last executing test programs:

5m14.340150199s ago: executing program 32 (id=670):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r3, &(0x7f0000000180), 0x0}, 0x20)

5m7.145466522s ago: executing program 33 (id=715):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syz_tun\x00', <r3=>0x0})
bind$packet(r2, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14)
syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x14, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)

2m52.448562977s ago: executing program 1 (id=2201):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x3c, r1, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_RECV_TIMEOUT={0xc}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x3c}}, 0x0)

2m52.381732167s ago: executing program 1 (id=2202):
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040))
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
open_by_handle_at(r0, &(0x7f0000000280)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0xea, 0x1000, 0x8, 0x4}, {0x0, 0xa11, 0xb2d4, 0x1ff}}}, 0x210000)

2m52.381386813s ago: executing program 1 (id=2203):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r0, &(0x7f00000093c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2022012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x3}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba5234400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b60dd7710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048636662867d08f50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x80000000000000, {0x0, 0x1d}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40)
bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x1b, 0x0, &(0x7f0000000000)="3df7dab2742a1a61f6c362232d1ca21713228ebba21c414bd429d0", 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50)
ioctl$PTP_EXTTS_REQUEST2(r2, 0x40806685, &(0x7f0000000000)={0x7, 0x9})

2m52.25908266s ago: executing program 1 (id=2204):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x80000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1)

2m52.258833511s ago: executing program 1 (id=2205):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000002c0), r1, 0x0, 0x1, 0x4}}, 0x20)

2m51.889065406s ago: executing program 1 (id=2207):
r0 = semget$private(0x0, 0x7, 0x280)
semtimedop(r0, &(0x7f0000000100)=[{0x0, 0x1ff, 0x800}, {0x0, 0x8, 0x1800}], 0x2, &(0x7f0000000240))

2m51.829016404s ago: executing program 34 (id=2207):
r0 = semget$private(0x0, 0x7, 0x280)
semtimedop(r0, &(0x7f0000000100)=[{0x0, 0x1ff, 0x800}, {0x0, 0x8, 0x1800}], 0x2, &(0x7f0000000240))

2m46.389131316s ago: executing program 5 (id=2263):
r0 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0)
setrlimit(0x7, &(0x7f0000000400))
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0xf)
fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)

2m46.338401755s ago: executing program 5 (id=2264):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x304}, "7817765dc5914c3d", "c0a9b92b592a8e91a6934cb6b7b18f7a7a6eaa9cbd8ef3b0fbc326100136e976", "58ff90f0", "2a1e833e7af32011"}, 0x38)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000280)=@ccm_128={{0x304, 0x34}, "f6d0d3f08ab5922f", "ae224a0d7a4a27ff96d9692d2c7408f1", "7209ca5b", "eaeb2dc22759c82f"}, 0x38)

2m46.338098869s ago: executing program 5 (id=2265):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x80000)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f0000000380)={0x8a001, 0x0, 0x12}, 0x18)

2m45.407079435s ago: executing program 5 (id=2271):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000900)={[{@init_itable_val={'init_itable', 0x3d, 0x94eb}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x45f, &(0x7f0000000480)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000000e40)={0x2020}, 0x2020)

2m45.339992918s ago: executing program 5 (id=2275):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x8)
syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRESDEC=0x0, @ANYRES64, @ANYRESDEC], 0x1, 0x551a, &(0x7f000000af40)="$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")
openat$incfs(0xffffffffffffff9c, &(0x7f0000000100)='.pending_reads\x00', 0x30300, 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c)

2m45.106923283s ago: executing program 5 (id=2284):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a3000000000580000001c0a01000000000000000000010000000900010073797a3000000000090002"], 0xfc}}, 0x0)

2m44.932557968s ago: executing program 35 (id=2284):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a3000000000580000001c0a01000000000000000000010000000900010073797a3000000000090002"], 0xfc}}, 0x0)

2m21.758528321s ago: executing program 4 (id=2574):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x15, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x841}, 0x40)

2m21.678337895s ago: executing program 4 (id=2575):
syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@bsdgroups}, {@resgid}, {@nouid32}, {@debug}, {@acl}]}, 0x1, 0x746, &(0x7f0000000f40)="$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")
r0 = syz_io_uring_setup(0x499, &(0x7f0000000f40)={0x0, 0xd144, 0x0, 0x40000000, 0x37f}, &(0x7f00000001c0), &(0x7f0000000000))
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f00000000c0)={0x80000000, 0x9}, 0x1)

2m21.548948494s ago: executing program 4 (id=2578):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x63}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70)

2m21.447558744s ago: executing program 4 (id=2579):
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f00000008c0)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x9, 0x3a, '\x00', 0x3a, '\x00', 0x3a, './file0'}, 0x29)

2m21.418187315s ago: executing program 4 (id=2581):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0)

2m21.287229454s ago: executing program 4 (id=2586):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x401}}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000100), &(0x7f0000000140)=r0}, 0x20)

2m6.271191798s ago: executing program 36 (id=2586):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x401}}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000100), &(0x7f0000000140)=r0}, 0x20)

2m0.698040158s ago: executing program 7 (id=2816):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

1m59.836076203s ago: executing program 7 (id=2826):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x16c}}, 0x24)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000157b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r1, 0xffffffffffffffff, 0x500}, 0x57)

1m59.738096408s ago: executing program 7 (id=2829):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, r1, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

1m59.626856518s ago: executing program 7 (id=2830):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0)
move_mount(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x141)

1m59.611847409s ago: executing program 7 (id=2831):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff05000500", 0x2c}, {&(0x7f00000019c0)="06bb", 0x2}], 0x2}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x6c}, [@ldst={0x7}]}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94)

1m58.138106887s ago: executing program 7 (id=2849):
r0 = socket(0x2, 0x805, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x8000, 0xf, 0x6, 0xd}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2d8a7313}, 0x94)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @empty}}, 0xbdef, 0x1}, &(0x7f0000000000)=0x90)

1m57.682592106s ago: executing program 37 (id=2849):
r0 = socket(0x2, 0x805, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x8000, 0xf, 0x6, 0xd}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2d8a7313}, 0x94)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @empty}}, 0xbdef, 0x1}, &(0x7f0000000000)=0x90)

1m25.308436729s ago: executing program 6 (id=3298):
r0 = socket(0xa, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f00000002c0)=0xffe, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x4000, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10)

1m25.25805186s ago: executing program 6 (id=3299):
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x441, 0x108)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x9f)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x89d9, 0x100000001, 0x2, 0x3})

1m25.257907296s ago: executing program 6 (id=3300):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0xb4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x400}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xb4}}, 0x0)

1m25.175366078s ago: executing program 6 (id=3302):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0x9, r1}, 0x38)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', <r4=>0x0})
sendto$packet(r3, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a88800892f4803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14)

1m25.047138495s ago: executing program 6 (id=3307):
openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180))

1m24.176704089s ago: executing program 6 (id=3331):
r0 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcf\xcb\x92\xf1\x83\x1a1\xa6\xf3e\xc2F\xc3\x00\xaa\xd5\xfc\x1bR\xa9\x8c\xb4&\x9f\xa2$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\n\xad\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\x92\xdby\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xef\xf7\x9c\x1a\xcc\x8am\x8b7\xcf\xc5\xa6\xf4\f\xabj%Y\xa9\xdd\x0e9e\xb5\xec\x99@\xd2\t\n\xb1o', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='source', &(0x7f0000000400)='//\xf2/\x06\b\xa30\\\xea\x00\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas\x9d\x14\xe3\v\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7Gl\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\n\x8c<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcfK\xcc\xeb,\x1a1\xa6\xf3e\xc2F\xc3\x00\xaa\xd5\xfc\x1bR\xa9\x8c\xb4&\x9f\xa2$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/\xd15)\xeatn\xa3\x88\x13i\xb6\x7ft\x95\xd7\x01o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\n\xad\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\x94\x00\x00\x00\x00\x00\x00\x00g\xc6\fc\xa26\xd8\xdf\xef\xf7\x9c\x1a\xef\x8am\x8b7\xcf\xc5\xa6\xf4\f\xabj%Y\xa9\xdd\x0e9e\xba\xec\x99@\xd2\t\n\xb1o', 0x0)

1m9.158931461s ago: executing program 38 (id=3331):
r0 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcf\xcb\x92\xf1\x83\x1a1\xa6\xf3e\xc2F\xc3\x00\xaa\xd5\xfc\x1bR\xa9\x8c\xb4&\x9f\xa2$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\n\xad\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\x92\xdby\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xef\xf7\x9c\x1a\xcc\x8am\x8b7\xcf\xc5\xa6\xf4\f\xabj%Y\xa9\xdd\x0e9e\xb5\xec\x99@\xd2\t\n\xb1o', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='source', &(0x7f0000000400)='//\xf2/\x06\b\xa30\\\xea\x00\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas\x9d\x14\xe3\v\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7Gl\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\n\x8c<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcfK\xcc\xeb,\x1a1\xa6\xf3e\xc2F\xc3\x00\xaa\xd5\xfc\x1bR\xa9\x8c\xb4&\x9f\xa2$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/\xd15)\xeatn\xa3\x88\x13i\xb6\x7ft\x95\xd7\x01o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\n\xad\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\x94\x00\x00\x00\x00\x00\x00\x00g\xc6\fc\xa26\xd8\xdf\xef\xf7\x9c\x1a\xef\x8am\x8b7\xcf\xc5\xa6\xf4\f\xabj%Y\xa9\xdd\x0e9e\xba\xec\x99@\xd2\t\n\xb1o', 0x0)

47.794513999s ago: executing program 9 (id=3744):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9)

47.794230708s ago: executing program 9 (id=3746):
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1004410, &(0x7f0000000180), 0x84, 0x46e, &(0x7f0000000900)="$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")

47.567979733s ago: executing program 9 (id=3748):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c00357428bd7000fed3df2502000000", @ANYRES32=r0, @ANYBLOB="4000b00408000100e00000020a0002"], 0x30}, 0x1, 0x0, 0x0, 0x20004001}, 0x80c0)

47.466890873s ago: executing program 9 (id=3751):
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x1008000, &(0x7f0000000300)=ANY=[@ANYBLOB="000075b8b62e943fefae1913e055b8852885f3200b41a4a7e940141a3e9a708cfa000f58442c767bb8bac7e75a49ac5762e52f7f3bf6909e28d3468821124bce8d75bf8584dedd275c45e85bfa22d157b6d5ac4e569df05173d6ff9d8ed3bdf95c41f60f6a1b456842fecd0f09b6ab9136de2336b349cfe9cd308933da9b574e4f040f"], 0x1, 0x5ec, &(0x7f0000001640)="$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")
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2a05004, 0x0)
chroot(&(0x7f0000000180)='./file0\x00')
pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00')

47.347451526s ago: executing program 9 (id=3754):
r0 = syz_open_dev$swradio(&(0x7f0000002440), 0x1, 0x2)
ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000002680)={0xf0f06e, 0x5})

46.918736474s ago: executing program 9 (id=3762):
syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x4400, &(0x7f0000000240)=ANY=[@ANYBLOB='check=strict,session=0x0000000000000024,iocharset=ascii,overriderockperm,overriderockperm,gid=', @ANYRESOCT=0x0, @ANYRES16=0x0], 0xf6, 0xa15, &(0x7f00000002c0)="$eJzs3c1vHOd9B/DvrEiJog1VtlVXFWxrJUM2bbMUSdUSBB9qiVxKdPlSkBRgoS0sw5IKQURd2C1gGz3IQNFTjBhBECDJJfAxJwPOIb4EuiXHnHIIkPg/CIxcohwCBju7lJbkvog0RSrK57MYzdvveduZnUe73J0n/CVbWVkppy2uX/rxTlaWh8/5ya8++/yT+vTxrezNnrxa/DQZSFJN+v5Univ9E5ML87M9MrqZXElyOymS7Etj3sH+NWtXUnw7j99bv53ihzncJtnAJhtHTyv8Vdvt8w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5KE5Ojo2NFZqbnLr1Z7awcArzL/tXsvixH/S6+7FVskRT1KQMDq0N9Hz50b/fT9X+O55nG2jONkb8H8tFjTx987am+ymr6LhXaEe9/+NHNt5eXr713b1N/28C+Zrvqy/t2rHr3b+/Wkl2ozU0vzk/PnrtQq04vzlfPnj49evLi1GJ1ajq1xcuLS7XZ6sRC7dzS/EJ1aOKl6tjZs6eqtZHL85fmLkyOzNRWN575h/HR0dPVN0b+pXZuYXF+7uQbI4sTF6dnZqbnLpQx9d31mDP1E/Gfp5eqS7Vzs9Xq9RvL1071qmQ9aKztnmJt0HivnMZHx8fHxsbHx06/evbVM6OjfRs2jK6TDRG7f9Kye36yrddu+IYqzf4/M5nOXC7lzVTbPiYymYXMZ7bD/qbV/v/EyVrXclv7/9Ve/vC93UdS9v/PNdae69T/d6hL78fKSiPnraZffbyfD/NRbubtLGc51/LeN85xw+OP25RP9Zu3duPjQmqZy3QWM5/pzOZcuaXa3FLN2ZzO6YzmrVzMVBZTzVSmM5NaFnM5i1lKrTyjJrKQWs5lKfNZSDVDmchLqWYsZ3M2p1JNLSO5nPlcylwuZDLnylyu50b5vJ/qUse7QWP3EzTeJWib+/+Vh/F/gjxo234Nh61aafb/ezsGrKwuDU3sWK0AAACA7fT3v8iBQ0/+/DdJf54tP5efmp6pje52tQAAAIBtVH5d75n6rL++9GwK7/8BAADgUVOUv7ErkgzmaGOp8UuoPfEhAAAAADwiyr//P1efDdaXjqa4eyeUK7tdNwAAAGB79L7Hfs+IYnj19r/Vq4351WZE8z6/g1PTM7WRifmZ18byQnmXgfKXBhty25MU/eXPD17OsUbUscHGfHBtjgP1qLGR18byco43GzL0fH32/FCbyPFG5IuNyBe7RJ6qRwLAo+54l/74fvv/lzPciBg+0rc3Sd+RNj3rqJ4VAB4WvcfY6RlR/OO99//9zWzX9P9P5vofGl8pGMk7eTfLuZrh8tcG5TcO1uT6b582PzO4+zWE0Qz3+DRgNfaXZyoZ7vF5wGDLQC/DPT4RaMTm35NTD/5AAMAOOt6hH95M/z/c8v4/G9//3x1a6JqfFALAQ+HuCPYPcGG32wgArKWXBgAAAAAAAAAAAAAAAAAAAAAAAAAAgO23rXf7H9hi8t82x/V7sMMQbFjY33wOtp7Pd5LsXJ2LbS6rsg35rCTZqeO1cws5mGz5WW17Gu9Nsvvt6rnQ13xJ3Hx7ebeuSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOykItnTbnsl2ZdkNMnJna/Vg3Nrtyuw8/6pdaW4kzv5IAd2rzoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI+m5v3/K2nMH2tsSl8lOZHkSpJ/3e06bqc7u12BbbJ/i+la7v9fP+ZZKdLXOOwp+icmF+Zn64e/HPuh8tVnn39Sn1qS77vfcsrAyrrBJZolrI/90eOrS0+UqQYnr71/87/f/a/q5PlUsjfnl6ZmJmcvLLx+L8nTxRdJNY1p1Wp9//fEzz5t0/Iv6i1tb325U+WTM7mx3L9rl7p7ud3cWL42Xi9pqfbm0v/8540PWnY9mWPJ80PJ0NqS/qM+dSjpWPq7lVZ8Xfx/cSDfy5Xy+NefjWKlqB+ivynbv//6jeVrI++8u3y1Q50O5miSq8lA9zp93LL7aHk9aas86yr99VJHy6D6P4d6tLGrlhzHOrThifKUGWy2YW/HNrSqdm5DqeV5r7Tb36jRqQ41eiovtDnSK/uSzjV6ofuRbq/4uvh1cTG/yv+1jP9RqR//E+n86lybRRnZcqZ0jKw0IsuWj7fueGt95O++f1+1bztMDZv1rTUv3krL9b95rLbperRSdL0etZS4udfFuhLXnRVdXhdlj3RoXYrm1adTmmY9DzWiOtTzb/NK0nek21VxQ2/9So8ryt30r7ffvdXX/w+Kofw+t4z/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPPyKZE+77ZXkRJKDq+vVZGUT2e7rtKMyWGy2itvq1t1/HgmVzSYo7uROPsiBB1MdAAAAAAAAAHba+cmvPvv8k/pU7G9uav59v5r0JTlYfHd/JhfmZ3tk1J9cSXK7vjzQZn+XP/fX0+Xxe+u362uHN9sSAOB+/TkAAP//mWBg/A==")
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@ptr, @typedef={0x6, 0x0, 0x0, 0x8, 0x5}, @func_proto]}, {0x0, [0x0, 0x30, 0x5f, 0x61, 0x2e]}}, 0x0, 0x43}, 0x28)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)

