last executing test programs:

11m46.150942043s ago: executing program 2 (id=1314):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)={0x2c, 0x2d, 0x1, 0x0, 0x25dfdbff, {0x1, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x104}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x147, 0x0, 0x0, @pid}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)

11m46.092611442s ago: executing program 2 (id=1315):
unshare(0x22020400)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x8, 0x4, 0x4, 0x4}, 0x50)
r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r0, &(0x7f0000000780)}, 0x20)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x1005, &(0x7f0000000e00)=""/4101, 0x0, 0xc}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0x68, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x2, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814)

11m46.092453314s ago: executing program 2 (id=1316):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000004480)=[{{&(0x7f00000000c0)={0xa, 0x4e1c, 0xe0, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, 0x8}, 0x1c, &(0x7f0000003900)=[{&(0x7f0000000180)='c', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB='0\x00'], 0x278}}], 0x2, 0x800)

11m46.032601614s ago: executing program 2 (id=1317):
syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8000, &(0x7f0000000000)={[{@iocharset={'iocharset', 0x3d, 'cp737'}}, {@numtail}, {@fat=@codepage={'codepage', 0x3d, '864'}}]}, 0xfd, 0x2b3, &(0x7f00000004c0)="$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")
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0)
setfsuid(0x0)
r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)
socket$inet6_sctp(0xa, 0x1, 0x84)
fstat(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
r2 = memfd_create(&(0x7f0000000600)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x8dy\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x16\x8e-k\x12\xdf\xb9\xb6Pr\xd4\xb5X\\\xdbD\n\x03Gh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba$v\x8e\x9e\xef\xbc\x86f)\x01\xba\xdb\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\xdbU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8fg\xf3\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99l \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm4\x19t\xbds\xae\xdf\x1c2\xf79\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4\x83Mav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe4', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0)
fallocate(r2, 0x0, 0x0, 0x400001)
fcntl$addseals(r2, 0x409, 0xc)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5})
fchown(r0, r1, 0xffffffffffffffff)

11m45.897535622s ago: executing program 2 (id=1322):
r0 = fsopen(&(0x7f0000000000)='devtmpfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x89)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)

11m45.542541378s ago: executing program 2 (id=1326):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x2, 0x4, 0x378, 0xffffffff, 0x0, 0x0, 0xd0, 0xfeffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast1, [0x0, 0xff, 0x0, 0xffffff00], [], 'pimreg0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x3, 0x70}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@mcast1, @loopback, [0x0, 0xff000000, 0x0, 0xffffffff], [0x0, 0x7852747324b901df, 0xffffffff], 'netdevsim0\x00', 'geneve0\x00', {0xff}}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x2c}, [0xff000000, 0xffffffff, 0xff, 0xffffffff], 0x4e22, 0x4e04, 0x4e24, 0xe22, 0x0, 0x0, 0x7, 0x52a3, 0x1cf}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8)

11m45.530142346s ago: executing program 32 (id=1326):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x2, 0x4, 0x378, 0xffffffff, 0x0, 0x0, 0xd0, 0xfeffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @mcast1, [0x0, 0xff, 0x0, 0xffffff00], [], 'pimreg0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x3, 0x70}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@mcast1, @loopback, [0x0, 0xff000000, 0x0, 0xffffffff], [0x0, 0x7852747324b901df, 0xffffffff], 'netdevsim0\x00', 'geneve0\x00', {0xff}}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x2c}, [0xff000000, 0xffffffff, 0xff, 0xffffffff], 0x4e22, 0x4e04, 0x4e24, 0xe22, 0x0, 0x0, 0x7, 0x52a3, 0x1cf}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8)

9m50.3805186s ago: executing program 3 (id=2815):
r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x8809, 0x2)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc0405602, &(0x7f00000001c0)=@multiplanar_fd={0x2, 0x1, 0x4, 0x24, 0x8, {}, {0x2, 0x8, 0x3, 0xff, 0xc, 0x7, 'P[9A'}, 0x56b, 0x4, {0x0}, 0xd})

9m50.267354447s ago: executing program 3 (id=2817):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804)
r0 = io_uring_setup(0x1cf8, &(0x7f0000000040)={0x0, 0xc8a3, 0xc000, 0x2000008, 0xbf})
pselect6(0x40, &(0x7f0000000380)={0xff, 0x0, 0x5019, 0x8000000000008, 0x0, 0x0, 0x4, 0x1}, &(0x7f0000000000)={0x2100000001f, 0xfffffffffffffffe, 0xfffffffffffefffd, 0x3, 0x0, 0x401}, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

9m50.197816366s ago: executing program 3 (id=2818):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0)
chroot(&(0x7f00000000c0)='./file0/file0\x00')
mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000700)='./file0/../file0\x00', 0x0, 0x219d88b, 0x0)

9m50.114061483s ago: executing program 3 (id=2820):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="940000000001010400000000000000000a0000003c0001802c00018014000300fc8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000008"], 0x94}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="980000000001010400000000000000080a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000000040006"], 0x98}}, 0x8884)

9m50.048061294s ago: executing program 3 (id=2825):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)="306663353a313232373a620afa6b6b", 0xf)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)

9m49.919636064s ago: executing program 3 (id=2828):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0x100}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x32}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x80000, 0x4, 0x0, 0xb7, 0xfffffffe, 0xffffdf7e}}, 0xe4)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c)

9m34.904773514s ago: executing program 33 (id=2828):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0x100}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x32}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x80000, 0x4, 0x0, 0xb7, 0xfffffffe, 0xffffdf7e}}, 0xe4)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c)

8m56.948165298s ago: executing program 1 (id=3473):
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0)
ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101)

8m56.842491402s ago: executing program 1 (id=3474):
r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={<r3=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}]}, 0x28}}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c)
write$dsp(r0, &(0x7f00000001c0)="5cba91", 0x3)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in=@remote, @in6=@mcast2}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xfffffffffffffeb9)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000)

8m55.758974272s ago: executing program 1 (id=3478):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4)
connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x401, 0x100bf28, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10)
sendto$inet6(r0, 0x0, 0x0, 0x800, 0x0, 0x0)

8m55.65961642s ago: executing program 1 (id=3480):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1, 0x553a, &(0x7f0000006040)="$eJzs3EtvG1UUAODrpOmbEiEW7DpShZRItVWnSQW7AK14iFQRjwUr6tiO5db2RLHjhKxYsEQs+CcIJFYs+Q0sWLNDLEDskIo89wY1PCpQHJsk3ydNz8yd6zPnjqpEZyZyAM6s+ezXn0vhWrgUQpgNIVwNodgvpa2wGsMLIYTrIYSZJ7ZSGv9j4HwI4XII4dooecxZSqc+vzm8sfLTW798892Fc1e++Pr76a0amLYXQwjdrbi/240xb8X4MI3Xhu0idpeHKcYT3UfpOI9xt7lRZNitHcyrFfF2K87Pt3b6o7jZqdVHsdXeLMa3evGC/WHrIE/xgYe17eK40dwoYrufF7G1H+va248/2/b7g5inkfJ9VKQPg8FBjOPNvWZcz9ajItZ7gzQe8+aN5t4oDlNMlwv1vNMo6tg4yp3+f3u73dvZy4bN7X4772UrlepLleqdcnU7bzQHzeVyrdu4s5wttDqjaeVBs9ZdbeV5q9Os1PPuYrbQqtfL1Wq2cLe50a71smq1crtyq7yymPZuZq/ffz/rNLKFUXy13dsZtDv9bDPfzuInFrOlyu2XF7Mb1ezdtfVs/Z1799bW3/vw7gf3X1l787U06S9lZQtLt5aWytVb5aXq4sld/+h3/X9a/yep6DGuH46k9LSTDyZXB8AJov8HpmGi/f9cGHv/H/T/Y6H/P7Prf5wc7QZytj21/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4DT7Ye7LN4qd+Xh8JY0/k4aeS8elEMJMCOHx35gN5w/lnE155v5h/tyfavi2FIoMo2tcSNvlEMJq2n579rjvAgAAAJxeX318/bPYrcd/5qddEJMUH9rMXH0wpnylEMLc/I9jyBLSw6bw/NGrikb/v8+FvTFlKx5gXRxTsvjI7dy4sv0rs4fCxSdCKYaZg5nnJ1oXAABwnA53ApPtQgAAAJikT6ddANNRvGlNf4ufXvNdiCG9ELx06AgAAAA4gUrTLgAAAAA4dkX/7/v/AAAA4HSL3/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL+zcze5aQNRAICfDS609AdV3bdH6Q6O0SN02WXFVTgCvUL3FWegu267iyDCnkQhMiHExoTo+yR7MmPr5RnB4o1HAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACc0t9iMf318/OwaZz1ppl2ngYAAACosyoW0/KPcdUfpfF3aehj6mcRkUdEXe3ei1c7MXspTrHn/uJeDr8jygjb/zFIx5uI+JqOqw+n/hQAAADg5VrO5pOqWq9O43MnRJeqSZv87beW4mURUYz/tRQt354+PerWzeH5oe33ux8/9lzNjkutnNiKxktmbpRTbv22oh3WSz/322Z4p8mqJu8uHQAAoCu7lUCHVQgAAAAd+37uBDiP8q1nWoufFvAPqia9EHy90wMAAAAu0LGrngEAAIDnaPTg1bL+v4D9/97/t/8fAAAAPFm1/x8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACntCoW0+VsPmkaZ72p8edLRN14jXaeBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArtmfdxSGYTAIg5tEeXVCF/D9b2kW7NatmxkQfPxbCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK48jpfnGa/GTLbR60zy7nkl+XRqfDs1fp0b/yRj3f0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADY2Z+XFAiBIIiCOeN/J33/w0qCnkGECGh4VFGLBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCLfvfL/4mpcSaZO20sHY8ka1eNravG3oPG0YPx9m8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC42Ll/37ipOADgX5/vrrSACAFlCEJUYoCFptfS0pUBFDHwJyBF6bUErvxoM9CqAmVhQ5m7IBgRQgKFrf9D51bqUrYONxSJqQPIPrt5PYo4qGJfk89Hen5fW47f9zlRlK+fcwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQG389m6cF5uFSdypjt28d3W96G9N9YXr27eXi1bE2T9c/6u9Snz+vZzuZEvtJQIAAMDBkdf1fUQ/ejurRdBZKOv/Xn1OUfN/9+wkruv56bq/7uvav2i//nL3xQcDLUzGKS56bmM0PP73VLr5Hs5znj33r2d0yztfPnvJy29I572tF8a98n5m39y48U6/DA81kS0A8H8cq/sqqP8eKvpBm4kBcGB0q1a4U9X/+UK7OQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0ob8VT9dxFhHL3d24cOve1fWyn9q/vn17uW6nr13bTq9ZXKIXEec2RsPjTU3kCXDp8pWP10aj4cXmg1cior3Rq+CDGc6JaDNDweMGnepnfbavOhoR7efcftDyLyYAAPadXtWKuv5Ob2e1OJYtRvz5/cP1/2tJHGn9P9Wn9f/dD0/fTMdK6/9BYzOcfyubFz5buXT5yhsbF9bOD88PP3nzxOCtwckzp06dWSmflax4YgIAAMDj6Vctrf87ixHjqfX/I0kcM9b/n387+DIdK1f/P9Luol/bmQAAABxszx/94/fsEcezfj++WNvcvDiYbLP71f6JybaFVP+zQ1VL6/98se2sAAAAgCaMt7KH1v/PJnHMuP7/zA8v/ZReM4+Iw9X6/7H1T0dnm5tOS+7PdFYT/06851MFAABgrh2uWrr+3yvf/+88eOWhExGvvzqJq48BnKn+z9/9+sd0rPT9/5PNTXEudZYm96PslyK6S21nBAAAwH72VNWKYv+33s7qRz8feb/v/X8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACApv0VAAD//+NPQpo=")
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x148ca9, 0x0, 0x21, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140))
mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83)
fsync(r0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000)

8m54.53327255s ago: executing program 1 (id=3493):
r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182)
ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522)
ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000000)={0x1, 0x1})

8m54.031263316s ago: executing program 1 (id=3500):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='highspeed', 0x9)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000180), 0x4)
sendto$inet(r0, &(0x7f0000000380)="10f97747e2606760e12a", 0xa, 0x0, 0x0, 0x0)

8m53.936744769s ago: executing program 34 (id=3500):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='highspeed', 0x9)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000180), 0x4)
sendto$inet(r0, &(0x7f0000000380)="10f97747e2606760e12a", 0xa, 0x0, 0x0, 0x0)

3m52.216755811s ago: executing program 5 (id=7536):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080), 0x2)

3m52.21657462s ago: executing program 5 (id=7537):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)={0x34, 0x41, 0x107, 0x70bd2d, 0x25dfdbfe, {0x4, 0x7c}, [@nested={0x1c, 0x2d, 0x0, 0x1, [@nested={0x18, 0x9, 0x0, 0x1, [@nested={0x11, 0x99, 0x0, 0x1, [@generic="32881935c6d6e2c0dea5ea75b6"]}]}]}, @typed={0x4, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c090}, 0x40040)

3m52.138774706s ago: executing program 5 (id=7538):
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r2=>0x0})
openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x41, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, <r3=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r3, 0x0, 0x10000, 0x0, 0x8, 0xdc74, 0x3d4e17})
ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, &(0x7f0000000180)={0x18, r2})

3m51.034668909s ago: executing program 5 (id=7541):
getpid()
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000100)=ANY=[@ANYBLOB='iocharset=macgreek,umask=00000000005,namecase=1,namecase=1,fmask=00000000000000000000010,discard,keep_last_dots,iocharset=euc-jp,errors=continue,errors=continue,\x00'], 0x1, 0x1528, &(0x7f00000037c0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./mysys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)

3m50.90974634s ago: executing program 5 (id=7544):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x13, 0x0, &(0x7f0000000280))

3m50.640222139s ago: executing program 5 (id=7551):
sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f00000036c0)={0x0, 0x0, 0x0}, 0x10)
setns(0xc9, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x2383, @loopback}, 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x2383, @loopback}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x6, &(0x7f0000000500)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r1}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4}, @call={0x85, 0x0, 0x0, 0x34}, @exit], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@map=r1, r2, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000340), &(0x7f0000000380)=@tcp=r0}, 0x20)
write(r0, &(0x7f0000000700)='h', 0x1)

3m50.481365843s ago: executing program 35 (id=7551):
sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f00000036c0)={0x0, 0x0, 0x0}, 0x10)
setns(0xc9, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x2383, @loopback}, 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x2383, @loopback}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x6, &(0x7f0000000500)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r1}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4}, @call={0x85, 0x0, 0x0, 0x34}, @exit], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@map=r1, r2, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000340), &(0x7f0000000380)=@tcp=r0}, 0x20)
write(r0, &(0x7f0000000700)='h', 0x1)

914.422764ms ago: executing program 4 (id=11207):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902f3c8010000000009040000000206"], 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000280)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200a04000000a10124f1"], 0x0, 0x0, 0x0, 0x0})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0)

603.387881ms ago: executing program 0 (id=11209):
syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e0402470c"], 0x7)

603.219909ms ago: executing program 0 (id=11210):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085100000fddeffff06000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xc, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22)

504.333339ms ago: executing program 0 (id=11212):
r0 = syz_open_dev$loop(&(0x7f0000000040), 0xffffffff80000001, 0x1680a2)
fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
ioctl$LOOP_SET_CAPACITY(r0, 0x4c07)

423.964525ms ago: executing program 0 (id=11213):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x150, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffc, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0x16}}, [@qdisc_kind_options=@q_red={{0x8}, {0xfffffffffffffef6, 0x2, [@TCA_RED_PARMS={0x0, 0x1, {0x4800, 0x5dfbad83, 0x0, 0x8, 0x15, 0x9, 0x7}}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x81, 0xc, 0xb, 0x14, 0x5}}, @TCA_RED_MAX_P={0x8}]}}]}, 0x150}}, 0x0)

