last executing test programs:

15m59.15871757s ago: executing program 32 (id=1219):
syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="00089aafc727346c3e0d8728525a2641b3b31621730c58dcf8e0ca2e6767a45a978776e9d2c689feab83a160d00a77ae5112cd4e7141cad333d7cbb69dc6b314609d3855f026cbf8c41ff5b565176b461e9327059c11066ba0b4b95c12d2d9ff9c8896d9e247bd55f9ff578a06e0e9d0ca07693396b00d2ef44adb4858475a07d5e8fa3ef5b306fe8a5d1cd2d8e06e7f88226ece092c6aabf8870e140124d5a48670513e0c419c99b7c5105959e7a535f12694634cf272490e0000"], 0x81, 0x4ac, &(0x7f00000011c0)="$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")
r0 = open(&(0x7f0000000100)='./file2\x00', 0x1ad941, 0x176)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f00000000c0)="055d", 0x2}], 0x1, 0x6ffd, 0x0, 0x0)

15m46.179206104s ago: executing program 33 (id=1549):
syz_emit_ethernet(0x86, &(0x7f0000000300)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x10, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x11, 0x2, @broadcast, @local, {[@rr={0x7, 0x3}, @ssrr={0x89, 0x7, 0x9d, [@multicast1]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@local}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@dev}, {@private}]}]}}}}}}}, 0x0)

15m24.982509726s ago: executing program 34 (id=1744):
syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f00000048c0)='./file0\x00', 0x41, &(0x7f0000000380)={[{@barrier={'barrier', 0x3d, 0x6}}, {@intr}, {@acl}, {@heartbeat_none}, {@localalloc={'localalloc', 0x3d, 0x6}}]}, 0xff, 0x489a, &(0x7f0000004900)="$eJzs22+MHGXhB/BnlgPuCr1eey2Ulj9L+XeEH/e7w0SgxthSsBCUYkU0vjm3d0dbu72td3tGE41KYnyD8R9JiVH7psagkkit0dgaSKpIQl9IjInRGI1vlMRKFWiMUs7sv9ud2d2bvdu2GPr5JO1255nnmWfnu/PszDzTTFVx1+6Z7O6ZbG4qWxh/ZOa27McL+dm9kyHTTgjty5Zg0dvnTXE2cpL9m2fblne//+HbQnj77ya+Pjc3NxdKBkIL///rxnf/+senxhtfazKJWqV2W7VW85NvRMufXr7QGmk+HEJY3dSvEPrml10cQlhZ/feqUC+9tNrfR4+f+HFvN11ocPrIM8cP7dm86Whx8PG1B/bf2nbFKITina+8dOej339s789fPXiGNg8AAAvaun3bBx4cGQ3PRqH/cE/z+frl1dfa+fFX//D3PXf11Mvn6MyKcxgqAAAAJNSv/weiUy3m62oza7UpwT9dtOGTa6J6+dzc3AXnsLucYfc9sO3ue0ZGq/O/UVP5HdVFJzZfUJ5DTc77Jud/Vybqt57/rW/n9hWfX7Pt4qX3v9a/2nYHQpQZjr3PZIaHQ8jdVXm/NlqWyRdmirc8Upidmlj6dt8q4vlXZu9j34Lqvb4Tm3s6yn9Vov0F5v8/W/rrm8cOz870dPMJBkPyW1t6n23+KtNCPP/2Q/nBz0Ud5T+YqJf2/MfEY3/7wV8v6uYTJLfIYsTzrxyIGxpXyFbGhFL+X+lJz391ov20/J9/6ug9G5cw/q8rje1Rqa+9sRHgVHV5y0eYaBLP/8LystjQWd2R7Y7//yTyX5NoPy3/dz53YOOxLn7/243/Q3d10+b5I55/ZSDOxtaoH/8rM+nH/2WJ9tPy/8stG7/26a4+QXP+pf4P+f3vSDz/6oEYHzzLe7LT8f/yRPtp+T88/uUXfrmE4/+9fdV+9kdhsOGp08Oln7D++nx1+ZKmVLxv8ds4H8Tzr+y12KHTX3kpH/8D6eP/2kT7afm/eOi1F8bOwvn/iPG/I/H8K89MLyb/1xP5X5FoPy3/k5d9YfKnZyH/e+XfkXj+y5rK6/d/Mh1d/61L1E+7/9P/vutffuPCpfe/1r/admv3f2pP/w9Flfs/tBbP/5Km8sXmvz5RPy3//P1btmzu4lyt1r/admv51+5DyX9h8fwvbbtep+d/VybqpY3/PzzS85l/dnP/J+p1B6gL8fzb/0esTvO/KlEvLf/nfvPdq6Jufv/l35V4/tWTvRY3gDrN/+pE+2n5b93/0Pr+Jfz+l6/4emv51zv8xsWV5R9x/teReP7tH1LuNP9rEvXS8v+/vlO/fXVx43/82+L470o8/+qNn9h4vKn8d/n6L2rO/d+J/LOJ9tPyv/pLR981mvxPw4vSfP1X6v9QV22eP+L5V2fNF5F/8v7PtYn20/K/7clDDwyc4ev/cv4bOqjqO5LIPzl7X1fK/8UOrv9iuz15M6CFe5e/9MW9XeUfwoh7/UsWz7/9L2mn+V+XqJc6/ze+9eVvdTX/L/9uxPNPzt7Xlcf/3vT8r0/US8v/20//6OaRLp4gvGnpVWnKPzl7X9dp/jck6qXl/6s/rr//WBfHr/y7E8+/Mnvf6vm/Tuf/bky0n5b/U39ed7K707DW8z93uP7vSDz/yux9N/knj8e0/AeeePJ7J87w9V/p/Sb5dySef2X2vnF/Rin5J+d/hxLtp+X/i9efP/22Lp//bJX/g/LvSDz/yux9Z8d/X8v8b060n5b/wdd+37fiLBz/H5I/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBZsar6OhCizHDsfSYzPBzCYPX92rAs2pGbGNuRL4zvmQlhdXV5NqyKduYLO3L5sd1ThYnJsVw+XxgPYU21fHXojWbyheLY3ty+y+bb6ot2Teamizsmc8UQwuXV5VeG5bW2duwu7s3tK69bq3NJlPvYbKGYG56dmZwOV8wvv7S2fOd0YXbfuvm2VmQK0/t25abGJnZPbxwZGRkJ69uWjYYr5z/PymjyE8XJqWLlk1RqhnDVAuWjIYSr59seiBp2RLn6Ne3LRrMNn+OjhdnpqVy+XOfa6vKh+PLRdjluqr7efd/2h7a/p3m1bBTPe8UHv3PjzLIQNjT0LV8Yz+Ub+n1d+7LR6xv2R3F6dmo8V5wcyxd21vbXDQuUl3p3Y0PbDbmWq9/Uvmx0qKHdxtxr2725Wn6yRXnbnfcWkJb/tYn8N65+5fafZc5d/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/Hc++484nQgg9lXeZEEK29o+o+qemtCycPvLM8UN7Nm86Whx8fO2B/bcm1gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/suuHJswCAZRAL6EbJAmZRbIAMFG57F1FEE7d7BV0AFcSRDRv3ED4fvg4N7jAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcDtz9m8j4nWkZ0R80/M4L9m7WIdp6csiH6t3/ema32UDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxt7dg0bRhHEAn918vYHwmmBjIYooRFBC0oiIEQyKCsYEMbZGtBERTSEWGlEsAjbXi1jZK2lsBD9asRALQQsrtdHC4kBQPLlk1xx3x50QcM3N7wfL7DIw+8BCcg/7XwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPjnXNpWHqiON/b0Lx2DwyH0ZXO9IYTdyfL5l/1dYSiE8O3rtTOhyZgbqlt/19uzdxrvmvw+u9g/+XJDywq7W87m9eX3HQxJOlJzvT1J05GRlktEaUfp/OHL3SGkRRdCId7sfXihJ4TQVXQhFKLy6fl8b9u/rnSq4Y/3BqrPv6foQijEuvHPG3uy33h0rEqlUmk6cWX66s7a//1Jm4XazbO2vD55633qoUbvadb/J9mhH4zDwomjHx4XXQSFWbg9M1l0DQAAwN+l/4+T/j9u+n8AAIjPXJv8f/h/+fz+zSQMDTbm/r/X5f/rs/zN8/8rXi2WX5xaVQh1fUM2qXo9OrGaNTvflvHS3F35/2jJ/8dN/j9u8v9xk/+Pm/x/3OT/qXrm/X+UHpT2lZ8UXQSF8f4fAADio/+Pk/4/bvp/AACIz6HjUzPTo2PV5v+/n32Nef1N2Tib5enPzW9+NFwzLz+8th05NnXg4OhY9twbA0Er+z+kS7M/su896sfc6brvLtrt/zCx9fq7xSYhxNk//H4jry+/r/0fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4xe4c2jAIBnEc/a6VHaBrtAhWQEJIsCgGgHVI2IU5WAYEIeBwqPfMXfIzfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4U9RlU/3+aY70WiNSvnTjtX+Pp9/PJ2un4X32eHArAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwsQMHMgAAAADC/K3zaD8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAUwEAAP///t/CLw==")

15m18.198035188s ago: executing program 35 (id=1781):
syz_usb_connect(0x3, 0x62, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d2406010103020001000600060924030505030605810924030601030405050724040501"], 0x0)

14m21.683617416s ago: executing program 36 (id=2187):
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x12, 0x1, 0x8, 0xb}, 0x50)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@generic={0x0}, 0x18)

10m36.43105179s ago: executing program 6 (id=3971):
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00')
mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)={0x1000a4, 0x7a, 0x0, {r0}}, 0x20)

10m36.326651007s ago: executing program 6 (id=3972):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0)
syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="00bc7811e943bbb3bc31a70c81525069e4320000000000", @ANYRES64], 0x1, 0x1a1, &(0x7f0000000440)="$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")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000016c0)={0x2c, r2, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44051}, 0x24000004)

10m36.080059039s ago: executing program 6 (id=3973):
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000c4b20710200e01015a7a0102030109021b0001000000000904"], 0x0)

10m33.983087465s ago: executing program 6 (id=3979):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x59}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000005b80)=ANY=[@ANYBLOB="6e6f646973636172642c6e6f636865636b706f696e745f6d657267652c616c6c6f635f6d6f64653d64656661756c742c6163746976655f6c6f67733d362c666c7573685f6d657267652c6661756c745f696e6a656374696f6e3d30303030303030303030303030303030303235362c646973636172642c6e6f61636c2c6673796e635f6d6f64653d706f7369782c616c6c6f635f6d6f64653d64656661756c742c6e6f657874656e745f63616368652c6163746976655f6c6f67733d322c6661756c745f747970653d30303030303030303030303031363737373231342c0002d1c71f8348abae1fff96ec907a723dca530cf5aea9622c1169c27c91b4d703f02da55a70e4108d30dd0a1b6e467d05c6c0237e3772dfb37da0e9705c62c7f6dc21ef782f52303a65f3196af86a3d58c8bfb0ef60c974b0e0b44af5ce33f407facb3838bd4bf9b7a99d612518ac3ddddf95b10ead9f78580da79051b5011a94bc44336ebf9378b479860af435366b6d4cdb9c5ffd949b52f82ac9c92de853", @ANYRESOCT=0x0, @ANYBLOB="07de9ae3004865f36195c93617594bca658e0b966b6d116ecd4910edb0e65f31cb794b50544910eb6456aa609c6861b309b45ef6567d4e820a14ff961ba2f4a3713fdf8adc13aa34115d481dc607cf6ecefc260ef52c3ec19b03986055d54904fe9cd76a923407c252e18073e276f22da9f4d528729fe74609970ff0f1fd20dedc46c4c077d1907c6e56c95506ef8d787b61e0c37b0159a50a5f6be5dfa0afe9eaeed8ffd1a325b8982c80dd9e45d1aea60565aa8c0f427ebeac1f101ad7c598679e1899e7fc2462b3e55ec2b037aeec6af78d058f96bef36411fe2e5db3c4575668515aac63f8ce589f000845efd4e4321cecb196", @ANYRESOCT=0x0, @ANYRES32=0x0, @ANYRESHEX, @ANYRES16, @ANYRES32], 0x5, 0x5505, &(0x7f0000000340)="$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")
truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd)
syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, 0x0, 0x5, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@uuid_off}]})

10m33.679489376s ago: executing program 6 (id=3980):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x3, 0x27c, &(0x7f0000000c40)="$eJzs3cFqM1UUAOAzTdIkukgWrkTogC5cldYnaJEKYkFQslAXWmwK0oRCC4GqGLvyCXwCn8eN+AKCW8WdXYgj05mkqUxSUtOm+H/fppdzz5l77szQrub2s9eGp8dnFydXX/8SrVYSG3uxF9dJdGMjJr6NSj//Xh0HAJ656yyLP7JCswhd3s1ozKmsbzx6cwDAo5j9+7/uXgCAp/HhRx+/t394ePBBmrYiht+NekkUP4v5/ZP4IgbRj53oxF8R2VQxfufdw4Oop7luvDEcj3p55fDTH8vr7/8WcVO/G53oVtfvpoWZ+vGo14iXyvX3BtF//4foxCvV9W9V1EdvM958fab/7ejET5/HWQziuOxtUv/Nbpq+nX3/51ef5NG8PhmPes1pXplde9IHAwAAAAAAAAAAAAAAAAAAAADA/9p2OtW9e/7O5OD/BfMLzgcaz5zPs5OmaZYU+bf19Xi1HvV17h0AAAAAAAAAAAAAAAAAAACei4vLL0+PBoP++UoHk8/6K6bi77uRZkQ8fK2tZauiVrY2SCKWW6sRzZvK+5NrS+6inffTP0/qsZJH8Gt+55NppD2bsxXFWnmkXQxmIv959VbcDCZv1+lRct/DbVW9JCsYZBWvX21u1ea/I+1yBxXJ7QWrb778oJ6zzpypJCIa05u5+DqN1d7Dp/sdBAAAAAAAAAAAAAAAAAAAFG4/+q2YvFpDQwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwBrf//3+JwbgsnpeT1fJBPcrImrcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAC+CfAAAA//8ECmb9")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
getdents64(r0, &(0x7f0000001b00)=""/4119, 0x1017)

10m31.284053937s ago: executing program 6 (id=3986):
syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xfff, 0x4000000007}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0)
modify_ldt$write2(0x11, 0x0, 0x0)
r2 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x82, 0x0, 0x0)
request_key(0x0, 0x0, &(0x7f0000000200)='\x00\x02c\xc8\xc0d\xcdQ\xc2\x96\xd67\x05@\xd1\xe6`\x00$\xb3\x88\x13\xa1L\x9b\xea\xce\xdd\x8f\x88\xfa*\x8f\x9f\x1dA\x11T\x86\xa3i\xd7V\xad\x90\xbdw\xc7\xd6\xc2\xa2\x8a\xec\xce\x850u\xac\x7f\x00\'\x04\x7f\xb2\x9c\xc5\\\x11ikh\xda\x1b\xa8\xbc\xa1O*\xe5\xa4\x1c\xdb\xa7\xd9:HL\x1f\x920\xc5\xcd\xac\\%O\x87\xac\xf0\vW\x8f\x1e\xc3\xf8\xc7B\x88\x8d\xe3`,\xcf\xb6\n\xd6\x921\xc7\xc3\xdb\xf3\x7f\xe7\x8dM\xab\xf0\xae\xc2\xaeX\x86A\xbb\xd6\xe7<\x04\x8aG\f$\xb92\\&\x99[\xba\x9a\x00s\xb6\xfa\x88\xbd\xb2\x03\xe99\xf4\xb04f)', 0xfffffffffffffffd)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000000)={0x1ff, 0x7, 0x208, 0xfffffffa, 0x6, 0x6, 0xccd6, 0x78, <r3=>0x0}, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0)={r3, 0x5, 0x8}, 0x8)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000000001050000018000000000000000010000851000000000000000020000000000000000000100da"], 0x0, 0x52}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000400000008000000010000008000", @ANYBLOB="00000058fba15639fd4ddbcb7aff6a54ea866a00706b29f883e106149ccfe3cc790f094385898eefb21587922a6d5a2445f5acdcfc519a54595968f41005d30d151f2951a36c338b785b3f21d06e0fea240ba3cad19f9aa51e0d8c6c0b2e8b2b3e12cc1550e7fc", @ANYRES32], 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r5, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r6, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0x4e22, 0xfffffffb, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="280000000000000029000000040000002b011000000004", @ANYRES32=r6], 0x28}, 0x4044804)

10m31.04772995s ago: executing program 37 (id=3986):
syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xfff, 0x4000000007}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0)
modify_ldt$write2(0x11, 0x0, 0x0)
r2 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x82, 0x0, 0x0)
request_key(0x0, 0x0, &(0x7f0000000200)='\x00\x02c\xc8\xc0d\xcdQ\xc2\x96\xd67\x05@\xd1\xe6`\x00$\xb3\x88\x13\xa1L\x9b\xea\xce\xdd\x8f\x88\xfa*\x8f\x9f\x1dA\x11T\x86\xa3i\xd7V\xad\x90\xbdw\xc7\xd6\xc2\xa2\x8a\xec\xce\x850u\xac\x7f\x00\'\x04\x7f\xb2\x9c\xc5\\\x11ikh\xda\x1b\xa8\xbc\xa1O*\xe5\xa4\x1c\xdb\xa7\xd9:HL\x1f\x920\xc5\xcd\xac\\%O\x87\xac\xf0\vW\x8f\x1e\xc3\xf8\xc7B\x88\x8d\xe3`,\xcf\xb6\n\xd6\x921\xc7\xc3\xdb\xf3\x7f\xe7\x8dM\xab\xf0\xae\xc2\xaeX\x86A\xbb\xd6\xe7<\x04\x8aG\f$\xb92\\&\x99[\xba\x9a\x00s\xb6\xfa\x88\xbd\xb2\x03\xe99\xf4\xb04f)', 0xfffffffffffffffd)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000000)={0x1ff, 0x7, 0x208, 0xfffffffa, 0x6, 0x6, 0xccd6, 0x78, <r3=>0x0}, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0)={r3, 0x5, 0x8}, 0x8)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000000001050000018000000000000000010000851000000000000000020000000000000000000100da"], 0x0, 0x52}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000400000008000000010000008000", @ANYBLOB="00000058fba15639fd4ddbcb7aff6a54ea866a00706b29f883e106149ccfe3cc790f094385898eefb21587922a6d5a2445f5acdcfc519a54595968f41005d30d151f2951a36c338b785b3f21d06e0fea240ba3cad19f9aa51e0d8c6c0b2e8b2b3e12cc1550e7fc", @ANYRES32], 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r5, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r6, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0x4e22, 0xfffffffb, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="280000000000000029000000040000002b011000000004", @ANYRES32=r6], 0x28}, 0x4044804)

9m15.283390904s ago: executing program 5 (id=4708):
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2)
unshare(0x24020400)
sendfile(r0, r0, &(0x7f00000000c0)=0x200, 0x8000)

9m15.205087666s ago: executing program 5 (id=4710):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1, 0x100004, 0xdf18, 0xe2a4, 0x1}, 0x50)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r0}, 0x38)

9m15.060191203s ago: executing program 5 (id=4714):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mincore(&(0x7f00002d1000/0x2000)=nil, 0x2000, &(0x7f0000000000)=""/153)

9m14.964555003s ago: executing program 5 (id=4716):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
llistxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)