46.119138545s ago: executing program 39 (id=3762):
syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x4400, &(0x7f0000000240)=ANY=[@ANYBLOB='check=strict,session=0x0000000000000024,iocharset=ascii,overriderockperm,overriderockperm,gid=', @ANYRESOCT=0x0, @ANYRES16=0x0], 0xf6, 0xa15, &(0x7f00000002c0)="$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")
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@ptr, @typedef={0x6, 0x0, 0x0, 0x8, 0x5}, @func_proto]}, {0x0, [0x0, 0x30, 0x5f, 0x61, 0x2e]}}, 0x0, 0x43}, 0x28)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)

24.247333284s ago: executing program 8 (id=3993):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$nfc_llcp(r0, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x4, 0x0, 0x3, "e88509de7f1939e8abff005597c8ef039a5be42200", 0x13}, 0x60)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r1, &(0x7f0000000080)={0x27, 0x0, 0x1, 0x7, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x18}, 0x60)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$nfc_llcp(r2, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60)

24.144020297s ago: executing program 8 (id=3994):
set_tid_address(0x0)

24.07617645s ago: executing program 8 (id=3997):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000000000003a00000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000))

23.946794073s ago: executing program 8 (id=3999):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000000)='./file0/file0\x00', r0, &(0x7f0000000180)='./file0\x00', 0x101)

23.827249967s ago: executing program 8 (id=4001):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4)
bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="1f", 0x1}], 0x1}, 0x8c0)
recvmmsg(r0, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0)

23.591665515s ago: executing program 8 (id=4006):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)=""/85, 0x55}], 0x1}, 0x12122)

23.456001275s ago: executing program 40 (id=4006):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000440)=""/85, 0x55}], 0x1}, 0x12122)

1.076695546s ago: executing program 2 (id=4279):
syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000540)={[{@init_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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")
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0xfffa, @empty}, 0x10)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @loopback}, "00186371ae9b1c03"}}}}}, 0x0)
readv(r0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/130, 0x82}], 0x1)

616.989752ms ago: executing program 3 (id=4282):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000017000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

568.520256ms ago: executing program 3 (id=4283):
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
sendmmsg$inet6(r0, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @private0, 0x401}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f5", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000c40)="ea", 0x1}], 0x1}}], 0x2, 0x40)
shutdown(r0, 0x1)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x3}, &(0x7f0000000100)=0x8)

497.091127ms ago: executing program 3 (id=4284):
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080))
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x2, 0x0, 0x2})

496.795353ms ago: executing program 3 (id=4285):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x24048011}, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendto(r0, &(0x7f0000000000)="51f5f7", 0x3, 0x8000, 0x0, 0x0)

426.869436ms ago: executing program 0 (id=4286):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000280)=@ccm_128={{0x304}, "ba2e505a7abd1c42", "97274a2f83a4882d00", "87683372", "4fb43e4894926abe"}, 0xb)

426.407031ms ago: executing program 3 (id=4287):
r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
r1 = io_uring_setup(0x2e31, &(0x7f0000000780)={0x0, 0xca8a})
close_range(r1, 0xffffffffffffffff, 0x0)
ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, 0x0)

367.006052ms ago: executing program 0 (id=4288):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328a01004ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff05000050"}, 0x38)
sendmsg$inet(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x7}, 0x80)

366.734715ms ago: executing program 3 (id=4289):
syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f0000000700)=ANY=[@ANYBLOB='journal_async_commit,heartbeat=none,usrquota,barrier=000000000\x000000000007,heartbeat=none,nointr,\x00'], 0x1, 0x4703, &(0x7f0000004800)="$eJzs212IXFcBB/BzJ6vZpMl2P9ImafoxSQQXLcumT9X6ENeqjabNh7bVVFlnN9vN6uzMujujBYPUIIiCoARBxQ+qQulLLYiBvtQiFPxAWoVSUbS+iBSq4INBG+jKzNybnXtntneyk7S0/f2gnb3n3nPumf3vPXfOPZNCrHZqYaW4sFIsVYrV2ftXbil+rlquL86FwqvktT4/vbkSOcn+tXPkfR/4yD23hPCHY1/70Orq6mpoGA5dHWj7+fy/T8+2vyYKmTqNdru31vLH+iMv/fwtr3REnhMhhB0d/WrYFEL42C9C2BxCGInLRuPXLSGEbSGEKITw6G/+9ePBfrrQ5uy9Lzx37MzhfWemHn/smQvzR9c9MArhu+XdN88vvrh/023Pv+MynR4AAF7RB48fufvo5IHwZBSGzg10fl7fGb8mn4/vfNun7np4YG3/Kr3Z9CqGCgAAABlr8//h6OUu63XJylqyJPjEAyfufipa229i+/p26K4jt79/8kC8/ht17L81Lvrnezc111Cz677Z9d+RTP3u679r53n4q8/+svLWjfc/6V9y3uEQFSZS24XCxEQIx6Za27uirYVydaX2zvur9crJjZ/3jSKdf3b1fm1Bv9f8RzPV89b/d3/i8z/bMtDPOxgL2b/axnax80+ZLtL5rz+W/+RLUU/5j2Xq5eV/x9Pbz/9qcz/vIHtGLkU6/9aFuK/9gGJrAGjk/82B/Px3ZNrPy//7U+cePbGB7/80xpnhqNHXwdQI8HJcvs5XmMhI598KIjV0xr/I9a7//2XyvybTfl7+d1b/8bu/9XH/X2/8H5/qp803j3T+rSCKqSPWrv+RQv71f22m/bz8f3vqz89+sq97dWf+jf6Pu//3JJ1/fCNOD57N32Sv4//OTPt5+e8au++hhQ30+8Nb4n4ORWGs7Vun5xq3sKG19ermlKaxe2kDJ3kTSOff+q2lLp2h1kvz+h/OH/93ZdrPy/+hPV9/z+m+vv/bffyfNP73JJ3/lmbZpeT/Uib/3Zn28/L/4em//+W+yzz+N7YPyr8n6fy3duxfe/5T6Gn+d12mft7zn32jTz3y1z7m/0n/kvMmz3+S5xDjUev5D92l879q3eN6vf/vydTLu/6/9Z/nn97fz/gfDXoC0Id0/ttahV0mgL3mf32m/bz8v3DPlz/+pw3M/5qf+AaT/Nvm/5tb5UeN/z1J57+9VZj6x1APNv/fvP9Hnbn/N5P/DZn28/K/cGhi4CuX+f7f6P94l0fZdErnP7TucY38f9/D/f/GTL28/L+496cv3tzX5/8QJs31Nyyd/9XrHte8/gfz878pUy8v/+9849dPPNhH/9/eR12y+bfu9anLKf5s3uv8v5hpPy//H42fP7v/Csz/bnX/70k6/9aq+aXkn53/7820n5f/9478YHngCjz/uUP+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGzIavw6HqDCR2i4UJiZCGIu3d4Wt0Uzp5PRMuTr7mZUQdsTlxTAazZerM6Xy9EKlenJuulQuV2dDuCbevyMMRivlam16sbR07cW2tkSn5krLtZm5Ui2EsDMuvz5sT9qaWagtlpaaxyZ1ropKn61Xa6WJ+srccth9sXxbUj6/XK0vXXexrasL1eWlU6XK9MmF5XdPTk5Ohj0X+zwSzT1Qm6vUWr1t7W3USeoOR21vprn7hrbzfbpaX66Uys3yG9vqlKuzpXJbnZvazldbrldmS7W56XJ1Pjlfsa1u23tr7t4b7xsPI6n3l9TNOhi/3n7o+EePHz7Qsb8YpfOu1BfnJrd3/5sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4I3rydve9e0QwkBrqxBCOJj8EMX/pZy994Xnjp05vO/M1OOPPXNh/mi3YwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4PztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYuZ+XKro4DsBnxve+FkgpbYRcBoaI6E7Cgn4RSeU1smWb1kGtEjIoCgwjWhYEQVC7qCBoFVT+BVELl62qTS1aGERQMTqTlzvCDS90zHkeGM4Mc++ZLwzcO3M+hwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALB+nN2x2JW1l3ZtXtq6+0PozM/9H0IYTZb3P+/tCD0hhK9fZk6HVdpCT1P/bybnxstXTX7v7R9/eH00WXv9xXeL63aHJB1qON6ZpOnQ0Nr736juDD6bHkxCSGMXQhQLY0/O1EIIHbELIYqfH+cvZr/v/8UuhCj6P9ztyu5/LXYhRLF196e+Wv6MR/Wcr18YbPzvb/UI3sYjOuvQ25NX3qVuauW9zN//k3zzPlgNsyeOvH8euwiimZ2bOhq7BgAA4O861yL/D1uW9+9fTkJPdzn3/9aU//c29b96/r/i3vYbYzNthRDbSmOT2fHwvnb63PhODVy9/bpmvKeq5P/VJv+vNvl/tcn/q03+X23yfzKv5P+V9PjmnsUXsYsgGvk/AABUz6HjE1P14ZHs5X/Tj85yXt+Xt/U8T39wa3rgUcO4kfzw33b42MSBg8Mj+X0vDwiurP+QLp39ns/3aG4Lk03zLlqt/9D7dGH+Wmf5E/U/nL9R1Fdc1/oPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAvdueehkEwCsPod1sRtdGqaMLCT4IPNDAiACnMaEAHEwZgIAQUMJBzlnuTZ3kBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA5/tXeV18f2mM9Foj0lR22bV/jqfZz9y3w/I+e9y4FQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADZ24EAGAAAAQJi/dR7tBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4KkAAAD//8Oayzs=")
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0)

296.551499ms ago: executing program 2 (id=4290):
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)={[{@discard}, {@time_offset={'time_offset', 0x3d, 0x4}}, {@dmask={'dmask', 0x3d, 0x400005}}, {@time_offset={'time_offset', 0x3d, 0x6}}, {@errors_remount}, {@discard}, {@allow_utime={'allow_utime', 0x3d, 0x4}}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@keep_last_dots}]}, 0x1, 0x153b, &(0x7f0000001f80)="$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")
creat(&(0x7f0000000240)='./file1\x00', 0x0)
chmod(&(0x7f0000000040)='./file1\x00', 0x0)

296.348796ms ago: executing program 0 (id=4291):
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c)
listen(r0, 0x4)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000100)=0xfffffffb, 0x4)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

227.131585ms ago: executing program 2 (id=4292):
r0 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000080)=@chain)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000240)=@secondary)

226.768117ms ago: executing program 2 (id=4293):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, 0x0, 0x0)

109.101855ms ago: executing program 2 (id=4294):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
io_setup(0x2, &(0x7f0000000000)=<r0=>0x0)
r1 = eventfd(0x0)
io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xc2, r1, 0x0, 0x0, 0x34}, &(0x7f00000000c0)={0x0, 0x0, 0xfe, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1, r1}])

108.813165ms ago: executing program 0 (id=4295):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000bc0)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000c00), &(0x7f0000000080)='%+9llu \x00'}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0}, &(0x7f0000000140), &(0x7f0000000200)='%pB    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, r0}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0xe, 0x0, &(0x7f0000000040)="f4b84de4115d69246bf5839e8971", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

520.806µs ago: executing program 0 (id=4296):
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"})
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)
futimesat(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={{0x77359400}, {0x77359400}})

257.756µs ago: executing program 2 (id=4297):
r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f0000000080)={[{@data_err_ignore}]}, 0x0, 0x236, &(0x7f0000000300)="$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")
mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40e8662e, &(0x7f0000000000)={0xc550, 0x40000000000002, 0x10, 0xb, 0x5, 0x1})

0s ago: executing program 0 (id=4298):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x30, r2, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x9, 0x44}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x25}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0)

kernel console output (not intermixed with test programs):