423.773917ms ago: executing program 0 (id=11214):
r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002)
ioctl$FE_SET_TONE(r0, 0x6f42, 0x0)

334.366312ms ago: executing program 0 (id=11215):
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc-aes-ce\x00'}, 0x58)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x80000001}, 0x8)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x8020)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000180)={0x0, 0x7, 0x1}, 0x8)

334.202327ms ago: executing program 4 (id=11216):
syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x68, 0x4000, 0x0, 0x2f, 0x0, @private=0xa010101, @multicast1}, @time_exceeded={0x80, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @loopback}}}}}}, 0x0)

333.997412ms ago: executing program 6 (id=11217):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000280)='cgroup.clone_children\x00', 0x2, 0x0)
sendfile(r1, r1, 0x0, 0x100000000)

253.882091ms ago: executing program 4 (id=11218):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000000206010100000000000000000100ffff140007800800124000000005050015000900010006000000050005000a00050004000000000009000200"], 0x4c}, 0x1, 0x0, 0x0, 0x4044081}, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0)

253.496351ms ago: executing program 6 (id=11219):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x4, 0x500, 0x7fffffff, 0x24}, 0x48)

204.632924ms ago: executing program 4 (id=11220):
r0 = socket$kcm(0xa, 0x3, 0x73)
sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty=0xf5ff}, 0x1b, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f00000011c0)="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", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x38, 0x29, 0x2}}, @ip_tos_u8={{0x100000000000000}}], 0x50}, 0xfffc)

144.407503ms ago: executing program 4 (id=11221):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0)

144.249588ms ago: executing program 6 (id=11222):
syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "081200", 0x14, 0x2b, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @local, {[@srh={0x3a, 0x0, 0x2}], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x100, @void}}}}}}}}, 0x0)

94.201577ms ago: executing program 6 (id=11223):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r0, 0xaf02, 0x0)

93.945662ms ago: executing program 4 (id=11224):
syz_mount_image$xfs(&(0x7f0000000040), &(0x7f0000009780)='./file0\x00', 0x41, &(0x7f0000000000)={[{@norecovery}]}, 0x1, 0x97f7, &(0x7f0000013c80)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x286041, 0x3f64)

24.485302ms ago: executing program 6 (id=11225):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x41}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)

0s ago: executing program 6 (id=11226):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac00000000010505000000faff0000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff02000000000000009d0000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffac1e00010800074000000001180006801400040000000000000000000000000000000001"], 0xac}}, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={0xb8, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x24, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}]}]}, 0xb8}}, 0x0)

kernel console output (not intermixed with test programs):

