last executing test programs:

13m40.382519011s ago: executing program 32 (id=892):
r0 = socket(0x2, 0x80805, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x4001, 0x3, 0x310, 0x148, 0x0, 0x148, 0x148, 0x148, 0x278, 0x240, 0x240, 0x278, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0xff000000, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xe8, 0x148, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@multiport={{0x50}, {0x0, 0x3, [0x4e20, 0x4e21, 0x4e23, 0x4e23, 0x4e20, 0x4e20, 0x4e20, 0x4e00, 0x4e21, 0x4e22, 0x4e23, 0x4e23, 0x4e21, 0x4e21, 0x4e24], [0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1], 0x1}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xffffff00, 0xffffff00, 0xffffff00, 0xffffffff], 0x4e22, 0x4e24, 0x4e20, 0x4e23, 0x8, 0x2, 0x5f4c, 0x100, 0x2}}}, {{@ip={@local, @remote, 0xff000000, 0xffffff00, 'geneve0\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x1, 0x2}, 0x0, 0xc8, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x1, 0x2, 0x3, 0x1, 0x7}}, @common=@ttl={{0x28}, {0x0, 0xa3}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x15, 0x5, 0x7, 0x9, 'snmp\x00', 'syz0\x00', {0xf7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x370)

11m46.805416014s ago: executing program 33 (id=2247):
r0 = accept(0xffffffffffffffff, &(0x7f0000000080)=@sco={0x1f, @none}, &(0x7f0000000100)=0x80)
sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000001c0)="0b6baa39fe6be7f7abc34b51ca8a2e773e9185c9d422b0fafcaa43021e377f2a53", 0x21}, {&(0x7f0000000200)="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", 0x405}], 0x2}, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x2)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0)

11m25.223293685s ago: executing program 34 (id=2478):
r0 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x101140)
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000080)={0x0, 0x31303553, 0x500, 0x2d0, 0x2, @stepwise={{0xb, 0x72}, {0x8, 0x9}, {0x39, 0x2}}})

11m21.997178417s ago: executing program 35 (id=2513):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20)
setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000080)='g', 0x1)
recvfrom$inet6(r0, &(0x7f0000000180)=""/47, 0x78, 0x10062, 0x0, 0x0)

10m42.403011722s ago: executing program 36 (id=2961):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c000000090601010000000000000000070000041c0008800c00078008000940000000020c0007800500150002000000080009c00000000605000100070000000900020073797a31"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4010)

10m1.060827392s ago: executing program 37 (id=3556):
r0 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={{0x14, 0x3f4, 0x1, 0x0, 0x0, {0x2}}, [], {0x14, 0x3ed, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0x4004041}, 0x0)

7m48.416391833s ago: executing program 38 (id=4956):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, 0x0, 0x0)

6m15.0735475s ago: executing program 7 (id=6017):
r0 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000000240), 0x0, 0x559e, &(0x7f0000005680)="$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")
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000100)=0xfc3)

6m14.742643053s ago: executing program 7 (id=6018):
r0 = gettid()
rt_sigqueueinfo(r0, 0x6, &(0x7f0000000040)={0xc, 0x0, 0x6})

6m14.481953605s ago: executing program 7 (id=6021):
r0 = syz_open_dev$vbi(&(0x7f0000000780), 0x2, 0x2)
ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000100)={0x1000, 0x0, '\x00', {0x0, @bt={0x5, 0x6, 0x0, 0x0, 0x9, 0x9, 0xb, 0x7f, 0x400, 0x0, 0x10001, 0x0, 0x0, 0x8, 0x14, 0x1b, {}, 0x7, 0xa6}}})

6m14.377614529s ago: executing program 7 (id=6023):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333406, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0)
umount2(&(0x7f00000001c0)='./file0/file0\x00', 0x9)

6m14.28082004s ago: executing program 7 (id=6026):
r0 = socket$netlink(0x10, 0x3, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x1)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x20, 0x12, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}}, 0x20}}, 0x0)
read(r0, &(0x7f0000000140)=""/166, 0xa6)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="7800000010000305000000000000000000cf0100", @ANYRES32=0x0, @ANYBLOB="83000000000000002000128008000100677265"], 0x78}}, 0x0)

6m13.57124934s ago: executing program 7 (id=6034):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000280)={{&(0x7f0000ff0000/0xd000)=nil, 0xd000}, 0x1000000})

6m13.50949773s ago: executing program 39 (id=6034):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000280)={{&(0x7f0000ff0000/0xd000)=nil, 0xd000}, 0x1000000})

5m23.547460795s ago: executing program 2 (id=6636):
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000700)=""/124)
add_key(0x0, 0x0, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
cachestat(r3, &(0x7f0000000040)={0x7f, 0x20000000000006}, &(0x7f000009de80), 0x0)

5m22.360675924s ago: executing program 2 (id=6648):
syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100003441eb4023398a716af6b593a0010902240001000040000904ee0202949da000090504020000000000090588"], 0x0)

5m22.262019968s ago: executing program 9 (id=6649):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x65]}}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f000000d000)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTtRq2fvz3mQI6xdW8rsJfhMPtyspzI8VCh2tpMe22CMvzI8XCh1zSY/NkyE8uLCyPyn8PxbaSeHK2rxwJCmcjoX8fOgWjiWFE/FM+3xtPt208H0s5BdYzMcrKNZ0L4lIelzt12OhcMMeZ7sHBwAAuKfE8Jxn2bHeZkij7Hxt0A6rB+0wMmiH+qAdRpMd0h37bQ+zvYW4vX1m49Ke/39kuPwf34pV2aLf9f8hXv+fP9ewe/3/bCw0ksJ8LLTSOwa04jGysPtxPEajlfe4sr5bAAAAgLta/F6gvsLzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5h795j5Lrqw4Gf2dd4H97dBH4i5IfAQB3jgtdrOzzUpmKdpioKpaxLSlQhio29Dos32NhOwREgxwalKIKmJRL80SiOEKrzR1KLBAWaRHEjYRQ1D5SqEUmUiLROEFFoGkChEIlUs/ee2Tvn7jw23nW84fORvHNmvud55+E59945FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfjcc/9Jn/rZV/N7fXvToE5dOfPLQ5kuf/fxFZz8YwuTs45UsXBm4+vqJn9984S2H7th4w20nL357X14uj4fB2p+u/M4XY60nV4ZweyWEnjSwbigL9Ob3h2J9bxgK4awwF6iXmBrISqQNh+/3h3AkzAXqVX2vP4ShQuCSh+65+yu1xHX9IawOIVTTNh6vZm30p4Hz+rLAQBrY3ZMFfvVSph74blcWgFMW3wz1F/2xycYMo/OXa/L66120jr2y0uF1x8Ro83w/27zEnSroSx+YPKWnrVQdS6L09jju3bYM3m2l7Xytp634RSr/hvLSXKgaunZM7dx2xcz++EhXGBvrblbTEj3Pjzz/ue0LSS+b12HswOiivA6/+sDqm7vXfuD+29atfvroOw4/c6rd/FFhkxbTS60a8tfcsnkeowmfJ8vg7Vf6lrTKl64Qws5P/N4HW8VL8//R1vP/+HKOt10NuWOtLw5nc/P4yFBMPDeczc1b6VnoGAEAAGDxdRVSZ/5e091jd72nUHykmtRXmv+v6uz4f9wK+WQ+G+3xECZmE4dHQjhn9vEscFNs7uMjIbx5NjXZGNicBI6H8PrZxNp6VUmJFbHEqiTwk+E8MJEETsTAZBL4VgxcmwS+GAPHksD2GDieBC6MgTDdOI7fH87H0XGgPwa2ZhvxWDwL4RfDsbVkWz1WrwoAAGCR5LPD3sa7hXMdTjVDnF4e62+XIZ6B3TRDNakhncHWp1VNa+hpV0NXuxrq4z7Yevilmivtai6dhlFpzHD9L//mQ6GF0vx/vPX8vzpPRyql4/8hbJn9G3N35ZGZenzrZEMGAAAA4BQM/u+T32wVL83/Jzo7/z/uE+kuZA73xd0Qu0ZCGG8MZNX+YTmQHfUezAMAAACwHNSPx9ePhU/nt9kp2ul8upx/coH544H/iXnz9x2/c2ur/pbm/5Odnf8/0HibdeJE7MXXRkJYUQj8IPayFpi1KgZ+/N7GQD7+E3EDXBOryk9MqFd1TSyxNQbGk8CRZiV+WC9xTmMgf7LqjR+uj2M6L1EIAAAAwGkXdwfE4/Lx/P+3/GbjZ1qVK83/ty7s/P/ZeXDp9P6ZwRDW94TQnf4w4L6BbGHAGBiq5Im7BrK6utOqrhoI4YLawNKqnszX/+9J1xh8qD+rKgbOecvR58+rJb7ZH8L6YuDhj9z4zlpifxKoN/6X/SG8qTbatPHvrMga700b//qKEN5YCNSr+viKEGqN9aVV3VPNr2OQVvXP1RBeUwjUq3pXNYQDAYBlKv5XuqP44L4DV+7aNjMztXcJE3Effn/YOT0zNbZ998yOapM+7Uj63LCM0VXlMXV65ZvH8iWKPnzrlqFO0vXfCY4X28r345dOHMzvx+9CvbPj3NjbcHdTOuS3vbXcRGhY72n+IXct8ZAHipXMPYml+mP+vjAYVlyxb2rv2Ge37d+/d0P2t9PsG7O/8TBTtq02pNtqYL6+dfDyaLpaVuLlbqs1xUrW7798z/p9B65cN335tsumLpv61IZ3bRw/f3zT+LvPX18b1Xj2t81Q18xXdTLUl27scFyLONRzi8tkn45PDQkJieWW2D24puX/yaX5/57W8//4qRM/+fP1GZod/x+Nh/mzx+cO82+NgSOdHv8fbXY0v35iwKokcDAGDjrMDwAAwKtDnOTHvZlxr/RP137n6VblSvP/g539/n+R1v+vL11/cbNl/tfGEuPN1v9Pl/mvr/9/sNn6/+ky//X1/4+8Auv/X1EPJJvkF9b/BwAAXg1O3/r/bZf3Ty8QUMrQdnn/9AIBpQxtl/Hv9AIBC17///H//Kv/Di2U5v/Xdjb/t3A/AAAAnDm+8Gef+X+t4qX5/5HO5v+nf/2/0Oz8/1XNApPNFga0/h8AAADLVLP1/0avHvhYq3Kl+f+xzub/8bSLrobcsdYXh7M17UK6pt1zw/WfDAAAAMDy0BXGxno7zNuwMurml9/mI/lSoK3SRU/+ycmFnf9/vLP5f8PvMr76wOqbu9d+4P4Xb1u3+umj7zj8zNzxfwAAAGDpdLpfAgAAAAAAAAAAAAAAeOU9+R+HNrWKl37/H7bMPt7s9//xun/x9wWvbcgda22//l9+/5L333JgdsnC+4ZDeGsxsOvQrrNCfm3+NcXA3R9d+7pa4lBa4s4nLnyqlvhYGnjfurNfqCUuSAJb4yKJr08D8aqKL6xMAnF5xX9PA3F7HEsDfXngyyuzcVTSbfXToWxbVdJt9ehQCCOFQH1b3T6UtVFJB3hdEqgP8NNpIA7wz/NAV9qrWwazXsXAUCx6w2DWKwAAzljxW2Bv2Dk9MzUev8LH23N7Gm+jhiXLripXW+mw+cfypck+fOuWoU7S3el30blrjfeGam0IG0pfV4tZKrOjXJxa2my61zYZcrvV3rqalEstdNP1NR9Rfzaise27Z3b0th34pvZZNva0zbKhNNkpZuma3aQd1NJBXzoYUYfbpoMux/tdYWysO8n1BzE4Ghq0e0V0+nv94jp/zV4FxTyfOnn4V63qK83/Rzub/1eL43ohvxjAwXhlvb8bscw/AAAALK0vb/71N+K/D11978Ot8pbm/6s6m//HPVj5oeBsb8fxeP3/wyMhzF5afzQL3BSb+/hICG+eTU3GEtkF9S+OJcazwE1xh8naWGLrZGNVK2LgWBL4yXAeOJ4ETsRAvpfiaMh35fz9cAjvnE1taSyxJ5YYTQIfjIFVSWAsBsaTwMoYmEgCz67MA5NJ4N9iIEw3bqtbV+bbCgAAYCHyeVZv492QzvOO9bTLUGmXYaBdhq52GartMjQbRbz/7ZihNzl5pVLI1JvW2p/UUsoQL4a/4H6VMoQfNuZMC5aajucf1M83qDRmuOM9PdXQQmn+P97Z/H+g8TZr/USc/89d/y8L/CB272vx1PFVMfDj9zYG8h0DJ+Jk95p6VZN5iXzSfk0sMREDq5LAnhiYSAJbt+SBI69rDOQz7Xrjh+uNT+clCgEAAAA47eIOgribJs7/b9j3pcFW5Urz/4nO5v+xvcFiY1+MtZ5cGcLtlbne1APrhrJA3I8xFH8e/4ahEM4q7OCol5gayEr0JQ2H7/dnv1DvS6v6Xn/244N4/5KH7rn7K7XEdf0hrC7sfam38Xg1a6M/DZzXlwUG0sDuniwQ9/zUA9/tygJwyup7BeMLKj/VpW50/nJNXn+vlmuCpsMr7QOdJ998v7laKqUdrvk+1bqFPW0t99+yaEpvj+Pebcvx3Tbq3Vb8IpV/Q3lpLlQNXTumdm67YmZ/fKT4S9aSJXqei79S7SS9CK/Dgy+/t+1V0w6MJx8f4/OXm/91WInVffWB1Td3r/3A/betW/300XccfqbjbjQRfyh8z+f/dehHhc271Kohf80tu8+TSZ8ny+K/gYOFTs2dmV33u/m0bXn269e0ipfm/5Odzf97kttZv44bc99ICG8rbNz74ub/45Hsc7AQyD4lX1MOZIfc/2u46ScnAAAALLb6noX6/oLp/DY7ITydJ5fzTy4wf9xfMTFv/k77PfDXH13dKl6a/29tPf9fkXTT8X/H/1kijv/P60zfFb0ifeDgKe2KLlXHknD8f15n+rvN8f95Of7v+P98HP9vw/H/eZ3pT1vpW9IeX7pCCE//0V2PtoqX5v97Opv/W/9v/kX76uv/bW22/t+eZuv/HbT+HwAAsKSaLDSXzvNKq/eVMqSr95UytF0gsO0Sg9b/W/D6f0+d+/hvQgul+f/Bzub/8eUwWGx9uaz/t2pLk6qujYE9FgYEAADgTNRsBwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACvrDv+4X92tIrf+9uLHn3i0olPHtp86bOfv+jsB0OYnn28koUrA1dfP/Hzmy+85dAdG2+47eTFb6/m5Xrz2//fkDvW+uJwCEcKjwzFxHPDtTtzgUvef8uBnlrivuEQ3loM7Dq066xa4lvDIawpBu7+6NrX1RKH0hJ3PnHhU7XEx9LA+9ad/UItcUEeqKTd/ceVWXcraXe/sjKEkUKg3t1Prmysqt7Gn+aBrrSNfxrK2oiBoVj0G0NZGzEwE0tMrwhhfU8I3WlV91azqrrTqv6lmlXVnVb1hWoIF4QQetKqnujLqupJR/5gX1ZVDJzzlqPPn1dLHOkLYX0x8PBHbnxnLfHpJFBv/C/6QnhT7SWTNv7t3qzx3rTx63pDeGMIoS8t8cuerERfWuLJnhBeUwjUG/9ETwgHAq8K8cOn4RNt34Erd22bmZnau4SJvryt/rBzemZqbPvumR3VpE/NVArpl656+WN/7PnPba/dfvjWLUOdpHvycr2zXd7Y23B305ne+9ivgWIlc89Hqf6Yvy8MhhVX7JvaO/bZbfv3792Q/e00+8bsb3cezbbVhuWyrdYUK1m///I96/cduHLd9OXbLpu6bOpTG961cfz88U3j7z5/fW1U49nfxRjqjad/qOf2FCo5HR8AEhISyy3R1fDpNn6mf5CXvujPdbQ3VGc/oAvTir5SlsrsKBdj0JtP36BLU5LCiPoa+zbvdqlkX2/KWa5qzLKpNJmYq6U/yzL7va40OSw21jW7SeP9rjA21t1sO4w23i1u3p+dwuZ9JN90naYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6PHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhB44FAAAAAIT5W4fRswEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXAoAAP//PTUiXg==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='.\x00', 0x10000, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @a}})
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x1fc1ca7, 0x0, 0x83, 0x0, &(0x7f0000000080))

5m21.842631961s ago: executing program 9 (id=6651):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
umount2(0x0, 0x15)

5m21.46424201s ago: executing program 9 (id=6652):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x18}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x80)

5m21.390400393s ago: executing program 9 (id=6653):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8000c61)
open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000140)={0x10})
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0)
sendfile(r0, r3, 0x0, 0x20fffe82)

5m21.326662597s ago: executing program 9 (id=6654):
syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a800800904000001030000000905", @ANYRES32], 0x0)

5m21.031186455s ago: executing program 2 (id=6655):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e24, @loopback}, 0x2, 0x0, 0x4}}, 0x2e)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd70000400000005000000080009000200000008000c000300000008000b00000000000600010007"], 0x40}}, 0x20)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e)
getsockopt(r0, 0x111, 0x2, 0x0, &(0x7f0000000080))

5m21.030818982s ago: executing program 2 (id=6656):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000100)={'wg0\x00', <r2=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x214e}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x1}]}, 0x2c}}, 0x800)

5m20.933040131s ago: executing program 2 (id=6657):
syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @random="0000ea0700", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x2d, 0x3c, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local, {[@rr={0x7, 0x13, 0x9, [@multicast2, @local, @empty, @local]}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x4000}}}}}}, 0x0)

5m20.932529193s ago: executing program 2 (id=6659):
r0 = socket(0xa, 0x3, 0xff)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000240)=0xa80, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = getpid()
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0)
sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000340)=ANY=[], 0x44}}, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
r3 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0)
fanotify_init(0x1, 0x101000)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000000a499d0000000000000000020000010900010073797a310000000008000240000000030400060014000000110001"], 0x54}}, 0x0)
sendmsg$NFT_MSG_GETTABLE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000010ab115d12bc68a4938ae0103000000"], 0x14}, 0x1, 0x0, 0x0, 0x240418c0}, 0x4000000)
syz_open_procfs(0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
syz_open_dev$usbmon(&(0x7f0000000180), 0x40, 0x4100)
sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f0000000040)={0xa, 0xa, 0x7, @dev={0xfe, 0x80, '\x00', 0x29}}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000540)="c65635862c610100000000000080", 0xe}, {&(0x7f00000006c0)="9e91d91a9cfc796fff655bb539e2ffb332820636ab4a4f2ba300", 0x1a}], 0x2}, 0x20044b8c)

5m20.731493529s ago: executing program 5 (id=6660):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c00), r0)
sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000000)={0x20, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc091}, 0x4004040)

5m19.954519358s ago: executing program 5 (id=6661):
msgrcv(0x0, 0x0, 0x0, 0x0, 0x6000)

5m19.761335666s ago: executing program 5 (id=6662):
r0 = socket(0x1e, 0x1, 0x0)
sendto$packet(r0, 0x0, 0xffffffffffffff5a, 0x842, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)

5m19.761173005s ago: executing program 5 (id=6663):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00)
setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x4, 0x0, 0x0)