 (loop6): LFS is not compatible with ATGC
[  348.055798][T14106] loop6: detected capacity change from 0 to 1024
[  348.129360][T14111] vlan3: entered promiscuous mode
[  348.146826][T14111] bond0: entered promiscuous mode
[  348.164412][T14111] bond_slave_0: entered promiscuous mode
[  348.167426][T14111] bond_slave_1: entered promiscuous mode
[  348.169772][T14111] team0: entered promiscuous mode
[  348.171436][T14111] team_slave_0: entered promiscuous mode
[  348.173318][T14111] team_slave_1: entered promiscuous mode
[  348.472047][T14140] netlink: 'syz.2.3100': attribute type 21 has an invalid length.
[  348.766733][   T24] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  348.920593][   T24] usb 9-1: config 1 has an invalid interface number: 7 but max is 0
[  348.923790][   T24] usb 9-1: config 1 has no interface number 0
[  348.926452][   T24] usb 9-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  348.931484][   T24] usb 9-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  348.935522][   T24] usb 9-1: config 1 interface 7 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  348.943211][   T24] usb 9-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  348.948816][   T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  348.952443][   T24] usb 9-1: Product: syz
[  348.954262][   T24] usb 9-1: Manufacturer: syz
[  348.956322][   T24] usb 9-1: SerialNumber: syz
[  348.962655][T14145] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  349.108449][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  349.170056][T14145] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  349.174904][   T24] usb 9-1: No status endpoint found
[  349.381495][   T24] usb 9-1: USB disconnect, device number 3
[  349.646148][T14159] loop6: detected capacity change from 0 to 32768
[  349.655136][T14159] xfs: Deprecated parameter 'ikeep'
[  349.661904][T14159] XFS: ikeep mount option is deprecated.
[  349.674787][T14159] XFS (loop6): filesystem is marked as having an internal log; do not specify logdev on the mount command line.
[  349.739056][T14172] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3112'.
[  350.147103][ T6261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  350.308003][   T33] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  350.321530][T14200] loop6: detected capacity change from 0 to 2048
[  350.325065][T14200] EXT4-fs: Ignoring removed nobh option
[  350.358545][T14200] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  350.384922][   T34] audit: type=1800 audit(1903353461.806:669): pid=14200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3124" name="file0" dev="loop6" ino=13 res=0 errno=0
[  350.410786][T11952] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  350.515739][T14212] netlink: 'syz.8.3129': attribute type 1 has an invalid length.
[  350.802236][T14225] hsr0: entered promiscuous mode
[  350.804327][T14225] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3136'.
[  350.814844][T14225] hsr_slave_0: left promiscuous mode
[  350.817473][T14225] hsr_slave_1: left promiscuous mode
[  350.887431][T14225] hsr0 (unregistering): left promiscuous mode
[  351.174827][T14244] 9pnet: Found fid 0 not clunked
[  351.189167][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  351.438405][T14262] /dev/nullb0: Can't open blockdev
[  351.439049][T14264] netlink: 'syz.2.3154': attribute type 10 has an invalid length.
[  351.599200][   T33] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  351.782891][   T33] usb 7-1: Using ep0 maxpacket: 32
[  351.803523][   T33] usb 7-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  351.807557][   T33] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  351.810763][   T33] usb 7-1: Product: syz
[  351.812685][   T33] usb 7-1: Manufacturer: syz
[  351.814948][   T33] usb 7-1: SerialNumber: syz
[  351.820237][   T33] usb 7-1: config 0 descriptor??
[  351.824432][   T33] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  351.856993][ T5873] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  352.006700][ T5873] usb 9-1: Using ep0 maxpacket: 16
[  352.010687][ T5873] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  352.014918][ T5873] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  352.020437][ T5873] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice=14.00
[  352.024320][ T5873] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  352.028720][ T5873] usb 9-1: config 0 descriptor??
[  352.033029][ T5873] usbhid 9-1:0.0: couldn't find an input interrupt endpoint
[  352.227147][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  352.239908][   T24] usb 9-1: USB disconnect, device number 4
[  352.516766][T14278] overlayfs: failed to resolve './cgroup': -2
[  352.630788][   T33] gspca_ov534_9: reg_w failed -71
[  352.663991][T14282] vlan4: entered promiscuous mode
[  352.666066][T14282] ip6gretap0: entered promiscuous mode
[  352.967865][   T33] gspca_ov534_9: Unknown sensor 0000
[  352.967953][   T33] ov534_9 7-1:0.0: probe with driver ov534_9 failed with error -22
[  352.997998][   T33] usb 7-1: USB disconnect, device number 8
[  353.061637][T14304] bond1: option arp_all_targets: invalid value (16777216)
[  353.065756][T14304] bond1 (unregistering): Released all slaves
[  353.189503][T14312] snd_dummy snd_dummy.0: control 4:4:4:syz0:4096 is already present
[  353.271035][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  353.328448][T14321] loop8: detected capacity change from 0 to 1024
[  353.347280][   T33] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  353.371945][   T34] audit: type=1800 audit(1903353464.806:670): pid=14321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3180" name="file1" dev="loop8" ino=20 res=0 errno=0
[  353.473095][T14325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  353.477264][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  353.482018][T14325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  353.536316][T14323] loop6: detected capacity change from 0 to 32768
[  353.598667][T14323] ocfs2: Slot 0 on device (7,6) was already allocated to this node!
[  353.609259][T14323] JBD2: Ignoring recovery information on journal
[  353.674374][T14323] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  353.741886][   T34] audit: type=1800 audit(1903353465.176:671): pid=14323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3181" name="file2" dev="loop6" ino=17060 res=0 errno=0
[  353.774725][T11952] ocfs2: Unmounting device (7,6) on (node local)
[  353.969871][T14334] loop8: detected capacity change from 0 to 2048
[  353.994937][T14334] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  354.007372][T14334] EXT4-fs (loop8): shut down requested (2)
[  354.016539][T14346] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3189'.
[  354.024254][T14346] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  354.027853][T13426] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  354.142017][T14354] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3191'.
[  354.149200][T14346] batman_adv: batadv0: Removing interface: batadv_slave_1
[  354.314316][ T6261] net_ratelimit: 2045 callbacks suppressed
[  354.314332][ T6261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  354.471895][ T6261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  354.589751][T14357] loop8: detected capacity change from 0 to 40427
[  354.608356][T14357] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12
[  354.611484][T14357] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[  354.766190][T14357] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  354.788827][T14357] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0
[  354.791075][T14357] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  354.985235][T14386] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3206'.
[  354.996926][T14386] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3206'.
[  355.000499][T14386] tipc: Started in network mode
[  355.002474][T14386] tipc: Node identity 1e, cluster identity 64
[  355.004682][T14386] tipc: Node number set to 30
[  355.029727][T14390] loop8: detected capacity change from 0 to 512
[  355.043359][T14390] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0007-000000000000 r/w without journal. Quota mode: writeback.
[  355.048727][T14390] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  355.060019][T14390] Quota error (device loop8): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0
[  355.063304][T14390] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0
[  355.066046][T14390] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.3203: Failed to acquire dquot type 0
[  355.076162][T14390] Quota error (device loop8): do_check_range: Getting block 67108864 out of range 0-8
[  355.103709][T13426] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0007-000000000000.
[  355.185815][T14399] macvlan2: entered promiscuous mode
[  355.188599][T14399] batman_adv: batadv0: Adding interface: macvlan2
[  355.190971][T14399] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  355.200270][T14399] batman_adv: batadv0: Not using interface macvlan2 (retrying later): interface not active
[  355.336813][   T33] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  355.352338][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  355.488204][   T33] usb 7-1: config 0 has an invalid interface number: 204 but max is 0
[  355.491138][   T33] usb 7-1: config 0 has no interface number 0
[  355.496126][   T33] usb 7-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d
[  355.500379][   T33] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  355.503885][   T33] usb 7-1: Product: syz
[  355.505468][   T33] usb 7-1: Manufacturer: syz
[  355.508045][   T33] usb 7-1: SerialNumber: syz
[  355.512079][   T33] usb 7-1: config 0 descriptor??
[  355.519394][   T33] ems_usb 7-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -8
[  355.525383][   T33] ems_usb 7-1:0.204: probe with driver ems_usb failed with error -8
[  355.546276][T14410] Bluetooth: MGMT ver 1.23
[  355.724931][   T33] usb 7-1: USB disconnect, device number 9
[  356.298034][ T5887] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  356.354014][T14456] loop6: detected capacity change from 0 to 32768
[  356.358580][T14456] *** Log Is Dirty ! ***
[  356.360442][T14456] lmLogInit: exit(-22)
[  356.361753][T14456] lmLogOpen: exit(-22)
[  356.363326][T14456] jfs_mount_rw failed, return code = -22
[  356.390473][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  356.393589][   T33] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  356.436351][T14458] loop6: detected capacity change from 0 to 512
[  356.451896][ T5887] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  356.455206][ T5887] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  356.458681][ T5887] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  356.462979][ T5887] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  356.466278][ T5887] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  356.468641][T14458] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  356.475279][T14458] ext4 filesystem being mounted at /287/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  356.480248][ T5887] usb 9-1: config 0 descriptor??
[  356.502016][T11952] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  356.592029][T14462] "syz.6.3240" (14462) uses obsolete ecb(arc4) skcipher
[  356.661211][T14467] loop6: detected capacity change from 0 to 8192
[  356.769926][T14475] loop6: detected capacity change from 0 to 512
[  356.785450][T14475] FAT-fs (loop6): unable to read block(16384) for building NFS inode
[  356.804193][   T34] audit: type=1326 audit(1903353468.236:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14476 comm="syz.2.3246" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9743d9acb9 code=0x0
[  356.902331][ T5887] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0
[  357.367561][T14496] loop6: detected capacity change from 0 to 8
[  357.371260][T14496] squashfs image failed sanity check
[  357.426843][ T6261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  357.510006][   T33] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  357.531844][    C0] plantronics 0003:047F:FFFF.000D: hid_field_extract() called with n (132) > 32! (syz.8.3235)
[  357.737655][   T33] usb 9-1: USB disconnect, device number 5
[  357.819274][   T34] audit: type=1804 audit(1903353469.256:673): pid=14517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3264" name="bus" dev="ramfs" ino=36475 res=1 errno=0
[  358.068475][T14536] FAT-fs (loop6): Directory bread(block 64) failed
[  358.070674][T14536] FAT-fs (loop6): Directory bread(block 65) failed
[  358.073014][T14536] FAT-fs (loop6): Directory bread(block 66) failed
[  358.075146][T14536] FAT-fs (loop6): Directory bread(block 67) failed
[  358.078936][T14536] FAT-fs (loop6): Directory bread(block 68) failed
[  358.081151][T14536] FAT-fs (loop6): Directory bread(block 69) failed
[  358.083361][T14536] FAT-fs (loop6): Directory bread(block 70) failed
[  358.085484][T14536] FAT-fs (loop6): Directory bread(block 71) failed
[  358.088868][T14536] FAT-fs (loop6): Directory bread(block 72) failed
[  358.091467][T14536] FAT-fs (loop6): Directory bread(block 73) failed
[  358.260572][T14543] ntfs3(loop6): Different NTFS sector size (2048) and media sector size (512).
[  358.302541][T14543] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[  358.469957][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  358.540294][T14561] set_capacity_and_notify: 2 callbacks suppressed
[  358.540303][T14561] loop6: detected capacity change from 0 to 1024
[  358.545769][T14561] EXT4-fs: inline encryption not supported
[  358.582905][T14561] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  358.651298][T11952] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  358.951725][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  359.433211][T14629] xt_time: invalid argument - start or stop time greater than 23:59:59
[  359.507618][ T6261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  359.736725][   T24] usb 9-1: new low-speed USB device number 6 using dummy_hcd
[  359.898575][   T24] usb 9-1: config 32 interface 0 altsetting 0 endpoint 0x85 is Bulk; changing to Interrupt
[  359.901902][   T24] usb 9-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[  359.904831][   T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  359.909694][T14636] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  360.115789][   T24] usb 9-1: string descriptor 0 read error: -71
[  360.118480][   T24] hub 9-1:32.0: USB hub found
[  360.122913][   T24] hub 9-1:32.0: config failed, can't read hub descriptor (err -22)
[  360.157561][   T24] usb 9-1: USB disconnect, device number 6
[  360.547192][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  360.646469][T14673] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  360.672711][T14675] loop8: detected capacity change from 0 to 16
[  360.675526][T14675] erofs (device loop8): mounted with root inode @ nid 36.
[  361.219909][T14683] loop8: detected capacity change from 0 to 32768
[  361.289009][T14683] XFS (loop8): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  361.320202][T14683] XFS (loop8): Ending clean mount
[  361.322937][T14683] XFS (loop8): Quotacheck needed: Please wait.
[  361.361663][T14683] XFS (loop8): Quotacheck: Done.
[  361.411222][T14697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3341'.
[  361.626315][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  361.658678][T13426] XFS (loop8): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  361.784022][T14718] macsec1: entered promiscuous mode
[  361.785702][T14718] macvlan0: entered promiscuous mode
[  361.796058][T14718] macvlan0: left promiscuous mode
[  361.996870][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  362.172739][T14738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  362.176913][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  362.629625][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  362.787363][   T33] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  363.426807][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  363.449145][T14765] kAFS: Can only specify source 'none' with -o dyn
[  363.652826][T14777] IPVS: Scheduler module ip_vs_sip not found
[  363.921969][T14796] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3383'.
[  364.115748][T14809] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  364.284323][T14820] bridge1: entered promiscuous mode
[  364.323422][T14824] netlink: 'syz.8.3396': attribute type 21 has an invalid length.
[  364.327356][T14824] netlink: 156 bytes leftover after parsing attributes in process `syz.8.3396'.
[  364.330859][T14824] netlink: 'syz.8.3396': attribute type 21 has an invalid length.
[  364.340462][T14824] netlink: 156 bytes leftover after parsing attributes in process `syz.8.3396'.
[  365.596968][ T5887] net_ratelimit: 1 callbacks suppressed
[  365.596979][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  365.601290][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  365.604451][  T113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  365.887084][ T5887] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  366.001153][   T34] audit: type=1326 audit(1903353477.436:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14881 comm="syz.2.3423" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9743d9acb9 code=0x7ffc0000
[  366.009546][   T34] audit: type=1326 audit(1903353477.436:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14881 comm="syz.2.3423" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9743d9acb9 code=0x7ffc0000
[  366.016209][   T34] audit: type=1326 audit(1903353477.446:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14881 comm="syz.2.3423" exe="/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f9743d9acb9 code=0x7ffc0000
[  366.024736][   T34] audit: type=1326 audit(1903353477.446:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14881 comm="syz.2.3423" exe="/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9743d9aa22 code=0x7ffc0000
[  366.031901][ T5887] usb 9-1: device descriptor read/64, error -71
[  366.034191][   T34] audit: type=1326 audit(1903353477.446:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14881 comm="syz.2.3423" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9743d5b58e code=0x7ffc0000
[  366.041817][   T34] audit: type=1326 audit(1903353477.446:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14881 comm="syz.2.3423" exe="/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f9743d9aae7 code=0x7ffc0000
[  366.048720][   T34] audit: type=1326 audit(1903353477.446:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14881 comm="syz.2.3423" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9743d5b58e code=0x7ffc0000
[  366.056377][   T34] audit: type=1326 audit(1903353477.446:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14881 comm="syz.2.3423" exe="/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9743d5b58e code=0x7ffc0000
[  366.063671][   T34] audit: type=1326 audit(1903353477.446:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14881 comm="syz.2.3423" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9743d9acb9 code=0x7ffc0000
[  366.071771][   T34] audit: type=1326 audit(1903353477.446:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14881 comm="syz.2.3423" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9743d9acb9 code=0x7ffc0000
[  366.266754][ T5887] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  366.396750][ T5887] usb 9-1: device descriptor read/64, error -71
[  366.507051][ T5887] usb usb9-port1: attempt power cycle
[  366.638818][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  366.856687][ T5887] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  366.877308][ T5887] usb 9-1: device descriptor read/8, error -71
[  367.116761][ T5887] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  367.150442][ T5887] usb 9-1: device descriptor read/8, error -71
[  367.262070][ T5887] usb usb9-port1: unable to enumerate USB device
[  367.667594][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  367.989344][T14918] loop8: detected capacity change from 0 to 32768
[  367.992569][T14918] xfs: Deprecated parameter 'ikeep'
[  367.994244][T14918] XFS: ikeep mount option is deprecated.
[  367.996045][T14918] xfs: Deprecated parameter 'ikeep'
[  368.000326][T14918] XFS: ikeep mount option is deprecated.
[  368.046353][T14918] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  368.077469][T14918] XFS (loop8): Ending clean mount
[  368.086526][T14918] xfs: Deprecated parameter 'ikeep'
[  368.088496][T14918] XFS: ikeep mount option is deprecated.
