last executing test programs:

3m59.7893881s ago: executing program 2 (id=658):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
connect$unix(r0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000070000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = syz_open_procfs(0x0, &(0x7f0000002280)='oom_adj\x00')
writev(r2, 0x0, 0x0)
sendmsg$nl_generic(r1, 0x0, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x0, 0x0)
open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0)
r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", <r5=>0xffffffffffffffff})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", <r6=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r6})
ioctl$SW_SYNC_IOC_INC(r3, 0x40045701, &(0x7f0000000a40)=0xfff)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x53, 0x6, 0x3, 0x5, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0x7, 0xe661, 0x4, 0x7, 0x7, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x5, 0x1, 0x40], [0x10000007, 0x9, 0x80000130, 0x8004, 0x5, 0xfffffff3, 0x2, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0x1, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4004e0, 0x1, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93694, 0x43, 0x9], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0xd, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xfffffff8, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x21c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x24], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
ioctl$SW_SYNC_IOC_INC(r4, 0x40045701, &(0x7f00000002c0)=0x3)

3m59.54980065s ago: executing program 2 (id=659):
r0 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f00000004c0), 0x0, 0x559e, &(0x7f0000005680)="$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")
ioctl$BTRFS_IOC_SEND(r0, 0xd0009411, &(0x7f0000000380)={{r0}, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0xffffffff})

3m58.995127123s ago: executing program 2 (id=666):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32, @ANYBLOB='\f'], 0x24}}, 0x0)

3m58.735865073s ago: executing program 2 (id=667):
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000480)={[{@nls={'nls', 0x3d, 'default'}}, {@nodecompose}, {@type={'type', 0x3d, "f67d1426"}}, {@gid}, {@nodecompose}]}, 0x1, 0x5d4, &(0x7f0000001980)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x99501e, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000001a40)={0x2020}, 0x2020)

3m58.62315265s ago: executing program 2 (id=668):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TCSBRKP(r0, 0x5425, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xe)
ioctl$TCSETSW2(r1, 0x5408, &(0x7f0000000040)={0x0, 0x0, 0xffffff81, 0x0, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"})
ioctl$TCSBRKP(r0, 0x5425, 0x5)

3m58.294535585s ago: executing program 2 (id=671):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@multicast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x14, 0x65, 0x0, 0x1, 0x32, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x26)

3m58.164589721s ago: executing program 32 (id=671):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@multicast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x14, 0x65, 0x0, 0x1, 0x32, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x26)

2m59.674700863s ago: executing program 0 (id=1252):
syz_usb_connect(0x5, 0x48, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xe2, 0x2, 0xbe, 0x40, 0x79ee, 0xea27, 0xe144, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x7, 0x1, 0x0, 0x1, [{{0x9, 0x4, 0xe3, 0x81, 0x0, 0x2, 0x9, 0x9c, 0x7, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x8001}, {0xd, 0x24, 0xf, 0x1, 0x92, 0xfc01, 0x7, 0x2}, {0x6, 0x24, 0x1a, 0x7}, [@dmm={0x7, 0x24, 0x14, 0x8, 0x8}]}]}}]}}]}}, 0x0)

2m58.412489768s ago: executing program 0 (id=1268):
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, 0x0, &(0x7f00000001c0))

2m58.244698415s ago: executing program 0 (id=1271):
syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @random, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, {[@lsrr={0x83, 0x7, 0xd7, [@multicast2]}, @timestamp={0x44, 0xc, 0x5, 0x3, 0x0, [0x7, 0x0]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x8}}}}}}, 0x0)

2m58.110778296s ago: executing program 0 (id=1273):
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400))
chdir(&(0x7f0000000000)='./file1\x00')
r1 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0)
syz_mount_image$romfs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[], 0x1, 0x14f, &(0x7f0000000900)="$eJzs2r9Kw1AUBvAzFCodHZ0KlSho/mtddRQ33yC0uWnwxpREkPYFxElwuA6+hOAT+AgZ3XQR9CUi197aNhXrUBuL32/pR05IT28ut8vRkziyWaoTbXevj19WkziqN929FrOZRwOHRFSXIcvzG4OmPH3Ws5yML274VZVZN6y/DT4bm4E4umQh950FtAUAAAAAAAAAAAAAAAAAAAAAAPOg1VSodUR0wULu22PVtNc/8Tj3k7Sk9kqn1dUMFzHBb+X6uBP1rVcibV+mUBwksm5N1KvDsNER/Lm4vuZZ1DXTXl8PIy/wA//UcdymtWNZu4758Syz+ETtTvVEWX5vTY+TaWPzZo8/mTdT77+yFoqr8+K3jd4/wvxCProit0fp/fzbsKK2+V/pZ4nCzHNlWQz//9pVt/Egzz+jFfO2uriI5SzxtwPAN94DAAD//zRDNTE=")
setpgid(r1, r1)
r2 = getpgid(r1)
mkdir(&(0x7f00000002c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000200)='./bus/file0\x00', 0x40)
mount(&(0x7f0000000040)=@filename='./bus/file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1003408, 0x0)
rmdir(&(0x7f00000000c0)='./bus/file0\x00')
setpgid(0x0, r2)
openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0xa800, 0x1)

2m57.964911183s ago: executing program 0 (id=1275):
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0100"], 0x20)

2m57.685070453s ago: executing program 0 (id=1278):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x818884, &(0x7f00000002c0)={[{@errors_continue}, {@dmask={'dmask', 0x3d, 0xc958}}, {@sys_tz}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@umask={'umask', 0x3d, 0x9}}, {@zero_size_dir}, {@time_offset}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@discard}, {@errors_continue}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@discard}, {@fmask={'fmask', 0x3d, 0x8}}, {@discard}], [{@obj_role={'obj_role', 0x3d, '!'}}, {@dont_hash}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@euid_eq}]}, 0x1, 0x1534, &(0x7f0000000e40)="$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")
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
chdir(&(0x7f00000000c0)='./bus\x00')

2m57.397955705s ago: executing program 33 (id=1278):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x818884, &(0x7f00000002c0)={[{@errors_continue}, {@dmask={'dmask', 0x3d, 0xc958}}, {@sys_tz}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@umask={'umask', 0x3d, 0x9}}, {@zero_size_dir}, {@time_offset}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@discard}, {@errors_continue}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@discard}, {@fmask={'fmask', 0x3d, 0x8}}, {@discard}], [{@obj_role={'obj_role', 0x3d, '!'}}, {@dont_hash}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@euid_eq}]}, 0x1, 0x1534, &(0x7f0000000e40)="$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")
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
chdir(&(0x7f00000000c0)='./bus\x00')

2m23.674765988s ago: executing program 1 (id=1612):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, <r1=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2m23.624266833s ago: executing program 1 (id=1613):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xb}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)

2m23.623936019s ago: executing program 1 (id=1614):
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
r0 = syz_io_uring_setup(0x7440, &(0x7f00000004c0)={0x0, 0xa6ec, 0x10100, 0x24, 0x3e6}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x3, 0x1, 0x0, 0xce, 0x0, 0x1})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x3, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

2m23.554234701s ago: executing program 1 (id=1615):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x800, &(0x7f0000000700), 0xff, 0x49b, &(0x7f0000001040)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc1}})
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]})

2m23.480769824s ago: executing program 1 (id=1616):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x57}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x9c}}, 0x4)

2m23.334287887s ago: executing program 1 (id=1617):
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@ldst={0x7}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a)

2m23.247926775s ago: executing program 34 (id=1617):
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@ldst={0x7}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a)

2m16.663472512s ago: executing program 3 (id=1676):
syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="120100005ab05740450c088085e10000000109021200b8dc0000000904"], 0x0)

2m15.409037362s ago: executing program 3 (id=1685):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0)
acct(&(0x7f0000001000)='./file0\x00')
openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)

2m15.304065377s ago: executing program 3 (id=1686):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = mq_open(&(0x7f0000000080)='$@\x00', 0x40, 0xb4, 0x0)
fcntl$setlease(r1, 0x400, 0x1)
mq_open(&(0x7f0000000140)='$@\x005gM\xfb\xa3\xabt\xb8\x97\xa2`\xcc\xfb&\r.\x97TM&\x93\xd3\xd2\x17[\x89}\xd2j\xd6\xee\xf4\'@\xff\x00\x00\x00\x00\x00\x00\x00\x00\xcd.,\xfb\xab\xb9\x00r\voG\x9d\xaa\x86\xe9\xff\x1b\xa20\x16\t\x05\xa4\x97\xfah\xe9u\xbb\xad~\xb3\x83\xb9\xa3\xe7\xa4\xea\xe6x\xd8H\xa9\xa89\x1a\xfeZ0+\x18\xe9\xc7\x87\\\x05\xbf`!Q\xf2\xcc\xbc4\xbc|s\xbdZY1\x02r\xac\x805\x06\x18\xb5\x88gx\xac\xd6\xc7.\xa6Z\x84X:{II>~<\xa4x\'\xd0\xdc\xf5`\x1a\x1dI:\x8b\xc6v/;U\xac\x12\xed\xed\x86W\xf4\xcb\xf4\xdd\x89w<\xd2d\xc0\x17\xf3\x9f\xdf\xd2', 0x1, 0x0, 0x0)
mq_open(&(0x7f00000002c0)='D\xe3+\xdfl\x95F\b0Nz\xca?\xd5\xec\x83j\xd0\xb9\x8a6\x95\xbbPN[\xc2\xe3\xd4\xf6J\xa2\xac\x9d5\xd0\xfc\xcb\b\x96\xd94\x96\xb2\xdd\xef^ \xce\xdb3R\fc\x99\xa0\x81,\xbe\xc2\x82\x99\x18\xe6\xf4\xadx[\x01e\xc9\xc8;\xf0S|\xe9\xb3\xcb\xdf\xc2\xb9\x90\x8e\x9f\xfc\xb2\xce\xf5X\xca\xf5%8\x8c\xa3\xd7t\xb4\xb4\xd5\x10D&m\x8a\xac\xd8\xc3\x01M\x9c\x9b\xc8XP\x14\x8f\xc5\xe5\xe6\xbdua\x9cv\x12\xc3\xa9^\")\xe0\x86L7{\x99\xb05\x82\xda\x026Y6I,\x84\xdc\xedx\x8dt\xdc!\b\xfd\x933\x88\v\xeb\x05\xb4%\a\xe1!L\xc48\xb5\x98d\xa5\b@\xe4\xea\x98\xebw\xb6i\xae0\x87\x86\xae\x12\x90*3a\xbe\xda\x9b\x18\x1e\xfe\xfb\x1a|\xe7\xac\x0e\xbe\x18\xc8yyq[}\xc2>_\xa2\xb8pI\xc8NKD\xe3A\xc4k\x12\x17!\xe6\x1c\xe8\xbb\x9b_\xdd%\xa1Q-\b\xc8VL\xcfr\xaa\xca;~8e2\xa1\xcc]\x18\x11\xfdh\x1e\xabuM\x87=\xbe\xe5;\xa1\a\x9f\x97H\xda\r\xbe~8YP\x83S>_\x90\xb8\x9b\x9f_\xcd\xe8M*t\xbe\x19\xc8', 0x80, 0x8, 0x0)
mq_unlink(&(0x7f0000000440)='D\xe3+\xdfl\x95F\b0Nz\xca?\xd5\xec\x83j\xd0\xb9\x8a6\x95\xbbPN[\xc2\xe3\xd4\xf6J\xa2\xac\x9d5\xd0\xfc\xcb\b\x96\xd94\x96\xb2\xdd\xef^ \xce\xdb3R\fc\x99\xa0\x81,\xbe\xc2\x82\x99\x18\xe6\xf4\xadx[\x01e\xc9\xc8;\xf0S|\xe9\xb3\xcb\xdf\xc2\xb9\x90\x8e\x9f\xfc\xb2\xce\xf5X\xca\xf5%8\x8c\xa3\xd7t\xb4\xb4\xd5\x10D&m\x8a\xac\xd8\xc3\x01M\x9c\x9b\xc8XP\x14\x8f\xc5\xe5\xe6\xbdua\x9cv\x12\xc3\xa9^\")\xe0\x86L7{\x99\xb05\x82\xda\x026Y6I,\x84\xdc\xedx\x8dt\xdc!\b\xfd\x933\x88\v\xeb\x05\xb4%\a\xe1!L\xc48\xb5\x98d\xa5\b@\xe4\xea\x98\xebw\xb6i\xae0\x87\x86\xae\x12\x90*3a\xbe\xda\x9b\x18\x1e\xfe\xfb\x1a|\xe7\xac\x0e\xbe\x18\xc8yyq[}\xc2>_\xa2\xb8pI\xc8NKD\xe3A\xc4k\x12\x17!\xe6\x1c\xe8\xbb\x9b_\xdd%\xa1Q-\b\xc8VL\xcfr\xaa\xca;~8e2\xa1\xcc]\x18\x11\xfdh\x1e\xabuM\x87=\xbe\xe5;\xa1\a\x9f\x97H\xda\r\xbe~8YP\x83S>_\x90\xb8\x9b\x9f_\xcd\xe8M*t\xbe\x19\xc8')
close_range(r0, 0xffffffffffffffff, 0x0)

2m15.09136618s ago: executing program 3 (id=1689):
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x2301091, 0x0)
umount2(&(0x7f0000000000)='./file0\x00', 0x0)

2m14.972521755s ago: executing program 3 (id=1692):
unshare(0x6a040000)
syz_usb_connect(0x3, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0xe7, 0xd7, 0x7f, 0x40, 0x12d6, 0x444, 0x293d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xcc, 0x0, 0x0, 0x8b, 0xa, 0x2e}}]}}]}}, 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10)

2m14.678615499s ago: executing program 3 (id=1701):
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x50}}, 0x0)
r0 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x5a79, 0x10100}, &(0x7f0000000180), &(0x7f00000001c0))
io_uring_enter(r0, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
r1 = io_uring_setup(0x67bb, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0})
io_uring_enter(r1, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18)

2m14.499507864s ago: executing program 35 (id=1701):
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x50}}, 0x0)
r0 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x5a79, 0x10100}, &(0x7f0000000180), &(0x7f00000001c0))
io_uring_enter(r0, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
r1 = io_uring_setup(0x67bb, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0})
io_uring_enter(r1, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18)

1m45.160446345s ago: executing program 5 (id=1861):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x4}]}, &(0x7f0000000100)='GPL\x00', 0x1}, 0x94)

1m45.042115148s ago: executing program 5 (id=1863):
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x9, 0xffffffff, 0x40})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="b7000000f8000000bfa300000000000007030000f4ffffff620af0fff8ffffff71a4f0ff000000002d040200000000001d400200000000004604000001ed000062030000000000001d440000000000007a0a00fe00ffffffc3030000f1000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0465f2f994114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840b08000000f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e82623951743283070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a00a5b4f7e9ad0500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48)

1m44.893628689s ago: executing program 5 (id=1864):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001000000018000180140002006e657464657673696d3000000000000005000b000000000008001100"], 0x3c}}, 0x0)

1m44.754376919s ago: executing program 5 (id=1866):
syz_open_dev$vbi(&(0x7f0000001080), 0x1, 0x2)
epoll_create1(0x0)
syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2)
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000009c0), 0x42, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYRES16=r0], 0x0)

1m44.604161104s ago: executing program 6 (id=1867):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000002c0)={0xc, r1})
ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1)
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x3, r1, 0x0, &(0x7f0000000480)="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", 0x1000})

1m44.481995551s ago: executing program 6 (id=1868):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x80000001, 0x0, 0x8}}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x3}, {}, {0x4, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x206, 0x7}]}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x24040084)

1m44.308696693s ago: executing program 6 (id=1869):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x48, &(0x7f0000000100)=ANY=[@ANYBLOB="89fa"], 0x8)

1m44.286841247s ago: executing program 4 (id=1870):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x50)
r1 = socket$inet(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x0, @empty}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000280), &(0x7f0000000100)=@tcp=r1, 0x1}, 0x20)

1m44.123094052s ago: executing program 6 (id=1871):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}}, 0x4000080)

1m44.122856418s ago: executing program 4 (id=1872):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_delroute={0x34, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_FLOW={0x8, 0xb, 0xffffff80}]}, 0x34}}, 0x0)