5m19.503204418s ago: executing program 9 (id=6664):
io_setup(0x7ed, &(0x7f0000000040)=<r0=>0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_submit(r0, 0x1, &(0x7f0000000640)=[&(0x7f0000000440)={0x18, 0x7000030, 0x4, 0x7, 0x0, r1, 0x0}])

5m19.432948866s ago: executing program 5 (id=6665):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x80, 0x0, 0x7ffc1ffb}]})
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x3}, &(0x7f0000000200)=0xc)

5m19.381980079s ago: executing program 5 (id=6666):
r0 = dup(0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
read$FUSE(r0, 0x0, 0x0)
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e01, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3c364ca41d6357e544524474004000b42a21d7214bf92494925208a0e2f964e0000c534a6324d6193fcf19b2df3ee818afaa4ff1f56c54dc46d8b6d2ccd008aa0cc1dc2767bbe00"}, 0xd8)
r4 = socket$kcm(0x23, 0x5, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4)
listen(r4, 0x800)
accept4(r4, 0x0, 0x0, 0x80000)
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
writev(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f00000003c0)="06000000750d08c4daf10a7742e39e31ceefb1fcd2e5bc", 0x17}], 0x1)
write$tun(r5, 0x0, 0x78)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", <r7=>0xffffffffffffffff})
ioctl$SNDCTL_TMR_TEMPO(r0, 0xc0045405, &(0x7f0000000000)=0x48)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", <r8=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r8})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)

5m5.649180554s ago: executing program 40 (id=6659):
r0 = socket(0xa, 0x3, 0xff)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000240)=0xa80, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = getpid()
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0)
sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000340)=ANY=[], 0x44}}, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
r3 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0)
fanotify_init(0x1, 0x101000)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000000a499d0000000000000000020000010900010073797a310000000008000240000000030400060014000000110001"], 0x54}}, 0x0)
sendmsg$NFT_MSG_GETTABLE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000010ab115d12bc68a4938ae0103000000"], 0x14}, 0x1, 0x0, 0x0, 0x240418c0}, 0x4000000)
syz_open_procfs(0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
syz_open_dev$usbmon(&(0x7f0000000180), 0x40, 0x4100)
sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f0000000040)={0xa, 0xa, 0x7, @dev={0xfe, 0x80, '\x00', 0x29}}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000540)="c65635862c610100000000000080", 0xe}, {&(0x7f00000006c0)="9e91d91a9cfc796fff655bb539e2ffb332820636ab4a4f2ba300", 0x1a}], 0x2}, 0x20044b8c)

5m3.669900159s ago: executing program 41 (id=6666):
r0 = dup(0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
read$FUSE(r0, 0x0, 0x0)
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e01, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3c364ca41d6357e544524474004000b42a21d7214bf92494925208a0e2f964e0000c534a6324d6193fcf19b2df3ee818afaa4ff1f56c54dc46d8b6d2ccd008aa0cc1dc2767bbe00"}, 0xd8)
r4 = socket$kcm(0x23, 0x5, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4)
listen(r4, 0x800)
accept4(r4, 0x0, 0x0, 0x80000)
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
writev(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f00000003c0)="06000000750d08c4daf10a7742e39e31ceefb1fcd2e5bc", 0x17}], 0x1)
write$tun(r5, 0x0, 0x78)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", <r7=>0xffffffffffffffff})
ioctl$SNDCTL_TMR_TEMPO(r0, 0xc0045405, &(0x7f0000000000)=0x48)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", <r8=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r8})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)

5m3.634650004s ago: executing program 42 (id=6664):
io_setup(0x7ed, &(0x7f0000000040)=<r0=>0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_submit(r0, 0x1, &(0x7f0000000640)=[&(0x7f0000000440)={0x18, 0x7000030, 0x4, 0x7, 0x0, r1, 0x0}])

2m16.301698637s ago: executing program 4 (id=7981):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000200)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@nodioread_nolock}]}, 0x1, 0x5b7, &(0x7f0000001380)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
fallocate(r0, 0x10, 0x37eb, 0x1955)

2m16.221032623s ago: executing program 4 (id=7982):
syz_mount_image$nilfs2(&(0x7f0000002680), &(0x7f00000026c0)='./file0\x00', 0x0, &(0x7f0000002700), 0x1, 0x267d, &(0x7f0000002740)="$eJzs3U9sHFf9APCZ9b/4T+x1kt+vTiFuSZHgUqdNiqrCxZE4cagqVao4Qav8KRZuiBqE2ihS3HLhglQJcUUiKtxQzwiplJ649cKFv0I9gSCISFwoSoxsv7dev/ix67E96939fKRv3s682fl+Z9fazJvdfVsAQ6ux+e8zzyyURfHDn//gyy/+9YM7G+sea22xtvlvGZaWi6IYa92vKGaS/S1PbLX37926tNE+SNqyOF+URdnqL56/27rv9Ga2x4sPimbx/amvPb/y94s//e7Pbr9065/v/+SQDr+lPOwEAABwBLx/+fWv/+g/X3lx/pP3FpeLidb6eH6+HJanw3n/U+FEOZ4vx3FA2daWu5xPjyfbjYRoJNuNJNuNJnlGM/nGkv2MZbYb75BvpG3dbscJAAAA/SiOa5tF2VjasdxoLC1tjfs3/HluvFy6trJ69UaPCgUAAAAq+9ft8BFfIYQQQgghhBBCDGysz/X6CgQAAAAwbOK8A635wVJrBztTV2tvze7y373Y2P3+cADq/vuXv7/yv/uWVxwAAKob1LPJeFzxPDrOY5DOIziS3G+v5/+NZD+je6wzN69gv8w3mKszfVyPqlz9e30eeyVXfzof5lGVqz+dp/OoytU/UXMdVeXqP1ZzHVXl6p+suY6qcvVP1VxHVbn6p2uuo6pc/envmhxVufqP11xHVbn6Z2uuo6pc/f3ysdpc/c2a66gqV/98zXVUlav/RM11VJWr/2TNdVSVq/9UzXX0ypnQxsdhMelvHz+nY7p+GeMBAADAsPu3+f+EEEIIIYQQQoiBj9u9vgABAAAA9Fz8XkD81vt6EPtHOvSPdugf69A/3qF/okM/AAAAUBS/+N7V0++U29/z3+98eHHeqDj/0l7nMUrnI9xr/v3Oe7bf/P0ybxkAAADD5aNrX7z5pSe/+sj8J+8tLrfNWv0gjHeXw/LpMAfgG+EDAfFzAXGe3PbPCZTtd0z60+3S6wPHc/t7Yed2s7ntXt653Vxuu+s7t2sm242ESOfxPta2n6LtOke833wuXzKh6ngmXzpv8kySL3180nnqY750/tz0ukjcLp2nNr3+M5nMBV4m+c+G9u3Q3gnth6H9eJe8AAAA1C+OL5tF2VhqG9c1i0ZjaWl7vLlQjJVXV1avPBWW4/jy13NjExvrn665bgAAAKB72+P93cf/8f3ohWK8XLq2snr1xtbyTGv9WKP9usDc9vqy/bpAM1l/PrP+QliO76N/Y25yc/3SpW+tXj7ogwcAAIAhcePNm998ZXX1yutuuOGGG60bvX5lAgAADtq5b792/dyNN28+ufLaK69eefXKtfNPP/fcFy48++yF8+c239c/1/7uPgAAANCPtt/063UlAAAAAAAAAAAAAAAAAAAAMLzqmE6818cIAAAAw+4ft4uiWBNCCCGEEEIIIcQgx/r6SK8vQQAAAABD5v69W5fa24eslQear7W35lbzIOSN7UcnvrO4EXGzuxd3Xi+ZOtBqGHZ1//3L31/5333rYPMfize6fv1r7NzBcrW8v/3VX0635390tMv86fG/UC3/75L8nyu6y7/+4yT/y9Xy/z7JP9Vl/oeO/3q1/H8I+RfC8uef6Db/zud/IrTxOCa7zP/H5PgvF93mT46/2WXCxJ9CfgAYRo1eF3BI4llCPI+eDsvxeMPpZpF++mGv5/+NZD+j+658537jeVA8WYnnSzNJ3miv9U8n+ztesc5Uv3yqJFf/QT2Phy1X/1jNdVSVq3+85jqqytU/UXMdVeXqP1ZzHVXl6u92HNprufr75bpyrv7pmuuoKlf/TM11VJWrf6//j/dKrv7ZmuuoKlf/XM11VJWrv+Jltdrl6p+vuY6qcvWfqLmOqnL1n6y5jqpy9Z+quY5eORPa+DgsJv1x/PnZXcZ0/TLGAwAAgGH3N/P/CSGEEEIIIYQQAx/r672+AkEvHe63mQE4qrz+DzfP/3Dz/A83zz//S/xeQJksRyMd+kc79I916B9P+tO/14kO/SeS/a4Hsf9kh/5THfpnO/T/f4f+Rzr0L3ToP92h/9EO/QAAAAyH/wut8SEAAAAMrjhPrPE/AAAADK74OyXG/wAAADC44u98Gv8DAADA4JoPrfE/AAAADLDy2O6rQxuvC5wN7duhvRPaD0P78aEVCAAclk+F9tOhPRPaxdA+FtrHQ/uZ0J6tqT4A4OD85pdvvPROWRQP7t26tLF8Iem/H9bH9iFrW1cKysbOX96bDO1UaJ/osp709/u6zR/NdpnnsPLP7TM/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8F924EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsD//KA1EQRyA5y2IoI2lnZ5B9gAK1lta2mhjI9gvuGBtJR4h6XKANCEHSiA5QELYt8kStk8Tvq+YH/P+MgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0ClyLcvbFPE//Xv+Kj7f27W7/kSTa9p3jxFxcdSnwXvNZZebdf3W5naQKR5yPexHtezvXuff7mMeN/F79Vp9LJ7GP5Pvl3o1G51o/N5wDgAAADgnuwAAAP//rGoV3A==")
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40106e80, &(0x7f0000000040)={0x5, 0x1, 0x9, 0x0, 0x7, 0x4fe4, 0x2401})

2m15.86078063s ago: executing program 4 (id=7983):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8", 0x1}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x80d5)
accept$alg(r1, 0x0, 0x0)

2m15.771981315s ago: executing program 4 (id=7984):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

2m15.771583475s ago: executing program 4 (id=7985):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x3, 0x2, 0x6, 0x1, 0x3, 0x4a}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2m15.468619433s ago: executing program 4 (id=7988):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)}], 0x2}, 0x0)
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl(r0, 0xfffff000, &(0x7f0000000000))

2m15.321050702s ago: executing program 43 (id=7988):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)}], 0x2}, 0x0)
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl(r0, 0xfffff000, &(0x7f0000000000))

1m52.231365177s ago: executing program 3 (id=8250):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f680, 0x0, 0x39d})
syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0x136f, 0x11000, 0x2, 0x2d0}, &(0x7f0000000140), &(0x7f0000000400), &(0x7f0000000000))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
io_uring_enter(r1, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0)

1m52.167107482s ago: executing program 3 (id=8252):
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20006911}, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x4604, &(0x7f00000005c0))

1m51.99013907s ago: executing program 3 (id=8254):
r0 = syz_open_dev$video(&(0x7f00000000c0), 0x8, 0x82341)
ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000cc0)={0xa, {0x800, 0x7b, 0x1000}})

1m51.98992069s ago: executing program 3 (id=8255):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0)
unshare(0x22020400)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020)

1m51.93016823s ago: executing program 3 (id=8257):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)={0x44, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x80)

1m51.638264177s ago: executing program 3 (id=8259):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DONE(r1, 0x29, 0xc9, 0x12, 0x0)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
poll(&(0x7f0000000040)=[{r0, 0x4}], 0x1, 0x9)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = socket(0x10, 0x2, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32=r5, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES16=r5], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0)
socket(0x8000000010, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r6 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r6, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010101}})
sendto$packet(r3, &(0x7f0000000600)="05d936277c6f54220002097844ffcf8bd1846f7f83477ca1b278e3e4018a34844b9d62cbd7cd2a62", 0x28, 0x8c1, &(0x7f00000000c0)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv4_deladdr={0x17, 0x15, 0x1, 0xffffffed, 0x25dfdbfe, {0x2, 0x3f}, [@IFA_LABEL={0x14, 0x3, 'veth0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000004040), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000004140)={0x0, 0x0, &(0x7f0000004100)={&(0x7f0000004080)={0x30, r9, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRET={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4845}, 0x20000080)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x2, 0xc, 0xc, 0x1ff}, 0x20)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r10, 0x89fb, &(0x7f0000000180)={'sit0\x00', 0x0})

1m51.535839066s ago: executing program 44 (id=8259):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DONE(r1, 0x29, 0xc9, 0x12, 0x0)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
poll(&(0x7f0000000040)=[{r0, 0x4}], 0x1, 0x9)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = socket(0x10, 0x2, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32=r5, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES16=r5], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0)
socket(0x8000000010, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r6 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r6, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010101}})
sendto$packet(r3, &(0x7f0000000600)="05d936277c6f54220002097844ffcf8bd1846f7f83477ca1b278e3e4018a34844b9d62cbd7cd2a62", 0x28, 0x8c1, &(0x7f00000000c0)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv4_deladdr={0x17, 0x15, 0x1, 0xffffffed, 0x25dfdbfe, {0x2, 0x3f}, [@IFA_LABEL={0x14, 0x3, 'veth0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000004040), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000004140)={0x0, 0x0, &(0x7f0000004100)={&(0x7f0000004080)={0x30, r9, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRET={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4845}, 0x20000080)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x2, 0xc, 0xc, 0x1ff}, 0x20)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r10, 0x89fb, &(0x7f0000000180)={'sit0\x00', 0x0})

1m43.261310537s ago: executing program 1 (id=8330):
close(0xffffffffffffffff)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', <r2=>0x0})
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x8, r2}, 0x10)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000002280)={0x0, 0x1200000, 0x1800, 0x0, 0x2}, 0x20)

1m43.161560049s ago: executing program 1 (id=8331):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r0, &(0x7f0000000280)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe)

1m43.161343663s ago: executing program 1 (id=8332):
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000003f01f00660000007f00000001"], 0x48)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00')
read$FUSE(r0, &(0x7f0000006540)={0x2020}, 0x5b3)

1m43.069964809s ago: executing program 1 (id=8333):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x18d883, 0x0)
mount$bind(0x0, &(0x7f0000001740)='./file0\x00', 0x0, 0x80000, 0x0)

1m43.016237384s ago: executing program 1 (id=8334):
r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000000)={0x3, 0x9a090a, 0x1})
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000001300)={0x0, 0x7ff, 0x2})

1m42.730991354s ago: executing program 1 (id=8335):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000e00)=ANY=[@ANYBLOB="1201000000000040de28021100000000000109022400010000d00009040004010300000009210100f90122050009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f0000000000)={0x0, 0xc, 0x2, {0x2, 0x22}}, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@local=@item_012={0x1, 0x2, 0x2, "c4"}, @local=@item_012={0x2, 0x2, 0x2, "5317"}]}}, 0x0}, 0x0)

1m42.586030884s ago: executing program 45 (id=8335):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000e00)=ANY=[@ANYBLOB="1201000000000040de28021100000000000109022400010000d00009040004010300000009210100f90122050009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f0000000000)={0x0, 0xc, 0x2, {0x2, 0x22}}, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@local=@item_012={0x1, 0x2, 0x2, "c4"}, @local=@item_012={0x2, 0x2, 0x2, "5317"}]}}, 0x0}, 0x0)

3.669652192s ago: executing program 6 (id=9335):
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2})
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x220c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x3)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000540)={0xa, 0x4e22, 0x7651, @empty, 0x200}, 0x1c)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r5, 0x7)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x6e22, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x6}, 0x1c)
r8 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r8, &(0x7f0000000040)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010000081000418e00000004fcff", 0x58}], 0x1)

3.66628757s ago: executing program 6 (id=9336):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0xfffffffffffffffe, 0xc}, 0x68)

3.600922607s ago: executing program 6 (id=9337):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000000d08000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x9, 0xde, &(0x7f00000001c0)=""/222, 0x41100, 0x8}, 0x94)

3.600752717s ago: executing program 6 (id=9338):
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201100100000040451308300000000000010902010001"], 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000100)=ANY=[@ANYBLOB="2a01000020000040b708000000000000430109029200030172e5000904000000010100000a24010000000201020c0d240700000500006e626805000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0)

1.249274732s ago: executing program 0 (id=9366):
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new user:syz 000000000000000020'], 0x2a, 0xfffffffffffffffc)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)

1.249138183s ago: executing program 0 (id=9367):
r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000500)={{0x3, 0x4, 0x2009, 0x0, 'syz0\x00', 0x1}, 0x3, 0x1, 0x9, 0x0, 0x1, 0x5, 'syz1\x00', &(0x7f0000000080)=['-\x00'], 0x2})

1.169768786s ago: executing program 0 (id=9368):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000400)='./file1\x00', 0xa08006, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0xfe, 0x687, &(0x7f0000000fc0)="$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")
lsetxattr$trusted_overlay_upper(&(0x7f0000000280)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000880)=ANY=[], 0xfe37, 0x0)

1.16944186s ago: executing program 0 (id=9369):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)={0x14, 0x1e, 0x301, 0x20000002, 0x0, {0x1c}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4004000)

1.110597061s ago: executing program 0 (id=9370):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000180)='./bus\x00', 0x804, &(0x7f0000000600)={[{@rodir}, {@numtail}, {@utf8no}, {@uni_xlateno}, {@shortname_mixed}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@utf8no}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '949'}}, {@fat=@check_strict}, {@utf8}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@utf8no}, {@rodir}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}]}, 0x9, 0x27b, &(0x7f0000000340)="$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")
stat(&(0x7f0000000000)='./file0\x00', 0x0)

1.110403126s ago: executing program 0 (id=9371):
r0 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000000000046})
syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000380)={0x20, 0xe, 0x1, '6'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000240)={0x0, 0xe, 0x2, "c5d0"}, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000c80)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="400702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000800)={0x0, 0x15, 0xf, "91b259ed6b6599aefd61ef4e17eea5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0x40, 0x19, 0x2, "9ed2"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f00000006c0)={0x40, 0x12, 0x2, "00a3"}, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x44, &(0x7f0000000500)=ANY=[@ANYBLOB="000502"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

589.058154ms ago: executing program 6 (id=9373):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001ac0)={0x6, 0xc, &(0x7f0000001500)=@framed={{0x18, 0x2, 0x0, 0x0, 0x66, 0x0, 0x0, 0x0, 0x3}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="6f11ba816056a1827a33ae059cf3", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x6}, 0x50)

469.233294ms ago: executing program 6 (id=9376):
syz_usb_connect(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="120100008e77e3405c1b0501f101010203010902240001000000000904000002a4d36f00090504090000000000090507"], 0x0)

279.290703ms ago: executing program 8 (id=9379):
syz_read_part_table(0x1065, &(0x7f0000001080)="$eJzszbFNA0EQBdDPgo49ElogpgC6ICKiGq4GcmqgAURETAGWnDm2I8uJ5bXufK7Bgd9Ldr/+aCZc1PNdUrb/ZQo16fukm7vaWte3jySlbB5zm2XJ29y9f53ednioya61lqcx78dfMu5bvebnPlm/JBlqPnNzPjok33/J4neaBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICrdwwAAP//TsgcsA==")

99.866663ms ago: executing program 8 (id=9380):
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e065c0d08de"], 0x9)

