last executing test programs:

9m59.039417616s ago: executing program 0 (id=115):
request_key(&(0x7f0000000cc0)='cifs.idmap\x00', &(0x7f0000000d00)={'syz', 0x0}, 0x0, 0xfffffffffffffff8)

9m58.893049611s ago: executing program 0 (id=117):
r0 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
preadv2(r0, 0x0, 0x0, 0x7fffffff, 0x5, 0x2)

9m58.832147982s ago: executing program 0 (id=119):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x301c40a, &(0x7f00000014c0)=ANY=[@ANYBLOB="726f6469722c73686f72746e616d653d77696e39352c6e6f6e756d7461696c3d302c757466383d302c696f636861727365743d63703836362c726f6469722c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c636f6465706167653d3835322c756e695f786c6174653d312c726f6469722c756e695f786c6174653d302c726f6469722c696f636861727365743d6b6f69382d722c6572726f72733d636f6e74696e75652c756e695f786c6174653d312c636865636b3d7374726963742c007dda7c45d5aad78cccfdc2ffc29d6a3b6e1b129f9d0266d865d85fd2bfa2ccc210c0dcd127a25f0d6c6d96a9a07afc56b8e1aba9cc2ada1d083e28a51159b7c76a012ba863bd2b72ca09635af17887064bb040ed8e5244d0f8d2cf2a0964bc96503d78291d"], 0x6, 0x2d8, &(0x7f0000000c40)="$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")
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = dup(r0)
sendmsg$netlink(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{0x0, 0x1b8}], 0x1}, 0x0)

9m57.842422653s ago: executing program 0 (id=121):
syz_mount_image$exfat(&(0x7f0000000580), &(0x7f0000000040)='./bus\x00', 0x800800, &(0x7f0000000740)={[{@discard}, {@discard}, {@dmask={'dmask', 0x3d, 0x5}}, {@errors_continue}, {@errors_remount}, {@keep_last_dots}, {@gid}, {@gid={'gid', 0x3d, 0xee01}}, {@errors_continue}, {@fmask={'fmask', 0x3d, 0x7}}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}]}, 0x1, 0x1534, &(0x7f0000003e40)="$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")
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0x1)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0)

9m57.713434105s ago: executing program 0 (id=124):
mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x80000)
faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2)

9m57.383063685s ago: executing program 0 (id=128):
r0 = socket(0x10, 0x803, 0x0)
write(r0, &(0x7f0000000100)="1c0000005e001f3814584707f9f4ffffff0000000d000000f3f80000", 0x1c)

9m57.22182778s ago: executing program 32 (id=128):
r0 = socket(0x10, 0x803, 0x0)
write(r0, &(0x7f0000000100)="1c0000005e001f3814584707f9f4ffffff0000000d000000f3f80000", 0x1c)

9m9.843273113s ago: executing program 2 (id=747):
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8882, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x7040, 0x0)

9m9.746747999s ago: executing program 2 (id=749):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = syz_io_uring_setup(0x49f, &(0x7f0000001000)={0x0, 0x54e9, 0x0, 0x7, 0x40024f}, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="7c00000015"], 0x318}, 0x0, 0x4040000})
io_uring_enter(r1, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0)

9m9.458976954s ago: executing program 2 (id=751):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4)
setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4)

9m9.326192907s ago: executing program 2 (id=753):
syz_mount_image$jfs(&(0x7f0000000200), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="646973636172642c71756f74612c6572726f72733d72656d6f756e742d726f2c696f636861727365743d6d61637475726b6973682c6572726f72733d72656d6f756e742d726f2c71756f74612c696f636861727365743d6d616363726f617469616e006e6f646973636172642c75737271756f74b23194d8726f72733d72656d6f756e742d726f2c726573697a653d3078666666666666666666666666666666652c6572726f726e75652c726573697a652c646973636172642c61707072616973652c7375626a5f757365723d21952c7375626a5f726f6c653d726573697a652c0000000000000000d398e30e7cdc23a1553be48fabf3f19f3ca197da8932a8e170520258e19420036141172352466ff223e87948b103"], 0x1, 0x62cd, &(0x7f00000042c0)="$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")
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000480)={{}, 0x0, 0x2, @unused=[0x3, 0x3, 0x577, 0x2], @name="701810222f8a66a301a0af5b1b542264d8160f53b5f57fb390b10e0f35e3992e518a3c3d181c7a74bd444e2e7935e7ca7f92af779a245eeebaaa13e62f8a57911bf5f7f520d2399fc236cd03254b824fea06c75a89722ac38ae6063352a0bba151e7972060eafee54759f696f41f4f4f66332211513393305c0262e7ad17ec5b72ca241ef35515bbaf321db45d3dc76e94299c2be417ebe2f078f9a3c99ba24da217db1551e0b7981277a8a26c62bfb273515de70f3642f3b13ec11e30d51b3383670a3a24a8b11164cfa582ddb0701b8f31e75ab6ba23162c6c5b2128ddde4b1f72c13c996fcb7e318e9e25ebe5174585f73b4fae1e437ab54685d60f22fd5c0c7e21502d47b7a360a85364403c28d66026597e77599c70521528e96ad1861155519842860bdb3703dae1f65bd6cbc3f68131f5e70a7eb6687745ad6d47de974b610f765c1afdd5b90cebe6b0cf53cfc63e618e8790fa79665d215427be36580a6547c5b814bcd7976c9c77d34a59c670ad44580d294228b331df62ce391fc24887fa7aec61f54012b4586331af9ae82e36750d98691d369aa55e0c8b18a09f1074f9a5f01e4899fc465c0678887f9aff6de6a1a4faede764cf99513e8df37e3a3567f54983cca6f8d35dcc9c298e289a5b2cf7df0ec7679e94d5c182ef7698de280772ce7b42062e503d5acd0ce16977e872227050203c5f9bb0eef4eb2f4fd754f0135bcec9eb64adaf88f1eaaa34d2d2bab8f6c32cd69a57c0e519160819875bf4f287ee643e6b30d52ed1748be210c27b509df73d55f3ea22a68d6807637e1d59fc58df65670faa2197266bfc08242a9713a21d287b3fa1fdc8683126c4e8d7609019ee33fc1a16b93ca949220f6f19b9fdbb37c74d88a67cd15a6d79ab50adeb5c74879eff6c025f5898b6049f54f8fe949e4b50b0ea259a88ed8940b6de262c95dfd108df6d67a884570e678ba6d7cf82171be1d380037aaea73429d182978d478ba3e034405b668e708edc5ab25c47b828dcb328a85aba0be3898500f3bf791f4df5c97699bb4932ff4a5d0bc27b53eb89ba5d337e28f307f67059848052fec40327e932b3073d1d51b49da3a1353bff4a9dc17a2a26ccdf5e0c1e2d9bdd0cde60a8d591a53fd99e958931974a6fb6abacaa0591abc751fe0cb0bfaa55d1ff14bf68766ee3910f0e8ca5ad8c5aba6c081b9b5a1bad948031b923c70886467bc55b5ac0882492053d04900787ea4155d8e9b55e861143ff230e305b7761075b3f09966fca286a9cd8a726316f2c82a2d266f23e0677b1b0cd9f774e4f00636e5bae9c2009bcd60c4b57415907f43fb5b325da4b6f3d8fbccf428e6771f0ed9d8896d4f2793f1c7b4ef900fb9a7ec6f09a71cdcb94661fbe34c88f5025e1acd733191e1cc5dd01beecbb7e72b33768cc12886a2c631cf8c7d54ba0ea6e7fbb204409d2545a7ada2f6c8f750a59f167f4a3bef00e4e024d597caa4433d8d8092a84831644ba4e88f36908ec35b889c8d4ecec270f73257a005c8d0c2110bf52e18426efb134e1e8221e0aed193793c8f46f65e0a4d50a948004f9bbf485e14bcec8d6e487bfc95c1d721b64579adb41fe728887305adfe4781e530ca98fe2df34dcc74ef4c9b6e772d19899126c3adc58f83747ec62b54b112a40af8ab08c867ffab2cc5a4eb19948d6389c7f737a98771178d6185faab99e747c7e0641de55d0cea259d66685f6cb6619659dd78aa9eb59bf5e217b1fbceed6bb73ab4c47692364220fcd3796c67857ebcc2ea51ee041757e6ace07eb7889ac75fc3450da63feace4914a99cbc47c1fe3b22b90464f3d385feba5d45ef589d6a1b9468cf07eae80469f254faa68dbc90b879fe5351fc15360363fed140994d6f38ded297803e722e1b69da92f6fad00a7eb17e48b133d6b3f84222f5dd5ef188f63719a8a928cf7964f1257dd48b1d1b8975e96ba1d4b1865985fb1e6953c7b7f3992f377e71f5e1a5e19d69ab9830ea885a4f4fe988ae086cce09f9108e67e815844683d39f11860adb5cff4c4599dcfee3be46af98f9a950ce707e232ca02f900a506b9f65dd26b395f3cf2b0f7a3048405f083332dba8400e0e8a9851ada9675ddffdfe6e9f4ef2f294ae5bc9495fcede2d8cfe93c8957611645e8479318ce391c2f088d3bf0119e738bddf7c4e1edce03288f8f1724862f0087288894bead4b231c7ee4d7d40c5265e5f1d94383d69c53c553e0191f4e11338c6e689da4585cad80920c52db717dfc1deed3f54f54654124924415708c0d1ab9a1f744f8a0915a97a0ac57473d93df9c0a8c417f8e99bc62017e354be8a59d15a536c55b16eb6f369fe4a2ce2eaa53ad39d9ff4468b5f21bbb4cd40c852ad23f509a15111aca956346df1db1cf3801c188b426f06b9b8fd83032a957f80583c06475c95359c4731d2f38c1667e1cccb06400a4e567519b8047b768e65a9c933f216acf4bb0ae13e8cfb80ff50978ca96d01b56b374a9e117db37de203bdc92de95f7e7d544869d6f5f4fe4ee56b1afc8de311dccb44dac97c87f9fb3c72afe1e457b6b405ff310e17d605eb97d5d95867ef4eeae234b22aec6693d97332ecd85a1dfaffff682e99a2f76453b2f1b49ca52e7c089708701cb61d381d1453f84e795777f6b4b89b51b8891f1f902d6a6e57e1e1628abcc22a0e7dee4b733e2673d919462e338d526ade1b0fe7bea0ef4477e80ffd1e2b5d1a456613702046e9768b6ceb0f2d256de6a1ea36eb5c323d301aefe9bbdfd32ae2076844a5c35f2675e9777ccb654dc35196abd2940a60b5d6009154682eab75b2d3a7a5027ffdeceb246a07c241ff94412686716834573722df8a57877d054a211815a9896c1e9185b9fb699d80bb9111f51cd503fcef1ab87a3ef95b7c4806b0768eeea79fb3db992faa83417cc5a54668d26510bec2666f1cf3c1f70c565e49414ab1ae2b95e463f0b99ce8423004a0194af5d2dc75d78b3423675acecd95bb8846bff9c9c46603211e5ff8ec38db709589cc49370b9cb61df59586c3a4fb145ab9fb57729025ecf6d13ddc473cee8a084bfb2f10999c75917d517387f8c9a798dfad04c8d1e9a63b01c25582d8f3663b0a93ca980018b853bac1d0557137b71af3314fbc3dddd75f9f2f73b4e58ca4ecdcecc88ef158e72ead8f75b4f113f3798a00812e544210297cf715d6e5aeefb12dc497fd1528b088b45e5e4d91114ff5f3d749cad17b2c3c80eb6934265b8e9f19e0b68cfc3aaa00fc5a705739a914151fb25484551b210fc6d42ee7b379e9b4029546896c7ee1e929f8e9b6868db9b1df60daba78066875b9f88cf1ed84db44c24a0235b84f5175b624c432d0518263973d09809593c0eaa290cba328a49ba07685a554e4c0f3f632fb1b4dc70248089f8508bbd6fd710dd4b9ab8604b302fa6095833d5bf89ddc35cc2010f967dae09c256e61fd61e6938c7d40ebb6827caefd236ff68d6e9ec4a70a595e02e5b9737327a82e904e920fdba18698e0d2f0302a02d16d16ac25c930f1ba20771f8b12db285ff6a575320064cbb2f3076be21e7961cf321d98c9f8397a0531240fe445c4adf4eed68ba42d63c37b73bb87b33a3cef237bf811960c163ccb4c6f0862e6d3cfb415a37214118dc7bfbe2a9b4fcff7b3bcc54a2b2bb2543f02da6d765d91691505347657a34bf0ec3ad95ad7a44023379521f1aae5f2dd4165824c1eace0ee5bb620c73e094cef53b58fc3e246af489b29f8ab5e1dffe3fe0d03b9d91b1a9f1e2569308de09e798477e0e30d6b1a6db033db22460a74cfcbb5f1d44df45dbc0eb12911cfe957792e0e5015a97125e67ef1e439889609fae73c1e71621ab35ef6fd246c908fbd249ff68229737b433fbc5eb3bb465c87a562652b84053dba3b71856183039307070d48e71f0117d71dfa38e9832b06bf51e853bbccbef4b1bb8e3a911bb3c3cbba8efcde349a3afee99f35f4f78eef5eef3418fcbb62a2b66b7c9b6149df71253b99f1a0c903f54fc39c4ea57e9a90b1a0f37cb0c21e04c9d078d201075a5498b96a05f8795d278b65f1122a6d26d057aa5f39dbea9acda8176cf2769d1dd776de46858bedcabdb6d1a4d8a25b714ef5975faaff28e80756519d1f8f03cc5dd4d412e5c08d938d2dbfe5a791e812770a97534b0e6eacbf3a8b387aabd18acbc46d5cbda386bf92c6a7be44796863359f7c3d60dea1a80d1852f00f9777fa7348aab68a64b30d129149045be1f55086c2a84fedbd84617c1ac8387835a13c44213150e879ee970f9e4fbebed15a20dfd8c3271e325ee9f1b40c7c5c365b79be932c92c41a4e395df1d51b84b80faa887ad613ecffb3fe0dbe1681bdd643899ecaf065dd09dfaba2ccb94cd9b20d7fa8a226e5ba78b05426c0681392e42aa09b058d63f6841ca43c8e3b9fbaefa9c1428e02beab39f86da2ec296adff8b60144341b15c2e563adc50a974ad8fa983319fdb39982e49450a1818685ca8c147f92cccd571dc58a78b7ff0a0e5259aa3f7eb213d6ed4336eb34e632c51a1de98b6e67f6d22c95d612ece272105a6c56c77d9905d2def9c223a071126ddf1ba771a014e331cd34c0f85745a38ce8aae595fa5746b7ca444dde27a1bf7e6d9c7fd5ff00572030c0caef8be9cafc039a8babb113ecf752ccc7e2f4bbad00e7c0a143784906d18733dbc01fe832fe5095cef173a97a68b1457c68fcbcf8d24fe1589f67bd0adc9616733f314d7a7545791c9011442d6591610f0d65de4e3eae6cb5a076afbf6fdcc989d83b34caa10d261f215ffcedd12fb3431165e80c6630c6a37d9d0d1d0f9cdfc4335c8c7b6f6fc7779550337834128e580654307722ac22da09585587b54a5bf89990752dc53b3926b52143b04a17efe39f328877ec1f69b3fed8381c19df66a05e769ae754ef8744b9d308c730ae1730a3caf44f7496f77a2e4e5bdf9b6eccc47fea8225fb103a8ce67747749e20e61cd84ea8e2c30bfc67436ace6a2c7857e7dafbe787670045aee6e08653922e9f7d8a2a072245a7e51547601e60aa9ad98c5aa9ac79e17a5023e6d2f48667a038ebe8e862d83295d880323a2e6004dd64529efa35b144b43541df620ffce89a2a87ff5a0985e2bae6b560c1429505df70081eaba59cfd1ff88d958949d6dd922bb37b9c37b126d7589fcdc48c8fb1fb7deca1134b03812e30713be87310fa0f50cdd1e1731e3945a35116505099554de229fac30d7d40e4b99282bb8f4b422e0aa02f6a0898c0b965e9b1cabea7b6de3494101d6e1822cbb93af68cdae6b753c7d4433aaff5b74d958888fdfe2e8a2601b505ae523f286f2f2a942c01f5628ff32d66016117f08734aa1fa334ae9263ab6ed4d748b7452cb63be5f57ea5577faf431cc13ebca184e9c11d5ee768803804b25a6cac278ca1febc92e075e14fa46d0d3cdbcc0a48fd21c1d40bc626439c7121333e8bffc0dd7b6e8a9980d63a491b327a40b9a42ed1241b30dfb9302db9551a03e924f5897d36926674be49e7d29752fcca48b674cdc14bf5ee801b6e117dfbc363cf3611bca64a13774ee540f767d6d96e0c1d537276dfd8e8f34fb71082900f1f5bf853a25233726a8db62ab64cef9fc9114c2badaa6a09227aef181bb7e2db6434a995e6c89749aeb89fd76a2155fa0829d458f97f26c803a9ea739727fb20cfb60f558ec53ae8bc6"})
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001480)={{0x7f, 0x45, 0x4c, 0x46, 0xb4, 0x0, 0xa, 0x9, 0x7f, 0xd798cc7d6ed4fd84, 0x6, 0x5, 0x209, 0x40, 0xb7, 0x400, 0x1000, 0x38, 0x1, 0xed0, 0x8, 0x2}, [{0x1, 0x6, 0x9, 0x3, 0x4, 0x7f, 0xfffffffffffffeec, 0x6}]}, 0x78)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

9m8.933829966s ago: executing program 2 (id=754):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000280)}}], 0x1, 0x12040, 0x0)
ioctl$sock_netdev_private(r0, 0x8946, &(0x7f0000000a00)="4749c2368bb8dd2c7f17323cf53a")

9m8.675563785s ago: executing program 2 (id=762):
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8003, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xff7fff01, 0x6, 0x3, 0x7, 0x7, 0x4, 0x0, 0x7, 0x3c5e, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0xffffebf2, 0x7, 0x3, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xb, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8e, 0x2, 0x106, 0x0, 0x5, 0x2, 0x8, 0x3ff, 0x9, 0x0, 0x5, 0x2006, 0x8, 0x4000074, 0x0, 0xe], [0x10000007, 0x9, 0x8000012f, 0x100, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6, 0x9, 0x384, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4007, 0x7fff, 0x6, 0x400, 0x401, 0x4, 0x1, 0xff, 0x5, 0x7, 0x5f31, 0xd, 0x4e0, 0x80000002, 0x4, 0xb, 0x4, 0x5662, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x80, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x80b, 0x4, 0x5, 0x800, 0x0, 0x4d4, 0x5, 0x8, 0x86, 0x3, 0xcc, 0x3e7, 0xb, 0xbc, 0x2, 0x6, 0x3, 0x2000000b, 0x4, 0x106d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0x10000ac8, 0xbf, 0x2, 0xffffffff, 0x3, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x7, 0x120000, 0x3, 0x6, 0x712, 0xc, 0x25], [0x9, 0xbb35, 0x7b304120, 0x3ff, 0x5, 0x938, 0x6, 0x6, 0x0, 0x8, 0x7f, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x3f51, 0x4, 0x1, 0xffff, 0xa620, 0x1, 0x5, 0x2000001, 0x2000002, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x9, 0x3, 0x7e, 0x100, 0xa, 0x7, 0xaf, 0x8, 0xa, 0x226, 0x5, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x3, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x1000d5, 0x200, 0x9, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

9m8.555248261s ago: executing program 33 (id=762):
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8003, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xff7fff01, 0x6, 0x3, 0x7, 0x7, 0x4, 0x0, 0x7, 0x3c5e, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0xffffebf2, 0x7, 0x3, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xb, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8e, 0x2, 0x106, 0x0, 0x5, 0x2, 0x8, 0x3ff, 0x9, 0x0, 0x5, 0x2006, 0x8, 0x4000074, 0x0, 0xe], [0x10000007, 0x9, 0x8000012f, 0x100, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6, 0x9, 0x384, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4007, 0x7fff, 0x6, 0x400, 0x401, 0x4, 0x1, 0xff, 0x5, 0x7, 0x5f31, 0xd, 0x4e0, 0x80000002, 0x4, 0xb, 0x4, 0x5662, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x80, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x80b, 0x4, 0x5, 0x800, 0x0, 0x4d4, 0x5, 0x8, 0x86, 0x3, 0xcc, 0x3e7, 0xb, 0xbc, 0x2, 0x6, 0x3, 0x2000000b, 0x4, 0x106d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0x10000ac8, 0xbf, 0x2, 0xffffffff, 0x3, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x7, 0x120000, 0x3, 0x6, 0x712, 0xc, 0x25], [0x9, 0xbb35, 0x7b304120, 0x3ff, 0x5, 0x938, 0x6, 0x6, 0x0, 0x8, 0x7f, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x3f51, 0x4, 0x1, 0xffff, 0xa620, 0x1, 0x5, 0x2000001, 0x2000002, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x9, 0x3, 0x7e, 0x100, 0xa, 0x7, 0xaf, 0x8, 0xa, 0x226, 0x5, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x3, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x1000d5, 0x200, 0x9, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

9m7.518588949s ago: executing program 3 (id=770):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xbd, 0xf7, 0x13, 0x8, 0x2770, 0x930c, 0x8d6a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2a, 0xc5, 0x98}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="001306000000ec19d02303f6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

9m5.807042934s ago: executing program 3 (id=781):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xfffffffffffffffc}, {0x0, 0x0, 0x0, 0xf0}}, [@tmpl={0x104, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@rand_addr=0x64010100, 0x350a, 0x0, 0x0, 0x0, 0x800, 0x0, 0x2}, {{@in6=@loopback, 0x4d5, 0x3c}, 0x2, @in6=@loopback, 0x0, 0x4, 0x0, 0x4, 0x0, 0x81}, {{@in=@local, 0x0, 0x33}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @empty}}]}]}, 0x1bc}}, 0x0)

9m5.618423432s ago: executing program 3 (id=783):
syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x210042, &(0x7f0000006700)=ANY=[@ANYBLOB='discard=0x00000000000000f4,discard=0x000000000000aff9,errors=continue,iocharset=cp861,iocharset=iso8859-6,grpquota,quota,errors=remount-ro,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c00b57537e827dd9535050acde5ae9fccb5338edeaa9c5342f38507ada000"/41, @ANYBLOB="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"], 0x24, 0x62d9, &(0x7f0000000240)="$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")

9m5.267433566s ago: executing program 3 (id=788):
mkdir(&(0x7f0000000000)='./file1\x00', 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000100)='devpts\x00', 0x0, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, 0x0)

9m5.176164258s ago: executing program 3 (id=791):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x5c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x0)

9m4.557836301s ago: executing program 3 (id=798):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x11, @empty, 0x15, 0x0, 'wlc\x00', 0x3c, 0xa, 0x80}, 0x2c)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000180)={0x2, 0x14, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10)

9m4.475768205s ago: executing program 34 (id=798):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x11, @empty, 0x15, 0x0, 'wlc\x00', 0x3c, 0xa, 0x80}, 0x2c)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000180)={0x2, 0x14, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10)

5m13.819562307s ago: executing program 5 (id=3655):
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x80080)
ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0x40044102, 0x0)

5m13.770054406s ago: executing program 5 (id=3656):
syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x8})
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f00000001c0)={0x0, 0x0})

5m13.769545628s ago: executing program 5 (id=3657):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="4f6b3780907c340a944dc93f004f", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)

5m13.690342846s ago: executing program 5 (id=3658):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
move_mount(0xffffffffffffff9c, &(0x7f0000008080)='./file0\x00', r0, 0x0, 0x160)

5m13.690020785s ago: executing program 5 (id=3659):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00')
preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000380)=""/218, 0xda}, {&(0x7f0000000480)=""/234, 0xea}, {&(0x7f00000002c0)=""/130, 0x82}], 0x3, 0x7, 0x40)

5m13.399334889s ago: executing program 5 (id=3660):
r0 = getpid()
kcmp(r0, r0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff)

5m13.195381723s ago: executing program 35 (id=3660):
r0 = getpid()
kcmp(r0, r0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff)

1m48.367807217s ago: executing program 4 (id=6185):
r0 = syz_open_dev$evdev(&(0x7f000001fa80), 0x20000000, 0x0)
ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000000)=""/122)

1m48.259550713s ago: executing program 4 (id=6186):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa8}, @call={0x85, 0x0, 0x0, 0x50}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c9f4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75055df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83766b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b556381768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42ddd5f393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8dc0d472672286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8455029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a82a6ef09d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b420e74c6bcdf1ed0b306141a83bf1268e954ad069257fbfaa1a7ea582badc1a7f2a5b0965f3535872d85c0bc3a233a3ea85df6a8ed76f0f803d54b7bef77d8ea71621f8a78dd17c3b58c5c7476ed6191acbb949e77f7cac81c543f7751e5e1000"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@fallback=r0, r0, 0x2f}, 0x20)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@cgroup=r0, r2, 0x2f, 0x10, 0x4, @void, @value=r0}, 0x20)