[  368.090278][T14918] xfs: Deprecated parameter 'ikeep'
[  368.092243][T14918] XFS: ikeep mount option is deprecated.
[  368.196438][T13426] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  368.628206][   T33] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  368.655721][T14948] loop8: detected capacity change from 0 to 128
[  368.669766][T14948] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256
[  368.673984][T14948] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  368.687611][T14948] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3447'.
[  368.708792][ T6261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  369.229434][T14973] xt_time: invalid argument - start or stop time greater than 23:59:59
[  369.469161][T14976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  369.471946][T14976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  369.474565][T14976] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  370.608644][T15008] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3474'.
[  370.750150][   T33] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0
[  370.753425][   T33] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0
[  370.755870][   T33] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0
[  370.763421][   T33] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0
[  370.765742][   T33] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0
[  370.768239][   T33] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0
[  370.770535][   T33] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0
[  370.772802][   T33] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0
[  370.775057][   T33] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0
[  370.778385][   T33] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0
[  370.788730][   T33] hid-generic 0003:0004:0000.000E: hidraw0: USB HID v0.00 Device [syz0] on syz1
[  370.947320][ T5887] net_ratelimit: 7 callbacks suppressed
[  370.947336][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  371.190173][T15024] loop8: detected capacity change from 0 to 32768
[  371.199298][T15024] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.3481 (15024)
[  371.207856][T15024] BTRFS info (device loop8): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  371.226737][T15024] BTRFS info (device loop8): using crc32c (crc32c-lib) checksum algorithm
[  371.232757][T15024] BTRFS warning (device loop8): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  371.271159][T15024] BTRFS info (device loop8): rebuilding free space tree
[  371.290824][T15024] BTRFS info (device loop8): disabling free space tree
[  371.292929][T15024] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  371.296057][T15024] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  371.315026][T15024] BTRFS info (device loop8): enabling ssd optimizations
[  371.319647][T15024] BTRFS info (device loop8): turning on async discard
[  371.321694][T15024] BTRFS info (device loop8): enabling disk space caching
[  371.323795][T15024] BTRFS info (device loop8): force clearing of disk cache
[  371.326040][T15024] BTRFS info (device loop8): enabling auto defrag
[  371.329126][T15024] BTRFS info (device loop8): max_inline set to 0
[  371.395397][   T34] kauditd_printk_skb: 7 callbacks suppressed
[  371.395407][   T34] audit: type=1800 audit(1903353482.826:691): pid=15024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3481" name="file1" dev="loop8" ino=263 res=0 errno=0
[  371.607974][T13426] BTRFS info (device loop8): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  371.967999][T15057] loop8: detected capacity change from 0 to 32768
[  371.972823][T15057] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.3488 (15057)
[  371.983773][T15057] BTRFS info (device loop8): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  371.987846][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  371.988286][T15057] BTRFS info (device loop8): using blake2b (blake2b-256-lib) checksum algorithm
[  372.030876][T15057] BTRFS info (device loop8): setting nodatasum
[  372.035289][T15057] BTRFS info (device loop8): setting nodatacow
[  372.038686][T15057] BTRFS info (device loop8): turning on async discard
[  372.041261][T15057] BTRFS info (device loop8): enabling free space tree
[  372.043634][T15057] BTRFS info (device loop8): force clearing of disk cache
[  372.045876][T15057] BTRFS info (device loop8): enabling auto defrag
[  372.049842][T15057] BTRFS info (device loop8): trying to use backup root at mount time
[  372.107001][T13426] BTRFS info (device loop8): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  372.547823][   T33] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  372.657290][T15088] loop8: detected capacity change from 0 to 40427
[  372.660756][T15088] F2FS-fs: heap/no_heap options were deprecated
[  372.663893][T15088] F2FS-fs (loop8): build fault injection rate: 23
[  372.666444][T15088] F2FS-fs (loop8): build fault injection type: 0x3bfe8c
[  372.670741][T15088] F2FS-fs (loop8): invalid crc value
[  372.682528][T15088] F2FS-fs (loop8): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x659/0xa00
[  372.726998][T15088] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  372.731949][T15088] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  372.749103][T15088] F2FS-fs (loop8): inject page alloc in f2fs_grab_cache_folio of f2fs_new_node_folio+0x131/0xa40
[  373.028934][ T6261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  374.068062][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  374.446739][   T33] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[  374.626868][   T33] usb 9-1: Using ep0 maxpacket: 16
[  374.631412][   T33] usb 9-1: config 0 has an invalid interface number: 1 but max is 0
[  374.634797][   T33] usb 9-1: config 0 has no interface number 0
[  374.637460][   T33] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  374.640957][   T33] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  374.644642][   T33] usb 9-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[  374.648281][   T33] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  374.653484][   T33] usb 9-1: config 0 descriptor??
[  374.949816][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  375.108076][ T6261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  375.241368][T15126] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3510'.
[  375.267447][   T33] uclogic 0003:28BD:0071.000F: pen parameters not found
[  375.270288][   T33] uclogic 0003:28BD:0071.000F: interface is invalid, ignoring
[  375.291677][T15126] bond2: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms
[  375.299693][T15126] bond2 (unregistering): Released all slaves
[  375.318175][ T5226] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  375.327180][ T5226] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  375.331445][ T5226] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  375.335042][ T5226] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  375.341478][ T5226] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  375.348706][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  375.492483][ T6261] usb 9-1: USB disconnect, device number 11
[  375.602715][T11784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  375.651274][T15128] chnl_net:caif_netlink_parms(): no params data found
[  375.817931][   T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  375.833783][   T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  375.998873][   T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  376.002953][   T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  376.014847][T15128] bridge0: port 1(bridge_slave_0) entered blocking state
[  376.020269][T15128] bridge0: port 1(bridge_slave_0) entered disabled state
[  376.023390][T15128] bridge_slave_0: entered allmulticast mode
[  376.030847][T15128] bridge_slave_0: entered promiscuous mode
[  376.036415][T15128] bridge0: port 2(bridge_slave_1) entered blocking state
[  376.039916][T15128] bridge0: port 2(bridge_slave_1) entered disabled state
[  376.042874][T15128] bridge_slave_1: entered allmulticast mode
[  376.059925][T15128] bridge_slave_1: entered promiscuous mode
[  376.153177][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  376.235944][   T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  376.252918][   T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  376.284702][T15128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  376.293021][T15128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  376.321542][T15154] loop8: detected capacity change from 0 to 512
[  376.369508][T15154] EXT4-fs (loop8): 1 orphan inode deleted
[  376.373136][T15154] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  376.378165][T15154] ext4 filesystem being mounted at /167/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  376.385738][   T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  376.393826][   T34] audit: type=1800 audit(1903353487.816:692): pid=15154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3517" name="bus" dev="loop8" ino=16 res=0 errno=0
[  376.402621][   T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  376.415777][T15128] team0: Port device team_slave_0 added
[  376.423008][T15128] team0: Port device team_slave_1 added
[  376.458482][T15128] batman_adv: batadv0: Adding interface: batadv_slave_0
[  376.460856][T15128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  376.470991][T15128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  376.481568][T13426] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  376.485927][T15128] batman_adv: batadv0: Adding interface: batadv_slave_1
[  376.490661][T15128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  376.514780][T15128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  376.601674][T15159] bond1: option tlb_dynamic_lb: invalid value (255)
[  376.609073][T15159] bond1 (unregistering): Released all slaves
[  376.624570][T15128] hsr_slave_0: entered promiscuous mode
[  376.627993][T15128] hsr_slave_1: entered promiscuous mode
[  376.841665][   T12] bridge_slave_1: left allmulticast mode
[  376.843652][   T12] bridge_slave_1: left promiscuous mode
[  376.847191][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  376.852978][   T12] bridge_slave_0: left allmulticast mode
[  376.855817][   T12] bridge_slave_0: left promiscuous mode
[  376.866415][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  377.187020][ T6261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  377.306977][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  377.316250][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  377.321127][   T12] bond0 (unregistering): Released all slaves
[  377.379863][   T12] : left promiscuous mode
[  377.429444][ T5850] Bluetooth: hci3: command tx timeout
[  377.457199][   T12] tipc: Left network mode
[  377.570665][T15128] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  377.581266][T15128] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  377.585774][T15128] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  377.590750][T15128] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  377.693015][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  377.695500][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  377.712246][   T12] veth1_macvtap: left promiscuous mode
[  377.714023][   T12] veth0_macvtap: left promiscuous mode
[  377.715812][   T12] veth1_vlan: left promiscuous mode
[  377.718008][   T12] veth0_vlan: left promiscuous mode
[  378.232716][ T6261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  378.458739][   T12] team0 (unregistering): Port device team_slave_1 removed
[  378.523332][   T12] team0 (unregistering): Port device team_slave_0 removed
[  378.639637][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  379.175807][T15193] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  379.180842][T15193] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  379.292298][T15128] 8021q: adding VLAN 0 to HW filter on device bond0
[  379.307560][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  379.412885][T15128] 8021q: adding VLAN 0 to HW filter on device team0
[  379.488546][ T5125] bridge0: port 1(bridge_slave_0) entered blocking state
[  379.490966][ T5125] bridge0: port 1(bridge_slave_0) entered forwarding state
[  379.521765][ T5850] Bluetooth: hci3: command tx timeout
[  379.525194][ T5125] bridge0: port 2(bridge_slave_1) entered blocking state
[  379.527543][ T5125] bridge0: port 2(bridge_slave_1) entered forwarding state
[  379.764022][T15128] 8021q: adding VLAN 0 to HW filter on device batadv0
[  379.833441][T15238] loop8: detected capacity change from 0 to 64
[  379.992021][T15128] veth0_vlan: entered promiscuous mode
[  380.008856][T15128] veth1_vlan: entered promiscuous mode
[  380.041553][T15128] veth0_macvtap: entered promiscuous mode
[  380.047841][T15128] veth1_macvtap: entered promiscuous mode
[  380.072995][T15128] batman_adv: batadv0: Interface activated: batadv_slave_0
[  380.093901][T15128] batman_adv: batadv0: Interface activated: batadv_slave_1
[  380.109302][ T5854] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  380.117798][ T5854] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  380.127137][ T5854] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  380.132859][ T5854] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  380.248873][ T5125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  380.251764][ T5125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  380.282940][ T5125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  380.287610][ T5125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  380.295421][T15255] loop8: detected capacity change from 0 to 256
[  380.309166][T15255] exfat: Deprecated parameter 'namecase'
[  380.311877][T15255] exfat: Deprecated parameter 'utf8'
[  380.317919][T15255] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  380.389531][ T6261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  380.410500][T15258] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3543'.
[  381.568070][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  381.597210][ T5850] Bluetooth: hci3: command tx timeout
[  381.669080][T11784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  382.627476][ T6261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  383.214967][T15313] loop8: detected capacity change from 0 to 32768
[  383.224577][T15313] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.3563 (15313)
[  383.249420][T15313] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  383.255198][T15313] BTRFS info (device loop8): using crc32c (crc32c-lib) checksum algorithm
[  383.365128][T15313] BTRFS info (device loop8): enabling ssd optimizations
[  383.367756][T15313] BTRFS info (device loop8): turning on async discard
[  383.370000][T15313] BTRFS info (device loop8): enabling free space tree
[  383.461393][T13426] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  383.666693][ T5850] Bluetooth: hci3: command tx timeout
[  383.667085][ T6261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  383.909302][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  383.911409][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  384.557769][ T5894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  384.680618][T15385] io-wq is not configured for unbound workers
[  384.691801][T15387] loop9: detected capacity change from 0 to 128
[  384.708776][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  384.713040][T15387] EXT4-fs: Ignoring removed nobh option
[  384.721794][T11784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  384.733524][T15387] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  384.757450][T15387] ext4 filesystem being mounted at /11/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  384.770900][T15387] fscrypt (loop9, inode 12): Unsupported log2_data_unit_size in encryption policy: 242
[  384.807680][T15128] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  385.865548][ T6261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  386.614378][T15441] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3609'.
[  386.867490][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  387.047290][ T6261] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[  387.200103][ T6261] usb 9-1: Using ep0 maxpacket: 32
[  387.208415][ T6261] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  387.216132][ T6261] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  387.223804][ T6261] usb 9-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  387.229197][ T6261] usb 9-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  387.233823][ T6261] usb 9-1: Product: syz
[  387.236103][ T6261] usb 9-1: Manufacturer: syz
[  387.261597][ T6261] hub 9-1:4.0: USB hub found
[  387.343966][T15483] loop9: detected capacity change from 0 to 1024
[  387.348435][T15483] EXT4-fs: Ignoring removed bh option
[  387.386429][T15483] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  387.437384][T15483] EXT4-fs error (device loop9): ext4_find_dest_de:2050: inode #12: block 7: comm syz.9.3629: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0
[  387.464618][ T6261] hub 9-1:4.0: 2 ports detected
[  387.466111][T15483] EXT4-fs (loop9): Remounting filesystem read-only
[  387.469331][ T6261] hub 9-1:4.0: insufficient power available to use all downstream ports
[  387.469723][T15483] overlayfs: cleanup of 'index/#1c' failed (-30)
[  387.523684][T15128] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  387.748339][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  387.881337][ T6261] hub 9-1:4.0: set hub depth failed
[  387.896404][ T6261] usb 9-1: USB disconnect, device number 12
[  387.915697][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  388.591298][T15508] gretap0: entered promiscuous mode
[  388.933217][T15526] loop9: detected capacity change from 0 to 256
[  388.958559][T11784] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[  388.998510][T15526] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010895, chksum : 0x816c887a, utbl_chksum : 0xe619d30d)
[  389.004970][T15526] exFAT-fs (loop9): failed to load alloc-bitmap
[  389.007792][T15526] exFAT-fs (loop9): failed to recognize exfat type
[  389.142421][ T6261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  389.229076][T11784] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  389.232525][T11784] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  389.241507][T11784] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66
[  389.245241][T11784] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  389.250377][T11784] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  389.257416][T11784] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  389.260997][T11784] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  389.264244][T11784] usb 9-1: Product: syz
[  389.277289][T11784] usb 9-1: Manufacturer: syz
[  389.283804][T11784] cdc_wdm 9-1:1.0: skipping garbage
[  389.285980][T11784] cdc_wdm 9-1:1.0: skipping garbage
[  389.304268][T11784] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device
[  389.306875][T11784] cdc_wdm 9-1:1.0: Unknown control protocol
[  389.504785][T11784] usb 9-1: USB disconnect, device number 13
[  389.658801][T15547] loop9: detected capacity change from 0 to 4096
[  389.661680][T15547] ntfs3(loop9): Different NTFS sector size (2048) and media sector size (512).
[  389.685390][ T6151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  390.135702][T15571] loop9: detected capacity change from 0 to 512
[  390.162668][T15571] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #15: comm syz.9.3668: iget: bad i_size value: 38620345925642
[  390.169004][ T6261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  390.172939][T15571] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.3668: couldn't read orphan inode 15 (err -117)
[  390.188429][T15571] EXT4-fs (loop9): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback.
[  390.206508][T15571] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.3668: bg 0: block 5: invalid block bitmap
[  390.215265][T15571] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28
[  390.224653][T15571] EXT4-fs (loop9): This should not happen!! Data will be lost
[  390.224653][T15571] 
[  390.230628][T15571] EXT4-fs (loop9): Total free blocks count 0
[  390.232689][T15571] EXT4-fs (loop9): Free/Dirty block details
[  390.234575][T15571] EXT4-fs (loop9): free_blocks=0
[  390.236233][T15571] EXT4-fs (loop9): dirty_blocks=5
[  390.243722][T15571] EXT4-fs (loop9): Block reservation details
[  390.245930][T15571] EXT4-fs (loop9): i_reserved_data_blocks=5