50.342455ms ago: executing program 8 (id=9381):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x4d8, 0x370, 0x0, 0xffffffff, 0x228, 0x228, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0xffffffff], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0x0, 0xff], 0x7, 0x1, 0x87, 0x4e1c, 0x4e23, 0x4e24, 0x4e24, 0x814, 0x20c0}, 0x80, 0x2}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xb, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @icmp_id=0x66}}}}, {{@ip={@multicast1, @rand_addr=0x64010101, 0xff, 0xff000000, 'veth1_to_bridge\x00', 'ip6erspan0\x00', {0xff}, {}, 0x11, 0x2, 0x78}, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x5}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @icmp_id=0x65}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538)

50.170478ms ago: executing program 8 (id=9382):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)=@ipv6_delrule={0x2c, 0x21, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8}, @FIB_RULE_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}]}, 0x2c}}, 0x0)

274.311µs ago: executing program 8 (id=9383):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r1, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000015c0), 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10)

0s ago: executing program 8 (id=9384):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000001c0)={[{@bh}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@errors_remount}, {@data_err_ignore}, {@nombcache}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}]}, 0x1, 0x47a, &(0x7f00000006c0)="$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")

kernel console output (not intermixed with test programs):

gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  857.225600][   T10] option 1-1:7.83: GSM modem (1-port) converter detected
[  857.242053][T27454] loop6: detected capacity change from 0 to 4096
[  857.253184][   T10] usb 1-1: USB disconnect, device number 60
[  857.257284][T27454] ntfs3(loop6): Different NTFS sector size (2048) and media sector size (512).
[  857.270644][   T10] option 1-1:7.83: device disconnected
[  857.346853][T22654] Bluetooth: hci0: command tx timeout
[  857.480947][ T8946] team0 (unregistering): Port device team_slave_1 removed
[  857.506399][ T8946] team0 (unregistering): Port device team_slave_0 removed
[  857.507239][T21057] kernel read not supported for file /adsp1 (pid: 21057 comm: kworker/1:4)
[  857.696478][T27384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  857.701839][ T5356] 8021q: adding VLAN 0 to HW filter on device eth11
[  857.725305][T27384] team0: Port device team_slave_0 added
[  857.730054][T27384] team0: Port device team_slave_1 added
[  857.812623][T27384] batman_adv: batadv0: Adding interface: batadv_slave_0
[  857.817192][T27384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  857.829860][T27384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  857.836371][T27384] batman_adv: batadv0: Adding interface: batadv_slave_1
[  857.839228][T27384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  857.848971][T27384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  857.931771][T27465] tmpfs: Cannot retroactively limit inodes
[  857.961021][T27384] hsr_slave_0: entered promiscuous mode
[  857.994378][T27384] hsr_slave_1: entered promiscuous mode
[  858.000286][T27384] debugfs: 'hsr0' already exists in 'hsr'
[  858.004076][T27384] Cannot create hsr debugfs directory
[  858.150790][ T5356] 8021q: adding VLAN 0 to HW filter on device eth12
[  859.318563][ T6647] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[  859.400669][T27384] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  859.404919][T27384] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  859.408340][T27384] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  859.413194][T27384] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  859.416336][T27384] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  859.419398][T22654] Bluetooth: hci0: command tx timeout
[  859.429856][T27384] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  859.433737][T27384] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  859.439264][T27384] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  859.472639][ T6647] usb 1-1: unable to get BOS descriptor or descriptor too short
[  859.479208][ T6647] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[  859.485961][ T6647] usb 1-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40
[  859.489888][ T6647] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  859.493459][ T6647] usb 1-1: Product: syz
[  859.494728][ T6647] usb 1-1: Manufacturer: syz
[  859.496250][ T6647] usb 1-1: SerialNumber: syz
[  859.553071][T27384] 8021q: adding VLAN 0 to HW filter on device bond0
[  859.568128][T27384] 8021q: adding VLAN 0 to HW filter on device team0
[  859.574739][ T4172] bridge0: port 1(bridge_slave_0) entered blocking state
[  859.577590][ T4172] bridge0: port 1(bridge_slave_0) entered forwarding state
[  859.595115][ T4172] bridge0: port 2(bridge_slave_1) entered blocking state
[  859.597508][ T4172] bridge0: port 2(bridge_slave_1) entered forwarding state
[  859.724776][ T6647] usb 1-1: unit 4 not found!
[  859.863453][ T6647] usb 1-1: USB disconnect, device number 61
[  859.903863][ T5619] udevd[5619]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  860.080854][T27384] 8021q: adding VLAN 0 to HW filter on device batadv0
[  860.291873][T27384] veth0_vlan: entered promiscuous mode
[  860.302816][T27384] veth1_vlan: entered promiscuous mode
[  860.377002][T27384] veth0_macvtap: entered promiscuous mode
[  860.381263][T27564] cgroup: subsys name conflicts with all
[  860.387674][T27384] veth1_macvtap: entered promiscuous mode
[  860.435072][T27384] batman_adv: batadv0: Interface activated: batadv_slave_0
[  860.462662][T27384] batman_adv: batadv0: Interface activated: batadv_slave_1
[  860.492589][ T8945] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  860.500334][ T8945] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  860.513796][ T8945] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  860.521383][ T8945] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  860.682441][T14581] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  860.686566][T14581] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  860.735742][T14581] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  860.753041][T14581] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  860.761326][ T6647] usb 1-1: new full-speed USB device number 62 using dummy_hcd
[  860.922379][ T6647] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  860.926045][ T6647] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  860.928904][ T6647] usb 1-1: Product: syz
[  860.930865][ T6647] usb 1-1: Manufacturer: syz
[  860.932715][ T6647] usb 1-1: SerialNumber: syz
[  860.941718][ T6647] usb 1-1: config 0 descriptor??
[  861.044127][T27587] qnx6: unable to read the first superblock
[  861.088275][T27589] loop6: detected capacity change from 0 to 16
[  861.091785][T27589] MTD: Attempt to mount non-MTD device "/dev/loop6"
[  861.159026][T27591] input: syz0 as /devices/virtual/input/input36
[  861.165698][ T6647] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  861.499256][T22654] Bluetooth: hci0: command tx timeout
[  861.865103][T27606] loop8: detected capacity change from 0 to 4096
[  861.882340][T27606] NILFS (loop8): invalid segment: Checksum error in segment payload
[  861.885620][T27606] NILFS (loop8): trying rollback from an earlier position
[  861.908247][T27606] NILFS (loop8): recovery complete
[  861.914103][T27607] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  862.132950][T27611] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8371'.
[  862.365513][T27613] loop8: detected capacity change from 0 to 32768
[  862.395228][T27613] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  862.443433][T27613] XFS (loop8): Ending clean mount
[  862.474736][T27384] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  862.828786][ T6647] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  862.836554][ T6647] usb 1-1: USB disconnect, device number 62
[  862.857331][T27623] loop8: detected capacity change from 0 to 2048
[  862.925328][T27625] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  863.054793][T27631] loop8: detected capacity change from 0 to 4096
[  863.060385][T27631] ntfs3(loop8): Different NTFS sector size (2048) and media sector size (512).
[  863.075214][T27631] ntfs3(loop8): ino=b, mi_enum_attr
[  863.077421][T27631] ntfs3(loop8): Mark volume as dirty due to NTFS errors
[  863.080920][T27631] ntfs3(loop8): Failed to load $Extend (-22).
[  863.083607][T27631] ntfs3(loop8): Failed to initialize $Extend.
[  863.385072][T27633] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8378'.
[  863.562933][T27645] binder: 27644:27645 ioctl c018620b 0 returned -14
[  863.578965][T22654] Bluetooth: hci0: command tx timeout
[  863.828696][ T1286] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[  863.933000][T27649] netlink: 'syz.8.8386': attribute type 10 has an invalid length.
[  863.982377][ T1286] usb 1-1: config 1 has an invalid interface number: 7 but max is 0
[  863.986153][ T1286] usb 1-1: config 1 has no interface number 0
[  863.989095][ T1286] usb 1-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  863.993600][ T1286] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  863.997456][ T1286] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  864.017412][ T1286] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  864.025391][ T1286] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  864.032149][ T1286] usb 1-1: Product: syz
[  864.035463][ T1286] usb 1-1: Manufacturer: syz
[  864.040744][ T1286] usb 1-1: SerialNumber: syz
[  864.052353][T27647] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  864.481362][T27647] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  864.558573][ T6647] usb 9-1: new full-speed USB device number 5 using dummy_hcd
[  864.627308][T27668] loop6: detected capacity change from 0 to 256
[  864.722071][ T6647] usb 9-1: config 1 has an invalid interface descriptor of length 8, skipping
[  864.725035][ T6647] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  864.729353][ T6647] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 4
[  864.734800][ T6647] usb 9-1: New USB device found, idVendor=10f5, idProduct=0200, bcdDevice= 0.40
[  864.737757][ T6647] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  864.742574][ T6647] usb 9-1: Product: syz
[  864.744895][ T6647] usb 9-1: Manufacturer: syz
[  864.748195][ T6647] usb 9-1: SerialNumber: syz
[  864.834828][ T1286] usb 1-1: Incompatible driver and firmware versions
[  864.848094][ T1286] usb 1-1: USB disconnect, device number 63
[  865.097257][ T6647] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -71
[  865.156060][ T6647] usb 9-1: USB disconnect, device number 5
[  865.914629][T27693] loop8: detected capacity change from 0 to 2048
[  865.922217][T27695] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  866.303475][T12343] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  866.583850][T27722] loop8: detected capacity change from 0 to 4096
[  866.587479][T27722] nilfs2: Bad value for 'cp'
[  866.665988][T27724] overlayfs: missing 'lowerdir'
[  866.773398][T27730] loop0: detected capacity change from 0 to 2048
[  866.777708][T27730] NILFS: invalid option "cp=1": read-only option is not specified
[  866.988770][ T1286] usb 9-1: new full-speed USB device number 6 using dummy_hcd
[  867.140850][ T1286] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  867.144847][ T1286] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  867.149474][ T1286] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[  867.152939][ T1286] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  867.155987][ T1286] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  867.162837][ T1286] usb 9-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  867.166208][ T1286] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  867.168771][ T1286] usb 9-1: Product: syz
[  867.170167][ T1286] usb 9-1: Manufacturer: syz
[  867.171789][ T1286] usb 9-1: SerialNumber: syz
[  867.174883][ T1286] usb 9-1: config 0 descriptor??
[  867.385093][ T1286] radio-si470x 9-1:0.0: DeviceID=0x0000 ChipID=0x0000
[  867.387813][ T1286] radio-si470x 9-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0.
[  867.587191][ T1286] radio-si470x 9-1:0.0: software version 254, hardware version 56
[  867.589757][ T1286] radio-si470x 9-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org
[  867.716991][T27741] loop0: detected capacity change from 0 to 128
[  867.724334][T27741] EXT4-fs (loop0): Test dummy encryption mode enabled
[  867.738183][T27741] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  867.743941][T27741] ext4 filesystem being mounted at /621/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  867.789767][ T1286] radio-si470x 9-1:0.0: si470x_set_report: usb_control_msg returned -71
[  867.790510][T22649] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  867.794546][ T1286] radio-si470x 9-1:0.0: submitting int urb failed (-90)
[  867.822349][ T1286] radio-si470x 9-1:0.0: si470x_set_report: usb_control_msg returned -71
[  867.825532][ T1286] radio-si470x 9-1:0.0: probe with driver radio-si470x failed with error -22
[  867.836706][ T1286] usb 9-1: USB disconnect, device number 6
[  868.198667][ T6647] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[  868.370698][ T6647] usb 1-1: Using ep0 maxpacket: 16
[  868.377807][ T6647] usb 1-1: config 9 has an invalid interface number: 226 but max is 0
[  868.386184][ T6647] usb 1-1: config 9 has no interface number 0
[  868.390489][ T6647] usb 1-1: config 9 interface 226 has no altsetting 0
[  868.401606][ T6647] usb 1-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=dc.fd
[  868.406075][ T6647] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  868.409708][ T6647] usb 1-1: Product: syz
[  868.411507][ T6647] usb 1-1: Manufacturer: syz
[  868.414794][ T6647] usb 1-1: SerialNumber: syz
[  868.630216][ T6647] mdc800 1-1:9.226: probe fails -> wrong Interface
[  868.634833][ T6647] usb 1-1: USB disconnect, device number 64
[  868.804288][T27762] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8433'.
[  869.525670][T27790] AppArmor: change_hat: Invalid input, NULL hat and NULL magic
[  869.531515][T27788] loop0: detected capacity change from 0 to 4096
[  869.582762][   T33] kauditd_printk_skb: 388 callbacks suppressed
[  869.582773][   T33] audit: type=1800 audit(2000000626.998:783): pid=27788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.8442" name="file1" dev="loop0" ino=33 res=0 errno=0
[  869.770934][T27797] loop8: detected capacity change from 0 to 2048
[  869.791985][T27797] UDF-fs: error (device loop8): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  869.809202][T27797] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  869.848237][   T33] audit: type=1800 audit(2000000627.258:784): pid=27797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.8445" name=".log" dev="loop8" ino=1368 res=0 errno=0
[  871.487707][T27851] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  871.499841][T27851] binder: 27847:27851 ioctl 400c620e 2000000003c0 returned -22
[  871.535542][T27851] loop8: detected capacity change from 0 to 512
[  871.552753][T27851] ext4: Unknown parameter 'appraise_type'
[  871.781821][T27855] loop6: detected capacity change from 0 to 4096
[  871.796942][T27855] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024)
[  871.814301][T27855] NILFS (loop6): mounting unchecked fs
[  871.826557][ T5619] udevd[5619]: incorrect nilfs2 checksum on /dev/loop6
[  871.832345][T27855] NILFS (loop6): recovery required for readonly filesystem
[  871.847512][T27855] NILFS (loop6): write access will be enabled during recovery
[  871.868039][ T5619] udevd[5619]: incorrect nilfs2 checksum on /dev/loop6
[  871.943487][T27855] NILFS (loop6): recovery complete
[  872.211011][T27866] ieee802154 phy0 wpan0: encryption failed: -22
[  872.390908][T27870] tipc: Enabling of bearer <ud`:s> rejected, media not registered
[  872.502488][T27879] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.8472'.
[  872.744491][T27896] loop8: detected capacity change from 0 to 8
[  872.761507][T27896] SQUASHFS error: Unknown inode type 0 in squashfs_iget!
[  872.986946][T27911] loop8: detected capacity change from 0 to 2048
[  872.996406][T27911] UDF-fs: error (device loop8): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  873.005393][T27911] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found
[  873.011970][T27911] UDF-fs: Scanning with blocksize 512 failed
[  873.025392][T27911] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  873.104130][T27909] loop6: detected capacity change from 0 to 32768
[  873.108940][T27909] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.8486 (27909)
[  873.129007][T27909] BTRFS info (device loop6): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  873.132849][T27909] BTRFS info (device loop6): using crc32c checksum algorithm
[  873.173847][T27909] BTRFS info (device loop6): setting nodatasum
[  873.182861][T27909] BTRFS info (device loop6): setting nodatacow
[  873.194000][T27909] BTRFS info (device loop6): enabling ssd optimizations
[  873.206653][T27909] BTRFS info (device loop6): turning on flush-on-commit
[  873.219521][T27909] BTRFS info (device loop6): turning on async discard
[  873.226489][T27909] BTRFS info (device loop6): enabling free space tree
[  873.235912][   T33] audit: type=1400 audit(2000000630.648:785): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3A68617265645F436C65616E3A2020202020202020202030206B420A5368617265645F44697274793A2020202020202020203634206B420A507269766174655F436C65616E3A20202020202020202030206B420A507269766174655F44697274793A20202020202020202030206B420A5265666572656E6365643A20202020202020202020203634206B420A416E6F6E796D6F75733A2020202020202020202020202030206B420A4B534D3A2020202020202020202020202020202020202030206B420A4C617A79467265653A202020202020202020202020202030206B pid=27929 comm="syz.8.8488"
[  873.365719][T26328] BTRFS info (device loop6): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  873.737025][ T5677] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[  873.769577][   T24] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  873.888590][ T5677] usb 1-1: Using ep0 maxpacket: 32
[  873.898260][ T5677] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  873.906236][ T5677] usb 1-1: New USB device found, idVendor=0424, idProduct=c001, bcdDevice=aa.5f
[  873.910458][ T5677] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  873.913101][ T5677] usb 1-1: Product: syz
[  873.914649][ T5677] usb 1-1: Manufacturer: syz
[  873.916274][ T5677] usb 1-1: SerialNumber: syz
[  873.921818][ T5677] usb 1-1: config 0 descriptor??
[  873.929980][   T24] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  873.933950][   T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  873.941319][   T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  873.949792][   T24] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  873.959767][   T24] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  873.963584][   T24] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  873.966242][   T24] usb 9-1: Manufacturer: syz
[  873.973360][   T24] usb 9-1: config 0 descriptor??
[  874.051116][T27947] loop6: detected capacity change from 0 to 40427
[  874.087386][T27947] F2FS-fs (loop6): invalid crc value
[  874.120663][T27947] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  874.133935][T27947] F2FS-fs (loop6): Start checkpoint disabled!
[  874.140909][ T5690] usb 1-1: USB disconnect, device number 65
[  874.156771][T27947] F2FS-fs (loop6): f2fs_disable_checkpoint() finish, err:0
[  874.161918][T27947] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[  874.179149][T27947] syz.6.8496: attempt to access beyond end of device
[  874.179149][T27947] loop6: rw=2049, sector=77824, nr_sectors = 136 limit=40427
[  874.201568][ T4172] kworker/u10:5: attempt to access beyond end of device
[  874.201568][ T4172] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  874.212679][ T4172] CPU: 1 UID: 0 PID: 4172 Comm: kworker/u10:5 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  874.212722][ T4172] Tainted: [L]=SOFTLOCKUP
[  874.212727][ T4172] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  874.212736][ T4172] Workqueue: writeback wb_workfn (flush-7:6)
[  874.212759][ T4172] Call Trace:
[  874.212765][ T4172]  <TASK>
[  874.212772][ T4172]  dump_stack_lvl+0xe8/0x150
[  874.212790][ T4172]  f2fs_stop_checkpoint+0x3c7/0x590
[  874.212812][ T4172]  f2fs_write_end_io+0x1274/0x1740
[  874.212845][ T4172]  __submit_merged_bio+0x256/0x6a0
[  874.212866][ T4172]  __submit_merged_write_cond+0x3c9/0x4e0
[  874.212888][ T4172]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  874.212920][ T4172]  f2fs_write_data_pages+0x287e/0x34f0
[  874.212936][ T4172]  ? f2fs_build_free_nids+0xdc/0x1810
[  874.212976][ T4172]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  874.213001][ T4172]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  874.213040][ T4172]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  874.213098][ T4172]  ? __lock_acquire+0x6b5/0x2cf0