1m43.918699679s ago: executing program 4 (id=1873):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x1)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast1, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x962, 0x0, 0xfffc, 0xa, 0x0, 0x10, 0x73}, {0x1, 0x4, 0x0, 0x80000000, 0x100000000006, 0x9, 0x2, 0x9}, {0x0, 0xd, 0x53e5, 0x23}, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3}, {{@in6=@local, 0x0, 0x32}, 0x2, @in6=@private0, 0x1502, 0x4, 0x0, 0x0, 0x4, 0xfffffffd, 0x402}}, 0xe8)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB], 0x100c}, 0x1, 0x0, 0x0, 0x5}, 0x800)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r6, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={<r7=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000040)={0x5, 0x8006, 0x807, 0x1, r7}, &(0x7f0000000080)=0x10)
setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000000)={0xffffffff, 0x6}, 0x8)

1m43.754467766s ago: executing program 6 (id=1874):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYRESOCT], 0x24}}, 0xcc800)
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000100)={[{@acl}, {@heartbeat_none}, {@dir_resv_level={'dir_resv_level', 0x3d, 0x3}}, {@coherency_full}, {@coherency_full}, {@localflocks}, {@coherency_full}, {@inode64}]}, 0x1, 0x4421, &(0x7f0000004500)="$eJzs3c9PHGUfAPBnBt63UNsKtYeamLiJTTRqCPSk0kRKaSm0WFNtY7xsF9i26MI2sBgPPeCtiScTD8ZDo4k3Tg0Hr/VP8OKxnpvowYuJSSNmd2eBGXbDSliwzeeTlNl5fu9+d5595jB94kTl9txSbm4pV1jIlWduLp3OfVYuLc8XQ7xPDrp/2tOJOIn9wbly7sIH10+H8NPsL4/X19fXQ1V3aGpoy+s//7g7s/XYEGfqVNtt3tpe+TiEcGLbuKq6Qggf/RhCFEI4m6SNJsfeEMKxUM+7fvfLG7k9Gs2DR8Uz+SdT99aGT02u3l9r/d6jEL4tvfjmrfnfXuka/vX1PeoeAAAAAAAAAAAAAAAAAICn3PjVK9feHxwKD6PQvRptf153PDm2ej52fc+83Pk3CwAAAAAAAAAAAAAAAAAAAP9Rm8//56LjTZ7/H0uOIy3qr7/b+THSORPvXRk7PziU7P8ebct/K0n6/WxX6G+y73t2//ezmfrN93/f3s9uNcbX6LcvRPFA6jyOBwZC+D7Z+P1kdDgulZcqb9wsLy/M7tkwnlrp+Nd3709FJ9nQv934j2ba7/z+/y9s+zZVz2/s3VfsmZaOf1fLcj98EbUV/3OZevsRf3YvHf/uWlrv1gIj9QmgGv+vuneO/1im/U7F/1gIIRdVx5pLzQDVNUw1vdV6hbR0/P9XS0tNnckH2er6/ysT//OZ9g9q/l/J/hDRVDr+/6+l9aRKbF7//fHO1/+FTPsHEf/q+Ff8/rclHf9D9cTuVJHaJ9nu/D+eab9T8b8WJ+M8FqW+AatRPb3V/1dHWjr+PdvyN+//4rbWfxcz9ffr/q/Rb+P+rzH9vxbV7/9oLh3/3pbl2r3+JzL1Oj3/j9TWf+xWOv6Ha2nptXNf7W+78Z/MtN+p+NdWJT2N+G/OJ38fqqd/Z/3XlnT8n6snxltLrNT+1tZ/0c7r/0uZ9g9i/Vcd/0rc2V6fFen4H2lZrhr/n9v4/b+cqdf5+IcwaK2/a+n4H21Zrnb99+wc/6lMvU7H/9VONg4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwFBhNjn0higdS53E8MBDCueT8ZDgcTRdm89Ol8synSyGMJem5cDy6VSpPF0r5uYXybDFfKJXKMyGcT/JPhJ5oqVSu5OcLdy5stNUb3S4WFivTxUIlhDCepL8Ujjbamp6rzBfuhBAubuQ9H5cX79wuLORn5xbfGRwcHAwTG2Poj4qfV4oLlXrv9dwQJjfq9kVbBlfLvrQxliPRJ+XlxYVCqZZ+eUudUnmmUNpSZyrJ+zr0R5XF5YWZQqWYL5VvNfo7SCPJcWzi6odXLw9ty78R1Y+j+zssAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6lh8NvfxNC6K6fxSGEXJS8iJJ/KQ8eFc/kn0zdWxs+Nbl6f+1xszIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/7ADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFXfpHaSCI4gD8Ziy09BhWy25nu6KIFq4InkCP4WH0KF7CO1ikSJsiBJJZCPsHtkmq72sezI+Z92AeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyz2+de+vdROR4mp7GfH7+fd/nD+X+n03ff/iDDNyOk8v3f1D3ZR/T6P8thyt2rxPN+uvj5iovZ/Bngz36WDcZ2hu3+bm6/teR8pVRLQlv0k5V9WytwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAHTtwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgWMBAAAAAGH+1lH0bQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPArAAD//z8QH1I=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x6)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$FS_IOC_RESVSP(r0, 0x80106f05, &(0x7f00000000c0)={0x0, 0x4, 0x32, 0x100000000})

1m43.360481935s ago: executing program 5 (id=1875):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$sock_buf(r0, 0x1, 0x3b, &(0x7f00000014c0)=""/145, &(0x7f0000000000)=0x91)

1m43.204256809s ago: executing program 5 (id=1876):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8003, 0x7})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = open(&(0x7f0000000300)='.\x00', 0x248000, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x4}, 0x38)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x4, &(0x7f0000000000), 0x1, 0x625, &(0x7f0000001400)="$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")

1m42.794193649s ago: executing program 6 (id=1877):
syz_usb_connect(0x5, 0x2d, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0xaa, 0x3a, 0x37, 0x40, 0xb48, 0x2003, 0x3961, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x53, 0x0, 0x1, 0x27, 0xa1, 0x41, 0x0, [], [{{0x9, 0x5, 0x8b, 0x2, 0x200, 0x44, 0xb7, 0x3}}]}}]}}]}}, 0x0)

1m42.443848779s ago: executing program 4 (id=1878):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x5, 0x200, 0x0})

1m42.334186123s ago: executing program 4 (id=1879):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffe0900010073797a300000000040000000030a01020000000000000000010000000900030073797a310000000014000480080002400000000008000140000000040900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c0004802800018008000100666962001c000280080001400000001108000340c1"], 0xdc}}, 0x0)

1m42.193685987s ago: executing program 4 (id=1880):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e23, @loopback}}, 0x0, 0x20000000005, 0x4a}, 0xd8)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x240087f9, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x70bd2a, 0x25dbdbfd, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c0}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010100}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x7}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8080}, 0x4008040)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$inet6_int(r3, 0x29, 0xcf, 0x0, &(0x7f0000000140)=0xa4ffffff)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8)
bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6)
setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x36, &(0x7f0000000280)=[{0x2, 0xa6, 0x2, 0x3}, {0x2, 0x8, 0x8, 0xfffc}, {0xaee, 0x2, 0xac, 0x1000}, {0x40, 0xaf, 0x5, 0x2}, {0x6, 0x80, 0x0, 0x2}, {0x0, 0x3, 0x5, 0x9}]}, 0x10)
write$binfmt_misc(r4, &(0x7f0000000100), 0x6)
ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000300))
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x38, 0x301, 0x270bd28, 0x25dfdbfa, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x4040006)
sendmmsg$inet(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="fc", 0x1}], 0x1}}], 0x1, 0x20008084)
close(r0)
syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRES16=r0, @ANYRES64=r0, @ANYRES32=r0], 0x0)
getpeername$tipc(r2, &(0x7f0000000380)=@id, &(0x7f0000000340)=0x10)

1m12.998936001s ago: executing program 36 (id=1880):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e23, @loopback}}, 0x0, 0x20000000005, 0x4a}, 0xd8)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x240087f9, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x70bd2a, 0x25dbdbfd, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c0}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010100}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x7}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8080}, 0x4008040)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$inet6_int(r3, 0x29, 0xcf, 0x0, &(0x7f0000000140)=0xa4ffffff)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8)
bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6)
setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x36, &(0x7f0000000280)=[{0x2, 0xa6, 0x2, 0x3}, {0x2, 0x8, 0x8, 0xfffc}, {0xaee, 0x2, 0xac, 0x1000}, {0x40, 0xaf, 0x5, 0x2}, {0x6, 0x80, 0x0, 0x2}, {0x0, 0x3, 0x5, 0x9}]}, 0x10)
write$binfmt_misc(r4, &(0x7f0000000100), 0x6)
ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000300))
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x38, 0x301, 0x270bd28, 0x25dfdbfa, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x4040006)
sendmmsg$inet(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="fc", 0x1}], 0x1}}], 0x1, 0x20008084)
close(r0)
syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRES16=r0, @ANYRES64=r0, @ANYRES32=r0], 0x0)
getpeername$tipc(r2, &(0x7f0000000380)=@id, &(0x7f0000000340)=0x10)

28.045921376s ago: executing program 37 (id=1876):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8003, 0x7})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = open(&(0x7f0000000300)='.\x00', 0x248000, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x4}, 0x38)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x4, &(0x7f0000000000), 0x1, 0x625, &(0x7f0000001400)="$eJzs3c9rXNUeAPDvncnvvPeShsd7r2/xXkC0BW3SpK0UEWwRXJVSfywEN45NWmqnP2gimlppAnUjiBsXgisX1oX/gxYEV/4DLty4kkoR6UYpOnInd8ZpMjeZxMxMm/l8YDr33HNzz7nJfHvOnDnnTgA9azL9pxCxNyIuJxETDXl9kWVOrh539+drp9NHEpXKiz8lce16stx4riR7Ho2INOO3sUi+joiJ4vpyF5auni+Vy/NXsvT04oXL0wtLVw+cu1A6O392/uLsk7NHjxw+cnTmYMNPnXluq9e3p2H7xI3X3xx77+Qrn358L5n57LuTSRyrVzq9rq2eezOTMRmVTOP+9Pd6dKcL65Ji/XXyp2TtjrWebWOF2JLa368/Iv4dY1Fs+GuOxbvPd7VyQFtVkqi3UUCvScQ/9KhaP6D23r6198EDbe6VAJ1w53jEY/X474+I1fg/NpuNDcZQdWxg5G5y3zhPEhEHd6D8tIxvvjp5I31Em8bhgOaWVwazIfC17X9Sjc3xGKqmRu4W7ov/QjaMO56NH76wcTFjeRmTa9JZ+YPbvR6gdcsrEfGfZv3/zeP/1ew53f/aNsvPiX8AAAAAAABgG24dj4gnmn3+V6jP/xloMv9nNCKO7UD5m3/+V7i9A8UATdw5HvF00/m/hdoh48Us9ffqfID+5My58vzBiPhHROyP/sE0PdN40s8bfjoiDrw/8VFe+Y3z/9JHWn5tLmBWj9t9a2YDzZUWSztw6dDz7qxE/Lcvf/5P2v4nTdr/NL4vt1jGxKM3T+XlbR7/QLtUPonY17T9T+rHJBvfn2O62h+YrvUK1vvf2x98kVe++IfuSdv/kY3jfzBpvF/PwtbOPxARh5b6Knn52+3/DyQvFaNhJeJbpcXFKzMRA8mJ9ftnt1ZneJgMtX7oOxFRjYdavKTxv/+Rjcf/6v3/hjgczu7x1Yp//T76fV6e9h+6J43/uY3b//H72/+tb8zeHP8yr/xTLbX/h6tt+v5sj/E/2FirAdrtegIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAw6gQEX+LpDBV3y4UpqYiRiPinzFSKF9aWHz8zKU3Ls6ledXv/y/Uvul3bDWd1L7/f7whPbsmfSgi9kTEh8Xhanrq9KXyXLcvHgAAAAAAAAAAAAAAAAAAAB4Qo6tP69b/p34odrVqQCf0Zc/iHXpPX7crAHSN+IfeJf6hd+XH/y/3KlUdrQ7QQa22/5Xrba4I0HHb7P/7uAB2Ae//oVf1t3bYULvrAXSD9h8AAAAAAHaVPf+/9W0SEctPDVcfqYEsr/7B4HC3age0UyEvY7Cz9QA6zxxe6F2m/kDvanHyL7CLJfWtX5su9s+f/Z+0p0IAAAAAAAAAAAAAwDr79raw/h/YlXLX/wO73gbr/5st7HG7ANhFrP+H3uU2X0Cts5/3Tf/W/wMAAAAAAAAAAADAA2Do6vlSuTx/ZWGp5Y3rWzn4r2/8GHlZz9Q2VjpQjUpxZ86zXOrcr+4h3+iPiDVZlbHVl+35Uvnl6Gx9ahHTibIGOlhWzkaX/j8CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADW+SMAAP//fSQouA==")

0s ago: executing program 38 (id=1877):
syz_usb_connect(0x5, 0x2d, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0xaa, 0x3a, 0x37, 0x40, 0xb48, 0x2003, 0x3961, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x53, 0x0, 0x1, 0x27, 0xa1, 0x41, 0x0, [], [{{0x9, 0x5, 0x8b, 0x2, 0x200, 0x44, 0xb7, 0x3}}]}}]}}]}}, 0x0)

kernel console output (not intermixed with test programs):