[  390.287386][ T1182] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 131587 with max blocks 1 with error 28
[  390.512149][T15597] tipc: Can't bind to reserved service type 0
[  390.576798][   T24] usb 9-1: new high-speed USB device number 14 using dummy_hcd
[  391.186880][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  391.417448][   T24] usb 9-1: Using ep0 maxpacket: 16
[  391.421221][   T24] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  391.425546][   T24] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  391.431173][   T24] usb 9-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  391.435956][   T24] usb 9-1: config 0 interface 0 has no altsetting 0
[  391.438818][   T24] usb 9-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  391.442282][   T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  391.446809][  T113] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  391.451089][   T24] usb 9-1: config 0 descriptor??
[  391.638377][  T113] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  391.646932][  T113] usb 10-1: config 0 interface 0 has no altsetting 0
[  391.671844][  T113] usb 10-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9
[  391.677155][  T113] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  391.680647][  T113] usb 10-1: Product: syz
[  391.682466][  T113] usb 10-1: Manufacturer: syz
[  391.684476][  T113] usb 10-1: SerialNumber: syz
[  391.710835][  T113] usb 10-1: config 0 descriptor??
[  391.720945][  T113] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state.
[  391.730679][  T113] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  391.750896][  T113] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0)
[  391.754431][  T113] usb 10-1: media controller created
[  391.769735][  T113] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  391.820208][  T113] DVB: Unable to find symbol tda10046_attach()
[  391.822879][  T113] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0'
[  391.826337][  T113] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected.
[  391.871936][   T24] hid (null): invalid report_size 51066
[  392.088648][   T24] usb 9-1: USB disconnect, device number 14
[  392.228482][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  392.701238][T15642] loop8: detected capacity change from 0 to 4096
[  392.714508][T15642] ntfs3(loop8): Different NTFS sector size (1024) and media sector size (512).
[  392.726028][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  392.731842][  T113] dvb_usb_m920x 10-1:0.0: probe with driver dvb_usb_m920x failed with error -71
[  392.735742][T15642] ntfs3(loop8): ino=3, mi_enum_attr
[  392.745701][  T113] usb 10-1: USB disconnect, device number 2
[  392.768150][T15642] ntfs3(loop8): Mark volume as dirty due to NTFS errors
[  392.776067][T15642] ntfs3(loop8): Failed to load $BadClus (-22).
[  393.360704][T15608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  393.378068][T15665] usb usb8: usbfs: process 15665 (syz.8.3699) did not claim interface 0 before use
[  393.527343][T15673] binder: 15672:15673 ioctl c0306201 0 returned -14
[  393.638765][T15679] loop9: detected capacity change from 0 to 256
[  393.675130][T15679] FAT-fs (loop9): Directory bread(block 64) failed
[  393.686708][T15679] FAT-fs (loop9): Directory bread(block 65) failed
[  393.688856][T15679] FAT-fs (loop9): Directory bread(block 66) failed
[  393.690821][T15679] FAT-fs (loop9): Directory bread(block 67) failed
[  393.692860][T15679] FAT-fs (loop9): Directory bread(block 68) failed
[  393.694863][T15679] FAT-fs (loop9): Directory bread(block 69) failed
[  393.698901][T15679] FAT-fs (loop9): Directory bread(block 70) failed
[  393.701413][T15679] FAT-fs (loop9): Directory bread(block 71) failed
[  393.703520][T15679] FAT-fs (loop9): Directory bread(block 72) failed
[  393.705584][T15679] FAT-fs (loop9): Directory bread(block 73) failed
[  393.818945][T15683] loop9: detected capacity change from 0 to 128
[  393.838417][T15683] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  393.871226][T15685] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3709'.
[  393.919216][  T113] usb 9-1: new high-speed USB device number 15 using dummy_hcd
[  394.130356][  T113] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  394.132686][T15687] loop9: detected capacity change from 0 to 32768
[  394.133793][  T113] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  394.146946][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  394.154103][  T113] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  394.168283][  T113] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  394.171194][  T113] usb 9-1: Product: syz
[  394.172592][  T113] usb 9-1: Manufacturer: syz
[  394.174005][  T113] usb 9-1: SerialNumber: syz
[  394.176911][   T33] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  394.188757][  T113] cdc_mbim 9-1:1.0: skipping garbage
[  394.219726][T15687] XFS (loop9): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  394.280328][T15687] XFS (loop9): Ending clean mount
[  394.320190][T15128] XFS (loop9): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  394.387329][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  394.406030][T15681] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  394.666169][T15709] loop9: detected capacity change from 0 to 32768
[  394.699534][T15709] XFS (loop9): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  394.718030][T15709] XFS (loop9): Ending clean mount
[  395.025653][ T4412] XFS (loop9): Metadata CRC error detected at xfs_agfl_read_verify+0x139/0x200, xfs_agfl block 0x3 
[  395.030960][ T4412] XFS (loop9): Unmount and run xfs_repair
[  395.033439][ T4412] XFS (loop9): First 128 bytes of corrupted metadata buffer:
[  395.038217][T15681] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  395.041525][  T113] cdc_mbim 9-1:1.0: setting tx_max = 16384
[  395.045222][ T4412] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed  XAF.......G...N.
[  395.050033][  T113] cdc_mbim 9-1:1.0: cdc-wdm0: USB WDM device
[  395.057683][ T4412] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00  .b..1...........
[  395.062020][ T4412] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08  .;..............
[  395.062363][  T113] wwan wwan0: port wwan0mbim0 attached
[  395.067171][ T4412] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c  ................
[  395.074783][ T4412] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  395.078848][ T4412] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  395.083177][ T4412] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  395.085952][ T4412] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  395.090147][ T4412] XFS (loop9): metadata I/O error in "xfs_alloc_read_agfl+0x233/0x430" at daddr 0x3 len 1 error 74
[  395.094916][  T113] cdc_mbim 9-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.8-1, CDC MBIM, 5e:d5:fa:a6:95:b3
[  395.098709][ T4412] XFS (loop9): page discard on page ffffea00067d5600, inode 0x2449, pos 0.
[  395.114343][ T4412] XFS (loop9): Metadata CRC error detected at xfs_agfl_read_verify+0x139/0x200, xfs_agfl block 0x3 
[  395.128611][ T4412] XFS (loop9): Unmount and run xfs_repair
[  395.130593][ T4412] XFS (loop9): First 128 bytes of corrupted metadata buffer:
[  395.136855][ T4412] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed  XAF.......G...N.
[  395.144695][ T4412] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00  .b..1...........
[  395.148882][ T4412] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08  .;..............
[  395.151927][ T4412] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c  ................
[  395.154864][ T4412] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  395.158803][ T4412] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  395.162044][ T4412] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  395.165541][ T4412] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  395.169510][ T4412] XFS (loop9): metadata I/O error in "xfs_alloc_read_agfl+0x233/0x430" at daddr 0x3 len 1 error 74
[  395.173152][ T4412] XFS (loop9): page discard on page ffffea00067d5600, inode 0x2449, pos 0.
[  395.176432][ T4412] XFS (loop9): Metadata CRC error detected at xfs_agfl_read_verify+0x139/0x200, xfs_agfl block 0x3 
[  395.183812][ T4412] XFS (loop9): Unmount and run xfs_repair
[  395.186282][ T4412] XFS (loop9): First 128 bytes of corrupted metadata buffer:
[  395.189212][ T4412] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed  XAF.......G...N.
[  395.192462][ T4412] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00  .b..1...........
[  395.195450][ T4412] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08  .;..............
[  395.200937][ T4412] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c  ................
[  395.204178][ T4412] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  395.207378][ T4412] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  395.211228][ T4412] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  395.214765][ T4412] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  395.218470][ T4412] XFS (loop9): metadata I/O error in "xfs_alloc_read_agfl+0x233/0x430" at daddr 0x3 len 1 error 74
[  395.222977][ T4412] XFS (loop9): page discard on page ffffea00067d5740, inode 0x2449, pos 20480.
[  395.226380][ T4412] XFS (loop9): Metadata CRC error detected at xfs_agfl_read_verify+0x139/0x200, xfs_agfl block 0x3 
[  395.229907][ T4412] XFS (loop9): Unmount and run xfs_repair
[  395.232055][ T4412] XFS (loop9): First 128 bytes of corrupted metadata buffer:
[  395.234684][ T4412] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed  XAF.......G...N.
[  395.237551][ T4412] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00  .b..1...........
[  395.240591][ T4412] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08  .;..............
[  395.243632][ T4412] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c  ................
[  395.246821][ T4412] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  395.249964][ T4412] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  395.252334][T15608] usb 9-1: USB disconnect, device number 15
[  395.253144][ T4412] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  395.256008][T15608] cdc_mbim 9-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.8-1, CDC MBIM
[  395.258661][ T4412] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  395.258676][ T4412] XFS (loop9): metadata I/O error in "xfs_alloc_read_agfl+0x233/0x430" at daddr 0x3 len 1 error 74
[  395.258777][ T4412] XFS (loop9): page discard on page ffffea00067d5780, inode 0x2449, pos 24576.
[  395.259174][ T4412] XFS (loop9): Metadata CRC error detected at xfs_agfl_read_verify+0x139/0x200, xfs_agfl block 0x3 
[  395.277470][ T4412] XFS (loop9): Unmount and run xfs_repair
[  395.279463][ T4412] XFS (loop9): First 128 bytes of corrupted metadata buffer:
[  395.281933][ T4412] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed  XAF.......G...N.
[  395.284766][ T4412] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00  .b..1...........
[  395.290930][ T4412] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08  .;..............
[  395.293769][ T4412] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c  ................
[  395.296916][ T4412] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  395.299880][ T4412] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  395.302614][ T4412] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  395.305735][ T4412] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  395.313365][ T4412] XFS (loop9): metadata I/O error in "xfs_alloc_read_agfl+0x233/0x430" at daddr 0x3 len 1 error 74
[  395.319341][ T4412] XFS (loop9): page discard on page ffffea00067d57c0, inode 0x2449, pos 28672.
[  395.329110][ T4412] XFS (loop9): Metadata CRC error detected at xfs_agfl_read_verify+0x139/0x200, xfs_agfl block 0x3 
[  395.337674][ T4412] XFS (loop9): Unmount and run xfs_repair
[  395.338260][T15608] wwan wwan0: port wwan0mbim0 disconnected
[  395.341961][ T4412] XFS (loop9): First 128 bytes of corrupted metadata buffer:
[  395.349185][ T4412] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed  XAF.......G...N.
[  395.355549][ T4412] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00  .b..1...........
[  395.360045][ T4412] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08  .;..............
[  395.363337][ T4412] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c  ................
[  395.366242][ T4412] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  395.370128][ T4412] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  395.374276][ T4412] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  395.378204][ T4412] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  395.381771][ T4412] XFS (loop9): metadata I/O error in "xfs_alloc_read_agfl+0x233/0x430" at daddr 0x3 len 1 error 74
[  395.386209][ T4412] XFS (loop9): page discard on page ffffea00067d5800, inode 0x2449, pos 32768.
[  395.390907][ T4412] XFS (loop9): Metadata CRC error detected at xfs_agfl_read_verify+0x139/0x200, xfs_agfl block 0x3 
[  395.394360][ T4412] XFS (loop9): Unmount and run xfs_repair
[  395.397201][ T4412] XFS (loop9): First 128 bytes of corrupted metadata buffer:
[  395.399656][ T4412] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed  XAF.......G...N.
[  395.402422][ T4412] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00  .b..1...........
[  395.405555][ T4412] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08  .;..............
[  395.411415][ T4412] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c  ................
[  395.414281][ T4412] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  395.418993][ T4412] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  395.421765][ T4412] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  395.424773][ T4412] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  395.429433][ T4412] XFS (loop9): metadata I/O error in "xfs_alloc_read_agfl+0x233/0x430" at daddr 0x3 len 1 error 74
[  395.432826][ T4412] XFS (loop9): page discard on page ffffea00067d5840, inode 0x2449, pos 36864.
[  395.436218][ T4412] XFS (loop9): Metadata CRC error detected at xfs_agfl_read_verify+0x139/0x200, xfs_agfl block 0x3 
[  395.436768][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  395.439938][ T4412] XFS (loop9): Unmount and run xfs_repair
[  395.447632][ T4412] XFS (loop9): First 128 bytes of corrupted metadata buffer:
[  395.449945][ T4412] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed  XAF.......G...N.
[  395.452640][ T4412] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00  .b..1...........
[  395.455598][ T4412] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08  .;..............
[  395.458843][ T4412] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c  ................
[  395.461745][ T4412] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  395.464473][ T4412] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  395.468226][ T4412] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  395.471151][ T4412] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  395.474132][ T4412] XFS (loop9): metadata I/O error in "xfs_alloc_read_agfl+0x233/0x430" at daddr 0x3 len 1 error 74
[  395.478166][ T4412] XFS (loop9): page discard on page ffffea00067d5880, inode 0x2449, pos 40960.
[  395.481496][ T4412] XFS (loop9): Metadata CRC error detected at xfs_agfl_read_verify+0x139/0x200, xfs_agfl block 0x3 
[  395.484825][ T4412] XFS (loop9): Unmount and run xfs_repair
[  395.487236][ T4412] XFS (loop9): First 128 bytes of corrupted metadata buffer:
[  395.489539][ T4412] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed  XAF.......G...N.
[  395.492695][ T4412] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00  .b..1...........
[  395.495416][ T4412] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08  .;..............
[  395.499546][ T4412] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c  ................
[  395.502385][ T4412] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  395.505360][ T4412] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  395.515607][ T4412] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  395.525706][ T4412] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  395.538315][ T4412] XFS (loop9): metadata I/O error in "xfs_alloc_read_agfl+0x233/0x430" at daddr 0x3 len 1 error 74
[  395.542090][ T4412] XFS (loop9): page discard on page ffffea00067d58c0, inode 0x2449, pos 45056.
[  395.567522][T15128] XFS (loop9): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  395.579166][T15128] XFS (loop9): Uncorrected metadata errors detected; please run xfs_repair.
[  395.752674][  T113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  395.894732][T15749] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3726'.
[  395.897967][T15749] netlink: 'syz.2.3726': attribute type 8 has an invalid length.
[  395.966473][T15754] netlink: 'syz.2.3729': attribute type 46 has an invalid length.
[  395.989765][T15756] loop9: detected capacity change from 0 to 128
[  395.995608][T15756] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256
[  396.015584][T15756] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  396.073870][   T34] audit: type=1800 audit(1903353507.506:693): pid=15756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3728" name="bus" dev="loop9" ino=125 res=0 errno=0
[  396.164585][T15764] loop8: detected capacity change from 0 to 2048
[  396.210981][ T5852] Alternate GPT is invalid, using primary GPT.
[  396.213602][ T5852]  loop8: p2 p3 p7
[  396.251448][T15764] Alternate GPT is invalid, using primary GPT.
[  396.256985][T15764]  loop8: p2 p3 p7
[  396.297833][T15764] comedi comedi0: Minor 3 could not be opened
[  396.423119][ T5852] udevd[5852]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory
[  396.424555][T13468] udevd[13468]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory
[  396.436131][ T5838] udevd[5838]: inotify_add_watch(7, /dev/loop8p7, 10) failed: No such file or directory
[  396.468120][T15608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  396.558849][T15790] loop9: detected capacity change from 0 to 512
[  396.587435][T15790] EXT4-fs error (device loop9): ext4_clear_blocks:876: inode #13: comm syz.9.3746: attempt to clear invalid blocks 1 len 1
[  396.606832][T15790] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.3746: bg 0: block 343: padding at end of block bitmap is not set
[  396.625386][T15790] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6689: Corrupt filesystem
[  396.630983][T15790] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.3746: invalid indirect mapped block 1819239214 (level 0)
[  396.641142][T15790] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.3746: invalid indirect mapped block 1819239214 (level 1)
[  396.656321][T15790] EXT4-fs (loop9): 1 truncate cleaned up
[  396.661772][T15790] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  396.677645][T15795] loop8: detected capacity change from 0 to 1024
[  396.706853][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  396.718703][T15128] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  396.734719][  T113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  396.795375][T15796] hfsplus: request for non-existent node 134217728 in B*Tree
[  396.803560][T15796] hfsplus: request for non-existent node 134217728 in B*Tree
[  396.875353][T15802] loop9: detected capacity change from 0 to 1024
[  397.484887][ T5872] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  397.868578][ T5872] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  397.951881][ T6261] net_ratelimit: 6 callbacks suppressed
[  397.951893][ T6261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  398.096695][ T5872] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  398.225113][ T5872] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  398.403626][ T5226] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  398.413147][ T5226] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  398.420545][ T5226] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  398.427798][ T5226] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  398.432941][ T5226] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  398.668075][ T5872] bridge_slave_1: left allmulticast mode
[  398.670074][ T5872] bridge_slave_1: left promiscuous mode
[  398.676296][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state
[  398.692970][ T5872] bridge_slave_0: left allmulticast mode
[  398.695505][ T5872] bridge_slave_0: left promiscuous mode
[  398.697547][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state