1m48.139314737s ago: executing program 4 (id=6189):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001800010600000000000000001c140000fe000001000000001400120011"], 0x30}, 0x1, 0x0, 0x0, 0x4009}, 0x0)

1m48.01347266s ago: executing program 4 (id=6192):
inotify_init1(0x800)
syz_mount_image$fuse(0x0, 0x0, 0x1000009, 0x0, 0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f00000008c0), 0x3, 0x5eb, &(0x7f0000000c00)="$eJzs3ctvFEcaAPCvxw9sjNYDWu0ue1gsrVYg7WJjAysU5QDXCFnkoVxyiYMNIRiwsKPEJBJGIpdIUS5RFCmnHEL+iwSFK6fklEMuOUVIKIk4RspEPdNtPHaPX9jTiP79pGG6q6Zd1djfVHVNVU8AlTWS/lOLOBgRc0nEcLK0nNcbWeZI63WPfnv/fPpIotF4+Zckkiwtf32SPQ9lBw9ExHffJnGgZ22584s3Lk/Nzs5cz/bHFq7Mjc0v3jh66crUxZmLM1cn/j9x6uSJk6fGj23rvG4WpJ29/dY7wx9Ovvbl578n41/9OJnE6Xghe+HK89gpIzHS/D9J1mYNndrpwkrSk/2dNBqNRp6W9JZbJzYv//31RcTfYzh64vEvbzg+eLHUygG7qpG03ruBKkrEP1RU3g/Ir+1XXwfXSumVAN3w8ExrAGBt/Pe2xgZjoDk2sPdREiuHdZKI2N7IXLt9EXH/3uTtC/cmb8cujcMBxZZuRcQ/iuI/acZ/PQai3oz/Wlv8p/2Cc9lzmv7SNstfPVQs/qF7WvE/sG78R4f4fz19vtmK4Te2WX798eabg23xP7jdUwIAAAAAAIDKunsmIv5X9Pl/bXn+TxTM/xmKiNM7UP7Iqv21n//XHuxAMUCBh2cini+c/1vLZ//We1YsYa1HX3Lh0uzMsYj4S0Qcib496f74OmUc/ejAZ53yRrL5f/kjLf9+Nhcwq8eD3j3tx0xPLUw9wSkDmYe3Iv5ZOP83WW7/k4L2P31nmNtkGQf+c+dcp7yN4x/YLY0vIg4Xtv+P71qRrH9/jrFmf2As7xWs9a/3Pv66U/nbjX+3mIAnl7b/e9eP/3qy8n4981sv4/hib6NT3nb7//3JK827CvVnae9OLSxcH4/oT872pKlt6RNbrzM8i/J4yOMljf8j/15//K+o/z8YEUurfnbya/ua4tzf/hj6qVN99P+hPGn8T2+p/d/6xsSd+jedyt9c+3+i2dYfyVKM/0HLp3mY9renF4Rjb1FWt+sLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM+CWkTsi6Q2urxdq42ORgxFxF9jb2322vzCfy9ce/vqdJrX/P7/Wv5Nv8Ot/ST//v/6iv2JVfvHI2J/RHzSM9jcHz1/bXa67JMHAAAAAAAAAAAAAAAAAACAp8RQh/X/qZ97yq4dsOt6y64AUJqC+P++jHoA3af9h+oS/1Bd4h+qS/xDdYl/qC7xD9Ul/qG6xD8AAAAAADxT9h+6+0MSEUvPDTYfqf4sr6/UmgG7rVZ2BYDSuMUPVJepP1BdrvGBZIP8gY4HbXTkeubOP8HBAAAAAAAAAAAAAFA5hw9a/w9VZf0/VJf1/1Bd+fr/QyXXA+g+1/hAbLCSv3D9/4ZHAQAAAAAAAAAAAAA7aX7xxuWp2dmZ6zZefTqq0c2NRqNxM/0reFrqs/MbSTZDvSuF5lPhu3+m/Zs5wXyt3+Z+cnnvSQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQLs/AwAA//+JjCTl")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1000000, 0x0, 0x0, 0x0, 0x0)
lsetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000200)='\xa2-\x00', 0x3, 0x1)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]})
llistxattr(0x0, 0x0, 0x0)

1m47.883137815s ago: executing program 4 (id=6193):
syz_usb_connect$printer(0x6, 0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0)
getpid()
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="02c93012000e00050014040a000735635d32"], 0x17)

1m47.266500275s ago: executing program 4 (id=6196):
r0 = syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000003a40), 0x0, 0x559e, &(0x7f0000005680)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR")
ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f00000001c0)={0x1})
ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000040)={0x2, 0x9})

1m47.058842873s ago: executing program 36 (id=6196):
r0 = syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000003a40), 0x0, 0x559e, &(0x7f0000005680)="$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")
ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f00000001c0)={0x1})
ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000040)={0x2, 0x9})

1.244309905s ago: executing program 7 (id=7467):
syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000c80)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[], 0x1, 0xc4d, &(0x7f0000001b40)="$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")
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x202, &(0x7f0000000200)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x0, 0xa00}])

1.243642595s ago: executing program 6 (id=7469):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4})

1.101757539s ago: executing program 6 (id=7472):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xb8}}, 0x40880)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r1, 0xffffffffffffffff, 0x0)

989.138423ms ago: executing program 6 (id=7473):
r0 = socket$inet6(0xa, 0x805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}}]}, &(0x7f00000002c0)=0x10)
getsockopt$bt_hci(r0, 0x84, 0x0, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec)

892.118984ms ago: executing program 6 (id=7475):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x30, r2, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_WME={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x68040}, 0x4)

891.868857ms ago: executing program 1 (id=7476):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6}]}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00'}, 0x1b)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x6002, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000002000aac14140ce0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48)

821.186848ms ago: executing program 6 (id=7477):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8)
close(r1)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0)

820.806097ms ago: executing program 1 (id=7478):
r0 = socket(0x400000000010, 0x3, 0x0)
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x1, 0xb51b, 0x654, 0xfffff04b, 0x0, 0x8})
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x11, 0x0, 0x20040041, 0x10, 0x3ff, 0x0, 0x3, 0x8}})

742.234178ms ago: executing program 1 (id=7479):
syz_emit_ethernet(0x86, &(0x7f0000000040)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x50, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "5b29ab", 0x0, 0x11, 0x0, @private1, @empty, [@dstopts={0x4, 0x0, '\x00', [@ra={0x5, 0x33}]}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0)

741.889326ms ago: executing program 6 (id=7480):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r0}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0)
readv(r2, &(0x7f0000000040)=[{&(0x7f0000000100)=""/144, 0x90}], 0x1)
write$proc_mixer(r2, &(0x7f0000000100)=ANY=[], 0xb0)
r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x1a1100, 0x0)
dup3(r3, r2, 0x0)

707.245502ms ago: executing program 7 (id=7481):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x401c2103, &(0x7f00000001c0)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x300})

578.315816ms ago: executing program 1 (id=7482):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fdffffff0300000018000180110001006574683a6d61637674617030"], 0x2c}}, 0x0)

577.918851ms ago: executing program 7 (id=7483):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xac}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

410.852154ms ago: executing program 7 (id=7484):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001800110126bd700091a2583e1c"], 0x1c}, 0x1, 0x0, 0x0, 0x4805}, 0x4)

410.29526ms ago: executing program 1 (id=7485):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1f, 0x3, &(0x7f0000000380)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', 0xffffffffffffffff, 0x0, 0x5895}, 0x18)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000540)={0x8, 0x0, 0x0, 'queue1\x00', 0x72})
write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)

231.715217ms ago: executing program 7 (id=7486):
r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x88)
r2 = openat$cgroup(r1, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='cpu.max\x00', 0x2, 0x0)
sendfile(r3, r3, 0x0, 0x100010000a006)

90.32551ms ago: executing program 1 (id=7487):
syz_usb_connect$cdc_ecm(0x3, 0x5c, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024a00010100000009040000160202000005241b00050b"], 0x0)

0s ago: executing program 7 (id=7488):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0)

kernel console output (not intermixed with test programs):