9
[   55.430311][ T5907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   55.430318][ T5907] RSP: 002b:00007faebaa3c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   55.430327][ T5907] RAX: ffffffffffffffda RBX: 00007faeb9e25fa0 RCX: 00007faeb9b9e0d9
[   55.430332][ T5907] RDX: 0000200000000000 RSI: 000000004018f50b RDI: 0000000000000004
[   55.430337][ T5907] RBP: 00007faeb9c35024 R08: 0000000000000000 R09: 0000000000000000
[   55.430341][ T5907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   55.430345][ T5907] R13: 00007faeb9e26038 R14: 00007faeb9e25fa0 R15: 00007ffe08711668
[   55.430357][ T5907]  </TASK>
[   55.553827][ T5597] Bluetooth: hci1: command tx timeout
[   55.556421][ T5907] F2FS-fs (loop0): Stopped filesystem due to reason: 4
[   55.556665][ T5597] Bluetooth: hci0: command tx timeout
[   55.610526][ T5600] Bluetooth: hci2: command tx timeout
[   56.542753][ T5936] trusted_key: encrypted_key: master key parameter 'C' is invalid
[   56.579289][ T5938] loop0: detected capacity change from 0 to 128
[   57.520510][   T31] usb 2-1: USB disconnect, device number 3
[   57.947727][ T5967] netlink: 'syz.0.102': attribute type 5 has an invalid length.
[   58.913286][ T5980] loop0: detected capacity change from 0 to 512
[   59.007365][ T5980] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   59.013591][ T5980] ext4 filesystem being mounted at /61/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   59.056545][ T5985] loop2: detected capacity change from 0 to 512
[   59.061903][ T5985] EXT4-fs: Ignoring removed oldalloc option
[   59.122137][ T5985] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   59.134386][ T5985] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   59.157257][ T5599] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.235478][ T5985] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.107: bg 0: block 217: padding at end of block bitmap is not set
[   59.248387][ T5985] EXT4-fs (loop2): Remounting filesystem read-only
[   59.305701][ T5594] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.310196][   T27] Quota error (device loop2): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync!
[   59.317607][   T27] Quota error (device loop2): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync!
[   59.445231][ T5993] netlink: 'syz.2.110': attribute type 1 has an invalid length.
[   59.589383][ T6000] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   59.644466][ T6004] xt_cgroup: xt_cgroup: no path or classid specified
[   59.663190][ T6003] netlink: 12 bytes leftover after parsing attributes in process `syz.2.116'.
[   59.736582][ T6011] loop0: detected capacity change from 0 to 512
[   59.744774][ T6011] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   59.756243][ T6011] EXT4-fs (loop0): 1 truncate cleaned up
[   59.762232][ T6011] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   59.777031][ T6011] EXT4-fs error (device loop0): ext4_generic_delete_entry:2673: inode #2: block 13: comm syz.0.120: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[   59.797582][ T6011] EXT4-fs (loop0): Remounting filesystem read-only
[   59.830157][ T5599] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.080486][ T5595] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   60.236264][ T5595] usb 3-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[   60.244472][ T5595] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   60.249973][ T5595] usb 3-1: config 0 descriptor??
[   60.254656][ T5595] ums-realtek 3-1:0.0: USB Mass Storage device detected
[   60.345525][ T6053] netlink: 168 bytes leftover after parsing attributes in process `syz.1.132'.
[   60.470356][ T5652] usb 3-1: USB disconnect, device number 2
[   60.842207][ T6055] i2c i2c-0: Invalid 7-bit I2C address 0x00
[   60.985407][ T6058] netlink: 24 bytes leftover after parsing attributes in process `syz.0.134'.
[   60.994479][ T6058] random: crng reseeded on system resumption
[   61.099961][ T6060] capability: warning: `syz.2.135' uses deprecated v2 capabilities in a way that may be insecure
[   61.735124][ T6080] gretap0: entered promiscuous mode
[   61.743573][ T6080] macvlan2: entered promiscuous mode
[   61.758921][ T6080] gretap0: left promiscuous mode
[   61.927130][ T6088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.149'.
[   62.127010][ T6096] new mount options do not match the existing superblock, will be ignored
[   62.199716][ T6102] netlink: 40 bytes leftover after parsing attributes in process `syz.2.155'.
[   62.298255][ T6114] loop2: detected capacity change from 0 to 2048
[   62.301983][ T6115] syz.0.162(6115): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[   62.305041][ T6114] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[   62.314289][ T5598] udevd[5598]: incorrect nilfs2 checksum on /dev/loop2
[   62.315342][ T6114] NILFS (loop2): mounting unchecked fs
[   62.323733][ T6114] NILFS (loop2): recovery required for readonly filesystem
[   62.328675][ T6114] NILFS (loop2): write access will be enabled during recovery
[   62.331163][ T5598] udevd[5598]: incorrect nilfs2 checksum on /dev/loop2
[   62.338832][ T6114] NILFS (loop2): invalid segment: Checksum error in super root
[   62.345952][ T6114] NILFS (loop2): error -22 while loading super root
[   62.416753][ T6123] loop2: detected capacity change from 0 to 1764
[   62.862311][ T6146] netlink: 'syz.2.176': attribute type 2 has an invalid length.
[   62.934343][ T6151] loop1: detected capacity change from 0 to 512
[   62.974346][ T6151] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.178: bg 0: block 184: padding at end of block bitmap is not set
[   62.983839][ T6151] loop1: lost filesystem error report for type 5 error -117
[   62.987170][ T6151] EXT4-fs (loop1): Remounting filesystem read-only
[   62.991933][    C0] EXT4-fs (loop1): error count since last fsck: 1
[   62.991987][    C0] EXT4-fs (loop1): initial error at time 1787039623: ext4_validate_block_bitmap:441
[   62.992006][    C0] EXT4-fs (loop1): last error at time 1787039623: ext4_validate_block_bitmap:441
[   63.011740][ T6151] EXT4-fs (loop1): 1 truncate cleaned up
[   63.019586][ T6151] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   63.024709][ T6151] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   63.029771][ T6159] loop2: detected capacity change from 0 to 256
[   63.034241][ T1191] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   63.039335][ T1191] Quota error (device loop1): write_blk: dquota write failed
[   63.042875][ T6159] exfat: Deprecated parameter 'utf8'
[   63.045275][ T1191] Quota error (device loop1): remove_free_dqentry: Can't write block (5) with free entries
[   63.048598][ T6159] exfat: Deprecated parameter 'namecase'
[   63.052683][ T1191] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   63.056347][ T6159] exfat: Deprecated parameter 'namecase'
[   63.058898][ T1191] Quota error (device loop1): write_blk: dquota write failed
[   63.061945][ T6159] exfat: Deprecated parameter 'utf8'
[   63.065121][ T1191] Quota error (device loop1): free_dqentry: Can't move quota data block (5) to free list
[   63.071629][ T1191] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started
[   63.081464][ T1191] Quota error (device loop1): v2_write_file_info: Can't write info structure
[   63.090894][ T6159] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[   63.095748][ T1191] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14
[   63.103161][ T6159] exFAT-fs (loop2): failed to test first cluster bit of root dir(5)
[   63.108413][ T5603] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   63.416320][ T6174] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[   63.974763][ T6205] loop1: detected capacity change from 0 to 32768
[   64.004328][ T6205] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   64.029814][ T6205] XFS (loop1): Ending clean mount
[   64.046400][ T5603] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   64.360660][ T5659] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[   64.511013][ T5659] usb 3-1: New USB device found, idVendor=05ac, idProduct=0231, bcdDevice= 0.00
[   64.517785][ T5659] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 80, setting to 64
[   64.524438][ T5659] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   64.529933][ T5659] usb 3-1: config 0 descriptor??
[   64.534615][ T6254] tipc: Started in network mode
[   64.535506][ T6228] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   64.542041][ T6254] tipc: Node identity 5f0000000000000008, cluster identity 4711
[   64.547250][ T5659] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input4
[   64.621544][ T6258] : renamed from dummy0 (while UP)
[   64.690198][ T6262] ip_tables: iptables: counters copy to user failed while replacing table
[   64.719496][ T6264] overlayfs: upper fs does not support file handles, falling back to index=off.
[   64.727481][ T6264] evm: overlay not supported
[   64.747528][ T5032] bcm5974 3-1:0.0: could not read from device
[   64.748025][   T10] usb 3-1: USB disconnect, device number 3
[   64.761596][ T5724] bcm5974 3-1:0.0: could not read from device
[   64.784880][ T6266] loop1: detected capacity change from 0 to 164
[   64.797918][ T6266] rock: directory entry would overflow storage
[   64.800311][ T6266] rock: sig=0x4f50, size=4, remaining=3
[   64.803002][ T6266] iso9660: Corrupted directory entry in block 5 of inode 1792
[   64.942935][ T6273] tipc: Cannot configure node identity twice
[   65.116376][ T6280] loop1: detected capacity change from 0 to 256
[   65.246287][ T6286] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.250120][ T6286] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.308210][ T6286] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   65.315611][ T6286] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   65.410590][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   65.415833][   T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   65.422251][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   65.431752][   T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   65.527358][ T6305] x_tables: unsorted underflow at hook 2
[   65.970495][ T5659] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   66.120464][ T5659] usb 2-1: Using ep0 maxpacket: 16
[   66.124142][ T5659] usb 2-1: unable to get BOS descriptor or descriptor too short
[   66.126683][ T5659] usb 2-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40
[   66.130737][ T5659] usb 2-1: config 1 has an invalid descriptor of length 152, skipping remainder of the config
[   66.134006][ T5659] usb 2-1: config 1 interface 2 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[   66.139910][ T5659] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   66.142677][ T5659] usb 2-1: Product: syz
[   66.144056][ T5659] usb 2-1: Manufacturer: syz
[   66.145471][ T5659] usb 2-1: SerialNumber: syz
[   66.660807][ T6337] netlink: 27 bytes leftover after parsing attributes in process `syz.0.258'.
[   67.960560][   T10] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[   68.111330][   T10] usb 3-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90
[   68.121711][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   68.126799][   T10] usb 3-1: Product: syz
[   68.128820][   T10] usb 3-1: Manufacturer: syz
[   68.131610][   T10] usb 3-1: SerialNumber: syz
[   68.135990][   T10] usb 3-1: config 0 descriptor??
[   68.141837][   T10] ums-onetouch 3-1:0.0: USB Mass Storage device detected
[   68.351740][   T10] usb 3-1: USB disconnect, device number 4
[   68.635802][ T5659] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[   68.642546][ T5659] usb 2-1: unable to issue vendor read request (ret = -71)
[   68.645630][ T5659] usb 2-1: unable to issue vendor read request (ret = -71)
[   68.648456][ T5659] usb 2-1: unable to issue vendor read request (ret = -71)
[   68.656291][ T5659] usb 2-1: unable to issue vendor read request (ret = -71)
[   68.669187][ T6376] loop1: detected capacity change from 0 to 136
[   68.701188][ T6376] overlay: filesystem on ./file0 is read-only
[   68.703419][ T5659] usb 2-1: USB disconnect, device number 4
[   68.743683][ T5598] udevd[5598]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   68.813826][ T6380] overlayfs: upper fs does not support RENAME_WHITEOUT.
[   68.816652][ T6380] overlayfs: failed to set xattr on upper
[   68.818451][ T6380] overlayfs: ...falling back to redirect_dir=nofollow.
[   68.822030][ T6380] overlayfs: ...falling back to uuid=null.
[   68.912242][ T6386] input: syz0 as /devices/virtual/input/input5
[   68.928966][ T6388] loop1: detected capacity change from 0 to 256
[   69.182680][ T6404] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   69.277501][ T6403] loop1: detected capacity change from 0 to 32768
[   69.285211][ T6403] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.286 (6403)
[   69.301604][ T6403] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   69.305515][ T6403] BTRFS info (device loop1): using crc32c checksum algorithm
[   69.329796][ T6403] BTRFS info (device loop1): enabling ssd optimizations
[   69.332304][ T6403] BTRFS info (device loop1): turning on flush-on-commit
[   69.334669][ T6403] BTRFS info (device loop1): enabling free space tree
[   69.336987][ T6403] BTRFS info (device loop1): enabling auto defrag
[   69.338970][ T6403] BTRFS info (device loop1): use lzo compression, level 1
[   69.342859][ T6403] BTRFS info (device loop1): max_inline set to 0
[   69.425332][ T5603] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   69.550353][ T6421] loop1: detected capacity change from 0 to 512
[   69.557291][ T6421] EXT4-fs: Ignoring removed i_version option
[   69.563460][ T6421] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   69.574366][ T6421] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   69.578394][ T6421] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   69.730779][ T6426] hugetlbfs: Bad value 't' for mount option 'size'
[   69.730779][ T6426] 
[   69.827089][ T6432] loop2: detected capacity change from 0 to 4096
[   69.831148][ T5659] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   69.859615][ T6432] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[   69.981351][ T5659] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[   69.984856][ T5659] usb 2-1: config 0 has no interfaces?
[   69.989574][ T5659] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   69.992439][ T5659] usb 2-1: Product: syz
[   69.993817][ T5659] usb 2-1: Manufacturer: syz
[   69.995450][ T5659] usb 2-1: SerialNumber: syz
[   70.006805][ T5659] usb 2-1: config 0 descriptor??
[   70.021855][ T6436] loop2: detected capacity change from 0 to 32768
[   70.027467][ T6436] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.294 (6436)
[   70.040570][ T6436] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   70.044103][ T6436] BTRFS info (device loop2): using crc32c checksum algorithm
[   70.059297][ T6436] BTRFS info (device loop2): enabling ssd optimizations
[   70.061526][ T6436] BTRFS info (device loop2): turning on flush-on-commit
[   70.063717][ T6436] BTRFS info (device loop2): enabling free space tree
[   70.066428][ T6436] BTRFS info (device loop2): enabling auto defrag
[   70.069023][ T6436] BTRFS info (device loop2): use lzo compression, level 1
[   70.072538][ T6436] BTRFS info (device loop2): max_inline set to 4096
[   70.093793][ T5594] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   70.223365][ T5659] usb 2-1: USB disconnect, device number 5
[   70.747589][ T5603] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.852883][   T37] rpcbind: server 127.0.0.1 not responding, timed out
[   70.942568][ T6485] netlink: 12 bytes leftover after parsing attributes in process `syz.2.310'.
[   70.946166][ T6485] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   71.005331][ T6490] netlink: 64 bytes leftover after parsing attributes in process `syz.2.312'.
[   71.011624][ T6490] netlink: 64 bytes leftover after parsing attributes in process `syz.2.312'.
[   71.015287][ T6490] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22)
[   71.375023][ T1373] ieee802154 phy0 wpan0: encryption failed: -22
[   71.377526][ T1373] ieee802154 phy1 wpan1: encryption failed: -22
[   71.470147][ T6518] loop2: detected capacity change from 0 to 512
[   71.475638][ T6518] EXT4-fs: Ignoring removed orlov option
[   71.484488][ T6518] EXT4-fs: old and new quota format mixing
[   71.776703][ T6532] loop2: detected capacity change from 0 to 8
[   71.798692][ T6532] SQUASHFS error: xz decompression failed, data probably corrupt
[   71.805254][ T6532] SQUASHFS error: Failed to read block 0x108: -5
[   71.810259][ T6532] SQUASHFS error: Unable to read metadata cache entry [106]
[   71.813097][ T6532] SQUASHFS error: Unable to read inode 0x11f
[   71.873880][ T6538] loop2: detected capacity change from 0 to 1764
[   72.736433][ T6557] netlink: 'syz.2.344': attribute type 1 has an invalid length.
[   72.739569][ T6557] netlink: 56 bytes leftover after parsing attributes in process `syz.2.344'.
[   72.849828][ T6563] xt_hashlimit: size too large, truncated to 1048576
[   72.974515][ T6573] loop1: detected capacity change from 0 to 128
[   73.004784][ T6573] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[   73.012348][ T6573] hpfs: filesystem error: improperly stopped
[   73.014379][ T6573] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[   73.017404][ T6573] hpfs: You really don't want any checks? You are crazy...
[   73.020788][ T6573] hpfs: Code page directory magic doesn't match (magic = 7b3184b5)
[   73.023427][ T6573] hpfs: code page support is disabled
[   73.025790][ T6573] hpfs: hpfs_map_4sectors(): unaligned read
[   73.028099][ T6573] hpfs: hpfs_map_4sectors(): unaligned read
[   73.029983][ T6573] hpfs: filesystem error: unable to find root dir
[   73.264800][ T6598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.364'.
[   73.269249][ T6598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.364'.
[   74.342956][ T6619] overlayfs: conflicting options: nfs_export=on,index=off
[   74.441036][ T6628] loop1: detected capacity change from 0 to 256
[   74.556359][ T6629] loop0: detected capacity change from 0 to 4096
[   74.592587][ T6629] ntfs3(loop0): ino=3, mi_enum_attr
[   74.648977][ T6644] syz.2.384 uses obsolete (PF_INET,SOCK_PACKET)
[   74.666184][ T6629] ntfs3(loop0): ino=9, attr_set_size_ex
[   74.753651][ T6651] loop0: detected capacity change from 0 to 1024
[   74.782787][ T6651] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0
[   74.799032][ T6651] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0
[   74.807077][ T6651] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.387: Failed to acquire dquot type 0
[   74.825032][ T6651] loop0: lost filesystem error report for type 5 error -5
[   74.830438][    C1] EXT4-fs (loop0): error count since last fsck: 1
[   74.836473][    C1] EXT4-fs (loop0): initial error at time 1787039635: ext4_acquire_dquot:7041
[   74.839906][    C1] EXT4-fs (loop0): last error at time 1787039635: ext4_acquire_dquot:7041
[   74.856814][ T6651] EXT4-fs (loop0): 1 truncate cleaned up
[   74.861667][ T6651] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   74.904748][ T5599] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.226020][ T6659] loop1: detected capacity change from 0 to 131072