[  398.810046][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  399.036898][T15608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  399.293835][ T5872] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  399.313718][ T5872] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  399.321558][ T5872] bond0 (unregistering): Released all slaves
[  399.830138][T15826] chnl_net:caif_netlink_parms(): no params data found
[  399.911642][ T6261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  399.988286][ T5872] hsr_slave_0: left promiscuous mode
[  399.997147][ T5872] hsr_slave_1: left promiscuous mode
[  400.010447][ T5872] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  400.013340][ T5872] batman_adv: batadv0: Removing interface: batadv_slave_0
[  400.047765][ T5872] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  400.060299][ T5872] batman_adv: batadv0: Removing interface: batadv_slave_1
[  400.070318][ T6261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  400.094272][ T5872] veth1_macvtap: left promiscuous mode
[  400.105288][ T5872] veth0_macvtap: left promiscuous mode
[  400.111228][ T5872] veth1_vlan: left promiscuous mode
[  400.113191][ T5872] veth0_vlan: left promiscuous mode
[  400.556397][ T5850] Bluetooth: hci1: command tx timeout
[  400.586728][   T24] usb 9-1: new high-speed USB device number 16 using dummy_hcd
[  400.778575][   T24] usb 9-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[  400.781380][   T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  400.783903][   T24] usb 9-1: Product: syz
[  400.785200][   T24] usb 9-1: Manufacturer: syz
[  400.803367][   T24] usb 9-1: SerialNumber: syz
[  400.824763][   T24] usb 9-1: config 0 descriptor??
[  400.831492][   T24] gspca_main: sunplus-2.14.0 probing 055f:c230
[  401.108939][T15608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  401.187365][   T33] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  401.193742][ T5872] team0 (unregistering): Port device team_slave_1 removed
[  401.261043][ T5872] team0 (unregistering): Port device team_slave_0 removed
[  402.156716][T15608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  402.167255][T15826] bridge0: port 1(bridge_slave_0) entered blocking state
[  402.170319][T15826] bridge0: port 1(bridge_slave_0) entered disabled state
[  402.173399][T15826] bridge_slave_0: entered allmulticast mode
[  402.191632][T15826] bridge_slave_0: entered promiscuous mode
[  402.211384][T15826] bridge0: port 2(bridge_slave_1) entered blocking state
[  402.216255][T15826] bridge0: port 2(bridge_slave_1) entered disabled state
[  402.239272][T15826] bridge_slave_1: entered allmulticast mode
[  402.244109][T15826] bridge_slave_1: entered promiscuous mode
[  402.286492][   T24] gspca_sunplus: reg_r err -71
[  402.288545][   T24] sunplus 9-1:0.0: probe with driver sunplus failed with error -71
[  402.295425][   T24] usb 9-1: USB disconnect, device number 16
[  402.301351][T15826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  402.325569][T15826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  402.417769][T15826] team0: Port device team_slave_0 added
[  402.429604][T15826] team0: Port device team_slave_1 added
[  402.489447][T15826] batman_adv: batadv0: Adding interface: batadv_slave_0
[  402.491694][T15826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  402.508114][T15826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  402.512322][T15826] batman_adv: batadv0: Adding interface: batadv_slave_1
[  402.514320][T15826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  402.540201][T15826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  402.572291][T15826] hsr_slave_0: entered promiscuous mode
[  402.574912][T15826] hsr_slave_1: entered promiscuous mode
[  402.628384][ T5850] Bluetooth: hci1: command tx timeout
[  402.950124][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  402.956751][T15905] block nbd1: server does not support multiple connections per device.
[  403.001339][T15905] block nbd1: shutting down sockets
[  403.190124][T15608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  403.290755][T15826] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  403.298246][T15826] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  403.318267][T15826] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  403.322825][T15826] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  403.421765][T15826] 8021q: adding VLAN 0 to HW filter on device bond0
[  403.440877][T15826] 8021q: adding VLAN 0 to HW filter on device team0
[  403.446494][ T4979] bridge0: port 1(bridge_slave_0) entered blocking state
[  403.448927][ T4979] bridge0: port 1(bridge_slave_0) entered forwarding state
[  403.461118][ T4979] bridge0: port 2(bridge_slave_1) entered blocking state
[  403.463466][ T4979] bridge0: port 2(bridge_slave_1) entered forwarding state
[  403.621081][T15933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  403.626045][T15933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  403.631536][T15933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  403.637078][T15933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  403.640248][T15933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  403.647049][T15933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  403.673733][T15934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  403.683700][T15933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  403.689608][T15933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  403.944209][T15826] 8021q: adding VLAN 0 to HW filter on device batadv0
[  403.981243][T15826] veth0_vlan: entered promiscuous mode
[  403.986493][T15826] veth1_vlan: entered promiscuous mode
[  404.022037][T15826] veth0_macvtap: entered promiscuous mode
[  404.036228][T15826] veth1_macvtap: entered promiscuous mode
[  404.054144][T15826] batman_adv: batadv0: Interface activated: batadv_slave_0
[  404.071930][T15826] batman_adv: batadv0: Interface activated: batadv_slave_1
[  404.095732][ T5872] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  404.118717][ T5872] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  404.122486][ T5872] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  404.137864][ T5872] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  404.229256][ T4705] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  404.283007][ T4705] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  404.298212][ T4705] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  404.300808][ T4705] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  404.555329][T15971] netdevsim netdevsim8: Firmware load for './file0/../file0/file0' refused, path contains '..' component
[  404.701788][T15978] loop8: detected capacity change from 0 to 4096
[  404.704877][T15978] ntfs3(loop8): Primary boot: start of MFT 0x4 (0xff) is out of volume 0x1ff.
[  404.708760][T15978] ntfs3(loop8): try to read out of volume at offset 0x1ffe00
[  404.723004][ T5850] Bluetooth: hci1: command tx timeout
[  404.793884][T15987] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3810'.
[  404.812256][T15987] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3810'.
[  404.910352][T15995] tmpfs: Bad value for 'nr_inodes'
[  405.216726][  T914] usb 9-1: new full-speed USB device number 17 using dummy_hcd
[  405.374138][  T914] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  405.377619][  T914] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  405.380182][  T914] usb 9-1: Product: syz
[  405.406678][  T914] usb 9-1: Manufacturer: syz
[  405.409495][  T914] usb 9-1: SerialNumber: syz
[  405.418048][  T914] usb 9-1: config 0 descriptor??
[  405.620624][T16036] loop0: detected capacity change from 0 to 4096
[  405.632830][  T914] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  405.646839][T16036] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512).
[  406.095986][T16063] loop0: detected capacity change from 0 to 512
[  406.125161][T16063] EXT4-fs: Ignoring removed mblk_io_submit option
[  406.131036][T16063] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  406.147631][T16063] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e12c, mo2=0102]
[  406.150247][T16063] System zones: 1-12
[  406.157504][T16063] EXT4-fs (loop0): orphan cleanup on readonly fs
[  406.167854][T16063] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.3827: invalid indirect mapped block 12 (level 1)
[  406.177622][T16063] EXT4-fs (loop0): Remounting filesystem read-only
[  406.180120][T16063] EXT4-fs (loop0): 1 truncate cleaned up
[  406.189093][T16063] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  406.241827][T15826] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  406.274486][T16069] CIFS mount error: No usable UNC path provided in device string!
[  406.274486][T16069] 
[  406.283768][T16069] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  406.726409][ T6261] hid_parser_main: 8 callbacks suppressed
[  406.726429][ T6261] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[  406.759354][ T6261] hid-generic 0000:0000:0000.0011: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  406.786824][ T5850] Bluetooth: hci1: command tx timeout
[  407.308154][  T914] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  407.324620][  T914] usb 9-1: USB disconnect, device number 17
[  407.741180][T16126] loop0: detected capacity change from 0 to 256
[  407.753476][T16126] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x19066d23, utbl_chksum : 0xe619d30d)
[  407.773047][   T34] audit: type=1800 audit(1903353519.206:694): pid=16126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3847" name="file2" dev="loop0" ino=1048689 res=0 errno=0
[  407.990142][T16134] net veth1_virt_wifi : renamed from virt_wifi0
[  408.375989][T16158] loop0: detected capacity change from 0 to 256
[  408.387521][T15608] net_ratelimit: 78 callbacks suppressed
[  408.387537][T15608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  408.460616][T16161] loop0: detected capacity change from 0 to 256
[  408.494192][T16161] FAT-fs (loop0): Directory bread(block 64) failed
[  408.496418][T16161] FAT-fs (loop0): Directory bread(block 65) failed
[  408.502525][T16161] FAT-fs (loop0): Directory bread(block 66) failed
[  408.504682][T16161] FAT-fs (loop0): Directory bread(block 67) failed
[  408.507365][T16161] FAT-fs (loop0): Directory bread(block 68) failed
[  408.509527][T16161] FAT-fs (loop0): Directory bread(block 69) failed
[  408.511621][T16161] FAT-fs (loop0): Directory bread(block 70) failed
[  408.513739][T16161] FAT-fs (loop0): Directory bread(block 71) failed
[  408.515974][T16161] FAT-fs (loop0): Directory bread(block 72) failed
[  408.520249][T16161] FAT-fs (loop0): Directory bread(block 73) failed
[  408.532473][   T34] audit: type=1800 audit(1903353519.966:695): pid=16161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3863" name="file1" dev="loop0" ino=1048691 res=0 errno=0
[  408.769794][T16168] loop0: detected capacity change from 0 to 1024
[  408.814348][T16168] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input25
[  408.898788][ T3966] hfsplus: b-tree write err: -5, ino 4
[  409.304948][T16187] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  409.335815][T16189] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3873'.
[  409.351973][T16189] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3873'.
[  409.354870][T16189] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3873'.
[  409.426805][   T33] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  409.440452][T16193] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  409.446952][T16193] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  409.449483][T16193] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  409.462987][T16193] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  409.468479][T16193] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  409.471507][T16193] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  409.491275][T16193] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  409.595951][T16201] loop8: detected capacity change from 0 to 8
[  409.617816][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  409.637838][T16201] SQUASHFS error: lzo decompression failed, data probably corrupt
[  409.640987][T16201] SQUASHFS error: Failed to read block 0x91: -5
[  409.657573][T16201] SQUASHFS error: Unable to read metadata cache entry [8f]
[  409.667719][T16201] SQUASHFS error: Unable to read inode 0x13f
[  409.722119][T16203] loop0: detected capacity change from 0 to 8
[  409.758662][T16203] SQUASHFS error: Failed to read block 0x26067d: -5
[  409.761569][T16203] SQUASHFS error: Unable to read metadata cache entry [26067d]
[  409.764392][T16203] SQUASHFS error: Unable to read directory block [26067d:1fff]
[  410.336112][T16218] loop8: detected capacity change from 0 to 40427
[  410.342674][T16218] F2FS-fs (loop8): Image doesn't support compression
[  410.345551][T16218] F2FS-fs (loop8): build fault injection rate: 690
[  410.348605][T16218] F2FS-fs (loop8): invalid crc value
[  410.376268][T16218] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  410.379419][T16218] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  410.986371][T16239] loop0: detected capacity change from 0 to 32768
[  411.611629][T16247] loop8: detected capacity change from 0 to 32768
[  411.632061][T16247] jfs_mount: Failed to read AGGREGATE_I
[  411.633819][T16247] Mount JFS Failure: -5
[  411.635337][T16247] jfs_mount failed w/return code = -5
[  412.647367][   T33] usb 9-1: new full-speed USB device number 18 using dummy_hcd
[  412.835172][   T33] usb 9-1: config 0 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0
[  412.840028][   T33] usb 9-1: config 0 interface 0 has no altsetting 0
[  412.843229][   T33] usb 9-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00
[  412.852398][   T33] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  412.860500][   T33] usb 9-1: config 0 descriptor??
[  413.311086][   T33] elecom 0003:056E:00FD.0012: unknown main item tag 0x0
[  413.314170][   T33] elecom 0003:056E:00FD.0012: unknown main item tag 0x0
[  413.318013][   T33] elecom 0003:056E:00FD.0012: unknown main item tag 0x0
[  413.321437][   T33] elecom 0003:056E:00FD.0012: unknown main item tag 0x0
[  413.327054][   T33] elecom 0003:056E:00FD.0012: unknown main item tag 0x0
[  413.332588][   T33] elecom 0003:056E:00FD.0012: unknown main item tag 0x0
[  413.335976][   T33] elecom 0003:056E:00FD.0012: unknown main item tag 0x0
[  413.368464][   T33] elecom 0003:056E:00FD.0012: hidraw0: USB HID v0.04 Device [HID 056e:00fd] on usb-dummy_hcd.8-1/input0
[  413.507112][T15608] usb 9-1: USB disconnect, device number 18
[  413.596802][T16320] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3929'.
[  413.827481][  T914] net_ratelimit: 5 callbacks suppressed
[  413.827493][  T914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  414.125213][T16340] loop8: detected capacity change from 0 to 128
[  414.128882][T16340] EXT4-fs: Ignoring removed nomblk_io_submit option
[  414.136978][   T33] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  414.162432][T16340] EXT4-fs (loop8): Test dummy encryption mode enabled
[  414.186393][T16340] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  414.192091][T16340] ext4 filesystem being mounted at /290/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  414.286976][   T33] usb 1-1: Using ep0 maxpacket: 16
[  414.292080][   T33] usb 1-1: too many configurations: 212, using maximum allowed: 8
[  414.326824][   T33] usb 1-1: config 6 has no interfaces?
[  414.330601][   T33] usb 1-1: config 6 has no interfaces?
[  414.334138][   T33] usb 1-1: config 6 has no interfaces?
[  414.338496][   T33] usb 1-1: config 6 has no interfaces?
[  414.341931][   T33] usb 1-1: config 6 has no interfaces?
[  414.345257][   T33] usb 1-1: config 6 has no interfaces?
[  414.348815][   T33] usb 1-1: config 6 has no interfaces?
[  414.352298][   T33] usb 1-1: config 6 has no interfaces?
[  414.359414][   T33] usb 1-1: string descriptor 0 read error: -71
[  414.364397][   T33] usb 1-1: New USB device found, idVendor=0980, idProduct=06fd, bcdDevice=14.8c
[  414.368996][   T33] usb 1-1: New USB device strings: Mfr=54, Product=54, SerialNumber=151
[  414.374590][   T33] usb 1-1: rejected 8 configurations due to insufficient available bus power
[  414.378043][   T33] usb 1-1: no configuration chosen from 8 choices
[  414.753192][   T33] usb 1-1: USB disconnect, device number 16
[  414.868335][  T914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  415.094170][T13426] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  415.388881][T16357] loop8: detected capacity change from 0 to 40427
[  415.394169][T16357] F2FS-fs (loop8): invalid crc value
[  415.448379][T16357] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  415.453096][T16357] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  415.488670][T13426] syz-executor: attempt to access beyond end of device
[  415.488670][T13426] loop8: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  415.496529][T13426] CPU: 1 UID: 0 PID: 13426 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  415.496546][T13426] Tainted: [L]=SOFTLOCKUP
[  415.496549][T13426] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  415.496578][T13426] Call Trace:
[  415.496585][T13426]  <TASK>
[  415.496590][T13426]  dump_stack_lvl+0xe8/0x150
[  415.496607][T13426]  f2fs_handle_critical_error+0x37c/0x540
[  415.496622][T13426]  f2fs_write_end_io+0x886/0xb60
[  415.496641][T13426]  __submit_merged_bio+0x256/0x650
[  415.496654][T13426]  __submit_merged_write_cond+0x471/0x530
[  415.496666][T13426]  f2fs_sync_node_pages+0x14bf/0x1680
[  415.496684][T13426]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  415.496712][T13426]  f2fs_write_checkpoint+0xe9d/0x2490
[  415.496732][T13426]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  415.496781][T13426]  kill_f2fs_super+0x308/0x710
[  415.496791][T13426]  ? __pfx_kill_f2fs_super+0x10/0x10
[  415.496808][T13426]  deactivate_locked_super+0xbc/0x130
[  415.496839][T13426]  cleanup_mnt+0x437/0x4d0
[  415.496848][T13426]  ? _raw_spin_unlock_irq+0x23/0x50
[  415.496861][T13426]  task_work_run+0x1d9/0x270
[  415.496874][T13426]  ? __pfx_task_work_run+0x10/0x10
[  415.496888][T13426]  exit_to_user_mode_loop+0xed/0x480
[  415.496897][T13426]  ? rcu_is_watching+0x15/0xb0
[  415.496908][T13426]  do_syscall_64+0x2b7/0xf80
[  415.496915][T13426]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  415.496921][T13426]  ? trace_irq_disable+0x37/0x100
[  415.496934][T13426]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  415.496941][T13426] RIP: 0033:0x7fa90df9bf17
[  415.496950][T13426] Code: a2 c7 05 7c 96 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  415.496956][T13426] RSP: 002b:00007ffe1a4f26e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  415.496972][T13426] RAX: 0000000000000000 RBX: 00007fa90e00471f RCX: 00007fa90df9bf17
[  415.496977][T13426] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe1a4f27a0
[  415.496981][T13426] RBP: 00007ffe1a4f27a0 R08: 00007ffe1a4f37a0 R09: 00000000ffffffff
[  415.496986][T13426] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe1a4f3830
[  415.496991][T13426] R13: 00007fa90e00471f R14: 000000000006568b R15: 00007ffe1a4f3870
[  415.497004][T13426]  </TASK>
[  415.584164][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  415.591722][T13426] F2FS-fs (loop8): Stopped filesystem due to reason: 3
[  415.594238][T13426] CPU: 1 UID: 0 PID: 13426 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  415.594254][T13426] Tainted: [L]=SOFTLOCKUP
[  415.594257][T13426] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  415.594262][T13426] Call Trace:
[  415.594266][T13426]  <TASK>
[  415.594270][T13426]  dump_stack_lvl+0xe8/0x150
[  415.594285][T13426]  f2fs_handle_critical_error+0x37c/0x540
[  415.594299][T13426]  f2fs_write_end_io+0x886/0xb60
[  415.594318][T13426]  __submit_merged_bio+0x256/0x650
[  415.594330][T13426]  __submit_merged_write_cond+0x471/0x530
[  415.594343][T13426]  f2fs_sync_node_pages+0x14bf/0x1680
[  415.594360][T13426]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  415.594387][T13426]  f2fs_write_checkpoint+0xe9d/0x2490
[  415.594406][T13426]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  415.594435][T13426]  kill_f2fs_super+0x308/0x710
[  415.594445][T13426]  ? __pfx_kill_f2fs_super+0x10/0x10
[  415.594461][T13426]  deactivate_locked_super+0xbc/0x130
[  415.594470][T13426]  cleanup_mnt+0x437/0x4d0
[  415.594478][T13426]  ? _raw_spin_unlock_irq+0x23/0x50
[  415.594490][T13426]  task_work_run+0x1d9/0x270
[  415.594503][T13426]  ? __pfx_task_work_run+0x10/0x10