 5-1: new high-speed USB device number 51 using dummy_hcd
[  433.627573][T15243] hid (null): report_id 57294 is invalid
[  433.640746][T15243] asus 0003:0B05:18C6.0019: collection stack underflow
[  433.643503][T15243] asus 0003:0B05:18C6.0019: item 0 1 0 12 parsing failed
[  433.646822][T15243] asus 0003:0B05:18C6.0019: Asus hid parse failed: -22
[  433.653464][T15243] asus 0003:0B05:18C6.0019: probe with driver asus failed with error -22
[  433.769606][ T5858] usb 5-1: config index 0 descriptor too short (expected 23569, got 27)
[  433.773290][ T5858] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  433.778566][ T5858] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  433.782244][ T5858] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  433.785646][ T5858] usb 5-1: Manufacturer: syz
[  433.792369][ T5858] usb 5-1: config 0 descriptor??
[  433.846864][  T791] usb 7-1: USB disconnect, device number 18
[  433.859852][ T5858] rc_core: IR keymap rc-hauppauge not found
[  433.861765][ T5858] Registered IR keymap rc-empty
[  433.869397][ T5858] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  433.874704][ T5858] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input18
[  434.201839][T17196] rc rc0: two consecutive events of type space
[  434.403307][ T8188] usb 5-1: USB disconnect, device number 51
[  434.976092][T17228] loop6: detected capacity change from 0 to 4096
[  435.407481][ T3570] wlan1: Trigger new scan to find an IBSS to join
[  436.294864][T17288] loop6: detected capacity change from 0 to 512
[  436.444463][T17290] loop6: detected capacity change from 0 to 16
[  436.546587][T17290] MTD: Attempt to mount non-MTD device "/dev/loop6"
[  436.595334][T17296] loop4: detected capacity change from 0 to 256
[  436.602872][T17298] netlink: 392 bytes leftover after parsing attributes in process `syz.1.4545'.
[  436.617074][T17296] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  436.626466][T17296] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  436.647596][T17296] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  436.744748][T17302] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4547'.
[  436.847521][T17308] loop6: detected capacity change from 0 to 512
[  437.063568][T17310] loop4: detected capacity change from 0 to 32768
[  437.075168][T17310] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.4551 (17310)
[  437.097220][T17310] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  437.100355][T17310] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  437.103221][T17310] BTRFS info (device loop4): using free-space-tree
[  437.167366][   T33] audit: type=1800 audit(1755039218.160:225): pid=17310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4551" name="file0" dev="loop4" ino=258 res=0 errno=0
[  437.199361][T17310] BTRFS info (device loop4): setting compat-ro feature flag for VERITY (0x4)
[  437.693275][T17343] loop6: detected capacity change from 0 to 32768
[  437.696723][T17343] bcachefs (/dev/loop6): error reading superblock: error opening /dev/loop6: EACCES
[  437.699867][T17343] bcachefs: bch2_fs_get_tree() error: EACCES
[  437.775753][ T7882] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  438.446225][ T1089] wlan1: Trigger new scan to find an IBSS to join
[  438.996451][T17370] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4567'.
[  438.999992][T17370] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4567'.
[  439.130551][T17367] ceph: No mds server is up or the cluster is laggy
[  439.135629][  T791] libceph: connect (1)[c::]:6789 error -101
[  439.138618][  T791] libceph: mon0 (1)[c::]:6789 connect error
[  439.219281][T17365] loop4: detected capacity change from 0 to 32768
[  439.223404][T17365] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.4568 (17365)
[  439.250216][T17365] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  439.256434][T17365] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  439.262199][T17365] BTRFS info (device loop4): using free-space-tree
[  439.291442][T17375] 9pnet_virtio: no channels available for device syz
[  439.381734][ T7882] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  439.586217][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  439.588477][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  439.635564][ T3570] wlan1: Creating new IBSS network, BSSID ba:08:38:1a:ba:90
[  440.505264][ T5916] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[  440.668722][ T5916] usb 7-1: New USB device found, idVendor=0547, idProduct=6801, bcdDevice=43.6f
[  440.676195][ T5916] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  440.683027][ T5916] usb 7-1: Product: syz
[  440.687560][ T5916] usb 7-1: Manufacturer: syz
[  440.691949][ T5916] usb 7-1: SerialNumber: syz
[  440.702785][ T5916] usb 7-1: config 0 descriptor??
[  440.718607][ T5916] gspca_main: touptek-2.14.0 probing 0547:6801
[  440.928813][ T5916] usb 7-1: USB disconnect, device number 19
[  440.964744][ T5858] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[  441.122580][ T5858] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  441.128556][ T5858] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  441.131912][ T5858] usb 5-1: Product: syz
[  441.136117][ T5858] usb 5-1: Manufacturer: syz
[  441.139286][ T5858] usb 5-1: SerialNumber: syz
[  441.150907][ T5858] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  441.209347][ T5858] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  441.653807][ T5916] usb 5-1: USB disconnect, device number 52
[  442.293706][ T5858] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[  442.299842][ T5858] ath9k_htc: Failed to initialize the device
[  442.310052][ T5916] usb 5-1: ath9k_htc: USB layer deinitialized
[  442.457235][T17467] IPv6: NLM_F_CREATE should be specified when creating new route
[  442.460409][T17467] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  442.463452][T17467] IPv6: NLM_F_CREATE should be set when creating new route
[  442.466444][T17467] IPv6: NLM_F_CREATE should be set when creating new route
[  442.469473][T17467] IPv6: NLM_F_CREATE should be set when creating new route
[  442.477057][T17467] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  442.642731][T17481] loop6: detected capacity change from 0 to 128
[  442.648397][T17481] EXT4-fs: Ignoring removed nobh option
[  442.763376][ T5916] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[  443.094997][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  443.098837][ T5916] usb 5-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00
[  443.102404][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  443.124904][ T5916] usb 5-1: config 0 descriptor??
[  443.301522][T17497] netlink: 'syz.6.4602': attribute type 1 has an invalid length.
[  443.541090][ T5916] waltop 0003:172F:0501.001A: item fetching failed at offset 5/7
[  443.549969][ T5916] waltop 0003:172F:0501.001A: probe with driver waltop failed with error -22
[  443.633387][   T10] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  443.748518][ T5916] usb 5-1: USB disconnect, device number 53
[  443.769782][T17520] 9pnet_fd: Insufficient options for proto=fd
[  443.799821][   T10] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  443.808492][   T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  443.818220][   T10] usb 7-1: config 0 descriptor??
[  443.825345][   T10] cp210x 7-1:0.0: cp210x converter detected
[  443.829561][T17522] netlink: 'syz.1.4614': attribute type 3 has an invalid length.
[  443.833657][T17522] netlink: 766 bytes leftover after parsing attributes in process `syz.1.4614'.
[  443.879966][T17524] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  444.229175][   T10] cp210x 7-1:0.0: failed to get vendor val 0x000e size 3: -32
[  444.236173][   T10] usb 7-1: cp210x converter now attached to ttyUSB0
[  444.436830][ T5916] usb 7-1: USB disconnect, device number 20
[  444.442987][ T5916] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  444.462840][ T5916] cp210x 7-1:0.0: device disconnected
[  444.611456][T17547] netlink: 'syz.4.4624': attribute type 2 has an invalid length.
[  444.616904][T17547] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4624'.
[  444.731681][T17551] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  444.912410][ T5916] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[  445.074573][ T5916] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  445.078926][ T5916] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  445.097975][ T5916] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  445.112459][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  445.124285][T17549] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  445.130202][ T5916] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  445.201343][T17573] loop6: detected capacity change from 0 to 512
[  445.235503][T17573] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  445.252379][T17573] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=6842e02c, mo2=0102]
[  445.255256][T17573] System zones: 1-12
[  445.256664][T17573] EXT4-fs (loop6): write access unavailable, skipping orphan cleanup
[  445.259973][T17573] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  445.286163][T15189] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  445.460949][ T5916] usb 5-1: USB disconnect, device number 54
[  445.617161][T17593] loop6: detected capacity change from 0 to 8192
[  446.061929][   T10] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[  446.223581][   T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  446.231610][   T10] usb 7-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[  446.235475][   T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  446.242822][   T10] usb 7-1: config 0 descriptor??
[  446.508268][T17629] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4663'.
[  446.565582][T17631] loop4: detected capacity change from 0 to 2048
[  446.587621][T17632] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  446.598111][T17631] NILFS error (device loop4): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0
[  446.614949][T17631] Remounting filesystem read-only
[  446.687017][   T10] lenovo 0003:17EF:6047.001B: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.6-1/input0
[  447.844972][   T10] usb 7-1: USB disconnect, device number 21
[  447.968583][T17658] loop4: detected capacity change from 0 to 32768
[  447.976147][T17658] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.4676 (17658)
[  447.991080][T17658] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  447.997521][T17658] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  448.003959][T17658] BTRFS info (device loop4): using free-space-tree
[  448.103687][ T7882] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  448.432208][    C0] vkms_vblank_simulate: vblank timer overrun
[  448.707608][T17688] kAFS: Can only specify source 'none' with -o dyn
[  448.718952][T17688] fuse: Unknown parameter 'V~Hȗ'
[  449.418670][T17706] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4690'.
[  449.502608][T17711] netlink: 'syz.6.4691': attribute type 1 has an invalid length.
[  449.505779][T17711] netlink: 244 bytes leftover after parsing attributes in process `syz.6.4691'.
[  449.548393][ T5236] Bluetooth: hci2: unexpected event for opcode 0x203d
[  450.121163][T17746] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4708'.
[  450.861616][T17766] loop6: detected capacity change from 0 to 4096
[  450.981090][T17771] loop6: detected capacity change from 0 to 512
[  451.279038][ T5916] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[  451.738848][ T5916] usb 5-1: Using ep0 maxpacket: 32
[  451.743173][ T5916] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  451.747284][ T5916] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  451.753641][ T5916] usb 5-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5
[  451.757370][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  451.760962][ T5916] usb 5-1: Product: syz
[  451.762807][ T5916] usb 5-1: Manufacturer: syz
[  451.765300][ T5916] usb 5-1: SerialNumber: syz
[  451.770975][ T5916] usb 5-1: config 0 descriptor??
[  452.075341][T17791] netlink: 'syz.6.4728': attribute type 10 has an invalid length.
[  452.091091][T17791] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  452.117733][T17791] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  452.596214][  T791] usb 5-1: USB disconnect, device number 55
[  452.752331][T17810] tracefs: Unknown parameter 'huge'
[  453.243812][T17822] syzkaller1: entered promiscuous mode
[  453.246669][T17822] syzkaller1: entered allmulticast mode
[  453.484906][T17833] openvswitch: netlink: IP tunnel dst address not specified
[  453.743686][T17851] kernel read not supported for file /   (pid: 17851 comm: syz.1.4754)
[  453.747273][   T33] audit: type=1800 audit(1755039234.738:226): pid=17851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4754" name=200120 dev="mqueue" ino=42226 res=0 errno=0
[  454.719423][T17877] syzkaller1: entered promiscuous mode
[  454.721792][T17877] syzkaller1: entered allmulticast mode
[  455.093961][T17902] loop6: detected capacity change from 0 to 512
[  455.194878][T17907] loop6: detected capacity change from 0 to 256
[  455.549914][T17926] loop6: detected capacity change from 0 to 2048
[  455.607189][  T791] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[  455.767470][  T791] usb 5-1: Using ep0 maxpacket: 8
[  455.771205][  T791] usb 5-1: config 0 has an invalid interface number: 31 but max is 0
[  455.775273][  T791] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  455.779169][  T791] usb 5-1: config 0 has no interface number 0
[  455.783234][  T791] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  455.786226][  T791] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  455.789604][  T791] usb 5-1: Product: syz
[  455.792006][  T791] usb 5-1: Manufacturer: syz
[  455.793475][  T791] usb 5-1: SerialNumber: syz
[  455.797510][  T791] usb 5-1: config 0 descriptor??
[  455.801827][  T791] uvcvideo 5-1:0.31: probe with driver uvcvideo failed with error -22
[  455.857515][T17937] loop6: detected capacity change from 0 to 128
[  456.005846][  T791] usb 5-1: USB disconnect, device number 56
[  456.492236][T17953] loop6: detected capacity change from 0 to 32768
[  456.828296][T17977] loop6: detected capacity change from 0 to 512
[  457.566366][ T5236] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  457.569661][ T5236] Bluetooth: hci0: command 0x0406 tx timeout
[  458.027852][   T10] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[  458.210684][   T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  458.214613][   T10] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  458.225558][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  458.231327][   T10] usb 5-1: config 0 descriptor??
[  458.236102][   T10] pwc: Askey VC010 type 2 USB webcam detected.
[  458.368775][T18036] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4835'.
[  458.372617][T18036] netlink: 'syz.1.4835': attribute type 3 has an invalid length.
[  458.427699][  T791] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[  458.585394][  T791] usb 7-1: Using ep0 maxpacket: 32
[  458.597934][  T791] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  458.602316][  T791] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  458.606455][  T791] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  458.609756][  T791] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  458.616517][  T791] usb 7-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  458.625312][  T791] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  458.628031][  T791] usb 7-1: Product: syz
[  458.629547][  T791] usb 7-1: Manufacturer: syz
[  458.631236][  T791] usb 7-1: SerialNumber: syz
[  458.635399][  T791] usb 7-1: config 0 descriptor??
[  458.638293][   T10] pwc: recv_control_msg error -32 req 02 val 2b00
[  458.644793][   T10] pwc: recv_control_msg error -32 req 02 val 2700
[  458.648264][   T10] pwc: recv_control_msg error -32 req 02 val 2c00
[  458.853881][   T10] pwc: recv_control_msg error -32 req 04 val 1300
[  458.856639][   T10] pwc: recv_control_msg error -32 req 04 val 1400
[  458.859307][   T10] pwc: recv_control_msg error -32 req 02 val 2000
[  458.864565][  T791] usb 7-1: USB disconnect, device number 22
[  458.866671][   T10] pwc: recv_control_msg error -71 req 02 val 2100
[  458.870520][   T10] pwc: recv_control_msg error -71 req 04 val 1500
[  458.872822][   T10] pwc: recv_control_msg error -71 req 02 val 2500
[  458.877109][   T10] pwc: recv_control_msg error -71 req 02 val 2400
[  458.883479][   T10] pwc: recv_control_msg error -71 req 02 val 2600
[  458.889149][   T10] pwc: recv_control_msg error -71 req 02 val 2900
[  458.891565][   T10] pwc: recv_control_msg error -71 req 02 val 2800
[  458.894354][   T10] pwc: recv_control_msg error -71 req 04 val 1100
[  458.897071][   T10] pwc: recv_control_msg error -71 req 04 val 1200
[  458.900213][   T10] pwc: Registered as video103.
[  458.904429][   T10] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input21
[  458.912920][   T10] usb 5-1: USB disconnect, device number 57
[  459.266093][T18065] netlink: 'syz.1.4849': attribute type 15 has an invalid length.
[  459.268496][T18065] netlink: 666 bytes leftover after parsing attributes in process `syz.1.4849'.
[  459.467787][T18073] syz.4.4853 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  459.659239][T18085] loop6: detected capacity change from 0 to 2048
[  459.799333][T18088] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.4860'.
[  459.920702][T18089] overlayfs: failed to clone upperpath
[  459.923784][   T24] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[  460.025676][   T33] audit: type=1326 audit(1755039241.021:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18082 comm="syz.1.4858" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f21acf8ebe9 code=0x0
[  460.156058][   T24] usb 5-1: New USB device found, idVendor=090a, idProduct=1200, bcdDevice=24.87
[  460.171071][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  460.217226][   T33] audit: type=1400 audit(1755039241.221:228): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=18091 comm="syz.6.4861"
[  460.239207][   T24] usb 5-1: config 0 descriptor??
[  460.251147][   T24] usb-storage 5-1:0.0: USB Mass Storage device detected
[  460.267798][   T24] usb-storage 5-1:0.0: This device (090a,1200,2487 S 01 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel 6.16.0-syzkaller-11895-gcca7a0aae895-dirty)
[  460.267798][   T24]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  460.471369][   T24] usb 5-1: USB disconnect, device number 58
[  460.589226][T18108] loop6: detected capacity change from 0 to 128
[  461.985221][T18143] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4880'.
[  461.989256][T18142] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4880'.
[  461.996386][T18143] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4880'.
[  462.407577][T18147] loop6: detected capacity change from 0 to 32768
[  462.473463][T15243] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[  462.560044][T18164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4889'.
[  462.623932][T15243] usb 5-1: Using ep0 maxpacket: 32
[  462.627898][T15243] usb 5-1: config 0 has an invalid interface number: 58 but max is 27
[  462.631718][T15243] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  462.637598][T15243] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 28
[  462.642119][T15243] usb 5-1: config 0 has no interface number 0
[  462.652023][T15243] usb 5-1: config 0 interface 58 altsetting 0 endpoint 0x6 has invalid maxpacket 56166, setting to 64
[  462.663329][T15243] usb 5-1: config 0 interface 58 altsetting 0 endpoint 0x7 has invalid maxpacket 64800, setting to 64
[  462.673375][T15243] usb 5-1: config 0 interface 58 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  462.677257][T15243] usb 5-1: config 0 interface 58 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 7
[  462.680796][T15243] usb 5-1: config 0 interface 58 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0
[  462.690160][T15243] usb 5-1: config 0 interface 58 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6
[  462.700054][T15243] usb 5-1: New USB device found, idVendor=05ac, idProduct=021c, bcdDevice=5c.24
[  462.703820][T15243] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  462.706723][T15243] usb 5-1: Product: syz
[  462.708321][T15243] usb 5-1: Manufacturer: syz
[  462.710232][T15243] usb 5-1: SerialNumber: syz
[  462.738371][T15243] usb 5-1: config 0 descriptor??
[  462.773972][T18174] syzkaller0: entered promiscuous mode
[  462.775670][T18174] syzkaller0: entered allmulticast mode
[  462.953812][T15243] appletouch 5-1:0.58: Could not find int-in endpoint
[  462.958290][T15243] appletouch 5-1:0.58: probe with driver appletouch failed with error -5
[  462.961388][T15243] usbhid 5-1:0.58: couldn't find an input interrupt endpoint
[  462.972250][T15243] usb 5-1: USB disconnect, device number 59
[  464.538987][    C0] vkms_vblank_simulate: vblank timer overrun
[  466.687778][T18205] loop4: detected capacity change from 0 to 256
[  466.690730][T18205] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  466.703047][T18205] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  466.709015][T18205] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d)
[  466.832561][T18215] sch_tbf: peakrate 8 is lower than or equals to rate 12 !
[  466.905294][T18219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4917'.
[  466.913616][T18219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4917'.
[  467.095491][T18232] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  468.021449][  T791] usb 5-1: new full-speed USB device number 60 using dummy_hcd
[  468.385689][  T791] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[  468.395861][  T791] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  468.399435][  T791] usb 5-1: Product: syz
[  468.402311][  T791] usb 5-1: Manufacturer: syz
[  468.404357][  T791] usb 5-1: SerialNumber: syz
[  468.435035][  T791] usb 5-1: config 0 descriptor??
[  468.473791][  T791] gspca_main: sq930x-2.14.0 probing 2770:930c
[  469.180174][  T791] gspca_sq930x: reg_w 0305 fd00 failed -71
[  469.182581][  T791] sq930x 5-1:0.0: probe with driver sq930x failed with error -71
[  469.197730][  T791] usb 5-1: USB disconnect, device number 60
[  469.981717][  T791] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[  470.153354][  T791] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  470.157287][  T791] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  470.169426][  T791] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  470.176575][T18288] loop4: detected capacity change from 0 to 40427
[  470.184019][  T791] usb 7-1: config 0 descriptor??
[  470.187280][T18288] F2FS-fs: heap/no_heap options were deprecated
[  470.197917][T18288] F2FS-fs (loop4): Image doesn't support compression
[  470.203804][T18288] F2FS-fs (loop4): invalid crc value
[  470.313679][T18301] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  470.316316][T18288] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  470.319751][T18288] F2FS-fs (loop4): Start checkpoint disabled!
[  470.325965][T18288] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  470.366984][   T36] kworker/u10:1: attempt to access beyond end of device
[  470.366984][   T36] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  470.375978][   T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u10:1 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  470.375997][   T36] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  470.376003][   T36] Workqueue: writeback wb_workfn (flush-7:4)
[  470.376022][   T36] Call Trace:
[  470.376026][   T36]  <TASK>
[  470.376032][   T36]  dump_stack_lvl+0x189/0x250
[  470.376046][   T36]  ? __pfx_dump_stack_lvl+0x10/0x10
[  470.376062][   T36]  ? __pfx_queue_work_on+0x10/0x10
[  470.376071][   T36]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  470.376081][   T36]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  470.376095][   T36]  f2fs_handle_critical_error+0x37c/0x540
[  470.376110][   T36]  f2fs_write_end_io+0x886/0xb60
[  470.376131][   T36]  __submit_merged_bio+0x27a/0x6a0
[  470.376143][   T36]  __submit_merged_write_cond+0x255/0x530
[  470.376175][   T36]  f2fs_write_data_pages+0x261d/0x3000
[  470.376201][   T36]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  470.376218][   T36]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  470.376245][   T36]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  470.376255][   T36]  ? look_up_lock_class+0x74/0x170
[  470.376271][   T36]  ? trace_f2fs_writepages+0x7f/0x200
[  470.376283][   T36]  ? f2fs_write_node_pages+0x478/0x6e0
[  470.376295][   T36]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  470.376311][   T36]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  470.376321][   T36]  do_writepages+0x32e/0x550
[  470.376335][   T36]  ? reacquire_held_locks+0x127/0x1d0
[  470.376344][   T36]  ? writeback_sb_inodes+0x384/0x1010
[  470.376359][   T36]  __writeback_single_inode+0x145/0xff0
[  470.376369][   T36]  ? do_raw_spin_unlock+0x4d/0x240
[  470.376380][   T36]  writeback_sb_inodes+0x6c7/0x1010
[  470.376402][   T36]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  470.376431][   T36]  ? rcu_is_watching+0x15/0xb0
[  470.376444][   T36]  wb_writeback+0x43b/0xaf0
[  470.376457][   T36]  ? queue_io+0x391/0x590
[  470.376468][   T36]  ? __pfx_wb_writeback+0x10/0x10
[  470.376482][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  470.376492][   T36]  wb_workfn+0x409/0xef0
[  470.376507][   T36]  ? __pfx_wb_workfn+0x10/0x10
[  470.376517][   T36]  ? __lock_acquire+0xab9/0xd20
[  470.376534][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[  470.376545][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  470.376553][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[  470.376560][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[  470.376568][   T36]  process_scheduled_works+0xae1/0x17b0
[  470.376589][   T36]  ? __pfx_process_scheduled_works+0x10/0x10
[  470.376610][   T36]  worker_thread+0x8a0/0xda0
[  470.376631][   T36]  kthread+0x711/0x8a0
[  470.376643][   T36]  ? __pfx_worker_thread+0x10/0x10
[  470.376651][   T36]  ? __pfx_kthread+0x10/0x10
[  470.376661][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  470.376668][   T36]  ? lockdep_hardirqs_on+0x9c/0x150
[  470.376676][   T36]  ? __pfx_kthread+0x10/0x10
[  470.376686][   T36]  ret_from_fork+0x3fc/0x770
[  470.376696][   T36]  ? __pfx_ret_from_fork+0x10/0x10
[  470.376707][   T36]  ? __switch_to_asm+0x39/0x70
[  470.376716][   T36]  ? __switch_to_asm+0x33/0x70
[  470.376725][   T36]  ? __pfx_kthread+0x10/0x10
[  470.376734][   T36]  ret_from_fork_asm+0x1a/0x30
[  470.376751][   T36]  </TASK>
[  470.376774][   T36] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  470.383103][T18304] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4952'.
[  470.512387][  T791] usbhid 7-1:0.0: can't add hid device: -71
[  470.514907][  T791] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  470.530337][  T791] usb 7-1: USB disconnect, device number 23
[  470.843199][T18319] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  471.153754][T18323] loop4: detected capacity change from 0 to 32768
[  471.157846][  T791] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[  471.293161][T18323] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow,no_data_io
[  471.293178][T18323]   allowing incompatible features above 0.0: (unknown version)
[  471.293184][T18323]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  471.306884][T18323] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0
[  471.309812][T18323] bcachefs (loop4): recovering from clean shutdown, journal seq 10
[  471.315733][T18323] bcachefs (loop4): Version upgrade required:
[  471.315733][T18323] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  471.315733][T18323] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[  471.315733][T18323]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  471.340652][    C0] vkms_vblank_simulate: vblank timer overrun
[  471.343041][T18323] bcachefs (loop4): dropping and reconstructing all alloc info
[  471.363893][T18323] bcachefs (loop4): accounting_read... done
[  471.368658][T18323] bcachefs (loop4): alloc_read... done
[  471.370932][T18323] bcachefs (loop4): snapshots_read... done
[  471.373360][T18323] bcachefs (loop4): done starting filesystem
[  471.378840][  T791] usb 7-1: Using ep0 maxpacket: 32
[  471.382064][  T791] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  471.385496][  T791] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  471.388479][  T791] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  471.401774][  T791] usb 7-1: config 0 descriptor??
[  471.405374][  T791] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  471.415399][  T791] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  471.632809][ T7882] bcachefs (loop4): shutting down
[  471.674952][ T7882] bcachefs (loop4): shutdown complete
[  471.921608][ T5916] usb 7-1: USB disconnect, device number 24
[  471.931778][ T5916] ldusb 7-1:0.0: LD USB Device #0 now disconnected
[  472.621441][T18360] loop6: detected capacity change from 0 to 128
[  473.299232][T18372] loop4: detected capacity change from 0 to 32768
[  473.853150][T18374] loop6: detected capacity change from 0 to 131072
[  473.878594][T18384] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117
[  473.886240][T18384] PKCS7: Only support pkcs7_signedData type
[  474.185676][T18372] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  474.185703][T18372]   allowing incompatible features above 0.0: (unknown version)
[  474.185713][T18372]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  474.201861][T18372] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0
[  474.205199][T18372] bcachefs (loop4): initializing new filesystem
[  474.223948][T18372] bcachefs (loop4): going read-write
[  474.262138][T18372] bcachefs (loop4): marking superblocks
[  474.271128][T18372] bcachefs (loop4): initializing freespace
[  474.276610][T18372] bcachefs (loop4): done initializing freespace
[  474.281808][T18372] bcachefs (loop4): reading snapshots table
[  474.284236][T18372] bcachefs (loop4): reading snapshots done
[  474.323099][T18372] bcachefs (loop4): done starting filesystem
[  474.570752][T18404] Can't find a SQUASHFS superblock on nullb0
[  475.552202][T18416] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-61)
[  475.739797][ T7882] bcachefs (loop4): shutting down
[  475.743527][ T7882] bcachefs (loop4): going read-only
[  475.748449][ T7882] bcachefs (loop4): finished waiting for writes to stop
[  475.752536][ T7882] bcachefs (loop4): flushing journal and stopping allocators, journal seq 4
[  475.794193][ T7882] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 4
[  475.799500][ T7882] bcachefs (loop4): clean shutdown complete, journal seq 5
[  475.802467][ T7882] bcachefs (loop4): marking filesystem clean
[  475.859377][ T7882] bcachefs (loop4): shutdown complete
[  475.966660][T18425] loop6: detected capacity change from 0 to 1024
[  475.970159][T18425] ext3: Unknown parameter 'nouser_xattr'
[  476.162499][T18427] netlink: 'syz.1.5000': attribute type 83 has an invalid length.
[  476.271059][T18425] loop6: detected capacity change from 0 to 32768
[  476.274665][T18425] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.4999 (18425)
[  476.282743][T18425] BTRFS error: failed to open device for path /dev/loop6 with flags 0x23: -13
[  477.375421][T18449] loop4: detected capacity change from 0 to 2048
[  477.404392][T18449] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  477.408476][T18449] ext4 filesystem being mounted at /1125/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  477.414654][T17922] Bluetooth: hci2: unexpected event for opcode 0x200a
[  477.442967][ T7882] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  477.806748][T18460] netlink: 'syz.1.5012': attribute type 12 has an invalid length.
[  477.810102][T18460] netlink: 211856 bytes leftover after parsing attributes in process `syz.1.5012'.
[  477.854750][T18462] netlink: 'syz.1.5013': attribute type 4 has an invalid length.
[  477.905741][T15243] usb 7-1: new high-speed USB device number 25 using dummy_hcd
[  477.924191][T18466] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  477.984302][T18466] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  478.020148][T18466] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  478.055753][T15243] usb 7-1: Using ep0 maxpacket: 16
[  478.061130][T15243] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  478.064251][T15243] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  478.067717][T15243] usb 7-1: config 1 interface 0 altsetting 1 endpoint 0x4 has invalid wMaxPacketSize 0
[  478.071416][T15243] usb 7-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 8
[  478.078152][T15243] usb 7-1: config 1 interface 0 has no altsetting 0
[  478.088133][T15243] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0201, bcdDevice= 0.40
[  478.088817][T18466] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  478.091806][T15243] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  478.098762][T15243] usb 7-1: Product: syz
[  478.100519][T15243] usb 7-1: Manufacturer: syz
[  478.102394][T15243] usb 7-1: SerialNumber: syz
[  478.181790][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  478.196057][ T5911] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  478.203550][ T5911] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  478.211513][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  478.319151][T15243] usb 7-1: 0:2 : does not exist
[  478.321083][T15243] usb 7-1: unit 3 not found!
[  478.343207][T15243] usb 7-1: USB disconnect, device number 25
[  478.377400][T18275] udevd[18275]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  478.740015][T18499] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  478.918949][T18495] loop4: detected capacity change from 0 to 32768
[  479.087359][T18495] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode.
[  479.168606][ T7882] ocfs2: Unmounting device (7,4) on (node local)
[  479.398123][T18507] loop6: detected capacity change from 0 to 32768
[  479.545047][   T33] audit: type=1326 audit(1755039260.531:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18520 comm="syz.1.5040" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f21acf8ebe9 code=0x0
[  480.739904][T18544] loop4: detected capacity change from 0 to 40427
[  480.759394][T18544] F2FS-fs (loop4): invalid crc value
[  480.823202][T18544] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  480.827688][T18544] F2FS-fs (loop4): Start checkpoint disabled!
[  480.831627][T18544] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  481.037246][T18556] loop6: detected capacity change from 0 to 40427
[  481.040343][T18556] F2FS-fs: heap/no_heap options were deprecated
[  481.166922][T18566] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  481.499199][T15243] usb 7-1: new high-speed USB device number 26 using dummy_hcd
[  481.666504][T15243] usb 7-1: Using ep0 maxpacket: 8
[  481.794989][T15243] usb 7-1: config 0 has an invalid interface number: 24 but max is 0
[  481.803471][T15243] usb 7-1: config 0 has no interface number 0
[  481.815224][T15243] usb 7-1: New USB device found, idVendor=050d, idProduct=0122, bcdDevice=5b.65
[  481.819128][T15243] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  481.822444][T15243] usb 7-1: Product: syz
[  481.825293][T15243] usb 7-1: Manufacturer: syz
[  481.827287][T15243] usb 7-1: SerialNumber: syz
[  481.831954][T15243] usb 7-1: config 0 descriptor??
[  482.051247][T15243] pegasus 7-1:0.24: probe with driver pegasus failed with error -71
[  482.146975][T15243] usb 7-1: USB disconnect, device number 26
[  482.180484][T18585] loop4: detected capacity change from 0 to 512
[  482.216137][T18585] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  482.221201][T18585] ext4 filesystem being mounted at /1140/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  482.291160][ T7882] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  483.081610][T18604] loop7: detected capacity change from 0 to 7
[  483.102658][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  483.106209][    C0] buffer_io_error: 4270 callbacks suppressed
[  483.106220][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  483.117703][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  483.121539][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  483.125996][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  483.129847][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  483.133785][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  483.137514][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  483.141578][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  483.145367][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  483.149515][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  483.152944][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  483.158190][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  483.161352][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  483.164065][T18275] ldm_validate_partition_table(): Disk read failed.