9m14.707623683s ago: executing program 5 (id=4718):
syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x8084, &(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x17f, &(0x7f0000000180)="$eJzs27FrE1EcB/DfeTFtdeksDgcuTkGdHBWpIh4oSgadFKpLKwW7nC7mT/Ff8Q8SpJOTT5oriZaTJOhdQu/zWfKDby73eyF5j3fwXl9/f7B/dPzu6NlJbGdZDO5FET+z2I1LkUdtEgDARfIjpfieUkpbk9j5EimldXcEALTN+g8A/bNw/b+7psYAgNbY/wNA/7x4+erJ/bLce14U2xHfJtW4Gtevdf7wcbl3q5janV91UlXjfJbfrvPiz/xyXDnL7zTmw7h5o85PswdPy3P51dhvf/gAAADQC6NipnF/Pxr9La+r354PnNu/D+LaoLNhAAArOP746eDN4eHbDx0UO9M7Zt3edIUipfR5DV/L5hVfH02LPJZ5c74ZPfe6OP3J/u9Pbp4v8s5mJqBt8z/98tekM232BQAAAAAAAAAAAAAAzP3jUaFhRDREEcNFJwu2Oh8qAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzPwKAAD//5//TwE=")
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xa0)
getdents64(r1, &(0x7f0000001280)=""/4089, 0xff9)

9m13.985159759s ago: executing program 5 (id=4724):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@local, 0x1})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000280)={{@my=0x1, 0xc905}, 0x9, 0x3, 0x8, 0xf, 0x1ff8, 0x67db, 0x0, 0xb})

9m13.667439295s ago: executing program 38 (id=4724):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@local, 0x1})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000280)={{@my=0x1, 0xc905}, 0x9, 0x3, 0x8, 0xf, 0x1ff8, 0x67db, 0x0, 0xb})

6m24.112016623s ago: executing program 9 (id=6096):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff)
close(0xffffffffffffffff)
write(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_chmask\x00', 0x1, 0x0)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g_uac2/configs/c.1\x00', 0x1ff)
symlinkat(&(0x7f0000001300)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g_uac2/configs/c.1/uac2.usb0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g_uac2/UDC\x00', 0x1, 0x0)
write(r1, &(0x7f0000001600)='usbip-vudc.0', 0xc)
close(r1)
openat(0xffffffffffffff9c, &(0x7f0000001700)='./sys/class/udc/usbip-vudc.0/soft_connect\x00', 0x1, 0x0)
nanosleep(&(0x7f0000001900)={0x0, 0x5f5e100}, 0x0)

6m23.74317456s ago: executing program 9 (id=6097):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg(r0, &(0x7f0000006200)=[{{&(0x7f0000000040)=@l2tp={0x2, 0x0, @rand_addr=0x64010100, 0x3}, 0x80, &(0x7f0000000100)=[{&(0x7f00000000c0)='N', 0x1}], 0x1}}, {{&(0x7f0000000240)=@llc={0x1a, 0x1, 0x9, 0x33, 0x80, 0x81, @remote}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000300)="98", 0x1}], 0x1}}], 0x2, 0x40d5)

6m23.641943895s ago: executing program 9 (id=6098):
mount(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/mpls/platform_labels\x00', 0x1, 0x0)
write(r0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c0000001800050400000000000000001c140000fe0000010000000008001300000101"], 0x2c}}, 0x0)

6m23.581938591s ago: executing program 9 (id=6100):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f0000000ac0)="$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")
creat(&(0x7f0000000380)='./bus\x00', 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x139)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x19, 0x5, "ef359f413bb93852f7d6a4ae5c70f20ff8ee09e737ff0edf1139c2eb4b68c660e677df7019051caafa00afaaf755a314a10400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a323ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000522100000001", [0x8, 0x100]})
mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0)

6m23.130967753s ago: executing program 9 (id=6106):
prctl$PR_SCHED_CORE(0x41, 0x3, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000)

6m22.607178211s ago: executing program 9 (id=6109):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000008e00), 0x0, 0x0)
ioctl$FBIOBLANK(r0, 0x4611, 0x4)

6m22.392115892s ago: executing program 39 (id=6109):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000008e00), 0x0, 0x0)
ioctl$FBIOBLANK(r0, 0x4611, 0x4)

4m15.180122473s ago: executing program 7 (id=7219):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000001740)=[{{&(0x7f0000000480)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)="df", 0x1}], 0x1}}], 0x1, 0x24088804)
sendto$inet6(r0, &(0x7f0000000100)="8c", 0x1, 0x81, &(0x7f0000000240)={0xa, 0x0, 0x0, @private0, 0x1}, 0x1c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0)
shutdown(r0, 0x1)
setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x9, 0x4, 0x9}, 0x10)

4m14.447267784s ago: executing program 7 (id=7223):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = dup2(r0, r0)
getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, 0x0, &(0x7f00000003c0))

4m14.41224156s ago: executing program 7 (id=7224):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x6c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x40, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x2c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x25, 0x1, "bbac12a1395efeab389c32ad00ac4553f3c743e43ddd5c2376ba7af6cf97ac13d3"}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf0}}, 0x20008844)

4m14.327938061s ago: executing program 7 (id=7225):
r0 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000000240), 0x0, 0x559e, &(0x7f0000005680)="$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")
chdir(&(0x7f0000000000)='./file0\x00')
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000080)=0x2)
r1 = open(&(0x7f0000000280)='.\x00', 0x80, 0x28)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)=0x10)

4m13.839849717s ago: executing program 7 (id=7227):
syz_mount_image$iso9660(&(0x7f00000002c0), &(0x7f0000000000)='./file1\x00', 0x1010004, &(0x7f0000001100)=ANY=[@ANYBLOB='map=acorn,check=strict\x00map=acorn,nocompress,nojoliet,uid=', @ANYRES16, @ANYBLOB="4173657373696f6e3d3078303030303030303030303030303030612c636865636b3d7374726963742c00b8b80ceb18dec07a6622a61e1cc769d2d7db8198467f05be40d4b523c55b360000e67a44226cc4762de9a2dbaa74e7721513e6c25dca8d2200ef61c670440a038388e14d640ff7fc03f8c02c52ec2dba06bb71b0a0303d9f1de5fdd6d4a632a5174b21165aea62266d2639e4b3d3bf63cffdef60a86d61e3b1227f39f5a082f91f50884d5e7230075525990cd12afd5cfeed8bd4b02ae99e2af7d0d61dfe9a012338442ef16308e61498cc8fd0e400388aa83cd0c05390908b6108f6056d81ac493517"], 0xfe, 0x654, &(0x7f0000001d00)="$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")
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$kcm(0x11, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x0, 0x0, 0x40, 0x9, 0x90}, {0x8e, 0x2, 0x40, 0x80, 0x0, 0x1}, 0x7f, 0x0, 0x177}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4)

4m12.82982947s ago: executing program 7 (id=7230):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4)
setfsuid(0xee00)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2e}}], 0x10)

4m12.436491975s ago: executing program 40 (id=7230):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4)
setfsuid(0xee00)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2e}}], 0x10)

3m8.302914113s ago: executing program 1 (id=7602):
socket(0x26, 0x3, 0x7ac1)

3m8.179110704s ago: executing program 1 (id=7603):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000480)=@multiplanar_userptr={0x5, 0xa, 0x4, 0x80, 0x3, {}, {0x2, 0x1, 0xb, 0x9, 0x8, 0x0, "4a29a2b7"}, 0x80000000, 0x2, {&(0x7f00000003c0)=[{0x0, 0x80000000, {0x0}, 0x25}, {0x8, 0x3fb, {0x0}, 0x7ff}]}, 0x1})

3m8.129201595s ago: executing program 1 (id=7604):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x113)
r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, 0x0)
readv(r0, 0x0, 0x0)

3m8.129038692s ago: executing program 1 (id=7605):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x802000, 0x0)

3m8.038667494s ago: executing program 1 (id=7606):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)

3m7.737340657s ago: executing program 1 (id=7607):
syz_mount_image$erofs(&(0x7f00000003c0), &(0x7f0000000880)='./file0\x00', 0x18000c6, &(0x7f00000005c0)=ANY=[@ANYRES16=0x0, @ANYRES32], 0x0, 0x17d, &(0x7f0000001ac0)="$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")
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0)
getdents64(r0, 0x0, 0x22)

3m7.130566072s ago: executing program 41 (id=7607):
syz_mount_image$erofs(&(0x7f00000003c0), &(0x7f0000000880)='./file0\x00', 0x18000c6, &(0x7f00000005c0)=ANY=[@ANYRES16=0x0, @ANYRES32], 0x0, 0x17d, &(0x7f0000001ac0)="$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")
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0)
getdents64(r0, 0x0, 0x22)

1m48.997609176s ago: executing program 3 (id=8167):
syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000880)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f00000002c0)={[{@utf8}, {@utf8}, {@uid={'uid', 0x3d, 0xee00}}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@dmask={'dmask', 0x3d, 0x7e6f}}, {@namecase}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@namecase}, {@errors_remount}, {@errors_continue}]}, 0x1, 0x1533, &(0x7f0000006800)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x105042, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0x3000, 0x2, 0x11, r0, 0x0)
truncate(&(0x7f0000000140)='./file1\x00', 0x9)
r1 = socket$xdp(0x2c, 0x3, 0x0)
fcntl$lock(r1, 0x24, 0x0)

1m48.876808637s ago: executing program 3 (id=8168):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4008040)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)

1m48.696928009s ago: executing program 3 (id=8169):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x1000009}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@dioread_nolock}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0xfe, 0x566, &(0x7f00000015c0)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000140)={0x5, 0xf, 0x4, 0x5})

1m48.550873368s ago: executing program 3 (id=8170):
syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000300)='./file3\x00', 0x400, &(0x7f0000001040)=ANY=[], 0x1, 0xadc, &(0x7f0000001900)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file1\x00', 0x3f, 0x186)

1m48.350414473s ago: executing program 3 (id=8171):
io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0x8dd3, 0x1, 0x42, 0x235})
sched_setscheduler(0x0, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7f03)
ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f0000000100)={0x28, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea8"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

1m47.91656183s ago: executing program 3 (id=8172):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000076000d0b04000300fedbdf25030000030000000008000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n'], 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x4040000)

1m47.8318744s ago: executing program 42 (id=8172):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000076000d0b04000300fedbdf25030000030000000008000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n'], 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x4040000)

43.576136267s ago: executing program 0 (id=8902):
syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x8, &(0x7f0000002500)=ANY=[], 0x1, 0x1dd, &(0x7f00000002c0)="$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")
r0 = open(&(0x7f0000000040)='./file1\x00', 0x4000, 0x152)
lseek(r0, 0xfffffffffffffffb, 0x3)

43.462689072s ago: executing program 0 (id=8904):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000080)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000280)={0x30, 0x30, 0x8, "419cd49991b5b586"}, 0x0, 0x0, 0x0, 0x0})

42.826514755s ago: executing program 0 (id=8909):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000009c0)=@nat={'nat\x00', 0x670, 0x5, 0x678, 0x0, 0x0, 0xfeffffff, 0x330, 0x0, 0x5e0, 0x5e0, 0xffffffff, 0x5e0, 0x528, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, 0x0, 0x0, 'wlan1\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0x308, 0x330, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'veth0_vlan\x00', {0xff}, 'team0\x00', {0xff}, 0xe, 0x1c}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00', {0x6}}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000002]}}}, @common=@set={{0x40}, {{0x0, [0x4, 0x0, 0x0, 0x3]}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@multicast2, @rand_addr, 0x0, 0x0, 'veth0\x00', 'ip6tnl0\x00', {}, {}, 0x73}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x8, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @gre_key=0x80}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010100, @ipv4=@dev, @port=0xfffd}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x6d8)

42.826385451s ago: executing program 0 (id=8910):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0)
chroot(&(0x7f0000000580)='./file0/../file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00')

42.766884785s ago: executing program 0 (id=8911):
mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x1, 0x0)
write(r0, 0x0, 0x0)

42.036843938s ago: executing program 0 (id=8917):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000400)=@generic={&(0x7f0000000440)='./file0\x00', r0}, 0x18)

41.85175623s ago: executing program 43 (id=8917):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000400)=@generic={&(0x7f0000000440)='./file0\x00', r0}, 0x18)

1.695193381s ago: executing program 8 (id=9382):
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000000), 0x2000057, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}})

1.594618683s ago: executing program 8 (id=9385):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0)
ioctl(r0, 0x400c4d05, 0x0)

1.545556065s ago: executing program 8 (id=9386):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004)
ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00')
syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0xe, 0x14, 0x66, 0xe0, 0x3, 0x11, 0x0, @empty, @empty=0xe0000001}, {0x4e1f, 0x4e20, 0x8}}}}}, 0x0)

1.435543724s ago: executing program 8 (id=9387):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10)
sendto$inet(r0, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10)
setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000040)=0xfffd, 0x4)
recvmmsg(r0, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x0, 0x0)

1.363797756s ago: executing program 8 (id=9389):
syz_usb_connect$uac2(0x3, 0x8b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000300000020532b2300400001020301090279000301fb4004080b02010103200109040000000101200009240108000c1900e508240a00040b060308240a090103060209040100000102200009040101010102200f0e0501"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0})
accept$alg(0xffffffffffffffff, 0x0, 0x0)

865.878073ms ago: executing program 4 (id=9395):
r0 = syz_open_dev$video(&(0x7f0000000100), 0x9, 0x1e3a00)
ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000000)={0x3, "c5c2a91e002b1b800000ffe73d5eff0010ffffffe70000ffe700000000c000", 0x3, 0xa, 0x3, 0xf9e2, 0x0, 0x4})

803.389176ms ago: executing program 4 (id=9397):
syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000040)={[{@test_dummy_encryption}, {@grpquota}]}, 0x2, 0xbbf, &(0x7f0000000440)="$eJzs3M9rHOUbAPBnJptt2ub73VRErBcjIi2I26SSYotgKxUvHgS9Cg3ppoRsf5BEatIcNvoPiHoWvAhqUTzYcy+KXr1oe1U8CEVioyCikdkfSdpk09TudmL7+cC7877z7u7zPDvszrywuwHctwazmzRib0ScSCJKzf1pRBTrvb6IWuN+S4vzY78vzo8lsbz8yi9JJBFxfXF+rPVcSXO7uznoi4hvn0/igbfWx52enZscrVYrU83xgZnT5w5Mz849NXF69FTlVOXM8KFnRg6OHBo6PNKxWv/44eil3x578afanx//dfHXdz9M4mj0N+fW1tEpgzG48pqsVYiI0U4Hy0lPs561dSaFWzwo7XJSAAC0la65hnsoStETqxdvpfjyu1yTAwAAADpiuSdiGQAAALjHJdb/AAAAcI9rfQ/g+uL8WKvl+42Eu+vasYgYaNS/1GyNmULU6tu+6I2IXdeTWPuz1qTxsDs2GBE/Xj38WdaiS79D3kxtISIe3uj4J/X6B+q/4l5ffxoRQx2IP3jT+L9U/9EOxM+7fgDuT5ePNU5k689/6cr1T2xw/itscO76N/I+/7Wu/5bWXf+t1t/T5vrv5S3GuPDR++fbzWX1P3vphU9bLYufbe+oqNtwbSHikcJG9Scr9Sdt6j+xxRilv89X2s3lXf/yBxH7YuP6W5LN/5/owPhEtTLUuN0wxsI3I5+0i593/dnx39Wm/tb/P7U7/ue2GOO148c/X7fz6mp38/rTn4vJq/VesbnnjdGZmanhiGLy0vr9BzfPpXWf1nNk9e9/fPP3/0b1Z58JtebrkK0FFprbbPzmTTGfu3jhi3b5tNZ/eR7/k22O/9r6vy6sP/5vbzHGE1+9s7/d3Nr1b9ay+K21MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC0pBHRH0laXumnabkcsTsiHoxdafXs9MyT42dfP3Mym4sYiN50fKJaGYqIUmOcZOPhen91fPCm8dMRsSci3ivtrI/LY2erJ/MuHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgBW7I6I/krQcEWlELJXStFzOOysAAACg4wZuHBbzygMAAADonoG8EwAAAAC6zvofAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACALtvz6OUrSUTUjuyst0yxOdeba2ZAt6V5JwDkpifvBIDcFPJOAMjNba7xXS7APSi5xXxf25kdHc8FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgO1r397LV5KIqB3ZWW+ZYnOuN9fMgG5L804AyE3PZpOFu5cHcPd5i8P9yxofSG4x37d6n9qNMzu6lhMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA209/vSVpOSKKzX3lcsT/ImIgepPxiWplKCL+HxHfl3p3ZOPhlUf35ZY3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnTU9Ozc5Wq1WprJOGs3Oyh6d1U7SeMVq2yUfnTvsFGNbpLFNO3l/MgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAkIfp2bnJ0Wq1MjWddyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA3qZn5yZHq9XKVBc7edcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB+/gkAAP//FUoKgg==")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0x521ca1, 0x0, 0x80, 0x0, &(0x7f0000000080))
chdir(&(0x7f00000003c0)='./bus\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x19a)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000002040))

734.07812ms ago: executing program 2 (id=9398):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48)
r2 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1})
sendmmsg$inet(r2, &(0x7f0000001500)=[{{0x0, 0x100000019, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x34000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40)
recvmmsg(r2, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)=""/207, 0xcf}], 0x1, &(0x7f00000027c0)=""/4096, 0x1000}, 0x6}], 0x1, 0x22, 0x0)

452.023384ms ago: executing program 2 (id=9399):
r0 = msgget$private(0x0, 0x2)
msgsnd(r0, &(0x7f0000000c40)={0x2, "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"}, 0x401, 0x800)

354.427173ms ago: executing program 4 (id=9400):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2c, r1, 0x301, 0x70bd26, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x40006)

354.160113ms ago: executing program 2 (id=9401):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='c 75:*\tr'], 0x3d)
mkdirat$cgroup(r0, &(0x7f00000001c0)='syz1\x00', 0x1ff)

207.124197ms ago: executing program 2 (id=9402):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_ifreq(r0, 0x89f0, &(0x7f00000000c0)={'bond0\x00', @ifru_names='vcan0\x00'})

135.499083ms ago: executing program 2 (id=9403):
r0 = landlock_create_ruleset(&(0x7f0000000040)={0x8040, 0x3, 0x2}, 0x18, 0x0)
landlock_restrict_self(r0, 0x6)
landlock_restrict_self(r0, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$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")

135.232365ms ago: executing program 4 (id=9404):
syz_emit_ethernet(0x140, &(0x7f00000006c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb07a24f79ee3f86dd60200000010a2f00fe8000000000000000000000000000bbff0200000000000000000000000000010000883e01"], 0x0)

63.602646ms ago: executing program 4 (id=9405):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x34, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x4f}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xa0}]]}, 0x34}}, 0x0)

61.96183ms ago: executing program 8 (id=9406):
mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000200)='./my_dbroot\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/target/dbroot\x00', 0x1, 0x0)
write(r0, &(0x7f0000000400)='./my_dbroot', 0xb)
close(r0)
mkdir(&(0x7f0000000500)='./my_dbroot/alua\x00', 0x1ff)
mkdir(&(0x7f0000000600)='./my_dbroot/alua/usb_gadget\x00', 0x1ff)
mkdir(&(0x7f0000000700)='./my_dbroot/alua/usb_gadget/naa.1234567890abcdef+1\x00', 0x1ff)
mkdir(&(0x7f0000000800)='./my_configfs/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000900)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff)
mkdir(&(0x7f0000000a00)='./my_configfs/target/usb_gadget\x00', 0x1ff)
mkdir(&(0x7f0000000b00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff)
mkdir(&(0x7f0000000c00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff)
mkdir(&(0x7f0000000d00)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff)
mkdir(&(0x7f0000000e00)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0)
write(r1, &(0x7f0000001000)='rd_pages=', 0x9)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0)
write(r2, &(0x7f0000001200)='1', 0x1)
close(r2)
mkdir(&(0x7f0000001300)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0\x00', 0x1ff)
symlink(&(0x7f0000001400)='./my_configfs/target/core/rd_mcp_0/dev0\x00', &(0x7f0000001500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/virtual_lun\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/alua_tg_pt_write_md\x00', 0x1, 0x0)
write(r3, &(0x7f0000001700)='1', 0x1)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000001800)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/alua_tg_pt_offline\x00', 0x1, 0x0)
write(r4, &(0x7f0000001900)='1', 0x1)
close(r4)