covery fsync data, check_only: 0
[  162.219865][ T8822] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  162.239490][ T5834] BTRFS info (device loop1): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  163.012556][ T8869] syzkaller0: tun_chr_ioctl cmd 2147767506
[  163.330552][ T8879] loop1: detected capacity change from 0 to 2048
[  163.418577][ T8879] EXT4-fs (loop1): DAX unsupported by block device.
[  163.529758][ T8886] x_tables: duplicate entry at hook 2
[  163.578566][ T8890] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1124'.
[  163.825164][ T8901] comedi comedi1: driver 'ni_daq_700' does not support attach using comedi_config
[  163.861652][ T8753] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  163.954649][ T8908] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  163.976769][ T8908] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  164.017742][ T8753] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  164.021063][ T8753] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  164.032967][ T8753] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00
[  164.035796][ T8753] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.053338][ T8753] usb 2-1: config 0 descriptor??
[  164.176131][ T8920] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1140'.
[  164.281972][   T24] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  164.433325][   T24] usb 4-1: too many configurations: 9, using maximum allowed: 8
[  164.437048][   T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  164.439903][   T24] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  164.443668][   T24] usb 4-1: config 0 interface 0 has no altsetting 0
[  164.447431][   T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  164.450297][   T24] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  164.453807][ T5894] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  164.456588][   T24] usb 4-1: config 0 interface 0 has no altsetting 0
[  164.460114][   T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  164.465798][ T8753] hid-led 0003:1D34:000A.000C: unknown main item tag 0x3
[  164.472855][   T24] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  164.476747][   T24] usb 4-1: config 0 interface 0 has no altsetting 0
[  164.484359][   T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  164.487276][   T24] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  164.490579][   T24] usb 4-1: config 0 interface 0 has no altsetting 0
[  164.494061][   T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  164.496959][   T24] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  164.500729][   T24] usb 4-1: config 0 interface 0 has no altsetting 0
[  164.504936][   T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  164.507897][   T24] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  164.511165][   T24] usb 4-1: config 0 interface 0 has no altsetting 0
[  164.515043][   T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  164.517980][   T24] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  164.521915][   T24] usb 4-1: config 0 interface 0 has no altsetting 0
[  164.526801][   T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  164.530564][   T24] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  164.535157][   T24] usb 4-1: config 0 interface 0 has no altsetting 0
[  164.541468][   T24] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  164.546131][   T24] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  164.549050][   T24] usb 4-1: Product: syz
[  164.550475][   T24] usb 4-1: Manufacturer: syz
[  164.552117][   T24] usb 4-1: SerialNumber: syz
[  164.556150][   T24] usb 4-1: config 0 descriptor??
[  164.564663][   T24] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0
[  164.624418][ T5894] usb 1-1: unable to get BOS descriptor or descriptor too short
[  164.628803][ T5894] usb 1-1: config 1 interface 0 altsetting 9 bulk endpoint 0x82 has invalid maxpacket 1023
[  164.634345][ T5894] usb 1-1: config 1 interface 0 altsetting 9 bulk endpoint 0x3 has invalid maxpacket 1023
[  164.637641][ T5894] usb 1-1: config 1 interface 0 has no altsetting 0
[  164.643083][ T5894] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  164.646846][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.649995][ T5894] usb 1-1: Product: syz
[  164.653114][ T5894] usb 1-1: Manufacturer: syz
[  164.655040][ T5894] usb 1-1: SerialNumber: syz
[  164.660991][ T8922] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  164.667009][ T8922] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  164.670239][ T8753] hid-led 0003:1D34:000A.000C: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.1-1/input0
[  164.686406][ T8753] hid-led 0003:1D34:000A.000C: Dream Cheeky Webmail Notifier initialized
[  164.869583][ T5879] usb 2-1: USB disconnect, device number 18
[  164.884758][ T5894] usb 1-1: bad CDC descriptors
[  164.886820][    C1] usb 4-1: yurex_control_callback - control failed: -71
[  164.894117][   T10] usb 4-1: USB disconnect, device number 9
[  164.895861][ T5894] usb 1-1: USB disconnect, device number 23
[  164.909519][   T10] yurex 4-1:0.0: USB YUREX #0 now disconnected
[  165.456897][ T8930] loop0: detected capacity change from 0 to 16
[  165.460351][ T8930] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  165.692841][ T8753] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  165.741040][ T8944] loop0: detected capacity change from 0 to 1024
[  165.776040][   T34] audit: type=1800 audit(1769135781.997:16): pid=8944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1151" name="file1" dev="loop0" ino=2 res=0 errno=0
[  165.873617][ T8753] usb 2-1: Using ep0 maxpacket: 16
[  165.910915][ T8753] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  165.915045][ T8753] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  165.915728][ T4110] hfsplus: bad catalog file entry
[  165.918506][ T8753] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x4 has invalid wMaxPacketSize 0
[  165.918529][ T8753] usb 2-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 8
[  165.918545][ T8753] usb 2-1: config 1 interface 0 has no altsetting 0
[  165.933575][ T8753] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0201, bcdDevice= 0.40
[  165.933602][ T8753] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.933615][ T8753] usb 2-1: Product: syz
[  165.933624][ T8753] usb 2-1: Manufacturer: syz
[  165.933640][ T8753] usb 2-1: SerialNumber: syz
[  166.135766][ T4110] hfsplus: b-tree write err: -5, ino 3
[  166.169632][ T8753] usb 2-1: 0:2 : does not exist
[  166.180457][ T8753] usb 2-1: unit 3 not found!
[  166.181724][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  166.186028][ T8948] loop0: detected capacity change from 0 to 512
[  166.195756][ T8948] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  166.198814][ T8753] usb 2-1: USB disconnect, device number 19
[  166.214397][ T8948] EXT4-fs (loop0): invalid journal inode
[  166.216266][ T8948] EXT4-fs (loop0): can't get journal size
[  166.235386][ T6254] udevd[6254]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  166.256440][ T8948] EXT4-fs (loop0): 1 truncate cleaned up
[  166.260199][ T8948] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  166.299049][   T34] audit: type=1800 audit(1769135782.517:17): pid=8948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1152" name="file1" dev="loop0" ino=15 res=0 errno=0
[  166.334505][ T5830] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.664811][   T34] audit: type=1326 audit(1769135782.887:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8965 comm="syz.0.1160" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3a99acb9 code=0x7ffc0000
[  166.674620][   T34] audit: type=1326 audit(1769135782.897:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8965 comm="syz.0.1160" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3a99acb9 code=0x7ffc0000
[  166.691680][   T34] audit: type=1326 audit(1769135782.907:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8965 comm="syz.0.1160" exe="/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f7c3a99acb9 code=0x7ffc0000
[  166.704498][   T34] audit: type=1326 audit(1769135782.927:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8965 comm="syz.0.1160" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3a99acb9 code=0x7ffc0000
[  166.735826][   T34] audit: type=1326 audit(1769135782.937:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8967 comm="syz.0.1160" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7c3a95b58e code=0x7ffc0000
[  166.752518][   T34] audit: type=1326 audit(1769135782.937:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8965 comm="syz.0.1160" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c3a99acb9 code=0x7ffc0000
[  166.763613][   T34] audit: type=1326 audit(1769135782.957:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8965 comm="syz.0.1160" exe="/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f7c3a99acb9 code=0x7ffc0000
[  166.772892][   T34] audit: type=1326 audit(1769135782.957:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8965 comm="syz.0.1160" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7c3a93c0d9 code=0x7ffc0000
[  166.782357][    T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  166.850703][ T8971] tipc: Enabled bearer <eth:vlan1>, priority 10
[  166.951815][    T9] usb 4-1: Using ep0 maxpacket: 8
[  166.959323][    T9] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d
[  166.963673][ T8979] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized
[  166.965293][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.970130][    T9] usb 4-1: Product: syz
[  166.975572][    T9] usb 4-1: Manufacturer: syz
[  166.977441][    T9] usb 4-1: SerialNumber: syz
[  166.985073][    T9] usb 4-1: config 0 descriptor??
[  167.002605][    T9] gspca_main: sonixj-2.14.0 probing 0c45:613e
[  168.364212][   T10] tipc: Node number set to 3904571199
[  168.635181][ T9009] loop0: detected capacity change from 0 to 2048
[  168.641820][    T9] gspca_sonixj: i2c_w8 err -71
[  168.662907][ T9009]  loop0: p1 < > p3 < > p4 < >
[  168.665087][ T9009] loop0: partition table partially beyond EOD, truncated
[  168.668708][ T9009] loop0: p1 start 3405774849 is beyond EOD, truncated
[  168.671938][ T9009] loop0: p3 start 4284289 is beyond EOD, truncated
[  168.692388][    T9] sonixj 4-1:0.0: probe with driver sonixj failed with error -71
[  168.702338][   T24] usb 2-1: new full-speed USB device number 20 using dummy_hcd
[  168.711886][    T9] usb 4-1: USB disconnect, device number 10
[  168.853516][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  168.862418][   T24] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  168.866076][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  168.889672][   T24] usb 2-1: config 0 descriptor??
[  168.894492][ T9003] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  169.333087][   T24] elan 0003:04F3:0755.000D: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0
[  169.392719][ T9028] loop0: detected capacity change from 0 to 4096
[  169.418579][ T9028] NILFS (loop0): invalid segment: Checksum error in segment payload
[  169.428991][ T9028] NILFS (loop0): trying rollback from an earlier position
[  169.456710][ T9028] NILFS (loop0): recovery complete
[  169.516722][ T9030] loop3: detected capacity change from 0 to 64
[  169.544761][ T9030] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1186'.
[  169.702645][    T9] usb 2-1: USB disconnect, device number 20
[  169.817641][ T9034] loop0: detected capacity change from 0 to 1024
[  169.873316][   T53] hfsplus: b-tree write err: -5, ino 4
[  170.446072][ T9064] loop1: detected capacity change from 0 to 2048
[  170.502544][ T9064] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  170.580715][ T5834] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.101914][   T24] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  171.251771][   T24] usb 1-1: Using ep0 maxpacket: 8
[  171.258359][   T24] usb 1-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52
[  171.262987][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.266343][   T24] usb 1-1: Product: syz
[  171.268173][   T24] usb 1-1: Manufacturer: syz
[  171.270139][   T24] usb 1-1: SerialNumber: syz
[  171.278178][   T24] usb 1-1: config 0 descriptor??
[  171.497353][   T10] usb 1-1: USB disconnect, device number 24
[  171.758046][ T9101] loop1: detected capacity change from 0 to 4096
[  171.768659][ T9101] EXT4-fs: Ignoring removed nomblk_io_submit option
[  171.782890][ T9101] EXT4-fs (loop1): Test dummy encryption mode enabled
[  171.786789][ T9101] EXT4-fs (loop1): stripe (97) is not aligned with cluster size (16), stripe is disabled
[  171.813884][ T9101] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002]
[  171.817628][ T9101] System zones: 0-5
[  171.823180][ T9101] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  171.889167][ T9101] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))"
[  171.912586][ T5834] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.320892][ T9108] loop0: detected capacity change from 0 to 512
[  172.346515][ T9108] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  172.424088][ T9108] EXT4-fs (loop0): 1 truncate cleaned up
[  172.456078][ T9108] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  172.665071][ T5830] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.576215][ T9111] loop1: detected capacity change from 0 to 32768
[  173.731901][ T5894] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  173.886898][ T5894] usb 1-1: Using ep0 maxpacket: 32
[  173.894160][ T5894] usb 1-1: unable to get BOS descriptor or descriptor too short
[  173.906523][ T5894] usb 1-1: config 7 has an invalid interface number: 187 but max is 0
[  173.909716][ T5894] usb 1-1: config 7 has an invalid descriptor of length 55, skipping remainder of the config
[  173.921949][ T5894] usb 1-1: config 7 has no interface number 0
[  173.930683][ T5894] usb 1-1: config 7 interface 187 altsetting 6 has an endpoint descriptor with address 0xC7, changing to 0x87
[  173.945135][ T5894] usb 1-1: config 7 interface 187 altsetting 6 endpoint 0x87 has invalid maxpacket 65482, setting to 1024
[  173.950990][ T5894] usb 1-1: config 7 interface 187 altsetting 6 bulk endpoint 0x87 has invalid maxpacket 1024
[  173.955945][ T5894] usb 1-1: config 7 interface 187 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  173.961027][ T5894] usb 1-1: config 7 interface 187 has no altsetting 0
[  173.967824][ T5894] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb
[  173.970648][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.981331][ T5894] usb 1-1: Product: syz
[  173.984238][ T5894] usb 1-1: Manufacturer: syz
[  173.986261][ T5894] usb 1-1: SerialNumber: syz
[  174.001715][ T9119] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  174.210115][ T5894] usb 1-1: Limiting number of CPorts to U8_MAX
[  174.219636][ T5894] usb 1-1: Not enough endpoints found in device, aborting!
[  174.415639][ T5894] usb 1-1: USB disconnect, device number 25
[  175.019819][ T9139] macvlan2: entered allmulticast mode
[  175.024372][ T9139] syz_tun: entered promiscuous mode
[  175.027124][ T9139] syz_tun: entered allmulticast mode
[  175.035152][ T9139] team0: Port device macvlan2 added
[  175.241698][    T9] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  175.391636][    T9] usb 2-1: Using ep0 maxpacket: 8
[  175.395825][    T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7
[  175.402042][    T9] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  175.406299][    T9] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  175.409619][    T9] usb 2-1: Product: syz
[  175.411435][    T9] usb 2-1: Manufacturer: syz
[  175.413861][    T9] usb 2-1: SerialNumber: syz
[  175.541791][   T24] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  175.626291][    T9] usb 2-1: Handspring Visor / Palm OS: No valid connect info available
[  175.629963][    T9] usb 2-1: Handspring Visor / Palm OS: port 208, is for unknown use
[  175.633688][    T9] usb 2-1: Handspring Visor / Palm OS: port 187, is for Console use
[  175.636977][    T9] usb 2-1: Handspring Visor / Palm OS: Number of ports: 2
[  175.702726][   T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  175.706904][   T24] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  175.710885][   T24] usb 4-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00
[  175.731684][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.736516][   T24] usb 4-1: config 0 descriptor??
[  175.830687][    T9] usb 2-1: palm_os_3_probe - error -71 getting bytes available request
[  175.838546][    T9] visor 2-1:1.0: Handspring Visor / Palm OS converter detected
[  175.846485][    T9] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[  175.853310][    T9] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[  175.860027][    T9] usb 2-1: USB disconnect, device number 21
[  175.869095][    T9] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[  175.875831][    T9] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[  175.879610][    T9] visor 2-1:1.0: device disconnected
[  175.981950][ T9153] loop3: detected capacity change from 0 to 1024
[  175.992861][ T9153] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869)
[  175.996419][ T9153] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  176.001188][ T9153] EXT4-fs (loop3): invalid journal inode
[  176.009425][ T9153] EXT4-fs (loop3): can't get journal size
[  176.015820][ T9153] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  176.024253][   T24] usb 4-1: USB disconnect, device number 11
[  176.074805][ T9161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1241'.
[  176.243650][ T9163] loop0: detected capacity change from 0 to 32768
[  176.261025][ T9163] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  176.281326][ T9163] XFS (loop0): Ending clean mount
[  176.305957][ T9163] XFS (loop0): User initiated shutdown received.
[  176.308093][ T9163] XFS (loop0): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x105/0x150 (fs/xfs/xfs_fsops.c:466).  Shutting down filesystem.
[  176.312504][ T9163] XFS (loop0): Please unmount the filesystem and rectify the problem(s)
[  176.331426][ T5830] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  176.616611][ T7634] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  177.031636][   T24] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  177.191650][   T24] usb 4-1: Using ep0 maxpacket: 32
[  177.196645][   T24] usb 4-1: config 0 interface 0 altsetting 132 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  177.204691][   T24] usb 4-1: config 0 interface 0 has no altsetting 0
[  177.206924][   T24] usb 4-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.00
[  177.209915][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.235441][   T24] usb 4-1: config 0 descriptor??
[  177.747765][   T24] lg-g15 0003:046D:C227.000E: unknown main item tag 0x0
[  177.755873][   T24] lg-g15 0003:046D:C227.000E: unknown main item tag 0x0
[  177.765597][   T24] lg-g15 0003:046D:C227.000E: unknown main item tag 0x0
