.317309][ T5965]  ? lockdep_hardirqs_on+0x9c/0x150
[  412.319498][ T5965]  ? __pfx_kthread+0x10/0x10
[  412.321212][ T5965]  ret_from_fork+0x439/0x7d0
[  412.322953][ T5965]  ? __pfx_ret_from_fork+0x10/0x10
[  412.324961][ T5965]  ? __switch_to_asm+0x39/0x70
[  412.326701][ T5965]  ? __switch_to_asm+0x33/0x70
[  412.328284][ T5965]  ? __pfx_kthread+0x10/0x10
[  412.329701][ T5965]  ret_from_fork_asm+0x1a/0x30
[  412.331319][ T5965]  </TASK>
[  412.333080][ T5965] Kernel Offset: disabled
[  412.334397][ T5965] Rebooting in 86400 seconds..

VM DIAGNOSIS:
04:31:26  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff8a293db7 RBX=ffff88802801bb80 RCX=ffff888028931cc0 RDX=0000000000000000
RSI=0000000000000002 RDI=ffff88802801bb80 RBP=0000000000000301 RSP=ffffc900026ff7c0
R8 =ffff88802801be1f R9 =1ffff110050037c3 R10=dffffc0000000000 R11=ffffffff8a293da0
R12=0000000000000301 R13=00000000000002ff R14=ffff88802801bb80 R15=0000000000000002
RIP=ffffffff81a71980 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00100
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00100
FS =0000 00007f5b35d30380 ffffffff 00c00100
GS =0000 ffff8880b8613000 ffffffff 00c00100
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005613eb15f950 CR3=000000002498a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000000ff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000006d RBX=000000000000006d RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90003e7f030
R8 =ffff888107e38237 R9 =1ffff11020fc7046 R10=dffffc0000000000 R11=ffffffff854fada0
R12=dffffc0000000000 R13=ffffffff99b028f2 R14=ffffffff99df7460 R15=0000000000000000
RIP=ffffffff854fae1c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c13000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000251030 CR3=000000011de42000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 ff00000000000000
XMM02=0000ff0000000000 000000000000ff00 XMM03=ff00ff00ffffffff 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