[   75.229215][ T6659] F2FS-fs (loop1): Test dummy encryption mode enabled
[   75.231895][ T6659] F2FS-fs (loop1): invalid crc value
[   75.267472][ T6659] F2FS-fs (loop1): access invalid blkaddr:0
[   75.269914][ T6659] CPU: 0 UID: 0 PID: 6659 Comm: syz.1.390 Not tainted syzkaller #0 PREEMPT(full) 
[   75.269955][ T6659] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   75.269964][ T6659] Call Trace:
[   75.269970][ T6659]  <TASK>
[   75.269976][ T6659]  dump_stack_lvl+0xe8/0x150
[   75.270000][ T6659]  __f2fs_is_valid_blkaddr+0xe62/0x14f0
[   75.270025][ T6659]  sanity_check_extent_cache+0x1a3/0x620
[   75.270045][ T6659]  ? f2fs_sanity_check_inline_data+0x70/0x740
[   75.270061][ T6659]  f2fs_iget+0x41fc/0x6230
[   75.270092][ T6659]  f2fs_fill_super+0x4edb/0x77f0
[   75.270138][ T6659]  get_tree_bdev_flags+0x430/0x4f0
[   75.270157][ T6659]  ? __pfx_f2fs_fill_super+0x10/0x10
[   75.270173][ T6659]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[   75.270197][ T6659]  vfs_get_tree+0x92/0x2a0
[   75.270217][ T6659]  do_new_mount+0x319/0xdc0
[   75.270235][ T6659]  ? __pfx_do_new_mount+0x10/0x10
[   75.270251][ T6659]  ? ns_capable+0x89/0xe0
[   75.270266][ T6659]  ? path_mount+0x647/0x1040
[   75.270282][ T6659]  ? user_path_at+0xd4/0x160
[   75.270300][ T6659]  __se_sys_mount+0x31d/0x420
[   75.270319][ T6659]  ? __pfx___se_sys_mount+0x10/0x10
[   75.270338][ T6659]  ? __x64_sys_mount+0x20/0xc0
[   75.270351][ T6659]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   75.270363][ T6659]  do_syscall_64+0x174/0x580
[   75.270378][ T6659]  ? trace_irq_disable+0x3b/0x140
[   75.270420][ T6659]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   75.270433][ T6659] RIP: 0033:0x7f87e8f9f34a
[   75.270446][ T6659] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   75.270453][ T6659] RSP: 002b:00007f87e9d84e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   75.270463][ T6659] RAX: ffffffffffffffda RBX: 00007f87e9d84ee0 RCX: 00007f87e8f9f34a
[   75.270469][ T6659] RDX: 0000200000000100 RSI: 0000200000010600 RDI: 00007f87e9d84ea0
[   75.270473][ T6659] RBP: 0000200000000100 R08: 00007f87e9d84ee0 R09: 0000000000000010
[   75.270478][ T6659] R10: 0000000000000010 R11: 0000000000000246 R12: 0000200000010600
[   75.270483][ T6659] R13: 00007f87e9d84ea0 R14: 00000000000105d6 R15: 00002000000003c0
[   75.270499][ T6659]  </TASK>
[   75.345642][ T6659] loop1: lost filesystem error report for type 5 error -117
[   75.345657][ T6659] F2FS-fs (loop1): sanity_check_extent_cache: inode (ino=3) extent info [0, 0, 4128768] is incorrect, run fsck to fix
[   75.352122][ T6659] loop1: lost filesystem error report for type 5 error -117
[   75.352257][ T6659] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   75.354596][ T6659] F2FS-fs (loop1): Failed to read root inode
[   75.767882][ T6673] loop2: detected capacity change from 0 to 128
[   75.771675][ T6673] ubifs: Bad value for 'compr'
[   75.825606][ T6677] netlink: 12 bytes leftover after parsing attributes in process `syz.2.396'.
[   76.091230][ T6682] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.093736][ T6682] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.360970][ T6682] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   76.384597][ T6682] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   76.967643][ T6684] tipc: New replicast peer: 255.255.255.255
[   77.003204][ T6684] tipc: Enabled bearer <udp:syz2>, priority 10
[   77.007803][ T6735] loop2: detected capacity change from 0 to 128
[   77.020613][ T5674] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.035959][ T5674] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.042550][ T6735] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   77.049235][ T6735] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   77.054742][ T5674] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.061019][ T5674] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.113678][ T5594] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   77.293461][ T6776] tipc: Invalid UDP bearer configuration
[   77.293488][ T6776] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   77.528000][ T6685] libceph: connect (1)[c::]:6789 error -99
[   77.539679][ T6685] libceph: mon0 (1)[c::]:6789 connect error
[   77.578968][ T6688] libceph: connect (1)[c::]:6789 error -99
[   77.579965][ T6685] libceph: connect (1)[c::]:6789 error -99
[   77.581694][ T6688] libceph: mon0 (1)[c::]:6789 connect error
[   77.588306][ T6685] libceph: mon0 (1)[c::]:6789 connect error
[   77.780497][ T6687] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   77.853233][ T6685] libceph: connect (1)[c::]:6789 error -99
[   77.853575][ T6688] libceph: connect (1)[c::]:6789 error -99
[   77.855983][ T6685] libceph: mon0 (1)[c::]:6789 connect error
[   77.858027][ T6688] libceph: mon0 (1)[c::]:6789 connect error
[   77.941112][ T6687] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[   77.945762][ T6687] usb 3-1: config 220 has an invalid interface number: 76 but max is 2
[   77.948938][ T6687] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[   77.952516][ T6687] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[   77.956396][ T6687] usb 3-1: config 220 has no interface number 2
[   77.958824][ T6687] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[   77.963922][ T6687] usb 3-1: config 220 interface 0 has no altsetting 0
[   77.966535][ T6687] usb 3-1: config 220 interface 76 has no altsetting 0
[   77.969183][ T6687] usb 3-1: config 220 interface 1 has no altsetting 0
[   77.974276][ T6687] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   77.977331][ T6687] usb 3-1: Product: syz
[   77.979024][ T6687] usb 3-1: Manufacturer: syz
[   77.981111][ T6687] usb 3-1: SerialNumber: syz
[   78.103775][ T6685] tipc: Node number set to 1459617792
[   78.196474][ T6687] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[   78.198975][ T6687] uvcvideo 3-1:220.0: No valid video chain found.
[   78.201195][ T6687] usb 3-1: selecting invalid altsetting 0
[   78.216043][ T6687] usb 3-1: selecting invalid altsetting 0
[   78.218014][ T6687] usbtest 3-1:220.1: probe with driver usbtest failed with error -22
[   78.223684][ T6687] usb 3-1: USB disconnect, device number 5
[   78.310932][ T6804] ceph: No mds server is up or the cluster is laggy
[   78.314097][ T6810] ceph: No mds server is up or the cluster is laggy
[   78.748923][ T6835] netlink: 128 bytes leftover after parsing attributes in process `syz.2.426'.
[   78.791845][ T6690] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   78.829492][ T6839] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   78.909432][ T6844] netlink: 'syz.2.430': attribute type 1 has an invalid length.
[   78.937917][ T6844] bond2: (slave gretap1): making interface the new active one
[   78.941556][ T6690] usb 2-1: Using ep0 maxpacket: 16
[   78.944465][ T6844] bond2: (slave gretap1): Enslaving as an active interface with an up link
[   78.947680][ T6690] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a
[   78.951660][ T6690] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x3D, changing to 0xD
[   78.956964][ T6690] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 198, changing to 11
[   78.960968][ T6690] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 42683, setting to 1024
[   78.967433][ T6690] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   78.970317][ T6690] usb 2-1: Product: syz
[   78.971851][ T6690] usb 2-1: Manufacturer: syz
[   78.975347][ T6690] usb 2-1: SerialNumber: syz
[   78.988386][ T6690] usb 2-1: config 0 descriptor??
[   78.991088][ T6829] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   78.995080][ T6690] pegasus_notetaker 2-1:0.0: probe with driver pegasus_notetaker failed with error -22
[   79.201968][ T6685] usb 2-1: USB disconnect, device number 6
[   79.741964][ T6855] loop1: detected capacity change from 0 to 128
[   80.041965][ T6685] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   80.190484][ T6685] usb 2-1: Using ep0 maxpacket: 16
[   80.192776][ T6685] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[   80.198582][ T6685] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   80.201247][ T6685] usb 2-1: Product: syz
[   80.202906][ T6685] usb 2-1: Manufacturer: syz
[   80.204457][ T6685] usb 2-1: SerialNumber: syz
[   80.207540][ T6685] usb 2-1: config 0 descriptor??
[   80.416500][ T6690] usb 2-1: USB disconnect, device number 7
[   80.726172][ T6685] IPVS: starting estimator thread 0...
[   80.729569][ T6865] IPVS: sed: TCP 127.0.0.1:21 - no destination available
[   80.821969][ T6866] IPVS: using max 79 ests per chain, 189600 per kthread
[   81.712562][   T24] cfg80211: failed to load regulatory.db
[   82.451445][ T6917] loop0: detected capacity change from 0 to 512
[   82.454325][ T6917] EXT4-fs: Ignoring removed mblk_io_submit option
[   82.459473][ T6917] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #15: comm syz.0.461: corrupted in-inode xattr: e_value size too large
[   82.464904][ T6917] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   82.465127][ T6917] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.461: couldn't read orphan inode 15 (err -117)
[   82.471713][    C1] EXT4-fs (loop0): error count since last fsck: 1
[   82.471723][    C1] EXT4-fs (loop0): initial error at time 1787039642: ext4_iget_extra_inode:5180: inode 15
[   82.471735][    C1] EXT4-fs (loop0): last error at time 1787039642: ext4_iget_extra_inode:5180: inode 15
[   82.480144][ T6917] loop0: lost filesystem error report for type 5 error -117
[   82.481863][ T6917] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   82.491496][ T6685] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[   82.503793][ T6917] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #2: block 12: comm syz.0.461: lblock 3 mapped to illegal pblock 12 (length 1)
[   82.529730][ T5599] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.530555][   T24] usb 3-1: new low-speed USB device number 6 using dummy_hcd
[   82.571206][ T6921] trusted_key: encrypted_key: hex blob is missing
[   82.640563][ T6685] usb 2-1: Using ep0 maxpacket: 8
[   82.642759][ T6685] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[   82.646719][ T6685] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   82.651223][ T6685] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   82.655000][ T6685] usb 2-1: config 0 descriptor??
[   82.692638][   T24] usb 3-1: LPM exit latency is zeroed, disabling LPM.
[   82.695202][   T24] usb 3-1: New USB device found, idVendor=10c4, idProduct=1601, bcdDevice=10.1c
[   82.698661][   T24] usb 3-1: config 8 has no interfaces?
[   82.703332][   T24] usb 3-1: string descriptor 0 read error: -22
[   82.705553][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   82.866323][ T6685] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[   82.919382][ T6687] usb 3-1: USB disconnect, device number 6
[   83.004782][ T6938] netlink: 'syz.0.469': attribute type 2 has an invalid length.
[   83.071393][ T6690] usb 2-1: USB disconnect, device number 8
[   83.468596][ T6942] netlink: 'syz.2.471': attribute type 12 has an invalid length.
[   83.472309][ T6942] netlink: 'syz.2.471': attribute type 29 has an invalid length.
[   83.475640][ T6942] netlink: 252 bytes leftover after parsing attributes in process `syz.2.471'.
[   83.740972][ T6961] netlink: 4 bytes leftover after parsing attributes in process `syz.2.480'.
[   83.796078][ T6965] program syz.1.482 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   83.889955][ T6968] ALSA: mixer_oss: invalid OSS volume ''
[   84.670114][ T6972] overlayfs: cannot append lower layer
[   84.833840][ T6974] loop1: detected capacity change from 0 to 40427
[   84.841992][ T6974] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[   84.851991][ T6974] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   84.856144][ T6974] F2FS-fs (loop1): invalid crc value
[   84.859048][ T6970] loop2: detected capacity change from 0 to 131072
[   84.865125][ T6970] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0)
[   84.868418][ T6970] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   84.873918][ T6970] F2FS-fs (loop2): invalid crc value
[   84.913980][ T6970] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   84.915685][ T6974] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   84.923950][ T6970] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   84.925241][ T6974] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   84.926495][ T6970] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[   84.928738][ T6974] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   85.185874][ T6984] XFS (mtdblock0): Invalid superblock magic number
[   85.213708][ T6984] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[   85.213708][ T6984] 
[   85.222844][ T6984] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[   85.234540][ T6984] CIFS: Attempting to mount //127.0.0.1/share
[   85.633214][ T7009] loop2: detected capacity change from 0 to 8
[   85.638949][ T7009] SQUASHFS error: zlib decompression failed, data probably corrupt
[   85.642581][ T7009] SQUASHFS error: Failed to read block 0x9b: -5
[   85.645278][ T7009] SQUASHFS error: Unable to read metadata cache entry [99]
[   85.648352][ T7009] SQUASHFS error: Unable to read inode 0x127
[   86.031828][ T6984] CIFS: VFS: Error connecting to socket. Aborting operation.
[   86.035420][ T6984] CIFS: VFS: cifs_mount failed w/return code = -4
[   86.261641][ T6687] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   86.410495][ T6687] usb 3-1: Using ep0 maxpacket: 32
[   86.414372][ T6687] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   86.421278][ T6687] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   86.425014][ T6687] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   86.428158][ T6687] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.442088][ T6687] usb 3-1: config 0 descriptor??
[   86.451965][ T6687] hub 3-1:0.0: USB hub found
[   86.619623][ T7052] loop0: detected capacity change from 0 to 32768
[   86.641886][ T7052] JBD2: Ignoring recovery information on journal
[   86.653213][ T6687] hub 3-1:0.0: 16 ports detected
[   86.656006][ T6687] hub 3-1:0.0: insufficient power available to use all downstream ports
[   86.702119][ T7052] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   86.751206][ T5599] ocfs2: Unmounting device (7,0) on (node local)
[   86.882379][ T6687] hub 3-1:0.0: hub_hub_status failed (err = -71)
[   86.887300][ T6687] hub 3-1:0.0: config failed, can't get hub status (err -71)
[   86.896476][ T6687] usbhid 3-1:0.0: can't add hid device: -71
[   86.899112][ T6687] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[   86.946007][ T6687] usb 3-1: USB disconnect, device number 7
[   86.957242][ T7064] netlink: 8 bytes leftover after parsing attributes in process `syz.0.518'.
[   86.986275][ T7064] bond2: up delay (4) is not a multiple of miimon (7), value rounded to 0 ms
[   86.989530][ T7064] bond2: down delay (8) is not a multiple of miimon (7), value rounded to 7 ms
[   86.993403][ T7064] bond2: entered allmulticast mode
[   87.073810][ T7067] af_packet: tpacket_rcv: packet too big, clamped from 40 to 4294967272. macoff=96
[   87.675199][ T7104] loop0: detected capacity change from 0 to 32768
[   87.683420][ T7104] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.537 (7104)
[   87.726482][ T7104] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   87.729624][ T7104] BTRFS info (device loop0): using sha256 checksum algorithm
[   87.804583][ T7104] BTRFS info (device loop0): rebuilding free space tree
[   87.827290][ T7104] BTRFS info (device loop0): setting nodatasum
[   87.829274][ T7104] BTRFS info (device loop0): setting nodatacow
[   87.841475][ T7104] BTRFS info (device loop0): turning off barriers
[   87.845519][ T7104] BTRFS info (device loop0): turning on sync discard
[   87.851544][ T7104] BTRFS info (device loop0): enabling free space tree
[   87.855884][ T7104] BTRFS info (device loop0): force clearing of disk cache
[   87.911061][ T5599] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   88.075050][ T7135] netlink: 'syz.0.543': attribute type 11 has an invalid length.
[   88.120573][ T6687] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[   88.251733][ T7141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.546'.
[   88.270504][ T6687] usb 2-1: Using ep0 maxpacket: 8
[   88.272850][ T6687] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[   88.279203][ T6687] usb 2-1: config 2 has an invalid interface number: 31 but max is 0
[   88.284275][ T6687] usb 2-1: config 2 has no interface number 0
[   88.290552][ T6687] usb 2-1: config 2 interface 31 has no altsetting 0
[   88.299311][ T6687] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.304159][ T6687] usb 2-1: Product: syz
[   88.305863][ T6687] usb 2-1: Manufacturer: syz
[   88.307456][ T6687] usb 2-1: SerialNumber: syz
[   88.406365][ T7149] loop0: detected capacity change from 0 to 4096
[   88.507920][ T7151] loop0: detected capacity change from 0 to 4096
[   88.511328][ T7151] EXT4-fs: Ignoring removed mblk_io_submit option
[   88.514138][ T7151] EXT4-fs (loop0): Test dummy encryption mode enabled
[   88.526310][ T6687] ch9200 2-1:2.31: probe with driver ch9200 failed with error -71
[   88.533969][ T7151] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   88.563285][ T7151] EXT4-fs: Cannot change quota options when quota turned on
[   88.567149][ T6687] usb 2-1: USB disconnect, device number 9
[   88.587789][ T5599] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.970274][ T7171] loop0: detected capacity change from 0 to 64
[   89.113299][   T34] audit: type=1326 audit(1787039649.371:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7181 comm="syz.1.564" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e8f9e0d9 code=0x7ffc0000
[   89.123384][   T34] audit: type=1326 audit(1787039649.371:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7181 comm="syz.1.564" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e8f9e0d9 code=0x7ffc0000
[   89.133323][   T34] audit: type=1326 audit(1787039649.381:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7181 comm="syz.1.564" exe="/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f87e8f9e0d9 code=0x7ffc0000
[   89.146925][   T34] audit: type=1326 audit(1787039649.381:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7181 comm="syz.1.564" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e8f9e0d9 code=0x7ffc0000
[   89.153819][   T34] audit: type=1326 audit(1787039649.381:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7181 comm="syz.1.564" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e8f9e0d9 code=0x7ffc0000
[   89.281116][ T7193] loop0: detected capacity change from 0 to 512
[   89.314222][ T7193] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.0.569: corrupted xattr block 95: invalid header
[   89.319500][ T7193] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   89.320167][ T7193] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2860: Unable to expand inode 11. Delete some EAs or run e2fsck.
[   89.323199][    C1] EXT4-fs (loop0): error count since last fsck: 1
[   89.323214][    C1] EXT4-fs (loop0): initial error at time 1787039649: ext4_expand_extra_isize_ea:2810: inode 11