[  177.768885][   T24] lg-g15 0003:046D:C227.000E: unknown main item tag 0x0
[  177.777554][   T24] lg-g15 0003:046D:C227.000E: unknown main item tag 0x0
[  177.796023][   T24] lg-g15 0003:046D:C227.000E: hidraw0: USB HID v4.0a Device [HID 046d:c227] on usb-dummy_hcd.3-1/input0
[  177.949052][   T24] usb 4-1: USB disconnect, device number 12
[  178.482287][   T24] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  178.646394][   T24] usb 1-1: config 7 has an invalid interface number: 227 but max is 0
[  178.649734][   T24] usb 1-1: config 7 has no interface number 0
[  178.653556][   T24] usb 1-1: config 7 interface 227 has no altsetting 0
[  178.671349][   T24] usb 1-1: New USB device found, idVendor=79ee, idProduct=ea27, bcdDevice=e1.44
[  178.683238][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  178.691739][   T24] usb 1-1: Product: syz
[  178.693509][   T24] usb 1-1: Manufacturer: syz
[  178.696747][   T24] usb 1-1: SerialNumber: syz
[  178.740176][ T9208] loop1: detected capacity change from 0 to 512
[  178.915812][   T24] cdc_wdm 1-1:7.227: probe with driver cdc_wdm failed with error -22
[  178.933483][   T24] usb 1-1: USB disconnect, device number 26
[  179.086623][ T9216] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1263'.
[  179.137748][ T9212] loop3: detected capacity change from 0 to 32768
[  179.145674][ T9212] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1261 (9212)
[  179.162508][ T9212] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  179.166681][ T9212] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  179.318514][ T9212] BTRFS info (device loop3): enabling ssd optimizations
[  179.321349][ T9212] BTRFS info (device loop3): turning on async discard
[  179.332811][ T9212] BTRFS info (device loop3): enabling free space tree
[  179.433663][ T7634] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  179.856595][ T9252] loop0: detected capacity change from 0 to 24
[  179.871854][   T10] usb 2-1: new low-speed USB device number 22 using dummy_hcd
[  179.875422][ T9252] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  179.896784][ T9252] romfs: bad initial checksum on dev loop0.
[  180.055939][   T10] usb 2-1: config 0 has an invalid interface number: 113 but max is 0
[  180.060598][   T10] usb 2-1: config 0 has an invalid interface association descriptor of length 2, skipping
[  180.067051][   T10] usb 2-1: config 0 has no interface number 0
[  180.069170][   T10] usb 2-1: config 0 interface 113 has no altsetting 0
[  180.071402][   T10] usb 2-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=65.db
[  180.076547][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  180.082383][ T8967] syz_tun (unregistering): left allmulticast mode
[  180.083639][   T10] usb 2-1: config 0 descriptor??
[  180.118529][ T8967] team0: Port device macvlan2 removed
[  180.240472][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.261911][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  180.337135][   T10] usb 2-1: string descriptor 0 read error: -71
[  180.340768][   T10] asix 2-1:0.113: probe with driver asix failed with error -22
[  180.345872][   T10] usb 2-1: USB disconnect, device number 22
[  180.443956][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.530387][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.610446][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.680876][ T5218] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  180.688407][ T5218] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  180.693131][ T5218] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  180.697524][ T5218] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  180.700256][ T5218] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  180.789267][   T12] bridge_slave_1: left allmulticast mode
[  180.792405][   T12] bridge_slave_1: left promiscuous mode
[  180.797698][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  180.808874][   T12] bridge_slave_0: left allmulticast mode
[  180.811454][   T12] bridge_slave_0: left promiscuous mode
[  180.817117][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  180.995523][ T9274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1284'.
[  181.145017][   T12] gretap0 (unregistering): left promiscuous mode
[  181.279971][   T12] bond0 (unregistering): left promiscuous mode
[  181.285803][   T12] bond_slave_0: left promiscuous mode
[  181.287874][   T12] bond_slave_1: left promiscuous mode
[  181.297948][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  181.308514][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  181.312569][   T12] bond0 (unregistering): Released all slaves
[  181.317379][   T12] bond1 (unregistering): Released all slaves
[  181.330644][ T9274] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  181.526204][ T9282] loop1: detected capacity change from 0 to 4096
[  181.566790][ T9282] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  181.616601][ T9282] EXT4-fs (loop1): shut down requested (1)
[  181.647487][ T5834] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  181.742514][ T9263] chnl_net:caif_netlink_parms(): no params data found
[  181.790849][ T9293] loop1: detected capacity change from 0 to 2048
[  181.833083][ T9293] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  181.966498][   T12] hsr_slave_0: left promiscuous mode
[  181.971238][   T12] hsr_slave_1: left promiscuous mode
[  181.976329][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  181.981861][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  181.988201][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  182.001681][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  182.045416][   T12] veth1_macvtap: left promiscuous mode
[  182.048220][   T12] veth0_macvtap: left promiscuous mode
[  182.060796][   T12] veth1_vlan: left promiscuous mode
[  182.064458][   T12] veth0_vlan: left promiscuous mode
[  182.181915][   T10] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  182.344008][   T10] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  182.351614][   T10] usb 2-1: config 0 interface 0 has no altsetting 0
[  182.361676][   T10] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  182.365943][   T10] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  182.369383][   T10] usb 2-1: Product: syz
[  182.381717][   T10] usb 2-1: Manufacturer: syz
[  182.383572][   T10] usb 2-1: SerialNumber: syz
[  182.396664][   T10] usb 2-1: config 0 descriptor??
[  182.414593][   T10] usb 2-1: selecting invalid altsetting 0
[  182.652090][   T10] usb 2-1: USB disconnect, device number 23
[  182.753579][   T55] Bluetooth: hci0: command tx timeout
[  182.934550][   T12] team0 (unregistering): Port device team_slave_1 removed
[  182.985611][   T12] team0 (unregistering): Port device team_slave_0 removed
[  183.443553][ T9263] bridge0: port 1(bridge_slave_0) entered blocking state
[  183.452946][ T9263] bridge0: port 1(bridge_slave_0) entered disabled state
[  183.455817][ T9263] bridge_slave_0: entered allmulticast mode
[  183.476555][ T9263] bridge_slave_0: entered promiscuous mode
[  183.481673][ T9263] bridge0: port 2(bridge_slave_1) entered blocking state
[  183.496772][ T9263] bridge0: port 2(bridge_slave_1) entered disabled state
[  183.499108][ T9263] bridge_slave_1: entered allmulticast mode
[  183.502290][ T9263] bridge_slave_1: entered promiscuous mode
[  183.535901][ T9263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  183.543418][ T9263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  183.566879][ T9263] team0: Port device team_slave_0 added
[  183.570487][ T9263] team0: Port device team_slave_1 added
[  183.585179][ T9263] batman_adv: batadv0: Adding interface: batadv_slave_0
[  183.587386][ T9263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  183.599880][ T9263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  183.614839][ T9263] batman_adv: batadv0: Adding interface: batadv_slave_1
[  183.617546][ T9263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  183.641812][ T9263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  183.710120][   T12] IPVS: stop unused estimator thread 0...
[  183.716437][ T9310] loop1: detected capacity change from 0 to 8
[  183.748319][ T9310] SQUASHFS error: Failed to read block 0x1ec: -5
[  183.750803][ T9310] SQUASHFS error: Unable to read metadata cache entry [1ea]
[  183.794369][ T9263] hsr_slave_0: entered promiscuous mode
[  183.803833][ T9263] hsr_slave_1: entered promiscuous mode
[  184.038700][ T9263] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  184.046352][ T9263] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  184.054556][ T9263] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  184.066332][ T9263] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  184.107794][ T9263] bridge0: port 2(bridge_slave_1) entered blocking state
[  184.110748][ T9263] bridge0: port 2(bridge_slave_1) entered forwarding state
[  184.114473][ T9263] bridge0: port 1(bridge_slave_0) entered blocking state
[  184.117139][ T9263] bridge0: port 1(bridge_slave_0) entered forwarding state
[  184.126305][   T10] usb 2-1: new full-speed USB device number 24 using dummy_hcd
[  184.215836][ T9263] 8021q: adding VLAN 0 to HW filter on device bond0
[  184.229589][   T53] bridge0: port 1(bridge_slave_0) entered disabled state
[  184.235075][   T53] bridge0: port 2(bridge_slave_1) entered disabled state
[  184.247239][ T9263] 8021q: adding VLAN 0 to HW filter on device team0
[  184.255398][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[  184.257855][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[  184.265702][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[  184.268394][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[  184.274365][   T10] usb 2-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  184.278900][   T10] usb 2-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  184.288442][   T10] usb 2-1: config 0 interface 0 has no altsetting 0
[  184.290628][   T10] usb 2-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00
[  184.307311][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.316795][   T10] usb 2-1: config 0 descriptor??
[  184.332327][ T9313] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  184.510433][ T9263] 8021q: adding VLAN 0 to HW filter on device batadv0
[  184.759879][   T10] hid (null): global environment stack underflow
[  184.778669][ T9263] veth0_vlan: entered promiscuous mode
[  184.784634][   T10] hid-alps 0003:044E:1215.000F: global environment stack underflow
[  184.788630][   T10] hid-alps 0003:044E:1215.000F: item 0 4 1 11 parsing failed
[  184.799863][   T10] hid-alps 0003:044E:1215.000F: parse failed
[  184.803343][   T10] hid-alps 0003:044E:1215.000F: probe with driver hid-alps failed with error -22
[  184.808347][ T9263] veth1_vlan: entered promiscuous mode
[  184.822216][ T5218] Bluetooth: hci0: command tx timeout
[  184.848245][ T9263] veth0_macvtap: entered promiscuous mode
[  184.854398][ T9263] veth1_macvtap: entered promiscuous mode
[  184.869381][ T9263] batman_adv: batadv0: Interface activated: batadv_slave_0
[  184.877986][ T9263] batman_adv: batadv0: Interface activated: batadv_slave_1
[  184.885838][ T5858] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  184.902271][ T5858] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  184.918207][ T5858] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  184.932981][ T5858] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  184.971134][  T133] usb 2-1: USB disconnect, device number 24
[  185.072770][ T1006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  185.086262][ T1006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  185.110415][ T1006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  185.115046][ T1006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  185.178531][ T9346] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1279'.
[  185.484069][ T9350] loop4: detected capacity change from 0 to 32768
[  185.546039][ T9350] (syz.4.1293,9350,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  185.553443][ T9350] (syz.4.1293,9350,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  185.567210][ T9350] JBD2: Ignoring recovery information on journal
[  185.878625][ T9350] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  185.971206][ T9263] ocfs2: Unmounting device (7,4) on (node local)
[  186.181694][ T5218] Bluetooth: hci1: command 0x0406 tx timeout
[  186.396344][ T9362] loop1: detected capacity change from 0 to 32768
[  186.425917][ T9362] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1298 (9362)
[  186.458057][ T9362] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  186.465601][ T9362] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[  186.628767][ T9362] BTRFS info (device loop1): enabling ssd optimizations
[  186.631012][ T9362] BTRFS info (device loop1): turning on async discard
[  186.647905][ T9362] BTRFS info (device loop1): enabling free space tree
[  186.848821][ T5834] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  186.914220][   T55] Bluetooth: hci0: command tx timeout
[  186.994155][ T9395] loop3: detected capacity change from 0 to 128
[  187.012682][   T10] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[  187.014635][ T9395] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  187.023417][ T9395] ext4 filesystem being mounted at /217/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  187.084912][ T7634] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  187.207389][   T10] usb 5-1: unable to get BOS descriptor or descriptor too short
[  187.226743][   T10] usb 5-1: not running at top speed; connect to a high speed hub
[  187.231076][   T10] usb 5-1: config 0 has an invalid interface number: 254 but max is 0
[  187.248155][   T10] usb 5-1: config 0 has no interface number 0
[  187.250792][   T10] usb 5-1: config 0 interface 254 has no altsetting 0
[  187.269106][   T10] usb 5-1: New USB device found, idVendor=0421, idProduct=74b0, bcdDevice=b6.8f
[  187.272905][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.291662][   T10] usb 5-1: Product: syz
[  187.293427][   T10] usb 5-1: Manufacturer: syz
[  187.298202][   T10] usb 5-1: SerialNumber: syz
[  187.302860][   T10] usb 5-1: config 0 descriptor??
[  187.316641][   T10] cdc_phonet 5-1:0.254: probe with driver cdc_phonet failed with error -22
[  187.380651][ T9409] input: syz1 as /devices/virtual/input/input13
[  187.454945][ T9411] loop3: detected capacity change from 0 to 4096
[  187.510649][ T9411] ntfs3(loop3): MFT: r=1b, expect seq=1 instead of 0!
[  187.552582][   T10] usb 5-1: USB disconnect, device number 2
[  187.983298][ T9440] loop1: detected capacity change from 0 to 512
[  187.999590][ T9440] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.1326: inode has both inline data and extents flags
[  188.012327][ T9440] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1326: couldn't read orphan inode 15 (err -117)
[  188.018706][ T9440] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  188.150605][ T9446] Option 'TXƮ' to dns_resolver key: bad/missing value
[  188.167820][ T5865] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  188.903884][ T5834] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  188.922402][ T5865] usb 4-1: Using ep0 maxpacket: 16
[  188.926851][ T5865] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  188.935068][ T5865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  188.944577][ T5865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  188.948960][ T5865] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  188.955193][ T5865] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  188.968727][ T5865] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  188.982444][   T55] Bluetooth: hci0: command tx timeout
[  188.987025][ T5865] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  188.991418][ T5865] usb 4-1: Manufacturer: syz
[  188.997823][ T5865] usb 4-1: config 0 descriptor??
[  189.192995][ T9456] loop1: detected capacity change from 0 to 32768
[  189.197686][ T9456] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1331 (9456)
[  189.205767][ T9456] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  189.209498][ T9456] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  189.258643][ T9463] netlink: 'syz.4.1332': attribute type 9 has an invalid length.
[  189.283704][ T5865] rc_core: IR keymap rc-hauppauge not found
[  189.287523][ T5865] Registered IR keymap rc-empty
[  189.302150][ T5865] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  189.333609][ T5865] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  189.344824][ T9456] BTRFS info (device loop1): rebuilding free space tree
[  189.359133][ T9456] BTRFS info (device loop1): disabling free space tree
[  189.362697][ T9456] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  189.362723][ T5865] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  189.366391][ T9456] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  189.380802][ T9456] BTRFS info (device loop1): turning off barriers
[  189.384422][ T9456] BTRFS info (device loop1): force clearing of disk cache
[  189.393161][ T5865] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input14
[  189.404659][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  189.410866][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.428786][ T5865] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  189.444521][ T5865] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  189.469577][ T5865] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  189.491750][ T5865] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  189.511144][ T9480] BTRFS info (device loop1): space_info DATA+METADATA (sub-group id 0) has 159744 free, is not full
[  189.516626][ T9480] BTRFS info (device loop1): space_info total=3276800, used=49152, pinned=16384, reserved=1605632, may_use=1445888, readonly=0 zone_unusable=0
[  189.522128][ T9480] BTRFS info (device loop1): global_block_rsv: size 1048576 reserved 1048576
[  189.525927][ T9480] BTRFS info (device loop1): trans_block_rsv: size 0 reserved 0
[  189.528875][ T9480] BTRFS info (device loop1): chunk_block_rsv: size 0 reserved 0
[  189.531580][ T9480] BTRFS info (device loop1): delayed_block_rsv: size 0 reserved 0
[  189.534032][ T9480] BTRFS info (device loop1): delayed_refs_rsv: size 98304 reserved 32768
[  189.543820][ T5865] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  189.569191][ T9482] netlink: 'syz.4.1335': attribute type 1 has an invalid length.
[  189.574048][ T5865] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  189.576436][ T9482] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1335'.
[  189.586136][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  189.589993][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.603457][ T5865] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  189.645686][ T5865] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  189.677679][ T5865] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  189.687905][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  189.691437][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.702652][ T5865] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  189.729178][ T5865] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  189.739278][ T5865] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  189.752530][ T5865] usb 4-1: USB disconnect, device number 13