[  874.213124][ T4172]  ? f2fs_update_inode+0x13d9/0x2620
[  874.213140][ T4172]  ? __pfx_f2fs_inode_chksum_set+0x10/0x10
[  874.213154][ T4172]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  874.213172][ T4172]  do_writepages+0x32e/0x550
[  874.213193][ T4172]  ? reacquire_held_locks+0x104/0x190
[  874.213209][ T4172]  ? writeback_sb_inodes+0x463/0x19d0
[  874.213237][ T4172]  __writeback_single_inode+0x133/0x10e0
[  874.213255][ T4172]  ? do_raw_spin_unlock+0x4d/0x210
[  874.213277][ T4172]  writeback_sb_inodes+0x979/0x19d0
[  874.213291][ T4172]  ? __lock_acquire+0x6b5/0x2cf0
[  874.213327][ T4172]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  874.213342][ T4172]  ? do_raw_spin_lock+0x12b/0x2f0
[  874.213391][ T4172]  ? rcu_is_watching+0x15/0xb0
[  874.213415][ T4172]  wb_writeback+0x445/0xb00
[  874.213434][ T4172]  ? queue_io+0x1e1/0x470
[  874.213456][ T4172]  ? __pfx_wb_writeback+0x10/0x10
[  874.213470][ T4172]  ? do_raw_spin_lock+0x12b/0x2f0
[  874.213500][ T4172]  wb_workfn+0x3f8/0xf10
[  874.213513][ T4172]  ? __lock_acquire+0x6b5/0x2cf0
[  874.213525][ T4172]  ? look_up_lock_class+0x57/0x110
[  874.213553][ T4172]  ? __pfx_wb_workfn+0x10/0x10
[  874.213569][ T4172]  ? do_raw_spin_lock+0x12b/0x2f0
[  874.213585][ T4172]  ? lock_acquire+0x106/0x350
[  874.213601][ T4172]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  874.213621][ T4172]  ? process_scheduled_works+0xa70/0x1860
[  874.213636][ T4172]  ? process_scheduled_works+0xa70/0x1860
[  874.213653][ T4172]  ? process_scheduled_works+0xa70/0x1860
[  874.213664][ T4172]  ? process_scheduled_works+0xa70/0x1860
[  874.213679][ T4172]  process_scheduled_works+0xb5d/0x1860
[  874.213714][ T4172]  ? __pfx_process_scheduled_works+0x10/0x10
[  874.213733][ T4172]  ? assign_work+0x3d5/0x5e0
[  874.213750][ T4172]  worker_thread+0xa53/0xfc0
[  874.213783][ T4172]  kthread+0x388/0x470
[  874.213801][ T4172]  ? __pfx_worker_thread+0x10/0x10
[  874.213814][ T4172]  ? __pfx_kthread+0x10/0x10
[  874.213832][ T4172]  ret_from_fork+0x514/0xb70
[  874.213847][ T4172]  ? __pfx_ret_from_fork+0x10/0x10
[  874.213860][ T4172]  ? __switch_to+0xc79/0x1410
[  874.213902][ T4172]  ? __pfx_kthread+0x10/0x10
[  874.213918][ T4172]  ret_from_fork_asm+0x1a/0x30
[  874.213946][ T4172]  </TASK>
[  874.216248][ T4172] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  874.405903][   T24] appleir 0003:05AC:8243.0025: unknown main item tag 0x0
[  874.423121][   T24] appleir 0003:05AC:8243.0025: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.8-1/input0
[  874.678251][T22863] usb 9-1: USB disconnect, device number 7
[  874.873287][T27963] loop6: detected capacity change from 0 to 2048
[  874.893259][T27964] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  874.906383][T27963] syz.6.8503: attempt to access beyond end of device
[  874.906383][T27963] loop6: rw=0, sector=2198922592328, nr_sectors = 2 limit=2048
[  874.915839][T27963] NILFS (loop6): I/O error reading meta-data file (ino=6, block-offset=1)
[  875.005220][T27970] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1)
[  875.023250][T27970] bond1 (unregistering): Released all slaves
[  875.202655][T27978] input: syz1 as /devices/virtual/input/input37
[  875.205562][T27976] loop0: detected capacity change from 0 to 8192
[  875.261109][ T1378] ieee802154 phy0 wpan0: encryption failed: -22
[  875.263562][ T1378] ieee802154 phy1 wpan1: encryption failed: -22
[  875.326437][T27983] loop8: detected capacity change from 0 to 2048
[  875.342156][T27983] UDF-fs: error (device loop8): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  875.350003][T27983] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found
[  875.355330][T27983] UDF-fs: Scanning with blocksize 512 failed
[  875.375128][T27983] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  875.848711][ T5690] usb 1-1: new high-speed USB device number 66 using dummy_hcd
[  876.011375][ T5690] usb 1-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55
[  876.016888][ T5690] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  876.021615][ T5690] usb 1-1: Product: syz
[  876.024025][ T5690] usb 1-1: Manufacturer: syz
[  876.036226][ T5690] usb 1-1: SerialNumber: syz
[  876.044897][ T5690] usb 1-1: config 0 descriptor??
[  876.056452][ T5690] gspca_main: sonixb-2.14.0 probing 0c45:6005
[  876.493303][   T10] usb 1-1: USB disconnect, device number 66
[  876.868173][T28019] CUSE: info not properly terminated
[  878.789273][T28066] loop6: detected capacity change from 0 to 128
[  878.801561][T28066] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  878.816546][T28066] ext4 filesystem being mounted at /167/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  879.062180][   T33] audit: type=1800 audit(2000000636.458:786): pid=28066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.8546" name="file2" dev="loop6" ino=13 res=0 errno=0
[  879.073125][T26328] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  879.130672][T28076] loop8: detected capacity change from 0 to 8
[  879.262347][T28079] loop6: detected capacity change from 0 to 4096
[  879.267528][T28079] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  879.295010][T28079] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  879.312985][T28079] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  879.343510][T26328] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  879.364028][T28084] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  879.632905][T28090] 8021q: adding VLAN 0 to HW filter on device bond1
[  879.636545][T28090] bond1: entered promiscuous mode
[  879.641405][T28090] team0: Port device bond1 added
[  879.729078][ T5677] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  879.881126][ T5677] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  879.886113][ T5677] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  879.891717][ T5677] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  879.895612][ T5677] usb 9-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  879.899128][ T5677] usb 9-1: Manufacturer: syz
[  879.903807][ T5677] usb 9-1: config 0 descriptor??
[  879.968584][ T6647] usb 1-1: new high-speed USB device number 67 using dummy_hcd
[  880.118611][ T6647] usb 1-1: Using ep0 maxpacket: 8
[  880.122930][ T6647] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  880.125506][ T6647] usb 1-1: config 0 has no interface number 0
[  880.129862][ T6647] usb 1-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f
[  880.133389][ T6647] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  880.136667][ T6647] usb 1-1: Product: syz
[  880.140434][ T6647] usb 1-1: Manufacturer: syz
[  880.143380][ T6647] usb 1-1: SerialNumber: syz
[  880.148341][ T6647] usb 1-1: config 0 descriptor??
[  880.156795][ T6647] usb 1-1: selecting invalid altsetting 2
[  880.160724][ T6647] i2c-cp2615 1-1:0.1: probe with driver i2c-cp2615 failed with error -22
[  880.364698][ T5690] usb 1-1: USB disconnect, device number 67
[  880.517514][ T5677] uclogic 0003:256C:006D.0026: failed retrieving Huion firmware version: -71
[  880.521494][ T5677] uclogic 0003:256C:006D.0026: failed probing parameters: -71
[  880.525303][ T5677] uclogic 0003:256C:006D.0026: probe with driver uclogic failed with error -71
[  880.532959][ T5677] usb 9-1: USB disconnect, device number 8
[  880.903326][T28097] loop0: detected capacity change from 0 to 512
[  880.922149][T28097] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #15: comm syz.0.8558: corrupted in-inode xattr: e_value size too large
[  880.928392][T28097] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  880.936543][T28097] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.8558: couldn't read orphan inode 15 (err -117)
[  880.940336][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  880.940357][    C0] EXT4-fs (loop0): initial error at time 2000000638: ext4_iget_extra_inode:5128: inode 15
[  880.940379][    C0] EXT4-fs (loop0): last error at time 2000000638: ext4_iget_extra_inode:5128: inode 15
[  880.956349][T28097] loop0: lost filesystem error report for type 5 error -117
[  880.958047][T28097] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  880.989697][T22649] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  881.103491][T28102] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8559'.
[  881.115339][T28104] program syz.8.8561 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  881.248093][T28112] netlink: 'syz.8.8565': attribute type 1 has an invalid length.
[  881.253841][T28112] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  881.364315][T28108] loop0: detected capacity change from 0 to 32768
[  881.368685][T28108] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.8562 (28108)
[  881.930955][T28116] loop8: detected capacity change from 0 to 131072
[  881.936422][T28116] F2FS-fs (loop8): invalid crc value
[  881.953915][T28108] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  881.975236][T28108] BTRFS info (device loop0): using sha256 checksum algorithm
[  881.990954][T28116] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  881.999947][T28116] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4
[  882.135650][T28108] BTRFS info (device loop0): enabling ssd optimizations
[  882.144067][T28108] BTRFS info (device loop0): turning on async discard
[  882.147032][T28108] BTRFS info (device loop0): enabling free space tree
[  882.162801][T28108] BTRFS error (device loop0): balance: mixed groups data and metadata options must be the same
[  882.213726][T22649] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  882.568270][T28140] loop0: detected capacity change from 0 to 1024
[  882.603335][T28140] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  882.618563][T28140] ext4 filesystem being mounted at /671/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  882.788580][T22649] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  883.042647][T28154] loop8: detected capacity change from 0 to 32768
[  883.053389][T28154] XFS (loop8): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  883.068273][T28154] XFS (loop8): Ending clean mount
[  883.084157][T27384] XFS (loop8): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  883.231096][   T10] usb 1-1: new high-speed USB device number 68 using dummy_hcd
[  883.389713][   T10] usb 1-1: Using ep0 maxpacket: 8
[  883.409166][   T10] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  883.419078][   T10] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  883.433653][   T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  883.453980][   T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  883.468122][   T10] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  883.482174][   T10] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  883.486478][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  883.573224][   T33] audit: type=1326 audit(2000000640.988:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28193 comm="syz.8.8589" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17d819cdd9 code=0x7ffc0000
[  883.580819][   T33] audit: type=1326 audit(2000000640.988:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28193 comm="syz.8.8589" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17d819cdd9 code=0x7ffc0000
[  883.594471][   T33] audit: type=1326 audit(2000000641.008:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28193 comm="syz.8.8589" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17d819cdd9 code=0x7ffc0000
[  883.603305][   T33] audit: type=1326 audit(2000000641.008:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28193 comm="syz.8.8589" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17d819cdd9 code=0x7ffc0000
[  883.611102][   T33] audit: type=1326 audit(2000000641.008:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28193 comm="syz.8.8589" exe="/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0x7f17d819cdd9 code=0x7ffc0000
[  883.618790][   T33] audit: type=1326 audit(2000000641.008:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28193 comm="syz.8.8589" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17d819cdd9 code=0x7ffc0000
[  883.625918][   T33] audit: type=1326 audit(2000000641.008:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28193 comm="syz.8.8589" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17d819cdd9 code=0x7ffc0000
[  883.634560][   T33] audit: type=1326 audit(2000000641.008:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28193 comm="syz.8.8589" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f17d819cdd9 code=0x7ffc0000
[  883.641444][   T33] audit: type=1326 audit(2000000641.008:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28193 comm="syz.8.8589" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f17d819cdd9 code=0x7ffc0000
[  883.706224][   T10] usb 1-1: usb_control_msg returned -32
[  883.708100][   T10] usbtmc 1-1:16.0: can't read capabilities
[  883.723927][T28198] loop8: detected capacity change from 0 to 2048
[  883.745031][T28198] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  883.761485][T28198] EXT4-fs error (device loop8): ext4_find_extent:904: inode #2: comm syz.8.8591: inode has invalid extent depth: 7
[  883.791369][T27384] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  884.063893][T28205] usbtmc 1-1:16.0: stb usb_control_msg returned -32
[  884.072325][   T24] usb 1-1: USB disconnect, device number 68
[  884.829265][T28207] loop6: detected capacity change from 0 to 32768
[  884.919659][T28207] ocfs2: Slot 0 on device (7,6) was already allocated to this node!
[  884.941516][T28207] JBD2: Ignoring recovery information on journal
[  885.011537][T28207] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  885.151027][T28233] loop8: detected capacity change from 0 to 24
[  885.156311][T28233] MTD: Attempt to mount non-MTD device "/dev/loop8"
[  885.160433][T28233] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  885.429156][T26328] ocfs2: Unmounting device (7,6) on (node local)
[  885.680163][T28244] loop8: detected capacity change from 0 to 128
[  885.693831][T28244] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  885.716825][T28244] hpfs: filesystem error: improperly stopped
[  885.724801][T28244] hpfs: You really don't want any checks? You are crazy...
[  885.731959][T28244] hpfs: hpfs_map_sector(): read error
[  885.736257][T28244] hpfs: code page support is disabled
[  885.745317][T28244] hpfs: hpfs_map_4sectors(): unaligned read
[  885.752724][T28244] hpfs: hpfs_map_4sectors(): unaligned read
[  885.759698][T28244] hpfs: filesystem error: unable to find root dir
[  887.217067][T28261] bridge0: port 2(bridge_slave_1) entered disabled state
[  887.566514][T28261] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  887.997971][ T8946] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  888.014088][ T8946] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  888.029923][ T8946] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  888.039479][ T8946] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  888.123682][T28274] loop8: detected capacity change from 0 to 8192
[  888.263131][T28287] netlink: 'syz.0.8623': attribute type 6 has an invalid length.
[  888.440236][T28300] loop8: detected capacity change from 0 to 256
[  888.447027][T28300] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x52c1951d, utbl_chksum : 0xe619d30d)
[  888.464858][T28302] loop0: detected capacity change from 0 to 256
[  888.471519][T28302] exfat: Deprecated parameter 'utf8'
[  888.476588][T28302] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d)
[  888.575101][T28306] loop0: detected capacity change from 0 to 512
[  888.585437][T28306] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  888.592955][T28306] EXT4-fs (loop0): orphan cleanup on readonly fs
[  888.599225][T28306] EXT4-fs warning (device loop0): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  888.612484][T28306] EXT4-fs (loop0): Cannot turn on quotas: error -22
[  888.621594][T28306] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2972: inode #16: comm syz.0.8633: corrupted xattr block 31: invalid header
[  888.638643][T28306] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  888.639029][T28306] EXT4-fs (loop0): Remounting filesystem read-only
[  888.644629][T28306] EXT4-fs warning (device loop0): ext4_evict_inode:287: xattr delete (err -117)
[  888.647581][T28306] EXT4-fs (loop0): 1 orphan inode deleted
[  888.649815][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  888.649830][    C1] EXT4-fs (loop0): initial error at time 2000000646: ext4_xattr_delete_inode:2972: inode 16
[  888.649852][    C1] EXT4-fs (loop0): last error at time 2000000646: ext4_xattr_delete_inode:2972: inode 16
[  888.662539][T28306] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  888.688045][T22649] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  888.821806][T28304] loop8: detected capacity change from 0 to 32768
[  889.653648][T28321] loop8: detected capacity change from 0 to 32768
[  889.656692][T28321] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.8637 (28321)
[  889.667281][T28321] BTRFS info (device loop8): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  889.670835][T28321] BTRFS info (device loop8): using blake2b checksum algorithm
[  889.701205][T28321] BTRFS info (device loop8): enabling ssd optimizations
[  889.703979][T28321] BTRFS info (device loop8): turning on async discard
[  889.706188][T28321] BTRFS info (device loop8): enabling free space tree
[  889.708417][T28321] BTRFS info (device loop8): use zstd compression, level 3
[  889.828024][T27384] BTRFS info (device loop8): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  890.307255][T28343] loop8: detected capacity change from 0 to 32768
[  890.315330][T28343] jfs_mount: Mount Failure: superblock is corrupt!
[  890.321694][T28343] Mount JFS Failure: -22
[  890.325853][T28343] jfs_mount failed w/return code = -22
[  890.373623][T28349] loop8: detected capacity change from 0 to 512
[  890.388187][T28349] EXT4-fs error (device loop8): ext4_xattr_inode_iget:437: comm syz.8.8645: Parent and EA inode have the same ino 15
[  890.398103][T28349] loop8: lost filesystem error report for type 5 error -117
[  890.398509][    C1] EXT4-fs (loop8): error count since last fsck: 1
[  890.399731][ T6647] usb 1-1: new full-speed USB device number 69 using dummy_hcd
[  890.400975][    C1] EXT4-fs (loop8): initial error at time 2000000647: ext4_xattr_inode_iget:437
[  890.409566][    C1] EXT4-fs (loop8): last error at time 2000000647: ext4_xattr_inode_iget:437
[  890.415635][T28349] EXT4-fs error (device loop8): ext4_xattr_inode_iget:437: comm syz.8.8645: Parent and EA inode have the same ino 15
[  890.428651][T28349] loop8: lost filesystem error report for type 5 error -117
[  890.429550][T28349] EXT4-fs (loop8): 1 orphan inode deleted
[  890.439341][T28349] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  890.501683][T27384] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  890.552514][ T6647] usb 1-1: config 0 has an invalid interface number: 255 but max is 8
[  890.556116][ T6647] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  890.565974][ T6647] usb 1-1: config 0 has no interface number 0
[  890.573147][ T6647] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  890.582686][ T6647] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  890.591408][ T6647] usb 1-1: config 0 interface 255 has no altsetting 0
[  890.598959][ T6647] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64
[  890.608902][ T6647] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  890.612273][ T6647] usb 1-1: Product: syz
[  890.615615][ T6647] usb 1-1: Manufacturer: syz
[  890.624285][ T6647] usb 1-1: SerialNumber: syz
[  890.643992][ T6647] usb 1-1: config 0 descriptor??
[  890.894577][ T6647] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state.
[  890.934896][ T6647] pctv452e: pctv452e_power_ctrl: 1
[  890.934896][ T6647] 
[  890.943497][ T6647] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22
[  890.943497][ T6647] 
[  890.958764][ T6647] dvb-usb: bulk message failed: -22 (5/0)
[  890.965259][ T6647] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  891.310968][ T6647] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19)
[  891.322737][ T6647] usb 1-1: USB disconnect, device number 69
[  891.620538][T28376] loop8: detected capacity change from 0 to 4096
[  891.633650][T28376] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512).
[  891.863807][T28376] ntfs3(loop8): ino=19, mi_enum_attr
[  891.866008][T28376] ntfs3(loop8): Mark volume as dirty due to NTFS errors
[  891.899772][T22654] Bluetooth: hci0: command tx timeout
[  891.946179][   T33] audit: type=1800 audit(2000000649.358:796): pid=28376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.8655" name="file1" dev="loop8" ino=33 res=0 errno=0
[  891.948252][T28378] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8656'.
[  892.764687][T28395] loop6: detected capacity change from 0 to 164
[  893.131114][T28409] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8666'.
[  893.197920][T28407] loop8: detected capacity change from 0 to 32768