[   89.323234][    C1] EXT4-fs (loop0): last error at time 1787039649: ext4_expand_extra_isize_ea:2810: inode 11
[   89.338463][ T7193] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.569: bg 0: block 7: invalid block bitmap
[   89.342583][ T7193] loop0: lost filesystem error report for type 5 error -117
[   89.345730][ T7193] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem
[   89.351573][ T7193] loop0: lost filesystem error report for type 5 error -117
[   89.352415][ T7193] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2972: inode #11: comm syz.0.569: corrupted xattr block 95: invalid header
[   89.359603][ T7193] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   89.363364][ T7193] EXT4-fs warning (device loop0): ext4_evict_inode:287: xattr delete (err -117)
[   89.369259][ T7193] EXT4-fs (loop0): 1 orphan inode deleted
[   89.372475][ T7193] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   89.398723][ T5599] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.422129][ T6687] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[   89.584071][ T6687] usb 2-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=c4.36
[   89.593050][ T6687] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   89.595687][ T6687] usb 2-1: Product: syz
[   89.597116][ T6687] usb 2-1: Manufacturer: syz
[   89.598619][ T6687] usb 2-1: SerialNumber: syz
[   89.824329][ T6687] mdc800 2-1:39.0: probe fails -> wrong Number of Configuration
[   89.829417][ T6687] usb 2-1: USB disconnect, device number 10
[   90.130224][   T34] audit: type=1326 audit(1787039650.381:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7215 comm="syz.2.578" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa9ea39e0d9 code=0x0
[   90.221415][ T7218] PKCS8: Unsupported PKCS#8 version
[   90.636720][ T7230] netlink: 'syz.0.585': attribute type 10 has an invalid length.
[   91.155634][ T7247] ima: policy update failed
[   91.158973][   T34] audit: type=1802 audit(1787039651.411:9): pid=7247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.593" res=0 errno=0
[   91.266446][ T7258] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   91.347655][ T7267] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.2.602:7267
[   91.542936][ T7286] CIFS: Attempting to mount //127.0.0.1/share
[   92.074073][ T7298] tmpfs: Bad value for 'mpol'
[   92.198803][ T7306] netlink: 'syz.1.618': attribute type 21 has an invalid length.
[   92.203564][ T7306] netlink: 132 bytes leftover after parsing attributes in process `syz.1.618'.
[   92.292329][ T7313] netlink: 16 bytes leftover after parsing attributes in process `syz.1.621'.
[   92.328666][ T7318] binder: 7315:7318 ioctl 4018620d 0 returned -22
[   92.331548][ T7318] binder: 7315:7318 ioctl c0c89425 0 returned -22
[   92.430835][ T7322] CacheFiles: Failed to register: -95
[   92.437159][ T7286] CIFS: VFS: Error connecting to socket. Aborting operation.
[   92.443562][ T7286] CIFS: VFS: cifs_mount failed w/return code = -4
[   92.521598][ T7324] loop1: detected capacity change from 0 to 8
[   92.582069][ T7324] SQUASHFS error: lzo decompression failed, data probably corrupt
[   92.592818][ T7324] SQUASHFS error: Failed to read block 0x91: -5
[   92.602763][ T7324] SQUASHFS error: Unable to read metadata cache entry [8f]
[   92.613525][ T7324] SQUASHFS error: Unable to read inode 0x11f
[   93.164312][ T7340] netlink: 'syz.2.633': attribute type 8 has an invalid length.
[   93.167329][ T7340] sch_fq: defrate 0 ignored.
[   93.527194][   T34] audit: type=1326 audit(1787039653.781:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7345 comm="syz.2.636" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9ea39e0d9 code=0x7ffc0000
[   93.535822][   T34] audit: type=1326 audit(1787039653.781:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7345 comm="syz.2.636" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9ea39e0d9 code=0x7ffc0000
[   93.549158][   T34] audit: type=1326 audit(1787039653.791:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7345 comm="syz.2.636" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9ea39e0d9 code=0x7ffc0000
[   93.875562][ T7358] loop2: detected capacity change from 0 to 512
[   93.881742][ T7358] EXT4-fs: Ignoring removed bh option
[   93.906204][ T7358] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[   93.926586][ T7358] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e02c, mo2=0002]
[   93.929641][ T7358] EXT4-fs (loop2): orphan cleanup on readonly fs
[   93.936326][ T7358] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #11: comm syz.2.643: attempt to clear invalid blocks 1024 len 1
[   93.942839][ T7358] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   93.950460][    C0] EXT4-fs (loop2): error count since last fsck: 1
[   93.955380][    C0] EXT4-fs (loop2): initial error at time 1787039654: ext4_clear_blocks:876: inode 11
[   93.958342][    C0] EXT4-fs (loop2): last error at time 1787039654: ext4_clear_blocks:876: inode 11
[   93.964282][ T7358] EXT4-fs (loop2): Remounting filesystem read-only
[   93.976142][ T7358] EXT4-fs (loop2): 1 truncate cleaned up
[   93.986309][ T7358] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[   94.028616][ T7358] EXT4-fs: can't change dax mount option while remounting
[   94.127584][ T7369] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.643: dx entry: limit 0 != root limit 125
[   94.132624][ T7369] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.643: Corrupt directory, running e2fsck is recommended
[   94.140893][ T7369] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.643: dx entry: limit 0 != root limit 125
[   94.148942][ T7369] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.643: Corrupt directory, running e2fsck is recommended
[   94.161011][ T7371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.647'.
[   94.442240][ T7375] loop0: detected capacity change from 0 to 8192
[   94.458068][ T7375] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[   94.565221][ T7375] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[   94.581182][ T7375] ntfs3(loop0): Failed to load $Extend (-2).
[   94.583972][ T7375] ntfs3(loop0): Failed to initialize $Extend.
[   94.839050][ T7387] loop0: detected capacity change from 0 to 128
[   94.872800][ T7387] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   94.890176][ T7387] ext4 filesystem being mounted at /192/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   94.977956][ T5599] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   94.981421][ T6687] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[   95.158850][ T6687] usb 2-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00
[   95.176754][ T6687] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   95.197061][ T6687] usb 2-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4
[   95.217203][ T6687] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   95.463562][ T5594] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[   95.654121][ T7424] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   95.771848][ T5600] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[   95.776190][ T5600] Bluetooth: hci2: Injecting HCI hardware error event
[   95.779257][ T5597] Bluetooth: hci2: hardware error 0x00
[   95.858526][    C0] usb 2-1: received EP1 urb->status = -71
[   95.863649][ T6687] snd-usb-caiaq 2-1:1.0: bogus number of streams: 0
[   95.868297][ T6687] snd-usb-caiaq 2-1:1.0: Unable to set up audio system (ret=-22)
[   95.873990][ T6687] usb 2-1: unable to init card! (ret=-22)
[   95.880804][ T6687] snd-usb-caiaq 2-1:1.0: probe with driver snd-usb-caiaq failed with error -22
[   95.892339][ T6687] usb 2-1: USB disconnect, device number 11
[   95.953582][ T7428] loop2: detected capacity change from 0 to 40427
[   95.956369][ T7428] f2fs: Unknown parameter '0177777777777777777777700000000000000000000'
[   96.047284][ T7444] block2mtd: error: cannot open device #! 
[   96.047284][ T7444] ^$.TxzZTjrؐZI
[   96.248755][ T7448] loop2: detected capacity change from 0 to 32768
[   96.275880][ T7448] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   96.310105][ T7448] XFS (loop2): Starting recovery (logdev: internal)
[   96.322841][ T7448] XFS (loop2): Ending recovery (logdev: internal)
[   96.358832][ T5594] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   96.568312][ T7479] netlink: 'syz.2.690': attribute type 29 has an invalid length.
[   96.642957][ T7485] Bluetooth: MGMT ver 1.23
[   97.342515][ T7506] loop1: detected capacity change from 0 to 1024
[   97.351253][ T7506] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[   97.366702][ T7506] JBD2: no valid journal superblock found
[   97.374237][ T7506] EXT4-fs (loop1): Could not load journal inode
[   97.608907][ T7510] loop1: detected capacity change from 0 to 32768
[   97.615832][ T7510] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.705 (7510)
[   97.627054][ T7510] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   97.630501][ T7510] BTRFS info (device loop1): using sha256 checksum algorithm
[   97.667427][ T7510] BTRFS info (device loop1): enabling ssd optimizations
[   97.669803][ T7510] BTRFS info (device loop1): turning on async discard
[   97.672114][ T7510] BTRFS info (device loop1): enabling free space tree
[   97.702537][ T5603] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   97.823014][ T7530] netlink: 4 bytes leftover after parsing attributes in process `syz.1.706'.
[   97.854686][ T5597] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[   98.175218][ T7536] loop1: detected capacity change from 0 to 32768
[   98.185236][ T7536] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[   98.205608][ T7536] XFS (loop1): Ending clean mount
[   98.242055][ T5603] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[   98.330686][ T6685] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[   98.481090][ T6685] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00
[   98.486029][ T6685] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[   98.490089][ T6685] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[   98.496481][ T6685] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.499780][ T6685] usb 3-1: Product: syz
[   98.501762][ T6685] usb 3-1: Manufacturer: syz
[   98.503666][ T6685] usb 3-1: SerialNumber: syz
[   98.738803][ T6685] usb 3-1: Limiting number of CPorts to U8_MAX
[   99.559988][    C1] usb 3-1: failed to resubmit arpc in-urb: -19
[   99.562098][    C1] usb 3-1: failed to resubmit arpc in-urb: -19
[   99.564184][    C1] usb 3-1: failed to resubmit in-urb: -19
[   99.566356][    C1] usb 3-1: failed to resubmit in-urb: -19
[   99.568404][    C1] usb 3-1: failed to resubmit in-urb: -19
[   99.570617][    C1] usb 3-1: failed to resubmit in-urb: -19
[   99.573731][ T6685] usb 3-1: USB disconnect, device number 8
[   99.577897][ T6685] usb 3-1: failed to send ARPC request 4: -19
[   99.580207][ T6685] usb 3-1: failed to execute ARPC: -19
[   99.583719][ T6685] usb 3-1: failed to flush cport 0: -19
[   99.585577][ T6685] greybus greybus1: 0/0:0: failed to flush host cport: -19
[   99.586449][ T7561] loop0: detected capacity change from 0 to 32768
[   99.589203][ T6685] usb 3-1: failed to send ARPC request 2: -19
[   99.595002][ T6685] usb 3-1: failed to execute ARPC: -19
[   99.598976][ T6685] usb 3-1: failed to quiesce cport 0: -19 (0)
[   99.600757][ T7561] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.718 (7561)
[   99.603724][ T6685] greybus greybus1: 0/0:0: failed to quiesce host cport: -19
[   99.612488][ T6685] usb 3-1: failed to send ARPC request 3: -19
[   99.614740][ T6685] usb 3-1: failed to execute ARPC: -19
[   99.616518][ T6685] usb 3-1: failed to clear cport 0: -19
[   99.626789][ T7561] BTRFS info (device loop0): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b
[   99.627599][ T6685] greybus greybus1: 0/0:0: failed to clear host cport: -19
[   99.631960][ T7561] BTRFS info (device loop0): using xxhash64 checksum algorithm
[   99.722947][ T7561] BTRFS info (device loop0): enabling ssd optimizations
[   99.725815][ T7561] BTRFS info (device loop0): turning on async discard
[   99.728319][ T7561] BTRFS info (device loop0): enabling free space tree
[   99.749206][ T5599] BTRFS info (device loop0): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b
[   99.765088][ T6687] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[   99.886906][ T7585] loop0: detected capacity change from 0 to 4096
[   99.890117][ T7585] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[   99.903909][ T7585] ntfs3(loop0): ino=19, mi_enum_attr
[   99.905786][ T7585] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[   99.910266][ T7585] ntfs3(loop0): Failed to initialize $Extend/$ObjId.
[   99.928313][   T34] kauditd_printk_skb: 11 callbacks suppressed
[   99.928324][   T34] audit: type=1800 audit(1787039660.181:24): pid=7585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.722" name="file1" dev="loop0" ino=33 res=0 errno=0
[   99.943063][ T6687] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[   99.949307][ T6687] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.963161][ T6687] usb 2-1: config 0 descriptor??
[   99.972859][ T6687] cp210x 2-1:0.0: cp210x converter detected
[   99.981863][ T7587] netlink: 8 bytes leftover after parsing attributes in process `syz.0.723'.
[  100.079087][ T7595] netlink: 12 bytes leftover after parsing attributes in process `syz.2.727'.
[  100.111254][ T7597] loop0: detected capacity change from 0 to 64
[  100.233810][ T7607] netlink: 'syz.2.732': attribute type 12 has an invalid length.
[  100.241200][ T7607] netlink: 'syz.2.732': attribute type 29 has an invalid length.
[  100.246288][ T7607] netlink: 148 bytes leftover after parsing attributes in process `syz.2.732'.
[  100.304531][ T7613] loop0: detected capacity change from 0 to 512
[  100.324163][ T7613] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 49)
[  100.335447][ T7613] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 49)
[  100.343303][ T7613] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 49)
[  100.346801][ T7613] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 49)
[  100.349777][ T7613] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 49)
[  100.353015][ T7613] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 49)
[  100.356479][ T7613] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 49)
[  100.360115][ T7613] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 49)
[  100.365272][ T7613] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 49)
[  100.372604][ T7613] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 49)
[  100.379275][   T34] audit: type=1800 audit(1787039660.631:25): pid=7613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.736" name="file0" dev="loop0" ino=1048598 res=0 errno=0
[  100.580331][ T6687] cp210x 2-1:0.0: failed to get vendor val 0x370c size 73: -71
[  100.587682][ T6687] cp210x 2-1:0.0: GPIO initialisation failed: -71
[  100.619495][ T6687] usb 2-1: cp210x converter now attached to ttyUSB0
[  100.640524][ T6687] usb 2-1: USB disconnect, device number 12
[  100.640741][ T6685] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  100.648721][ T6687] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  100.652355][ T6687] cp210x 2-1:0.0: device disconnected
[  100.800925][ T6685] usb 3-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00
[  100.804972][ T6685] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  100.808888][ T6685] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.814157][ T6685] usb 3-1: config 0 descriptor??
[  100.816532][ T7618] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  101.176888][ T7634] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  101.180322][ T7634] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  101.237839][ T6685] asus 0003:0B05:1ABE.0001: unknown main item tag 0x0
[  101.246032][ T6685] asus 0003:0B05:1ABE.0001: unknown main item tag 0x0
[  101.250923][ T6685] asus 0003:0B05:1ABE.0001: unknown main item tag 0x0
[  101.255417][ T6685] asus 0003:0B05:1ABE.0001: unknown main item tag 0x0
[  101.260214][ T6685] asus 0003:0B05:1ABE.0001: unknown main item tag 0x0
[  101.265580][ T6685] asus 0003:0B05:1ABE.0001: unknown main item tag 0x0
[  101.267878][ T6685] asus 0003:0B05:1ABE.0001: unknown main item tag 0x0
[  101.271021][ T6685] asus 0003:0B05:1ABE.0001: unknown main item tag 0x0
[  101.273184][ T6685] asus 0003:0B05:1ABE.0001: unknown main item tag 0x0
[  101.275336][ T6685] asus 0003:0B05:1ABE.0001: unknown main item tag 0x0
[  101.278777][ T6685] asus 0003:0B05:1ABE.0001: reserved main item tag 0xd
[  101.290796][ T6685] asus 0003:0B05:1ABE.0001: hidraw0: USB HID v7f.fd Device [HID 0b05:1abe] on usb-dummy_hcd.2-1/input0
[  101.369947][ T7644] loop1: detected capacity change from 0 to 256
[  101.625872][ T6685] asus 0003:0B05:1ABE.0001: Asus handshake 5a failed to receive ack: -71
[  101.657708][ T6685] usb 3-1: USB disconnect, device number 9
[  102.647442][ T7665] loop1: detected capacity change from 0 to 256
[  102.655745][ T7665] exfat: Deprecated parameter 'utf8'
[  102.664292][ T7665] exfat: Deprecated parameter 'namecase'
[  102.669395][ T7665] exfat: Deprecated parameter 'namecase'
[  102.673164][ T7665] exfat: Deprecated parameter 'utf8'
[  102.690729][ T7665] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[  102.711290][ T7665] exFAT-fs (loop1): failed to test first cluster bit of root dir(5)
[  102.795778][ T7660] exFAT-fs (loop1): start_clu is invalid cluster(0x400)
[  102.929432][ T7684] loop1: detected capacity change from 0 to 512
[  102.932404][ T7684] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  102.947151][ T7684] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.770: invalid indirect mapped block 32768 (level 2)
[  102.960085][ T7684] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  102.965488][ T7684] EXT4-fs (loop1): Remounting filesystem read-only
[  102.971508][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  102.973615][    C1] EXT4-fs (loop1): initial error at time 1787039663: ext4_free_branches:1023: inode 16
[  102.976538][    C1] EXT4-fs (loop1): last error at time 1787039663: ext4_free_branches:1023: inode 16
[  102.996448][ T7684] EXT4-fs (loop1): 1 orphan inode deleted
[  102.998346][ T7684] EXT4-fs (loop1): 1 truncate cleaned up
[  103.000998][ T7684] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  103.008639][ T7684] EXT4-fs (loop1): shut down requested (2)
[  103.011344][ T7684] EXT4-fs warning (device loop1): empty_inline_dir:1785: bad inline directory (dir #12) - inode 13, rec_len 784, name_len 5inline size 60
[  103.029297][ T5603] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.055770][ T7693] tmpfs: Bad value for 'mpol'
[  103.340524][ T6685] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  103.451756][   T24] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  103.490498][ T6685] usb 2-1: Using ep0 maxpacket: 32
[  103.492937][ T6685] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  103.497198][ T6685] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  103.502813][ T6685] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  103.505514][ T6685] usb 2-1: Product: syz
[  103.506931][ T6685] usb 2-1: Manufacturer: syz