[  415.594517][T13426]  exit_to_user_mode_loop+0xed/0x480
[  415.594525][T13426]  ? rcu_is_watching+0x15/0xb0
[  415.594536][T13426]  do_syscall_64+0x2b7/0xf80
[  415.594543][T13426]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  415.594550][T13426]  ? trace_irq_disable+0x37/0x100
[  415.594562][T13426]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  415.594569][T13426] RIP: 0033:0x7fa90df9bf17
[  415.594578][T13426] Code: a2 c7 05 7c 96 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  415.594584][T13426] RSP: 002b:00007ffe1a4f26e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  415.594594][T13426] RAX: 0000000000000000 RBX: 00007fa90e00471f RCX: 00007fa90df9bf17
[  415.594599][T13426] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe1a4f27a0
[  415.594603][T13426] RBP: 00007ffe1a4f27a0 R08: 00007ffe1a4f37a0 R09: 00000000ffffffff
[  415.594607][T13426] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe1a4f3830
[  415.594612][T13426] R13: 00007fa90e00471f R14: 000000000006568b R15: 00007ffe1a4f3870
[  415.594624][T13426]  </TASK>
[  415.594628][T13426] F2FS-fs (loop8): Stopped filesystem due to reason: 3
[  415.882553][T16371] loop8: detected capacity change from 0 to 64
[  415.894624][T16371] BFS-fs: bfs_fill_super(): loop8 is unclean, continuing
[  415.907748][  T914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  416.265019][T16376] loop8: detected capacity change from 0 to 32768
[  416.299184][   T34] audit: type=1800 audit(2000000006.690:696): pid=16376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3951" name="file1" dev="loop8" ino=4 res=0 errno=0
[  416.339250][T16389] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3954'.
[  416.844351][T16412] loop8: detected capacity change from 0 to 256
[  416.863973][T16412] FAT-fs (loop8): Directory bread(block 64) failed
[  416.866080][T16412] FAT-fs (loop8): Directory bread(block 65) failed
[  416.874111][T16413] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  416.883036][T16412] FAT-fs (loop8): Directory bread(block 66) failed
[  416.895361][T16412] FAT-fs (loop8): Directory bread(block 67) failed
[  416.902535][T16412] FAT-fs (loop8): Directory bread(block 68) failed
[  416.908738][T16412] FAT-fs (loop8): Directory bread(block 69) failed
[  416.911071][T16412] FAT-fs (loop8): Directory bread(block 70) failed
[  416.913721][T16412] FAT-fs (loop8): Directory bread(block 71) failed
[  416.916449][T16412] FAT-fs (loop8): Directory bread(block 72) failed
[  416.932071][T16412] FAT-fs (loop8): Directory bread(block 73) failed
[  416.933638][T16416] loop0: detected capacity change from 0 to 2048
[  416.943404][T16416] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  416.955891][T15608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  417.023007][T16421] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3968'.
[  417.045923][ T5854] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  417.050424][T16421] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3968'.
[  417.056739][ T5854] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  417.072442][ T5854] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  417.080390][ T5854] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  417.278941][   T34] audit: type=1800 audit(2000000007.670:697): pid=16433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.2.3974" name="/newroot/1731/pids.events" dev="tmpfs" ino=9020 res=0 errno=0
[  417.380622][T16442] 9p: Bad value for 'rfdno'
[  417.402114][T16442] loop0: detected capacity change from 0 to 512
[  417.410316][T16442] EXT4-fs: Ignoring removed orlov option
[  417.422716][T16442] EXT4-fs: Mount option(s) incompatible with ext2
[  417.706814][   T33] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  417.837018][   T33] usb 1-1: device descriptor read/64, error -71
[  418.096777][   T33] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  418.119483][   T34] audit: type=1326 audit(2000000008.470:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16456 comm="syz.2.3979" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9743d9acb9 code=0x7ffc0000
[  418.138561][   T34] audit: type=1326 audit(2000000008.470:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16456 comm="syz.2.3979" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9743d9acb9 code=0x7ffc0000
[  418.164267][   T34] audit: type=1326 audit(2000000008.470:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16456 comm="syz.2.3979" exe="/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7f9743d9acb9 code=0x7ffc0000
[  418.180043][T15608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  418.181992][   T34] audit: type=1326 audit(2000000008.470:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16456 comm="syz.2.3979" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9743d9acb9 code=0x7ffc0000
[  418.196829][   T34] audit: type=1326 audit(2000000008.470:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16456 comm="syz.2.3979" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9743d9acb9 code=0x7ffc0000
[  418.237302][   T33] usb 1-1: device descriptor read/64, error -71
[  418.702046][T16479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  418.704970][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  418.843989][  T113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  418.846935][   T33] usb usb1-port1: attempt power cycle
[  419.085890][T16479] loop8: detected capacity change from 0 to 131072
[  419.095371][T16479] F2FS-fs (loop8): Test dummy encryption mode enabled
[  419.098098][T16479] F2FS-fs (loop8): invalid crc value
[  419.130898][T16479] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  419.166876][T16479] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  419.216247][   T33] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  419.278169][   T33] usb 1-1: device descriptor read/8, error -71
[  419.528815][   T33] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  419.557735][   T33] usb 1-1: device descriptor read/8, error -71
[  419.677006][   T33] usb usb1-port1: unable to enumerate USB device
[  419.697839][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  419.847286][T16501] loop8: detected capacity change from 0 to 32768
[  420.397026][ T6151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  420.644773][T16522] loop0: detected capacity change from 0 to 512
[  420.707461][T16104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  420.787945][ T5854] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  420.889113][ T5854] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  420.965888][ T5226] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  420.971137][ T5226] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  420.974807][ T5226] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  420.983122][ T5226] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  420.986407][ T5226] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  421.039411][ T5854] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  421.066541][T16540] netlink: 'syz.2.4011': attribute type 29 has an invalid length.
[  421.085109][T16540] netlink: 'syz.2.4011': attribute type 29 has an invalid length.
[  421.105056][T16540] netlink: 500 bytes leftover after parsing attributes in process `syz.2.4011'.
[  421.122864][ T5854] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  421.274318][T16535] chnl_net:caif_netlink_parms(): no params data found
[  421.460988][ T5854] bridge_slave_1: left allmulticast mode
[  421.462954][ T5854] bridge_slave_1: left promiscuous mode
[  421.465734][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state
[  421.471500][ T5854] bridge_slave_0: left allmulticast mode
[  421.476834][ T5854] bridge_slave_0: left promiscuous mode
[  421.479037][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state
[  421.521157][T16564] loop0: detected capacity change from 0 to 512
[  421.541785][T16564] EXT4-fs: Ignoring removed oldalloc option
[  421.576503][T16564] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  421.581060][T16564] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it
[  421.584374][T16564] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.4021: Corrupt directory, running e2fsck is recommended
[  421.612101][T16564] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117
[  421.615725][T16564] EXT4-fs error (device loop0): ext4_iget_extra_inode:5072: inode #15: comm syz.0.4021: corrupted in-inode xattr: invalid ea_ino
[  421.621593][T16564] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.4021: couldn't read orphan inode 15 (err -117)
[  421.626078][T16564] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  421.657408][T15826] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  421.760825][T16568] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4022'.
[  422.072687][ T5854] batman_adv: batadv0: Removing interface: macvlan2
[  422.087373][ T5854] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  422.093502][ T5854] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  422.101019][ T5854] bond0 (unregistering): Released all slaves
[  422.182859][T16535] bridge0: port 1(bridge_slave_0) entered blocking state
[  422.186043][T16535] bridge0: port 1(bridge_slave_0) entered disabled state
[  422.189386][T16535] bridge_slave_0: entered allmulticast mode
[  422.192199][T16535] bridge_slave_0: entered promiscuous mode
[  422.196710][T16535] bridge0: port 2(bridge_slave_1) entered blocking state
[  422.199626][T16535] bridge0: port 2(bridge_slave_1) entered disabled state
[  422.204463][T16535] bridge_slave_1: entered allmulticast mode
[  422.208794][T16535] bridge_slave_1: entered promiscuous mode
[  422.321518][T16535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  422.382534][T16535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  422.464707][T16535] team0: Port device team_slave_0 added
[  422.474435][ T5854] hsr_slave_0: left promiscuous mode
[  422.487606][ T5854] hsr_slave_1: left promiscuous mode
[  422.490278][ T5854] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  422.493156][ T5854] batman_adv: batadv0: Removing interface: batadv_slave_0
[  422.509182][ T5854] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  422.512061][ T5854] batman_adv: batadv0: Removing interface: batadv_slave_1
[  422.534555][ T5854] veth1_macvtap: left promiscuous mode
[  422.537636][ T5854] veth0_macvtap: left promiscuous mode
[  422.540531][ T5854] veth1_vlan: left promiscuous mode
[  422.542761][ T5854] veth0_vlan: left promiscuous mode
[  423.030768][ T5226] Bluetooth: hci0: command tx timeout
[  423.139692][T16603] netlink: 'syz.2.4037': attribute type 10 has an invalid length.
[  423.142315][T16603] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4037'.
[  423.292281][ T5854] team0 (unregistering): Port device team_slave_1 removed
[  423.335618][ T5854] team0 (unregistering): Port device team_slave_0 removed
[  423.844494][T16535] team0: Port device team_slave_1 added
[  423.870228][T16603] geneve0: entered promiscuous mode
[  423.873773][T16603] team0: Port device geneve0 added
[  423.965869][T16535] batman_adv: batadv0: Adding interface: batadv_slave_0
[  423.965926][T16535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  423.965943][T16535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  423.976274][T16535] batman_adv: batadv0: Adding interface: batadv_slave_1
[  423.976292][T16535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  424.010674][T16535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  424.111283][T16535] hsr_slave_0: entered promiscuous mode
[  424.113558][T16535] hsr_slave_1: entered promiscuous mode
[  424.116013][T16535] debugfs: 'hsr0' already exists in 'hsr'
[  424.130457][T16617] netlink: 'syz.0.4042': attribute type 1 has an invalid length.
[  424.133490][T16535] Cannot create hsr debugfs directory
[  424.586331][T16632] loop0: detected capacity change from 0 to 16
[  424.591922][T16632] erofs (device loop0): EXPERIMENTAL 48-bit layout support in use. Use at your own risk!
[  424.596074][T16632] erofs (device loop0): mounted with root inode @ nid 36.
[  424.604468][T16632] erofs (device loop0): readahead error at folio 7 @ nid 36
[  424.608319][T16632] erofs (device loop0): bogus lookback distance 26160 @ lcn 6 of nid 36
[  424.611776][T16632] erofs (device loop0): readahead error at folio 6 @ nid 36
[  424.660849][T16632] erofs (device loop0): readahead error at folio 5 @ nid 36
[  424.684888][T16632] erofs (device loop0): bogus lookback distance 0 @ lcn 0 of nid 36
[  424.688228][T16632] erofs (device loop0): readahead error at folio 1 @ nid 36
[  424.695804][T16632] erofs (device loop0): bogus lookback distance 0 @ lcn 0 of nid 36
[  424.707065][T16632] erofs (device loop0): readahead error at folio 0 @ nid 36
[  424.716492][T16632] syz.0.4047: attempt to access beyond end of device
[  424.716492][T16632] loop0: rw=524288, sector=712, nr_sectors = 8 limit=16
[  424.738395][T16632] syz.0.4047: attempt to access beyond end of device
[  424.738395][T16632] loop0: rw=524288, sector=525136, nr_sectors = 8 limit=16
[  424.770267][T16632] erofs (device loop0): bogus lookback distance 0 @ lcn 0 of nid 36
[  424.782635][T16632] erofs (device loop0): bogus lookback distance 0 @ lcn 0 of nid 36
[  424.793204][T16632] erofs (device loop0): read error -117 @ 0 of nid 36
[  424.803037][T16632] erofs (device loop0): failed to readdir of logical block 0 of nid 36
[  425.106859][ T5226] Bluetooth: hci0: command tx timeout
[  425.333780][T16535] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  425.340130][T16535] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  425.345015][T16535] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  425.361113][T16535] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  425.474281][T16535] 8021q: adding VLAN 0 to HW filter on device bond0
[  425.495242][T16535] 8021q: adding VLAN 0 to HW filter on device team0
[  425.519000][ T3850] bridge0: port 1(bridge_slave_0) entered blocking state
[  425.521473][ T3850] bridge0: port 1(bridge_slave_0) entered forwarding state
[  425.532583][ T3850] bridge0: port 2(bridge_slave_1) entered blocking state
[  425.535254][ T3850] bridge0: port 2(bridge_slave_1) entered forwarding state
[  425.789768][T16535] 8021q: adding VLAN 0 to HW filter on device batadv0
[  425.850281][T16535] veth0_vlan: entered promiscuous mode
[  425.858563][T16535] veth1_vlan: entered promiscuous mode
[  425.901865][T16535] veth0_macvtap: entered promiscuous mode
[  425.909656][T16535] veth1_macvtap: entered promiscuous mode
[  425.931958][T16535] batman_adv: batadv0: Interface activated: batadv_slave_0
[  425.979848][T16535] batman_adv: batadv0: Interface activated: batadv_slave_1
[  426.007232][ T5854] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  426.010625][ T5854] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  426.040187][ T5854] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  426.066429][ T5854] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  426.304189][T16697] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4057'.
[  426.312990][ T3850] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  426.316222][ T3850] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  426.335537][T16697] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4057'.
[  426.397206][ T4412] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  426.401350][ T4412] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  426.757962][T16713] IPv6: NLM_F_CREATE should be specified when creating new route
[  426.764460][T16713] loop0: detected capacity change from 0 to 136
[  427.272700][ T5226] Bluetooth: hci0: command tx timeout
[  427.911844][T16754] loop3: detected capacity change from 0 to 764
[  428.085203][T16763] loop3: detected capacity change from 0 to 2048
[  428.121417][T16766] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  428.430865][T16143] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  428.513454][T16785] loop3: detected capacity change from 0 to 8192
[  428.571944][T16785]  loop3: p1 p2
[  428.576413][T16785] loop3: partition table partially beyond EOD, truncated
[  428.584527][T16785] loop3: p1 start 16777216 is beyond EOD, truncated
[  428.587891][T16785] loop3: p2 size 515840 extends beyond EOD, truncated
[  428.603107][T16143] usb 1-1: config index 0 descriptor too short (expected 1572, got 36)
[  428.612872][T16143] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  428.624809][T16143] usb 1-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40
[  428.632458][T16143] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  428.652911][T16143] usb 1-1: Product: syz
[  428.655021][T16143] usb 1-1: Manufacturer: syz
[  428.666968][T16143] usb 1-1: SerialNumber: syz
[  428.710156][T16143] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input26
[  428.729834][T13468] udevd[13468]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[  428.885547][ T5270] bcm5974 1-1:1.0: could not read from device
[  428.926980][T16143] bcm5974 1-1:1.0: could not read from device
[  428.936514][ T5270] bcm5974 1-1:1.0: could not read from device
[  428.948033][T16143] input: failed to attach handler mousedev to device input26, error: -5
[  428.975446][ T5270] bcm5974 1-1:1.0: could not read from device
[  428.979054][T16143] usb 1-1: USB disconnect, device number 21
[  429.029070][ T5852] udevd[5852]: Error opening device "/dev/input/event3": No such file or directory
[  429.033235][ T5852] udevd[5852]: Unable to EVIOCGABS device "/dev/input/event3"
[  429.038334][ T5852] udevd[5852]: Unable to EVIOCGABS device "/dev/input/event3"
[  429.042636][ T5852] udevd[5852]: Unable to EVIOCGABS device "/dev/input/event3"
[  429.044949][ T5852] udevd[5852]: Unable to EVIOCGABS device "/dev/input/event3"
[  429.249156][T16838] netlink: 'syz.2.4096': attribute type 29 has an invalid length.
[  429.314531][T16796] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  429.745871][T16867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4105'.
[  429.749192][T16867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4105'.
[  429.791913][T16856] loop0: detected capacity change from 0 to 32768
[  429.831828][T16856] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  429.852030][T16856] XFS (loop0): Ending clean mount
[  429.854895][T16856] XFS (loop0): Quotacheck needed: Please wait.
[  429.883032][T16861] loop3: detected capacity change from 0 to 32768
[  429.886064][T16861] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.4103 (16861)
[  429.896905][T16856] XFS (loop0): Quotacheck: Done.
[  429.923377][T16861] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  429.931517][T16861] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  429.937307][T16861] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  430.001020][T15826] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  430.110979][T16861] BTRFS info (device loop3): rebuilding free space tree
[  430.131679][T16861] BTRFS info (device loop3): disabling free space tree
[  430.134406][T16861] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  430.138406][T16861] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  430.170967][T16861] BTRFS info (device loop3): setting nodatasum
[  430.173431][T16861] BTRFS info (device loop3): allowing degraded mounts
[  430.176158][T16861] BTRFS info (device loop3): turning on async discard
[  430.178925][T16861] BTRFS info (device loop3): enabling disk space caching
[  430.181559][T16861] BTRFS info (device loop3): force clearing of disk cache
[  430.185033][T16861] BTRFS info (device loop3): force zlib compression, level 3
[  430.242406][T16861] BTRFS error (device loop3): balance: invalid convert metadata profile raid0
[  430.349773][T16535] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  430.595694][T16915] loop3: detected capacity change from 0 to 4096
[  430.604088][T16915] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  430.619901][T16915] ntfs3(loop3): mft corrupted
[  430.623442][T16915] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  430.633454][T16915] ntfs3(loop3): Failed to load $Bitmap (-22).
[  430.732824][T16920] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4119'.
[  430.766972][  T914] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  430.926707][  T914] usb 1-1: Using ep0 maxpacket: 8
[  430.930090][  T914] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  430.933333][  T914] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  430.947102][  T914] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  430.951730][  T914] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  430.956336][  T914] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  430.962811][  T914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  431.171424][  T914] usb 1-1: GET_CAPABILITIES returned 0