[  483.166503][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  483.169754][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  483.175498][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  483.178704][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  483.181536][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  483.184683][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  483.188175][T18275] Dev loop7: unable to read RDB block 0
[  483.190979][T18275]  loop7: unable to read partition table
[  483.194533][T18275] loop7: partition table beyond EOD, truncated
[  483.256492][T18607] Invalid logical block size (6)
[  483.280006][T18604] ldm_validate_partition_table(): Disk read failed.
[  483.283120][T18604] Dev loop7: unable to read RDB block 0
[  483.285993][T18604]  loop7: unable to read partition table
[  483.288270][T18604] loop7: partition table beyond EOD, truncated
[  483.292355][T18604] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X	%`ր{֐ȵ4FLQk݊) failed (rc=-5)
[  483.455136][T18609] sp0: Synchronizing with TNC
[  483.463644][T18608] [U] 
[  484.684014][T18648] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5092'.
[  484.762720][T18641] loop4: detected capacity change from 0 to 32768
[  484.788976][T18641] XFS (loop4): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  484.833604][T18641] XFS (loop4): Ending clean mount
[  484.888016][ T7882] XFS (loop4): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  485.962719][T18677] loop4: detected capacity change from 0 to 512
[  485.978199][T18677] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.5101: iget: bad extended attribute block 1
[  485.998525][T18677] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.5101: couldn't read orphan inode 15 (err -117)
[  486.016027][T18677] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  486.037608][T18677] EXT4-fs warning (device loop4): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed
[  486.090191][ T7882] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  486.957321][T18693] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  487.712414][T18705] loop4: detected capacity change from 0 to 128
[  487.745574][T18705] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  487.760925][T18705] ext4 filesystem being mounted at /1153/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  487.833480][T18705] fscrypt: loop4: 3 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 14
[  487.865266][ T7882] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  488.296782][T18714] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5116'.
[  488.529211][T18728] loop4: detected capacity change from 0 to 128
[  488.540711][T18728] EXT4-fs warning (device loop4): ext4_init_metadata_csum:4622: metadata_csum and uninit_bg are redundant flags; please run fsck.
[  488.545226][T18728] EXT4-fs (loop4): Encoding requested by superblock is unknown
[  488.568482][T18712] loop6: detected capacity change from 0 to 32768
[  488.964865][T18733] binder: 18732:18733 ioctl 400c620e 200000000000 returned -22
[  489.100301][T18741] loop4: detected capacity change from 0 to 1024
[  489.114453][T18741] EXT4-fs: Ignoring removed oldalloc option
[  489.121520][T18741] EXT4-fs: Ignoring removed bh option
[  489.143941][T18741] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  489.175893][T18741] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.5126: Allocating blocks 385-513 which overlap fs metadata
[  489.195546][T18741] EXT4-fs (loop4): pa ffff88802ab791d0: logic 16, phys. 129, len 24
[  489.199480][T18741] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8
[  489.264683][T18741] Page cache invalidation failure on direct I/O.  Possible data corruption due to collision with buffered I/O!
[  489.270245][T18741] File: /1164/file1/file1 PID: 18741 Comm: syz.4.5126
[  489.347216][ T7882] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  489.653115][T18771] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5140'.
[  489.683901][T18773] netlink: 'syz.4.5141': attribute type 4 has an invalid length.
[  489.686357][T18773] netlink: 17 bytes leftover after parsing attributes in process `syz.4.5141'.
[  490.256688][T18787] loop4: detected capacity change from 0 to 1024
[  490.282066][T18787] EXT4-fs: inline encryption not supported
[  490.289073][T18787] EXT4-fs (loop4): inodes count not valid: 32 vs 4
[  490.496623][T18799] loop4: detected capacity change from 0 to 164
[  491.009236][   T10] usb 7-1: new high-speed USB device number 27 using dummy_hcd
[  491.106560][   T33] audit: type=1107 audit(1755039272.117:230): pid=18824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  491.524460][   T10] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  491.527653][   T10] usb 7-1: config 0 has no interface number 0
[  491.531493][   T10] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  491.535899][   T10] usb 7-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  491.542631][   T10] usb 7-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00
[  491.546321][   T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  491.554006][   T10] usb 7-1: config 0 descriptor??
[  492.103153][   T10] hid (null): report_id 35660 is invalid
[  492.150244][T18857] overlayfs: missing 'lowerdir'
[  492.539072][   T10] uclogic 0003:28BD:0042.001C: failed retrieving string descriptor #100: -71
[  492.541916][   T10] uclogic 0003:28BD:0042.001C: failed retrieving pen parameters: -71
[  492.544563][   T10] uclogic 0003:28BD:0042.001C: pen probing failed: -71
[  492.547556][   T10] uclogic 0003:28BD:0042.001C: failed probing parameters: -71
[  492.556938][   T10] uclogic 0003:28BD:0042.001C: probe with driver uclogic failed with error -71
[  492.591682][   T10] usb 7-1: USB disconnect, device number 27
[  493.030771][T18872] loop4: detected capacity change from 0 to 1024
[  493.035636][T18872] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  493.061769][T18872] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  493.065501][T18872] EXT4-fs (loop4): orphan cleanup on readonly fs
[  493.075632][T18872] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm syz.4.5183: Invalid inode table block 0 in block_group 0
[  493.087363][T18872] EXT4-fs (loop4): Remounting filesystem read-only
[  493.091065][T18872] Quota error (device loop4): write_blk: dquota write failed
[  493.093596][T18872] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  493.096976][T18872] EXT4-fs (loop4): 1 truncate cleaned up
[  493.102101][T18872] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  493.144613][ T7882] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  493.355919][T18889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5192'.
[  493.365342][T18889] netlink: 660 bytes leftover after parsing attributes in process `syz.1.5192'.
[  493.413247][T18891] loop6: detected capacity change from 0 to 2048
[  493.780373][T18909] loop6: detected capacity change from 0 to 2048
[  494.292284][T18931] loop6: detected capacity change from 0 to 1024
[  494.346059][T18933] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  494.414980][T18938] batman_adv: batadv0: Interface deactivated: macvlan4
[  494.426630][ T5911] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  494.435499][ T5911] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  494.440891][ T5911] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  494.445342][ T5911] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  494.458178][ T5916] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[  494.617667][T15243] usb 7-1: new high-speed USB device number 28 using dummy_hcd
[  494.620929][ T5916] usb 5-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  494.625035][ T5916] usb 5-1: config 0 interface 0 has no altsetting 0
[  494.627505][ T5916] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c03, bcdDevice= 0.00
[  494.630298][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  494.639666][ T5916] usb 5-1: config 0 descriptor??
[  494.777453][T15243] usb 7-1: Using ep0 maxpacket: 8
[  494.790458][T15243] usb 7-1: config 150 has an invalid interface number: 204 but max is 0
[  494.794116][T15243] usb 7-1: config 150 has no interface number 0
[  494.797197][T15243] usb 7-1: config 150 interface 204 has no altsetting 0
[  494.803714][T15243] usb 7-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[  494.806641][T15243] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  494.809666][T15243] usb 7-1: Product: syz
[  494.811030][T15243] usb 7-1: Manufacturer: syz
[  494.812489][T15243] usb 7-1: SerialNumber: syz
[  495.055018][ T5916] corsair-psu 0003:1B1C:1C03.001D: unknown main item tag 0x0
[  495.072149][ T5916] corsair-psu 0003:1B1C:1C03.001D: unknown main item tag 0x0
[  495.075177][ T5916] corsair-psu 0003:1B1C:1C03.001D: unknown main item tag 0x0
[  495.090226][ T5916] corsair-psu 0003:1B1C:1C03.001D: unknown main item tag 0x0
[  495.093585][ T5916] corsair-psu 0003:1B1C:1C03.001D: unknown main item tag 0x0
[  495.100056][ T5916] corsair-psu 0003:1B1C:1C03.001D: hidraw0: USB HID v4.06 Device [HID 1b1c:1c03] on usb-dummy_hcd.4-1/input0
[  495.170735][ T5916] corsair-psu 0003:1B1C:1C03.001D: unable to initialize device (-38)
[  495.178840][ T5916] corsair-psu 0003:1B1C:1C03.001D: probe with driver corsair-psu failed with error -38
[  495.191841][T18965] overlayfs: failed to clone upperpath
[  495.247611][ T5916] usb 7-1: USB disconnect, device number 28
[  495.266209][T15243] usb 5-1: USB disconnect, device number 61
[  495.955350][T18977] loop4: detected capacity change from 0 to 8
[  495.990267][T18977] SQUASHFS error: xz decompression failed, data probably corrupt
[  495.993181][T18977] SQUASHFS error: Failed to read block 0x108: -5
[  495.995593][T18977] SQUASHFS error: Unable to read metadata cache entry [106]
[  495.999086][T18977] SQUASHFS error: Unable to read inode 0x11f
[  496.197867][T18973] loop6: detected capacity change from 0 to 40427
[  496.307505][T15243] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[  496.419137][T18997] netlink: 'syz.6.5243': attribute type 4 has an invalid length.
[  496.468027][T15243] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  496.474267][T15243] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  496.486269][T15243] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  496.489327][T15243] usb 5-1: Product: syz
[  496.490835][T15243] usb 5-1: Manufacturer: syz
[  496.492520][T15243] usb 5-1: SerialNumber: syz
[  496.733914][T19007] loop6: detected capacity change from 0 to 4096
[  497.224700][T19035] netlink: 340 bytes leftover after parsing attributes in process `syz.6.5259'.
[  497.310789][T15243] cdc_ncm 5-1:1.0: SET_CRC_MODE failed
[  497.316214][T15243] cdc_ncm 5-1:1.0: SET_NTB_FORMAT failed
[  497.336666][T15243] cdc_ncm 5-1:1.0: bind() failure
[  497.350017][T15243] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  497.352584][T15243] cdc_ncm 5-1:1.1: bind() failure
[  497.360735][T15243] usb 5-1: USB disconnect, device number 62
[  497.485564][T19055] netlink: 168 bytes leftover after parsing attributes in process `syz.6.5269'.
[  497.600138][T19058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5270'.
[  497.724791][T19071] netlink: 188 bytes leftover after parsing attributes in process `syz.1.5274'.
[  498.225923][T15243] usb 7-1: new high-speed USB device number 29 using dummy_hcd
[  498.404095][T15243] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  498.411328][T15243] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  498.416641][T15243] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  498.420726][T15243] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  498.426455][T15243] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  498.430869][T15243] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  498.442557][T15243] usb 7-1: config 0 descriptor??
[  498.548241][T19093] loop4: detected capacity change from 0 to 1024
[  498.571145][T19093] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  498.578085][T19093] ext4 filesystem being mounted at /1204/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  498.594776][T19093] EXT4-fs warning (device loop4): ext4_empty_dir:3103: inode #12: comm syz.4.5283: directory missing '..'
[  498.626044][ T7882] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  498.996703][T15243] plantronics 0003:047F:FFFF.001E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[  499.719654][T19119] netlink: 'syz.1.5295': attribute type 4 has an invalid length.
[  499.728302][T19119] netlink: 'syz.1.5295': attribute type 4 has an invalid length.
[  499.738676][T15243] lo speed is unknown, defaulting to 1000
[  499.740809][T15243] syz2: Port: 1 Link ACTIVE
[  500.374100][T19157] loop4: detected capacity change from 0 to 1024
[  500.380288][T19157] EXT4-fs: Ignoring removed mblk_io_submit option
[  500.382398][T19157] EXT4-fs: inline encryption not supported
[  500.393547][T19157] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  500.400380][T19157] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c842e018, mo2=0000]
[  500.403812][T19157] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.5311: bad orphan inode 11
[  500.408003][T19157] ext4_test_bit(bit=10, block=4) = 1
[  500.409734][T19157] is_bad_inode(inode)=0
[  500.410993][T19157] NEXT_ORPHAN(inode)=3254779904
[  500.412456][T19157] max_ino=32
[  500.413487][T19157] i_nlink=0
[  500.419361][T19157] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.5311: lblock 2 mapped to illegal pblock 2 (length 1)
[  500.428758][T19157] Quota error (device loop4): qtree_write_dquot: dquota write failed
[  500.431437][T19157] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.5311: lblock 0 mapped to illegal pblock 48 (length 1)
[  500.437918][T19157] Quota error (device loop4): v2_write_file_info: Can't write info structure
[  500.441891][T19157] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.5311: Failed to acquire dquot type 0
[  500.446242][T19157] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  500.449767][T19157] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.5311: mark_inode_dirty error
[  500.453993][T19157] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  500.459743][T19157] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  500.469083][T19157] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm syz.4.5311: Invalid inode table block 1 in block_group 0
[  500.476500][T19157] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  500.507196][ T7882] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  500.511956][ T7882] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0
[  500.534504][ T7882] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  500.538262][ T7882] EXT4-fs error (device loop4): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error
[  500.845330][T15243] usb 5-1: new high-speed USB device number 63 using dummy_hcd
[  500.984903][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  500.987534][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  501.006853][T15243] usb 5-1: config index 0 descriptor too short (expected 23569, got 27)
[  501.010245][T15243] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  501.017012][T15243] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  501.020616][T15243] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  501.026225][T15243] usb 5-1: Manufacturer: syz
[  501.031407][T15243] usb 5-1: config 0 descriptor??
[  501.046321][T15243] igorplugusb 5-1:0.0: endpoint incorrect
[  501.246305][T15243] usb 5-1: USB disconnect, device number 63
[  501.303556][  T791] usb 7-1: USB disconnect, device number 29
[  501.932709][T19193] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5327'.
[  501.998753][T19197] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  502.443678][  T791] usb 7-1: new high-speed USB device number 30 using dummy_hcd
[  502.618961][  T791] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  502.627263][  T791] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  502.636210][  T791] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  502.646379][  T791] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  502.654886][  T791] usb 7-1: Product: syz
[  502.656573][  T791] usb 7-1: Manufacturer: syz
[  502.658370][  T791] usb 7-1: SerialNumber: syz
[  502.720025][T19228] loop4: detected capacity change from 0 to 128
[  502.745917][T19228] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  502.764344][T19228] ext4 filesystem being mounted at /1220/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  502.799339][T19234] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  502.810762][ T7882] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  502.892637][  T791] usb 7-1: Audio class v2/v3 interfaces need an interface association
[  502.922690][  T791] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22
[  502.931697][  T791] usb 7-1: USB disconnect, device number 30
[  502.950063][T18275] udevd[18275]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  503.249431][T19253] loop4: detected capacity change from 0 to 512
[  503.268982][T19253] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  503.275670][T19253] ext4 filesystem being mounted at /1227/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  503.296465][   T33] audit: type=1800 audit(1755039284.323:231): pid=19253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5353" name="file1" dev="loop4" ino=15 res=0 errno=0
[  503.306793][   T33] audit: type=1800 audit(1755039284.333:232): pid=19253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5353" name="file2" dev="loop4" ino=16 res=0 errno=0
[  503.346190][ T7882] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  503.647615][T19267] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5359'.
[  503.767583][T19275] loop4: detected capacity change from 0 to 512
[  503.775688][T19275] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  503.816355][T19275] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  503.836109][T19275] ext4 filesystem being mounted at /1233/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  503.864361][T19275] EXT4-fs warning (device loop4): __ext4_unlink:3282: inode #16: comm syz.4.5363: Deleting file 'file3' with no links
[  503.910445][T19284] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5367'.
[  503.915038][ T7882] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  503.918972][T19284] IPVS: Error connecting to the multicast addr
[  504.051640][T19287] loop4: detected capacity change from 0 to 8192
[  504.092352][T19287] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  504.494866][T19301] binder: 19300:19301 ioctl c0306201 2000000003c0 returned -14
[  504.668477][T19314] loop6: detected capacity change from 0 to 256
[  504.708090][T19314] loop6: detected capacity change from 0 to 512
[  504.710384][T19318] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5382'.
[  504.711480][T19314] EXT4-fs: Ignoring removed orlov option
[  504.731434][T19318] netlink: 'syz.4.5382': attribute type 1 has an invalid length.
[  504.736165][T19318] netlink: 'syz.4.5382': attribute type 2 has an invalid length.
[  504.787152][T19320] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5383'.
[  505.102785][T19342] loop6: detected capacity change from 0 to 8
[  505.110208][T19342] MTD: Attempt to mount non-MTD device "/dev/loop6"
[  505.217760][T19346] binder: 19345:19346 unknown command 0
[  505.219982][T19346] binder: 19345:19346 ioctl c0306201 200000000080 returned -22
[  505.846834][T19386] loop6: detected capacity change from 0 to 2048
[  506.000768][T19393] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5418'.
[  506.018965][T19393] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5418'.
[  506.365278][T19401] loop4: detected capacity change from 0 to 32768
[  506.368393][T19401] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.5422 (19401)
[  506.374883][T19401] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  506.378098][T19401] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm
[  506.380702][T19401] BTRFS info (device loop4): using free-space-tree
[  506.481450][    T9] usb 7-1: new high-speed USB device number 31 using dummy_hcd
[  506.483414][ T7882] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  506.641369][    T9] usb 7-1: Using ep0 maxpacket: 32
[  506.668568][    T9] usb 7-1: config 0 has an invalid interface number: 30 but max is 0
[  506.672244][    T9] usb 7-1: config 0 has no interface number 0
[  506.691257][    T9] usb 7-1: New USB device found, idVendor=061d, idProduct=c180, bcdDevice=fc.f0
[  506.712931][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  506.716064][    T9] usb 7-1: Product: syz
[  506.717659][    T9] usb 7-1: Manufacturer: syz
[  506.719544][    T9] usb 7-1: SerialNumber: syz
[  506.735615][    T9] usb 7-1: config 0 descriptor??
[  506.765827][    T9] quatech2 7-1:0.30: Quatech 2nd gen USB to Serial Driver converter detected
[  507.003182][ T5236] Bluetooth: hci3: sending frame failed (-49)
[  507.012887][T17922] Bluetooth: hci3: Opcode 0x1003 failed: -49
[  507.098257][    T9] usb 7-1: qt2_attach - failed to power on unit: -71
[  507.102564][    T9] quatech2 7-1:0.30: probe with driver quatech2 failed with error -71
[  507.109083][    T9] usb 7-1: USB disconnect, device number 31
[  507.218162][T19428] hugetlbfs: syz.1.5426 (19428): Using mlock ulimits for SHM_HUGETLB is obsolete
[  507.821374][T19437] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5430'.
[  507.882519][T19443] netlink: 'syz.1.5433': attribute type 25 has an invalid length.
[  507.885396][T19443] netlink: 184 bytes leftover after parsing attributes in process `syz.1.5433'.
[  508.088433][T19438] loop4: detected capacity change from 0 to 40427
[  508.093285][T19438] F2FS-fs (loop4): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[  508.096190][T19438] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  508.112478][T19438] F2FS-fs (loop4): invalid crc value
[  508.179013][T19438] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  508.183046][T19438] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  508.185260][T19438] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  508.272516][T19446] loop6: detected capacity change from 0 to 32768
[  508.285747][T19446] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.5435 (19446)
[  508.330884][T19446] BTRFS error: failed to open device for path /dev/loop6 with flags 0x23: -13
[  508.412792][T19460] netlink: 'syz.4.5440': attribute type 10 has an invalid length.
[  508.416620][T19460] veth1_vlan: entered allmulticast mode
[  508.422520][T19460] team0: Device veth1_vlan failed to register rx_handler
[  508.520110][   T33] audit: type=1326 audit(1755039289.545:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19463 comm="syz.6.5442" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5cb8ebe9 code=0x7ffc0000
[  508.529800][   T33] audit: type=1326 audit(1755039289.545:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19463 comm="syz.6.5442" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5cb8ebe9 code=0x7ffc0000
[  508.550306][   T33] audit: type=1326 audit(1755039289.555:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19463 comm="syz.6.5442" exe="/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7f4e5cb8ebe9 code=0x7ffc0000
[  508.557299][   T33] audit: type=1326 audit(1755039289.555:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19463 comm="syz.6.5442" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5cb8ebe9 code=0x7ffc0000
[  508.575391][   T33] audit: type=1326 audit(1755039289.555:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19463 comm="syz.6.5442" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5cb8ebe9 code=0x7ffc0000
[  508.605068][T19466] loop4: detected capacity change from 0 to 2048
[  508.653382][T19466] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  508.658152][T19466] ext4 filesystem being mounted at /1259/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  508.807390][T19479] lo speed is unknown, defaulting to 1000
[  508.849570][ T7882] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  509.019796][T19489] team0: No ports can be present during mode change
[  509.068351][T19491] overlayfs: conflicting options: userxattr,metacopy=on
[  509.196714][T19484] loop4: detected capacity change from 0 to 40427
[  509.205197][T19484] F2FS-fs (loop4): build fault injection rate: 1
[  509.207255][T19484] F2FS-fs (loop4): build fault injection type: 0x3bfe8c
[  509.212919][T19484] F2FS-fs (loop4): inject slab alloc in f2fs_alloc_inode of alloc_inode+0x6a/0x1b0
[  509.224803][T19484] F2FS-fs (loop4): Failed to read F2FS meta data inode
[  509.719020][T19517] _Z`Ԁ@: entered promiscuous mode
[  509.803943][T19513] loop4: detected capacity change from 0 to 40427
[  509.820257][T19513] F2FS-fs (loop4): Small segment_count (9 < 1 * 24)
[  509.823420][T19513] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  509.926035][T19513] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  509.943370][T19513] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  509.946697][T19513] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  509.959785][T19519] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  509.964581][T19519] CPU: 1 UID: 0 PID: 19519 Comm: syz.6.5466 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  509.964604][T19519] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  509.964614][T19519] Call Trace:
[  509.964622][T19519]  <TASK>
[  509.964631][T19519]  dump_stack_lvl+0x189/0x250
[  509.964659][T19519]  ? __pfx_dump_stack_lvl+0x10/0x10
[  509.964677][T19519]  ? __pfx__printk+0x10/0x10
[  509.964704][T19519]  ? kernfs_path_from_node+0x2f/0x290
[  509.964723][T19519]  ? kernfs_path_from_node+0x250/0x290
[  509.964737][T19519]  ? kernfs_path_from_node+0x2f/0x290
[  509.964756][T19519]  sysfs_warn_dup+0x8e/0xa0
[  509.964772][T19519]  sysfs_do_create_link_sd+0xc0/0x110
[  509.964790][T19519]  device_add_class_symlinks+0x1cf/0x240
[  509.964816][T19519]  device_add+0x475/0xb50
[  509.964840][T19519]  wiphy_register+0x1ba6/0x28d0
[  509.964873][T19519]  ? __pfx_wiphy_register+0x10/0x10
[  509.964890][T19519]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  509.964919][T19519]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  509.964944][T19519]  ieee80211_register_hw+0x3425/0x4080
[  509.964978][T19519]  ? ieee80211_register_hw+0x1481/0x4080
[  509.965007][T19519]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  509.965032][T19519]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  509.965054][T19519]  ? __hrtimer_setup+0x187/0x210
[  509.965068][T19519]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  509.965091][T19519]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  509.965133][T19519]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  509.965179][T19519]  ? trace_kmalloc+0x1f/0xd0
[  509.965198][T19519]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  509.965220][T19519]  ? kstrndup+0xbf/0x160
[  509.965243][T19519]  hwsim_new_radio_nl+0xea4/0x1b10
[  509.965262][T19519]  ? __pfx___nla_validate_parse+0x10/0x10
[  509.965294][T19519]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  509.965321][T19519]  ? __nla_parse+0x40/0x60
[  509.965344][T19519]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  509.965367][T19519]  genl_family_rcv_msg_doit+0x215/0x300
[  509.965395][T19519]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  509.965438][T19519]  ? bpf_lsm_capable+0x9/0x20
[  509.965459][T19519]  ? security_capable+0x7e/0x2e0
[  509.965485][T19519]  genl_rcv_msg+0x60e/0x790
[  509.965514][T19519]  ? __pfx_genl_rcv_msg+0x10/0x10
[  509.965535][T19519]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  509.965563][T19519]  netlink_rcv_skb+0x208/0x470
[  509.965578][T19519]  ? __lock_acquire+0xab9/0xd20
[  509.965601][T19519]  ? __pfx_genl_rcv_msg+0x10/0x10
[  509.965623][T19519]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  509.965657][T19519]  ? down_read+0x1ad/0x2e0
[  509.965680][T19519]  genl_rcv+0x28/0x40
[  509.965701][T19519]  netlink_unicast+0x82f/0x9e0
[  509.965724][T19519]  ? __pfx_netlink_unicast+0x10/0x10
[  509.965741][T19519]  ? netlink_sendmsg+0x642/0xb30
[  509.965758][T19519]  ? skb_put+0x11b/0x210
[  509.965781][T19519]  netlink_sendmsg+0x805/0xb30
[  509.965807][T19519]  ? __pfx_netlink_sendmsg+0x10/0x10
[  509.965828][T19519]  ? aa_sock_msg_perm+0xf1/0x1d0
[  509.965851][T19519]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  509.965867][T19519]  ? __pfx_netlink_sendmsg+0x10/0x10
[  509.965885][T19519]  __sock_sendmsg+0x21c/0x270
[  509.965905][T19519]  ____sys_sendmsg+0x505/0x830
[  509.965930][T19519]  ? __pfx_____sys_sendmsg+0x10/0x10
[  509.965958][T19519]  ? import_iovec+0x74/0xa0
[  509.965977][T19519]  ___sys_sendmsg+0x21f/0x2a0
[  509.965999][T19519]  ? __pfx____sys_sendmsg+0x10/0x10
[  509.966049][T19519]  ? __fget_files+0x2a/0x420
[  509.966068][T19519]  ? __fget_files+0x3a0/0x420
[  509.966097][T19519]  __x64_sys_sendmsg+0x19b/0x260
[  509.966119][T19519]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  509.966177][T19519]  ? rcu_is_watching+0x15/0xb0
[  509.966198][T19519]  ? do_syscall_64+0xbe/0x3b0
[  509.966224][T19519]  do_syscall_64+0xfa/0x3b0
[  509.966241][T19519]  ? lockdep_hardirqs_on+0x9c/0x150
[  509.966259][T19519]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  509.966274][T19519]  ? exc_page_fault+0x9f/0xf0
[  509.966292][T19519]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  509.966309][T19519] RIP: 0033:0x7f4e5cb8ebe9
[  509.966326][T19519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  509.966340][T19519] RSP: 002b:00007f4e5d924038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  509.966358][T19519] RAX: ffffffffffffffda RBX: 00007f4e5cdb5fa0 RCX: 00007f4e5cb8ebe9
[  509.966368][T19519] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004
[  509.966376][T19519] RBP: 00007f4e5cc11e19 R08: 0000000000000000 R09: 0000000000000000
[  509.966385][T19519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  509.966393][T19519] R13: 00007f4e5cdb6038 R14: 00007f4e5cdb5fa0 R15: 00007ffd6567ad18
[  509.966427][T19519]  </TASK>
[  510.205641][ T7882] syz-executor: attempt to access beyond end of device
[  510.205641][ T7882] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  510.211238][ T7882] CPU: 1 UID: 0 PID: 7882 Comm: syz-executor Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  510.211263][ T7882] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  510.211272][ T7882] Call Trace:
[  510.211278][ T7882]  <TASK>
[  510.211285][ T7882]  dump_stack_lvl+0x189/0x250
[  510.211311][ T7882]  ? __pfx_dump_stack_lvl+0x10/0x10
[  510.211328][ T7882]  ? __pfx_queue_work_on+0x10/0x10
[  510.211350][ T7882]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  510.211368][ T7882]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  510.211392][ T7882]  f2fs_handle_critical_error+0x37c/0x540
[  510.211417][ T7882]  f2fs_write_end_io+0x886/0xb60
[  510.211451][ T7882]  __submit_merged_bio+0x27a/0x6a0
[  510.211473][ T7882]  __submit_merged_write_cond+0x255/0x530
[  510.211496][ T7882]  f2fs_write_data_pages+0x261d/0x3000
[  510.211540][ T7882]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  510.211599][ T7882]  ? folios_put_refs+0x559/0x640
[  510.211623][ T7882]  ? __pfx_folios_put_refs+0x10/0x10
[  510.211635][ T7882]  ? rcu_is_watching+0x15/0xb0
[  510.211656][ T7882]  ? __lock_acquire+0xab9/0xd20
[  510.211685][ T7882]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  510.211703][ T7882]  do_writepages+0x32e/0x550
[  510.211730][ T7882]  ? do_raw_spin_unlock+0x4d/0x240
[  510.211747][ T7882]  filemap_fdatawrite+0x199/0x240
[  510.211764][ T7882]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  510.211818][ T7882]  ? do_raw_spin_unlock+0x4d/0x240
[  510.211838][ T7882]  f2fs_sync_dirty_inodes+0x31f/0x830
[  510.211869][ T7882]  f2fs_write_checkpoint+0x95a/0x1df0
[  510.211906][ T7882]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  510.211960][ T7882]  ? call_rcu+0x6ff/0x9c0
[  510.211974][ T7882]  ? lockdep_hardirqs_on+0x9c/0x150
[  510.211991][ T7882]  ? kill_f2fs_super+0x298/0x6c0
[  510.212015][ T7882]  kill_f2fs_super+0x2c3/0x6c0
[  510.212039][ T7882]  ? __pfx_kill_f2fs_super+0x10/0x10
[  510.212056][ T7882]  ? radix_tree_delete_item+0x2b6/0x400
[  510.212078][ T7882]  ? shrinker_free+0x2ce/0x3e0
[  510.212097][ T7882]  deactivate_locked_super+0xbc/0x130
[  510.212145][ T7882]  cleanup_mnt+0x425/0x4c0
[  510.212162][ T7882]  ? lockdep_hardirqs_on+0x9c/0x150
[  510.212181][ T7882]  task_work_run+0x1d4/0x260
[  510.212203][ T7882]  ? __pfx_task_work_run+0x10/0x10
[  510.212219][ T7882]  ? __x64_sys_umount+0x122/0x160
[  510.212241][ T7882]  ? exit_to_user_mode_loop+0x40/0x110
[  510.212264][ T7882]  exit_to_user_mode_loop+0xec/0x110
[  510.212284][ T7882]  do_syscall_64+0x2bd/0x3b0
[  510.212300][ T7882]  ? lockdep_hardirqs_on+0x9c/0x150
[  510.212314][ T7882]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  510.212328][ T7882]  ? exc_page_fault+0x9f/0xf0
[  510.212351][ T7882]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  510.212364][ T7882] RIP: 0033:0x7f8170d8ff17
[  510.212377][ T7882] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  510.212390][ T7882] RSP: 002b:00007fff001ca088 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  510.212406][ T7882] RAX: 0000000000000000 RBX: 00007f8170e11c05 RCX: 00007f8170d8ff17
[  510.212416][ T7882] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff001ca140
[  510.212423][ T7882] RBP: 00007fff001ca140 R08: 0000000000000000 R09: 0000000000000000
[  510.212431][ T7882] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff001cb1d0
[  510.212439][ T7882] R13: 00007f8170e11c05 R14: 000000000007c917 R15: 00007fff001cb210
[  510.212463][ T7882]  </TASK>
[  510.212470][ T7882] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  510.828829][T19554] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5478'.
[  510.832723][T19554] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5478'.
[  510.835740][T19554] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5478'.
[  510.840585][T19554] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5478'.
[  510.843907][T19554] netlink: 5 bytes leftover after parsing attributes in process `syz.4.5478'.
[  511.252389][T19569] loop4: detected capacity change from 0 to 32768
[  511.308990][T19569] XFS (loop4): DAX unsupported by block device. Turning off DAX.
[  511.312594][T19569] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  511.327678][T19569] XFS (loop4): Ending clean mount
[  511.337479][T19569] XFS (loop4): Quotacheck needed: Please wait.
[  511.396380][T19569] XFS (loop4): Quotacheck: Done.
[  511.463489][ T7882] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  511.735129][T19585] loop6: detected capacity change from 0 to 32768
[  512.616487][T19603] loop4: detected capacity change from 0 to 1764
[  512.638018][T19603] iso9660: Corrupted directory entry in block 2 of inode 1920
[  512.938284][T19617] netlink: 'syz.4.5503': attribute type 3 has an invalid length.
[  513.947960][T19639] loop6: detected capacity change from 0 to 4096
[  514.133577][T19654] loop4: detected capacity change from 0 to 16
[  514.268560][T19654] erofs (device loop4): rootino(nid 36) is not a directory(i_mode 66300)
[  514.454086][T19661] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5523'.
[  514.543154][T19667] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5526'.
[  514.546581][T19667] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5526'.
[  514.647690][ T5916] usb 7-1: new full-speed USB device number 32 using dummy_hcd
[  514.802366][ T5916] usb 7-1: config 4 has an invalid interface number: 231 but max is 0
[  514.805953][ T5916] usb 7-1: config 4 has no interface number 0
[  514.813186][ T5916] usb 7-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d
[  514.819772][ T5916] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  514.823088][ T5916] usb 7-1: Product: syz
[  514.824831][ T5916] usb 7-1: Manufacturer: syz
[  514.826726][ T5916] usb 7-1: SerialNumber: syz
[  514.838995][ T5916] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state.
[  515.041857][ T5916] vp7045: USB control message 'out' went wrong.
[  515.045204][ T5916] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  515.055552][ T5916] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19)
[  515.062185][ T5916] usb 7-1: USB disconnect, device number 32
[  515.957512][T19720] loop6: detected capacity change from 0 to 512
[  516.217265][T19721] futex_wake_op: syz.1.5552 tries to shift op by 32; fix this program
[  516.665869][T19735] loop6: detected capacity change from 0 to 128
[  516.850895][T19741] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  517.216066][    T9] usb 5-1: new high-speed USB device number 64 using dummy_hcd
[  517.312781][T19747] loop6: detected capacity change from 0 to 32768
[  517.364567][T19747] bcachefs (/dev/loop6): error validating superblock: Invalid superblock section journal: journal bucket 1 before first bucket 32767
[  517.364567][T19747] journal (size 40):
[  517.364567][T19747] Buckets:  9 7 24 1
[  517.364567][T19747] 
[  517.376094][    T9] usb 5-1: Using ep0 maxpacket: 32
[  517.386528][T19747] bcachefs: bch2_fs_get_tree() error: invalid_sb_journal
[  517.387410][    T9] usb 5-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=72.1d