[  103.508465][ T6685] usb 2-1: SerialNumber: syz
[  103.511412][ T6685] usb 2-1: config 0 descriptor??
[  103.514491][ T7698] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  103.519893][ T6685] hub 2-1:0.0: bad descriptor, ignoring hub
[  103.522641][ T6685] hub 2-1:0.0: probe with driver hub failed with error -5
[  103.600505][   T24] usb 3-1: Using ep0 maxpacket: 16
[  103.602712][   T24] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  103.606652][   T24] usb 3-1: config index 0 descriptor too short (expected 51443, got 18)
[  103.611337][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.613816][   T24] usb 3-1: Product: syz
[  103.615130][   T24] usb 3-1: Manufacturer: syz
[  103.616602][   T24] usb 3-1: SerialNumber: syz
[  103.624134][   T24] r8152-cfgselector 3-1: Unknown version 0x0000
[  103.626141][   T24] r8152-cfgselector 3-1: config 0 descriptor??
[  103.830733][ T6690] usb 2-1: USB disconnect, device number 13
[  104.171249][ T6690] r8152-cfgselector 3-1: USB disconnect, device number 10
[  104.489378][ T7713] loop1: detected capacity change from 0 to 2048
[  104.504891][ T7713] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  104.509082][ T7713] ext4 filesystem being mounted at /233/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  104.523000][ T7713] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.782: bg 0: block 368: padding at end of block bitmap is not set
[  104.529871][ T7713] fs-verity (loop1, inode 13): ext4_end_enable_verity() failed with err -28
[  104.541065][ T7713] syz.1.782 (7713) used greatest stack depth: 20488 bytes left
[  104.547006][ T5603] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.880805][ T7725] netlink: NAT attribute type 0 has unexpected length (1 != 0)
[  104.883676][ T7725] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  104.997819][ T7729] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind()
[  105.002131][ T7729] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP
[  105.004822][ T7729] udc dummy_udc.0: failed to start g1: -22
[  105.006633][ T7729] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22
[  105.013850][ T7729] UDC core: g1: couldn't find an available UDC or it's busy
[  105.031372][ T7729] netlink: 4 bytes leftover after parsing attributes in process `syz.2.789'.
[  105.256854][ T7749] loop0: detected capacity change from 0 to 16
[  105.270913][ T6685] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  105.313603][ T7749] erofs (device loop0): bogus i_mode (177777) @ nid 36
[  105.391945][ T7751] loop0: detected capacity change from 0 to 8192
[  105.421008][ T6685] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  105.428718][ T6685] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.434864][ T6685] usb 2-1: config 0 descriptor??
[  105.556002][ T7759] netlink: 8 bytes leftover after parsing attributes in process `syz.0.802'.
[  105.559333][ T7761] loop2: detected capacity change from 0 to 1024
[  105.559481][ T7759] netlink: 8 bytes leftover after parsing attributes in process `syz.0.802'.
[  105.563242][ T7761] EXT4-fs: Ignoring removed mblk_io_submit option
[  105.566882][ T7761] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  105.571607][ T7759] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Add Mapping response ret = -22)
[  105.590837][ T7761] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 2: comm syz.2.803: lblock 2 mapped to illegal pblock 2 (length 1)
[  105.598258][ T7761] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  105.599230][ T7761] EXT4-fs (loop2): Remounting filesystem read-only
[  105.602502][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  105.602512][    C0] EXT4-fs (loop2): initial error at time 1787039665: ext4_map_blocks:791: inode 3: block 2
[  105.602528][    C0] EXT4-fs (loop2): last error at time 1787039665: ext4_map_blocks:791: inode 3: block 2
[  105.614470][ T7761] Quota error (device loop2): qtree_write_dquot: dquota write failed
[  105.617392][ T7761] Quota error (device loop2): v2_write_file_info: Can't write info structure
[  105.621960][ T7761] EXT4-fs (loop2): 1 orphan inode deleted
[  105.624951][ T7761] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  105.643837][ T5594] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.670201][ T7735] batman_adv: batadv0: Adding interface: macvtap1
[  105.672342][ T7735] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  105.684552][ T7735] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active
[  105.700781][ T7767] netlink: 104 bytes leftover after parsing attributes in process `syz.0.806'.
[  105.772550][ T7735] batman_adv: batadv0: Removing interface: macvtap1
[  105.865072][ T6685] usb 2-1: USB disconnect, device number 14
[  105.913817][ T7775] netlink: 4 bytes leftover after parsing attributes in process `syz.0.809'.
[  105.952521][ T7771] loop2: detected capacity change from 0 to 32768
[  105.962170][ T7771] XFS (loop2): DAX unsupported by block device. Turning off DAX.
[  105.978005][ T7771] XFS (loop2): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  105.981098][ T7782] openvswitch: netlink: Missing key (keys=40, expected=100)
[  106.015376][ T7771] XFS (loop2): Ending clean mount
[  106.025793][ T7771] XFS (loop2): Quotacheck needed: Please wait.
[  106.058379][ T7771] XFS (loop2): Quotacheck: Done.
[  106.083724][ T5594] XFS (loop2): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  106.153587][ T7791] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  106.153587][ T7791] The task syz.0.812 (7791) triggered the difference, watch for misbehavior.
[  106.229530][ T7795] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.814'.
[  106.381249][ T7798] Process accounting resumed
[  106.422613][ T7800] jffs2: notice: (7800) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  106.602785][ T7817] loop2: detected capacity change from 0 to 1024
[  106.686905][ T7823] sctp: [Deprecated]: syz.1.827 (pid 7823) Use of struct sctp_assoc_value in delayed_ack socket option.
[  106.686905][ T7823] Use struct sctp_sack_info instead
[  106.896439][ T7838] netlink: 'syz.1.834': attribute type 39 has an invalid length.
[  106.912968][ T7837] bcache: register_bcache() error : failed to open device
[  107.224613][ T7852] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  107.669922][ T7870] netlink: 'syz.1.850': attribute type 1 has an invalid length.
[  107.774232][ T7874] No source specified
[  107.788367][ T7870] 8021q: adding VLAN 0 to HW filter on device bond1
[  108.272828][ T7890] 8021q: adding VLAN 0 to HW filter on device bond0
[  108.276303][ T7890] 8021q: adding VLAN 0 to HW filter on device team0
[  108.292442][ T7890] 8021q: adding VLAN 0 to HW filter on device batadv0
[  108.332323][ T7890] batman_adv: batadv0: Interface activated: batadv_slave_0
[  108.336404][ T7890] batman_adv: batadv0: Interface activated: batadv_slave_1
[  108.341691][ T7890] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  108.345614][ T7890] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  108.354463][ T7890] veth1_macvtap: left promiscuous mode
[  108.356809][ T7890] veth0_macvtap: left promiscuous mode
[  108.359184][ T7890] veth0_macvtap: entered promiscuous mode
[  108.362795][ T7890] veth1_macvtap: entered promiscuous mode
[  108.368217][ T7890] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  108.371509][ T7890] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  108.374773][ T7890] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  108.377834][ T7890] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  108.393361][   T82] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.395926][   T82] bridge0: port 1(bridge_slave_0) entered forwarding state
[  108.612228][   T82] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.614551][   T82] bridge0: port 2(bridge_slave_1) entered forwarding state
[  108.692859][ T5631] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  108.698243][ T5631] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  108.714780][ T5631] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  108.725182][ T5631] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  108.784661][ T7910] netlink: 12 bytes leftover after parsing attributes in process `syz.1.865'.
[  108.793993][ T7910] netlink: 16 bytes leftover after parsing attributes in process `syz.1.865'.
[  108.927411][ T7923] misc userio: Can't change port type on an already running userio instance
[  109.097836][ T7927] loop1: detected capacity change from 0 to 1024
[  109.119023][ T7927] hfsplus: request for non-existent node 16777217 in B*Tree
[  109.122125][ T7927] hfsplus: request for non-existent node 16777217 in B*Tree
[  109.142240][ T7927] hfsplus: request for non-existent node 16777217 in B*Tree
[  109.145365][ T7927] hfsplus: request for non-existent node 16777217 in B*Tree
[  109.148432][ T7927] hfsplus: xattr search failed
[  109.151715][ T7927] hfsplus: request for non-existent node 16777217 in B*Tree
[  109.154843][ T7927] hfsplus: request for non-existent node 16777217 in B*Tree
[  109.157844][ T7927] hfsplus: xattr search failed
[  110.217133][ T7958] netlink: 12 bytes leftover after parsing attributes in process `syz.1.888'.
[  110.338292][ T7962] loop0: detected capacity change from 0 to 4096
[  110.348499][ T7962] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512).
[  110.361581][ T7962] ntfs3(loop0): Failed to load $BadClus (-22).
[  110.437489][ T7968] netlink: 'syz.1.893': attribute type 83 has an invalid length.
[  110.494287][ T7972] program syz.1.895 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  110.605952][   T24] Process accounting resumed
[  111.418968][ T7988] netdevsim netdevsim2: Firmware load for './file0/file0/..' refused, path contains '..' component
[  111.476904][ T7992] loop1: detected capacity change from 0 to 1024
[  111.597387][ T8003] xt_CT: You must specify a L4 protocol and not use inversions on it
[  111.855823][ T8008] loop1: detected capacity change from 0 to 32768
[  111.866987][ T8008] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  111.888382][ T8008] XFS (loop1): Ending clean mount
[  111.895822][ T8008] XFS (loop1): Quotacheck needed: Please wait.
[  111.933564][ T8008] XFS (loop1): Quotacheck: Done.
[  111.945753][   T34] audit: type=1800 audit(1787039672.201:26): pid=8008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.910" name="file1" dev="loop1" ino=4422 res=0 errno=0
[  111.987394][ T5603] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  112.760644][ T8048] loop2: detected capacity change from 0 to 32768
[  112.774086][ T8048] JBD2: Ignoring recovery information on journal
[  112.815701][ T8048] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  112.861944][ T5594] ocfs2: Unmounting device (7,2) on (node local)
[  112.910285][ T8056] mmap: syz.1.927 (8056) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  112.945624][ T8058] loop1: detected capacity change from 0 to 256
[  113.014377][ T8062] loop2: detected capacity change from 0 to 512
[  113.023400][ T8062] EXT4-fs (loop2): Test dummy encryption mode enabled
[  113.031560][ T8062] EXT4-fs (loop2): 1 truncate cleaned up
[  113.038618][ T8062] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  113.083837][ T5594] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.178812][ T8076] netlink: 'syz.2.935': attribute type 21 has an invalid length.
[  113.240669][ T8081] loop1: detected capacity change from 0 to 8
[  113.258777][ T8081] SQUASHFS error: zlib decompression failed, data probably corrupt
[  113.263059][ T8081] SQUASHFS error: Failed to read block 0x4de: -5
[  113.274383][ T8081] SQUASHFS error: zlib decompression failed, data probably corrupt
[  113.278862][ T8081] SQUASHFS error: Failed to read block 0x4df: -5
[  113.284315][ T8085] CIFS: Attempting to mount //127.0.0.1/share
[  113.284950][ T8081] SQUASHFS error: zlib decompression failed, data probably corrupt
[  113.288870][ T8081] SQUASHFS error: Failed to read block 0x4e0: -5
[  113.293111][ T8081] SQUASHFS error: zlib decompression failed, data probably corrupt
[  113.295630][ T8081] SQUASHFS error: Failed to read block 0x4de: -5
[  113.297777][   T34] audit: type=1800 audit(1787039673.551:27): pid=8081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.937" name="file1" dev="loop1" ino=5 res=0 errno=0
[  113.667124][ T8110] netlink: 'syz.1.951': attribute type 2 has an invalid length.
[  113.673704][ T8110] netlink: 'syz.1.951': attribute type 1 has an invalid length.
[  113.725774][ T8113] loop0: detected capacity change from 0 to 256
[  113.728263][ T8113] exfat: Deprecated parameter 'utf8'
[  113.744593][ T8113] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d)
[  113.815675][ T8119] macvlan0: entered promiscuous mode
[  113.820630][ T8119] netlink: 'syz.0.955': attribute type 1 has an invalid length.
[  113.823171][ T8119] netlink: 'syz.0.955': attribute type 2 has an invalid length.
[  113.853970][ T8121] netlink: 24 bytes leftover after parsing attributes in process `syz.1.956'.
[  114.023170][ T8136] kAFS: unable to lookup cell '/'
[  114.117154][ T8085] CIFS: VFS: Error connecting to socket. Aborting operation.
[  114.123048][ T8085] CIFS: VFS: cifs_mount failed w/return code = -4
[  114.525260][ T8156] openvswitch: netlink: Missing key (keys=40, expected=100)
[  114.565072][ T8158] netlink: 'syz.2.973': attribute type 9 has an invalid length.
[  115.269538][ T8188] loop1: detected capacity change from 0 to 512
[  115.370822][ T8188] EXT4-fs warning (device loop1): dx_probe:837: inode #2: comm syz.1.985: Unimplemented hash flags: 0x0001
[  115.375303][ T8188] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.985: Corrupt directory, running e2fsck is recommended
[  115.380862][ T8188] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[  115.384583][ T8188] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.985: corrupted in-inode xattr: invalid ea_ino
[  115.388732][ T8188] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  115.388991][ T8188] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.985: couldn't read orphan inode 15 (err -117)
[  115.391948][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  115.391958][    C1] EXT4-fs (loop1): initial error at time 1787039675: ext4_iget_extra_inode:5180: inode 15
[  115.391972][    C1] EXT4-fs (loop1): last error at time 1787039675: ext4_iget_extra_inode:5180: inode 15
[  115.404978][ T8188] loop1: lost filesystem error report for type 5 error -117
[  115.406433][ T8188] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  115.432697][ T8190] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters
[  115.913893][ T5603] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.107664][ T8219] netlink: 4 bytes leftover after parsing attributes in process `syz.2.999'.
[  116.111605][ T8219] batman_adv: batadv0: Removing interface: batadv_slave_0
[  116.161078][ T8215] loop1: detected capacity change from 0 to 32768
[  116.274874][ T8223] netlink: 'syz.2.1002': attribute type 4 has an invalid length.
[  116.280568][ T8223] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1002'.
[  116.291796][ T8223] .`: renamed from bond0
[  116.590497][ T5659] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  116.740540][ T5659] usb 3-1: Using ep0 maxpacket: 32
[  116.743449][ T5659] usb 3-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b
[  116.749839][ T5659] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.753298][ T5659] usb 3-1: Product: syz
[  116.754926][ T5659] usb 3-1: Manufacturer: syz
[  116.756697][ T5659] usb 3-1: SerialNumber: syz
[  116.765267][ T5659] hub 3-1:1.0: bad descriptor, ignoring hub
[  116.767766][ T5659] hub 3-1:1.0: probe with driver hub failed with error -5
[  116.970282][ T5659] usb 3-1: palm_os_4_probe - error -71 getting connection info
[  116.973592][ T5659] visor 3-1:1.0: Handspring Visor / Palm OS converter detected
[  116.982182][ T5659] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[  116.989140][ T5659] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[  117.010874][ T5659] usb 3-1: USB disconnect, device number 11
[  117.018390][ T5659] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[  117.023264][ T5659] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[  117.026778][ T5659] visor 3-1:1.0: device disconnected
[  117.465527][ T8250] loop1: detected capacity change from 0 to 256
[  117.469593][ T8250] exfat: Deprecated parameter 'utf8'
[  117.472221][ T8250] exfat: Deprecated parameter 'namecase'
[  117.475195][ T8246] process 'syz.0.1011' launched './file0' with NULL argv: empty string added
[  117.479158][ T8250] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  118.077064][ T8286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1030'.
[  118.128649][ T8290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1032'.
[  118.131919][ T8290] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1032'.
[  118.134701][ T8290] netlink: 'syz.2.1032': attribute type 15 has an invalid length.
[  118.137309][ T8290] netlink: 'syz.2.1032': attribute type 18 has an invalid length.
[  118.454872][ T8301] loop0: detected capacity change from 0 to 40427
[  118.457933][ T8301] F2FS-fs (loop0): Invalid SB checksum offset: 0
[  118.464125][ T8301] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[  118.474580][ T8301] F2FS-fs (loop0): invalid crc value
[  118.521288][ T8315] SET target dimension over the limit!
[  118.523047][ T8301] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  118.530047][ T8301] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[  118.532836][ T8301] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  118.568108][   T34] audit: type=1800 audit(1787039678.821:28): pid=8301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1038" name="file1" dev="loop0" ino=10 res=0 errno=0
[  118.593808][ T5599] syz-executor: attempt to access beyond end of device
[  118.593808][ T5599] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  118.616998][ T5599] CPU: 1 UID: 0 PID: 5599 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  118.617015][ T5599] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  118.617021][ T5599] Call Trace:
[  118.617027][ T5599]  <TASK>
[  118.617032][ T5599]  dump_stack_lvl+0xe8/0x150
[  118.617054][ T5599]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  118.617073][ T5599]  f2fs_write_end_io+0x124b/0x1710
[  118.617096][ T5599]  __submit_merged_bio+0x258/0x6a0
[  118.617109][ T5599]  ? rcu_is_watching+0x15/0xb0
[  118.617130][ T5599]  __submit_merged_write_cond+0x3c9/0x4e0
[  118.617149][ T5599]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  118.617172][ T5599]  f2fs_write_data_pages+0x2a27/0x36f0
[  118.617208][ T5599]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  118.617221][ T5599]  ? is_bpf_text_address+0x26/0x2b0
[  118.617245][ T5599]  ? arch_stack_walk+0xfb/0x150
[  118.617266][ T5599]  ? add_lock_to_list+0xc7/0x100
[  118.617285][ T5599]  ? lockdep_unlock+0x5d/0xd0
[  118.617297][ T5599]  ? __lock_acquire+0x13e8/0x2cf0
[  118.617329][ T5599]  ? do_raw_spin_lock+0x12b/0x2f0
[  118.617344][ T5599]  ? do_raw_spin_unlock+0x4d/0x210
[  118.617351][ T5599]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  118.617361][ T5599]  do_writepages+0x338/0x560
[  118.617375][ T5599]  ? do_raw_spin_unlock+0x4d/0x210
[  118.617384][ T5599]  filemap_fdatawrite+0x1e9/0x2f0