[  893.227768][T28407] JBD2: Ignoring recovery information on journal
[  893.255261][T28407] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  893.410394][T27384] ocfs2: Unmounting device (7,8) on (node local)
[  894.124341][T28424] loop6: detected capacity change from 0 to 1024
[  894.142026][T28424] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  894.151767][T28424] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  894.162097][T28426] loop0: detected capacity change from 0 to 128
[  894.172224][T28424] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  894.177759][T28424] EXT4-fs (loop6): orphan cleanup on readonly fs
[  894.183461][T28424] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #3: block 3: comm syz.6.8675: lblock 3 mapped to illegal pblock 3 (length 1)
[  894.191887][T28424] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  894.195503][T28424] Quota error (device loop6): write_blk: dquota write failed
[  894.199292][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  894.199310][    C1] EXT4-fs (loop6): initial error at time 2000000651: ext4_map_blocks:833: inode 3: block 3
[  894.199334][    C1] EXT4-fs (loop6): last error at time 2000000651: ext4_map_blocks:833: inode 3: block 3
[  894.244469][T28424] Quota error (device loop6): find_free_dqentry: Can't write quota data block 3
[  894.254868][T28424] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota
[  894.265065][T28424] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.8675: Failed to acquire dquot type 0
[  894.271444][T28424] loop6: lost filesystem error report for type 5 error -117
[  894.271986][T28424] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 3: comm syz.6.8675: lblock 3 mapped to illegal pblock 3 (length 1)
[  894.283998][T28424] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  894.284323][T28424] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota
[  894.292383][T28424] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.8675: Failed to acquire dquot type 0
[  894.297705][T28424] loop6: lost filesystem error report for type 5 error -117
[  894.303523][T28424] EXT4-fs error (device loop6): ext4_free_blocks:6718: comm syz.6.8675: Freeing blocks not in datazone - block = 0, count = 4096
[  894.310775][T28424] loop6: lost filesystem error report for type 5 error -117
[  894.311423][T28424] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 3: comm syz.6.8675: lblock 3 mapped to illegal pblock 3 (length 1)
[  894.318153][T28424] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  894.356649][T28424] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota
[  894.366012][T28424] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.8675: Failed to acquire dquot type 0
[  894.370959][T28424] loop6: lost filesystem error report for type 5 error -117
[  894.371415][T28424] EXT4-fs (loop6): 1 orphan inode deleted
[  894.384853][T28424] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  894.424315][T26328] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  894.501792][T28435] loop6: detected capacity change from 0 to 128
[  894.528714][T28268] usb 1-1: new high-speed USB device number 70 using dummy_hcd
[  894.529803][T28435] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  894.539532][T28439] loop8: detected capacity change from 0 to 764
[  894.540853][T28435] ext4 filesystem being mounted at /199/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  894.543845][T28439] iso9660: Unknown parameter 'h#5M[X+|*ۋ19:X}o2i\^1V*"'
[  894.623348][T26328] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  894.681041][T28268] usb 1-1: Using ep0 maxpacket: 8
[  894.686728][T28268] usb 1-1: config 0 has an invalid interface number: 31 but max is 0
[  894.692392][T28268] usb 1-1: config 0 has no interface number 0
[  894.708121][T28268] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  894.719451][T28268] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  894.722053][T28268] usb 1-1: Product: syz
[  894.725002][T28268] usb 1-1: Manufacturer: syz
[  894.728070][T28268] usb 1-1: SerialNumber: syz
[  894.734153][T28268] usb 1-1: config 0 descriptor??
[  894.748168][T28444] loop6: detected capacity change from 0 to 4096
[  894.826765][   T33] audit: type=1800 audit(2000000652.238:797): pid=28444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.8682" name="file1" dev="loop6" ino=33 res=0 errno=0
[  894.951916][T28268] uvcvideo 1-1:0.31: Found UVC 0.04 device syz (046d:08c3)
[  894.957721][T28268] uvcvideo 1-1:0.31: No valid video chain found.
[  894.966326][T28268] usb 1-1: USB disconnect, device number 70
[  896.358984][T28484] loop8: detected capacity change from 0 to 1024
[  896.371342][T28484] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  896.385322][T28484] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  896.400485][T28484] jbd2_journal_init_inode: Cannot locate journal superblock
[  896.407238][T28484] EXT4-fs (loop8): Could not load journal inode
[  896.455491][T28486] netlink: 'syz.6.8701': attribute type 39 has an invalid length.
[  897.083306][T28504] "syz.8.8710" (28504) uses obsolete ecb(arc4) skcipher
[  897.250765][T28498] loop0: detected capacity change from 0 to 32768
[  897.261864][T28498] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.8707 (28498)
[  897.290269][T28498] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  897.299835][T28498] BTRFS info (device loop0): using sha256 checksum algorithm
[  897.374220][T28498] BTRFS info (device loop0): enabling ssd optimizations
[  897.381358][T28498] BTRFS info (device loop0): turning on async discard
[  897.388997][T28498] BTRFS info (device loop0): enabling free space tree
[  897.393734][T28538] xt_recent: hitcount (4194304) is larger than allowed maximum (65535)
[  897.397025][T28498] BTRFS info (device loop0): enabling auto defrag
[  897.407197][T28498] BTRFS info (device loop0): max_inline set to 4096
[  897.579635][T28547] Bluetooth: MGMT ver 1.23
[  897.672548][T22649] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  897.703906][T28548] loop6: detected capacity change from 0 to 512
[  897.730638][T28548] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  897.735287][T28551] loop8: detected capacity change from 0 to 8192
[  898.001255][T28548] EXT4-fs (loop6): 1 truncate cleaned up
[  898.008344][T28548] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  898.124980][T26328] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  898.211626][T28561] tipc: Started in network mode
[  898.214203][T28561] tipc: Node identity 4, cluster identity 4711
[  898.216901][T28561] tipc: Node number set to 4
[  898.555923][T28571] sg_write: data in/out 418781/354 bytes for SCSI command 0x0-- guessing data in;
[  898.555923][T28571]    program syz.0.8730 not setting count and/or reply_len properly
[  898.629380][T28567] loop6: detected capacity change from 0 to 32768
[  898.632925][T28567] btrfs: Deprecated parameter 'usebackuproot'
[  898.635403][T28567] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  898.639324][T28567] btrfs: Deprecated parameter 'usebackuproot'
[  898.641824][T28567] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  898.659091][T28567] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.8726 (28567)
[  898.704551][T28567] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  898.708239][T28567] BTRFS info (device loop6): using crc32c checksum algorithm
[  898.841339][T22654] Bluetooth: hci4: unexpected event for opcode 0x0c26
[  899.072560][T14581] BTRFS warning (device loop6): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  899.104489][T28567] BTRFS error (device loop6): failed to load root extent
[  899.107544][T28567] BTRFS warning (device loop6): try to load backup roots slot 1
[  899.111664][ T1108] BTRFS warning (device loop6): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  899.148590][T28567] BTRFS warning (device loop6): couldn't read tree root
[  899.151491][T28567] BTRFS warning (device loop6): try to load backup roots slot 2
[  899.160465][T14581] BTRFS error (device loop6): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  899.168203][T28567] BTRFS warning (device loop6): couldn't read tree root
[  899.171302][T28567] BTRFS warning (device loop6): try to load backup roots slot 3
[  899.184670][T28567] BTRFS info (device loop6): rebuilding free space tree
[  899.211114][T28567] BTRFS info (device loop6): checking UUID tree
[  899.215599][T28567] BTRFS info (device loop6): enabling ssd optimizations
[  899.218636][T28567] BTRFS info (device loop6): turning on async discard
[  899.221423][T28567] BTRFS info (device loop6): enabling free space tree
[  899.224200][T28567] BTRFS info (device loop6): force clearing of disk cache
[  899.227091][T28567] BTRFS info (device loop6): enabling auto defrag
[  899.230057][T28567] BTRFS info (device loop6): trying to use backup root at mount time
[  899.233345][T28567] BTRFS info (device loop6): use zstd compression, level 3
[  899.334476][T26328] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  899.354354][T28592] loop8: detected capacity change from 0 to 32768
[  899.444613][T28592] XFS (loop8): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  899.492905][T28592] XFS (loop8): Ending clean mount
[  899.811558][T27384] XFS (loop8): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  900.548068][   T33] audit: type=1326 audit(2000000657.948:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28628 comm="syz.6.8745" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d31f9cdd9 code=0x7ffc0000
[  900.556971][   T33] audit: type=1326 audit(2000000657.948:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28628 comm="syz.6.8745" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d31f9cdd9 code=0x7ffc0000
[  900.589409][   T33] audit: type=1326 audit(2000000657.948:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28628 comm="syz.6.8745" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2d31f9cdd9 code=0x7ffc0000
[  900.747095][   T33] audit: type=1326 audit(2000000657.958:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28628 comm="syz.6.8745" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d31f9cdd9 code=0x7ffc0000
[  900.764294][   T33] audit: type=1326 audit(2000000657.958:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28628 comm="syz.6.8745" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d31f9cdd9 code=0x7ffc0000
[  900.844331][   T33] audit: type=1326 audit(2000000657.958:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28628 comm="syz.6.8745" exe="/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f2d31f9cdd9 code=0x7ffc0000
[  900.858598][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  900.859382][   T33] audit: type=1326 audit(2000000657.958:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28628 comm="syz.6.8745" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d31f9cdd9 code=0x7ffc0000
[  900.871370][   T33] audit: type=1326 audit(2000000657.958:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28628 comm="syz.6.8745" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d31f9cdd9 code=0x7ffc0000
[  900.900458][   T33] audit: type=1326 audit(2000000657.958:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28628 comm="syz.6.8745" exe="/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f2d31f9cdd9 code=0x7ffc0000
[  900.913567][   T33] audit: type=1326 audit(2000000658.178:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28628 comm="syz.6.8745" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d31f9cdd9 code=0x7ffc0000
[  901.196531][T28652] loop0: detected capacity change from 0 to 128
[  901.201811][T28652] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  901.206634][T28652] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  901.312322][T28662] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8759'.
[  901.890566][T28677] loop0: detected capacity change from 0 to 256
[  901.899996][T28677] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012c80, chksum : 0x8ff561f5, utbl_chksum : 0xe619d30d)
[  901.913786][T28677] exFAT-fs (loop0): start_clu is invalid cluster(0xffffffff)
[  901.930078][T28677] exfat: Unknown parameter ''
[  902.004428][T28681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8766'.
[  902.007278][T28681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8766'.
[  902.109842][T28687] loop0: detected capacity change from 0 to 512
[  902.129781][T28687] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  902.147877][T28687] ext4 filesystem being mounted at /732/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  902.196208][T22649] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  902.283853][T28699] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8774'.
[  902.312603][T28699] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8774'.
[  902.415708][T28706] loop0: detected capacity change from 0 to 256
[  902.419477][T28706] exfat: Deprecated parameter 'namecase'
[  902.426740][T28706] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011e8b, chksum : 0xf0cee8ef, utbl_chksum : 0xe619d30d)
[  902.511139][T28708] netlink: 76 bytes leftover after parsing attributes in process `syz.0.8778'.
[  902.514535][T28708] nbd: must specify at least one socket
[  902.541698][T28710] xt_hashlimit: size too large, truncated to 1048576
[  902.628574][T28268] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  902.789175][T28268] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  902.796655][T28268] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  902.802043][T28268] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  902.807347][T28268] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  902.811494][T28268] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  902.832622][T28268] usb 9-1: config 0 descriptor??
[  902.928176][T28716] loop0: detected capacity change from 0 to 1024
[  903.040796][T28718] xt_hashlimit: size too large, truncated to 1048576
[  903.257521][T28268] plantronics 0003:047F:FFFF.0027: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0
[  903.438674][   T31] usb 1-1: new high-speed USB device number 71 using dummy_hcd
[  903.594349][   T31] usb 1-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5
[  903.598194][   T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  903.602353][   T31] usb 1-1: Product: syz
[  903.604214][   T31] usb 1-1: Manufacturer: syz
[  903.606195][   T31] usb 1-1: SerialNumber: syz
[  903.610772][   T31] usb 1-1: config 0 descriptor??
[  903.616687][   T31] gspca_main: sq905c-2.14.0 probing 2770:9052
[  903.862416][T22863] usb 9-1: USB disconnect, device number 9
[  904.426843][T28729] tmpfs: Bad value for 'grpquota_inode_hardlimit'
[  904.521797][   T31] gspca_sq905c: sq905c_command: usb_control_msg failed (-110)
[  904.530836][   T31] sq905c 1-1:0.0: probe with driver sq905c failed with error -110
[  904.663962][T28744] loop6: detected capacity change from 0 to 16
[  904.672872][T28744] erofs (device loop6): mounted with root inode @ nid 36.
[  904.681951][T28744] syz.6.8793: attempt to access beyond end of device
[  904.681951][T28744] loop6: rw=524288, sector=12296, nr_sectors = 8 limit=16
[  904.691007][T28744] syz.6.8793: attempt to access beyond end of device
[  904.691007][T28744] loop6: rw=524288, sector=1056, nr_sectors = 16 limit=16
[  904.698976][T28744] syz.6.8793: attempt to access beyond end of device
[  904.698976][T28744] loop6: rw=0, sector=12296, nr_sectors = 8 limit=16
[  904.704752][T28744] erofs (device loop6): read error -5 @ 0 of nid 89
[  904.761712][T22863] usb 1-1: USB disconnect, device number 71
[  904.943851][T28752] loop0: detected capacity change from 0 to 4096
[  904.947903][T28752] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  904.965486][T28752] ntfs3(loop0): ino=3, ntfs_set_state failed, -22.
[  904.967556][T28752] ntfs3(loop0): Failed to initialize $Extend/$Reparse.
[  905.005339][T25916] ntfs3(loop0): ino=3, ntfs3_write_inode failed, -22.
[  905.009167][T22649] ntfs3(loop0): ino=3, ntfs_set_state failed, -22.
[  905.011414][T22649] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  905.017889][T22649] ntfs3(loop0): ino=3, ntfs_set_state failed, -22.
[  905.040400][ T1108] ntfs3(loop0): ino=3, ntfs3_write_inode failed, -22.
[  905.355763][T28774] vcan0: tx address claim with dest, not broadcast
[  905.429143][   T31] usb 1-1: new high-speed USB device number 72 using dummy_hcd
[  905.631279][   T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  905.643803][   T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  905.661376][   T31] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  905.667622][   T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  905.671792][   T31] usb 1-1: SerialNumber: syz
[  905.954114][   T31] usb 1-1: invalid UAC_HEADER (v1)
[  906.087223][   T31] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22
[  906.093532][   T31] usb 1-1: USB disconnect, device number 72
[  906.117112][ T5619] udevd[5619]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  906.998801][   T31] usb 1-1: new high-speed USB device number 73 using dummy_hcd
[  907.160969][   T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  907.164426][   T31] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  907.167388][   T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  907.171971][   T31] usb 1-1: config 0 descriptor??
[  907.298634][T28268] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  907.389394][   T31] usbhid 1-1:0.0: can't add hid device: -71
[  907.393360][   T31] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  907.400721][   T31] usb 1-1: USB disconnect, device number 73
[  907.450078][T28268] usb 9-1: Using ep0 maxpacket: 16
[  907.458850][T28268] usb 9-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  907.466492][T28268] usb 9-1: config 0 interface 0 has no altsetting 0
[  907.468864][T28268] usb 9-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  907.471720][T28268] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  907.479591][T28268] usb 9-1: config 0 descriptor??
[  907.527727][T28812] loop0: detected capacity change from 0 to 1024
[  907.533318][T28812] EXT4-fs: Ignoring removed bh option
[  907.537232][T28812] EXT4-fs: Ignoring removed orlov option
[  907.547056][T28812] EXT4-fs (loop0): stripe (7) is not aligned with cluster size (4096), stripe is disabled
[  907.557324][T28812] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  907.562180][T28812] EXT4-fs (loop0): orphan cleanup on readonly fs
[  907.566207][T28812] EXT4-fs error (device loop0): __ext4_get_inode_loc:4885: comm syz.0.8826: Invalid inode table block 0 in block_group 0
[  907.571863][T28812] loop0: lost filesystem error report for type 5 error -117
[  907.572107][T28812] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6383: Corrupt filesystem
[  907.578796][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  907.578811][    C0] EXT4-fs (loop0): initial error at time 2000000664: __ext4_get_inode_loc:4885
[  907.578869][    C0] EXT4-fs (loop0): last error at time 2000000664: __ext4_get_inode_loc:4885
[  907.591829][T28812] loop0: lost filesystem error report for type 5 error -117
[  907.592060][T28812] EXT4-fs error (device loop0): ext4_quota_write:7423: inode #3: comm syz.0.8826: mark_inode_dirty error
[  907.602173][T28812] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  907.602416][T28812] __quota_error: 2 callbacks suppressed
[  907.602427][T28812] Quota error (device loop0): write_blk: dquota write failed
[  907.611751][T28812] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  907.615824][T28812] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.8826: Failed to acquire dquot type 0
[  907.620394][T28812] loop0: lost filesystem error report for type 5 error -117
[  907.620814][T28812] EXT4-fs error (device loop0): __ext4_get_inode_loc:4885: comm syz.0.8826: Invalid inode table block 0 in block_group 0
[  907.628731][T28812] loop0: lost filesystem error report for type 5 error -117
[  907.628966][T28812] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6383: Corrupt filesystem
[  907.635526][T28812] loop0: lost filesystem error report for type 5 error -117
[  907.639629][T28812] EXT4-fs error (device loop0): ext4_ext_truncate:4557: inode #15: comm syz.0.8826: mark_inode_dirty error
[  907.647075][T28812] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  907.647342][T28812] EXT4-fs error (device loop0): __ext4_get_inode_loc:4885: comm syz.0.8826: Invalid inode table block 0 in block_group 0
[  907.656320][T28812] loop0: lost filesystem error report for type 5 error -117
[  907.656558][T28812] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6383: Corrupt filesystem
[  907.665488][T28812] loop0: lost filesystem error report for type 5 error -117
[  907.667738][T28812] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem
[  907.672969][T28812] loop0: lost filesystem error report for type 5 error -117
[  907.673181][T28812] EXT4-fs error (device loop0): __ext4_get_inode_loc:4885: comm syz.0.8826: Invalid inode table block 0 in block_group 0
[  907.680401][T28812] loop0: lost filesystem error report for type 5 error -117
[  907.680562][T28812] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6383: Corrupt filesystem