[  517.392634][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  517.395184][    T9] usb 5-1: Product: syz
[  517.402816][    T9] usb 5-1: Manufacturer: syz
[  517.404556][    T9] usb 5-1: SerialNumber: syz
[  517.423467][    T9] usb 5-1: config 0 descriptor??
[  517.638808][    T9] mdc800 5-1:0.0: probe fails -> wrong Number of Configuration
[  517.647024][    T9] usb 5-1: USB disconnect, device number 64
[  517.969964][T19774] netlink: 'syz.6.5575': attribute type 1 has an invalid length.
[  517.972474][T19774] netlink: 'syz.6.5575': attribute type 4 has an invalid length.
[  517.977924][T19774] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.5575'.
[  518.495396][T15243] usb 5-1: new high-speed USB device number 65 using dummy_hcd
[  518.646062][T15243] usb 5-1: Using ep0 maxpacket: 32
[  518.654132][T15243] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  518.658049][T15243] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  518.663757][T15243] usb 5-1: config 0 descriptor??
[  518.874814][T15243] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  518.887357][T15243] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  518.892464][T15243] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  518.895146][T15243] usb 5-1: media controller created
[  518.907470][T15243] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  518.988739][T19795] loop6: detected capacity change from 0 to 4096
[  519.078543][T15243] az6027: usb out operation failed. (-71)
[  519.081416][T15243] az6027: usb out operation failed. (-71)
[  519.083732][T15243] stb0899_attach: Driver disabled by Kconfig
[  519.086488][T15243] az6027: no front-end attached
[  519.086488][T15243] 
[  519.091473][T15243] az6027: usb out operation failed. (-71)
[  519.093795][T15243] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  519.102578][T15243] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input24
[  519.114773][T15243] dvb-usb: schedule remote query interval to 400 msecs.
[  519.120506][T15243] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  519.129024][T15243] usb 5-1: USB disconnect, device number 65
[  519.183773][T15243] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  519.642235][T19803] loop4: detected capacity change from 0 to 2048
[  519.672389][T19803] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  519.694015][T19802] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  519.714075][T19802] EXT4-fs (loop4): Remounting filesystem read-only
[  519.723349][T19802] EXT4-fs (loop4): error restoring inline_data for inode -- potential data loss! (inode 18, error -30)
[  519.750984][ T7882] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  520.080792][T19825] loop4: detected capacity change from 0 to 4096
[  520.209870][T19825] overlayfs: upper fs does not support tmpfile.
[  520.235333][T19825] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  520.468551][T19827] loop4: detected capacity change from 0 to 256
[  520.478406][T19827] FAT-fs (loop4): bogus logical sector size 0
[  520.510108][T19827] FAT-fs (loop4): Can't find a valid FAT filesystem
[  520.662226][T19831] lo speed is unknown, defaulting to 1000
[  521.168719][T19851] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  521.209765][T19855] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5610'.
[  521.247626][T19855] vlan2: entered allmulticast mode
[  521.249404][T19855] bond2: entered allmulticast mode
[  521.803857][ T5916] usb 7-1: new high-speed USB device number 33 using dummy_hcd
[  521.967140][ T5916] usb 7-1: Using ep0 maxpacket: 32
[  521.995386][ T5916] usb 7-1: config 0 has an invalid interface number: 35 but max is 0
[  521.998587][ T5916] usb 7-1: config 0 has no interface number 0
[  522.012443][ T5916] usb 7-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  522.018243][ T5916] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  522.022926][ T5916] usb 7-1: Product: syz
[  522.027833][ T5916] usb 7-1: Manufacturer: syz
[  522.029728][ T5916] usb 7-1: SerialNumber: syz
[  522.038839][ T5916] usb 7-1: config 0 descriptor??
[  522.048936][ T5916] radio-si470x 7-1:0.35: could not find interrupt in endpoint
[  522.052064][ T5916] radio-si470x 7-1:0.35: probe with driver radio-si470x failed with error -5
[  522.261931][ T5916] radio-raremono 7-1:0.35: this is not Thanko's Raremono.
[  522.267287][ T5916] usbhid 7-1:0.35: couldn't find an input interrupt endpoint
[  522.272279][ T5916] usb 7-1: USB disconnect, device number 33
[  522.728750][   T33] audit: type=1326 audit(1755039303.763:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19919 comm="syz.4.5639" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8170d8ebe9 code=0x7ffc0000
[  522.730669][T19920] netlink: 'syz.4.5639': attribute type 6 has an invalid length.
[  522.739160][   T33] audit: type=1326 audit(1755039303.763:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19919 comm="syz.4.5639" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8170d8ebe9 code=0x7ffc0000
[  522.742710][T19920] netlink: 168 bytes leftover after parsing attributes in process `syz.4.5639'.
[  522.749156][   T33] audit: type=1326 audit(1755039303.763:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19919 comm="syz.4.5639" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8170d8ebe9 code=0x7ffc0000
[  522.760543][   T33] audit: type=1326 audit(1755039303.763:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19919 comm="syz.4.5639" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8170d8ebe9 code=0x7ffc0000
[  522.769088][   T33] audit: type=1326 audit(1755039303.763:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19919 comm="syz.4.5639" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8170d8ebe9 code=0x7ffc0000
[  522.777805][   T33] audit: type=1326 audit(1755039303.783:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19919 comm="syz.4.5639" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8170d8ebe9 code=0x7ffc0000
[  522.792235][   T33] audit: type=1326 audit(1755039303.783:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19919 comm="syz.4.5639" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8170d8ebe9 code=0x7ffc0000
[  523.400017][T19938] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5646'.
[  523.682785][   T33] audit: type=1326 audit(1755039304.723:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19921 comm="syz.4.5640" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8170d8ebe9 code=0x7fc00000
[  523.706034][   T33] audit: type=1326 audit(1755039304.723:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19921 comm="syz.4.5640" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8170d8ebe9 code=0x7fc00000
[  523.723625][   T33] audit: type=1326 audit(1755039304.723:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19921 comm="syz.4.5640" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8170d8ebe9 code=0x7fc00000
[  524.077339][T19948] loop4: detected capacity change from 0 to 32768
[  524.080703][T19948] XFS: noikeep mount option is deprecated.
[  524.089974][T19948] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  524.112970][T19948] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  524.129372][T19948] XFS (loop4): Starting recovery (logdev: internal)
[  524.152213][T19948] XFS (loop4): Ending recovery (logdev: internal)
[  524.221319][ T7882] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  524.450582][T19952] loop6: detected capacity change from 0 to 32768
[  524.840825][T19975] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5659'.
[  524.865526][T19975] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5659'.
[  525.012417][ T5916] usb 7-1: new high-speed USB device number 34 using dummy_hcd
[  525.024666][T19984] ALSA: mixer_oss: invalid OSS volume 'u'
[  525.165818][ T5916] usb 7-1: config 0 has an invalid interface number: 8 but max is 0
[  525.169973][ T5916] usb 7-1: config 0 has no interface number 0
[  525.177849][ T5916] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  525.181978][ T5916] usb 7-1: config 0 interface 8 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  525.186984][ T5916] usb 7-1: New USB device found, idVendor=0582, idProduct=b9d5, bcdDevice=73.f7
[  525.190721][ T5916] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  525.205403][ T5916] usb 7-1: config 0 descriptor??
[  525.257264][T18275] udevd[18275]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  525.435911][  T791] usb 7-1: USB disconnect, device number 34
[  525.627234][T20004] loop4: detected capacity change from 0 to 32768
[  525.634468][T20004] (syz.4.5672,20004,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  525.640040][T20004] (syz.4.5672,20004,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  525.651990][T20004] JBD2: Ignoring recovery information on journal
[  525.680959][T20004] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  525.712099][T20004] ocfs2: Unmounting device (7,4) on (node local)
[  526.097638][T20020] loop4: detected capacity change from 0 to 256
[  526.102027][T20020] exfat: Deprecated parameter 'namecase'
[  526.104389][T20020] exfat: Deprecated parameter 'namecase'
[  526.115628][T20020] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d)
[  526.270845][T20024] loop4: detected capacity change from 0 to 4096
[  526.288713][T20024] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[  526.338228][T20024] ntfs3(loop4): ino=1a, mi_enum_attr
[  526.351087][T20024] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  526.457931][T20024] ntfs3(loop4): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" ntfs_sync_inode failed, -22.
[  526.538030][ T3062] ntfs3(loop4): ino=1e, ntfs3_write_inode failed, -22.
[  527.000204][T20040] loop4: detected capacity change from 0 to 1024
[  527.907967][ T7882] hfsplus: walked past end of dir
[  527.951072][ T7882] hfsplus: xattr search failed
[  528.211880][T20065] tmpfs: Bad value for 'mpol'
[  528.247275][T20067] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5700'.
[  528.318779][T20054] loop6: detected capacity change from 0 to 40427
[  528.342150][T20073] sctp: [Deprecated]: syz.1.5703 (pid 20073) Use of int in maxseg socket option.
[  528.342150][T20073] Use struct sctp_assoc_value instead
[  528.344759][T20054] F2FS-fs: heap/no_heap options were deprecated
[  528.363997][T20072] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5702'.
[  528.480003][T20079] netlink: 'syz.4.5705': attribute type 83 has an invalid length.
[  528.559476][T20085] delete_channel: no stack
[  528.687557][T20054] loop6: detected capacity change from 0 to 4096
[  528.880374][  T791] usb 5-1: new full-speed USB device number 66 using dummy_hcd
[  529.000251][    T9] usb 7-1: new high-speed USB device number 35 using dummy_hcd
[  529.054843][  T791] usb 5-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4
[  529.058305][  T791] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  529.061996][  T791] usb 5-1: Product: syz
[  529.063519][  T791] usb 5-1: Manufacturer: syz
[  529.064921][  T791] usb 5-1: SerialNumber: syz
[  529.067906][  T791] usb 5-1: config 0 descriptor??
[  529.179239][    T9] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  529.183443][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  529.186177][    T9] usb 7-1: Product: syz
[  529.187510][    T9] usb 7-1: Manufacturer: syz
[  529.188986][    T9] usb 7-1: SerialNumber: syz
[  529.204212][    T9] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  529.227052][   T10] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  529.281410][    T9] usb 5-1: USB disconnect, device number 66
[  529.749804][    T9] usb 7-1: USB disconnect, device number 35
[  530.169524][   T24] usb 5-1: new high-speed USB device number 67 using dummy_hcd
[  530.320003][   T24] usb 5-1: Using ep0 maxpacket: 32
[  530.321423][   T10] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive
[  530.331786][   T10] ath9k_htc: Failed to initialize the device
[  530.332985][   T24] usb 5-1: config 0 has an invalid interface number: 255 but max is 0
[  530.336419][   T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  530.339341][    T9] usb 7-1: ath9k_htc: USB layer deinitialized
[  530.345049][   T24] usb 5-1: config 0 has no interface number 0
[  530.353167][   T24] usb 5-1: config 0 interface 255 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  530.361100][   T24] usb 5-1: config 0 interface 255 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0
[  530.369395][   T24] usb 5-1: config 0 interface 255 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  530.382240][   T24] usb 5-1: New USB device found, idVendor=0499, idProduct=152e, bcdDevice=b4.9a
[  530.385939][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  530.389033][   T24] usb 5-1: Product: syz
[  530.397267][   T24] usb 5-1: Manufacturer: syz
[  530.398795][   T24] usb 5-1: SerialNumber: syz
[  530.402436][   T24] usb 5-1: config 0 descriptor??
[  530.527113][T20128] (syz.1.5728,20128,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory.
[  530.635386][   T24] usb 5-1: USB disconnect, device number 67
[  530.647069][T18275] udevd[18275]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.255/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  531.568133][T20156] netlink: 9280 bytes leftover after parsing attributes in process `syz.6.5740'.
[  532.418395][    T9] usb 7-1: new high-speed USB device number 36 using dummy_hcd
[  532.569950][    T9] usb 7-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  532.585275][    T9] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  532.591552][    T9] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  532.596660][    T9] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  532.625709][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  532.638831][T20174] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  533.271775][T20220] loop4: detected capacity change from 0 to 8
[  533.292664][T20220] SQUASHFS error: Unknown inode type 0 in squashfs_iget!
[  533.613009][T20234] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  533.619637][T20234] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  533.702034][T20234] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  533.705392][T20234] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  533.873263][T20234] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  533.877841][T20234] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  533.981997][T20234] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  533.987194][T20234] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  534.105418][ T5911] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  534.118011][ T5911] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  534.151308][ T5911] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  534.160679][ T5911] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  534.176967][ T5911] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  534.182188][ T5911] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  534.207125][ T5911] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  534.214182][ T5911] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  534.235791][    T9] aiptek 7-1:17.0: Aiptek using 400 ms programming speed
[  534.250365][    T9] input: Aiptek as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:17.0/input/input25
[  534.333414][    T9] usb 7-1: USB disconnect, device number 36
[  534.336129][    C0] aiptek 7-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[  534.519076][T20276] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5776'.
[  535.022662][T20290] netlink: 'syz.6.5781': attribute type 8 has an invalid length.
[  535.547866][T20317] fuse: Unknown parameter 'grou00000000000000000000'
[  535.960304][T15243] usb 5-1: new full-speed USB device number 68 using dummy_hcd
[  536.112441][T20327] loop6: detected capacity change from 0 to 2048
[  536.138495][T15243] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  536.142272][T15243] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  536.147236][T15243] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[  536.152396][T15243] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  536.157750][T15243] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  536.170854][T15243] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  536.175542][T15243] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  536.179360][T15243] usb 5-1: Product: syz
[  536.181192][T15243] usb 5-1: Manufacturer: syz
[  536.183003][T15243] usb 5-1: SerialNumber: syz
[  536.192438][T15243] usb 5-1: config 0 descriptor??
[  536.406680][T15243] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000
[  536.412270][T15243] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0.
[  536.611147][T15243] radio-si470x 5-1:0.0: software version 0, hardware version 0
[  536.613749][T15243] radio-si470x 5-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0.
[  536.617873][T15243] radio-si470x 5-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org
[  536.812446][T15243] radio-si470x 5-1:0.0: submitting int urb failed (-90)
[  537.422503][T15243] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71
[  537.425168][T15243] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22
[  537.445463][T15243] usb 5-1: USB disconnect, device number 68
[  537.895629][T15243] usb 7-1: new high-speed USB device number 37 using dummy_hcd
[  537.972014][T20344] netlink: 'syz.4.5805': attribute type 1 has an invalid length.
[  537.975170][T20344] netlink: 'syz.4.5805': attribute type 4 has an invalid length.
[  537.979237][T20344] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.5805'.
[  537.983789][T20344] netlink: 'syz.4.5805': attribute type 1 has an invalid length.
[  537.988456][T20344] netlink: 'syz.4.5805': attribute type 4 has an invalid length.
[  537.991086][T20344] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.5805'.
[  538.051353][T15243] usb 7-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1
[  538.060444][T15243] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  538.064795][T15243] usb 7-1: Product: syz
[  538.066809][T15243] usb 7-1: Manufacturer: syz
[  538.068283][T15243] usb 7-1: SerialNumber: syz
[  538.071503][T15243] usb 7-1: config 0 descriptor??
[  538.284686][T15243] int51x1 7-1:0.0: probe with driver int51x1 failed with error -22
[  538.311235][T20358] loop4: detected capacity change from 0 to 512
[  538.323925][T20358] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.5812: casefold flag without casefold feature
[  538.331716][T20358] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.5812: couldn't read orphan inode 15 (err -117)
[  538.338548][T20358] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  538.536678][   T24] usb 7-1: USB disconnect, device number 37
[  538.840645][ T7882] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  539.214402][T20393] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5823'.
[  539.215002][   T33] kauditd_printk_skb: 6 callbacks suppressed
[  539.215013][   T33] audit: type=1326 audit(1755039320.251:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20388 comm="syz.4.5824" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8170d8ebe9 code=0x0
[  539.218817][T20393] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5823'.
[  539.829277][T20412] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5832'.
[  539.832319][T20412] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5832'.
[  540.243404][   T33] audit: type=1400 audit(1755039321.281:255): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=2626200DFFFFFFFFFFFFFF7FA6 pid=20423 comm="syz.4.5838"
[  540.928078][T20466] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5857'.
[  541.333964][    T9] usb 7-1: new high-speed USB device number 38 using dummy_hcd
[  541.513933][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  541.518297][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  541.522086][    T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  541.546919][    T9] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  541.550367][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  541.564849][    T9] usb 7-1: config 0 descriptor??
[  541.610297][T20481] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5864'.
[  541.888266][T20491] loop4: detected capacity change from 0 to 1024
[  541.922918][T20491] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  541.972419][ T7882] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  541.998582][    T9] plantronics 0003:047F:FFFF.001F: reserved main item tag 0xd
[  542.014764][    T9] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[  542.097083][T20498] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode
[  542.101440][T20498] batadv_slave_0: entered promiscuous mode
[  542.109148][T20498] hsr1: Slave A (wlan0) is not up; please bring it up to get a fully working HSR network
[  542.114460][T20498] hsr1: entered promiscuous mode
[  542.277539][   T24] usb 7-1: USB disconnect, device number 38
[  542.295135][T20508] loop4: detected capacity change from 0 to 64
[  542.312089][T20508] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
[  542.459430][   T33] audit: type=1326 audit(1755039323.502:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20513 comm="syz.4.5879" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8170d8ebe9 code=0x7ffc0000
[  542.472054][   T33] audit: type=1326 audit(1755039323.502:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20513 comm="syz.4.5879" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8170d8ebe9 code=0x7ffc0000
[  542.484039][   T33] audit: type=1326 audit(1755039323.502:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20513 comm="syz.4.5879" exe="/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f8170d8ebe9 code=0x7ffc0000
[  542.494394][   T33] audit: type=1326 audit(1755039323.502:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20513 comm="syz.4.5879" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8170d8ebe9 code=0x7ffc0000
[  542.505248][   T33] audit: type=1326 audit(1755039323.502:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20513 comm="syz.4.5879" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8170d8ebe9 code=0x7ffc0000
[  542.545829][T20516] loop4: detected capacity change from 0 to 4096
[  542.576234][T20517] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  542.607822][T20516] NILFS (loop4): DAT doesn't have a block to manage vblocknr = 648518346341351424
[  542.612617][T20516] NILFS error (device loop4): nilfs_bmap_truncate: broken bmap (inode number=12)
[  542.630715][T20516] Remounting filesystem read-only
[  542.632824][T20516] NILFS (loop4): error -5 truncating bmap (ino=12)
[  542.665105][ T7882] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer
[  543.462644][T20554] loop6: detected capacity change from 0 to 8192
[  543.515698][T18275]  loop6: p1[EZD] p2 p3 p4
[  543.520864][T18275] loop6: p3 start 117772289 is beyond EOD, truncated
[  543.523533][T18275] loop6: p4 size 262144 extends beyond EOD, truncated
[  543.543060][T20554]  loop6: p1[EZD] p2 p3 p4
[  543.549027][T20554] loop6: p3 start 117772289 is beyond EOD, truncated
[  543.551263][T20554] loop6: p4 size 262144 extends beyond EOD, truncated
[  543.761333][T18203] udevd[18203]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  543.768321][T18275] udevd[18275]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory
[  543.768628][T18249] udevd[18249]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory
[  543.994411][T20575] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  544.773022][T20601] loop6: detected capacity change from 0 to 4096
[  544.975843][T20612] loop6: detected capacity change from 0 to 8192
[  545.125984][T20622] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.5911'.
[  545.237289][T20626] loop6: detected capacity change from 0 to 1024
[  545.432916][T20637] loop6: detected capacity change from 0 to 2048
[  545.505814][   T24] usb 5-1: new high-speed USB device number 69 using dummy_hcd
[  545.780859][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  545.789716][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  545.802354][   T24] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  545.805490][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  546.002315][   T24] usb 5-1: config 0 descriptor??
[  546.017230][   T24] hdpvr 5-1:0.0: Could not find bulk-in endpoint
[  546.027600][   T24] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12
[  546.219521][   T24] usb 5-1: USB disconnect, device number 69
[  546.446686][T20666] loop6: detected capacity change from 0 to 1024
[  546.458742][T20666] EXT4-fs: Ignoring removed nomblk_io_submit option
[  546.651880][T20666] loop6: detected capacity change from 0 to 32768
[  547.480284][T20693] overlayfs: conflicting options: nfs_export=on,index=off
[  548.108463][T20719] macvlan3: entered allmulticast mode
[  548.919448][T20739] fuse: Unknown parameter '0xffffffffffffffff0000000000000000000000000000000000000000'
[  548.996644][T20725] loop4: detected capacity change from 0 to 131072
[  549.000186][T20725] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0)
[  549.002790][T20725] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  549.020984][T20725] F2FS-fs (loop4): invalid crc value
[  549.065704][T20725] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  549.074947][T20725] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  549.077596][T20725] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  549.081073][   T24] usb 7-1: new high-speed USB device number 39 using dummy_hcd
[  549.232979][   T24] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  549.237076][   T24] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  549.255377][   T24] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  549.259007][   T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[  549.264132][   T24] usb 7-1: SerialNumber: syz
[  549.482551][   T24] usb 7-1: 0:2 : does not exist
[  549.536030][   T24] usb 7-1: USB disconnect, device number 39
[  549.566188][T18275] udevd[18275]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  550.659613][T20782] loop4: detected capacity change from 0 to 32768
[  550.662362][T20782] XFS: attr2 mount option is deprecated.
[  550.764469][T20773] Process accounting resumed
[  550.817000][T20782] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  550.898753][T20782] XFS (loop4): Ending clean mount
[  550.935844][T20782] XFS (loop4): Quotacheck needed: Please wait.
[  551.039742][T20782] XFS (loop4): Quotacheck: Done.
[  551.082706][   T33] audit: type=1800 audit(1755039332.127:261): pid=20782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5978" name="file1" dev="loop4" ino=9286 res=0 errno=0
[  551.427234][T20786] loop6: detected capacity change from 0 to 131072
[  551.964822][ T7882] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  552.540969][   T33] audit: type=1107 audit(1755039333.588:262): pid=20812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  553.142581][T20827] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5993'.
[  554.190704][T20843] loop4: detected capacity change from 0 to 40427
[  554.201112][T20843] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  554.203646][T20843] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  554.261623][T20843] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  554.265532][T20843] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  554.269249][T20843] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  554.778325][T20875] loop4: detected capacity change from 0 to 32768
[  554.798432][   T33] audit: type=1800 audit(1755039335.839:263): pid=20875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6007" name="file1" dev="loop4" ino=4 res=0 errno=0
[  555.303793][T20875] ERROR: (device loop4): dbAdjCtl: the maximum free buddy is not the old root
[  555.303793][T20875] 
[  555.312123][T20875] ERROR: (device loop4): remounting filesystem as read-only
[  555.549353][T20900] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6024'.
[  555.554206][T20900] netlink: 104 bytes leftover after parsing attributes in process `syz.6.6024'.
[  555.833068][T20904] netem: change failed
[  556.000097][T20908] loop4: detected capacity change from 0 to 4096
[  556.106579][T20908] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  556.396763][ T7882] ntfs3(loop4): ino=9, ntfs_sync_fs failed, -22.
[  556.795505][T20930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6032'.
[  556.811121][T20932] vivid-007: =================  START STATUS  =================
[  556.820945][T20932] vivid-007: Generate PTS: true
[  556.823549][T20932] vivid-007: Generate SCR: true
[  556.836085][T20932] tpg source WxH: 320x240 (Y'CbCr)
[  556.837921][T20932] tpg field: 1
[  556.839133][T20932] tpg crop: (0,0)/320x240
[  556.844694][T20932] tpg compose: (0,0)/320x240
[  556.848857][T20932] tpg colorspace: 8
[  556.850122][T20932] tpg transfer function: 0/0
[  556.851571][T20932] tpg Y'CbCr encoding: 0/0
[  556.852954][T20932] tpg quantization: 0/0
[  556.854289][T20932] tpg RGB range: 0/2
[  556.855480][T20932] vivid-007: ==================  END STATUS  ==================
[  556.878506][T20932] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10)
[  556.880699][T20932] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  556.889001][T20932] vhci_hcd vhci_hcd.0: Device attached
[  557.126097][  T791] usb 41-1: new high-speed USB device number 3 using vhci_hcd
[  557.539558][T20936] vhci_hcd: connection reset by peer
[  557.548676][   T13] vhci_hcd: stop threads
[  557.550662][   T13] vhci_hcd: release socket
[  557.553649][   T13] vhci_hcd: disconnect device
[  558.947046][    T9] usb 5-1: new high-speed USB device number 70 using dummy_hcd
[  558.994297][   T33] audit: type=1326 audit(1755039340.041:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20973 comm="syz.6.6050" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4e5cb8ebe9 code=0x0
[  559.112539][    T9] usb 5-1: config 0 has an invalid interface number: 239 but max is 0
[  559.124308][    T9] usb 5-1: config 0 has no interface number 0
[  559.128498][    T9] usb 5-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73
[  559.131435][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  559.133892][    T9] usb 5-1: Product: syz
[  559.145111][    T9] usb 5-1: Manufacturer: syz
[  559.146581][    T9] usb 5-1: SerialNumber: syz
[  559.153719][    T9] usb 5-1: config 0 descriptor??
[  559.213939][T20983] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6054'.
[  559.491652][   T33] audit: type=1326 audit(1755039340.541:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20999 comm="syz.1.6063" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21acf8ebe9 code=0x7ffc0000
[  559.502982][   T33] audit: type=1326 audit(1755039340.541:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20999 comm="syz.1.6063" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21acf8ebe9 code=0x7ffc0000
[  559.537973][   T33] audit: type=1326 audit(1755039340.541:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20999 comm="syz.1.6063" exe="/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f21acf8ebe9 code=0x7ffc0000
[  559.548360][   T33] audit: type=1326 audit(1755039340.541:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20999 comm="syz.1.6063" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21acf8ebe9 code=0x7ffc0000
[  559.559885][   T33] audit: type=1326 audit(1755039340.541:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20999 comm="syz.1.6063" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21acf8ebe9 code=0x7ffc0000
[  559.573284][   T33] audit: type=1326 audit(1755039340.541:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20999 comm="syz.1.6063" exe="/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f21acf8ebe9 code=0x7ffc0000
[  559.573397][   T33] audit: type=1326 audit(1755039340.541:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20999 comm="syz.1.6063" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21acf8ebe9 code=0x7ffc0000
[  559.785261][    T9] asix 5-1:0.239 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  559.785487][    T9] asix 5-1:0.239: probe with driver asix failed with error -71
[  559.806498][    T9] usb 5-1: USB disconnect, device number 70
[  560.686110][T21010] sock: sock_timestamping_bind_phc: sock not bind to device
[  560.891110][T21012] loop4: detected capacity change from 0 to 4096
[  560.904636][T21012] ntfs3(loop4): It is recommened to use chkdsk.
[  560.911193][T21012] ntfs3(loop4): try to read out of volume at offset 0x3fffffc0c00
[  560.913710][T21012] ntfs3(loop4): try to read out of volume at offset 0x3fffffc0c00
[  560.924181][T21012] ntfs3(loop4): try to read out of volume at offset 0x3fffffc0c00
[  560.929264][T21012] ntfs3(loop4): try to read out of volume at offset 0x3fffffc0c00
[  560.931728][T21012] ntfs3(loop4): try to read out of volume at offset 0x3fffffc1c00
[  560.936302][T21012] ntfs3(loop4): try to read out of volume at offset 0x3fffffc2c00
[  560.938849][T21012] ntfs3(loop4): try to read out of volume at offset 0x3fffffc4c00
[  560.941603][T21012] ntfs3(loop4): try to read out of volume at offset 0x3fffffc8c00
[  560.945368][T21012] ntfs3(loop4): try to read out of volume at offset 0x3fffffd0c00
[  561.093395][T21017] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  561.096813][T21022] overlayfs: workdir and upperdir must be separate subtrees
[  561.112834][T21017] syzkaller0: entered promiscuous mode
[  561.114979][T21017] syzkaller0: entered allmulticast mode
[  561.140152][T21017] tipc: Resetting bearer <eth:syzkaller0>
[  561.149077][T21017] syzkaller0: tun_net_xmit 90
[  561.163065][T21016] tipc: Resetting bearer <eth:syzkaller0>
[  561.191952][T21016] tipc: Disabling bearer <eth:syzkaller0>
[  561.427361][T21045] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6084'.
[  561.475753][T21035] loop4: detected capacity change from 0 to 32768
[  561.628550][T21058] loop6: detected capacity change from 0 to 1024
[  561.631774][T21058] EXT4-fs: Ignoring removed nobh option
[  561.635171][T21058] EXT4-fs: inline encryption not supported
[  561.648191][T21035] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  561.648217][T21035]   allowing incompatible features above 0.0: (unknown version)
[  561.648227][T21035]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  561.713649][T21035] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0
[  561.716274][T21035] bcachefs (loop4): initializing new filesystem
[  561.723508][T21035] bcachefs (loop4): going read-write
[  561.767059][T21069] loop6: detected capacity change from 0 to 128
[  561.771806][T21035] bcachefs (loop4): marking superblocks
[  561.825644][T21035] bcachefs (loop4): initializing freespace
[  561.831783][T21069] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only
[  561.839971][T21069] hpfs: filesystem error: improperly stopped
[  561.842107][T21069] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  561.855499][T21069] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories
[  561.859676][T21069] hpfs: filesystem error: sector(s) 'dir_band' badly placed at 7b318cc2
[  561.879839][T21035] bcachefs (loop4): done initializing freespace
[  561.905697][T21035] bcachefs (loop4): reading snapshots table
[  561.907692][T21035] bcachefs (loop4): reading snapshots done
[  561.971797][T21035] bcachefs (loop4): done starting filesystem
[  562.091432][ T7882] bcachefs (loop4): shutting down
[  562.093075][ T7882] bcachefs (loop4): going read-only
[  562.101001][ T7882] bcachefs (loop4): finished waiting for writes to stop
[  562.105389][ T7882] bcachefs (loop4): flushing journal and stopping allocators, journal seq 2
[  562.190965][ T7882] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 3
[  562.199429][ T7882] bcachefs (loop4): clean shutdown complete, journal seq 4
[  562.205921][ T7882] bcachefs (loop4): marking filesystem clean
[  562.224011][  T791] vhci_hcd: vhci_device speed not set
[  562.269825][ T7882] bcachefs (loop4): shutdown complete
[  562.389563][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  562.392219][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  564.247045][T21120] loop4: detected capacity change from 0 to 4096
[  564.496035][T21132] loop6: detected capacity change from 0 to 512
[  564.498632][T21132] EXT4-fs: Ignoring removed oldalloc option
[  564.640626][T21124] loop4: detected capacity change from 0 to 32768
[  564.917999][T21146] overlayfs: failed to clone upperpath
[  565.281602][T21162] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6132'.
[  565.428298][T21170] loop4: detected capacity change from 0 to 8
[  565.448232][T21170] SQUASHFS error: Unable to read inode 0xa7
[  565.822096][  T791] usb 7-1: new high-speed USB device number 40 using dummy_hcd
[  565.984169][  T791] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  565.988654][  T791] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  565.993706][  T791] usb 7-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00
[  566.000156][  T791] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  566.008629][  T791] usb 7-1: config 0 descriptor??
[  566.023520][T21187] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid
[  566.432872][  T791] elo 0003:04E7:0030.0020: unknown main item tag 0x0