[  189.839554][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  189.851614][ T5834] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  189.866970][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.122069][   T13] bridge_slave_1: left allmulticast mode
[  190.123955][   T13] bridge_slave_1: left promiscuous mode
[  190.125863][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  190.137206][   T13] bridge_slave_0: left allmulticast mode
[  190.139237][   T13] bridge_slave_0: left promiscuous mode
[  190.141396][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  190.316201][ T9510] netlink: 'syz.4.1346': attribute type 1 has an invalid length.
[  190.318662][ T9510] netlink: 'syz.4.1346': attribute type 1 has an invalid length.
[  190.701707][ T5865] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  190.852958][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  190.857432][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  190.868990][   T13] bond0 (unregistering): Released all slaves
[  190.873058][ T5865] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  190.876277][ T5865] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  190.880765][ T5865] usb 5-1: Product: syz
[  190.884864][ T5865] usb 5-1: Manufacturer: syz
[  190.911606][ T5865] usb 5-1: SerialNumber: syz
[  190.959376][ T9535] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  191.023730][ T9535] overlayfs: failed lookup in lower (newroot/446, name='file2', err=-40): overlapping layers
[  191.050524][ T9535] overlayfs: failed to look up (file2) for ino (-40)
[  191.068618][ T9541] overlayfs: failed lookup in lower (newroot/446, name='file0', err=-40): overlapping layers
[  191.093521][ T9541] overlayfs: failed to look up (file0) for ino (-40)
[  191.105916][ T9544] netlink: 'syz.3.1357': attribute type 83 has an invalid length.
[  191.353583][ T5865] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  191.376672][   T13] hsr_slave_0: left promiscuous mode
[  191.378972][   T13] hsr_slave_1: left promiscuous mode
[  191.384648][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  191.388138][ T5865] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  191.399644][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  191.405184][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  191.407537][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  191.460654][   T13] veth0_macvtap: left allmulticast mode
[  191.466642][   T13] veth1_macvtap: left promiscuous mode
[  191.468908][   T13] veth0_macvtap: left promiscuous mode
[  191.471206][   T13] veth1_vlan: left promiscuous mode
[  191.475114][   T13] veth0_vlan: left promiscuous mode
[  191.560916][ T9569] loop3: detected capacity change from 0 to 64
[  191.671667][ T5894] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  191.757749][ T9571] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input15
[  191.807008][ T5865] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO
[  191.813453][ T5865] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  191.818489][ T5865] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  191.823415][ T5894] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  191.826697][ T5894] usb 2-1: config 0 interface 0 has no altsetting 0
[  191.828777][ T5894] usb 2-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00
[  191.834491][ T5865] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71
[  191.846954][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.863655][ T5865] usb 5-1: USB disconnect, device number 3
[  191.872683][ T5894] usb 2-1: config 0 descriptor??
[  192.298459][ T5894] monterey 0003:0566:3004.0010: global environment stack underflow
[  192.301800][ T5894] monterey 0003:0566:3004.0010: item 0 1 1 11 parsing failed
[  192.305221][ T5894] monterey 0003:0566:3004.0010: probe with driver monterey failed with error -22
[  192.436709][   T13] team0 (unregistering): Port device team_slave_1 removed
[  192.512333][   T13] team0 (unregistering): Port device team_slave_0 removed
[  192.529421][ T8753] usb 2-1: USB disconnect, device number 25
[  192.829876][ T9593] binfmt_misc: register: failed to install interpreter file ./file0
[  192.969976][ T5865] kernel write not supported for file bpf-prog (pid: 5865 comm: kworker/0:3)
[  193.145825][ T9600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1377'.
[  193.425932][ T9616] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  193.543424][ T8753] usb 4-1: new full-speed USB device number 14 using dummy_hcd
[  193.761229][ T8753] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  193.779600][ T8753] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.801482][ T8753] usb 4-1: Product: syz
[  193.803202][ T8753] usb 4-1: Manufacturer: syz
[  193.804692][ T8753] usb 4-1: SerialNumber: syz
[  193.822269][ T8753] usb 4-1: config 0 descriptor??
[  193.833969][ T8753] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  194.570080][ T5897] IPVS: starting estimator thread 0...
[  194.661722][ T9660] IPVS: using max 86 ests per chain, 206400 per kthread
[  194.681458][ T9666] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1401'.
[  195.119235][ T9679] loop1: detected capacity change from 0 to 16
[  195.128078][ T9679] erofs (device loop1): mounted with root inode @ nid 36.
[  195.707283][ T8753] gspca_stk1135: reg_w 0x200 err -71
[  195.710358][ T8753] gspca_stk1135: serial bus timeout: status=0x00
[  195.720875][ T8753] gspca_stk1135: Sensor write failed
[  195.723572][ T8753] gspca_stk1135: serial bus timeout: status=0x00
[  195.726203][ T8753] gspca_stk1135: Sensor write failed
[  195.727976][ T8753] gspca_stk1135: serial bus timeout: status=0x00
[  195.729947][ T8753] gspca_stk1135: Sensor read failed
[  195.733546][ T8753] gspca_stk1135: serial bus timeout: status=0x00
[  195.736018][ T8753] gspca_stk1135: Sensor read failed
[  195.739369][ T8753] gspca_stk1135: Detected sensor type unknown (0x0)
[  195.747947][ T8753] gspca_stk1135: serial bus timeout: status=0x00
[  195.750964][ T8753] gspca_stk1135: Sensor read failed
[  195.917671][ T8753] gspca_stk1135: serial bus timeout: status=0x00
[  195.919745][ T8753] gspca_stk1135: Sensor read failed
[  195.921453][ T8753] gspca_stk1135: serial bus timeout: status=0x00
[  195.923597][ T8753] gspca_stk1135: Sensor write failed
[  195.925372][ T8753] gspca_stk1135: serial bus timeout: status=0x00
[  195.927737][ T8753] gspca_stk1135: Sensor write failed
[  195.930095][ T8753] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71
[  195.935311][ T8753] usb 4-1: USB disconnect, device number 14
[  196.330987][ T9719] : renamed from vlan0 (while UP)
[  196.492010][ T5865] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  196.653567][ T5865] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e
[  196.658869][ T5865] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  196.685839][ T5865] usb 5-1: config 0 descriptor??
[  196.872048][ T5892] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  196.916110][ T5865] ath6kl: Failed to submit usb control message: -71
[  196.919158][ T5865] ath6kl: unable to send the bmi data to the device: -71
[  196.924185][ T5865] ath6kl: Unable to send get target info: -71
[  196.941897][ T5865] ath6kl: Failed to init ath6kl core: -71
[  196.944970][ T5865] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71
[  196.965934][ T5865] usb 5-1: USB disconnect, device number 4
[  197.031821][ T5892] usb 2-1: Using ep0 maxpacket: 16
[  197.036710][ T5892] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 8.00
[  197.041015][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.059718][ T5892] usb 2-1: config 0 descriptor??
[  197.068298][ T5892] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected
[  197.075070][ T5892] usb 2-1: Detected FT4232H
[  197.268388][ T5892] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  197.277772][ T5892] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  197.296901][ T5892] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  197.321970][ T5892] usb 2-1: USB disconnect, device number 26
[  197.339299][ T5892] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  197.349413][ T5892] ftdi_sio 2-1:0.0: device disconnected
[  197.366907][ T9766] loop3: detected capacity change from 0 to 1024
[  197.408484][ T9766] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  197.486416][ T7634] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.639197][ T9785] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1443'.
[  197.867452][ T9797] loop3: detected capacity change from 0 to 256
[  197.874220][ T9797] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  197.954472][ T9798] loop4: detected capacity change from 0 to 512
[  197.967120][ T9798] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  198.091197][ T9798] EXT4-fs (loop4): orphan cleanup on readonly fs
[  198.098375][ T9798] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  198.101087][ T9798] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2
[  198.129936][ T9798] EXT4-fs (loop4): 1 truncate cleaned up
[  198.140099][ T9798] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  198.272625][ T9807] loop1: detected capacity change from 0 to 512
[  198.275266][ T9807] EXT4-fs: Ignoring removed oldalloc option
[  198.277629][ T9807] EXT4-fs: quotafile must be on filesystem root
[  198.297993][ T9804] bond3: Removing last arp target with arp_interval on
[  198.593522][ T8753] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  198.600464][ T9263] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.754732][ T8753] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  198.759632][ T8753] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  198.765615][ T8753] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  198.769609][ T8753] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  198.773472][ T8753] usb 2-1: SerialNumber: syz
[  198.990951][ T8753] usb 2-1: 0:2 : does not exist
[  198.997074][ T8753] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5)
[  199.003650][ T8753] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5)
[  199.006250][ T8753] usb 2-1: unit 6 not found!
[  199.019304][ T8753] usb 2-1: USB disconnect, device number 27
[  199.047185][ T6254] udevd[6254]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  199.117669][ T9815] loop4: detected capacity change from 0 to 1024
[  199.121138][ T9815] EXT4-fs: inline encryption not supported
[  199.141314][ T9815] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  199.168625][ T9263] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.396167][ T9830] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1460'.
[  199.413026][ T9830] bond0: entered promiscuous mode
[  199.414655][ T9830] bond_slave_0: entered promiscuous mode
[  199.416606][ T9830] bond_slave_1: entered promiscuous mode
[  199.432559][ T9830] bond0: left promiscuous mode
[  199.434162][ T9830] bond_slave_0: left promiscuous mode
[  199.436039][ T9830] bond_slave_1: left promiscuous mode
[  199.464794][ T1368] ieee802154 phy0 wpan0: encryption failed: -22
[  199.466804][ T1368] ieee802154 phy1 wpan1: encryption failed: -22
[  199.513024][ T9838] loop4: detected capacity change from 0 to 512
[  199.516181][ T9838] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  199.550924][ T9838] EXT4-fs (loop4): 1 truncate cleaned up
[  199.567367][ T9838] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  199.587485][ T9838] syz.4.1465 (pid 9838) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  199.625160][ T9845] loop1: detected capacity change from 0 to 16
[  199.629603][ T9845] erofs (device loop1): mounted with root inode @ nid 36.
[  199.636294][ T9263] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.814078][ T9852] pim6reg: entered allmulticast mode
[  199.823984][ T9852] pim6reg: left allmulticast mode
[  199.900898][ T9854] loop3: detected capacity change from 0 to 512
[  199.912927][ T9854] EXT4-fs (loop3): Test dummy encryption mode enabled
[  199.930021][ T9854] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  199.938021][ T9854] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.1471: bad orphan inode 131083
[  199.945927][ T9854] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  200.026877][ T7634] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.727069][ T9871] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1477'.
[  201.387103][ T9883] loop3: detected capacity change from 0 to 8192
[  202.099443][ T9885] loop3: detected capacity change from 0 to 131072
[  202.104047][ T9885] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0)
[  202.107349][ T9885] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  202.112238][ T9885] F2FS-fs (loop3): invalid crc value
[  202.164790][ T9885] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  202.170976][ T9885] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  202.174378][ T9885] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  202.613900][ T9905] loop3: detected capacity change from 0 to 1024
[  202.649873][ T9904] hfsplus: invalid extended attribute record
[  202.666181][   T32] hfsplus: b-tree write err: -5, ino 4
[  202.732285][ T9907] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1490'.
[  202.900563][ T9913] loop3: detected capacity change from 0 to 4096
[  202.921131][ T9913] NILFS (loop3): invalid segment: Checksum error in segment payload
[  202.925344][ T9913] NILFS (loop3): trying rollback from an earlier position
[  202.947828][ T9913] NILFS (loop3): recovery complete
[  202.956947][ T9916] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  203.164703][ T9923] netlink: 'syz.1.1497': attribute type 1 has an invalid length.
[  203.168434][ T9923] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1497'.
[  203.201765][ T8753] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  203.326200][ T9933] loop3: detected capacity change from 0 to 1024
[  203.348019][ T9933] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  203.368106][ T7634] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.380983][ T8753] usb 5-1: Using ep0 maxpacket: 16
[  203.385843][ T8753] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  203.390022][ T8753] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  203.394262][ T8753] usb 5-1: New USB device found, idVendor=05ac, idProduct=0231, bcdDevice= 0.00
[  203.397858][ T8753] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  203.405694][ T8753] usb 5-1: config 0 descriptor??
[  203.442249][ T9938] sctp: [Deprecated]: syz.3.1503 (pid 9938) Use of int in max_burst socket option.
[  203.442249][ T9938] Use struct sctp_assoc_value instead
[  203.483998][ T5894] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  203.487011][ T9940] loop3: detected capacity change from 0 to 128
[  203.506452][ T9940] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  203.516785][ T9940] ext4 filesystem being mounted at /291/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  203.557244][ T7634] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  203.619505][ T8753] usb 5-1: string descriptor 0 read error: -71
[  203.635086][ T9944] netlink: 'syz.3.1505': attribute type 2 has an invalid length.
[  203.641614][ T5894] usb 2-1: Using ep0 maxpacket: 32
[  203.648481][ T8753] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input16
[  203.656549][ T5894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11
[  203.661652][ T5894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  203.665985][ T5894] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87
[  203.670668][ T5894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  203.684485][ T5262] bcm5974 5-1:0.0: could not read from device
[  203.711251][ T5894] usb 2-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68
[  203.721646][ T5262] bcm5974 5-1:0.0: could not read from device
[  203.724447][ T8753] usb 5-1: USB disconnect, device number 5
[  203.732263][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.733782][ T5837] bcm5974 5-1:0.0: could not read from device
[  203.735394][ T5894] usb 2-1: Product: syz
[  203.735411][ T5894] usb 2-1: Manufacturer: syz
[  203.735421][ T5894] usb 2-1: SerialNumber: syz
[  203.746807][ T5894] usb 2-1: config 0 descriptor??
[  203.768277][ T5894] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input17
[  203.800865][ T5262] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  203.818668][ T5262] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  203.835196][ T5262] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  203.841325][ T5262] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  203.884769][ T5837] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  203.905641][ T5262] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  203.914081][ T5262] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  203.926816][ T5262] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  203.964868][ T8753] usb 2-1: USB disconnect, device number 28
[  204.538464][ T9966] loop1: detected capacity change from 0 to 16
[  204.553226][ T9966] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  204.711364][ T9978] veth1_macvtap: left promiscuous mode
[  204.714491][ T9978] macsec0: entered promiscuous mode
[  204.723084][ T9978] veth1_macvtap: entered promiscuous mode
[  204.728496][ T9978] macsec0: left promiscuous mode
[  204.733491][ T9980] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1518'.
[  204.742174][ T9980] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1518'.
[  205.861395][   T10] usb 5-1: new full-speed USB device number 6 using dummy_hcd
[  205.951352][T10016] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1528'.
[  206.034151][   T10] usb 5-1: config 0 interface 0 altsetting 66 endpoint 0x81 has invalid wMaxPacketSize 0
[  206.048487][   T10] usb 5-1: config 0 interface 0 has no altsetting 0
[  206.056903][   T10] usb 5-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00
[  206.069684][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  206.099312][   T10] usb 5-1: config 0 descriptor??
[  206.159200][T10026] loop3: detected capacity change from 0 to 4096
[  206.193186][T10026] NILFS (loop3): mounting unchecked fs
[  206.194935][T10026] NILFS (loop3): recovery required for readonly filesystem
[  206.197398][T10026] NILFS (loop3): write access will be enabled during recovery
[  206.201291][T10026] NILFS (loop3): invalid segment: Checksum error in segment payload
[  206.205035][T10026] NILFS (loop3): trying rollback from an earlier position
[  206.220738][T10026] NILFS (loop3): norecovery option specified, skipping roll-forward recovery
[  206.225529][T10026] NILFS (loop3): The specified checkpoint is not a snapshot (checkpoint number=2)
[  206.565076][   T10] cypress 0003:04B4:0001.0011: unbalanced collection at end of report description
[  206.568762][   T10] cypress 0003:04B4:0001.0011: parse failed