1.446138ms ago: executing program 4 (id=9407):
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000003840)={@map, 0xffffffffffffffff, 0x1a, 0x65}, 0x20)

0s ago: executing program 2 (id=9408):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x28, r1, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0xc, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}]}]}, 0x28}}, 0x0)

kernel console output (not intermixed with test programs):

607635][T27245] SQUASHFS error: Unable to read inode 0xa7
[ 1034.688783][T27249] Invalid source name
[ 1034.996941][T27262] netlink: 'syz.0.8270': attribute type 32 has an invalid length.
[ 1035.077613][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1035.103374][T27268] loop0: detected capacity change from 0 to 2048
[ 1035.143636][T27268] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1035.178800][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1035.181227][T27258] loop2: detected capacity change from 0 to 32768
[ 1035.189948][T27258] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.8269 (27258)
[ 1035.207249][T27277] netlink: 'syz.8.8276': attribute type 1 has an invalid length.
[ 1035.216734][T27258] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1035.219885][T27258] BTRFS info (device loop2): using sha256 checksum algorithm
[ 1035.268024][T27258] BTRFS info (device loop2): enabling ssd optimizations
[ 1035.270283][T27258] BTRFS info (device loop2): turning on async discard
[ 1035.272360][T27258] BTRFS info (device loop2): enabling free space tree
[ 1035.289813][T26872] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1035.341031][T21347] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1035.396867][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1035.632199][T27300] pimreg0: tun_chr_ioctl cmd 2147767506
[ 1035.658966][T27301] loop0: detected capacity change from 0 to 512
[ 1035.665899][T27301] EXT4-fs: Ignoring removed nobh option
[ 1035.728594][T27301] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #15: comm syz.0.8281: corrupted in-inode xattr: overlapping e_value 
[ 1035.740485][T27301] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[ 1035.744097][T27301] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.8281: couldn't read orphan inode 15 (err -117)
[ 1035.747825][    C0] EXT4-fs (loop0): error count since last fsck: 1
[ 1035.747843][    C0] EXT4-fs (loop0): initial error at time 1785253429: ext4_iget_extra_inode:5180: inode 15
[ 1035.747863][    C0] EXT4-fs (loop0): last error at time 1785253429: ext4_iget_extra_inode:5180: inode 15
[ 1035.873144][T27301] loop0: lost filesystem error report for type 5 error -117
[ 1035.908926][T27301] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1035.998104][T27304] loop8: detected capacity change from 0 to 1024
[ 1036.032590][T26872] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1036.119913][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1036.257730][   T33] audit: type=1800 audit(1785253429.931:1853): pid=27304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.8283" name=80 dev="loop8" ino=25 res=0 errno=0
[ 1036.371634][T27322] netlink: 'syz.8.8290': attribute type 8 has an invalid length.
[ 1036.377055][T27324] netlink: 'syz.0.8291': attribute type 4 has an invalid length.
[ 1036.416802][T27326] loop2: detected capacity change from 0 to 8
[ 1036.451628][T27326] SQUASHFS error: lzo decompression failed, data probably corrupt
[ 1036.461931][T27326] SQUASHFS error: Failed to read block 0x0: -5
[ 1036.474875][T27326] SQUASHFS error: lzo decompression failed, data probably corrupt
[ 1036.477634][T27326] SQUASHFS error: Failed to read block 0x0: -5
[ 1036.479718][   T33] audit: type=1800 audit(1785253430.161:1854): pid=27326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.8292" name="file2" dev="loop2" ino=3 res=0 errno=0
[ 1036.479997][T27326] SQUASHFS error: lzo decompression failed, data probably corrupt
[ 1036.491658][T27326] SQUASHFS error: Failed to read block 0x0: -5
[ 1036.503045][   T33] audit: type=1800 audit(1785253430.171:1855): pid=27326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.8292" name="file2" dev="loop2" ino=3 res=0 errno=0
[ 1036.527693][T27326] SQUASHFS error: lzo decompression failed, data probably corrupt
[ 1036.533046][T27326] SQUASHFS error: Failed to read block 0x0: -5
[ 1036.544308][T27326] SQUASHFS error: lzo decompression failed, data probably corrupt
[ 1036.548685][T27326] SQUASHFS error: Failed to read block 0x0: -5
[ 1036.554384][T27326] SQUASHFS error: lzo decompression failed, data probably corrupt
[ 1036.558499][T27326] SQUASHFS error: Failed to read block 0x0: -5
[ 1036.560780][T27326] SQUASHFS error: lzo decompression failed, data probably corrupt
[ 1036.563473][T27326] SQUASHFS error: Failed to read block 0x0: -5
[ 1036.580162][T27334] SQUASHFS error: lzo decompression failed, data probably corrupt
[ 1036.584731][T27334] SQUASHFS error: Failed to read block 0x0: -5
[ 1036.591014][T27334] SQUASHFS error: lzo decompression failed, data probably corrupt
[ 1036.595616][T27334] SQUASHFS error: Failed to read block 0x0: -5
[ 1036.605588][T27334] SQUASHFS error: lzo decompression failed, data probably corrupt
[ 1036.612545][T27334] SQUASHFS error: Failed to read block 0x0: -5
[ 1037.285612][T27344] loop8: detected capacity change from 0 to 32768
[ 1037.297187][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1037.303751][T27344] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1037.340253][T27344] XFS (loop8): Ending clean mount
[ 1037.351845][T27344] XFS (loop8): Quotacheck needed: Please wait.
[ 1037.533422][T27359] loop0: detected capacity change from 0 to 8
[ 1037.553265][T27359] SQUASHFS error: lzo decompression failed, data probably corrupt
[ 1037.561310][T27359] SQUASHFS error: Failed to read block 0x91: -5
[ 1037.563599][T27359] SQUASHFS error: Unable to read metadata cache entry [8f]
[ 1037.568816][T27359] SQUASHFS error: Unable to read inode 0x11f
[ 1037.764081][T27344] XFS (loop8): Quotacheck: Done.
[ 1037.852981][T27371] loop2: detected capacity change from 0 to 16
[ 1037.859287][T27371] erofs (device loop2): DAX unsupported by block device. Turning off DAX.
[ 1037.870645][T27371] erofs (device loop2): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk!
[ 1037.883964][T27371] erofs (device loop2): mounted with root inode @ nid 36.
[ 1038.006514][T16005] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1038.029249][T27371] erofs (device loop2): readahead error at folio 7 @ nid 36
[ 1038.037853][T27371] erofs (device loop2): readahead error at folio 6 @ nid 36
[ 1038.040856][T27371] erofs (device loop2): bogus lookback distance 0 @ lcn 47 of nid 36
[ 1038.044453][T27371] erofs (device loop2): readahead error at folio 5 @ nid 36
[ 1038.069143][T27371] erofs (device loop2): bogus lookback distance 0 @ lcn 38 of nid 36
[ 1038.072623][T27371] erofs (device loop2): readahead error at folio 4 @ nid 36
[ 1038.076730][T27371] erofs (device loop2): readahead error at folio 3 @ nid 36
[ 1038.081209][T27376] syz.0.8310: attempt to access beyond end of device
[ 1038.081209][T27376] loop0: rw=8388608, sector=1024, nr_sectors = 2 limit=64
[ 1038.088315][T27371] erofs (device loop2): readahead error at folio 2 @ nid 36
[ 1038.130739][T27376] Buffer I/O error on dev loop0, logical block 512, async page read
[ 1038.136526][T27376] syz.0.8310: attempt to access beyond end of device
[ 1038.136526][T27376] loop0: rw=8388608, sector=113152, nr_sectors = 2 limit=64
[ 1038.141452][T27376] Buffer I/O error on dev loop0, logical block 56576, async page read
[ 1038.163275][T27371] erofs (device loop2): readahead error at folio 1 @ nid 36
[ 1038.167122][T27371] erofs (device loop2): bogus lookback distance 0 @ lcn 4 of nid 36
[ 1038.170522][T27371] erofs (device loop2): readahead error at folio 0 @ nid 36
[ 1038.173417][T27371] syz.2.8308: attempt to access beyond end of device
[ 1038.173417][T27371] loop2: rw=524288, sector=89, nr_sectors = 1 limit=16
[ 1038.196834][ T5078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1038.215274][T27371] syz.2.8308: attempt to access beyond end of device
[ 1038.215274][T27371] loop2: rw=524288, sector=65642, nr_sectors = 1 limit=16
[ 1038.225402][T27371] syz.2.8308: attempt to access beyond end of device
[ 1038.225402][T27371] loop2: rw=524288, sector=98797, nr_sectors = 1 limit=16
[ 1038.371935][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1038.453191][T27371] syz.2.8308: attempt to access beyond end of device
[ 1038.453191][T27371] loop2: rw=524288, sector=36, nr_sectors = 1 limit=16
[ 1038.473233][T27371] erofs (device loop2): bogus lookback distance 0 @ lcn 4 of nid 36
[ 1038.479293][T27371] syz.2.8308: attempt to access beyond end of device
[ 1038.479293][T27371] loop2: rw=0, sector=89, nr_sectors = 1 limit=16
[ 1038.491126][T27371] syz.2.8308: attempt to access beyond end of device
[ 1038.491126][T27371] loop2: rw=0, sector=65642, nr_sectors = 1 limit=16
[ 1038.509397][T27371] erofs (device loop2): read error -5 @ 0 of nid 36
[ 1038.520343][T27371] erofs (device loop2): failed to readdir of logical block 0 of nid 36
[ 1038.563140][T27389] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1038.764554][T27399] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma?
[ 1038.829543][T27402] batadv0: entered promiscuous mode
[ 1038.921322][T27402] macvtap1: entered promiscuous mode
[ 1038.926755][T27402] macvtap1: entered allmulticast mode
[ 1038.930445][T27402] batadv0: entered allmulticast mode
[ 1038.941561][T27402] 8021q: adding VLAN 0 to HW filter on device macvtap1
[ 1038.970672][T27402] batadv0: left allmulticast mode
[ 1038.973164][T27402] batadv0: left promiscuous mode
[ 1039.399183][T24334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1039.703812][T27439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1039.707735][T27439] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1039.983385][T27441] netlink: 200 bytes leftover after parsing attributes in process `syz.8.8328'.
[ 1040.148562][T27445] set_capacity_and_notify: 3 callbacks suppressed
[ 1040.148580][T27445] loop8: detected capacity change from 0 to 4096
[ 1040.158168][T27445] ntfs3(loop8): Different NTFS sector size (2048) and media sector size (512).
[ 1040.396877][T27461] netlink: 'syz.0.8348': attribute type 1 has an invalid length.
[ 1040.437710][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1040.475025][T27465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8350'.
[ 1040.479256][T27465] netlink: 'syz.0.8350': attribute type 3 has an invalid length.
[ 1040.542800][T27455] loop8: detected capacity change from 0 to 32768
[ 1040.549062][T27455] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.8342 (27455)
[ 1040.573197][T27455] BTRFS info (device loop8): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[ 1040.589790][T27455] BTRFS info (device loop8): using crc32c checksum algorithm
[ 1040.630944][T27455] BTRFS info (device loop8): enabling ssd optimizations
[ 1040.633367][T27455] BTRFS info (device loop8): turning on async discard
[ 1040.636912][T27455] BTRFS info (device loop8): enabling free space tree
[ 1040.693884][T16005] BTRFS info (device loop8): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[ 1041.411155][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1041.495016][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1042.484204][T27557] netlink: 140 bytes leftover after parsing attributes in process `syz.8.8379'.
[ 1042.517699][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1042.528733][T16195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1042.562499][T26870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1042.568195][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1042.656099][T27566] program syz.0.8382 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1042.909107][T27582] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8391'.
[ 1042.995576][T26870] usb 9-1: new high-speed USB device number 54 using dummy_hcd
[ 1043.038528][   T33] audit: type=1326 audit(1785253436.721:1856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27589 comm="syz.0.8394" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1af759de99 code=0x0
[ 1043.150165][T26870] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1043.154019][T26870] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[ 1043.158159][T26870] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1043.164797][T26870] usb 9-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00
[ 1043.165405][   T33] audit: type=1800 audit(1785253436.831:1857): pid=27560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.8378" name="/" dev="fuse" ino=1 res=0 errno=0
[ 1043.179723][T26870] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 1043.184395][T26870] usb 9-1: Product: syz
[ 1043.187434][T26870] usb 9-1: Manufacturer: syz
[ 1043.191363][T27572] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1043.196118][T26870] usb_debug 9-1:1.0: debug converter detected
[ 1043.201990][T26870] usb 9-1: debug converter now attached to ttyUSB0
[ 1043.262306][T27600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8397'.
[ 1043.410483][T26870] usb 9-1: USB disconnect, device number 54
[ 1043.417000][T26870] debug ttyUSB0: debug converter now disconnected from ttyUSB0
[ 1043.426903][T26870] usb_debug 9-1:1.0: device disconnected
[ 1043.477495][T27602] loop2: detected capacity change from 0 to 32768
[ 1043.480196][T27602] xfs: Deprecated parameter 'attr2'
[ 1043.486908][T27602] XFS: attr2 mount option is deprecated.
[ 1043.521024][T27602] XFS (loop2): DAX unsupported by block device. Turning off DAX.
[ 1043.524089][T27602] XFS (loop2): Mounting V5 filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 in no-recovery mode. Filesystem will be inconsistent.
[ 1043.591953][T21347] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1043.635184][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1043.814583][T27624] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8406'.
[ 1044.254968][T24334] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[ 1044.415633][T24334] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1044.421997][T24334] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1044.436909][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1044.448484][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1044.453647][T24334] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1044.459586][T24334] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1044.467548][T24334] usb 3-1: SerialNumber: syz
[ 1044.680516][T24334] usb 3-1: 0:2 : does not exist
[ 1044.713298][T24334] usb 3-1: USB disconnect, device number 35
[ 1044.740913][ T9036] udevd[9036]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[ 1045.124371][T27665] (syz.0.8423,27665,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[ 1045.127584][T27665] (syz.0.8423,27665,0):ocfs2_fill_super:1177 ERROR: status = -22
[ 1045.489329][T27673] loop2: detected capacity change from 0 to 1024
[ 1045.513790][T27674] loop8: detected capacity change from 0 to 4096
[ 1045.521236][T27674] NILFS (loop8): invalid segment: Checksum error in segment payload
[ 1045.523851][T27674] NILFS (loop8): trying rollback from an earlier position
[ 1045.549986][T27674] NILFS (loop8): recovery complete
[ 1045.566424][T27675] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1045.591194][T27673] hfsplus: cannot replace xattr
[ 1045.715690][T24334] net_ratelimit: 2 callbacks suppressed
[ 1045.715703][T24334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1046.119083][T27700] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 1046.129166][T27700] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[ 1046.133021][T27700] bridge_slave_1: invalid flags given to default FDB implementation
[ 1046.556913][T27715] xt_AUDIT: Audit type out of range (valid range: 0..2)
[ 1046.656164][T27703] loop8: detected capacity change from 0 to 131072
[ 1046.662927][T27703] F2FS-fs (loop8): Invalid log sectorsize (67108873)
[ 1046.665682][T27703] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[ 1046.668945][T27703] F2FS-fs (loop8): invalid crc value
[ 1046.716899][T27703] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1046.732019][T27703] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0
[ 1046.736343][T27703] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4
[ 1046.755546][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1047.479288][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1047.631018][T27739] Bluetooth: MGMT ver 1.23
[ 1047.790305][T27742] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[ 1047.793720][T27745] loop2: detected capacity change from 0 to 512
[ 1047.796616][T24334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1047.900695][T27745] EXT4-fs (loop2): revision level too high, forcing read-only mode
[ 1047.904233][T27745] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[ 1047.913422][T27745] System zones: 0-1, 15-15, 18-18, 34-34
[ 1047.922607][T27745] EXT4-fs (loop2): orphan cleanup on readonly fs
[ 1047.930584][T27745] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0
[ 1047.940857][T27745] EXT4-fs warning (device loop2): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[ 1047.962834][T27745] EXT4-fs (loop2): Cannot turn on quotas: error -22
[ 1047.980069][T27745] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.8456: bad orphan inode 16
[ 1048.004738][T27745] loop2: lost filesystem error report for type 5 error -117
[ 1048.005331][T27745] ext4_test_bit(bit=15, block=18) = 1
[ 1048.009472][T27745] is_bad_inode(inode)=0
[ 1048.010846][T27745] NEXT_ORPHAN(inode)=0
[ 1048.012224][T27745] max_ino=32
[ 1048.013336][T27745] i_nlink=2
[ 1048.018326][T27745] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1048.021501][T27748] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8457'.
[ 1048.034330][T27748] bridge_slave_1: left allmulticast mode
[ 1048.045489][T27748] bridge_slave_1: left promiscuous mode
[ 1048.055772][T27748] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1048.061925][T27748] bridge_slave_0: left allmulticast mode
[ 1048.063936][T27748] bridge_slave_0: left promiscuous mode
[ 1048.077507][T27748] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1048.121190][T21347] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1048.748702][T27750] loop2: detected capacity change from 0 to 32768
[ 1048.778644][T27750] find_entry called with index >= next_index
[ 1048.781645][T27750] find_entry called with index >= next_index
[ 1048.785366][T27750] find_entry called with index >= next_index
[ 1048.790420][T27750] find_entry called with index >= next_index
[ 1048.793275][T27750] find_entry called with index >= next_index
[ 1048.796167][T27750] add_index: next_index = 0.  Resetting!
[ 1048.798098][T27750] find_entry called with index >= next_index
[ 1048.800310][T27750] find_entry called with index >= next_index
[ 1048.802780][T27750] find_entry called with index >= next_index
[ 1048.808079][T27750] find_entry called with index >= next_index
[ 1048.830949][T27750] non-latin1 character 0x3ff found in JFS file name
[ 1048.833360][T27750] mount with iocharset=utf8 to access
[ 1048.836577][ T5078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1049.338304][T27779] binder: 27778:27779 ioctl c0306201 200000000640 returned -22
[ 1049.767409][T27798] batadv0: Caught tx_queue_len zero misconfig
[ 1049.778343][T27798] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.8481'.
[ 1049.875887][ T5078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1050.020910][T27764] orangefs_mount: mount request failed with -4
[ 1050.123108][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1050.334365][T27831] tap0: tun_chr_ioctl cmd 1074025677
[ 1050.336859][T27831] tap0: linktype set to 64765
[ 1050.401808][T27825] loop8: detected capacity change from 0 to 32768
[ 1050.406394][T27825] (syz.8.8492,27825,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1050.416784][T27825] (syz.8.8492,27825,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1050.430606][T27825] JBD2: Ignoring recovery information on journal
[ 1050.460654][T27825] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[ 1050.521176][ T6231] ocfs2: Finishing quota recovery on device (7,8) for slot 0
[ 1050.566978][T16005] ocfs2: Unmounting device (7,8) on (node local)
[ 1050.915444][ T5078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1050.943678][T27855] netlink: 'syz.8.8503': attribute type 21 has an invalid length.
[ 1050.947458][T27855] netlink: 156 bytes leftover after parsing attributes in process `syz.8.8503'.
[ 1050.999983][T27858] vxcan0: tx address claim with dest, not broadcast
[ 1051.955267][ T5078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1052.023658][T27900] loop8: detected capacity change from 0 to 128
[ 1052.063354][T27900] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256
[ 1052.074162][T27900] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1052.111493][T27900] overlayfs: upper fs needs to support d_type.
[ 1052.116512][T27900] overlayfs: upper fs does not support tmpfile.
[ 1052.171041][T27905] CUSE: info not properly terminated
[ 1052.293981][ T6231] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1052.300227][ T6231] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1052.305839][ T6231] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1052.311875][ T6231] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1052.335864][T27917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1052.348278][T27917] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1052.565253][T24334] usb 9-1: new high-speed USB device number 55 using dummy_hcd