[  566.435658][  T791] elo 0003:04E7:0030.0020: item fetching failed at offset 3/7
[  566.439228][  T791] elo 0003:04E7:0030.0020: parse failed
[  566.446097][  T791] elo 0003:04E7:0030.0020: probe with driver elo failed with error -22
[  566.467540][T21200] loop4: detected capacity change from 0 to 256
[  566.489505][T21200] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d)
[  566.558341][T21202] loop4: detected capacity change from 0 to 512
[  566.570191][T21202] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e028, mo2=0002]
[  566.574548][T21202] System zones: 1-12
[  566.596740][T21202] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 33261: comm syz.4.6150: invalid block
[  566.603676][T21202] EXT4-fs (loop4): Remounting filesystem read-only
[  566.605815][T21202] EXT4-fs (loop4): 1 truncate cleaned up
[  566.608329][T21202] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  566.626878][ T7882] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  566.651762][   T24] usb 7-1: USB disconnect, device number 40
[  566.946377][T21218] loop4: detected capacity change from 0 to 512
[  566.953467][T21218] EXT4-fs (loop4): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0
[  566.957392][T21218] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  566.962352][T21218] EXT4-fs (loop4): Couldn't mount because of unsupported optional features (fffc1829)
[  566.966104][T21218] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities
[  567.026260][T21220] overlayfs: failed to clone upperpath
[  567.265062][T21236] program syz.6.6163 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  567.383790][T21242] program syz.6.6167 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  567.748318][T21248] loop6: detected capacity change from 0 to 32768
[  567.760249][T21248] bcachefs (/dev/loop6): error reading superblock: error opening /dev/loop6: EACCES
[  567.764411][T21248] bcachefs: bch2_fs_get_tree() error: EACCES
[  567.789958][T21250] loop4: detected capacity change from 0 to 512
[  567.811299][T21250] EXT4-fs: inline encryption not supported
[  567.818009][T21250] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  567.866450][T21250] EXT4-fs (loop4): 1 truncate cleaned up
[  567.869397][T21250] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  568.272960][ T7882] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  568.896374][T21273] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6181'.
[  569.497475][T21302] loop4: detected capacity change from 0 to 1024
[  569.533611][T21302] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  569.607126][ T7882] EXT4-fs warning (device loop4): empty_inline_dir:1749: bad inline directory (dir #12) - no `..'
[  569.615097][ T7882] EXT4-fs warning (device loop4): empty_inline_dir:1749: bad inline directory (dir #12) - no `..'
[  569.619387][ T7882] EXT4-fs warning (device loop4): empty_inline_dir:1749: bad inline directory (dir #12) - no `..'
[  569.626880][ T7882] EXT4-fs warning (device loop4): empty_inline_dir:1749: bad inline directory (dir #12) - no `..'
[  569.635042][ T7882] EXT4-fs warning (device loop4): empty_inline_dir:1749: bad inline directory (dir #12) - no `..'
[  569.638813][ T7882] EXT4-fs warning (device loop4): empty_inline_dir:1749: bad inline directory (dir #12) - no `..'
[  569.639536][T21298] loop6: detected capacity change from 0 to 32768
[  569.644576][ T7882] EXT4-fs warning (device loop4): empty_inline_dir:1749: bad inline directory (dir #12) - no `..'
[  569.646461][T21298] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.6191 (21298)
[  569.653856][T21298] BTRFS error: failed to open device for path /dev/loop6 with flags 0x23: -13
[  569.659198][ T7882] EXT4-fs warning (device loop4): empty_inline_dir:1749: bad inline directory (dir #12) - no `..'
[  569.676737][ T7882] EXT4-fs warning (device loop4): empty_inline_dir:1749: bad inline directory (dir #12) - no `..'
[  569.688791][ T7882] EXT4-fs warning (device loop4): empty_inline_dir:1749: bad inline directory (dir #12) - no `..'
[  569.957276][T10615] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  570.037976][   T10] usb 7-1: new high-speed USB device number 41 using dummy_hcd
[  570.204885][   T10] usb 7-1: config 0 has an invalid interface number: 69 but max is 0
[  570.207469][   T10] usb 7-1: config 0 has no interface number 0
[  570.220614][   T10] usb 7-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[  570.223784][   T10] usb 7-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  570.233218][ T5911] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  570.237068][ T5911] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  570.263604][   T10] usb 7-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  570.281976][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  570.284830][   T10] usb 7-1: Product: syz
[  570.286123][   T10] usb 7-1: Manufacturer: syz
[  570.287585][   T10] usb 7-1: SerialNumber: syz
[  570.301428][   T10] usb 7-1: config 0 descriptor??
[  570.304876][T21308] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  570.317610][ T5911] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  570.329861][ T5911] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  570.340309][   T10] cyberjack 7-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  570.350194][   T10] usb 7-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  570.405195][ T5911] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  570.414124][ T5911] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  570.520769][ T5911] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  570.523973][ T5911] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  570.625030][    C0] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22
[  570.922337][   T10] usb 7-1: USB disconnect, device number 41
[  571.006652][   T10] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  571.060254][   T10] cyberjack 7-1:0.69: device disconnected
[  571.165758][ T5236] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  571.180284][ T5236] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  571.183651][ T5236] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  571.192517][ T5236] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  571.195907][ T5236] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  571.243037][T21316] lo speed is unknown, defaulting to 1000
[  571.402933][ T5911] bridge_slave_0: left allmulticast mode
[  571.404793][ T5911] bridge_slave_0: left promiscuous mode
[  571.406649][ T5911] bridge0: port 1(bridge_slave_0) entered disabled state
[  571.513926][T21325] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  572.012320][    C0] vkms_vblank_simulate: vblank timer overrun
[  572.191917][T21333] loop6: detected capacity change from 0 to 32768
[  572.692771][ T5911] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  572.696214][ T5911] bond_slave_0: left promiscuous mode
[  572.700723][ T5911] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  572.705261][ T5911] bond_slave_1: left promiscuous mode
[  572.709933][ T5911] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  572.723568][ T5911] bridge_slave_1: left promiscuous mode
[  572.726141][ T5911] bond0 (unregistering): Released all slaves
[  573.057303][ T5911] bond1 (unregistering): Released all slaves
[  573.066381][ T5911] bond2 (unregistering): Released all slaves
[  573.259545][T17922] Bluetooth: hci2: command tx timeout
[  573.501530][ T5911] : left promiscuous mode
[  573.572475][T21316] chnl_net:caif_netlink_parms(): no params data found
[  573.622075][ T5911] tipc: Disabling bearer <eth:team0>
[  573.624209][ T5911] tipc: Left network mode
[  573.867310][T21316] bridge0: port 1(bridge_slave_0) entered blocking state
[  573.871128][T21316] bridge0: port 1(bridge_slave_0) entered disabled state
[  573.874373][T21316] bridge_slave_0: entered allmulticast mode
[  573.882899][T21316] bridge_slave_0: entered promiscuous mode
[  573.889486][T21316] bridge0: port 2(bridge_slave_1) entered blocking state
[  573.893883][T21316] bridge0: port 2(bridge_slave_1) entered disabled state
[  573.897177][T21316] bridge_slave_1: entered allmulticast mode
[  573.982406][T21316] bridge_slave_1: entered promiscuous mode
[  574.085390][T21316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  574.100025][T21316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  574.209437][T21316] team0: Port device team_slave_0 added
[  574.213783][T21316] team0: Port device team_slave_1 added
[  574.317103][T21316] batman_adv: batadv0: Adding interface: batadv_slave_0
[  574.321753][T21316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  574.332179][T21316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  574.421749][T21375] loop6: detected capacity change from 0 to 32768
[  574.425147][T21316] batman_adv: batadv0: Adding interface: batadv_slave_1
[  574.434912][T21316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  574.449362][T21316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  574.571834][T21316] hsr_slave_0: entered promiscuous mode
[  574.575606][T21316] hsr_slave_1: entered promiscuous mode
[  574.582760][T21316] debugfs: 'hsr0' already exists in 'hsr'
[  574.585049][T21316] Cannot create hsr debugfs directory
[  574.716769][ T5911] mac80211_hwsim hwsim10 wlan0 (unregistering): left promiscuous mode
[  574.978432][T21375] syz.6.6218: attempt to access beyond end of device
[  574.978432][T21375] loop6: rw=0, sector=0, nr_sectors = 1 limit=0
[  575.173866][ T5911] batadv_slave_0: left promiscuous mode
[  575.223038][T21397] loop6: detected capacity change from 0 to 256
[  575.243730][ T5911] hsr_slave_0: left promiscuous mode
[  575.246685][ T5911] hsr_slave_1: left promiscuous mode
[  575.250743][T21397] exfat: Deprecated parameter 'utf8'
[  575.254877][ T5911] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  575.267461][ T5911] batman_adv: batadv0: Removing interface: batadv_slave_0
[  575.329032][ T5911] veth1_macvtap: left promiscuous mode
[  575.333401][ T5911] veth0_macvtap: left promiscuous mode
[  575.336180][ T5911] veth0_vlan: left promiscuous mode
[  575.341653][T17922] Bluetooth: hci2: command tx timeout
[  575.484512][ T5911] pim6reg (unregistering): left allmulticast mode
[  575.994881][    C0] vkms_vblank_simulate: vblank timer overrun
[  576.094014][ T5911] team0 (unregistering): Port device team_slave_1 removed
[  576.170229][ T5911] team0 (unregistering): Port device team_slave_0 removed
[  576.376211][    C0] vkms_vblank_simulate: vblank timer overrun
[  576.559317][    C0] vkms_vblank_simulate: vblank timer overrun
[  576.708817][    C0] vkms_vblank_simulate: vblank timer overrun
[  577.093570][T21400] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[  577.122475][T21316] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  577.153542][T21316] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  577.203513][T21316] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  577.212679][T21316] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  577.416795][T17922] Bluetooth: hci2: command tx timeout
[  577.419603][ T5911] IPVS: stop unused estimator thread 0...
[  577.455313][T21316] 8021q: adding VLAN 0 to HW filter on device bond0
[  577.477273][T21316] 8021q: adding VLAN 0 to HW filter on device team0
[  577.483680][T19087] bridge0: port 1(bridge_slave_0) entered blocking state
[  577.486076][T19087] bridge0: port 1(bridge_slave_0) entered forwarding state
[  577.500127][T19087] bridge0: port 2(bridge_slave_1) entered blocking state
[  577.502870][T19087] bridge0: port 2(bridge_slave_1) entered forwarding state
[  577.771096][T21316] 8021q: adding VLAN 0 to HW filter on device batadv0
[  578.060765][T21316] veth0_vlan: entered promiscuous mode
[  578.097220][T21316] veth1_vlan: entered promiscuous mode
[  578.129033][T21316] veth0_macvtap: entered promiscuous mode
[  578.133706][T21316] veth1_macvtap: entered promiscuous mode
[  578.149609][T21316] batman_adv: batadv0: Interface activated: batadv_slave_0
[  578.161276][T21316] batman_adv: batadv0: Interface activated: batadv_slave_1
[  578.172907][ T5911] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  578.178142][ T5911] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  578.192306][ T5911] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  578.217578][ T5911] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  578.288902][T21449] loop6: detected capacity change from 0 to 1024
[  578.403127][ T3570] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  578.421250][ T3570] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  578.447925][ T3062] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  578.450469][ T3062] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  578.632518][T21454] loop7: detected capacity change from 0 to 4096
[  578.749706][T21462] gre3: entered promiscuous mode
[  578.750191][T21465] netlink: 'syz.6.6236': attribute type 1 has an invalid length.
[  578.751738][T21462] gre3: entered allmulticast mode
[  578.754892][T21465] netlink: 184 bytes leftover after parsing attributes in process `syz.6.6236'.
[  578.896886][T21468] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6237'.
[  579.058948][T21472] loop6: detected capacity change from 0 to 4096
[  579.499833][T17922] Bluetooth: hci2: command tx timeout
[  579.599793][T21510] loop7: detected capacity change from 0 to 2048
[  579.663456][T21516] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  580.505734][T21536] netlink: 'syz.1.6258': attribute type 7 has an invalid length.
[  580.508367][T21536] netlink: 'syz.1.6258': attribute type 8 has an invalid length.
[  580.620579][T21542] xt_socket: unknown flags 0xd0
[  580.944282][   T24] usb 7-1: new high-speed USB device number 42 using dummy_hcd
[  581.094672][   T24] usb 7-1: Using ep0 maxpacket: 8
[  581.099092][   T24] usb 7-1: unable to get BOS descriptor or descriptor too short
[  581.103429][   T24] usb 7-1: config 9 has an invalid interface number: 229 but max is 0
[  581.107055][   T24] usb 7-1: config 9 has an invalid interface number: 255 but max is 0
[  581.110282][   T24] usb 7-1: config 9 has 2 interfaces, different from the descriptor's value: 1
[  581.114010][   T24] usb 7-1: config 9 has no interface number 0
[  581.116433][   T24] usb 7-1: config 9 has no interface number 1
[  581.118923][   T24] usb 7-1: config 9 interface 229 altsetting 112 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  581.124481][   T24] usb 7-1: config 9 interface 229 has no altsetting 0
[  581.129367][   T24] usb 7-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice=12.34
[  581.132924][   T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  581.137629][   T24] usb 7-1: Product: syz
[  581.139407][   T24] usb 7-1: Manufacturer: syz
[  581.141321][   T24] usb 7-1: SerialNumber: syz
[  581.368172][   T24] hub 7-1:9.229: Invalid hub with more than one config or interface
[  581.371302][   T24] hub 7-1:9.229: probe with driver hub failed with error -22
[  581.394635][   T24] usb 7-1: USB disconnect, device number 42
[  581.426908][T18275] udevd[18275]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:9.229/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  581.542945][   T33] audit: type=1326 audit(1755039362.602:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21547 comm="syz.1.6264" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21acf8ebe9 code=0x7fc00000
[  582.114797][T21582] 9pnet_fd: Insufficient options for proto=fd
[  583.693846][T21618] loop6: detected capacity change from 0 to 32768
[  583.809067][T21620] loop6: detected capacity change from 0 to 1024
[  583.820597][T21620] EXT4-fs: Ignoring removed orlov option
[  583.838113][T21620] EXT4-fs: Ignoring removed nomblk_io_submit option
[  583.910981][T21623] loop6: detected capacity change from 0 to 8
[  583.933600][T21623] SQUASHFS error: zstd decompression error: 10
[  583.936670][T21623] SQUASHFS error: zstd decompression failed, data probably corrupt
[  583.941226][T21623] SQUASHFS error: Failed to read block 0x60: -5
[  583.944853][T21623] SQUASHFS error: zstd decompression error: 10
[  583.946942][T21623] SQUASHFS error: zstd decompression failed, data probably corrupt
[  583.949468][T21623] SQUASHFS error: Failed to read block 0x60: -5
[  585.002817][T21640] 9p: Unknown uid 00000000004294967295
[  585.192034][T15243] usb 7-1: new high-speed USB device number 43 using dummy_hcd
[  585.346637][T15243] usb 7-1: Using ep0 maxpacket: 32
[  585.360456][T15243] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  585.372788][T15243] usb 7-1: New USB device found, idVendor=0c72, idProduct=0011, bcdDevice= 9.75
[  585.392205][T15243] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  585.395247][T15243] usb 7-1: Product: syz
[  585.396831][T15243] usb 7-1: Manufacturer: syz
[  585.398568][T15243] usb 7-1: SerialNumber: syz
[  585.419724][T15243] usb 7-1: config 0 descriptor??
[  585.664310][   T24] usb 7-1: USB disconnect, device number 43
[  585.948775][T21681] loop7: detected capacity change from 0 to 4096
[  586.187789][T21697] overlayfs: failed to clone upperpath
[  586.258974][T21701] loop7: detected capacity change from 0 to 1024
[  586.271198][T21701] hfsplus: bad catalog entry type
[  586.301194][ T3570] hfsplus: b-tree write err: -5, ino 4
[  586.855180][T21712] loop7: detected capacity change from 0 to 4096
[  586.907108][T21712] ntfs3(loop7): Different NTFS sector size (2048) and media sector size (512).
[  586.921237][T21712] ntfs3(loop7): Failed to load $MFTMirr (-22).
[  587.283671][T21731] loop7: detected capacity change from 0 to 512
[  587.289283][T21731] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  587.309595][T21731] EXT4-fs (loop7): 1 truncate cleaned up
[  587.315867][T21731] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  587.360693][T21316] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  587.387238][    C0] vkms_vblank_simulate: vblank timer overrun
[  587.493892][T21747] loop7: detected capacity change from 0 to 64
[  588.122551][   T24] usb 7-1: new full-speed USB device number 44 using dummy_hcd
[  588.274617][   T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  588.278040][   T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  588.281417][   T24] usb 7-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00
[  588.285134][   T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  588.299594][   T24] usb 7-1: config 0 descriptor??
[  588.306425][T21758] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  588.765770][   T24] hid-rmi 0003:0461:4E72.0021: item fetching failed at offset 2/5
[  588.769332][   T24] hid-rmi 0003:0461:4E72.0021: parse failed
[  588.771718][   T24] hid-rmi 0003:0461:4E72.0021: probe with driver hid-rmi failed with error -22
[  588.954517][T21772] netlink: 'syz.7.6348': attribute type 2 has an invalid length.
[  588.963179][T21772] netlink: 'syz.7.6348': attribute type 1 has an invalid length.
[  588.970885][T21319] usb 7-1: USB disconnect, device number 44
[  589.129914][T21780] netlink: 'syz.7.6352': attribute type 1 has an invalid length.
[  589.531598][T21794] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.6359'.
[  590.101956][ T5858] usb 7-1: new high-speed USB device number 45 using dummy_hcd
[  590.267369][ T5858] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88
[  590.271893][ T5858] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  590.276093][ T5858] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7
[  590.280439][ T5858] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  590.288920][ T5858] usb 7-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[  590.292906][ T5858] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  590.296060][ T5858] usb 7-1: Product: syz
[  590.297747][ T5858] usb 7-1: Manufacturer: syz
[  590.299646][ T5858] usb 7-1: SerialNumber: syz
[  590.305353][ T5858] usb 7-1: config 0 descriptor??
[  590.311105][ T5858] iguanair 7-1:0.0: failed to get version
[  590.317567][ T5858] iguanair 7-1:0.0: probe with driver iguanair failed with error -90
[  590.523760][ T2203] usb 7-1: USB disconnect, device number 45
[  591.103914][T21822] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6368'.
[  591.327919][T21838] loop6: detected capacity change from 0 to 128
[  592.642280][T21319] usb 7-1: new high-speed USB device number 46 using dummy_hcd
[  592.803463][T21319] usb 7-1: Using ep0 maxpacket: 16
[  592.807890][T21319] usb 7-1: config 0 has an invalid interface number: 126 but max is 0
[  592.811146][T21319] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  592.820166][T21319] usb 7-1: config 0 has no interface number 0
[  592.823807][T21319] usb 7-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87
[  592.828695][T21319] usb 7-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024
[  592.836611][T21319] usb 7-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64
[  592.841422][T21319] usb 7-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 147
[  592.845743][T21319] usb 7-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  592.851270][T21319] usb 7-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88
[  592.858345][T21319] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  592.865140][T21319] usb 7-1: config 0 descriptor??
[  592.868071][T21890] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  592.887214][T21890] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  592.896101][T21319] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[  593.148180][T21319] usb 7-1: USB disconnect, device number 46
[  594.050513][T21900] loop7: detected capacity change from 0 to 262144
[  594.095362][T21900] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  594.099755][T21900] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  594.301169][T21934] loop6: detected capacity change from 0 to 128
[  594.585019][T21941] loop6: detected capacity change from 0 to 1024
[  594.714821][T21947] netlink: 'syz.6.6408': attribute type 1 has an invalid length.
[  594.766035][T21949] overlayfs: failed to resolve 'W': -2
[  595.017261][T15243] Process accounting resumed
[  595.095611][T21960] netlink: 'syz.7.6414': attribute type 13 has an invalid length.
[  595.474968][T21977] loop6: detected capacity change from 0 to 4096
[  595.594088][T21977] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512).
[  595.654000][T21977] ntfs3(loop6): ino=19, mi_enum_attr
[  597.152226][T22016] netlink: 'syz.1.6440': attribute type 12 has an invalid length.
[  597.155585][T22016] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6440'.
[  597.179556][T22016] netlink: 'syz.1.6440': attribute type 12 has an invalid length.
[  597.199235][T22016] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6440'.
[  598.630709][T22041] input: syz1 as /devices/virtual/input/input29
[  599.134382][T22050] loop7: detected capacity change from 0 to 128
[  599.179742][T22050] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  599.191748][T22050] ext4 filesystem being mounted at /78/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  600.715221][T21316] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  600.982421][T22064] loop6: detected capacity change from 0 to 32768
[  601.642111][   T10] usb 7-1: new high-speed USB device number 47 using dummy_hcd
[  601.802338][   T10] usb 7-1: Using ep0 maxpacket: 16
[  602.167530][   T10] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  602.173258][   T10] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  602.180034][   T10] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  602.184176][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  602.187370][   T10] usb 7-1: Product: syz
[  602.189068][   T10] usb 7-1: Manufacturer: syz
[  602.190965][   T10] usb 7-1: SerialNumber: syz
[  602.407661][   T10] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  602.426516][   T10] usb 7-1: USB disconnect, device number 47
[  602.450459][T18275] udevd[18275]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  602.968007][T22113] sch_tbf: burst 19869 is lower than device lo mtu (65499) !
[  603.187968][T22123] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  603.514094][T15243] usb 7-1: new high-speed USB device number 48 using dummy_hcd
[  603.662515][T15243] usb 7-1: Using ep0 maxpacket: 32
[  603.668226][T15243] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 1024, setting to 64
[  603.675702][T15243] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16
[  603.679378][T15243] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  603.692233][T15243] usb 7-1: Product: syz
[  603.695606][T15243] usb 7-1: Manufacturer: syz
[  603.697574][T15243] usb 7-1: SerialNumber: syz
[  603.703379][T15243] usb 7-1: config 0 descriptor??
[  603.717575][T15243] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  603.916003][ T5877] usb 7-1: Failed to submit usb control message: -71
[  603.916711][T21319] usb 7-1: USB disconnect, device number 48
[  603.929807][ T5877] usb 7-1: unable to send the bmi data to the device: -71
[  603.933301][ T5877] usb 7-1: unable to get target info from device
[  603.935882][ T5877] usb 7-1: could not get target info (-71)
[  603.938381][ T5877] usb 7-1: could not probe fw (-71)
[  604.016661][   T33] audit: type=1800 audit(2000000018.820:273): pid=22162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6502" name="file1" dev="tmpfs" ino=14230 res=0 errno=0
[  604.814679][T22191] netlink: 'syz.6.6515': attribute type 4 has an invalid length.
[  605.843889][T22203] delete_channel: no stack
[  606.749298][T22250] loop6: detected capacity change from 0 to 1024
[  606.754735][T22252] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6543'.
[  606.761029][T22250] EXT4-fs: Ignoring removed bh option
[  606.764784][T22250] EXT4-fs: inline encryption not supported
[  607.201693][   T33] audit: type=1326 audit(2000000021.840:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22255 comm="syz.1.6545" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21acf8ebe9 code=0x7ffc0000
[  607.212642][   T33] audit: type=1326 audit(2000000021.840:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22255 comm="syz.1.6545" exe="/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f21acf8ebe9 code=0x7ffc0000
[  607.219336][   T33] audit: type=1326 audit(2000000021.840:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22255 comm="syz.1.6545" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21acf8ebe9 code=0x7ffc0000
[  607.226304][   T33] audit: type=1326 audit(2000000021.850:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22255 comm="syz.1.6545" exe="/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f21acf8ebe9 code=0x7ffc0000
[  607.233450][   T33] audit: type=1326 audit(2000000021.850:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22255 comm="syz.1.6545" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21acf8ebe9 code=0x7ffc0000
[  607.240480][   T33] audit: type=1326 audit(2000000021.850:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22255 comm="syz.1.6545" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f21acf8ebe9 code=0x7ffc0000
[  607.257769][   T33] audit: type=1326 audit(2000000021.850:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22255 comm="syz.1.6545" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21acf8ebe9 code=0x7ffc0000
[  607.286172][   T33] audit: type=1326 audit(2000000021.850:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22255 comm="syz.1.6545" exe="/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f21acf8ebe9 code=0x7ffc0000
[  607.306140][   T33] audit: type=1326 audit(2000000021.850:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22255 comm="syz.1.6545" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21acf8ebe9 code=0x7ffc0000
[  607.319981][T22267] loop7: detected capacity change from 0 to 128
[  607.606901][T22279] pim6reg1: entered allmulticast mode
[  607.975593][T22287] loop7: detected capacity change from 0 to 8192
[  608.249191][T22294] loop7: detected capacity change from 0 to 128
[  609.133814][T22316] cgroup: fork rejected by pids controller in /syz7
[  610.357949][ T5877] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  610.559796][ T5877] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  610.641510][ T5236] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  610.665113][ T5877] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  610.670259][ T5236] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  610.681483][ T5236] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  610.686224][ T5236] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  610.696598][ T5236] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  610.755504][T22337] lo speed is unknown, defaulting to 1000
[  610.763729][T22341] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  610.815713][ T5877] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  610.934362][T22337] chnl_net:caif_netlink_parms(): no params data found
[  611.129059][T22337] bridge0: port 1(bridge_slave_0) entered blocking state
[  611.131410][T22337] bridge0: port 1(bridge_slave_0) entered disabled state
[  611.134262][T22337] bridge_slave_0: entered allmulticast mode
[  611.137204][T22337] bridge_slave_0: entered promiscuous mode
[  611.140501][T22337] bridge0: port 2(bridge_slave_1) entered blocking state
[  611.144655][T22337] bridge0: port 2(bridge_slave_1) entered disabled state
[  611.146955][T22337] bridge_slave_1: entered allmulticast mode
[  611.149715][T22337] bridge_slave_1: entered promiscuous mode
[  611.166663][ T5877] bridge_slave_1: left allmulticast mode
[  611.168848][ T5877] bridge_slave_1: left promiscuous mode
[  611.170718][ T5877] bridge0: port 2(bridge_slave_1) entered disabled state
[  611.183968][ T5877] bridge_slave_0: left allmulticast mode
[  611.185760][ T5877] bridge_slave_0: left promiscuous mode
[  611.187733][ T5877] bridge0: port 1(bridge_slave_0) entered disabled state
[  611.351972][  T791] usb 7-1: new full-speed USB device number 49 using dummy_hcd
[  611.547524][  T791] usb 7-1: config 0 has an invalid interface number: 20 but max is 0
[  611.555304][  T791] usb 7-1: config 0 has no interface number 0
[  611.561029][  T791] usb 7-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  611.586478][  T791] usb 7-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00
[  611.590368][  T791] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  611.593597][  T791] usb 7-1: Product: syz
[  611.595481][  T791] usb 7-1: Manufacturer: syz
[  611.597410][  T791] usb 7-1: SerialNumber: syz
[  611.620560][  T791] usb 7-1: config 0 descriptor??
[  611.625302][T22355] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  611.638698][  T791] usb-storage 7-1:0.20: USB Mass Storage device detected
[  611.691038][  T791] usb-storage 7-1:0.20: Quirks match for vid 04e6 pid 000b: 4
[  611.900496][  T791] scsi host6: usb-storage 7-1:0.20
[  612.003911][ T5877] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  612.010137][ T5877] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  612.015685][ T5877] bond0 (unregistering): Released all slaves
[  612.028309][ T5877] bond1 (unregistering): Released all slaves
[  612.070612][T22337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  612.080247][T22337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  612.139187][   T10] usb 7-1: USB disconnect, device number 49
[  612.197667][T22337] team0: Port device team_slave_0 added
[  612.214226][T22337] team0: Port device team_slave_1 added
[  612.342784][T22337] batman_adv: batadv0: Adding interface: batadv_slave_0
[  612.345706][T22337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  612.364008][T22337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  612.432892][T22337] batman_adv: batadv0: Adding interface: batadv_slave_1
[  612.435594][T22337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  612.456498][T22337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  612.479336][ T5877] hsr_slave_0: left promiscuous mode
[  612.490704][ T5877] hsr_slave_1: left promiscuous mode
[  612.503048][ T5877] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  612.508932][ T5877] batman_adv: batadv0: Removing interface: batadv_slave_0
[  612.525444][ T5877] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  612.528507][ T5877] batman_adv: batadv0: Removing interface: batadv_slave_1
[  612.551280][ T5877] veth1_macvtap: left promiscuous mode
[  612.554189][ T5877] veth0_macvtap: left promiscuous mode
[  612.556622][ T5877] veth1_vlan: left promiscuous mode
[  612.558850][ T5877] veth0_vlan: left promiscuous mode
[  612.782036][ T5236] Bluetooth: hci2: command tx timeout
[  613.124118][    C0] vkms_vblank_simulate: vblank timer overrun
[  613.547169][ T5877] team0 (unregistering): Port device team_slave_1 removed
[  613.640015][ T5877] team0 (unregistering): Port device team_slave_0 removed
[  614.572928][T22381] tipc: Cannot configure node identity twice
[  614.609271][T22337] hsr_slave_0: entered promiscuous mode
[  614.633811][T22337] hsr_slave_1: entered promiscuous mode
[  614.637087][T22337] debugfs: 'hsr0' already exists in 'hsr'
[  614.647843][T22337] Cannot create hsr debugfs directory
[  614.654403][T22385] netlink: 'syz.1.6597': attribute type 4 has an invalid length.
[  614.862562][ T5236] Bluetooth: hci2: command tx timeout
[  615.911472][T22337] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  615.935038][T22337] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  615.982207][T22337] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  615.996657][T22337] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  616.536966][T22337] 8021q: adding VLAN 0 to HW filter on device bond0
[  616.719035][T22337] 8021q: adding VLAN 0 to HW filter on device team0
[  616.756135][ T3570] bridge0: port 1(bridge_slave_0) entered blocking state
[  616.759039][ T3570] bridge0: port 1(bridge_slave_0) entered forwarding state
[  616.820950][ T3570] bridge0: port 2(bridge_slave_1) entered blocking state
[  616.823297][ T3570] bridge0: port 2(bridge_slave_1) entered forwarding state
[  616.932687][ T5236] Bluetooth: hci2: command tx timeout
[  616.964909][T22337] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  617.166764][T22337] 8021q: adding VLAN 0 to HW filter on device batadv0
[  617.357450][T22477] netlink: 51 bytes leftover after parsing attributes in process `syz.1.6618'.
[  617.440457][T22337] veth0_vlan: entered promiscuous mode
[  617.449150][T22337] veth1_vlan: entered promiscuous mode
[  617.480400][T22337] veth0_macvtap: entered promiscuous mode
[  617.490343][T22337] veth1_macvtap: entered promiscuous mode
[  617.513778][T22337] batman_adv: batadv0: Interface activated: batadv_slave_0
[  617.524543][T22337] batman_adv: batadv0: Interface activated: batadv_slave_1
[  617.533695][ T5911] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  617.537728][ T5877] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  617.551168][ T5877] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  617.555873][ T5877] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  617.668854][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  617.671779][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  617.698919][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  617.701467][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  618.299470][T22505] netlink: 'syz.6.6629': attribute type 30 has an invalid length.
[  618.993331][T22521] Bluetooth: MGMT ver 1.23
[  619.013610][T17922] Bluetooth: hci2: command tx timeout
[  619.077722][T22525] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6638'.
[  620.305074][T22564] netlink: 196 bytes leftover after parsing attributes in process `syz.6.6655'.
[  620.518010][T22571] cgroup: No subsys list or none specified
[  621.012868][ T5236] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  621.092036][ T5236] Bluetooth: hci2: command 0x0401 tx timeout
[  621.671136][T22593] vlan2: entered allmulticast mode
[  621.708958][T22597] input: syz0 as /devices/virtual/input/input30
[  622.097566][T22605] loop6: detected capacity change from 0 to 32768
[  622.480738][T22625] loop6: detected capacity change from 0 to 32768
[  622.639622][T22627] batman_adv: batadv0: Adding interface: dummy0
[  622.641766][T22627] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  622.650820][T22627] batman_adv: batadv0: Interface activated: dummy0
[  623.818016][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  623.820690][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  624.079090][T22644] netlink: 'syz.1.6694': attribute type 41 has an invalid length.
[  625.072124][   T33] kauditd_printk_skb: 34 callbacks suppressed
[  625.072138][   T33] audit: type=1326 audit(2000000039.780:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22679 comm="syz.1.6712" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f21acf8ebe9 code=0x0
[  625.116480][T22689] netlink: 256 bytes leftover after parsing attributes in process `syz.1.6715'.
[  625.405734][T22694] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6718'.
[  625.910394][T22704] netlink: 'syz.1.6722': attribute type 27 has an invalid length.
[  626.894172][T22724] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6731'.
[  626.908547][T22724] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6731'.
[  626.919903][T22724] bridge0: port 1(bridge_slave_0) entered disabled state
[  626.980926][T22724] bridge_slave_0 (unregistering): left allmulticast mode