[  907.686626][T28812] loop0: lost filesystem error report for type 5 error -117
[  907.688364][T28812] EXT4-fs error (device loop0): ext4_truncate:4690: inode #15: comm syz.0.8826: mark_inode_dirty error
[  907.694792][T28812] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  907.695013][T28812] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem
[  907.701002][T28812] EXT4-fs (loop0): 1 truncate cleaned up
[  907.703604][T28812] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  907.729397][T22649] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  907.884703][T28821] openvswitch: netlink: Tunnel attr 109 out of range max 16
[  907.927766][T28268] nzxt-smart2 0003:1E71:2009.0028: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.8-1/input0
[  908.158686][T22863] usb 1-1: new high-speed USB device number 74 using dummy_hcd
[  908.308675][T28268] usb 9-1: USB disconnect, device number 10
[  908.309786][T22863] usb 1-1: Using ep0 maxpacket: 32
[  908.325303][T22863] usb 1-1: config 0 has an invalid interface number: 12 but max is 0
[  908.330422][T22863] usb 1-1: config 0 has no interface number 0
[  908.333549][T22863] usb 1-1: config 0 interface 12 has no altsetting 0
[  908.341142][T22863] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  908.346454][T22863] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  908.350786][T22863] usb 1-1: Product: syz
[  908.352614][T22863] usb 1-1: Manufacturer: syz
[  908.354437][T22863] usb 1-1: SerialNumber: syz
[  908.358398][T22863] usb 1-1: config 0 descriptor??
[  908.977936][T22863] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  908.982089][T22863] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71
[  908.985215][T22863] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  908.988287][T22863] f81534 1-1:0.12: probe with driver f81534 failed with error -71
[  908.997470][T22863] usb 1-1: USB disconnect, device number 74
[  909.144756][T28829] loop8: detected capacity change from 0 to 32768
[  909.147770][T28829] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.8834 (28829)
[  909.156330][T28829] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  909.159867][T28829] BTRFS info (device loop8): using crc32c checksum algorithm
[  909.224907][T28829] BTRFS info (device loop8): enabling ssd optimizations
[  909.228103][T28829] BTRFS info (device loop8): turning on flush-on-commit
[  909.231154][T28829] BTRFS info (device loop8): enabling free space tree
[  909.233883][T28829] BTRFS info (device loop8): force zlib compression, level 3
[  909.236688][T28829] BTRFS info (device loop8): max_inline set to 4096
[  909.273258][T27384] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  909.563721][T28848] input: syz0 as /devices/virtual/input/input38
[  909.898680][T22654] Bluetooth: hci4: command 0x0406 tx timeout
[  909.979164][T28268] usb 9-1: new full-speed USB device number 11 using dummy_hcd
[  910.131669][T28268] usb 9-1: config 8 has an invalid interface number: 177 but max is 0
[  910.135180][T28268] usb 9-1: config 8 has no interface number 0
[  910.141833][T28268] usb 9-1: config 8 interface 177 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  910.157946][T28268] usb 9-1: config 8 interface 177 altsetting 9 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  910.163822][T28268] usb 9-1: config 8 interface 177 has no altsetting 0
[  910.166804][T28268] usb 9-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1
[  910.170539][T28268] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  910.177342][T28856] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  910.182729][T28856] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  910.194335][    C1] ir_toy 9-1:8.177: out urb status: -71
[  910.241324][T28859] netlink: 60 bytes leftover after parsing attributes in process `syz.6.8841'.
[  910.705018][T28268] ir_toy 9-1:8.177: could not write reset command: -110
[  910.710395][T28268] ir_toy 9-1:8.177: probe with driver ir_toy failed with error -110
[  910.710895][T28876] loop6: detected capacity change from 0 to 512
[  910.720485][T28876] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002]
[  910.724011][T28876] System zones: 1-12
[  910.726548][T28876] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.8849: corrupted in-inode xattr: e_value size too large
[  910.730918][T28268] usb 9-1: USB disconnect, device number 11
[  910.732552][T28876] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  910.736181][T28876] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.8849: couldn't read orphan inode 15 (err -117)
[  910.739890][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  910.739906][    C0] EXT4-fs (loop6): initial error at time 2000000668: ext4_iget_extra_inode:5128: inode 15
[  910.739928][    C0] EXT4-fs (loop6): last error at time 2000000668: ext4_iget_extra_inode:5128: inode 15
[  910.765853][T28876] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  911.843131][T26328] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  912.246846][T28900] loop6: detected capacity change from 0 to 4096
[  912.298918][T28900] ntfs3(loop6): Failed to initialize $Extend/$ObjId.
[  912.326786][T28900] ntfs3(loop6): ino=1e, "file1" attr_set_size_ex
[  912.330340][T28900] ntfs3(loop6): ino=1e, "file1" attr_set_size_ex
[  912.553239][T28909] loop6: detected capacity change from 0 to 1764
[  912.557146][T28909] iso9660: Bad value for 'gid'
[  912.566094][T28909] iso9660: Bad value for 'gid'
[  912.634505][T28911] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[  912.638847][T28911] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null.
[  912.642415][T28911] overlayfs: missing 'lowerdir'
[  912.962144][T28919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8868'.
[  913.031524][T28923] loop0: detected capacity change from 0 to 256
[  913.040713][T28923] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xcbfa8d46, utbl_chksum : 0xe619d30d)
[  913.047553][T28923] exFAT-fs (loop0): failed to load alloc-bitmap
[  913.050732][T28923] exFAT-fs (loop0): failed to recognize exfat type
[  913.674450][T28942] loop8: detected capacity change from 0 to 512
[  913.677302][T28942] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  913.695649][T28942] EXT4-fs (loop8): 1 truncate cleaned up
[  913.698813][T28942] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  913.709379][T28942] EXT4-fs error (device loop8): ext4_generic_delete_entry:2673: inode #2: block 13: comm syz.8.8877: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  913.716923][T28942] EXT4-fs (loop8): Remounting filesystem read-only
[  913.719641][T28942] EXT4-fs warning (device loop8): ext4_rename_delete:3739: inode #2: comm syz.8.8877: Deleting old file: nlink 5, error=-117
[  913.741050][T27384] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  914.418296][T28956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8883'.
[  914.427229][T28956] netlink: 65011 bytes leftover after parsing attributes in process `syz.0.8883'.
[  914.464459][T28960] loop0: detected capacity change from 0 to 2048
[  914.470154][T28960] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  914.473938][ T5619] udevd[5619]: incorrect nilfs2 checksum on /dev/loop0
[  914.482695][ T5619] udevd[5619]: incorrect nilfs2 checksum on /dev/loop0
[  914.487219][T28962] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  914.497633][T28960] NILFS error (device loop0): __nilfs_read_inode: invalid file type bits in mode 0177777 for inode 12
[  914.516987][T28965] binder: 28964:28965 ioctl c018620c 200000000100 returned -22
[  914.526899][T28960] Remounting filesystem read-only
[  914.763409][T28983] netlink: 'syz.8.8896': attribute type 1 has an invalid length.
[  914.802112][T28983] 8021q: adding VLAN 0 to HW filter on device bond1
[  914.855868][T28983] bond1: (slave geneve2): making interface the new active one
[  914.905105][T28983] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  915.001630][T28998] bridge0: entered allmulticast mode
[  915.045714][T29001] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  915.357605][T29019] loop0: detected capacity change from 0 to 512
[  915.363342][T29019] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  915.389905][T29019] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.8913: iget: bad i_size value: 38620345925642
[  915.394142][T29019] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  915.394409][T29019] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.8913: couldn't read orphan inode 15 (err -117)
[  915.401287][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  915.401305][    C0] EXT4-fs (loop0): initial error at time 2000000672: ext4_orphan_get:1397: inode 15
[  915.401324][    C0] EXT4-fs (loop0): last error at time 2000000672: ext4_orphan_get:1397: inode 15
[  915.419165][T29019] fserror_report: 2 callbacks suppressed
[  915.419181][T29019] loop0: lost filesystem error report for type 5 error -117
[  915.422671][T29019] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  915.454857][T22649] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  915.566711][T29002] loop8: detected capacity change from 0 to 131072
[  915.570170][T29002] xfs: Deprecated parameter 'ikeep'
[  915.571888][T29002] XFS: ikeep mount option is deprecated.
[  915.631797][T29002] XFS (loop8): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  915.702601][T29002] XFS (loop8): Starting recovery (logdev: internal)
[  915.733272][T29002] XFS (loop8): Ending recovery (logdev: internal)
[  915.796657][T27384] XFS (loop8): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  916.508580][T28271] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[  916.660413][T28271] usb 9-1: Using ep0 maxpacket: 32
[  916.675187][T28271] usb 9-1: config 0 has an invalid interface number: 12 but max is 0
[  916.684354][T28271] usb 9-1: config 0 has no interface number 0
[  916.688827][T28271] usb 9-1: config 0 interface 12 has no altsetting 0
[  916.698706][T28271] usb 9-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  916.707599][T28271] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  916.713492][T28271] usb 9-1: Product: syz
[  916.715659][T28271] usb 9-1: Manufacturer: syz
[  916.717894][T28271] usb 9-1: SerialNumber: syz
[  916.723882][T28271] usb 9-1: config 0 descriptor??
[  917.080453][ T6647] usb 1-1: new high-speed USB device number 75 using dummy_hcd
[  917.228760][ T6647] usb 1-1: Using ep0 maxpacket: 16
[  917.236866][ T6647] usb 1-1: config index 0 descriptor too short (expected 65, got 36)
[  917.240971][ T6647] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  917.245375][ T6647] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  917.249799][ T6647] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  917.254648][ T6647] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[  917.258300][ T6647] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  917.264347][ T6647] usb 1-1: config 0 descriptor??
[  917.274714][ T6647] pxrc 1-1:0.0: Could not find endpoint
[  917.277485][ T6647] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  917.341304][T28271] f81534 9-1:0.12: f81534_set_register: reg: 1003 data: 40 failed: -71
[  917.348652][T28271] f81534 9-1:0.12: f81534_find_config_idx: read failed: -71
[  917.358582][T28271] f81534 9-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  917.361650][T28271] f81534 9-1:0.12: probe with driver f81534 failed with error -71
[  917.375756][T28271] usb 9-1: USB disconnect, device number 12
[  917.466677][T29078] loop6: detected capacity change from 0 to 32768
[  917.480363][   T31] usb 1-1: USB disconnect, device number 75
[  918.939661][T25196] wlan1: Trigger new scan to find an IBSS to join
[  919.375599][T29131] loop8: detected capacity change from 0 to 64
[  919.402834][T29131] MINIX-fs: bad superblock or unable to read bitmaps
[  919.542307][T29136] netlink: 'syz.8.8962': attribute type 1 has an invalid length.
[  919.545689][T29136] netlink: 'syz.8.8962': attribute type 1 has an invalid length.
[  919.553572][T29136] netlink: 68 bytes leftover after parsing attributes in process `syz.8.8962'.
[  919.557583][T29136] netlink: 'syz.8.8962': attribute type 1 has an invalid length.
[  919.561351][T29136] netlink: 638 bytes leftover after parsing attributes in process `syz.8.8962'.
[  919.930194][T29143] netlink: 168 bytes leftover after parsing attributes in process `syz.8.8965'.
[  920.854070][T29155] loop6: detected capacity change from 0 to 16
[  920.902630][T29155] erofs (device loop6): mounted with root inode @ nid 36.
[  921.242849][T29163] loop8: detected capacity change from 0 to 512
[  921.301913][T29163] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.8973: invalid indirect mapped block 4294967295 (level 1)
[  921.307264][T29163] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  921.307927][T29163] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.8973: invalid indirect mapped block 4294967295 (level 1)
[  921.311215][    C1] EXT4-fs (loop8): error count since last fsck: 1
[  921.311228][    C1] EXT4-fs (loop8): initial error at time 2000000678: ext4_free_branches:1023: inode 11
[  921.311242][    C1] EXT4-fs (loop8): last error at time 2000000678: ext4_free_branches:1023: inode 11
[  921.334365][T29163] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  921.336358][T29163] EXT4-fs (loop8): 2 truncates cleaned up
[  921.364161][T29163] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  921.392721][T29163] EXT4-fs warning (device loop8): ext4_empty_dir:3094: inode #2: comm syz.8.8973: directory missing '.'
[  921.424615][T27384] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  921.432833][ T7909] kernel read not supported for file /rfkill (pid: 7909 comm: kworker/0:5)
[  921.811268][T29191] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.8985'.
[  921.901568][   T62] wlan1: Trigger new scan to find an IBSS to join
[  921.919942][T29178] loop8: detected capacity change from 0 to 32768
[  921.931870][T29178] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.8980 (29178)
[  921.944569][T29178] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  921.950185][T29178] BTRFS info (device loop8): using crc32c checksum algorithm
[  922.075934][T29178] BTRFS info (device loop8): setting nodatasum
[  922.095830][T29178] BTRFS info (device loop8): enabling ssd optimizations
[  922.104153][T29178] BTRFS info (device loop8): disabling tree log
[  922.114025][T29178] BTRFS info (device loop8): turning on async discard
[  922.128587][T29178] BTRFS info (device loop8): enabling free space tree
[  922.137056][T29178] BTRFS info (device loop8): enabling auto defrag
[  922.277954][T27384] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  922.431671][T29228] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8998'.
[  922.445371][T29228] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8998'.
[  922.461096][T29228] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8998'.
[  922.632888][T29230] netlink: 104 bytes leftover after parsing attributes in process `syz.0.8999'.
[  922.850831][T12668] wlan1: Creating new IBSS network, BSSID 8e:2b:69:20:f8:1a
[  923.599044][T29244] loop8: detected capacity change from 0 to 512
[  923.602229][T29244] EXT4-fs: journaled quota format not specified
[  923.801835][T29258] loop8: detected capacity change from 0 to 128
[  923.805345][T29258] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  924.782847][T29279] loop8: detected capacity change from 0 to 131072
[  924.812764][T29279] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  924.824101][T29279] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  924.830081][T29279] F2FS-fs (loop8): lookup inode (7) has corrupted xattr
[  925.629935][T29297] loop8: detected capacity change from 0 to 2048
[  925.660775][T29297] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  925.710262][T27384] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  926.416328][   T33] audit: type=1326 audit(2000000683.828:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29315 comm="syz.8.9029" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17d819cdd9 code=0x7ffc0000
[  926.441602][   T33] audit: type=1326 audit(2000000683.828:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29315 comm="syz.8.9029" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17d819cdd9 code=0x7ffc0000
[  926.462000][   T33] audit: type=1326 audit(2000000683.828:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29315 comm="syz.8.9029" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17d819cdd9 code=0x7ffc0000
[  926.484231][   T33] audit: type=1326 audit(2000000683.828:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29315 comm="syz.8.9029" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17d819cdd9 code=0x7ffc0000
[  926.513962][   T33] audit: type=1326 audit(2000000683.828:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29315 comm="syz.8.9029" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17d819cdd9 code=0x7ffc0000
[  926.541696][   T33] audit: type=1326 audit(2000000683.838:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29315 comm="syz.8.9029" exe="/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f17d819cdd9 code=0x7ffc0000
[  926.565236][   T33] audit: type=1326 audit(2000000683.888:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29315 comm="syz.8.9029" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f17d815d60e code=0x7ffc0000
[  926.576958][T29310] loop0: detected capacity change from 0 to 32768
[  926.589625][T29310] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.9026 (29310)
[  926.597610][   T33] audit: type=1326 audit(2000000683.898:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29315 comm="syz.8.9029" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f17d815d60e code=0x7ffc0000
[  926.609385][T29310] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  926.616733][T29310] BTRFS info (device loop0): using sha256 checksum algorithm
[  926.634891][   T33] audit: type=1326 audit(2000000683.898:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29315 comm="syz.8.9029" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f17d815d60e code=0x7ffc0000
[  926.642205][T29329] loop6: detected capacity change from 0 to 2048
[  926.645481][T29329] EXT4-fs warning (device loop6): ext4_init_metadata_csum:4681: metadata_csum and uninit_bg are redundant flags; please run fsck.
[  926.650580][   T33] audit: type=1326 audit(2000000683.898:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29315 comm="syz.8.9029" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f17d815d60e code=0x7ffc0000
[  926.664379][T29329] EXT4-fs (loop6): VFS: Found ext4 filesystem with invalid superblock checksum.  Run e2fsck?
[  926.735165][T29310] BTRFS info (device loop0): rebuilding free space tree
[  926.902419][T29352] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  926.904871][T29352] IPv6: NLM_F_CREATE should be set when creating new route
[  926.944634][T29310] BTRFS info (device loop0): disabling free space tree
[  926.953949][T29310] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  926.982099][T29310] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  927.010166][T29310] BTRFS info (device loop0): setting nodatasum
[  927.012716][T29310] BTRFS info (device loop0): setting nodatacow
[  927.016644][T29310] BTRFS info (device loop0): turning off barriers
[  927.033199][T29310] BTRFS info (device loop0): turning on sync discard
[  927.043159][T29310] BTRFS info (device loop0): force clearing of disk cache
[  927.110119][T22649] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  927.158038][T29350] loop8: detected capacity change from 0 to 32768
[  927.185371][T29350] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  927.415477][T29365] netlink: 168 bytes leftover after parsing attributes in process `syz.6.9046'.
[  927.459351][T27384] ocfs2: Unmounting device (7,8) on (node local)
[  927.697607][T29371] PKCS8: Unsupported PKCS#8 version
[  927.884833][T29382] loop0: detected capacity change from 0 to 2048
[  927.903310][T29382] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  928.522254][T29403] loop8: detected capacity change from 0 to 4096
[  928.529855][T29403] EXT4-fs (loop8): bad geometry: block count 1090921693696 exceeds size of device (512 blocks)
[  928.570866][T29405] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  928.594168][T29405] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  929.659268][ T6647] usb 1-1: new high-speed USB device number 76 using dummy_hcd
[  929.828783][ T6647] usb 1-1: Using ep0 maxpacket: 16
[  929.834173][ T6647] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  929.839292][ T6647] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  929.852467][ T6647] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a
[  929.856422][ T6647] usb 1-1: New USB device strings: Mfr=140, Product=215, SerialNumber=3
[  929.860866][ T6647] usb 1-1: Product: syz
[  929.869054][ T6647] usb 1-1: Manufacturer: syz
[  929.873223][ T6647] usb 1-1: SerialNumber: syz
[  929.882083][ T6647] usb 1-1: config 0 descriptor??
[  929.896547][ T6647] pegasus_notetaker 1-1:0.0: probe with driver pegasus_notetaker failed with error -22
[  930.119299][ T6647] usb 1-1: USB disconnect, device number 76