[ 1052.718658][T24334] usb 9-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[ 1052.721956][T24334] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1052.725509][T24334] usb 9-1: Product: syz
[ 1052.726876][T24334] usb 9-1: Manufacturer: syz
[ 1052.728426][T24334] usb 9-1: SerialNumber: syz
[ 1052.735344][T24334] usb 9-1: config 0 descriptor??
[ 1052.742364][T24334] gspca_main: sunplus-2.14.0 probing 04fc:504a
[ 1052.996627][ T5078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1053.079715][T27927] netlink: 'syz.0.8535': attribute type 28 has an invalid length.
[ 1053.083124][T27927] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8535'.
[ 1053.148837][T24334] gspca_sunplus: reg_w_riv err -71
[ 1053.153135][T24334] sunplus 9-1:0.0: probe with driver sunplus failed with error -71
[ 1053.165477][T24334] usb 9-1: USB disconnect, device number 55
[ 1053.171247][ T5078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1053.247459][T27933] input: syz1 as /devices/virtual/input/input38
[ 1053.400915][T27940] netlink: 'syz.0.8540': attribute type 1 has an invalid length.
[ 1053.491959][T27949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1053.501420][T27949] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1053.950989][T27958] loop8: detected capacity change from 0 to 32768
[ 1053.965564][T27958] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.8549 (27958)
[ 1053.980274][T27958] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1053.984342][T27958] BTRFS info (device loop8): using crc32c checksum algorithm
[ 1054.035948][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1054.043042][T27958] BTRFS info (device loop8): enabling ssd optimizations
[ 1054.045830][T27958] BTRFS info (device loop8): turning on flush-on-commit
[ 1054.048045][T27958] BTRFS info (device loop8): enabling free space tree
[ 1054.050134][T27958] BTRFS info (device loop8): enabling auto defrag
[ 1054.052118][T27958] BTRFS info (device loop8): use lzo compression, level 1
[ 1054.054292][T27958] BTRFS info (device loop8): max_inline set to 4096
[ 1054.199525][T16005] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1054.220655][T27976] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8551'.
[ 1054.327408][T27979] (syz.0.8553,27979,0):ocfs2_get_sector:1713 ERROR: status = -5
[ 1054.330141][T27979] (syz.0.8553,27979,0):ocfs2_sb_probe:753 ERROR: status = -5
[ 1054.332512][T27979] (syz.0.8553,27979,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[ 1054.338461][T27979] (syz.0.8553,27979,0):ocfs2_fill_super:1177 ERROR: status = -5
[ 1054.602541][ T1384] ieee802154 phy1 wpan1: encryption failed: -22
[ 1054.608876][T24334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1054.886006][T28009] netlink: 44 bytes leftover after parsing attributes in process `syz.8.8567'.
[ 1054.889724][T28009] netlink: 'syz.8.8567': attribute type 6 has an invalid length.
[ 1054.892926][T28009] netlink: 'syz.8.8567': attribute type 5 has an invalid length.
[ 1054.898283][T28009] netlink: 'syz.8.8567': attribute type 4 has an invalid length.
[ 1055.046750][T28014] netlink: 'syz.8.8569': attribute type 2 has an invalid length.
[ 1055.222528][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1055.231356][T28014] : entered promiscuous mode
[ 1055.521891][   T33] audit: type=1800 audit(1785253449.201:1858): pid=28025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.8573" name="bus" dev="tmpfs" ino=7481 res=0 errno=0
[ 1055.717654][ T5808] Bluetooth: hci3: Opcode 0x1003 failed: -110
[ 1055.878461][T16195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1055.924310][T28031] loop8: detected capacity change from 0 to 32768
[ 1055.931327][T28031] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.8576 (28031)
[ 1055.942705][T28031] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1055.951388][T28031] BTRFS info (device loop8): using sha256 checksum algorithm
[ 1056.043267][T28031] BTRFS info (device loop8): enabling ssd optimizations
[ 1056.057397][T28031] BTRFS info (device loop8): turning on async discard
[ 1056.060197][T28031] BTRFS info (device loop8): enabling free space tree
[ 1056.097850][T16005] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1056.278764][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1056.295349][T28065] loop8: detected capacity change from 0 to 4096
[ 1056.825885][T28083] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1056.863588][T28083] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1057.339515][T28089] loop8: detected capacity change from 0 to 131072
[ 1057.350162][T24334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1057.351245][ T6226] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1057.375081][ T6226] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1057.380208][ T6226] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1057.383704][ T6226] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1057.388339][ T6226] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1057.391827][ T6226] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1057.396798][ T6226] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1057.400805][ T6226] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1057.428452][T28089] XFS (loop8): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[ 1057.472207][T28089] XFS (loop8): Torn write (CRC failure) detected at log block 0x80. Truncating head block from 0xc0.
[ 1057.487609][T28089] XFS (loop8): Corruption warning: Metadata has LSN (1:192) ahead of current LSN (1:128). Please unmount and run xfs_repair (>= v4.3) to resolve.
[ 1057.493398][T28089] XFS (loop8): log mount/recovery failed: error -22
[ 1057.499142][T28089] XFS (loop8): log mount failed
[ 1057.664592][T28111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1057.743373][T28111] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1057.849556][T28115] loop8: detected capacity change from 0 to 1024
[ 1057.898618][T28115] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[ 1057.920840][T28115] hfsplus: hfsplus: invalid btree header node
[ 1057.928504][T28115] hfsplus: (loop8): Extents Overflow File (cnid 0x3) map record invalid or bitmap corruption detected, forcing read-only.
[ 1057.937778][T28115] hfsplus: Run fsck.hfsplus to repair.
[ 1057.966743][T28119] loop2: detected capacity change from 0 to 512
[ 1057.994082][T28119] EXT4-fs (loop2): 1 truncate cleaned up
[ 1058.000036][T28119] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1058.046850][T28119] EXT4-fs warning (device loop2): ext4_resize_begin:72: won't resize using backup superblock at 1
[ 1058.083885][T21347] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1058.332729][T28135] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1058.339914][T28135] batadv_slave_1: entered promiscuous mode
[ 1058.383717][  T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1058.411635][T28137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1058.420881][T28137] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1058.448311][T28139] loop2: detected capacity change from 0 to 256
[ 1058.454029][T28139] exfat: Deprecated parameter 'utf8'
[ 1058.458645][T28139] exfat: Deprecated parameter 'namecase'
[ 1058.460511][T28139] exfat: Deprecated parameter 'namecase'
[ 1058.462301][T28139] exfat: Deprecated parameter 'utf8'
[ 1058.467372][T28139] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d)
[ 1058.471314][T28139] exFAT-fs (loop2): failed to test first cluster bit of root dir(5)
[ 1058.486388][T28139] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8616'.
[ 1058.489823][T28141] loop8: detected capacity change from 0 to 4096
[ 1058.513883][T28141] ntfs3(loop8): Mark volume as dirty due to NTFS errors
[ 1058.529075][T28139] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8616'.
[ 1058.531077][T28141] ntfs3(loop8): ino=21, The size of extended attributes must not exceed 64KiB
[ 1058.602516][T28139] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8616'.
[ 1058.751027][T28148] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8619'.
[ 1058.808807][T28153] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000)
[ 1058.814129][T28154] syz.2.8621(28154): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[ 1058.925512][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1059.291785][T28183] loop8: detected capacity change from 0 to 128
[ 1059.296180][T28183] EXT4-fs: Ignoring removed orlov option
[ 1059.306257][T28183] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1059.312021][T28183] ext4 filesystem being mounted at /1453/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1059.400908][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1059.419823][T28189] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not ''
[ 1059.727319][T28199] loop2: detected capacity change from 0 to 512
[ 1059.736661][T28199] EXT4-fs: Ignoring removed i_version option
[ 1059.753581][T28199] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1059.760782][T28199] ext4 filesystem being mounted at /723/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1059.784799][T28199] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 205 vs 206 free clusters
[ 1059.794366][T28199] EXT4-fs (loop2): Remounting filesystem read-only
[ 1059.820462][T21347] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1059.828292][T26301] Quota error (device loop2): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync!
[ 1059.841492][T26301] Quota error (device loop2): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync!
[ 1060.231730][T16005] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1060.389693][T28221] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8650'.
[ 1060.439738][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1060.690797][T28229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1060.696990][T28229] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1060.697178][   T32] usb 9-1: new high-speed USB device number 56 using dummy_hcd
[ 1060.730933][T28229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1060.737743][T28229] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1060.874876][   T32] usb 9-1: Using ep0 maxpacket: 8
[ 1060.882282][   T32] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1060.890192][   T32] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1060.897319][   T32] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1060.909129][   T32] usb 9-1: config 0 descriptor??
[ 1061.006503][T26529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1061.133441][   T32] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 1061.370909][T28240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1061.376738][T28240] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1061.480787][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1061.630199][   T32] usb 9-1: USB disconnect, device number 56
[ 1062.064214][T28250] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8663'.
[ 1062.070632][T28252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1062.074367][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1062.330878][T28268] geneve1: entered promiscuous mode
[ 1062.415215][ T5882] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[ 1063.074586][T28274] loop8: detected capacity change from 0 to 131072
[ 1063.091687][  T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1063.097104][T28274] F2FS-fs (loop8): invalid crc value
[ 1063.186751][ T5882] usb 3-1: Using ep0 maxpacket: 16
[ 1063.208935][T28274] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1063.233943][ T5882] usb 3-1: config index 0 descriptor too short (expected 1068, got 27)
[ 1063.238229][T28274] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[ 1063.258859][ T5882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[ 1063.286839][ T5882] usb 3-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9
[ 1063.300382][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1063.313602][T28274] F2FS-fs (loop8): access invalid blkaddr:0
[ 1063.317506][T28274] CPU: 0 UID: 0 PID: 28274 Comm: syz.8.8675 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1063.317531][T28274] Tainted: [L]=SOFTLOCKUP
[ 1063.317537][T28274] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1063.317547][T28274] Call Trace:
[ 1063.317555][T28274]  <TASK>
[ 1063.317563][T28274]  dump_stack_lvl+0xe8/0x150
[ 1063.317590][T28274]  __f2fs_is_valid_blkaddr+0xe62/0x14f0
[ 1063.317618][T28274]  sanity_check_extent_cache+0x1a3/0x620
[ 1063.317641][T28274]  ? f2fs_sanity_check_inline_data+0x70/0x740
[ 1063.317661][T28274]  f2fs_iget+0x41fc/0x6230
[ 1063.317697][T28274]  f2fs_lookup+0x3ff/0xa50
[ 1063.317713][T28274]  ? __pfx_apparmor_path_mknod+0x10/0x10
[ 1063.317728][T28274]  ? kernel_read_file_from_fd+0x120/0x130
[ 1063.317746][T28274]  ? generic_permission+0x2bf/0x670
[ 1063.317764][T28274]  ? __pfx_f2fs_lookup+0x10/0x10
[ 1063.317782][T28274]  ? bpf_lsm_inode_permission+0x9/0x20
[ 1063.317797][T28274]  ? security_inode_permission+0xb7/0x2e0
[ 1063.317818][T28274]  ? may_o_create+0x2d2/0x370
[ 1063.317833][T28274]  ? bpf_lsm_inode_create+0x9/0x20
[ 1063.317850][T28274]  path_openat+0x111f/0x3830
[ 1063.317886][T28274]  do_file_open+0x23e/0x4a0
[ 1063.317912][T28274]  ? __pfx_do_file_open+0x10/0x10
[ 1063.317941][T28274]  ? _raw_spin_unlock+0x28/0x50
[ 1063.317964][T28274]  ? alloc_fd+0x651/0x6c0
[ 1063.317991][T28274]  do_sys_openat2+0x115/0x200
[ 1063.318039][T28274]  ? __se_sys_futex+0x3a8/0x450
[ 1063.318057][T28274]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1063.318081][T28274]  ? rcu_is_watching+0x15/0xb0
[ 1063.318097][T28274]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1063.318112][T28274]  __x64_sys_open+0x11e/0x150
[ 1063.318133][T28274]  do_syscall_64+0x174/0x580
[ 1063.318147][T28274]  ? trace_irq_disable+0x3b/0x140
[ 1063.318167][T28274]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1063.318182][T28274] RIP: 0033:0x7f09f4d9de99
[ 1063.318198][T28274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1063.318208][T28274] RSP: 002b:00007f09f5c50028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[ 1063.318225][T28274] RAX: ffffffffffffffda RBX: 00007f09f5025fa0 RCX: 00007f09f4d9de99
[ 1063.318236][T28274] RDX: 0000000000000070 RSI: 00000000001490c1 RDI: 00002000009e1000
[ 1063.318245][T28274] RBP: 00007f09f4e33eaf R08: 0000000000000000 R09: 0000000000000000
[ 1063.318253][T28274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1063.318260][T28274] R13: 00007f09f5026038 R14: 00007f09f5025fa0 R15: 00007ffceca46238
[ 1063.318283][T28274]  </TASK>
[ 1063.319874][T28274] F2FS-fs (loop8): sanity_check_extent_cache: inode (ino=4) extent info [0, 0, 5178624] is incorrect, run fsck to fix
[ 1063.478845][ T5882] usb 3-1: Product: syz
[ 1063.488807][ T5882] usb 3-1: Manufacturer: syz
[ 1063.499053][ T5882] usb 3-1: SerialNumber: syz
[ 1063.522420][ T5882] usb 3-1: config 0 descriptor??
[ 1063.663511][T28295] netlink: 14 bytes leftover after parsing attributes in process `syz.0.8684'.
[ 1063.694250][T28295] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1063.700673][T28295] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1063.707074][T28295] bond0 (unregistering): Released all slaves
[ 1063.783839][ T5882] usb 3-1: USB disconnect, device number 36
[ 1063.994487][T28304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1064.002785][T28304] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1064.045072][  T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1064.121689][  T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1064.200251][  T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1064.384580][T28314] loop8: detected capacity change from 0 to 256
[ 1064.509940][T28318] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 1073872900 out of range (51000..2150000)
[ 1064.550055][   T33] audit: type=1326 audit(1785253458.231:1859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28319 comm="syz.8.8695" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f09f4d9de99 code=0x0
[ 1064.664360][T28328] binder_alloc: 28323: pid 28323 spamming oneway? 1 buffers allocated for a total size of 4096
[ 1064.811297][T28327] loop2: detected capacity change from 0 to 40427
[ 1064.815826][T28327] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[ 1064.819045][T28327] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[ 1064.877505][T28327] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1064.889358][T28327] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[ 1064.891907][T28327] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[ 1065.015735][T28327] syz.2.8697: attempt to access beyond end of device
[ 1065.015735][T28327] loop2: rw=2049, sector=45096, nr_sectors = 7576 limit=40427
[ 1065.026568][T28327] syz.2.8697: attempt to access beyond end of device
[ 1065.026568][T28327] loop2: rw=2049, sector=52672, nr_sectors = 576 limit=40427
[ 1065.031413][T28327] syz.2.8697: attempt to access beyond end of device
[ 1065.031413][T28327] loop2: rw=2049, sector=45056, nr_sectors = 8 limit=40427
[ 1065.043966][T28327] syz.2.8697: attempt to access beyond end of device
[ 1065.043966][T28327] loop2: rw=2049, sector=57344, nr_sectors = 2632 limit=40427
[ 1065.168514][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1065.310693][T21347] syz-executor: attempt to access beyond end of device
[ 1065.310693][T21347] loop2: rw=8390659, sector=45096, nr_sectors = 8152 limit=40427
[ 1065.317388][T21347] syz-executor: attempt to access beyond end of device
[ 1065.317388][T21347] loop2: rw=8390659, sector=57344, nr_sectors = 2632 limit=40427
[ 1065.323404][T21347] syz-executor: attempt to access beyond end of device
[ 1065.323404][T21347] loop2: rw=8390659, sector=45056, nr_sectors = 8 limit=40427
[ 1065.329574][T21347] f2fs_printk: 26 callbacks suppressed
[ 1065.329587][T21347] F2FS-fs (loop2): Issue discard(5637, 5637, 1019) failed, ret: -5
[ 1065.335316][T21347] F2FS-fs (loop2): Issue discard(7168, 7168, 329) failed, ret: -5
[ 1065.338458][T21347] F2FS-fs (loop2): Issue discard(5632, 5632, 1) failed, ret: -5
[ 1066.483491][T24334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1066.814490][T26301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1067.313049][T28365] netlink: 'syz.2.8698': attribute type 287 has an invalid length.
[ 1067.557544][T24334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1067.945933][T28375] loop2: detected capacity change from 0 to 4096
[ 1067.952147][T28375] EXT4-fs: inline encryption not supported
[ 1067.959113][T28375] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1067.962677][T28375] EXT4-fs (loop2): Test dummy encryption mode enabled
[ 1067.972029][T28375] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[ 1067.975757][T28375] System zones: 0-5
[ 1067.983709][T28375] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1068.114964][T21347] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1068.326402][T28383] loop8: detected capacity change from 0 to 1024
[ 1068.331138][T28383] EXT4-fs: Ignoring removed bh option
[ 1068.350533][T28383] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1068.403699][T16005] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1068.622599][T24334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1068.685200][ T5882] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[ 1068.965347][ T5882] usb 3-1: Using ep0 maxpacket: 16
[ 1068.969032][ T5882] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1068.972609][ T5882] usb 3-1: config 0 interface 0 has no altsetting 0
[ 1068.975181][ T5882] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[ 1068.978123][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1068.983037][ T5882] usb 3-1: config 0 descriptor??
[ 1069.484569][ T5882] nzxt-smart2 0003:1E71:2009.001A: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0
[ 1069.638270][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1069.853542][T26869] usb 3-1: USB disconnect, device number 37
[ 1069.876265][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1069.942110][T28430] loop8: detected capacity change from 0 to 4096
[ 1070.126440][T28430] ntfs3(loop8): ino=3, ntfs_set_state failed, -22.
[ 1070.178717][T26283] ntfs3(loop8): ino=3, ntfs3_write_inode failed, -22.
[ 1070.183271][T16005] ntfs3(loop8): ino=3, ntfs_set_state failed, -22.
[ 1070.195477][T16005] ntfs3(loop8): Mark volume as dirty due to NTFS errors
[ 1070.230248][T16005] ntfs3(loop8): ino=3, ntfs_set_state failed, -22.
[ 1070.267339][T26283] ntfs3(loop8): ino=3, ntfs3_write_inode failed, -22.
[ 1070.539698][T28450] ieee802154 phy1 wpan1: encryption failed: -22
[ 1070.676164][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1070.729432][T28466] loop8: detected capacity change from 0 to 16
[ 1070.732884][T28466] erofs (device loop8): mounted with root inode @ nid 36.
[ 1070.976365][T28490] loop2: detected capacity change from 0 to 1024
[ 1070.983452][T28490] EXT4-fs: Ignoring removed oldalloc option
[ 1070.994810][T28490] EXT4-fs: Ignoring removed bh option
[ 1071.046202][T28490] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[ 1071.065126][T28490] ext4 filesystem being mounted at /756/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1071.382501][T21347] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[ 1071.819139][T28492] overlayfs: statfs failed on './file0'
[ 1072.496000][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1072.716559][T26283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1073.038831][T28538] cgroup: noprefix used incorrectly