[  626.988941][T22724] bridge_slave_0 (unregistering): left promiscuous mode
[  626.993243][T22724] bridge0: port 1(bridge_slave_0) entered disabled state
[  627.258401][T22740] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6739'.
[  627.414461][T22753] loop7: detected capacity change from 0 to 1024
[  627.450797][T22753] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  627.602389][   T33] audit: type=1800 audit(2000000042.400:318): pid=22768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.6745" name="file1" dev="loop7" ino=15 res=0 errno=0
[  627.629257][T22763] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4183: comm syz.7.6745: Allocating blocks 497-513 which overlap fs metadata
[  627.710650][T22763] EXT4-fs (loop7): pa ffff88810599cbc8: logic 128, phys. 385, len 8
[  627.713949][T22763] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1
[  627.719242][T22763] EXT4-fs error (device loop7): mb_free_blocks:2017: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt.
[  627.943482][T22783] loop6: detected capacity change from 0 to 256
[  628.056099][T22787] netlink: 'syz.6.6759': attribute type 12 has an invalid length.
[  628.059327][T22787] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6759'.
[  628.113478][T22789] loop6: detected capacity change from 0 to 512
[  628.491954][T21319] usb 7-1: new high-speed USB device number 50 using dummy_hcd
[  628.649725][T21319] usb 7-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=a9.25
[  628.654989][T21319] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  628.659473][T21319] usb 7-1: Product: syz
[  628.661314][T21319] usb 7-1: Manufacturer: syz
[  628.663286][T21319] usb 7-1: SerialNumber: syz
[  628.673243][T21319] usb 7-1: config 0 descriptor??
[  628.895553][T21319] usb 7-1: USB disconnect, device number 50
[  629.507681][T22807] netlink: 830 bytes leftover after parsing attributes in process `syz.6.6768'.
[  630.242314][T22827] ip_vti0: Master is either lo or non-ether device
[  630.450492][T22337] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  630.459091][T22837] IPVS: Error connecting to the multicast addr
[  630.692402][  T791] usb 7-1: new high-speed USB device number 51 using dummy_hcd
[  630.841927][  T791] usb 7-1: Using ep0 maxpacket: 16
[  630.845247][  T791] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  630.848707][  T791] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  630.853851][  T791] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  630.867665][  T791] usb 7-1: config 0 descriptor??
[  631.398451][T22892] loop7: detected capacity change from 0 to 256
[  631.514114][  T791] mcp2221 0003:04D8:00DD.0022: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0
[  631.759513][ T2203] usb 7-1: USB disconnect, device number 51
[  632.694087][T22921] bridge0: entered promiscuous mode
[  632.908157][T22931] loop7: detected capacity change from 0 to 512
[  632.913859][T22933] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6827'.
[  632.953034][T22931] EXT4-fs error (device loop7): ext4_ext_check_inode:523: inode #3: comm syz.7.6825: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0)
[  632.964362][T22931] EXT4-fs error (device loop7): ext4_quota_enable:7127: comm syz.7.6825: Bad quota inode: 3, type: 0
[  632.967937][T22931] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  632.973012][T22931] EXT4-fs (loop7): mount failed
[  633.248338][T22957] loop7: detected capacity change from 0 to 256
[  633.266545][T22957] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001034b, chksum : 0x6322ccb6, utbl_chksum : 0xe619d30d)
[  633.385233][T22968] tmpfs: Bad value for 'mpol'
[  633.545821][T22975] tipc: Started in network mode
[  633.547383][T22975] tipc: Node identity ac14140f, cluster identity 4711
[  633.549745][T22975] tipc: New replicast peer: 255.255.255.255
[  633.554772][T22975] tipc: Enabled bearer <udp:syz2>, priority 10
[  633.780004][T22979] loop6: detected capacity change from 0 to 128
[  634.685126][  T791] tipc: Node number set to 2886997007
[  634.795911][T22989] loop7: detected capacity change from 0 to 32768
[  634.822101][T22989] XFS (loop7): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  634.850146][T22989] XFS (loop7): Ending clean mount
[  634.851593][T23008] 8021q: adding VLAN 0 to HW filter on device team0
[  634.864033][T23008] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  634.868766][   T33] audit: type=1800 audit(2000000049.670:319): pid=22989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.6849" name="file1" dev="loop7" ino=6150 res=0 errno=0
[  634.897183][T22337] XFS (loop7): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  635.149258][T23024] loop7: detected capacity change from 0 to 2048
[  635.169547][T23024] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024)
[  635.187281][T23027] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  635.330484][T23036] netlink: 'syz.7.6868': attribute type 1 has an invalid length.
[  635.552793][T15243] usb 7-1: new high-speed USB device number 52 using dummy_hcd
[  635.702051][T15243] usb 7-1: Using ep0 maxpacket: 8
[  635.707472][T15243] usb 7-1: unable to get BOS descriptor or descriptor too short
[  635.714704][T15243] usb 7-1: too many endpoints for config 4 interface 0 altsetting 102: 65, using maximum allowed: 30
[  635.718352][T15243] usb 7-1: config 4 interface 0 altsetting 102 has 0 endpoint descriptors, different from the interface descriptor's value: 65
[  635.722889][T15243] usb 7-1: config 4 interface 0 has no altsetting 0
[  635.729803][T15243] usb 7-1: string descriptor 0 read error: -22
[  635.732100][T15243] usb 7-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  635.735056][T15243] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  635.742778][T15243] usb 7-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  635.751286][T15243] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  635.754779][T15243] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  635.757232][T15243] usb 7-1: media controller created
[  635.789780][T15243] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  635.837325][T23063] loop7: detected capacity change from 0 to 128
[  635.854255][T23063] affs: No valid root block on device loop7
[  635.974949][T15243] zl10353_read_register: readreg error (reg=127, ret==0)
[  636.037201][T15243] usb 7-1: USB disconnect, device number 52
[  636.079136][T23074] netlink: 112 bytes leftover after parsing attributes in process `syz.1.6886'.
[  636.539734][T23081] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  636.869121][T23096] netlink: 'syz.7.6896': attribute type 1 has an invalid length.
[  636.873467][T23096] netlink: 220 bytes leftover after parsing attributes in process `syz.7.6896'.
[  636.877243][T23096] netlink: 'syz.7.6896': attribute type 1 has an invalid length.
[  637.052556][T23104] bond0: entered allmulticast mode
[  637.218740][T23114] loop7: detected capacity change from 0 to 128
[  637.236223][T23114] FAT-fs (loop7): Invalid FSINFO signature: 0x41075252, 0x80417272 (sector = 1)
[  637.257433][T23114] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00070003)
[  637.269004][T23114] FAT-fs (loop7): Filesystem has been set read-only
[  637.878901][T23150] netlink: 5636 bytes leftover after parsing attributes in process `syz.6.6921'.
[  637.966412][   T33] audit: type=1326 audit(2000000052.770:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23155 comm="syz.1.6924" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21acf8ebe9 code=0x7ffc0000
[  637.975844][   T33] audit: type=1326 audit(2000000052.770:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23155 comm="syz.1.6924" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21acf8ebe9 code=0x7ffc0000
[  637.984591][   T33] audit: type=1326 audit(2000000052.770:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23155 comm="syz.1.6924" exe="/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7f21acf8ebe9 code=0x7ffc0000
[  637.995055][   T33] audit: type=1326 audit(2000000052.770:323): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=unconfined pid=23155 comm="syz.1.6924" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21acf8ebe9 code=0x7ffc0000
[  638.008856][   T33] audit: type=1326 audit(2000000052.770:324): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=unconfined pid=23155 comm="syz.1.6924" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21acf8ebe9 code=0x7ffc0000
[  638.209898][T23173] /dev/nullb0: Can't open blockdev
[  641.555839][T23244] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6959'.
[  641.776200][T23252] loop6: detected capacity change from 0 to 128
[  641.888749][T23254] loop6: detected capacity change from 0 to 4096
[  641.899562][T23254] overlayfs: overlapping lowerdir path
[  641.992777][T23258] loop6: detected capacity change from 0 to 512
[  642.073970][T23262] loop6: detected capacity change from 0 to 512
[  642.434393][T23275] Process accounting resumed
[  642.668757][   T33] audit: type=1326 audit(2000000057.470:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23290 comm="syz.1.6981" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21acf8ebe9 code=0x7ffc0000
[  642.685173][   T33] audit: type=1326 audit(2000000057.470:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23290 comm="syz.1.6981" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21acf8ebe9 code=0x7ffc0000
[  642.696523][   T33] audit: type=1326 audit(2000000057.480:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23290 comm="syz.1.6981" exe="/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f21acf8ebe9 code=0x7ffc0000
[  642.703777][   T33] audit: type=1326 audit(2000000057.480:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23290 comm="syz.1.6981" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21acf8ebe9 code=0x7ffc0000
[  642.710715][   T33] audit: type=1326 audit(2000000057.480:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23290 comm="syz.1.6981" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21acf8ebe9 code=0x7ffc0000
[  642.719623][   T33] audit: type=1800 audit(2000000057.520:330): pid=23294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6982" name="file1" dev="tmpfs" ino=15395 res=0 errno=0
[  643.268743][   T33] audit: type=1326 audit(2000000058.070:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23304 comm="syz.1.6987" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f21acf8ebe9 code=0x0
[  643.425455][T23307] netlink: 100 bytes leftover after parsing attributes in process `syz.6.6988'.
[  643.454905][T23309] overlayfs: missing 'lowerdir'
[  644.617620][T23331] loop6: detected capacity change from 0 to 32768
[  644.633422][T23331] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.6998 (23331)
[  644.637621][T23331] BTRFS error: failed to open device for path /dev/loop6 with flags 0x23: -13
[  644.738042][T23339] loop6: detected capacity change from 0 to 2048
[  644.850843][T23345] netlink: 'syz.1.7004': attribute type 27 has an invalid length.
[  644.857114][T23345] lo: left allmulticast mode
[  644.860105][T23345] tunl0: left allmulticast mode
[  644.863945][T23345] gre0: left allmulticast mode
[  644.868177][T23345] gretap0: left allmulticast mode
[  644.878248][T23345] ip_vti0: left allmulticast mode
[  644.882419][T23345] ip6_vti0: left allmulticast mode
[  644.887059][T23345] sit0: left allmulticast mode
[  644.896092][T23345] ip6tnl0: left allmulticast mode
[  644.905068][T23345] ip6gre0: left allmulticast mode
[  644.914992][T23345] syz_tun: left allmulticast mode
[  644.920248][T23345] ip6gretap0: left allmulticast mode
[  644.925465][T23345] bridge0: left allmulticast mode
[  644.928366][T23345] vcan0: left allmulticast mode
[  644.951889][T23345] nlmon0: left allmulticast mode
[  644.958923][T23345] caif0: left allmulticast mode
[  644.961011][T23345] veth0: left allmulticast mode
[  644.963654][T23345] veth1: left allmulticast mode
[  644.965411][T23345] wg1: left allmulticast mode
[  644.967095][T23345] veth0_to_bridge: left allmulticast mode
[  644.969291][T23345] veth1_to_bridge: left allmulticast mode
[  644.971393][T23345] veth0_to_bond: left allmulticast mode
[  644.974601][T23345] bond_slave_0: left allmulticast mode
[  644.976460][T23345] veth1_to_bond: left allmulticast mode
[  644.978656][T23345] bond_slave_1: left allmulticast mode
[  644.980636][T23345] veth0_to_team: left allmulticast mode
[  644.983277][T23345] team_slave_0: left allmulticast mode
[  644.985326][T23345] veth1_to_team: left allmulticast mode
[  644.989355][T23345] team_slave_1: left allmulticast mode
[  644.993454][T23345] veth0_to_batadv: left allmulticast mode
[  644.998085][T23345] batadv_slave_0: left allmulticast mode
[  645.000525][T23345] veth1_to_batadv: left allmulticast mode
[  645.003090][T23345] batadv_slave_1: left allmulticast mode
[  645.005303][T23345] xfrm0: left allmulticast mode
[  645.007327][T23345] veth0_to_hsr: left allmulticast mode
[  645.009281][T23345] veth1_to_hsr: left allmulticast mode
[  645.011093][T23345] hsr0: left allmulticast mode
[  645.013183][T23345] hsr_slave_0: left allmulticast mode
[  645.014995][T23345] hsr_slave_1: left allmulticast mode
[  645.017043][T23345] veth1_virt_wifi: left allmulticast mode
[  645.019138][T23345] veth0_virt_wifi: left allmulticast mode
[  645.021052][T23345] net veth1_virt_wifi virt_wifi0: left allmulticast mode
[  645.023931][T23345] veth1_vlan: left allmulticast mode
[  645.026061][T23345] vlan0: left promiscuous mode
[  645.032471][T23345] vlan1: left allmulticast mode
[  645.035586][T23345] macvlan0: left allmulticast mode
[  645.038239][T23345] macvlan1: left allmulticast mode
[  645.040016][T23345] ipvlan0: left allmulticast mode
[  645.041713][T23345] ipvlan1: left allmulticast mode
[  645.044629][T23345] veth0_vlan: left allmulticast mode
[  645.046538][T23345] veth1_macvtap: left allmulticast mode
[  645.048586][T23345] veth0_macvtap: left allmulticast mode
[  645.050731][T23345] macvtap0: left allmulticast mode
[  645.052888][T23345] macsec0: left allmulticast mode
[  645.054804][T23345] geneve1: left allmulticast mode
[  645.056807][T23345] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[  645.059112][T23345] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  645.061274][T23345] bond1: left allmulticast mode
[  645.063643][T23345] veth5: left promiscuous mode
[  645.065395][T23345] bond0: left allmulticast mode
[  645.067314][T23345] xfrm1: left promiscuous mode
[  645.068959][T23345] xfrm1: left allmulticast mode
[  645.083612][T23345] gre3: left promiscuous mode
[  645.085115][T23345] gre3: left allmulticast mode
[  645.088293][  T791] lo speed is unknown, defaulting to 1000
[  645.090138][  T791] syz2: Port: 1 Link DOWN
[  645.137637][T23362] ieee802154 phy0 wpan0: encryption failed: -22
[  645.317858][T23372] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  645.355262][T23376] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7018'.
[  645.627030][T23379] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.7019'.
[  646.258988][T23392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  646.259525][T23390] netlink: 148 bytes leftover after parsing attributes in process `syz.6.7024'.
[  646.267898][T23390] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  646.415045][T23398] loop6: detected capacity change from 0 to 1024
[  646.962270][   T24] usb 7-1: new high-speed USB device number 53 using dummy_hcd
[  647.206401][   T24] usb 7-1: Using ep0 maxpacket: 8
[  647.253431][   T24] usb 7-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  647.256894][   T24] usb 7-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  647.260112][   T24] usb 7-1: Product: syz
[  647.261606][   T24] usb 7-1: Manufacturer: syz
[  647.263583][   T24] usb 7-1: SerialNumber: syz
[  647.267403][   T24] usb 7-1: config 0 descriptor??
[  647.274518][   T24] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[  647.719986][   T24] gspca_zc3xx: reg_r err -71
[  647.722760][   T24] gspca_zc3xx 7-1:0.0: probe with driver gspca_zc3xx failed with error -71
[  647.740621][   T24] usb 7-1: USB disconnect, device number 53
[  647.749188][T18275] udevd[18275]: setting owner of /dev/bus/usb/007/053 to uid=0, gid=0 failed: No such file or directory
[  648.145862][T23436] ieee802154 phy0 wpan0: encryption failed: -22
[  648.258347][T23440] overlayfs: upper fs does not support file handles, falling back to index=off.
[  648.554446][T23444] loop6: detected capacity change from 0 to 32768
[  648.586525][T23460] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7058'.
[  649.053109][T23481] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7068'.
[  649.107275][T23483] loop6: detected capacity change from 0 to 1024
[  649.110798][T23483] EXT4-fs: Ignoring removed nobh option
[  651.447477][T23523] mkiss: ax0: crc mode is auto.
[  651.642135][T23533] loop6: detected capacity change from 0 to 164
[  651.661602][T23533] rock: corrupted directory entry. extent=32, offset=131072, size=237
[  651.707396][T23535] use of bytesused == 0 is deprecated and will be removed in the future,
[  651.710766][T23535] use the actual size instead.
[  652.045583][T23551] loop7: detected capacity change from 0 to 1024
[  652.283759][T23554] netlink: 'syz.6.7094': attribute type 3 has an invalid length.
[  652.286718][T23554] netlink: 'syz.6.7094': attribute type 1 has an invalid length.
[  652.289660][T23554] netlink: 216 bytes leftover after parsing attributes in process `syz.6.7094'.
[  652.293201][T23554] NCSI netlink: No device for ifindex 33022
[  652.390496][   T33] audit: type=1800 audit(2000000067.190:332): pid=23551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.7098" name="file1" dev="loop7" ino=20 res=0 errno=0
[  652.402374][   T33] audit: type=1800 audit(2000000067.190:333): pid=23551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.7098" name="file1" dev="loop7" ino=20 res=0 errno=0
[  653.447798][T23584] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7111'.
[  653.833032][T23601] netlink: 'syz.6.7118': attribute type 1 has an invalid length.
[  653.835489][T23601] netlink: 228 bytes leftover after parsing attributes in process `syz.6.7118'.
[  654.009273][T23612] loop6: detected capacity change from 0 to 512
[  654.064720][T23612] Invalid ELF header magic: != ELF
[  654.248524][ T5236] Bluetooth: hci2: unexpected event for opcode 0x1004
[  654.576857][T23654] openvswitch: netlink: Duplicate or invalid key (type 0).
[  654.579130][T23654] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  654.814085][T23668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7149'.
[  655.400954][T23694] loop6: detected capacity change from 0 to 256
[  656.277334][T23720] loop7: detected capacity change from 0 to 2048
[  656.284555][T23720] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  656.369366][T23724] loop7: detected capacity change from 0 to 256
[  656.374747][T23724] msdos: Bad value for 'codepage'
[  656.513392][T23728] netlink: 10 bytes leftover after parsing attributes in process `syz.7.7177'.
[  656.905461][T23741] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7183'.
[  657.166877][T23757] overlayfs: unescaped trailing colons in lowerdir mount option.
[  657.233121][   T33] audit: type=1326 audit(2000000072.040:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23760 comm="syz.1.7192" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21acf8ebe9 code=0x7ffc0000
[  657.241242][   T33] audit: type=1326 audit(2000000072.040:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23760 comm="syz.1.7192" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21acf8ebe9 code=0x7ffc0000
[  657.250498][   T33] audit: type=1326 audit(2000000072.040:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23760 comm="syz.1.7192" exe="/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f21acf8ebe9 code=0x7ffc0000
[  657.258055][   T33] audit: type=1326 audit(2000000072.040:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23760 comm="syz.1.7192" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21acf8ebe9 code=0x7ffc0000
[  657.265821][   T33] audit: type=1326 audit(2000000072.040:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23760 comm="syz.1.7192" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21acf8ebe9 code=0x7ffc0000
[  657.485489][T23773] loop7: detected capacity change from 0 to 128
[  657.492410][T23773] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256
[  657.500365][T23773] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  657.594433][   T33] audit: type=1326 audit(2000000072.400:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23782 comm="syz.1.7202" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21acf8ebe9 code=0x7ffc0000
[  657.612836][   T33] audit: type=1326 audit(2000000072.410:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23782 comm="syz.1.7202" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21acf8ebe9 code=0x7ffc0000
[  657.619249][   T33] audit: type=1326 audit(2000000072.410:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23782 comm="syz.1.7202" exe="/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f21acf8ebe9 code=0x7ffc0000
[  657.638863][   T33] audit: type=1326 audit(2000000072.410:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23782 comm="syz.1.7202" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21acf8ebe9 code=0x7ffc0000
[  657.647475][   T33] audit: type=1326 audit(2000000072.410:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23782 comm="syz.1.7202" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21acf8ebe9 code=0x7ffc0000
[  657.654824][   T33] audit: type=1326 audit(2000000072.410:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23782 comm="syz.1.7202" exe="/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f21acf8ebe9 code=0x7ffc0000
[  657.661448][   T33] audit: type=1326 audit(2000000072.410:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23782 comm="syz.1.7202" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21acf8ebe9 code=0x7ffc0000
[  657.671615][   T33] audit: type=1326 audit(2000000072.410:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23782 comm="syz.1.7202" exe="/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f21acf8ebe9 code=0x7ffc0000
[  657.683548][   T33] audit: type=1326 audit(2000000072.410:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23782 comm="syz.1.7202" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21acf8ebe9 code=0x7ffc0000
[  657.690045][   T33] audit: type=1326 audit(2000000072.410:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23782 comm="syz.1.7202" exe="/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7f21acf8ebe9 code=0x7ffc0000
[  657.704080][ T5236] Bluetooth: hci2: unexpected event for opcode 0x080f
[  657.805328][T23794] ieee802154 phy0 wpan0: encryption failed: -22
[  658.147638][T23811] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  658.677946][T23821] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7218'.
[  659.317746][T23830] loop6: detected capacity change from 0 to 1024
[  659.724954][T23839] netlink: 'syz.6.7224': attribute type 1 has an invalid length.
[  659.764816][T23843] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.7226'.
[  659.898861][T23834] loop7: detected capacity change from 0 to 40427
[  659.912810][T23834] F2FS-fs (loop7): build fault injection rate: 771
[  659.917619][T23834] F2FS-fs (loop7): invalid crc value
[  659.980422][T23834] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  659.985309][T23834] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  660.029603][T22337] syz-executor: attempt to access beyond end of device
[  660.029603][T22337] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  660.035667][T22337] CPU: 0 UID: 0 PID: 22337 Comm: syz-executor Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  660.035689][T22337] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  660.035699][T22337] Call Trace:
[  660.035713][T22337]  <TASK>
[  660.035720][T22337]  dump_stack_lvl+0x189/0x250
[  660.035746][T22337]  ? __pfx_dump_stack_lvl+0x10/0x10
[  660.035763][T22337]  ? __pfx_queue_work_on+0x10/0x10
[  660.035778][T22337]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  660.035796][T22337]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  660.035822][T22337]  f2fs_handle_critical_error+0x37c/0x540
[  660.035845][T22337]  f2fs_write_end_io+0x886/0xb60
[  660.035880][T22337]  __submit_merged_bio+0x27a/0x6a0
[  660.035903][T22337]  __submit_merged_write_cond+0x255/0x530
[  660.035924][T22337]  f2fs_write_data_pages+0x261d/0x3000
[  660.035969][T22337]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  660.036025][T22337]  ? __mod_zone_page_state+0xd7/0x140
[  660.036053][T22337]  ? folios_put_refs+0x560/0x640
[  660.036078][T22337]  ? __lock_acquire+0xab9/0xd20
[  660.036102][T22337]  ? do_raw_spin_lock+0x121/0x290
[  660.036123][T22337]  ? do_raw_spin_unlock+0x4d/0x240
[  660.036139][T22337]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  660.036156][T22337]  do_writepages+0x32e/0x550
[  660.036184][T22337]  ? do_raw_spin_unlock+0x4d/0x240
[  660.036202][T22337]  filemap_fdatawrite+0x199/0x240
[  660.036219][T22337]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  660.036266][T22337]  ? do_raw_spin_unlock+0x4d/0x240
[  660.036319][T22337]  f2fs_sync_dirty_inodes+0x31f/0x830
[  660.036342][T22337]  f2fs_write_checkpoint+0x95a/0x1df0
[  660.036367][T22337]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  660.036400][T22337]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  660.036411][T22337]  ? kfree+0x18e/0x440
[  660.036424][T22337]  ? kill_f2fs_super+0x298/0x6c0
[  660.036438][T22337]  kill_f2fs_super+0x2c3/0x6c0
[  660.036453][T22337]  ? __pfx_kill_f2fs_super+0x10/0x10
[  660.036463][T22337]  ? radix_tree_delete_item+0x2b6/0x400
[  660.036478][T22337]  ? shrinker_free+0x2ce/0x3e0
[  660.036489][T22337]  deactivate_locked_super+0xbc/0x130
[  660.036503][T22337]  cleanup_mnt+0x425/0x4c0
[  660.036530][T22337]  ? lockdep_hardirqs_on+0x9c/0x150
[  660.036545][T22337]  task_work_run+0x1d4/0x260
[  660.036559][T22337]  ? __pfx_task_work_run+0x10/0x10
[  660.036568][T22337]  ? __x64_sys_umount+0x122/0x160
[  660.036584][T22337]  ? exit_to_user_mode_loop+0x40/0x110
[  660.036600][T22337]  exit_to_user_mode_loop+0xec/0x110
[  660.036612][T22337]  do_syscall_64+0x2bd/0x3b0
[  660.036623][T22337]  ? lockdep_hardirqs_on+0x9c/0x150
[  660.036632][T22337]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  660.036640][T22337]  ? exc_page_fault+0x9f/0xf0
[  660.036651][T22337]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  660.036659][T22337] RIP: 0033:0x7f732e98ff17
[  660.036669][T22337] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  660.036678][T22337] RSP: 002b:00007ffca31abe68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  660.036688][T22337] RAX: 0000000000000000 RBX: 00007f732ea11c05 RCX: 00007f732e98ff17
[  660.036694][T22337] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffca31abf20
[  660.036699][T22337] RBP: 00007ffca31abf20 R08: 0000000000000000 R09: 0000000000000000
[  660.036711][T22337] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffca31acfb0
[  660.036716][T22337] R13: 00007f732ea11c05 R14: 00000000000a1299 R15: 00007ffca31acff0
[  660.036731][T22337]  </TASK>
[  660.052176][T22337] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  660.847657][T23872] loop7: detected capacity change from 0 to 32768
[  660.857957][T23872] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  660.872961][T23872] XFS (loop7): Ending clean mount
[  660.933786][T22337] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  662.369888][T23911] loop7: detected capacity change from 0 to 4096
[  663.274585][T23941] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7266'.
[  663.302798][T23943] loop6: detected capacity change from 0 to 512
[  663.342784][T23945] loop6: detected capacity change from 0 to 1024
[  663.345723][T23945] EXT4-fs: Ignoring removed nobh option
[  663.347581][T23945] EXT4-fs: Ignoring removed bh option
[  663.475616][   T33] kauditd_printk_skb: 1 callbacks suppressed
[  663.475629][   T33] audit: type=1800 audit(2000000078.280:350): pid=23953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.7272" name="/" dev="9p" ino=2 res=0 errno=0
[  664.449486][T23969] netlink: 'syz.6.7279': attribute type 2 has an invalid length.
[  664.533259][T23973] netlink: 176 bytes leftover after parsing attributes in process `syz.1.7281'.
[  664.686646][T23983] loop6: detected capacity change from 0 to 1024
[  665.077783][T23993] loop6: detected capacity change from 0 to 32768
[  665.284038][T24002] loop6: detected capacity change from 0 to 8
[  665.291227][T24002] SQUASHFS error: xz decompression failed, data probably corrupt
[  665.296838][T24002] SQUASHFS error: Failed to read block 0x108: -5
[  665.299340][T24002] SQUASHFS error: Unable to read metadata cache entry [106]
[  665.302906][T24002] SQUASHFS error: Unable to read inode 0x11f
[  665.664825][T24028] loop6: detected capacity change from 0 to 128
[  666.520145][T24061] loop7: detected capacity change from 0 to 128
[  666.527231][T24061] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256
[  666.532269][T24061] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  666.855070][T24073] loop7: detected capacity change from 0 to 8
[  666.877952][T24073] SQUASHFS error: lzo decompression failed, data probably corrupt
[  666.880511][T24073] SQUASHFS error: Failed to read block 0x91: -5
[  666.887122][T24073] SQUASHFS error: Unable to read metadata cache entry [8f]
[  666.892031][T24073] SQUASHFS error: Unable to read inode 0x11f
[  667.439060][T24108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7346'.
[  668.166218][T24125] loop7: detected capacity change from 0 to 4096
[  668.175480][T24125] ntfs3(loop7): Different NTFS sector size (1024) and media sector size (512).
[  668.456458][ T5884] IPVS: starting estimator thread 0...
[  668.543036][T24133] IPVS: using max 47 ests per chain, 112800 per kthread
[  668.564776][T24138] loop7: detected capacity change from 0 to 8
[  668.580164][T24138] unable to read inode lookup table
[  668.905951][T24152] netlink: 2384 bytes leftover after parsing attributes in process `syz.1.7365'.
[  668.974851][ T2203] usb 7-1: new full-speed USB device number 54 using dummy_hcd
[  669.124072][ T2203] usb 7-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xB2, changing to 0x82
[  669.128719][ T2203] usb 7-1: config 36 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  669.146079][ T2203] usb 7-1: config 36 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  669.162938][ T2203] usb 7-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice= 0.06
[  669.166562][ T2203] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16
[  669.169772][ T2203] usb 7-1: SerialNumber: syz
[  669.395715][ T2203] yealink 7-1:36.0: invalid payload size 0, expected 16
[  669.400133][ T2203] input: Yealink usb-p1k as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:36.0/input/input31
[  669.415942][    C1] yealink 7-1:36.0: urb_ctl_callback - urb status -71
[  669.418861][    C1] yealink 7-1:36.0: urb_ctl_callback - urb status -71
[  669.421757][    C1] yealink 7-1:36.0: urb_ctl_callback - urb status -71
[  669.424811][    C1] yealink 7-1:36.0: urb_ctl_callback - urb status -71
[  669.427573][    C1] yealink 7-1:36.0: urb_ctl_callback - urb status -71
[  669.429840][    C1] yealink 7-1:36.0: urb_ctl_callback - urb status -71
[  669.432463][    C1] yealink 7-1:36.0: urb_ctl_callback - urb status -71
[  669.434770][    C1] yealink 7-1:36.0: urb_ctl_callback - urb status -71
[  669.436792][    C1] yealink 7-1:36.0: urb_ctl_callback - usb_submit_urb failed -90
[  669.445869][ T2203] usb 7-1: USB disconnect, device number 54
[  670.109506][T24196] loop6: detected capacity change from 0 to 8
[  670.421619][T24200] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  670.425428][T24200] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  670.430202][T24200] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  670.523479][T24201] fuse: Bad value for 'fd'
[  670.644860][T24205] loop6: detected capacity change from 0 to 8
[  670.665144][T24205] SQUASHFS error: Failed to read block 0x4de: -5
[  670.668493][T24205] SQUASHFS error: Failed to read block 0x4de: -5
[  670.674624][T24205] SQUASHFS error: Failed to read block 0x4de: -5
[  670.677506][T24205] SQUASHFS error: Failed to read block 0x4de: -5
[  670.680064][T24205] SQUASHFS error: Failed to read block 0x4de: -5
[  670.687416][   T33] audit: type=1800 audit(2000000085.490:351): pid=24205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.7389" name="file1" dev="loop6" ino=5 res=0 errno=0
[  671.311994][  T791] usb 7-1: new high-speed USB device number 55 using dummy_hcd
[  671.463708][T24246] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  671.488648][  T791] usb 7-1: config 3 has an invalid interface number: 7 but max is 0
[  671.492248][  T791] usb 7-1: config 3 has no interface number 0
[  671.494764][  T791] usb 7-1: config 3 interface 7 has no altsetting 0
[  671.500752][  T791] usb 7-1: New USB device found, idVendor=06e1, idProduct=a155, bcdDevice=3f.7b
[  671.506693][  T791] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  671.510039][  T791] usb 7-1: Product: syz
[  671.512017][  T791] usb 7-1: Manufacturer: syz
[  671.514980][  T791] usb 7-1: SerialNumber: syz
[  671.729942][  T791] radio-si470x 7-1:3.7: si470x_get_report: usb_control_msg returned -71
[  671.732801][  T791] radio-si470x 7-1:3.7: probe with driver radio-si470x failed with error -5
[  671.742848][  T791] usb 7-1: USB disconnect, device number 55
[  672.493561][T24277] bond0: (slave syz_tun): Releasing backup interface
[  672.504283][T24277] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  672.842827][T21319] usb 7-1: new full-speed USB device number 56 using dummy_hcd
[  672.999527][T21319] usb 7-1: config 0 has an invalid interface number: 133 but max is 0
[  673.004369][T21319] usb 7-1: config 0 has no interface number 0
[  673.009494][T21319] usb 7-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[  673.016126][T21319] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  673.021955][T21319] usb 7-1: Product: syz
[  673.023677][T21319] usb 7-1: Manufacturer: syz
[  673.025553][T21319] usb 7-1: SerialNumber: syz
[  673.038258][T21319] usb 7-1: config 0 descriptor??
[  673.738495][T21319] keyspan 7-1:0.133: Keyspan 1 port adapter converter detected
[  673.744206][T21319] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 81
[  673.747766][T21319] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 1
[  673.751452][T21319] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 2
[  673.756184][T24322] netlink: 80 bytes leftover after parsing attributes in process `syz.1.7441'.
[  673.760394][T24322] netlink: 80 bytes leftover after parsing attributes in process `syz.1.7441'.
[  673.761182][T21319] usb 7-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  673.988459][ T2203] usb 7-1: USB disconnect, device number 56
[  674.000382][ T2203] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  674.004961][ T2203] keyspan 7-1:0.133: device disconnected
[  674.311149][T24332] netdevsim netdevsim7 netdevsim0: entered allmulticast mode
[  674.331174][T24332] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  675.279674][T24356] loop7: detected capacity change from 0 to 1024
[  675.283301][T24356] hfsplus: invalid btree flag
[  675.284982][T24356] hfsplus: failed to load extents file
[  675.379641][T24360] netlink: 'syz.6.7458': attribute type 6 has an invalid length.
[  675.421144][T24364] netlink: 'syz.7.7460': attribute type 11 has an invalid length.
[  675.424286][T24364] netlink: 3657 bytes leftover after parsing attributes in process `syz.7.7460'.
[  676.100063][T24370] loop7: detected capacity change from 0 to 131072
[  676.105548][T24370] F2FS-fs (loop7): Wrong CP boundary, start(512) end(1536) blocks(0)
[  676.107985][T24370] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  676.112619][T24370] F2FS-fs (loop7): invalid crc value
[  676.162776][T24370] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  676.166771][T24370] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  676.168937][T24370] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4
[  676.678014][T24400] loop7: detected capacity change from 0 to 2048
[  676.686845][T24400] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found
[  676.689612][T24400] UDF-fs: Scanning with blocksize 512 failed
[  676.694951][T24400] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  676.969312][T24411] ALSA: mixer_oss: invalid OSS volume ''
[  676.999759][T24414] tipc: Enabled bearer <eth:macvtap0>, priority 10
[  685.266032][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  685.268552][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  733.422593][ T5236] Bluetooth: hci2: command 0x0401 tx timeout
[  746.707658][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  746.710011][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  808.137446][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  808.139927][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  869.577330][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  869.579769][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  931.026557][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  931.029106][ T1362] ieee802154 phy1 wpan1: encryption failed: -22