[  206.570952][   T10] cypress 0003:04B4:0001.0011: probe with driver cypress failed with error -22
[  206.726820][T10051] loop1: detected capacity change from 0 to 8
[  206.733006][T10051] SQUASHFS error: Unable to read inode 0xa7
[  206.768555][  T133] usb 5-1: USB disconnect, device number 6
[  207.020094][T10059] loop3: detected capacity change from 0 to 32768
[  207.077601][T10059] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  207.152761][T10059] XFS (loop3): Ending clean mount
[  207.158731][T10059] XFS (loop3): Quotacheck needed: Please wait.
[  207.200485][T10059] XFS (loop3): Quotacheck: Done.
[  207.236547][ T7634] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  207.241336][T10070] loop1: detected capacity change from 0 to 32768
[  207.245831][T10070] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1549 (10070)
[  207.253380][T10070] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  207.257273][T10070] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  207.431192][T10070] BTRFS info (device loop1): enabling ssd optimizations
[  207.434738][T10070] BTRFS info (device loop1): turning on async discard
[  207.437036][T10070] BTRFS info (device loop1): enabling free space tree
[  208.004547][ T5834] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  209.097292][T10121] loop1: detected capacity change from 0 to 1024
[  209.107842][T10121] EXT4-fs: inline encryption not supported
[  209.115115][T10121] EXT4-fs: Ignoring removed nobh option
[  209.127698][T10121] EXT4-fs: Ignoring removed bh option
[  209.228751][T10121] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  209.311447][T10121] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt.
[  209.707086][ T5834] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  209.923546][   T34] kauditd_printk_skb: 6 callbacks suppressed
[  209.923564][   T34] audit: type=1326 audit(1769135826.147:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10131 comm="syz.1.1565" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1099acb9 code=0x7ffc0000
[  209.978270][   T34] audit: type=1326 audit(1769135826.157:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10131 comm="syz.1.1565" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1099acb9 code=0x7ffc0000
[  210.529532][T10135] loop3: detected capacity change from 0 to 32768
[  210.532734][   T34] audit: type=1326 audit(1769135826.157:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10131 comm="syz.1.1565" exe="/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7fef1099acb9 code=0x7ffc0000
[  210.552954][   T34] audit: type=1326 audit(1769135826.157:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10131 comm="syz.1.1565" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1099acb9 code=0x7ffc0000
[  210.575656][T10138] loop1: detected capacity change from 0 to 512
[  210.578297][   T34] audit: type=1326 audit(1769135826.157:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10131 comm="syz.1.1565" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1099acb9 code=0x7ffc0000
[  210.594369][T10135] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1566 (10135)
[  210.628940][T10138] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  210.680916][T10138] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.1567: bad orphan inode 15
[  210.701389][T10138] ext4_test_bit(bit=14, block=18) = 1
[  210.708239][T10138] is_bad_inode(inode)=0
[  210.710349][T10138] NEXT_ORPHAN(inode)=1023
[  210.715178][T10138] max_ino=32
[  210.716370][T10138] i_nlink=0
[  210.724118][T10138] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none.
[  210.729715][T10138] ext2 filesystem being mounted at /515/qY3aK supports timestamps until 2038-01-19 (0x7fffffff)
[  210.764520][T10135] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  210.769680][T10135] BTRFS info (device loop3): using blake2b (blake2b-256-lib) checksum algorithm
[  210.866599][ T5834] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0009-000000000000.
[  210.892778][T10135] BTRFS info (device loop3): enabling ssd optimizations
[  210.895684][T10135] BTRFS info (device loop3): turning on async discard
[  210.898386][T10135] BTRFS info (device loop3): enabling free space tree
[  210.900976][T10135] BTRFS info (device loop3): use zstd compression, level 3
[  211.012456][ T7634] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  211.034366][T10158] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1568'.
[  211.429007][T10174] Bluetooth: MGMT ver 1.23
[  211.825009][T10184] loop3: detected capacity change from 0 to 32768
[  211.834706][T10184] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1580 (10184)
[  211.868524][T10184] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  211.875262][T10184] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  211.954218][T10184] BTRFS info (device loop3): enabling ssd optimizations
[  211.956925][T10184] BTRFS info (device loop3): turning on async discard
[  211.970996][T10184] BTRFS info (device loop3): enabling free space tree
[  212.081937][ T7634] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  212.416203][T10209] loop4: detected capacity change from 0 to 128
[  212.422937][T10209] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  212.431892][T10209] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  212.566514][T10213] loop3: detected capacity change from 0 to 4096
[  212.574234][T10213] ntfs3(loop3): ino=3, Correct links count -> 2.
[  212.833759][T10225] loop4: detected capacity change from 0 to 128
[  212.852326][T10225] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  212.857568][T10225] ext4 filesystem being mounted at /93/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  212.932687][T10228] EXT4-fs (loop4): shut down requested (0)
[  212.974098][ T9263] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  213.033677][ T8753] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  213.204444][T10234] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  213.224557][ T8753] usb 4-1: config 0 has no interfaces?
[  213.226463][ T8753] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  213.229678][ T8753] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  213.243923][ T8753] usb 4-1: config 0 descriptor??
[  213.292449][T10232] loop1: detected capacity change from 0 to 40427
[  213.299761][T10232] F2FS-fs (loop1): Invalid SB checksum offset: 0
[  213.313467][T10232] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  213.318456][T10232] F2FS-fs (loop1): invalid crc value
[  213.368897][T10232] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  213.377446][T10232] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[  213.379773][T10232] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  213.388437][T10232] syz.1.1595: attempt to access beyond end of device
[  213.388437][T10232] loop1: rw=2049, sector=53248, nr_sectors = 8 limit=40427
[  213.396581][T10232] syz.1.1595: attempt to access beyond end of device
[  213.396581][T10232] loop1: rw=2049, sector=53256, nr_sectors = 8 limit=40427
[  213.418434][ T5834] syz-executor: attempt to access beyond end of device
[  213.418434][ T5834] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  213.426936][ T5834] CPU: 1 UID: 0 PID: 5834 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  213.426963][ T5834] Tainted: [L]=SOFTLOCKUP
[  213.426967][ T5834] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  213.426974][ T5834] Call Trace:
[  213.426980][ T5834]  <TASK>
[  213.426986][ T5834]  dump_stack_lvl+0xe8/0x150
[  213.427008][ T5834]  f2fs_handle_critical_error+0x37c/0x540
[  213.427032][ T5834]  f2fs_write_end_io+0x886/0xb60
[  213.427062][ T5834]  __submit_merged_bio+0x256/0x650
[  213.427083][ T5834]  __submit_merged_write_cond+0x269/0x530
[  213.427103][ T5834]  f2fs_write_data_pages+0x2806/0x3360
[  213.427144][ T5834]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  213.427196][ T5834]  ? do_raw_spin_unlock+0x4d/0x210
[  213.427216][ T5834]  ? free_unref_folios+0x13d1/0x14d0
[  213.427238][ T5834]  ? __lock_acquire+0x6b5/0x2cf0
[  213.427252][ T5834]  ? folios_put_refs+0x58a/0x680
[  213.427281][ T5834]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  213.427298][ T5834]  do_writepages+0x32e/0x550
[  213.427321][ T5834]  ? do_raw_spin_unlock+0x4d/0x210
[  213.427339][ T5834]  filemap_fdatawrite+0x1e9/0x2f0
[  213.427358][ T5834]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  213.427403][ T5834]  ? do_raw_spin_unlock+0x4d/0x210
[  213.427420][ T5834]  f2fs_sync_dirty_inodes+0x30e/0x810
[  213.427445][ T5834]  f2fs_write_checkpoint+0x9c6/0x2490
[  213.427474][ T5834]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  213.427521][ T5834]  kill_f2fs_super+0x308/0x710
[  213.427535][ T5834]  ? __pfx_kill_f2fs_super+0x10/0x10
[  213.427562][ T5834]  deactivate_locked_super+0xbc/0x130
[  213.427577][ T5834]  cleanup_mnt+0x437/0x4d0
[  213.427587][ T5834]  ? _raw_spin_unlock_irq+0x23/0x50
[  213.427636][ T5834]  task_work_run+0x1d9/0x270
[  213.427655][ T5834]  ? __pfx_task_work_run+0x10/0x10
[  213.427679][ T5834]  exit_to_user_mode_loop+0xed/0x480
[  213.427693][ T5834]  ? rcu_is_watching+0x15/0xb0
[  213.427710][ T5834]  do_syscall_64+0x2b7/0xf80
[  213.427721][ T5834]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.427732][ T5834]  ? trace_irq_disable+0x37/0x100
[  213.427759][ T5834]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.427770][ T5834] RIP: 0033:0x7fef1099bf17
[  213.427783][ T5834] Code: a2 c7 05 7c 96 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  213.427793][ T5834] RSP: 002b:00007ffd8d008ab8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  213.427808][ T5834] RAX: 0000000000000000 RBX: 00007fef10a0471f RCX: 00007fef1099bf17
[  213.427816][ T5834] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd8d008b70
[  213.427823][ T5834] RBP: 00007ffd8d008b70 R08: 00007ffd8d009b70 R09: 00000000ffffffff
[  213.427830][ T5834] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd8d009c00
[  213.427837][ T5834] R13: 00007fef10a0471f R14: 000000000003412e R15: 00007ffd8d009c40
[  213.427859][ T5834]  </TASK>
[  213.427865][ T5834] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  213.553907][ T5894] usb 4-1: USB disconnect, device number 15
[  213.821651][ T5892] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  213.881214][T10260] loop1: detected capacity change from 0 to 4096
[  213.898344][T10260] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[  213.918775][T10260] ntfs3(loop1): ino=1d, mi_enum_attr
[  213.921200][T10260] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  213.930474][T10260] ntfs3(loop1): ino=1d, mi_enum_attr
[  213.978214][ T5892] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0
[  213.986877][ T5892] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  214.000549][ T5892] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4
[  214.017148][ T5892] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00
[  214.020071][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  214.027691][ T5892] usb 5-1: Product: syz
[  214.029295][ T5892] usb 5-1: Manufacturer: syz
[  214.031093][ T5892] usb 5-1: SerialNumber: syz
[  214.040458][ T5892] usb 5-1: config 0 descriptor??
[  214.044876][ T5892] usb-storage 5-1:0.0: USB Mass Storage device detected
[  214.071855][ T5892] usb-storage 5-1:0.0: Quirks match for vid 1908 pid 1315: 20000
[  214.076167][T10264] loop1: detected capacity change from 0 to 4096
[  214.099943][T10264] ntfs3(loop1): Failed to load $Volume (-22).
[  214.258955][ T8753] usb 5-1: USB disconnect, device number 7
[  214.350652][T10280] loop1: detected capacity change from 0 to 512
[  214.359395][T10280] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.1615: inode has both inline data and extents flags
[  214.372747][T10280] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1615: couldn't read orphan inode 15 (err -117)
[  214.377676][T10280] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  214.389467][T10280] EXT4-fs (loop1): shut down requested (1)
[  214.397130][T10280] overlayfs: failed to create directory ./bus/work (errno: 5); mounting read-only
[  214.403351][T10280] overlayfs: failed to get uuid (/file0, err=-5); falling back to uuid=null.
[  214.406268][T10280] overlayfs: NFS export requires an index dir, falling back to nfs_export=off.
[  214.519735][ T6344] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  214.627876][ T5893] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.702613][ T5893] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.776292][ T5218] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  214.784812][ T5218] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  214.785732][ T5893] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.800870][ T5218] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  214.806490][ T5218] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  214.824150][ T5218] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  214.879753][ T5893] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.209765][T10283] chnl_net:caif_netlink_parms(): no params data found
[  215.253268][ T5893] bridge_slave_1: left allmulticast mode
[  215.255128][ T5893] bridge_slave_1: left promiscuous mode
[  215.257063][ T5893] bridge0: port 2(bridge_slave_1) entered disabled state
[  215.287732][ T5893] bridge_slave_0: left allmulticast mode
[  215.289745][ T5893] bridge_slave_0: left promiscuous mode
[  215.290059][T10314] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1630'.
[  215.306108][ T5893] bridge0: port 1(bridge_slave_0) entered disabled state
[  215.418508][T10320] loop3: detected capacity change from 0 to 4096
[  215.424270][T10320] ntfs3(loop3): Primary boot: unsupported bytes per index 8192.
[  215.426857][T10320] ntfs3(loop3): try to read out of volume at offset 0x1ffe00
[  215.452394][  T133] usb 5-1: new full-speed USB device number 8 using dummy_hcd
[  215.475384][T10323] usb usb8: usbfs: process 10323 (syz.3.1633) did not claim interface 0 before use
[  215.603450][  T133] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  215.610467][  T133] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87
[  215.624102][  T133] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  215.627083][  T133] usb 5-1: Product: syz
[  215.628422][  T133] usb 5-1: Manufacturer: syz
[  215.629879][  T133] usb 5-1: SerialNumber: syz
[  215.647518][  T133] usb 5-1: config 0 descriptor??
[  215.653151][  T133] port100 5-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint
[  215.826391][ T5893] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  215.834523][ T5893] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  215.839725][ T5893] bond0 (unregistering): Released all slaves
[  215.853222][  T133] usb 5-1: USB disconnect, device number 8
[  215.993186][ T5893] bond1 (unregistering): Released all slaves
[  216.003451][ T5893] bond2 (unregistering): Released all slaves
[  216.091102][ T5893] tipc: Disabling bearer <eth:vlan1>
[  216.093795][ T5893] tipc: Left network mode
[  216.099748][T10283] bridge0: port 1(bridge_slave_0) entered blocking state
[  216.103747][T10283] bridge0: port 1(bridge_slave_0) entered disabled state
[  216.106223][T10283] bridge_slave_0: entered allmulticast mode
[  216.109119][T10283] bridge_slave_0: entered promiscuous mode
[  216.112912][T10283] bridge0: port 2(bridge_slave_1) entered blocking state
[  216.115687][T10283] bridge0: port 2(bridge_slave_1) entered disabled state
[  216.118007][T10283] bridge_slave_1: entered allmulticast mode
[  216.121002][T10283] bridge_slave_1: entered promiscuous mode
[  216.187611][T10283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  216.193870][T10283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  216.273463][T10283] team0: Port device team_slave_0 added
[  216.277093][T10283] team0: Port device team_slave_1 added
[  216.323357][T10283] batman_adv: batadv0: Adding interface: batadv_slave_0
[  216.325596][T10283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  216.334307][T10283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  216.338913][T10283] batman_adv: batadv0: Adding interface: batadv_slave_1
[  216.341238][T10283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  216.357223][T10283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  216.481750][ T5894] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  216.501173][T10283] hsr_slave_0: entered promiscuous mode
[  216.505138][T10283] hsr_slave_1: entered promiscuous mode
[  216.507725][T10283] debugfs: 'hsr0' already exists in 'hsr'
[  216.509929][T10283] Cannot create hsr debugfs directory
[  216.590983][ T5893] hsr_slave_0: left promiscuous mode
[  216.595690][ T5893] hsr_slave_1: left promiscuous mode
[  216.600237][ T5893] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  216.606009][ T5893] batman_adv: batadv0: Removing interface: batadv_slave_0
[  216.609826][ T5893] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  216.612890][ T5893] batman_adv: batadv0: Removing interface: batadv_slave_1
[  216.625482][ T5893] veth1_macvtap: left promiscuous mode
[  216.627348][ T5893] veth0_macvtap: left promiscuous mode
[  216.629410][ T5893] veth1_vlan: left promiscuous mode
[  216.631380][ T5893] veth0_vlan: left promiscuous mode
[  216.641793][ T5894] usb 4-1: Using ep0 maxpacket: 16
[  216.645848][ T5894] usb 4-1: config 0 has an invalid interface number: 214 but max is 0
[  216.649043][ T5894] usb 4-1: config 0 has no interface number 0
[  216.661949][ T5894] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  216.666973][ T5894] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  216.669805][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.672631][ T5894] usb 4-1: Product: syz
[  216.673990][ T5894] usb 4-1: Manufacturer: syz
[  216.675439][ T5894] usb 4-1: SerialNumber: syz
[  216.683148][ T5894] usb 4-1: config 0 descriptor??
[  216.824990][T10349] loop4: detected capacity change from 0 to 40427
[  216.831369][T10349] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  216.835166][T10349] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  216.912929][ T5218] Bluetooth: hci1: command tx timeout
[  216.917453][T10349] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  216.923533][T10349] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  216.925990][T10349] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  217.314264][T10338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  217.323914][T10338] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  217.355025][ T5894] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.214/input/input18
[  217.527984][ T5893] team0 (unregistering): Port device team_slave_1 removed
[  217.569194][ T5894] usb 4-1: USB disconnect, device number 16
[  217.609616][ T5893] team0 (unregistering): Port device team_slave_0 removed
[  217.641662][   T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  217.793876][   T10] usb 5-1: config 127 has an invalid interface number: 124 but max is 0
[  217.797440][   T10] usb 5-1: config 127 has no interface number 0
[  217.800047][   T10] usb 5-1: config 127 interface 124 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64