[ 1073.152772][T28542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1073.157816][T28542] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1073.486243][ T5882] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[ 1073.556213][T24334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1073.647241][ T5882] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1073.660097][ T5882] usb 3-1: config 129 has an invalid interface number: 135 but max is 0
[ 1073.665276][ T5882] usb 3-1: config 129 has an invalid interface number: 5 but max is 0
[ 1073.677441][ T5882] usb 3-1: config 129 has 2 interfaces, different from the descriptor's value: 1
[ 1073.686251][ T5882] usb 3-1: config 129 has no interface number 0
[ 1073.690990][ T5882] usb 3-1: config 129 has no interface number 1
[ 1073.693162][ T5882] usb 3-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[ 1073.698463][ T5882] usb 3-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30
[ 1073.701800][ T5882] usb 3-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37
[ 1073.705914][ T5882] usb 3-1: config 129 interface 135 has no altsetting 0
[ 1073.707933][ T5882] usb 3-1: config 129 interface 5 has no altsetting 0
[ 1073.712701][ T5882] usb 3-1: string descriptor 0 read error: -22
[ 1073.716666][ T5882] usb 3-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00
[ 1073.719633][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1073.741713][ T5882] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[ 1073.745559][ T5882] usb 3-1: MIDIStreaming interface descriptor not found
[ 1073.799969][  T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1073.929200][ T5882] usb 3-1: USB disconnect, device number 38
[ 1074.067825][T28564] netlink: 'syz.0.8795': attribute type 6 has an invalid length.
[ 1074.139669][T28568] netlink: 392 bytes leftover after parsing attributes in process `syz.0.8797'.
[ 1074.182056][T28570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1074.188562][T28570] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1074.588139][T28576] loop2: detected capacity change from 0 to 2048
[ 1074.592955][T28576] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1074.601248][T28576] NILFS (loop2): mounting unchecked fs
[ 1074.601883][T24334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1074.606667][T28576] NILFS (loop2): recovery complete
[ 1074.610405][ T9036] udevd[9036]: incorrect nilfs2 checksum on /dev/loop2
[ 1074.620675][T28577] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1074.964384][T28591] netlink: 'syz.8.8806': attribute type 8 has an invalid length.
[ 1074.987654][T28593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1074.996849][T28593] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1075.851450][T28602] loop8: detected capacity change from 0 to 131072
[ 1075.856217][T24334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1075.861714][T28602] F2FS-fs (loop8): Invalid log sectorsize (67108873)
[ 1075.864491][T28602] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[ 1075.871305][T28602] F2FS-fs (loop8): invalid crc value
[ 1075.925191][T28602] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1075.940039][T28602] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0
[ 1075.943045][T28602] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4
[ 1075.948619][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1075.997940][   T33] audit: type=1800 audit(1785253469.681:1860): pid=28602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.8811" name="file1" dev="loop8" ino=7 res=0 errno=0
[ 1076.050212][T28608] binder: 28607:28608 ioctl c0306201 200000000480 returned -14
[ 1076.107856][T28611] loop2: detected capacity change from 0 to 128
[ 1076.115125][T28611] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[ 1076.138008][T28611] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1076.284043][T28614] loop2: detected capacity change from 0 to 128
[ 1076.290175][T28614] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1076.313583][T28614] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1076.391230][T25349] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1076.745538][T28631] loop2: detected capacity change from 0 to 64
[ 1076.803197][T28633] loop8: detected capacity change from 0 to 1024
[ 1076.807187][T28633] EXT4-fs: Ignoring removed bh option
[ 1076.862927][T28633] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1076.888383][T28633] EXT4-fs error (device loop8): ext4_check_all_de:659: inode #12: block 7: comm syz.8.8823: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0
[ 1076.916931][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1077.012785][T16005] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1077.722331][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881bba39c00: rx timeout, send abort
[ 1078.158503][T24334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1078.222656][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881bba3b800: rx timeout, send abort
[ 1078.225851][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881bba39c00: abort rx timeout. Force session deactivation
[ 1078.345616][T28655] loop2: detected capacity change from 0 to 16
[ 1078.366981][ T5808] Bluetooth: hci2: hcon ffff888020210000 sent 1 < count 257
[ 1078.407155][T28655] erofs (device loop2): bogus i_mode (0) @ nid 36
[ 1078.408266][T26529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1078.725412][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881bba3b800: abort rx timeout. Force session deactivation
[ 1078.839983][T28659] netlink: 'syz.0.8831': attribute type 1 has an invalid length.
[ 1078.848208][T28659] netlink: 200 bytes leftover after parsing attributes in process `syz.0.8831'.
[ 1078.853006][T28659] netlink: 41 bytes leftover after parsing attributes in process `syz.0.8831'.
[ 1079.336986][T24334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1079.358968][T28671] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1079.364309][T28671] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1079.370977][T28671] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1079.373636][T28671] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1079.376464][T28671] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1079.379376][T28671] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1079.382682][T28671] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1082.175543][  T797] usb 9-1: new high-speed USB device number 57 using dummy_hcd
[ 1082.289572][T28713] netlink: 'syz.0.8851': attribute type 10 has an invalid length.
[ 1082.292196][T28713] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8851'.
[ 1082.327170][  T797] usb 9-1: config index 0 descriptor too short (expected 23569, got 27)
[ 1082.330160][  T797] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1082.340365][  T797] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[ 1082.343868][  T797] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[ 1082.348289][  T797] usb 9-1: Manufacturer: syz
[ 1082.351253][  T797] usb 9-1: config 0 descriptor??
[ 1082.405140][  T797] rc_core: IR keymap rc-hauppauge not found
[ 1082.407360][  T797] Registered IR keymap rc-empty
[ 1082.437500][  T797] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0
[ 1082.468547][  T797] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input39
[ 1082.558165][T28720] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8854'.
[ 1082.770198][    C0] igorplugusb 9-1:0.0: receive overflow invalid: 163
[ 1082.977248][T26869] usb 9-1: USB disconnect, device number 57
[ 1083.221950][T28734] netlink: 'syz.2.8860': attribute type 1 has an invalid length.
[ 1083.226257][T28734] netlink: 232 bytes leftover after parsing attributes in process `syz.2.8860'.
[ 1083.232545][T28734] netlink: 'syz.2.8860': attribute type 1 has an invalid length.
[ 1083.299277][T28738] net_ratelimit: 6 callbacks suppressed
[ 1083.299291][T28738] netlink: zone id is out of range
[ 1083.309439][T28738] netlink: zone id is out of range
[ 1083.311422][T28738] netlink: zone id is out of range
[ 1083.313044][T28738] netlink: del zone limit has 8 unknown bytes
[ 1083.399839][  T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1083.500501][  T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1083.798330][T28751] loop2: detected capacity change from 0 to 32768
[ 1083.817532][T28751] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.8868 (28751)
[ 1083.837120][T28751] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1083.841226][T28751] BTRFS info (device loop2): using sha256 checksum algorithm
[ 1083.893416][T28751] BTRFS info (device loop2): enabling ssd optimizations
[ 1083.898201][T28751] BTRFS info (device loop2): turning on async discard
[ 1083.901038][T28751] BTRFS info (device loop2): enabling free space tree
[ 1083.903503][T28751] BTRFS info (device loop2): force clearing of disk cache
[ 1083.906609][T28751] BTRFS info (device loop2): force zlib compression, level 3
[ 1083.909242][T28751] BTRFS info (device loop2): max_inline set to 0
[ 1083.954377][T21347] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1084.053549][T25350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1084.362283][T28785] loop2: detected capacity change from 0 to 512
[ 1084.388623][T28785] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[ 1084.397834][T28787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1084.401879][T28787] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1084.540224][  T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1084.554923][T28785] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.8877: bg 0: block 104: invalid block bitmap
[ 1084.561606][T28785] loop2: lost filesystem error report for type 5 error -117
[ 1084.604715][    C1] EXT4-fs (loop2): error count since last fsck: 1
[ 1084.610363][    C1] EXT4-fs (loop2): initial error at time 1785253478: ext4_validate_block_bitmap:432
[ 1084.614228][    C1] EXT4-fs (loop2): last error at time 1785253478: ext4_validate_block_bitmap:432
[ 1084.673282][T28785] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem
[ 1084.705070][T28785] loop2: lost filesystem error report for type 5 error -117
[ 1084.705518][T28785] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.8877: invalid indirect mapped block 1 (level 1)
[ 1084.713512][T28785] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[ 1084.742112][T28785] EXT4-fs (loop2): 1 truncate cleaned up
[ 1084.754522][T28785] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1084.777369][T28785] overlayfs: "xino" feature enabled using 3 upper inode bits.
[ 1084.965305][T21347] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1085.137510][T28811] loop8: detected capacity change from 0 to 512
[ 1085.153345][T28811] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem
[ 1085.159256][T28811] EXT4-fs error (device loop8): ext4_iget_extra_inode:5180: inode #15: comm syz.8.8888: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[ 1085.168423][T28811] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[ 1085.175396][    C1] EXT4-fs (loop8): initial error at time 1785253478: ext4_iget_extra_inode:5180: inode 15
[ 1085.182117][    C1] EXT4-fs (loop8): last error at time 1785253478: ext4_iget_extra_inode:5180: inode 15
[ 1085.190769][T28811] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.8888: couldn't read orphan inode 15 (err -117)
[ 1085.195863][T28811] loop8: lost filesystem error report for type 5 error -117
[ 1085.196920][T28811] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1085.311605][T16005] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1085.416250][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[ 1085.460431][T26870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1085.660024][T26869] usb 9-1: new high-speed USB device number 58 using dummy_hcd
[ 1085.813564][T28834] loop2: detected capacity change from 0 to 512
[ 1085.825147][T26869] usb 9-1: Using ep0 maxpacket: 8
[ 1085.831701][T26869] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1085.838051][T26869] usb 9-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[ 1085.852496][T26869] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1085.853737][T28834] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[ 1085.862060][T28834] EXT4-fs (loop2): revision level too high, forcing read-only mode
[ 1085.866131][T28834] EXT4-fs (loop2): orphan cleanup on readonly fs
[ 1085.869025][T26869] usb 9-1: config 0 descriptor??
[ 1085.870459][T28834] EXT4-fs warning (device loop2): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[ 1085.882012][T26869] gspca_main: vc032x-2.14.0 probing 046d:0892
[ 1085.883080][T28834] EXT4-fs (loop2): Cannot turn on quotas: error -22
[ 1085.896904][T28834] EXT4-fs (loop2): 1 orphan inode deleted
[ 1085.913042][T28839] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8901'.
[ 1085.947045][T28834] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1085.995743][T21347] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1086.143342][T28844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1086.153046][T28844] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1086.308838][T26869] gspca_vc032x: reg_w err -71
[ 1086.310914][T26869] vc032x 9-1:0.0: probe with driver vc032x failed with error -71
[ 1086.318440][T26869] usb 9-1: USB disconnect, device number 58
[ 1086.335516][T28849] loop2: detected capacity change from 0 to 2048
[ 1086.342086][T28849] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1086.766358][T26869] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[ 1086.880501][T28860] loop8: detected capacity change from 0 to 256
[ 1086.884418][T28860] exFAT-fs (loop8): bogus number of FAT structure
[ 1086.887365][T28860] exFAT-fs (loop8): failed to read boot sector
[ 1086.889771][T28860] exFAT-fs (loop8): failed to recognize exfat type
[ 1086.900268][T28860] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8912'.
[ 1086.940177][T26869] usb 3-1: Using ep0 maxpacket: 16
[ 1086.945936][T26869] usb 3-1: config index 0 descriptor too short (expected 51443, got 18)
[ 1086.963354][T26869] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[ 1086.970610][T26869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1086.976751][T26869] usb 3-1: Product: syz
[ 1086.978167][T26869] usb 3-1: Manufacturer: syz
[ 1086.983446][T26869] usb 3-1: SerialNumber: syz
[ 1086.995521][T26869] r8152-cfgselector 3-1: Unknown version 0x0000
[ 1087.001018][T26869] r8152-cfgselector 3-1: config 0 descriptor??
[ 1087.129757][T28867] loop8: detected capacity change from 0 to 1024
[ 1087.135592][T28867] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[ 1087.153900][T28867] EXT4-fs error (device loop8): ext4_quota_enable:7228: comm syz.8.8915: Bad quota inum: 655363, type: 0
[ 1087.161499][T28867] loop8: lost filesystem error report for type 5 error -117
[ 1087.161768][T28867] EXT4-fs warning (device loop8): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-117, ino=655363). Please run e2fsck to fix.
[ 1087.170012][    C1] EXT4-fs (loop8): error count since last fsck: 1
[ 1087.170025][    C1] EXT4-fs (loop8): initial error at time 1785253480: ext4_quota_enable:7228
[ 1087.170036][    C1] EXT4-fs (loop8): last error at time 1785253480: ext4_quota_enable:7228
[ 1087.181204][T28867] EXT4-fs (loop8): mount failed
[ 1087.217624][T26869] r8152-cfgselector 3-1: USB disconnect, device number 39
[ 1087.813109][T28874] loop2: detected capacity change from 0 to 1024
[ 1087.822968][T28874] EXT4-fs (loop2): stripe (31) is not aligned with cluster size (16), stripe is disabled
[ 1087.939235][T28874] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1087.961087][T28874] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.8919: bg 0: block 153: padding at end of block bitmap is not set
[ 1087.982274][T26811] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1088.006002][T26811] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1088.043911][T26811] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1088.072302][T26811] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1088.084235][T26811] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1088.450952][T21347] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1088.684287][  T797] net_ratelimit: 6 callbacks suppressed
[ 1088.684386][  T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1089.159362][T16197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1089.447584][T28879] lo speed is unknown, defaulting to 1000
[ 1089.728671][  T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1090.313636][   T12] netdevsim netdevsim0 eth13: set [1, 0] type 2 family 0 port 6081 - 0
[ 1090.363022][   T12] netdevsim netdevsim0 eth14: set [1, 0] type 2 family 0 port 6081 - 0
[ 1090.407440][ T6226] netdevsim netdevsim0 eth15: set [1, 0] type 2 family 0 port 6081 - 0
[ 1090.435020][ T5808] Bluetooth: hci1: command tx timeout
[ 1090.515910][T28915] loop8: detected capacity change from 0 to 4096
[ 1090.523821][T28916] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1090.665491][   T12] netdevsim netdevsim0 eth16: set [1, 0] type 2 family 0 port 6081 - 0
[ 1090.760401][T24334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1090.851988][T28929] scsi_nl_rcv_msg: discarding partial skb
[ 1090.869786][T26870] usb 3-1: new full-speed USB device number 40 using dummy_hcd
[ 1090.976149][T28933] loop8: detected capacity change from 0 to 1024
[ 1090.982234][T28933] EXT4-fs: Ignoring removed bh option
[ 1091.064070][T26870] usb 3-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=a6.78
[ 1091.068931][T26870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1091.072638][T26870] usb 3-1: Product: syz
[ 1091.102265][T26870] usb 3-1: Manufacturer: syz
[ 1091.104336][T26870] usb 3-1: SerialNumber: syz
[ 1091.110325][T26870] usb 3-1: config 0 descriptor??
[ 1091.114173][ T5357] 8021q: adding VLAN 0 to HW filter on device eth13
[ 1091.116105][T28933] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1091.149978][T26870] cytherm 3-1:0.0: Cypress thermometer device now attached
[ 1091.156175][   T33] audit: type=1800 audit(1785253484.821:1861): pid=28933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.8934" name="file1" dev="loop8" ino=15 res=0 errno=0
[ 1091.190752][T28879] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1091.195051][T28879] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1091.201137][T28879] bridge_slave_0: entered allmulticast mode
[ 1091.212126][T28879] bridge_slave_0: entered promiscuous mode
[ 1091.263694][   T33] audit: type=1800 audit(1785253484.941:1862): pid=28936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.8934" name="file1" dev="loop8" ino=15 res=0 errno=0
[ 1091.274504][T28879] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1091.278316][T28879] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1091.287926][T28879] bridge_slave_1: entered allmulticast mode
[ 1091.295527][T28879] bridge_slave_1: entered promiscuous mode
[ 1091.342043][T26869] usb 3-1: USB disconnect, device number 40
[ 1091.344518][T26869] cytherm 3-1:0.0: Cypress thermometer now disconnected
[ 1091.472663][T28879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1091.485864][T28879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1091.495637][T16005] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1091.517424][ T5774] hsr_slave_0: left promiscuous mode
[ 1091.520665][ T5774] hsr_slave_1: left promiscuous mode
[ 1091.534479][ T5774] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1091.593081][ T5774] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1091.799906][  T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1091.834428][ T5774] team0 (unregistering): Port device team_slave_1 removed
[ 1091.844126][ T5774] team0 (unregistering): Port device team_slave_0 removed
[ 1091.982636][T28940] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8936'.
[ 1091.988229][T28940] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8936'.
[ 1092.010035][T28940] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8936'.
[ 1092.039212][T28940] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8936'.
[ 1092.073092][T28879] team0: Port device team_slave_0 added
[ 1092.079874][T28944] netlink: 48 bytes leftover after parsing attributes in process `syz.8.8937'.
[ 1092.090454][T28879] team0: Port device team_slave_1 added
[ 1092.143403][T28879] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1092.170076][T28879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1092.179909][T28879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1092.204419][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1092.250960][T28879] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1092.253821][T28879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1092.268764][T28879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1092.340302][T28879] hsr_slave_0: entered promiscuous mode
[ 1092.342878][T28879] hsr_slave_1: entered promiscuous mode
[ 1092.348950][T28879] debugfs: 'hsr0' already exists in 'hsr'
[ 1092.350914][T28879] Cannot create hsr debugfs directory
[ 1092.455126][T24334] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[ 1092.526080][ T5808] Bluetooth: hci1: command tx timeout
[ 1092.651076][T24334] usb 3-1: Using ep0 maxpacket: 8
[ 1092.675246][T24334] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7
[ 1092.684559][T24334] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[ 1092.688226][T24334] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[ 1092.690980][T24334] usb 3-1: Product: syz
[ 1092.692317][T24334] usb 3-1: Manufacturer: syz