VM DIAGNOSIS:
22:54:12  Registers:
info registers vcpu 0

CPU#0
RAX=6254dd3f2afac000 RBX=ffffffff81968308 RCX=6254dd3f2afac000 RDX=0000000000000001
RSI=ffffffff8d9b4408 RDI=ffffffff8be32600 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa34230 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7893f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8624000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055e452e591c8 CR3=000000010f6fa000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=9008088003088004 0003088080808080
XMM02=103a598bf1b64624 1900140000004801 XMM03=e029e83d242770fe 7aed33c0d8842c56
XMM04=0102100000040100 0000080606017ddc XMM05=01901000100381c6 3e287124e4000000
XMM06=20000000897f0f00 00cadf94b3592234 XMM07=6058c10c2711fc22 0356bca2000000e0
XMM08=9e00000007000000 00000000000d2300 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=e6869af86cb9e400 RBX=ffffffff81968308 RCX=e6869af86cb9e400 RDX=0000000000000001
RSI=ffffffff8d9b4408 RDI=ffffffff8be32600 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa34230 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d4000
RIP=ffffffff8b7893f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c24000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055e4431ad680 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000400000065 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000ff0000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=000000000000016d 000000332f616973
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffff0000 ffffff0000000000 XMM09=2f74656e2f35326d 697377682f6d6973
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