[  217.805583][   T10] usb 5-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=1d.4f
[  217.809067][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  218.024181][   T10] usb 5-1: USB disconnect, device number 9
[  218.288005][T10283] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  218.324484][T10283] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  218.347437][T10283] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  218.358011][T10283] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  218.521481][T10378] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1647'.
[  218.528768][T10283] 8021q: adding VLAN 0 to HW filter on device bond0
[  218.549391][ T5893] IPVS: stop unused estimator thread 0...
[  218.559499][T10283] 8021q: adding VLAN 0 to HW filter on device team0
[  218.597791][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  218.600293][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  218.662930][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  218.665416][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  218.731948][T10390] loop3: detected capacity change from 0 to 512
[  218.734037][T10388] loop4: detected capacity change from 0 to 2048
[  218.737874][T10390] EXT4-fs (loop3): VFS: Can't find ext4 filesystem
[  218.746755][T10388] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  218.763678][ T6254] udevd[6254]: incorrect nilfs2 checksum on /dev/loop4
[  218.771683][T10392] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  218.974497][T10283] 8021q: adding VLAN 0 to HW filter on device batadv0
[  218.993046][ T5218] Bluetooth: hci1: command tx timeout
[  219.339379][T10283] veth0_vlan: entered promiscuous mode
[  219.350933][T10283] veth1_vlan: entered promiscuous mode
[  219.391096][T10283] veth0_macvtap: entered promiscuous mode
[  219.414151][T10283] veth1_macvtap: entered promiscuous mode
[  219.440395][T10283] batman_adv: batadv0: Interface activated: batadv_slave_0
[  219.450432][T10283] batman_adv: batadv0: Interface activated: batadv_slave_1
[  219.480831][   T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  219.485281][   T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  219.488938][   T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  219.504273][   T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  219.550326][T10417] loop4: detected capacity change from 0 to 32768
[  219.598463][T10417] XFS (loop4): DAX unsupported by block device. Turning off DAX.
[  219.612050][T10417] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  219.648571][T10433] netlink: 'syz.3.1661': attribute type 9 has an invalid length.
[  219.666185][T10417] XFS (loop4): Ending clean mount
[  219.677138][T10417] XFS (loop4): Quotacheck needed: Please wait.
[  219.714179][T10417] XFS (loop4): Quotacheck: Done.
[  219.762930][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  219.765444][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  219.801368][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  219.812084][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  219.850690][ T9263] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  220.009014][T10443] tipc: Started in network mode
[  220.011070][T10443] tipc: Node identity 4, cluster identity 4711
[  220.028441][T10443] tipc: Node number set to 4
[  220.230456][T10440] loop5: detected capacity change from 0 to 32768
[  220.573797][T10440] lmLogOpen: exit(-6)
[  220.575480][T10440] jfs_mount_rw failed, return code = -6
[  220.581288][T10455] futex_wake_op: syz.4.1663 tries to shift op by 32; fix this program
[  220.786233][T10459] TCP: TCP_TX_DELAY enabled
[  221.047114][T10468] QAT: failed to copy from user cfg_data.
[  221.054590][T10470] loop3: detected capacity change from 0 to 2048
[  221.063128][ T5218] Bluetooth: hci1: command tx timeout
[  221.188276][T10476] loop4: detected capacity change from 0 to 1024
[  221.353695][ T5897] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  221.472228][  T133] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  221.501946][ T5897] usb 6-1: Using ep0 maxpacket: 16
[  221.506129][ T5897] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  221.510171][ T5897] usb 6-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  221.515063][ T5897] usb 6-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  221.518875][ T5897] usb 6-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  221.520688][T10488] loop4: detected capacity change from 0 to 32768
[  221.524926][ T5897] usb 6-1: config 7 interface 0 has no altsetting 0
[  221.532287][ T5897] usb 6-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00
[  221.541075][ T5897] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  221.589946][T10488] XFS (loop4): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  221.628042][T10488] XFS (loop4): Ending clean mount
[  221.632087][T10488] XFS (loop4): Quotacheck needed: Please wait.
[  221.673961][  T133] usb 4-1: config 220 has too many interfaces: 184, using maximum allowed: 32
[  221.677528][  T133] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 184
[  221.681178][  T133] usb 4-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85
[  221.691392][T10488] XFS (loop4): Quotacheck: Done.
[  221.697120][  T133] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  221.724672][  T133] gspca_main: sn9c2028-2.14.0 probing 0c45:8008
[  221.735767][ T9263] XFS (loop4): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  221.932076][  T133] gspca_sn9c2028: read1 error -71
[  221.935128][  T133] gspca_sn9c2028: read1 error -71
[  221.941676][  T133] gspca_sn9c2028: read1 error -71
[  221.945669][  T133] sn9c2028 4-1:220.0: probe with driver sn9c2028 failed with error -71
[  221.962115][  T133] usb 4-1: USB disconnect, device number 17
[  221.972932][ T5897] input: HID 0458:5010 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:7.0/0003:0458:5010.0012/input/input19
[  222.063732][ T5897] kye 0003:0458:5010.0012: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.5-1/input0
[  222.178087][  T133] usb 6-1: USB disconnect, device number 2
[  222.815654][T10516] AppArmor: change_hat: Invalid input, NULL hat and NULL magic
[  223.151884][ T5218] Bluetooth: hci1: command tx timeout
[  223.344615][ T5893] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  223.470779][ T5893] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  223.523666][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  223.530222][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  223.537782][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  223.560013][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  223.567086][ T5893] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  223.571054][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  223.620078][ T5893] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  223.811018][ T5893] bridge_slave_1: left allmulticast mode
[  223.813780][ T5893] bridge_slave_1: left promiscuous mode
[  223.816299][ T5893] bridge0: port 2(bridge_slave_1) entered disabled state
[  223.825313][ T5893] bridge_slave_0: left allmulticast mode
[  223.827765][ T5893] bridge_slave_0: left promiscuous mode
[  223.830258][ T5893] bridge0: port 1(bridge_slave_0) entered disabled state
[  223.977899][T10558] loop5: detected capacity change from 0 to 512
[  223.991153][T10558] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  224.019528][T10558] EXT4-fs (loop5): warning: checktime reached, running e2fsck is recommended
[  224.025556][T10558] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002]
[  224.028825][T10558] System zones: 0-2, 18-18, 34-34
[  224.038616][T10558] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.1708: bad orphan inode 15
[  224.043211][T10558] ext4_test_bit(bit=14, block=18) = 1
[  224.045236][T10558] is_bad_inode(inode)=0
[  224.046762][T10558] NEXT_ORPHAN(inode)=2264924160
[  224.048708][T10558] max_ino=32
[  224.050047][T10558] i_nlink=0
[  224.075737][T10558] EXT4-fs error (device loop5): ext4_do_update_inode:5616: inode #15: comm syz.5.1708: corrupted inode contents
[  224.094849][T10558] EXT4-fs error (device loop5): ext4_dirty_inode:6501: inode #15: comm syz.5.1708: mark_inode_dirty error
[  224.109322][T10558] EXT4-fs error (device loop5): ext4_do_update_inode:5616: inode #15: comm syz.5.1708: corrupted inode contents
[  224.115820][T10558] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3001: inode #15: comm syz.5.1708: mark_inode_dirty error
[  224.121101][T10558] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3004: inode #15: comm syz.5.1708: mark inode dirty (error -117)
[  224.127329][T10558] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -117)
[  224.132927][T10558] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  224.162447][T10283] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  224.402263][ T5893] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  224.406426][ T5893] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  224.410775][ T5893] bond0 (unregistering): Released all slaves
[  224.574727][T10566] loop5: detected capacity change from 0 to 32768
[  224.639506][ T5893] bond1 (unregistering): Released all slaves
[  224.644354][T10566] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  224.672774][T10566] XFS (loop5): Ending clean mount
[  224.679292][T10566] XFS (loop5): Quotacheck needed: Please wait.
[  224.694843][ T5893] bond2 (unregistering): Released all slaves
[  224.746159][T10566] XFS (loop5): Quotacheck: Done.
[  224.766140][ T5893] bond3 (unregistering): Released all slaves
[  224.915939][T10549] chnl_net:caif_netlink_parms(): no params data found
[  224.983578][ T5893] tipc: Left network mode
[  225.636919][ T5218] Bluetooth: hci2: command tx timeout
[  226.288311][ T5893] hsr_slave_0: left promiscuous mode
[  226.294309][ T5893] hsr_slave_1: left promiscuous mode
[  226.297611][ T5893] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  226.300367][ T5893] batman_adv: batadv0: Removing interface: batadv_slave_0
[  226.306873][ T5893] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  226.309690][ T5893] batman_adv: batadv0: Removing interface: batadv_slave_1
[  226.354338][ T5893] veth1_macvtap: left promiscuous mode
[  226.356908][ T5893] veth0_macvtap: left promiscuous mode
[  226.359108][ T5893] veth1_vlan: left promiscuous mode
[  226.360985][ T5893] veth0_vlan: left promiscuous mode
[  226.584177][T10598] loop4: detected capacity change from 0 to 32768
[  226.645770][T10598] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  226.720549][T10598] XFS (loop4): Ending clean mount
[  226.880985][ T9263] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  227.518487][T10283] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  227.706049][ T5218] Bluetooth: hci2: command tx timeout
[  227.913782][T10619] loop5: detected capacity change from 0 to 1024
[  227.917848][T10619] EXT4-fs: Ignoring removed nobh option
[  227.920650][T10619] EXT4-fs: Ignoring removed orlov option
[  227.946027][T10619] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  228.063350][T10625] loop4: detected capacity change from 0 to 2048
[  228.086395][ T5893] team0 (unregistering): Port device team_slave_1 removed
[  228.093257][T10626] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  228.202211][ T5893] team0 (unregistering): Port device team_slave_0 removed
[  228.356852][T10632] input: syz0 as /devices/virtual/input/input20
[  229.085526][T10549] bridge0: port 1(bridge_slave_0) entered blocking state
[  229.108924][T10283] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.113851][T10549] bridge0: port 1(bridge_slave_0) entered disabled state
[  229.116675][T10549] bridge_slave_0: entered allmulticast mode
[  229.120439][T10549] bridge_slave_0: entered promiscuous mode
[  229.127163][T10549] bridge0: port 2(bridge_slave_1) entered blocking state
[  229.130104][T10549] bridge0: port 2(bridge_slave_1) entered disabled state
[  229.134039][T10549] bridge_slave_1: entered allmulticast mode
[  229.137863][T10549] bridge_slave_1: entered promiscuous mode
[  229.233366][T10549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  229.251164][T10549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  229.307159][T10549] team0: Port device team_slave_0 added
[  229.333443][T10549] team0: Port device team_slave_1 added
[  229.391181][T10549] batman_adv: batadv0: Adding interface: batadv_slave_0
[  229.398702][T10549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  229.430993][T10549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  229.438255][T10549] batman_adv: batadv0: Adding interface: batadv_slave_1
[  229.440795][T10549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  229.486635][T10549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  229.570081][T10549] hsr_slave_0: entered promiscuous mode
[  229.581175][T10549] hsr_slave_1: entered promiscuous mode
[  229.584350][T10549] debugfs: 'hsr0' already exists in 'hsr'
[  229.586486][T10549] Cannot create hsr debugfs directory
[  229.616238][T10645] option changes via remount are deprecated (pid=10644 comm=syz.4.1726)
[  229.638774][T10645] cgroup: option or name mismatch, new: 0x0 "nofavordynmods", old: 0x0 ""
[  229.750061][T10653] loop5: detected capacity change from 0 to 2364
[  229.781746][ T5218] Bluetooth: hci2: command tx timeout
[  230.026117][T10666] loop5: detected capacity change from 0 to 256
[  230.042330][T10549] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  230.053626][T10666] FAT-fs (loop5): Directory bread(block 64) failed
[  230.056912][T10666] FAT-fs (loop5): Directory bread(block 65) failed
[  230.073835][T10549] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  230.077368][T10666] FAT-fs (loop5): Directory bread(block 66) failed
[  230.080279][T10666] FAT-fs (loop5): Directory bread(block 67) failed
[  230.094193][T10549] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  230.100546][T10666] FAT-fs (loop5): Directory bread(block 68) failed
[  230.104300][T10666] FAT-fs (loop5): Directory bread(block 69) failed
[  230.107423][T10666] FAT-fs (loop5): Directory bread(block 70) failed
[  230.110041][T10666] FAT-fs (loop5): Directory bread(block 71) failed
[  230.118102][T10666] FAT-fs (loop5): Directory bread(block 72) failed
[  230.121337][T10666] FAT-fs (loop5): Directory bread(block 73) failed
[  230.195662][T10549] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  230.348602][T10549] 8021q: adding VLAN 0 to HW filter on device bond0
[  230.362857][T10549] 8021q: adding VLAN 0 to HW filter on device team0
[  230.370336][  T754] bridge0: port 1(bridge_slave_0) entered blocking state
[  230.372669][  T754] bridge0: port 1(bridge_slave_0) entered forwarding state
[  230.412686][  T754] bridge0: port 2(bridge_slave_1) entered blocking state
[  230.415355][  T754] bridge0: port 2(bridge_slave_1) entered forwarding state
[  230.427696][T10686] netlink: 'syz.4.1737': attribute type 2 has an invalid length.
[  230.564364][T10690] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1738'.
[  230.636131][T10549] 8021q: adding VLAN 0 to HW filter on device batadv0
[  230.652294][T10695] loop5: detected capacity change from 0 to 2048
[  230.667952][T10699] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  231.447913][T10709] loop5: detected capacity change from 0 to 32768
[  231.505509][T10549] veth0_vlan: entered promiscuous mode
[  231.565581][T10549] veth1_vlan: entered promiscuous mode
[  231.638593][T10549] veth0_macvtap: entered promiscuous mode
[  231.646889][T10549] veth1_macvtap: entered promiscuous mode
[  231.663243][T10549] batman_adv: batadv0: Interface activated: batadv_slave_0
[  231.675295][T10549] batman_adv: batadv0: Interface activated: batadv_slave_1
[  231.685241][   T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  231.696948][   T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  231.731350][   T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  231.755419][   T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  231.761019][T10709] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  231.824413][ T5897] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  231.839785][T10709] XFS (loop5): Ending clean mount
[  231.861751][ T5218] Bluetooth: hci2: command tx timeout
[  231.886020][T10283] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  231.982564][ T5897] usb 5-1: Using ep0 maxpacket: 16
[  232.004450][ T5897] usb 5-1: config 0 has an invalid interface number: 190 but max is 1
[  232.027804][ T5897] usb 5-1: config 0 has an invalid interface number: 2 but max is 1
[  232.042773][ T5897] usb 5-1: config 0 has 3 interfaces, different from the descriptor's value: 2
[  232.046528][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  232.049443][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  232.073660][ T5897] usb 5-1: config 0 has no interface number 1
[  232.084644][ T5897] usb 5-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  232.137127][ T5897] usb 5-1: config 0 interface 2 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  232.179270][ T5897] usb 5-1: config 0 interface 0 has no altsetting 0
[  232.191194][ T5897] usb 5-1: config 0 interface 2 has no altsetting 0
[  232.217589][ T5897] usb 5-1: New USB device found, idVendor=0499, idProduct=150a, bcdDevice=f6.7f
[  232.220608][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  232.232089][ T5897] usb 5-1: Product: syz
[  232.240101][ T5897] usb 5-1: Manufacturer: syz
[  232.243234][ T5897] usb 5-1: SerialNumber: syz
[  232.275281][ T5897] usb 5-1: config 0 descriptor??
[  232.309476][ T4816] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  232.315569][ T4816] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  232.520261][ T5897] usb 5-1: selecting invalid altsetting 0
[  232.602885][ T5897] usb 5-1: USB disconnect, device number 10
[  232.666199][ T6254] udevd[6254]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.190/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  233.237952][T10750] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  233.238483][   T79] Bluetooth: hci3: Frame reassembly failed (-84)
[  233.252805][T10747] Bluetooth: hci3: Frame reassembly failed (-90)
[  233.283035][ T4918] Bluetooth: hci3: Frame reassembly failed (-84)
[  233.405851][T10739] loop6: detected capacity change from 0 to 32768
[  233.434163][T10739] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1744 (10739)
[  233.466415][T10755] loop4: detected capacity change from 0 to 65
[  233.491956][T10739] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  233.498271][T10755] BFS-fs: bfs_fill_super(): NOTE: filesystem loop4 was created with 512 inodes, the real maximum is 511, mounting anyway
[  233.515996][T10739] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm
[  233.519824][T10755] BFS-fs: bfs_iget(): Unknown vtype=0 loop4:00000002
[  233.688124][T10739] BTRFS info (device loop6): enabling ssd optimizations
[  233.691631][T10739] BTRFS info (device loop6): turning on async discard
[  233.700597][T10739] BTRFS info (device loop6): enabling free space tree