[ 1092.694020][T24334] usb 3-1: SerialNumber: syz
[ 1092.808917][T28959] zero sized request
[ 1092.840177][  T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1092.867237][T28961] x_tables: duplicate underflow at hook 2
[ 1092.984122][T28964] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8944'.
[ 1092.987434][T24334] usb 3-1: Handspring Visor / Palm OS: No valid connect info available
[ 1092.990660][T24334] usb 3-1: Handspring Visor / Palm OS: port 231, is for unknown use
[ 1093.002204][T25350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1093.005895][T24334] usb 3-1: Handspring Visor / Palm OS: port 193, is for Debugger use
[ 1093.008566][T24334] usb 3-1: Handspring Visor / Palm OS: Number of ports: 2
[ 1093.046522][T28879] netdevsim netdevsim4 eth12 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1093.086175][ T5357] 8021q: adding VLAN 0 to HW filter on device eth14
[ 1093.209033][T24334] usb 3-1: palm_os_3_probe - error -71 getting bytes available request
[ 1093.211767][T24334] visor 3-1:1.0: Handspring Visor / Palm OS converter detected
[ 1093.216159][T24334] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[ 1093.230860][T28967] openvswitch: netlink: Unknown nsh attribute 0
[ 1093.246680][T24334] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[ 1093.254197][T24334] usb 3-1: USB disconnect, device number 41
[ 1093.265787][T24334] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[ 1093.271705][T24334] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[ 1093.282164][T24334] visor 3-1:1.0: device disconnected
[ 1093.406142][T28973] loop8: detected capacity change from 0 to 4096
[ 1093.429422][T28973] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512).
[ 1093.457454][T28973] ntfs3(loop8): ino=b, mi_enum_attr
[ 1093.459238][T28973] ntfs3(loop8): Mark volume as dirty due to NTFS errors
[ 1093.461735][T28973] ntfs3(loop8): Failed to load $Extend (-22).
[ 1093.463781][T28973] ntfs3(loop8): Failed to initialize $Extend.
[ 1093.484428][T28879] netdevsim netdevsim4 eth11 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1093.666063][ T5357] 8021q: adding VLAN 0 to HW filter on device eth15
[ 1093.702998][T28976] loop8: detected capacity change from 0 to 32768
[ 1093.713099][T28976] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.8947 (28976)
[ 1093.737319][T28976] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1093.748818][T28976] BTRFS info (device loop8): using sha256 checksum algorithm
[ 1093.879224][T24334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1093.977009][T28879] netdevsim netdevsim4 eth10 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1093.988261][T28976] BTRFS info (device loop8): enabling ssd optimizations
[ 1093.997388][T28976] BTRFS info (device loop8): turning on async discard
[ 1094.002379][T28976] BTRFS info (device loop8): enabling free space tree
[ 1094.077928][ T5357] 8021q: adding VLAN 0 to HW filter on device eth16
[ 1094.079277][T16005] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1094.285717][T25349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1094.338238][T29010] loop2: detected capacity change from 0 to 128
[ 1094.472583][T29010] qnx6: block size(2066842815) > page size(4096) not supported by filesystem
[ 1094.478047][T29010] qnx6: unable to set blocksize
[ 1094.594787][ T5808] Bluetooth: hci1: command tx timeout
[ 1094.696242][T28879] netdevsim netdevsim4 eth9 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1094.946880][T24334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1095.099102][T29024] lo speed is unknown, defaulting to 1000
[ 1095.894331][T29047] loop2: detected capacity change from 0 to 32768
[ 1095.966433][T24334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1095.982089][T29047] ERROR: (device loop2): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 3
[ 1095.982089][T29047] 
[ 1095.992004][T29047] ERROR: (device loop2): remounting filesystem as read-only
[ 1096.192823][T28879] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1096.208628][T28879] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1096.219471][T28879] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1096.263637][T28879] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1096.268694][T28879] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1096.291112][T28879] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1096.303980][T28879] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1096.319549][T28879] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1096.410430][T28879] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1096.427304][T28879] 8021q: adding VLAN 0 to HW filter on device team0
[ 1096.432472][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1096.435311][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1096.446310][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1096.449239][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1096.497246][T29082] loop2: detected capacity change from 0 to 4096
[ 1096.577539][T29082] ntfs3(loop2): failed to convert "0080" to koi8-ru
[ 1096.630565][T29082] ntfs3(loop2): failed to convert name for inode 1e.
[ 1096.654844][T29082] ntfs3(loop2): ino=1f, mi_enum_attr
[ 1096.674936][ T5808] Bluetooth: hci1: command tx timeout
[ 1096.677426][T29082] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[ 1096.936737][T28879] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1096.996557][  T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1097.188878][T28879] veth0_vlan: entered promiscuous mode
[ 1097.200377][T28879] veth1_vlan: entered promiscuous mode
[ 1097.219855][T28879] veth0_macvtap: entered promiscuous mode
[ 1097.237171][T28879] veth1_macvtap: entered promiscuous mode
[ 1097.250186][T28879] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1097.283183][T28879] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1097.292723][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1097.297591][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1097.301657][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1097.304592][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1097.316775][  T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1097.397040][ T5882] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[ 1097.565609][ T5882] usb 3-1: config 0 has an invalid interface number: 117 but max is 0
[ 1097.573338][ T5882] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1097.594337][ T5882] usb 3-1: config 0 has no interface number 0
[ 1097.603261][ T5882] usb 3-1: config 0 interface 117 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1097.627667][T16197] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1097.631895][ T5882] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1097.637136][T16197] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1097.652382][ T5882] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1097.668922][ T5882] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1097.677495][ T5882] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[ 1097.682411][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1097.686606][T16197] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1097.689558][ T5882] usb 3-1: Product: syz
[ 1097.691105][T16197] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1097.693602][ T5882] usb 3-1: Manufacturer: syz
[ 1097.697665][ T5882] usb 3-1: SerialNumber: syz
[ 1097.706026][ T5882] usb 3-1: config 0 descriptor??
[ 1097.850257][T29132] netlink: 'syz.8.8973': attribute type 21 has an invalid length.
[ 1097.853137][T29132] netlink: 128 bytes leftover after parsing attributes in process `syz.8.8973'.
[ 1097.857446][T29132] netlink: 'syz.8.8973': attribute type 5 has an invalid length.
[ 1097.860637][T29132] netlink: 'syz.8.8973': attribute type 6 has an invalid length.
[ 1097.868086][T29132] netlink: 3 bytes leftover after parsing attributes in process `syz.8.8973'.
[ 1097.910263][T29130] loop4: detected capacity change from 0 to 4096
[ 1097.935440][T29130] ntfs3(loop4): ino=3, Correct links count -> 2.
[ 1097.952098][T29130] ntfs3(loop4): MFT: r=0, expect seq=1 instead of 0!
[ 1097.965438][T29130] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[ 1097.972551][T29130] ntfs3(loop4): Failed to load $MFT (-22).
[ 1098.036053][ T5078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1098.039951][T16197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1098.362396][ T5882] usb 3-1: USB disconnect, device number 42
[ 1098.376804][T29151] loop4: detected capacity change from 0 to 32768
[ 1098.401876][T29151] ea_get: invalid extended attribute
[ 1099.078960][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1099.092333][T29170] netlink: 'syz.4.8982': attribute type 1 has an invalid length.
[ 1099.725337][T29202] loop8: detected capacity change from 0 to 8192
[ 1099.906699][T29215] netlink: 14 bytes leftover after parsing attributes in process `syz.2.9004'.
[ 1100.053161][T25350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1100.116594][T24334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1100.126885][T29224] xt_hashlimit: size too large, truncated to 1048576
[ 1100.313069][T29232] loop4: detected capacity change from 0 to 512
[ 1100.331723][T29232] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.9011: inode has both inline data and extents flags
[ 1100.345483][T29232] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[ 1100.349177][T29232] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.9011: couldn't read orphan inode 15 (err -117)
[ 1100.357481][    C1] EXT4-fs (loop4): error count since last fsck: 1
[ 1100.357499][    C1] EXT4-fs (loop4): initial error at time 1785253494: ext4_orphan_get:1399: inode 15
[ 1100.357517][    C1] EXT4-fs (loop4): last error at time 1785253494: ext4_orphan_get:1399: inode 15
[ 1100.406531][T29232] loop4: lost filesystem error report for type 5 error -117
[ 1100.407482][T29232] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1100.438821][T28879] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1100.496896][T29242] kAFS: No cell specified
[ 1100.716744][T29244] loop2: detected capacity change from 0 to 32768
[ 1100.732577][   T33] audit: type=1800 audit(1785253494.411:1863): pid=29244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.9017" name="file1" dev="loop2" ino=4 res=0 errno=0
[ 1100.864760][T24334] usb 9-1: new full-speed USB device number 59 using dummy_hcd
[ 1100.902715][T29264] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9026'.
[ 1101.019690][T24334] usb 9-1: config 0 has an invalid interface number: 251 but max is 0
[ 1101.022472][T24334] usb 9-1: config 0 has no interface number 0
[ 1101.029367][T24334] usb 9-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[ 1101.038215][T24334] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1101.043128][T24334] usb 9-1: Product: syz
[ 1101.046173][T24334] usb 9-1: Manufacturer: syz
[ 1101.049477][T24334] usb 9-1: SerialNumber: syz
[ 1101.058039][T24334] usb 9-1: config 0 descriptor??
[ 1101.155659][T10108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1101.215861][   T32] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[ 1101.281804][T29288] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9035'.
[ 1101.288539][T29288] loop4: detected capacity change from 0 to 256
[ 1101.291370][T29288] vfat: Unknown parameter 'nnonumtail'
[ 1101.381438][   T32] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1101.389029][   T32] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7
[ 1101.392579][   T32] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[ 1101.404544][   T32] usb 3-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40
[ 1101.413108][   T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1101.415927][   T32] usb 3-1: Product: syz
[ 1101.417390][   T32] usb 3-1: Manufacturer: syz
[ 1101.418937][   T32] usb 3-1: SerialNumber: syz
[ 1101.492007][T24334] asix 9-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[ 1101.507096][T24334] asix 9-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71
[ 1101.527900][T24334] asix 9-1:0.251: probe with driver asix failed with error -5
[ 1101.543022][T29297] loop4: detected capacity change from 0 to 1764
[ 1101.550714][T24334] usb 9-1: USB disconnect, device number 59
[ 1101.629390][   T32] usb 3-1: unit 9 not found!
[ 1101.670067][   T32] usb 3-1: USB disconnect, device number 43
[ 1101.698700][ T9036] udevd[9036]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[ 1101.926145][T10108] usb 5-1: new low-speed USB device number 8 using dummy_hcd
[ 1102.088137][T10108] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1102.095113][T10108] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1102.105353][T10108] usb 5-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1102.117077][T10108] usb 5-1: config 1 interface 0 has no altsetting 0
[ 1102.129899][T10108] usb 5-1: string descriptor 0 read error: -22
[ 1102.139204][T10108] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[ 1102.150277][T10108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1102.195766][T10108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1102.208458][T29304] netlink: 'syz.2.9042': attribute type 3 has an invalid length.
[ 1102.211052][T29304] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9042'.
[ 1102.372652][T10108] usb 5-1: USB disconnect, device number 8
[ 1102.431304][T29316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9048'.
[ 1103.236112][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1103.239474][T10108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1103.316313][T29343] loop4: detected capacity change from 0 to 128
[ 1103.377782][T29343] omfs: sysblock size (-58445445) is out of range
[ 1103.436731][T29345] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9058'.
[ 1103.438083][T24334] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[ 1103.499823][T29347] loop8: detected capacity change from 0 to 256
[ 1103.641977][T24334] usb 3-1: config 0 has an invalid interface number: 50 but max is 0
[ 1103.657417][T24334] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1103.684317][T24334] usb 3-1: config 0 has no interface number 0
[ 1103.698086][T24334] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[ 1103.706522][T24334] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1103.724582][T24334] usb 3-1: Product: syz
[ 1103.729686][T24334] usb 3-1: Manufacturer: syz
[ 1103.733218][T24334] usb 3-1: SerialNumber: syz
[ 1103.753949][T24334] usb 3-1: config 0 descriptor??
[ 1103.766713][T24334] yurex 3-1:0.50: Could not find endpoints
[ 1103.998861][   T32] usb 3-1: USB disconnect, device number 44
[ 1104.277686][T24334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1105.120642][T29370] loop2: detected capacity change from 0 to 32768
[ 1105.131653][T29370] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[ 1105.147650][T29370] JBD2: Ignoring recovery information on journal
[ 1105.155683][T16195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1105.225629][T29370] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[ 1105.233842][T10108] bridge0: entered promiscuous mode
[ 1105.315146][T10108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1105.562123][T29370] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #32 has an invalid fs_generation of #1
[ 1105.569422][T29370] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[ 1105.578170][T29370] OCFS2: File system is now read-only.
[ 1105.580506][T29370] (syz.2.9067,29370,0):ocfs2_search_chain:1935 ERROR: status = -30
[ 1105.616898][T29370] (syz.2.9067,29370,0):ocfs2_search_chain:2058 ERROR: status = -30
[ 1105.620284][T29370] (syz.2.9067,29370,0):ocfs2_claim_suballoc_bits:2145 ERROR: status = -30
[ 1105.628373][T29370] (syz.2.9067,29370,0):ocfs2_claim_suballoc_bits:2198 ERROR: status = -30
[ 1105.631987][T29370] (syz.2.9067,29370,0):__ocfs2_claim_clusters:2579 ERROR: status = -30
[ 1105.640459][T29370] (syz.2.9067,29370,0):__ocfs2_claim_clusters:2587 ERROR: status = -30
[ 1105.644295][T29370] (syz.2.9067,29370,0):ocfs2_local_alloc_new_window:1197 ERROR: status = -30
[ 1105.650546][T29370] (syz.2.9067,29370,0):ocfs2_local_alloc_new_window:1222 ERROR: status = -30
[ 1105.654518][T29370] (syz.2.9067,29370,0):ocfs2_local_alloc_slide_window:1296 ERROR: status = -30
[ 1105.661585][T29370] (syz.2.9067,29370,0):ocfs2_local_alloc_slide_window:1315 ERROR: status = -30
[ 1105.677892][T29370] (syz.2.9067,29370,0):ocfs2_reserve_local_alloc_bits:672 ERROR: status = -30
[ 1105.687746][T29370] (syz.2.9067,29370,0):ocfs2_reserve_local_alloc_bits:710 ERROR: status = -30
[ 1105.722406][T29370] (syz.2.9067,29370,0):ocfs2_reserve_clusters_with_limit:1288 ERROR: status = -30
[ 1105.731707][T29405] tipc: Started in network mode
[ 1105.733535][T29370] (syz.2.9067,29370,0):ocfs2_reserve_clusters_with_limit:1337 ERROR: status = -30
[ 1105.740789][T29405] tipc: Node identity ac14142f, cluster identity 4711
[ 1105.743677][T29370] (syz.2.9067,29370,0):ocfs2_mknod:361 ERROR: status = -30
[ 1105.743890][T29405] tipc: New replicast peer: 127.0.0.1
[ 1105.750048][T29405] tipc: Enabled bearer <udp:syz2>, priority 10
[ 1105.757617][T29405] netlink: 64 bytes leftover after parsing attributes in process `syz.4.9083'.
[ 1105.760564][T29370] (syz.2.9067,29370,0):ocfs2_mknod:506 ERROR: status = -30
[ 1105.764204][T29370] (syz.2.9067,29370,0):ocfs2_mkdir:662 ERROR: status = -30
[ 1105.867968][T21347] ocfs2: Unmounting device (7,2) on (node local)
[ 1105.995513][T10108] usb 9-1: new high-speed USB device number 60 using dummy_hcd
[ 1106.140015][T29420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9090'.
[ 1106.142980][T29420] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9090'.
[ 1106.146070][T10108] usb 9-1: Using ep0 maxpacket: 32
[ 1106.154292][T10108] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1106.163233][ T6226] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1106.164367][T10108] usb 9-1: no configurations
[ 1106.174272][ T6226] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1106.175079][T10108] usb 9-1: can't read configurations, error -22
[ 1106.188875][ T6226] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1106.204483][ T6226] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1106.355430][T24334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1106.381916][T29430] loop2: detected capacity change from 0 to 8
[ 1106.452750][T29432] syzkaller0: entered promiscuous mode
[ 1106.455637][T29432] syzkaller0: entered allmulticast mode
[ 1106.604486][T29436] loop2: detected capacity change from 0 to 2048
[ 1106.657002][T29436] Alternate GPT is invalid, using primary GPT.
[ 1106.663513][T29436]  loop2: p2 p3 p7
[ 1106.785064][   T32] tipc: Node number set to 2886997039
[ 1106.944040][ T5997] udevd[5997]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[ 1106.963980][T29442] loop8: detected capacity change from 0 to 8192
[ 1106.972817][ T9036] udevd[9036]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[ 1107.150001][ T9036] udevd[9036]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory
[ 1107.395856][T10108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1107.930794][T29507] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1108.086772][T29518] loop2: detected capacity change from 0 to 1024
[ 1108.435798][T24334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1108.450525][T29529] program syz.8.9135 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1108.591334][T29539] loop2: detected capacity change from 0 to 512
[ 1108.593783][T29539] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1108.616452][T29539] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.9140: corrupted in-inode xattr: invalid ea_ino
[ 1108.626754][T29539] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[ 1108.627004][T29539] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.9140: couldn't read orphan inode 15 (err -117)
[ 1108.634699][    C0] EXT4-fs (loop2): error count since last fsck: 1
[ 1108.636812][    C0] EXT4-fs (loop2): initial error at time 1785253502: ext4_iget_extra_inode:5180: inode 15
[ 1108.639942][    C0] EXT4-fs (loop2): last error at time 1785253502: ext4_iget_extra_inode:5180: inode 15
[ 1108.663778][T29539] loop2: lost filesystem error report for type 5 error -117
[ 1108.673139][T29539] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1108.783553][T29545] loop8: detected capacity change from 0 to 32768
[ 1108.788617][T21347] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1108.839011][T29545]  loop8: p1 < > p3 < p5 p6 p7 > p4[DM]
[ 1108.847217][T29545] loop8: p5 size 50331648 extends beyond EOD, truncated
[ 1108.851721][T29545] loop8: p7 size 1048576 extends beyond EOD, truncated
[ 1108.997718][T16195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1109.457245][ T9036] udevd[9036]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory
[ 1109.457501][T20741] udevd[20741]: inotify_add_watch(7, /dev/loop8p5, 10) failed: No such file or directory
[ 1109.462044][ T5610] udevd[5610]: inotify_add_watch(7, /dev/loop8p7, 10) failed: No such file or directory
[ 1109.473556][ T5621] udevd[5621]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory
[ 1109.474356][ T6097] udevd[6097]: inotify_add_watch(7, /dev/loop8p6, 10) failed: No such file or directory
[ 1109.479061][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1109.491998][ T5997] udevd[5997]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory
[ 1109.693714][T29582] loop2: detected capacity change from 0 to 512
[ 1109.701234][T29582] EXT4-fs: Ignoring removed orlov option
[ 1109.704506][T29582] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors
[ 1109.709597][T29582] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 not in group (block 2)!
[ 1109.712781][T29582] EXT4-fs (loop2): group descriptors corrupted!
[ 1109.859592][T29587] loop2: detected capacity change from 0 to 32768
[ 1109.939351][T29587] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[ 1110.396725][   T33] audit: type=1800 audit(1785253503.991:1864): pid=29603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.9152" name="file1" dev="loop2" ino=17059 res=0 errno=0
[ 1110.574188][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1110.766381][T26293] IPVS: starting estimator thread 0...
[ 1110.864781][T29614] IPVS: using max 84 ests per chain, 201600 per kthread
[ 1110.916848][T25350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1111.108957][T21347] ocfs2: Unmounting device (7,2) on (node local)
[ 1111.176981][T29625] loop8: detected capacity change from 0 to 4096
[ 1111.201844][T29625] ntfs3(loop8): Failed to load $Extend (-22).
[ 1111.209998][T29625] ntfs3(loop8): Failed to initialize $Extend.
[ 1111.433358][T29643] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9168'.
[ 1111.636284][T26870] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[ 1111.647319][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1111.784910][T26870] usb 3-1: Using ep0 maxpacket: 8
[ 1111.789431][T26870] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1111.792975][T26870] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1111.796096][T26870] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[ 1111.800026][T26870] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[ 1111.803985][T26870] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 1111.808536][T26870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1111.815952][T26870] hub 3-1:1.0: bad descriptor, ignoring hub
[ 1111.820476][T26870] hub 3-1:1.0: probe with driver hub failed with error -5
[ 1111.827143][T26870] cdc_wdm 3-1:1.0: skipping garbage
[ 1111.830547][T26870] cdc_wdm 3-1:1.0: skipping garbage
[ 1111.859638][T26870] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[ 1111.863273][T26870] cdc_wdm 3-1:1.0: Unknown control protocol
[ 1112.185072][T29652] loop4: detected capacity change from 0 to 64
[ 1112.221506][T29652] syz.4.9171: attempt to access beyond end of device
[ 1112.221506][T29652] loop4: rw=8388608, sector=268435468, nr_sectors = 2 limit=64
[ 1112.227666][T29652] Buffer I/O error on dev loop4, logical block 134217734, async page read
[ 1112.242451][T29652] syz.4.9171: attempt to access beyond end of device
[ 1112.242451][T29652] loop4: rw=8388608, sector=268435468, nr_sectors = 2 limit=64
[ 1112.248197][T29652] Buffer I/O error on dev loop4, logical block 134217734, async page read
[ 1112.317286][    T9] IPVS: starting estimator thread 0...
[ 1112.320484][T29654] IPVS: wlc: FWM 3 0x00000003 - no destination available
[ 1112.323931][    C0] IPVS: wlc: FWM 3 0x00000003 - no destination available
[ 1112.330498][T29654] IPVS: wlc: FWM 3 0x00000003 - no destination available
[ 1112.333617][    C0] IPVS: wlc: FWM 3 0x00000003 - no destination available
[ 1112.395550][T29657] loop4: detected capacity change from 0 to 2048
[ 1112.407477][T29655] IPVS: using max 49 ests per chain, 117600 per kthread
[ 1112.408127][T29657] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1112.662625][T29663] ubi31: attaching mtd0
[ 1112.696757][T29663] ubi31: scanning is finished
[ 1112.698506][T29663] ubi31 error: ubi_read_volume_table: the layout volume was not found
[ 1112.782032][ T5808] Bluetooth: Frame is too long (len 12, expected len 4)
[ 1112.790616][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1112.975636][T29663] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[ 1113.271945][T28879] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1113.674763][T26870] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[ 1113.798960][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1113.827580][T26870] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1113.834330][T26870] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1113.838814][T26870] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[ 1113.842226][T26870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1113.848984][T26870] usb 5-1: config 0 descriptor??
[ 1114.263870][T26870] hid (null): report_id 3687892125 is invalid
[ 1114.280871][T26870] hid-steam 0003:28DE:1142.001B: report_id 3687892125 is invalid
[ 1114.283947][T26870] hid-steam 0003:28DE:1142.001B: item 0 4 1 8 parsing failed
[ 1114.287449][T26870] hid-steam 0003:28DE:1142.001B: steam_probe:parse of hid interface failed
[ 1114.291371][T26870] hid-steam 0003:28DE:1142.001B: probe with driver hid-steam failed with error -22
[ 1114.490466][T26870] usb 5-1: USB disconnect, device number 9
[ 1114.677531][T26293] usb 3-1: USB disconnect, device number 45
[ 1114.678448][T29704] loop2: detected capacity change from 0 to 16
[ 1114.690536][T29704] erofs (device loop2): dirblkbits 248 isn't supported
[ 1114.756012][T16197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1114.840883][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1115.119128][T29722] loop4: detected capacity change from 0 to 1024
[ 1115.269576][T29728] ipvlan2: entered promiscuous mode
[ 1115.272364][T29728] bridge0: port 3(ipvlan2) entered blocking state
[ 1115.274462][T29728] bridge0: port 3(ipvlan2) entered disabled state
[ 1115.277314][T29728] ipvlan2: entered allmulticast mode
[ 1115.279069][T29728] bridge0: entered allmulticast mode
[ 1115.282355][T29728] ipvlan2: left allmulticast mode
[ 1115.284007][T29728] bridge0: left allmulticast mode
[ 1115.463414][T29738] loop8: detected capacity change from 0 to 256
[ 1115.765076][    T9] usb 9-1: new low-speed USB device number 62 using dummy_hcd
[ 1115.814797][T26870] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[ 1115.849599][T29751] loop2: detected capacity change from 0 to 512
[ 1115.852828][T29751] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[ 1115.862239][T29751] EXT4-fs (loop2): 1 truncate cleaned up
[ 1115.871305][T29751] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1115.882271][T24334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1115.896849][T29751] EXT4-fs error (device loop2): ext4_empty_dir:3125: inode #2: block 13: comm syz.2.9213: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[ 1115.903229][T29751] EXT4-fs (loop2): Remounting filesystem read-only
[ 1115.915452][T21347] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1115.917532][    T9] usb 9-1: config 168 descriptor has 1 excess byte, ignoring
[ 1115.949140][    T9] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 1115.952475][    T9] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1115.956885][    T9] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1115.961705][    T9] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[ 1115.980618][    T9] usb 9-1: config 168 descriptor has 1 excess byte, ignoring
[ 1115.986811][    T9] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 1115.986993][T26870] usb 5-1: Using ep0 maxpacket: 32
[ 1115.995328][    T9] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1116.000029][    T9] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1116.004550][    T9] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[ 1116.010683][    T9] usb 9-1: config 168 descriptor has 1 excess byte, ignoring
[ 1116.011528][T26870] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1116.014560][    T9] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 1116.022533][    T9] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1116.032518][    T9] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1116.042306][ T1384] ieee802154 phy1 wpan1: encryption failed: -22
[ 1116.047667][T26870] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[ 1116.051768][    T9] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[ 1116.055213][T26870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1116.067621][    T9] usb 9-1: string descriptor 0 read error: -22
[ 1116.069727][T26870] usb 5-1: Product: syz
[ 1116.071138][    T9] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 1116.075325][T26870] usb 5-1: Manufacturer: syz
[ 1116.075337][T26870] usb 5-1: SerialNumber: syz
[ 1116.079854][    T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1116.081954][T26870] usb 5-1: config 0 descriptor??
[ 1116.094566][    T9] adutux 9-1:168.0: ADU100  now attached to /dev/usb/adutux0
[ 1116.097090][T26870] cdc_ether 5-1:0.0: skipping garbage
[ 1116.103825][T26870] usb 5-1: No union descriptors
[ 1116.113772][T26870] usb 5-1: unsupported MDLM descriptors
[ 1116.303227][    T9] usb 5-1: USB disconnect, device number 10
[ 1116.339583][T24334] usb 9-1: USB disconnect, device number 62
[ 1116.631248][T29770] loop2: detected capacity change from 0 to 512
[ 1116.634449][T29770] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[ 1116.639947][T29770] EXT4-fs (loop2): 1 truncate cleaned up
[ 1116.643660][T29770] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1116.675570][T25350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1116.685786][T21347] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1116.917312][T24334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1116.938797][T29783] openvswitch: netlink: IP tunnel dst address not specified
[ 1117.247349][T26870] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[ 1117.397692][T26870] usb 3-1: Using ep0 maxpacket: 16
[ 1117.408049][T26870] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[ 1117.414313][T26870] usb 3-1: config 0 has no interface number 0
[ 1117.422764][T26870] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[ 1117.428771][T26870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1117.432069][T26870] usb 3-1: Product: syz
[ 1117.433762][T26870] usb 3-1: Manufacturer: syz
[ 1117.436083][T26870] usb 3-1: SerialNumber: syz
[ 1117.442742][T26870] usb 3-1: config 0 descriptor??
[ 1117.449850][T26870] gspca_main: spca1528-2.14.0 probing 04fc:1528
[ 1117.464580][T29806] loop8: detected capacity change from 0 to 8
[ 1117.623954][T29810] loop8: detected capacity change from 0 to 512
[ 1117.740631][T29810] EXT4-fs (loop8): 1 orphan inode deleted
[ 1117.755458][T25349] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14
[ 1117.759230][T29810] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1117.770002][T29810] ext4 filesystem being mounted at /1657/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1117.771479][T25349] EXT4-fs error (device loop8): ext4_release_dquot:7077: comm kworker/u9:33: Failed to release dquot type 1
[ 1117.866165][T16005] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1117.958852][T24334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1118.077915][T29829] netlink: 'syz.8.9248': attribute type 1 has an invalid length.
[ 1118.080589][T29829] netlink: 232 bytes leftover after parsing attributes in process `syz.8.9248'.
[ 1118.083562][T29829] netlink: 'syz.8.9248': attribute type 1 has an invalid length.
[ 1118.215693][   T33] audit: type=1326 audit(1785253511.891:1865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29835 comm="syz.4.9251" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1596b9de99 code=0x7ffc0000
[ 1118.244863][   T33] audit: type=1326 audit(1785253511.891:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29835 comm="syz.4.9251" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1596b9de99 code=0x7ffc0000
[ 1118.265987][   T33] audit: type=1326 audit(1785253511.891:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29835 comm="syz.4.9251" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1596b9de99 code=0x7ffc0000
[ 1118.274378][   T33] audit: type=1326 audit(1785253511.891:1868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29835 comm="syz.4.9251" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1596b9de99 code=0x7ffc0000
[ 1118.288942][   T33] audit: type=1326 audit(1785253511.901:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29835 comm="syz.4.9251" exe="/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7f1596b9de99 code=0x7ffc0000
[ 1118.312059][   T33] audit: type=1326 audit(1785253511.901:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29835 comm="syz.4.9251" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1596b9de99 code=0x7ffc0000
[ 1118.328155][   T33] audit: type=1326 audit(1785253511.901:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29835 comm="syz.4.9251" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1596b9de99 code=0x7ffc0000
[ 1118.339193][T29843] netlink: 'syz.4.9255': attribute type 1 has an invalid length.
[ 1118.343562][   T33] audit: type=1326 audit(1785253511.901:1872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29835 comm="syz.4.9251" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1596b9de99 code=0x7ffc0000
[ 1118.359726][   T33] audit: type=1326 audit(1785253511.901:1873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29835 comm="syz.4.9251" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1596b9de99 code=0x7ffc0000
[ 1118.362683][T29844] veth0_macvtap: Caught tx_queue_len zero misconfig
[ 1118.426293][T29848] use of bytesused == 0 is deprecated and will be removed in the future,
[ 1118.432520][T29848] use the actual size instead.
[ 1118.473923][T26870] gspca_spca1528: reg_w err -71
[ 1118.483712][T26870] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71
[ 1118.494592][T29852] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9259'.
[ 1118.496078][T26870] usb 3-1: USB disconnect, device number 46
[ 1118.505908][T29852] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1118.528306][T29852] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1118.833252][T29860] Cannot find del_set index 0 as target
[ 1118.997478][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1119.395383][    T9] usb 9-1: new high-speed USB device number 63 using dummy_hcd
[ 1119.556995][    T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1119.560908][    T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1119.567148][    T9] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[ 1119.573055][    T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1119.578187][    T9] usb 9-1: config 0 descriptor??
[ 1119.596280][T29882] veth0: entered allmulticast mode
[ 1119.758148][T29888] netlink: 'syz.4.9275': attribute type 3 has an invalid length.
[ 1119.876224][T16197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1120.000202][    T9] hid_parser_main: 7 callbacks suppressed
[ 1120.000218][    T9] pyra 0003:1E7D:2CF6.001C: unknown main item tag 0x0
[ 1120.007694][    T9] pyra 0003:1E7D:2CF6.001C: unknown main item tag 0x0
[ 1120.010495][    T9] pyra 0003:1E7D:2CF6.001C: unknown main item tag 0x0
[ 1120.013208][    T9] pyra 0003:1E7D:2CF6.001C: unknown main item tag 0x0
[ 1120.018278][    T9] pyra 0003:1E7D:2CF6.001C: unknown main item tag 0x0
[ 1120.021126][    T9] pyra 0003:1E7D:2CF6.001C: unknown main item tag 0x0
[ 1120.023899][    T9] pyra 0003:1E7D:2CF6.001C: unknown main item tag 0x0
[ 1120.040304][T10108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1120.044295][    T9] pyra 0003:1E7D:2CF6.001C: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.8-1/input0
[ 1120.324776][   T32] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[ 1120.474757][   T32] usb 5-1: Using ep0 maxpacket: 32
[ 1120.479275][   T32] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 146, changing to 7
[ 1120.483841][   T32] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 32, changing to 7
[ 1120.491528][   T32] usb 5-1: New USB device found, idVendor=0763, idProduct=1011, bcdDevice= 0.40
[ 1120.495647][   T32] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1120.498277][   T32] usb 5-1: Product: syz
[ 1120.499784][   T32] usb 5-1: Manufacturer: syz
[ 1120.501154][   T32] usb 5-1: SerialNumber: syz
[ 1120.713313][   T32] usb 5-1: 1:1: invalid format type 0x1002 is detected, processed as PCM
[ 1120.716127][   T32] usb 5-1: 1:1 : unsupported sample bitwidth 9 in 148 bytes
[ 1120.718865][   T32] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found
[ 1120.737652][   T32] usb 5-1: USB disconnect, device number 11
[ 1120.769919][ T9036] udevd[9036]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[ 1120.801347][    T9] pyra 0003:1E7D:2CF6.001C: couldn't init struct pyra_device
[ 1120.806648][    T9] pyra 0003:1E7D:2CF6.001C: couldn't install mouse
[ 1120.820974][    T9] pyra 0003:1E7D:2CF6.001C: probe with driver pyra failed with error -71
[ 1120.830332][    T9] usb 9-1: USB disconnect, device number 63
[ 1121.081146][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1121.243429][T29903] vxlan0: entered promiscuous mode
[ 1121.253275][T29903] vxlan0: entered allmulticast mode
[ 1121.259112][ T6229] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1121.270408][ T6229] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1121.279231][ T6229] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1121.285889][ T6229] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1121.459887][T29918] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9289'.
[ 1121.528318][T29924] sock: sock_set_timeout: `syz.8.9292' (pid 29924) tries to set negative timeout
[ 1121.598350][T29929] veth1_to_hsr: Caught tx_queue_len zero misconfig
[ 1121.717467][T16195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1121.779842][T29942] loop2: detected capacity change from 0 to 1024
[ 1122.125953][T24334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1122.339329][T29965] program syz.2.9310 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1122.439242][T29969] sctp: [Deprecated]: syz.2.9312 (pid 29969) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1122.439242][T29969] Use struct sctp_sack_info instead
[ 1122.506462][T29973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1122.517101][T29973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1122.520131][T29973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1122.530766][T29973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1122.592805][T29971] loop4: detected capacity change from 0 to 32768
[ 1122.596380][T29971] BTRFS warning: excessive commit interval 54061, use with care
[ 1122.608591][T29971] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.9313 (29971)
[ 1122.645770][T29971] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1122.649586][T29971] BTRFS info (device loop4): using crc32c checksum algorithm
[ 1122.652719][T29971] BTRFS error (device loop4): ignoredatacsums must be used with ro mount option
[ 1122.656354][T29971] BTRFS error (device loop4): cannot disable free-space-tree
[ 1122.659608][T29971] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[ 1122.666336][T29971] BTRFS error (device loop4): open_ctree failed: -22
[ 1122.765857][T29976] kAFS: unparsable volume name
[ 1122.993800][T29978] loop2: detected capacity change from 0 to 32768
[ 1123.048928][T29978]  loop2: p1 p2 p3 < p5 p6 >
[ 1123.052467][T29978] loop2: p2 size 16775168 extends beyond EOD, truncated
[ 1123.058459][T29978] loop2: p5 start 4294970168 is beyond EOD, truncated
[ 1123.105109][T26293] usb 5-1: new full-speed USB device number 12 using dummy_hcd
[ 1123.253823][T29986] loop8: detected capacity change from 0 to 512
[ 1123.270646][T26293] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[ 1123.283975][T29986] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1123.286616][T26293] usb 5-1: config 0 has no interface number 0
[ 1123.292283][T29986] ext4 filesystem being mounted at /1680/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1123.307977][T26293] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1123.330985][T26293] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1123.352151][T26293] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1123.375708][T26293] usb 5-1: config 0 descriptor??
[ 1123.398423][T26293] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 1123.419000][ T9036] udevd[9036]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[ 1123.431942][ T5621] udevd[5621]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[ 1123.483213][ T6097] udevd[6097]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory
[ 1123.490612][T20741] udevd[20741]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[ 1123.673969][T29992] EXT4-fs error (device loop8): ext4_empty_dir:3082: inode #12: comm syz.8.9320: invalid size
[ 1123.747634][T29992] EXT4-fs (loop8): Remounting filesystem read-only
[ 1124.013095][T26293] usb 5-1: USB disconnect, device number 12
[ 1124.144208][T29996] loop2: detected capacity change from 0 to 32768
[ 1124.165412][T29996] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1124.175798][T26320] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started
[ 1124.180290][T16005] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1124.185102][T26320] __quota_error: 85 callbacks suppressed
[ 1124.185116][T26320] Quota error (device loop8): write_blk: dquota write failed
[ 1124.189736][T26320] Quota error (device loop8): free_dqentry: Can't write quota data block 5
[ 1124.192784][T26320] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started
[ 1124.200640][T26320] Quota error (device loop8): write_blk: dquota write failed
[ 1124.205487][T26320] Quota error (device loop8): free_dqentry: Can't write quota data block 5
[ 1124.217561][T29996] XFS (loop2): Ending clean mount
[ 1124.283665][T21347] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1124.598520][T30016] loop2: detected capacity change from 0 to 512