[  930.166643][T29427] loop6: detected capacity change from 0 to 4096
[  930.491317][T29431] loop8: detected capacity change from 0 to 16
[  930.494914][T29431] erofs (device loop8): mounted with root inode @ nid 36.
[  930.523618][   T54] erofs (device loop8): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000
[  930.528651][T29433] loop6: detected capacity change from 0 to 2048
[  930.535924][T29433] EXT4-fs: Ignoring removed oldalloc option
[  930.546432][T29431] erofs (device loop8): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000
[  930.550845][T29431] erofs (device loop8): read error -117 @ 2 of nid 89
[  930.551286][T29433] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002]
[  930.561471][T29433] System zones: 0-7
[  930.565439][T29433] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  930.572684][T29431] erofs (device loop8): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000
[  930.573872][T29433] EXT4-fs error (device loop6): ext4_find_extent:939: inode #2: comm syz.6.9075: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  930.578082][T29431] erofs (device loop8): read error -117 @ 2 of nid 89
[  930.583289][T29433] EXT4-fs (loop6): Remounting filesystem read-only
[  930.593147][T29431] erofs (device loop8): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000
[  930.601702][T26328] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  930.602452][T29431] erofs (device loop8): read error -117 @ 2 of nid 89
[  930.634873][T29438] erofs (device loop8): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000
[  930.663598][T29438] erofs (device loop8): read error -117 @ 2 of nid 89
[  930.681468][T29431] erofs (device loop8): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000
[  930.703347][T29438] erofs (device loop8): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000
[  930.707249][T29431] erofs (device loop8): read error -117 @ 2 of nid 89
[  930.715272][T29442] loop0: detected capacity change from 0 to 4096
[  930.720667][T29438] erofs (device loop8): read error -117 @ 2 of nid 89
[  930.720755][T29442] EXT4-fs: Ignoring removed bh option
[  930.729661][T29438] erofs (device loop8): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000
[  930.733605][T29438] erofs (device loop8): read error -117 @ 2 of nid 89
[  930.746939][T29442] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  930.844910][T22649] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  931.194925][T29469] loop0: detected capacity change from 0 to 64
[  931.321064][T29473] netlink: 'syz.0.9088': attribute type 10 has an invalid length.
[  931.346146][T29473] wg2: entered promiscuous mode
[  931.352965][T29473] team0: Device wg2 is of different type
[  932.184067][T29493] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9097'.
[  932.382473][T29496] loop8: detected capacity change from 0 to 32768
[  932.437407][T29496]  loop8: p1 p2 p3 < p5 p6 >
[  932.443540][T29496] loop8: p2 size 16775168 extends beyond EOD, truncated
[  932.450605][T29496] loop8: p5 start 4294970168 is beyond EOD, truncated
[  932.660194][T29508] loop0: detected capacity change from 0 to 256
[  932.667134][ T5619] udevd[5619]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory
[  932.667645][ T9630] udevd[9630]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory
[  932.668125][ T9628] udevd[9628]: inotify_add_watch(7, /dev/loop8p6, 10) failed: No such file or directory
[  932.680643][ T5896] udevd[5896]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory
[  932.726822][T29508] FAT-fs (loop0): Directory bread(block 64) failed
[  932.726843][T29508] FAT-fs (loop0): Directory bread(block 65) failed
[  932.726969][T29508] FAT-fs (loop0): Directory bread(block 66) failed
[  932.726980][T29508] FAT-fs (loop0): Directory bread(block 67) failed
[  932.727051][T29508] FAT-fs (loop0): Directory bread(block 68) failed
[  932.727060][T29508] FAT-fs (loop0): Directory bread(block 69) failed
[  932.727090][T29508] FAT-fs (loop0): Directory bread(block 70) failed
[  932.727100][T29508] FAT-fs (loop0): Directory bread(block 71) failed
[  932.727132][T29508] FAT-fs (loop0): Directory bread(block 72) failed
[  932.727141][T29508] FAT-fs (loop0): Directory bread(block 73) failed
[  932.823492][T29512] loop8: detected capacity change from 0 to 1024
[  932.839630][T29512] hfsplus: extend alloc file! (16384,256,150995124)
[  932.907883][T29516] loop0: detected capacity change from 0 to 24
[  934.482631][T29550] loop0: detected capacity change from 0 to 22
[  934.486064][T29550] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  934.492790][T29550] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  934.500125][T28268] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[  934.595185][T29556] comedi comedi0: rti802: I/O base address or length out of range
[  934.659431][T28268] usb 9-1: Using ep0 maxpacket: 32
[  934.671458][T28268] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  934.682696][T28268] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1536, setting to 1024
[  934.691512][T28268] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  934.700041][T28268] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  934.707963][T28268] usb 9-1: config 0 descriptor??
[  934.713609][T29540] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[  934.720818][T28268] hub 9-1:0.0: USB hub found
[  934.932030][T28268] hub 9-1:0.0: 1 port detected
[  935.263066][T29572] loop6: detected capacity change from 0 to 131072
[  935.268148][T29572] F2FS-fs (loop6): invalid crc value
[  935.298418][T29572] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  935.307898][T29572] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4
[  935.319901][   T33] kauditd_printk_skb: 9 callbacks suppressed
[  935.320004][   T33] audit: type=1800 audit(2000000692.738:829): pid=29572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.9133" name="file1" dev="loop6" ino=7 res=0 errno=0
[  935.757582][ T5677] hub 9-1:0.0: hub_ext_port_status failed (err = -71)
[  936.075040][T29590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9138'.
[  936.078028][T29590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9138'.
[  936.194669][T29596] loop0: detected capacity change from 0 to 1024
[  936.211295][T29596] hfsplus: invalid length 1541 has been corrected to 255
[  936.560196][T28268] usb 9-1: USB disconnect, device number 13
[  936.704213][ T1378] ieee802154 phy0 wpan0: encryption failed: -22
[  936.706259][ T1378] ieee802154 phy1 wpan1: encryption failed: -22
[  936.710629][T28271] usb 1-1: new high-speed USB device number 77 using dummy_hcd
[  936.968592][T28271] usb 1-1: Using ep0 maxpacket: 8
[  936.972787][T28271] usb 1-1: config 0 has no interfaces?
[  936.975125][T28271] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  936.979556][T28271] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  936.987468][T28271] usb 1-1: config 0 descriptor??
[  937.109046][T29620] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9152'.
[  937.518657][T22863] usb 9-1: new high-speed USB device number 14 using dummy_hcd
[  937.673961][T22863] usb 9-1: Using ep0 maxpacket: 16
[  937.678587][T22863] usb 9-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  937.683621][T22863] usb 9-1: config 0 interface 0 has no altsetting 0
[  937.686256][T22863] usb 9-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00
[  937.689931][T22863] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  937.701845][T22863] usb 9-1: config 0 descriptor??
[  937.812953][   T33] audit: type=1326 audit(2000000695.228:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29626 comm="syz.6.9155" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2d31f9cdd9 code=0x0
[  937.825513][T28271] usb 1-1: USB disconnect, device number 77
[  938.004569][T29634] loop0: detected capacity change from 0 to 4096
[  938.113520][T22863] hid (null): invalid report_size 26545
[  938.122892][T22863] magicmouse 0003:05AC:0269.0029: unknown main item tag 0x6
[  938.130366][T22863] magicmouse 0003:05AC:0269.0029: invalid report_size 26545
[  938.135136][T22863] magicmouse 0003:05AC:0269.0029: item 0 2 1 7 parsing failed
[  938.141878][T22863] magicmouse 0003:05AC:0269.0029: magicmouse hid parse failed
[  938.144784][T22863] magicmouse 0003:05AC:0269.0029: probe with driver magicmouse failed with error -22
[  938.322471][T28271] usb 9-1: USB disconnect, device number 14
[  938.778639][ T7909] usb 1-1: new high-speed USB device number 78 using dummy_hcd
[  938.800801][T29652] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9166'.
[  938.930033][T29657] loop6: detected capacity change from 0 to 128
[  938.931945][ T7909] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  938.933045][T29657] EXT4-fs: Ignoring removed nomblk_io_submit option
[  938.938935][ T7909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  938.943867][ T7909] usb 1-1: Product: syz
[  938.945272][ T7909] usb 1-1: Manufacturer: syz
[  938.949988][T29657] EXT4-fs (loop6): Test dummy encryption mode enabled
[  938.950650][ T7909] usb 1-1: SerialNumber: syz
[  938.968397][ T7909] usb 1-1: config 0 descriptor??
[  938.971162][T29657] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  938.978662][T29657] ext4 filesystem being mounted at /342/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  938.985945][ T7909] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  939.024496][T29657] EXT4-fs (loop6): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  939.094071][T26328] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  939.278658][T28268] usb 9-1: new high-speed USB device number 15 using dummy_hcd
[  939.322558][T29674] netlink: 5 bytes leftover after parsing attributes in process `syz.6.9175'.
[  939.428550][T28268] usb 9-1: Using ep0 maxpacket: 32
[  939.433971][T28268] usb 9-1: unable to get BOS descriptor or descriptor too short
[  939.439518][T28268] usb 9-1: config 128 has an invalid interface number: 127 but max is 3
[  939.442943][T28268] usb 9-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  939.446646][T28268] usb 9-1: config 128 has 1 interface, different from the descriptor's value: 4
[  939.450715][T28268] usb 9-1: config 128 has no interface number 0
[  939.453269][T28268] usb 9-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  939.457549][T28268] usb 9-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 59391, setting to 1024
[  939.463412][T28268] usb 9-1: config 128 interface 127 has no altsetting 0
[  939.468018][T28268] usb 9-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  939.471933][T28268] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  939.475111][T28268] usb 9-1: Product: syz
[  939.476739][T28268] usb 9-1: Manufacturer: syz
[  939.478797][T28268] usb 9-1: SerialNumber: syz
[  939.482354][T29665] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[  939.726452][T28268] usb 9-1: USB disconnect, device number 15
[  939.743500][ T5619] udevd[5619]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  940.558912][T28268] usb 9-1: new high-speed USB device number 16 using dummy_hcd
[  940.606788][ T7909] gspca_sunplus: reg_r err -71
[  940.608623][ T7909] sunplus 1-1:0.0: probe with driver sunplus failed with error -71
[  940.620287][ T7909] usb 1-1: USB disconnect, device number 78
[  940.633928][T29686] netlink: 84 bytes leftover after parsing attributes in process `syz.6.9180'.
[  940.712038][T28268] usb 9-1: Using ep0 maxpacket: 32
[  940.725387][T28268] usb 9-1: config 0 has an invalid interface number: 12 but max is 0
[  940.733633][T28268] usb 9-1: config 0 has no interface number 0
[  940.736230][T28268] usb 9-1: config 0 interface 12 has no altsetting 0
[  940.742242][T28268] usb 9-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  940.746185][T28268] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  940.751336][T28268] usb 9-1: Product: syz
[  940.753114][T28268] usb 9-1: Manufacturer: syz
[  940.755127][T28268] usb 9-1: SerialNumber: syz
[  940.760473][T28268] usb 9-1: config 0 descriptor??
[  941.138697][T29690] sg_write: data in/out 229343/32 bytes for SCSI command 0x0-- guessing data in;
[  941.138697][T29690]    program syz.0.9181 not setting count and/or reply_len properly
[  941.171526][T29692] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  941.218398][T29696] loop0: detected capacity change from 0 to 128
[  941.247441][T29696] vxfs: unable to read olt
[  941.557748][T29710] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9191'.
[  941.563589][T29710] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9191'.
[  941.777925][T28268] f81534 9-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  941.787646][T28268] f81534 9-1:0.12: f81534_find_config_idx: read failed: -71
[  941.790172][T28268] f81534 9-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  941.794420][T28268] f81534 9-1:0.12: probe with driver f81534 failed with error -71
[  941.796799][T29714] loop6: detected capacity change from 0 to 32768
[  941.804113][T28268] usb 9-1: USB disconnect, device number 16
[  941.805614][T29714] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.9193 (29714)
[  941.831202][T29714] BTRFS info (device loop6): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  941.837722][T29714] BTRFS info (device loop6): using xxhash64 checksum algorithm
[  941.850627][T29712] loop0: detected capacity change from 0 to 32768
[  941.858122][T29712] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.9192 (29712)
[  941.873677][T29712] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  941.885222][T29712] BTRFS info (device loop0): using sha256 checksum algorithm
[  941.912643][T29714] BTRFS info (device loop6): enabling ssd optimizations
[  941.918575][T29714] BTRFS info (device loop6): turning on flush-on-commit
[  941.922315][T29714] BTRFS info (device loop6): turning on async discard
[  941.926080][T29714] BTRFS info (device loop6): enabling free space tree
[  941.938697][T29714] BTRFS info (device loop6): force zlib compression, level 3
[  941.941286][T29714] BTRFS info (device loop6): max_inline set to 4096
[  941.961597][T29712] BTRFS info (device loop0): enabling ssd optimizations
[  941.969510][T29712] BTRFS info (device loop0): turning on async discard
[  941.973671][T29712] BTRFS info (device loop0): enabling free space tree
[  942.047096][T22649] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  942.189796][T26328] BTRFS info (device loop6): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  942.420406][T29754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9198'.
[  942.426742][T29754] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9198'.
[  942.488275][ T8941] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  942.491132][ T8941] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  942.507521][T29754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9198'.
[  942.518344][T29754] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9198'.
[  942.528353][ T8941] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  942.532850][ T8941] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  942.858195][T29762] loop0: detected capacity change from 0 to 32768
[  942.861120][T29762] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.9200 (29762)
[  942.866620][T29762] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  942.887056][T29762] BTRFS info (device loop0): using blake2b checksum algorithm
[  943.017577][T29789] loop6: detected capacity change from 0 to 8
[  943.085788][T29789] SQUASHFS error: Failed to read block 0x1ec: -5
[  943.105953][T29789] SQUASHFS error: Unable to read metadata cache entry [1ea]
[  943.123364][T29762] BTRFS info (device loop0): enabling ssd optimizations
[  943.126032][T29762] BTRFS info (device loop0): turning on async discard
[  943.131448][T29762] BTRFS info (device loop0): enabling free space tree
[  943.158973][T29762] BTRFS info (device loop0): use zstd compression, level 3
[  943.165283][T29789] SQUASHFS error: Unable to read metadata cache entry [1ea]
[  943.193253][T29801] netlink: 'syz.8.9211': attribute type 1 has an invalid length.
[  943.196503][T29801] netlink: 'syz.8.9211': attribute type 2 has an invalid length.
[  943.200730][T29801] netlink: 'syz.8.9211': attribute type 3 has an invalid length.
[  943.308146][T22649] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  943.323667][T29805] x_tables: unsorted underflow at hook 2
[  944.048620][T28268] usb 1-1: new high-speed USB device number 79 using dummy_hcd
[  944.058819][ T7909] usb 9-1: new high-speed USB device number 17 using dummy_hcd
[  944.210809][ T7909] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  944.216293][ T7909] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  944.223438][ T7909] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  944.227787][ T7909] usb 9-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4
[  944.228548][T28268] usb 1-1: Using ep0 maxpacket: 8
[  944.231828][ T7909] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  944.234978][T28268] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  944.239047][ T7909] usb 9-1: config 0 descriptor??
[  944.241939][T28268] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  944.249485][T28268] usb 1-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52
[  944.253153][T28268] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  944.254082][ T7909] rndis_host 9-1:0.0: rndis: master #0/ffff888028014000 slave #1/0000000000000000
[  944.256083][T28268] usb 1-1: Product: syz
[  944.261145][T28268] usb 1-1: Manufacturer: syz
[  944.268528][T28268] usb 1-1: SerialNumber: syz
[  944.281021][T28268] usb 1-1: config 0 descriptor??
[  944.377175][T22654] Bluetooth: hci1: unexpected cc 0x0402 length: 61 > 1
[  944.380210][T22654] Bluetooth: hci1: Ignoring error of Inquiry Cancel command
[  944.383493][T22654] Bluetooth: hci1: unexpected event for opcode 0x0402
[  944.398096][T29833] loop6: detected capacity change from 0 to 64
[  944.407379][T29833] MINIX-fs: bad superblock
[  944.467341][T28267] usb 9-1: USB disconnect, device number 17
[  944.502698][T28268] usb 1-1: USB disconnect, device number 79
[  945.041074][T29841] netlink: 'syz.0.9230': attribute type 11 has an invalid length.
[  945.166277][T29847] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0
[  945.754367][T29844] loop8: detected capacity change from 0 to 131072
[  945.762893][T29853] syz_tun: entered allmulticast mode
[  945.837325][T29844] F2FS-fs (loop8): Wrong CP boundary, start(512) end(1536) blocks(0)
[  945.840572][T29844] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[  945.904020][T29844] F2FS-fs (loop8): invalid crc value
[  945.984697][T29844] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  945.999827][T29844] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0
[  946.002743][T29844] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4
[  946.335659][T29868] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9239'.
[  946.868055][T29881] loop8: detected capacity change from 0 to 40427
[  946.873495][T29881] F2FS-fs (loop8): invalid crc value
[  946.904262][T29881] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  946.913175][T29881] F2FS-fs (loop8): Start checkpoint disabled!
[  946.924815][T29881] F2FS-fs (loop8): f2fs_disable_checkpoint() finish, err:0
[  946.928226][T29881] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6
[  947.706259][T29892] loop0: detected capacity change from 0 to 128
[  947.718138][T29892] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  947.836858][T29892] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  948.525722][T14777] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  948.548956][   T32] kworker/u9:1: attempt to access beyond end of device
[  948.548956][   T32] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  948.559420][   T32] CPU: 0 UID: 0 PID: 32 Comm: kworker/u9:1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  948.559435][   T32] Tainted: [L]=SOFTLOCKUP
[  948.559439][   T32] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  948.559444][   T32] Workqueue: writeback wb_workfn (flush-7:8)
[  948.559461][   T32] Call Trace:
[  948.559464][   T32]  <TASK>
[  948.559468][   T32]  dump_stack_lvl+0xe8/0x150
[  948.559480][   T32]  f2fs_stop_checkpoint+0x3c7/0x590
[  948.559492][   T32]  f2fs_write_end_io+0x1274/0x1740
[  948.559510][   T32]  __submit_merged_bio+0x256/0x6a0
[  948.559522][   T32]  __submit_merged_write_cond+0x3c9/0x4e0
[  948.559534][   T32]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  948.559552][   T32]  f2fs_write_data_pages+0x287e/0x34f0
[  948.559561][   T32]  ? f2fs_build_free_nids+0xdc/0x1810
[  948.559588][   T32]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  948.559603][   T32]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  948.559627][   T32]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  948.559643][   T32]  ? __lock_acquire+0x6b5/0x2cf0
[  948.559656][   T32]  ? __lock_acquire+0x6b5/0x2cf0
[  948.559667][   T32]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  948.559677][   T32]  do_writepages+0x32e/0x550
[  948.559689][   T32]  ? reacquire_held_locks+0x104/0x190
[  948.559698][   T32]  ? writeback_sb_inodes+0x463/0x19d0