[  118.617395][ T5599]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  118.617461][ T5599]  ? do_raw_spin_unlock+0x4d/0x210
[  118.617477][ T5599]  f2fs_sync_dirty_inodes+0x30e/0x830
[  118.617495][ T5599]  f2fs_write_checkpoint+0xa3d/0x2710
[  118.617504][ T5599]  ? __lock_acquire+0x683/0x2cf0
[  118.617523][ T5599]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  118.617551][ T5599]  kill_f2fs_super+0x2f6/0x700
[  118.617564][ T5599]  ? __pfx_kill_f2fs_super+0x10/0x10
[  118.617577][ T5599]  ? call_rcu+0x64b/0x8b0
[  118.617587][ T5599]  ? lockdep_hardirqs_on+0x7a/0x110
[  118.617602][ T5599]  deactivate_locked_super+0xbc/0x130
[  118.617614][ T5599]  cleanup_mnt+0x3d3/0x460
[  118.617626][ T5599]  task_work_run+0x1d9/0x270
[  118.617638][ T5599]  ? __pfx_task_work_run+0x10/0x10
[  118.617652][ T5599]  exit_to_user_mode_loop+0x1fa/0x750
[  118.617661][ T5599]  ? rcu_is_watching+0x15/0xb0
[  118.617671][ T5599]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.617679][ T5599]  do_syscall_64+0x353/0x580
[  118.617689][ T5599]  ? trace_irq_disable+0x3b/0x140
[  118.617700][ T5599]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.617707][ T5599] RIP: 0033:0x7faeb9b9f317
[  118.617715][ T5599] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  118.617721][ T5599] RSP: 002b:00007ffe087108d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  118.617730][ T5599] RAX: 0000000000000000 RBX: 00007faeb9c34474 RCX: 00007faeb9b9f317
[  118.617735][ T5599] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe08710990
[  118.617739][ T5599] RBP: 00007ffe08710990 R08: 00007ffe08711990 R09: 00000000ffffffff
[  118.617743][ T5599] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe08711a20
[  118.617748][ T5599] R13: 00007faeb9c34474 R14: 000000000001cec2 R15: 00007ffe08711a60
[  118.617759][ T5599]  </TASK>
[  118.617762][ T5599] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  118.869915][ T8324] geneve1: entered promiscuous mode
[  119.040600][ T6690] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  119.191060][ T6690] usb 2-1: Using ep0 maxpacket: 16
[  119.196578][ T6690] usb 2-1: unable to get BOS descriptor or descriptor too short
[  119.199178][ T6690] usb 2-1: New USB device found, idVendor=045e, idProduct=0468, bcdDevice=b2.9c
[  119.209632][ T6690] usb 2-1: config 3 has an invalid interface number: 74 but max is 0
[  119.215225][ T6690] usb 2-1: config 3 has no interface number 0
[  119.222676][ T6690] usb 2-1: config 3 interface 74 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  119.234422][ T6690] usb 2-1: config 3 interface 74 has no altsetting 0
[  119.246235][ T6690] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.255035][ T6690] usb 2-1: Product: syz
[  119.263227][ T6690] usb 2-1: Manufacturer: syz
[  119.273576][ T6690] usb 2-1: SerialNumber: syz
[  119.298521][ T8322] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  119.475924][ T8372] loop2: detected capacity change from 0 to 2048
[  119.513193][ T8372] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  119.562507][ T6690] usb 2-1: USB disconnect, device number 15
[  120.490762][ T8420] openvswitch: netlink: Missing key (keys=c0, expected=500)
[  120.540206][ T8422] faux_driver vgem: [drm] Unknown color mode 11173; guessing buffer size.
[  120.579205][ T8426] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1086'.
[  120.580618][ T6690] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  120.751118][ T6690] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  120.754258][ T8434] loop0: detected capacity change from 0 to 512
[  120.768870][ T8434] EXT4-fs: Ignoring removed orlov option
[  120.779460][ T8434] EXT4-fs: Ignoring removed mblk_io_submit option
[  120.792655][ T8434] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #15: comm syz.0.1091: corrupted in-inode xattr: e_value size too large
[  120.801670][ T8434] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  120.802089][ T8434] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1091: couldn't read orphan inode 15 (err -117)
[  120.820288][ T8434] loop0: lost filesystem error report for type 5 error -117
[  120.820471][    C1] EXT4-fs (loop0): error count since last fsck: 2
[  120.824927][    C1] EXT4-fs (loop0): initial error at time 1787039681: ext4_iget_extra_inode:5180: inode 15
[  120.828177][    C1] EXT4-fs (loop0): last error at time 1787039681: ext4_orphan_get:1404
[  120.834142][ T8434] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  120.866121][ T5599] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.978298][ T8439] MTRR 1 not used
[  121.510519][ T6690] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  121.520507][ T6690] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  121.524309][ T6690] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  121.527234][ T6690] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.539339][ T6690] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  121.715611][ T6690] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -12
[  121.920209][ T8459] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1100'.
[  122.060791][ T8463] loop1: detected capacity change from 0 to 2048
[  122.083332][ T8463] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  122.660752][ T6690] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  122.817016][ T6690] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01
[  122.826845][ T6690] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  122.831702][ T6690] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  122.835426][ T6690] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.841104][ T6690] usb 2-1: config 0 descriptor??
[  122.860204][   T33] usb 3-1: USB disconnect, device number 12
[  123.255878][ T6690] hid_parser_main: 453 callbacks suppressed
[  123.255890][ T6690] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0
[  123.259940][ T6690] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0
[  123.262423][ T6690] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0
[  123.264567][ T6690] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0
[  123.266743][ T6690] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0
[  123.269012][ T6690] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0
[  123.271812][ T6690] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0
[  123.276272][ T6690] arvo 0003:1E7D:30D4.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0
[  123.657488][ T6690] usb 2-1: USB disconnect, device number 16
[  123.670538][   T33] usb 3-1: new full-speed USB device number 13 using dummy_hcd
[  123.822475][   T33] usb 3-1: not running at top speed; connect to a high speed hub
[  123.825228][   T33] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=ce.aa
[  123.829748][   T33] usb 3-1: config 5 has an invalid interface number: 106 but max is 0
[  123.832519][   T33] usb 3-1: config 5 has no interface number 0
[  123.834524][   T33] usb 3-1: config 5 interface 106 has no altsetting 0
[  123.838999][   T33] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.841711][   T33] usb 3-1: Product: syz
[  123.843018][   T33] usb 3-1: Manufacturer: syz
[  123.844585][   T33] usb 3-1: SerialNumber: syz
[  123.857928][   T33] r8152-cfgselector 3-1: Unknown version 0x0000
[  124.072499][   T33] r8152-cfgselector 3-1: Unknown version 0x0000
[  124.075383][   T33] r8152-cfgselector 3-1: No union descriptors
[  124.079700][   T33] r8152-cfgselector 3-1: USB disconnect, device number 13
[  124.261556][   T34] audit: type=1326 audit(1787039684.521:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8480 comm="syz.1.1111" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e8f9e0d9 code=0x7ff00000
[  124.270758][   T34] audit: type=1326 audit(1787039684.521:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8480 comm="syz.1.1111" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e8f9e0d9 code=0x7ff00000
[  124.277422][   T34] audit: type=1326 audit(1787039684.521:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8480 comm="syz.1.1111" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e8f9e0d9 code=0x7ff00000
[  124.284985][   T34] audit: type=1326 audit(1787039684.521:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8480 comm="syz.1.1111" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e8f9e0d9 code=0x7ff00000
[  124.291963][   T34] audit: type=1326 audit(1787039684.521:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8480 comm="syz.1.1111" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e8f9e0d9 code=0x7ff00000
[  124.299849][   T34] audit: type=1326 audit(1787039684.521:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8480 comm="syz.1.1111" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e8f9e0d9 code=0x7ff00000
[  124.308523][   T34] audit: type=1326 audit(1787039684.521:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8480 comm="syz.1.1111" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e8f9e0d9 code=0x7ff00000
[  124.317273][   T34] audit: type=1326 audit(1787039684.521:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8480 comm="syz.1.1111" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e8f9e0d9 code=0x7ff00000
[  124.325799][   T34] audit: type=1326 audit(1787039684.521:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8480 comm="syz.1.1111" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e8f9e0d9 code=0x7ff00000
[  124.333620][   T34] audit: type=1326 audit(1787039684.521:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8480 comm="syz.1.1111" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e8f9e0d9 code=0x7ff00000
[  124.534167][ T8487] loop1: detected capacity change from 0 to 1024
[  124.577188][ T8487] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  124.606524][ T8487] EXT4-fs warning (device loop1): ext4_rmdir:3192: inode #11: comm syz.1.1114: empty directory 'file1' has too many links (111)
[  124.644028][ T5603] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.846213][ T8510] GUP no longer grows the stack in syz.2.1121 (8510): 200000007000-200000008000 (200000004000)
[  124.854515][ T8510] CPU: 1 UID: 0 PID: 8510 Comm: syz.2.1121 Not tainted syzkaller #0 PREEMPT(full) 
[  124.854528][ T8510] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  124.854534][ T8510] Call Trace:
[  124.854537][ T8510]  <TASK>
[  124.854542][ T8510]  dump_stack_lvl+0xe8/0x150
[  124.854556][ T8510]  fixup_user_fault+0x637/0x6f0
[  124.854591][ T8510]  fault_in_user_writeable+0x71/0xd0
[  124.854604][ T8510]  futex_lock_pi+0x7ba/0xab0
[  124.854617][ T8510]  ? __pfx_futex_lock_pi+0x10/0x10
[  124.854636][ T8510]  ? __pfx_futex_wake_mark+0x10/0x10
[  124.854648][ T8510]  ? __lock_acquire+0x683/0x2cf0
[  124.854660][ T8510]  ? do_raw_spin_lock+0x12b/0x2f0
[  124.854688][ T8510]  do_futex+0x330/0x4e0
[  124.854701][ T8510]  ? __pfx_do_futex+0x10/0x10
[  124.854712][ T8510]  ? do_raw_spin_lock+0x12b/0x2f0
[  124.854722][ T8510]  __se_sys_futex+0x3a8/0x450
[  124.854735][ T8510]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  124.854745][ T8510]  ? __pfx___se_sys_futex+0x10/0x10
[  124.854758][ T8510]  ? __x64_sys_futex+0x21/0xf0
[  124.854769][ T8510]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.854777][ T8510]  do_syscall_64+0x174/0x580
[  124.854786][ T8510]  ? trace_irq_disable+0x3b/0x140
[  124.854797][ T8510]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.854804][ T8510] RIP: 0033:0x7fa9ea39e0d9
[  124.854812][ T8510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  124.854819][ T8510] RSP: 002b:00007fa9eb1d8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  124.854834][ T8510] RAX: ffffffffffffffda RBX: 00007fa9ea626090 RCX: 00007fa9ea39e0d9
[  124.854840][ T8510] RDX: 0000000000000002 RSI: 000000000000008d RDI: 0000200000004000
[  124.854845][ T8510] RBP: 00007fa9ea435024 R08: 0000000000000000 R09: 0000000000000082
[  124.854850][ T8510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  124.854855][ T8510] R13: 00007fa9ea626128 R14: 00007fa9ea626090 R15: 00007ffe19e16168
[  124.854868][ T8510]  </TASK>
[  125.290566][   T33] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  125.440495][   T33] usb 2-1: Using ep0 maxpacket: 8
[  125.442702][   T33] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  125.446546][   T33] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  125.449145][   T33] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  125.452246][   T33] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  125.455272][   T33] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  125.458424][   T33] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  125.462502][   T33] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.669436][   T33] usb 2-1: usb_control_msg returned -32
[  125.671390][   T33] usbtmc 2-1:16.0: can't read capabilities
[  126.379393][ T8526] usbtmc 2-1:16.0: usb_clear_halt returned -32
[  126.579478][ T6685] usb 2-1: USB disconnect, device number 17
[  126.817782][ T8543] netlink: 'syz.2.1137': attribute type 83 has an invalid length.
[  126.918939][ T8551] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1141'.
[  126.985604][ T8555] loop2: detected capacity change from 0 to 2048
[  126.996276][ T8555] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  127.013807][ T8555] UDF-fs: error (device loop2): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376)
[  127.140787][ T8561] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1146'.
[  127.872402][ T8597] loop0: detected capacity change from 0 to 4096
[  127.923549][ T8597] ntfs3(loop0): Failed to load $Extend (-22).
[  127.927512][ T8597] ntfs3(loop0): Failed to initialize $Extend.
[  128.498168][ T8616] ip_tables: iptables: counters copy to user failed while replacing table
[  129.024521][ T8624] netlink: 'syz.1.1175': attribute type 6 has an invalid length.
[  129.054420][ T8626] loop0: detected capacity change from 0 to 16
[  129.067155][ T8626] erofs (device loop0): invalid lz4 cfgs, size=6
[  129.315784][ T8640] netlink: 'syz.1.1182': attribute type 12 has an invalid length.
[  129.321995][ T8640] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1182'.
[  129.393666][ T8648] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1186'.
[  129.674146][ T8671] netlink: 'syz.0.1196': attribute type 1 has an invalid length.
[  129.763376][ T8671] veth3: entered allmulticast mode
[  129.797696][ T8671] bond3: (slave veth3): Enslaving as an active interface with a down link
[  129.811365][ T8673] bond3: (slave veth0_to_bond): making interface the new active one
[  129.817212][ T8673] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  129.830130][ T8673] syz.0.1196 (8673) used greatest stack depth: 20096 bytes left
[  129.868204][ T8678] nvme_fcloop: fcloop_set_cmd_drop: DROP: Starting at instance 0 of fabric opcode x1 drop +0 instances
[  129.915241][ T8684] befs: (nbd0): No write support. Marking filesystem read-only
[  129.970996][ T8689] loop0: detected capacity change from 0 to 512
[  129.976955][ T8689] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  129.976983][ T8689] EXT4-fs (loop0): ea_inode feature is not supported for Hurd
[  130.167986][ T5597] Bluetooth: hci0: failed to read key size for handle 200
[  130.449755][ T8709] loop1: detected capacity change from 0 to 2048
[  130.463051][ T8709] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  130.578924][ T8717] Illegal XDP return value 4294967262 on prog  (id 59) dev N/A, expect packet loss!
[  130.684430][ T8726] capability: warning: `syz.1.1217' uses 32-bit capabilities (legacy support in use)
[  130.860218][ T8739] loop2: detected capacity change from 0 to 4096
[  131.043230][ T8754] loop2: detected capacity change from 0 to 128
[  131.251800][ T8756] ptrace attach of "/syz-executor exec"[5594] was attempted by "/syz-executor exec"[8756]
[  131.270912][ T6685] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  131.450587][ T6685] usb 2-1: Using ep0 maxpacket: 32
[  131.452799][ T6685] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  131.456647][ T6685] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  131.462361][ T6685] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  131.464955][ T6685] usb 2-1: Product: syz
[  131.466375][ T6685] usb 2-1: Manufacturer: syz
[  131.467898][ T6685] usb 2-1: SerialNumber: syz
[  131.470898][ T6685] usb 2-1: config 0 descriptor??
[  131.475218][ T8752] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  131.478229][ T6685] hub 2-1:0.0: bad descriptor, ignoring hub
[  131.480152][ T6685] hub 2-1:0.0: probe with driver hub failed with error -5
[  131.791242][   T24] usb 2-1: USB disconnect, device number 18
[  132.138702][ T8768] loop2: detected capacity change from 0 to 32768
[  132.143587][ T8768] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1236 (8768)
[  132.151203][ T8768] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  132.154568][ T8768] BTRFS info (device loop2): using sha256 checksum algorithm
[  132.294856][ T8768] BTRFS info (device loop2): enabling ssd optimizations
[  132.297695][ T8768] BTRFS info (device loop2): turning on sync discard
[  132.300344][ T8768] BTRFS info (device loop2): enabling free space tree
[  132.315979][   T34] kauditd_printk_skb: 223 callbacks suppressed
[  132.315993][   T34] audit: type=1800 audit(1787039692.571:262): pid=8768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1236" name="file1" dev="loop2" ino=260 res=0 errno=0
[  132.822654][ T1373] ieee802154 phy0 wpan0: encryption failed: -22
[  132.826963][ T1373] ieee802154 phy1 wpan1: encryption failed: -22
[  133.093940][ T5594] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  133.280978][ T8815] netlink: 'syz.2.1247': attribute type 8 has an invalid length.
[  133.620544][ T6688] usb 3-1: new full-speed USB device number 14 using dummy_hcd
[  133.771276][ T6688] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  133.776272][ T6688] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.782330][ T6688] usb 3-1: config 0 descriptor??
[  133.793681][ T6688] cp210x 3-1:0.0: cp210x converter detected
[  133.800609][ T6690] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  133.952099][ T6690] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  133.957733][ T6690] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  133.962169][ T6690] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  133.966582][ T6690] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.973611][ T6690] usb 2-1: config 0 descriptor??
[  134.209583][ T6688] usb 3-1: cp210x converter now attached to ttyUSB0
[  134.387200][ T6690] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0
[  134.390114][ T6690] cp2112 0003:10C4:EA90.0003: item fetching failed at offset 4/7
[  134.394064][ T6690] cp2112 0003:10C4:EA90.0003: parse failed
[  134.396948][ T6690] cp2112 0003:10C4:EA90.0003: probe with driver cp2112 failed with error -22
[  134.400894][   T24] usb 3-1: USB disconnect, device number 14
[  134.416615][   T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  134.430277][   T24] cp210x 3-1:0.0: device disconnected
[  134.591904][ T6685] usb 2-1: USB disconnect, device number 19
[  134.832079][ T8841] loop0: detected capacity change from 0 to 256
[  134.856760][   T34] audit: type=1800 audit(1787039695.111:263): pid=8841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1259" name="file2" dev="loop0" ino=1048612 res=0 errno=0