[ 1124.608293][T30016] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.9328: iget: bad i_size value: 38620345925642
[ 1124.653713][T30016] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[ 1124.654695][    C0] EXT4-fs (loop2): error count since last fsck: 1
[ 1124.659833][T30019] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9329'.
[ 1124.660934][    C0] EXT4-fs (loop2): initial error at time 1785253518: ext4_orphan_get:1399: inode 15
[ 1124.660963][    C0] EXT4-fs (loop2): last error at time 1785253518: ext4_orphan_get:1399: inode 15
[ 1124.683942][T24334] usb 9-1: new high-speed USB device number 64 using dummy_hcd
[ 1124.703651][T30016] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.9328: couldn't read orphan inode 15 (err -117)
[ 1124.722477][T30016] loop2: lost filesystem error report for type 5 error -117
[ 1124.732510][T30016] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1124.845258][T24334] usb 9-1: Using ep0 maxpacket: 32
[ 1124.893145][T30028] sch_fq: defrate 0 ignored.
[ 1124.898147][T24334] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1124.908693][T24334] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1124.912439][T24334] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1124.917057][T25350] net_ratelimit: 12 callbacks suppressed
[ 1124.917071][T25350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1124.922792][T24334] usb 9-1: Product: syz
[ 1124.925474][T24334] usb 9-1: Manufacturer: syz
[ 1124.929666][T24334] usb 9-1: SerialNumber: syz
[ 1124.934318][T24334] usb 9-1: config 0 descriptor??
[ 1125.093855][T21347] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1125.169461][T24334] usb 9-1: USB disconnect, device number 64
[ 1125.278667][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1126.028691][T30075] loop8: detected capacity change from 0 to 2048
[ 1126.060379][T30075] EXT4-fs (loop8): failed to initialize system zone (-117)
[ 1126.072987][T30075] EXT4-fs (loop8): mount failed
[ 1126.375657][T24334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1126.448809][T30089] loop8: detected capacity change from 0 to 8192
[ 1126.736893][T30103] loop2: detected capacity change from 0 to 8
[ 1126.822193][T30103] SQUASHFS error: xz decompression failed, data probably corrupt
[ 1126.826778][T30103] SQUASHFS error: Failed to read block 0x108: -5
[ 1126.829405][T30103] SQUASHFS error: Unable to read metadata cache entry [106]
[ 1126.831715][T30103] SQUASHFS error: Unable to read inode 0x11f
[ 1127.395588][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1127.555706][T16197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1127.559354][T30127] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9373'.
[ 1127.575130][T24334] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[ 1127.715733][T30138] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9377'.
[ 1127.726158][T24334] usb 3-1: Using ep0 maxpacket: 32
[ 1127.741838][T24334] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1127.758859][T24334] usb 3-1: New USB device found, idVendor=0499, idProduct=1054, bcdDevice= 0.40
[ 1127.764317][T24334] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1127.771701][T24334] usb 3-1: Product: syz
[ 1127.776036][T24334] usb 3-1: Manufacturer: syz
[ 1127.777633][T24334] usb 3-1: SerialNumber: syz
[ 1127.902465][    T9] kernel read not supported for file /rfkill (pid: 9 comm: kworker/0:0)
[ 1128.003732][T24334] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22)
[ 1128.010642][T24334] usb 3-1: unit 37 not found!
[ 1128.012574][T24334] usb 3-1: unit 0 not found!
[ 1128.178280][T24334] usb 3-1: USB disconnect, device number 47
[ 1128.254308][T20741] udevd[20741]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[ 1128.404327][T30167] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[ 1128.410865][T30167] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[ 1128.418485][T30167] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[ 1128.426514][T10108] usb 9-1: new high-speed USB device number 65 using dummy_hcd
[ 1128.436549][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1128.449881][T30167] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[ 1128.521125][T29563] smbdirect: ib_dev[syz2] removed
[ 1128.575257][T10108] usb 9-1: Using ep0 maxpacket: 32
[ 1128.580059][T10108] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1128.586021][T10108] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1128.599705][T10108] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1128.612125][T10108] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1128.628443][T10108] usb 9-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40
[ 1128.635120][T10108] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1128.643377][T10108] usb 9-1: Product: syz
[ 1128.652017][T10108] usb 9-1: Manufacturer: syz
[ 1128.660281][T10108] usb 9-1: SerialNumber: syz
[ 1128.802230][T30179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1128.810053][T30179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1128.813880][T30177] loop4: detected capacity change from 0 to 4096
[ 1128.817465][T30179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1128.847591][T30177] EXT4-fs (loop4): Test dummy encryption mode enabled
[ 1128.877294][T30177] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1128.918789][T30179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1129.151385][T28879] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1129.239715][T10108] usb 9-1: USB disconnect, device number 65
[ 1129.341026][T30190] bond0: Error: CAN devices cannot be enslaved
[ 1129.544427][T30198] db_root: cannot be changed because it's in use
[ 1129.607662][T30198] 
[ 1129.608740][T30198] ======================================================
[ 1129.611551][T30198] WARNING: possible circular locking dependency detected
[ 1129.614369][T30198] syzkaller #0 Tainted: G             L     
[ 1129.616861][T30198] ------------------------------------------------------
[ 1129.619582][T30198] syz.8.9406/30198 is trying to acquire lock:
[ 1129.622049][T30198] ffff888107891900 (&sb->s_type->i_mutex_key#32){++++}-{4:4}, at: configfs_depend_item_unlocked+0x153/0x420
[ 1129.626582][T30198] 
[ 1129.626582][T30198] but task is already holding lock:
[ 1129.629446][T30198] ffff88816b14b518 (&opts->dep_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x147/0x590
[ 1129.633075][T30198] 
[ 1129.633075][T30198] which lock already depends on the new lock.
[ 1129.633075][T30198] 
[ 1129.637167][T30198] 
[ 1129.637167][T30198] the existing dependency chain (in reverse order) is:
[ 1129.640673][T30198] 
[ 1129.640673][T30198] -> #2 (&opts->dep_lock){+.+.}-{4:4}:
[ 1129.643672][T30198]        __mutex_lock+0x19d/0x1550
[ 1129.645691][T30198]        tcm_set_name+0x2b/0xd0
[ 1129.647675][T30198]        function_make+0x1a8/0x360
[ 1129.649682][T30198]        configfs_mkdir+0x4f6/0x9e0
[ 1129.651766][T30198]        vfs_mkdir+0x406/0x620
[ 1129.653677][T30198]        filename_mkdirat+0x285/0x510
[ 1129.655764][T30198]        __se_sys_mkdir+0x34/0x150
[ 1129.657767][T30198]        do_syscall_64+0x174/0x580
[ 1129.659778][T30198]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1129.662191][T30198] 
[ 1129.662191][T30198] -> #1 (gadget_subsys.su_mutex){+.+.}-{4:4}:
[ 1129.665331][T30198]        __mutex_lock+0x19d/0x1550
[ 1129.667364][T30198]        configfs_rmdir+0x5f0/0x950
[ 1129.669466][T30198]        vfs_rmdir+0x3e6/0x6a0
[ 1129.671376][T30198]        filename_rmdir+0x292/0x520
[ 1129.673411][T30198]        __se_sys_rmdir+0x2e/0x140
[ 1129.675437][T30198]        do_syscall_64+0x174/0x580
[ 1129.677490][T30198]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1129.680002][T30198] 
[ 1129.680002][T30198] -> #0 (&sb->s_type->i_mutex_key#32){++++}-{4:4}:
[ 1129.683464][T30198]        __lock_acquire+0x1520/0x2cf0
[ 1129.685641][T30198]        lock_acquire+0x106/0x350
[ 1129.687669][T30198]        down_write+0x96/0x200
[ 1129.689616][T30198]        configfs_depend_item_unlocked+0x153/0x420
[ 1129.692169][T30198]        usbg_make_tpg+0x1f6/0x590
[ 1129.694199][T30198]        target_fabric_make_tpg+0xa8/0x6d0
[ 1129.696523][T30198]        configfs_mkdir+0x4f6/0x9e0
[ 1129.698534][T30198]        vfs_mkdir+0x406/0x620
[ 1129.700380][T30198]        filename_mkdirat+0x285/0x510
[ 1129.702563][T30198]        __se_sys_mkdir+0x34/0x150
[ 1129.704631][T30198]        do_syscall_64+0x174/0x580
[ 1129.706708][T30198]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1129.709264][T30198] 
[ 1129.709264][T30198] other info that might help us debug this:
[ 1129.709264][T30198] 
[ 1129.713385][T30198] Chain exists of:
[ 1129.713385][T30198]   &sb->s_type->i_mutex_key#32 --> gadget_subsys.su_mutex --> &opts->dep_lock
[ 1129.713385][T30198] 
[ 1129.719203][T30198]  Possible unsafe locking scenario:
[ 1129.719203][T30198] 
[ 1129.722235][T30198]        CPU0                    CPU1
[ 1129.724376][T30198]        ----                    ----
[ 1129.726554][T30198]   lock(&opts->dep_lock);
[ 1129.728404][T30198]                                lock(gadget_subsys.su_mutex);
[ 1129.731402][T30198]                                lock(&opts->dep_lock);
[ 1129.734169][T30198]   lock(&sb->s_type->i_mutex_key#32);
[ 1129.736374][T30198] 
[ 1129.736374][T30198]  *** DEADLOCK ***
[ 1129.736374][T30198] 
[ 1129.739232][T30198] 5 locks held by syz.8.9406/30198:
[ 1129.741306][T30198]  #0: ffff888101f1c450 (sb_writers#16){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[ 1129.744596][T30198]  #1: ffff8881bae9ddc0 (&sb->s_type->i_mutex_key#8/1){+.+.}-{4:4}, at: filename_create+0x200/0x370
[ 1129.747844][T30198]  #2: ffffffff8f71a988 (&subsys->su_mutex){+.+.}-{4:4}, at: configfs_mkdir+0x4b0/0x9e0
[ 1129.750880][T30198]  #3: ffffffff8fa4df60 (tpg_instances_lock){+.+.}-{4:4}, at: usbg_make_tpg+0xf7/0x590
[ 1129.753874][T30198]  #4: ffff88816b14b518 (&opts->dep_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x147/0x590
[ 1129.757104][T30198] 
[ 1129.757104][T30198] stack backtrace:
[ 1129.759052][T30198] CPU: 1 UID: 0 PID: 30198 Comm: syz.8.9406 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1129.759067][T30198] Tainted: [L]=SOFTLOCKUP
[ 1129.759070][T30198] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1129.759076][T30198] Call Trace:
[ 1129.759083][T30198]  <TASK>
[ 1129.759088][T30198]  dump_stack_lvl+0xe8/0x150
[ 1129.759104][T30198]  print_circular_bug+0x2e1/0x300
[ 1129.759120][T30198]  check_noncircular+0x12e/0x150
[ 1129.759136][T30198]  __lock_acquire+0x1520/0x2cf0
[ 1129.759156][T30198]  ? __mutex_trylock_common+0x15f/0x270
[ 1129.759167][T30198]  ? __pfx___mutex_trylock_common+0x10/0x10
[ 1129.759179][T30198]  ? rcu_is_watching+0x15/0xb0
[ 1129.759192][T30198]  ? configfs_depend_item_unlocked+0x153/0x420
[ 1129.759208][T30198]  lock_acquire+0x106/0x350
[ 1129.759223][T30198]  ? configfs_depend_item_unlocked+0x153/0x420
[ 1129.759237][T30198]  down_write+0x96/0x200
[ 1129.759251][T30198]  ? configfs_depend_item_unlocked+0x153/0x420
[ 1129.759263][T30198]  ? __pfx_down_write+0x10/0x10
[ 1129.759278][T30198]  ? kstrtoull+0x12f/0x1d0
[ 1129.759294][T30198]  configfs_depend_item_unlocked+0x153/0x420
[ 1129.759308][T30198]  usbg_make_tpg+0x1f6/0x590
[ 1129.759323][T30198]  ? configfs_mkdir+0x4b0/0x9e0
[ 1129.759335][T30198]  ? __pfx___mutex_lock+0x10/0x10
[ 1129.759350][T30198]  ? __pfx_usbg_make_tpg+0x10/0x10
[ 1129.759372][T30198]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1129.759389][T30198]  target_fabric_make_tpg+0xa8/0x6d0
[ 1129.759409][T30198]  configfs_mkdir+0x4f6/0x9e0
[ 1129.759422][T30198]  ? d_splice_alias+0x12/0x30
[ 1129.759436][T30198]  ? __pfx_configfs_mkdir+0x10/0x10
[ 1129.759448][T30198]  ? generic_permission+0x2bf/0x670
[ 1129.759466][T30198]  ? bpf_lsm_inode_mkdir+0x9/0x20
[ 1129.759480][T30198]  vfs_mkdir+0x406/0x620
[ 1129.759492][T30198]  filename_mkdirat+0x285/0x510
[ 1129.759504][T30198]  ? __pfx_filename_mkdirat+0x10/0x10
[ 1129.759515][T30198]  ? do_getname+0x151/0x250
[ 1129.759527][T30198]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1129.759537][T30198]  __se_sys_mkdir+0x34/0x150
[ 1129.759547][T30198]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1129.759557][T30198]  do_syscall_64+0x174/0x580
[ 1129.759568][T30198]  ? trace_irq_disable+0x3b/0x140
[ 1129.759582][T30198]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1129.759592][T30198] RIP: 0033:0x7f09f4d9de99
[ 1129.759605][T30198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1129.759614][T30198] RSP: 002b:00007f09f5c50028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[ 1129.759626][T30198] RAX: ffffffffffffffda RBX: 00007f09f5025fa0 RCX: 00007f09f4d9de99
[ 1129.759636][T30198] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000200000000c00
[ 1129.759643][T30198] RBP: 00007f09f4e33eaf R08: 0000000000000000 R09: 0000000000000000
[ 1129.759650][T30198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1129.759657][T30198] R13: 00007f09f5026038 R14: 00007f09f5025fa0 R15: 00007ffceca46238
[ 1129.759669][T30198]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1130.116068][T25350] net_ratelimit: 7 callbacks suppressed
[ 1130.116090][T25350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1130.346059][ T5774] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1130.406871][ T5774] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1130.483123][ T5774] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1130.516367][T24334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1130.646910][   T12] netdevsim netdevsim8 eth9: set [1, 0] type 2 family 0 port 6081 - 0
[ 1130.649917][   T12] netdevsim netdevsim8 eth10: set [1, 0] type 2 family 0 port 6081 - 0
[ 1130.652655][   T12] netdevsim netdevsim8 eth11: set [1, 0] type 2 family 0 port 6081 - 0
[ 1130.662416][   T12] netdevsim netdevsim8 eth12: set [1, 0] type 2 family 0 port 6081 - 0
[ 1130.667653][ T5774] bridge_slave_1: left allmulticast mode
[ 1130.669543][ T5774] bridge_slave_1: left promiscuous mode
[ 1130.671607][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1130.676846][ T5774] bridge_slave_0: left allmulticast mode
[ 1130.679160][ T5774] bridge_slave_0: left promiscuous mode
[ 1130.681548][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1130.947983][ T5774] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1130.951713][ T5774] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1130.955896][ T5774] bond0 (unregistering): (slave bond1): Releasing backup interface
[ 1130.959586][ T5774] bond0 (unregistering): (slave macvlan1): Releasing backup interface
[ 1130.962417][ T5774] veth1_vlan: left allmulticast mode
[ 1130.970130][ T5774] bond0 (unregistering): Released all slaves
[ 1130.973724][ T5774] bond1 (unregistering): Released all slaves
[ 1131.028044][ T5774] : left promiscuous mode
[ 1131.098917][ T5357] 8021q: adding VLAN 0 to HW filter on device eth9
[ 1131.141279][ T5774] tipc: Left network mode
[ 1131.248679][ T5357] 8021q: adding VLAN 0 to HW filter on device eth10
[ 1131.339361][ T5774] hsr_slave_0: left promiscuous mode
[ 1131.341903][ T5774] hsr_slave_1: left promiscuous mode
[ 1131.343870][ T5774] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1131.349615][ T5774] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1131.352384][ T5774] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1131.362164][ T5774] veth1_macvtap: left promiscuous mode
[ 1131.364013][ T5774] veth0_macvtap: left promiscuous mode
[ 1131.366273][ T5774] veth1_vlan: left promiscuous mode
[ 1131.368148][ T5774] veth0_vlan: left promiscuous mode
[ 1131.598774][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1131.656541][ T5774] team0 (unregistering): Port device team_slave_1 removed
[ 1131.665739][ T5774] team0 (unregistering): Port device team_slave_0 removed
[ 1131.813736][ T5357] 8021q: adding VLAN 0 to HW filter on device eth11
[ 1132.055043][ T5357] 8021q: adding VLAN 0 to HW filter on device eth12
[ 1132.225511][ T5774] IPVS: stop unused estimator thread 0...
[ 1132.362817][ T5774] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1132.371696][ T5774] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1132.450389][ T5774] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1132.455296][ T5774] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1132.532257][ T5774] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1132.536804][ T5774] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1132.640966][ T5774] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1132.645366][ T5774] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1132.676106][T24334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1132.709091][   T12] netdevsim netdevsim2 eth25: set [1, 0] type 2 family 0 port 6081 - 0
[ 1132.717240][   T12] netdevsim netdevsim2 eth26: set [1, 0] type 2 family 0 port 6081 - 0
[ 1132.731175][   T12] netdevsim netdevsim2 eth27: set [1, 0] type 2 family 0 port 6081 - 0
[ 1132.742864][   T12] netdevsim netdevsim2 eth28: set [1, 0] type 2 family 0 port 6081 - 0
[ 1132.757459][ T5774] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1132.762297][ T5774] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1132.810623][ T5774] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1132.815182][ T5774] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1132.865084][ T5774] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1132.869011][ T5774] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1132.875883][ T5357] 8021q: adding VLAN 0 to HW filter on device eth25
[ 1132.911588][ T5774] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1132.918401][ T5774] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1132.976683][ T6230] netdevsim netdevsim4 eth29: set [1, 0] type 2 family 0 port 6081 - 0
[ 1132.987602][ T6230] netdevsim netdevsim4 eth30: set [1, 0] type 2 family 0 port 6081 - 0
[ 1133.000589][ T6230] netdevsim netdevsim4 eth31: set [1, 0] type 2 family 0 port 6081 - 0
[ 1133.016619][ T6230] netdevsim netdevsim4 eth32: set [1, 0] type 2 family 0 port 6081 - 0
[ 1133.026622][ T5774] bridge_slave_1: left allmulticast mode
[ 1133.028541][ T5774] bridge_slave_1: left promiscuous mode
[ 1133.030452][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1133.033729][ T5774] bridge_slave_0: left allmulticast mode
[ 1133.036934][ T5774] bridge_slave_0: left promiscuous mode
[ 1133.039286][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1133.049871][ T5774] bridge_slave_1: left allmulticast mode
[ 1133.052573][ T5774] bridge_slave_1: left promiscuous mode
[ 1133.055354][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1133.059789][ T5774] bridge_slave_0: left allmulticast mode
[ 1133.062164][ T5774] bridge_slave_0: left promiscuous mode
[ 1133.064488][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1133.077368][ T5774] veth0: left allmulticast mode
[ 1133.400289][ T5774] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1133.409765][ T5774] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1133.414333][ T5774] bond0 (unregistering): Released all slaves
[ 1133.424813][ T5774] bond1 (unregistering): Released all slaves
[ 1133.431444][ T5774] bond2 (unregistering): Released all slaves
[ 1133.479048][ T5774] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1133.484174][ T5774] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1133.492538][ T5774] bond0 (unregistering): Released all slaves
[ 1133.498045][ T5357] 8021q: adding VLAN 0 to HW filter on device eth26
[ 1133.634507][ T5774] tipc: Left network mode
[ 1133.637988][ T5774] tipc: Disabling bearer <udp:syz2>
[ 1133.640279][ T5774] tipc: Left network mode
[ 1133.735155][ T5357] 8021q: adding VLAN 0 to HW filter on device eth27
[ 1133.977274][ T5357] 8021q: adding VLAN 0 to HW filter on device eth28
[ 1134.106091][ T5774] hsr_slave_0: left promiscuous mode
[ 1134.110450][ T5774] hsr_slave_1: left promiscuous mode
[ 1134.113125][ T5774] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1134.117257][ T5774] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1134.120760][ T5774] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1134.123775][ T5774] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1134.134181][ T5774] hsr_slave_0: left promiscuous mode
[ 1134.141212][ T5774] hsr_slave_1: left promiscuous mode
[ 1134.143900][ T5774] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1134.147547][ T5774] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1134.157442][ T5774] veth1_macvtap: left promiscuous mode
[ 1134.159780][ T5774] veth0_macvtap: left promiscuous mode
[ 1134.162029][ T5774] veth1_vlan: left promiscuous mode
[ 1134.163934][ T5774] veth0_vlan: left promiscuous mode
[ 1134.166674][ T5774] veth1_macvtap: left promiscuous mode
[ 1134.168788][ T5774] veth0_macvtap: left promiscuous mode
[ 1134.171049][ T5774] veth1_vlan: left promiscuous mode
[ 1134.173158][ T5774] veth0_vlan: left promiscuous mode
[ 1134.486114][ T5774] team0 (unregistering): Port device team_slave_1 removed
[ 1134.493660][ T5774] team0 (unregistering): Port device team_slave_0 removed
[ 1134.650612][ T5774] team0 (unregistering): Port device team_slave_1 removed
[ 1134.662259][ T5774] team0 (unregistering): Port device team_slave_0 removed
[ 1134.720640][ T5357] 8021q: adding VLAN 0 to HW filter on device eth29
[ 1134.900152][ T5357] 8021q: adding VLAN 0 to HW filter on device eth30
[ 1135.100168][ T5357] 8021q: adding VLAN 0 to HW filter on device eth31
[ 1135.262612][ T5357] 8021q: adding VLAN 0 to HW filter on device eth32
[ 1135.427121][ T5774] IPVS: stop unused estimator thread 0...
[ 1135.430897][ T5774] IPVS: stop unused estimator thread 0...