[  233.836713][T10549] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  235.301774][ T5218] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  235.408266][T10823] loop5: detected capacity change from 0 to 256
[  235.448769][   T34] audit: type=1800 audit(1769135851.667:37): pid=10823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1766" name="file1" dev="loop5" ino=1048631 res=0 errno=0
[  235.461449][T10823] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  235.473159][T10823] FAT-fs (loop5): Filesystem has been set read-only
[  235.483868][T10823] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  235.660304][T10825] loop5: detected capacity change from 0 to 40427
[  235.670980][T10825] F2FS-fs (loop5): invalid crc value
[  235.705862][T10825] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  235.714478][T10825] F2FS-fs (loop5): Start checkpoint disabled!
[  235.737560][T10825] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0
[  235.740759][T10825] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  236.811620][   T34] audit: type=1800 audit(1769135852.977:38): pid=10828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1767" name="bus" dev="loop5" ino=10 res=0 errno=0
[  237.446748][T10825] syz.5.1767: attempt to access beyond end of device
[  237.446748][T10825] loop5: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  237.456299][T10825] syz.5.1767: attempt to access beyond end of device
[  237.456299][T10825] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  237.462371][T10825] syz.5.1767: attempt to access beyond end of device
[  237.462371][T10825] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  237.467185][T10825] syz.5.1767: attempt to access beyond end of device
[  237.467185][T10825] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  237.471989][T10825] syz.5.1767: attempt to access beyond end of device
[  237.471989][T10825] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  237.477553][T10825] syz.5.1767: attempt to access beyond end of device
[  237.477553][T10825] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  237.484610][T10825] syz.5.1767: attempt to access beyond end of device
[  237.484610][T10825] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  237.489273][T10825] syz.5.1767: attempt to access beyond end of device
[  237.489273][T10825] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  237.495112][T10825] syz.5.1767: attempt to access beyond end of device
[  237.495112][T10825] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  237.500206][T10825] syz.5.1767: attempt to access beyond end of device
[  237.500206][T10825] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  238.129149][ T4918] CPU: 1 UID: 0 PID: 4918 Comm: kworker/u10:16 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  238.129174][ T4918] Tainted: [L]=SOFTLOCKUP
[  238.129178][ T4918] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  238.129187][ T4918] Workqueue: writeback wb_workfn (flush-7:5)
[  238.129209][ T4918] Call Trace:
[  238.129214][ T4918]  <TASK>
[  238.129221][ T4918]  dump_stack_lvl+0xe8/0x150
[  238.129239][ T4918]  f2fs_handle_critical_error+0x37c/0x540
[  238.129260][ T4918]  f2fs_write_end_io+0x886/0xb60
[  238.129291][ T4918]  __submit_merged_bio+0x256/0x650
[  238.129340][ T4918]  __submit_merged_write_cond+0x269/0x530
[  238.129360][ T4918]  f2fs_write_data_pages+0x2806/0x3360
[  238.129398][ T4918]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  238.129423][ T4918]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  238.129456][ T4918]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  238.129484][ T4918]  ? __lock_acquire+0x6b5/0x2cf0
[  238.129507][ T4918]  ? f2fs_write_inode+0x3fb/0x5f0
[  238.129522][ T4918]  ? __pfx_f2fs_balance_fs+0x10/0x10
[  238.129537][ T4918]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  238.129553][ T4918]  do_writepages+0x32e/0x550
[  238.129574][ T4918]  ? reacquire_held_locks+0x104/0x190
[  238.129586][ T4918]  ? writeback_sb_inodes+0x41f/0x1820
[  238.129604][ T4918]  __writeback_single_inode+0x133/0x1230
[  238.129620][ T4918]  ? do_raw_spin_unlock+0x4d/0x210
[  238.129637][ T4918]  writeback_sb_inodes+0x92c/0x1820
[  238.129667][ T4918]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  238.129680][ T4918]  ? do_raw_spin_lock+0x12b/0x2f0
[  238.129720][ T4918]  ? rcu_is_watching+0x15/0xb0
[  238.129742][ T4918]  wb_writeback+0x445/0xad0
[  238.129759][ T4918]  ? queue_io+0x2a1/0x450
[  238.129798][ T4918]  ? __pfx_wb_writeback+0x10/0x10
[  238.129809][ T4918]  ? do_raw_spin_lock+0x12b/0x2f0
[  238.129841][ T4918]  wb_workfn+0x3f8/0xef0
[  238.129851][ T4918]  ? __lock_acquire+0x6b5/0x2cf0
[  238.129863][ T4918]  ? look_up_lock_class+0x57/0x110
[  238.129891][ T4918]  ? __pfx_wb_workfn+0x10/0x10
[  238.129902][ T4918]  ? finish_task_switch+0x161/0x920
[  238.129920][ T4918]  ? do_raw_spin_lock+0x12b/0x2f0
[  238.129933][ T4918]  ? lock_acquire+0x106/0x330
[  238.129947][ T4918]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  238.129963][ T4918]  ? process_scheduled_works+0xa0f/0x17a0
[  238.129976][ T4918]  ? process_scheduled_works+0xa0f/0x17a0
[  238.129993][ T4918]  ? process_scheduled_works+0xa0f/0x17a0
[  238.130004][ T4918]  ? process_scheduled_works+0xa0f/0x17a0
[  238.130017][ T4918]  process_scheduled_works+0xaec/0x17a0
[  238.130049][ T4918]  ? __pfx_process_scheduled_works+0x10/0x10
[  238.130059][ T4918]  ? do_raw_spin_lock+0x12b/0x2f0
[  238.130078][ T4918]  ? assign_work+0x3d3/0x440
[  238.130093][ T4918]  worker_thread+0x89f/0xd90
[  238.130115][ T4918]  ? __kthread_parkme+0x7a/0x1f0
[  238.130134][ T4918]  kthread+0x726/0x8b0
[  238.130152][ T4918]  ? __pfx_worker_thread+0x10/0x10
[  238.130163][ T4918]  ? __pfx_kthread+0x10/0x10
[  238.130179][ T4918]  ? _raw_spin_unlock_irq+0x23/0x50
[  238.130194][ T4918]  ? __pfx_kthread+0x10/0x10
[  238.130209][ T4918]  ret_from_fork+0x51b/0xa40
[  238.130223][ T4918]  ? __pfx_ret_from_fork+0x10/0x10
[  238.130234][ T4918]  ? __switch_to+0xc82/0x1410
[  238.130253][ T4918]  ? __pfx_kthread+0x10/0x10
[  238.130267][ T4918]  ret_from_fork_asm+0x1a/0x30
[  238.130294][ T4918]  </TASK>
[  238.130446][ T4918] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  238.841561][    C0] sched: DL replenish lagged too much
[  240.321923][ T5894] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  240.433147][ T5218] Bluetooth: hci2: command 0x0406 tx timeout
[  240.531712][ T5894] usb 6-1: Using ep0 maxpacket: 8
[  240.534972][ T5894] usb 6-1: config 0 has an invalid interface number: 151 but max is 1
[  240.537741][ T5894] usb 6-1: config 0 has no interface number 1
[  240.546082][ T5894] usb 6-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  240.549702][ T5894] usb 6-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83
[  240.593713][ T5894] usb 6-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024
[  240.608677][ T5894] usb 6-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[  240.623686][ T5894] usb 6-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  240.651333][ T5894] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  240.661348][ T5894] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  240.681728][ T5894] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  240.710338][ T5894] usb 6-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7
[  240.731865][ T5894] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  240.735311][ T5894] usb 6-1: Product: syz
[  240.737054][ T5894] usb 6-1: Manufacturer: syz
[  240.740923][T10850] loop6: detected capacity change from 0 to 4096
[  240.761714][ T5894] usb 6-1: SerialNumber: syz
[  240.792676][ T5894] usb 6-1: config 0 descriptor??
[  240.793760][T10844] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  240.798167][ T5894] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  240.840921][ T5894] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  240.861946][T10854] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  241.572373][ T5894] usb 6-1: USB disconnect, device number 3
[  241.608008][T10856] udevd[10856]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  241.848705][T10861] loop6: detected capacity change from 0 to 1024
[  241.902468][T10861] hfsplus: bad catalog entry type
[  241.912703][   T24] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  241.958127][ T5140] hfsplus: b-tree write err: -5, ino 4
[  242.091884][   T24] usb 5-1: Using ep0 maxpacket: 8
[  242.106754][   T24] usb 5-1: unable to get BOS descriptor or descriptor too short
[  242.125374][   T24] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  242.135958][   T24] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  242.153102][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  242.167440][   T24] usb 5-1: Product: syz
[  242.169139][   T24] usb 5-1: Manufacturer: syz
[  242.197118][   T24] usb 5-1: SerialNumber: syz
[  242.462189][   T24] usb 5-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  242.478794][   T24] usb 5-1: found format II with max.bitrate = 113, frame size=6
[  242.494223][   T24] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  242.577204][   T24] usb 5-1: USB disconnect, device number 11
[  242.620494][ T6254] udevd[6254]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  242.951890][T10887] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1786'.
[  243.340481][T10898] netlink: 348 bytes leftover after parsing attributes in process `syz.5.1790'.
[  243.420904][T10901] loop4: detected capacity change from 0 to 512
[  243.845935][T10916] loop4: detected capacity change from 0 to 256
[  244.379742][T10930] loop5: detected capacity change from 0 to 128
[  244.404789][T10930] vfat: Unknown parameter '0xffffffffffffffff01777777777777777777777'
[  244.752595][T10938] IPVS: sh: FWM 3 0x00000003 - no destination available
[  244.777682][    C1] IPVS: sh: FWM 3 0x00000003 - no destination available
[  244.807207][T10938] IPVS: sh: FWM 3 0x00000003 - no destination available
[  244.828032][    C1] IPVS: sh: FWM 3 0x00000003 - no destination available
[  244.845488][T10938] netlink: 'syz.4.1803': attribute type 27 has an invalid length.
[  245.424276][T10945] netlink: 'syz.6.1806': attribute type 6 has an invalid length.
[  245.625970][T10949] loop6: detected capacity change from 0 to 1024
[  246.099279][T10953] netlink: 9 bytes leftover after parsing attributes in process `syz.6.1810'.
[  246.103062][T10953] 0: renamed from hsr_slave_1 (while UP)
[  246.163067][T10953] 0: entered allmulticast mode
[  246.165585][T10953] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check.
[  246.464991][T10959] loop4: detected capacity change from 0 to 128
[  246.488232][T10959] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  246.514551][T10959] hpfs: filesystem error: improperly stopped
[  246.517081][T10959] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  246.519959][T10959] hpfs: You really don't want any checks? You are crazy...
[  246.535048][T10959] hpfs: hpfs_map_sector(): read error
[  246.544095][T10959] hpfs: code page support is disabled
[  246.552515][T10959] hpfs: hpfs_map_4sectors(): unaligned read
[  246.555284][T10959] hpfs: hpfs_map_4sectors(): unaligned read
[  246.557741][T10959] hpfs: filesystem error: unable to find root dir
[  246.674273][T10964] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1815'.
[  246.702521][ T5894] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  246.871619][ T5894] usb 7-1: Using ep0 maxpacket: 32
[  246.876570][ T5894] usb 7-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[  246.880391][ T5894] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  246.888740][ T5894] usb 7-1: config 0 descriptor??
[  247.318701][ T5894] logitech 0003:046D:C29C.0013: unknown main item tag 0x0
[  247.323981][ T5894] logitech 0003:046D:C29C.0013: unknown main item tag 0x0
[  247.326963][ T5894] logitech 0003:046D:C29C.0013: unknown main item tag 0x0
[  247.329762][ T5894] logitech 0003:046D:C29C.0013: unknown main item tag 0x0
[  247.333281][ T5894] logitech 0003:046D:C29C.0013: unknown main item tag 0x0
[  247.336322][ T5894] logitech 0003:046D:C29C.0013: unknown main item tag 0x0
[  247.348328][ T5894] logitech 0003:046D:C29C.0013: hidraw0: USB HID vb4.34 Device [HID 046d:c29c] on usb-dummy_hcd.6-1/input0
[  247.724078][ T5894] logitech 0003:046D:C29C.0013: no inputs found
[  247.762300][ T5894] usb 7-1: USB disconnect, device number 2
[  247.846303][T10967] loop5: detected capacity change from 0 to 4096
[  247.860123][T10967] ntfs3(loop5): Primary boot: invalid bytes per MFT record 12288 (3).
[  247.878228][T10967] ntfs3(loop5): try to read out of volume at offset 0x1ffe00
[  248.491331][T10975] loop6: detected capacity change from 0 to 8192
[  249.786668][ T5894] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  249.961701][ T5894] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  249.978925][ T5894] usb 6-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  249.991622][ T5894] usb 6-1: config 0 interface 0 has no altsetting 0
[  250.000371][ T5894] usb 6-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00
[  250.011627][ T5894] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  250.030076][ T5894] usb 6-1: config 0 descriptor??
[  250.633043][ T5894] waltop 0003:172F:0500.0014: item fetching failed at offset 12/13
[  250.650263][ T5894] waltop 0003:172F:0500.0014: probe with driver waltop failed with error -22
[  250.871477][ T5897] usb 6-1: USB disconnect, device number 4
[  252.367827][T11055] loop5: detected capacity change from 0 to 2048
[  252.419733][T11055] Alternate GPT is invalid, using primary GPT.
[  252.422509][T11055]  loop5: p2 p3 p7
[  252.498885][ T8068] udevd[8068]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory
[  252.503626][ T5837] udevd[5837]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory
[  252.516303][T11058] netlink: 'syz.5.1858': attribute type 1 has an invalid length.
[  252.544204][ T6254] udevd[6254]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory
[  252.550358][ T5837] udevd[5837]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory
[  252.555347][ T8068] udevd[8068]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory
[  252.619715][T11060] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  252.626214][T11060] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  252.667368][T11060] bond1: (slave ip6gre1): making interface the new active one
[  252.669965][T11060] bond1: (slave ip6gre1): Enslaving as an active interface with an up link
[  252.836534][ T5218] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  252.839824][ T5218] Bluetooth: hci1: Injecting HCI hardware error event
[  252.847620][ T5218] Bluetooth: hci1: hardware error 0x00
[  253.068390][   T55] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  253.421633][ T5897] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  253.591666][ T5897] usb 6-1: Using ep0 maxpacket: 16
[  253.602158][ T5897] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  253.608093][ T5897] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  253.629902][ T5897] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  253.643176][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  253.646293][ T5897] usb 6-1: Product: syz
[  253.665688][ T5897] usb 6-1: Manufacturer: syz
[  253.667670][ T5897] usb 6-1: SerialNumber: syz
[  253.844041][T11089] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1871'.
[  253.896209][ T5897] usb 6-1: 0:2 : does not exist
[  253.912890][ T5897] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[  254.012857][ T5897] usb 6-1: USB disconnect, device number 5
[  254.197515][ T6254] udevd[6254]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  254.761452][T11096] loop6: detected capacity change from 0 to 32768
[  254.804446][T11096] JBD2: Ignoring recovery information on journal
[  254.981995][ T5218] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  255.015193][T11096] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  255.140637][T10549] ocfs2: Unmounting device (7,6) on (node local)
[  255.325787][T11104] loop5: detected capacity change from 0 to 1024
[  255.356846][T11104] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  255.378489][T11104] JBD2: no valid journal superblock found
[  255.390404][T11104] EXT4-fs (loop5): Could not load journal inode
[  255.611783][ T5897] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  255.787907][ T5897] usb 7-1: config 0 has an invalid interface number: 83 but max is 0
[  255.791132][ T5897] usb 7-1: config 0 has no interface number 0
[  255.796154][ T5897] usb 7-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61
[  255.799693][ T5897] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  255.818643][ T5897] usb 7-1: config 0 descriptor??
[  255.836258][ T5897] ttusbir 7-1:0.83: cannot find expected altsetting
[  257.653088][ T5897] usb 7-1: USB disconnect, device number 3
[  261.001058][ T1368] ieee802154 phy0 wpan0: encryption failed: -22
[  261.602532][ T1368] ieee802154 phy1 wpan1: encryption failed: -22
[  314.277567][   T55] Bluetooth: hci0: command 0x0406 tx timeout
[  322.458919][ T1368] ieee802154 phy0 wpan0: encryption failed: -22
[  322.469600][ T1368] ieee802154 phy1 wpan1: encryption failed: -22
[  350.146038][ T5218] Bluetooth: hci2: command 0x0406 tx timeout
[  383.886054][ T1368] ieee802154 phy0 wpan0: encryption failed: -22
[  383.908281][ T1368] ieee802154 phy1 wpan1: encryption failed: -22
[  445.795058][ T1368] ieee802154 phy0 wpan0: encryption failed: -22
[  445.803839][ T1368] ieee802154 phy1 wpan1: encryption failed: -22
[  449.709444][   T35] INFO: task kworker/1:5:5894 blocked for more than 147 seconds.
[  449.721847][   T35]       Tainted: G             L      syzkaller #0
[  449.724627][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  449.727996][   T35] task:kworker/1:5     state:D stack:20832 pid:5894  tgid:5894  ppid:2      task_flags:0x4208060 flags:0x00080000
[  453.747474][   T35] Workqueue: events_power_efficient reg_check_chans_work
[  453.749825][   T35] Call Trace:
[  453.751205][   T35]  <TASK>
[  454.734422][   T35]  __schedule+0x14ef/0x4fb0
[  454.736442][   T35]  ? __pfx___schedule+0x10/0x10
[  454.738474][   T35]  ? __pfx___schedule+0x10/0x10
[  454.740566][   T35]  ? schedule+0x90/0x360
[  456.191999][   T35]  schedule+0x164/0x360
[  456.193621][   T35]  schedule_preempt_disabled+0x13/0x30
[  456.195761][   T35]  __mutex_lock+0x7fe/0x1300
[  456.197223][   T35]  ? __mutex_lock+0x5ac/0x1300
[  456.198757][   T35]  ? reg_check_chans_work+0x15a/0xf40
[  456.200949][   T35]  ? __pfx___mutex_lock+0x10/0x10
[  456.502063][   T35]  ? register_lock_class+0x31/0x2e0
[  456.504188][   T35]  reg_check_chans_work+0x15a/0xf40
[  456.506309][   T35]  ? do_raw_spin_lock+0x12b/0x2f0
[  456.508458][   T35]  ? lock_acquire+0x106/0x330
[  456.510394][   T35]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  458.340618][   T35]  ? __pfx_reg_check_chans_work+0x10/0x10
[  458.354450][   T35]  ? process_scheduled_works+0xa0f/0x17a0
[  458.356972][   T35]  ? process_scheduled_works+0xa0f/0x17a0
[  458.359583][   T35]  ? process_scheduled_works+0xa0f/0x17a0