[  134.936125][ T8843] kAFS: unable to lookup cell 'syz0'
[  135.013885][ T8848] loop2: detected capacity change from 0 to 128
[  135.038809][ T8848] affs: No valid root block on device loop2
[  135.493666][ T8861] loop2: detected capacity change from 0 to 32768
[  135.497515][ T8861] btrfs: Deprecated parameter 'usebackuproot'
[  135.509462][ T8861] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  135.526324][ T8861] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1267 (8861)
[  135.573497][ T8861] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  135.585740][ T8861] BTRFS info (device loop2): using crc32c checksum algorithm
[  135.597361][ T8861] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  135.709721][ T1191] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0x71791122 level 0
[  135.729365][ T8861] BTRFS error (device loop2): failed to load root extent
[  135.736080][ T8861] BTRFS warning (device loop2): try to load backup roots slot 1
[  135.745938][   T52] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x19409457 level 0
[  135.760313][ T8861] BTRFS warning (device loop2): couldn't read tree root
[  135.766275][ T8861] BTRFS warning (device loop2): try to load backup roots slot 2
[  135.771403][ T1191] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  135.777251][ T8861] BTRFS warning (device loop2): couldn't read tree root
[  135.782273][ T8861] BTRFS warning (device loop2): try to load backup roots slot 3
[  135.790827][   T52] BTRFS error (device loop2): bad tree block start, mirror 1 want 5292032 have 38659997696
[  135.800359][ T8861] BTRFS warning (device loop2): failed to read root (objectid=9): -5
[  135.809366][ T8861] BTRFS warning (device loop2): unable to release extent buffer 5292032 owner 9 gen 5 refs 3 flags 0xc
[  135.890587][ T6690] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  136.003995][ T8861] BTRFS error (device loop2): open_ctree failed: -5
[  136.060533][ T6690] usb 2-1: Using ep0 maxpacket: 32
[  136.063616][ T6690] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  136.072778][ T6690] usb 2-1: config index 0 descriptor too short (expected 156, got 27)
[  136.078934][ T6690] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  136.084033][ T6690] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  136.088184][ T6690] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  136.127141][ T6690] usb 2-1: config 0 interface 0 has no altsetting 0
[  136.181159][ T6690] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  136.184657][ T6690] usb 2-1: Product: syz
[  136.186532][ T6690] usb 2-1: Manufacturer: syz
[  136.188955][ T6690] usb 2-1: SerialNumber: syz
[  136.211276][ T8884] IPVS: sed: TCP 127.0.0.1:21 - no destination available
[  136.213693][    C0] IPVS: sed: TCP 127.0.0.1:21 - no destination available
[  136.215877][    C0] IPVS: sed: TCP 127.0.0.1:21 - no destination available
[  136.219110][ T8884] IPVS: sed: TCP 127.0.0.1:21 - no destination available
[  136.222409][    C0] IPVS: sed: TCP 127.0.0.1:21 - no destination available
[  136.225312][    C0] IPVS: sed: TCP 127.0.0.1:21 - no destination available
[  136.329652][ T6690] usb 2-1: config 0 descriptor??
[  136.344520][ T6690] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  137.104592][ T8899] loop1: detected capacity change from 0 to 512
[  137.192677][ T8899] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  137.283059][ T6690] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  137.296271][ T6690] usb 2-1: USB disconnect, device number 20
[  137.305088][ T6690] ldusb 2-1:0.0: LD USB Device #0 now disconnected
[  138.923632][ T5603] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.020285][ T8926] loop2: detected capacity change from 0 to 512
[  139.033013][ T8926] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2
[  139.045324][ T8926] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.1287: corrupted in-inode xattr: e_value size too large
[  139.063878][ T8926] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  139.064069][ T8926] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1287: couldn't read orphan inode 15 (err -117)
[  139.071301][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  139.071317][    C0] EXT4-fs (loop2): initial error at time 1787039699: ext4_iget_extra_inode:5180: inode 15
[  139.071339][    C0] EXT4-fs (loop2): last error at time 1787039699: ext4_iget_extra_inode:5180: inode 15
[  139.101179][ T8926] loop2: lost filesystem error report for type 5 error -117
[  139.102091][ T8926] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  139.120543][ T8932] loop1: detected capacity change from 0 to 512
[  139.133705][ T8932] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  139.138358][ T8932] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #14: comm syz.1.1289: invalid orphan symlink nlink 1
[  139.142756][ T8932] loop1: lost file I/O error report for ino 14 type 5 pos 0x0 len 0x0 error -117
[  139.143020][ T8932] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.1289: couldn't read orphan inode 14 (err -117)
[  139.149742][ T8932] loop1: lost filesystem error report for type 5 error -117
[  139.151253][ T8932] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  139.884466][ T5603] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.889768][ T5594] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.945296][ T8936] loop1: detected capacity change from 0 to 256
[  139.953346][ T8936] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  139.964130][   T34] audit: type=1800 audit(1787039700.221:264): pid=8936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1290" name="file1" dev="loop1" ino=1048613 res=0 errno=0
[  139.986268][ T8936] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  140.032743][ T8943] loop0: detected capacity change from 0 to 512
[  140.041923][ T8943] EXT4-fs: Ignoring removed orlov option
[  140.044298][ T8943] EXT4-fs: Ignoring removed mblk_io_submit option
[  140.056062][ T8943] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #15: comm syz.0.1293: corrupted in-inode xattr: e_value size too large
[  140.068085][ T8943] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  140.068437][ T8943] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1293: couldn't read orphan inode 15 (err -117)
[  140.071911][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  140.071924][    C0] EXT4-fs (loop0): initial error at time 1787039700: ext4_iget_extra_inode:5180: inode 15
[  140.071937][    C0] EXT4-fs (loop0): last error at time 1787039700: ext4_iget_extra_inode:5180: inode 15
[  140.085261][ T8943] loop0: lost filesystem error report for type 5 error -117
[  140.091787][ T8943] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  140.107703][ T8943] EXT4-fs (loop0): shut down requested (2)
[  140.122029][ T5599] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.323022][ T8949] loop0: detected capacity change from 0 to 32768
[  140.330367][ T8949] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 0 transid 8 /dev/loop0 (7:0) scanned by syz.0.1295 (8949)
[  140.520079][ T6685] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  140.554258][ T6685] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  140.826667][ T8979] 9p: Bad value for 'rfdno'
[  140.885005][ T8986] netlink: 'syz.2.1312': attribute type 3 has an invalid length.
[  140.887607][ T8986] netlink: 'syz.2.1312': attribute type 1 has an invalid length.
[  140.892053][ T8986] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1312'.
[  141.052239][ T8998] loop2: detected capacity change from 0 to 256
[  141.095945][ T9002] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1319'.
[  141.098897][ T9002] nbd: must specify a device to reconfigure
[  141.213449][ T5594] FAT-fs (loop2): error, corrupted directory (invalid entries)
[  141.220489][ T5594] FAT-fs (loop2): Filesystem has been set read-only
[  141.223959][ T5594] FAT-fs (loop2): error, corrupted directory (invalid entries)
[  141.419864][ T9012] loop7: detected capacity change from 0 to 7
[  141.543764][ T9012] Dev loop7: unable to read RDB block 7
[  141.548679][ T9012]  loop7: unable to read partition table
[  141.555994][ T9012] loop7: partition table beyond EOD, truncated
[  141.563782][ T9012] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X	%`ր{֐ȵ4FLQk݊) failed (rc=-5)
[  141.680956][ T5600] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  141.687904][ T5600] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  141.690971][ T5600] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  141.693917][ T5600] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  141.696678][ T5600] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  142.025573][ T9034] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1331'.
[  142.087024][ T9036] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[  142.089904][ T9036] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  142.182983][ T9040] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1335'.
[  142.185818][ T9040] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1335'.
[  142.188710][ T9040] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1335'.
[  142.192256][ T9040] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1335'.
[  142.195204][ T9040] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1335'.
[  142.308479][ T5631] bridge_slave_1: left allmulticast mode
[  142.316608][ T5631] bridge_slave_1: left promiscuous mode
[  142.324289][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.335910][ T5631] bridge_slave_0: left allmulticast mode
[  142.338206][ T5631] bridge_slave_0: left promiscuous mode
[  142.341341][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state
[  142.451923][ T5631] bond2 (unregistering): (slave gretap1): Releasing active interface
[  142.477673][ T5631] .` (unregistering): (slave bond_slave_0): Releasing backup interface
[  142.482033][ T5631] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[  142.485261][ T5631] .` (unregistering): Released all slaves
[  142.490155][ T5631] bond1 (unregistering): Released all slaves
[  142.504888][ T5631] bond2 (unregistering): Released all slaves
[  142.522658][ T5343] 8021q: adding VLAN 0 to HW filter on device eth1
[  142.804271][ T9015] bridge0: port 1(bridge_slave_0) entered blocking state
[  142.812733][ T9015] bridge0: port 1(bridge_slave_0) entered disabled state
[  142.819560][ T9015] bridge_slave_0: entered allmulticast mode
[  142.825724][ T9015] bridge_slave_0: entered promiscuous mode
[  142.829735][ T9015] bridge0: port 2(bridge_slave_1) entered blocking state
[  142.833074][ T9015] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.835561][ T9015] bridge_slave_1: entered allmulticast mode
[  142.857815][ T9015] bridge_slave_1: entered promiscuous mode
[  142.878783][ T5631] IPVS: stopping backup sync thread 6174 ...
[  142.894031][ T9015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  142.908847][ T9015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  142.931205][ T5343] 8021q: adding VLAN 0 to HW filter on device eth2
[  142.995264][ T9015] team0: Port device team_slave_0 added
[  143.002386][ T9015] team0: Port device team_slave_1 added
[  143.016696][ T9015] batman_adv: batadv0: Adding interface: batadv_slave_0
[  143.018969][ T9015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  143.027272][ T9015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  143.032865][ T9015] batman_adv: batadv0: Adding interface: batadv_slave_1
[  143.035092][ T9015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  143.040672][   T33] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  143.043377][ T9015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  143.131828][ T9015] hsr_slave_0: entered promiscuous mode
[  143.134947][ T9015] hsr_slave_1: entered promiscuous mode
[  143.137770][ T9015] debugfs: 'hsr0' already exists in 'hsr'
[  143.140013][ T9015] Cannot create hsr debugfs directory
[  143.200041][ T5631] hsr_slave_0: left promiscuous mode
[  143.201915][   T33] usb 2-1: Using ep0 maxpacket: 16
[  143.205560][   T33] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  143.210299][ T5631] hsr_slave_1: left promiscuous mode
[  143.218873][   T33] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  143.224785][   T33] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  143.229928][ T5631] batman_adv: batadv0: Removing interface: batadv_slave_1
[  143.236024][   T33] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.241257][   T33] usb 2-1: Product: syz
[  143.242634][   T33] usb 2-1: Manufacturer: syz
[  143.253733][   T33] usb 2-1: SerialNumber: syz
[  143.258138][   T33] usb 2-1: config 0 descriptor??
[  143.266907][   T33] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  143.269877][   T33] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class)
[  143.360322][ T5631] team0 (unregistering): Port device team_slave_1 removed
[  143.373348][ T5631] team0 (unregistering): Port device team_slave_0 removed
[  143.466169][ T5343] 8021q: adding VLAN 0 to HW filter on device eth3
[  143.700270][ T9015] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  143.707642][ T9015] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  143.711886][ T9015] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  143.716650][ T9015] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  143.719876][ T9015] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  143.742722][ T9015] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  143.745758][ T9015] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  143.752276][ T9015] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  143.769462][ T5343] 8021q: adding VLAN 0 to HW filter on device eth4
[  143.782392][ T5600] Bluetooth: hci0: command tx timeout
[  143.858205][ T9015] 8021q: adding VLAN 0 to HW filter on device bond0
[  143.873525][   T33] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[  143.877771][ T9015] 8021q: adding VLAN 0 to HW filter on device team0
[  143.881181][   T33] em28xx 2-1:0.0: Config register raw data: 0xfffffffb
[  143.889130][ T6778] bridge0: port 1(bridge_slave_0) entered blocking state
[  143.891444][ T6778] bridge0: port 1(bridge_slave_0) entered forwarding state
[  143.905767][ T6778] bridge0: port 2(bridge_slave_1) entered blocking state
[  143.908155][ T6778] bridge0: port 2(bridge_slave_1) entered forwarding state
[  144.145638][ T9015] 8021q: adding VLAN 0 to HW filter on device batadv0
[  144.191914][ T9015] veth0_vlan: entered promiscuous mode
[  144.203276][ T9015] veth1_vlan: entered promiscuous mode
[  144.232408][ T9015] veth0_macvtap: entered promiscuous mode
[  144.237510][ T9015] veth1_macvtap: entered promiscuous mode
[  144.253662][ T9015] batman_adv: batadv0: Interface activated: batadv_slave_0
[  144.261629][ T9015] batman_adv: batadv0: Interface activated: batadv_slave_1
[  144.321016][ T9052] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  144.329646][ T9052] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  144.352535][ T9052] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  144.405046][ T6786] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  144.411296][ T6786] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  144.440539][ T5631] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  144.479417][ T9111] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1343'.
[  144.489966][ T6786] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  144.494012][ T6786] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  144.496753][   T33] em28xx 2-1:0.0: Unknown AC97 audio processor detected!
[  144.709014][   T33] em28xx 2-1:0.0: couldn't setup AC97 register 2
[  144.715629][   T33] em28xx 2-1:0.0: couldn't setup AC97 register 4
[  144.721884][   T33] em28xx 2-1:0.0: couldn't setup AC97 register 6
[  144.727209][   T33] em28xx 2-1:0.0: couldn't setup AC97 register 54
[  144.731278][   T33] em28xx 2-1:0.0: couldn't setup AC97 register 56
[  144.737607][   T33] usb 2-1: USB disconnect, device number 21
[  144.773215][ T9124] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1348'.
[  144.810976][   T24] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[  144.826046][ T9128] loop0: detected capacity change from 0 to 8
[  144.832523][ T9128] SQUASHFS error: zlib decompression failed, data probably corrupt
[  144.835528][ T9128] SQUASHFS error: Failed to read block 0x9b: -5
[  144.837932][ T9128] SQUASHFS error: Unable to read metadata cache entry [99]
[  144.840999][ T9128] SQUASHFS error: Unable to read inode 0x127
[  144.874472][ T9130] openvswitch: netlink: Actions may not be safe on all matching packets
[  144.962456][   T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  144.968121][   T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  144.975323][   T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  144.979301][   T24] usb 4-1: config 1 has no interface number 0
[  144.982847][   T24] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  144.990931][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.998644][   T24] usb 4-1: Product: syz
[  145.002054][   T24] usb 4-1: Manufacturer: syz
[  145.005258][   T24] usb 4-1: SerialNumber: syz
[  145.020309][   T24] usb 4-1: selecting invalid altsetting 1
[  145.391393][ T9156] loop1: detected capacity change from 0 to 2048
[  145.440601][   T24] usb 4-1: selecting invalid altsetting 1
[  145.446265][   T24] cdc_ncm 4-1:1.1: bind() failure
[  145.452929][ T9156] Dev loop1: RDB in block 1 has bad checksum
[  145.635049][ T9115] xt_hashlimit: max too large, truncated to 1048576
[  145.643647][   T24] usb 4-1: USB disconnect, device number 2
[  145.850717][ T5600] Bluetooth: hci0: command tx timeout
[  146.020600][ T6687] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  146.185096][ T6687] usb 2-1: unable to get BOS descriptor or descriptor too short
[  146.187874][ T6687] usb 2-1: New USB device found, idVendor=1235, idProduct=0401, bcdDevice= 0.40
[  146.195369][ T6687] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  146.201513][ T6687] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  146.209227][ T6687] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.214373][ T6687] usb 2-1: Product: syz
[  146.216166][ T6687] usb 2-1: Manufacturer: syz
[  146.218060][ T6687] usb 2-1: SerialNumber: syz
[  146.269786][ T9182] loop3: detected capacity change from 0 to 1024
[  146.281562][ T9182] hfsplus: failed to load extents file
[  146.366313][   T33] libceph: connect (1)[c::]:6789 error -101
[  146.369362][   T33] libceph: mon0 (1)[c::]:6789 connect error
[  146.413006][ T9186] ceph: No mds server is up or the cluster is laggy
[  146.439721][ T6687] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  146.443273][ T6687] usb 2-1: MIDIStreaming interface descriptor not found
[  146.523767][ T9189] loop3: detected capacity change from 0 to 128
[  146.565986][ T6687] usb 2-1: USB disconnect, device number 22
[  146.676716][ T7154] udevd[7154]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  147.239519][ T9197] printk: legacy console [ttyS0] disabled

syzkaller
SYZFAIL: SIGBUS
pc-offset:0xfffffffffffd6ece pc:0x7fe48167c662 addr:0x7fe47f750015 code=2 (errno 11: Resource temporarily unavailable)