[  948.559710][   T32]  __writeback_single_inode+0x133/0x10e0
[  948.559720][   T32]  ? do_raw_spin_unlock+0x4d/0x210
[  948.559733][   T32]  writeback_sb_inodes+0x979/0x19d0
[  948.559742][   T32]  ? __lock_acquire+0x6b5/0x2cf0
[  948.559760][   T32]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  948.559769][   T32]  ? do_raw_spin_lock+0x12b/0x2f0
[  948.559794][   T32]  ? rcu_is_watching+0x15/0xb0
[  948.559807][   T32]  wb_writeback+0x445/0xb00
[  948.559818][   T32]  ? queue_io+0x1e1/0x470
[  948.559830][   T32]  ? __pfx_wb_writeback+0x10/0x10
[  948.559838][   T32]  ? do_raw_spin_lock+0x12b/0x2f0
[  948.559863][   T32]  wb_workfn+0x3f8/0xf10
[  948.559873][   T32]  ? __lock_acquire+0x6b5/0x2cf0
[  948.559884][   T32]  ? look_up_lock_class+0x57/0x110
[  948.559913][   T32]  ? __pfx_wb_workfn+0x10/0x10
[  948.559929][   T32]  ? do_raw_spin_lock+0x12b/0x2f0
[  948.559944][   T32]  ? lock_acquire+0x106/0x350
[  948.559959][   T32]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  948.559977][   T32]  ? process_scheduled_works+0xa70/0x1860
[  948.559993][   T32]  ? process_scheduled_works+0xa70/0x1860
[  948.560011][   T32]  ? process_scheduled_works+0xa70/0x1860
[  948.560025][   T32]  ? process_scheduled_works+0xa70/0x1860
[  948.560039][   T32]  process_scheduled_works+0xb5d/0x1860
[  948.560073][   T32]  ? __pfx_process_scheduled_works+0x10/0x10
[  948.560091][   T32]  ? assign_work+0x3d5/0x5e0
[  948.560109][   T32]  worker_thread+0xa53/0xfc0
[  948.560143][   T32]  kthread+0x388/0x470
[  948.560160][   T32]  ? __pfx_worker_thread+0x10/0x10
[  948.560216][   T32]  ? __pfx_kthread+0x10/0x10
[  948.560233][   T32]  ret_from_fork+0x514/0xb70
[  948.560250][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[  948.560263][   T32]  ? __switch_to+0xc79/0x1410
[  948.560283][   T32]  ? __pfx_kthread+0x10/0x10
[  948.560299][   T32]  ret_from_fork_asm+0x1a/0x30
[  948.560325][   T32]  </TASK>
[  948.560370][   T32] F2FS-fs (loop8): Stopped filesystem due to reason: 3
[  948.590263][T29899] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9248'.
[  948.590275][T29899] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9248'.
[  948.654010][T29902] loop0: detected capacity change from 0 to 4096
[  948.700067][T29902] ntfs3(loop0): Primary boot: start of MFT 0x4 (0xff) is out of volume 0x1ff.
[  948.708296][T29902] ntfs3(loop0): try to read out of volume at offset 0x1ffe00
[  948.838261][T29908] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9250'.
[  948.885853][T29910] loop8: detected capacity change from 0 to 4096
[  948.897511][T29910] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  948.928376][T27384] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  949.024772][T22654] Bluetooth: hci1: command 0x0405 tx timeout
[  950.333224][T29964] loop8: detected capacity change from 0 to 8
[  950.336949][T29964] Page size > filesystem block size (512).  This is currently not supported!
[  950.378238][T29966] loop8: detected capacity change from 0 to 2048
[  950.398134][T29966] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  950.510773][T27384] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  950.558406][T29974] loop6: detected capacity change from 0 to 512
[  950.580171][T29974] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  950.596689][T29974] EXT4-fs (loop6): 1 truncate cleaned up
[  950.601670][T29974] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  950.630305][T26328] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  950.915055][T29993] vivid-002: disconnect
[  951.028577][T29999] binder: 29998:29999 ioctl c018620c 200000000040 returned -22
[  951.216478][T30006] __vm_enough_memory: pid: 30006, comm: syz.0.9296, bytes: 4503599627366400 not enough memory for the allocation
[  951.397113][T30013] loop0: detected capacity change from 0 to 4096
[  951.413709][T30013] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  951.473500][   T33] audit: type=1800 audit(2000000708.887:831): pid=30013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.9299" name="file0" dev="loop0" ino=13 res=0 errno=0
[  951.631922][T29983] vivid-002: reconnect
[  951.696319][T30019] loop8: detected capacity change from 0 to 512
[  951.699472][T30019] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  951.705896][T30019] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e02c, mo2=0102]
[  951.708648][T30019] System zones: 1-12
[  951.710043][T30019] EXT4-fs (loop8): orphan cleanup on readonly fs
[  951.719269][T30019] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.9301: invalid indirect mapped block 2 (level 2)
[  951.723829][T30019] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  951.724084][T30019] EXT4-fs (loop8): Remounting filesystem read-only
[  951.729399][    C1] EXT4-fs (loop8): error count since last fsck: 1
[  951.729410][    C1] EXT4-fs (loop8): initial error at time 2000000709: ext4_free_branches:1023: inode 11
[  951.729423][    C1] EXT4-fs (loop8): last error at time 2000000709: ext4_free_branches:1023: inode 11
[  951.739911][T30019] EXT4-fs (loop8): 1 truncate cleaned up
[  951.742967][T30019] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  951.751003][T30019] loop8: Can't mount, would change RO state
[  951.762735][T27384] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  951.820814][T30022] loop8: detected capacity change from 0 to 4096
[  951.826383][T30022] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512).
[  951.878325][T30024] binder: 30023:30024 ioctl 4018620d 0 returned -22
[  951.882884][T30024] binder: 30023:30024 ioctl c0306201 0 returned -14
[  951.885865][T30024] binder: BINDER_SET_CONTEXT_MGR already set
[  951.887935][T30024] binder: 30023:30024 ioctl 4018620d 200000000040 returned -16
[  952.487565][T22649] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  953.229155][ T7909] usb 1-1: new full-speed USB device number 80 using dummy_hcd
[  953.288241][T30068] loop8: detected capacity change from 0 to 164
[  953.297137][T30068] rock: directory entry would overflow storage
[  953.310436][T30068] rock: sig=0x4543, size=28, remaining=18
[  953.381552][ T7909] usb 1-1: unable to get BOS descriptor or descriptor too short
[  953.385327][ T7909] usb 1-1: not running at top speed; connect to a high speed hub
[  953.391250][T30074] loop8: detected capacity change from 0 to 256
[  953.393820][ T7909] usb 1-1: config 4 has an invalid interface number: 255 but max is 0
[  953.394742][T30074] exfat: Deprecated parameter 'utf8'
[  953.402012][ T7909] usb 1-1: config 4 has no interface number 0
[  953.407279][T30074] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x47dfe6af, utbl_chksum : 0xe619d30d)
[  953.413513][ T7909] usb 1-1: config 4 interface 255 has no altsetting 0
[  953.425028][ T7909] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.f8
[  953.437701][ T7909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  953.444784][ T7909] usb 1-1: Product: syz
[  953.450077][ T7909] usb 1-1: Manufacturer: syz
[  953.453540][ T7909] usb 1-1: SerialNumber: syz
[  953.682068][ T7909] usb 1-1: USB disconnect, device number 80
[  953.834163][T30089] loop6: detected capacity change from 0 to 16
[  953.839848][T30089] erofs (device loop6): mounted with root inode @ nid 36.
[  953.949321][T22863] usb 9-1: new high-speed USB device number 18 using dummy_hcd
[  954.100772][T22863] usb 9-1: config 0 has no interfaces?
[  954.105530][T22863] usb 9-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  954.109489][T22863] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  954.112986][T22863] usb 9-1: Product: syz
[  954.114773][T22863] usb 9-1: Manufacturer: syz
[  954.116656][T22863] usb 9-1: SerialNumber: syz
[  954.121251][T22863] usb 9-1: config 0 descriptor??
[  954.273932][T30103] loop0: detected capacity change from 0 to 1024
[  954.279315][T30103] EXT4-fs: Ignoring removed bh option
[  954.286034][T30103] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  954.301816][T30103] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  954.334328][T28271] usb 9-1: USB disconnect, device number 18
[  954.335337][T22649] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  954.539054][T30109] loop0: detected capacity change from 0 to 40427
[  954.543461][T30109] F2FS-fs (loop0): Fix alignment : internally, start(4096) end(16896) block(12288)
[  954.553640][T30109] F2FS-fs (loop0): invalid crc value
[  954.586699][T30109] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  954.603851][T30109] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  954.625934][T30109] F2FS-fs (loop0): Try to recover all the superblocks, ret: 0
[  954.935383][T30118] netlink: 24 bytes leftover after parsing attributes in process `syz.8.9345'.
[  955.024683][   T53] Bluetooth: hci4: unexpected event for opcode 0x204b
[  956.173677][T30150] loop0: detected capacity change from 0 to 16
[  956.176874][T30150] erofs (device loop0): mounted with root inode @ nid 36.
[  956.205878][   T53] Bluetooth: hci4: unexpected event for opcode 0x201c
[  956.398514][T30169] snd_dummy snd_dummy.0: control 4:8201:0:syz0:1 is already present
[  956.429665][T30171] loop0: detected capacity change from 0 to 1024
[  956.498931][T30175] loop0: detected capacity change from 0 to 256
[  956.768606][T28271] usb 1-1: new full-speed USB device number 81 using dummy_hcd
[  956.920788][T28271] usb 1-1: unable to get BOS descriptor or descriptor too short
[  956.924280][T28271] usb 1-1: not running at top speed; connect to a high speed hub
[  956.932147][T28271] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  956.939865][T28271] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  956.951674][T28271] usb 1-1: string descriptor 0 read error: -22
[  956.955779][T28271] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  956.958944][T28271] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  956.965960][T28271] usb 1-1: 0:2 : does not exist
[  956.985159][   T33] audit: type=1326 audit(2000000714.407:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30178 comm="syz.8.9372" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f17d819cdd9 code=0x0
[  957.233463][T30189] loop8: detected capacity change from 0 to 256
[  957.256976][T30189] FAT-fs (loop8): Directory bread(block 64) failed
[  957.260118][T30189] FAT-fs (loop8): Directory bread(block 65) failed
[  957.262860][T30189] FAT-fs (loop8): Directory bread(block 66) failed
[  957.265577][T30189] FAT-fs (loop8): Directory bread(block 67) failed
[  957.268849][T30189] FAT-fs (loop8): Directory bread(block 68) failed
[  957.271587][T30189] FAT-fs (loop8): Directory bread(block 69) failed
[  957.274242][T30189] FAT-fs (loop8): Directory bread(block 70) failed
[  957.276843][T30189] FAT-fs (loop8): Directory bread(block 71) failed
[  957.279644][T30189] FAT-fs (loop8): Directory bread(block 72) failed
[  957.282352][T30189] FAT-fs (loop8): Directory bread(block 73) failed
[  957.430988][T30193] loop8: detected capacity change from 0 to 8192
[  957.469365][T30193] Dev loop8 Sun disklabel: Csum bad, label corrupted
[  957.657261][T30203] EXT4-fs: Ignoring removed bh option
[  957.674819][T30203] 
[  957.675872][T30203] ======================================================
[  957.678759][T30203] WARNING: possible circular locking dependency detected
[  957.681363][T30203] syzkaller #0 Tainted: G             L     
[  957.683736][T30203] ------------------------------------------------------
[  957.686546][T30203] syz.8.9384/30203 is trying to acquire lock:
[  957.689028][T30203] ffff8880253ecc18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0
[  957.693086][T30203] 
[  957.693086][T30203] but task is already holding lock:
[  957.696022][T30203] ffff888116604228 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x3db/0x710
[  957.699992][T30203] 
[  957.699992][T30203] which lock already depends on the new lock.
[  957.699992][T30203] 
[  957.704188][T30203] 
[  957.704188][T30203] the existing dependency chain (in reverse order) is:
[  957.707817][T30203] 
[  957.707817][T30203] -> #1 (&ei->xattr_sem){++++}-{4:4}:
[  957.710942][T30203]        down_write+0x96/0x200
[  957.712913][T30203]        ext4_destroy_inline_data+0x28/0xe0
[  957.715348][T30203]        ext4_do_writepages+0x51e/0x4670
[  957.717639][T30203]        ext4_writepages+0x241/0x3b0
[  957.719809][T30203]        do_writepages+0x32e/0x550
[  957.721845][T30203]        file_write_and_wait_range+0x36e/0x440
[  957.724396][T30203]        mmb_fsync_noflush+0x76/0x1c0
[  957.726601][T30203]        ext4_sync_file+0x437/0xd50
[  957.728707][T30203]        ext4_buffered_write_iter+0x2ca/0x3a0
[  957.731025][T30203]        ext4_file_write_iter+0x298/0x1bf0
[  957.733415][T30203]        vfs_write+0x61d/0xb90
[  957.735314][T30203]        __x64_sys_pwrite64+0x199/0x230
[  957.737470][T30203]        do_syscall_64+0x15f/0xf80
[  957.739515][T30203]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  957.742037][T30203] 
[  957.742037][T30203] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}:
[  957.745401][T30203]        __lock_acquire+0x15a5/0x2cf0
[  957.747552][T30203]        lock_acquire+0x106/0x350
[  957.749574][T30203]        percpu_down_read_internal+0x48/0x1c0
[  957.751993][T30203]        ext4_writepages+0x205/0x3b0
[  957.754153][T30203]        do_writepages+0x32e/0x550
[  957.756186][T30203]        __writeback_single_inode+0x133/0x10e0
[  957.758592][T30203]        writeback_single_inode+0x4ac/0xdc0
[  957.760889][T30203]        write_inode_now+0x1c2/0x290
[  957.763020][T30203]        iput+0x8c1/0xe80
[  957.764784][T30203]        ext4_xattr_block_set+0x1fd4/0x2ad0
[  957.767202][T30203]        ext4_expand_extra_isize_ea+0x12cf/0x1ea0
[  957.769739][T30203]        __ext4_expand_extra_isize+0x30d/0x400
[  957.772252][T30203]        __ext4_mark_inode_dirty+0x45c/0x710
[  957.774718][T30203]        ext4_evict_inode+0x986/0x10e0
[  957.776955][T30203]        evict+0x61e/0xb10
[  957.778779][T30203]        ext4_orphan_cleanup+0xc38/0x1470
[  957.781111][T30203]        ext4_fill_super+0x5a19/0x6330
[  957.783315][T30203]        get_tree_bdev_flags+0x431/0x4f0
[  957.785598][T30203]        vfs_get_tree+0x92/0x2a0
[  957.787600][T30203]        do_new_mount+0x341/0xd30
[  957.789664][T30203]        __se_sys_mount+0x31d/0x420
[  957.791816][T30203]        do_syscall_64+0x15f/0xf80
[  957.793926][T30203]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  957.796567][T30203] 
[  957.796567][T30203] other info that might help us debug this:
[  957.796567][T30203] 
[  957.800644][T30203]  Possible unsafe locking scenario:
[  957.800644][T30203] 
[  957.803662][T30203]        CPU0                    CPU1
[  957.805856][T30203]        ----                    ----
[  957.807871][T30203]   lock(&ei->xattr_sem);
[  957.809284][T30203]                                lock(&sbi->s_writepages_rwsem);
[  957.811856][T30203]                                lock(&ei->xattr_sem);
[  957.814553][T30203]   rlock(&sbi->s_writepages_rwsem);
[  957.816636][T30203] 
[  957.816636][T30203]  *** DEADLOCK ***
[  957.816636][T30203] 
[  957.819401][T30203] 3 locks held by syz.8.9384/30203:
[  957.821078][T30203]  #0: ffff8880253ee0d8 (&type->s_umount_key#28/1){+.+.}-{4:4}, at: alloc_super+0x28c/0xab0
[  957.824803][T30203]  #1: ffff8880253ee600 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x426/0x10e0
[  957.827863][T30203]  #2: ffff888116604228 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x3db/0x710
[  957.831878][T30203] 
[  957.831878][T30203] stack backtrace:
[  957.834206][T30203] CPU: 0 UID: 0 PID: 30203 Comm: syz.8.9384 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  957.834225][T30203] Tainted: [L]=SOFTLOCKUP
[  957.834229][T30203] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  957.834238][T30203] Call Trace:
[  957.834246][T30203]  <TASK>
[  957.834250][T30203]  dump_stack_lvl+0xe8/0x150
[  957.834261][T30203]  print_circular_bug+0x2e1/0x300
[  957.834273][T30203]  check_noncircular+0x12e/0x150
[  957.834284][T30203]  __lock_acquire+0x15a5/0x2cf0
[  957.834294][T30203]  ? __lock_acquire+0x6b5/0x2cf0
[  957.834308][T30203]  ? ext4_writepages+0x205/0x3b0
[  957.834318][T30203]  lock_acquire+0x106/0x350
[  957.834326][T30203]  ? ext4_writepages+0x205/0x3b0
[  957.834338][T30203]  percpu_down_read_internal+0x48/0x1c0
[  957.834347][T30203]  ? ext4_writepages+0x205/0x3b0
[  957.834357][T30203]  ext4_writepages+0x205/0x3b0
[  957.834366][T30203]  ? __pfx_ext4_writepages+0x10/0x10
[  957.834378][T30203]  ? ext4_fc_track_inode+0x175/0xc00
[  957.834388][T30203]  ? from_kprojid+0x1d9/0x6a0
[  957.834399][T30203]  ? __pfx_ext4_writepages+0x10/0x10
[  957.834408][T30203]  do_writepages+0x32e/0x550
[  957.834419][T30203]  __writeback_single_inode+0x133/0x10e0
[  957.834429][T30203]  ? do_raw_spin_unlock+0x4d/0x210
[  957.834440][T30203]  writeback_single_inode+0x4ac/0xdc0
[  957.834448][T30203]  write_inode_now+0x1c2/0x290
[  957.834456][T30203]  ? __pfx_write_inode_now+0x10/0x10
[  957.834470][T30203]  ? do_raw_spin_unlock+0x4d/0x210
[  957.834481][T30203]  iput+0x8c1/0xe80
[  957.834492][T30203]  ext4_xattr_block_set+0x1fd4/0x2ad0
[  957.834504][T30203]  ? __pfx_check_xattrs+0x10/0x10
[  957.834514][T30203]  ? __pfx_ext4_xattr_block_set+0x10/0x10
[  957.834523][T30203]  ? ext4_xattr_block_find+0x2d4/0x350
[  957.834533][T30203]  ext4_expand_extra_isize_ea+0x12cf/0x1ea0
[  957.834548][T30203]  __ext4_expand_extra_isize+0x30d/0x400
[  957.834560][T30203]  __ext4_mark_inode_dirty+0x45c/0x710
[  957.834573][T30203]  ext4_evict_inode+0x986/0x10e0
[  957.834586][T30203]  ? __pfx_ext4_evict_inode+0x10/0x10
[  957.834597][T30203]  ? do_raw_spin_unlock+0x4d/0x210
[  957.834607][T30203]  ? __pfx_ext4_evict_inode+0x10/0x10
[  957.834618][T30203]  evict+0x61e/0xb10
[  957.834626][T30203]  ? __pfx_evict+0x10/0x10
[  957.834633][T30203]  ? _raw_spin_unlock+0x28/0x50
[  957.834642][T30203]  ? iput+0xb25/0xe80
[  957.834652][T30203]  ext4_orphan_cleanup+0xc38/0x1470
[  957.834665][T30203]  ? __pfx_ext4_orphan_cleanup+0x10/0x10
[  957.834676][T30203]  ? ext4_register_li_request+0x640/0x720
[  957.834687][T30203]  ? errseq_check_and_advance+0x66/0x120
[  957.834696][T30203]  ext4_fill_super+0x5a19/0x6330
[  957.834711][T30203]  ? __pfx_ext4_fill_super+0x10/0x10
[  957.834722][T30203]  ? snprintf+0xe8/0x140
[  957.834734][T30203]  ? __pfx_snprintf+0x10/0x10
[  957.834744][T30203]  ? set_blocksize+0x1c9/0x440
[  957.834756][T30203]  ? sb_set_blocksize+0x155/0x240
[  957.834766][T30203]  ? setup_bdev_super+0x4c1/0x5b0
[  957.834774][T30203]  get_tree_bdev_flags+0x431/0x4f0
[  957.834781][T30203]  ? __pfx_ext4_fill_super+0x10/0x10
[  957.834791][T30203]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[  957.834799][T30203]  vfs_get_tree+0x92/0x2a0
[  957.834807][T30203]  do_new_mount+0x341/0xd30
[  957.834815][T30203]  ? apparmor_capable+0x126/0x170
[  957.834824][T30203]  ? __pfx_do_new_mount+0x10/0x10
[  957.834832][T30203]  ? ns_capable+0x89/0xe0
[  957.834842][T30203]  ? user_path_at+0xd4/0x160
[  957.834852][T30203]  __se_sys_mount+0x31d/0x420
[  957.834862][T30203]  ? __pfx___se_sys_mount+0x10/0x10
[  957.834872][T30203]  ? __x64_sys_mount+0x20/0xc0
[  957.834881][T30203]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  957.834889][T30203]  do_syscall_64+0x15f/0xf80
[  957.834898][T30203]  ? trace_irq_disable+0x3b/0x140
[  957.834909][T30203]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  957.834917][T30203] RIP: 0033:0x7f17d819e04a
[  957.834925][T30203] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  957.834932][T30203] RSP: 002b:00007f17d8f78e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  957.834941][T30203] RAX: ffffffffffffffda RBX: 00007f17d8f78ee0 RCX: 00007f17d819e04a
[  957.834947][T30203] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007f17d8f78ea0
[  957.834952][T30203] RBP: 0000200000000180 R08: 00007f17d8f78ee0 R09: 0000000000000000
[  957.834957][T30203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000
[  957.834962][T30203] R13: 00007f17d8f78ea0 R14: 000000000000047a R15: 000000000000002c
[  957.834969][T30203]  </TASK>
[  957.993947][T30203] EXT4-fs error (device loop8): ext4_xattr_inode_iget:441: inode #11: comm syz.8.9384: iget: bad extra_isize 90 (inode size 256)
[  958.000589][T30203] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  958.003238][T30203] EXT4-fs (loop8): Remounting filesystem read-only
[  958.009618][    C0] EXT4-fs (loop8): error count since last fsck: 1
[  958.009634][    C0] EXT4-fs (loop8): initial error at time 2000000715: ext4_xattr_inode_iget:441: inode 11
[  958.009654][    C0] EXT4-fs (loop8): last error at time 2000000715: ext4_xattr_inode_iget:441: inode 11
[  958.020454][T30203] EXT4-fs warning (device loop8): ext4_evict_inode:270: couldn't mark inode dirty (err -30)
[  958.023658][T30203] EXT4-fs (loop8): 1 orphan inode deleted
[  958.025786][T30203] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  958.043391][T27384] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  958.600076][T28271] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5)
[  958.606884][T28271] usb 1-1: 5:0: failed to get current value for ch 1 (-22)
[  958.637405][T28271] usb 1-1: USB disconnect, device number 81
[  964.219548][   T32] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