[  431.173386][  T914] usbtmc 1-1:16.0: can't read capabilities
[  431.375341][   T24] usb 1-1: USB disconnect, device number 22
[  431.467427][T16940] overlayfs: failed to clone upperpath
[  431.475222][T16940] overlayfs: failed to clone upperpath
[  431.577240][T16948] netlink: 'syz.3.4132': attribute type 10 has an invalid length.
[  431.580358][T16948] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4132'.
[  431.655415][T16956] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4136'.
[  431.836070][T16961] loop3: detected capacity change from 0 to 32768
[  431.840455][T16961] (syz.3.4138,16961,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  431.848217][T16961] (syz.3.4138,16961,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  431.852974][T16961] (syz.3.4138,16961,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xd5db68cb, computed 0xa12d9331. Applying ECC.
[  431.865435][T16961] (syz.3.4138,16961,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xd5db68cb, computed 0xa12d9331
[  431.870109][T16961] (syz.3.4138,16961,0):ocfs2_validate_inode_block:1441 ERROR: Checksum failed for dinode 22
[  431.873151][T16961] (syz.3.4138,16961,0):ocfs2_read_locked_inode:599 ERROR: status = -5
[  431.875694][T16961] (syz.3.4138,16961,0):_ocfs2_get_system_file_inode:144 ERROR: status = -5
[  431.893097][T16961] (syz.3.4138,16961,0):ocfs2_init_global_system_inodes:465 ERROR: status = -22
[  431.896993][T16961] (syz.3.4138,16961,0):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 3, possibly corrupt fs?
[  431.897009][T16961] (syz.3.4138,16961,0):ocfs2_init_global_system_inodes:476 ERROR: status = -22
[  431.904143][T16961] (syz.3.4138,16961,0):ocfs2_initialize_super:2198 ERROR: status = -22
[  431.909653][T16961] (syz.3.4138,16961,0):ocfs2_fill_super:1177 ERROR: status = -22
[  432.036132][   T34] audit: type=1326 audit(2000000022.420:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16970 comm="syz.2.4143" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9743d9acb9 code=0x7fc00000
[  432.068177][T16976] loop0: detected capacity change from 0 to 8192
[  432.129950][T16982] loop3: detected capacity change from 0 to 256
[  432.408561][ T5226] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  432.414882][ T5226] Bluetooth: hci0: Injecting HCI hardware error event
[  432.420454][ T5226] Bluetooth: hci0: hardware error 0x00
[  432.706966][   T34] audit: type=1326 audit(2000000023.100:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16970 comm="syz.2.4143" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9743d3c0d9 code=0x7fc00000
[  432.878843][T17009] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4158'.
[  434.283031][T17029] sctp: [Deprecated]: syz.0.4166 (pid 17029) Use of int in max_burst socket option.
[  434.283031][T17029] Use struct sctp_assoc_value instead
[  434.467459][ T5226] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  434.500992][T17038] loop3: detected capacity change from 0 to 40427
[  434.513648][T17038] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  434.520751][T17038] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  434.539537][T17038] F2FS-fs (loop3): invalid crc value
[  434.572351][T17038] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  434.578137][T17038] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  434.580730][T17038] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  434.598431][T17038] fscrypt (loop3, inode 3): Error -61 getting encryption context
[  434.804001][T17045] loop3: detected capacity change from 0 to 512
[  435.137022][  T914] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  435.286762][  T914] usb 4-1: Using ep0 maxpacket: 16
[  435.294180][  T914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  435.298087][  T914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  435.301376][  T914] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  435.307984][  T914] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00
[  435.311756][  T914] usb 4-1: New USB device strings: Mfr=32, Product=0, SerialNumber=0
[  435.315093][  T914] usb 4-1: Manufacturer: syz
[  435.322326][  T914] usb 4-1: config 0 descriptor??
[  435.742329][  T914] playstation 0003:054C:0DF2.0013: item fetching failed at offset 4/5
[  435.749261][  T914] playstation 0003:054C:0DF2.0013: Parse failed
[  435.751961][  T914] playstation 0003:054C:0DF2.0013: probe with driver playstation failed with error -22
[  435.945152][  T914] usb 4-1: USB disconnect, device number 2
[  437.266888][ T5226] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  437.268320][ T5850] Bluetooth: hci3: command 0x1003 tx timeout
[  437.660303][T17144] loop3: detected capacity change from 0 to 128
[  437.695903][T17144] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  437.708020][T17144] ext4 filesystem being mounted at /44/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  437.741314][T16535] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  437.848529][T17134] loop0: detected capacity change from 0 to 131072
[  437.851468][T17134] F2FS-fs (loop0): Wrong CP boundary, start(512) end(198144) blocks(1024)
[  437.854133][T17134] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[  437.857114][T17134] F2FS-fs (loop0): invalid crc value
[  437.894192][T17134] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  437.913041][T17134] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[  437.915338][T17134] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  437.917489][T17155] netlink: 'syz.3.4216': attribute type 2 has an invalid length.
[  437.970018][T17134] F2FS-fs (loop0): inconsistent node block, node_type:2, nid:8, node_footer[nid:8,ino:8,ofs:0,cpver:5013063228981249506,blkaddr:15366]
[  437.984474][T17134] F2FS-fs (loop0): inconsistent node block, node_type:2, nid:8, node_footer[nid:8,ino:8,ofs:0,cpver:5013063228981249506,blkaddr:15366]
[  437.990208][T17134] fs-verity (loop0, inode 7): Error -117 getting verity descriptor size
[  438.476715][   T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  438.528961][T17182] program syz.0.4228 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  438.627357][   T24] usb 4-1: Using ep0 maxpacket: 8
[  438.632677][   T24] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  438.654111][   T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  438.667529][   T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  438.671928][   T24] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  438.677787][   T24] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  438.681449][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  438.899564][   T24] usb 4-1: GET_CAPABILITIES returned 0
[  438.901857][   T24] usbtmc 4-1:16.0: can't read capabilities
[  439.100810][ T5907] usb 4-1: USB disconnect, device number 3
[  439.246777][   T24] usb 1-1: new full-speed USB device number 23 using dummy_hcd
[  439.398478][   T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  439.408367][   T24] usb 1-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f
[  439.412074][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  439.415479][   T24] usb 1-1: Product: syz
[  439.418085][   T24] usb 1-1: Manufacturer: syz
[  439.419968][   T24] usb 1-1: SerialNumber: syz
[  439.426151][   T24] usb 1-1: config 0 descriptor??
[  439.432069][   T24] hub 1-1:0.0: bad descriptor, ignoring hub
[  439.434505][   T24] hub 1-1:0.0: probe with driver hub failed with error -5
[  439.439479][   T24] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  439.460185][   T24] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -2
[  439.485861][T13468] udevd[13468]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  439.749148][   T24] usb 1-1: USB disconnect, device number 23
[  440.635130][T17225] dvmrp6: entered allmulticast mode
[  440.645084][T17225] pimreg: entered allmulticast mode
[  440.651775][T17225] dvmrp6: left allmulticast mode
[  440.731440][T17224] pimreg: left allmulticast mode
[  441.399651][T17247] loop0: detected capacity change from 0 to 4096
[  441.406088][T17247] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  441.425954][T17247] ntfs3(loop0): ino=19, mi_enum_attr
[  441.437775][T17247] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  441.445083][T17247] ntfs3(loop0): Failed to initialize $Extend/$Reparse.
[  441.996067][T17295] overlayfs: unescaped trailing colons in lowerdir mount option.
[  442.216026][ T5907] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  442.373903][ T5907] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  442.377766][ T5907] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  442.380896][ T5907] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  442.401768][ T5907] usb 4-1: config 0 descriptor??
[  442.420513][ T5907] pwc: Askey VC010 type 2 USB webcam detected.
[  442.814641][ T5907] pwc: recv_control_msg error -32 req 02 val 2b00
[  442.818034][ T5907] pwc: recv_control_msg error -32 req 02 val 2700
[  442.820687][ T5907] pwc: recv_control_msg error -32 req 02 val 2c00
[  442.823627][ T5907] pwc: recv_control_msg error -32 req 04 val 1000
[  442.828933][ T5907] pwc: recv_control_msg error -32 req 04 val 1300
[  442.832256][ T5907] pwc: recv_control_msg error -32 req 04 val 1400
[  442.835517][ T5907] pwc: recv_control_msg error -32 req 02 val 2000
[  442.838772][ T5907] pwc: recv_control_msg error -32 req 02 val 2100
[  442.841536][ T5907] pwc: recv_control_msg error -32 req 04 val 1500
[  442.844508][ T5907] pwc: recv_control_msg error -32 req 02 val 2500
[  442.847464][ T5907] pwc: recv_control_msg error -32 req 02 val 2400
[  442.850479][ T5907] pwc: recv_control_msg error -32 req 02 val 2600
[  442.853777][ T5907] pwc: recv_control_msg error -32 req 02 val 2900
[  442.856475][ T5907] pwc: recv_control_msg error -32 req 02 val 2800
[  442.859129][ T5907] pwc: recv_control_msg error -32 req 04 val 1100
[  442.866035][ T5907] pwc: Registered as video103.
[  442.869412][ T5907] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input28
[  443.083964][ T5907] usb 4-1: USB disconnect, device number 4
[  443.087867][T17311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4278'.
[  443.854372][T17326] ieee802154 phy0 wpan0: encryption failed: -22
[  444.204347][T17334] loop3: detected capacity change from 0 to 32768
[  444.212957][T17334] (syz.3.4289,17334,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  444.231969][T17334] (syz.3.4289,17334,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  444.262349][T17334] JBD2: Ignoring recovery information on journal
[  444.316753][T17334] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  444.355322][T17334] 
[  444.356121][T17334] ======================================================
[  444.358498][T17334] WARNING: possible circular locking dependency detected
[  444.360803][T17334] syzkaller #0 Tainted: G             L     
[  444.362789][T17334] ------------------------------------------------------
[  444.364923][T17334] syz.3.4289/17334 is trying to acquire lock:
[  444.366778][T17334] ffff8881678ecee0 (&ocfs2_file_ip_alloc_sem_key){++++}-{4:4}, at: ocfs2_try_remove_refcount_tree+0xb6/0x340
[  444.370246][T17334] 
[  444.370246][T17334] but task is already holding lock:
[  444.372536][T17334] ffff8881678ecf78 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_try_remove_refcount_tree+0xa4/0x340
[  444.375812][T17334] 
[  444.375812][T17334] which lock already depends on the new lock.
[  444.375812][T17334] 
[  444.379297][T17334] 
[  444.379297][T17334] the existing dependency chain (in reverse order) is:
[  444.382803][T17334] 
[  444.382803][T17334] -> #4 (&oi->ip_xattr_sem){++++}-{4:4}:
[  444.385837][T17334]        down_read+0x47/0x2e0
[  444.387609][T17334]        ocfs2_init_acl+0x2fd/0x7e0
[  444.389670][T17334]        ocfs2_mknod+0x1423/0x2210
[  444.391691][T17334]        ocfs2_mkdir+0x181/0x430
[  444.393664][T17334]        vfs_mkdir+0x511/0x5b0
[  444.395447][T17334]        do_mkdirat+0x27d/0x4b0
[  444.397388][T17334]        __x64_sys_mkdirat+0x87/0xa0
[  444.399396][T17334]        do_syscall_64+0xe2/0xf80
[  444.401296][T17334]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  444.403745][T17334] 
[  444.403745][T17334] -> #3 (&journal->j_trans_barrier){.+.+}-{4:4}:
[  444.407096][T17334]        down_read+0x47/0x2e0
[  444.408675][T17334]        ocfs2_start_trans+0x3ab/0x700
[  444.410414][T17334]        ocfs2_modify_bh+0xe3/0x4d0
[  444.412059][T17334]        ocfs2_local_read_info+0x1454/0x1810
[  444.414105][T17334]        dquot_load_quota_sb+0x791/0xbd0
[  444.415941][T17334]        dquot_load_quota_inode+0x2e1/0x5d0
[  444.418032][T17334]        ocfs2_enable_quotas+0x1c8/0x4a0
[  444.420232][T17334]        ocfs2_fill_super+0x5337/0x6910
[  444.422459][T17334]        get_tree_bdev_flags+0x431/0x4f0
[  444.424768][T17334]        vfs_get_tree+0x92/0x2a0
[  444.426785][T17334]        do_new_mount+0x329/0xa50
[  444.428850][T17334]        __se_sys_mount+0x31d/0x420
[  444.431019][T17334]        do_syscall_64+0xe2/0xf80
[  444.433044][T17334]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  444.435577][T17334] 
[  444.435577][T17334] -> #2 (sb_internal#2){.+.+}-{0:0}:
[  444.438624][T17334]        ocfs2_start_trans+0x2ac/0x700
[  444.440783][T17334]        ocfs2_extend_dir+0xfd6/0x49b0
[  444.442906][T17334]        ocfs2_prepare_dir_for_insert+0x3452/0x52c0
[  444.445499][T17334]        ocfs2_mknod+0x823/0x2210
[  444.447501][T17334]        ocfs2_mkdir+0x181/0x430
[  444.449537][T17334]        vfs_mkdir+0x511/0x5b0
[  444.451525][T17334]        do_mkdirat+0x27d/0x4b0
[  444.453515][T17334]        __x64_sys_mkdirat+0x87/0xa0
[  444.455683][T17334]        do_syscall_64+0xe2/0xf80
[  444.457687][T17334]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  444.460099][T17334] 
[  444.460099][T17334] -> #1 (&ocfs2_sysfile_lock_key[LOCAL_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}:
[  444.464188][T17334]        down_write+0x96/0x200
[  444.466134][T17334]        ocfs2_reserve_local_alloc_bits+0x11f/0x2610
[  444.468748][T17334]        ocfs2_reserve_clusters_with_limit+0x1b9/0xc20
[  444.471493][T17334]        ocfs2_extend_dir+0x74e/0x49b0
[  444.473638][T17334]        ocfs2_prepare_dir_for_insert+0x3452/0x52c0
[  444.476255][T17334]        ocfs2_mknod+0x823/0x2210
[  444.478231][T17334]        ocfs2_mkdir+0x181/0x430
[  444.479833][T17334]        vfs_mkdir+0x511/0x5b0
[  444.481494][T17334]        do_mkdirat+0x27d/0x4b0
[  444.483352][T17334]        __x64_sys_mkdirat+0x87/0xa0
[  444.485249][T17334]        do_syscall_64+0xe2/0xf80
[  444.486881][T17334]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  444.488897][T17334] 
[  444.488897][T17334] -> #0 (&ocfs2_file_ip_alloc_sem_key){++++}-{4:4}:
[  444.491761][T17334]        __lock_acquire+0x15a5/0x2cf0
[  444.493496][T17334]        lock_acquire+0x106/0x330
[  444.495059][T17334]        down_write+0x96/0x200
[  444.496531][T17334]        ocfs2_try_remove_refcount_tree+0xb6/0x340
[  444.498562][T17334]        ocfs2_xattr_set+0x61a/0x13e0
[  444.500371][T17334]        ocfs2_set_acl+0x701/0x7b0
[  444.502090][T17334]        ocfs2_iop_set_acl+0x1b1/0x2b0
[  444.503943][T17334]        vfs_set_acl+0x87d/0xb00
[  444.505520][T17334]        filename_setxattr+0x2fc/0x630
[  444.507192][T17334]        path_setxattrat+0x3f3/0x430
[  444.509044][T17334]        __x64_sys_setxattr+0xbc/0xe0
[  444.510704][T17334]        do_syscall_64+0xe2/0xf80
[  444.512248][T17334]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  444.514433][T17334] 
[  444.514433][T17334] other info that might help us debug this:
[  444.514433][T17334] 
[  444.517601][T17334] Chain exists of:
[  444.517601][T17334]   &ocfs2_file_ip_alloc_sem_key --> &journal->j_trans_barrier --> &oi->ip_xattr_sem
[  444.517601][T17334] 
[  444.522395][T17334]  Possible unsafe locking scenario:
[  444.522395][T17334] 
[  444.524754][T17334]        CPU0                    CPU1
[  444.526420][T17334]        ----                    ----
[  444.528075][T17334]   lock(&oi->ip_xattr_sem);
[  444.529576][T17334]                                lock(&journal->j_trans_barrier);
[  444.532007][T17334]                                lock(&oi->ip_xattr_sem);
[  444.534214][T17334]   lock(&ocfs2_file_ip_alloc_sem_key);
[  444.536029][T17334] 
[  444.536029][T17334]  *** DEADLOCK ***
[  444.536029][T17334] 
[  444.539078][T17334] 3 locks held by syz.3.4289/17334:
[  444.541085][T17334]  #0: ffff88816a954420 (sb_writers#13){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  444.544724][T17334]  #1: ffff8881678ed240 (&type->i_mutex_dir_key#10){++++}-{4:4}, at: vfs_set_acl+0x3cd/0xb00
[  444.548709][T17334]  #2: ffff8881678ecf78 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_try_remove_refcount_tree+0xa4/0x340
[  444.553014][T17334] 
[  444.553014][T17334] stack backtrace:
[  444.555319][T17334] CPU: 0 UID: 0 PID: 17334 Comm: syz.3.4289 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  444.555339][T17334] Tainted: [L]=SOFTLOCKUP
[  444.555344][T17334] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  444.555352][T17334] Call Trace:
[  444.555360][T17334]  <TASK>
[  444.555367][T17334]  dump_stack_lvl+0xe8/0x150
[  444.555388][T17334]  print_circular_bug+0x2e1/0x300
[  444.555407][T17334]  check_noncircular+0x12e/0x150
[  444.555424][T17334]  __lock_acquire+0x15a5/0x2cf0
[  444.555438][T17334]  ? check_path+0x21/0x40
[  444.555453][T17334]  ? add_lock_to_list+0xc7/0x100
[  444.555495][T17334]  ? lockdep_unlock+0x5d/0xd0
[  444.555506][T17334]  ? __lock_acquire+0x146e/0x2cf0
[  444.555520][T17334]  ? ocfs2_try_remove_refcount_tree+0xb6/0x340
[  444.555534][T17334]  lock_acquire+0x106/0x330
[  444.555545][T17334]  ? ocfs2_try_remove_refcount_tree+0xb6/0x340
[  444.555561][T17334]  down_write+0x96/0x200
[  444.555574][T17334]  ? ocfs2_try_remove_refcount_tree+0xb6/0x340
[  444.555586][T17334]  ? __pfx_down_write+0x10/0x10
[  444.555601][T17334]  ocfs2_try_remove_refcount_tree+0xb6/0x340
[  444.555614][T17334]  ? __pfx_ocfs2_try_remove_refcount_tree+0x10/0x10
[  444.555629][T17334]  ocfs2_xattr_set+0x61a/0x13e0
[  444.555649][T17334]  ? __pfx_ocfs2_xattr_set+0x10/0x10
[  444.555669][T17334]  ? do_raw_spin_lock+0x12b/0x2f0
[  444.555686][T17334]  ? do_raw_spin_unlock+0x4d/0x210
[  444.555703][T17334]  ? _raw_spin_unlock+0x28/0x50
[  444.555717][T17334]  ? ocfs2_inode_lock_tracker+0x436/0x710
[  444.555732][T17334]  ? __pfx_ocfs2_inode_lock_tracker+0x10/0x10
[  444.555747][T17334]  ocfs2_set_acl+0x701/0x7b0
[  444.555759][T17334]  ocfs2_iop_set_acl+0x1b1/0x2b0
[  444.555770][T17334]  ? vfs_set_acl+0x3cd/0xb00
[  444.555783][T17334]  ? __pfx_ocfs2_iop_set_acl+0x10/0x10
[  444.555794][T17334]  ? __pfx_evm_inode_set_acl+0x10/0x10
[  444.555812][T17334]  ? down_write+0x16d/0x200
[  444.555823][T17334]  ? __pfx_down_write+0x10/0x10
[  444.555834][T17334]  ? evm_revalidate_status+0x4f/0xb0
[  444.555845][T17334]  ? make_vfsuid+0x49/0xa0
[  444.555855][T17334]  ? inode_owner_or_capable+0xf0/0x1c0
[  444.555868][T17334]  vfs_set_acl+0x87d/0xb00
[  444.555885][T17334]  filename_setxattr+0x2fc/0x630
[  444.555903][T17334]  ? __pfx_filename_setxattr+0x10/0x10
[  444.555921][T17334]  ? getname_flags+0x1e4/0x540
[  444.555938][T17334]  path_setxattrat+0x3f3/0x430
[  444.555953][T17334]  ? __pfx_path_setxattrat+0x10/0x10
[  444.555965][T17334]  ? do_futex+0x333/0x420
[  444.555991][T17334]  ? rcu_is_watching+0x15/0xb0
[  444.556007][T17334]  __x64_sys_setxattr+0xbc/0xe0
[  444.556025][T17334]  do_syscall_64+0xe2/0xf80
[  444.556036][T17334]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  444.556047][T17334]  ? trace_irq_disable+0x37/0x100
[  444.556064][T17334]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  444.556074][T17334] RIP: 0033:0x7ff2e299acb9
[  444.556086][T17334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  444.556097][T17334] RSP: 002b:00007ff2e37bf028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[  444.556111][T17334] RAX: ffffffffffffffda RBX: 00007ff2e2c15fa0 RCX: 00007ff2e299acb9
[  444.556119][T17334] RDX: 0000000000000000 RSI: 0000200000002a40 RDI: 0000200000002a00
[  444.556127][T17334] RBP: 00007ff2e2a08bf7 R08: 0000000000000000 R09: 0000000000000000
[  444.556135][T17334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  444.556143][T17334] R13: 00007ff2e2c16038 R14: 00007ff2e2c15fa0 R15: 00007ffdd8af1c48
[  444.556157][T17334]  </TASK>
[  444.773246][T16535] ocfs2: Unmounting device (7,3) on (node local)
[  445.349489][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  445.352101][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
